# 4.3.31

Created: 2020-07-31 20:03:22 +0000 UTC

Image Digest: `sha256:a683c505ee50307fc8b7648891073fa050cf5bf7fad4f450162f0575922c0828`

Promoted from registry.svc.ci.openshift.org/ocp-s390x/release-s390x:4.3.0-0.nightly-s390x-2020-07-31-025507


## Changes from 4.3.18

### Components

* Kubernetes 1.16.2


### Rebuilt images without code change

* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:8604965c79072d2462fe9b1f82a16cddac384ebdd8394fd08cc6ce33cd31ef48`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [dc2d333c](https://github.com/openshift/baremetal-operator/commit/dc2d333c60a7a8457eb3e56ca3218aaad2011999) `sha256:c667ebd9f3a8d2b11530d4f960b618fb81a26190c8a1a04a0b7dfeccd2270c81`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:d30b59a793f3af2326a27dd111ded4aad449389141024e1cf149518e2e047ea4`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [d5ddbcdd](https://github.com/openshift/cluster-config-operator/commit/d5ddbcdd4ec87bd4d0d109e81ed0be5dafd86061) `sha256:13b318471349e8ba1522cfc5a9a9529862f73d36631c739bc5fc6100c0e7a18e`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [ca11e642](https://github.com/openshift/cluster-dns-operator/commit/ca11e642bfe8fe62688a04565f2fd3195c210344) `sha256:7ccd6183a2d8d17a116765fed406e220f2be7c69e125a1d55b313c6ac358eb8b`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [d86b0316](https://github.com/openshift/cluster-ingress-operator/commit/d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9) `sha256:1dc4f1084025343220217bcdb81ef9c4785613d63a359fd38b9eb38fb0e10c1e`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [dd3147d9](https://github.com/openshift/cluster-machine-approver/commit/dd3147d9b2d1e54a2050d51390d1eca62d6189fc) `sha256:6bfaba5e5d8f887f6d595113cae1b98025ce6dec73fc465bc9f4dc0ed47eff2b`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [a9548e6d](https://github.com/openshift/cluster-storage-operator/commit/a9548e6d0ac621a5c6e8e3544ca680280a1ca746) `sha256:1f255b97e72c2d29e6a59d55a1364f66da6c4ea60581dec5475602eea6ac1c08`
* [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator) git [2523919a](https://github.com/openshift/cluster-svcat-apiserver-operator/commit/2523919a04d428bfa82602f5f6cc50ca38eb48c0) `sha256:63398475654735396d8c34359c7d78c25a1130806c21425181dae5319ce82ec6`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [727d37d9](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/727d37d929cb388744362c98fbcaf9ef547cd4b6) `sha256:28036d4ce68c734fbddc3a184aca290c001b094f340ce80a58b57e5c86169109`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:490dac597849a5a0aac1c4fada53f0f56d2b3237571a2ba51156bdba580fa64a`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:fc7e6c04617d8a673ca6f1ff008bbbbc00e380a37d22e050af14cdb8abc9d183`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [386465fe](https://github.com/openshift/containernetworking-plugins/commit/386465fe170c0e7299b357efbace235a3e5ce7ee) `sha256:01375c3e9a826c7c9481adda6cc4f106f5f4d5a7f358c7a74023a886ae0ea706`
* [coredns](https://github.com/openshift/coredns) git [052209af](https://github.com/openshift/coredns/commit/052209affb1fe85bdd87b37e2cf9a6fb98585e91) `sha256:a9b6a42d7662029f9b1eccb77f6409f40d942660e5c2054fd36b0d479f26a4ec`
* [docker-registry](https://github.com/openshift/image-registry) git [7511ca65](https://github.com/openshift/image-registry/commit/7511ca65e07b586464e5ec2e9efde67bfa48c3e2) `sha256:d8e6cafc7fd61af0aafe256fb219b24dec0a6ac07543487774d5cbe786fecfb6`
* [grafana](https://github.com/openshift/grafana) git [e2261e14](https://github.com/openshift/grafana/commit/e2261e142909cb0fe70fc0996d7d375e57956589) `sha256:ea598d9d0c4c1a41170685c9e57f4c5371e97cb84bae129d8a19877267aaf99d`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [3d1c61e9](https://github.com/openshift/k8s-prometheus-adapter/commit/3d1c61e9a783d8c4a764b130837682fa9ab8e9df) `sha256:5803509a81b8e646792866a3145fa63986aa105f2f3096230ba72483cbe902cf`
* [kube-client-agent](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:2a5c893b8ce3031125aaa688dbbd82fb58861062e82a564f3dbf6fdd065b1102`
* [kube-etcd-signer-server](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:3b9eed9b95a2669165e49ffbd979ff716e3842e2fb8dbdb3759a8709008b24f5`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [84e7dac6](https://github.com/openshift/kube-rbac-proxy/commit/84e7dac69f8e3f90620729ee730327a3e168963d) `sha256:7b8ccf9ba080081765109a48f5867dfbdbe70835cf3a1e501dfb059780078295`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [83f9fc56](https://github.com/openshift/kube-state-metrics/commit/83f9fc5685cf3d7732687e1f07da6b27d6901c4f) `sha256:ccdf99ff2f247854ce1e81570fc9d7e7923c97ae1bef0869d5ef28f3b644463d`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:2455bf599ea9a4e7def797b52de3bb47ee6479ffca5734c6fe168c5e661bfcd4`
* machine-os-content `sha256:9627a4cbd7e12a3eba4e74ea2d251e94733210c469720abaca541683e5fedba9`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [24135de2](https://github.com/openshift/mdns-publisher/commit/24135de29fc348f3ef455a288013cc1912d969bc) `sha256:7c1d906ba1e05cd58194ab86f4b75618323a64e7156619d419cd94b05fd8c5bf`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ead10a3c](https://github.com/openshift/multus-admission-controller/commit/ead10a3cf30c5b4a2fbd7c987d83c07a46c5d5da) `sha256:e3837188eb0c3e68b0fa150842797b2a7be0179142f89d0ffc308403486accf0`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1322dc43](https://github.com/openshift/route-override-cni/commit/1322dc43712e12a021f5e83c8d752e7d8c30aa6e) `sha256:b5f3b7eb920a99c82f983d1cd5bb8607ae36bcec9d2bb79dbef41fcfbe355533`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9cca449d](https://github.com/openshift/whereabouts-cni/commit/9cca449d619ed0f93a06aca9255004672bb6c96e) `sha256:6d0aabfe3adfad06e50735d02bb4122ede2ef7ca8b5122b87641634e223e0bc3`
* [must-gather](https://github.com/openshift/must-gather) git [23037ad1](https://github.com/openshift/must-gather/commit/23037ad16c0aafd7186431c93ebca3f0d426a08d) `sha256:4ccba852116f92609b17f677ea662a6f3f3b5528c1e4f5cc18adc2c35d13690e`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [d5df3188](https://github.com/openshift/oauth-proxy/commit/d5df318830efb30c128e38390d26e695ac33c954) `sha256:c6fa880a84d2ad1051cb9bcc4c4171f8dde8265a6fd1068788eb5251027acd0a`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [7aa99e29](https://github.com/openshift/cluster-api-provider-openstack/commit/7aa99e291276aa2f26260f8e654078ab6c2464f0) `sha256:4c34cdfd7df98bd322b86d9d5d6990026b1053783acd3de1f948f7148681430a`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [1d9574bf](https://github.com/openshift/ovn-kubernetes/commit/1d9574bfc80b3947fe2246249b8c58057c155c20) `sha256:45a9a358bcb49555fbef3db75211e4158cf61c35b730a4384772ebf5bfc987ef`
* [pod](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:29c0f23b4dfca32fa10ed555a320514232e83c699c9bff006eff3c4ff8730285`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b8153a7f](https://github.com/openshift/prom-label-proxy/commit/b8153a7f39f1a34c03059f1b9dfb05d2c1297414) `sha256:7d2839ca3ad3184d8169c50d23b76839c547217d1457c407740f28b6b2eba0a8`
* [prometheus](https://github.com/openshift/prometheus) git [c086098d](https://github.com/openshift/prometheus/commit/c086098da5f01ab9565bdda772d3459bea2913f2) `sha256:7ef95f5aff65769950877d5d61d1412219b41c24dcabacbbd86f0d6c23410cd7`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [11aa2a87](https://github.com/openshift/prometheus-alertmanager/commit/11aa2a87c5bfb84cba76b90a3867a06a55e2605e) `sha256:906c9c87e4e81d6ee50176f9caf822faa0f0897a78b9fee3c8979d38af3ef190`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [d0b913aa](https://github.com/openshift/node_exporter/commit/d0b913aa0dc58d87bab16ed5a8799a9e06891705) `sha256:37d6c7ccb18df6d61c905d06d8578ecbc54cb1f17c0c4c9652c277a05ddf85cf`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [dd7235b4](https://github.com/openshift/service-ca-operator/commit/dd7235b4568fe22232f9cee2855967da5e0c52b2) `sha256:92fc81bbeffd459adbf355a61759131c4353fb5f6584ef1e4fb313ce033b3593`
* [service-catalog](https://github.com/openshift/service-catalog) git [6f75f804](https://github.com/openshift/service-catalog/commit/6f75f8047dfab6ca8b979833f7f2a6036deee488) `sha256:fd56ed28c0b0de2c1e92f378c8e48fd7ac53b10f330d6d82f5213a1384984bae`
* [thanos](https://github.com/openshift/thanos) git [4aaa91e9](https://github.com/openshift/thanos/commit/4aaa91e9b982177e113c80567ec3808dcf122769) `sha256:5ee4cdce6e7272acdb3ae62bc9584568048638c58690e1a51cbaffb34a74a589`


### [aws-machine-controllers, azure-machine-controllers, cli, cli-artifacts, deployer, gcp-machine-controllers, ironic, ironic-inspector, ironic-ipa-downloader, ironic-machine-os-downloader, ironic-static-ip-manager, keepalived-ipfailover, kuryr-cni, kuryr-controller](https://github.com/openshift/oc/tree/bb196ae1fbc03fedaa734f70cfbf509a6e881487)

* [Bug 1806782](https://bugzilla.redhat.com/show_bug.cgi?id=1806782): Allow a file:// release argument to release mirror [#458](https://github.com/openshift/oc/pull/458)
* [Bug 1808221](https://bugzilla.redhat.com/show_bug.cgi?id=1808221): bump(golang.org/x/crypto|net|sys) [#429](https://github.com/openshift/oc/pull/429)
* [Bug 1806782](https://bugzilla.redhat.com/show_bug.cgi?id=1806782): Allow a file:// release argument to release mirror [#328](https://github.com/openshift/oc/pull/328)
* [Full changelog](https://github.com/openshift/oc/compare/4fb2d4d96e6b604f7d4ee49080238a5aec04dc4f...bb196ae1fbc03fedaa734f70cfbf509a6e881487)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/96253d3f2ed8da6f70ff6ad9f69d67b65c688889)

* [Bug 1851949](https://bugzilla.redhat.com/show_bug.cgi?id=1851949): Add the --pod-infra-container-image flag to the kubelet service [#3815](https://github.com/openshift/installer/pull/3815)
* [Bug 1849171](https://bugzilla.redhat.com/show_bug.cgi?id=1849171): OpenStack: Wait for router interface to create FIP [#3780](https://github.com/openshift/installer/pull/3780)
* BUG 1826073: Disable client side rate limiting in Azure. [#3714](https://github.com/openshift/installer/pull/3714)
* [Bug 1842531](https://bugzilla.redhat.com/show_bug.cgi?id=1842531): images: libvirt: add yq to libvirt CI image [#3699](https://github.com/openshift/installer/pull/3699)
* [Bug 1840230](https://bugzilla.redhat.com/show_bug.cgi?id=1840230): data/azure/vnet: switch to HTTPS probes for lbs [#3665](https://github.com/openshift/installer/pull/3665)
* [Bug 1820222](https://bugzilla.redhat.com/show_bug.cgi?id=1820222): libvirt: Bump bootstrap memory to 5G for ppc64le [#3428](https://github.com/openshift/installer/pull/3428)
* [Bug 1828632](https://bugzilla.redhat.com/show_bug.cgi?id=1828632): Don't fail on unavailable features on OpenStack [#3514](https://github.com/openshift/installer/pull/3514)
* [Bug 1820591](https://bugzilla.redhat.com/show_bug.cgi?id=1820591): Add retries to DeleteSwiftContainer [#3408](https://github.com/openshift/installer/pull/3408)
* [Bug 1824921](https://bugzilla.redhat.com/show_bug.cgi?id=1824921): [release-4.3] OpenStack: Correcting the instructions to refresh a CA cert [#3466](https://github.com/openshift/installer/pull/3466)
* [Bug 1824239](https://bugzilla.redhat.com/show_bug.cgi?id=1824239): Validate Azure regions [#3460](https://github.com/openshift/installer/pull/3460)
* [Bug 1825973](https://bugzilla.redhat.com/show_bug.cgi?id=1825973): OpenStack: Replace remote_group_id with remote_ip_prefix [#3481](https://github.com/openshift/installer/pull/3481)
* [Bug 1825478](https://bugzilla.redhat.com/show_bug.cgi?id=1825478): OpenStack CI Install awscli from zip [#3478](https://github.com/openshift/installer/pull/3478)
* [Full changelog](https://github.com/openshift/installer/compare/db4411451af55e0bab7258d25bdabd91ea48382f...96253d3f2ed8da6f70ff6ad9f69d67b65c688889)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/052128b671dc2e7fd386f3c25b60b87a197cded3)

* [Bug 1843488](https://bugzilla.redhat.com/show_bug.cgi?id=1843488): Move haproxy listening port due to conflict [#66](https://github.com/openshift/baremetal-runtimecfg/pull/66)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/1ba567febc0443115ed85d706c363766b039d46d...052128b671dc2e7fd386f3c25b60b87a197cded3)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d92d0dcf7f1de424fa82c3f83dafe930ae09be6f)

* [Bug 1808222](https://bugzilla.redhat.com/show_bug.cgi?id=1808222): CVE-2020-9283 ose-cloud-credential-operator-container: golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic [#221](https://github.com/openshift/cloud-credential-operator/pull/221)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/02be5758f755d9da56cb4b37ae3ea52a9a0c436e...d92d0dcf7f1de424fa82c3f83dafe930ae09be6f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/ee962bdec0cbfcd09a1f66b857727e6217903539)

* [Bug 1824167](https://bugzilla.redhat.com/show_bug.cgi?id=1824167): The oauth server should wait until it is out of rotation to shut down [#257](https://github.com/openshift/cluster-authentication-operator/pull/257)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/df8cd95ed3249e0fae70ddaea56c07950b819cad...ee962bdec0cbfcd09a1f66b857727e6217903539)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/59d52289f59ea5bd691e185f4b36a5d6f9160e7e)

* BUG 1824215: Raise maximum memory capacity difference [#144](https://github.com/openshift/kubernetes-autoscaler/pull/144)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7278ebb2fb632dbfe102b930aa161f5b2a9bcc93...59d52289f59ea5bd691e185f4b36a5d6f9160e7e)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/fa71866510868d6ff205ef63293bec456fcf36e2)

* [Bug 1807762](https://bugzilla.redhat.com/show_bug.cgi?id=1807762): Drop run-level [#154](https://github.com/openshift/cluster-autoscaler-operator/pull/154)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/23df15eeb0144268565ccbb28665efe82a1a5845...fa71866510868d6ff205ef63293bec456fcf36e2)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/bc621396a3b1386854bef7832afbd14e31b7e798)

* [Bug 1832144](https://bugzilla.redhat.com/show_bug.cgi?id=1832144): Assure storage bucket names in lowercase [#541](https://github.com/openshift/cluster-image-registry-operator/pull/541)
* [Bug 1836753](https://bugzilla.redhat.com/show_bug.cgi?id=1836753): Use release-4.3 api [#564](https://github.com/openshift/cluster-image-registry-operator/pull/564)
* [Bug 1810563](https://bugzilla.redhat.com/show_bug.cgi?id=1810563): bootstrap HA configuration [#536](https://github.com/openshift/cluster-image-registry-operator/pull/536)
* [Bug 1825719](https://bugzilla.redhat.com/show_bug.cgi?id=1825719): update object dumper [#533](https://github.com/openshift/cluster-image-registry-operator/pull/533)
* [Bug 1830363](https://bugzilla.redhat.com/show_bug.cgi?id=1830363): removing verify-sec / gosec [#544](https://github.com/openshift/cluster-image-registry-operator/pull/544)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/344a182f610a0d47e703de468e23d0f07aaa6075...bc621396a3b1386854bef7832afbd14e31b7e798)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ccb80d3c77a58a28cd1ec95cbb6584adba3b09fd)

* [Bug 1829576](https://bugzilla.redhat.com/show_bug.cgi?id=1829576): Add e2e test that ensures stale condition is removed [#840](https://github.com/openshift/cluster-kube-apiserver-operator/pull/840)
* [Bug 1802161](https://bugzilla.redhat.com/show_bug.cgi?id=1802161): `regenerate-certificates` command blocked by error `illegal base64 data at input byte 3` [#765](https://github.com/openshift/cluster-kube-apiserver-operator/pull/765)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#825](https://github.com/openshift/cluster-kube-apiserver-operator/pull/825)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e04d17fba4a793664538b7df6423d9a2098e1517...ccb80d3c77a58a28cd1ec95cbb6584adba3b09fd)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/67ec20d29bc1bff0f3d4bda05a88f39b4148215b)

* [Bug 1853171](https://bugzilla.redhat.com/show_bug.cgi?id=1853171): Fix gce cloud provider permissions [#427](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/427)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#395](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/395)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0b20d6028556a34abf80e55b7b3c0c8ec469d29f...67ec20d29bc1bff0f3d4bda05a88f39b4148215b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/870eb3328a40cada0f15e90b072655b6d1256a68)

* [Bug 1848583](https://bugzilla.redhat.com/show_bug.cgi?id=1848583): bump(library-go): Add resource requests to installer/pruner pods [#256](https://github.com/openshift/cluster-kube-scheduler-operator/pull/256)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#239](https://github.com/openshift/cluster-kube-scheduler-operator/pull/239)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/ffb17cb15fd1833f6118ddb3835972ca3b443f22...870eb3328a40cada0f15e90b072655b6d1256a68)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/abd0a78509a284adf0f749e01f992e7828c38cba)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet/*: adapt resource requests [#852](https://github.com/openshift/cluster-monitoring-operator/pull/852)
* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): remove cpu limits for config reloader [#848](https://github.com/openshift/cluster-monitoring-operator/pull/848)
* [Bug 1812382](https://bugzilla.redhat.com/show_bug.cgi?id=1812382): Enable discovery of Podmonitors Custom Resource across namespaces [#694](https://github.com/openshift/cluster-monitoring-operator/pull/694)
* [Bug 1807141](https://bugzilla.redhat.com/show_bug.cgi?id=1807141): jsonnet/rules.jsonnet: Add MultipleContainersOOMKilled alert [#692](https://github.com/openshift/cluster-monitoring-operator/pull/692)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/417df3571061bac207af06773d0283e3c2787c15...abd0a78509a284adf0f749e01f992e7828c38cba)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/4db52b00a045ec0b68be7eb457b158c1a1a60cc4)

* [Bug 1846344](https://bugzilla.redhat.com/show_bug.cgi?id=1846344): Remove dead member from LB pool. [#666](https://github.com/openshift/cluster-network-operator/pull/666)
* [Bug 1851338](https://bugzilla.redhat.com/show_bug.cgi?id=1851338): Split etcd sg rule ports range into different sg rules [#680](https://github.com/openshift/cluster-network-operator/pull/680)
* [Bug 1846459](https://bugzilla.redhat.com/show_bug.cgi?id=1846459): Recreate DNS service upon Octavia upgrade [#667](https://github.com/openshift/cluster-network-operator/pull/667)
* [Bug 1844135](https://bugzilla.redhat.com/show_bug.cgi?id=1844135): Setting resource request for kube-proxy deployment [#658](https://github.com/openshift/cluster-network-operator/pull/658)
* [Bug 1807670](https://bugzilla.redhat.com/show_bug.cgi?id=1807670): Fixes to reliably save/restore flows [#626](https://github.com/openshift/cluster-network-operator/pull/626)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Don't override containernetworking binaries in SDN and Kuryr [#634](https://github.com/openshift/cluster-network-operator/pull/634)
* [Bug 1834858](https://bugzilla.redhat.com/show_bug.cgi?id=1834858): Kuryr: Remove old SG rules on upgrade [#637](https://github.com/openshift/cluster-network-operator/pull/637)
* [Bug 1832311](https://bugzilla.redhat.com/show_bug.cgi?id=1832311): Kuryr: Tighten security groups [#621](https://github.com/openshift/cluster-network-operator/pull/621)
* [Bug 1821294](https://bugzilla.redhat.com/show_bug.cgi?id=1821294): Normalize CPU requests on nodes [#587](https://github.com/openshift/cluster-network-operator/pull/587)
* [Bug 1814352](https://bugzilla.redhat.com/show_bug.cgi?id=1814352): Delete admission controller if double listeners is supported [#599](https://github.com/openshift/cluster-network-operator/pull/599)
* [Bug 1824866](https://bugzilla.redhat.com/show_bug.cgi?id=1824866): [release-4.3] Fix dhcp daemon api version [#598](https://github.com/openshift/cluster-network-operator/pull/598)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/932b28a55ee31d486a72413b38ade57a220adb0d...4db52b00a045ec0b68be7eb457b158c1a1a60cc4)


### [cluster-node-tuned](https://github.com/openshift/openshift-tuned/tree/8705571c5afaeac1953376e9eef734027267066b)

* [Bug 1825007](https://bugzilla.redhat.com/show_bug.cgi?id=1825007): Fix tuned reload behaviour on SIGHUP for invalid tuned profiles. [#38](https://github.com/openshift/openshift-tuned/pull/38)
* [Full changelog](https://github.com/openshift/openshift-tuned/compare/4de824748a0fa2dbf4b10f82a32e3784372bce54...8705571c5afaeac1953376e9eef734027267066b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eaacf04c6cc9e83ad4978c108aabb395d5a771ec)

* [Bug 1826167](https://bugzilla.redhat.com/show_bug.cgi?id=1826167): Mount host's /etc/sysctl.{conf,d/} to enable sysctl override from the host. [#128](https://github.com/openshift/cluster-node-tuning-operator/pull/128)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8e4367fb61fe895fd310bed69544033d043420d4...eaacf04c6cc9e83ad4978c108aabb395d5a771ec)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/18125a2f4cd2462c88123a906814385d82b50cb7)

* [Bug 1837353](https://bugzilla.redhat.com/show_bug.cgi?id=1837353): encryption: don't degrade when daemonset is not found [#365](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/365)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#351](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/7d51dd65fcdb95bf51cf9d435b3aa5b112ee2732...18125a2f4cd2462c88123a906814385d82b50cb7)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/8c7fc46cb7baaa3a6dcc1f469eb578a2a4109ec1)

* [Bug 1854133](https://bugzilla.redhat.com/show_bug.cgi?id=1854133): ensure progressing is not set to false if version is missing [#161](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/161)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/10fc162e4f4c977a9c431884b9a063fa751514d0...8c7fc46cb7baaa3a6dcc1f469eb578a2a4109ec1)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/551f86fa2c2103fe6103e694c9c84b45ef0b0ad3)

* [Bug 1829328](https://bugzilla.redhat.com/show_bug.cgi?id=1829328): use patch when updating namespace [#26](https://github.com/openshift/cluster-policy-controller/pull/26)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/9b6ccc80eeef2eb85f78f8a70f319cbae0c5295a...551f86fa2c2103fe6103e694c9c84b45ef0b0ad3)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0887695ef7b969dc9b4288cee79f1d5eac36ee2f)

* [Bug 1826028](https://bugzilla.redhat.com/show_bug.cgi?id=1826028): revert pr 177; no override jenkins* registry hosts for mirrors [#263](https://github.com/openshift/cluster-samples-operator/pull/263)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): ensure s390/ppc64le platforms bootstrap as removed following upgrade [#285](https://github.com/openshift/cluster-samples-operator/pull/285)
* [Bug 1841996](https://bugzilla.redhat.com/show_bug.cgi?id=1841996): correctly handle removed templates watch events as part of an upgrade [#280](https://github.com/openshift/cluster-samples-operator/pull/280)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): avoid listing file system content for unsupported architures [#273](https://github.com/openshift/cluster-samples-operator/pull/273)
* [Bug 1829083](https://bugzilla.redhat.com/show_bug.cgi?id=1829083): copy install pull secret when boostrapped as removed [#267](https://github.com/openshift/cluster-samples-operator/pull/267)
* [Bug 1814396](https://bugzilla.redhat.com/show_bug.cgi?id=1814396): abort metrics in general if removed/unmanaged [#251](https://github.com/openshift/cluster-samples-operator/pull/251)
* [Bug 1811206](https://bugzilla.redhat.com/show_bug.cgi?id=1811206): purge removed imagestreams as a part of upgrade from progessing/impor… [#243](https://github.com/openshift/cluster-samples-operator/pull/243)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bfda4d3462fd7305573adb103137723d2bd4975c...0887695ef7b969dc9b4288cee79f1d5eac36ee2f)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b033473ff86183a5389b720ada21b6cb955e9405)

* [Bug 1844117](https://bugzilla.redhat.com/show_bug.cgi?id=1844117): pkg/cvo/sync_worker: Do not treat "All errors were context errors..." as success [#380](https://github.com/openshift/cluster-version-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/86b9bdba55a85e2e071603916db4c43b481e7588...b033473ff86183a5389b720ada21b6cb955e9405)


### [console](https://github.com/openshift/console/tree/19a1bfb76f0271cdbf48e3ba8363352fdb4f12a7)

* [Bug 1825722](https://bugzilla.redhat.com/show_bug.cgi?id=1825722): Handle undefined MachineConfigPools status [#6000](https://github.com/openshift/console/pull/6000)
* [Bug 1827747](https://bugzilla.redhat.com/show_bug.cgi?id=1827747): Register Subscription list page from plugin [#5163](https://github.com/openshift/console/pull/5163)
* [Bug 1796079](https://bugzilla.redhat.com/show_bug.cgi?id=1796079): Backport OLM filter by OS and ARCH [#4928](https://github.com/openshift/console/pull/4928)
* [Bug 1829046](https://bugzilla.redhat.com/show_bug.cgi?id=1829046): removes techpreview badge from serverless [#5220](https://github.com/openshift/console/pull/5220)
* [Bug 1840765](https://bugzilla.redhat.com/show_bug.cgi?id=1840765): Fixed legends on data consumption card [#5600](https://github.com/openshift/console/pull/5600)
* [Bug 1829276](https://bugzilla.redhat.com/show_bug.cgi?id=1829276): fix(prun): Rerun cancelled runs | release-4.3 [#5228](https://github.com/openshift/console/pull/5228)
* [Bug 1839036](https://bugzilla.redhat.com/show_bug.cgi?id=1839036): handle embedded pipeline spec in pipelinerun scenario [#5536](https://github.com/openshift/console/pull/5536)
* [Bug 1819289](https://bugzilla.redhat.com/show_bug.cgi?id=1819289): Fix navigation separator background colour [#4864](https://github.com/openshift/console/pull/4864)
* [Bug 1821647](https://bugzilla.redhat.com/show_bug.cgi?id=1821647): Correctly handle Unicode characters in pod terminal [#5198](https://github.com/openshift/console/pull/5198)
* [Full changelog](https://github.com/openshift/console/compare/afb0423dc566a63dd5518c466d157cf34f237396...19a1bfb76f0271cdbf48e3ba8363352fdb4f12a7)


### [console-operator](https://github.com/openshift/console-operator/tree/730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)

* [Bug 1836939](https://bugzilla.redhat.com/show_bug.cgi?id=1836939): Bump godeps to get fix from library-go#799 [#430](https://github.com/openshift/console-operator/pull/430)
* [Full changelog](https://github.com/openshift/console-operator/compare/97050f23a6774c55d66aad271e2a73e76c95cccb...730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)


### [docker-builder](https://github.com/openshift/builder/tree/fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)

* [Bug 1832975](https://bugzilla.redhat.com/show_bug.cgi?id=1832975): use of ARG step in Dockerfile causes panic in imagebuilder [#152](https://github.com/openshift/builder/pull/152)
* [Bug 1821861](https://bugzilla.redhat.com/show_bug.cgi?id=1821861): manage-dockerfile: use the original form of ENV/LABEL [#149](https://github.com/openshift/builder/pull/149)
* [Full changelog](https://github.com/openshift/builder/compare/ba658c8b81615e5ed86ea5836b20ed738a534252...fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)


### [etcd](https://github.com/openshift/etcd/tree/87f03ed81748f8cb7a4014e954762767c976d3ae)

* [Bug 1815634](https://bugzilla.redhat.com/show_bug.cgi?id=1815634): bump etcd v3.3.22 [#53](https://github.com/openshift/etcd/pull/53)
* [Full changelog](https://github.com/openshift/etcd/compare/e30a18f29c8bf1f16507d7983dde2aa51962d6c7...87f03ed81748f8cb7a4014e954762767c976d3ae)


### [haproxy-router](https://github.com/openshift/router/tree/32c8e8d20c2efc42c64cc802976bf51950e0c124)

* [Bug 1816540](https://bugzilla.redhat.com/show_bug.cgi?id=1816540): [4.3] Backport "remove proto-version header field" [#105](https://github.com/openshift/router/pull/105)
* [Bug 1818856](https://bugzilla.redhat.com/show_bug.cgi?id=1818856): Wildcard is not needed to copy subdirectory in dockerfile [#101](https://github.com/openshift/router/pull/101)
* [Full changelog](https://github.com/openshift/router/compare/1526917a58021c8f6e465406501c32fa3fb618b5...32c8e8d20c2efc42c64cc802976bf51950e0c124)


### [hyperkube, tests](https://github.com/openshift/origin/tree/554af56095fa66b6562d1fc20611d03b13bc582d)

* [Bug 1845773](https://bugzilla.redhat.com/show_bug.cgi?id=1845773): [release-4.3] kubelet: block non-forwarded packets from crossing the localhost boundary [#25144](https://github.com/openshift/origin/pull/25144)
* [Bug 1843877](https://bugzilla.redhat.com/show_bug.cgi?id=1843877): UPSTREAM: 91008: Do not swallow NotFound error for DeletePod in dsc.manage [#25063](https://github.com/openshift/origin/pull/25063)
* [Bug 1851606](https://bugzilla.redhat.com/show_bug.cgi?id=1851606): remove problematic upstream client plugin test [#25215](https://github.com/openshift/origin/pull/25215)
* [Bug 1838196](https://bugzilla.redhat.com/show_bug.cgi?id=1838196): stop printing usage help when the server commands exit [#25003](https://github.com/openshift/origin/pull/25003)
* [Bug 1847089](https://bugzilla.redhat.com/show_bug.cgi?id=1847089): UPSTREAM: 86691: fix: azure disk could not mounted on Standard_DC4s/DC2s [#25110](https://github.com/openshift/origin/pull/25110)
* [Bug 1848976](https://bugzilla.redhat.com/show_bug.cgi?id=1848976): reenable jenkins e2e in e2e-gcp-builds [#25171](https://github.com/openshift/origin/pull/25171)
* [Bug 1848622](https://bugzilla.redhat.com/show_bug.cgi?id=1848622): [release-4.3]: UPSTREAM: 92166: fix: GetLabelsForVolume panic issue for azure disk PV [#25138](https://github.com/openshift/origin/pull/25138)
* [Bug 1841988](https://bugzilla.redhat.com/show_bug.cgi?id=1841988): more upstream to installed template switch in image-eco (django this time) [#25046](https://github.com/openshift/origin/pull/25046)
* [Bug 1822487](https://bugzilla.redhat.com/show_bug.cgi?id=1822487): UPSTREAM: 89794: Clean up event messages for errors [#25049](https://github.com/openshift/origin/pull/25049)
* [Bug 1830093](https://bugzilla.redhat.com/show_bug.cgi?id=1830093): provides a temporal fix to improve CRD publishing e2e tests in an HA setup [#24940](https://github.com/openshift/origin/pull/24940)
* [Bug 1829959](https://bugzilla.redhat.com/show_bug.cgi?id=1829959): [release-4.3] Introduce IBMCloud provider, skip/fix tests [#24829](https://github.com/openshift/origin/pull/24829)
* [Bug 1835948](https://bugzilla.redhat.com/show_bug.cgi?id=1835948): unskip template extended tests [#24983](https://github.com/openshift/origin/pull/24983)
* [Bug 1822680](https://bugzilla.redhat.com/show_bug.cgi?id=1822680): UPSTREAM: 88424: Respect ignore-volume-az option in admission plugin [#24855](https://github.com/openshift/origin/pull/24855)
* [Bug 1798461](https://bugzilla.redhat.com/show_bug.cgi?id=1798461): makes unavailableGauge metric to always reflect the current state of a service [#24501](https://github.com/openshift/origin/pull/24501)
* [Bug 1830130](https://bugzilla.redhat.com/show_bug.cgi?id=1830130): Fix nil reference when accessing un-migrated platform status [#24810](https://github.com/openshift/origin/pull/24810)
* [Bug 1813847](https://bugzilla.redhat.com/show_bug.cgi?id=1813847): fixes configmap "extension-apiserver-authentication" not found [#24699](https://github.com/openshift/origin/pull/24699)
* [Full changelog](https://github.com/openshift/origin/compare/e6f1cd7f07e312facef306167d3e7e1827438cce...554af56095fa66b6562d1fc20611d03b13bc582d)


### [insights-operator](https://github.com/openshift/insights-operator/tree/969684362631b5d7c179a575dcd527e20b235fc4)

* [Bug 1825758](https://bugzilla.redhat.com/show_bug.cgi?id=1825758): Collecting config maps [#105](https://github.com/openshift/insights-operator/pull/105)
* [Bug 1821149](https://bugzilla.redhat.com/show_bug.cgi?id=1821149): Cherry-pick release 4.3 Support for specific http proxy for the service [#91](https://github.com/openshift/insights-operator/pull/91)
* [Full changelog](https://github.com/openshift/insights-operator/compare/98ecaca13995901ce2b36c7c01bd6735f95142da...969684362631b5d7c179a575dcd527e20b235fc4)


### [jenkins, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/f1b145a8c81b646f6e921202c920c272a9fd0da5)

* [Bug 1847452](https://bugzilla.redhat.com/show_bug.cgi?id=1847452): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1083](https://github.com/openshift/jenkins/pull/1083)
* [Bug 1843941](https://bugzilla.redhat.com/show_bug.cgi?id=1843941): bump jenkins to 2.222.1 and update plugins [#1067](https://github.com/openshift/jenkins/pull/1067)
* [Bug 1848335](https://bugzilla.redhat.com/show_bug.cgi?id=1848335): [release-4.3] Support Nodejs 12 Agent [#1075](https://github.com/openshift/jenkins/pull/1075)
* [Bug 1826172](https://bugzilla.redhat.com/show_bug.cgi?id=1826172): handle ingress certificate signed by custom ca [#1049](https://github.com/openshift/jenkins/pull/1049)
* [Full changelog](https://github.com/openshift/jenkins/compare/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26...f1b145a8c81b646f6e921202c920c272a9fd0da5)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/0ee51345437a0a9ac035ea9e08ce9a0c039bbcab)

* [Bug 1840762](https://bugzilla.redhat.com/show_bug.cgi?id=1840762): Fix egressVXLANMonitor and egressIPTracker deadlock [#146](https://github.com/openshift/sdn/pull/146)
* [Bug 1839109](https://bugzilla.redhat.com/show_bug.cgi?id=1839109): [backport-4.3] node/vnids: Correctly handle case where NetNamespace watch is far behind [#144](https://github.com/openshift/sdn/pull/144)
* [Full changelog](https://github.com/openshift/sdn/compare/10fba067e586b5e080fdabb720806b42bb268748...0ee51345437a0a9ac035ea9e08ce9a0c039bbcab)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/27c6396760b749b063726186dd14b1e0ea0f00bc)

* BUG 1859308: fix memory leak that leads to unresponsive libvirt URI [#205](https://github.com/openshift/cluster-api-provider-libvirt/pull/205)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/58b373500e8d9180bbfd38ca4663129d1bfa1ee9...27c6396760b749b063726186dd14b1e0ea0f00bc)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/129b63f8a58c2502dfabcd42eda8ae212ca1bb1d)

* BUG 1807762: Drop run-level [#500](https://github.com/openshift/machine-api-operator/pull/500)
* BUG 1807762: Remove explicit securityContext and add granular securitycontextconstraints "use" permissions in machine-api-controllers clusterRole [#635](https://github.com/openshift/machine-api-operator/pull/635)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/409274d4c429590723a1cea87f7435b341d0562f...129b63f8a58c2502dfabcd42eda8ae212ca1bb1d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/55f7317224e7d8badc98879662771a14185e5739)

* [Bug 1845494](https://bugzilla.redhat.com/show_bug.cgi?id=1845494): daemon: fix restoring file logic to avoid unnecessary deletion [#1796](https://github.com/openshift/machine-config-operator/pull/1796)
* [Bug 1855304](https://bugzilla.redhat.com/show_bug.cgi?id=1855304): Parse the kubelet.conf data after an update [#1916](https://github.com/openshift/machine-config-operator/pull/1916)
* [Bug 1846358](https://bugzilla.redhat.com/show_bug.cgi?id=1846358): MCD: tolerate all taints [#1816](https://github.com/openshift/machine-config-operator/pull/1816)
* [Bug 1826021](https://bugzilla.redhat.com/show_bug.cgi?id=1826021): Fix a problem with a greedy regular expression matching more than needed [#1913](https://github.com/openshift/machine-config-operator/pull/1913)
* [Bug 1851949](https://bugzilla.redhat.com/show_bug.cgi?id=1851949): Set the pod-infra-container-image flag in kubelet to ocp pause image [#1877](https://github.com/openshift/machine-config-operator/pull/1877)
* [Bug 1840300](https://bugzilla.redhat.com/show_bug.cgi?id=1840300): kubelet: add log level environment variable [#1752](https://github.com/openshift/machine-config-operator/pull/1752)
* [Bug 1827540](https://bugzilla.redhat.com/show_bug.cgi?id=1827540): pkg/server: disable weak TLS versions [#1681](https://github.com/openshift/machine-config-operator/pull/1681)
* [Bug 1837124](https://bugzilla.redhat.com/show_bug.cgi?id=1837124): templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml [#1738](https://github.com/openshift/machine-config-operator/pull/1738)
* [Bug 1838984](https://bugzilla.redhat.com/show_bug.cgi?id=1838984): [release-4.3] templates: Don't enable machine-config-daemon-host.service by default [#1747](https://github.com/openshift/machine-config-operator/pull/1747)
* [Bug 1811827](https://bugzilla.redhat.com/show_bug.cgi?id=1811827): baremetal: Add missing network-online dependency to kubelet unit [#1549](https://github.com/openshift/machine-config-operator/pull/1549)
* [Bug 1804067](https://bugzilla.redhat.com/show_bug.cgi?id=1804067): Prevent etcd-member-add.sh from running on an active master [#1740](https://github.com/openshift/machine-config-operator/pull/1740)
* [Bug 1825221](https://bugzilla.redhat.com/show_bug.cgi?id=1825221): templates/master:openshift-recovery-tools pass --authfile to podman create [#1661](https://github.com/openshift/machine-config-operator/pull/1661)
* [Bug 1801430](https://bugzilla.redhat.com/show_bug.cgi?id=1801430): Write environment variables needed for etcdctl execution into ~/.profile [#1726](https://github.com/openshift/machine-config-operator/pull/1726)
* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): The Multus CNI configuration file "00-multus.conf" should not be removed [#1646](https://github.com/openshift/machine-config-operator/pull/1646)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Add containernetworking-plugin RPM's bin location to CRI-O config [#1722](https://github.com/openshift/machine-config-operator/pull/1722)
* [Bug 1822269](https://bugzilla.redhat.com/show_bug.cgi?id=1822269): Add new crio.conf field to the template [#1668](https://github.com/openshift/machine-config-operator/pull/1668)
* [Bug 1817458](https://bugzilla.redhat.com/show_bug.cgi?id=1817458): [release-4.3] fix wrongful backup of files not originally on the system [#1686](https://github.com/openshift/machine-config-operator/pull/1686)
* [Bug 1801824](https://bugzilla.redhat.com/show_bug.cgi?id=1801824): kubelet: add more system reservation to protect node [#1458](https://github.com/openshift/machine-config-operator/pull/1458)
* [Bug 1822750](https://bugzilla.redhat.com/show_bug.cgi?id=1822750): [ctrcfg controller] Use a struct array instead of map when creating new ignitions [#1645](https://github.com/openshift/machine-config-operator/pull/1645)
* [Bug 1824282](https://bugzilla.redhat.com/show_bug.cgi?id=1824282): [release 4.3] cri-o: set log level to info [#1635](https://github.com/openshift/machine-config-operator/pull/1635)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f6d1fe753cbcecb3aa1c2d3d3edd4a5d04ffca54...55f7317224e7d8badc98879662771a14185e5739)


### [multus-cni](https://github.com/openshift/multus-cni/tree/419b44ce151c1e996698c9272ac15abe843ec925)

* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): Adds readinessindicatorfile check on CNI DEL [#65](https://github.com/openshift/multus-cni/pull/65)
* [Full changelog](https://github.com/openshift/multus-cni/compare/9e85cb1ba34b516b33da18cee4500be6a61fdf74...419b44ce151c1e996698c9272ac15abe843ec925)


### [oauth-server](https://github.com/openshift/oauth-server/tree/e61459a3903327dddb515a54cd005d4494dfdd38)

* [Bug 1836974](https://bugzilla.redhat.com/show_bug.cgi?id=1836974): reduce ldap connection timeout from 60s to 30s [#43](https://github.com/openshift/oauth-server/pull/43)
* [Bug 1823777](https://bugzilla.redhat.com/show_bug.cgi?id=1823777): Add back some missing metrics [#41](https://github.com/openshift/oauth-server/pull/41)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3065e59ce948f10364d0dd88cb70b860ec65ee2...e61459a3903327dddb515a54cd005d4494dfdd38)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/95686282f6f308e824645f13cd7a9ee1a936216b)

* [Bug 1829328](https://bugzilla.redhat.com/show_bug.cgi?id=1829328): allow patch for updating namespace [#101](https://github.com/openshift/openshift-apiserver/pull/101)
* [Bug 1821500](https://bugzilla.redhat.com/show_bug.cgi?id=1821500): bump to kube 1.17.4 [#109](https://github.com/openshift/openshift-apiserver/pull/109)
* [Bug 1833019](https://bugzilla.redhat.com/show_bug.cgi?id=1833019): include ISI error message changes when determining new generation need [#106](https://github.com/openshift/openshift-apiserver/pull/106)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a98ed7f79eb31b4e85149d4d1c9cc152df55fcaf...95686282f6f308e824645f13cd7a9ee1a936216b)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/118d87ddde9ee36ccea08b17461f3c6dca3a2ff5)

* [Bug 1831888](https://bugzilla.redhat.com/show_bug.cgi?id=1831888): StatefulSets v1 do not trigger on image changes [#116](https://github.com/openshift/openshift-controller-manager/pull/116)
* [Bug 1813420](https://bugzilla.redhat.com/show_bug.cgi?id=1813420): fix img reg ref on ICT if OCM knows img reg host before apiserver [#75](https://github.com/openshift/openshift-controller-manager/pull/75)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/07837c7258def4d41b25f5061217c5ea048255ee...118d87ddde9ee36ccea08b17461f3c6dca3a2ff5)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/06c41918200d7ad324b10ae959d1240083f13513)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet: set cpu requests [#49](https://github.com/openshift/openshift-state-metrics/pull/49)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/c01d2de651071389d2621c46e934fd9cb2bf4b8d...06c41918200d7ad324b10ae959d1240083f13513)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/3af2a4b1875bc4af5dea61044792e6626a4d6017)

* [Bug 1859748](https://bugzilla.redhat.com/show_bug.cgi?id=1859748): fix(resolver): Exclude all installed packages in dependency search [#1676](https://github.com/operator-framework/operator-lifecycle-manager/pull/1676)
* [Bug 1856125](https://bugzilla.redhat.com/show_bug.cgi?id=1856125): Resolve only default channels [#1634](https://github.com/operator-framework/operator-lifecycle-manager/pull/1634)
* [Bug 1843703](https://bugzilla.redhat.com/show_bug.cgi?id=1843703): Deleting a CSV removes related CSV metrics [#1569](https://github.com/operator-framework/operator-lifecycle-manager/pull/1569)
* [Bug 1846220](https://bugzilla.redhat.com/show_bug.cgi?id=1846220): Update PkgManifest upon catsrc update [#1581](https://github.com/operator-framework/operator-lifecycle-manager/pull/1581)
* [Bug 1843694](https://bugzilla.redhat.com/show_bug.cgi?id=1843694): fix(resolver): don't pick operator from same package when resolve requiredAPI [#1571](https://github.com/operator-framework/operator-lifecycle-manager/pull/1571)
* [Bug 1840939](https://bugzilla.redhat.com/show_bug.cgi?id=1840939): fix(queues): use a single gc queue [#1553](https://github.com/operator-framework/operator-lifecycle-manager/pull/1553)
* [Bug 1827822](https://bugzilla.redhat.com/show_bug.cgi?id=1827822): Generation bug 4.3 [#1485](https://github.com/operator-framework/operator-lifecycle-manager/pull/1485)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): feat(catalogs): add spec validation for sourcetypes [#1508](https://github.com/operator-framework/operator-lifecycle-manager/pull/1508)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): Prevent nil pointer dereference [#1486](https://github.com/operator-framework/operator-lifecycle-manager/pull/1486)
* [Bug 1821318](https://bugzilla.redhat.com/show_bug.cgi?id=1821318): feat(packagemanifest): add default os/arch labels if not present [#1432](https://github.com/operator-framework/operator-lifecycle-manager/pull/1432)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/5ff376fd8c14bf6a99b314ad402ceb5641f71fdd...3af2a4b1875bc4af5dea61044792e6626a4d6017)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/cb36f0b17d7c92c3085d54e54efe0bf279e07e04)

* [Bug 1849153](https://bugzilla.redhat.com/show_bug.cgi?id=1849153): Ensure correct registry image [#317](https://github.com/operator-framework/operator-marketplace/pull/317)
* [Bug 1805271](https://bugzilla.redhat.com/show_bug.cgi?id=1805271): increase initial delay for appregistry pods [#301](https://github.com/operator-framework/operator-marketplace/pull/301)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/e0ddc0df2d65d935b1e33f203b781e99d505ad5b...cb36f0b17d7c92c3085d54e54efe0bf279e07e04)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/a9ae6f9f68c17af4f7d60e5292603f05cb3a3b7e)

* [Bug 1849152](https://bugzilla.redhat.com/show_bug.cgi?id=1849152): fix(server): make a copy of the db before migrating it [#364](https://github.com/operator-framework/operator-registry/pull/364)
* [Bug 1843647](https://bugzilla.redhat.com/show_bug.cgi?id=1843647): Detect replacement cycles while adding package channels [#345](https://github.com/operator-framework/operator-registry/pull/345)
* [Bug 1816185](https://bugzilla.redhat.com/show_bug.cgi?id=1816185): fix(dns): fix slow dns resolution of localhost for grpc health probe [#331](https://github.com/operator-framework/operator-registry/pull/331)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/36ee3a437614ca1cb781465e590613e01556e756...a9ae6f9f68c17af4f7d60e5292603f05cb3a3b7e)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/33f333ed95cc1a9c5c86e6b8f57fcae1e70d4102)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): pkg/alertmanager: mergepatch alertmanager containers [#75](https://github.com/openshift/prometheus-operator/pull/75)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/a6330ca349aae64643c2d0d7dff08ed2a444ccd5...33f333ed95cc1a9c5c86e6b8f57fcae1e70d4102)


### [telemeter](https://github.com/openshift/telemeter/tree/1c05598922c2a9160c83057e7786de06a8b0080b)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet/telemeter: set cpu requests, unset limits [#346](https://github.com/openshift/telemeter/pull/346)
* [Full changelog](https://github.com/openshift/telemeter/compare/227ae59d226d17eee26a60621bc884f4e8e83254...1c05598922c2a9160c83057e7786de06a8b0080b)