# 4.3.40

Created: 2020-10-15 03:50:21 +0000 UTC

Image Digest: `sha256:605ddde0442e604cfe2d6bd1541ce48df5956fe626edf9cc95b1fca75d231b64`

Promoted from registry.svc.ci.openshift.org/ocp-s390x/release-s390x:4.3.0-0.nightly-s390x-2020-10-14-194142


## Changes from 4.3.16

### Components

* Kubernetes 1.16.2


### Rebuilt images without code change

* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:f2c22b125ca4226417be231846918974aa4c79b80f8c7cf74d32b66bf447d92f`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [dc2d333c](https://github.com/openshift/baremetal-operator/commit/dc2d333c60a7a8457eb3e56ca3218aaad2011999) `sha256:45c096293f6c407db33a8d7a7d06cabaf236300e941ee31a25e2ffe204844a08`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:dbe26b1bb5272854e8d7ce5e980d57059f8fbad28ab63c1a6eef6482ffe002eb`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [d5ddbcdd](https://github.com/openshift/cluster-config-operator/commit/d5ddbcdd4ec87bd4d0d109e81ed0be5dafd86061) `sha256:9d292cc3a06d3653df0cb033aa200559a779218622e77d46675ba4b75a7dfb9b`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [d86b0316](https://github.com/openshift/cluster-ingress-operator/commit/d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9) `sha256:4aa93469d0a15ab69936c3ea28e546f21f4158eea0df517fa3daaa1d2d5f763b`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [dd3147d9](https://github.com/openshift/cluster-machine-approver/commit/dd3147d9b2d1e54a2050d51390d1eca62d6189fc) `sha256:c49d1d185928846a724bed9f12106b5fb7a6873329760131217c161ca712d5fa`
* [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator) git [2523919a](https://github.com/openshift/cluster-svcat-apiserver-operator/commit/2523919a04d428bfa82602f5f6cc50ca38eb48c0) `sha256:00ae3bd8e387d33318097ded0eb9015119e2212deaa9ac3ee87b640fd1de4c38`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [727d37d9](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/727d37d929cb388744362c98fbcaf9ef547cd4b6) `sha256:88a22a41cc77fe1f15ac6cf5bd2d05d230b44d8106e7580651c6f0d6e2fd96c3`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:0a5d44f82373f2f381846debe0b7356bb9ff91e5a4199859efe8a0b5d702ebb4`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:9f8c5904a4934f1be81762172e27225a98a7387191fc3ed64f5453d6afa93159`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [386465fe](https://github.com/openshift/containernetworking-plugins/commit/386465fe170c0e7299b357efbace235a3e5ce7ee) `sha256:be9fea65904bb7e5fbfd475fd9264adf3a5f0fec4e52447a94b90c4f1ba32fa2`
* [coredns](https://github.com/openshift/coredns) git [052209af](https://github.com/openshift/coredns/commit/052209affb1fe85bdd87b37e2cf9a6fb98585e91) `sha256:df20a3e742f75acac63946394fa61f98125c5876a82e8c87c9e0c4b3dc46afda`
* [docker-registry](https://github.com/openshift/image-registry) git [7511ca65](https://github.com/openshift/image-registry/commit/7511ca65e07b586464e5ec2e9efde67bfa48c3e2) `sha256:5ce82d3b4c0041e0cb4c84ae5b6b91f06e62029de02f485f10efeb302673ec8f`
* [grafana](https://github.com/openshift/grafana) git [e2261e14](https://github.com/openshift/grafana/commit/e2261e142909cb0fe70fc0996d7d375e57956589) `sha256:301d7c5c572868d11aacc5a2722bd37d279dc8431807d89e3ac10043be3a9817`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [3d1c61e9](https://github.com/openshift/k8s-prometheus-adapter/commit/3d1c61e9a783d8c4a764b130837682fa9ab8e9df) `sha256:68a26ca7544fd8b23a19b1f651ec9796edc6220e851a584a71d1b85412b1f4ae`
* [kube-client-agent](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:f027774debe83429303884d9a5da8a7146d882f7b54d32899e2c4326249f9ed7`
* [kube-etcd-signer-server](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:aab4df66b0f68ec4bf5965fe35fbd8d69bbb0233598d7f1a05891711269756a4`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [84e7dac6](https://github.com/openshift/kube-rbac-proxy/commit/84e7dac69f8e3f90620729ee730327a3e168963d) `sha256:94f27f94772be4869e3c6023139fe238df7f5acb9f9400d35e86f5e1acf06e2e`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [83f9fc56](https://github.com/openshift/kube-state-metrics/commit/83f9fc5685cf3d7732687e1f07da6b27d6901c4f) `sha256:3b6c2004cacb66eab3d133bb389da8966b5c795b1dc7ba68a979ffbbf3df1e08`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:74c2ccc42cfe8f632c84c8979c2063b4d39a0185ad91a9eb397a3ef7ddbe14b7`
* machine-os-content `sha256:07b2a5f2659bff08617cb9f105194c5f84b961992106cfb8fbb55b5aecd30a25`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [24135de2](https://github.com/openshift/mdns-publisher/commit/24135de29fc348f3ef455a288013cc1912d969bc) `sha256:e02331b14db4d38752ca7c3fc6663f1a0b4ea220f187dd9a61c0d769d7bfc820`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ead10a3c](https://github.com/openshift/multus-admission-controller/commit/ead10a3cf30c5b4a2fbd7c987d83c07a46c5d5da) `sha256:50723f03274fc88d3c7ef47698f700fd6fe5e439e4c8beb6859af008002bf11f`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1322dc43](https://github.com/openshift/route-override-cni/commit/1322dc43712e12a021f5e83c8d752e7d8c30aa6e) `sha256:66f8c27068f2ee3f21ced447f8e50ae1d0fa5426c8bd7009958cf3e8c423319b`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9cca449d](https://github.com/openshift/whereabouts-cni/commit/9cca449d619ed0f93a06aca9255004672bb6c96e) `sha256:51a74dd6901bf3cd663187e1fb3602542addb9f222c9b69e0982a81fb399ef6d`
* [must-gather](https://github.com/openshift/must-gather) git [23037ad1](https://github.com/openshift/must-gather/commit/23037ad16c0aafd7186431c93ebca3f0d426a08d) `sha256:e4e8ddc9e199706e465fd29baf0e6edf97a0cd24617212d54df04135e5fb8ad1`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [d5df3188](https://github.com/openshift/oauth-proxy/commit/d5df318830efb30c128e38390d26e695ac33c954) `sha256:c077f8d8ff4fb4f66a6f9753bc664e6c259ac9066fbdb5f7df4e0c15346adef5`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [7aa99e29](https://github.com/openshift/cluster-api-provider-openstack/commit/7aa99e291276aa2f26260f8e654078ab6c2464f0) `sha256:c474924b3121b1402d6b205f036cdd9767c583b2b1dd33c5e3a8bf34b0accf86`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [1d9574bf](https://github.com/openshift/ovn-kubernetes/commit/1d9574bfc80b3947fe2246249b8c58057c155c20) `sha256:b3cdd61773339ba6b9bc9efedcb038114d5d84f8f69a0f757047ec0387f13e3a`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b8153a7f](https://github.com/openshift/prom-label-proxy/commit/b8153a7f39f1a34c03059f1b9dfb05d2c1297414) `sha256:1caff66cee93d044847bc0927ec5e0f4b3da63d85ba9486ab6f4e8f8ba71555d`
* [prometheus](https://github.com/openshift/prometheus) git [c086098d](https://github.com/openshift/prometheus/commit/c086098da5f01ab9565bdda772d3459bea2913f2) `sha256:a0531a5d18588e83993246fb17e16e567b4f63c5eede30e15773e4be9f32aef3`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [11aa2a87](https://github.com/openshift/prometheus-alertmanager/commit/11aa2a87c5bfb84cba76b90a3867a06a55e2605e) `sha256:645dfde8bcc22890cca1f2b21daafde28f8a727d3f42f6a5b389bcba8b1a2ec6`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [d0b913aa](https://github.com/openshift/node_exporter/commit/d0b913aa0dc58d87bab16ed5a8799a9e06891705) `sha256:01fc25a7ce57ed676b894d1fe13aa6a3443d6b9e06181b5016ff2b23ad3c2799`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [dd7235b4](https://github.com/openshift/service-ca-operator/commit/dd7235b4568fe22232f9cee2855967da5e0c52b2) `sha256:98c90523c756e0d1559e280836600577f3a4eaaadea9dd1a7fd5b9480dc23400`
* [service-catalog](https://github.com/openshift/service-catalog) git [6f75f804](https://github.com/openshift/service-catalog/commit/6f75f8047dfab6ca8b979833f7f2a6036deee488) `sha256:efaae66a15b4418ed3f26d0e52f2cfed8348cc4aab999651ce8757c2e6452ab8`
* [thanos](https://github.com/openshift/thanos) git [4aaa91e9](https://github.com/openshift/thanos/commit/4aaa91e9b982177e113c80567ec3808dcf122769) `sha256:1300ba4f698cd6852b2826eca7883fec2914207c7fcdc0479e456d6b4bcaf025`


### [aws-machine-controllers, azure-machine-controllers, cli, cli-artifacts, deployer, gcp-machine-controllers, ironic, ironic-inspector, ironic-ipa-downloader, ironic-machine-os-downloader, ironic-static-ip-manager, keepalived-ipfailover, kuryr-cni, kuryr-controller](https://github.com/openshift/oc/tree/14278ac2ddb27d49e8911efe127aca57e476087f)

* [Bug 1822638](https://bugzilla.redhat.com/show_bug.cgi?id=1822638): Place apache license in cli-artifacts [#473](https://github.com/openshift/oc/pull/473)
* [Bug 1806782](https://bugzilla.redhat.com/show_bug.cgi?id=1806782): Allow a file:// release argument to release mirror [#458](https://github.com/openshift/oc/pull/458)
* [Bug 1808221](https://bugzilla.redhat.com/show_bug.cgi?id=1808221): bump(golang.org/x/crypto|net|sys) [#429](https://github.com/openshift/oc/pull/429)
* [Bug 1806782](https://bugzilla.redhat.com/show_bug.cgi?id=1806782): Allow a file:// release argument to release mirror [#328](https://github.com/openshift/oc/pull/328)
* [Full changelog](https://github.com/openshift/oc/compare/4fb2d4d96e6b604f7d4ee49080238a5aec04dc4f...14278ac2ddb27d49e8911efe127aca57e476087f)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/43f11cfb64edafaed1941327526efd373a829b63)

* [Bug 1862114](https://bugzilla.redhat.com/show_bug.cgi?id=1862114): bump RHCOS images for CVE-2020-10713 [#3987](https://github.com/openshift/installer/pull/3987)
* [Bug 1851949](https://bugzilla.redhat.com/show_bug.cgi?id=1851949): Add the --pod-infra-container-image flag to the kubelet service [#3815](https://github.com/openshift/installer/pull/3815)
* [Bug 1849171](https://bugzilla.redhat.com/show_bug.cgi?id=1849171): OpenStack: Wait for router interface to create FIP [#3780](https://github.com/openshift/installer/pull/3780)
* BUG 1826073: Disable client side rate limiting in Azure. [#3714](https://github.com/openshift/installer/pull/3714)
* [Bug 1842531](https://bugzilla.redhat.com/show_bug.cgi?id=1842531): images: libvirt: add yq to libvirt CI image [#3699](https://github.com/openshift/installer/pull/3699)
* [Bug 1840230](https://bugzilla.redhat.com/show_bug.cgi?id=1840230): data/azure/vnet: switch to HTTPS probes for lbs [#3665](https://github.com/openshift/installer/pull/3665)
* [Bug 1820222](https://bugzilla.redhat.com/show_bug.cgi?id=1820222): libvirt: Bump bootstrap memory to 5G for ppc64le [#3428](https://github.com/openshift/installer/pull/3428)
* [Bug 1828632](https://bugzilla.redhat.com/show_bug.cgi?id=1828632): Don't fail on unavailable features on OpenStack [#3514](https://github.com/openshift/installer/pull/3514)
* [Bug 1820591](https://bugzilla.redhat.com/show_bug.cgi?id=1820591): Add retries to DeleteSwiftContainer [#3408](https://github.com/openshift/installer/pull/3408)
* [Bug 1824921](https://bugzilla.redhat.com/show_bug.cgi?id=1824921): [release-4.3] OpenStack: Correcting the instructions to refresh a CA cert [#3466](https://github.com/openshift/installer/pull/3466)
* [Bug 1824239](https://bugzilla.redhat.com/show_bug.cgi?id=1824239): Validate Azure regions [#3460](https://github.com/openshift/installer/pull/3460)
* [Bug 1825973](https://bugzilla.redhat.com/show_bug.cgi?id=1825973): OpenStack: Replace remote_group_id with remote_ip_prefix [#3481](https://github.com/openshift/installer/pull/3481)
* [Bug 1825478](https://bugzilla.redhat.com/show_bug.cgi?id=1825478): OpenStack CI Install awscli from zip [#3478](https://github.com/openshift/installer/pull/3478)
* [Full changelog](https://github.com/openshift/installer/compare/db4411451af55e0bab7258d25bdabd91ea48382f...43f11cfb64edafaed1941327526efd373a829b63)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/052128b671dc2e7fd386f3c25b60b87a197cded3)

* [Bug 1843488](https://bugzilla.redhat.com/show_bug.cgi?id=1843488): Move haproxy listening port due to conflict [#66](https://github.com/openshift/baremetal-runtimecfg/pull/66)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/1ba567febc0443115ed85d706c363766b039d46d...052128b671dc2e7fd386f3c25b60b87a197cded3)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d92d0dcf7f1de424fa82c3f83dafe930ae09be6f)

* [Bug 1808222](https://bugzilla.redhat.com/show_bug.cgi?id=1808222): CVE-2020-9283 ose-cloud-credential-operator-container: golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic [#221](https://github.com/openshift/cloud-credential-operator/pull/221)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/02be5758f755d9da56cb4b37ae3ea52a9a0c436e...d92d0dcf7f1de424fa82c3f83dafe930ae09be6f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/27195a2d88296729a9657e9dab14045f4d24a8f9)

* [Bug 1842465](https://bugzilla.redhat.com/show_bug.cgi?id=1842465): explicitly set operator's and operand's container's root file system to writable [#297](https://github.com/openshift/cluster-authentication-operator/pull/297)
* [Bug 1824167](https://bugzilla.redhat.com/show_bug.cgi?id=1824167): The oauth server should wait until it is out of rotation to shut down [#257](https://github.com/openshift/cluster-authentication-operator/pull/257)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/df8cd95ed3249e0fae70ddaea56c07950b819cad...27195a2d88296729a9657e9dab14045f4d24a8f9)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/59d52289f59ea5bd691e185f4b36a5d6f9160e7e)

* BUG 1824215: Raise maximum memory capacity difference [#144](https://github.com/openshift/kubernetes-autoscaler/pull/144)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7278ebb2fb632dbfe102b930aa161f5b2a9bcc93...59d52289f59ea5bd691e185f4b36a5d6f9160e7e)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/fa71866510868d6ff205ef63293bec456fcf36e2)

* [Bug 1807762](https://bugzilla.redhat.com/show_bug.cgi?id=1807762): Drop run-level [#154](https://github.com/openshift/cluster-autoscaler-operator/pull/154)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/23df15eeb0144268565ccbb28665efe82a1a5845...fa71866510868d6ff205ef63293bec456fcf36e2)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/e1b63cc5f68d3505f4dc657b029550d8003d4c9d)

* [Bug 1859685](https://bugzilla.redhat.com/show_bug.cgi?id=1859685): Tolerate all taints [#186](https://github.com/openshift/cluster-dns-operator/pull/186)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/ca11e642bfe8fe62688a04565f2fd3195c210344...e1b63cc5f68d3505f4dc657b029550d8003d4c9d)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/bc621396a3b1386854bef7832afbd14e31b7e798)

* [Bug 1832144](https://bugzilla.redhat.com/show_bug.cgi?id=1832144): Assure storage bucket names in lowercase [#541](https://github.com/openshift/cluster-image-registry-operator/pull/541)
* [Bug 1836753](https://bugzilla.redhat.com/show_bug.cgi?id=1836753): Use release-4.3 api [#564](https://github.com/openshift/cluster-image-registry-operator/pull/564)
* [Bug 1810563](https://bugzilla.redhat.com/show_bug.cgi?id=1810563): bootstrap HA configuration [#536](https://github.com/openshift/cluster-image-registry-operator/pull/536)
* [Bug 1825719](https://bugzilla.redhat.com/show_bug.cgi?id=1825719): update object dumper [#533](https://github.com/openshift/cluster-image-registry-operator/pull/533)
* [Bug 1830363](https://bugzilla.redhat.com/show_bug.cgi?id=1830363): removing verify-sec / gosec [#544](https://github.com/openshift/cluster-image-registry-operator/pull/544)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/344a182f610a0d47e703de468e23d0f07aaa6075...bc621396a3b1386854bef7832afbd14e31b7e798)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ccb80d3c77a58a28cd1ec95cbb6584adba3b09fd)

* [Bug 1829576](https://bugzilla.redhat.com/show_bug.cgi?id=1829576): Add e2e test that ensures stale condition is removed [#840](https://github.com/openshift/cluster-kube-apiserver-operator/pull/840)
* [Bug 1802161](https://bugzilla.redhat.com/show_bug.cgi?id=1802161): `regenerate-certificates` command blocked by error `illegal base64 data at input byte 3` [#765](https://github.com/openshift/cluster-kube-apiserver-operator/pull/765)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#825](https://github.com/openshift/cluster-kube-apiserver-operator/pull/825)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e04d17fba4a793664538b7df6423d9a2098e1517...ccb80d3c77a58a28cd1ec95cbb6584adba3b09fd)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b278b086c9dfb62b88b7e3b00eeecd85d7284bdd)

* [Bug 1851398](https://bugzilla.redhat.com/show_bug.cgi?id=1851398): Check port availability in the same container [#424](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/424)
* [Bug 1853171](https://bugzilla.redhat.com/show_bug.cgi?id=1853171): Fix gce cloud provider permissions [#427](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/427)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#395](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/395)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0b20d6028556a34abf80e55b7b3c0c8ec469d29f...b278b086c9dfb62b88b7e3b00eeecd85d7284bdd)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/870eb3328a40cada0f15e90b072655b6d1256a68)

* [Bug 1848583](https://bugzilla.redhat.com/show_bug.cgi?id=1848583): bump(library-go): Add resource requests to installer/pruner pods [#256](https://github.com/openshift/cluster-kube-scheduler-operator/pull/256)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#239](https://github.com/openshift/cluster-kube-scheduler-operator/pull/239)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/ffb17cb15fd1833f6118ddb3835972ca3b443f22...870eb3328a40cada0f15e90b072655b6d1256a68)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/abd0a78509a284adf0f749e01f992e7828c38cba)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet/*: adapt resource requests [#852](https://github.com/openshift/cluster-monitoring-operator/pull/852)
* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): remove cpu limits for config reloader [#848](https://github.com/openshift/cluster-monitoring-operator/pull/848)
* [Bug 1812382](https://bugzilla.redhat.com/show_bug.cgi?id=1812382): Enable discovery of Podmonitors Custom Resource across namespaces [#694](https://github.com/openshift/cluster-monitoring-operator/pull/694)
* [Bug 1807141](https://bugzilla.redhat.com/show_bug.cgi?id=1807141): jsonnet/rules.jsonnet: Add MultipleContainersOOMKilled alert [#692](https://github.com/openshift/cluster-monitoring-operator/pull/692)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/417df3571061bac207af06773d0283e3c2787c15...abd0a78509a284adf0f749e01f992e7828c38cba)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/42c1a06674b4466b190f09394bbf5ad04d9e9a76)

* [Bug 1857744](https://bugzilla.redhat.com/show_bug.cgi?id=1857744): [release-4.3] Set timeoutSeconds to reflect expected timeout for OVS commands [#725](https://github.com/openshift/cluster-network-operator/pull/725)
* [Bug 1846344](https://bugzilla.redhat.com/show_bug.cgi?id=1846344): Remove dead member from LB pool. [#666](https://github.com/openshift/cluster-network-operator/pull/666)
* [Bug 1851338](https://bugzilla.redhat.com/show_bug.cgi?id=1851338): Split etcd sg rule ports range into different sg rules [#680](https://github.com/openshift/cluster-network-operator/pull/680)
* [Bug 1846459](https://bugzilla.redhat.com/show_bug.cgi?id=1846459): Recreate DNS service upon Octavia upgrade [#667](https://github.com/openshift/cluster-network-operator/pull/667)
* [Bug 1844135](https://bugzilla.redhat.com/show_bug.cgi?id=1844135): Setting resource request for kube-proxy deployment [#658](https://github.com/openshift/cluster-network-operator/pull/658)
* [Bug 1807670](https://bugzilla.redhat.com/show_bug.cgi?id=1807670): Fixes to reliably save/restore flows [#626](https://github.com/openshift/cluster-network-operator/pull/626)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Don't override containernetworking binaries in SDN and Kuryr [#634](https://github.com/openshift/cluster-network-operator/pull/634)
* [Bug 1834858](https://bugzilla.redhat.com/show_bug.cgi?id=1834858): Kuryr: Remove old SG rules on upgrade [#637](https://github.com/openshift/cluster-network-operator/pull/637)
* [Bug 1832311](https://bugzilla.redhat.com/show_bug.cgi?id=1832311): Kuryr: Tighten security groups [#621](https://github.com/openshift/cluster-network-operator/pull/621)
* [Bug 1821294](https://bugzilla.redhat.com/show_bug.cgi?id=1821294): Normalize CPU requests on nodes [#587](https://github.com/openshift/cluster-network-operator/pull/587)
* [Bug 1814352](https://bugzilla.redhat.com/show_bug.cgi?id=1814352): Delete admission controller if double listeners is supported [#599](https://github.com/openshift/cluster-network-operator/pull/599)
* [Bug 1824866](https://bugzilla.redhat.com/show_bug.cgi?id=1824866): [release-4.3] Fix dhcp daemon api version [#598](https://github.com/openshift/cluster-network-operator/pull/598)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/932b28a55ee31d486a72413b38ade57a220adb0d...42c1a06674b4466b190f09394bbf5ad04d9e9a76)


### [cluster-node-tuned](https://github.com/openshift/openshift-tuned/tree/8705571c5afaeac1953376e9eef734027267066b)

* [Bug 1825007](https://bugzilla.redhat.com/show_bug.cgi?id=1825007): Fix tuned reload behaviour on SIGHUP for invalid tuned profiles. [#38](https://github.com/openshift/openshift-tuned/pull/38)
* [Full changelog](https://github.com/openshift/openshift-tuned/compare/4de824748a0fa2dbf4b10f82a32e3784372bce54...8705571c5afaeac1953376e9eef734027267066b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eaacf04c6cc9e83ad4978c108aabb395d5a771ec)

* [Bug 1826167](https://bugzilla.redhat.com/show_bug.cgi?id=1826167): Mount host's /etc/sysctl.{conf,d/} to enable sysctl override from the host. [#128](https://github.com/openshift/cluster-node-tuning-operator/pull/128)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8e4367fb61fe895fd310bed69544033d043420d4...eaacf04c6cc9e83ad4978c108aabb395d5a771ec)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/18125a2f4cd2462c88123a906814385d82b50cb7)

* [Bug 1837353](https://bugzilla.redhat.com/show_bug.cgi?id=1837353): encryption: don't degrade when daemonset is not found [#365](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/365)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#351](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/7d51dd65fcdb95bf51cf9d435b3aa5b112ee2732...18125a2f4cd2462c88123a906814385d82b50cb7)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/d58076f2f1a9839a5887ddd7aeb4ad163b4ada8b)

* [Bug 1867175](https://bugzilla.redhat.com/show_bug.cgi?id=1867175): account for nil DaemonSet returned from library-go [#168](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/168)
* [Bug 1854133](https://bugzilla.redhat.com/show_bug.cgi?id=1854133): ensure progressing is not set to false if version is missing [#161](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/161)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/10fc162e4f4c977a9c431884b9a063fa751514d0...d58076f2f1a9839a5887ddd7aeb4ad163b4ada8b)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/bc78df73a234485eaf300884d02fef693d62b9be)

* [Bug 1858802](https://bugzilla.redhat.com/show_bug.cgi?id=1858802): add UID deallocation logic [#34](https://github.com/openshift/cluster-policy-controller/pull/34)
* [Bug 1829328](https://bugzilla.redhat.com/show_bug.cgi?id=1829328): use patch when updating namespace [#26](https://github.com/openshift/cluster-policy-controller/pull/26)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/9b6ccc80eeef2eb85f78f8a70f319cbae0c5295a...bc78df73a234485eaf300884d02fef693d62b9be)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/c7888fd728c778b8bacacdfeb00874daf2db8bc8)

* [Bug 1852429](https://bugzilla.redhat.com/show_bug.cgi?id=1852429): Fix Jenkins Monitored templates typo and other updates [#295](https://github.com/openshift/cluster-samples-operator/pull/295)
* [Bug 1826028](https://bugzilla.redhat.com/show_bug.cgi?id=1826028): revert pr 177; no override jenkins* registry hosts for mirrors [#263](https://github.com/openshift/cluster-samples-operator/pull/263)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): ensure s390/ppc64le platforms bootstrap as removed following upgrade [#285](https://github.com/openshift/cluster-samples-operator/pull/285)
* [Bug 1841996](https://bugzilla.redhat.com/show_bug.cgi?id=1841996): correctly handle removed templates watch events as part of an upgrade [#280](https://github.com/openshift/cluster-samples-operator/pull/280)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): avoid listing file system content for unsupported architures [#273](https://github.com/openshift/cluster-samples-operator/pull/273)
* [Bug 1829083](https://bugzilla.redhat.com/show_bug.cgi?id=1829083): copy install pull secret when boostrapped as removed [#267](https://github.com/openshift/cluster-samples-operator/pull/267)
* [Bug 1814396](https://bugzilla.redhat.com/show_bug.cgi?id=1814396): abort metrics in general if removed/unmanaged [#251](https://github.com/openshift/cluster-samples-operator/pull/251)
* [Bug 1811206](https://bugzilla.redhat.com/show_bug.cgi?id=1811206): purge removed imagestreams as a part of upgrade from progessing/impor… [#243](https://github.com/openshift/cluster-samples-operator/pull/243)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bfda4d3462fd7305573adb103137723d2bd4975c...c7888fd728c778b8bacacdfeb00874daf2db8bc8)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/b3582cdca736c6cabad4b4f63d5483872f6cb0e9)

* [Bug 1879110](https://bugzilla.redhat.com/show_bug.cgi?id=1879110): Move notUpgradeable check later to prevent z-stream upgrade failures [#88](https://github.com/openshift/cluster-storage-operator/pull/88)
* [Bug 1860100](https://bugzilla.redhat.com/show_bug.cgi?id=1860100): Includes validation check for VolumeSnapshot v1alpha1 CRDs [#63](https://github.com/openshift/cluster-storage-operator/pull/63)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a9548e6d0ac621a5c6e8e3544ca680280a1ca746...b3582cdca736c6cabad4b4f63d5483872f6cb0e9)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b033473ff86183a5389b720ada21b6cb955e9405)

* [Bug 1844117](https://bugzilla.redhat.com/show_bug.cgi?id=1844117): pkg/cvo/sync_worker: Do not treat "All errors were context errors..." as success [#380](https://github.com/openshift/cluster-version-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/86b9bdba55a85e2e071603916db4c43b481e7588...b033473ff86183a5389b720ada21b6cb955e9405)


### [console](https://github.com/openshift/console/tree/19a1bfb76f0271cdbf48e3ba8363352fdb4f12a7)

* [Bug 1825722](https://bugzilla.redhat.com/show_bug.cgi?id=1825722): Handle undefined MachineConfigPools status [#6000](https://github.com/openshift/console/pull/6000)
* [Bug 1827747](https://bugzilla.redhat.com/show_bug.cgi?id=1827747): Register Subscription list page from plugin [#5163](https://github.com/openshift/console/pull/5163)
* [Bug 1796079](https://bugzilla.redhat.com/show_bug.cgi?id=1796079): Backport OLM filter by OS and ARCH [#4928](https://github.com/openshift/console/pull/4928)
* [Bug 1829046](https://bugzilla.redhat.com/show_bug.cgi?id=1829046): removes techpreview badge from serverless [#5220](https://github.com/openshift/console/pull/5220)
* [Bug 1840765](https://bugzilla.redhat.com/show_bug.cgi?id=1840765): Fixed legends on data consumption card [#5600](https://github.com/openshift/console/pull/5600)
* [Bug 1829276](https://bugzilla.redhat.com/show_bug.cgi?id=1829276): fix(prun): Rerun cancelled runs | release-4.3 [#5228](https://github.com/openshift/console/pull/5228)
* [Bug 1839036](https://bugzilla.redhat.com/show_bug.cgi?id=1839036): handle embedded pipeline spec in pipelinerun scenario [#5536](https://github.com/openshift/console/pull/5536)
* [Bug 1819289](https://bugzilla.redhat.com/show_bug.cgi?id=1819289): Fix navigation separator background colour [#4864](https://github.com/openshift/console/pull/4864)
* [Bug 1821647](https://bugzilla.redhat.com/show_bug.cgi?id=1821647): Correctly handle Unicode characters in pod terminal [#5198](https://github.com/openshift/console/pull/5198)
* [Full changelog](https://github.com/openshift/console/compare/afb0423dc566a63dd5518c466d157cf34f237396...19a1bfb76f0271cdbf48e3ba8363352fdb4f12a7)


### [console-operator](https://github.com/openshift/console-operator/tree/730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)

* [Bug 1836939](https://bugzilla.redhat.com/show_bug.cgi?id=1836939): Bump godeps to get fix from library-go#799 [#430](https://github.com/openshift/console-operator/pull/430)
* [Full changelog](https://github.com/openshift/console-operator/compare/97050f23a6774c55d66aad271e2a73e76c95cccb...730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)


### [docker-builder](https://github.com/openshift/builder/tree/fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)

* [Bug 1832975](https://bugzilla.redhat.com/show_bug.cgi?id=1832975): use of ARG step in Dockerfile causes panic in imagebuilder [#152](https://github.com/openshift/builder/pull/152)
* [Bug 1821861](https://bugzilla.redhat.com/show_bug.cgi?id=1821861): manage-dockerfile: use the original form of ENV/LABEL [#149](https://github.com/openshift/builder/pull/149)
* [Full changelog](https://github.com/openshift/builder/compare/ba658c8b81615e5ed86ea5836b20ed738a534252...fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)


### [etcd](https://github.com/openshift/etcd/tree/87f03ed81748f8cb7a4014e954762767c976d3ae)

* [Bug 1815634](https://bugzilla.redhat.com/show_bug.cgi?id=1815634): bump etcd v3.3.22 [#53](https://github.com/openshift/etcd/pull/53)
* [Full changelog](https://github.com/openshift/etcd/compare/e30a18f29c8bf1f16507d7983dde2aa51962d6c7...87f03ed81748f8cb7a4014e954762767c976d3ae)


### [haproxy-router](https://github.com/openshift/router/tree/1e27f2683c53589304304b8e81261ecb55013de2)

* [Bug 1857023](https://bugzilla.redhat.com/show_bug.cgi?id=1857023): Sanitize TLS config that has key bundled with cert [#152](https://github.com/openshift/router/pull/152)
* Sync OWNERS with master branch [#164](https://github.com/openshift/router/pull/164)
* [Bug 1816540](https://bugzilla.redhat.com/show_bug.cgi?id=1816540): [4.3] Backport "remove proto-version header field" [#105](https://github.com/openshift/router/pull/105)
* [Bug 1818856](https://bugzilla.redhat.com/show_bug.cgi?id=1818856): Wildcard is not needed to copy subdirectory in dockerfile [#101](https://github.com/openshift/router/pull/101)
* [Full changelog](https://github.com/openshift/router/compare/1526917a58021c8f6e465406501c32fa3fb618b5...1e27f2683c53589304304b8e81261ecb55013de2)


### [hyperkube, tests](https://github.com/openshift/origin/tree/853223d074870a9db28c9c21f00d4ac362f88b40)

* [Bug 1880293](https://bugzilla.redhat.com/show_bug.cgi?id=1880293): OpenShift APIs become unavailable for more than 15 minutes [#25546](https://github.com/openshift/origin/pull/25546)
* [Bug 1855479](https://bugzilla.redhat.com/show_bug.cgi?id=1855479): UPSTREAM: 91648: Changes to ManagedFields is not mutation for GC [#25266](https://github.com/openshift/origin/pull/25266)
* [Bug 1857079](https://bugzilla.redhat.com/show_bug.cgi?id=1857079): Include pod /etc/hosts in ephemeral storage calculation for eviction [#25289](https://github.com/openshift/origin/pull/25289)
* [Bug 1852857](https://bugzilla.redhat.com/show_bug.cgi?id=1852857): UPSTREAM: 90740: Update createBalancedPodForNodes function in scheduler e2e [#25344](https://github.com/openshift/origin/pull/25344)
* [Bug 1860832](https://bugzilla.redhat.com/show_bug.cgi?id=1860832): Ensure Azure availability zone is always in lower cases [#25327](https://github.com/openshift/origin/pull/25327)
* Fix commit checker [#25368](https://github.com/openshift/origin/pull/25368)
* [Bug 1867402](https://bugzilla.redhat.com/show_bug.cgi?id=1867402): Drop registry.fedoraproject.org/fedora:30 in favour of quay.io/fedora:32-x86_64 [#25394](https://github.com/openshift/origin/pull/25394)
* [Bug 1845773](https://bugzilla.redhat.com/show_bug.cgi?id=1845773): [release-4.3] kubelet: block non-forwarded packets from crossing the localhost boundary [#25144](https://github.com/openshift/origin/pull/25144)
* [Bug 1843877](https://bugzilla.redhat.com/show_bug.cgi?id=1843877): UPSTREAM: 91008: Do not swallow NotFound error for DeletePod in dsc.manage [#25063](https://github.com/openshift/origin/pull/25063)
* [Bug 1851606](https://bugzilla.redhat.com/show_bug.cgi?id=1851606): remove problematic upstream client plugin test [#25215](https://github.com/openshift/origin/pull/25215)
* [Bug 1838196](https://bugzilla.redhat.com/show_bug.cgi?id=1838196): stop printing usage help when the server commands exit [#25003](https://github.com/openshift/origin/pull/25003)
* [Bug 1847089](https://bugzilla.redhat.com/show_bug.cgi?id=1847089): UPSTREAM: 86691: fix: azure disk could not mounted on Standard_DC4s/DC2s [#25110](https://github.com/openshift/origin/pull/25110)
* [Bug 1848976](https://bugzilla.redhat.com/show_bug.cgi?id=1848976): reenable jenkins e2e in e2e-gcp-builds [#25171](https://github.com/openshift/origin/pull/25171)
* [Bug 1848622](https://bugzilla.redhat.com/show_bug.cgi?id=1848622): [release-4.3]: UPSTREAM: 92166: fix: GetLabelsForVolume panic issue for azure disk PV [#25138](https://github.com/openshift/origin/pull/25138)
* [Bug 1841988](https://bugzilla.redhat.com/show_bug.cgi?id=1841988): more upstream to installed template switch in image-eco (django this time) [#25046](https://github.com/openshift/origin/pull/25046)
* [Bug 1822487](https://bugzilla.redhat.com/show_bug.cgi?id=1822487): UPSTREAM: 89794: Clean up event messages for errors [#25049](https://github.com/openshift/origin/pull/25049)
* [Bug 1830093](https://bugzilla.redhat.com/show_bug.cgi?id=1830093): provides a temporal fix to improve CRD publishing e2e tests in an HA setup [#24940](https://github.com/openshift/origin/pull/24940)
* [Bug 1829959](https://bugzilla.redhat.com/show_bug.cgi?id=1829959): [release-4.3] Introduce IBMCloud provider, skip/fix tests [#24829](https://github.com/openshift/origin/pull/24829)
* [Bug 1835948](https://bugzilla.redhat.com/show_bug.cgi?id=1835948): unskip template extended tests [#24983](https://github.com/openshift/origin/pull/24983)
* [Bug 1822680](https://bugzilla.redhat.com/show_bug.cgi?id=1822680): UPSTREAM: 88424: Respect ignore-volume-az option in admission plugin [#24855](https://github.com/openshift/origin/pull/24855)
* [Bug 1798461](https://bugzilla.redhat.com/show_bug.cgi?id=1798461): makes unavailableGauge metric to always reflect the current state of a service [#24501](https://github.com/openshift/origin/pull/24501)
* [Bug 1830130](https://bugzilla.redhat.com/show_bug.cgi?id=1830130): Fix nil reference when accessing un-migrated platform status [#24810](https://github.com/openshift/origin/pull/24810)
* [Bug 1813847](https://bugzilla.redhat.com/show_bug.cgi?id=1813847): fixes configmap "extension-apiserver-authentication" not found [#24699](https://github.com/openshift/origin/pull/24699)
* [Full changelog](https://github.com/openshift/origin/compare/e6f1cd7f07e312facef306167d3e7e1827438cce...853223d074870a9db28c9c21f00d4ac362f88b40)


### [insights-operator](https://github.com/openshift/insights-operator/tree/50ccfeb6d6699c6ddacf678520df5dd7c2cf790d)

* [Bug 1836815](https://bugzilla.redhat.com/show_bug.cgi?id=1836815): Gather image registry config [#111](https://github.com/openshift/insights-operator/pull/111)
* [Bug 1874018](https://bugzilla.redhat.com/show_bug.cgi?id=1874018): Limit collection of ALERTS metric to 1000 lines (~500KiB) to avoid unbearably large archives [#169](https://github.com/openshift/insights-operator/pull/169)
* [Bug 1843923](https://bugzilla.redhat.com/show_bug.cgi?id=1843923): Don't delay first [#137](https://github.com/openshift/insights-operator/pull/137)
* [Bug 1874427](https://bugzilla.redhat.com/show_bug.cgi?id=1874427): Add @natiiix to OWNERS [#170](https://github.com/openshift/insights-operator/pull/170)
* [Bug 1825758](https://bugzilla.redhat.com/show_bug.cgi?id=1825758): Collecting config maps [#105](https://github.com/openshift/insights-operator/pull/105)
* [Bug 1821149](https://bugzilla.redhat.com/show_bug.cgi?id=1821149): Cherry-pick release 4.3 Support for specific http proxy for the service [#91](https://github.com/openshift/insights-operator/pull/91)
* [Full changelog](https://github.com/openshift/insights-operator/compare/98ecaca13995901ce2b36c7c01bd6735f95142da...50ccfeb6d6699c6ddacf678520df5dd7c2cf790d)


### [jenkins, jenkins-agent-maven](https://github.com/openshift/jenkins/tree/60738dde42afde4fead149fb2649fb863d69206b)

* [Bug 1875257](https://bugzilla.redhat.com/show_bug.cgi?id=1875257): Bump Jenkins version to 2.235.5 (cve) [#1154](https://github.com/openshift/jenkins/pull/1154)
* [Bug 1857557](https://bugzilla.redhat.com/show_bug.cgi?id=1857557): Bump matrix plugin [#1133](https://github.com/openshift/jenkins/pull/1133)
* [Bug 1861842](https://bugzilla.redhat.com/show_bug.cgi?id=1861842): CVE-2020-2182 credentials-binding 1.23 [#1124](https://github.com/openshift/jenkins/pull/1124)
* [Bug 1857548](https://bugzilla.redhat.com/show_bug.cgi?id=1857548): bump jenkins to 2.235.2 [#1121](https://github.com/openshift/jenkins/pull/1121)
* [Bug 1819530](https://bugzilla.redhat.com/show_bug.cgi?id=1819530): update subversion plugin [#1131](https://github.com/openshift/jenkins/pull/1131)
* [Bug 1847452](https://bugzilla.redhat.com/show_bug.cgi?id=1847452): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1083](https://github.com/openshift/jenkins/pull/1083)
* [Bug 1843941](https://bugzilla.redhat.com/show_bug.cgi?id=1843941): bump jenkins to 2.222.1 and update plugins [#1067](https://github.com/openshift/jenkins/pull/1067)
* [Bug 1848335](https://bugzilla.redhat.com/show_bug.cgi?id=1848335): [release-4.3] Support Nodejs 12 Agent [#1075](https://github.com/openshift/jenkins/pull/1075)
* [Bug 1826172](https://bugzilla.redhat.com/show_bug.cgi?id=1826172): handle ingress certificate signed by custom ca [#1049](https://github.com/openshift/jenkins/pull/1049)
* [Full changelog](https://github.com/openshift/jenkins/compare/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26...60738dde42afde4fead149fb2649fb863d69206b)


### [jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/f1b145a8c81b646f6e921202c920c272a9fd0da5)

* [Bug 1847452](https://bugzilla.redhat.com/show_bug.cgi?id=1847452): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1083](https://github.com/openshift/jenkins/pull/1083)
* [Bug 1843941](https://bugzilla.redhat.com/show_bug.cgi?id=1843941): bump jenkins to 2.222.1 and update plugins [#1067](https://github.com/openshift/jenkins/pull/1067)
* [Bug 1848335](https://bugzilla.redhat.com/show_bug.cgi?id=1848335): [release-4.3] Support Nodejs 12 Agent [#1075](https://github.com/openshift/jenkins/pull/1075)
* [Bug 1826172](https://bugzilla.redhat.com/show_bug.cgi?id=1826172): handle ingress certificate signed by custom ca [#1049](https://github.com/openshift/jenkins/pull/1049)
* [Full changelog](https://github.com/openshift/jenkins/compare/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26...f1b145a8c81b646f6e921202c920c272a9fd0da5)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/1bd32df6cd4f6c4907d7751939d0af555ec6a03d)

* [Bug 1859869](https://bugzilla.redhat.com/show_bug.cgi?id=1859869): [release-4.3] Add support for --may-exist when adding the bridge in sdn [#167](https://github.com/openshift/sdn/pull/167)
* [Bug 1853198](https://bugzilla.redhat.com/show_bug.cgi?id=1853198): [release-4.3] Backport OVS-retries [#156](https://github.com/openshift/sdn/pull/156)
* [Bug 1840762](https://bugzilla.redhat.com/show_bug.cgi?id=1840762): Fix egressVXLANMonitor and egressIPTracker deadlock [#146](https://github.com/openshift/sdn/pull/146)
* [Bug 1839109](https://bugzilla.redhat.com/show_bug.cgi?id=1839109): [backport-4.3] node/vnids: Correctly handle case where NetNamespace watch is far behind [#144](https://github.com/openshift/sdn/pull/144)
* [Full changelog](https://github.com/openshift/sdn/compare/10fba067e586b5e080fdabb720806b42bb268748...1bd32df6cd4f6c4907d7751939d0af555ec6a03d)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/27c6396760b749b063726186dd14b1e0ea0f00bc)

* BUG 1859308: fix memory leak that leads to unresponsive libvirt URI [#205](https://github.com/openshift/cluster-api-provider-libvirt/pull/205)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/58b373500e8d9180bbfd38ca4663129d1bfa1ee9...27c6396760b749b063726186dd14b1e0ea0f00bc)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/129b63f8a58c2502dfabcd42eda8ae212ca1bb1d)

* BUG 1807762: Drop run-level [#500](https://github.com/openshift/machine-api-operator/pull/500)
* BUG 1807762: Remove explicit securityContext and add granular securitycontextconstraints "use" permissions in machine-api-controllers clusterRole [#635](https://github.com/openshift/machine-api-operator/pull/635)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/409274d4c429590723a1cea87f7435b341d0562f...129b63f8a58c2502dfabcd42eda8ae212ca1bb1d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/747de90fbfb379582694160dcc1181734c795695)

* [Bug 1874399](https://bugzilla.redhat.com/show_bug.cgi?id=1874399): Pull the image using authfile before creating the container layer [#2069](https://github.com/openshift/machine-config-operator/pull/2069)
* [Bug 1845494](https://bugzilla.redhat.com/show_bug.cgi?id=1845494): daemon: fix restoring file logic to avoid unnecessary deletion [#1796](https://github.com/openshift/machine-config-operator/pull/1796)
* [Bug 1855304](https://bugzilla.redhat.com/show_bug.cgi?id=1855304): Parse the kubelet.conf data after an update [#1916](https://github.com/openshift/machine-config-operator/pull/1916)
* [Bug 1846358](https://bugzilla.redhat.com/show_bug.cgi?id=1846358): MCD: tolerate all taints [#1816](https://github.com/openshift/machine-config-operator/pull/1816)
* [Bug 1826021](https://bugzilla.redhat.com/show_bug.cgi?id=1826021): Fix a problem with a greedy regular expression matching more than needed [#1913](https://github.com/openshift/machine-config-operator/pull/1913)
* [Bug 1851949](https://bugzilla.redhat.com/show_bug.cgi?id=1851949): Set the pod-infra-container-image flag in kubelet to ocp pause image [#1877](https://github.com/openshift/machine-config-operator/pull/1877)
* [Bug 1840300](https://bugzilla.redhat.com/show_bug.cgi?id=1840300): kubelet: add log level environment variable [#1752](https://github.com/openshift/machine-config-operator/pull/1752)
* [Bug 1827540](https://bugzilla.redhat.com/show_bug.cgi?id=1827540): pkg/server: disable weak TLS versions [#1681](https://github.com/openshift/machine-config-operator/pull/1681)
* [Bug 1837124](https://bugzilla.redhat.com/show_bug.cgi?id=1837124): templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml [#1738](https://github.com/openshift/machine-config-operator/pull/1738)
* [Bug 1838984](https://bugzilla.redhat.com/show_bug.cgi?id=1838984): [release-4.3] templates: Don't enable machine-config-daemon-host.service by default [#1747](https://github.com/openshift/machine-config-operator/pull/1747)
* [Bug 1811827](https://bugzilla.redhat.com/show_bug.cgi?id=1811827): baremetal: Add missing network-online dependency to kubelet unit [#1549](https://github.com/openshift/machine-config-operator/pull/1549)
* [Bug 1804067](https://bugzilla.redhat.com/show_bug.cgi?id=1804067): Prevent etcd-member-add.sh from running on an active master [#1740](https://github.com/openshift/machine-config-operator/pull/1740)
* [Bug 1825221](https://bugzilla.redhat.com/show_bug.cgi?id=1825221): templates/master:openshift-recovery-tools pass --authfile to podman create [#1661](https://github.com/openshift/machine-config-operator/pull/1661)
* [Bug 1801430](https://bugzilla.redhat.com/show_bug.cgi?id=1801430): Write environment variables needed for etcdctl execution into ~/.profile [#1726](https://github.com/openshift/machine-config-operator/pull/1726)
* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): The Multus CNI configuration file "00-multus.conf" should not be removed [#1646](https://github.com/openshift/machine-config-operator/pull/1646)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Add containernetworking-plugin RPM's bin location to CRI-O config [#1722](https://github.com/openshift/machine-config-operator/pull/1722)
* [Bug 1822269](https://bugzilla.redhat.com/show_bug.cgi?id=1822269): Add new crio.conf field to the template [#1668](https://github.com/openshift/machine-config-operator/pull/1668)
* [Bug 1817458](https://bugzilla.redhat.com/show_bug.cgi?id=1817458): [release-4.3] fix wrongful backup of files not originally on the system [#1686](https://github.com/openshift/machine-config-operator/pull/1686)
* [Bug 1801824](https://bugzilla.redhat.com/show_bug.cgi?id=1801824): kubelet: add more system reservation to protect node [#1458](https://github.com/openshift/machine-config-operator/pull/1458)
* [Bug 1822750](https://bugzilla.redhat.com/show_bug.cgi?id=1822750): [ctrcfg controller] Use a struct array instead of map when creating new ignitions [#1645](https://github.com/openshift/machine-config-operator/pull/1645)
* [Bug 1824282](https://bugzilla.redhat.com/show_bug.cgi?id=1824282): [release 4.3] cri-o: set log level to info [#1635](https://github.com/openshift/machine-config-operator/pull/1635)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f6d1fe753cbcecb3aa1c2d3d3edd4a5d04ffca54...747de90fbfb379582694160dcc1181734c795695)


### [multus-cni](https://github.com/openshift/multus-cni/tree/419b44ce151c1e996698c9272ac15abe843ec925)

* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): Adds readinessindicatorfile check on CNI DEL [#65](https://github.com/openshift/multus-cni/pull/65)
* [Full changelog](https://github.com/openshift/multus-cni/compare/9e85cb1ba34b516b33da18cee4500be6a61fdf74...419b44ce151c1e996698c9272ac15abe843ec925)


### [oauth-server](https://github.com/openshift/oauth-server/tree/e61459a3903327dddb515a54cd005d4494dfdd38)

* [Bug 1836974](https://bugzilla.redhat.com/show_bug.cgi?id=1836974): reduce ldap connection timeout from 60s to 30s [#43](https://github.com/openshift/oauth-server/pull/43)
* [Bug 1823777](https://bugzilla.redhat.com/show_bug.cgi?id=1823777): Add back some missing metrics [#41](https://github.com/openshift/oauth-server/pull/41)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3065e59ce948f10364d0dd88cb70b860ec65ee2...e61459a3903327dddb515a54cd005d4494dfdd38)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/95686282f6f308e824645f13cd7a9ee1a936216b)

* [Bug 1829328](https://bugzilla.redhat.com/show_bug.cgi?id=1829328): allow patch for updating namespace [#101](https://github.com/openshift/openshift-apiserver/pull/101)
* [Bug 1821500](https://bugzilla.redhat.com/show_bug.cgi?id=1821500): bump to kube 1.17.4 [#109](https://github.com/openshift/openshift-apiserver/pull/109)
* [Bug 1833019](https://bugzilla.redhat.com/show_bug.cgi?id=1833019): include ISI error message changes when determining new generation need [#106](https://github.com/openshift/openshift-apiserver/pull/106)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a98ed7f79eb31b4e85149d4d1c9cc152df55fcaf...95686282f6f308e824645f13cd7a9ee1a936216b)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/b53122d6370a1a7241e53cc5686a751faec7d684)

* [Bug 1849176](https://bugzilla.redhat.com/show_bug.cgi?id=1849176): Revert "Remove unnecessary yum install" [#134](https://github.com/openshift/openshift-controller-manager/pull/134)
* [Bug 1849176](https://bugzilla.redhat.com/show_bug.cgi?id=1849176): Allow image push after postCommit script completes [#132](https://github.com/openshift/openshift-controller-manager/pull/132)
* [Bug 1831888](https://bugzilla.redhat.com/show_bug.cgi?id=1831888): StatefulSets v1 do not trigger on image changes [#116](https://github.com/openshift/openshift-controller-manager/pull/116)
* [Bug 1813420](https://bugzilla.redhat.com/show_bug.cgi?id=1813420): fix img reg ref on ICT if OCM knows img reg host before apiserver [#75](https://github.com/openshift/openshift-controller-manager/pull/75)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/07837c7258def4d41b25f5061217c5ea048255ee...b53122d6370a1a7241e53cc5686a751faec7d684)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/06c41918200d7ad324b10ae959d1240083f13513)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet: set cpu requests [#49](https://github.com/openshift/openshift-state-metrics/pull/49)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/c01d2de651071389d2621c46e934fd9cb2bf4b8d...06c41918200d7ad324b10ae959d1240083f13513)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/3af2a4b1875bc4af5dea61044792e6626a4d6017)

* [Bug 1859748](https://bugzilla.redhat.com/show_bug.cgi?id=1859748): fix(resolver): Exclude all installed packages in dependency search [#1676](https://github.com/operator-framework/operator-lifecycle-manager/pull/1676)
* [Bug 1856125](https://bugzilla.redhat.com/show_bug.cgi?id=1856125): Resolve only default channels [#1634](https://github.com/operator-framework/operator-lifecycle-manager/pull/1634)
* [Bug 1843703](https://bugzilla.redhat.com/show_bug.cgi?id=1843703): Deleting a CSV removes related CSV metrics [#1569](https://github.com/operator-framework/operator-lifecycle-manager/pull/1569)
* [Bug 1846220](https://bugzilla.redhat.com/show_bug.cgi?id=1846220): Update PkgManifest upon catsrc update [#1581](https://github.com/operator-framework/operator-lifecycle-manager/pull/1581)
* [Bug 1843694](https://bugzilla.redhat.com/show_bug.cgi?id=1843694): fix(resolver): don't pick operator from same package when resolve requiredAPI [#1571](https://github.com/operator-framework/operator-lifecycle-manager/pull/1571)
* [Bug 1840939](https://bugzilla.redhat.com/show_bug.cgi?id=1840939): fix(queues): use a single gc queue [#1553](https://github.com/operator-framework/operator-lifecycle-manager/pull/1553)
* [Bug 1827822](https://bugzilla.redhat.com/show_bug.cgi?id=1827822): Generation bug 4.3 [#1485](https://github.com/operator-framework/operator-lifecycle-manager/pull/1485)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): feat(catalogs): add spec validation for sourcetypes [#1508](https://github.com/operator-framework/operator-lifecycle-manager/pull/1508)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): Prevent nil pointer dereference [#1486](https://github.com/operator-framework/operator-lifecycle-manager/pull/1486)
* [Bug 1821318](https://bugzilla.redhat.com/show_bug.cgi?id=1821318): feat(packagemanifest): add default os/arch labels if not present [#1432](https://github.com/operator-framework/operator-lifecycle-manager/pull/1432)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/5ff376fd8c14bf6a99b314ad402ceb5641f71fdd...3af2a4b1875bc4af5dea61044792e6626a4d6017)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/cb36f0b17d7c92c3085d54e54efe0bf279e07e04)

* [Bug 1849153](https://bugzilla.redhat.com/show_bug.cgi?id=1849153): Ensure correct registry image [#317](https://github.com/operator-framework/operator-marketplace/pull/317)
* [Bug 1805271](https://bugzilla.redhat.com/show_bug.cgi?id=1805271): increase initial delay for appregistry pods [#301](https://github.com/operator-framework/operator-marketplace/pull/301)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/e0ddc0df2d65d935b1e33f203b781e99d505ad5b...cb36f0b17d7c92c3085d54e54efe0bf279e07e04)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/a9ae6f9f68c17af4f7d60e5292603f05cb3a3b7e)

* [Bug 1849152](https://bugzilla.redhat.com/show_bug.cgi?id=1849152): fix(server): make a copy of the db before migrating it [#364](https://github.com/operator-framework/operator-registry/pull/364)
* [Bug 1843647](https://bugzilla.redhat.com/show_bug.cgi?id=1843647): Detect replacement cycles while adding package channels [#345](https://github.com/operator-framework/operator-registry/pull/345)
* [Bug 1816185](https://bugzilla.redhat.com/show_bug.cgi?id=1816185): fix(dns): fix slow dns resolution of localhost for grpc health probe [#331](https://github.com/operator-framework/operator-registry/pull/331)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/36ee3a437614ca1cb781465e590613e01556e756...a9ae6f9f68c17af4f7d60e5292603f05cb3a3b7e)


### [pod](https://github.com/openshift/images/tree/300794f6c18b6208eeb388f616642358cc759f29)

* [Bug 1851398](https://bugzilla.redhat.com/show_bug.cgi?id=1851398): Add iproute package to get `ss` tool for port wait [#22](https://github.com/openshift/images/pull/22)
* [Full changelog](https://github.com/openshift/images/compare/1be922de56a99f4e254eb9c2fc42d30e5596cf77...300794f6c18b6208eeb388f616642358cc759f29)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/33f333ed95cc1a9c5c86e6b8f57fcae1e70d4102)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): pkg/alertmanager: mergepatch alertmanager containers [#75](https://github.com/openshift/prometheus-operator/pull/75)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/a6330ca349aae64643c2d0d7dff08ed2a444ccd5...33f333ed95cc1a9c5c86e6b8f57fcae1e70d4102)


### [telemeter](https://github.com/openshift/telemeter/tree/1c05598922c2a9160c83057e7786de06a8b0080b)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet/telemeter: set cpu requests, unset limits [#346](https://github.com/openshift/telemeter/pull/346)
* [Full changelog](https://github.com/openshift/telemeter/compare/227ae59d226d17eee26a60621bc884f4e8e83254...1c05598922c2a9160c83057e7786de06a8b0080b)