# 4.10.60

Created: 2023-05-18 06:51:22 +0000 UTC

Image Digest: `sha256:d6efa3107f28b3eab7d44034e52a94296027ecf5d84826bc69ad6f91f006186c`

Promoted from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2023-05-17-194951


## Changes from 4.10.29

### Components

* Kubernetes upgraded from 1.23.5 to 1.23.17
* Red Hat Enterprise Linux CoreOS upgraded from 410.84.202208161501-0 to 410.84.202305112108-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [db2d118a](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/db2d118ad70ff62a2111e83a8d14c5b32e176b38) `sha256:0e6126a19a792eaad076d6592542eb2a9f379f4e6086c753bba46ba3354e8c34`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [f0d69663](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/f0d6966321e3d416efec2ac7405494b057cb35f8) `sha256:04cdc6de3417a00ec744912eb311d76c0fc670a09d264c6e11ac9d666b270c43`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [d85867fe](https://github.com/openshift/cloud-provider-aws/commit/d85867feab1e80f094624d57221a071d7b6a148c) `sha256:7eb6754c0a4511325165d3923f85e367894d80d5ea0c0b6a6376077af41323bd`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [c2e6dc19](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/c2e6dc19fac0006651d0820272a9734e231b1ce5) `sha256:a49ead8037f4fbf26cc231fe83f122a86acdd3a6e28939cde3b5e1f5d1b82945`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [7f9eb87a](https://github.com/openshift/aws-pod-identity-webhook/commit/7f9eb87aea90ff2bac0c98df741b6d6dd0c61449) `sha256:95dd9fe2148b93c7086956a2581fc899d8cce4648982dd41c95acbe2a2f4fb8e`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [c7c7188d](https://github.com/openshift/azure-disk-csi-driver/commit/c7c7188d259bb45decb8dd685798316f24faed19) `sha256:fe71744b6707a664010d30c17a546403bfe324aac82cd29ecb0e2d37c5bed0d8`
* [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator) git [3807eb37](https://github.com/openshift/azure-file-csi-driver-operator/commit/3807eb37247bb9008d7e64c10e3bf6a3872d199d) `sha256:ac22648e328bf5666e387531d7540f885f3be25274ccbdfb5b4b2198d7c35e88`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [40c11f72](https://github.com/openshift/baremetal-runtimecfg/commit/40c11f7299386a9608e18feb8cc062c2ebc3364b) `sha256:91a168dd8a58b869870b3025c1622858d71b8bdf74294cc385da073cdb64028d`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [6a015c71](https://github.com/openshift/cluster-authentication-operator/commit/6a015c7108252fa22c75ffa4b7757d28bfed902a) `sha256:1fcb494eceff21c762790a68142052b9d2684ecc5f6901afa735ed3972d0c746`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [8bcdcccb](https://github.com/openshift/cluster-autoscaler-operator/commit/8bcdcccbf043bc164eb5b728a8cfd962112b2aa5) `sha256:9476f262c3e8c354b1291d3f32362b9235f1ca379f0e5c70d1ccd0b682df826c`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [f22d1c60](https://github.com/openshift/cluster-bootstrap/commit/f22d1c60c188a4b5ce1731a8b1db7c20067dc7e9) `sha256:63a5d2fc7c151194212248a35786f5dcac72fc8a463440198098cbb5c621a06f`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0840c6f2](https://github.com/openshift/cluster-config-operator/commit/0840c6f2f7f25ad9aba1a36597760f36ff0ab097) `sha256:0f0d8af5995a2563afd56a350475f97c632ebf44030a0a485df4fd0a34045fa2`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [ace18623](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/ace186237dad53c28b0d05761a2c85ce7b32b56b) `sha256:c5bb9714d09421871d39e9ecb12230ef526b99478c254e816954b7b5c688e9de`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [7e1f5684](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/7e1f56849bb85b870585b2b67566d29fd7767a31) `sha256:30460bd787f96dc49517e975b8920d7e8e4c6df41d0d9402cd2e97e7eec3c146`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [95404c4e](https://github.com/openshift/cluster-machine-approver/commit/95404c4edb82f0c9d5eb1d03786c81bd3a137384) `sha256:a455648bc6cf034bf014c2e47705bd824e65182efadf2f27a396e38fdd031f47`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [b8b65d15](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/b8b65d15d14c21e6a5dd316dd59a9cfb3a2f403a) `sha256:4bcab16996046213973f53b42dc1e2f4c42ef4217804ce7d80d6f277fed834bf`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [684f6f42](https://github.com/openshift/cluster-update-keys/commit/684f6f42381cf6401dfb7e4f6f5f9fd0e441639b) `sha256:efd367f5c4a146a3c940494e3776e2b7ac82817270110efc83282e26d5ba4c46`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [3123ef8b](https://github.com/openshift/containernetworking-plugins/commit/3123ef8b0c773a55d0d5071c050919449d29fa90) `sha256:cd171e4e7c9d78da628b936befe305d9d1b6d0266ef41fc858ff3c0edd6e011e`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [d06ff18b](https://github.com/openshift/csi-driver-shared-resource/commit/d06ff18b2ff23e5165638d6c3df42a2e1715b28f) `sha256:f2dddd21b262136fecb7d3d8a0815ed8b0e611701b088543b00df622721d5192`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [662615b3](https://github.com/openshift/csi-driver-shared-resource-operator/commit/662615b3427b57d8aafff6b982a7e4b34692eadc) `sha256:83fbf2403a528bf4691c32a858992c13a177fd23a7b71c2870b1fbd558da075d`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [27e71f2b](https://github.com/openshift/csi-external-attacher/commit/27e71f2bb577200dc3cd87851989f0c950521eb8) `sha256:d683b02252401f051c6f27d3d91af2ef815206c643ca811cc4c911c7c9f03099`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [31de1e19](https://github.com/openshift/csi-external-provisioner/commit/31de1e19119e6b63cd9d52622f5b9d9df7e4c384) `sha256:8879c38168c99d1960c891217e4b9b5af20b82961fc219339f813c93bc6948c1`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [e5934091](https://github.com/openshift/csi-external-resizer/commit/e5934091f8cc4a6ca58f3719ba4487a46b4252df) `sha256:021989e7c99bae40f9fbf70ae4bbb2dd6e88027ab7d957c382c74096cfbd3438`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:f625cb6af5bcf0f5017f122dbe292e144644137171062aa04d66e44854ef33a6`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [8c1a5bca](https://github.com/openshift/csi-livenessprobe/commit/8c1a5bcac1675711b51fffe88b40bb46f0e22db9) `sha256:3d26e9212bb9e51a15924f16e0d8e00a2a953b2d0adb1691f0d4f29449897904`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [bb0bd823](https://github.com/openshift/csi-node-driver-registrar/commit/bb0bd823c2212c6657e5835eb0015aab4e93839d) `sha256:0c8e4a5293f905031f1a71a3522f35523046d544d8e0df36d81f41531d1eb6db`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:371542dd7f45e3ede19ffb6619d7b292244257657c194bbaee9f0f7fdf5791c1`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [fe4a0a2f](https://github.com/openshift/csi-external-snapshotter/commit/fe4a0a2f48fcc9069910773b32188597d899bdde) `sha256:a04f33f58d05dcd81252bebff7a2bc47b0762c692cb0a87c6faa0fa57ce4f54f`
* [docker-builder](https://github.com/openshift/builder) git [3b7352af](https://github.com/openshift/builder/commit/3b7352af7e533bd6637ddebdd137121cc793f372) `sha256:08088ccb2ce173361fc329103f7041c373d08f03e0510f9e82e4e495c3866689`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5c56bc8a](https://github.com/openshift/egress-router-cni/commit/5c56bc8a0b27f560435f1564de0f3f440e68d889) `sha256:7382c0f07c104f0335cbdba83a0f60048cf0812a0ba100add2313963b2d9b5b1`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [4dc728d0](https://github.com/openshift/cloud-provider-gcp/commit/4dc728d0e1af40893815149de016e5d6e5a7bacb) `sha256:c961d7819ff6089f1fffe2282c6673d9500e02d68c3dcaaa66815282caee3100`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [19e9a57f](https://github.com/openshift/gcp-pd-csi-driver/commit/19e9a57f04436cfc7df7d38bf5ba047d46982268) `sha256:47e246a63ac2bac26c67585f0d76b5149c241e0df104e15634b57022e8d92141`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [0e369dee](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/0e369dee1b74696a17faf9b9c28e391d6726bf52) `sha256:3440a23b5926a7a6d99876016c2b9e9ff3fbeb7dedb08a214021bf20ed784d7d`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [e3039120](https://github.com/openshift/cloud-provider-ibm/commit/e30391202c3f02694b2f5b3c2d73cb560d9c133d) `sha256:86f68a940241900df0e20456daefdf1d87c6924323a22b2448bc4aab54b9b5f1`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [28bad53d](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/28bad53d117d403b4147b68666ecfc52cee6ceca) `sha256:8151a55472245fd20b23301d4ddc4f6e60f1715c1300bc39f90b7b92d31b74ad`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [7074dfc3](https://github.com/openshift/ibm-vpc-node-label-updater/commit/7074dfc35cdd3c2e19790a934c1025c8f690c9a6) `sha256:e1d5449d1599a0c180d6406c604a05e517649ca7d68d55d494fa5a96564103a1`
* [ibmcloud-machine-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [7449a94f](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/7449a94fcd0001cac6371600a75b20850b235cc9) `sha256:a2e986609df967c262712cf2e2c995f835569240a6273d78ad6e4dbd89973e77`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [62469223](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/6246922338bc8aa21276c7e679bdd082307cbd45) `sha256:569619b0a57151b813dbd53b5d906d1289b1f2d765f27d08a5bef8c6416f9e3f`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [81fe2974](https://github.com/openshift/ironic-rhcos-downloader/commit/81fe29749c844a4a19fea0f0e2ff0a53c3b0fa25) `sha256:78b36c00ae16ef8d2ba7c16ca96fbe1f84b12d7d67d7f0bbadb5fdf64301eb8b`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [45a1c542](https://github.com/openshift/ironic-static-ip-manager/commit/45a1c542c44d9492a110ea5edb09ac026afd86de) `sha256:8f898620a8aa671ea6925f01987a6fd5f41fa14560ec8ab0591cfe48137c3594`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [4052b317](https://github.com/openshift/k8s-prometheus-adapter/commit/4052b317ff62b93019a11e2981d1d81b8b6b2e4d) `sha256:b7c2a66bd19e8bb9632b2ef94aab872d06951970c8d665f5bb862f7331de1516`
* [keepalived-ipfailover](https://github.com/openshift/images) git [5d526c41](https://github.com/openshift/images/commit/5d526c41d70e481820119cbdae922130f42b36d7) `sha256:68dd67a23a0ce189e057d095e38df70e84057604852703d049ebfa517c1af00f`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [4f198b2b](https://github.com/openshift/kube-rbac-proxy/commit/4f198b2bd5d141a561fbe6642de20b520d72e513) `sha256:ff63492c6a26ee22acbeca4ee9869b12fde87b3afb2947557e82492a98575adb`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [901a6d22](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/901a6d221d1cf79b4b6ba859bb43521e0ee635b3) `sha256:1b79d2c3516711450ec95ff38c4052eacbb4d2ac4a2534915163bd5d0991b15a`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [3b330b72](https://github.com/openshift/cluster-api-provider-libvirt/commit/3b330b72f43b178f1c16c5d504cf9ce248e679ad) `sha256:6ae9d1a1353923869a3beec5de487e1150d91b356e9ec627606a10d1c06cfec6`
* machine-os-content `sha256:0374e84acfe5ad160d530888745f7cf8fd3bc7fbfcde5583ed3de64982730e9f`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [bfcc6c85](https://github.com/openshift/multus-networkpolicy/commit/bfcc6c85b5ad1c47fc1d50ddec0acd108d270fe1) `sha256:6a7b9036f5d0c461321f5f008059e44eb5a168386c3bca606a2986efde22d643`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [707dd380](https://github.com/openshift/route-override-cni/commit/707dd38046554810f601f2fae4a69bc4b907d7d3) `sha256:bb3f620b9b224e1349ab2ee898e45fa456b99305b05ed3474de04426df7b74e3`
* [must-gather](https://github.com/openshift/must-gather) git [db7f815b](https://github.com/openshift/must-gather/commit/db7f815b979352e130967695b4a08f4f2c886bfb) `sha256:6eac618c70508e7c135084b46d87f2a293ed5ea9d4ca616280f0663afb1a3e77`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [6edc4a73](https://github.com/openshift/bond-cni/commit/6edc4a731f7db838f8693c918fe23fd971eb5689) `sha256:2e4f2d2c1e4ced7686ffb178704b761abd8a59b0b19869e9c7f622ef56edff29`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [234c1388](https://github.com/openshift/network-metrics-daemon/commit/234c13885e0c00a3b3f4f1bf81a868c82508dd2d) `sha256:d9681994ccd3fcfe8012b7a9f0af6d602d9975379792637dc31288d35c316071`
* [network-tools](https://github.com/openshift/network-tools) git [bcfec9c5](https://github.com/openshift/network-tools/commit/bcfec9c5a054f4c60356175b42a2477ec181fbd9) `sha256:e2cc15573ba0e996d366257e4cc5ee6de0c5008193c96912f5e20c01822dd0f3`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [799d414b](https://github.com/openshift/oauth-proxy/commit/799d414ba87ca5b28d08cf4af07409032c04df2b) `sha256:4d02af4df33b5486518be22d88a43e82779c6e4019dc6bcfaefc91bf61195d5c`
* [oauth-server](https://github.com/openshift/oauth-server) git [245b95f8](https://github.com/openshift/oauth-server/commit/245b95f8a8e28e3960e4d369f3ca9a42be99bdf8) `sha256:4b3adbaca82bbb6adef27804de227d7e261167366f68d73a5f7598538c2cb915`
* [oc-mirror](https://github.com/openshift/oc-mirror) git [71ca0a1a](https://github.com/openshift/oc-mirror/commit/71ca0a1af2e4f37ada0c3e93a0902e610edb10d7) `sha256:8e1507b665122d799d4699e475bd3c65c153afc658cabe638636c35631557ed9`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [2c2d50db](https://github.com/openshift/openshift-controller-manager/commit/2c2d50dbda3a06681a3b9c683c53ff3b3ba3b685) `sha256:aaeaf1394bcb72c876ed5b40a3a450a185c654d8f272f5146b70ceadfe09d733`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [e5c50aae](https://github.com/openshift/openshift-state-metrics/commit/e5c50aae141e4f72c6843a3964f167bec6e79475) `sha256:8ece11303ed872adba13c41607276f86ec3e4c0a4788be51c05a7c069428306c`
* [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack) git [2401f74d](https://github.com/openshift/machine-api-provider-openstack/commit/2401f74dba8112e0dd4a4a1bb77c26887d5da3f4) `sha256:9dd9c8b88d82529e2a9f90471912fc9616adc31927d9f6a007bdab062db4198a`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [80b92ecf](https://github.com/operator-framework/operator-marketplace/commit/80b92ecff398578b389cd953605a7b0f7bbd4f24) `sha256:9323fb02c892fea0d831407174074e3ae8cf9ffa9ce0a855a8c2fe593c0026d2`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [573ac478](https://github.com/openshift/ovirt-csi-driver-operator/commit/573ac4789b95f3ff5f9806e7023faca7b610566b) `sha256:4e905fbbe4a0a12ca3aa20d2207137d95cc2f37bb854ec79a7f5070c0c6920c7`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [35ce9aaf](https://github.com/openshift/cluster-api-provider-ovirt/commit/35ce9aafee1ffad0734f02ff0d5f8632d3905f09) `sha256:1d7f0f47426e069bf706f7f83ca2070d10e6ecee3533caeb967e6f91f5da00ab`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [c1d68e7b](https://github.com/openshift/machine-api-provider-powervs/commit/c1d68e7b97a8bcf9b350e4a686fd202ffc69978f) `sha256:70fbf076caca9492905405269dd0164e58ed6c2dc17e168470ca9ab85004cf0b`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [5f4c8992](https://github.com/openshift/prom-label-proxy/commit/5f4c89923dcfb1c620490e8ed8de8cd1bdaf5122) `sha256:8234eb4e8062233579eb6690793e297f344942a4d66ed4f739aebe65289a55c9`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [01339596](https://github.com/openshift/prometheus-alertmanager/commit/013395968b37eb66909d7bbee7e34249b120835e) `sha256:40a532529bb151f11cc939e80a4d5a98778a6513be32d6924d63bdc1aeb082bb`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [0eed3102](https://github.com/openshift/node_exporter/commit/0eed31026699ad13ca7fcebbc547a830371a920c) `sha256:63e946fa682bb967f649a11b0f67054c17e0d9db21ff4ff8ed79b7482661ad5b`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [1611373e](https://github.com/openshift/service-ca-operator/commit/1611373e4bf053ca78dc89b5fd4a4daf078312cf) `sha256:7b187148d957a9ca44e610314d301e773077186694a90d6420bd83dfd6c886a4`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [e310f4d3](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e310f4d3828a71fb96344ccbe8b29d22754ebf77) `sha256:4cc4c6d6d8b5d96644e1ea8ce4bdc63ba7ed21af9d2cd17b04caf2c8db35890e`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [e310f4d3](https://github.com/openshift/vmware-vsphere-csi-driver/commit/e310f4d3828a71fb96344ccbe8b29d22754ebf77) `sha256:4609da3f4a0db489f621443e295b009cab8eabe53bbb6aeb0ffe1f69d00bbde6`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [a11df08a](https://github.com/openshift/vsphere-problem-detector/commit/a11df08a341b9084fd92c95e5b53368d1ea9aaa5) `sha256:8c730385700e7f98195fcd289609b0e67bf1021ff9f0d9d3f96c72944916f62d`


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/5c30ca11ee5a7a312f5eed9f372d43c1af3c2154)

* [OCPBUGS-4123](https://issues.redhat.com/browse/OCPBUGS-4123): Add explicit pciutils package [#19](https://github.com/openshift/alibaba-cloud-csi-driver/pull/19)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/3ddbb2b9d4994206183b5ffd6a0872ad9a5ce193...5c30ca11ee5a7a312f5eed9f372d43c1af3c2154)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/9617f1f0b1266797f9237b2c3dd184f5a05f8f5b)

* Updating ose-alibaba-machine-controllers images to be consistent with ART [#23](https://github.com/openshift/cluster-api-provider-alibaba/pull/23)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/0206121348c9a0d220dd6805cea79d1eae7fd3e0...9617f1f0b1266797f9237b2c3dd184f5a05f8f5b)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/2bad4b40757a33bf92ab8937ececf279cc46376c)

* [OCPBUGS-1804](https://issues.redhat.com/browse/OCPBUGS-1804): UPSTREAM: 1398: Add resolver to handle custom endpoints [#210](https://github.com/openshift/aws-ebs-csi-driver/pull/210)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/8ba0c7a879c4a03e628c4d123ff8fdab884cedbb...2bad4b40757a33bf92ab8937ececf279cc46376c)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/8c8d1c15bfbbe52abaa2e2dd34d360854f40e1b1)

* [Bug 2117557](https://bugzilla.redhat.com/show_bug.cgi?id=2117557): Fix panic when accessing nil machine annotations map [#50](https://github.com/openshift/machine-api-provider-aws/pull/50)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/518b028c7c27c3b4ce32e5ba552601af7c869707...8c8d1c15bfbbe52abaa2e2dd34d360854f40e1b1)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/ae571af8f8f60ccc14b3772032bd5c1072f2a746)

* bug OCPBUGS-2062: .dockerignore: enable OSBS2 builds [#42](https://github.com/openshift/cloud-provider-azure/pull/42)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/07f1335140207eb41fb92fa0e689a89bc9b5efd9...ae571af8f8f60ccc14b3772032bd5c1072f2a746)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/35aa99d74d4fd34f2c4d7b1a73d09d90b7df6413)

* [OCPBUGS-8020](https://issues.redhat.com/browse/OCPBUGS-8020): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#72](https://github.com/openshift/azure-disk-csi-driver-operator/pull/72)
* [Bug 2105304](https://bugzilla.redhat.com/show_bug.cgi?id=2105304): Increase pod startup timeout in e2e tests [#52](https://github.com/openshift/azure-disk-csi-driver-operator/pull/52)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/8f980ccc460b8973f5a3f7d91a57fbfe03a39809...35aa99d74d4fd34f2c4d7b1a73d09d90b7df6413)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/87b4a7182b596354458d22c02bf7c51566f695ed)

* [OCPBUGS-2607](https://issues.redhat.com/browse/OCPBUGS-2607): remove "replace" directive in go.mod [#20](https://github.com/openshift/azure-file-csi-driver/pull/20)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/f88155b4c4a3a6dc4d56bac44edb82198a967a4b...87b4a7182b596354458d22c02bf7c51566f695ed)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/04ed0af96d9a8667360a911b5c760767c8a97f0a)

* [OCPBUGS-3165](https://issues.redhat.com/browse/OCPBUGS-3165): Update azure instance types cache [#38](https://github.com/openshift/machine-api-provider-azure/pull/38)
* [OCPBUGS-930](https://issues.redhat.com/browse/OCPBUGS-930): Ignore unknown Instance types in accelerated networking check [#34](https://github.com/openshift/machine-api-provider-azure/pull/34)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/0b2bf9904788e4019b91212532e9af35b240cbdc...04ed0af96d9a8667360a911b5c760767c8a97f0a)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b2eee856236be9ea6aa9f7430b75a0b4965ebc0e)

* [OCPBUGS-537](https://issues.redhat.com/browse/OCPBUGS-537): vSphere - enable steal time accounting [#6261](https://github.com/openshift/installer/pull/6261)
* [OCPBUGS-5931](https://issues.redhat.com/browse/OCPBUGS-5931): destroy/gcp: Disk names are filtered using kubernetes name format [#6972](https://github.com/openshift/installer/pull/6972)
* [OCPBUGS-5663](https://issues.redhat.com/browse/OCPBUGS-5663): CVE-2021-4238: goutils: update for randomness fix [#6766](https://github.com/openshift/installer/pull/6766)
* [OCPBUGS-2731](https://issues.redhat.com/browse/OCPBUGS-2731): OpenStack UPI: Create server group for Computes [#6510](https://github.com/openshift/installer/pull/6510)
* [OCPBUGS-6697](https://issues.redhat.com/browse/OCPBUGS-6697): destroy/gcp: Use min length for destroying disks [#6808](https://github.com/openshift/installer/pull/6808)
* [OCPBUGS-2743](https://issues.redhat.com/browse/OCPBUGS-2743): skip sts credentials check in terraform [#6518](https://github.com/openshift/installer/pull/6518)
* [OCPBUGS-5112](https://issues.redhat.com/browse/OCPBUGS-5112): OpenStack: Force JSON content-type in Swift object listing [#6726](https://github.com/openshift/installer/pull/6726)
* [OCPBUGS-377](https://issues.redhat.com/browse/OCPBUGS-377): UPI image download govc rate limit failure [#6245](https://github.com/openshift/installer/pull/6245)
* [OCPBUGS-4160](https://issues.redhat.com/browse/OCPBUGS-4160): OpenStack: Force JSON content-type in Swift [#6628](https://github.com/openshift/installer/pull/6628)
* [OCPBUGS-3743](https://issues.redhat.com/browse/OCPBUGS-3743): build: change ppc64le linking mode [#6597](https://github.com/openshift/installer/pull/6597)
* [Bug 2099604](https://bugzilla.redhat.com/show_bug.cgi?id=2099604): Remove optional services from permissions check [#6507](https://github.com/openshift/installer/pull/6507)
* [OCPBUGS-2795](https://issues.redhat.com/browse/OCPBUGS-2795): Bump gophercloud [#6529](https://github.com/openshift/installer/pull/6529)
* [Bug 2101014](https://bugzilla.redhat.com/show_bug.cgi?id=2101014): Release 4.10 go getter update [#6361](https://github.com/openshift/installer/pull/6361)
* [OCPBUGS-1737](https://issues.redhat.com/browse/OCPBUGS-1737): OpenStack: Lift validation for 14 chars cluster names [#6420](https://github.com/openshift/installer/pull/6420)
* [OCPBUGS-1936](https://issues.redhat.com/browse/OCPBUGS-1936): bump RHCOS 4.10 bootimage metadata [#6454](https://github.com/openshift/installer/pull/6454)
* [Bug 2107154](https://bugzilla.redhat.com/show_bug.cgi?id=2107154): Make azure baseDomainResoureGroup optional for private c… [#6120](https://github.com/openshift/installer/pull/6120)
* [Bug 2112914](https://bugzilla.redhat.com/show_bug.cgi?id=2112914): Fix validation errors for instance type [#6189](https://github.com/openshift/installer/pull/6189)
* [Bug 2102363](https://bugzilla.redhat.com/show_bug.cgi?id=2102363): Dynamic retrieval of GCP Regions for a Project [#6059](https://github.com/openshift/installer/pull/6059)
* [OCPBUGS-784](https://issues.redhat.com/browse/OCPBUGS-784): Download yq in upi installer containers [#6285](https://github.com/openshift/installer/pull/6285)
* [Bug 2111258](https://bugzilla.redhat.com/show_bug.cgi?id=2111258): vsphere installconfig: use full dc path in network validation [#6173](https://github.com/openshift/installer/pull/6173)
* [Full changelog](https://github.com/openshift/installer/compare/6c328e2fb672560ed08ea04b2b1e5e1795025300...b2eee856236be9ea6aa9f7430b75a0b4965ebc0e)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/adff401d86d176d61cf2dc47c4142e30d7b04e4b)

* Update OWNERS [#179](https://github.com/openshift/cluster-api-provider-baremetal/pull/179)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/c299c5af0dd93ae5c3abe9aa1f0d9d5dae297149...adff401d86d176d61cf2dc47c4142e30d7b04e4b)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/01960d8dbf91d3fae8804534089eb8e13e0b72c3)

* [OCPBUGS-11686](https://issues.redhat.com/browse/OCPBUGS-11686): allow namespace to continue with terminating when deprovisioning at t… [#263](https://github.com/openshift/baremetal-operator/pull/263)
* [Bug 2061794](https://bugzilla.redhat.com/show_bug.cgi?id=2061794): [4.10] Only update the HFS status on changes [#247](https://github.com/openshift/baremetal-operator/pull/247)
* [Bug 2069638](https://bugzilla.redhat.com/show_bug.cgi?id=2069638): Use deep copy/equal for host root device hints [#221](https://github.com/openshift/baremetal-operator/pull/221)
* [Bug 2047930](https://bugzilla.redhat.com/show_bug.cgi?id=2047930): Move from Available to Preparing if HostFirmwareSettings changed [#210](https://github.com/openshift/baremetal-operator/pull/210)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/97ce15e7774094211539ea35358b46909a676712...01960d8dbf91d3fae8804534089eb8e13e0b72c3)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/3a7500d0af017cc26d1c2230067995345f4d1e75)

* [OCPBUGS-10750](https://issues.redhat.com/browse/OCPBUGS-10750): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1379](https://github.com/openshift/oc/pull/1379)
* [OCPBUGS-10777](https://issues.redhat.com/browse/OCPBUGS-10777): bump repo sclorg/s2i-ruby-container location for newapp test [#1383](https://github.com/openshift/oc/pull/1383)
* [Bug 2086969](https://bugzilla.redhat.com/show_bug.cgi?id=2086969): Delete recently created images when --prune-over-size-limit is used [#1146](https://github.com/openshift/oc/pull/1146)
* [OCPBUGS-3968](https://issues.redhat.com/browse/OCPBUGS-3968): set proper pod security ns labels [#1293](https://github.com/openshift/oc/pull/1293)
* [Bug 2015119](https://bugzilla.redhat.com/show_bug.cgi?id=2015119): bump(k8s.io/kubectl) to pick up k/k#110764 [#1270](https://github.com/openshift/oc/pull/1270)
* [OCPBUGS-1788](https://issues.redhat.com/browse/OCPBUGS-1788): oc adm logs: generate proper path for static pods [#1246](https://github.com/openshift/oc/pull/1246)
* [OCPBUGS-1638](https://issues.redhat.com/browse/OCPBUGS-1638): Increase default value of cache TTL to 6 hours [#1241](https://github.com/openshift/oc/pull/1241)
* [Bug 2116526](https://bugzilla.redhat.com/show_bug.cgi?id=2116526): oc adm inspect: check a resource exists before its inspection [#1227](https://github.com/openshift/oc/pull/1227)
* [Full changelog](https://github.com/openshift/oc/compare/e29d58e5a549866f51d928fd49ae8b9ad457a71c...3a7500d0af017cc26d1c2230067995345f4d1e75)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a80bd1bf4b32768b42f80157bda6930425ca3347)

* [OCPBUGS-11717](https://issues.redhat.com/browse/OCPBUGS-11717): ccoctl: Enable public anon read access to default OIDC S3 bucket [#531](https://github.com/openshift/cloud-credential-operator/pull/531)
* [OCPBUGS-2802](https://issues.redhat.com/browse/OCPBUGS-2802): Backport --credentials-requests-dir for ccoctl gcp delete. [#507](https://github.com/openshift/cloud-credential-operator/pull/507)
* [OCPBUGS-2884](https://issues.redhat.com/browse/OCPBUGS-2884): Make ccoctl use regional STS endpoint by default [#504](https://github.com/openshift/cloud-credential-operator/pull/504)
* [OCPBUGS-2279](https://issues.redhat.com/browse/OCPBUGS-2279): Add ccoctl support to create OIDC endpoint with private S3 bucket [#501](https://github.com/openshift/cloud-credential-operator/pull/501)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/ef868a8cf2d6719ce7ff65be24fc29d2e8a0023f...a80bd1bf4b32768b42f80157bda6930425ca3347)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/f660e7e25a799019c32a37da149c75c69b5cddef)

* Bug OCPBUGS-5419: Add ApplicationSecurityGroups to InterfaceIPConfiguration [#94](https://github.com/openshift/cloud-network-config-controller/pull/94)
* [OCPBUGS-2162](https://issues.redhat.com/browse/OCPBUGS-2162): Add resolver to handle custom endpoints [#67](https://github.com/openshift/cloud-network-config-controller/pull/67)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8723adb2d36b7d96363d57b8a9208880eccea53e...f660e7e25a799019c32a37da149c75c69b5cddef)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/266ba2db3dbf1fb7ddd07aca7c6223d800ecf3d2)

* [OCPBUGS-2546](https://issues.redhat.com/browse/OCPBUGS-2546): UPSTREAM: <carry>: switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 [#245](https://github.com/openshift/kubernetes-autoscaler/pull/245)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/012b9608fa1a86561be18ac2a696ce6c339209b8...266ba2db3dbf1fb7ddd07aca7c6223d800ecf3d2)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/0e3d8397951f4b45000a92ad923b30cff5f9e767)

* [OCPBUGS-3997](https://issues.redhat.com/browse/OCPBUGS-3997): add a workaround for a NetworkManager issue [#308](https://github.com/openshift/cluster-baremetal-operator/pull/308)
* [OCPBUGS-1239](https://issues.redhat.com/browse/OCPBUGS-1239): do not rely on string "master" to be in BMH names [#287](https://github.com/openshift/cluster-baremetal-operator/pull/287)
* [OCPBUGS-1517](https://issues.redhat.com/browse/OCPBUGS-1517): [release-4.10] Fix a few papercuts [#291](https://github.com/openshift/cluster-baremetal-operator/pull/291)
* [Bug 2101002](https://bugzilla.redhat.com/show_bug.cgi?id=2101002): Uplift kustomize and BMO to remove go-getter dependency [#281](https://github.com/openshift/cluster-baremetal-operator/pull/281)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6584b981d65e27a71cd9c5f4a381fd647d4136c...0e3d8397951f4b45000a92ad923b30cff5f9e767)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/237ae9966d99fec1b493e22a552b6da59bf6225d)

* [OCPBUGS-6039](https://issues.redhat.com/browse/OCPBUGS-6039): Try to limit groups for the REST mapper discovery [#229](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/229)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/e2e0d4f901ef8a89dcda6f5555b44ff9398cf22d...237ae9966d99fec1b493e22a552b6da59bf6225d)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ab6f33b3d2b388c3bc804f5e7aa0dedb8207396f)

* [OCPBUGS-2602](https://issues.redhat.com/browse/OCPBUGS-2602): Allow autoscaler to evict DNS pods [#350](https://github.com/openshift/cluster-dns-operator/pull/350)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/bc48e0aa0135bfdcdb6dbf7fbf18628c5849892b...ab6f33b3d2b388c3bc804f5e7aa0dedb8207396f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/e6fbce54d19b30d069ffa558d09529ca89aaa1fa)

* [OCPBUGS-10233](https://issues.redhat.com/browse/OCPBUGS-10233): increase live/ready timeout and failure thresholds [#1026](https://github.com/openshift/cluster-etcd-operator/pull/1026)
* [OCPBUGS-7741](https://issues.redhat.com/browse/OCPBUGS-7741): fail early on missing node status envs [#1008](https://github.com/openshift/cluster-etcd-operator/pull/1008)
* [OCPBUGS-7827](https://issues.redhat.com/browse/OCPBUGS-7827): set default timeouts in etcdcli [#1010](https://github.com/openshift/cluster-etcd-operator/pull/1010)
* [OCPBUGS-5425](https://issues.redhat.com/browse/OCPBUGS-5425): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#979](https://github.com/openshift/cluster-etcd-operator/pull/979)
* [OCPBUGS-2940](https://issues.redhat.com/browse/OCPBUGS-2940): revisit defrag controller degradation [#961](https://github.com/openshift/cluster-etcd-operator/pull/961)
* [OCPBUGS-2920](https://issues.redhat.com/browse/OCPBUGS-2920): update prometheus alerts [#956](https://github.com/openshift/cluster-etcd-operator/pull/956)
* [OCPBUGS-2800](https://issues.redhat.com/browse/OCPBUGS-2800): Add niceness to important etcd processes [#953](https://github.com/openshift/cluster-etcd-operator/pull/953)
* [OCPBUGS-1758](https://issues.redhat.com/browse/OCPBUGS-1758): fix cert rotation on IP changes [#936](https://github.com/openshift/cluster-etcd-operator/pull/936)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/caeebcbdfc71f9b0d0a01048ea3381088b28a3ce...e6fbce54d19b30d069ffa558d09529ca89aaa1fa)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/80540e65a4b8fbed7996fc6a0773141e23d97867)

* [OCPBUGS-6972](https://issues.redhat.com/browse/OCPBUGS-6972): OpenStack: Add support for Proxy [#837](https://github.com/openshift/cluster-image-registry-operator/pull/837)
* [OCPBUGS-5974](https://issues.redhat.com/browse/OCPBUGS-5974): swift: Retry connecting to OpenStack [#832](https://github.com/openshift/cluster-image-registry-operator/pull/832)
* add myself to OWNERS [#838](https://github.com/openshift/cluster-image-registry-operator/pull/838)
* [Bug 2110957](https://bugzilla.redhat.com/show_bug.cgi?id=2110957): Add progressing condition for node-ca daemon set [#791](https://github.com/openshift/cluster-image-registry-operator/pull/791)
* [OCPBUGS-2107](https://issues.redhat.com/browse/OCPBUGS-2107): Enable enableHttpsTrafficOnly for Azure storage account [#804](https://github.com/openshift/cluster-image-registry-operator/pull/804)
* [Bug 2110957](https://bugzilla.redhat.com/show_bug.cgi?id=2110957): Use actualDaemonSet for SetDaemonSetGeneration [#799](https://github.com/openshift/cluster-image-registry-operator/pull/799)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/c0754e7013459e852c1673ace8c69e0f09f372cd...80540e65a4b8fbed7996fc6a0773141e23d97867)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/805d0587ee481a7d7260d0b4ced0e6046cbfb7b6)

* [OCPBUGS-4494](https://issues.redhat.com/browse/OCPBUGS-4494): Update CRLs when they expire [#861](https://github.com/openshift/cluster-ingress-operator/pull/861)
* BUG 2094051: Fix removing custom created service in openshift-ingress with same naming convention [#820](https://github.com/openshift/cluster-ingress-operator/pull/820)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/5001c084462a461b64c9c1b494b57275fcf15da3...805d0587ee481a7d7260d0b4ced0e6046cbfb7b6)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9d85e4af2055f6eaba062856e022138b4618a258)

* [OCPBUGS-8235](https://issues.redhat.com/browse/OCPBUGS-8235): Guard pod set readiness probe endpoint explicitly [#1451](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1451)
* [OCPBUGS-5345](https://issues.redhat.com/browse/OCPBUGS-5345): routes/status resources can leak sensitive data [#1421](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1421)
* [OCPBUGS-2202](https://issues.redhat.com/browse/OCPBUGS-2202): [release-4.10] Wire support for trusted service account issuers [#1387](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1387)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/696981dd9eb28b413d4302dd19e018329b0cb177...9d85e4af2055f6eaba062856e022138b4618a258)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/252604c216eee7c3f38a621b8a1f1f4b28a1665b)

* [OCPBUGS-8235](https://issues.redhat.com/browse/OCPBUGS-8235): Guard pod set readiness probe endpoint explicitly 4.10 [#704](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/704)
* [OCPBUGS-466](https://issues.redhat.com/browse/OCPBUGS-466): PodDisruptionBudgetAtLimit should not alert when no app/pods exist [#648](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/648)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/3d64f7c3f27d0594eff7963c4c0254a28759998f...252604c216eee7c3f38a621b8a1f1f4b28a1665b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0ed42ed800c1306e2367de60482fb72e3dd22e4a)

* [OCPBUGS-8235](https://issues.redhat.com/browse/OCPBUGS-8235): Guard controller: set the readiness probe endpoint explicitly [#465](https://github.com/openshift/cluster-kube-scheduler-operator/pull/465)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/d8694a5bde4de696c8dd710816c1da76fa49cc36...0ed42ed800c1306e2367de60482fb72e3dd22e4a)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/c413a79d9da0999c1ae98758b213968c7bdf5418)

* [OCPBUGS-11579](https://issues.redhat.com/browse/OCPBUGS-11579): jsonnet: Add prometheus container in UWM prometheus asset file [#1942](https://github.com/openshift/cluster-monitoring-operator/pull/1942)
* [OCPBUGS-10491](https://issues.redhat.com/browse/OCPBUGS-10491): Increase startupProbe for prometheus [#1920](https://github.com/openshift/cluster-monitoring-operator/pull/1920)
* [OCPBUGS-5864](https://issues.redhat.com/browse/OCPBUGS-5864): grafana: add the Content-Security-Policy header to requests [#1866](https://github.com/openshift/cluster-monitoring-operator/pull/1866)
* [OCPBUGS-2623](https://issues.redhat.com/browse/OCPBUGS-2623): Fix dashboards having container_fs* metrices in queries [#1798](https://github.com/openshift/cluster-monitoring-operator/pull/1798)
* [OCPBUGS-2037](https://issues.redhat.com/browse/OCPBUGS-2037): Bump Thanos to 0.23.2 [#1811](https://github.com/openshift/cluster-monitoring-operator/pull/1811)
* [OCPBUGS-450](https://issues.redhat.com/browse/OCPBUGS-450): jsonnet: bump dependencies [#1802](https://github.com/openshift/cluster-monitoring-operator/pull/1802)
* [OCPBUGS-1446](https://issues.redhat.com/browse/OCPBUGS-1446): [release-4.10] Use service ca beta annotation [#1778](https://github.com/openshift/cluster-monitoring-operator/pull/1778)
* [OCPBUGS-1676](https://issues.redhat.com/browse/OCPBUGS-1676): Dedicated kubelet ServiceMonitor for prometheus-adapter [#1777](https://github.com/openshift/cluster-monitoring-operator/pull/1777)
* [OCPBUGS-924](https://issues.redhat.com/browse/OCPBUGS-924): increase alertmanager's startupProbe failure threshold [#1760](https://github.com/openshift/cluster-monitoring-operator/pull/1760)
* [OCPBUGS-579](https://issues.redhat.com/browse/OCPBUGS-579): Give precedence to CMO config map proxy config [#1751](https://github.com/openshift/cluster-monitoring-operator/pull/1751)
* [Bug 2118303](https://bugzilla.redhat.com/show_bug.cgi?id=2118303): Adds UWM extrenalLabels from Prometheus to ThanosRuler labels [#1742](https://github.com/openshift/cluster-monitoring-operator/pull/1742)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1ec935302a626f034cb9c20572044b7aa4ce3b16...c413a79d9da0999c1ae98758b213968c7bdf5418)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c7855f10edeadf5771e5a6f145150ce3826ef95d)

* [OCPBUGS-343](https://issues.redhat.com/browse/OCPBUGS-343): Configure ignored namespaces into multus-admission-controller [#1809](https://github.com/openshift/cluster-network-operator/pull/1809)
* [OCPBUGS-12795](https://issues.redhat.com/browse/OCPBUGS-12795): remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher [#1794](https://github.com/openshift/cluster-network-operator/pull/1794)
* [OCPBUGS-11828](https://issues.redhat.com/browse/OCPBUGS-11828): Kuryr: Update CRD from upstream [#1782](https://github.com/openshift/cluster-network-operator/pull/1782)
* [OCPBUGS-64](https://issues.redhat.com/browse/OCPBUGS-64): CNI binary copy should account for the possibility of symlinks [backport 4.10] [#1617](https://github.com/openshift/cluster-network-operator/pull/1617)
* [OCPBUGS-5955](https://issues.redhat.com/browse/OCPBUGS-5955): Backport Added missing API field podref to OverlappingRangeIPReservation CRD [#1687](https://github.com/openshift/cluster-network-operator/pull/1687)
* [OCPBUGS-6736](https://issues.redhat.com/browse/OCPBUGS-6736): Remove nbctl logfile [#1587](https://github.com/openshift/cluster-network-operator/pull/1587)
* [OCPBUGS-5575](https://issues.redhat.com/browse/OCPBUGS-5575): CVE-2021-4238 goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be [#1682](https://github.com/openshift/cluster-network-operator/pull/1682)
* [Bug 2092193](https://bugzilla.redhat.com/show_bug.cgi?id=2092193): Bump PodDisruptionBudget to v1 [#1470](https://github.com/openshift/cluster-network-operator/pull/1470)
* [OCPBUGS-4614](https://issues.redhat.com/browse/OCPBUGS-4614): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1651](https://github.com/openshift/cluster-network-operator/pull/1651)
* Jira OCPBUGS-3853: IPsec: Fix broken counter++ expression [#1646](https://github.com/openshift/cluster-network-operator/pull/1646)
* [Bug 2111588](https://bugzilla.redhat.com/show_bug.cgi?id=2111588): Enable OVS metrics for ovnk [#1599](https://github.com/openshift/cluster-network-operator/pull/1599)
* [OCPBUGS-1538](https://issues.redhat.com/browse/OCPBUGS-1538): Make northd probe interval default to 10 seconds [#1563](https://github.com/openshift/cluster-network-operator/pull/1563)
* Bug OCPBUGS-942: Kuryr: Bump timeoutSeconds for livenessProbe [#1550](https://github.com/openshift/cluster-network-operator/pull/1550)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/319d0940a482989c1ef7051d206cd35f839dd819...c7855f10edeadf5771e5a6f145150ce3826ef95d)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b1c5690f87b4f3bba9b932474b55282c8dbf264e)

* Switch to OS-shipped stalld (#490) [#490](https://github.com/openshift/cluster-node-tuning-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/bb9b6f03a78ddcc5d0aa61a15cbf2099319c8bd1...b1c5690f87b4f3bba9b932474b55282c8dbf264e)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/91038370b1b6c56f55b47c31fc596deb304ca69a)

* [OCPBUGS-5345](https://issues.redhat.com/browse/OCPBUGS-5345): routes/status resources can leak sensitive data, exclude it from audit [#514](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/514)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/853d84ff60fcf6a40d360d1a15e6e5b85423e87f...91038370b1b6c56f55b47c31fc596deb304ca69a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/85e14c7cf4ccf86a443e7d70f42465f83f0ba7f8)

* [OCPBUGS-5788](https://issues.redhat.com/browse/OCPBUGS-5788): clusterquotareconciliation: do not sync quota monitor cache with no monitors registered [#97](https://github.com/openshift/cluster-policy-controller/pull/97)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/8e5b36511861e63664cf4abd4f4f63642ae3c644...85e14c7cf4ccf86a443e7d70f42465f83f0ba7f8)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/b27c4ce6602596083cb688b605f594c688fb4701)

* [OCPBUGS-2132](https://issues.redhat.com/browse/OCPBUGS-2132): openshift template cakephp-mysql-persistent apiVersion for 4.10 [#466](https://github.com/openshift/cluster-samples-operator/pull/466)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/d41950dc8b41b3bf87b6ca3ae12af525b6908d3c...b27c4ce6602596083cb688b605f594c688fb4701)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/0ad6026dffef5fd7c4a12e11ea468cdd2b35ee73)

* [OCPBUGS-691](https://issues.redhat.com/browse/OCPBUGS-691): [release-4.10] correct sc error messages for ibm and alibaba platforms [#314](https://github.com/openshift/cluster-storage-operator/pull/314)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/cd578d4682ce7eea8c401ee2b552ae130cef325d...0ad6026dffef5fd7c4a12e11ea468cdd2b35ee73)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/33e65325a5780906244c2b36031e6e14d812d8b2)

* [OCPBUGS-10814](https://issues.redhat.com/browse/OCPBUGS-10814): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#917](https://github.com/openshift/cluster-version-operator/pull/917)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/16f373ce89f53e3724c0d9b91e21e75e0fa0a1be...33e65325a5780906244c2b36031e6e14d812d8b2)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/1e5a18ebda95b5703ea6e9fe511f459cb9615162)

* [OCPBUGS-6538](https://issues.redhat.com/browse/OCPBUGS-6538): go.mod: update github.com/prometheus/client_golang to v1.11.0 [#49](https://github.com/openshift/configmap-reload/pull/49)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/22a40ce77a1c3d4842b80de89f4df449672e5f5e...1e5a18ebda95b5703ea6e9fe511f459cb9615162)


### [console](https://github.com/openshift/console/tree/7e6c75244d18ae0c158a3f8086f0a320ef1905d6)

* [OCPBUGS-8320](https://issues.redhat.com/browse/OCPBUGS-8320): Repositories list does not show the running pipelinerun as last pipelinerun [#12623](https://github.com/openshift/console/pull/12623)
* [OCPBUGS-12438](https://issues.redhat.com/browse/OCPBUGS-12438): Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) [#12533](https://github.com/openshift/console/pull/12533)
* [OCPBUGS-7961](https://issues.redhat.com/browse/OCPBUGS-7961): fix broken pipeline secret [#12607](https://github.com/openshift/console/pull/12607)
* [OCPBUGS-7478](https://issues.redhat.com/browse/OCPBUGS-7478): Add RBAC check on Create a Project link in all-namespaces pages [#12566](https://github.com/openshift/console/pull/12566)
* [OCPBUGS-12245](https://issues.redhat.com/browse/OCPBUGS-12245): disable operator-install-single-namespace.spec.ts to solve CI issues [#12752](https://github.com/openshift/console/pull/12752)
* [OCPBUGS-7657](https://issues.redhat.com/browse/OCPBUGS-7657): Editing Pipeline in the ocp console should show correct information [#12576](https://github.com/openshift/console/pull/12576)
* [OCPBUGS-7787](https://issues.redhat.com/browse/OCPBUGS-7787): [4.10.z] Fix kubevirt-console tests [#12580](https://github.com/openshift/console/pull/12580)
* [OCPBUGS-6754](https://issues.redhat.com/browse/OCPBUGS-6754): Fix for initial showing of topology contents [#12486](https://github.com/openshift/console/pull/12486)
* [OCPBUGS-5296](https://issues.redhat.com/browse/OCPBUGS-5296): Pan nodes into view if all nodes are not visible on load [#12485](https://github.com/openshift/console/pull/12485)
* [OCPBUGS-6690](https://issues.redhat.com/browse/OCPBUGS-6690): Fix NPE when displaying CSV with incomplete information [#12481](https://github.com/openshift/console/pull/12481)
* [OCPBUGS-5961](https://issues.redhat.com/browse/OCPBUGS-5961): add support for version v1beta1 for knativeServing and knativeEventing [#12441](https://github.com/openshift/console/pull/12441)
* [OCPBUGS-3485](https://issues.redhat.com/browse/OCPBUGS-3485): check that user can patch console operator config in s… [#12258](https://github.com/openshift/console/pull/12258)
* [Bug 2105911](https://bugzilla.redhat.com/show_bug.cgi?id=2105911): Fix create-namespace e2e test with updated 3scale operator [#11811](https://github.com/openshift/console/pull/11811)
* [OCPBUGS-3619](https://issues.redhat.com/browse/OCPBUGS-3619): Find latest pipeline run without firehose selector [#12265](https://github.com/openshift/console/pull/12265)
* [OCPBUGS-3336](https://issues.redhat.com/browse/OCPBUGS-3336): Add checks for pods in hpaPodRingLabel [#12249](https://github.com/openshift/console/pull/12249)
* [OCPBUGS-2717](https://issues.redhat.com/browse/OCPBUGS-2717): Update dependencies to the registry library and devfile parser [#12191](https://github.com/openshift/console/pull/12191)
* [OCPBUGS-2781](https://issues.redhat.com/browse/OCPBUGS-2781): Fix broken advanced options layout on the add page [#12204](https://github.com/openshift/console/pull/12204)
* [OCPBUGS-3161](https://issues.redhat.com/browse/OCPBUGS-3161): 'CatalogSource not found' in the virtualization [#12202](https://github.com/openshift/console/pull/12202)
* [Bug 2072792](https://bugzilla.redhat.com/show_bug.cgi?id=2072792): Fetch common templates in a different namespace [#12163](https://github.com/openshift/console/pull/12163)
* [Bug 2071517](https://bugzilla.redhat.com/show_bug.cgi?id=2071517): Fix swap usage queries for Top Consumers card in virtualization Overview page [#12172](https://github.com/openshift/console/pull/12172)
* [Bug 2090127](https://bugzilla.redhat.com/show_bug.cgi?id=2090127): Remove nodeSelectorTerms if not defined [#12161](https://github.com/openshift/console/pull/12161)
* [Bug 2052469](https://bugzilla.redhat.com/show_bug.cgi?id=2052469): Filter template list for boot source available [#12164](https://github.com/openshift/console/pull/12164)
* [OCPBUGS-2583](https://issues.redhat.com/browse/OCPBUGS-2583): attach owner reference to resources created on creating a user to allow garbage collection [#12189](https://github.com/openshift/console/pull/12189)
* [OCPBUGS-2894](https://issues.redhat.com/browse/OCPBUGS-2894): UI crash when storage class had missing annotation [#12220](https://github.com/openshift/console/pull/12220)
* [OCPBUGS-1696](https://issues.redhat.com/browse/OCPBUGS-1696): Handle missing BMH for Node gracefully [#12129](https://github.com/openshift/console/pull/12129)
* [OCPBUGS-1465](https://issues.redhat.com/browse/OCPBUGS-1465): mock call to /api/devfile in e2e [#12062](https://github.com/openshift/console/pull/12062)
* [OCPBUGS-2622](https://issues.redhat.com/browse/OCPBUGS-2622): Use local test data to mock a devfile registry [#12194](https://github.com/openshift/console/pull/12194)
* [OCPBUGS-2523](https://issues.redhat.com/browse/OCPBUGS-2523): updates test id for 3scale [#12184](https://github.com/openshift/console/pull/12184)
* [Bug 2072790](https://bugzilla.redhat.com/show_bug.cgi?id=2072790): Regression "Create VM" [#12160](https://github.com/openshift/console/pull/12160)
* [OCPBUGS-938](https://issues.redhat.com/browse/OCPBUGS-938): do not show NodesUpdateGroup if there are 0 nodes [#12061](https://github.com/openshift/console/pull/12061)
* [Bug 2090127](https://bugzilla.redhat.com/show_bug.cgi?id=2090127): CNV 20527: Enable boot source select for vm template [#12082](https://github.com/openshift/console/pull/12082)
* [Bug 2094074](https://bugzilla.redhat.com/show_bug.cgi?id=2094074): Remove error on user template with DS [#12092](https://github.com/openshift/console/pull/12092)
* [Bug 2054917](https://bugzilla.redhat.com/show_bug.cgi?id=2054917): Fix template example yaml [#12091](https://github.com/openshift/console/pull/12091)
* [Bug 2072790](https://bugzilla.redhat.com/show_bug.cgi?id=2072790): Select template using also queryParams [#12090](https://github.com/openshift/console/pull/12090)
* [OCPBUGS-1759](https://issues.redhat.com/browse/OCPBUGS-1759): Show already loaded catalog items after a timeout (3sec) [#12106](https://github.com/openshift/console/pull/12106)
* [OCPBUGS-403](https://issues.redhat.com/browse/OCPBUGS-403): fix broken update server link [#11974](https://github.com/openshift/console/pull/11974)
* [OCPBUGS-1815](https://issues.redhat.com/browse/OCPBUGS-1815): fetch shared resource imagestreams based on labels instance or name [#12110](https://github.com/openshift/console/pull/12110)
* [Bug 2107898](https://bugzilla.redhat.com/show_bug.cgi?id=2107898): Access mode and volume mode with sourceRef will now be taken from default storageclass [#11907](https://github.com/openshift/console/pull/11907)
* [OCPBUGS-1828](https://issues.redhat.com/browse/OCPBUGS-1828): Fix devfile registry assertion [#12112](https://github.com/openshift/console/pull/12112)
* [OCPBUGS-1634](https://issues.redhat.com/browse/OCPBUGS-1634): Update registry library dependency to pick up proxy support [#12040](https://github.com/openshift/console/pull/12040)
* [Bug 2080389](https://bugzilla.redhat.com/show_bug.cgi?id=2080389): Link to documentation from the overview page goes to a missing link [#11909](https://github.com/openshift/console/pull/11909)
* [OCPBUGS-382](https://issues.redhat.com/browse/OCPBUGS-382): [OSD] ClusterVersion YAML editor should be read only [#11922](https://github.com/openshift/console/pull/11922)
* [OCPBUGS-550](https://issues.redhat.com/browse/OCPBUGS-550): Input values in Instantiate Template are disappeared randomly in the developer console [#11983](https://github.com/openshift/console/pull/11983)
* [Bug 2077142](https://bugzilla.redhat.com/show_bug.cgi?id=2077142): Fix Web Terminal availability check to verify operator is installed [#11374](https://github.com/openshift/console/pull/11374)
* [Bug 2117642](https://bugzilla.redhat.com/show_bug.cgi?id=2117642): Backport CI test fix to relase 4.10 [#11966](https://github.com/openshift/console/pull/11966)
* [Full changelog](https://github.com/openshift/console/compare/f567313fa421fb8b361f88509d2f7c2de9d35161...7e6c75244d18ae0c158a3f8086f0a320ef1905d6)


### [console-operator](https://github.com/openshift/console-operator/tree/6673dd7ef12d2785e0d60290f74e348aa7e39e50)

* [Bug 2106944](https://bugzilla.redhat.com/show_bug.cgi?id=2106944): InfrastructureTopology must be driving console affinity rule creation [#664](https://github.com/openshift/console-operator/pull/664)
* [Bug 2078912](https://bugzilla.redhat.com/show_bug.cgi?id=2078912): Modify the operator display name to match it with the name displayed in operatorhub [#651](https://github.com/openshift/console-operator/pull/651)
* [Full changelog](https://github.com/openshift/console-operator/compare/7e488d3a109267c289572de13a751968699fdc93...6673dd7ef12d2785e0d60290f74e348aa7e39e50)


### [coredns](https://github.com/openshift/coredns/tree/6c0325145a4d108f110f2bcb23aa69ba352e70d1)

* [OCPBUGS-2902](https://issues.redhat.com/browse/OCPBUGS-2902): Remove bufsize hardcoding to 2048 on cache upstream refreshes. [#80](https://github.com/openshift/coredns/pull/80)
* [Full changelog](https://github.com/openshift/coredns/compare/3ec1ee7dd91d5a1193745984c2c247ba3f2518d3...6c0325145a4d108f110f2bcb23aa69ba352e70d1)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/cb2949cac4331ee7f902be5eee9caae0258e2bd9)

* [OCPBUGS-6903](https://issues.redhat.com/browse/OCPBUGS-6903): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.23 into release-4.10 [#177](https://github.com/openshift/cloud-provider-openstack/pull/177)
* [OCPBUGS-5012](https://issues.redhat.com/browse/OCPBUGS-5012): Sync with upstream release-1.23 [#158](https://github.com/openshift/cloud-provider-openstack/pull/158)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/df0b27de80cfaa3f01e8cf0210f3a8d0c9a248d9...cb2949cac4331ee7f902be5eee9caae0258e2bd9)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/3b06768c823d54df549f488355ed348dff82a171)

* [OCPBUGS-10722](https://issues.redhat.com/browse/OCPBUGS-10722): Bump go.mongodb.org/mongo-driver to v1.5.1 [#178](https://github.com/openshift/csi-driver-manila-operator/pull/178)
* [OCPBUGS-7796](https://issues.redhat.com/browse/OCPBUGS-7796): Address CVE-2022-41717 [#169](https://github.com/openshift/csi-driver-manila-operator/pull/169)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/a0942c0d94afe9ca7b2eaf9063d83e15edaa765b...3b06768c823d54df549f488355ed348dff82a171)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/e6b56647e363c623e4a1538f59d2cc60475c44ad)

* [OCPBUGS-10554](https://issues.redhat.com/browse/OCPBUGS-10554): Bump go.mongodb.org/mongo-driver to v1.5.1 [#114](https://github.com/openshift/csi-driver-nfs/pull/114)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/3448830c086f092863ce701cccc6b627bca5b827...e6b56647e363c623e4a1538f59d2cc60475c44ad)


### [docker-registry](https://github.com/openshift/image-registry/tree/1892f21a94df9ea88a3fdbfe4648d672c319038f)

* [OCPBUGS-920](https://issues.redhat.com/browse/OCPBUGS-920): Keep OCI image configs when hard prune [#344](https://github.com/openshift/image-registry/pull/344)
* [Full changelog](https://github.com/openshift/image-registry/compare/fa01fd228ea31c3a6b8c656e8ae653aa3c09de39...1892f21a94df9ea88a3fdbfe4648d672c319038f)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/fd4ea71c5456122d046ca9c188f3ab04fb7fd4d7)

* Adding kernel-rpm-macros to the Dockerfile. (#109) [#109](https://github.com/openshift/driver-toolkit/pull/109)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/0c77c8d662851e5a2ba8e85f4400c60f63d2fb6c...fd4ea71c5456122d046ca9c188f3ab04fb7fd4d7)


### [etcd](https://github.com/openshift/etcd/tree/c3be56f7c25b24881b06c3cc421abdde9ea8db06)

* Update owners [#187](https://github.com/openshift/etcd/pull/187)
* Updating ose-etcd images to be consistent with ART [#151](https://github.com/openshift/etcd/pull/151)
* [OCPBUGS-5950](https://issues.redhat.com/browse/OCPBUGS-5950): UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… [#179](https://github.com/openshift/etcd/pull/179)
* [OCPBUGS-3103](https://issues.redhat.com/browse/OCPBUGS-3103): Rebase openshift/etcd 4.10 onto v3.5.6 [#171](https://github.com/openshift/etcd/pull/171)
* [OCPBUGS-2142](https://issues.redhat.com/browse/OCPBUGS-2142): Rebase openshift/etcd 4.10 onto 3.5.5 [#156](https://github.com/openshift/etcd/pull/156)
* [Full changelog](https://github.com/openshift/etcd/compare/7afa17cd7209a6ff16724a5a44bd2e05007e3171...c3be56f7c25b24881b06c3cc421abdde9ea8db06)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/a8d5b9445f4096b6f2c0fc38789cc065e8f736b4)

* [OCPBUGS-5291](https://issues.redhat.com/browse/OCPBUGS-5291): refactor restartPolicyToBool function [#36](https://github.com/openshift/machine-api-provider-gcp/pull/36)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/3fe46c8bc8bdbbccc778fd71dd1939495888ed56...a8d5b9445f4096b6f2c0fc38789cc065e8f736b4)


### [grafana](https://github.com/openshift/grafana/tree/ca476d4cc6e8692bf3fb377a6da0a37285659e6c)

* [OCPBUGS-4260](https://issues.redhat.com/browse/OCPBUGS-4260): bump github.com/crewjam/saml dependency [#93](https://github.com/openshift/grafana/pull/93)
* [Full changelog](https://github.com/openshift/grafana/compare/48aec355b16ba21f9a7d3f2896a538351526d104...ca476d4cc6e8692bf3fb377a6da0a37285659e6c)


### [haproxy-router](https://github.com/openshift/router/tree/c1e7f4053c219d193ca908711255fe37fd931bc7)

* [Bug 2098230](https://bugzilla.redhat.com/show_bug.cgi?id=2098230): Fix gap in router's handling of graceful shutdowns. [#406](https://github.com/openshift/router/pull/406)
* [Bug 2096362](https://bugzilla.redhat.com/show_bug.cgi?id=2096362): HAProxy: enable PROXY protocol for all listeners [#405](https://github.com/openshift/router/pull/405)
* [Full changelog](https://github.com/openshift/router/compare/11109e4028b69749d6f842a4da682916e0d91d2f...c1e7f4053c219d193ca908711255fe37fd931bc7)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/16bcd69799fb6940554b1110a7d229f4a24d6632)

* [OCPBUGS-8314](https://issues.redhat.com/browse/OCPBUGS-8314): bump to k8s 1.23.17 [#1497](https://github.com/openshift/kubernetes/pull/1497)
* [OCPBUGS-10244](https://issues.redhat.com/browse/OCPBUGS-10244): Fix mounted volume expansion tests [#1510](https://github.com/openshift/kubernetes/pull/1510)
* [OCPBUGS-3434](https://issues.redhat.com/browse/OCPBUGS-3434): UPSTREAM: 113517: kubelet: fix pod log line corruption when using timestamps and long lines [#1415](https://github.com/openshift/kubernetes/pull/1415)
* UPSTREAM: <carry>: Wait for default service account in node authorizer test [#1398](https://github.com/openshift/kubernetes/pull/1398)
* [Bug 2101326](https://bugzilla.redhat.com/show_bug.cgi?id=2101326): bump to k8s 1.23.12 [#1382](https://github.com/openshift/kubernetes/pull/1382)
* [OCPBUGS-1266](https://issues.redhat.com/browse/OCPBUGS-1266): UPSTREAM: <carry>: Remove reserved CPUs from default set [#1362](https://github.com/openshift/kubernetes/pull/1362)
* [Full changelog](https://github.com/openshift/kubernetes/compare/012e94568139f2b8df4cb70c21837706e3678cbc...16bcd69799fb6940554b1110a7d229f4a24d6632)


### [hypershift](https://github.com/openshift/hypershift/tree/13fd957d2af1a182f84e112e06c5b47d94ada2f1)

* OCPBUGS-10823 ensure well known public domains do not get proxied on image imports [#2412](https://github.com/openshift/hypershift/pull/2412)
* [Full changelog](https://github.com/openshift/hypershift/compare/d78564a0e876ebbda44e5c7f15f67ed9073c492b...13fd957d2af1a182f84e112e06c5b47d94ada2f1)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/fc60caeba29541f39992217049e74e2fc9fd03cf)

* [OCPBUGS-1488](https://issues.redhat.com/browse/OCPBUGS-1488): Add udev [#20](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/20)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/d54e3706bb8b38447800aa91632a946eb6c990ec...fc60caeba29541f39992217049e74e2fc9fd03cf)


### [image-customization-controller](https://github.com/openshift/image-customization-controller/tree/a24f082c8ebd32ede3d53c088c8ef11007384401)

* [OCPBUGS-3999](https://issues.redhat.com/browse/OCPBUGS-3999): use host IPC for the agent container [#71](https://github.com/openshift/image-customization-controller/pull/71)
* [OCPBUGS-754](https://issues.redhat.com/browse/OCPBUGS-754): mount /run/udev into the agent container [#64](https://github.com/openshift/image-customization-controller/pull/64)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/44d63f1f9c76ede6d281a1a0f97a823fa0e365e0...a24f082c8ebd32ede3d53c088c8ef11007384401)


### [insights-operator](https://github.com/openshift/insights-operator/tree/871cc6053ee5187f8889815c1f88094279444bcf)

* [OCPBUGS-6832](https://issues.redhat.com/browse/OCPBUGS-6832): feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#740) [#726](https://github.com/openshift/insights-operator/pull/726)
* [OCPBUGS-1987](https://issues.redhat.com/browse/OCPBUGS-1987): do not periodically update Available clusteroperator co… (#718) (#720) [#718](https://github.com/openshift/insights-operator/pull/718)
* helm upgrades and uninstalls backport 4.10 (#663) [#663](https://github.com/openshift/insights-operator/pull/663)
* OCPBUGS-251 Gather status of the cephclusters.ceph.rook.io resources (#659) [#659](https://github.com/openshift/insights-operator/pull/659)
* [Full changelog](https://github.com/openshift/insights-operator/compare/85bb6ef1e3de2ebea0840a5eba816f19c6d551d8...871cc6053ee5187f8889815c1f88094279444bcf)


### [ironic](https://github.com/openshift/ironic-image/tree/23cbe53357d41c7e08a12dc7de6cb92861e263b2)

* [OCPBUGS-7163](https://issues.redhat.com/browse/OCPBUGS-7163): Increase power_state_change_timeout setting [#348](https://github.com/openshift/ironic-image/pull/348)
* Bug OCPBUGS-6886: Fix setting boot related attributes [#347](https://github.com/openshift/ironic-image/pull/347)
* [OCPBUGS-5344](https://issues.redhat.com/browse/OCPBUGS-5344): Configure Ironic iLO driver to use web server [#343](https://github.com/openshift/ironic-image/pull/343)
* [OCPBUGS-4467](https://issues.redhat.com/browse/OCPBUGS-4467): Remove RDO distribution configuration [#330](https://github.com/openshift/ironic-image/pull/330)
* [OCPBUGS-5415](https://issues.redhat.com/browse/OCPBUGS-5415): Update packages versions with latest available [#345](https://github.com/openshift/ironic-image/pull/345)
* Bug OCPBUGS-3477: Improve resiliency of eTag handling [#316](https://github.com/openshift/ironic-image/pull/316)
* [OCPBUGS-2829](https://issues.redhat.com/browse/OCPBUGS-2829): Removed ServerName from VirtualHost Directives [#307](https://github.com/openshift/ironic-image/pull/307)
* [OCPBUGS-1740](https://issues.redhat.com/browse/OCPBUGS-1740): Backport improvements to iDRAC steps to OCP 4.10 [#303](https://github.com/openshift/ironic-image/pull/303)
* [OCPBUGS-1225](https://issues.redhat.com/browse/OCPBUGS-1225): sync BIOS settings fixes [#298](https://github.com/openshift/ironic-image/pull/298)
* [Full changelog](https://github.com/openshift/ironic-image/compare/62012c2bf9ea0958e7c49e7a08be266df0408dd3...23cbe53357d41c7e08a12dc7de6cb92861e263b2)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/28ee0ef73966f9989e5ad83ef55791390738a59a)

* [OCPBUGS-7533](https://issues.redhat.com/browse/OCPBUGS-7533): make coreos-installer output available in the logs [#68](https://github.com/openshift/ironic-agent-image/pull/68)
* [OCPBUGS-1232](https://issues.redhat.com/browse/OCPBUGS-1232): Include Fix for discovering bond interfaces [#63](https://github.com/openshift/ironic-agent-image/pull/63)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/f68efd033d9ab4faa77cfd83548b8bdc31e897fb...28ee0ef73966f9989e5ad83ef55791390738a59a)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/29886256edaf73b37cc713ed10c725c966e72d9e)

* [OCPBUGS-13654](https://issues.redhat.com/browse/OCPBUGS-13654): Bump Jenkins version and Plugin versions [#1672](https://github.com/openshift/jenkins/pull/1672)
* [OCPBUGS-11499](https://issues.redhat.com/browse/OCPBUGS-11499), [OCPBUGS-11500](https://issues.redhat.com/browse/OCPBUGS-11500), [OCPBUGS-11501](https://issues.redhat.com/browse/OCPBUGS-11501): Various issues [#1658](https://github.com/openshift/jenkins/pull/1658)
* [OCPBUGS-11238](https://issues.redhat.com/browse/OCPBUGS-11238): Fix labels for jenkins-slave-base-rhel8 [#1643](https://github.com/openshift/jenkins/pull/1643)
* [OCPBUGS-10012](https://issues.redhat.com/browse/OCPBUGS-10012), [OCPBUGS-10020](https://issues.redhat.com/browse/OCPBUGS-10020), [OCPBUGS-6079](https://issues.redhat.com/browse/OCPBUGS-6079): Bump Jenkins [#1639](https://github.com/openshift/jenkins/pull/1639)
* [OCPBUGS-11236](https://issues.redhat.com/browse/OCPBUGS-11236), [OCPBUGS-11237](https://issues.redhat.com/browse/OCPBUGS-11237), [OCPBUGS-11239](https://issues.redhat.com/browse/OCPBUGS-11239): Bump Jenkins version to 2.387.1 [#1642](https://github.com/openshift/jenkins/pull/1642)
* [OCPBUGS-11240](https://issues.redhat.com/browse/OCPBUGS-11240): configuration-as-code bumped to 1569.vb_72405b_80249 [#1644](https://github.com/openshift/jenkins/pull/1644)
* [OCPBUGS-6627](https://issues.redhat.com/browse/OCPBUGS-6627): Bump script security plugin [#1624](https://github.com/openshift/jenkins/pull/1624)
* [OCPBUGS-7238](https://issues.redhat.com/browse/OCPBUGS-7238): Enable Websocket support [#1587](https://github.com/openshift/jenkins/pull/1587)
* [OCPBUGS-7052](https://issues.redhat.com/browse/OCPBUGS-7052): Sync jenkins version and plugins with ma… [#1582](https://github.com/openshift/jenkins/pull/1582)
* [OCPBUGS-4095](https://issues.redhat.com/browse/OCPBUGS-4095): Required Plugin `workflow-multibranch` [#1569](https://github.com/openshift/jenkins/pull/1569)
* [OCPBUGS-6645](https://issues.redhat.com/browse/OCPBUGS-6645): Handle routes properly in s2i/run [#1562](https://github.com/openshift/jenkins/pull/1562)
* [OCPBUGS-4095](https://issues.redhat.com/browse/OCPBUGS-4095): Various CVEs September/2022 [#1547](https://github.com/openshift/jenkins/pull/1547)
* [OCPBUGS-900](https://issues.redhat.com/browse/OCPBUGS-900): Bump openshift login plugin to 1.0.29 [#1561](https://github.com/openshift/jenkins/pull/1561)
* [OCPBUGS-912](https://issues.redhat.com/browse/OCPBUGS-912): Add maven plugin dependency in base plugins [#1530](https://github.com/openshift/jenkins/pull/1530)
* [OCPBUGS-3697](https://issues.redhat.com/browse/OCPBUGS-3697): [release-4.10] Update OWNERS [#1521](https://github.com/openshift/jenkins/pull/1521)
* [release: 4.10] OCPBUGS-2137: Sync javax-mail-api with version required by jenkins 2.361.1 [#1496](https://github.com/openshift/jenkins/pull/1496)
* [OCPBUGS-724](https://issues.redhat.com/browse/OCPBUGS-724): Update blueocean-autofavorite to 1.2.5 [#1478](https://github.com/openshift/jenkins/pull/1478)
* [OCPBUGS-2943](https://issues.redhat.com/browse/OCPBUGS-2943): Force git-server to an earlier version [#1509](https://github.com/openshift/jenkins/pull/1509)
* [OCPBUGS-2185](https://issues.redhat.com/browse/OCPBUGS-2185): Bump Jenkins version to 2.361.1 [#1499](https://github.com/openshift/jenkins/pull/1499)
* [OCPBUGS-1440](https://issues.redhat.com/browse/OCPBUGS-1440): fix install plugins script [#1484](https://github.com/openshift/jenkins/pull/1484)
* [OCPBUGS-1037](https://issues.redhat.com/browse/OCPBUGS-1037): Install glibc language package to remove `setLocale` warning [#1480](https://github.com/openshift/jenkins/pull/1480)
* [OCPBUGS-473](https://issues.redhat.com/browse/OCPBUGS-473): CVE mitigations [#1479](https://github.com/openshift/jenkins/pull/1479)
* [OCPBUGS-713](https://issues.redhat.com/browse/OCPBUGS-713): Add user coreydaley to approvers list [#1477](https://github.com/openshift/jenkins/pull/1477)
* [OCPBUGS-400](https://issues.redhat.com/browse/OCPBUGS-400): Revert xmlstarlet usage [#1469](https://github.com/openshift/jenkins/pull/1469)
* [Full changelog](https://github.com/openshift/jenkins/compare/c5b7159fa16120da52bd2c1e5003e2b1a0e9be33...29886256edaf73b37cc713ed10c725c966e72d9e)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/f153a7cdc2e34bd34146ff7c4fb2adda4e892aa7)

* [OCPBUGS-10912](https://issues.redhat.com/browse/OCPBUGS-10912): Fix race in Egress IP Tracker start [#524](https://github.com/openshift/sdn/pull/524)
* [OCPBUGS-10524](https://issues.redhat.com/browse/OCPBUGS-10524): Initialize egress node monitoring struct with previous reachability status [#519](https://github.com/openshift/sdn/pull/519)
* [OCPBUGS-8091](https://issues.redhat.com/browse/OCPBUGS-8091): Handle race condition to setup default vnid flows [#512](https://github.com/openshift/sdn/pull/512)
* [OCPBUGS-5977](https://issues.redhat.com/browse/OCPBUGS-5977): Use pagination and set ResourceVersion to 0 when listing resources [#494](https://github.com/openshift/sdn/pull/494)
* [OCPBUGS-6911](https://issues.redhat.com/browse/OCPBUGS-6911): Add node egress IP assignment resync [#501](https://github.com/openshift/sdn/pull/501)
* [OCPBUGS-2106](https://issues.redhat.com/browse/OCPBUGS-2106): fix network policy egress [#465](https://github.com/openshift/sdn/pull/465)
* Bug OCPBUGS-4387: Rebase against cherry-pick of kubernetes#107413 [#475](https://github.com/openshift/sdn/pull/475)
* [OCPBUGS-3996](https://issues.redhat.com/browse/OCPBUGS-3996): egressip: Continue to process other nodes if a node is not ready [#472](https://github.com/openshift/sdn/pull/472)
* [OCPBUGS-647](https://issues.redhat.com/browse/OCPBUGS-647): Fix DNS endpoint hack to prefer local instead of forcing it [#467](https://github.com/openshift/sdn/pull/467)
* [OCPBUGS-647](https://issues.redhat.com/browse/OCPBUGS-647): Fix OCP hack to prefer local DNS endpoints [#457](https://github.com/openshift/sdn/pull/457)
* [OCPBUGS-255](https://issues.redhat.com/browse/OCPBUGS-255): setup network policy rules during pod creation to fix postStart hook [#455](https://github.com/openshift/sdn/pull/455)
* [Full changelog](https://github.com/openshift/sdn/compare/474a107e08401a2bb9ba749f4b1717b3eb3a508a...f153a7cdc2e34bd34146ff7c4fb2adda4e892aa7)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/df55d3ea3dc12dbebf4daedcf4f886b3b73a8e35)

* [OCPBUGS-4086](https://issues.redhat.com/browse/OCPBUGS-4086): cherry-pick, do not expose ingress path metric when service is nil [#86](https://github.com/openshift/kube-state-metrics/pull/86)
* [OCPBUGS-2196](https://issues.redhat.com/browse/OCPBUGS-2196): internal/store: fix metrics slice length [#79](https://github.com/openshift/kube-state-metrics/pull/79)
* [Bug 2078835](https://bugzilla.redhat.com/show_bug.cgi?id=2078835): internal/store: fix potential panic in pod store [#70](https://github.com/openshift/kube-state-metrics/pull/70)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/088ab061c537686f3e104ed0dd9f8794bb62f69c...df55d3ea3dc12dbebf4daedcf4f886b3b73a8e35)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/8e4df8be18f06e52b8a5bccafc5287c16ae6527e)

* Bug OCPBUGS-2216: Cleanup KuryrPort when Pod is missing [#702](https://github.com/openshift/kuryr-kubernetes/pull/702)
* [OCPBUGS-11828](https://issues.redhat.com/browse/OCPBUGS-11828): CNI: Watch for deleted pods [#712](https://github.com/openshift/kuryr-kubernetes/pull/712)
* Bug OCPBUGS-941: Fix unbound router_id variable while creating event [#688](https://github.com/openshift/kuryr-kubernetes/pull/688)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/e96efa4ed07aa97f3856286a2e884694e3b39dc0...8e4df8be18f06e52b8a5bccafc5287c16ae6527e)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a7dfb7f5745370a2fb4e38fa75aaed562796e981)

* [OCPBUGS-13600](https://issues.redhat.com/browse/OCPBUGS-13600): vSphere - enable steal time accounting [#1143](https://github.com/openshift/machine-api-operator/pull/1143)
* [OCPBUGS-11327](https://issues.redhat.com/browse/OCPBUGS-11327): Fix empty component version [#1134](https://github.com/openshift/machine-api-operator/pull/1134)
* [OCPBUGS-8359](https://issues.redhat.com/browse/OCPBUGS-8359): Append annotations from machine template spec to the node [#1125](https://github.com/openshift/machine-api-operator/pull/1125)
* Updating ose-machine-api-operator images to be consistent with ART [#1103](https://github.com/openshift/machine-api-operator/pull/1103)
* [OCPBUGS-957](https://issues.redhat.com/browse/OCPBUGS-957): Change "create" sequence with powering on the vm after clone [#1065](https://github.com/openshift/machine-api-operator/pull/1065)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/ca4a4c88ab29e766c3f571847b73a1230509b45d...a7dfb7f5745370a2fb4e38fa75aaed562796e981)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/afb47c916680dd5870e48e5c9cf819f59e12ff4d)

* [OCPBUGS-10703](https://issues.redhat.com/browse/OCPBUGS-10703): configure-ovs: fix mtu-migration cleanup [#3622](https://github.com/openshift/machine-config-operator/pull/3622)
* [OCPBUGS-5692](https://issues.redhat.com/browse/OCPBUGS-5692): 4.10 - remove goutils from dependency tree [#3500](https://github.com/openshift/machine-config-operator/pull/3500)
* [OCPBUGS-4830](https://issues.redhat.com/browse/OCPBUGS-4830): daemon: gate done state on uncordon completion [#3278](https://github.com/openshift/machine-config-operator/pull/3278)
* [OCPBUGS-6702](https://issues.redhat.com/browse/OCPBUGS-6702): controller: don't render new MC until base MCs update [#3517](https://github.com/openshift/machine-config-operator/pull/3517)
* [OCPBUGS-5831](https://issues.redhat.com/browse/OCPBUGS-5831): Do not allow empty system reserved values [#3487](https://github.com/openshift/machine-config-operator/pull/3487)
* [OCPBUGS-4810](https://issues.redhat.com/browse/OCPBUGS-4810): Sync controllerconfig anyway if daemon sync fails [#3454](https://github.com/openshift/machine-config-operator/pull/3454)
* [OCPBUGS-4136](https://issues.redhat.com/browse/OCPBUGS-4136): configure-ovs: auto-connect ovs-if-phys0 with br-ex [#3436](https://github.com/openshift/machine-config-operator/pull/3436)
* [OCPBUGS-4134](https://issues.redhat.com/browse/OCPBUGS-4134): Avoid NM managing patch port between br-int and br-ex [#3435](https://github.com/openshift/machine-config-operator/pull/3435)
* [OCPBUGS-3500](https://issues.redhat.com/browse/OCPBUGS-3500): Add ephemeral storage to kubelet system reserved args [#3408](https://github.com/openshift/machine-config-operator/pull/3408)
* [Bug 2069754](https://bugzilla.redhat.com/show_bug.cgi?id=2069754): [on-prem] Add NetworkManager reload to resolv-prepender [#3041](https://github.com/openshift/machine-config-operator/pull/3041)
* [OCPBUGS-2973](https://issues.redhat.com/browse/OCPBUGS-2973): drop doc overlaysize default [#3395](https://github.com/openshift/machine-config-operator/pull/3395)
* [OCPBUGS-2070](https://issues.redhat.com/browse/OCPBUGS-2070): Make sure there is a search domain in resolv.conf [#3366](https://github.com/openshift/machine-config-operator/pull/3366)
* [OCPBUGS-642](https://issues.redhat.com/browse/OCPBUGS-642): Fix .ssh directory not owned by core when created by Machine Config Daemon [#3315](https://github.com/openshift/machine-config-operator/pull/3315)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/9f2820819fcf1bf5a4b9162adb6fd685779f7cf4...afb47c916680dd5870e48e5c9cf819f59e12ff4d)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/09a132b7c844082fe6945b327fd0243d5a729f7c)

* [OCPBUGS-960](https://issues.redhat.com/browse/OCPBUGS-960): Update rhcos release browser url [#24](https://github.com/openshift/machine-os-images/pull/24)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/52118759e5c68733954f15d0cdc45c255752aa3c...09a132b7c844082fe6945b327fd0243d5a729f7c)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/8557de96b849421acf495693b5e1375d6b4d88e9)

* [OCPBUGS-343](https://issues.redhat.com/browse/OCPBUGS-343): Configure ignored namespaces into multus-admission-controller [#55](https://github.com/openshift/multus-admission-controller/pull/55)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d7a7fe5df9f6303487475767acbb5228e8135af3...8557de96b849421acf495693b5e1375d6b4d88e9)


### [multus-cni](https://github.com/openshift/multus-cni/tree/09993f095b446e28932a3ba9c201ea38cab04d85)

* [OCPBUGS-11590](https://issues.redhat.com/browse/OCPBUGS-11590): suppress uid mismatch error/warning in case of static pod [#150](https://github.com/openshift/multus-cni/pull/150)
* [OCPBUGS-8672](https://issues.redhat.com/browse/OCPBUGS-8672): SNO: Pods fail to delete, Multus: failed to open netns [backport 4.10] [#147](https://github.com/openshift/multus-cni/pull/147)
* [Bug 2071800](https://bugzilla.redhat.com/show_bug.cgi?id=2071800): Remove error handling for getPod to force to proceed cmdDel [backport 4.10] [#132](https://github.com/openshift/multus-cni/pull/132)
* [OCPBUGS-2448](https://issues.redhat.com/browse/OCPBUGS-2448): Fix missing device-info in networks-status annotation for chained plugins [#137](https://github.com/openshift/multus-cni/pull/137)
* [Full changelog](https://github.com/openshift/multus-cni/compare/5059ec256a4eb5eb59e10ec59d343d42214d0c08...09993f095b446e28932a3ba9c201ea38cab04d85)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/2381402a17778cc0853e30b554c9884a51a7ac06)

* [OCPBUGS-13242](https://issues.redhat.com/browse/OCPBUGS-13242): Added trailing 0 to ipv6 ranges that end in ":" [Backport 4.10] [#133](https://github.com/openshift/whereabouts-cni/pull/133)
* [OCPBUGS-3943](https://issues.redhat.com/browse/OCPBUGS-3943): Excluded ranges bug (#282) [#105](https://github.com/openshift/whereabouts-cni/pull/105)
* [OCPBUGS-1659](https://issues.redhat.com/browse/OCPBUGS-1659): ip-reconciler: Add all non default interfaces to Pod IP list [#98](https://github.com/openshift/whereabouts-cni/pull/98)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/a8d68d3e48aa7e2d6e612268f6a5b408b5720776...2381402a17778cc0853e30b554c9884a51a7ac06)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/cd4f5bb0d9792c582dc70bd186a3a1580abc5fc0)

* [OCPBUGS-2553](https://issues.redhat.com/browse/OCPBUGS-2553): bump kube to 1.23.12 to fix group sync [#85](https://github.com/openshift/oauth-apiserver/pull/85)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/effa26af0ee014ef342de1118ba0796cc72aaa01...cd4f5bb0d9792c582dc70bd186a3a1580abc5fc0)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7f883e65efdd40f63a543e5a687a820fa159180f)

* [OCPBUGS-4341](https://issues.redhat.com/browse/OCPBUGS-4341): fix printer panic [#337](https://github.com/openshift/openshift-apiserver/pull/337)
* [OCPBUGS-4604](https://issues.redhat.com/browse/OCPBUGS-4604): [release-4.10] bump to kube 1.23.12 [#323](https://github.com/openshift/openshift-apiserver/pull/323)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/5eabbaacd9c401192947c053672d71516dd3db34...7f883e65efdd40f63a543e5a687a820fa159180f)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/12a5dee1b6cbfe7b122c2336b78705e9b0705fc8)

* Bug OCPBUGS-4717: Add SecretHashAnnotation to node service [#104](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/104)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/cb58fe4892c636dc5a9d47e29793aab38fd1ca3e...12a5dee1b6cbfe7b122c2336b78705e9b0705fc8)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/963993b2017a498bf28fe72a89cf38878ab83a34)

* [OCPBUGS-6596](https://issues.redhat.com/browse/OCPBUGS-6596): Address CVE-2022-41717 [#251](https://github.com/openshift/cluster-api-provider-openstack/pull/251)
* [OCPBUGS-2628](https://issues.redhat.com/browse/OCPBUGS-2628): Ensure network defs without subnet follow noAllowedAddressPairs [#249](https://github.com/openshift/cluster-api-provider-openstack/pull/249)
* [OCPBUGS-1951](https://issues.redhat.com/browse/OCPBUGS-1951): Apply noAllowedAddressPairs on intended subnets only [#245](https://github.com/openshift/cluster-api-provider-openstack/pull/245)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/f6b51710d4f395ded401347589447f5f41dd5c4c...963993b2017a498bf28fe72a89cf38878ab83a34)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/8de38bbcc9576144c339b29dc8a3b6a13f72514b)

* [OCPBUGS-6498](https://issues.redhat.com/browse/OCPBUGS-6498): Order an operator CR's status.Component.Refs array (#2880) [#432](https://github.com/openshift/operator-framework-olm/pull/432)
* [OCPBUGS-1525](https://issues.redhat.com/browse/OCPBUGS-1525): Package Server Manager should enforce expected csv values [#387](https://github.com/openshift/operator-framework-olm/pull/387)
* [OCPBUGS-5294](https://issues.redhat.com/browse/OCPBUGS-5294): backport cert rotation fix [#428](https://github.com/openshift/operator-framework-olm/pull/428)
* [OCPBUGS-4799](https://issues.redhat.com/browse/OCPBUGS-4799): Fix label key truncation for subscription annotations (#2731) [#421](https://github.com/openshift/operator-framework-olm/pull/421)
* [OCPBUGS-4128](https://issues.redhat.com/browse/OCPBUGS-4128): concurrent write bug fix [#415](https://github.com/openshift/operator-framework-olm/pull/415)
* [OCPBUGS-2898](https://issues.redhat.com/browse/OCPBUGS-2898): [release-4.10] fix(openshift): use env var instead of clusterversion status (#2817) [#389](https://github.com/openshift/operator-framework-olm/pull/389)
* [OCPBUGS-1323](https://issues.redhat.com/browse/OCPBUGS-1323): Add autoscaling eviction annotation to catalog pods to enable proper draining of nodes [#392](https://github.com/openshift/operator-framework-olm/pull/392)
* [OCPBUGS-1087](https://issues.redhat.com/browse/OCPBUGS-1087): Stop corrupting resolver cache. [#385](https://github.com/openshift/operator-framework-olm/pull/385)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/5cfc4d643f5fead6b02aa40a2a661b0fa64a2958...8de38bbcc9576144c339b29dc8a3b6a13f72514b)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/9773aef8782056fa23e6af597195daf4a256f585)

* [OCPBUGS-761](https://issues.redhat.com/browse/OCPBUGS-761): CSI provisioned disks are preallocated [#117](https://github.com/openshift/ovirt-csi-driver/pull/117)
* [OCPBUGS-620](https://issues.redhat.com/browse/OCPBUGS-620): Upgrade go-ovirt-client to 1.0.0 [#116](https://github.com/openshift/ovirt-csi-driver/pull/116)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/633cbb6d16878d1e32e4a3f006315e670a4d9e22...9773aef8782056fa23e6af597195daf4a256f585)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/7215581b99ede426b5acd8369a3e3afcbd72f2c2)

* [OCPBUGS-11453](https://issues.redhat.com/browse/OCPBUGS-11453): [release-4.10] Batch potentially big transaction on egress firewall ACLs migration [#1641](https://github.com/openshift/ovn-kubernetes/pull/1641)
* [OCPBUGS-11557](https://issues.redhat.com/browse/OCPBUGS-11557): Fix leak in service controller cache [#1634](https://github.com/openshift/ovn-kubernetes/pull/1634)
* [OCPBUGS-11423](https://issues.redhat.com/browse/OCPBUGS-11423): [release-4.10] Handle Completed pods deletion [#1628](https://github.com/openshift/ovn-kubernetes/pull/1628)
* [OCPBUGS-4762](https://issues.redhat.com/browse/OCPBUGS-4762): [4.10] Dockerfile: bump to OVS 2.17.0-62 [#1440](https://github.com/openshift/ovn-kubernetes/pull/1440)
* Updating ose-ovn-kubernetes images to be consistent with ART [#1615](https://github.com/openshift/ovn-kubernetes/pull/1615)
* [OCPBUGS-8513](https://issues.redhat.com/browse/OCPBUGS-8513): Don't recreate clusterPGs and clusterRtrPGs unless needed [#1562](https://github.com/openshift/ovn-kubernetes/pull/1562)
* [OCPBUGS-7021](https://issues.redhat.com/browse/OCPBUGS-7021), [OCPBUGS-7990](https://issues.redhat.com/browse/OCPBUGS-7990): Delete stale egress ip snat entries by node [#1542](https://github.com/openshift/ovn-kubernetes/pull/1542)
* [OCPBUGS-6641](https://issues.redhat.com/browse/OCPBUGS-6641): Drop in-cluster traffic towards svcCIDR at wrong port [#1492](https://github.com/openshift/ovn-kubernetes/pull/1492)
* [OCPBUGS-3656](https://issues.redhat.com/browse/OCPBUGS-3656): Fixes dualstack clusterIPs for network policy svc handler [#1378](https://github.com/openshift/ovn-kubernetes/pull/1378)
* [OCPBUGS-7012](https://issues.redhat.com/browse/OCPBUGS-7012): [release-4.10] Fix Egress FW ACL rules in dualstack mode [#1508](https://github.com/openshift/ovn-kubernetes/pull/1508)
* [OCPBUGS-2013](https://issues.redhat.com/browse/OCPBUGS-2013): Validate node subnet annotations against cluster networks [#1332](https://github.com/openshift/ovn-kubernetes/pull/1332)
* [Bug 2092895](https://bugzilla.redhat.com/show_bug.cgi?id=2092895): update all egress ACLs' direction to "from-lport" [#1148](https://github.com/openshift/ovn-kubernetes/pull/1148)
* [OCPBUGS-6814](https://issues.redhat.com/browse/OCPBUGS-6814): [release-4.10] Ensure loadbalancer cleanup doesn't fail [#1499](https://github.com/openshift/ovn-kubernetes/pull/1499)
* [OCPBUGS-4882](https://issues.redhat.com/browse/OCPBUGS-4882): append instead of overwrite logicalSwitch other-config [#1450](https://github.com/openshift/ovn-kubernetes/pull/1450)
* [OCPBUGS-3615](https://issues.redhat.com/browse/OCPBUGS-3615): [4.10] CARRY: client: don't construct transaction log string when it's not needed [#1375](https://github.com/openshift/ovn-kubernetes/pull/1375)
* [OCPBUGS-5929](https://issues.redhat.com/browse/OCPBUGS-5929): [release-4.10] Fix egress firewall to allow inbound connections in both gw modes [#1482](https://github.com/openshift/ovn-kubernetes/pull/1482)
* [OCPBUGS-5990](https://issues.redhat.com/browse/OCPBUGS-5990): egressip: fix test data race accessing podAssignment cache [#1480](https://github.com/openshift/ovn-kubernetes/pull/1480)
* [OCPBUGS-5077](https://issues.redhat.com/browse/OCPBUGS-5077): [release-4.10] Fix load balancer health check locking and update [#1463](https://github.com/openshift/ovn-kubernetes/pull/1463)
* [OCPBUGS-5299](https://issues.redhat.com/browse/OCPBUGS-5299): Set the node as reachable only when it is being added as an egressip node [#1464](https://github.com/openshift/ovn-kubernetes/pull/1464)
* [OCPBUGS-5040](https://issues.redhat.com/browse/OCPBUGS-5040): [release-4.10] Fix hybrid overlay unit tests [#1462](https://github.com/openshift/ovn-kubernetes/pull/1462)
* [OCPBUGS-4864](https://issues.redhat.com/browse/OCPBUGS-4864): [release-4.10] Fix address set cleanup: only delete address sets owned by given object [#1453](https://github.com/openshift/ovn-kubernetes/pull/1453)
* [OCPBUGS-4888](https://issues.redhat.com/browse/OCPBUGS-4888): [release-4.10] Fixes scenario where deleted + completed pods may leak [#1458](https://github.com/openshift/ovn-kubernetes/pull/1458)
* [OCPBUGS-4839](https://issues.redhat.com/browse/OCPBUGS-4839), [OCPBUGS-4861](https://issues.redhat.com/browse/OCPBUGS-4861): [release-4.10] Avoid duplicate transactions and minimize handlers with empty namespace selectors [#1452](https://github.com/openshift/ovn-kubernetes/pull/1452)
* [Bug 2115872](https://bugzilla.redhat.com/show_bug.cgi?id=2115872): Fix unit-test failures in 4.10 [#1457](https://github.com/openshift/ovn-kubernetes/pull/1457)
* [OCPBUGS-1568](https://issues.redhat.com/browse/OCPBUGS-1568): pods: deleteLogicalPort should not fail when node is gone [#1423](https://github.com/openshift/ovn-kubernetes/pull/1423)
* [OCPBUGS-3778](https://issues.redhat.com/browse/OCPBUGS-3778): [release-4.10] Netpol races partial fixes [#1434](https://github.com/openshift/ovn-kubernetes/pull/1434)
* [OCPBUGS-4598](https://issues.redhat.com/browse/OCPBUGS-4598): Bumps libovsdb to pick up fixes for optional values [#1426](https://github.com/openshift/ovn-kubernetes/pull/1426)
* [OCPBUGS-3858](https://issues.redhat.com/browse/OCPBUGS-3858): Adjust ovs bundle timeout [#1385](https://github.com/openshift/ovn-kubernetes/pull/1385)
* [OCPBUGS-1568](https://issues.redhat.com/browse/OCPBUGS-1568): pods: deleteLogicalPort should not fail when ls is gone [#1293](https://github.com/openshift/ovn-kubernetes/pull/1293)
* [Bug 2099843](https://bugzilla.redhat.com/show_bug.cgi?id=2099843): Add final db check to egress IP test [#1357](https://github.com/openshift/ovn-kubernetes/pull/1357)
* [Bug 2105657](https://bugzilla.redhat.com/show_bug.cgi?id=2105657): Fix egressIP object deletion if the node is deleted first [#1228](https://github.com/openshift/ovn-kubernetes/pull/1228)
* [OCPBUGS-2660](https://issues.redhat.com/browse/OCPBUGS-2660): Add logging verbosity to configuring OVN logs [#1326](https://github.com/openshift/ovn-kubernetes/pull/1326)
* [OCPBUGS-1454](https://issues.redhat.com/browse/OCPBUGS-1454): Fix NP upgrade bug: unexpectedly found multiple equivalent ACLs (arp v/s arp||nd) [#1269](https://github.com/openshift/ovn-kubernetes/pull/1269)
* [OCPBUGS-2746](https://issues.redhat.com/browse/OCPBUGS-2746): Fixes SNAT-ing Logic for EgressIPs [#1336](https://github.com/openshift/ovn-kubernetes/pull/1336)
* [OCPBUGS-2208](https://issues.redhat.com/browse/OCPBUGS-2208): getDefaultGatewayInterfaceByFamily: custom filter for MultiHop [#1303](https://github.com/openshift/ovn-kubernetes/pull/1303)
* [OCPBUGS-2464](https://issues.redhat.com/browse/OCPBUGS-2464): Fix the golang image used for unit-tests [#1299](https://github.com/openshift/ovn-kubernetes/pull/1299)
* [OCPBUGS-1024](https://issues.redhat.com/browse/OCPBUGS-1024): Dockerfile: bump to 2.16.0-89.3.el8fdp [#1271](https://github.com/openshift/ovn-kubernetes/pull/1271)
* [Bug 2111552](https://bugzilla.redhat.com/show_bug.cgi?id=2111552): Remove conntrack entries after rules [#1219](https://github.com/openshift/ovn-kubernetes/pull/1219)
* [OCPBUGS-660](https://issues.redhat.com/browse/OCPBUGS-660): [release-4.10] pods: deleteLogicalPort should not fail when port is already gone [#1257](https://github.com/openshift/ovn-kubernetes/pull/1257)
* [Bug 2113861](https://bugzilla.redhat.com/show_bug.cgi?id=2113861): reconcile-node-lbs [#1227](https://github.com/openshift/ovn-kubernetes/pull/1227)
* [OCPBUGS-174](https://issues.redhat.com/browse/OCPBUGS-174): [release-4.10] Fix race when adding and removing pod with same name [#1250](https://github.com/openshift/ovn-kubernetes/pull/1250)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/56af0759a44d11174859fe4143be731f66ddea02...7215581b99ede426b5acd8369a3e3afcbd72f2c2)


### [prometheus](https://github.com/openshift/prometheus/tree/b91d7c75372b3ae707ce287e56df3fc7db935bac)

* [OCPBUGS-3078](https://issues.redhat.com/browse/OCPBUGS-3078): Backkport OCPBUGS-1718 to release 4.10 [#146](https://github.com/openshift/prometheus/pull/146)
* [Full changelog](https://github.com/openshift/prometheus/compare/3c6cd55e3a5e5332e810274ad27fddf662d4f506...b91d7c75372b3ae707ce287e56df3fc7db935bac)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/e916c2d8a19309cc86558d70515639d450c66af0)

* [OCPBUGS-7795](https://issues.redhat.com/browse/OCPBUGS-7795): Fixes ThanoRuler StatefulSet re-creation bug [#219](https://github.com/openshift/prometheus-operator/pull/219)
* [Bug 2108976](https://bugzilla.redhat.com/show_bug.cgi?id=2108976): pkg/prometheus: fix curl exec probe [#196](https://github.com/openshift/prometheus-operator/pull/196)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/73ddd44bf77c257461981b77a083cf7968745201...e916c2d8a19309cc86558d70515639d450c66af0)


### [telemeter](https://github.com/openshift/telemeter/tree/3b5eb87fd042feafba13502ddf724951942dc8df)

* [OCPBUGS-6575](https://issues.redhat.com/browse/OCPBUGS-6575): update prometheus/client_golang version [#446](https://github.com/openshift/telemeter/pull/446)
* [Full changelog](https://github.com/openshift/telemeter/compare/2c9c76e62783073dfd31a3780b3cdea5acdd481b...3b5eb87fd042feafba13502ddf724951942dc8df)


### [tests](https://github.com/openshift/origin/tree/c24959f7398024febda982639ca6dbda79ccfbf8)

* [OCPBUGS-11874](https://issues.redhat.com/browse/OCPBUGS-11874): Add Kuryr exception to "pods should successfully create sandboxes" test [#27878](https://github.com/openshift/origin/pull/27878)
* [OCPBUGS-11560](https://issues.redhat.com/browse/OCPBUGS-11560), [OCPBUGS-11629](https://issues.redhat.com/browse/OCPBUGS-11629): flake Pods Extended Pod Container lifecycle evicted pods [#27872](https://github.com/openshift/origin/pull/27872)
* [OCPBUGS-10244](https://issues.redhat.com/browse/OCPBUGS-10244): Bump(openshift/kubernetes): to get fix for resizing flake [#27800](https://github.com/openshift/origin/pull/27800)
* [OCPBUGS-4578](https://issues.redhat.com/browse/OCPBUGS-4578): Bond test 4.10 backport [#27593](https://github.com/openshift/origin/pull/27593)
* [OCPBUGS-2614](https://issues.redhat.com/browse/OCPBUGS-2614): Fix s2i ruby test that relys on rack [#27479](https://github.com/openshift/origin/pull/27479)
* disruption checking is disabled for prior releases because we lack a good baseline [#27472](https://github.com/openshift/origin/pull/27472)
* [OCPBUGS-1454](https://issues.redhat.com/browse/OCPBUGS-1454): Fixes OVN ACL audit log parsing [#27429](https://github.com/openshift/origin/pull/27429)
* [Bug 2117301](https://bugzilla.redhat.com/show_bug.cgi?id=2117301): Skip ErrImagePull for expected failures [#27352](https://github.com/openshift/origin/pull/27352)
* [Bug 2115862](https://bugzilla.redhat.com/show_bug.cgi?id=2115862): Skip internet connection test if we use a proxy [#27344](https://github.com/openshift/origin/pull/27344)
* [Bug 2065028](https://bugzilla.redhat.com/show_bug.cgi?id=2065028): rearrange test cases [#26915](https://github.com/openshift/origin/pull/26915)
* [OCPBUGS-374](https://issues.redhat.com/browse/OCPBUGS-374): test: allow -f to match tests for any test suite [#27366](https://github.com/openshift/origin/pull/27366)
* [Full changelog](https://github.com/openshift/origin/compare/4e11d238d9f989cb1008e5217824fd62f243eec0...c24959f7398024febda982639ca6dbda79ccfbf8)


### [thanos](https://github.com/openshift/thanos/tree/ac17631943be205d4ea38ccfc8ef49db999b4e47)

* [OCPBUGS-2037](https://issues.redhat.com/browse/OCPBUGS-2037): Bump 4.10 to 0.23.2 [#92](https://github.com/openshift/thanos/pull/92)
* [Full changelog](https://github.com/openshift/thanos/compare/10ca1d38d107c9f12dd2c85a4455626ca0f2e29b...ac17631943be205d4ea38ccfc8ef49db999b4e47)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/f2bc9eb32e2f367af2b498a79e32c1dbb006eefd)

* [Bug 2106666](https://bugzilla.redhat.com/show_bug.cgi?id=2106666): Return error when VM's info returned from VC doesn't contain IP address [#29](https://github.com/openshift/cloud-provider-vsphere/pull/29)
* [OCPBUGS-2065](https://issues.redhat.com/browse/OCPBUGS-2065): fix .dockerignore to satisfy OCP specific requirements [#27](https://github.com/openshift/cloud-provider-vsphere/pull/27)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/25b98d3b2fa812ef3b28ddcd90454c1b937898a9...f2bc9eb32e2f367af2b498a79e32c1dbb006eefd)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/f5d7362c88eb7d05bdfd0f70c2d53df7275d4ae2)

* [OCPBUGS-5895](https://issues.redhat.com/browse/OCPBUGS-5895): Fix vendored ini package [#137](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/137)
* [OCPBUGS-5895](https://issues.redhat.com/browse/OCPBUGS-5895): Backport multi dc support 410 [#133](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/133)
* [OCPBUGS-5507](https://issues.redhat.com/browse/OCPBUGS-5507): Fix sc creation if it is deleted [#128](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/128)
* [OCPBUGS-3288](https://issues.redhat.com/browse/OCPBUGS-3288): set TLS cipher suites in Kube RBAC sidecars [#120](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/120)
* [OCPBUGS-2282](https://issues.redhat.com/browse/OCPBUGS-2282): Add HTTP proxy to syncer container [#114](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/114)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/c16fea77645cb15a252fb359860dfb73e6031e44...f5d7362c88eb7d05bdfd0f70c2d53df7275d4ae2)