# 4.10.53

Created: 2023-02-22 08:20:01 +0000 UTC

Image Digest: `sha256:0f683cf611bd6f2d3ab045b52df0fcda8adefa086e6ee80c5551275e5692cd8c`

Promoted from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-02-21-061718


## Changes from 4.10.25

### Components

* Kubernetes upgraded from 1.23.5 to 1.23.12
* Red Hat Enterprise Linux CoreOS upgraded from 410.84.202207262020-0 to 410.84.202302090253-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [db2d118a](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/db2d118ad70ff62a2111e83a8d14c5b32e176b38) `sha256:22596de20235bf97567e8da1f9509762e5d87c1627db8a89e766bfc0bf87fe43`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [f0d69663](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/f0d6966321e3d416efec2ac7405494b057cb35f8) `sha256:be4b581b72bc41d2d58d2c52c90af5ea707fb51553276e7ab49a3b2520e9ed09`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [d85867fe](https://github.com/openshift/cloud-provider-aws/commit/d85867feab1e80f094624d57221a071d7b6a148c) `sha256:68e593a04696948a11c4e860a95a400f99cb12513a4a3846526809ba4fc82624`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [c2e6dc19](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/c2e6dc19fac0006651d0820272a9734e231b1ce5) `sha256:931ef5254ac6303c95e7db5f90a6470f957349e7ef95dd2a3184adc978ddcf76`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [7f9eb87a](https://github.com/openshift/aws-pod-identity-webhook/commit/7f9eb87aea90ff2bac0c98df741b6d6dd0c61449) `sha256:e82a84e205171d3ed699e646503e195d5e5c674df963072b3ab03287cddc0305`
* [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator) git [3807eb37](https://github.com/openshift/azure-file-csi-driver-operator/commit/3807eb37247bb9008d7e64c10e3bf6a3872d199d) `sha256:348374ae5040060ccf56321f58bf19e497e1cfd88e178ba1b1ac663840ee991a`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [40c11f72](https://github.com/openshift/baremetal-runtimecfg/commit/40c11f7299386a9608e18feb8cc062c2ebc3364b) `sha256:5a9576b48f2b72564a06e6aa9100a3a85bbb859dea093254424a9af04020f658`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [6a015c71](https://github.com/openshift/cluster-authentication-operator/commit/6a015c7108252fa22c75ffa4b7757d28bfed902a) `sha256:9819ad87ae3ba62bcb66550c26ec1b3e100f41988724d4cde78e9c03cd2d9d93`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [8bcdcccb](https://github.com/openshift/cluster-autoscaler-operator/commit/8bcdcccbf043bc164eb5b728a8cfd962112b2aa5) `sha256:1aef414a915735e1e8800739b7ac52130479b6397a137fdf5a19eaf88b53a0b7`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [f22d1c60](https://github.com/openshift/cluster-bootstrap/commit/f22d1c60c188a4b5ce1731a8b1db7c20067dc7e9) `sha256:f80413448c0952a40264ea05d174b71cdfe595622436d23180884fbb14d5215b`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [e2e0d4f9](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/e2e0d4f901ef8a89dcda6f5555b44ff9398cf22d) `sha256:be2ef4ed52fd39bafa210ed1409c102c5a1bf2c3e8f9529114929c6af16fb9c0`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0840c6f2](https://github.com/openshift/cluster-config-operator/commit/0840c6f2f7f25ad9aba1a36597760f36ff0ab097) `sha256:1962d80cc3aa73d18dbeb12de6af134385ecca27f0d6af73c28cbdd5672115eb`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ace18623](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ace186237dad53c28b0d05761a2c85ce7b32b56b) `sha256:e21d8b4e3590940322af48a6a72d2b8714d43d27999d2e835a03240f557bdb55`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [d8694a5b](https://github.com/openshift/cluster-kube-scheduler-operator/commit/d8694a5bde4de696c8dd710816c1da76fa49cc36) `sha256:0a661a81adf07d562ecb77c9afa3c8e12403532165cad10e82e9ac81163282db`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [7e1f5684](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/7e1f56849bb85b870585b2b67566d29fd7767a31) `sha256:e41e127af5beea5549acef16b3cc6ae4756cbe46875e68662a5b3fdf9449fa48`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b8b65d15](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b8b65d15d14c21e6a5dd316dd59a9cfb3a2f403a) `sha256:a48a14532349e47faa378faf565004dade3c6d4cc5544c09ffafaa0db5d159b2`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [684f6f42](https://github.com/openshift/cluster-update-keys/commit/684f6f42381cf6401dfb7e4f6f5f9fd0e441639b) `sha256:f51581667df24baee8e4c999f23f7db6194d094110af92cc829b5d730479b5de`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [3123ef8b](https://github.com/openshift/containernetworking-plugins/commit/3123ef8b0c773a55d0d5071c050919449d29fa90) `sha256:b34d78f3cf80208541c4ac9cc84d8393fef336537ab9258726a81a684b3a578d`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [a0942c0d](https://github.com/openshift/csi-driver-manila-operator/commit/a0942c0d94afe9ca7b2eaf9063d83e15edaa765b) `sha256:37b77a815db9af37524eb81552ea3d967586309b747b1dd98d423cdf8a121bb4`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [3448830c](https://github.com/openshift/csi-driver-nfs/commit/3448830c086f092863ce701cccc6b627bca5b827) `sha256:10463a57c9826d0ff866fc54ac3499f97dd86a6b59a55132f8003ad509a30f9b`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [d06ff18b](https://github.com/openshift/csi-driver-shared-resource/commit/d06ff18b2ff23e5165638d6c3df42a2e1715b28f) `sha256:461ec09a87defd4293fa102da3cb2803d4920340c379a2de9dce19b16dc299c2`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [662615b3](https://github.com/openshift/csi-driver-shared-resource-operator/commit/662615b3427b57d8aafff6b982a7e4b34692eadc) `sha256:913a0d4b662a076437139551f75b3f52c9fc6ac9de69ea0233014cd3d07ef9bb`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [27e71f2b](https://github.com/openshift/csi-external-attacher/commit/27e71f2bb577200dc3cd87851989f0c950521eb8) `sha256:29174679b0bbd6d7014d72aa723d10c96695ea52654bccf97516966dbd1fc2ac`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [31de1e19](https://github.com/openshift/csi-external-provisioner/commit/31de1e19119e6b63cd9d52622f5b9d9df7e4c384) `sha256:8b086f4e7d87d43eca79028879dce115f8a2fe13fb17eab37a8fb509bf2ccc52`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [e5934091](https://github.com/openshift/csi-external-resizer/commit/e5934091f8cc4a6ca58f3719ba4487a46b4252df) `sha256:00b67980ea5c780118daf5d602324861eb9f0aa5fdf392e857ebf366a65f564d`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:63f9af8bb8e44752588dda8b5503bfa613efc9e6c1ad46b44c697229b95af71e`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [8c1a5bca](https://github.com/openshift/csi-livenessprobe/commit/8c1a5bcac1675711b51fffe88b40bb46f0e22db9) `sha256:2a51cb97a82a78758dc08ff4053add576906e56f21367a0662107a1076e3eaa4`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb0bd823](https://github.com/openshift/csi-node-driver-registrar/commit/bb0bd823c2212c6657e5835eb0015aab4e93839d) `sha256:1847d8560861bf7876e0758c9e542649d12f61f2e78d5f4d1aa76ed9a242198b`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:21967243dfa80aa46d272f3d3dcc1ad64fe60b5c6b9602c50858ac3b71b334af`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:8f9d6ee075bfb8fbb8cb584c12bd4a6f35905ec53045ecdcec7c66f43cb4d5e0`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5c56bc8a](https://github.com/openshift/egress-router-cni/commit/5c56bc8a0b27f560435f1564de0f3f440e68d889) `sha256:974d6f1a4f0131d695aeb7b3c46ea4f9ce3ecae8da7b02a7045675171ef1d3ff`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [4dc728d0](https://github.com/openshift/cloud-provider-gcp/commit/4dc728d0e1af40893815149de016e5d6e5a7bacb) `sha256:36ec1571b29e2c8e8ca18319eed377b6192e3f9dbaed8efdf863cc5c24a106d4`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [19e9a57f](https://github.com/openshift/gcp-pd-csi-driver/commit/19e9a57f04436cfc7df7d38bf5ba047d46982268) `sha256:563a2d276104295a7177554bb6eaa1140f9a9140ce81625efaae9090bfd4e054`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [0e369dee](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/0e369dee1b74696a17faf9b9c28e391d6726bf52) `sha256:5b5e5aacdfe4663e69936041101e23435e6ac1f17f743cb8159e4f1923394593`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [e3039120](https://github.com/openshift/cloud-provider-ibm/commit/e30391202c3f02694b2f5b3c2d73cb560d9c133d) `sha256:1c064bce339b5ec9e3581d37629aab9ba8716c82bb2bb68ee060f99a2f836f91`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [28bad53d](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/28bad53d117d403b4147b68666ecfc52cee6ceca) `sha256:358090699e6c3e697bb34e7aa30fb1c564f8618b29dc13f2f8b24e35b61b0c93`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [7074dfc3](https://github.com/openshift/ibm-vpc-node-label-updater/commit/7074dfc35cdd3c2e19790a934c1025c8f690c9a6) `sha256:2944e00d556c577cfb2035f3e1dd661616441c47ac2975249f6977492ae67ec2`
* [ibmcloud-machine-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [7449a94f](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/7449a94fcd0001cac6371600a75b20850b235cc9) `sha256:5459b537047cd56153388b275ccbb2026cccda05c46d595090121e0b68052b08`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [62469223](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/6246922338bc8aa21276c7e679bdd082307cbd45) `sha256:39d31f4d3599aa7e8217070da233ecef3716041474dc17b33fa3692c962c48af`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [81fe2974](https://github.com/openshift/ironic-rhcos-downloader/commit/81fe29749c844a4a19fea0f0e2ff0a53c3b0fa25) `sha256:ed98e86bc9a9e7a7781835a3bf6936b0c6d781d646a73f5dedf018b177c1ba94`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [45a1c542](https://github.com/openshift/ironic-static-ip-manager/commit/45a1c542c44d9492a110ea5edb09ac026afd86de) `sha256:c4a8f357607cc09df578eed17adeb4a194e29a99e1bb96135c6cdea5d16c189f`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [4052b317](https://github.com/openshift/k8s-prometheus-adapter/commit/4052b317ff62b93019a11e2981d1d81b8b6b2e4d) `sha256:0e251b370923902036e06c36a99d9393d7a4e9bdb97fb924e4a1f80c9b0de986`
* [keepalived-ipfailover](https://github.com/openshift/images) git [5d526c41](https://github.com/openshift/images/commit/5d526c41d70e481820119cbdae922130f42b36d7) `sha256:7bf77cb05725a098f8f6614a53a6f9230f6c76d6fc794009b9ba4bbb7876772d`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [4f198b2b](https://github.com/openshift/kube-rbac-proxy/commit/4f198b2bd5d141a561fbe6642de20b520d72e513) `sha256:d253bc69fdc967c1fc1543b01deddacd4eefe816cc9ed4541ea3673e35321753`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [901a6d22](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/901a6d221d1cf79b4b6ba859bb43521e0ee635b3) `sha256:ecb2f830cb211728de87c2b166a714bdcb3047be342a73d3d899b3236eef2815`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [3b330b72](https://github.com/openshift/cluster-api-provider-libvirt/commit/3b330b72f43b178f1c16c5d504cf9ce248e679ad) `sha256:9427860888cdc77632a4cb655b8f0951aa208cc323ab027063ae3738d09143bb`
* machine-os-content `sha256:327c6cdf2a9ed63fcac653dd4ba8905d9e40f7a2128b823563388cabdf655bc6`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [bfcc6c85](https://github.com/openshift/multus-networkpolicy/commit/bfcc6c85b5ad1c47fc1d50ddec0acd108d270fe1) `sha256:c7dd765223d1d94477050ba69449132db609d52b8e07c66dc4ca4902479cf62d`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [707dd380](https://github.com/openshift/route-override-cni/commit/707dd38046554810f601f2fae4a69bc4b907d7d3) `sha256:16e6426a05c744b04ffc20e810a1c48465037f84b7412c27ccb1e5b7b922fa42`
* [must-gather](https://github.com/openshift/must-gather) git [db7f815b](https://github.com/openshift/must-gather/commit/db7f815b979352e130967695b4a08f4f2c886bfb) `sha256:2c85d28023596717ece3bd221eb7b80dc271afafdd441c11f07e1eb8868a4304`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [234c1388](https://github.com/openshift/network-metrics-daemon/commit/234c13885e0c00a3b3f4f1bf81a868c82508dd2d) `sha256:b70654bb15424f347a985f8e973171e9ff3667d069eaa1535ba02233682c7cc8`
* [network-tools](https://github.com/openshift/network-tools) git [bcfec9c5](https://github.com/openshift/network-tools/commit/bcfec9c5a054f4c60356175b42a2477ec181fbd9) `sha256:93dcc8c8f3488b2192713b2babfeb139c91085b93897a8046957ec93d438b19f`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [799d414b](https://github.com/openshift/oauth-proxy/commit/799d414ba87ca5b28d08cf4af07409032c04df2b) `sha256:65234696ad55f1c997665762491e05c2137898dcd595180cc5337e268bc5fc3c`
* [oauth-server](https://github.com/openshift/oauth-server) git [245b95f8](https://github.com/openshift/oauth-server/commit/245b95f8a8e28e3960e4d369f3ca9a42be99bdf8) `sha256:73db334e251ce085c1bdac76a793cf244d340ef6ba7058f7ca5ba77566c058df`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [71ca0a1a](https://github.com/openshift/oc-mirror/commit/71ca0a1af2e4f37ada0c3e93a0902e610edb10d7) `sha256:72e40001f8e10b73c3e8a68096f28a482b9e96dfad1172a3d496303cf1bba811`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [2c2d50db](https://github.com/openshift/openshift-controller-manager/commit/2c2d50dbda3a06681a3b9c683c53ff3b3ba3b685) `sha256:91a53833b4bd4cbad006cd0b249dc31784d00d342a209b192c63e08f86b99630`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e5c50aae](https://github.com/openshift/openshift-state-metrics/commit/e5c50aae141e4f72c6843a3964f167bec6e79475) `sha256:aa241200fb660ba3a61b91d310ffd6119ec521335d373591dcc522b666facab0`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [2401f74d](https://github.com/openshift/machine-api-provider-openstack/commit/2401f74dba8112e0dd4a4a1bb77c26887d5da3f4) `sha256:9b289fca65a000b4e5f6313fb27f93e755fa9d60894e2733f79cbd76b95cf4bc`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [80b92ecf](https://github.com/operator-framework/operator-marketplace/commit/80b92ecff398578b389cd953605a7b0f7bbd4f24) `sha256:8478a14170786045bad82111b5761ec3f3a6e8457026e803793f3870e6d133d3`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [573ac478](https://github.com/openshift/ovirt-csi-driver-operator/commit/573ac4789b95f3ff5f9806e7023faca7b610566b) `sha256:f13cf6505b0b49e2090820c14aa46f2a331179c22feca9306fe02c95879b5dc9`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [35ce9aaf](https://github.com/openshift/cluster-api-provider-ovirt/commit/35ce9aafee1ffad0734f02ff0d5f8632d3905f09) `sha256:34da3f437dc02ecc351880ba60b93312f4a9b221fd8894fdec39d934cefb9ac7`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [c1d68e7b](https://github.com/openshift/machine-api-provider-powervs/commit/c1d68e7b97a8bcf9b350e4a686fd202ffc69978f) `sha256:9be09dd0ae8cb3c61baf6a27f63e9769af7144757dc4fb0f57afbd11334dbaac`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5f4c8992](https://github.com/openshift/prom-label-proxy/commit/5f4c89923dcfb1c620490e8ed8de8cd1bdaf5122) `sha256:65bf312988a29aff26a6205ff45a7f60effb2c4d359dd9a50b1fe946b031c7c7`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [01339596](https://github.com/openshift/prometheus-alertmanager/commit/013395968b37eb66909d7bbee7e34249b120835e) `sha256:68bc0cf91427c41e2859f78424590760ece47a1113953a49664d41df22c47907`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [0eed3102](https://github.com/openshift/node_exporter/commit/0eed31026699ad13ca7fcebbc547a830371a920c) `sha256:715ca7ad443f1b95d9db40463ba7e404df7cb12edf584475b5b253f7710ff6f8`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [1611373e](https://github.com/openshift/service-ca-operator/commit/1611373e4bf053ca78dc89b5fd4a4daf078312cf) `sha256:6c80ee7d9e97893321cf2b45aa3c3bf09d20bfa575f7c9b2e6fa50318f8f4281`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [e310f4d3](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e310f4d3828a71fb96344ccbe8b29d22754ebf77) `sha256:73449f60475b3b3e1a471be5b853df35d70642aeb2d950d63b5d3a953ac1e749`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [e310f4d3](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e310f4d3828a71fb96344ccbe8b29d22754ebf77) `sha256:b002f89ce89efb36ccc9243d0c8fc3f9d7581f1aaaf275385b93b1023deb6e16`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [a11df08a](https://github.com/openshift/vsphere-problem-detector/commit/a11df08a341b9084fd92c95e5b53368d1ea9aaa5) `sha256:d8a86583e20a66f0a037744ab049dbebc6f8557e2db3abdbce017d6ebe7d24f3`


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/5c30ca11ee5a7a312f5eed9f372d43c1af3c2154)

* [OCPBUGS-4123](https://issues.redhat.com/browse/OCPBUGS-4123): Add explicit pciutils package [#19](https://github.com/openshift/alibaba-cloud-csi-driver/pull/19)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/3ddbb2b9d4994206183b5ffd6a0872ad9a5ce193...5c30ca11ee5a7a312f5eed9f372d43c1af3c2154)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/9617f1f0b1266797f9237b2c3dd184f5a05f8f5b)

* Updating ose-alibaba-machine-controllers images to be consistent with ART [#23](https://github.com/openshift/cluster-api-provider-alibaba/pull/23)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/0206121348c9a0d220dd6805cea79d1eae7fd3e0...9617f1f0b1266797f9237b2c3dd184f5a05f8f5b)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/2bad4b40757a33bf92ab8937ececf279cc46376c)

* [OCPBUGS-1804](https://issues.redhat.com/browse/OCPBUGS-1804): UPSTREAM: 1398: Add resolver to handle custom endpoints [#210](https://github.com/openshift/aws-ebs-csi-driver/pull/210)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/8ba0c7a879c4a03e628c4d123ff8fdab884cedbb...2bad4b40757a33bf92ab8937ececf279cc46376c)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/8c8d1c15bfbbe52abaa2e2dd34d360854f40e1b1)

* [Bug 2117557](https://bugzilla.redhat.com/show_bug.cgi?id=2117557): Fix panic when accessing nil machine annotations map [#50](https://github.com/openshift/machine-api-provider-aws/pull/50)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/518b028c7c27c3b4ce32e5ba552601af7c869707...8c8d1c15bfbbe52abaa2e2dd34d360854f40e1b1)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/ae571af8f8f60ccc14b3772032bd5c1072f2a746)

* bug OCPBUGS-2062: .dockerignore: enable OSBS2 builds [#42](https://github.com/openshift/cloud-provider-azure/pull/42)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/07f1335140207eb41fb92fa0e689a89bc9b5efd9...ae571af8f8f60ccc14b3772032bd5c1072f2a746)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/c7c7188d259bb45decb8dd685798316f24faed19)

* [Bug 2118392](https://bugzilla.redhat.com/show_bug.cgi?id=2118392): Update dd table 4.10 [#31](https://github.com/openshift/azure-disk-csi-driver/pull/31)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/3d79d39e02f49de7608bcf921694b64d827147af...c7c7188d259bb45decb8dd685798316f24faed19)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/887af2069b3f03502ec3561180f6656a147b2c74)

* [Bug 2105304](https://bugzilla.redhat.com/show_bug.cgi?id=2105304): Increase pod startup timeout in e2e tests [#52](https://github.com/openshift/azure-disk-csi-driver-operator/pull/52)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/8f980ccc460b8973f5a3f7d91a57fbfe03a39809...887af2069b3f03502ec3561180f6656a147b2c74)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/87b4a7182b596354458d22c02bf7c51566f695ed)

* [OCPBUGS-2607](https://issues.redhat.com/browse/OCPBUGS-2607): remove "replace" directive in go.mod [#20](https://github.com/openshift/azure-file-csi-driver/pull/20)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f88155b4c4a3a6dc4d56bac44edb82198a967a4b...87b4a7182b596354458d22c02bf7c51566f695ed)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/04ed0af96d9a8667360a911b5c760767c8a97f0a)

* [OCPBUGS-3165](https://issues.redhat.com/browse/OCPBUGS-3165): Update azure instance types cache [#38](https://github.com/openshift/machine-api-provider-azure/pull/38)
* [OCPBUGS-930](https://issues.redhat.com/browse/OCPBUGS-930): Ignore unknown Instance types in accelerated networking check [#34](https://github.com/openshift/machine-api-provider-azure/pull/34)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/0b2bf9904788e4019b91212532e9af35b240cbdc...04ed0af96d9a8667360a911b5c760767c8a97f0a)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/8862860294941d78fc6e625d4392c6dc129c2037)

* [OCPBUGS-5663](https://issues.redhat.com/browse/OCPBUGS-5663): CVE-2021-4238: goutils: update for randomness fix [#6766](https://github.com/openshift/installer/pull/6766)
* [OCPBUGS-2731](https://issues.redhat.com/browse/OCPBUGS-2731): OpenStack UPI: Create server group for Computes [#6510](https://github.com/openshift/installer/pull/6510)
* [OCPBUGS-6697](https://issues.redhat.com/browse/OCPBUGS-6697): destroy/gcp: Use min length for destroying disks [#6808](https://github.com/openshift/installer/pull/6808)
* [OCPBUGS-2743](https://issues.redhat.com/browse/OCPBUGS-2743): skip sts credentials check in terraform [#6518](https://github.com/openshift/installer/pull/6518)
* [OCPBUGS-5112](https://issues.redhat.com/browse/OCPBUGS-5112): OpenStack: Force JSON content-type in Swift object listing [#6726](https://github.com/openshift/installer/pull/6726)
* [OCPBUGS-377](https://issues.redhat.com/browse/OCPBUGS-377): UPI image download govc rate limit failure [#6245](https://github.com/openshift/installer/pull/6245)
* [OCPBUGS-4160](https://issues.redhat.com/browse/OCPBUGS-4160): OpenStack: Force JSON content-type in Swift [#6628](https://github.com/openshift/installer/pull/6628)
* [OCPBUGS-3743](https://issues.redhat.com/browse/OCPBUGS-3743): build: change ppc64le linking mode [#6597](https://github.com/openshift/installer/pull/6597)
* [Bug 2099604](https://bugzilla.redhat.com/show_bug.cgi?id=2099604): Remove optional services from permissions check [#6507](https://github.com/openshift/installer/pull/6507)
* [OCPBUGS-2795](https://issues.redhat.com/browse/OCPBUGS-2795): Bump gophercloud [#6529](https://github.com/openshift/installer/pull/6529)
* [Bug 2101014](https://bugzilla.redhat.com/show_bug.cgi?id=2101014): Release 4.10 go getter update [#6361](https://github.com/openshift/installer/pull/6361)
* [OCPBUGS-1737](https://issues.redhat.com/browse/OCPBUGS-1737): OpenStack: Lift validation for 14 chars cluster names [#6420](https://github.com/openshift/installer/pull/6420)
* [OCPBUGS-1936](https://issues.redhat.com/browse/OCPBUGS-1936): bump RHCOS 4.10 bootimage metadata [#6454](https://github.com/openshift/installer/pull/6454)
* [Bug 2107154](https://bugzilla.redhat.com/show_bug.cgi?id=2107154): Make azure baseDomainResoureGroup optional for private c… [#6120](https://github.com/openshift/installer/pull/6120)
* [Bug 2112914](https://bugzilla.redhat.com/show_bug.cgi?id=2112914): Fix validation errors for instance type [#6189](https://github.com/openshift/installer/pull/6189)
* [Bug 2102363](https://bugzilla.redhat.com/show_bug.cgi?id=2102363): Dynamic retrieval of GCP Regions for a Project [#6059](https://github.com/openshift/installer/pull/6059)
* [OCPBUGS-784](https://issues.redhat.com/browse/OCPBUGS-784): Download yq in upi installer containers [#6285](https://github.com/openshift/installer/pull/6285)
* [Bug 2111258](https://bugzilla.redhat.com/show_bug.cgi?id=2111258): vsphere installconfig: use full dc path in network validation [#6173](https://github.com/openshift/installer/pull/6173)
* [OCPBUGS-249](https://issues.redhat.com/browse/OCPBUGS-249): Allow setting bootstrap kubelet ip [#6231](https://github.com/openshift/installer/pull/6231)
* [Full changelog](https://github.com/openshift/installer/compare/6db5fb9d56c9284124cf9147afd8f3e79345e907...8862860294941d78fc6e625d4392c6dc129c2037)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/adff401d86d176d61cf2dc47c4142e30d7b04e4b)

* Update OWNERS [#179](https://github.com/openshift/cluster-api-provider-baremetal/pull/179)
* [Bug 2099584](https://bugzilla.redhat.com/show_bug.cgi?id=2099584): Update BMO vendor to v0.0.0-20211102102625-469cc9bf7fee [#174](https://github.com/openshift/cluster-api-provider-baremetal/pull/174)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/0716ee4cb33bdef966f9ccbef2579d68df8bcd92...adff401d86d176d61cf2dc47c4142e30d7b04e4b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/092d3a41e49dda5081ed2dd5711cc80604ab2034)

* [Bug 2061794](https://bugzilla.redhat.com/show_bug.cgi?id=2061794): [4.10] Only update the HFS status on changes [#247](https://github.com/openshift/baremetal-operator/pull/247)
* [Bug 2069638](https://bugzilla.redhat.com/show_bug.cgi?id=2069638): Use deep copy/equal for host root device hints [#221](https://github.com/openshift/baremetal-operator/pull/221)
* [Bug 2047930](https://bugzilla.redhat.com/show_bug.cgi?id=2047930): Move from Available to Preparing if HostFirmwareSettings changed [#210](https://github.com/openshift/baremetal-operator/pull/210)
* [Bug 2100996](https://bugzilla.redhat.com/show_bug.cgi?id=2100996): Uplift kustomize to v4 to remove go-getter dependency [#234](https://github.com/openshift/baremetal-operator/pull/234)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/20e2b86e4f02dd1d5b23e86d09b1bf4c97e8c56f...092d3a41e49dda5081ed2dd5711cc80604ab2034)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/daed147b76ba0a69aede5417048d854a0f0e8dc8)

* [Bug 2086969](https://bugzilla.redhat.com/show_bug.cgi?id=2086969): Delete recently created images when --prune-over-size-limit is used [#1146](https://github.com/openshift/oc/pull/1146)
* [OCPBUGS-3968](https://issues.redhat.com/browse/OCPBUGS-3968): set proper pod security ns labels [#1293](https://github.com/openshift/oc/pull/1293)
* [Bug 2015119](https://bugzilla.redhat.com/show_bug.cgi?id=2015119): bump(k8s.io/kubectl) to pick up k/k#110764 [#1270](https://github.com/openshift/oc/pull/1270)
* [OCPBUGS-1788](https://issues.redhat.com/browse/OCPBUGS-1788): oc adm logs: generate proper path for static pods [#1246](https://github.com/openshift/oc/pull/1246)
* [OCPBUGS-1638](https://issues.redhat.com/browse/OCPBUGS-1638): Increase default value of cache TTL to 6 hours [#1241](https://github.com/openshift/oc/pull/1241)
* [Bug 2116526](https://bugzilla.redhat.com/show_bug.cgi?id=2116526): oc adm inspect: check a resource exists before its inspection [#1227](https://github.com/openshift/oc/pull/1227)
* [Bug 2106158](https://bugzilla.redhat.com/show_bug.cgi?id=2106158): remove klog format and update messages for docker config deprecation [#1205](https://github.com/openshift/oc/pull/1205)
* [Full changelog](https://github.com/openshift/oc/compare/45460a55f50834ff18308b13b4569a6c89b9d37a...daed147b76ba0a69aede5417048d854a0f0e8dc8)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/8442cbf528bbfa76aaf29db67ce09d1164ed019a)

* [OCPBUGS-2802](https://issues.redhat.com/browse/OCPBUGS-2802): Backport --credentials-requests-dir for ccoctl gcp delete. [#507](https://github.com/openshift/cloud-credential-operator/pull/507)
* [OCPBUGS-2884](https://issues.redhat.com/browse/OCPBUGS-2884): Make ccoctl use regional STS endpoint by default [#504](https://github.com/openshift/cloud-credential-operator/pull/504)
* [OCPBUGS-2279](https://issues.redhat.com/browse/OCPBUGS-2279): Add ccoctl support to create OIDC endpoint with private S3 bucket [#501](https://github.com/openshift/cloud-credential-operator/pull/501)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/ef868a8cf2d6719ce7ff65be24fc29d2e8a0023f...8442cbf528bbfa76aaf29db67ce09d1164ed019a)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/f660e7e25a799019c32a37da149c75c69b5cddef)

* Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration [#94](https://github.com/openshift/cloud-network-config-controller/pull/94)
* [OCPBUGS-2162](https://issues.redhat.com/browse/OCPBUGS-2162): Add resolver to handle custom endpoints [#67](https://github.com/openshift/cloud-network-config-controller/pull/67)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8723adb2d36b7d96363d57b8a9208880eccea53e...f660e7e25a799019c32a37da149c75c69b5cddef)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/266ba2db3dbf1fb7ddd07aca7c6223d800ecf3d2)

* [OCPBUGS-2546](https://issues.redhat.com/browse/OCPBUGS-2546): UPSTREAM: <carry>: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 [#245](https://github.com/openshift/kubernetes-autoscaler/pull/245)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/012b9608fa1a86561be18ac2a696ce6c339209b8...266ba2db3dbf1fb7ddd07aca7c6223d800ecf3d2)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/3f0cd6732ac926a0085e406c197c8895b282fdfd)

* [OCPBUGS-1239](https://issues.redhat.com/browse/OCPBUGS-1239): do not rely on string "master" to be in BMH names [#287](https://github.com/openshift/cluster-baremetal-operator/pull/287)
* [OCPBUGS-1517](https://issues.redhat.com/browse/OCPBUGS-1517): [release-4.10] Fix a few papercuts [#291](https://github.com/openshift/cluster-baremetal-operator/pull/291)
* [Bug 2101002](https://bugzilla.redhat.com/show_bug.cgi?id=2101002): Uplift kustomize and BMO to remove go-getter dependency [#281](https://github.com/openshift/cluster-baremetal-operator/pull/281)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6584b981d65e27a71cd9c5f4a381fd647d4136c...3f0cd6732ac926a0085e406c197c8895b282fdfd)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ab6f33b3d2b388c3bc804f5e7aa0dedb8207396f)

* [OCPBUGS-2602](https://issues.redhat.com/browse/OCPBUGS-2602): Allow autoscaler to evict DNS pods [#350](https://github.com/openshift/cluster-dns-operator/pull/350)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/bc48e0aa0135bfdcdb6dbf7fbf18628c5849892b...ab6f33b3d2b388c3bc804f5e7aa0dedb8207396f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/bb2c97582727c0f507ee9b1818b038eac4d84680)

* [OCPBUGS-5425](https://issues.redhat.com/browse/OCPBUGS-5425): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#979](https://github.com/openshift/cluster-etcd-operator/pull/979)
* [OCPBUGS-2940](https://issues.redhat.com/browse/OCPBUGS-2940): revisit defrag controller degradation [#961](https://github.com/openshift/cluster-etcd-operator/pull/961)
* [OCPBUGS-2920](https://issues.redhat.com/browse/OCPBUGS-2920): update prometheus alerts [#956](https://github.com/openshift/cluster-etcd-operator/pull/956)
* [OCPBUGS-2800](https://issues.redhat.com/browse/OCPBUGS-2800): Add niceness to important etcd processes [#953](https://github.com/openshift/cluster-etcd-operator/pull/953)
* [OCPBUGS-1758](https://issues.redhat.com/browse/OCPBUGS-1758): fix cert rotation on IP changes [#936](https://github.com/openshift/cluster-etcd-operator/pull/936)
* [Bug 2116624](https://bugzilla.redhat.com/show_bug.cgi?id=2116624): etcd-metrics container is flooding logs [#906](https://github.com/openshift/cluster-etcd-operator/pull/906)
* [OCPBUGS-200](https://issues.redhat.com/browse/OCPBUGS-200): Exits with a non-zero code in case Etcd backup fails [#907](https://github.com/openshift/cluster-etcd-operator/pull/907)
* [Bug 2108176](https://bugzilla.redhat.com/show_bug.cgi?id=2108176): Fix etcd minor upgrade backup [#892](https://github.com/openshift/cluster-etcd-operator/pull/892)
* [Bug 2105249](https://bugzilla.redhat.com/show_bug.cgi?id=2105249): Add etcd pod liveness and readiness probes [#880](https://github.com/openshift/cluster-etcd-operator/pull/880)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1df75888989c67ad5fb70df043fa1ef41f437165...bb2c97582727c0f507ee9b1818b038eac4d84680)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/80540e65a4b8fbed7996fc6a0773141e23d97867)

* [OCPBUGS-6972](https://issues.redhat.com/browse/OCPBUGS-6972): OpenStack: Add support for Proxy [#837](https://github.com/openshift/cluster-image-registry-operator/pull/837)
* [OCPBUGS-5974](https://issues.redhat.com/browse/OCPBUGS-5974): swift: Retry connecting to OpenStack [#832](https://github.com/openshift/cluster-image-registry-operator/pull/832)
* add myself to OWNERS [#838](https://github.com/openshift/cluster-image-registry-operator/pull/838)
* [Bug 2110957](https://bugzilla.redhat.com/show_bug.cgi?id=2110957): Add progressing condition for node-ca daemon set [#791](https://github.com/openshift/cluster-image-registry-operator/pull/791)
* [OCPBUGS-2107](https://issues.redhat.com/browse/OCPBUGS-2107): Enable enableHttpsTrafficOnly for Azure storage account [#804](https://github.com/openshift/cluster-image-registry-operator/pull/804)
* [Bug 2110957](https://bugzilla.redhat.com/show_bug.cgi?id=2110957): Use actualDaemonSet for SetDaemonSetGeneration [#799](https://github.com/openshift/cluster-image-registry-operator/pull/799)
* [Bug 2115267](https://bugzilla.redhat.com/show_bug.cgi?id=2115267): Disable dualstack when it is not available [#794](https://github.com/openshift/cluster-image-registry-operator/pull/794)
* [Bug 2110963](https://bugzilla.redhat.com/show_bug.cgi?id=2110963): Bump aws-sdk-go to 1.44.4 [#793](https://github.com/openshift/cluster-image-registry-operator/pull/793)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/d2df5e8ef58452eac263b9352c02e3cdc1249847...80540e65a4b8fbed7996fc6a0773141e23d97867)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/805d0587ee481a7d7260d0b4ced0e6046cbfb7b6)

* [OCPBUGS-4494](https://issues.redhat.com/browse/OCPBUGS-4494): Update CRLs when they expire [#861](https://github.com/openshift/cluster-ingress-operator/pull/861)
* BUG 2094051: Fix removing custom created service in openshift-ingress with same naming convention [#820](https://github.com/openshift/cluster-ingress-operator/pull/820)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/5001c084462a461b64c9c1b494b57275fcf15da3...805d0587ee481a7d7260d0b4ced0e6046cbfb7b6)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/5705bc26446035416641b92a90dd3a8085f5d03f)

* [OCPBUGS-5345](https://issues.redhat.com/browse/OCPBUGS-5345): routes/status resources can leak sensitive data [#1421](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1421)
* [OCPBUGS-2202](https://issues.redhat.com/browse/OCPBUGS-2202): [release-4.10] Wire support for trusted service account issuers [#1387](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1387)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/696981dd9eb28b413d4302dd19e018329b0cb177...5705bc26446035416641b92a90dd3a8085f5d03f)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/75775a49d61d79153e0359b9776cc3db997e0e9d)

* [OCPBUGS-466](https://issues.redhat.com/browse/OCPBUGS-466): PodDisruptionBudgetAtLimit should not alert when no app/pods exist [#648](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/648)
* [Bug 2116983](https://bugzilla.redhat.com/show_bug.cgi?id=2116983): e2e: Fix test pod disruption budget at limit alert [#646](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/646)
* [Bug 2114587](https://bugzilla.redhat.com/show_bug.cgi?id=2114587): add runbook urls to KCM-o alerts [#645](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/645)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/ca3ff5396f45632a4ae9997d9b71441b52b62efd...75775a49d61d79153e0359b9776cc3db997e0e9d)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/95404c4edb82f0c9d5eb1d03786c81bd3a137384)

* Updating ose-cluster-machine-approver images to be consistent with ART [#168](https://github.com/openshift/cluster-machine-approver/pull/168)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/55fb0f057498628a6e1240fe657b556a0721f596...95404c4edb82f0c9d5eb1d03786c81bd3a137384)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/20fcb9f6ef4e00ccde05a13347bddfabe24e8c4c)

* [OCPBUGS-5864](https://issues.redhat.com/browse/OCPBUGS-5864): grafana: add the Content-Security-Policy header to requests [#1866](https://github.com/openshift/cluster-monitoring-operator/pull/1866)
* [OCPBUGS-2623](https://issues.redhat.com/browse/OCPBUGS-2623): Fix dashboards having container_fs* metrices in queries [#1798](https://github.com/openshift/cluster-monitoring-operator/pull/1798)
* [OCPBUGS-2037](https://issues.redhat.com/browse/OCPBUGS-2037): Bump Thanos to 0.23.2 [#1811](https://github.com/openshift/cluster-monitoring-operator/pull/1811)
* [OCPBUGS-450](https://issues.redhat.com/browse/OCPBUGS-450): jsonnet: bump dependencies [#1802](https://github.com/openshift/cluster-monitoring-operator/pull/1802)
* [OCPBUGS-1446](https://issues.redhat.com/browse/OCPBUGS-1446): [release-4.10] Use service ca beta annotation [#1778](https://github.com/openshift/cluster-monitoring-operator/pull/1778)
* [OCPBUGS-1676](https://issues.redhat.com/browse/OCPBUGS-1676): Dedicated kubelet ServiceMonitor for prometheus-adapter [#1777](https://github.com/openshift/cluster-monitoring-operator/pull/1777)
* [OCPBUGS-924](https://issues.redhat.com/browse/OCPBUGS-924): increase alertmanager's startupProbe failure threshold [#1760](https://github.com/openshift/cluster-monitoring-operator/pull/1760)
* [OCPBUGS-579](https://issues.redhat.com/browse/OCPBUGS-579): Give precedence to CMO config map proxy config [#1751](https://github.com/openshift/cluster-monitoring-operator/pull/1751)
* [Bug 2118303](https://bugzilla.redhat.com/show_bug.cgi?id=2118303): Adds UWM extrenalLabels from Prometheus to ThanosRuler labels [#1742](https://github.com/openshift/cluster-monitoring-operator/pull/1742)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1ec935302a626f034cb9c20572044b7aa4ce3b16...20fcb9f6ef4e00ccde05a13347bddfabe24e8c4c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/dc0a59ae83cb05d8530142287bdbad14da2a6013)

* [OCPBUGS-6736](https://issues.redhat.com/browse/OCPBUGS-6736): Remove nbctl logfile [#1587](https://github.com/openshift/cluster-network-operator/pull/1587)
* [OCPBUGS-5575](https://issues.redhat.com/browse/OCPBUGS-5575): CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be [#1682](https://github.com/openshift/cluster-network-operator/pull/1682)
* [Bug 2092193](https://bugzilla.redhat.com/show_bug.cgi?id=2092193): Bump PodDisruptionBudget to v1 [#1470](https://github.com/openshift/cluster-network-operator/pull/1470)
* [OCPBUGS-4614](https://issues.redhat.com/browse/OCPBUGS-4614): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1651](https://github.com/openshift/cluster-network-operator/pull/1651)
* Jira OCPBUGS-3853: IPsec: Fix broken counter++ expression [#1646](https://github.com/openshift/cluster-network-operator/pull/1646)
* [Bug 2111588](https://bugzilla.redhat.com/show_bug.cgi?id=2111588): Enable OVS metrics for ovnk [#1599](https://github.com/openshift/cluster-network-operator/pull/1599)
* [OCPBUGS-1538](https://issues.redhat.com/browse/OCPBUGS-1538): Make northd probe interval default to 10 seconds [#1563](https://github.com/openshift/cluster-network-operator/pull/1563)
* Bug OCPBUGS-942: Kuryr: Bump timeoutSeconds for livenessProbe [#1550](https://github.com/openshift/cluster-network-operator/pull/1550)
* [Bug 2095111](https://bugzilla.redhat.com/show_bug.cgi?id=2095111): ovn: fix northd preStop command handling [#1477](https://github.com/openshift/cluster-network-operator/pull/1477)
* [Bug 2083266](https://bugzilla.redhat.com/show_bug.cgi?id=2083266): Limit Kuryr pods permissions [#1435](https://github.com/openshift/cluster-network-operator/pull/1435)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a9b63ea675fc71fc01836518f7f9b9d0caf02ba9...dc0a59ae83cb05d8530142287bdbad14da2a6013)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b1c5690f87b4f3bba9b932474b55282c8dbf264e)

* Switch to OS-shipped stalld (#490) [#490](https://github.com/openshift/cluster-node-tuning-operator/pull/490)
* e2e: check for tsc=reliable instead of tsc=nowatchdog (#428) [#428](https://github.com/openshift/cluster-node-tuning-operator/pull/428)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/73f960989a07e5c4aed79ba1e9a86a09886eb271...b1c5690f87b4f3bba9b932474b55282c8dbf264e)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/91038370b1b6c56f55b47c31fc596deb304ca69a)

* [OCPBUGS-5345](https://issues.redhat.com/browse/OCPBUGS-5345): routes/status resources can leak sensitive data, exclude it from audit [#514](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/514)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/853d84ff60fcf6a40d360d1a15e6e5b85423e87f...91038370b1b6c56f55b47c31fc596deb304ca69a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/85e14c7cf4ccf86a443e7d70f42465f83f0ba7f8)

* [OCPBUGS-5788](https://issues.redhat.com/browse/OCPBUGS-5788): clusterquotareconciliation: do not sync quota monitor cache with no monitors registered [#97](https://github.com/openshift/cluster-policy-controller/pull/97)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/8e5b36511861e63664cf4abd4f4f63642ae3c644...85e14c7cf4ccf86a443e7d70f42465f83f0ba7f8)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/b27c4ce6602596083cb688b605f594c688fb4701)

* [OCPBUGS-2132](https://issues.redhat.com/browse/OCPBUGS-2132): openshift template cakephp-mysql-persistent apiVersion for 4.10 [#466](https://github.com/openshift/cluster-samples-operator/pull/466)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/d41950dc8b41b3bf87b6ca3ae12af525b6908d3c...b27c4ce6602596083cb688b605f594c688fb4701)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/0ad6026dffef5fd7c4a12e11ea468cdd2b35ee73)

* [OCPBUGS-691](https://issues.redhat.com/browse/OCPBUGS-691): [release-4.10] correct sc error messages for ibm and alibaba platforms [#314](https://github.com/openshift/cluster-storage-operator/pull/314)
* [OCPBUGS-286](https://issues.redhat.com/browse/OCPBUGS-286): HTTPS_PROXY ENV missing in some CSI driver operators [#311](https://github.com/openshift/cluster-storage-operator/pull/311)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/e9e211d87ea0a4e6ef5b4216024d175139a3c9ae...0ad6026dffef5fd7c4a12e11ea468cdd2b35ee73)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/16f373ce89f53e3724c0d9b91e21e75e0fa0a1be)

* [OCPBUGS-233](https://issues.redhat.com/browse/OCPBUGS-233): pkg/cvo/updatepayload: Set 'readOnlyRootFilesystem: false' [#824](https://github.com/openshift/cluster-version-operator/pull/824)
* [OCPBUGS-235](https://issues.redhat.com/browse/OCPBUGS-235): pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes [#825](https://github.com/openshift/cluster-version-operator/pull/825)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/288bd4d114f66aa5ae3a1108e9c5da85211cf8df...16f373ce89f53e3724c0d9b91e21e75e0fa0a1be)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/1e5a18ebda95b5703ea6e9fe511f459cb9615162)

* [OCPBUGS-6538](https://issues.redhat.com/browse/OCPBUGS-6538): go.mod: update github.com/prometheus/client_golang to v1.11.0 [#49](https://github.com/openshift/configmap-reload/pull/49)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/22a40ce77a1c3d4842b80de89f4df449672e5f5e...1e5a18ebda95b5703ea6e9fe511f459cb9615162)


### [console](https://github.com/openshift/console/tree/c20a05dfbf1c76a4d044170bed256ad56ee421ed)

* [OCPBUGS-7787](https://issues.redhat.com/browse/OCPBUGS-7787): [4.10.z] Fix kubevirt-console tests [#12580](https://github.com/openshift/console/pull/12580)
* [OCPBUGS-6754](https://issues.redhat.com/browse/OCPBUGS-6754): Fix for initial showing of topology contents [#12486](https://github.com/openshift/console/pull/12486)
* [OCPBUGS-5296](https://issues.redhat.com/browse/OCPBUGS-5296): Pan nodes into view if all nodes are not visible on load [#12485](https://github.com/openshift/console/pull/12485)
* [OCPBUGS-6690](https://issues.redhat.com/browse/OCPBUGS-6690): Fix NPE when displaying CSV with incomplete information [#12481](https://github.com/openshift/console/pull/12481)
* [OCPBUGS-5961](https://issues.redhat.com/browse/OCPBUGS-5961): add support for version v1beta1 for knativeServing and knativeEventing [#12441](https://github.com/openshift/console/pull/12441)
* [OCPBUGS-3485](https://issues.redhat.com/browse/OCPBUGS-3485): check that user can patch console operator config in s… [#12258](https://github.com/openshift/console/pull/12258)
* [Bug 2105911](https://bugzilla.redhat.com/show_bug.cgi?id=2105911): Fix create-namespace e2e test with updated 3scale operator [#11811](https://github.com/openshift/console/pull/11811)
* [OCPBUGS-3619](https://issues.redhat.com/browse/OCPBUGS-3619): Find latest pipeline run without firehose selector [#12265](https://github.com/openshift/console/pull/12265)
* [OCPBUGS-3336](https://issues.redhat.com/browse/OCPBUGS-3336): Add checks for pods in hpaPodRingLabel [#12249](https://github.com/openshift/console/pull/12249)
* [OCPBUGS-2717](https://issues.redhat.com/browse/OCPBUGS-2717): Update dependencies to the registry library and devfile parser [#12191](https://github.com/openshift/console/pull/12191)
* [OCPBUGS-2781](https://issues.redhat.com/browse/OCPBUGS-2781): Fix broken advanced options layout on the add page [#12204](https://github.com/openshift/console/pull/12204)
* [OCPBUGS-3161](https://issues.redhat.com/browse/OCPBUGS-3161): 'CatalogSource not found' in the virtualization [#12202](https://github.com/openshift/console/pull/12202)
* [Bug 2072792](https://bugzilla.redhat.com/show_bug.cgi?id=2072792): Fetch common templates in a different namespace [#12163](https://github.com/openshift/console/pull/12163)
* [Bug 2071517](https://bugzilla.redhat.com/show_bug.cgi?id=2071517): Fix swap usage queries for Top Consumers card in virtualization Overview page [#12172](https://github.com/openshift/console/pull/12172)
* [Bug 2090127](https://bugzilla.redhat.com/show_bug.cgi?id=2090127): Remove nodeSelectorTerms if not defined [#12161](https://github.com/openshift/console/pull/12161)
* [Bug 2052469](https://bugzilla.redhat.com/show_bug.cgi?id=2052469): Filter template list for boot source available [#12164](https://github.com/openshift/console/pull/12164)
* [OCPBUGS-2583](https://issues.redhat.com/browse/OCPBUGS-2583): attach owner reference to resources created on creating a user to allow garbage collection [#12189](https://github.com/openshift/console/pull/12189)
* [OCPBUGS-2894](https://issues.redhat.com/browse/OCPBUGS-2894): UI crash when storage class had missing annotation [#12220](https://github.com/openshift/console/pull/12220)
* [OCPBUGS-1696](https://issues.redhat.com/browse/OCPBUGS-1696): Handle missing BMH for Node gracefully [#12129](https://github.com/openshift/console/pull/12129)
* [OCPBUGS-1465](https://issues.redhat.com/browse/OCPBUGS-1465): mock call to /api/devfile in e2e [#12062](https://github.com/openshift/console/pull/12062)
* [OCPBUGS-2622](https://issues.redhat.com/browse/OCPBUGS-2622): Use local test data to mock a devfile registry [#12194](https://github.com/openshift/console/pull/12194)
* [OCPBUGS-2523](https://issues.redhat.com/browse/OCPBUGS-2523): updates test id for 3scale [#12184](https://github.com/openshift/console/pull/12184)
* [Bug 2072790](https://bugzilla.redhat.com/show_bug.cgi?id=2072790): Regression "Create VM" [#12160](https://github.com/openshift/console/pull/12160)
* [OCPBUGS-938](https://issues.redhat.com/browse/OCPBUGS-938): do not show NodesUpdateGroup if there are 0 nodes [#12061](https://github.com/openshift/console/pull/12061)
* [Bug 2090127](https://bugzilla.redhat.com/show_bug.cgi?id=2090127): CNV 20527: Enable boot source select for vm template [#12082](https://github.com/openshift/console/pull/12082)
* [Bug 2094074](https://bugzilla.redhat.com/show_bug.cgi?id=2094074): Remove error on user template with DS [#12092](https://github.com/openshift/console/pull/12092)
* [Bug 2054917](https://bugzilla.redhat.com/show_bug.cgi?id=2054917): Fix template example yaml [#12091](https://github.com/openshift/console/pull/12091)
* [Bug 2072790](https://bugzilla.redhat.com/show_bug.cgi?id=2072790): Select template using also queryParams [#12090](https://github.com/openshift/console/pull/12090)
* [OCPBUGS-1759](https://issues.redhat.com/browse/OCPBUGS-1759): Show already loaded catalog items after a timeout (3sec) [#12106](https://github.com/openshift/console/pull/12106)
* [OCPBUGS-403](https://issues.redhat.com/browse/OCPBUGS-403): fix broken update server link [#11974](https://github.com/openshift/console/pull/11974)
* [OCPBUGS-1815](https://issues.redhat.com/browse/OCPBUGS-1815): fetch shared resource imagestreams based on labels instance or name [#12110](https://github.com/openshift/console/pull/12110)
* [Bug 2107898](https://bugzilla.redhat.com/show_bug.cgi?id=2107898): Access mode and volume mode with sourceRef will now be taken from default storageclass [#11907](https://github.com/openshift/console/pull/11907)
* [OCPBUGS-1828](https://issues.redhat.com/browse/OCPBUGS-1828): Fix devfile registry assertion [#12112](https://github.com/openshift/console/pull/12112)
* [OCPBUGS-1634](https://issues.redhat.com/browse/OCPBUGS-1634): Update registry library dependency to pick up proxy support [#12040](https://github.com/openshift/console/pull/12040)
* [Bug 2080389](https://bugzilla.redhat.com/show_bug.cgi?id=2080389): Link to documentation from the overview page goes to a missing link [#11909](https://github.com/openshift/console/pull/11909)
* [OCPBUGS-382](https://issues.redhat.com/browse/OCPBUGS-382): [OSD] ClusterVersion YAML editor should be read only [#11922](https://github.com/openshift/console/pull/11922)
* [OCPBUGS-550](https://issues.redhat.com/browse/OCPBUGS-550): Input values in Instantiate Template are disappeared randomly in the developer console [#11983](https://github.com/openshift/console/pull/11983)
* [Bug 2077142](https://bugzilla.redhat.com/show_bug.cgi?id=2077142): Fix Web Terminal availability check to verify operator is installed [#11374](https://github.com/openshift/console/pull/11374)
* [Bug 2117642](https://bugzilla.redhat.com/show_bug.cgi?id=2117642): Backport CI test fix to relase 4.10 [#11966](https://github.com/openshift/console/pull/11966)
* [Bug 2117351](https://bugzilla.redhat.com/show_bug.cgi?id=2117351): fix helm readme bug [#11950](https://github.com/openshift/console/pull/11950)
* Revert "Bug 2100103: Can't delete rootdisk in customization wizard" [#11932](https://github.com/openshift/console/pull/11932)
* [Bug 2114833](https://bugzilla.redhat.com/show_bug.cgi?id=2114833): Use hostname from provided git url when making git api calls [#11924](https://github.com/openshift/console/pull/11924)
* [Bug 2111335](https://bugzilla.redhat.com/show_bug.cgi?id=2111335): Cannot edit ssh even vm is stopped [#11886](https://github.com/openshift/console/pull/11886)
* [Bug 2101412](https://bugzilla.redhat.com/show_bug.cgi?id=2101412): fix bug where Cluster update modal errors weren't displa… [#11765](https://github.com/openshift/console/pull/11765)
* [Bug 2112910](https://bugzilla.redhat.com/show_bug.cgi?id=2112910): Fix search redirect [#11914](https://github.com/openshift/console/pull/11914)
* [Bug 2100103](https://bugzilla.redhat.com/show_bug.cgi?id=2100103): Can't delete rootdisk in customization wizard [#11887](https://github.com/openshift/console/pull/11887)
* [Bug 2052444](https://bugzilla.redhat.com/show_bug.cgi?id=2052444): Unstar RHEL 7 template [#11885](https://github.com/openshift/console/pull/11885)
* [Bug 2110536](https://bugzilla.redhat.com/show_bug.cgi?id=2110536): add z-index to ocs-drawer to make box-shadow visible [#11873](https://github.com/openshift/console/pull/11873)
* [Bug 2110938](https://bugzilla.redhat.com/show_bug.cgi?id=2110938): VM list page crashed [#11879](https://github.com/openshift/console/pull/11879)
* [Bug 2063153](https://bugzilla.redhat.com/show_bug.cgi?id=2063153): Use link to the downstream doc for Sysprep info [#11772](https://github.com/openshift/console/pull/11772)
* [Bug 2108193](https://bugzilla.redhat.com/show_bug.cgi?id=2108193): update icons for eventSource and eventSink [#11847](https://github.com/openshift/console/pull/11847)
* [Bug 2053703](https://bugzilla.redhat.com/show_bug.cgi?id=2053703): Handle blank usernames in error message [#11045](https://github.com/openshift/console/pull/11045)
* [Full changelog](https://github.com/openshift/console/compare/13ec70a76fc6af1ea59c3f0d849af94317151cde...c20a05dfbf1c76a4d044170bed256ad56ee421ed)


### [console-operator](https://github.com/openshift/console-operator/tree/f12b34a711cd594d8768790a99e220ddcf7de0a2)

* [Bug 2106944](https://bugzilla.redhat.com/show_bug.cgi?id=2106944): InfrastructureTopology must be driving console affinity rule creation [#664](https://github.com/openshift/console-operator/pull/664)
* [Bug 2078912](https://bugzilla.redhat.com/show_bug.cgi?id=2078912): Modify the operator display name to match it with the name displayed in operatorhub [#651](https://github.com/openshift/console-operator/pull/651)
* [Full changelog](https://github.com/openshift/console-operator/compare/7e488d3a109267c289572de13a751968699fdc93...f12b34a711cd594d8768790a99e220ddcf7de0a2)


### [coredns](https://github.com/openshift/coredns/tree/6c0325145a4d108f110f2bcb23aa69ba352e70d1)

* [OCPBUGS-2902](https://issues.redhat.com/browse/OCPBUGS-2902): Remove bufsize hardcoding to 2048 on cache upstream refreshes. [#80](https://github.com/openshift/coredns/pull/80)
* [Full changelog](https://github.com/openshift/coredns/compare/3ec1ee7dd91d5a1193745984c2c247ba3f2518d3...6c0325145a4d108f110f2bcb23aa69ba352e70d1)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/cb2949cac4331ee7f902be5eee9caae0258e2bd9)

* [OCPBUGS-6903](https://issues.redhat.com/browse/OCPBUGS-6903): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.23 into release-4.10 [#177](https://github.com/openshift/cloud-provider-openstack/pull/177)
* [OCPBUGS-5012](https://issues.redhat.com/browse/OCPBUGS-5012): Sync with upstream release-1.23 [#158](https://github.com/openshift/cloud-provider-openstack/pull/158)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/df0b27de80cfaa3f01e8cf0210f3a8d0c9a248d9...cb2949cac4331ee7f902be5eee9caae0258e2bd9)


### [docker-builder](https://github.com/openshift/builder/tree/3b7352af7e533bd6637ddebdd137121cc793f372)

* [OCPBUGS-205](https://issues.redhat.com/browse/OCPBUGS-205): Add support for BUILDAH_QUIET environment variable [#310](https://github.com/openshift/builder/pull/310)
* [Full changelog](https://github.com/openshift/builder/compare/24d8db40f7544806bf6e5acc32f56e223a59eed7...3b7352af7e533bd6637ddebdd137121cc793f372)


### [docker-registry](https://github.com/openshift/image-registry/tree/1892f21a94df9ea88a3fdbfe4648d672c319038f)

* [OCPBUGS-920](https://issues.redhat.com/browse/OCPBUGS-920): Keep OCI image configs when hard prune [#344](https://github.com/openshift/image-registry/pull/344)
* [Bug 2110963](https://bugzilla.redhat.com/show_bug.cgi?id=2110963): Bump aws-sdk-go to 1.44.4 [#340](https://github.com/openshift/image-registry/pull/340)
* [Full changelog](https://github.com/openshift/image-registry/compare/534ab3aa5e58cb48fb21ff564f59a3ac5077aef1...1892f21a94df9ea88a3fdbfe4648d672c319038f)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/fd4ea71c5456122d046ca9c188f3ab04fb7fd4d7)

* Adding kernel-rpm-macros to the Dockerfile. (#109) [#109](https://github.com/openshift/driver-toolkit/pull/109)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/0c77c8d662851e5a2ba8e85f4400c60f63d2fb6c...fd4ea71c5456122d046ca9c188f3ab04fb7fd4d7)


### [etcd](https://github.com/openshift/etcd/tree/b33da108932e371e6615b5ad0fa8c35f2d2eb43a)

* Updating ose-etcd images to be consistent with ART [#151](https://github.com/openshift/etcd/pull/151)
* [OCPBUGS-5950](https://issues.redhat.com/browse/OCPBUGS-5950): UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… [#179](https://github.com/openshift/etcd/pull/179)
* [OCPBUGS-3103](https://issues.redhat.com/browse/OCPBUGS-3103): Rebase openshift/etcd 4.10 onto v3.5.6 [#171](https://github.com/openshift/etcd/pull/171)
* [OCPBUGS-2142](https://issues.redhat.com/browse/OCPBUGS-2142): Rebase openshift/etcd 4.10 onto 3.5.5 [#156](https://github.com/openshift/etcd/pull/156)
* [Full changelog](https://github.com/openshift/etcd/compare/7afa17cd7209a6ff16724a5a44bd2e05007e3171...b33da108932e371e6615b5ad0fa8c35f2d2eb43a)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/a8d5b9445f4096b6f2c0fc38789cc065e8f736b4)

* [OCPBUGS-5291](https://issues.redhat.com/browse/OCPBUGS-5291): refactor restartPolicyToBool function [#36](https://github.com/openshift/machine-api-provider-gcp/pull/36)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/3fe46c8bc8bdbbccc778fd71dd1939495888ed56...a8d5b9445f4096b6f2c0fc38789cc065e8f736b4)


### [grafana](https://github.com/openshift/grafana/tree/ca476d4cc6e8692bf3fb377a6da0a37285659e6c)

* [OCPBUGS-4260](https://issues.redhat.com/browse/OCPBUGS-4260): bump github.com/crewjam/saml dependency [#93](https://github.com/openshift/grafana/pull/93)
* [Full changelog](https://github.com/openshift/grafana/compare/48aec355b16ba21f9a7d3f2896a538351526d104...ca476d4cc6e8692bf3fb377a6da0a37285659e6c)


### [haproxy-router](https://github.com/openshift/router/tree/c1e7f4053c219d193ca908711255fe37fd931bc7)

* [Bug 2098230](https://bugzilla.redhat.com/show_bug.cgi?id=2098230): Fix gap in router's handling of graceful shutdowns. [#406](https://github.com/openshift/router/pull/406)
* [Bug 2096362](https://bugzilla.redhat.com/show_bug.cgi?id=2096362): HAProxy: enable PROXY protocol for all listeners [#405](https://github.com/openshift/router/pull/405)
* [Full changelog](https://github.com/openshift/router/compare/11109e4028b69749d6f842a4da682916e0d91d2f...c1e7f4053c219d193ca908711255fe37fd931bc7)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/8a6bfe44b8e3516d89ea1b3d42c2075a46cb6bcf)

* [OCPBUGS-3434](https://issues.redhat.com/browse/OCPBUGS-3434): UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines [#1415](https://github.com/openshift/kubernetes/pull/1415)
* UPSTREAM: <carry>: Wait for default service account in node authorizer test [#1398](https://github.com/openshift/kubernetes/pull/1398)
* [Bug 2101326](https://bugzilla.redhat.com/show_bug.cgi?id=2101326): bump to k8s 1.23.12 [#1382](https://github.com/openshift/kubernetes/pull/1382)
* [OCPBUGS-1266](https://issues.redhat.com/browse/OCPBUGS-1266): UPSTREAM: <carry>: Remove reserved CPUs from default set [#1362](https://github.com/openshift/kubernetes/pull/1362)
* [Full changelog](https://github.com/openshift/kubernetes/compare/012e94568139f2b8df4cb70c21837706e3678cbc...8a6bfe44b8e3516d89ea1b3d42c2075a46cb6bcf)


### [hypershift](https://github.com/openshift/hypershift/tree/d78564a0e876ebbda44e5c7f15f67ed9073c492b)

* Use non-strict mode when parsing global config [#1619](https://github.com/openshift/hypershift/pull/1619)
* [Full changelog](https://github.com/openshift/hypershift/compare/0820c7aa5a87be991e3a33d40a90d437ab8cfcd1...d78564a0e876ebbda44e5c7f15f67ed9073c492b)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/fc60caeba29541f39992217049e74e2fc9fd03cf)

* [OCPBUGS-1488](https://issues.redhat.com/browse/OCPBUGS-1488): Add udev [#20](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/20)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/d54e3706bb8b38447800aa91632a946eb6c990ec...fc60caeba29541f39992217049e74e2fc9fd03cf)


### [image-customization-controller](https://github.com/openshift/image-customization-controller/tree/a24f082c8ebd32ede3d53c088c8ef11007384401)

* [OCPBUGS-3999](https://issues.redhat.com/browse/OCPBUGS-3999): use host IPC for the agent container [#71](https://github.com/openshift/image-customization-controller/pull/71)
* [OCPBUGS-754](https://issues.redhat.com/browse/OCPBUGS-754): mount /run/udev into the agent container [#64](https://github.com/openshift/image-customization-controller/pull/64)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/44d63f1f9c76ede6d281a1a0f97a823fa0e365e0...a24f082c8ebd32ede3d53c088c8ef11007384401)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a48d272ba8d8f56499b3ee0d2445cd01712a6628)

* [OCPBUGS-1987](https://issues.redhat.com/browse/OCPBUGS-1987): do not periodically update Available clusteroperator co… (#718) (#720) [#718](https://github.com/openshift/insights-operator/pull/718)
* helm upgrades and uninstalls backport 4.10 (#663) [#663](https://github.com/openshift/insights-operator/pull/663)
* OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) [#659](https://github.com/openshift/insights-operator/pull/659)
* [Full changelog](https://github.com/openshift/insights-operator/compare/85bb6ef1e3de2ebea0840a5eba816f19c6d551d8...a48d272ba8d8f56499b3ee0d2445cd01712a6628)


### [ironic](https://github.com/openshift/ironic-image/tree/23cbe53357d41c7e08a12dc7de6cb92861e263b2)

* [OCPBUGS-7163](https://issues.redhat.com/browse/OCPBUGS-7163): Increase power_state_change_timeout setting [#348](https://github.com/openshift/ironic-image/pull/348)
* Bug OCPBUGS-6886: Fix setting boot related attributes [#347](https://github.com/openshift/ironic-image/pull/347)
* [OCPBUGS-5344](https://issues.redhat.com/browse/OCPBUGS-5344): Configure Ironic iLO driver to use web server [#343](https://github.com/openshift/ironic-image/pull/343)
* [OCPBUGS-4467](https://issues.redhat.com/browse/OCPBUGS-4467): Remove RDO distribution configuration [#330](https://github.com/openshift/ironic-image/pull/330)
* [OCPBUGS-5415](https://issues.redhat.com/browse/OCPBUGS-5415): Update packages versions with latest available [#345](https://github.com/openshift/ironic-image/pull/345)
* Bug OCPBUGS-3477: Improve resiliency of eTag handling [#316](https://github.com/openshift/ironic-image/pull/316)
* [OCPBUGS-2829](https://issues.redhat.com/browse/OCPBUGS-2829): Removed ServerName from VirtualHost Directives [#307](https://github.com/openshift/ironic-image/pull/307)
* [OCPBUGS-1740](https://issues.redhat.com/browse/OCPBUGS-1740): Backport improvements to iDRAC steps to OCP 4.10 [#303](https://github.com/openshift/ironic-image/pull/303)
* [OCPBUGS-1225](https://issues.redhat.com/browse/OCPBUGS-1225): sync BIOS settings fixes [#298](https://github.com/openshift/ironic-image/pull/298)
* [Full changelog](https://github.com/openshift/ironic-image/compare/62012c2bf9ea0958e7c49e7a08be266df0408dd3...23cbe53357d41c7e08a12dc7de6cb92861e263b2)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/28ee0ef73966f9989e5ad83ef55791390738a59a)

* [OCPBUGS-7533](https://issues.redhat.com/browse/OCPBUGS-7533): make coreos-installer output available in the logs [#68](https://github.com/openshift/ironic-agent-image/pull/68)
* [OCPBUGS-1232](https://issues.redhat.com/browse/OCPBUGS-1232): Include Fix for discovering bond interfaces [#63](https://github.com/openshift/ironic-agent-image/pull/63)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/f68efd033d9ab4faa77cfd83548b8bdc31e897fb...28ee0ef73966f9989e5ad83ef55791390738a59a)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/2ea521321fb385c6221ea48b621488d331620dae)

* [OCPBUGS-7238](https://issues.redhat.com/browse/OCPBUGS-7238): Enable Websocket support [#1587](https://github.com/openshift/jenkins/pull/1587)
* [OCPBUGS-7052](https://issues.redhat.com/browse/OCPBUGS-7052): Sync jenkins version and plugins with ma… [#1582](https://github.com/openshift/jenkins/pull/1582)
* [OCPBUGS-4095](https://issues.redhat.com/browse/OCPBUGS-4095): Required Plugin `workflow-multibranch` [#1569](https://github.com/openshift/jenkins/pull/1569)
* [OCPBUGS-6645](https://issues.redhat.com/browse/OCPBUGS-6645): Handle routes properly in s2i/run [#1562](https://github.com/openshift/jenkins/pull/1562)
* [OCPBUGS-4095](https://issues.redhat.com/browse/OCPBUGS-4095): Various CVEs September/2022 [#1547](https://github.com/openshift/jenkins/pull/1547)
* [OCPBUGS-900](https://issues.redhat.com/browse/OCPBUGS-900): Bump openshift login plugin to 1.0.29 [#1561](https://github.com/openshift/jenkins/pull/1561)
* [OCPBUGS-912](https://issues.redhat.com/browse/OCPBUGS-912): Add maven plugin dependency in base plugins [#1530](https://github.com/openshift/jenkins/pull/1530)
* [OCPBUGS-3697](https://issues.redhat.com/browse/OCPBUGS-3697): [release-4.10] Update OWNERS [#1521](https://github.com/openshift/jenkins/pull/1521)
* [release: 4.10] OCPBUGS-2137: Sync javax-mail-api with version required by jenkins 2.361.1 [#1496](https://github.com/openshift/jenkins/pull/1496)
* [OCPBUGS-724](https://issues.redhat.com/browse/OCPBUGS-724): Update blueocean-autofavorite to 1.2.5 [#1478](https://github.com/openshift/jenkins/pull/1478)
* [OCPBUGS-2943](https://issues.redhat.com/browse/OCPBUGS-2943): Force git-server to an earlier version [#1509](https://github.com/openshift/jenkins/pull/1509)
* [OCPBUGS-2185](https://issues.redhat.com/browse/OCPBUGS-2185): Bump Jenkins version to 2.361.1 [#1499](https://github.com/openshift/jenkins/pull/1499)
* [OCPBUGS-1440](https://issues.redhat.com/browse/OCPBUGS-1440): fix install plugins script [#1484](https://github.com/openshift/jenkins/pull/1484)
* [OCPBUGS-1037](https://issues.redhat.com/browse/OCPBUGS-1037): Install glibc language package to remove `setLocale` warning [#1480](https://github.com/openshift/jenkins/pull/1480)
* [OCPBUGS-473](https://issues.redhat.com/browse/OCPBUGS-473): CVE mitigations [#1479](https://github.com/openshift/jenkins/pull/1479)
* [OCPBUGS-713](https://issues.redhat.com/browse/OCPBUGS-713): Add user coreydaley to approvers list [#1477](https://github.com/openshift/jenkins/pull/1477)
* [OCPBUGS-400](https://issues.redhat.com/browse/OCPBUGS-400): Revert xmlstarlet usage [#1469](https://github.com/openshift/jenkins/pull/1469)
* [Full changelog](https://github.com/openshift/jenkins/compare/c5b7159fa16120da52bd2c1e5003e2b1a0e9be33...2ea521321fb385c6221ea48b621488d331620dae)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/caa41dda2fc8f7bbb2ce59d0f1af4831ac36b2c5)

* [OCPBUGS-6911](https://issues.redhat.com/browse/OCPBUGS-6911): Add node egress IP assignment resync [#501](https://github.com/openshift/sdn/pull/501)
* [OCPBUGS-2106](https://issues.redhat.com/browse/OCPBUGS-2106): fix network policy egress [#465](https://github.com/openshift/sdn/pull/465)
* Bug OCPBUGS-4387: Rebase against cherry-pick of kubernetes#107413 [#475](https://github.com/openshift/sdn/pull/475)
* [OCPBUGS-3996](https://issues.redhat.com/browse/OCPBUGS-3996): egressip: Continue to process other nodes if a node is not ready [#472](https://github.com/openshift/sdn/pull/472)
* [OCPBUGS-647](https://issues.redhat.com/browse/OCPBUGS-647): Fix DNS endpoint hack to prefer local instead of forcing it [#467](https://github.com/openshift/sdn/pull/467)
* [OCPBUGS-647](https://issues.redhat.com/browse/OCPBUGS-647): Fix OCP hack to prefer local DNS endpoints [#457](https://github.com/openshift/sdn/pull/457)
* [OCPBUGS-255](https://issues.redhat.com/browse/OCPBUGS-255): setup network policy rules during pod creation to fix postStart hook [#455](https://github.com/openshift/sdn/pull/455)
* [Full changelog](https://github.com/openshift/sdn/compare/474a107e08401a2bb9ba749f4b1717b3eb3a508a...caa41dda2fc8f7bbb2ce59d0f1af4831ac36b2c5)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/df55d3ea3dc12dbebf4daedcf4f886b3b73a8e35)

* [OCPBUGS-4086](https://issues.redhat.com/browse/OCPBUGS-4086): cherry-pick, do not expose ingress path metric when service is nil [#86](https://github.com/openshift/kube-state-metrics/pull/86)
* [OCPBUGS-2196](https://issues.redhat.com/browse/OCPBUGS-2196): internal/store: fix metrics slice length [#79](https://github.com/openshift/kube-state-metrics/pull/79)
* [Bug 2078835](https://bugzilla.redhat.com/show_bug.cgi?id=2078835): internal/store: fix potential panic in pod store [#70](https://github.com/openshift/kube-state-metrics/pull/70)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/088ab061c537686f3e104ed0dd9f8794bb62f69c...df55d3ea3dc12dbebf4daedcf4f886b3b73a8e35)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/d4f4d9aeb17f2a20464dfeb35d7c26c74793dcf6)

* Bug OCPBUGS-941: Fix unbound router_id variable while creating event [#688](https://github.com/openshift/kuryr-kubernetes/pull/688)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/e96efa4ed07aa97f3856286a2e884694e3b39dc0...d4f4d9aeb17f2a20464dfeb35d7c26c74793dcf6)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/fd8236ad9f0a176abb237df39e9b373c39038631)

* Updating ose-machine-api-operator images to be consistent with ART [#1103](https://github.com/openshift/machine-api-operator/pull/1103)
* [OCPBUGS-957](https://issues.redhat.com/browse/OCPBUGS-957): Change "create" sequence with powering on the vm after clone [#1065](https://github.com/openshift/machine-api-operator/pull/1065)
* [Bug 2109124](https://bugzilla.redhat.com/show_bug.cgi?id=2109124): Add DescribeRegions permission for aws controller [#1046](https://github.com/openshift/machine-api-operator/pull/1046)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/d12b8a8f84ab656b466c89774cbf1992c14f1c9d...fd8236ad9f0a176abb237df39e9b373c39038631)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c603f58ac9d7d3a8ee56f622ed64a580c46e4d67)

* [OCPBUGS-4830](https://issues.redhat.com/browse/OCPBUGS-4830): daemon: gate done state on uncordon completion [#3278](https://github.com/openshift/machine-config-operator/pull/3278)
* [OCPBUGS-6702](https://issues.redhat.com/browse/OCPBUGS-6702): controller: don't render new MC until base MCs update [#3517](https://github.com/openshift/machine-config-operator/pull/3517)
* [OCPBUGS-5831](https://issues.redhat.com/browse/OCPBUGS-5831): Do not allow empty system reserved values [#3487](https://github.com/openshift/machine-config-operator/pull/3487)
* [OCPBUGS-4810](https://issues.redhat.com/browse/OCPBUGS-4810): Sync controllerconfig anyway if daemon sync fails [#3454](https://github.com/openshift/machine-config-operator/pull/3454)
* [OCPBUGS-4136](https://issues.redhat.com/browse/OCPBUGS-4136): configure-ovs: auto-connect ovs-if-phys0 with br-ex [#3436](https://github.com/openshift/machine-config-operator/pull/3436)
* [OCPBUGS-4134](https://issues.redhat.com/browse/OCPBUGS-4134): Avoid NM managing patch port between br-int and br-ex [#3435](https://github.com/openshift/machine-config-operator/pull/3435)
* [OCPBUGS-3500](https://issues.redhat.com/browse/OCPBUGS-3500): Add ephemeral storage to kubelet system reserved args [#3408](https://github.com/openshift/machine-config-operator/pull/3408)
* [Bug 2069754](https://bugzilla.redhat.com/show_bug.cgi?id=2069754): [on-prem] Add NetworkManager reload to resolv-prepender [#3041](https://github.com/openshift/machine-config-operator/pull/3041)
* [OCPBUGS-2973](https://issues.redhat.com/browse/OCPBUGS-2973): drop doc overlaysize default [#3395](https://github.com/openshift/machine-config-operator/pull/3395)
* [OCPBUGS-2070](https://issues.redhat.com/browse/OCPBUGS-2070): Make sure there is a search domain in resolv.conf [#3366](https://github.com/openshift/machine-config-operator/pull/3366)
* [OCPBUGS-642](https://issues.redhat.com/browse/OCPBUGS-642): Fix .ssh directory not owned by core when created by Machine Config Daemon [#3315](https://github.com/openshift/machine-config-operator/pull/3315)
* [Bug 2118609](https://bugzilla.redhat.com/show_bug.cgi?id=2118609): Fix problem with retaining data in string array in piped while loop [#3289](https://github.com/openshift/machine-config-operator/pull/3289)
* [Bug 2118607](https://bugzilla.redhat.com/show_bug.cgi?id=2118607): configure-ovs: clone inactive autoconnect slaves [#3288](https://github.com/openshift/machine-config-operator/pull/3288)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/dc29945da95a65f460ad50ad1bbc10e1918a9c61...c603f58ac9d7d3a8ee56f622ed64a580c46e4d67)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/09a132b7c844082fe6945b327fd0243d5a729f7c)

* [OCPBUGS-960](https://issues.redhat.com/browse/OCPBUGS-960): Update rhcos release browser url [#24](https://github.com/openshift/machine-os-images/pull/24)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/52118759e5c68733954f15d0cdc45c255752aa3c...09a132b7c844082fe6945b327fd0243d5a729f7c)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/8557de96b849421acf495693b5e1375d6b4d88e9)

* [OCPBUGS-343](https://issues.redhat.com/browse/OCPBUGS-343): Configure ignored namespaces into multus-admission-controller [#55](https://github.com/openshift/multus-admission-controller/pull/55)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d7a7fe5df9f6303487475767acbb5228e8135af3...8557de96b849421acf495693b5e1375d6b4d88e9)


### [multus-cni](https://github.com/openshift/multus-cni/tree/f410c0e51bc8e4850c6c4798316363c06f749e63)

* [Bug 2071800](https://bugzilla.redhat.com/show_bug.cgi?id=2071800): Remove error handling for getPod to force to proceed cmdDel [backport 4.10] [#132](https://github.com/openshift/multus-cni/pull/132)
* [OCPBUGS-2448](https://issues.redhat.com/browse/OCPBUGS-2448): Fix missing device-info in networks-status annotation for chained plugins [#137](https://github.com/openshift/multus-cni/pull/137)
* [Full changelog](https://github.com/openshift/multus-cni/compare/5059ec256a4eb5eb59e10ec59d343d42214d0c08...f410c0e51bc8e4850c6c4798316363c06f749e63)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/112baadbd274337521ca19782730d99c7e514eb4)

* [OCPBUGS-3943](https://issues.redhat.com/browse/OCPBUGS-3943): Excluded ranges bug (#282) [#105](https://github.com/openshift/whereabouts-cni/pull/105)
* [OCPBUGS-1659](https://issues.redhat.com/browse/OCPBUGS-1659): ip-reconciler: Add all non default interfaces to Pod IP list [#98](https://github.com/openshift/whereabouts-cni/pull/98)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/a8d68d3e48aa7e2d6e612268f6a5b408b5720776...112baadbd274337521ca19782730d99c7e514eb4)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/6edc4a731f7db838f8693c918fe23fd971eb5689)

* [Bug 2116642](https://bugzilla.redhat.com/show_bug.cgi?id=2116642): Backport "mac duplicates" [#42](https://github.com/openshift/bond-cni/pull/42)
* [Full changelog](https://github.com/openshift/bond-cni/compare/5ccc626d551e6ec20d11ea5d72cad8025f61da21...6edc4a731f7db838f8693c918fe23fd971eb5689)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/cd4f5bb0d9792c582dc70bd186a3a1580abc5fc0)

* [OCPBUGS-2553](https://issues.redhat.com/browse/OCPBUGS-2553): bump kube to 1.23.12 to fix group sync [#85](https://github.com/openshift/oauth-apiserver/pull/85)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/effa26af0ee014ef342de1118ba0796cc72aaa01...cd4f5bb0d9792c582dc70bd186a3a1580abc5fc0)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/67425d48fa35b6e50221141eeff08fa0d0bf6594)

* [OCPBUGS-4604](https://issues.redhat.com/browse/OCPBUGS-4604): [release-4.10] bump to kube 1.23.12 [#323](https://github.com/openshift/openshift-apiserver/pull/323)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/5eabbaacd9c401192947c053672d71516dd3db34...67425d48fa35b6e50221141eeff08fa0d0bf6594)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/12a5dee1b6cbfe7b122c2336b78705e9b0705fc8)

* Bug OCPBUGS-4717: Add SecretHashAnnotation to node service [#104](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/104)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/cb58fe4892c636dc5a9d47e29793aab38fd1ca3e...12a5dee1b6cbfe7b122c2336b78705e9b0705fc8)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/963993b2017a498bf28fe72a89cf38878ab83a34)

* [OCPBUGS-6596](https://issues.redhat.com/browse/OCPBUGS-6596): Address CVE-2022-41717 [#251](https://github.com/openshift/cluster-api-provider-openstack/pull/251)
* [OCPBUGS-2628](https://issues.redhat.com/browse/OCPBUGS-2628): Ensure network defs without subnet follow noAllowedAddressPairs [#249](https://github.com/openshift/cluster-api-provider-openstack/pull/249)
* [OCPBUGS-1951](https://issues.redhat.com/browse/OCPBUGS-1951): Apply noAllowedAddressPairs on intended subnets only [#245](https://github.com/openshift/cluster-api-provider-openstack/pull/245)
* [Bug 1921656](https://bugzilla.redhat.com/show_bug.cgi?id=1921656): Remove dependence on annotation to allow Server deletion [#240](https://github.com/openshift/cluster-api-provider-openstack/pull/240)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/84171b7dfdb0160e85a789fbf4cff4950ba4e384...963993b2017a498bf28fe72a89cf38878ab83a34)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/8de38bbcc9576144c339b29dc8a3b6a13f72514b)

* [OCPBUGS-6498](https://issues.redhat.com/browse/OCPBUGS-6498): Order an operator CR's status.Component.Refs array (#2880) [#432](https://github.com/openshift/operator-framework-olm/pull/432)
* [OCPBUGS-1525](https://issues.redhat.com/browse/OCPBUGS-1525): Package Server Manager should enforce expected csv values [#387](https://github.com/openshift/operator-framework-olm/pull/387)
* [OCPBUGS-5294](https://issues.redhat.com/browse/OCPBUGS-5294): backport cert rotation fix [#428](https://github.com/openshift/operator-framework-olm/pull/428)
* [OCPBUGS-4799](https://issues.redhat.com/browse/OCPBUGS-4799): Fix label key truncation for subscription annotations (#2731) [#421](https://github.com/openshift/operator-framework-olm/pull/421)
* [OCPBUGS-4128](https://issues.redhat.com/browse/OCPBUGS-4128): concurrent write bug fix [#415](https://github.com/openshift/operator-framework-olm/pull/415)
* [OCPBUGS-2898](https://issues.redhat.com/browse/OCPBUGS-2898): [release-4.10] fix(openshift): use env var instead of clusterversion status (#2817) [#389](https://github.com/openshift/operator-framework-olm/pull/389)
* [OCPBUGS-1323](https://issues.redhat.com/browse/OCPBUGS-1323): Add autoscaling eviction annotation to catalog pods to enable proper draining of nodes [#392](https://github.com/openshift/operator-framework-olm/pull/392)
* [OCPBUGS-1087](https://issues.redhat.com/browse/OCPBUGS-1087): Stop corrupting resolver cache. [#385](https://github.com/openshift/operator-framework-olm/pull/385)
* [Bug 2115874](https://bugzilla.redhat.com/show_bug.cgi?id=2115874): fix(grpc): Add startupProbe to check for grpc health readiness (#2791) [#348](https://github.com/openshift/operator-framework-olm/pull/348)
* [Bug 2118261](https://bugzilla.redhat.com/show_bug.cgi?id=2118261): Update containerd version [#357](https://github.com/openshift/operator-framework-olm/pull/357)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/69bb8fe0ac3a93472b5aace0df7722c4eaf23b92...8de38bbcc9576144c339b29dc8a3b6a13f72514b)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/9773aef8782056fa23e6af597195daf4a256f585)

* [OCPBUGS-761](https://issues.redhat.com/browse/OCPBUGS-761): CSI provisioned disks are preallocated [#117](https://github.com/openshift/ovirt-csi-driver/pull/117)
* [OCPBUGS-620](https://issues.redhat.com/browse/OCPBUGS-620): Upgrade go-ovirt-client to 1.0.0 [#116](https://github.com/openshift/ovirt-csi-driver/pull/116)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/633cbb6d16878d1e32e4a3f006315e670a4d9e22...9773aef8782056fa23e6af597195daf4a256f585)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/7db7ecbd609add3be12af8e3402e987dc5236fe9)

* [OCPBUGS-3656](https://issues.redhat.com/browse/OCPBUGS-3656): Fixes dualstack clusterIPs for network policy svc handler [#1378](https://github.com/openshift/ovn-kubernetes/pull/1378)
* [OCPBUGS-7012](https://issues.redhat.com/browse/OCPBUGS-7012): [release-4.10] Fix Egress FW ACL rules in dualstack mode [#1508](https://github.com/openshift/ovn-kubernetes/pull/1508)
* [OCPBUGS-2013](https://issues.redhat.com/browse/OCPBUGS-2013): Validate node subnet annotations against cluster networks [#1332](https://github.com/openshift/ovn-kubernetes/pull/1332)
* [Bug 2092895](https://bugzilla.redhat.com/show_bug.cgi?id=2092895): update all egress ACLs' direction to "from-lport" [#1148](https://github.com/openshift/ovn-kubernetes/pull/1148)
* [OCPBUGS-6814](https://issues.redhat.com/browse/OCPBUGS-6814): [release-4.10] Ensure loadbalancer cleanup doesn't fail [#1499](https://github.com/openshift/ovn-kubernetes/pull/1499)
* [OCPBUGS-4882](https://issues.redhat.com/browse/OCPBUGS-4882): append instead of overwrite logicalSwitch other-config [#1450](https://github.com/openshift/ovn-kubernetes/pull/1450)
* [OCPBUGS-3615](https://issues.redhat.com/browse/OCPBUGS-3615): [4.10] CARRY: client: don't construct transaction log string when it's not needed [#1375](https://github.com/openshift/ovn-kubernetes/pull/1375)
* [OCPBUGS-5929](https://issues.redhat.com/browse/OCPBUGS-5929): [release-4.10] Fix egress firewall to allow inbound connections in both gw modes [#1482](https://github.com/openshift/ovn-kubernetes/pull/1482)
* [OCPBUGS-5990](https://issues.redhat.com/browse/OCPBUGS-5990): egressip: fix test data race accessing podAssignment cache [#1480](https://github.com/openshift/ovn-kubernetes/pull/1480)
* [OCPBUGS-5077](https://issues.redhat.com/browse/OCPBUGS-5077): [release-4.10] Fix load balancer health check locking and update [#1463](https://github.com/openshift/ovn-kubernetes/pull/1463)
* [OCPBUGS-5299](https://issues.redhat.com/browse/OCPBUGS-5299): Set the node as reachable only when it is being added as an egressip node [#1464](https://github.com/openshift/ovn-kubernetes/pull/1464)
* [OCPBUGS-5040](https://issues.redhat.com/browse/OCPBUGS-5040): [release-4.10] Fix hybrid overlay unit tests [#1462](https://github.com/openshift/ovn-kubernetes/pull/1462)
* [OCPBUGS-4864](https://issues.redhat.com/browse/OCPBUGS-4864): [release-4.10] Fix address set cleanup: only delete address sets owned by given object [#1453](https://github.com/openshift/ovn-kubernetes/pull/1453)
* [OCPBUGS-4888](https://issues.redhat.com/browse/OCPBUGS-4888): [release-4.10] Fixes scenario where deleted + completed pods may leak [#1458](https://github.com/openshift/ovn-kubernetes/pull/1458)
* [OCPBUGS-4839](https://issues.redhat.com/browse/OCPBUGS-4839), [OCPBUGS-4861](https://issues.redhat.com/browse/OCPBUGS-4861): [release-4.10] Avoid duplicate transactions and minimize handlers with empty namespace selectors [#1452](https://github.com/openshift/ovn-kubernetes/pull/1452)
* [Bug 2115872](https://bugzilla.redhat.com/show_bug.cgi?id=2115872): Fix unit-test failures in 4.10 [#1457](https://github.com/openshift/ovn-kubernetes/pull/1457)
* [OCPBUGS-1568](https://issues.redhat.com/browse/OCPBUGS-1568): pods: deleteLogicalPort should not fail when node is gone [#1423](https://github.com/openshift/ovn-kubernetes/pull/1423)
* [OCPBUGS-3778](https://issues.redhat.com/browse/OCPBUGS-3778): [release-4.10] Netpol races partial fixes [#1434](https://github.com/openshift/ovn-kubernetes/pull/1434)
* [OCPBUGS-4598](https://issues.redhat.com/browse/OCPBUGS-4598): Bumps libovsdb to pick up fixes for optional values [#1426](https://github.com/openshift/ovn-kubernetes/pull/1426)
* [OCPBUGS-3858](https://issues.redhat.com/browse/OCPBUGS-3858): Adjust ovs bundle timeout [#1385](https://github.com/openshift/ovn-kubernetes/pull/1385)
* [OCPBUGS-1568](https://issues.redhat.com/browse/OCPBUGS-1568): pods: deleteLogicalPort should not fail when ls is gone [#1293](https://github.com/openshift/ovn-kubernetes/pull/1293)
* [Bug 2099843](https://bugzilla.redhat.com/show_bug.cgi?id=2099843): Add final db check to egress IP test [#1357](https://github.com/openshift/ovn-kubernetes/pull/1357)
* [Bug 2105657](https://bugzilla.redhat.com/show_bug.cgi?id=2105657): Fix egressIP object deletion if the node is deleted first [#1228](https://github.com/openshift/ovn-kubernetes/pull/1228)
* [OCPBUGS-2660](https://issues.redhat.com/browse/OCPBUGS-2660): Add logging verbosity to configuring OVN logs [#1326](https://github.com/openshift/ovn-kubernetes/pull/1326)
* [OCPBUGS-1454](https://issues.redhat.com/browse/OCPBUGS-1454): Fix NP upgrade bug: unexpectedly found multiple equivalent ACLs (arp v/s arp||nd) [#1269](https://github.com/openshift/ovn-kubernetes/pull/1269)
* [OCPBUGS-2746](https://issues.redhat.com/browse/OCPBUGS-2746): Fixes SNAT-ing Logic for EgressIPs [#1336](https://github.com/openshift/ovn-kubernetes/pull/1336)
* [OCPBUGS-2208](https://issues.redhat.com/browse/OCPBUGS-2208): getDefaultGatewayInterfaceByFamily: custom filter for MultiHop [#1303](https://github.com/openshift/ovn-kubernetes/pull/1303)
* [OCPBUGS-2464](https://issues.redhat.com/browse/OCPBUGS-2464): Fix the golang image used for unit-tests [#1299](https://github.com/openshift/ovn-kubernetes/pull/1299)
* [OCPBUGS-1024](https://issues.redhat.com/browse/OCPBUGS-1024): Dockerfile: bump to 2.16.0-89.3.el8fdp [#1271](https://github.com/openshift/ovn-kubernetes/pull/1271)
* [Bug 2111552](https://bugzilla.redhat.com/show_bug.cgi?id=2111552): Remove conntrack entries after rules [#1219](https://github.com/openshift/ovn-kubernetes/pull/1219)
* [OCPBUGS-660](https://issues.redhat.com/browse/OCPBUGS-660): [release-4.10] pods: deleteLogicalPort should not fail when port is already gone [#1257](https://github.com/openshift/ovn-kubernetes/pull/1257)
* [Bug 2113861](https://bugzilla.redhat.com/show_bug.cgi?id=2113861): reconcile-node-lbs [#1227](https://github.com/openshift/ovn-kubernetes/pull/1227)
* [OCPBUGS-174](https://issues.redhat.com/browse/OCPBUGS-174): [release-4.10] Fix race when adding and removing pod with same name [#1250](https://github.com/openshift/ovn-kubernetes/pull/1250)
* [Bug 2070392](https://bugzilla.redhat.com/show_bug.cgi?id=2070392): Fix egress IP reassignment on cloud [#1203](https://github.com/openshift/ovn-kubernetes/pull/1203)
* [Bug 2111588](https://bugzilla.redhat.com/show_bug.cgi?id=2111588): [release-4.10] export OVS metrics [#1215](https://github.com/openshift/ovn-kubernetes/pull/1215)
* [Bug 2109442](https://bugzilla.redhat.com/show_bug.cgi?id=2109442): Fix GetPodsBySelector/GetNamespacesBySelector so MatchExpressions is respected [#1195](https://github.com/openshift/ovn-kubernetes/pull/1195)
* [Bug 2104454](https://bugzilla.redhat.com/show_bug.cgi?id=2104454): improve performance of service sync [#1173](https://github.com/openshift/ovn-kubernetes/pull/1173)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/358801d8024b6a82306b973547cda4958e1e4647...7db7ecbd609add3be12af8e3402e987dc5236fe9)


### [prometheus](https://github.com/openshift/prometheus/tree/b91d7c75372b3ae707ce287e56df3fc7db935bac)

* [OCPBUGS-3078](https://issues.redhat.com/browse/OCPBUGS-3078): Backkport OCPBUGS-1718 to release 4.10 [#146](https://github.com/openshift/prometheus/pull/146)
* [Full changelog](https://github.com/openshift/prometheus/compare/3c6cd55e3a5e5332e810274ad27fddf662d4f506...b91d7c75372b3ae707ce287e56df3fc7db935bac)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/c520720b663e2e2c93ecb0cb970c2556260ebe6c)

* [Bug 2108976](https://bugzilla.redhat.com/show_bug.cgi?id=2108976): pkg/prometheus: fix curl exec probe [#196](https://github.com/openshift/prometheus-operator/pull/196)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/73ddd44bf77c257461981b77a083cf7968745201...c520720b663e2e2c93ecb0cb970c2556260ebe6c)


### [telemeter](https://github.com/openshift/telemeter/tree/3b5eb87fd042feafba13502ddf724951942dc8df)

* [OCPBUGS-6575](https://issues.redhat.com/browse/OCPBUGS-6575): update prometheus/client_golang version [#446](https://github.com/openshift/telemeter/pull/446)
* [Full changelog](https://github.com/openshift/telemeter/compare/2c9c76e62783073dfd31a3780b3cdea5acdd481b...3b5eb87fd042feafba13502ddf724951942dc8df)


### [tests](https://github.com/openshift/origin/tree/c9dcd2555587d9a2d59ff7c2b9f86efa7661fb45)

* [OCPBUGS-4578](https://issues.redhat.com/browse/OCPBUGS-4578): Bond test 4.10 backport [#27593](https://github.com/openshift/origin/pull/27593)
* [OCPBUGS-2614](https://issues.redhat.com/browse/OCPBUGS-2614): Fix s2i ruby test that relys on rack [#27479](https://github.com/openshift/origin/pull/27479)
* disruption checking is disabled for prior releases because we lack a good baseline [#27472](https://github.com/openshift/origin/pull/27472)
* [OCPBUGS-1454](https://issues.redhat.com/browse/OCPBUGS-1454): Fixes OVN ACL audit log parsing [#27429](https://github.com/openshift/origin/pull/27429)
* [Bug 2117301](https://bugzilla.redhat.com/show_bug.cgi?id=2117301): Skip ErrImagePull for expected failures [#27352](https://github.com/openshift/origin/pull/27352)
* [Bug 2115862](https://bugzilla.redhat.com/show_bug.cgi?id=2115862): Skip internet connection test if we use a proxy [#27344](https://github.com/openshift/origin/pull/27344)
* [Bug 2065028](https://bugzilla.redhat.com/show_bug.cgi?id=2065028): rearrange test cases [#26915](https://github.com/openshift/origin/pull/26915)
* [OCPBUGS-374](https://issues.redhat.com/browse/OCPBUGS-374): test: allow -f to match tests for any test suite [#27366](https://github.com/openshift/origin/pull/27366)
* [Full changelog](https://github.com/openshift/origin/compare/4e11d238d9f989cb1008e5217824fd62f243eec0...c9dcd2555587d9a2d59ff7c2b9f86efa7661fb45)


### [thanos](https://github.com/openshift/thanos/tree/ac17631943be205d4ea38ccfc8ef49db999b4e47)

* [OCPBUGS-2037](https://issues.redhat.com/browse/OCPBUGS-2037): Bump 4.10 to 0.23.2 [#92](https://github.com/openshift/thanos/pull/92)
* [Full changelog](https://github.com/openshift/thanos/compare/10ca1d38d107c9f12dd2c85a4455626ca0f2e29b...ac17631943be205d4ea38ccfc8ef49db999b4e47)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/f2bc9eb32e2f367af2b498a79e32c1dbb006eefd)

* [Bug 2106666](https://bugzilla.redhat.com/show_bug.cgi?id=2106666): Return error when VM's info returned from VC doesn't contain IP address [#29](https://github.com/openshift/cloud-provider-vsphere/pull/29)
* [OCPBUGS-2065](https://issues.redhat.com/browse/OCPBUGS-2065): fix .dockerignore to satisfy OCP specific requirements [#27](https://github.com/openshift/cloud-provider-vsphere/pull/27)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/25b98d3b2fa812ef3b28ddcd90454c1b937898a9...f2bc9eb32e2f367af2b498a79e32c1dbb006eefd)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/f5d7362c88eb7d05bdfd0f70c2d53df7275d4ae2)

* [OCPBUGS-5895](https://issues.redhat.com/browse/OCPBUGS-5895): Fix vendored ini package [#137](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/137)
* [OCPBUGS-5895](https://issues.redhat.com/browse/OCPBUGS-5895): Backport multi dc support 410 [#133](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/133)
* [OCPBUGS-5507](https://issues.redhat.com/browse/OCPBUGS-5507): Fix sc creation if it is deleted [#128](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/128)
* [OCPBUGS-3288](https://issues.redhat.com/browse/OCPBUGS-3288): set TLS cipher suites in Kube RBAC sidecars [#120](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/120)
* [OCPBUGS-2282](https://issues.redhat.com/browse/OCPBUGS-2282): Add HTTP proxy to syncer container [#114](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/114)
* [OCPBUGS-376](https://issues.redhat.com/browse/OCPBUGS-376): storageclass should not be created for unsupported vsphere version [#105](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/105)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/7401726fb0276e14d2106ac26b486429dfe232ee...f5d7362c88eb7d05bdfd0f70c2d53df7275d4ae2)