# 4.4.29

Created: 2020-10-21 02:51:46 +0000 UTC

Image Digest: `sha256:635790256b4e7bb39037af057250b83bd636809f0df393c28f9548878e91b917`

Promoted from registry.svc.ci.openshift.org/ocp-s390x/release-s390x:4.4.0-0.nightly-s390x-2020-10-21-024102


## Changes from 4.4.9

### Components

* Kubernetes 1.17.1
* Red Hat Enterprise Linux CoreOS upgraded from 44.81.202006171550-0 to 44.82.202010081740-0


### Rebuilt images without code change

* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [4d1663e7](https://github.com/openshift/cluster-api-provider-baremetal/commit/4d1663e7f68c321c2920d3dc3189bd903cb36581) `sha256:1aa7d995ae7d2a528fbd389f823fcde28b8e6e460a00b70ffa2c1f73ed27a7bc`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [280ef652](https://github.com/openshift/cluster-authentication-operator/commit/280ef6529afe9a05bbee0d0d07c5525afaabbc34) `sha256:99ab74783eca16ec7012739222a8905885aeeaf852ac272ab06cb8c1bac41aa8`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [9c4a47c5](https://github.com/openshift/cluster-autoscaler-operator/commit/9c4a47c56f7fb7cd2677d4adbda48f9a84d3be6a) `sha256:7e0b6415783aca9cb3cf1e62960efbac69adbfcdf30a69c61994197b33fd5f9a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [04c97c30](https://github.com/openshift/cluster-bootstrap/commit/04c97c30e79430ad836fceff4c6f8c9429be6663) `sha256:65377fec3656c06f37f0c0b7769ce9b8e3b95930221fab0bd055b4b94f336a1a`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [39760557](https://github.com/openshift/cluster-ingress-operator/commit/3976055718cd505db8682088f7956df09df0cb0f) `sha256:de956bb56bbd90d373b845939bc392bbe8bd23167517745da0bdb938d6ff3394`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [bb6fb49e](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/bb6fb49e4f0b33baea88befb6cbe304296f8d294) `sha256:282c21613d71b970c3e3220c1780112a9b8316310eb9a7cd6e4100ffe4105d3b`
* [cluster-node-tuned](https://github.com/openshift/openshift-tuned) git [927879ff](https://github.com/openshift/openshift-tuned/commit/927879ff50be0cec707be97c357d2891786d346f) `sha256:43ebefb45ad17da58ab933bec57ce30dc4518ac11d7e1e877ea7217047e123f1`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [2473a80c](https://github.com/openshift/cluster-node-tuning-operator/commit/2473a80ca8401732723206d4f6af71a5237c8ddc) `sha256:c81578c9b524e4e4b494e407e9bf520e56798425b6d2820d8635b1c187ca31d0`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [2786635b](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/2786635b626e559768a78ad0e75852478727342f) `sha256:2c8fc03fdf603fef9713b9e7854ffb4f331ad70569ea266f5a49f76b97907cda`
* [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator) git [aa7927fb](https://github.com/openshift/cluster-svcat-apiserver-operator/commit/aa7927fbfe8bf165c5b84167b7c3f5d9cb394e14) `sha256:ac61562a13e0c907a20676cdd2d6a9c6750d1e7dcea21d186f3377b9d4054f32`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [333a3cbb](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/333a3cbb2f658dc5cdc846d003649f8cbc3cde7b) `sha256:b2fee9bb0f6c1cb0936505135abcad2fc32597ce85602523041d87b230effc50`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:5e71a6224a37ccf522119cd0300a4731f8dc34f9e5d9d7658820d119e1c95405`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:dc1e52f7f03b8f5512c2f94c39bcaeee3e6c1f047950777f6f42db7d6ffa9671`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [cdba584f](https://github.com/openshift/containernetworking-plugins/commit/cdba584fe8c6d8be42cf3677b41d1646efce8e57) `sha256:2538e558bb21d97c5dc08e2e9a5bc2979d428fbaa2162d7d0162839a478a8412`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [f758cee9](https://github.com/openshift/csi-external-snapshotter/commit/f758cee957ce490d20334f675b5b938eccd03d9e) `sha256:e448db80170346a6c6bce996c3b94a4e67fe6acf13b1227c45ed27743f17729e`
* [docker-builder](https://github.com/openshift/builder) git [bea4ef19](https://github.com/openshift/builder/commit/bea4ef19e0408ec14ae7c16224213fc97ae0ddbc) `sha256:3079399e7401494d119914b02fbd3ed219b4a73ffa9367639b94d84e81a25bcd`
* [docker-registry](https://github.com/openshift/image-registry) git [af61c0df](https://github.com/openshift/image-registry/commit/af61c0dfdb169d9411fa06cac8d7f269da882adf) `sha256:585e7848cc3908e1f5e5ffed03e17a5c76147ed91c80b9ae7bb488cbb5640574`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [8f2182e7](https://github.com/openshift/k8s-prometheus-adapter/commit/8f2182e7a848b65e20b2b04d1ea0188274d4a9a6) `sha256:876673484863a0e129facd5138a175f150a883853241d836500e3459ddaaf315`
* [kube-client-agent](https://github.com/openshift/kubecsr) git [e61c574c](https://github.com/openshift/kubecsr/commit/e61c574c85e4309f867e6ac0b147cf3f15a07359) `sha256:5445b4f99e02d9baf0219ab0bc724e2ea0569707deb84b2edd736a0ea2a31e27`
* [kube-etcd-signer-server](https://github.com/openshift/kubecsr) git [e61c574c](https://github.com/openshift/kubecsr/commit/e61c574c85e4309f867e6ac0b147cf3f15a07359) `sha256:8452e295e9416f36ec961b7664fb4577744d4f7ba19e833920930892a834ab04`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [b4791e11](https://github.com/openshift/kube-rbac-proxy/commit/b4791e115f127cd1548fd7ead8e5479ac7546e28) `sha256:50d20a747a14c0e802eb152d2bacc2e351e5189398ce1a804a6d0f8dd074ff09`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [b659f76c](https://github.com/openshift/kube-state-metrics/commit/b659f76cb3bb9dffa5561a758d281722f74784ce) `sha256:133e41c1318c91e58a2be3c472d900c81ce87c0a5282f554dbb54a9fe626cd2a`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [5a52f4f5](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/5a52f4f5e86325130f9179a6cb2293a2892037bc) `sha256:deeb3867c6b0792c77291cbb4a59e9ac563164f2deb537bb94e3b0ddb455dfba`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:05c7f5b63e1fa215bcb4b4c014d5d0880ec4ca26282434493f7269c7047e2125`
* machine-os-content `sha256:ca78e448bd472a05272bb63c0146f4872c68d6d75b0c48ebe413829914b622a5`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [24135de2](https://github.com/openshift/mdns-publisher/commit/24135de29fc348f3ef455a288013cc1912d969bc) `sha256:b3b359bc914a38a675fab7e9a284d1f44f627cc131bad9e04cd94e25af02bbb7`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [9dc63698](https://github.com/openshift/multus-admission-controller/commit/9dc636987dde9dd4032fde61968badc99b56310e) `sha256:a4faac92fac4d5ac2a42499a4da90636fce83b226ff46fc0eb6894c6e7fe4c36`
* [multus-cni](https://github.com/openshift/multus-cni) git [812441ce](https://github.com/openshift/multus-cni/commit/812441ce17fa045791974640151ad4aa05948b59) `sha256:700c9df2701096a592f4b99ada165ce49bafa0d1c6550263082a0341a1b5e80d`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1322dc43](https://github.com/openshift/route-override-cni/commit/1322dc43712e12a021f5e83c8d752e7d8c30aa6e) `sha256:707da02d0b6df6f3093a73f9a1caebfdfa9b8c5fb2b5b146f62b7bb3f2d99b6d`
* [must-gather](https://github.com/openshift/must-gather) git [3cac0b53](https://github.com/openshift/must-gather/commit/3cac0b5359daebde19240b70c45c860a61e61df8) `sha256:ead8952791271b7fe8a58fd5eac357a80583e17acbc40c2b4768a93b5c13c70b`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [3d0621eb](https://github.com/openshift/oauth-proxy/commit/3d0621eb72c9dd1c036505363032468a9016f381) `sha256:21a4a6a8166665264fde9fa0f4ca0c13dba97118227c505ced40793755990271`
* [oauth-server](https://github.com/openshift/oauth-server) git [054e15e5](https://github.com/openshift/oauth-server/commit/054e15e5f629395d4a0b5457b5b594790149d26e) `sha256:de9b4d8d0763c243b38bcbd688b3546a69a56d72710fa88b82ce597571393219`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [99a61c6c](https://github.com/openshift/openshift-apiserver/commit/99a61c6c6bd83cfc326ea8759633bd0e3bbc6387) `sha256:9241870397b0f5b615945e4ac33558ac83a7962c10c5cd6367ba539c9f829ce0`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [f13d31a1](https://github.com/openshift/openshift-state-metrics/commit/f13d31a172aa3001b9ddb15b675048fe333d10ff) `sha256:dc8da29d6404bb556958b015ce61cf8aecc74104d7bd7423a41319b8af03c6dd`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [00985729](https://github.com/openshift/prom-label-proxy/commit/00985729c9eee39a6a7faf7747c8afc1fdfb54df) `sha256:c109c84684c50c70d63af79ab04f3232ebe7a8a5f2014a35b77d4716b360d43e`
* [prometheus](https://github.com/openshift/prometheus) git [2c426354](https://github.com/openshift/prometheus/commit/2c4263549c5c3a812d59f49b9183cbc65383abc4) `sha256:c24c6d8854ee83f981d35817ebf570ea20c0cbba5ca2f3fe634430da49e5088f`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [6299b49b](https://github.com/openshift/prometheus-alertmanager/commit/6299b49b7e11724cf80ed54ae6065368d0ea2163) `sha256:5101530e25e616f9fc768231e2e29ed537b7491a1ce4dde23a3f05705df10554`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e5a04d6a](https://github.com/openshift/service-ca-operator/commit/e5a04d6a080f60ada51cfdbb7faa2883aa59b03f) `sha256:357dba52705b5ec12cc148693937f5f39456ac595dcc6bcd390d289bed7932b3`
* [service-catalog](https://github.com/openshift/service-catalog) git [6f75f804](https://github.com/openshift/service-catalog/commit/6f75f8047dfab6ca8b979833f7f2a6036deee488) `sha256:d5b2e22cb58aec6d5c1c683d5b97a1e577d9bd16656bc7e4c07bdaac02e62bf7`
* [telemeter](https://github.com/openshift/telemeter) git [debbf860](https://github.com/openshift/telemeter/commit/debbf8601f20ad6606c2672f4dd6e9b64c7f2490) `sha256:0b0ee4738cced8a8d03ae600abf55627d64b74d1170747bef399d47bb645044a`
* [thanos](https://github.com/openshift/thanos) git [40b1b225](https://github.com/openshift/thanos/commit/40b1b225e14d3a6f8fae427b05920fc5bf667798) `sha256:c1cf5deb8f90f357fe4e5166d07aa35c44f08fae33384bc8585e8f64765e6ebf`


### [aws-machine-controllers, azure-machine-controllers, cli, cli-artifacts, deployer, gcp-machine-controllers, ironic, ironic-inspector, ironic-ipa-downloader, ironic-machine-os-downloader, ironic-static-ip-manager, keepalived-ipfailover, kuryr-cni, kuryr-controller](https://github.com/openshift/oc/tree/9cd74832770a79235d5b2ee9b657eac79fd0768c)

* [Bug 1872520](https://bugzilla.redhat.com/show_bug.cgi?id=1872520): Allow prune to move on with Removed registry [#533](https://github.com/openshift/oc/pull/533)
* [Bug 1872520](https://bugzilla.redhat.com/show_bug.cgi?id=1872520): Replace bitbucket.org/ww/goautoneg with its mirror [#578](https://github.com/openshift/oc/pull/578)
* [Bug 1847323](https://bugzilla.redhat.com/show_bug.cgi?id=1847323): Place apache license in cli-artifacts [#472](https://github.com/openshift/oc/pull/472)
* [Bug 1808174](https://bugzilla.redhat.com/show_bug.cgi?id=1808174): bump(golang.org/x/crypto|net|sys) [#428](https://github.com/openshift/oc/pull/428)
* [Full changelog](https://github.com/openshift/oc/compare/d038424d6d4f1cc39ad586ac0d36dac3a7a37ceb...9cd74832770a79235d5b2ee9b657eac79fd0768c)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/93acfac3b42a93247c45bad5b5ab50432b3c8bd3)

* [Bug 1872887](https://bugzilla.redhat.com/show_bug.cgi?id=1872887): use https for lb probes in Azure UPI [#4202](https://github.com/openshift/installer/pull/4202)
* [Bug 1880988](https://bugzilla.redhat.com/show_bug.cgi?id=1880988): openstack: Upgrade the CI build image [#4204](https://github.com/openshift/installer/pull/4204)
* [Bug 1880202](https://bugzilla.redhat.com/show_bug.cgi?id=1880202): destroy/gcp: correct extract service account email from IAM policy binding member [#4197](https://github.com/openshift/installer/pull/4197)
* [Bug 1862113](https://bugzilla.redhat.com/show_bug.cgi?id=1862113): bump RHCOS images for CVE-2020-10713 [#3985](https://github.com/openshift/installer/pull/3985)
* [Bug 1866099](https://bugzilla.redhat.com/show_bug.cgi?id=1866099): Dockerfile.upi.ci: Add GCP UPI required binaries. [#3559](https://github.com/openshift/installer/pull/3559)
* [Bug 1857816](https://bugzilla.redhat.com/show_bug.cgi?id=1857816): adjust Azure UPI disk size to the same used in IPI [#3904](https://github.com/openshift/installer/pull/3904)
* [Bug 1829894](https://bugzilla.redhat.com/show_bug.cgi?id=1829894): OpenStack: Set vrrp protocol number instead of name [#3528](https://github.com/openshift/installer/pull/3528)
* Baremetal: Bug 1840106: Pull data from ironic inspector and annotate BareMetalHost [#3656](https://github.com/openshift/installer/pull/3656)
* [Bug 1848021](https://bugzilla.redhat.com/show_bug.cgi?id=1848021): Add the --pod-infra-container-image flag to the kubelet service [#3766](https://github.com/openshift/installer/pull/3766)
* [Bug 1847957](https://bugzilla.redhat.com/show_bug.cgi?id=1847957): OpenStack: Wait for router interface to create FIP [#3764](https://github.com/openshift/installer/pull/3764)
* [Full changelog](https://github.com/openshift/installer/compare/1541bf917973186bbab6a5f895f08db4334a5d9a...93acfac3b42a93247c45bad5b5ab50432b3c8bd3)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e27e67f4bb2436b2205341e3ebb3ef7f1bfcc266)

* [Bug 1840106](https://bugzilla.redhat.com/show_bug.cgi?id=1840106): Backport get-hardware-details [#87](https://github.com/openshift/baremetal-operator/pull/87)
* [Bug 1843230](https://bugzilla.redhat.com/show_bug.cgi?id=1843230): Read BMH status from annotation [#70](https://github.com/openshift/baremetal-operator/pull/70)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e4aebc7ac9d7b0b1b7f754bebf2a4a3d727861bc...e27e67f4bb2436b2205341e3ebb3ef7f1bfcc266)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/83607e3f8139f19b2bc397ea969e46f9c0b11bf0)

* [Bug 1862898](https://bugzilla.redhat.com/show_bug.cgi?id=1862898): Move haproxy port to 9445 due to conflict with KCM [#88](https://github.com/openshift/baremetal-runtimecfg/pull/88)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/2ee5d621eb5f8b94af200e63d6a4a1163eb7ac68...83607e3f8139f19b2bc397ea969e46f9c0b11bf0)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/bb9e6fb69f46e8678e6084d2b1fce40afc0c4bf1)

* [Bug 1808175](https://bugzilla.redhat.com/show_bug.cgi?id=1808175): CVE-2020-9283 ose-cloud-credential-operator-container: golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic [#194](https://github.com/openshift/cloud-credential-operator/pull/194)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/37f5d3c781ef0f84bbbee5124e54352efb48e324...bb9e6fb69f46e8678e6084d2b1fce40afc0c4bf1)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/2ec541e3e31778428a75e0fc16469ba22d94e4bd)

* BUG 1835160: Fallback to status if replicas nil in spec [#153](https://github.com/openshift/kubernetes-autoscaler/pull/153)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/6768c3c3d76d1def41eebeb3095a0ff5d99d7908...2ec541e3e31778428a75e0fc16469ba22d94e4bd)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/b3a79202af78bd1cdeb153468d8175a63e850660)

* [Bug 1856763](https://bugzilla.redhat.com/show_bug.cgi?id=1856763): update golang version to be 1.13 [#142](https://github.com/openshift/cluster-config-operator/pull/142)
* [Bug 1825194](https://bugzilla.redhat.com/show_bug.cgi?id=1825194): oc explain still shows "The default is auth.openshift.io" [#131](https://github.com/openshift/cluster-config-operator/pull/131)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/b3ef7879dbe95c4a810d7fe7f6eab348badcbbfb...b3a79202af78bd1cdeb153468d8175a63e850660)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/7302adb93e33bbd589581eef4d821c493fb040a7)

* [Bug 1845623](https://bugzilla.redhat.com/show_bug.cgi?id=1845623): Add extra check for v1alpha CRD [#42](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/42)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/4492120dbebb8dd283f1ba9caec67f9f605cda1c...7302adb93e33bbd589581eef4d821c493fb040a7)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/122ed908cf182b95cb1a4e2a7c87d03854ba444d)

* [Bug 1847197](https://bugzilla.redhat.com/show_bug.cgi?id=1847197): Tolerate all taints [#179](https://github.com/openshift/cluster-dns-operator/pull/179)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/de1a3573c417ccbc00abbfa436ecd90bb1730bb6...122ed908cf182b95cb1a4e2a7c87d03854ba444d)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/fe82fae872f7eda98f1b0a2d676b4e5f536c15d7)

* [Bug 1869681](https://bugzilla.redhat.com/show_bug.cgi?id=1869681): handle IP migration when DNS fails on Azure IPI [#419](https://github.com/openshift/cluster-etcd-operator/pull/419)
* [Bug 1829645](https://bugzilla.redhat.com/show_bug.cgi?id=1829645): add relatedobjects for immediate creation by CVO [#315](https://github.com/openshift/cluster-etcd-operator/pull/315)
* [Bug 1846025](https://bugzilla.redhat.com/show_bug.cgi?id=1846025): Adding rollbackcopy subcommand [#379](https://github.com/openshift/cluster-etcd-operator/pull/379)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/6a36702a6bba06a2f93cfc062d28fd8889122a64...fe82fae872f7eda98f1b0a2d676b4e5f536c15d7)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/230861f844044ad97ce5574fcba23aa33c15bac7)

* [Bug 1873534](https://bugzilla.redhat.com/show_bug.cgi?id=1873534): Using last finished job and disabling retries [#600](https://github.com/openshift/cluster-image-registry-operator/pull/600)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/7081ab0aa79ef5cd1adee75c071dd36c8402dbfd...230861f844044ad97ce5574fcba23aa33c15bac7)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e38ca0c3c57890d27d48f7cc6865d0052afcd515)

* [Bug 1876484](https://bugzilla.redhat.com/show_bug.cgi?id=1876484): static-pod-installer: remove deadlock by recreating inst… [#959](https://github.com/openshift/cluster-kube-apiserver-operator/pull/959)
* [Bug 1863076](https://bugzilla.redhat.com/show_bug.cgi?id=1863076): LatencySensitive feature gate allows upgrades [#923](https://github.com/openshift/cluster-kube-apiserver-operator/pull/923)
* [Bug 1851831](https://bugzilla.redhat.com/show_bug.cgi?id=1851831): static pod: don't wait for 6080 in apiserver container [#892](https://github.com/openshift/cluster-kube-apiserver-operator/pull/892)
* [Bug 1851066](https://bugzilla.redhat.com/show_bug.cgi?id=1851066): 4.4: use "ss" instead of "lsof" to check port; check on container start [#891](https://github.com/openshift/cluster-kube-apiserver-operator/pull/891)
* [Bug 1829580](https://bugzilla.redhat.com/show_bug.cgi?id=1829580): Add e2e test that ensures stale condition is removed [#845](https://github.com/openshift/cluster-kube-apiserver-operator/pull/845)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/41fffb69e30889020615fca02a23df939d49d1b0...e38ca0c3c57890d27d48f7cc6865d0052afcd515)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/2436db06d5c3c854080f25fc1654c8e2594395f3)

* [Bug 1876484](https://bugzilla.redhat.com/show_bug.cgi?id=1876484): static-pod-installer: remove deadlock by recreating inst… [#457](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/457)
* [Bug 1851397](https://bugzilla.redhat.com/show_bug.cgi?id=1851397): Fix port check 4.4 [#423](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/423)
* [Bug 1816806](https://bugzilla.redhat.com/show_bug.cgi?id=1816806): Fix gce cloud provider permissions [#426](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/426)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/8a6f5da6ad52122ffdff7a97367d79976a9cc6ec...2436db06d5c3c854080f25fc1654c8e2594395f3)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/60700572b7ae38d060915a2355df9dfecce46572)

* [Bug 1876484](https://bugzilla.redhat.com/show_bug.cgi?id=1876484): static-pod-installer: remove deadlock by recreating installers that disappear [#284](https://github.com/openshift/cluster-kube-scheduler-operator/pull/284)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/24a82622f7f5e82a48ced803aa3ff1a62e065dbd...60700572b7ae38d060915a2355df9dfecce46572)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/5bd52b52867fcb88da521c099408568d5067fa0c)

* BUG 1854385: Update golang/crypto to bring CVE-2020-9283 [#76](https://github.com/openshift/cluster-machine-approver/pull/76)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/1bb09ce6d253e9127d7a1c69c0fdf9c29ea9d388...5bd52b52867fcb88da521c099408568d5067fa0c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/571c003581b9e6bed1726310be35bd982b0dbfe5)

* BUG 1856767: manifests/telemetry: replace apiserver_request_count with apiserver_r… [#880](https://github.com/openshift/cluster-monitoring-operator/pull/880)
* [Bug 1857597](https://bugzilla.redhat.com/show_bug.cgi?id=1857597): Do not report 'all' in relatedObjects [#855](https://github.com/openshift/cluster-monitoring-operator/pull/855)
* [Bug 1845444](https://bugzilla.redhat.com/show_bug.cgi?id=1845444): KubeApiLatency alert firing even though not all conditions are matched [#809](https://github.com/openshift/cluster-monitoring-operator/pull/809)
* [Bug 1850615](https://bugzilla.redhat.com/show_bug.cgi?id=1850615): fix AlertmanagerConfigInconsistent alert [#824](https://github.com/openshift/cluster-monitoring-operator/pull/824)
* [Bug 1813221](https://bugzilla.redhat.com/show_bug.cgi?id=1813221): remove cpu limits for config reloader [#841](https://github.com/openshift/cluster-monitoring-operator/pull/841)
* [Bug 1851920](https://bugzilla.redhat.com/show_bug.cgi?id=1851920): Add namespace selector to CPUThrottlingHigh [#833](https://github.com/openshift/cluster-monitoring-operator/pull/833)
* [Bug 1813221](https://bugzilla.redhat.com/show_bug.cgi?id=1813221): jsonnet: add missing resource requests for alertmanager sidecar [#818](https://github.com/openshift/cluster-monitoring-operator/pull/818)
* [Bug 1834913](https://bugzilla.redhat.com/show_bug.cgi?id=1834913): bump kubernetes-monitoring/kubernetes-mixin [#787](https://github.com/openshift/cluster-monitoring-operator/pull/787)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/784585a66c36745fae6f46e33bed1ffed1e92384...571c003581b9e6bed1726310be35bd982b0dbfe5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/15f5d4e9140d78a1b4c1724c3e13b6e02775b550)

* [Bug 1881430](https://bugzilla.redhat.com/show_bug.cgi?id=1881430): openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 [#800](https://github.com/openshift/cluster-network-operator/pull/800)
* [Bug 1875438](https://bugzilla.redhat.com/show_bug.cgi?id=1875438): [release-4.4] OVN: Handle OVN db upgrades [#781](https://github.com/openshift/cluster-network-operator/pull/781)
* [Bug 1858217](https://bugzilla.redhat.com/show_bug.cgi?id=1858217): bump golang.org/x/text/encoding [#760](https://github.com/openshift/cluster-network-operator/pull/760)
* [Bug 1823709](https://bugzilla.redhat.com/show_bug.cgi?id=1823709): [backport 4.4] NetworkAttachmentDefinitions should have output for "oc explain" [#735](https://github.com/openshift/cluster-network-operator/pull/735)
* [Bug 1855895](https://bugzilla.redhat.com/show_bug.cgi?id=1855895): Add netns mount [#731](https://github.com/openshift/cluster-network-operator/pull/731)
* [Bug 1857742](https://bugzilla.redhat.com/show_bug.cgi?id=1857742): [release-4.4] Set timeoutSeconds to reflect expected timeout for OVS commands [#724](https://github.com/openshift/cluster-network-operator/pull/724)
* [Bug 1858183](https://bugzilla.redhat.com/show_bug.cgi?id=1858183): Block MCS and metadata for host-networking pods [#715](https://github.com/openshift/cluster-network-operator/pull/715)
* [Bug 1851903](https://bugzilla.redhat.com/show_bug.cgi?id=1851903): Kuryr: Mount /run/netns to ensure netns access [#684](https://github.com/openshift/cluster-network-operator/pull/684)
* [Bug 1851489](https://bugzilla.redhat.com/show_bug.cgi?id=1851489): The DHCP CNI daemonset should mount the netns paths [#681](https://github.com/openshift/cluster-network-operator/pull/681)
* [Bug 1847558](https://bugzilla.redhat.com/show_bug.cgi?id=1847558): Drop ovn-octavia provider limitation for multiprotocol listeners [#675](https://github.com/openshift/cluster-network-operator/pull/675)
* [Bug 1849540](https://bugzilla.redhat.com/show_bug.cgi?id=1849540): Split etcd sg rule ports range into different sg rules [#678](https://github.com/openshift/cluster-network-operator/pull/678)
* [Bug 1847675](https://bugzilla.redhat.com/show_bug.cgi?id=1847675): [4.4] mount /var/run/netns rslave in ovnkube [#669](https://github.com/openshift/cluster-network-operator/pull/669)
* [Bug 1844245](https://bugzilla.redhat.com/show_bug.cgi?id=1844245): bindata/network/ovn-kubernetes/ovnkube-: update resource requests [#662](https://github.com/openshift/cluster-network-operator/pull/662)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/7f0a485dbdaa7049e889484713f9325dd3259e9c...15f5d4e9140d78a1b4c1724c3e13b6e02775b550)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/1131126f370d4f346a6848298a1aeb0bcf4f880a)

* [Bug 1861874](https://bugzilla.redhat.com/show_bug.cgi?id=1861874): account for nil DaemonSet returned from library-go [#166](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/166)
* [Bug 1852249](https://bugzilla.redhat.com/show_bug.cgi?id=1852249): ensure progressing is not set to false if version is missing [#160](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/160)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/7408e19d09e6660d0e50ed3ff2846359da9b05a3...1131126f370d4f346a6848298a1aeb0bcf4f880a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/81940d50d13cb7dd3cffc3fd0494cea01993b98b)

* [Bug 1858800](https://bugzilla.redhat.com/show_bug.cgi?id=1858800): add UID deallocation logic [#33](https://github.com/openshift/cluster-policy-controller/pull/33)
* [Bug 1856763](https://bugzilla.redhat.com/show_bug.cgi?id=1856763): update golang version to be 1.13 [#31](https://github.com/openshift/cluster-policy-controller/pull/31)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/31debebccba6499bffbb6b315f7437117cbe2d83...81940d50d13cb7dd3cffc3fd0494cea01993b98b)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5691d87d99a8ac8852414654ce5b1b97aff6e67c)

* [Bug 1865889](https://bugzilla.redhat.com/show_bug.cgi?id=1865889): Fix Jenkins Monitored templates typo and other updates [#294](https://github.com/openshift/cluster-samples-operator/pull/294)
* [Bug 1871832](https://bugzilla.redhat.com/show_bug.cgi?id=1871832): initial create errors should map to SamplesExists instead of ImageChangesInProgress [#315](https://github.com/openshift/cluster-samples-operator/pull/315)
* [Bug 1792102](https://bugzilla.redhat.com/show_bug.cgi?id=1792102): Install imagestreams and templates on Power and Z [4.4] [#297](https://github.com/openshift/cluster-samples-operator/pull/297)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/fc2f9d500f46c3de5caef7474886872b67e3d916...5691d87d99a8ac8852414654ce5b1b97aff6e67c)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/35e6ecab36657462f5ce990fc728ff00125b112c)

* [Bug 1879109](https://bugzilla.redhat.com/show_bug.cgi?id=1879109): Move notUpgradeable check later to prevent z-stream upgrade failures [#87](https://github.com/openshift/cluster-storage-operator/pull/87)
* [Bug 1858168](https://bugzilla.redhat.com/show_bug.cgi?id=1858168): Includes validation check for VolumeSnapshot v1alpha1 CRDs [#61](https://github.com/openshift/cluster-storage-operator/pull/61)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a9548e6d0ac621a5c6e8e3544ca680280a1ca746...35e6ecab36657462f5ce990fc728ff00125b112c)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/9515b232c706cdd2a842a381bba5cbd6497aaf9c)

* [Bug 1841239](https://bugzilla.redhat.com/show_bug.cgi?id=1841239): Avoid pre-creating clusteroperators that should be excluded [#376](https://github.com/openshift/cluster-version-operator/pull/376)
* [Bug 1848783](https://bugzilla.redhat.com/show_bug.cgi?id=1848783): Expand supported set of probe field mutations [#390](https://github.com/openshift/cluster-version-operator/pull/390)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b26c35c956cd9b22d0ef0eceb515bd55e057d5a2...9515b232c706cdd2a842a381bba5cbd6497aaf9c)


### [console](https://github.com/openshift/console/tree/92af7badb65ccf7ad3c2538cac412ad1d67fdf8d)

* [Bug 1880478](https://bugzilla.redhat.com/show_bug.cgi?id=1880478): Empty secret should be editable in generic secret form [#6680](https://github.com/openshift/console/pull/6680)
* [Bug 1881058](https://bugzilla.redhat.com/show_bug.cgi?id=1881058): Tighten cipher usage to library-go [#6694](https://github.com/openshift/console/pull/6694)
* [Bug 1875381](https://bugzilla.redhat.com/show_bug.cgi?id=1875381): Manual cherrypick fix log whitescreen (release-4.4) [#6513](https://github.com/openshift/console/pull/6513)
* [Bug 1868035](https://bugzilla.redhat.com/show_bug.cgi?id=1868035): fix bug where Routes created set route.spec.port.targetP… [#6288](https://github.com/openshift/console/pull/6288)
* [Bug 1824429](https://bugzilla.redhat.com/show_bug.cgi?id=1824429): Make Tag field optional for the ImageStreamImport validation schema [#5141](https://github.com/openshift/console/pull/5141)
* [Bug 1859834](https://bugzilla.redhat.com/show_bug.cgi?id=1859834): Fix crash (white screen) when cancel Pipeline Create with open sidebar [#6083](https://github.com/openshift/console/pull/6083)
* [Bug 1804866](https://bugzilla.redhat.com/show_bug.cgi?id=1804866): Dockerfile.product: Change node headers to v12 [#5979](https://github.com/openshift/console/pull/5979)
* [Bug 1822346](https://bugzilla.redhat.com/show_bug.cgi?id=1822346): Fix bug where pipelines doc link is incorrect [#4985](https://github.com/openshift/console/pull/4985)
* [Bug 1822437](https://bugzilla.redhat.com/show_bug.cgi?id=1822437): Fix instances / version issue with crd pages [#5552](https://github.com/openshift/console/pull/5552)
* [Bug 1837784](https://bugzilla.redhat.com/show_bug.cgi?id=1837784): Query Browser: Add text wrapping for table headers [#5498](https://github.com/openshift/console/pull/5498)
* [Bug 1834313](https://bugzilla.redhat.com/show_bug.cgi?id=1834313): autoselect query from metric dropdown [#5740](https://github.com/openshift/console/pull/5740)
* [Bug 1846305](https://bugzilla.redhat.com/show_bug.cgi?id=1846305): Topology fix for service binding requests with no backingServiceSelector [#5721](https://github.com/openshift/console/pull/5721)
* [Bug 1820059](https://bugzilla.redhat.com/show_bug.cgi?id=1820059): Last navigation item needs more bottom padding [#4906](https://github.com/openshift/console/pull/4906)
* [Bug 1847141](https://bugzilla.redhat.com/show_bug.cgi?id=1847141): Add 4.5 channels to Cluster Settings page [#5791](https://github.com/openshift/console/pull/5791)
* [Bug 1839019](https://bugzilla.redhat.com/show_bug.cgi?id=1839019): Fix edit and import flows deployment triggers [#5591](https://github.com/openshift/console/pull/5591)
* [Bug 1840398](https://bugzilla.redhat.com/show_bug.cgi?id=1840398): correctly link to OperatorGroup from CSV details [#5579](https://github.com/openshift/console/pull/5579)
* [Bug 1835939](https://bugzilla.redhat.com/show_bug.cgi?id=1835939): Operands related views are disappeared due to missing Operand's `displayName` field in the CSV [#5565](https://github.com/openshift/console/pull/5565)
* [Bug 1828955](https://bugzilla.redhat.com/show_bug.cgi?id=1828955): Pipelines TechPreview [#5550](https://github.com/openshift/console/pull/5550)
* [Bug 1829030](https://bugzilla.redhat.com/show_bug.cgi?id=1829030): Fix bug where masthead dropdown item spacing is inconsi… [#5219](https://github.com/openshift/console/pull/5219)
* [Bug 1827766](https://bugzilla.redhat.com/show_bug.cgi?id=1827766): Fix bug where K8sResourceLink lacks empty state [#5186](https://github.com/openshift/console/pull/5186)
* [Bug 1827306](https://bugzilla.redhat.com/show_bug.cgi?id=1827306): Remove `Edit ClusterServiceVersion` menu options from C… [#5173](https://github.com/openshift/console/pull/5173)
* [Bug 1824049](https://bugzilla.redhat.com/show_bug.cgi?id=1824049): Handle undefined MachineConfigPools status [#5102](https://github.com/openshift/console/pull/5102)
* [Bug 1829568](https://bugzilla.redhat.com/show_bug.cgi?id=1829568): Pipeline Builder treats task param default properly [#5545](https://github.com/openshift/console/pull/5545)
* [Full changelog](https://github.com/openshift/console/compare/ef3268ae549554e51b2a96b8a9771553e23901dd...92af7badb65ccf7ad3c2538cac412ad1d67fdf8d)


### [console-operator](https://github.com/openshift/console-operator/tree/df1bd0b6545e0f23e7965161d0a5480f99428bed)

* [Bug 1847323](https://bugzilla.redhat.com/show_bug.cgi?id=1847323): Publish license file [#443](https://github.com/openshift/console-operator/pull/443)
* [Bug 1847524](https://bugzilla.redhat.com/show_bug.cgi?id=1847524): "downloads" pod does not work on the node which is disabled IPv6 [#442](https://github.com/openshift/console-operator/pull/442)
* [Full changelog](https://github.com/openshift/console-operator/compare/14ef97f64c5da4ffd4f34d25454d2813b1b07015...df1bd0b6545e0f23e7965161d0a5480f99428bed)


### [coredns](https://github.com/openshift/coredns/tree/38a1d511db1cf1c2181ee8b64971b91b3205fc83)

* [Bug 1869310](https://bugzilla.redhat.com/show_bug.cgi?id=1869310): Back port Handle endpoint tombstones (upstream #3887) [#39](https://github.com/openshift/coredns/pull/39)
* [Full changelog](https://github.com/openshift/coredns/compare/e4c9977928b7f36962351b387fafff474b238311...38a1d511db1cf1c2181ee8b64971b91b3205fc83)


### [etcd](https://github.com/openshift/etcd/tree/31ade19767939c56f36311d6865facc27ab1f485)

* [Bug 1815637](https://bugzilla.redhat.com/show_bug.cgi?id=1815637): bump etcd v3.3.22 [#47](https://github.com/openshift/etcd/pull/47)
* [Bug 1837152](https://bugzilla.redhat.com/show_bug.cgi?id=1837152): make evaluation of targetMember strict [#49](https://github.com/openshift/etcd/pull/49)
* [Full changelog](https://github.com/openshift/etcd/compare/9003f53409304807ddb2c24abc5c61703fdacb74...31ade19767939c56f36311d6865facc27ab1f485)


### [grafana](https://github.com/openshift/grafana/tree/3e04f7ddf83c96cbb7a7b376817940a2953e9bb0)

* [Bug 1847543](https://bugzilla.redhat.com/show_bug.cgi?id=1847543): only allow 32 hexadecimal digits for the avatar hash [#35](https://github.com/openshift/grafana/pull/35)
* [Full changelog](https://github.com/openshift/grafana/compare/fb91937f4739c7485c61b57f31a67ed836ac2cd2...3e04f7ddf83c96cbb7a7b376817940a2953e9bb0)


### [haproxy-router](https://github.com/openshift/router/tree/9c77272c114ac55133326b3e9a1a301d7e72dbe5)

* [Bug 1879122](https://bugzilla.redhat.com/show_bug.cgi?id=1879122): Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant [#185](https://github.com/openshift/router/pull/185)
* [Bug 1857022](https://bugzilla.redhat.com/show_bug.cgi?id=1857022): Sanitize TLS config that has key bundled with cert [#151](https://github.com/openshift/router/pull/151)
* [Bug 1868521](https://bugzilla.redhat.com/show_bug.cgi?id=1868521): Back port Remove initial haproxy template commitAndReload [#171](https://github.com/openshift/router/pull/171)
* Sync OWNERS with master branch [#163](https://github.com/openshift/router/pull/163)
* [Bug 1848687](https://bugzilla.redhat.com/show_bug.cgi?id=1848687): Ensure router metrics are accurate and increase coverage [#141](https://github.com/openshift/router/pull/141)
* [Bug 1854814](https://bugzilla.redhat.com/show_bug.cgi?id=1854814): Removes ALPN from haproxy backends [#144](https://github.com/openshift/router/pull/144)
* [Bug 1816544](https://bugzilla.redhat.com/show_bug.cgi?id=1816544): [4.4] Backport "remove proto-version header field" [#106](https://github.com/openshift/router/pull/106)
* [Full changelog](https://github.com/openshift/router/compare/9cbaab1168b42e686d345249ac8811373e257193...9c77272c114ac55133326b3e9a1a301d7e72dbe5)


### [hyperkube, tests](https://github.com/openshift/origin/tree/45f8ddb4b2d8ccd0308b313edc33832aa3c19ada)

* [Bug 1842653](https://bugzilla.redhat.com/show_bug.cgi?id=1842653): [4.4] All NetworkPolicy tests currently being skipped on openshift-sdn [#25197](https://github.com/openshift/origin/pull/25197)
* [Bug 1880123](https://bugzilla.redhat.com/show_bug.cgi?id=1880123): For clusters upgraded from 4.1, skip the anonymous browser access test [#25532](https://github.com/openshift/origin/pull/25532)
* [Bug 1858169](https://bugzilla.redhat.com/show_bug.cgi?id=1858169): OpenShift APIs become unavailable for more than 15 minutes [#25305](https://github.com/openshift/origin/pull/25305)
* [Bug 1849322](https://bugzilla.redhat.com/show_bug.cgi?id=1849322): UPSTREAM: 89937: portAllocator sync local data before allocate [#25175](https://github.com/openshift/origin/pull/25175)
* [Bug 1848437](https://bugzilla.redhat.com/show_bug.cgi?id=1848437): 4.4: UPSTREAM: 91748: FieldManager: Reset if we receive nil or a list with one [#25154](https://github.com/openshift/origin/pull/25154)
* [Bug 1857080](https://bugzilla.redhat.com/show_bug.cgi?id=1857080): Include pod /etc/hosts in ephemeral storage calculation for eviction [#25288](https://github.com/openshift/origin/pull/25288)
* [Bug 1855478](https://bugzilla.redhat.com/show_bug.cgi?id=1855478): UPSTREAM: 91648: Changes to ManagedFields is not mutation for GC [#25265](https://github.com/openshift/origin/pull/25265)
* [Bug 1862171](https://bugzilla.redhat.com/show_bug.cgi?id=1862171): Drop registry.fedoraproject.org/fedora:30 in favour of quay.io/fedora:32-x86_64 [#25348](https://github.com/openshift/origin/pull/25348)
* [Bug 1861850](https://bugzilla.redhat.com/show_bug.cgi?id=1861850): UPSTREAM: 90740: Update createBalancedPodForNodes function in scheduler e2e [#25343](https://github.com/openshift/origin/pull/25343)
* [Bug 1860830](https://bugzilla.redhat.com/show_bug.cgi?id=1860830): Ensure Azure availability zone is always in lower cases [#25326](https://github.com/openshift/origin/pull/25326)
* Fix commit checker [#25367](https://github.com/openshift/origin/pull/25367)
* [Bug 1852938](https://bugzilla.redhat.com/show_bug.cgi?id=1852938): Fix azure tests in unzoned environment [#25262](https://github.com/openshift/origin/pull/25262)
* [Bug 1854312](https://bugzilla.redhat.com/show_bug.cgi?id=1854312): 4.4: UPSTREAM: 92014: CSI: Modify VolumeAttachment check to use Informer/cache [#25251](https://github.com/openshift/origin/pull/25251)
* [Bug 1851407](https://bugzilla.redhat.com/show_bug.cgi?id=1851407): Fix DS expectations on recreate [#25210](https://github.com/openshift/origin/pull/25210)
* UPSTREAM: <carry>: Bug 1852565: change etcd health check timeout to 10s [#25222](https://github.com/openshift/origin/pull/25222)
* [Bug 1845780](https://bugzilla.redhat.com/show_bug.cgi?id=1845780): [release-4.4] kubelet: block non-forwarded packets from crossing the localhost boundary [#25143](https://github.com/openshift/origin/pull/25143)
* [Bug 1850719](https://bugzilla.redhat.com/show_bug.cgi?id=1850719): Measure container restarts over an interval instead of absolute [#25202](https://github.com/openshift/origin/pull/25202)
* [Bug 1828477](https://bugzilla.redhat.com/show_bug.cgi?id=1828477): Add CI test to check for critical alerts post upgrade [#25204](https://github.com/openshift/origin/pull/25204)
* [Bug 1851066](https://bugzilla.redhat.com/show_bug.cgi?id=1851066): images/hyperkube: install iproute [#25216](https://github.com/openshift/origin/pull/25216)
* [Bug 1851418](https://bugzilla.redhat.com/show_bug.cgi?id=1851418): remove problematic upstream client plugin test [#25212](https://github.com/openshift/origin/pull/25212)
* [Bug 1842629](https://bugzilla.redhat.com/show_bug.cgi?id=1842629): [release-4.4] openshift-tests: add run-resourcewatch command [#25042](https://github.com/openshift/origin/pull/25042)
* [Bug 1829327](https://bugzilla.redhat.com/show_bug.cgi?id=1829327): annotations exist, else forbidden: unable to validate [#25161](https://github.com/openshift/origin/pull/25161)
* [Bug 1848687](https://bugzilla.redhat.com/show_bug.cgi?id=1848687): Fix router metrics to be accurate in 4.4 [#25165](https://github.com/openshift/origin/pull/25165)
* [Bug 1843876](https://bugzilla.redhat.com/show_bug.cgi?id=1843876): UPSTREAM: 91008: Do not swallow NotFound error for DeletePod in dsc.manage [#25062](https://github.com/openshift/origin/pull/25062)
* [Bug 1847419](https://bugzilla.redhat.com/show_bug.cgi?id=1847419): [release-4.4] UPSTREAM: 92166: fix: GetLabelsForVolume panic issue for azure disk PV [#25159](https://github.com/openshift/origin/pull/25159)
* [Bug 1847551](https://bugzilla.redhat.com/show_bug.cgi?id=1847551): reenable jenkins e2e in e2e-gcp-builds [#25128](https://github.com/openshift/origin/pull/25128)
* [Bug 1844831](https://bugzilla.redhat.com/show_bug.cgi?id=1844831): oVirt, skip network service tests [#25072](https://github.com/openshift/origin/pull/25072)
* [Full changelog](https://github.com/openshift/origin/compare/912792b553772383a6b619c7b46785f29a652467...45f8ddb4b2d8ccd0308b313edc33832aa3c19ada)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7583b95bbd04caffc45c25dcb9f4ab9207fb24e0)

* [Bug 1880384](https://bugzilla.redhat.com/show_bug.cgi?id=1880384): - collect hostsubnet information [#181](https://github.com/openshift/insights-operator/pull/181)
* [Bug 1885191](https://bugzilla.redhat.com/show_bug.cgi?id=1885191): Gather MachineSet info [#202](https://github.com/openshift/insights-operator/pull/202)
* [Bug 1868165](https://bugzilla.redhat.com/show_bug.cgi?id=1868165): pkg/gather/clusterconfig/clusterconfig: include node information in every archive [#160](https://github.com/openshift/insights-operator/pull/160)
* [Bug 1883160](https://bugzilla.redhat.com/show_bug.cgi?id=1883160): Add new team members to OWNERS [#194](https://github.com/openshift/insights-operator/pull/194)
* [Bug 1869197](https://bugzilla.redhat.com/show_bug.cgi?id=1869197): Limit collection of ALERTS metric to 1000 lines (~500KiB) to avoid unbearably large archives [#162](https://github.com/openshift/insights-operator/pull/162)
* [Bug 1842489](https://bugzilla.redhat.com/show_bug.cgi?id=1842489): Don't delay first upload [#136](https://github.com/openshift/insights-operator/pull/136)
* [Bug 1870512](https://bugzilla.redhat.com/show_bug.cgi?id=1870512): Add @natiiix to OWNERS [#164](https://github.com/openshift/insights-operator/pull/164)
* [Bug 1840012](https://bugzilla.redhat.com/show_bug.cgi?id=1840012): [release-4.4] pkg: write files with extension [#116](https://github.com/openshift/insights-operator/pull/116)
* [Bug 1834677](https://bugzilla.redhat.com/show_bug.cgi?id=1834677): Gather image registry config (refresh) [#131](https://github.com/openshift/insights-operator/pull/131)
* [Full changelog](https://github.com/openshift/insights-operator/compare/930540be0b8ae69a9c398ce92c1198fc0f6be652...7583b95bbd04caffc45c25dcb9f4ab9207fb24e0)


### [jenkins, jenkins-agent-maven](https://github.com/openshift/jenkins/tree/a5da019b4ac36eb11b5d23cf43d06fc05d40dc12)

* [Bug 1875258](https://bugzilla.redhat.com/show_bug.cgi?id=1875258): 4.4 bump jenkins 2.235.5 [#1153](https://github.com/openshift/jenkins/pull/1153)
* [Bug 1858754](https://bugzilla.redhat.com/show_bug.cgi?id=1858754): Bump script-security plugin to 1.73 [#1108](https://github.com/openshift/jenkins/pull/1108)
* [Bug 1857558](https://bugzilla.redhat.com/show_bug.cgi?id=1857558): Bump matrix plugin [#1128](https://github.com/openshift/jenkins/pull/1128)
* [Bug 1857549](https://bugzilla.redhat.com/show_bug.cgi?id=1857549): bump jenkins to 2.235.2 [#1119](https://github.com/openshift/jenkins/pull/1119)
* [Bug 1847442](https://bugzilla.redhat.com/show_bug.cgi?id=1847442): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1082](https://github.com/openshift/jenkins/pull/1082)
* [Bug 1847424](https://bugzilla.redhat.com/show_bug.cgi?id=1847424): [release-4.4] Support Nodejs 12 Agent [#1076](https://github.com/openshift/jenkins/pull/1076)
* [Full changelog](https://github.com/openshift/jenkins/compare/6d246fa1685f5b49d199be9fde6715e7d12fddbe...a5da019b4ac36eb11b5d23cf43d06fc05d40dc12)


### [jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/0766f2601e1b117933393c96b9e1b3f81a3d5cca)

* [Bug 1847442](https://bugzilla.redhat.com/show_bug.cgi?id=1847442): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1082](https://github.com/openshift/jenkins/pull/1082)
* [Bug 1847424](https://bugzilla.redhat.com/show_bug.cgi?id=1847424): [release-4.4] Support Nodejs 12 Agent [#1076](https://github.com/openshift/jenkins/pull/1076)
* [Full changelog](https://github.com/openshift/jenkins/compare/6d246fa1685f5b49d199be9fde6715e7d12fddbe...0766f2601e1b117933393c96b9e1b3f81a3d5cca)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/7b4becb58dc362e49b7341d1841a096df16127f0)

* [Bug 1870304](https://bugzilla.redhat.com/show_bug.cgi?id=1870304): Port stuck open when ep deleted before svc in unidling mode [#174](https://github.com/openshift/sdn/pull/174)
* [Bug 1878787](https://bugzilla.redhat.com/show_bug.cgi?id=1878787): vxlan_monitor_test: fix flake [#197](https://github.com/openshift/sdn/pull/197)
* [Bug 1874799](https://bugzilla.redhat.com/show_bug.cgi?id=1874799): Add NodeInformer to EgressIP [#183](https://github.com/openshift/sdn/pull/183)
* [Bug 1853197](https://bugzilla.redhat.com/show_bug.cgi?id=1853197): [release-4.4] Backport OVS-retries [#155](https://github.com/openshift/sdn/pull/155)
* [Bug 1855119](https://bugzilla.redhat.com/show_bug.cgi?id=1855119): [release-4.4] Add support for --may-exist when adding the bridge in sdn [#166](https://github.com/openshift/sdn/pull/166)
* [Full changelog](https://github.com/openshift/sdn/compare/26523681859845ecd6261401295e312398b78733...7b4becb58dc362e49b7341d1841a096df16127f0)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/f510dcb30ddd4cc7fedd37e3e337018bf94ad8e0)

* BUG 1859306: fix memory leak that leads to unresponsive libvirt URI [#204](https://github.com/openshift/cluster-api-provider-libvirt/pull/204)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/bb1d324e2c75f23e9d326519ffaa5d24c104ef0f...f510dcb30ddd4cc7fedd37e3e337018bf94ad8e0)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b1554c0714123dec050dd0df07b9a2064f088a87)

* [Bug 1816606](https://bugzilla.redhat.com/show_bug.cgi?id=1816606): Allow Int in String within MHC MaxUnhealthy [#539](https://github.com/openshift/machine-api-operator/pull/539)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/824cb49b463c116c9102e2ea0ab756a50b15137b...b1554c0714123dec050dd0df07b9a2064f088a87)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/287dd2cfa692ecbbce7b3bc1913b99b3e2d2f5c7)

* [Bug 1878798](https://bugzilla.redhat.com/show_bug.cgi?id=1878798): remove err cardinality from mcd_kubelet_state metrics [#2083](https://github.com/openshift/machine-config-operator/pull/2083)
* [Bug 1873383](https://bugzilla.redhat.com/show_bug.cgi?id=1873383): daemon: perform other rpm-ostree operations after OS rebase [#2036](https://github.com/openshift/machine-config-operator/pull/2036)
* [Bug 1869962](https://bugzilla.redhat.com/show_bug.cgi?id=1869962): Add template for recycler pod [#2004](https://github.com/openshift/machine-config-operator/pull/2004)
* [Bug 1840366](https://bugzilla.redhat.com/show_bug.cgi?id=1840366): [baremetal] Switch to /readyz for haproxy healthchecking [#1997](https://github.com/openshift/machine-config-operator/pull/1997)
* [Bug 1852792](https://bugzilla.redhat.com/show_bug.cgi?id=1852792): KubeletConfig: Verify EvictionSoftGracePeriod is set when EvictionSof… [#2000](https://github.com/openshift/machine-config-operator/pull/2000)
* [release 4.4] Bug 1855878:  cherry-pick hostname fixes [#1938](https://github.com/openshift/machine-config-operator/pull/1938)
* [Bug 1855895](https://bugzilla.redhat.com/show_bug.cgi?id=1855895): templates: add a file to load legacy iptables [#1982](https://github.com/openshift/machine-config-operator/pull/1982)
* [Bug 1845492](https://bugzilla.redhat.com/show_bug.cgi?id=1845492): daemon: fix restoring file logic to avoid unnecessary deletion [#1795](https://github.com/openshift/machine-config-operator/pull/1795)
* [Bug 1825339](https://bugzilla.redhat.com/show_bug.cgi?id=1825339): [4.4] crio: manage ns lifecycle [#1871](https://github.com/openshift/machine-config-operator/pull/1871)
* [Bug 1849217](https://bugzilla.redhat.com/show_bug.cgi?id=1849217): Sync kublelet config across platforms [#1852](https://github.com/openshift/machine-config-operator/pull/1852)
* [Bug 1829752](https://bugzilla.redhat.com/show_bug.cgi?id=1829752): baremetal - Limit the number of nameservers to 3 [#1701](https://github.com/openshift/machine-config-operator/pull/1701)
* [Bug 1851267](https://bugzilla.redhat.com/show_bug.cgi?id=1851267): OpenStack: Set coredns forward policy to sequencial [#1876](https://github.com/openshift/machine-config-operator/pull/1876)
* [Bug 1845635](https://bugzilla.redhat.com/show_bug.cgi?id=1845635): etcd-quorum-guard: update containers section in deployment.yaml [#1820](https://github.com/openshift/machine-config-operator/pull/1820)
* [Bug 1834533](https://bugzilla.redhat.com/show_bug.cgi?id=1834533): Parse the kubelet.conf data after an update [#1734](https://github.com/openshift/machine-config-operator/pull/1734)
* [Bug 1849298](https://bugzilla.redhat.com/show_bug.cgi?id=1849298): Update to github.com/mtrmac/gpgme v0.1.2 [4.4] [#1854](https://github.com/openshift/machine-config-operator/pull/1854)
* [Bug 1846357](https://bugzilla.redhat.com/show_bug.cgi?id=1846357): MCD: tolerate all taints [#1815](https://github.com/openshift/machine-config-operator/pull/1815)
* [Bug 1830160](https://bugzilla.redhat.com/show_bug.cgi?id=1830160): Makefile: add -failfast to e2e-op [#1684](https://github.com/openshift/machine-config-operator/pull/1684)
* [Bug 1848369](https://bugzilla.redhat.com/show_bug.cgi?id=1848369): lib/resourcemerge: set AdditionalTrustBundle [#1843](https://github.com/openshift/machine-config-operator/pull/1843)
* [Bug 1848021](https://bugzilla.redhat.com/show_bug.cgi?id=1848021): Set the pod-infra-container-image flag in kubelet to ocp pause image [#1838](https://github.com/openshift/machine-config-operator/pull/1838)
* [Bug 1829645](https://bugzilla.redhat.com/show_bug.cgi?id=1829645): reconcile relatedObjects and place them in the clusteroperator for CVO [#1764](https://github.com/openshift/machine-config-operator/pull/1764)
* [Bug 1847876](https://bugzilla.redhat.com/show_bug.cgi?id=1847876): gcp-routes: decrease downfile poll to be faster than LB on recovery [#1837](https://github.com/openshift/machine-config-operator/pull/1837)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b6c95fea3987483780994c8a5809a6afd15a633d...287dd2cfa692ecbbce7b3bc1913b99b3e2d2f5c7)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/82b97e85b80fa343c429776c64669b99fec00386)

* [Bug 1856783](https://bugzilla.redhat.com/show_bug.cgi?id=1856783): [backport 4.4] Exclude network address [#19](https://github.com/openshift/whereabouts-cni/pull/19)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/bf517ccbadbe6e85be018dc710254a98ad0d77ff...82b97e85b80fa343c429776c64669b99fec00386)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/b28647ee79fa0506ab535895169f1cb960b52558)

* [Bug 1849174](https://bugzilla.redhat.com/show_bug.cgi?id=1849174): Allow image push after postCommit script completes [#121](https://github.com/openshift/openshift-controller-manager/pull/121)
* [Bug 1819770](https://bugzilla.redhat.com/show_bug.cgi?id=1819770): Bumping openshift/library-go [#88](https://github.com/openshift/openshift-controller-manager/pull/88)
* [Bug 1819770](https://bugzilla.redhat.com/show_bug.cgi?id=1819770): Removing yum commands from Dockerfile [#106](https://github.com/openshift/openshift-controller-manager/pull/106)
* [Bug 1832839](https://bugzilla.redhat.com/show_bug.cgi?id=1832839): more changes required for named workqueue metrics on pre 1.18 k8s base [#117](https://github.com/openshift/openshift-controller-manager/pull/117)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/aa5436c5733fe505f763afabc71eb37aa32a8d36...b28647ee79fa0506ab535895169f1cb960b52558)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d698ac9bd7e39c0dd0bb00cb54bead7c8cc438b0)

* [Bug 1839012](https://bugzilla.redhat.com/show_bug.cgi?id=1839012): Allow to define primary ip address for machines [#110](https://github.com/openshift/cluster-api-provider-openstack/pull/110)
* [Bug 1832999](https://bugzilla.redhat.com/show_bug.cgi?id=1832999): Migrate to MAO [#98](https://github.com/openshift/cluster-api-provider-openstack/pull/98)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/2937f802e2ee0602ec293d4bacfac21725a021c9...d698ac9bd7e39c0dd0bb00cb54bead7c8cc438b0)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/6307c54ea472e772de9d421201ce5a1ef1f74134)

* [Bug 1851095](https://bugzilla.redhat.com/show_bug.cgi?id=1851095): Delete subscription metric when an operator is uninstalled [#1746](https://github.com/operator-framework/operator-lifecycle-manager/pull/1746)
* [Bug 1869717](https://bugzilla.redhat.com/show_bug.cgi?id=1869717): fix(install): account for installplans when calculating generation [#1737](https://github.com/operator-framework/operator-lifecycle-manager/pull/1737)
* [Bug 1859755](https://bugzilla.redhat.com/show_bug.cgi?id=1859755): fix(installplans): GC older installplans [#1675](https://github.com/operator-framework/operator-lifecycle-manager/pull/1675)
* [Bug 1859594](https://bugzilla.redhat.com/show_bug.cgi?id=1859594): fix(resolver): Exclude all installed packages in dependency search [#1666](https://github.com/operator-framework/operator-lifecycle-manager/pull/1666)
* [Bug 1821274](https://bugzilla.redhat.com/show_bug.cgi?id=1821274): Add CSV Metadata to PackageManifests [#1552](https://github.com/operator-framework/operator-lifecycle-manager/pull/1552)
* [Bug 1827000](https://bugzilla.redhat.com/show_bug.cgi?id=1827000): Pod Config Deployment Hash Error [#1566](https://github.com/operator-framework/operator-lifecycle-manager/pull/1566)
* [Bug 1850112](https://bugzilla.redhat.com/show_bug.cgi?id=1850112): Resolve only default channels [#1590](https://github.com/operator-framework/operator-lifecycle-manager/pull/1590)
* [Bug 1850632](https://bugzilla.redhat.com/show_bug.cgi?id=1850632): don't store full manifests in installplan status (for bundle images) [#1595](https://github.com/operator-framework/operator-lifecycle-manager/pull/1595)
* [Bug 1843678](https://bugzilla.redhat.com/show_bug.cgi?id=1843678): Deleting a CSV removes related CSV metrics [#1568](https://github.com/operator-framework/operator-lifecycle-manager/pull/1568)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/33671ebb9929e837d1e9f8104476bf278f203080...6307c54ea472e772de9d421201ce5a1ef1f74134)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/2f0c700592e195d928af9c160c3b3ea8a9a1bb01)

* [Bug 1873012](https://bugzilla.redhat.com/show_bug.cgi?id=1873012): Increase registry delay for large payloads [#345](https://github.com/operator-framework/operator-marketplace/pull/345)
* [Bug 1849518](https://bugzilla.redhat.com/show_bug.cgi?id=1849518): [release-4.4] show the source commit id [#292](https://github.com/operator-framework/operator-marketplace/pull/292)
* [Bug 1827777](https://bugzilla.redhat.com/show_bug.cgi?id=1827777): Fix "DprecatedAPIsInUse" -> "DeprecatedAPIsInUse" typo [#305](https://github.com/operator-framework/operator-marketplace/pull/305)
* [Bug 1826372](https://bugzilla.redhat.com/show_bug.cgi?id=1826372): Tigger alert for invalid CSC [#303](https://github.com/operator-framework/operator-marketplace/pull/303)
* [Bug 1847740](https://bugzilla.redhat.com/show_bug.cgi?id=1847740): Ensure correct registry image [#315](https://github.com/operator-framework/operator-marketplace/pull/315)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/985aa35a24e38c70c9328461aab6957cde7caf4a...2f0c700592e195d928af9c160c3b3ea8a9a1bb01)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/3069d8c8c3e91afbfcfece6452e44973dd01f117)

* [Bug 1846100](https://bugzilla.redhat.com/show_bug.cgi?id=1846100): fix(server): make a copy of the db before migrating it [#356](https://github.com/operator-framework/operator-registry/pull/356)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/3c11e08f5e2d54044f7b6843e9a033fa4ad17a6c...3069d8c8c3e91afbfcfece6452e44973dd01f117)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/201387b47794976a5ca7bdd2165a3d700b0a38a0)

* [Bug 1839738](https://bugzilla.redhat.com/show_bug.cgi?id=1839738): update machine only when needed [#50](https://github.com/openshift/cluster-api-provider-ovirt/pull/50)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/281b4db96607c474f73161c49aab80528f517c26...201387b47794976a5ca7bdd2165a3d700b0a38a0)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/13fb59a8f043d1018023cf1c08bb5fbad8b6ccbc)

* [Bug 1882066](https://bugzilla.redhat.com/show_bug.cgi?id=1882066): Pin 4.4 OVN to 20.06.2-4.el7fdp [#283](https://github.com/openshift/ovn-kubernetes/pull/283)
* [Bug 1870869](https://bugzilla.redhat.com/show_bug.cgi?id=1870869): Fix br-local duplicate MACs [#239](https://github.com/openshift/ovn-kubernetes/pull/239)
* [Bug 1858309](https://bugzilla.redhat.com/show_bug.cgi?id=1858309): Set MTU for br-ext hybrid overlay bridge [#208](https://github.com/openshift/ovn-kubernetes/pull/208)
* [Bug 1845706](https://bugzilla.redhat.com/show_bug.cgi?id=1845706): build: require openvswitch2.13 >= 2.13.0-29 or later [#184](https://github.com/openshift/ovn-kubernetes/pull/184)
* [Bug 1845724](https://bugzilla.redhat.com/show_bug.cgi?id=1845724): Backport deadlock fixes and dependent commits [#185](https://github.com/openshift/ovn-kubernetes/pull/185)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0306f1e232d13e5e2372829bd0fba9ecbba6afbf...13fb59a8f043d1018023cf1c08bb5fbad8b6ccbc)


### [pod](https://github.com/openshift/images/tree/d8b9cdc4e37bfa56accaf4ae736458a70c3dca7c)

* [Bug 1851397](https://bugzilla.redhat.com/show_bug.cgi?id=1851397): Add iproute package to get `ss` tool for port wait [#21](https://github.com/openshift/images/pull/21)
* [Full changelog](https://github.com/openshift/images/compare/6cdb5d360768d8f87a615286180e46784ae7d28f...d8b9cdc4e37bfa56accaf4ae736458a70c3dca7c)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/ad8c9daeaa6c6763f3af18e0c01cc6207680285e)

* [Bug 1813221](https://bugzilla.redhat.com/show_bug.cgi?id=1813221): pkg/alertmanager: mergepatch alertmanager containers [#74](https://github.com/openshift/prometheus-operator/pull/74)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/b6601c800ab42775f2e5ef2d3e85793136035cba...ad8c9daeaa6c6763f3af18e0c01cc6207680285e)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/259dff5c0270d889341c1b2ba68390c22d372bed)

* [Bug 1847961](https://bugzilla.redhat.com/show_bug.cgi?id=1847961): text_collectors: Don't detect AWS twice when virt-what is upgraded [#63](https://github.com/openshift/node_exporter/pull/63)
* [Full changelog](https://github.com/openshift/node_exporter/compare/a7d3a64d14034beeb202f73ed9d5698f3e8937a9...259dff5c0270d889341c1b2ba68390c22d372bed)