# 4.10.57

Created: 2023-04-13 20:13:08 +0000 UTC

Image Digest: `sha256:744f7f457a8fa55c441bc05f89e651d24b1b263c3fca57dc7cf60228045ec646`

Promoted from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-04-11-075633


## Changes from 4.10.22

### Components

* Kubernetes upgraded from 1.23.5 to 1.23.17
* Red Hat Enterprise Linux CoreOS upgraded from 410.84.202207051718-0 to 410.84.202304042113-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [db2d118a](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/db2d118ad70ff62a2111e83a8d14c5b32e176b38) `sha256:4dc000ba92604762ab22b73823c8b17cfc10cb561ed903903f106fdda450f66b`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [f0d69663](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/f0d6966321e3d416efec2ac7405494b057cb35f8) `sha256:51eac86a62ad3d8c22f7d1e7c947f7f3a71fa5e3e0b46d81b9fd6f8384af6f84`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [d85867fe](https://github.com/openshift/cloud-provider-aws/commit/d85867feab1e80f094624d57221a071d7b6a148c) `sha256:c9aa88f51cb7250be0827ff083896b3ddb74ca85f92488f9e1479c0231d9f393`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [c2e6dc19](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/c2e6dc19fac0006651d0820272a9734e231b1ce5) `sha256:cc3b68b0b116bf53c0c0af9247a16743d13e701f969790f93cdda9f276297e6b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [7f9eb87a](https://github.com/openshift/aws-pod-identity-webhook/commit/7f9eb87aea90ff2bac0c98df741b6d6dd0c61449) `sha256:83c248be560329ea1a031087ea106fdbc649ea26fc9372acc37eecb015907c6f`
* [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator) git [3807eb37](https://github.com/openshift/azure-file-csi-driver-operator/commit/3807eb37247bb9008d7e64c10e3bf6a3872d199d) `sha256:00e4f5e6c244fef21181c712d5ce9f53ed1eef286ef2679177a3d4b079e45ebb`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [40c11f72](https://github.com/openshift/baremetal-runtimecfg/commit/40c11f7299386a9608e18feb8cc062c2ebc3364b) `sha256:73b96041b7a3304d31f45b7ca7d2562cda28080e459f511b747f9888945d5e5c`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [8bcdcccb](https://github.com/openshift/cluster-autoscaler-operator/commit/8bcdcccbf043bc164eb5b728a8cfd962112b2aa5) `sha256:a36743993f45648dfece5e9db0c8336866e534f495eec5e2397abd7e6ae55499`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [f22d1c60](https://github.com/openshift/cluster-bootstrap/commit/f22d1c60c188a4b5ce1731a8b1db7c20067dc7e9) `sha256:bb8d80a93e900244ddaa654a692f2250f24c514b08c1f8572270b21af4a1427e`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0840c6f2](https://github.com/openshift/cluster-config-operator/commit/0840c6f2f7f25ad9aba1a36597760f36ff0ab097) `sha256:939156c5a49e44071e9ba926e2adb7f0d8eaf2c69b30a85487d03d5c27a89760`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ace18623](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ace186237dad53c28b0d05761a2c85ce7b32b56b) `sha256:38b43c8dbce1dd56dee59e2c22abfc7a51a8355980a7e34bd3d7b9791ebbe815`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [7e1f5684](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/7e1f56849bb85b870585b2b67566d29fd7767a31) `sha256:233d07d805f00acb8dd71823e4850b2a576dd3ebbb2a5e634533c9d04b632700`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b8b65d15](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b8b65d15d14c21e6a5dd316dd59a9cfb3a2f403a) `sha256:5a842b4e50705ec5e804145d3b274bee1742b92b4013b2149dbeb21f9a5035be`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [684f6f42](https://github.com/openshift/cluster-update-keys/commit/684f6f42381cf6401dfb7e4f6f5f9fd0e441639b) `sha256:de5905ce2e1f76dbcfacff52114b9b2228d684455830a07f318a6bdc6da30880`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [d06ff18b](https://github.com/openshift/csi-driver-shared-resource/commit/d06ff18b2ff23e5165638d6c3df42a2e1715b28f) `sha256:e043a6943d49a46f50a58715915de7865ccc9ef431923d1bd8f76d51341361ab`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [662615b3](https://github.com/openshift/csi-driver-shared-resource-operator/commit/662615b3427b57d8aafff6b982a7e4b34692eadc) `sha256:a0f3a9d3903d6f3bac0e87f5ca795dc020367ebfbff5f3a3d93f327a6a0aa66c`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [27e71f2b](https://github.com/openshift/csi-external-attacher/commit/27e71f2bb577200dc3cd87851989f0c950521eb8) `sha256:0fbc44e8fe564425fe18af81d24d65dec4690614dbba2c9b5bb37f88aef9ed53`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [31de1e19](https://github.com/openshift/csi-external-provisioner/commit/31de1e19119e6b63cd9d52622f5b9d9df7e4c384) `sha256:6234230e8d33fe612990313c6daefee4e70cfb3152235f13149bfa52a5011c67`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [e5934091](https://github.com/openshift/csi-external-resizer/commit/e5934091f8cc4a6ca58f3719ba4487a46b4252df) `sha256:c7ce8ab729dd845d492ac0f00847ce306846125ff01ce305099c788101bfaa27`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:a497ab039f6e482c6b0bba51538e97e27388f446ee0264d15a03df521c52b14a`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [8c1a5bca](https://github.com/openshift/csi-livenessprobe/commit/8c1a5bcac1675711b51fffe88b40bb46f0e22db9) `sha256:886ac3914cebbe13a386905fc2d9fde83019f93fae705413cf5b2a5490353f5d`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb0bd823](https://github.com/openshift/csi-node-driver-registrar/commit/bb0bd823c2212c6657e5835eb0015aab4e93839d) `sha256:ba7c50bf5a82d90f63c9ecc6f903dd5a7e39193d5dd4ce8f3bdbfe4860162efe`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:c7c37d4647a333a1909db6a32a91d379aa51b43283150dd0f77c1fc818b9c1ef`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:b2ef8c73749945267be542f5d08387983645dc078296fcc236425958a5e2b857`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5c56bc8a](https://github.com/openshift/egress-router-cni/commit/5c56bc8a0b27f560435f1564de0f3f440e68d889) `sha256:b94aa45c8d908a7d1e3a5ca208b35916647c87a7209039ddd74f713f68ea2c3f`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [4dc728d0](https://github.com/openshift/cloud-provider-gcp/commit/4dc728d0e1af40893815149de016e5d6e5a7bacb) `sha256:6eda2ead073af7aac76a99bbc1a7d542305c9cf2d4da5a241409f5211d7ebcf6`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [19e9a57f](https://github.com/openshift/gcp-pd-csi-driver/commit/19e9a57f04436cfc7df7d38bf5ba047d46982268) `sha256:97b93c96547c175335de3c0f3284d9409898bab9113ee0052d2d2e8009463ecb`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [0e369dee](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/0e369dee1b74696a17faf9b9c28e391d6726bf52) `sha256:960e2b2b846039b6e0b284e44c1f9ac280a48e478eca7a7da97512b3d603c381`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [e3039120](https://github.com/openshift/cloud-provider-ibm/commit/e30391202c3f02694b2f5b3c2d73cb560d9c133d) `sha256:0c20123692e7ee6ab24eb2d7adf5ea19f9f0da3b89619eb00b4f23e88d093da2`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [28bad53d](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/28bad53d117d403b4147b68666ecfc52cee6ceca) `sha256:985c847e520446427cebd962704068b9adb53ead2575a64c45e63584f85db23c`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [7074dfc3](https://github.com/openshift/ibm-vpc-node-label-updater/commit/7074dfc35cdd3c2e19790a934c1025c8f690c9a6) `sha256:e0a6defc10f8bbf061b873a318dbd944eacf32580c4efd01955f1a4842ced22c`
* [ibmcloud-machine-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [7449a94f](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/7449a94fcd0001cac6371600a75b20850b235cc9) `sha256:c2a7af57c046a75e25f7b9240a6a535479d9a93a84494c4b580eeb309fd2ca92`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [62469223](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/6246922338bc8aa21276c7e679bdd082307cbd45) `sha256:2da14c0f5b13bfd706105fefecf42a6f806d7f5ce4e206c58d794569b897ff05`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [81fe2974](https://github.com/openshift/ironic-rhcos-downloader/commit/81fe29749c844a4a19fea0f0e2ff0a53c3b0fa25) `sha256:8f9cc184b8172b2fcb2cfe21b62caf3d2c3e0a32992e9e7e3028938753287eb3`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [45a1c542](https://github.com/openshift/ironic-static-ip-manager/commit/45a1c542c44d9492a110ea5edb09ac026afd86de) `sha256:1b21f240e52ad634ef3a618cb026e78a92d3464300f7bd9623c188a4d622b1c6`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [4052b317](https://github.com/openshift/k8s-prometheus-adapter/commit/4052b317ff62b93019a11e2981d1d81b8b6b2e4d) `sha256:9e96ca98f0b664102e5099a84c901fd69f6176a7d984042d1562dbbd37af8fc5`
* [keepalived-ipfailover](https://github.com/openshift/images) git [5d526c41](https://github.com/openshift/images/commit/5d526c41d70e481820119cbdae922130f42b36d7) `sha256:21b51515886ca8face38df4c7d1cbcd422190c084877ce558247af63a608125c`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [4f198b2b](https://github.com/openshift/kube-rbac-proxy/commit/4f198b2bd5d141a561fbe6642de20b520d72e513) `sha256:fedb8ea6b7e1067c86f86b399d97d8b1f7ce793deea1cdb03faf68b900f1043d`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [901a6d22](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/901a6d221d1cf79b4b6ba859bb43521e0ee635b3) `sha256:ef5a279458ca4d09eb552bb42bd9f867ad7053265c42baef98d934438d5b79ed`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [3b330b72](https://github.com/openshift/cluster-api-provider-libvirt/commit/3b330b72f43b178f1c16c5d504cf9ce248e679ad) `sha256:3e90323c6bf7fbc204d7fa6df2165fffd9ed52f5c0d6d7bab2a5100324803499`
* machine-os-content `sha256:cf0cba518d659a47df7479a1b464fcedd52dfe51af5e8be0f815b671882a63f4`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [bfcc6c85](https://github.com/openshift/multus-networkpolicy/commit/bfcc6c85b5ad1c47fc1d50ddec0acd108d270fe1) `sha256:4c02ea0d55391267d01364c1e06ef14b2004f4775b674373868fdd5fe2b88930`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [707dd380](https://github.com/openshift/route-override-cni/commit/707dd38046554810f601f2fae4a69bc4b907d7d3) `sha256:d3ba9d3cbff212837483a72a6108d638f3aa96a7b771b1c5aa7f7ff62e8ababf`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [234c1388](https://github.com/openshift/network-metrics-daemon/commit/234c13885e0c00a3b3f4f1bf81a868c82508dd2d) `sha256:a987833e2976b9ea9b517700cefc713d887a30d228e26fda5e0e61de91bed8b1`
* [network-tools](https://github.com/openshift/network-tools) git [bcfec9c5](https://github.com/openshift/network-tools/commit/bcfec9c5a054f4c60356175b42a2477ec181fbd9) `sha256:4cdd39cd1ccd9d061554776430254a6bd902d8a08e844555cc5130c3abb8ef76`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [799d414b](https://github.com/openshift/oauth-proxy/commit/799d414ba87ca5b28d08cf4af07409032c04df2b) `sha256:e832de8728630d88235cbbe06e13167f6eaa5483bfafefa3b2a0ff151f014eeb`
* [oauth-server](https://github.com/openshift/oauth-server) git [245b95f8](https://github.com/openshift/oauth-server/commit/245b95f8a8e28e3960e4d369f3ca9a42be99bdf8) `sha256:694ac55fa8a69ac59eac13eee4da824a18cdb6d849dcd9d6e20f9be644eee838`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [71ca0a1a](https://github.com/openshift/oc-mirror/commit/71ca0a1af2e4f37ada0c3e93a0902e610edb10d7) `sha256:1f1a94b532ea33fed98c058117c54d532881b3883d7f588d4609e0357e4c757f`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [2c2d50db](https://github.com/openshift/openshift-controller-manager/commit/2c2d50dbda3a06681a3b9c683c53ff3b3ba3b685) `sha256:2316518d40c21f2097336a08da4a18408887a87d1f308fdd417873d285baca7c`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e5c50aae](https://github.com/openshift/openshift-state-metrics/commit/e5c50aae141e4f72c6843a3964f167bec6e79475) `sha256:7481d1b260aafaaea21795751ce5d940ffcb491a12d9f40185d508b770272565`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [2401f74d](https://github.com/openshift/machine-api-provider-openstack/commit/2401f74dba8112e0dd4a4a1bb77c26887d5da3f4) `sha256:2fa911f971a570c5acdc24668d081207335eaaea0716c09ddbc3c1ecf1ca79fd`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [80b92ecf](https://github.com/operator-framework/operator-marketplace/commit/80b92ecff398578b389cd953605a7b0f7bbd4f24) `sha256:fdede457aa4cc119b91df05089dc1970d6603979381511d0d1125642043ce071`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [573ac478](https://github.com/openshift/ovirt-csi-driver-operator/commit/573ac4789b95f3ff5f9806e7023faca7b610566b) `sha256:5f47f398367e48916a76d4920bc0f27da435db61e95c72a20316845af8658d9b`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [35ce9aaf](https://github.com/openshift/cluster-api-provider-ovirt/commit/35ce9aafee1ffad0734f02ff0d5f8632d3905f09) `sha256:3e9844b5af417f7ab22bd35533a60918cc3d7224d4fb5f496d6b0a9583c50822`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [c1d68e7b](https://github.com/openshift/machine-api-provider-powervs/commit/c1d68e7b97a8bcf9b350e4a686fd202ffc69978f) `sha256:668f53de7229434e6d1492b37aaed53d749032f814889e307df82f58ef517471`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5f4c8992](https://github.com/openshift/prom-label-proxy/commit/5f4c89923dcfb1c620490e8ed8de8cd1bdaf5122) `sha256:540612d2355c97cfb2caac39770af43ec8e45e03688abf5fe5ee0fcf4d53a8ec`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [01339596](https://github.com/openshift/prometheus-alertmanager/commit/013395968b37eb66909d7bbee7e34249b120835e) `sha256:75bae4ff085713f72fa926663ffd69e0a65fd478820456963fe1af8678698e8e`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [0eed3102](https://github.com/openshift/node_exporter/commit/0eed31026699ad13ca7fcebbc547a830371a920c) `sha256:eb6211205e261fbcd17715b3d643b39cba02c033fec345a127ef3aa03486ee9d`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [1611373e](https://github.com/openshift/service-ca-operator/commit/1611373e4bf053ca78dc89b5fd4a4daf078312cf) `sha256:9ceff04dac27335bde854697cfab5c5f0f7f64ad4c33083f54df6926bb6b8065`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [e310f4d3](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e310f4d3828a71fb96344ccbe8b29d22754ebf77) `sha256:7019518028d2d9ecb433b54a6fdbc22b57541b88b8ed349d1b1e9d93cf7e3b65`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [e310f4d3](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e310f4d3828a71fb96344ccbe8b29d22754ebf77) `sha256:b63d10977079dea0b255adec97bd9bb11843155d627c346cb9ab892f8d786225`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [a11df08a](https://github.com/openshift/vsphere-problem-detector/commit/a11df08a341b9084fd92c95e5b53368d1ea9aaa5) `sha256:3b228c6825f3d0eb34285084c538801d52fa24dce1db87293e8cc9accd83aaa1`


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/5c30ca11ee5a7a312f5eed9f372d43c1af3c2154)

* [OCPBUGS-4123](https://issues.redhat.com/browse/OCPBUGS-4123): Add explicit pciutils package [#19](https://github.com/openshift/alibaba-cloud-csi-driver/pull/19)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/3ddbb2b9d4994206183b5ffd6a0872ad9a5ce193...5c30ca11ee5a7a312f5eed9f372d43c1af3c2154)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/9617f1f0b1266797f9237b2c3dd184f5a05f8f5b)

* Updating ose-alibaba-machine-controllers images to be consistent with ART [#23](https://github.com/openshift/cluster-api-provider-alibaba/pull/23)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/0206121348c9a0d220dd6805cea79d1eae7fd3e0...9617f1f0b1266797f9237b2c3dd184f5a05f8f5b)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/2bad4b40757a33bf92ab8937ececf279cc46376c)

* [OCPBUGS-1804](https://issues.redhat.com/browse/OCPBUGS-1804): UPSTREAM: 1398: Add resolver to handle custom endpoints [#210](https://github.com/openshift/aws-ebs-csi-driver/pull/210)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/8ba0c7a879c4a03e628c4d123ff8fdab884cedbb...2bad4b40757a33bf92ab8937ececf279cc46376c)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/8c8d1c15bfbbe52abaa2e2dd34d360854f40e1b1)

* [Bug 2117557](https://bugzilla.redhat.com/show_bug.cgi?id=2117557): Fix panic when accessing nil machine annotations map [#50](https://github.com/openshift/machine-api-provider-aws/pull/50)
* [Bug 2109124](https://bugzilla.redhat.com/show_bug.cgi?id=2109124): Validate unknown regions using AWS API [#48](https://github.com/openshift/machine-api-provider-aws/pull/48)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/0d7fa879ec43b043900d557552246eb981f94fd9...8c8d1c15bfbbe52abaa2e2dd34d360854f40e1b1)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/ae571af8f8f60ccc14b3772032bd5c1072f2a746)

* bug OCPBUGS-2062: .dockerignore: enable OSBS2 builds [#42](https://github.com/openshift/cloud-provider-azure/pull/42)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/07f1335140207eb41fb92fa0e689a89bc9b5efd9...ae571af8f8f60ccc14b3772032bd5c1072f2a746)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/c7c7188d259bb45decb8dd685798316f24faed19)

* [Bug 2118392](https://bugzilla.redhat.com/show_bug.cgi?id=2118392): Update dd table 4.10 [#31](https://github.com/openshift/azure-disk-csi-driver/pull/31)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/3d79d39e02f49de7608bcf921694b64d827147af...c7c7188d259bb45decb8dd685798316f24faed19)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/35aa99d74d4fd34f2c4d7b1a73d09d90b7df6413)

* [OCPBUGS-8020](https://issues.redhat.com/browse/OCPBUGS-8020): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#72](https://github.com/openshift/azure-disk-csi-driver-operator/pull/72)
* [Bug 2105304](https://bugzilla.redhat.com/show_bug.cgi?id=2105304): Increase pod startup timeout in e2e tests [#52](https://github.com/openshift/azure-disk-csi-driver-operator/pull/52)
* [Bug 2097439](https://bugzilla.redhat.com/show_bug.cgi?id=2097439): Only use credentials that are provided by the azure-inject-credential… [#50](https://github.com/openshift/azure-disk-csi-driver-operator/pull/50)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/3b25a5d7c612c4b0d9dfdf1fc44e4dc8483d7ae3...35aa99d74d4fd34f2c4d7b1a73d09d90b7df6413)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/87b4a7182b596354458d22c02bf7c51566f695ed)

* [OCPBUGS-2607](https://issues.redhat.com/browse/OCPBUGS-2607): remove "replace" directive in go.mod [#20](https://github.com/openshift/azure-file-csi-driver/pull/20)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f88155b4c4a3a6dc4d56bac44edb82198a967a4b...87b4a7182b596354458d22c02bf7c51566f695ed)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/04ed0af96d9a8667360a911b5c760767c8a97f0a)

* [OCPBUGS-3165](https://issues.redhat.com/browse/OCPBUGS-3165): Update azure instance types cache [#38](https://github.com/openshift/machine-api-provider-azure/pull/38)
* [OCPBUGS-930](https://issues.redhat.com/browse/OCPBUGS-930): Ignore unknown Instance types in accelerated networking check [#34](https://github.com/openshift/machine-api-provider-azure/pull/34)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/0b2bf9904788e4019b91212532e9af35b240cbdc...04ed0af96d9a8667360a911b5c760767c8a97f0a)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/8862860294941d78fc6e625d4392c6dc129c2037)

* [OCPBUGS-5663](https://issues.redhat.com/browse/OCPBUGS-5663): CVE-2021-4238: goutils: update for randomness fix [#6766](https://github.com/openshift/installer/pull/6766)
* [OCPBUGS-2731](https://issues.redhat.com/browse/OCPBUGS-2731): OpenStack UPI: Create server group for Computes [#6510](https://github.com/openshift/installer/pull/6510)
* [OCPBUGS-6697](https://issues.redhat.com/browse/OCPBUGS-6697): destroy/gcp: Use min length for destroying disks [#6808](https://github.com/openshift/installer/pull/6808)
* [OCPBUGS-2743](https://issues.redhat.com/browse/OCPBUGS-2743): skip sts credentials check in terraform [#6518](https://github.com/openshift/installer/pull/6518)
* [OCPBUGS-5112](https://issues.redhat.com/browse/OCPBUGS-5112): OpenStack: Force JSON content-type in Swift object listing [#6726](https://github.com/openshift/installer/pull/6726)
* [OCPBUGS-377](https://issues.redhat.com/browse/OCPBUGS-377): UPI image download govc rate limit failure [#6245](https://github.com/openshift/installer/pull/6245)
* [OCPBUGS-4160](https://issues.redhat.com/browse/OCPBUGS-4160): OpenStack: Force JSON content-type in Swift [#6628](https://github.com/openshift/installer/pull/6628)
* [OCPBUGS-3743](https://issues.redhat.com/browse/OCPBUGS-3743): build: change ppc64le linking mode [#6597](https://github.com/openshift/installer/pull/6597)
* [Bug 2099604](https://bugzilla.redhat.com/show_bug.cgi?id=2099604): Remove optional services from permissions check [#6507](https://github.com/openshift/installer/pull/6507)
* [OCPBUGS-2795](https://issues.redhat.com/browse/OCPBUGS-2795): Bump gophercloud [#6529](https://github.com/openshift/installer/pull/6529)
* [Bug 2101014](https://bugzilla.redhat.com/show_bug.cgi?id=2101014): Release 4.10 go getter update [#6361](https://github.com/openshift/installer/pull/6361)
* [OCPBUGS-1737](https://issues.redhat.com/browse/OCPBUGS-1737): OpenStack: Lift validation for 14 chars cluster names [#6420](https://github.com/openshift/installer/pull/6420)
* [OCPBUGS-1936](https://issues.redhat.com/browse/OCPBUGS-1936): bump RHCOS 4.10 bootimage metadata [#6454](https://github.com/openshift/installer/pull/6454)
* [Bug 2107154](https://bugzilla.redhat.com/show_bug.cgi?id=2107154): Make azure baseDomainResoureGroup optional for private c… [#6120](https://github.com/openshift/installer/pull/6120)
* [Bug 2112914](https://bugzilla.redhat.com/show_bug.cgi?id=2112914): Fix validation errors for instance type [#6189](https://github.com/openshift/installer/pull/6189)
* [Bug 2102363](https://bugzilla.redhat.com/show_bug.cgi?id=2102363): Dynamic retrieval of GCP Regions for a Project [#6059](https://github.com/openshift/installer/pull/6059)
* [OCPBUGS-784](https://issues.redhat.com/browse/OCPBUGS-784): Download yq in upi installer containers [#6285](https://github.com/openshift/installer/pull/6285)
* [Bug 2111258](https://bugzilla.redhat.com/show_bug.cgi?id=2111258): vsphere installconfig: use full dc path in network validation [#6173](https://github.com/openshift/installer/pull/6173)
* [OCPBUGS-249](https://issues.redhat.com/browse/OCPBUGS-249): Allow setting bootstrap kubelet ip [#6231](https://github.com/openshift/installer/pull/6231)
* [Bug 2095319](https://bugzilla.redhat.com/show_bug.cgi?id=2095319): bump RHCOS 4.10 bootimage metadata [#6095](https://github.com/openshift/installer/pull/6095)
* [Full changelog](https://github.com/openshift/installer/compare/d63a12ba0ec33d492093a8fc0e268a01a075f5da...8862860294941d78fc6e625d4392c6dc129c2037)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/adff401d86d176d61cf2dc47c4142e30d7b04e4b)

* Update OWNERS [#179](https://github.com/openshift/cluster-api-provider-baremetal/pull/179)
* [Bug 2099584](https://bugzilla.redhat.com/show_bug.cgi?id=2099584): Update BMO vendor to v0.0.0-20211102102625-469cc9bf7fee [#174](https://github.com/openshift/cluster-api-provider-baremetal/pull/174)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/0716ee4cb33bdef966f9ccbef2579d68df8bcd92...adff401d86d176d61cf2dc47c4142e30d7b04e4b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/092d3a41e49dda5081ed2dd5711cc80604ab2034)

* [Bug 2061794](https://bugzilla.redhat.com/show_bug.cgi?id=2061794): [4.10] Only update the HFS status on changes [#247](https://github.com/openshift/baremetal-operator/pull/247)
* [Bug 2069638](https://bugzilla.redhat.com/show_bug.cgi?id=2069638): Use deep copy/equal for host root device hints [#221](https://github.com/openshift/baremetal-operator/pull/221)
* [Bug 2047930](https://bugzilla.redhat.com/show_bug.cgi?id=2047930): Move from Available to Preparing if HostFirmwareSettings changed [#210](https://github.com/openshift/baremetal-operator/pull/210)
* [Bug 2100996](https://bugzilla.redhat.com/show_bug.cgi?id=2100996): Uplift kustomize to v4 to remove go-getter dependency [#234](https://github.com/openshift/baremetal-operator/pull/234)
* [Bug 2097695](https://bugzilla.redhat.com/show_bug.cgi?id=2097695): Stop treating missing network as fatal error [#230](https://github.com/openshift/baremetal-operator/pull/230)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/28771f489634da2364fb46766953f2e1962bf350...092d3a41e49dda5081ed2dd5711cc80604ab2034)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/3a7500d0af017cc26d1c2230067995345f4d1e75)

* [OCPBUGS-10750](https://issues.redhat.com/browse/OCPBUGS-10750): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1379](https://github.com/openshift/oc/pull/1379)
* [OCPBUGS-10777](https://issues.redhat.com/browse/OCPBUGS-10777): bump repo sclorg/s2i-ruby-container location for newapp test [#1383](https://github.com/openshift/oc/pull/1383)
* [Bug 2086969](https://bugzilla.redhat.com/show_bug.cgi?id=2086969): Delete recently created images when --prune-over-size-limit is used [#1146](https://github.com/openshift/oc/pull/1146)
* [OCPBUGS-3968](https://issues.redhat.com/browse/OCPBUGS-3968): set proper pod security ns labels [#1293](https://github.com/openshift/oc/pull/1293)
* [Bug 2015119](https://bugzilla.redhat.com/show_bug.cgi?id=2015119): bump(k8s.io/kubectl) to pick up k/k#110764 [#1270](https://github.com/openshift/oc/pull/1270)
* [OCPBUGS-1788](https://issues.redhat.com/browse/OCPBUGS-1788): oc adm logs: generate proper path for static pods [#1246](https://github.com/openshift/oc/pull/1246)
* [OCPBUGS-1638](https://issues.redhat.com/browse/OCPBUGS-1638): Increase default value of cache TTL to 6 hours [#1241](https://github.com/openshift/oc/pull/1241)
* [Bug 2116526](https://bugzilla.redhat.com/show_bug.cgi?id=2116526): oc adm inspect: check a resource exists before its inspection [#1227](https://github.com/openshift/oc/pull/1227)
* [Bug 2106158](https://bugzilla.redhat.com/show_bug.cgi?id=2106158): remove klog format and update messages for docker config deprecation [#1205](https://github.com/openshift/oc/pull/1205)
* [Full changelog](https://github.com/openshift/oc/compare/45460a55f50834ff18308b13b4569a6c89b9d37a...3a7500d0af017cc26d1c2230067995345f4d1e75)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/8442cbf528bbfa76aaf29db67ce09d1164ed019a)

* [OCPBUGS-2802](https://issues.redhat.com/browse/OCPBUGS-2802): Backport --credentials-requests-dir for ccoctl gcp delete. [#507](https://github.com/openshift/cloud-credential-operator/pull/507)
* [OCPBUGS-2884](https://issues.redhat.com/browse/OCPBUGS-2884): Make ccoctl use regional STS endpoint by default [#504](https://github.com/openshift/cloud-credential-operator/pull/504)
* [OCPBUGS-2279](https://issues.redhat.com/browse/OCPBUGS-2279): Add ccoctl support to create OIDC endpoint with private S3 bucket [#501](https://github.com/openshift/cloud-credential-operator/pull/501)
* [Bug 2107276](https://bugzilla.redhat.com/show_bug.cgi?id=2107276): Make ccoctl work with credentials fetched from gcloud cli defaults [#479](https://github.com/openshift/cloud-credential-operator/pull/479)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/aa5510254782d506f59a0578661f22a8d639dc85...8442cbf528bbfa76aaf29db67ce09d1164ed019a)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/f660e7e25a799019c32a37da149c75c69b5cddef)

* Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration [#94](https://github.com/openshift/cloud-network-config-controller/pull/94)
* [OCPBUGS-2162](https://issues.redhat.com/browse/OCPBUGS-2162): Add resolver to handle custom endpoints [#67](https://github.com/openshift/cloud-network-config-controller/pull/67)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8723adb2d36b7d96363d57b8a9208880eccea53e...f660e7e25a799019c32a37da149c75c69b5cddef)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/6a015c7108252fa22c75ffa4b7757d28bfed902a)

* [Bug 2084054](https://bugzilla.redhat.com/show_bug.cgi?id=2084054): only ever include certificates in the oauth-serving-cert CM [#577](https://github.com/openshift/cluster-authentication-operator/pull/577)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/d5638f89489feae006e0d84e5ec3a33e38af46ea...6a015c7108252fa22c75ffa4b7757d28bfed902a)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/266ba2db3dbf1fb7ddd07aca7c6223d800ecf3d2)

* [OCPBUGS-2546](https://issues.redhat.com/browse/OCPBUGS-2546): UPSTREAM: <carry>: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 [#245](https://github.com/openshift/kubernetes-autoscaler/pull/245)
* [Bug 2105110](https://bugzilla.redhat.com/show_bug.cgi?id=2105110): Have VPA ignore phantom containers named "POD" [#236](https://github.com/openshift/kubernetes-autoscaler/pull/236)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/25d3ad55b9c54979ae42b05e258a66c1ec23bff5...266ba2db3dbf1fb7ddd07aca7c6223d800ecf3d2)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/0e3d8397951f4b45000a92ad923b30cff5f9e767)

* [OCPBUGS-3997](https://issues.redhat.com/browse/OCPBUGS-3997): add a workaround for a NetworkManager issue [#308](https://github.com/openshift/cluster-baremetal-operator/pull/308)
* [OCPBUGS-1239](https://issues.redhat.com/browse/OCPBUGS-1239): do not rely on string "master" to be in BMH names [#287](https://github.com/openshift/cluster-baremetal-operator/pull/287)
* [OCPBUGS-1517](https://issues.redhat.com/browse/OCPBUGS-1517): [release-4.10] Fix a few papercuts [#291](https://github.com/openshift/cluster-baremetal-operator/pull/291)
* [Bug 2101002](https://bugzilla.redhat.com/show_bug.cgi?id=2101002): Uplift kustomize and BMO to remove go-getter dependency [#281](https://github.com/openshift/cluster-baremetal-operator/pull/281)
* Synchronize OWNERS from master [#274](https://github.com/openshift/cluster-baremetal-operator/pull/274)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/85fbfb7435d75d336d0946894f0e320616fb8f7e...0e3d8397951f4b45000a92ad923b30cff5f9e767)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/237ae9966d99fec1b493e22a552b6da59bf6225d)

* [OCPBUGS-6039](https://issues.redhat.com/browse/OCPBUGS-6039): Try to limit groups for the REST mapper discovery [#229](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/229)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e2e0d4f901ef8a89dcda6f5555b44ff9398cf22d...237ae9966d99fec1b493e22a552b6da59bf6225d)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ab6f33b3d2b388c3bc804f5e7aa0dedb8207396f)

* [OCPBUGS-2602](https://issues.redhat.com/browse/OCPBUGS-2602): Allow autoscaler to evict DNS pods [#350](https://github.com/openshift/cluster-dns-operator/pull/350)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/bc48e0aa0135bfdcdb6dbf7fbf18628c5849892b...ab6f33b3d2b388c3bc804f5e7aa0dedb8207396f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/e6fbce54d19b30d069ffa558d09529ca89aaa1fa)

* [OCPBUGS-10233](https://issues.redhat.com/browse/OCPBUGS-10233): increase live/ready timeout and failure thresholds [#1026](https://github.com/openshift/cluster-etcd-operator/pull/1026)
* [OCPBUGS-7741](https://issues.redhat.com/browse/OCPBUGS-7741): fail early on missing node status envs [#1008](https://github.com/openshift/cluster-etcd-operator/pull/1008)
* [OCPBUGS-7827](https://issues.redhat.com/browse/OCPBUGS-7827): set default timeouts in etcdcli [#1010](https://github.com/openshift/cluster-etcd-operator/pull/1010)
* [OCPBUGS-5425](https://issues.redhat.com/browse/OCPBUGS-5425): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#979](https://github.com/openshift/cluster-etcd-operator/pull/979)
* [OCPBUGS-2940](https://issues.redhat.com/browse/OCPBUGS-2940): revisit defrag controller degradation [#961](https://github.com/openshift/cluster-etcd-operator/pull/961)
* [OCPBUGS-2920](https://issues.redhat.com/browse/OCPBUGS-2920): update prometheus alerts [#956](https://github.com/openshift/cluster-etcd-operator/pull/956)
* [OCPBUGS-2800](https://issues.redhat.com/browse/OCPBUGS-2800): Add niceness to important etcd processes [#953](https://github.com/openshift/cluster-etcd-operator/pull/953)
* [OCPBUGS-1758](https://issues.redhat.com/browse/OCPBUGS-1758): fix cert rotation on IP changes [#936](https://github.com/openshift/cluster-etcd-operator/pull/936)
* [Bug 2116624](https://bugzilla.redhat.com/show_bug.cgi?id=2116624): etcd-metrics container is flooding logs [#906](https://github.com/openshift/cluster-etcd-operator/pull/906)
* [OCPBUGS-200](https://issues.redhat.com/browse/OCPBUGS-200): Exits with a non-zero code in case Etcd backup fails [#907](https://github.com/openshift/cluster-etcd-operator/pull/907)
* [Bug 2108176](https://bugzilla.redhat.com/show_bug.cgi?id=2108176): Fix etcd minor upgrade backup [#892](https://github.com/openshift/cluster-etcd-operator/pull/892)
* [Bug 2105249](https://bugzilla.redhat.com/show_bug.cgi?id=2105249): Add etcd pod liveness and readiness probes [#880](https://github.com/openshift/cluster-etcd-operator/pull/880)
* [Bug 2086451](https://bugzilla.redhat.com/show_bug.cgi?id=2086451): fix races in etcdclient [#828](https://github.com/openshift/cluster-etcd-operator/pull/828)
* fixing unit test health flakes with tolerance [#882](https://github.com/openshift/cluster-etcd-operator/pull/882)
* [Bug 2105148](https://bugzilla.redhat.com/show_bug.cgi?id=2105148): fix degraded missing cluster version [#878](https://github.com/openshift/cluster-etcd-operator/pull/878)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/2233707bfe5542c63a295e00781729f772fd3b54...e6fbce54d19b30d069ffa558d09529ca89aaa1fa)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/80540e65a4b8fbed7996fc6a0773141e23d97867)

* [OCPBUGS-6972](https://issues.redhat.com/browse/OCPBUGS-6972): OpenStack: Add support for Proxy [#837](https://github.com/openshift/cluster-image-registry-operator/pull/837)
* [OCPBUGS-5974](https://issues.redhat.com/browse/OCPBUGS-5974): swift: Retry connecting to OpenStack [#832](https://github.com/openshift/cluster-image-registry-operator/pull/832)
* add myself to OWNERS [#838](https://github.com/openshift/cluster-image-registry-operator/pull/838)
* [Bug 2110957](https://bugzilla.redhat.com/show_bug.cgi?id=2110957): Add progressing condition for node-ca daemon set [#791](https://github.com/openshift/cluster-image-registry-operator/pull/791)
* [OCPBUGS-2107](https://issues.redhat.com/browse/OCPBUGS-2107): Enable enableHttpsTrafficOnly for Azure storage account [#804](https://github.com/openshift/cluster-image-registry-operator/pull/804)
* [Bug 2110957](https://bugzilla.redhat.com/show_bug.cgi?id=2110957): Use actualDaemonSet for SetDaemonSetGeneration [#799](https://github.com/openshift/cluster-image-registry-operator/pull/799)
* [Bug 2115267](https://bugzilla.redhat.com/show_bug.cgi?id=2115267): Disable dualstack when it is not available [#794](https://github.com/openshift/cluster-image-registry-operator/pull/794)
* [Bug 2110963](https://bugzilla.redhat.com/show_bug.cgi?id=2110963): Bump aws-sdk-go to 1.44.4 [#793](https://github.com/openshift/cluster-image-registry-operator/pull/793)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/d2df5e8ef58452eac263b9352c02e3cdc1249847...80540e65a4b8fbed7996fc6a0773141e23d97867)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/805d0587ee481a7d7260d0b4ced0e6046cbfb7b6)

* [OCPBUGS-4494](https://issues.redhat.com/browse/OCPBUGS-4494): Update CRLs when they expire [#861](https://github.com/openshift/cluster-ingress-operator/pull/861)
* BUG 2094051: Fix removing custom created service in openshift-ingress with same naming convention [#820](https://github.com/openshift/cluster-ingress-operator/pull/820)
* [Bug 2079034](https://bugzilla.redhat.com/show_bug.cgi?id=2079034): Add allowPrivilegeEscalation to the router container [#748](https://github.com/openshift/cluster-ingress-operator/pull/748)
* [Bug 2097735](https://bugzilla.redhat.com/show_bug.cgi?id=2097735): Fix loadBalancerServiceAnnotationsChanged check and update [#784](https://github.com/openshift/cluster-ingress-operator/pull/784)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/24d1205129b99d243104af992f21a1d374955096...805d0587ee481a7d7260d0b4ced0e6046cbfb7b6)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9d85e4af2055f6eaba062856e022138b4618a258)

* [OCPBUGS-8235](https://issues.redhat.com/browse/OCPBUGS-8235): Guard pod set readiness probe endpoint explicitly [#1451](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1451)
* [OCPBUGS-5345](https://issues.redhat.com/browse/OCPBUGS-5345): routes/status resources can leak sensitive data [#1421](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1421)
* [OCPBUGS-2202](https://issues.redhat.com/browse/OCPBUGS-2202): [release-4.10] Wire support for trusted service account issuers [#1387](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1387)
* [Bug 2060058](https://bugzilla.redhat.com/show_bug.cgi?id=2060058): superfluous apirequestcount entries in audit log [#1327](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1327)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/78da169541f6a2d13b1e2cdba9fd0564f6fc1e3a...9d85e4af2055f6eaba062856e022138b4618a258)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/252604c216eee7c3f38a621b8a1f1f4b28a1665b)

* [OCPBUGS-8235](https://issues.redhat.com/browse/OCPBUGS-8235): Guard pod set readiness probe endpoint explicitly 4.10 [#704](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/704)
* [OCPBUGS-466](https://issues.redhat.com/browse/OCPBUGS-466): PodDisruptionBudgetAtLimit should not alert when no app/pods exist [#648](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/648)
* [Bug 2116983](https://bugzilla.redhat.com/show_bug.cgi?id=2116983): e2e: Fix test pod disruption budget at limit alert [#646](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/646)
* [Bug 2114587](https://bugzilla.redhat.com/show_bug.cgi?id=2114587): add runbook urls to KCM-o alerts [#645](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/645)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/ca3ff5396f45632a4ae9997d9b71441b52b62efd...252604c216eee7c3f38a621b8a1f1f4b28a1665b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0ed42ed800c1306e2367de60482fb72e3dd22e4a)

* [OCPBUGS-8235](https://issues.redhat.com/browse/OCPBUGS-8235): Guard controller: set the readiness probe endpoint explicitly [#465](https://github.com/openshift/cluster-kube-scheduler-operator/pull/465)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/d8694a5bde4de696c8dd710816c1da76fa49cc36...0ed42ed800c1306e2367de60482fb72e3dd22e4a)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/95404c4edb82f0c9d5eb1d03786c81bd3a137384)

* Updating ose-cluster-machine-approver images to be consistent with ART [#168](https://github.com/openshift/cluster-machine-approver/pull/168)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/55fb0f057498628a6e1240fe657b556a0721f596...95404c4edb82f0c9d5eb1d03786c81bd3a137384)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c413a79d9da0999c1ae98758b213968c7bdf5418)

* [OCPBUGS-11579](https://issues.redhat.com/browse/OCPBUGS-11579): jsonnet: Add prometheus container in UWM prometheus asset file [#1942](https://github.com/openshift/cluster-monitoring-operator/pull/1942)
* [OCPBUGS-10491](https://issues.redhat.com/browse/OCPBUGS-10491): Increase startupProbe for prometheus [#1920](https://github.com/openshift/cluster-monitoring-operator/pull/1920)
* [OCPBUGS-5864](https://issues.redhat.com/browse/OCPBUGS-5864): grafana: add the Content-Security-Policy header to requests [#1866](https://github.com/openshift/cluster-monitoring-operator/pull/1866)
* [OCPBUGS-2623](https://issues.redhat.com/browse/OCPBUGS-2623): Fix dashboards having container_fs* metrices in queries [#1798](https://github.com/openshift/cluster-monitoring-operator/pull/1798)
* [OCPBUGS-2037](https://issues.redhat.com/browse/OCPBUGS-2037): Bump Thanos to 0.23.2 [#1811](https://github.com/openshift/cluster-monitoring-operator/pull/1811)
* [OCPBUGS-450](https://issues.redhat.com/browse/OCPBUGS-450): jsonnet: bump dependencies [#1802](https://github.com/openshift/cluster-monitoring-operator/pull/1802)
* [OCPBUGS-1446](https://issues.redhat.com/browse/OCPBUGS-1446): [release-4.10] Use service ca beta annotation [#1778](https://github.com/openshift/cluster-monitoring-operator/pull/1778)
* [OCPBUGS-1676](https://issues.redhat.com/browse/OCPBUGS-1676): Dedicated kubelet ServiceMonitor for prometheus-adapter [#1777](https://github.com/openshift/cluster-monitoring-operator/pull/1777)
* [OCPBUGS-924](https://issues.redhat.com/browse/OCPBUGS-924): increase alertmanager's startupProbe failure threshold [#1760](https://github.com/openshift/cluster-monitoring-operator/pull/1760)
* [OCPBUGS-579](https://issues.redhat.com/browse/OCPBUGS-579): Give precedence to CMO config map proxy config [#1751](https://github.com/openshift/cluster-monitoring-operator/pull/1751)
* [Bug 2118303](https://bugzilla.redhat.com/show_bug.cgi?id=2118303): Adds UWM extrenalLabels from Prometheus to ThanosRuler labels [#1742](https://github.com/openshift/cluster-monitoring-operator/pull/1742)
* [Bug 2099526](https://bugzilla.redhat.com/show_bug.cgi?id=2099526): Updates jsonnet dependencies, prom-adapter [#1715](https://github.com/openshift/cluster-monitoring-operator/pull/1715)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/57d239c2c2909ea4f8a561d738db0c34b7275ad8...c413a79d9da0999c1ae98758b213968c7bdf5418)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/7dedb9287c75d2c8da1a60580c7d1667a90ffe03)

* [OCPBUGS-64](https://issues.redhat.com/browse/OCPBUGS-64): CNI binary copy should account for the possibility of symlinks [backport 4.10] [#1617](https://github.com/openshift/cluster-network-operator/pull/1617)
* [OCPBUGS-5955](https://issues.redhat.com/browse/OCPBUGS-5955): Backport Added missing API field podref to OverlappingRangeIPReservation CRD [#1687](https://github.com/openshift/cluster-network-operator/pull/1687)
* [OCPBUGS-6736](https://issues.redhat.com/browse/OCPBUGS-6736): Remove nbctl logfile [#1587](https://github.com/openshift/cluster-network-operator/pull/1587)
* [OCPBUGS-5575](https://issues.redhat.com/browse/OCPBUGS-5575): CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be [#1682](https://github.com/openshift/cluster-network-operator/pull/1682)
* [Bug 2092193](https://bugzilla.redhat.com/show_bug.cgi?id=2092193): Bump PodDisruptionBudget to v1 [#1470](https://github.com/openshift/cluster-network-operator/pull/1470)
* [OCPBUGS-4614](https://issues.redhat.com/browse/OCPBUGS-4614): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1651](https://github.com/openshift/cluster-network-operator/pull/1651)
* Jira OCPBUGS-3853: IPsec: Fix broken counter++ expression [#1646](https://github.com/openshift/cluster-network-operator/pull/1646)
* [Bug 2111588](https://bugzilla.redhat.com/show_bug.cgi?id=2111588): Enable OVS metrics for ovnk [#1599](https://github.com/openshift/cluster-network-operator/pull/1599)
* [OCPBUGS-1538](https://issues.redhat.com/browse/OCPBUGS-1538): Make northd probe interval default to 10 seconds [#1563](https://github.com/openshift/cluster-network-operator/pull/1563)
* Bug OCPBUGS-942: Kuryr: Bump timeoutSeconds for livenessProbe [#1550](https://github.com/openshift/cluster-network-operator/pull/1550)
* [Bug 2095111](https://bugzilla.redhat.com/show_bug.cgi?id=2095111): ovn: fix northd preStop command handling [#1477](https://github.com/openshift/cluster-network-operator/pull/1477)
* [Bug 2083266](https://bugzilla.redhat.com/show_bug.cgi?id=2083266): Limit Kuryr pods permissions [#1435](https://github.com/openshift/cluster-network-operator/pull/1435)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a9b63ea675fc71fc01836518f7f9b9d0caf02ba9...7dedb9287c75d2c8da1a60580c7d1667a90ffe03)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b1c5690f87b4f3bba9b932474b55282c8dbf264e)

* Switch to OS-shipped stalld (#490) [#490](https://github.com/openshift/cluster-node-tuning-operator/pull/490)
* e2e: check for tsc=reliable instead of tsc=nowatchdog (#428) [#428](https://github.com/openshift/cluster-node-tuning-operator/pull/428)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/73f960989a07e5c4aed79ba1e9a86a09886eb271...b1c5690f87b4f3bba9b932474b55282c8dbf264e)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/91038370b1b6c56f55b47c31fc596deb304ca69a)

* [OCPBUGS-5345](https://issues.redhat.com/browse/OCPBUGS-5345): routes/status resources can leak sensitive data, exclude it from audit [#514](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/514)
* [release 4.10] Bug 2109235: openshift-apiserver pods never going NotReady [#501](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/501)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/224b294e6ffb13dc7715904151d9dc5642f7a7d1...91038370b1b6c56f55b47c31fc596deb304ca69a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/85e14c7cf4ccf86a443e7d70f42465f83f0ba7f8)

* [OCPBUGS-5788](https://issues.redhat.com/browse/OCPBUGS-5788): clusterquotareconciliation: do not sync quota monitor cache with no monitors registered [#97](https://github.com/openshift/cluster-policy-controller/pull/97)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/8e5b36511861e63664cf4abd4f4f63642ae3c644...85e14c7cf4ccf86a443e7d70f42465f83f0ba7f8)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/b27c4ce6602596083cb688b605f594c688fb4701)

* [OCPBUGS-2132](https://issues.redhat.com/browse/OCPBUGS-2132): openshift template cakephp-mysql-persistent apiVersion for 4.10 [#466](https://github.com/openshift/cluster-samples-operator/pull/466)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/d41950dc8b41b3bf87b6ca3ae12af525b6908d3c...b27c4ce6602596083cb688b605f594c688fb4701)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/0ad6026dffef5fd7c4a12e11ea468cdd2b35ee73)

* [OCPBUGS-691](https://issues.redhat.com/browse/OCPBUGS-691): [release-4.10] correct sc error messages for ibm and alibaba platforms [#314](https://github.com/openshift/cluster-storage-operator/pull/314)
* [OCPBUGS-286](https://issues.redhat.com/browse/OCPBUGS-286): HTTPS_PROXY ENV missing in some CSI driver operators [#311](https://github.com/openshift/cluster-storage-operator/pull/311)
* [Bug 2098655](https://bugzilla.redhat.com/show_bug.cgi?id=2098655): gcp cluster rollback fails due to storage failure [#300](https://github.com/openshift/cluster-storage-operator/pull/300)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/c6100acd3bf10416ccc0fda65f2a248cdb5a10b1...0ad6026dffef5fd7c4a12e11ea468cdd2b35ee73)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/33e65325a5780906244c2b36031e6e14d812d8b2)

* [OCPBUGS-10814](https://issues.redhat.com/browse/OCPBUGS-10814): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#917](https://github.com/openshift/cluster-version-operator/pull/917)
* [OCPBUGS-233](https://issues.redhat.com/browse/OCPBUGS-233): pkg/cvo/updatepayload: Set 'readOnlyRootFilesystem: false' [#824](https://github.com/openshift/cluster-version-operator/pull/824)
* [OCPBUGS-235](https://issues.redhat.com/browse/OCPBUGS-235): pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes [#825](https://github.com/openshift/cluster-version-operator/pull/825)
* [Bug 2108292](https://bugzilla.redhat.com/show_bug.cgi?id=2108292): pkg/cvo: retain initial completed update history entry [#798](https://github.com/openshift/cluster-version-operator/pull/798)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b09fb92a168981d235a1b8e2d320336aa7405ad6...33e65325a5780906244c2b36031e6e14d812d8b2)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/1e5a18ebda95b5703ea6e9fe511f459cb9615162)

* [OCPBUGS-6538](https://issues.redhat.com/browse/OCPBUGS-6538): go.mod: update github.com/prometheus/client_golang to v1.11.0 [#49](https://github.com/openshift/configmap-reload/pull/49)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/22a40ce77a1c3d4842b80de89f4df449672e5f5e...1e5a18ebda95b5703ea6e9fe511f459cb9615162)


### [console](https://github.com/openshift/console/tree/2f98c340863b596ffc97b9c49699efd31a9a8c78)

* [OCPBUGS-7657](https://issues.redhat.com/browse/OCPBUGS-7657): Editing Pipeline in the ocp console should show correct information [#12576](https://github.com/openshift/console/pull/12576)
* [OCPBUGS-7787](https://issues.redhat.com/browse/OCPBUGS-7787): [4.10.z] Fix kubevirt-console tests [#12580](https://github.com/openshift/console/pull/12580)
* [OCPBUGS-6754](https://issues.redhat.com/browse/OCPBUGS-6754): Fix for initial showing of topology contents [#12486](https://github.com/openshift/console/pull/12486)
* [OCPBUGS-5296](https://issues.redhat.com/browse/OCPBUGS-5296): Pan nodes into view if all nodes are not visible on load [#12485](https://github.com/openshift/console/pull/12485)
* [OCPBUGS-6690](https://issues.redhat.com/browse/OCPBUGS-6690): Fix NPE when displaying CSV with incomplete information [#12481](https://github.com/openshift/console/pull/12481)
* [OCPBUGS-5961](https://issues.redhat.com/browse/OCPBUGS-5961): add support for version v1beta1 for knativeServing and knativeEventing [#12441](https://github.com/openshift/console/pull/12441)
* [OCPBUGS-3485](https://issues.redhat.com/browse/OCPBUGS-3485): check that user can patch console operator config in s… [#12258](https://github.com/openshift/console/pull/12258)
* [Bug 2105911](https://bugzilla.redhat.com/show_bug.cgi?id=2105911): Fix create-namespace e2e test with updated 3scale operator [#11811](https://github.com/openshift/console/pull/11811)
* [OCPBUGS-3619](https://issues.redhat.com/browse/OCPBUGS-3619): Find latest pipeline run without firehose selector [#12265](https://github.com/openshift/console/pull/12265)
* [OCPBUGS-3336](https://issues.redhat.com/browse/OCPBUGS-3336): Add checks for pods in hpaPodRingLabel [#12249](https://github.com/openshift/console/pull/12249)
* [OCPBUGS-2717](https://issues.redhat.com/browse/OCPBUGS-2717): Update dependencies to the registry library and devfile parser [#12191](https://github.com/openshift/console/pull/12191)
* [OCPBUGS-2781](https://issues.redhat.com/browse/OCPBUGS-2781): Fix broken advanced options layout on the add page [#12204](https://github.com/openshift/console/pull/12204)
* [OCPBUGS-3161](https://issues.redhat.com/browse/OCPBUGS-3161): 'CatalogSource not found' in the virtualization [#12202](https://github.com/openshift/console/pull/12202)
* [Bug 2072792](https://bugzilla.redhat.com/show_bug.cgi?id=2072792): Fetch common templates in a different namespace [#12163](https://github.com/openshift/console/pull/12163)
* [Bug 2071517](https://bugzilla.redhat.com/show_bug.cgi?id=2071517): Fix swap usage queries for Top Consumers card in virtualization Overview page [#12172](https://github.com/openshift/console/pull/12172)
* [Bug 2090127](https://bugzilla.redhat.com/show_bug.cgi?id=2090127): Remove nodeSelectorTerms if not defined [#12161](https://github.com/openshift/console/pull/12161)
* [Bug 2052469](https://bugzilla.redhat.com/show_bug.cgi?id=2052469): Filter template list for boot source available [#12164](https://github.com/openshift/console/pull/12164)
* [OCPBUGS-2583](https://issues.redhat.com/browse/OCPBUGS-2583): attach owner reference to resources created on creating a user to allow garbage collection [#12189](https://github.com/openshift/console/pull/12189)
* [OCPBUGS-2894](https://issues.redhat.com/browse/OCPBUGS-2894): UI crash when storage class had missing annotation [#12220](https://github.com/openshift/console/pull/12220)
* [OCPBUGS-1696](https://issues.redhat.com/browse/OCPBUGS-1696): Handle missing BMH for Node gracefully [#12129](https://github.com/openshift/console/pull/12129)
* [OCPBUGS-1465](https://issues.redhat.com/browse/OCPBUGS-1465): mock call to /api/devfile in e2e [#12062](https://github.com/openshift/console/pull/12062)
* [OCPBUGS-2622](https://issues.redhat.com/browse/OCPBUGS-2622): Use local test data to mock a devfile registry [#12194](https://github.com/openshift/console/pull/12194)
* [OCPBUGS-2523](https://issues.redhat.com/browse/OCPBUGS-2523): updates test id for 3scale [#12184](https://github.com/openshift/console/pull/12184)
* [Bug 2072790](https://bugzilla.redhat.com/show_bug.cgi?id=2072790): Regression "Create VM" [#12160](https://github.com/openshift/console/pull/12160)
* [OCPBUGS-938](https://issues.redhat.com/browse/OCPBUGS-938): do not show NodesUpdateGroup if there are 0 nodes [#12061](https://github.com/openshift/console/pull/12061)
* [Bug 2090127](https://bugzilla.redhat.com/show_bug.cgi?id=2090127): CNV 20527: Enable boot source select for vm template [#12082](https://github.com/openshift/console/pull/12082)
* [Bug 2094074](https://bugzilla.redhat.com/show_bug.cgi?id=2094074): Remove error on user template with DS [#12092](https://github.com/openshift/console/pull/12092)
* [Bug 2054917](https://bugzilla.redhat.com/show_bug.cgi?id=2054917): Fix template example yaml [#12091](https://github.com/openshift/console/pull/12091)
* [Bug 2072790](https://bugzilla.redhat.com/show_bug.cgi?id=2072790): Select template using also queryParams [#12090](https://github.com/openshift/console/pull/12090)
* [OCPBUGS-1759](https://issues.redhat.com/browse/OCPBUGS-1759): Show already loaded catalog items after a timeout (3sec) [#12106](https://github.com/openshift/console/pull/12106)
* [OCPBUGS-403](https://issues.redhat.com/browse/OCPBUGS-403): fix broken update server link [#11974](https://github.com/openshift/console/pull/11974)
* [OCPBUGS-1815](https://issues.redhat.com/browse/OCPBUGS-1815): fetch shared resource imagestreams based on labels instance or name [#12110](https://github.com/openshift/console/pull/12110)
* [Bug 2107898](https://bugzilla.redhat.com/show_bug.cgi?id=2107898): Access mode and volume mode with sourceRef will now be taken from default storageclass [#11907](https://github.com/openshift/console/pull/11907)
* [OCPBUGS-1828](https://issues.redhat.com/browse/OCPBUGS-1828): Fix devfile registry assertion [#12112](https://github.com/openshift/console/pull/12112)
* [OCPBUGS-1634](https://issues.redhat.com/browse/OCPBUGS-1634): Update registry library dependency to pick up proxy support [#12040](https://github.com/openshift/console/pull/12040)
* [Bug 2080389](https://bugzilla.redhat.com/show_bug.cgi?id=2080389): Link to documentation from the overview page goes to a missing link [#11909](https://github.com/openshift/console/pull/11909)
* [OCPBUGS-382](https://issues.redhat.com/browse/OCPBUGS-382): [OSD] ClusterVersion YAML editor should be read only [#11922](https://github.com/openshift/console/pull/11922)
* [OCPBUGS-550](https://issues.redhat.com/browse/OCPBUGS-550): Input values in Instantiate Template are disappeared randomly in the developer console [#11983](https://github.com/openshift/console/pull/11983)
* [Bug 2077142](https://bugzilla.redhat.com/show_bug.cgi?id=2077142): Fix Web Terminal availability check to verify operator is installed [#11374](https://github.com/openshift/console/pull/11374)
* [Bug 2117642](https://bugzilla.redhat.com/show_bug.cgi?id=2117642): Backport CI test fix to relase 4.10 [#11966](https://github.com/openshift/console/pull/11966)
* [Bug 2117351](https://bugzilla.redhat.com/show_bug.cgi?id=2117351): fix helm readme bug [#11950](https://github.com/openshift/console/pull/11950)
* Revert "Bug 2100103: Can't delete rootdisk in customization wizard" [#11932](https://github.com/openshift/console/pull/11932)
* [Bug 2114833](https://bugzilla.redhat.com/show_bug.cgi?id=2114833): Use hostname from provided git url when making git api calls [#11924](https://github.com/openshift/console/pull/11924)
* [Bug 2111335](https://bugzilla.redhat.com/show_bug.cgi?id=2111335): Cannot edit ssh even vm is stopped [#11886](https://github.com/openshift/console/pull/11886)
* [Bug 2101412](https://bugzilla.redhat.com/show_bug.cgi?id=2101412): fix bug where Cluster update modal errors weren't displa… [#11765](https://github.com/openshift/console/pull/11765)
* [Bug 2112910](https://bugzilla.redhat.com/show_bug.cgi?id=2112910): Fix search redirect [#11914](https://github.com/openshift/console/pull/11914)
* [Bug 2100103](https://bugzilla.redhat.com/show_bug.cgi?id=2100103): Can't delete rootdisk in customization wizard [#11887](https://github.com/openshift/console/pull/11887)
* [Bug 2052444](https://bugzilla.redhat.com/show_bug.cgi?id=2052444): Unstar RHEL 7 template [#11885](https://github.com/openshift/console/pull/11885)
* [Bug 2110536](https://bugzilla.redhat.com/show_bug.cgi?id=2110536): add z-index to ocs-drawer to make box-shadow visible [#11873](https://github.com/openshift/console/pull/11873)
* [Bug 2110938](https://bugzilla.redhat.com/show_bug.cgi?id=2110938): VM list page crashed [#11879](https://github.com/openshift/console/pull/11879)
* [Bug 2063153](https://bugzilla.redhat.com/show_bug.cgi?id=2063153): Use link to the downstream doc for Sysprep info [#11772](https://github.com/openshift/console/pull/11772)
* [Bug 2108193](https://bugzilla.redhat.com/show_bug.cgi?id=2108193): update icons for eventSource and eventSink [#11847](https://github.com/openshift/console/pull/11847)
* [Bug 2053703](https://bugzilla.redhat.com/show_bug.cgi?id=2053703): Handle blank usernames in error message [#11045](https://github.com/openshift/console/pull/11045)
* [Bug 2109225](https://bugzilla.redhat.com/show_bug.cgi?id=2109225): Remove `modelsLoaded` conditional rendering from ModelStatusBox [#11857](https://github.com/openshift/console/pull/11857)
* [Bug 2106385](https://bugzilla.redhat.com/show_bug.cgi?id=2106385): Fix CronJob resource version to batch/v1 [#11820](https://github.com/openshift/console/pull/11820)
* [Bug 2106385](https://bugzilla.redhat.com/show_bug.cgi?id=2106385): redirect v1beta1 CronJobs [#11819](https://github.com/openshift/console/pull/11819)
* [Bug 2095217](https://bugzilla.redhat.com/show_bug.cgi?id=2095217): VM SSH command generated by UI points at api VIP [#11779](https://github.com/openshift/console/pull/11779)
* [release 4.10] Bug 2094584: Cant create vm with sysprep [#11775](https://github.com/openshift/console/pull/11775)
* [Bug 2100974](https://bugzilla.redhat.com/show_bug.cgi?id=2100974): Restore spacing between/below modal body content [#11763](https://github.com/openshift/console/pull/11763)
* [Bug 2092832](https://bugzilla.redhat.com/show_bug.cgi?id=2092832): Check if spec is available in MCP details page [#11629](https://github.com/openshift/console/pull/11629)
* [Bug 2084629](https://bugzilla.redhat.com/show_bug.cgi?id=2084629): Add params prop to HorizontalNav component [#11488](https://github.com/openshift/console/pull/11488)
* [Bug 2100330](https://bugzilla.redhat.com/show_bug.cgi?id=2100330): disable upload for sourceRef templates [#11774](https://github.com/openshift/console/pull/11774)
* [Bug 2104889](https://bugzilla.redhat.com/show_bug.cgi?id=2104889): Fix topology sidebar update issues [#11798](https://github.com/openshift/console/pull/11798)
* [Bug 2052416](https://bugzilla.redhat.com/show_bug.cgi?id=2052416): fix offensive vm names [#11778](https://github.com/openshift/console/pull/11778)
* [Bug 2094194](https://bugzilla.redhat.com/show_bug.cgi?id=2094194): fix bug where log stream pauses in Chrome [#11654](https://github.com/openshift/console/pull/11654)
* [Full changelog](https://github.com/openshift/console/compare/f6858c4e8046c9d30c51dfc1abde438d5e3ab44a...2f98c340863b596ffc97b9c49699efd31a9a8c78)


### [console-operator](https://github.com/openshift/console-operator/tree/6673dd7ef12d2785e0d60290f74e348aa7e39e50)

* [Bug 2106944](https://bugzilla.redhat.com/show_bug.cgi?id=2106944): InfrastructureTopology must be driving console affinity rule creation [#664](https://github.com/openshift/console-operator/pull/664)
* [Bug 2078912](https://bugzilla.redhat.com/show_bug.cgi?id=2078912): Modify the operator display name to match it with the name displayed in operatorhub [#651](https://github.com/openshift/console-operator/pull/651)
* [Full changelog](https://github.com/openshift/console-operator/compare/7e488d3a109267c289572de13a751968699fdc93...6673dd7ef12d2785e0d60290f74e348aa7e39e50)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/3123ef8b0c773a55d0d5071c050919449d29fa90)

* [Bug 2103175](https://bugzilla.redhat.com/show_bug.cgi?id=2103175): Sysctl IFNAME [backport 4.10] [#63](https://github.com/openshift/containernetworking-plugins/pull/63)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/55e1cf1c72a5cd4b7bfa273bcd809f3282e317de...3123ef8b0c773a55d0d5071c050919449d29fa90)


### [coredns](https://github.com/openshift/coredns/tree/6c0325145a4d108f110f2bcb23aa69ba352e70d1)

* [OCPBUGS-2902](https://issues.redhat.com/browse/OCPBUGS-2902): Remove bufsize hardcoding to 2048 on cache upstream refreshes. [#80](https://github.com/openshift/coredns/pull/80)
* [Full changelog](https://github.com/openshift/coredns/compare/3ec1ee7dd91d5a1193745984c2c247ba3f2518d3...6c0325145a4d108f110f2bcb23aa69ba352e70d1)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/cb2949cac4331ee7f902be5eee9caae0258e2bd9)

* [OCPBUGS-6903](https://issues.redhat.com/browse/OCPBUGS-6903): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.23 into release-4.10 [#177](https://github.com/openshift/cloud-provider-openstack/pull/177)
* [OCPBUGS-5012](https://issues.redhat.com/browse/OCPBUGS-5012): Sync with upstream release-1.23 [#158](https://github.com/openshift/cloud-provider-openstack/pull/158)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/df0b27de80cfaa3f01e8cf0210f3a8d0c9a248d9...cb2949cac4331ee7f902be5eee9caae0258e2bd9)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/3b06768c823d54df549f488355ed348dff82a171)

* [OCPBUGS-10722](https://issues.redhat.com/browse/OCPBUGS-10722): Bump go.mongodb.org/mongo-driver to v1.5.1 [#178](https://github.com/openshift/csi-driver-manila-operator/pull/178)
* [OCPBUGS-7796](https://issues.redhat.com/browse/OCPBUGS-7796): Address CVE-2022-41717 [#169](https://github.com/openshift/csi-driver-manila-operator/pull/169)
* [Bug 2091649](https://bugzilla.redhat.com/show_bug.cgi?id=2091649): SWEET32: Improve TLS configuration for Kube RBAC Proxy [#150](https://github.com/openshift/csi-driver-manila-operator/pull/150)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/16f67d6cf67395065ee6084d2ef7fcb7c74bb151...3b06768c823d54df549f488355ed348dff82a171)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/e6b56647e363c623e4a1538f59d2cc60475c44ad)

* [OCPBUGS-10554](https://issues.redhat.com/browse/OCPBUGS-10554): Bump go.mongodb.org/mongo-driver to v1.5.1 [#114](https://github.com/openshift/csi-driver-nfs/pull/114)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/3448830c086f092863ce701cccc6b627bca5b827...e6b56647e363c623e4a1538f59d2cc60475c44ad)


### [docker-builder](https://github.com/openshift/builder/tree/3b7352af7e533bd6637ddebdd137121cc793f372)

* [OCPBUGS-205](https://issues.redhat.com/browse/OCPBUGS-205): Add support for BUILDAH_QUIET environment variable [#310](https://github.com/openshift/builder/pull/310)
* [Full changelog](https://github.com/openshift/builder/compare/24d8db40f7544806bf6e5acc32f56e223a59eed7...3b7352af7e533bd6637ddebdd137121cc793f372)


### [docker-registry](https://github.com/openshift/image-registry/tree/1892f21a94df9ea88a3fdbfe4648d672c319038f)

* [OCPBUGS-920](https://issues.redhat.com/browse/OCPBUGS-920): Keep OCI image configs when hard prune [#344](https://github.com/openshift/image-registry/pull/344)
* [Bug 2110963](https://bugzilla.redhat.com/show_bug.cgi?id=2110963): Bump aws-sdk-go to 1.44.4 [#340](https://github.com/openshift/image-registry/pull/340)
* [Full changelog](https://github.com/openshift/image-registry/compare/534ab3aa5e58cb48fb21ff564f59a3ac5077aef1...1892f21a94df9ea88a3fdbfe4648d672c319038f)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/fd4ea71c5456122d046ca9c188f3ab04fb7fd4d7)

* Adding kernel-rpm-macros to the Dockerfile. (#109) [#109](https://github.com/openshift/driver-toolkit/pull/109)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/0c77c8d662851e5a2ba8e85f4400c60f63d2fb6c...fd4ea71c5456122d046ca9c188f3ab04fb7fd4d7)


### [etcd](https://github.com/openshift/etcd/tree/c3be56f7c25b24881b06c3cc421abdde9ea8db06)

* Update owners [#187](https://github.com/openshift/etcd/pull/187)
* Updating ose-etcd images to be consistent with ART [#151](https://github.com/openshift/etcd/pull/151)
* [OCPBUGS-5950](https://issues.redhat.com/browse/OCPBUGS-5950): UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… [#179](https://github.com/openshift/etcd/pull/179)
* [OCPBUGS-3103](https://issues.redhat.com/browse/OCPBUGS-3103): Rebase openshift/etcd 4.10 onto v3.5.6 [#171](https://github.com/openshift/etcd/pull/171)
* [OCPBUGS-2142](https://issues.redhat.com/browse/OCPBUGS-2142): Rebase openshift/etcd 4.10 onto 3.5.5 [#156](https://github.com/openshift/etcd/pull/156)
* [Full changelog](https://github.com/openshift/etcd/compare/7afa17cd7209a6ff16724a5a44bd2e05007e3171...c3be56f7c25b24881b06c3cc421abdde9ea8db06)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/a8d5b9445f4096b6f2c0fc38789cc065e8f736b4)

* [OCPBUGS-5291](https://issues.redhat.com/browse/OCPBUGS-5291): refactor restartPolicyToBool function [#36](https://github.com/openshift/machine-api-provider-gcp/pull/36)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/3fe46c8bc8bdbbccc778fd71dd1939495888ed56...a8d5b9445f4096b6f2c0fc38789cc065e8f736b4)


### [grafana](https://github.com/openshift/grafana/tree/ca476d4cc6e8692bf3fb377a6da0a37285659e6c)

* [OCPBUGS-4260](https://issues.redhat.com/browse/OCPBUGS-4260): bump github.com/crewjam/saml dependency [#93](https://github.com/openshift/grafana/pull/93)
* [Full changelog](https://github.com/openshift/grafana/compare/48aec355b16ba21f9a7d3f2896a538351526d104...ca476d4cc6e8692bf3fb377a6da0a37285659e6c)


### [haproxy-router](https://github.com/openshift/router/tree/c1e7f4053c219d193ca908711255fe37fd931bc7)

* [Bug 2098230](https://bugzilla.redhat.com/show_bug.cgi?id=2098230): Fix gap in router's handling of graceful shutdowns. [#406](https://github.com/openshift/router/pull/406)
* [Bug 2096362](https://bugzilla.redhat.com/show_bug.cgi?id=2096362): HAProxy: enable PROXY protocol for all listeners [#405](https://github.com/openshift/router/pull/405)
* [Full changelog](https://github.com/openshift/router/compare/11109e4028b69749d6f842a4da682916e0d91d2f...c1e7f4053c219d193ca908711255fe37fd931bc7)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/16bcd69799fb6940554b1110a7d229f4a24d6632)

* [OCPBUGS-8314](https://issues.redhat.com/browse/OCPBUGS-8314): bump to k8s 1.23.17 [#1497](https://github.com/openshift/kubernetes/pull/1497)
* [OCPBUGS-10244](https://issues.redhat.com/browse/OCPBUGS-10244): Fix mounted volume expansion tests [#1510](https://github.com/openshift/kubernetes/pull/1510)
* [OCPBUGS-3434](https://issues.redhat.com/browse/OCPBUGS-3434): UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines [#1415](https://github.com/openshift/kubernetes/pull/1415)
* UPSTREAM: <carry>: Wait for default service account in node authorizer test [#1398](https://github.com/openshift/kubernetes/pull/1398)
* [Bug 2101326](https://bugzilla.redhat.com/show_bug.cgi?id=2101326): bump to k8s 1.23.12 [#1382](https://github.com/openshift/kubernetes/pull/1382)
* [OCPBUGS-1266](https://issues.redhat.com/browse/OCPBUGS-1266): UPSTREAM: <carry>: Remove reserved CPUs from default set [#1362](https://github.com/openshift/kubernetes/pull/1362)
* [Bug 2106414](https://bugzilla.redhat.com/show_bug.cgi?id=2106414): UPSTREAM: 109103: cpu/memory manager containerMap memory leak [#1318](https://github.com/openshift/kubernetes/pull/1318)
* [Bug 2103381](https://bugzilla.redhat.com/show_bug.cgi?id=2103381): UPSTREAM: <carry>: update list of deprecated apis [#1306](https://github.com/openshift/kubernetes/pull/1306)
* [Bug 2104928](https://bugzilla.redhat.com/show_bug.cgi?id=2104928): UPSTREAM: 109932: fix: exclude non-ready nodes and deleted nodes from azure load balancers [#1263](https://github.com/openshift/kubernetes/pull/1263)
* [Full changelog](https://github.com/openshift/kubernetes/compare/3afdacbd0183254f82d302d4e8d14da3d311955f...16bcd69799fb6940554b1110a7d229f4a24d6632)


### [hypershift](https://github.com/openshift/hypershift/tree/d78564a0e876ebbda44e5c7f15f67ed9073c492b)

* Use non-strict mode when parsing global config [#1619](https://github.com/openshift/hypershift/pull/1619)
* adopt existing immutable selectors to prevent errors reconciling components from roks toolkit clusters [#1571](https://github.com/openshift/hypershift/pull/1571)
* cache registry files [#1567](https://github.com/openshift/hypershift/pull/1567)
* feat(oauth): allow challenge override for OpenID [#1543](https://github.com/openshift/hypershift/pull/1543)
* Add fallback set cache value from old token [#1531](https://github.com/openshift/hypershift/pull/1531)
* [Full changelog](https://github.com/openshift/hypershift/compare/e0381678a8fc9356a033499ea3e3b8b8e3d2f9ec...d78564a0e876ebbda44e5c7f15f67ed9073c492b)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/fc60caeba29541f39992217049e74e2fc9fd03cf)

* [OCPBUGS-1488](https://issues.redhat.com/browse/OCPBUGS-1488): Add udev [#20](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/20)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/d54e3706bb8b38447800aa91632a946eb6c990ec...fc60caeba29541f39992217049e74e2fc9fd03cf)


### [image-customization-controller](https://github.com/openshift/image-customization-controller/tree/a24f082c8ebd32ede3d53c088c8ef11007384401)

* [OCPBUGS-3999](https://issues.redhat.com/browse/OCPBUGS-3999): use host IPC for the agent container [#71](https://github.com/openshift/image-customization-controller/pull/71)
* [OCPBUGS-754](https://issues.redhat.com/browse/OCPBUGS-754): mount /run/udev into the agent container [#64](https://github.com/openshift/image-customization-controller/pull/64)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/44d63f1f9c76ede6d281a1a0f97a823fa0e365e0...a24f082c8ebd32ede3d53c088c8ef11007384401)


### [insights-operator](https://github.com/openshift/insights-operator/tree/871cc6053ee5187f8889815c1f88094279444bcf)

* [OCPBUGS-6832](https://issues.redhat.com/browse/OCPBUGS-6832): feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#740) [#726](https://github.com/openshift/insights-operator/pull/726)
* [OCPBUGS-1987](https://issues.redhat.com/browse/OCPBUGS-1987): do not periodically update Available clusteroperator co… (#718) (#720) [#718](https://github.com/openshift/insights-operator/pull/718)
* helm upgrades and uninstalls backport 4.10 (#663) [#663](https://github.com/openshift/insights-operator/pull/663)
* OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) [#659](https://github.com/openshift/insights-operator/pull/659)
* [Full changelog](https://github.com/openshift/insights-operator/compare/85bb6ef1e3de2ebea0840a5eba816f19c6d551d8...871cc6053ee5187f8889815c1f88094279444bcf)


### [ironic](https://github.com/openshift/ironic-image/tree/23cbe53357d41c7e08a12dc7de6cb92861e263b2)

* [OCPBUGS-7163](https://issues.redhat.com/browse/OCPBUGS-7163): Increase power_state_change_timeout setting [#348](https://github.com/openshift/ironic-image/pull/348)
* Bug OCPBUGS-6886: Fix setting boot related attributes [#347](https://github.com/openshift/ironic-image/pull/347)
* [OCPBUGS-5344](https://issues.redhat.com/browse/OCPBUGS-5344): Configure Ironic iLO driver to use web server [#343](https://github.com/openshift/ironic-image/pull/343)
* [OCPBUGS-4467](https://issues.redhat.com/browse/OCPBUGS-4467): Remove RDO distribution configuration [#330](https://github.com/openshift/ironic-image/pull/330)
* [OCPBUGS-5415](https://issues.redhat.com/browse/OCPBUGS-5415): Update packages versions with latest available [#345](https://github.com/openshift/ironic-image/pull/345)
* Bug OCPBUGS-3477: Improve resiliency of eTag handling [#316](https://github.com/openshift/ironic-image/pull/316)
* [OCPBUGS-2829](https://issues.redhat.com/browse/OCPBUGS-2829): Removed ServerName from VirtualHost Directives [#307](https://github.com/openshift/ironic-image/pull/307)
* [OCPBUGS-1740](https://issues.redhat.com/browse/OCPBUGS-1740): Backport improvements to iDRAC steps to OCP 4.10 [#303](https://github.com/openshift/ironic-image/pull/303)
* [OCPBUGS-1225](https://issues.redhat.com/browse/OCPBUGS-1225): sync BIOS settings fixes [#298](https://github.com/openshift/ironic-image/pull/298)
* [Bug 2109125](https://bugzilla.redhat.com/show_bug.cgi?id=2109125): Upgrade version of ironic package to include fix for ZTP deployment [#284](https://github.com/openshift/ironic-image/pull/284)
* [Full changelog](https://github.com/openshift/ironic-image/compare/a5138bf485c5a62c4fe2dd86cdd6c0095f0c5372...23cbe53357d41c7e08a12dc7de6cb92861e263b2)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/28ee0ef73966f9989e5ad83ef55791390738a59a)

* [OCPBUGS-7533](https://issues.redhat.com/browse/OCPBUGS-7533): make coreos-installer output available in the logs [#68](https://github.com/openshift/ironic-agent-image/pull/68)
* [OCPBUGS-1232](https://issues.redhat.com/browse/OCPBUGS-1232): Include Fix for discovering bond interfaces [#63](https://github.com/openshift/ironic-agent-image/pull/63)
* [Bug 2100775](https://bugzilla.redhat.com/show_bug.cgi?id=2100775): Include Fix discovering WWN/serial for devicemapper devices [#56](https://github.com/openshift/ironic-agent-image/pull/56)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/13a29d20cde4fa393580a03f7ae14f98b2e6cc09...28ee0ef73966f9989e5ad83ef55791390738a59a)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/612efccd82a0bbbf0efce1e10a9e46b4f30f0bf7)

* [OCPBUGS-11499](https://issues.redhat.com/browse/OCPBUGS-11499), [OCPBUGS-11500](https://issues.redhat.com/browse/OCPBUGS-11500), [OCPBUGS-11501](https://issues.redhat.com/browse/OCPBUGS-11501): Various issues [#1658](https://github.com/openshift/jenkins/pull/1658)
* [OCPBUGS-11238](https://issues.redhat.com/browse/OCPBUGS-11238): Fix labels for jenkins-slave-base-rhel8 [#1643](https://github.com/openshift/jenkins/pull/1643)
* [OCPBUGS-10012](https://issues.redhat.com/browse/OCPBUGS-10012), [OCPBUGS-10020](https://issues.redhat.com/browse/OCPBUGS-10020), [OCPBUGS-6079](https://issues.redhat.com/browse/OCPBUGS-6079): Bump Jenkins [#1639](https://github.com/openshift/jenkins/pull/1639)
* [OCPBUGS-11236](https://issues.redhat.com/browse/OCPBUGS-11236), [OCPBUGS-11237](https://issues.redhat.com/browse/OCPBUGS-11237), [OCPBUGS-11239](https://issues.redhat.com/browse/OCPBUGS-11239): Bump Jenkins version to 2.387.1 [#1642](https://github.com/openshift/jenkins/pull/1642)
* [OCPBUGS-11240](https://issues.redhat.com/browse/OCPBUGS-11240): configuration-as-code bumped to 1569.vb_72405b_80249 [#1644](https://github.com/openshift/jenkins/pull/1644)
* [OCPBUGS-6627](https://issues.redhat.com/browse/OCPBUGS-6627): Bump script security plugin [#1624](https://github.com/openshift/jenkins/pull/1624)
* [OCPBUGS-7238](https://issues.redhat.com/browse/OCPBUGS-7238): Enable Websocket support [#1587](https://github.com/openshift/jenkins/pull/1587)
* [OCPBUGS-7052](https://issues.redhat.com/browse/OCPBUGS-7052): Sync jenkins version and plugins with ma… [#1582](https://github.com/openshift/jenkins/pull/1582)
* [OCPBUGS-4095](https://issues.redhat.com/browse/OCPBUGS-4095): Required Plugin `workflow-multibranch` [#1569](https://github.com/openshift/jenkins/pull/1569)
* [OCPBUGS-6645](https://issues.redhat.com/browse/OCPBUGS-6645): Handle routes properly in s2i/run [#1562](https://github.com/openshift/jenkins/pull/1562)
* [OCPBUGS-4095](https://issues.redhat.com/browse/OCPBUGS-4095): Various CVEs September/2022 [#1547](https://github.com/openshift/jenkins/pull/1547)
* [OCPBUGS-900](https://issues.redhat.com/browse/OCPBUGS-900): Bump openshift login plugin to 1.0.29 [#1561](https://github.com/openshift/jenkins/pull/1561)
* [OCPBUGS-912](https://issues.redhat.com/browse/OCPBUGS-912): Add maven plugin dependency in base plugins [#1530](https://github.com/openshift/jenkins/pull/1530)
* [OCPBUGS-3697](https://issues.redhat.com/browse/OCPBUGS-3697): [release-4.10] Update OWNERS [#1521](https://github.com/openshift/jenkins/pull/1521)
* [release: 4.10] OCPBUGS-2137: Sync javax-mail-api with version required by jenkins 2.361.1 [#1496](https://github.com/openshift/jenkins/pull/1496)
* [OCPBUGS-724](https://issues.redhat.com/browse/OCPBUGS-724): Update blueocean-autofavorite to 1.2.5 [#1478](https://github.com/openshift/jenkins/pull/1478)
* [OCPBUGS-2943](https://issues.redhat.com/browse/OCPBUGS-2943): Force git-server to an earlier version [#1509](https://github.com/openshift/jenkins/pull/1509)
* [OCPBUGS-2185](https://issues.redhat.com/browse/OCPBUGS-2185): Bump Jenkins version to 2.361.1 [#1499](https://github.com/openshift/jenkins/pull/1499)
* [OCPBUGS-1440](https://issues.redhat.com/browse/OCPBUGS-1440): fix install plugins script [#1484](https://github.com/openshift/jenkins/pull/1484)
* [OCPBUGS-1037](https://issues.redhat.com/browse/OCPBUGS-1037): Install glibc language package to remove `setLocale` warning [#1480](https://github.com/openshift/jenkins/pull/1480)
* [OCPBUGS-473](https://issues.redhat.com/browse/OCPBUGS-473): CVE mitigations [#1479](https://github.com/openshift/jenkins/pull/1479)
* [OCPBUGS-713](https://issues.redhat.com/browse/OCPBUGS-713): Add user coreydaley to approvers list [#1477](https://github.com/openshift/jenkins/pull/1477)
* [OCPBUGS-400](https://issues.redhat.com/browse/OCPBUGS-400): Revert xmlstarlet usage [#1469](https://github.com/openshift/jenkins/pull/1469)
* [Full changelog](https://github.com/openshift/jenkins/compare/c5b7159fa16120da52bd2c1e5003e2b1a0e9be33...612efccd82a0bbbf0efce1e10a9e46b4f30f0bf7)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/f153a7cdc2e34bd34146ff7c4fb2adda4e892aa7)

* [OCPBUGS-10912](https://issues.redhat.com/browse/OCPBUGS-10912): Fix race in Egress IP Tracker start [#524](https://github.com/openshift/sdn/pull/524)
* [OCPBUGS-10524](https://issues.redhat.com/browse/OCPBUGS-10524): Initialize egress node monitoring struct with previous reachability status [#519](https://github.com/openshift/sdn/pull/519)
* [OCPBUGS-8091](https://issues.redhat.com/browse/OCPBUGS-8091): Handle race condition to setup default vnid flows [#512](https://github.com/openshift/sdn/pull/512)
* [OCPBUGS-5977](https://issues.redhat.com/browse/OCPBUGS-5977): Use pagination and set ResourceVersion to 0 when listing resources [#494](https://github.com/openshift/sdn/pull/494)
* [OCPBUGS-6911](https://issues.redhat.com/browse/OCPBUGS-6911): Add node egress IP assignment resync [#501](https://github.com/openshift/sdn/pull/501)
* [OCPBUGS-2106](https://issues.redhat.com/browse/OCPBUGS-2106): fix network policy egress [#465](https://github.com/openshift/sdn/pull/465)
* Bug OCPBUGS-4387: Rebase against cherry-pick of kubernetes#107413 [#475](https://github.com/openshift/sdn/pull/475)
* [OCPBUGS-3996](https://issues.redhat.com/browse/OCPBUGS-3996): egressip: Continue to process other nodes if a node is not ready [#472](https://github.com/openshift/sdn/pull/472)
* [OCPBUGS-647](https://issues.redhat.com/browse/OCPBUGS-647): Fix DNS endpoint hack to prefer local instead of forcing it [#467](https://github.com/openshift/sdn/pull/467)
* [OCPBUGS-647](https://issues.redhat.com/browse/OCPBUGS-647): Fix OCP hack to prefer local DNS endpoints [#457](https://github.com/openshift/sdn/pull/457)
* [OCPBUGS-255](https://issues.redhat.com/browse/OCPBUGS-255): setup network policy rules during pod creation to fix postStart hook [#455](https://github.com/openshift/sdn/pull/455)
* [Full changelog](https://github.com/openshift/sdn/compare/474a107e08401a2bb9ba749f4b1717b3eb3a508a...f153a7cdc2e34bd34146ff7c4fb2adda4e892aa7)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/df55d3ea3dc12dbebf4daedcf4f886b3b73a8e35)

* [OCPBUGS-4086](https://issues.redhat.com/browse/OCPBUGS-4086): cherry-pick, do not expose ingress path metric when service is nil [#86](https://github.com/openshift/kube-state-metrics/pull/86)
* [OCPBUGS-2196](https://issues.redhat.com/browse/OCPBUGS-2196): internal/store: fix metrics slice length [#79](https://github.com/openshift/kube-state-metrics/pull/79)
* [Bug 2078835](https://bugzilla.redhat.com/show_bug.cgi?id=2078835): internal/store: fix potential panic in pod store [#70](https://github.com/openshift/kube-state-metrics/pull/70)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/088ab061c537686f3e104ed0dd9f8794bb62f69c...df55d3ea3dc12dbebf4daedcf4f886b3b73a8e35)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/d4f4d9aeb17f2a20464dfeb35d7c26c74793dcf6)

* Bug OCPBUGS-941: Fix unbound router_id variable while creating event [#688](https://github.com/openshift/kuryr-kubernetes/pull/688)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/e96efa4ed07aa97f3856286a2e884694e3b39dc0...d4f4d9aeb17f2a20464dfeb35d7c26c74793dcf6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b7df887edb4b0a6e576a9904a31fa58edb71dcf7)

* [OCPBUGS-8359](https://issues.redhat.com/browse/OCPBUGS-8359): Append annotations from machine template spec to the node [#1125](https://github.com/openshift/machine-api-operator/pull/1125)
* Updating ose-machine-api-operator images to be consistent with ART [#1103](https://github.com/openshift/machine-api-operator/pull/1103)
* [OCPBUGS-957](https://issues.redhat.com/browse/OCPBUGS-957): Change "create" sequence with powering on the vm after clone [#1065](https://github.com/openshift/machine-api-operator/pull/1065)
* [Bug 2109124](https://bugzilla.redhat.com/show_bug.cgi?id=2109124): Add DescribeRegions permission for aws controller [#1046](https://github.com/openshift/machine-api-operator/pull/1046)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/d12b8a8f84ab656b466c89774cbf1992c14f1c9d...b7df887edb4b0a6e576a9904a31fa58edb71dcf7)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/afb47c916680dd5870e48e5c9cf819f59e12ff4d)

* [OCPBUGS-10703](https://issues.redhat.com/browse/OCPBUGS-10703): configure-ovs: fix mtu-migration cleanup [#3622](https://github.com/openshift/machine-config-operator/pull/3622)
* [OCPBUGS-5692](https://issues.redhat.com/browse/OCPBUGS-5692): 4.10 - remove goutils from dependency tree [#3500](https://github.com/openshift/machine-config-operator/pull/3500)
* [OCPBUGS-4830](https://issues.redhat.com/browse/OCPBUGS-4830): daemon: gate done state on uncordon completion [#3278](https://github.com/openshift/machine-config-operator/pull/3278)
* [OCPBUGS-6702](https://issues.redhat.com/browse/OCPBUGS-6702): controller: don't render new MC until base MCs update [#3517](https://github.com/openshift/machine-config-operator/pull/3517)
* [OCPBUGS-5831](https://issues.redhat.com/browse/OCPBUGS-5831): Do not allow empty system reserved values [#3487](https://github.com/openshift/machine-config-operator/pull/3487)
* [OCPBUGS-4810](https://issues.redhat.com/browse/OCPBUGS-4810): Sync controllerconfig anyway if daemon sync fails [#3454](https://github.com/openshift/machine-config-operator/pull/3454)
* [OCPBUGS-4136](https://issues.redhat.com/browse/OCPBUGS-4136): configure-ovs: auto-connect ovs-if-phys0 with br-ex [#3436](https://github.com/openshift/machine-config-operator/pull/3436)
* [OCPBUGS-4134](https://issues.redhat.com/browse/OCPBUGS-4134): Avoid NM managing patch port between br-int and br-ex [#3435](https://github.com/openshift/machine-config-operator/pull/3435)
* [OCPBUGS-3500](https://issues.redhat.com/browse/OCPBUGS-3500): Add ephemeral storage to kubelet system reserved args [#3408](https://github.com/openshift/machine-config-operator/pull/3408)
* [Bug 2069754](https://bugzilla.redhat.com/show_bug.cgi?id=2069754): [on-prem] Add NetworkManager reload to resolv-prepender [#3041](https://github.com/openshift/machine-config-operator/pull/3041)
* [OCPBUGS-2973](https://issues.redhat.com/browse/OCPBUGS-2973): drop doc overlaysize default [#3395](https://github.com/openshift/machine-config-operator/pull/3395)
* [OCPBUGS-2070](https://issues.redhat.com/browse/OCPBUGS-2070): Make sure there is a search domain in resolv.conf [#3366](https://github.com/openshift/machine-config-operator/pull/3366)
* [OCPBUGS-642](https://issues.redhat.com/browse/OCPBUGS-642): Fix .ssh directory not owned by core when created by Machine Config Daemon [#3315](https://github.com/openshift/machine-config-operator/pull/3315)
* [Bug 2118609](https://bugzilla.redhat.com/show_bug.cgi?id=2118609): Fix problem with retaining data in string array in piped while loop [#3289](https://github.com/openshift/machine-config-operator/pull/3289)
* [Bug 2118607](https://bugzilla.redhat.com/show_bug.cgi?id=2118607): configure-ovs: clone inactive autoconnect slaves [#3288](https://github.com/openshift/machine-config-operator/pull/3288)
* [Bug 2100894](https://bugzilla.redhat.com/show_bug.cgi?id=2100894): fix MCNameSuffix with kcfg ctrrcfg [#3224](https://github.com/openshift/machine-config-operator/pull/3224)
* [Bug 2084187](https://bugzilla.redhat.com/show_bug.cgi?id=2084187): Avoid kubernetes node port range [#3145](https://github.com/openshift/machine-config-operator/pull/3145)
* [Bug 2099686](https://bugzilla.redhat.com/show_bug.cgi?id=2099686): controller: de-couple FIPS and realtime detection [#3201](https://github.com/openshift/machine-config-operator/pull/3201)
* [Bug 2098626](https://bugzilla.redhat.com/show_bug.cgi?id=2098626): configure-ovs: improve handling of static ip and mac address configuration [#3197](https://github.com/openshift/machine-config-operator/pull/3197)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/c3ac7f07f1cae32456a7ab361e29f49af7eb0802...afb47c916680dd5870e48e5c9cf819f59e12ff4d)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/09a132b7c844082fe6945b327fd0243d5a729f7c)

* [OCPBUGS-960](https://issues.redhat.com/browse/OCPBUGS-960): Update rhcos release browser url [#24](https://github.com/openshift/machine-os-images/pull/24)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/52118759e5c68733954f15d0cdc45c255752aa3c...09a132b7c844082fe6945b327fd0243d5a729f7c)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/8557de96b849421acf495693b5e1375d6b4d88e9)

* [OCPBUGS-343](https://issues.redhat.com/browse/OCPBUGS-343): Configure ignored namespaces into multus-admission-controller [#55](https://github.com/openshift/multus-admission-controller/pull/55)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d7a7fe5df9f6303487475767acbb5228e8135af3...8557de96b849421acf495693b5e1375d6b4d88e9)


### [multus-cni](https://github.com/openshift/multus-cni/tree/5af476f2c32c078d8d59134140a0b990b412ecfb)

* [OCPBUGS-8672](https://issues.redhat.com/browse/OCPBUGS-8672): SNO: Pods fail to delete, Multus: failed to open netns [backport 4.10] [#147](https://github.com/openshift/multus-cni/pull/147)
* [Bug 2071800](https://bugzilla.redhat.com/show_bug.cgi?id=2071800): Remove error handling for getPod to force to proceed cmdDel [backport 4.10] [#132](https://github.com/openshift/multus-cni/pull/132)
* [OCPBUGS-2448](https://issues.redhat.com/browse/OCPBUGS-2448): Fix missing device-info in networks-status annotation for chained plugins [#137](https://github.com/openshift/multus-cni/pull/137)
* [Full changelog](https://github.com/openshift/multus-cni/compare/5059ec256a4eb5eb59e10ec59d343d42214d0c08...5af476f2c32c078d8d59134140a0b990b412ecfb)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/112baadbd274337521ca19782730d99c7e514eb4)

* [OCPBUGS-3943](https://issues.redhat.com/browse/OCPBUGS-3943): Excluded ranges bug (#282) [#105](https://github.com/openshift/whereabouts-cni/pull/105)
* [OCPBUGS-1659](https://issues.redhat.com/browse/OCPBUGS-1659): ip-reconciler: Add all non default interfaces to Pod IP list [#98](https://github.com/openshift/whereabouts-cni/pull/98)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/a8d68d3e48aa7e2d6e612268f6a5b408b5720776...112baadbd274337521ca19782730d99c7e514eb4)


### [must-gather](https://github.com/openshift/must-gather/tree/db7f815b979352e130967695b4a08f4f2c886bfb)

* [Bug 2106842](https://bugzilla.redhat.com/show_bug.cgi?id=2106842): Add timeout to oc cp command to fix must-gather delays when routers are terminating [#323](https://github.com/openshift/must-gather/pull/323)
* [Bug 2059777](https://bugzilla.redhat.com/show_bug.cgi?id=2059777): Fix the namespace extract filter [#288](https://github.com/openshift/must-gather/pull/288)
* [Bug 2106559](https://bugzilla.redhat.com/show_bug.cgi?id=2106559): fix gather_insights collection [#322](https://github.com/openshift/must-gather/pull/322)
* [Full changelog](https://github.com/openshift/must-gather/compare/617b8206291039b88a5bbde588682f33938e01aa...db7f815b979352e130967695b4a08f4f2c886bfb)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/6edc4a731f7db838f8693c918fe23fd971eb5689)

* [Bug 2116642](https://bugzilla.redhat.com/show_bug.cgi?id=2116642): Backport "mac duplicates" [#42](https://github.com/openshift/bond-cni/pull/42)
* [Bug 2101841](https://bugzilla.redhat.com/show_bug.cgi?id=2101841): Backport Fix incorrect bond name issue [#36](https://github.com/openshift/bond-cni/pull/36)
* [Full changelog](https://github.com/openshift/bond-cni/compare/d56a6b951d342cd08f45e7222004ab48b7556e95...6edc4a731f7db838f8693c918fe23fd971eb5689)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/cd4f5bb0d9792c582dc70bd186a3a1580abc5fc0)

* [OCPBUGS-2553](https://issues.redhat.com/browse/OCPBUGS-2553): bump kube to 1.23.12 to fix group sync [#85](https://github.com/openshift/oauth-apiserver/pull/85)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/effa26af0ee014ef342de1118ba0796cc72aaa01...cd4f5bb0d9792c582dc70bd186a3a1580abc5fc0)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7f883e65efdd40f63a543e5a687a820fa159180f)

* [OCPBUGS-4341](https://issues.redhat.com/browse/OCPBUGS-4341): fix printer panic [#337](https://github.com/openshift/openshift-apiserver/pull/337)
* [OCPBUGS-4604](https://issues.redhat.com/browse/OCPBUGS-4604): [release-4.10] bump to kube 1.23.12 [#323](https://github.com/openshift/openshift-apiserver/pull/323)
* Add coreydaley as reviewer/approver for pkg/build [#298](https://github.com/openshift/openshift-apiserver/pull/298)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6b16f7fa1a9561fd0c47f7cbd17ef6c4332485c7...7f883e65efdd40f63a543e5a687a820fa159180f)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/12a5dee1b6cbfe7b122c2336b78705e9b0705fc8)

* Bug OCPBUGS-4717: Add SecretHashAnnotation to node service [#104](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/104)
* [Bug 2091649](https://bugzilla.redhat.com/show_bug.cgi?id=2091649): SWEET32: Improve TLS configuration for Kube RBAC Proxy [#89](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/89)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/e0b571594762e0f724b1baa298d03b20a06588b4...12a5dee1b6cbfe7b122c2336b78705e9b0705fc8)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/963993b2017a498bf28fe72a89cf38878ab83a34)

* [OCPBUGS-6596](https://issues.redhat.com/browse/OCPBUGS-6596): Address CVE-2022-41717 [#251](https://github.com/openshift/cluster-api-provider-openstack/pull/251)
* [OCPBUGS-2628](https://issues.redhat.com/browse/OCPBUGS-2628): Ensure network defs without subnet follow noAllowedAddressPairs [#249](https://github.com/openshift/cluster-api-provider-openstack/pull/249)
* [OCPBUGS-1951](https://issues.redhat.com/browse/OCPBUGS-1951): Apply noAllowedAddressPairs on intended subnets only [#245](https://github.com/openshift/cluster-api-provider-openstack/pull/245)
* [Bug 1921656](https://bugzilla.redhat.com/show_bug.cgi?id=1921656): Remove dependence on annotation to allow Server deletion [#240](https://github.com/openshift/cluster-api-provider-openstack/pull/240)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/84171b7dfdb0160e85a789fbf4cff4950ba4e384...963993b2017a498bf28fe72a89cf38878ab83a34)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/8de38bbcc9576144c339b29dc8a3b6a13f72514b)

* [OCPBUGS-6498](https://issues.redhat.com/browse/OCPBUGS-6498): Order an operator CR's status.Component.Refs array (#2880) [#432](https://github.com/openshift/operator-framework-olm/pull/432)
* [OCPBUGS-1525](https://issues.redhat.com/browse/OCPBUGS-1525): Package Server Manager should enforce expected csv values [#387](https://github.com/openshift/operator-framework-olm/pull/387)
* [OCPBUGS-5294](https://issues.redhat.com/browse/OCPBUGS-5294): backport cert rotation fix [#428](https://github.com/openshift/operator-framework-olm/pull/428)
* [OCPBUGS-4799](https://issues.redhat.com/browse/OCPBUGS-4799): Fix label key truncation for subscription annotations (#2731) [#421](https://github.com/openshift/operator-framework-olm/pull/421)
* [OCPBUGS-4128](https://issues.redhat.com/browse/OCPBUGS-4128): concurrent write bug fix [#415](https://github.com/openshift/operator-framework-olm/pull/415)
* [OCPBUGS-2898](https://issues.redhat.com/browse/OCPBUGS-2898): [release-4.10] fix(openshift): use env var instead of clusterversion status (#2817) [#389](https://github.com/openshift/operator-framework-olm/pull/389)
* [OCPBUGS-1323](https://issues.redhat.com/browse/OCPBUGS-1323): Add autoscaling eviction annotation to catalog pods to enable proper draining of nodes [#392](https://github.com/openshift/operator-framework-olm/pull/392)
* [OCPBUGS-1087](https://issues.redhat.com/browse/OCPBUGS-1087): Stop corrupting resolver cache. [#385](https://github.com/openshift/operator-framework-olm/pull/385)
* [Bug 2115874](https://bugzilla.redhat.com/show_bug.cgi?id=2115874): fix(grpc): Add startupProbe to check for grpc health readiness (#2791) [#348](https://github.com/openshift/operator-framework-olm/pull/348)
* [Bug 2118261](https://bugzilla.redhat.com/show_bug.cgi?id=2118261): Update containerd version [#357](https://github.com/openshift/operator-framework-olm/pull/357)
* [Bug 2106838](https://bugzilla.redhat.com/show_bug.cgi?id=2106838): remove broken thread-safety (#2697) [#340](https://github.com/openshift/operator-framework-olm/pull/340)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ffc9cbc5da4283c03332afbd41b610954c19d6d2...8de38bbcc9576144c339b29dc8a3b6a13f72514b)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/9773aef8782056fa23e6af597195daf4a256f585)

* [OCPBUGS-761](https://issues.redhat.com/browse/OCPBUGS-761): CSI provisioned disks are preallocated [#117](https://github.com/openshift/ovirt-csi-driver/pull/117)
* [OCPBUGS-620](https://issues.redhat.com/browse/OCPBUGS-620): Upgrade go-ovirt-client to 1.0.0 [#116](https://github.com/openshift/ovirt-csi-driver/pull/116)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/633cbb6d16878d1e32e4a3f006315e670a4d9e22...9773aef8782056fa23e6af597195daf4a256f585)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/e266146c4bee6920afe50595d841a304e30e84d8)

* Updating ose-ovn-kubernetes images to be consistent with ART [#1615](https://github.com/openshift/ovn-kubernetes/pull/1615)
* [OCPBUGS-8513](https://issues.redhat.com/browse/OCPBUGS-8513): Don't recreate clusterPGs and clusterRtrPGs unless needed [#1562](https://github.com/openshift/ovn-kubernetes/pull/1562)
* [OCPBUGS-7021](https://issues.redhat.com/browse/OCPBUGS-7021), [OCPBUGS-7990](https://issues.redhat.com/browse/OCPBUGS-7990): Delete stale egress ip snat entries by node [#1542](https://github.com/openshift/ovn-kubernetes/pull/1542)
* [OCPBUGS-6641](https://issues.redhat.com/browse/OCPBUGS-6641): Drop in-cluster traffic towards svcCIDR at wrong port [#1492](https://github.com/openshift/ovn-kubernetes/pull/1492)
* [OCPBUGS-3656](https://issues.redhat.com/browse/OCPBUGS-3656): Fixes dualstack clusterIPs for network policy svc handler [#1378](https://github.com/openshift/ovn-kubernetes/pull/1378)
* [OCPBUGS-7012](https://issues.redhat.com/browse/OCPBUGS-7012): [release-4.10] Fix Egress FW ACL rules in dualstack mode [#1508](https://github.com/openshift/ovn-kubernetes/pull/1508)
* [OCPBUGS-2013](https://issues.redhat.com/browse/OCPBUGS-2013): Validate node subnet annotations against cluster networks [#1332](https://github.com/openshift/ovn-kubernetes/pull/1332)
* [Bug 2092895](https://bugzilla.redhat.com/show_bug.cgi?id=2092895): update all egress ACLs' direction to "from-lport" [#1148](https://github.com/openshift/ovn-kubernetes/pull/1148)
* [OCPBUGS-6814](https://issues.redhat.com/browse/OCPBUGS-6814): [release-4.10] Ensure loadbalancer cleanup doesn't fail [#1499](https://github.com/openshift/ovn-kubernetes/pull/1499)
* [OCPBUGS-4882](https://issues.redhat.com/browse/OCPBUGS-4882): append instead of overwrite logicalSwitch other-config [#1450](https://github.com/openshift/ovn-kubernetes/pull/1450)
* [OCPBUGS-3615](https://issues.redhat.com/browse/OCPBUGS-3615): [4.10] CARRY: client: don't construct transaction log string when it's not needed [#1375](https://github.com/openshift/ovn-kubernetes/pull/1375)
* [OCPBUGS-5929](https://issues.redhat.com/browse/OCPBUGS-5929): [release-4.10] Fix egress firewall to allow inbound connections in both gw modes [#1482](https://github.com/openshift/ovn-kubernetes/pull/1482)
* [OCPBUGS-5990](https://issues.redhat.com/browse/OCPBUGS-5990): egressip: fix test data race accessing podAssignment cache [#1480](https://github.com/openshift/ovn-kubernetes/pull/1480)
* [OCPBUGS-5077](https://issues.redhat.com/browse/OCPBUGS-5077): [release-4.10] Fix load balancer health check locking and update [#1463](https://github.com/openshift/ovn-kubernetes/pull/1463)
* [OCPBUGS-5299](https://issues.redhat.com/browse/OCPBUGS-5299): Set the node as reachable only when it is being added as an egressip node [#1464](https://github.com/openshift/ovn-kubernetes/pull/1464)
* [OCPBUGS-5040](https://issues.redhat.com/browse/OCPBUGS-5040): [release-4.10] Fix hybrid overlay unit tests [#1462](https://github.com/openshift/ovn-kubernetes/pull/1462)
* [OCPBUGS-4864](https://issues.redhat.com/browse/OCPBUGS-4864): [release-4.10] Fix address set cleanup: only delete address sets owned by given object [#1453](https://github.com/openshift/ovn-kubernetes/pull/1453)
* [OCPBUGS-4888](https://issues.redhat.com/browse/OCPBUGS-4888): [release-4.10] Fixes scenario where deleted + completed pods may leak [#1458](https://github.com/openshift/ovn-kubernetes/pull/1458)
* [OCPBUGS-4839](https://issues.redhat.com/browse/OCPBUGS-4839), [OCPBUGS-4861](https://issues.redhat.com/browse/OCPBUGS-4861): [release-4.10] Avoid duplicate transactions and minimize handlers with empty namespace selectors [#1452](https://github.com/openshift/ovn-kubernetes/pull/1452)
* [Bug 2115872](https://bugzilla.redhat.com/show_bug.cgi?id=2115872): Fix unit-test failures in 4.10 [#1457](https://github.com/openshift/ovn-kubernetes/pull/1457)
* [OCPBUGS-1568](https://issues.redhat.com/browse/OCPBUGS-1568): pods: deleteLogicalPort should not fail when node is gone [#1423](https://github.com/openshift/ovn-kubernetes/pull/1423)
* [OCPBUGS-3778](https://issues.redhat.com/browse/OCPBUGS-3778): [release-4.10] Netpol races partial fixes [#1434](https://github.com/openshift/ovn-kubernetes/pull/1434)
* [OCPBUGS-4598](https://issues.redhat.com/browse/OCPBUGS-4598): Bumps libovsdb to pick up fixes for optional values [#1426](https://github.com/openshift/ovn-kubernetes/pull/1426)
* [OCPBUGS-3858](https://issues.redhat.com/browse/OCPBUGS-3858): Adjust ovs bundle timeout [#1385](https://github.com/openshift/ovn-kubernetes/pull/1385)
* [OCPBUGS-1568](https://issues.redhat.com/browse/OCPBUGS-1568): pods: deleteLogicalPort should not fail when ls is gone [#1293](https://github.com/openshift/ovn-kubernetes/pull/1293)
* [Bug 2099843](https://bugzilla.redhat.com/show_bug.cgi?id=2099843): Add final db check to egress IP test [#1357](https://github.com/openshift/ovn-kubernetes/pull/1357)
* [Bug 2105657](https://bugzilla.redhat.com/show_bug.cgi?id=2105657): Fix egressIP object deletion if the node is deleted first [#1228](https://github.com/openshift/ovn-kubernetes/pull/1228)
* [OCPBUGS-2660](https://issues.redhat.com/browse/OCPBUGS-2660): Add logging verbosity to configuring OVN logs [#1326](https://github.com/openshift/ovn-kubernetes/pull/1326)
* [OCPBUGS-1454](https://issues.redhat.com/browse/OCPBUGS-1454): Fix NP upgrade bug: unexpectedly found multiple equivalent ACLs (arp v/s arp||nd) [#1269](https://github.com/openshift/ovn-kubernetes/pull/1269)
* [OCPBUGS-2746](https://issues.redhat.com/browse/OCPBUGS-2746): Fixes SNAT-ing Logic for EgressIPs [#1336](https://github.com/openshift/ovn-kubernetes/pull/1336)
* [OCPBUGS-2208](https://issues.redhat.com/browse/OCPBUGS-2208): getDefaultGatewayInterfaceByFamily: custom filter for MultiHop [#1303](https://github.com/openshift/ovn-kubernetes/pull/1303)
* [OCPBUGS-2464](https://issues.redhat.com/browse/OCPBUGS-2464): Fix the golang image used for unit-tests [#1299](https://github.com/openshift/ovn-kubernetes/pull/1299)
* [OCPBUGS-1024](https://issues.redhat.com/browse/OCPBUGS-1024): Dockerfile: bump to 2.16.0-89.3.el8fdp [#1271](https://github.com/openshift/ovn-kubernetes/pull/1271)
* [Bug 2111552](https://bugzilla.redhat.com/show_bug.cgi?id=2111552): Remove conntrack entries after rules [#1219](https://github.com/openshift/ovn-kubernetes/pull/1219)
* [OCPBUGS-660](https://issues.redhat.com/browse/OCPBUGS-660): [release-4.10] pods: deleteLogicalPort should not fail when port is already gone [#1257](https://github.com/openshift/ovn-kubernetes/pull/1257)
* [Bug 2113861](https://bugzilla.redhat.com/show_bug.cgi?id=2113861): reconcile-node-lbs [#1227](https://github.com/openshift/ovn-kubernetes/pull/1227)
* [OCPBUGS-174](https://issues.redhat.com/browse/OCPBUGS-174): [release-4.10] Fix race when adding and removing pod with same name [#1250](https://github.com/openshift/ovn-kubernetes/pull/1250)
* [Bug 2070392](https://bugzilla.redhat.com/show_bug.cgi?id=2070392): Fix egress IP reassignment on cloud [#1203](https://github.com/openshift/ovn-kubernetes/pull/1203)
* [Bug 2111588](https://bugzilla.redhat.com/show_bug.cgi?id=2111588): [release-4.10] export OVS metrics [#1215](https://github.com/openshift/ovn-kubernetes/pull/1215)
* [Bug 2109442](https://bugzilla.redhat.com/show_bug.cgi?id=2109442): Fix GetPodsBySelector/GetNamespacesBySelector so MatchExpressions is respected [#1195](https://github.com/openshift/ovn-kubernetes/pull/1195)
* [Bug 2104454](https://bugzilla.redhat.com/show_bug.cgi?id=2104454): improve performance of service sync [#1173](https://github.com/openshift/ovn-kubernetes/pull/1173)
* [Bug 2105653](https://bugzilla.redhat.com/show_bug.cgi?id=2105653): egressIP: node retrieval failure is not respected, causes panic [#1185](https://github.com/openshift/ovn-kubernetes/pull/1185)
* [Bug 2105275](https://bugzilla.redhat.com/show_bug.cgi?id=2105275): Fix egressips for pods recreated with same name [#1179](https://github.com/openshift/ovn-kubernetes/pull/1179)
* [Bug 2107903](https://bugzilla.redhat.com/show_bug.cgi?id=2107903): Append the SNAT rule in management chain [#1201](https://github.com/openshift/ovn-kubernetes/pull/1201)
* [Bug 2105265](https://bugzilla.redhat.com/show_bug.cgi?id=2105265): EGW: Clean Stale Conntrack Entries [#1191](https://github.com/openshift/ovn-kubernetes/pull/1191)
* [Bug 2099680](https://bugzilla.redhat.com/show_bug.cgi?id=2099680): [release-4.10] libovsdb fixes for empty values [#1164](https://github.com/openshift/ovn-kubernetes/pull/1164)
* [Bug 2105276](https://bugzilla.redhat.com/show_bug.cgi?id=2105276): Fix panics in DestroyNetworkPolicy if policy is nil [#1182](https://github.com/openshift/ovn-kubernetes/pull/1182)
* [Bug 2099206](https://bugzilla.redhat.com/show_bug.cgi?id=2099206): Update logging for specific policy when creating it [#1149](https://github.com/openshift/ovn-kubernetes/pull/1149)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/a9b1a235494d9918b94ec751d3949e13371b3184...e266146c4bee6920afe50595d841a304e30e84d8)


### [prometheus](https://github.com/openshift/prometheus/tree/b91d7c75372b3ae707ce287e56df3fc7db935bac)

* [OCPBUGS-3078](https://issues.redhat.com/browse/OCPBUGS-3078): Backkport OCPBUGS-1718 to release 4.10 [#146](https://github.com/openshift/prometheus/pull/146)
* [Full changelog](https://github.com/openshift/prometheus/compare/3c6cd55e3a5e5332e810274ad27fddf662d4f506...b91d7c75372b3ae707ce287e56df3fc7db935bac)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/e916c2d8a19309cc86558d70515639d450c66af0)

* [OCPBUGS-7795](https://issues.redhat.com/browse/OCPBUGS-7795): Fixes ThanoRuler StatefulSet re-creation bug [#219](https://github.com/openshift/prometheus-operator/pull/219)
* [Bug 2108976](https://bugzilla.redhat.com/show_bug.cgi?id=2108976): pkg/prometheus: fix curl exec probe [#196](https://github.com/openshift/prometheus-operator/pull/196)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/73ddd44bf77c257461981b77a083cf7968745201...e916c2d8a19309cc86558d70515639d450c66af0)


### [telemeter](https://github.com/openshift/telemeter/tree/3b5eb87fd042feafba13502ddf724951942dc8df)

* [OCPBUGS-6575](https://issues.redhat.com/browse/OCPBUGS-6575): update prometheus/client_golang version [#446](https://github.com/openshift/telemeter/pull/446)
* [Full changelog](https://github.com/openshift/telemeter/compare/2c9c76e62783073dfd31a3780b3cdea5acdd481b...3b5eb87fd042feafba13502ddf724951942dc8df)


### [tests](https://github.com/openshift/origin/tree/450990ba11d6d1c8e9f15778767769f0a77df8d0)

* [OCPBUGS-10244](https://issues.redhat.com/browse/OCPBUGS-10244): Bump(openshift/kubernetes): to get fix for resizing flake [#27800](https://github.com/openshift/origin/pull/27800)
* [OCPBUGS-4578](https://issues.redhat.com/browse/OCPBUGS-4578): Bond test 4.10 backport [#27593](https://github.com/openshift/origin/pull/27593)
* [OCPBUGS-2614](https://issues.redhat.com/browse/OCPBUGS-2614): Fix s2i ruby test that relys on rack [#27479](https://github.com/openshift/origin/pull/27479)
* disruption checking is disabled for prior releases because we lack a good baseline [#27472](https://github.com/openshift/origin/pull/27472)
* [OCPBUGS-1454](https://issues.redhat.com/browse/OCPBUGS-1454): Fixes OVN ACL audit log parsing [#27429](https://github.com/openshift/origin/pull/27429)
* [Bug 2117301](https://bugzilla.redhat.com/show_bug.cgi?id=2117301): Skip ErrImagePull for expected failures [#27352](https://github.com/openshift/origin/pull/27352)
* [Bug 2115862](https://bugzilla.redhat.com/show_bug.cgi?id=2115862): Skip internet connection test if we use a proxy [#27344](https://github.com/openshift/origin/pull/27344)
* [Bug 2065028](https://bugzilla.redhat.com/show_bug.cgi?id=2065028): rearrange test cases [#26915](https://github.com/openshift/origin/pull/26915)
* [OCPBUGS-374](https://issues.redhat.com/browse/OCPBUGS-374): test: allow -f to match tests for any test suite [#27366](https://github.com/openshift/origin/pull/27366)
* [Full changelog](https://github.com/openshift/origin/compare/4e11d238d9f989cb1008e5217824fd62f243eec0...450990ba11d6d1c8e9f15778767769f0a77df8d0)


### [thanos](https://github.com/openshift/thanos/tree/ac17631943be205d4ea38ccfc8ef49db999b4e47)

* [OCPBUGS-2037](https://issues.redhat.com/browse/OCPBUGS-2037): Bump 4.10 to 0.23.2 [#92](https://github.com/openshift/thanos/pull/92)
* [Full changelog](https://github.com/openshift/thanos/compare/10ca1d38d107c9f12dd2c85a4455626ca0f2e29b...ac17631943be205d4ea38ccfc8ef49db999b4e47)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/f2bc9eb32e2f367af2b498a79e32c1dbb006eefd)

* [Bug 2106666](https://bugzilla.redhat.com/show_bug.cgi?id=2106666): Return error when VM's info returned from VC doesn't contain IP address [#29](https://github.com/openshift/cloud-provider-vsphere/pull/29)
* [OCPBUGS-2065](https://issues.redhat.com/browse/OCPBUGS-2065): fix .dockerignore to satisfy OCP specific requirements [#27](https://github.com/openshift/cloud-provider-vsphere/pull/27)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/25b98d3b2fa812ef3b28ddcd90454c1b937898a9...f2bc9eb32e2f367af2b498a79e32c1dbb006eefd)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/f5d7362c88eb7d05bdfd0f70c2d53df7275d4ae2)

* [OCPBUGS-5895](https://issues.redhat.com/browse/OCPBUGS-5895): Fix vendored ini package [#137](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/137)
* [OCPBUGS-5895](https://issues.redhat.com/browse/OCPBUGS-5895): Backport multi dc support 410 [#133](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/133)
* [OCPBUGS-5507](https://issues.redhat.com/browse/OCPBUGS-5507): Fix sc creation if it is deleted [#128](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/128)
* [OCPBUGS-3288](https://issues.redhat.com/browse/OCPBUGS-3288): set TLS cipher suites in Kube RBAC sidecars [#120](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/120)
* [OCPBUGS-2282](https://issues.redhat.com/browse/OCPBUGS-2282): Add HTTP proxy to syncer container [#114](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/114)
* [OCPBUGS-376](https://issues.redhat.com/browse/OCPBUGS-376): storageclass should not be created for unsupported vsphere version [#105](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/105)
* [Bug 2108003](https://bugzilla.redhat.com/show_bug.cgi?id=2108003): 4.10: Don't block upgrades when another CSI driver is found [#99](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/8cf35b546669161d506cfa1d67eed5d785fe5e01...f5d7362c88eb7d05bdfd0f70c2d53df7275d4ae2)