# 4.11.48

Created: 2023-08-25 19:04:01 +0000 UTC

Image Digest: `sha256:08cd58a3f7f44512c69490126461fcc369877a98c8eb8807a92cf2dc54e60bd3`

Promoted from registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2023-08-21-030257


## Changes from 4.11.8

### Components

* Kubernetes upgraded from 1.24.0 to 1.24.15
* Red Hat Enterprise Linux CoreOS upgraded from 411.86.202210032349-0 to 411.86.202308170928-0


### Rebuilt images without code change

* [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [0daf34f1](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/0daf34f1c7f85d5f02f77684105d06d13e3d2c3f) `sha256:034c77ee002d0b987efbaec77c6acf6c168e72864a204974777308ed80bdb4f3`
* [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [8dd7ae6f](https://github.com/openshift/alibaba-cloud-csi-driver/commit/8dd7ae6f2fce71f6302eb3d59163c8f87d362bd4) `sha256:fa0acfa316c4a27f277fa7f8467057749c590e162ccb29a9cf366885845fa3a5`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [f70a51b8](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/f70a51b838ead1110b0824989e8c529292b003a0) `sha256:500b13afbdf96bcca357e7bfe55438dfb2fdc07a639fcc95014f4366e151b07d`
* [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [41451089](https://github.com/openshift/cluster-api-provider-alibaba/commit/414510891904915fd490e5f2d3f5f53320998c98) `sha256:c5b864807961519aa820ddd9b2963b69bb4c7f57085dcbffa21ac68c8c854759`
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [ea1a9b23](https://github.com/openshift/cloud-provider-aws/commit/ea1a9b23afdcb03ed30bceba58c3d29e1b1200b5) `sha256:a5bea5917452e266627b918f9632499ccb887d1125cc5af52daa9be87f3c1b4b`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [b3fe15be](https://github.com/openshift/cluster-api-provider-aws/commit/b3fe15befffb31732d16db3bbca56aa8b3eb7cc6) `sha256:cbf055a2a0c45eeace4e90597d7b17a5a4b6ca4454ef7f2a7441022418fec359`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [2c7529e7](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/2c7529e739914d3901f757519f2cd5adce36eb28) `sha256:6ee25c87051521525dcd5853be71a77106cddf5cfe75dee8fea69fa9b3f360ab`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [a085f1cd](https://github.com/openshift/aws-pod-identity-webhook/commit/a085f1cd579f3241f40ef6a31c70ff9fdd8d3938) `sha256:ef4b81a04855750f62b1fe9ee4769d233795f35af5d593ac2345141e9fec964c`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [a851a354](https://github.com/openshift/cluster-api-provider-azure/commit/a851a3546a4f17acfc3a0ad5d3743665bfb91eaa) `sha256:ee9af0e80f2971224d1a955f18a19b8fcb5c12e38aa030a2690b72eb8d49c63c`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [2757f099](https://github.com/openshift/azure-disk-csi-driver/commit/2757f099dcb8ba645d2f36b84447907104af8c58) `sha256:ba0b0cd84362b775ff5dc98ec568bde86ab943df588d9c359a818753df739ddd`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [67c3831e](https://github.com/openshift/azure-file-csi-driver/commit/67c3831e8262bb2faaf22228f194ccc926f43390) `sha256:58b6ef362dd7d45522bacee5de0e5a9bd3fa35581b81c36653b964c9ef11d23e`
* [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator) git [4ddaca2a](https://github.com/openshift/azure-file-csi-driver-operator/commit/4ddaca2a5bbc76e6721b92146cf4bf62af4ff12f) `sha256:11ad36193850a86425948f5bc9f19ed120a00318cb8e7ec090e8d30bc27c0522`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [e2bcbaaf](https://github.com/openshift/cluster-authentication-operator/commit/e2bcbaafc381ad909b5f51c6a10e7286e8af97bc) `sha256:961aecdf9d44e0ffc7f348c2d3520bb2752ffb47fffeabb2d782d06e378b6c7d`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [fcffbcda](https://github.com/openshift/cluster-autoscaler-operator/commit/fcffbcda0262923ec12b455e2c353ea135e9d6ac) `sha256:bedfc6f236924608eb1dc533dfd83106bd5ad62569f5f6acebf1dd4920997b67`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [f9c215c4](https://github.com/openshift/cluster-api/commit/f9c215c4f298710ccf76676395465685b5d15268) `sha256:de057773b3d3b3b3270d93321e22d2bd4f01c3b5d3b5efb2ed6eacdcdb9d0742`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [06d77efa](https://github.com/openshift/cluster-capi-operator/commit/06d77efa3d9693bd945b3ee0fd151759632710ee) `sha256:86ef6dd100f81d55faef9ce85a8ab9fa4def2a5eab80ccedec6042f368ec5143`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [0e01b06b](https://github.com/openshift/cluster-config-operator/commit/0e01b06b43d710eee7f2fe2d3cce987990510644) `sha256:3e91dafe447bbd8401be76dc1217182867b70ec9a97e4a86544335cd95b354eb`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [8d0774fd](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/8d0774fd2bb6beb10e5ee61b41c82af500553415) `sha256:4d4f255e9dbfbea88c6be28c996115ea244662800133e35684532398c793fb27`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [12d050ab](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/12d050abd0cf37dae8973d453930bcf494a2499b) `sha256:534b90900e5eb8264dc609bfc95a9510ce4206a3e4b9a36b84e830d2feb87204`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [a536525d](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/a536525dd9f9f5e64921ee0ce474f1fb3b416787) `sha256:19e163334d148d27b525f1d8310a96c7443c5536abd58d58b19ce8d546bd1d99`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [e4de8c76](https://github.com/openshift/cluster-storage-operator/commit/e4de8c765590b962d7abe957dfad8aea19845b6c) `sha256:0b9c347e5747510ce16a8a38f2f664df9bd7b7af586fc627692da0a39b73417d`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [289032fb](https://github.com/openshift/cluster-update-keys/commit/289032fb67e5e358f21808fab87350bcf5e5e85b) `sha256:d5019dbed433b87edb6268cae4457725835fd87838c977a438edc0672140c15d`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [b7c03bb0](https://github.com/openshift/configmap-reload/commit/b7c03bb081cb4389b6492f3a38c1405c2518f9e3) `sha256:d0f3ccde425e5ef570bcbdcfefcf2de79ab5cd394427eb373ff6817039c1c896`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [0ad9da64](https://github.com/openshift/containernetworking-plugins/commit/0ad9da648b87c8ad866264ab5129ef88790f62d2) `sha256:cbee194660639c4bb02710932eae1acdf17c4744bbadc3b88eb924451fc2979f`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [f144bb43](https://github.com/openshift/csi-driver-nfs/commit/f144bb436b5b13c5647983dcc4cb0bfcb730e25a) `sha256:d72c2183ce1d658d4e7a85672b57d0e96eeb547674b2b0691789da47efa634be`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [3f69f2f2](https://github.com/openshift/csi-driver-shared-resource/commit/3f69f2f23fc179f8b29126dfca8b5a52f969c656) `sha256:15091151d6438185fa0fbce8b0b50f807f9ad116142d37e2fdb502a0c1881db1`
* [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [d3985eb1](https://github.com/openshift/csi-driver-shared-resource-operator/commit/d3985eb1fe6e6ae8199103a990ff0853055a7d72) `sha256:33a441cbb4e297cb68021e731abfe44529892061dc462921ea965be7c739de39`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [3f69f2f2](https://github.com/openshift/csi-driver-shared-resource/commit/3f69f2f23fc179f8b29126dfca8b5a52f969c656) `sha256:499e9adbd297a84b8c1e90011b46ab5801365d150f0d55210429de01264f579b`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [da5442f1](https://github.com/openshift/csi-external-attacher/commit/da5442f11eaacda8c5840e9cd2fa995bb35b0480) `sha256:cf442d7591582937b486bb73b956b4f034ba8cb284a7009fffd25652befd29b0`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [86277ec2](https://github.com/openshift/csi-external-provisioner/commit/86277ec2a03307ac6549d09c1aa77b775a4ba7f0) `sha256:0e3f9c00297346dd8dd3192ede8d8cb1fdd742b14c5f42e1f51db21401a4b3a6`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [2cea576d](https://github.com/openshift/csi-external-resizer/commit/2cea576d12c3e5581cedb5c1507611639ab399fc) `sha256:a553a5a859d8f02401a35f1b1cba5342db15b62cfe686e81acc67f5219abe305`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [0afdf731](https://github.com/openshift/csi-external-snapshotter/commit/0afdf7314a60d9ec65630ab8513ef9f5cbfaab0a) `sha256:eabd0ab0f117716ed9a5404b2d0e3140b871dfb8eb99f63a451a48aded87fbcf`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [710109c8](https://github.com/openshift/csi-node-driver-registrar/commit/710109c8778ea400ca37042797b8382d00dad10e) `sha256:dce1d8081e6c9d1d0f2a9d17e4b0ca19128c59102e78986190771b33104b9c61`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [0afdf731](https://github.com/openshift/csi-external-snapshotter/commit/0afdf7314a60d9ec65630ab8513ef9f5cbfaab0a) `sha256:48bb39ab779777a829fa6fa5e60ca6e1884654ee7aa5a9318493293f784d787e`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [0afdf731](https://github.com/openshift/csi-external-snapshotter/commit/0afdf7314a60d9ec65630ab8513ef9f5cbfaab0a) `sha256:f2d0731d4c8a1a572534af8b319e8c3c395658d3a09fd6edf408eb02982af67d`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [fccaf1d9](https://github.com/openshift/egress-router-cni/commit/fccaf1d9818617b8e6349d49cf9d7bbd7443c1e1) `sha256:077691b3f7f4f907a7667cdfc32d0655daa8ac8dc551d63148dc8166c93bebc3`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [a5a0048a](https://github.com/openshift/cloud-provider-gcp/commit/a5a0048a47a79fd203f2347a6bcc99a360d356b7) `sha256:845b6cf4cf421b42a3c7dfaa83aede439cb76d0930585a829f35fca5e31167de`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [ff20dda8](https://github.com/openshift/cluster-api-provider-gcp/commit/ff20dda81d59a00036901661942be56d2b2bfa61) `sha256:c48c55dc1150fa5ac2926cefe6890690e4044cb6b44030854579b7a846a7cdc5`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [bc7bad4f](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/bc7bad4f6d3c1c3917adeb7151053556ccacbc8b) `sha256:7d9529ff8dc9988940cb631f091fdbe9184f9df84515eefeae0cc87d1366b8d8`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [ce836969](https://github.com/openshift/cloud-provider-ibm/commit/ce8369695b436d879e45abac947f8abbda783239) `sha256:1bfd15e361cf9f8918de7702da714c90e910fd5c5ea5d0425a283530886316bb`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [e4a21800](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/e4a21800565e22c070498c04e5428ba9ad202d12) `sha256:4edf45e212789bf32faca28b02de208a6d51047385d40f9af8ab4427e21349b4`
* [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [32e18fa7](https://github.com/openshift/ibm-vpc-node-label-updater/commit/32e18fa73e2b05654dc5e79c652fdce4c1b7fb9d) `sha256:d379c5deccc80094baf834e55191dcd3d22a648888d61787bd276c8be72ce9a9`
* [ibmcloud-machine-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [3bde969f](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/3bde969f2e83ca3dc2a57ef4001a194916e7fdd9) `sha256:d792ca3516bf5da1c80516996960ae55788cf489ae63934a9055f00229a840b8`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [876128b5](https://github.com/openshift/ironic-rhcos-downloader/commit/876128b5ac733a244a3838b151b0a6df663937aa) `sha256:78e2d8de1816e5bc19e2b525c7f297b0f18a5adfc31474f2c2dc9202611746be`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [32fb8ea0](https://github.com/openshift/k8s-prometheus-adapter/commit/32fb8ea09db7f2ec9425cb646be5078e08d3ddff) `sha256:6ea53a07732fc3826546b74bf5cda02fbc68845294e993f80ed848d25ff01e57`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f1330f6f](https://github.com/openshift/images/commit/f1330f6fb99d1056544bca67f30c098059ef3edf) `sha256:3b2327c4cb8d5d3f5e71eebf84540ce96bfc67fd1af129bcdc66f1e9c66f5e97`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [a805ba5e](https://github.com/openshift/kube-rbac-proxy/commit/a805ba5e7ee18497af06404b85486804d0edf4c4) `sha256:e7a1f3d392e9d96042383576eab58360965902c10ebbad3b06d843af1a5b539a`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [596745ce](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/596745cec38b8401d1d906bfb9d3d78fdaeabcde) `sha256:b7f82a2b1e5078bc2405fcbf3a3627d5f81c8ee3250a71fd4ccd204f88154b5f`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [b6e14eab](https://github.com/openshift/cluster-api-provider-libvirt/commit/b6e14eabe93e25323cf32b7661edd0e7422b4e4b) `sha256:0a1ee76e2fc0d7a57d699063e09cb32fde473468807ed315eb1c39e95047c9fa`
* machine-os-content `sha256:342776e7a08f5ffc3d932e51f0135bd39d0867a98df1dd9f4d224ac941664941`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b1580a29](https://github.com/openshift/machine-os-images/commit/b1580a29e6bc76598c2d408c0e27460bc6b638be) `sha256:951daa84e9e7587dd79ab28f336e79d0e98fc60e479bec6f980bd12a1fbe7c80`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [643fdaf6](https://github.com/openshift/multus-networkpolicy/commit/643fdaf6085747d7e8127f433ee5d4c729d24611) `sha256:b03d104e9fe11b3211fdcdcd44b738905e9f9c8a0001f9c44bbd2ce328fb72aa`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [523b7904](https://github.com/openshift/route-override-cni/commit/523b79044306b7590ad449d7eab06a233d687d86) `sha256:e85abb6859c08c1d641ada1bdcaf78dfa5300425fb47221409691b879df38a71`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [b76a6770](https://github.com/openshift/bond-cni/commit/b76a677034edb66ddaf123cb79a2bb20a301f694) `sha256:d3452707eba7a2c1373d8b38e0639e5c73c7b27a3e5b3d59d21b72b3a888ec72`
* [network-tools](https://github.com/openshift/network-tools) git [4e87286c](https://github.com/openshift/network-tools/commit/4e87286cff4d645777cf2632a0671eed0d82270c) `sha256:a696da9a92f14d7908493750163e0866ba65e5bd24307b81bdd6e9f900b04089`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [a94eb77c](https://github.com/openshift/machine-api-provider-nutanix/commit/a94eb77c298d1420219d350df6a6c7bca575aac0) `sha256:4e46829832e86a9ea5d406825c5d27c58a34d49555d3547c1c679d6889069b6a`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [aad1b28f](https://github.com/openshift/oauth-proxy/commit/aad1b28fcf4b32d9ad592eee33e439bd575565a2) `sha256:ad1c8377ed580782a5758b751802d15254afa13f762755fdb0f52202d12dbf7a`
* [oauth-server](https://github.com/openshift/oauth-server) git [8d80088e](https://github.com/openshift/oauth-server/commit/8d80088ebf859d717e470b47fed9f9014b9226a0) `sha256:e381a4bd25bd4f7bf0ae7c886cd63275f1cb8b444c8bb7ae717f1099acb586e3`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [911da575](https://github.com/openshift/openshift-controller-manager/commit/911da57501707c3c18ce79074bd9a6d8e332f89d) `sha256:2136e0783762eb95307a1fc9122a07498d28d9e0e20e724340d2be2e07fae18d`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [1a7a5dcb](https://github.com/openshift/openshift-state-metrics/commit/1a7a5dcb06446039a5bc8ef3aedc07b25d58bb5d) `sha256:ead32e0a93d738a8975bb7e865204e759950bad945a7d8f8695f83ee49c5a84b`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [cd3370fb](https://github.com/openshift/ovirt-csi-driver/commit/cd3370fb298994289659a5a9c73262c007e8a836) `sha256:6e3438f9565992cc4bf7491f15adfedc5283a6682327eae5f184a7ada41df98e`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [7a30e388](https://github.com/openshift/ovirt-csi-driver-operator/commit/7a30e388c31d436bdf9269998896b16e7ec3aa26) `sha256:f2ed4767b433f98a3e4c63091a4f95bd77f34c5637775a52b529d97d6b9c99bf`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5a93d94c](https://github.com/openshift/cluster-api-provider-ovirt/commit/5a93d94c208baf4867bc41529cc379aeb25c9cc4) `sha256:b530173b08468e0014232448cea9901fff6a9f7d6636824c7b36936efc84a7b1`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [8ace6e94](https://github.com/openshift/cloud-provider-powervs/commit/8ace6e949a4139e17ec0d9c5b7e8bfe180affca7) `sha256:5f1680482840a1dcd514e80a8deb11cdfd95770e1db2123748af842aeb54136d`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [76649b32](https://github.com/openshift/machine-api-provider-powervs/commit/76649b320ee304ef60d62dd2cc17f9689f3aca03) `sha256:c5cb4262631e530409a928a65f6ff1e22985b72c4046e9030dd3ba96ada44f71`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [af12fbc4](https://github.com/openshift/prom-label-proxy/commit/af12fbc4482a0d8fe9e4748c675d56bbc43975f2) `sha256:308ac732815f23252507c8a3674144dd9f88d4fe70ea63a742f521f4c26a6d1e`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [05cfc390](https://github.com/openshift/prometheus-alertmanager/commit/05cfc3903ea8081ef3c099f2748472496c4ee99b) `sha256:bcfd723642c4ab001a13e93b8a052c6ebf2b26e0e643a5189098e9fd08c049d8`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [40942c28](https://github.com/openshift/node_exporter/commit/40942c28fe65abf9c9cc097c5affd3c6a7dc80b2) `sha256:bccbf3b6fcd5ecf0ae7466b0b12097a0ad521b87a8799b362ff810e6b9bacff9`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [0899d112](https://github.com/openshift/service-ca-operator/commit/0899d1127049ab3906484bade3d47c306d5e3677) `sha256:7ad2e61485740df09eb81edc407719c101b6a7a6c97cee73a98661d2ef7d9a35`
* [telemeter](https://github.com/openshift/telemeter) git [b1f5dd2c](https://github.com/openshift/telemeter/commit/b1f5dd2cdce31bcfacd9602e9b6c9a256e7fdd7d) `sha256:4dcc105f34ba6146441353cf150c8ff4a8d4d5381125891bc0296b583fe0b9f9`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [f67d1d02](https://github.com/openshift/cluster-api-provider-vsphere/commit/f67d1d0237d61b9375c9005c05459954ef5c0e82) `sha256:a0a412c11d9702bfccbc63871b502be9de7cce416ea5f4dadfa944311ef72cc2`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [5910f330](https://github.com/openshift/vsphere-problem-detector/commit/5910f330435f1c827717c2a6e9a6af3e0d9abaad) `sha256:7c38d8635d9a073af4e12189e21ebf4d3e606b8fc63764f1d622ed3f1da6e7a5`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bc51be826e96cae9e00d0fff0970fd273c078d9a)

* Updating ose-agent-installer-api-server images to be consistent with ART (#3980) [#3980](https://github.com/openshift/assisted-service/pull/3980)
* [MGMT-11799](https://issues.redhat.com/browse/MGMT-11799): change all 'go get' commands (#4887) [#4887](https://github.com/openshift/assisted-service/pull/4887)
* [Full changelog](https://github.com/openshift/assisted-service/compare/0f526475e7ec16c6586ee351c5216ef6ae225b1b...bc51be826e96cae9e00d0fff0970fd273c078d9a)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/aa467482746b55af2a64137302a7b3ef556c83c4)

* NO-ISSUE: Update OWNERS to match master branch (#682) [#682](https://github.com/openshift/assisted-installer/pull/682)
* [CVE-2022](https://issues.redhat.com/browse/CVE-2022), [OCPBUGS-15068](https://issues.redhat.com/browse/OCPBUGS-15068): 21235 github.com/Masterminds/vcs command inj (#681) [#681](https://github.com/openshift/assisted-installer/pull/681)
* Remove jira tickets prefix requirements (#596) [#596](https://github.com/openshift/assisted-installer/pull/596)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/9a6e300a4a7311feef98580d3ef07c4a314fca07...aa467482746b55af2a64137302a7b3ef556c83c4)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/e74ffbf509d382c42891884b90a8a9fb82922f5e)

* Updating ose-agent-installer-node-agent images to be consistent with ART (#381) [#381](https://github.com/openshift/assisted-installer-agent/pull/381)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/b17b06bc7747db4869e53a0e785229278a81dd1e...e74ffbf509d382c42891884b90a8a9fb82922f5e)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/15cd4347b9384fac3d93029c6426dc15b964f557)

* [OCPBUGS-10187](https://issues.redhat.com/browse/OCPBUGS-10187): Updating ose-apiserver-network-proxy images to be consistent with ART [#30](https://github.com/openshift/apiserver-network-proxy/pull/30)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/61e198ca00b9426e2f7309cf2818ac74426486ff...15cd4347b9384fac3d93029c6426dc15b964f557)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/ca8acb5ab9ce0c02a4c43e22a78f7d7c5bd955b6)

* [OCPBUGS-12932](https://issues.redhat.com/browse/OCPBUGS-12932): 4.11: Bump golang.org/x/text [#227](https://github.com/openshift/aws-ebs-csi-driver/pull/227)
* [OCPBUGS-4185](https://issues.redhat.com/browse/OCPBUGS-4185): Fix nodeService.getVolumesLimit() adding more instance [#213](https://github.com/openshift/aws-ebs-csi-driver/pull/213)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/550e22cf414194c9be7345e9c9e478091fdb602d...ca8acb5ab9ce0c02a4c43e22a78f7d7c5bd955b6)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/a796a77f62697f908fb8d6c354244f94b9c2ee03)

* Updating ose-machine-api-provider-aws images to be consistent with ART [#57](https://github.com/openshift/machine-api-provider-aws/pull/57)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/f6cf48823cee9ac0c2449abb31141c3033970ed5...a796a77f62697f908fb8d6c354244f94b9c2ee03)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/6bf2e3359731d80e75ae7c4d73316f6ef49d751a)

* bug OCPBUGS-2003: .dockerignore: enable OSBS2 builds [#38](https://github.com/openshift/cloud-provider-azure/pull/38)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/ac2724f3e7c0bc438cf76c15c10ff1b6d2c145bf...6bf2e3359731d80e75ae7c4d73316f6ef49d751a)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/da73a5d5b9a4f8c58a6bc94f6297d99f86392cd4)

* [OCPBUGS-7987](https://issues.redhat.com/browse/OCPBUGS-7987): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#71](https://github.com/openshift/azure-disk-csi-driver-operator/pull/71)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/ca54bcb70d0b79e6b284f3f0663a86f612bb15ed...da73a5d5b9a4f8c58a6bc94f6297d99f86392cd4)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/415f448b1570b7d15aebe60bae12052e06df59b4)

* [OCPBUGS-2123](https://issues.redhat.com/browse/OCPBUGS-2123): Fix availability sets unwanted creation for unknown vmSizes [#41](https://github.com/openshift/machine-api-provider-azure/pull/41)
* [OCPBUGS-2501](https://issues.redhat.com/browse/OCPBUGS-2501): Update azure instance types cache [#37](https://github.com/openshift/machine-api-provider-azure/pull/37)
* [Bug 2109487](https://bugzilla.redhat.com/show_bug.cgi?id=2109487): make Azure instance types case-insensitive [#29](https://github.com/openshift/machine-api-provider-azure/pull/29)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/93b3f9e06f33c38a4ce082b6843548567ca3acb0...415f448b1570b7d15aebe60bae12052e06df59b4)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/455d51802f0fc9a014f26958cf372449578e26c5)

* [OCPBUGS-16779](https://issues.redhat.com/browse/OCPBUGS-16779): bump RHCOS 4.11 bootimage metadata to 411.86.202308081056-0 [#7424](https://github.com/openshift/installer/pull/7424)
* [OCPBUGS-17246](https://issues.redhat.com/browse/OCPBUGS-17246): azurestack: do not use gen2 images [#7393](https://github.com/openshift/installer/pull/7393)
* [OCPBUGS-16915](https://issues.redhat.com/browse/OCPBUGS-16915): [release-4.11] azure: skip LB creation when not needed [#7372](https://github.com/openshift/installer/pull/7372)
* [OCPBUGS-16353](https://issues.redhat.com/browse/OCPBUGS-16353): ic: azure: validate diskTypes in AzureStack [#7341](https://github.com/openshift/installer/pull/7341)
* [OCPBUGS-17002](https://issues.redhat.com/browse/OCPBUGS-17002): GCP: add europe-west12 region to the survey as supported region [#7377](https://github.com/openshift/installer/pull/7377)
* [OCPBUGS-5708](https://issues.redhat.com/browse/OCPBUGS-5708): hold bootkube service until bootstrap has pivoted [#6759](https://github.com/openshift/installer/pull/6759)
* [OCPBUGS-13104](https://issues.redhat.com/browse/OCPBUGS-13104): openstack: Add netcat to the Installer image [#7163](https://github.com/openshift/installer/pull/7163)
* [OCPBUGS-14288](https://issues.redhat.com/browse/OCPBUGS-14288): baremetal: Extra time for provisioning interface [#7214](https://github.com/openshift/installer/pull/7214)
* [OCPBUGS-12750](https://issues.redhat.com/browse/OCPBUGS-12750): [Alibaba] update the bandwidth value of EIP [#7132](https://github.com/openshift/installer/pull/7132)
* [OCPBUGS-11663](https://issues.redhat.com/browse/OCPBUGS-11663): AWS - Remove ACLs from s3 ign [#7085](https://github.com/openshift/installer/pull/7085)
* [OCPBUGS-10594](https://issues.redhat.com/browse/OCPBUGS-10594): [release-4.11] aws: bump aws-sdk-go version [#7000](https://github.com/openshift/installer/pull/7000)
* [OCPBUGS-7530](https://issues.redhat.com/browse/OCPBUGS-7530): bump RHCOS 4.11 bootimage metadata [#6875](https://github.com/openshift/installer/pull/6875)
* [OCPBUGS-5665](https://issues.redhat.com/browse/OCPBUGS-5665): CVE-2021-4238: goutils: update for randomness fix [#6765](https://github.com/openshift/installer/pull/6765)
* [OCPBUGS-5422](https://issues.redhat.com/browse/OCPBUGS-5422): Switch back to gp2 ebs volume type for bootstrap instance [#6743](https://github.com/openshift/installer/pull/6743)
* [OCPBUGS-4685](https://issues.redhat.com/browse/OCPBUGS-4685): out-of-bounds read in golang.org/x/text/language leads to DoS [#6685](https://github.com/openshift/installer/pull/6685)
* [OCPBUGS-3193](https://issues.redhat.com/browse/OCPBUGS-3193): [release-4.11] [AWS] Add AWS r6i into tested instance types table [#6350](https://github.com/openshift/installer/pull/6350)
* [OCPBUGS-3362](https://issues.redhat.com/browse/OCPBUGS-3362): bump RHCOS 4.11 bootimage metadata [#6720](https://github.com/openshift/installer/pull/6720)
* [OCPBUGS-4720](https://issues.redhat.com/browse/OCPBUGS-4720): GCP: Add me-west1 region [#6690](https://github.com/openshift/installer/pull/6690)
* [OCPBUGS-5078](https://issues.redhat.com/browse/OCPBUGS-5078): OpenStack: Force JSON content-type in Swift object listing [#6725](https://github.com/openshift/installer/pull/6725)
* [OCPBUGS-4405](https://issues.redhat.com/browse/OCPBUGS-4405): UPI: Azure: create HyperV2 rhcos image [#6681](https://github.com/openshift/installer/pull/6681)
* [OCPBUGS-4530](https://issues.redhat.com/browse/OCPBUGS-4530): Enable CVO unmanage overrides in bootstrap-in-place installations [#6668](https://github.com/openshift/installer/pull/6668)
* [OCPBUGS-4398](https://issues.redhat.com/browse/OCPBUGS-4398): update golang.org/x/crypto [#6652](https://github.com/openshift/installer/pull/6652)
* [OCPBUGS-3023](https://issues.redhat.com/browse/OCPBUGS-3023): GCP: Add missing regions [#6542](https://github.com/openshift/installer/pull/6542)
* [OCPBUGS-4325](https://issues.redhat.com/browse/OCPBUGS-4325): gcp: fail during validation if service usage is not enabled [#6647](https://github.com/openshift/installer/pull/6647)
* [OCPBUGS-4325](https://issues.redhat.com/browse/OCPBUGS-4325): Service Usage API is required, not optional [#6642](https://github.com/openshift/installer/pull/6642)
* [OCPBUGS-4081](https://issues.redhat.com/browse/OCPBUGS-4081): OpenStack: Force JSON content-type in Swift [#6625](https://github.com/openshift/installer/pull/6625)
* [Bug 2105331](https://bugzilla.redhat.com/show_bug.cgi?id=2105331): Switch to perform normal marshalling with unknown fields [#6102](https://github.com/openshift/installer/pull/6102)
* [OCPBUGS-378](https://issues.redhat.com/browse/OCPBUGS-378): UPI image download govc rate limit failure [#6246](https://github.com/openshift/installer/pull/6246)
* [OCPBUGS-2983](https://issues.redhat.com/browse/OCPBUGS-2983): Azure: Fix DiskEncryptionSet regex validation [#6537](https://github.com/openshift/installer/pull/6537)
* [OCPBUGS-1346](https://issues.redhat.com/browse/OCPBUGS-1346): OpenStack UPI: Create server group for Computes [#6351](https://github.com/openshift/installer/pull/6351)
* [Bug 2101015](https://bugzilla.redhat.com/show_bug.cgi?id=2101015): go getter update for terraform & terraform providers [#6411](https://github.com/openshift/installer/pull/6411)
* [OCPBUGS-1242](https://issues.redhat.com/browse/OCPBUGS-1242): Add PowerVS zone mon01 support [#6341](https://github.com/openshift/installer/pull/6341)
* [OCPBUGS-536](https://issues.redhat.com/browse/OCPBUGS-536): vSphere - enable steal time accounting [#6260](https://github.com/openshift/installer/pull/6260)
* BUG 2117368: Add AWS S3 Bucket Permissions [#6216](https://github.com/openshift/installer/pull/6216)
* [OCPBUGS-1876](https://issues.redhat.com/browse/OCPBUGS-1876): download 'aliyun' [#6377](https://github.com/openshift/installer/pull/6377)
* [OCPBUGS-562](https://issues.redhat.com/browse/OCPBUGS-562): bump RHCOS 4.11 bootimage metadata [#6459](https://github.com/openshift/installer/pull/6459)
* [Full changelog](https://github.com/openshift/installer/compare/ca32d1d4a55aa7a0817a512bd0c23d062783564b...455d51802f0fc9a014f26958cf372449578e26c5)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/3cbef7f4537f9d2a1d1d32ad34a4c3eff49251b5)

* Updating baremetal-machine-controller images to be consistent with ART [#165](https://github.com/openshift/cluster-api-provider-baremetal/pull/165)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/a65be8623c4b89b4a6a9856ff51d2405f8e4f802...3cbef7f4537f9d2a1d1d32ad34a4c3eff49251b5)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/d4e19185edae7a037979a9130994f4b6e80d89d7)

* [OCPBUGS-11612](https://issues.redhat.com/browse/OCPBUGS-11612): allow namespace to continue with terminating when deprovisioning at t… [#262](https://github.com/openshift/baremetal-operator/pull/262)
* [OCPBUGS-8298](https://issues.redhat.com/browse/OCPBUGS-8298): cve: 2022-21698: upgrade prometheus/client_golang [#256](https://github.com/openshift/baremetal-operator/pull/256)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/3122fabe86a4583ef637cdc41c03449ee825977e...d4e19185edae7a037979a9130994f4b6e80d89d7)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/0a8284b0bd9b01e704ac3d722f4e57df32b289ee)

* [OCPBUGS-15539](https://issues.redhat.com/browse/OCPBUGS-15539): Use machine-config state instead of comparing roles [#263](https://github.com/openshift/baremetal-runtimecfg/pull/263)
* [OCPBUGS-13544](https://issues.redhat.com/browse/OCPBUGS-13544): Verify kubelet version in upgrade check [#250](https://github.com/openshift/baremetal-runtimecfg/pull/250)
* [OCPBUGS-11297](https://issues.redhat.com/browse/OCPBUGS-11297): fix isUpgradeStillRunning() [#233](https://github.com/openshift/baremetal-runtimecfg/pull/233)
* [OCPBUGS-673](https://issues.redhat.com/browse/OCPBUGS-673): Apply ipv6 bind check to non-VIP case too [#192](https://github.com/openshift/baremetal-runtimecfg/pull/192)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/70d770dd86d0cd783ee35b73a8b69b16671c8d49...0a8284b0bd9b01e704ac3d722f4e57df32b289ee)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/f56bc268176c75f0dbd1536067aeda26592ce305)

* [OCPBUGS-16059](https://issues.redhat.com/browse/OCPBUGS-16059): mcs cert: account for environments that use IP directly [#1504](https://github.com/openshift/oc/pull/1504)
* [OCPBUGS-16195](https://issues.redhat.com/browse/OCPBUGS-16195): reboot: set ignition version to 3.1 [#1510](https://github.com/openshift/oc/pull/1510)
* [OCPBUGS-4812](https://issues.redhat.com/browse/OCPBUGS-4812): [release-4.11] New-App Using Git via SSH [#1283](https://github.com/openshift/oc/pull/1283)
* handle the error case of node retrieval while waiting for reboot [#1486](https://github.com/openshift/oc/pull/1486)
* bring some cert rotation helpers back into 4.11 [fix unit-tests] [#1479](https://github.com/openshift/oc/pull/1479)
* [OCPBUGS-10772](https://issues.redhat.com/browse/OCPBUGS-10772): bump repo sclorg/s2i-ruby-container location for newapp test [#1380](https://github.com/openshift/oc/pull/1380)
* [OCPBUGS-8205](https://issues.redhat.com/browse/OCPBUGS-8205): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1360](https://github.com/openshift/oc/pull/1360)
* Bug OCPBUGS-915: [inspect] Add EgressQoS to inspect [#1230](https://github.com/openshift/oc/pull/1230)
* [OCPBUGS-2766](https://issues.redhat.com/browse/OCPBUGS-2766): pkg/cli/login: Warn, but do not fail, on surprise project-list errors [#1274](https://github.com/openshift/oc/pull/1274)
* [Full changelog](https://github.com/openshift/oc/compare/262ac9c4cb45930572030d4435a529911f9c3a17...f56bc268176c75f0dbd1536067aeda26592ce305)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/7c4c93514b97515b97a78dec9c5a80c507fc2569)

* [OCPBUGS-13792](https://issues.redhat.com/browse/OCPBUGS-13792): Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. [#540](https://github.com/openshift/cloud-credential-operator/pull/540)
* [OCPBUGS-11708](https://issues.redhat.com/browse/OCPBUGS-11708): ccoctl: Enable public anon read access to default OIDC S3 bucket [#530](https://github.com/openshift/cloud-credential-operator/pull/530)
* [OCPBUGS-2801](https://issues.redhat.com/browse/OCPBUGS-2801): Backport --credentials-requests-dir for ccoctl gcp delete. [#506](https://github.com/openshift/cloud-credential-operator/pull/506)
* [OCPBUGS-2883](https://issues.redhat.com/browse/OCPBUGS-2883): Make ccoctl use regional STS endpoint by default [#503](https://github.com/openshift/cloud-credential-operator/pull/503)
* [OCPBUGS-2278](https://issues.redhat.com/browse/OCPBUGS-2278): Add ccoctl support to create OIDC endpoint with private S3 bucket [#500](https://github.com/openshift/cloud-credential-operator/pull/500)
* Update OWNERS to reflect reality. [#496](https://github.com/openshift/cloud-credential-operator/pull/496)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/286ab25ddb86423bc05f34cf955c0db008209d1e...7c4c93514b97515b97a78dec9c5a80c507fc2569)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/fd849e37f0073049d64b85ccdd58794640aee011)

* [OCPBUGS-13240](https://issues.redhat.com/browse/OCPBUGS-13240): pull project name from subnet uri [#109](https://github.com/openshift/cloud-network-config-controller/pull/109)
* Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration [#93](https://github.com/openshift/cloud-network-config-controller/pull/93)
* [OCPBUGS-3932](https://issues.redhat.com/browse/OCPBUGS-3932): Add assigned egress ips into capacity [#78](https://github.com/openshift/cloud-network-config-controller/pull/78)
* [OCPBUGS-4529](https://issues.redhat.com/browse/OCPBUGS-4529): Node controller: Skip uninitialized nodes [#85](https://github.com/openshift/cloud-network-config-controller/pull/85)
* [OCPBUGS-4528](https://issues.redhat.com/browse/OCPBUGS-4528): AWS: build temp credentials file from AWS key and secret [#84](https://github.com/openshift/cloud-network-config-controller/pull/84)
* [OCPBUGS-4167](https://issues.redhat.com/browse/OCPBUGS-4167): Run azure operations in sequence [#79](https://github.com/openshift/cloud-network-config-controller/pull/79)
* [OCPBUGS-4163](https://issues.redhat.com/browse/OCPBUGS-4163): AWS: Fix race in IP address assignment code [#83](https://github.com/openshift/cloud-network-config-controller/pull/83)
* Jira OCPBUGS-4179: Fix assign error display for cloudprivateipconfig [#75](https://github.com/openshift/cloud-network-config-controller/pull/75)
* [OCPBUGS-4233](https://issues.redhat.com/browse/OCPBUGS-4233): Updating ose-cloud-network-config-controller images to be consistent with ART [#81](https://github.com/openshift/cloud-network-config-controller/pull/81)
* [OCPBUGS-3089](https://issues.redhat.com/browse/OCPBUGS-3089): Update OWNERS [#71](https://github.com/openshift/cloud-network-config-controller/pull/71)
* [OCPBUGS-1846](https://issues.redhat.com/browse/OCPBUGS-1846): Add resolver to handle custom endpoints [#63](https://github.com/openshift/cloud-network-config-controller/pull/63)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/7a3c3c9ea200d11db5128663deade53f20105ac9...fd849e37f0073049d64b85ccdd58794640aee011)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/bf6c1c328ac39a367417e93c74fcbb3fe8628825)

* Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#221](https://github.com/openshift/kubernetes-autoscaler/pull/221)
* Updating vertical-pod-autoscaler images to be consistent with ART [#222](https://github.com/openshift/kubernetes-autoscaler/pull/222)
* [OCPBUGS-2046](https://issues.redhat.com/browse/OCPBUGS-2046): switched policy for PodDisruptionBudget from v1beta1 to v1 in time for 1.25 [#244](https://github.com/openshift/kubernetes-autoscaler/pull/244)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/80a9b6d18762f4c14ba68c8ebf75b85fb0cd06dd...bf6c1c328ac39a367417e93c74fcbb3fe8628825)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/4ffdd2f9423ff22076b91c82457fc844114478bf)

* [OCPBUGS-5628](https://issues.redhat.com/browse/OCPBUGS-5628): Update dependencies [#321](https://github.com/openshift/cluster-baremetal-operator/pull/321)
* Updating ose-cluster-baremetal-operator images to be consistent with ART [#264](https://github.com/openshift/cluster-baremetal-operator/pull/264)
* [OCPBUGS-5075](https://issues.redhat.com/browse/OCPBUGS-5075): Do not fail the reconciler when no master Machines exist [#318](https://github.com/openshift/cluster-baremetal-operator/pull/318)
* [OCPBUGS-1762](https://issues.redhat.com/browse/OCPBUGS-1762): add a workaround for a NetworkManager issue [#298](https://github.com/openshift/cluster-baremetal-operator/pull/298)
* [OCPBUGS-747](https://issues.redhat.com/browse/OCPBUGS-747): Use machines instead of nodes to detect masters [#307](https://github.com/openshift/cluster-baremetal-operator/pull/307)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/2c270a54f68c1622b216ce0cb2ebe7d5f59a63ed...4ffdd2f9423ff22076b91c82457fc844114478bf)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/6ec2cccde669e9267f9456cd88f0b88f1672a323)

* Add API team to the OWNERS [#95](https://github.com/openshift/cluster-bootstrap/pull/95)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/f22d1c60c188a4b5ce1731a8b1db7c20067dc7e9...6ec2cccde669e9267f9456cd88f0b88f1672a323)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/2dbffc67e4fb2ef972f4ba6e6c1a76447193c6ce)

* [OCPBUGS-5781](https://issues.redhat.com/browse/OCPBUGS-5781): Try to limit groups for the REST mapper discovery [#216](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/216)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a21df2426485f83187a445df5e4a9637c9992c86...2dbffc67e4fb2ef972f4ba6e6c1a76447193c6ce)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/8abe243f0c4edbaea1a9d1b6a59c7590b2315053)

* [OCPBUGS-2528](https://issues.redhat.com/browse/OCPBUGS-2528): keep dns-default annotations intact [#349](https://github.com/openshift/cluster-dns-operator/pull/349)
* [OCPBUGS-2050](https://issues.redhat.com/browse/OCPBUGS-2050): Reconcile the DNS namespace [#346](https://github.com/openshift/cluster-dns-operator/pull/346)
* [OCPBUGS-2112](https://issues.redhat.com/browse/OCPBUGS-2112): [release-4.11] Backport Address e2e failures due to pod security [#347](https://github.com/openshift/cluster-dns-operator/pull/347)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/89980935d93894dd26bc155234c2ff851f093e38...8abe243f0c4edbaea1a9d1b6a59c7590b2315053)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/5bfd9aed017b030da6c2ab3116f5567b31752eee)

* [OCPBUGS-9908](https://issues.redhat.com/browse/OCPBUGS-9908): Garbage collect grafana-dashboard-etcd [#1022](https://github.com/openshift/cluster-etcd-operator/pull/1022)
* [OCPBUGS-9967](https://issues.redhat.com/browse/OCPBUGS-9967): increase live/ready timeout and failure thresholds [#1025](https://github.com/openshift/cluster-etcd-operator/pull/1025)
* [OCPBUGS-7720](https://issues.redhat.com/browse/OCPBUGS-7720): set default timeouts in etcdcli [#1007](https://github.com/openshift/cluster-etcd-operator/pull/1007)
* [OCPBUGS-7510](https://issues.redhat.com/browse/OCPBUGS-7510): [release-4.11] fail early on missing node status envs [#1006](https://github.com/openshift/cluster-etcd-operator/pull/1006)
* [OCPBUGS-4785](https://issues.redhat.com/browse/OCPBUGS-4785): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#973](https://github.com/openshift/cluster-etcd-operator/pull/973)
* [OCPBUGS-2919](https://issues.redhat.com/browse/OCPBUGS-2919): update prometheus alerts [#957](https://github.com/openshift/cluster-etcd-operator/pull/957)
* [OCPBUGS-2113](https://issues.redhat.com/browse/OCPBUGS-2113): Add niceness to important etcd processes [#943](https://github.com/openshift/cluster-etcd-operator/pull/943)
* [OCPBUGS-1607](https://issues.redhat.com/browse/OCPBUGS-1607): increase etcdGRPCRequestsSlow thresholds [#934](https://github.com/openshift/cluster-etcd-operator/pull/934)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1efdb3c0c690a4f9b1b5bde39f5efcdc6922d5bf...5bfd9aed017b030da6c2ab3116f5567b31752eee)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/15830698ff4350c336e56bd114e14c3d334b0f30)

* [OCPBUGS-9921](https://issues.redhat.com/browse/OCPBUGS-9921): bump aws-sdk-go [#848](https://github.com/openshift/cluster-image-registry-operator/pull/848)
* add myself to OWNERS [#831](https://github.com/openshift/cluster-image-registry-operator/pull/831)
* [OCPBUGS-6907](https://issues.redhat.com/browse/OCPBUGS-6907): OpenStack: Add support for Proxy [#836](https://github.com/openshift/cluster-image-registry-operator/pull/836)
* [OCPBUGS-5778](https://issues.redhat.com/browse/OCPBUGS-5778): swift: Retry connecting to OpenStack [#830](https://github.com/openshift/cluster-image-registry-operator/pull/830)
* [OCPBUGS-1847](https://issues.redhat.com/browse/OCPBUGS-1847): bump aws-go-sdk, adding support for me-central-1 [#801](https://github.com/openshift/cluster-image-registry-operator/pull/801)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/8e2d96fe6105e8681ab6956bf9ad2b74623f8695...15830698ff4350c336e56bd114e14c3d334b0f30)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/681e8de3d7b14aa45e469db5d0101fb15d783897)

* [OCPBUGS-14456](https://issues.redhat.com/browse/OCPBUGS-14456), [OCPBUGS-14457](https://issues.redhat.com/browse/OCPBUGS-14457): Handle mTLS CRLs, and fix accidental CRL duplication [#942](https://github.com/openshift/cluster-ingress-operator/pull/942)
* [OCPBUGS-3560](https://issues.redhat.com/browse/OCPBUGS-3560): Allow PROXY protocol for "Private" strategy [#914](https://github.com/openshift/cluster-ingress-operator/pull/914)
* [OCPBUGS-8000](https://issues.redhat.com/browse/OCPBUGS-8000): certificate-publisher: Don't publish extraneous certificates [#894](https://github.com/openshift/cluster-ingress-operator/pull/894)
* [OCPBUGS-3049](https://issues.redhat.com/browse/OCPBUGS-3049): Update CRLs when they expire [#853](https://github.com/openshift/cluster-ingress-operator/pull/853)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/13f1087adff68067c887f054cb45e182411e232a...681e8de3d7b14aa45e469db5d0101fb15d783897)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/7021090e0aa58fbc5ab6dc48ee68752d9152240f)

* [OCPBUGS-7756](https://issues.redhat.com/browse/OCPBUGS-7756): Guard pod set readiness probe endpoint explicitly [#1448](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1448)
* [OCPBUGS-2938](https://issues.redhat.com/browse/OCPBUGS-2938): Duplicate prometheus rules for API SLOs after upgrade [#1397](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1397)
* [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#1429](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1429)
* [OCPBUGS-4301](https://issues.redhat.com/browse/OCPBUGS-4301): bootstrap-kube-apiserver: specify resources.requests [#1412](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1412)
* [OCPBUGS-3290](https://issues.redhat.com/browse/OCPBUGS-3290): routes/status resources can leak sensitive data, exclude it from audit [#1422](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1422)
* [OCPBUGS-2160](https://issues.redhat.com/browse/OCPBUGS-2160): [release-4.11] serviceaccountissuer: fix case when default value is being used and not trusted after change [#1394](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1394)
* [OCPBUGS-2199](https://issues.redhat.com/browse/OCPBUGS-2199): [release-4.11] Wire support for trusted service account issuers [#1386](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1386)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/c7c94db87f9dc7ab4010842aadc587f4db682c33...7021090e0aa58fbc5ab6dc48ee68752d9152240f)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/21da027d835977c0216a9a7303a0b3851f46379a)

* Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#6](https://github.com/openshift/cluster-api-operator/pull/6)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/55efc390b9c04d602a7a51c23bf9ab426a7c5f13...21da027d835977c0216a9a7303a0b3851f46379a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/e65f505fdd1501bd895bb8538d98acf0c61788d6)

* [OCPBUGS-7756](https://issues.redhat.com/browse/OCPBUGS-7756): Guard pod set readiness probe endpoint explicitly [#703](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/703)
* [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#690](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/690)
* [OCPBUGS-4304](https://issues.redhat.com/browse/OCPBUGS-4304): resources.requests for operator pod [#667](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/667)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/74584b7e3c7fd13b71bcb93c517d070d54a29409...e65f505fdd1501bd895bb8538d98acf0c61788d6)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/324e1c37f30bb8a6ae0e83b14fdd089f8b80800b)

* [OCPBUGS-7756](https://issues.redhat.com/browse/OCPBUGS-7756): Guard controller: set the readiness probe endpoint explicitly [#464](https://github.com/openshift/cluster-kube-scheduler-operator/pull/464)
* [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#458](https://github.com/openshift/cluster-kube-scheduler-operator/pull/458)
* [OCPBUGS-4294](https://issues.redhat.com/browse/OCPBUGS-4294): bootstrap-kube-scheduler: specify resources.requests [#449](https://github.com/openshift/cluster-kube-scheduler-operator/pull/449)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/34132f9ae05773b9c5addc534f9ee5d088fb2638...324e1c37f30bb8a6ae0e83b14fdd089f8b80800b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/aa62f3b7d5533752196646d3787e24cf1b77b569)

* [OCPBUGS-10382](https://issues.redhat.com/browse/OCPBUGS-10382): ignore case when checking csr hostnames [#181](https://github.com/openshift/cluster-machine-approver/pull/181)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/3ee1fe4d777f8e04b26bade2960609fc9b151d94...aa62f3b7d5533752196646d3787e24cf1b77b569)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/d0d2e9b5a50e1c3bedf76e9bf1afc18078762df7)

* [OCPBUGS-11759](https://issues.redhat.com/browse/OCPBUGS-11759): add startup probe for prometheus-adapter [#1947](https://github.com/openshift/cluster-monitoring-operator/pull/1947)
* [OCPBUGS-11465](https://issues.redhat.com/browse/OCPBUGS-11465): jsonnet: Add prometheus container in UWM [#1938](https://github.com/openshift/cluster-monitoring-operator/pull/1938)
* Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift [#1749](https://github.com/openshift/cluster-monitoring-operator/pull/1749)
* [OCPBUGS-4640](https://issues.redhat.com/browse/OCPBUGS-4640): Increase startupProbe for prometheus [#1845](https://github.com/openshift/cluster-monitoring-operator/pull/1845)
* [OCPBUGS-4030](https://issues.redhat.com/browse/OCPBUGS-4030): test: increase timeout when checking remote write metrics [#1821](https://github.com/openshift/cluster-monitoring-operator/pull/1821)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/58d1e5ad06f6a110437f7a19c2f6fa025175453c...d0d2e9b5a50e1c3bedf76e9bf1afc18078762df7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/ebd19761c77f42bbf83b9453cd061bb312ce903f)

* [OCPBUGS-13661](https://issues.redhat.com/browse/OCPBUGS-13661): AUTH: update cluster-reader to include k8s.ovn.org [#1811](https://github.com/openshift/cluster-network-operator/pull/1811)
* [OCPBUGS-11763](https://issues.redhat.com/browse/OCPBUGS-11763): HyperShift: Add POD_NAME env to ovnkube-node [#1780](https://github.com/openshift/cluster-network-operator/pull/1780)
* [OCPBUGS-12277](https://issues.redhat.com/browse/OCPBUGS-12277): remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher [#1789](https://github.com/openshift/cluster-network-operator/pull/1789)
* [OCPBUGS-10487](https://issues.redhat.com/browse/OCPBUGS-10487): Enable configuration of node healthz server on ovnkube [#1742](https://github.com/openshift/cluster-network-operator/pull/1742)
* [OCPBUGS-5954](https://issues.redhat.com/browse/OCPBUGS-5954): Backport Added missing API field podref to OverlappingRangeIPReservation CRD [#1686](https://github.com/openshift/cluster-network-operator/pull/1686)
* [OCPBUGS-6993](https://issues.redhat.com/browse/OCPBUGS-6993): HyperShift: Co-locate OVN-Kubernetes master with other hcp pods [#1702](https://github.com/openshift/cluster-network-operator/pull/1702)
* [OCPBUGS-3462](https://issues.redhat.com/browse/OCPBUGS-3462): CNI binary copy should account for the possibility of symlinks [backport 4.11] [#1616](https://github.com/openshift/cluster-network-operator/pull/1616)
* [OCPBUGS-6920](https://issues.redhat.com/browse/OCPBUGS-6920): Configure ignored namespaces into multus-admission-controller [#1698](https://github.com/openshift/cluster-network-operator/pull/1698)
* [OCPBUGS-3971](https://issues.redhat.com/browse/OCPBUGS-3971): HyperShift: Do not accept empty infrastructure name [#1635](https://github.com/openshift/cluster-network-operator/pull/1635)
* [OCPBUGS-3490](https://issues.redhat.com/browse/OCPBUGS-3490): OVN-Kubernetes: Prefer oldest nodes [#1641](https://github.com/openshift/cluster-network-operator/pull/1641)
* [OCPBUGS-4137](https://issues.redhat.com/browse/OCPBUGS-4137): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1640](https://github.com/openshift/cluster-network-operator/pull/1640)
* Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression [#1638](https://github.com/openshift/cluster-network-operator/pull/1638)
* Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation [#1551](https://github.com/openshift/cluster-network-operator/pull/1551)
* [OCPBUGS-3911](https://issues.redhat.com/browse/OCPBUGS-3911): SDN: /var/run mount cleanup [#1631](https://github.com/openshift/cluster-network-operator/pull/1631)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/adf2253692d5dd8cc0f3bce8db6397105c08bbcb...ebd19761c77f42bbf83b9453cd061bb312ce903f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/722ddf8118774f71853d2e391091edae9144bf9e)

* Merge [#548](https://github.com/openshift/cluster-node-tuning-operator/pull/548)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/4adc275be02ac4dbc84e23838d075f18fa6d58ca...722ddf8118774f71853d2e391091edae9144bf9e)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/cb39fde1ff115ce4ef4b9adee8d1649ea8e6b248)

* [OCPBUGS-3290](https://issues.redhat.com/browse/OCPBUGS-3290): routes/status resources can leak sensitive data, exclude it from audit [#513](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/513)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/5ddbeef319c297618a94d97a79dcb0cc0a2ec497...cb39fde1ff115ce4ef4b9adee8d1649ea8e6b248)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/565118124779c16428c32b624005cae038456838)

* [OCPBUGS-5787](https://issues.redhat.com/browse/OCPBUGS-5787): clusterquotareconciliation: do not sync quota monitor cache with no monitors registered [#96](https://github.com/openshift/cluster-policy-controller/pull/96)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/c7201edacb6e4ac1f8a1624b152911f3c404dbc7...565118124779c16428c32b624005cae038456838)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/051761b88ee7a2327130172afdb8a3107405df94)

* [OCPBUGS-15758](https://issues.redhat.com/browse/OCPBUGS-15758): Update Jenkins and Jenkins Agent Base image versions [#507](https://github.com/openshift/cluster-samples-operator/pull/507)
* [OCPBUGS-7330](https://issues.redhat.com/browse/OCPBUGS-7330): When setting allowedRegistries urls the openshift-samples operator is degraded [#490](https://github.com/openshift/cluster-samples-operator/pull/490)
* [OCPBUGS-2092](https://issues.redhat.com/browse/OCPBUGS-2092): Use X.Y floating tags for golang [#467](https://github.com/openshift/cluster-samples-operator/pull/467)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/375a4a9a336a1961a497c9b3659c6280dce2d90b...051761b88ee7a2327130172afdb8a3107405df94)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8966b291a649d3a262d1b714aef02c6d9d3ff402)

* [OCPBUGS-5011](https://issues.redhat.com/browse/OCPBUGS-5011): Backport `SecurityContext` reconciliation behavior [#940](https://github.com/openshift/cluster-version-operator/pull/940)
* [OCPBUGS-13043](https://issues.redhat.com/browse/OCPBUGS-13043): pkg/cvo: reset payload load status [#935](https://github.com/openshift/cluster-version-operator/pull/935)
* [OCPBUGS-10671](https://issues.redhat.com/browse/OCPBUGS-10671): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#915](https://github.com/openshift/cluster-version-operator/pull/915)
* [OCPBUGS-5882](https://issues.redhat.com/browse/OCPBUGS-5882): Set upgradeability check throttling period to 2m [#885](https://github.com/openshift/cluster-version-operator/pull/885)
* [OCPBUGS-2293](https://issues.redhat.com/browse/OCPBUGS-2293): Allow unknown capabilities during payload load and implicit enablement checking [#854](https://github.com/openshift/cluster-version-operator/pull/854)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/bc1aeb789535936b2203c3ebb3e8c19e4058326c...8966b291a649d3a262d1b714aef02c6d9d3ff402)


### [console](https://github.com/openshift/console/tree/eb38ce3356357e05284c5d3d83563a3e0e2f59c8)

* [OCPBUGS-17375](https://issues.redhat.com/browse/OCPBUGS-17375): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13071](https://github.com/openshift/console/pull/13071)
* [OCPBUGS-15562](https://issues.redhat.com/browse/OCPBUGS-15562): only copy workload annotations to debug pod [#12956](https://github.com/openshift/console/pull/12956)
* [OCPBUGS-15532](https://issues.redhat.com/browse/OCPBUGS-15532): visiting Configurations page returns error Cannot read… [#12953](https://github.com/openshift/console/pull/12953)
* [OCPBUGS-14004](https://issues.redhat.com/browse/OCPBUGS-14004): use PipelineRun template from 'pipelines-as-code-pipelinerun-go' configMap for Go runtime [#12845](https://github.com/openshift/console/pull/12845)
* [OCPBUGS-14413](https://issues.redhat.com/browse/OCPBUGS-14413): Modified git import flow module to handle create button enable-disable issue [#12874](https://github.com/openshift/console/pull/12874)
* [OCPBUGS-13214](https://issues.redhat.com/browse/OCPBUGS-13214): the name of the object (imagestream-name) does not match the name on the URL (deployment_name) [#12835](https://github.com/openshift/console/pull/12835)
* [OCPBUGS-12284](https://issues.redhat.com/browse/OCPBUGS-12284): Fix to use and set correct secretReference for build-config triggers [#12762](https://github.com/openshift/console/pull/12762)
* [OCPBUGS-13864](https://issues.redhat.com/browse/OCPBUGS-13864): delete associated pipeline, triggertemplate and eventlistener when deleting app [#12837](https://github.com/openshift/console/pull/12837)
* [OCPBUGS-13730](https://issues.redhat.com/browse/OCPBUGS-13730): Show type of sample on the samples view [#12826](https://github.com/openshift/console/pull/12826)
* [OCPBUGS-13746](https://issues.redhat.com/browse/OCPBUGS-13746): PipelineRun templates must be fetched from OpenShift namespace [#12827](https://github.com/openshift/console/pull/12827)
* [OCPBUGS-12279](https://issues.redhat.com/browse/OCPBUGS-12279): Do not show builder ImageStreams without `sampleRepo` as samples [#12759](https://github.com/openshift/console/pull/12759)
* [OCPBUGS-12959](https://issues.redhat.com/browse/OCPBUGS-12959): update the default pipelineRun template name [#12790](https://github.com/openshift/console/pull/12790)
* [OCPBUGS-12231](https://issues.redhat.com/browse/OCPBUGS-12231): Get the Event type value from the latest PLR of the Repository [#12749](https://github.com/openshift/console/pull/12749)
* [OCPBUGS-10708](https://issues.redhat.com/browse/OCPBUGS-10708): delete application should delete all part-of resources [#12772](https://github.com/openshift/console/pull/12772)
* [OCPBUGS-13012](https://issues.redhat.com/browse/OCPBUGS-13012): Show Tag label and tag name if tag is detected in repository PipelineRun list and details page [#12793](https://github.com/openshift/console/pull/12793)
* [OCPBUGS-10613](https://issues.redhat.com/browse/OCPBUGS-10613): add subject kind dropdown in the project access form [#12663](https://github.com/openshift/console/pull/12663)
* [OCPBUGS-11580](https://issues.redhat.com/browse/OCPBUGS-11580): In DeploymentConfig both the Form view and Yaml view are not in sync [#12714](https://github.com/openshift/console/pull/12714)
* [OCPBUGS-6984](https://issues.redhat.com/browse/OCPBUGS-6984): Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered [#12523](https://github.com/openshift/console/pull/12523)
* [OCPBUGS-7949](https://issues.redhat.com/browse/OCPBUGS-7949): Webhook Secret (1 of 2) is not removed when Knative Service is deleted [#12602](https://github.com/openshift/console/pull/12602)
* [OCPBUGS-6954](https://issues.redhat.com/browse/OCPBUGS-6954): Fix to show correct help texts for each git repo status error code [#12518](https://github.com/openshift/console/pull/12518)
* [OCPBUGS-7764](https://issues.redhat.com/browse/OCPBUGS-7764): Fix crash when pinnedResources is null [#12581](https://github.com/openshift/console/pull/12581)
* [OCPBUGS-2916](https://issues.redhat.com/browse/OCPBUGS-2916): Storage -> PVC -> upload data, does not support source reference [#12221](https://github.com/openshift/console/pull/12221)
* [OCPBUGS-6687](https://issues.redhat.com/browse/OCPBUGS-6687): Hide silent switch for alerting rule if no associated alerts are present in devconsole [#12479](https://github.com/openshift/console/pull/12479)
* [OCPBUGS-2844](https://issues.redhat.com/browse/OCPBUGS-2844): [OKD/nanokube] Fix NPE when project or build status is not defined [#12207](https://github.com/openshift/console/pull/12207)
* [OCPBUGS-12243](https://issues.redhat.com/browse/OCPBUGS-12243): disable operator-install-single-namespace.spec.ts to solve CI issues [#12751](https://github.com/openshift/console/pull/12751)
* [OCPBUGS-7950](https://issues.redhat.com/browse/OCPBUGS-7950): Repositories list does not show the running pipelinerun as last pipelinerun [#12603](https://github.com/openshift/console/pull/12603)
* [OCPBUGS-7494](https://issues.redhat.com/browse/OCPBUGS-7494): fix broken pipeline secret [#12569](https://github.com/openshift/console/pull/12569)
* [OCPBUGS-7789](https://issues.redhat.com/browse/OCPBUGS-7789): [4.11.z] Fix kubevirt-console tests [#12325](https://github.com/openshift/console/pull/12325)
* [OCPBUGS-7539](https://issues.redhat.com/browse/OCPBUGS-7539): Fix rerender loop/crash when bindable-kinds is found but has no status [#12570](https://github.com/openshift/console/pull/12570)
* [OCPBUGS-7043](https://issues.redhat.com/browse/OCPBUGS-7043): Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC [#12532](https://github.com/openshift/console/pull/12532)
* [OCPBUGS-7127](https://issues.redhat.com/browse/OCPBUGS-7127): Editing Pipeline in the ocp console should show correct information [#12540](https://github.com/openshift/console/pull/12540)
* [OCPBUGS-6879](https://issues.redhat.com/browse/OCPBUGS-6879): Remove `refs-heads` from the branch name for Repository pipelineRun row [#12509](https://github.com/openshift/console/pull/12509)
* [OCPBUGS-7069](https://issues.redhat.com/browse/OCPBUGS-7069): PipelineRun task status overlaps status text [#12534](https://github.com/openshift/console/pull/12534)
* [OCPBUGS-6492](https://issues.redhat.com/browse/OCPBUGS-6492): Add RBAC check on Create a Project link in all-namespaces pages [#12514](https://github.com/openshift/console/pull/12514)
* [OCPBUGS-6989](https://issues.redhat.com/browse/OCPBUGS-6989): Don't proxy CORS response headers [#12524](https://github.com/openshift/console/pull/12524)
* [OCPBUGS-5459](https://issues.redhat.com/browse/OCPBUGS-5459): Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) [#12417](https://github.com/openshift/console/pull/12417)
* [OCPBUGS-6689](https://issues.redhat.com/browse/OCPBUGS-6689): Fix NPE when displaying CSV with incomplete information [#12478](https://github.com/openshift/console/pull/12478)
* [OCPBUGS-1727](https://issues.redhat.com/browse/OCPBUGS-1727): Allow regular users to access debug pods [#12100](https://github.com/openshift/console/pull/12100)
* [OCPBUGS-5258](https://issues.redhat.com/browse/OCPBUGS-5258): add support for version v1beta1 for knativeServing and knativeEventing [#12403](https://github.com/openshift/console/pull/12403)
* [OCPBUGS-5418](https://issues.redhat.com/browse/OCPBUGS-5418): Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) [#12413](https://github.com/openshift/console/pull/12413)
* [OCPBUGS-4786](https://issues.redhat.com/browse/OCPBUGS-4786): Fix for initial showing of topology contents [#12311](https://github.com/openshift/console/pull/12311)
* [OCPBUGS-5206](https://issues.redhat.com/browse/OCPBUGS-5206): Pan nodes into view if all nodes are not visible on load [#12398](https://github.com/openshift/console/pull/12398)
* [OCPBUGS-2443](https://issues.redhat.com/browse/OCPBUGS-2443): Monitoring: Fix help popovers [#12173](https://github.com/openshift/console/pull/12173)
* [OCPBUGS-2716](https://issues.redhat.com/browse/OCPBUGS-2716): Update dependencies to the registry library and devfile parser [#12186](https://github.com/openshift/console/pull/12186)
* [OCPBUGS-3300](https://issues.redhat.com/browse/OCPBUGS-3300): check that user can patch console operator config in s… [#12240](https://github.com/openshift/console/pull/12240)
* [OCPBUGS-2447](https://issues.redhat.com/browse/OCPBUGS-2447): Add checks for pods in hpaPodRingLabel [#12174](https://github.com/openshift/console/pull/12174)
* [OCPBUGS-1790](https://issues.redhat.com/browse/OCPBUGS-1790): Use Alertmanager services for user-defined alerts from config [#12104](https://github.com/openshift/console/pull/12104)
* [OCPBUGS-2077](https://issues.redhat.com/browse/OCPBUGS-2077): Find latest pipeline run without firehose selector [#12144](https://github.com/openshift/console/pull/12144)
* [OCPBUGS-2515](https://issues.redhat.com/browse/OCPBUGS-2515): Change annotation to be used for fake helm repositories [#12182](https://github.com/openshift/console/pull/12182)
* [OCPBUGS-2014](https://issues.redhat.com/browse/OCPBUGS-2014): Use local test data to mock a devfile registry [#12137](https://github.com/openshift/console/pull/12137)
* [OCPBUGS-2451](https://issues.redhat.com/browse/OCPBUGS-2451): updates test id for 3scale [#12175](https://github.com/openshift/console/pull/12175)
* [OCPBUGS-1984](https://issues.redhat.com/browse/OCPBUGS-1984): fix helm version dropdown entries [#12135](https://github.com/openshift/console/pull/12135)
* [OCPBUGS-526](https://issues.redhat.com/browse/OCPBUGS-526): improve bug report links [#11965](https://github.com/openshift/console/pull/11965)
* [OCPBUGS-1974](https://issues.redhat.com/browse/OCPBUGS-1974): Use displayname for PHCR in the catalog page [#12130](https://github.com/openshift/console/pull/12130)
* [Full changelog](https://github.com/openshift/console/compare/b53f645a1651dce936b536ff32ffcb012e71040e...eb38ce3356357e05284c5d3d83563a3e0e2f59c8)


### [console-operator](https://github.com/openshift/console-operator/tree/3fa423d57486cea98dd833d30321e48e6a6556dd)

* [OCPBUGS-11343](https://issues.redhat.com/browse/OCPBUGS-11343): Distinguish between route conditions and remove the old ones [#745](https://github.com/openshift/console-operator/pull/745)
* [OCPBUGS-11969](https://issues.redhat.com/browse/OCPBUGS-11969): Changing  field on any of routes in the openshift-console namespace wont trigger sync loop [#753](https://github.com/openshift/console-operator/pull/753)
* [OCPBUGS-5518](https://issues.redhat.com/browse/OCPBUGS-5518): Deleting downloads deployment should not fail if already deleted [#715](https://github.com/openshift/console-operator/pull/715)
* [Bug 1770297](https://bugzilla.redhat.com/show_bug.cgi?id=1770297): State that odo is comunity supported [#700](https://github.com/openshift/console-operator/pull/700)
* [OCPBUGS-1790](https://issues.redhat.com/browse/OCPBUGS-1790): Retrieve user-defined Alertmanager services from shared configmap [#685](https://github.com/openshift/console-operator/pull/685)
* [Full changelog](https://github.com/openshift/console-operator/compare/37891717014775f049d5bf8e2e9206c1ff5d0fa1...3fa423d57486cea98dd833d30321e48e6a6556dd)


### [coredns](https://github.com/openshift/coredns/tree/227d72792347fcec2e2f1c14a44ea7eee4f97054)

* [OCPBUGS-2901](https://issues.redhat.com/browse/OCPBUGS-2901): Remove bufsize hardcoding to 2048 on cache upstream refreshes. [#79](https://github.com/openshift/coredns/pull/79)
* [Full changelog](https://github.com/openshift/coredns/compare/7fe212f3354bf70d16e7327029e4ad819e326cfd...227d72792347fcec2e2f1c14a44ea7eee4f97054)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/587614588aa6de7fd4a9a7d0e5e482ef2366d6af)

* [OCPBUGS-6684](https://issues.redhat.com/browse/OCPBUGS-6684): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 [#176](https://github.com/openshift/cloud-provider-openstack/pull/176)
* [OCPBUGS-6046](https://issues.redhat.com/browse/OCPBUGS-6046): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.24 into release-4.11 [#166](https://github.com/openshift/cloud-provider-openstack/pull/166)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/246ae15ed9faaffbc909271f5c119c5a25159425...587614588aa6de7fd4a9a7d0e5e482ef2366d6af)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/768d19934cc4514dadcd5e34ef7c5b83d874626a)

* [OCPBUGS-8067](https://issues.redhat.com/browse/OCPBUGS-8067): Fix SCC admission failure race during initial deployment [#188](https://github.com/openshift/csi-driver-manila-operator/pull/188)
* [OCPBUGS-10605](https://issues.redhat.com/browse/OCPBUGS-10605): Bump go.mongodb.org/mongo-driver to v1.5.1 [#177](https://github.com/openshift/csi-driver-manila-operator/pull/177)
* [OCPBUGS-7278](https://issues.redhat.com/browse/OCPBUGS-7278): Address CVE-2022-41717 [#168](https://github.com/openshift/csi-driver-manila-operator/pull/168)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/12cb253a2a490f6bc12993ff5f63f2598a1ba18a...768d19934cc4514dadcd5e34ef7c5b83d874626a)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/fb1ba70e085ed74fd278063f2115b37e1b4c1623)

* [OCPBUGS-13820](https://issues.redhat.com/browse/OCPBUGS-13820): Bump gRPC from 1.38.0 to 1.49.0 [#42](https://github.com/openshift/csi-livenessprobe/pull/42)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/7319607cea791ab692ad332445cec670e6dcd876...fb1ba70e085ed74fd278063f2115b37e1b4c1623)


### [docker-builder](https://github.com/openshift/builder/tree/d9f5ca071850c78c909fda6303e1fc18ec4d6da4)

* [OCPBUGS-15645](https://issues.redhat.com/browse/OCPBUGS-15645): Add the git-lfs package [#354](https://github.com/openshift/builder/pull/354)
* [OCPBUGS-11401](https://issues.redhat.com/browse/OCPBUGS-11401): manage-dockerfile: use the original form of HEALTHCHECK [#339](https://github.com/openshift/builder/pull/339)
* [Full changelog](https://github.com/openshift/builder/compare/09e95c1c65eba1323f5d34ebefe6eb2609b18e11...d9f5ca071850c78c909fda6303e1fc18ec4d6da4)


### [docker-registry](https://github.com/openshift/image-registry/tree/65244a5d0584c204ab4e488880362b9446e832b7)

* [OCPBUGS-11366](https://issues.redhat.com/browse/OCPBUGS-11366): bump docker-distribution [#367](https://github.com/openshift/image-registry/pull/367)
* [OCPBUGS-9921](https://issues.redhat.com/browse/OCPBUGS-9921): bump aws-sdk-go [#364](https://github.com/openshift/image-registry/pull/364)
* [OCPBUGS-1847](https://issues.redhat.com/browse/OCPBUGS-1847): bump aws-go-sdk, adding support for me-central-1 [#349](https://github.com/openshift/image-registry/pull/349)
* [Full changelog](https://github.com/openshift/image-registry/compare/33b6d8deec250dcbc1cd1faed11162c3dcd4a116...65244a5d0584c204ab4e488880362b9446e832b7)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/28589b0a149df1fa10b2759fff13b1885d0dfa14)

* Adding rpm-build to the Dockerfile (#119) [#119](https://github.com/openshift/driver-toolkit/pull/119)
* Adding kernel-rpm-macros to the Dockerfile. (#108) [#108](https://github.com/openshift/driver-toolkit/pull/108)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/4e799c0435be94caddd0f19b8cb331f336812a3d...28589b0a149df1fa10b2759fff13b1885d0dfa14)


### [etcd](https://github.com/openshift/etcd/tree/c637f9b3f3fb9828ef086a5e28ea169183be6d2d)

* Update owners [#186](https://github.com/openshift/etcd/pull/186)
* Updating ose-etcd images to be consistent with ART [#158](https://github.com/openshift/etcd/pull/158)
* [OCPBUGS-5876](https://issues.redhat.com/browse/OCPBUGS-5876): UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… [#178](https://github.com/openshift/etcd/pull/178)
* [OCPBUGS-3101](https://issues.redhat.com/browse/OCPBUGS-3101): Rebase openshift/etcd 4.11 onto v3.5.6 [#170](https://github.com/openshift/etcd/pull/170)
* [OCPBUGS-947](https://issues.redhat.com/browse/OCPBUGS-947): Rebase openshift/etcd 4.11 onto 3.5.5 [#155](https://github.com/openshift/etcd/pull/155)
* [Full changelog](https://github.com/openshift/etcd/compare/80cc14ea9ec9dd81c1fe45f7d159de0274d034e9...c637f9b3f3fb9828ef086a5e28ea169183be6d2d)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/9363d87de998726d9f8081463f8b2bd9267ad71d)

* [OCPBUGS-4579](https://issues.redhat.com/browse/OCPBUGS-4579): refactor restartPolicyToBool function [#30](https://github.com/openshift/machine-api-provider-gcp/pull/30)
* [OCPBUGS-4532](https://issues.redhat.com/browse/OCPBUGS-4532): Set sync period for Machine controller [#27](https://github.com/openshift/machine-api-provider-gcp/pull/27)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/17a3a9f5bc5344472e328db58338af34415ffd35...9363d87de998726d9f8081463f8b2bd9267ad71d)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/662d6d5985b3fcfc10270c2ede87c8cd1eb38573)

* [OCPBUGS-11000](https://issues.redhat.com/browse/OCPBUGS-11000): UPSTREAM: 988: Simplify node backoff logic [#34](https://github.com/openshift/gcp-pd-csi-driver/pull/34)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/f9d7fdce42b5ae816d4e8af7e47422b4588828a8...662d6d5985b3fcfc10270c2ede87c8cd1eb38573)


### [haproxy-router](https://github.com/openshift/router/tree/2cf11b1c3b54d946c7270b9b34b90dc484ba2b7b)

* [OCPBUGS-14456](https://issues.redhat.com/browse/OCPBUGS-14456), [OCPBUGS-14457](https://issues.redhat.com/browse/OCPBUGS-14457): Handle mTLS CRLs, and fix accidental CRL duplication [#492](https://github.com/openshift/router/pull/492)
* [Full changelog](https://github.com/openshift/router/compare/601ba575b7fadc1e05e7b4e2f35a660859db9788...2cf11b1c3b54d946c7270b9b34b90dc484ba2b7b)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/a9da4a82a7d9eca9d248d68f7b1265218b449db1)

* [OCPBUGS-8736](https://issues.redhat.com/browse/OCPBUGS-8736): UPSTREAM: <drop>: bump apiserver-library-go [#1627](https://github.com/openshift/kubernetes/pull/1627)
* [OCPBUGS-15361](https://issues.redhat.com/browse/OCPBUGS-15361): Bump to k8s 1.24.15 [#1607](https://github.com/openshift/kubernetes/pull/1607)
* [OCPBUGS-14746](https://issues.redhat.com/browse/OCPBUGS-14746): [release-4.11] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1606](https://github.com/openshift/kubernetes/pull/1606)
* [OCPBUGS-13166](https://issues.redhat.com/browse/OCPBUGS-13166): Bump to k8s 1.24.14 [#1588](https://github.com/openshift/kubernetes/pull/1588)
* [OCPBUGS-11314](https://issues.redhat.com/browse/OCPBUGS-11314): UPSTREAM: <carry>: Force using the go tooling from the system [#1536](https://github.com/openshift/kubernetes/pull/1536)
* [OCPBUGS-11314](https://issues.redhat.com/browse/OCPBUGS-11314): Bump to k8s 1.24.12 [#1529](https://github.com/openshift/kubernetes/pull/1529)
* [OCPBUGS-10215](https://issues.redhat.com/browse/OCPBUGS-10215): Fix mounted volume expansion tests [#1509](https://github.com/openshift/kubernetes/pull/1509)
* [OCPBUGS-7079](https://issues.redhat.com/browse/OCPBUGS-7079): Bump to k8s 1.24.11 [#1500](https://github.com/openshift/kubernetes/pull/1500)
* [OCPBUGS-6683](https://issues.redhat.com/browse/OCPBUGS-6683): add message about possibly working with restricted SCC [#1459](https://github.com/openshift/kubernetes/pull/1459)
* [Bug 2117679](https://bugzilla.redhat.com/show_bug.cgi?id=2117679): UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller [#1343](https://github.com/openshift/kubernetes/pull/1343)
* [OCPBUGS-1991](https://issues.redhat.com/browse/OCPBUGS-1991): UPSTREAM: 110939: don't quota events.k8s.io events by default [#1379](https://github.com/openshift/kubernetes/pull/1379)
* [OCPBUGS-3174](https://issues.redhat.com/browse/OCPBUGS-3174): UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines [#1408](https://github.com/openshift/kubernetes/pull/1408)
* [Bug 2099800](https://bugzilla.redhat.com/show_bug.cgi?id=2099800): bump to k8s 1.24.6 [#1381](https://github.com/openshift/kubernetes/pull/1381)
* [Full changelog](https://github.com/openshift/kubernetes/compare/dc5a2fd8877ba8206b9e9e3727508233ef1bbe55...a9da4a82a7d9eca9d248d68f7b1265218b449db1)


### [hypershift](https://github.com/openshift/hypershift/tree/da0a576c1cdd3f3d4bbd7b3540bf6ac843fa4483)

* [OCPBUGS-11608](https://issues.redhat.com/browse/OCPBUGS-11608): properly reconcile with user specified changes for in proxy configuration [#2396](https://github.com/openshift/hypershift/pull/2396)
* install: add flag to wait for HyperShift operator rollout [#2370](https://github.com/openshift/hypershift/pull/2370)
* OCPBUGS-10823 ensure well known public domains do not get proxied on image imports [#2352](https://github.com/openshift/hypershift/pull/2352)
* cherry-pick #2006 [#2028](https://github.com/openshift/hypershift/pull/2028)
* Bug HOSTEDCP-604: Don't store machine payload in token secret for replace node pools (#1873) [#1880](https://github.com/openshift/hypershift/pull/1880)
* Add missing rbac for authentication reader [#1822](https://github.com/openshift/hypershift/pull/1822)
* update OLM catalogs to 4.11 [#1786](https://github.com/openshift/hypershift/pull/1786)
* [Full changelog](https://github.com/openshift/hypershift/compare/28abbc4660ee9879d19128632e8aa8cd39153b65...da0a576c1cdd3f3d4bbd7b3540bf6ac843fa4483)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/65f0da2df14ac53b24145d1082b73fea7c0992cc)

* Updating ose-ibm-vpc-block-csi-driver images to be consistent with ART [#15](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/15)
* UPSTREAM: 93: bump golint for go 1.18 [#28](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/28)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/7f8bfe603b003451e370e81502c508f382cf3f94...65f0da2df14ac53b24145d1082b73fea7c0992cc)


### [insights-operator](https://github.com/openshift/insights-operator/tree/3274db13bef3744fcf69fd08187e72a6fd9cf671)

* [OCPBUGS-15459](https://issues.redhat.com/browse/OCPBUGS-15459): gather PDBs only from openshift namespaces (#804) (#806) [#804](https://github.com/openshift/insights-operator/pull/804)
* [OCPBUGS-15446](https://issues.redhat.com/browse/OCPBUGS-15446): extend configmap gatherer to get gateway-mode-config (#788) (#791) (#802) [#788](https://github.com/openshift/insights-operator/pull/788)
* [OCPBUGS-7872](https://issues.redhat.com/browse/OCPBUGS-7872): Collect info about monitoring pods pv (#773) [#773](https://github.com/openshift/insights-operator/pull/773)
* [OCPBUGS-11818](https://issues.redhat.com/browse/OCPBUGS-11818): update the cluster transfer interval to 12h (#765) (#766) [#765](https://github.com/openshift/insights-operator/pull/765)
* [OCPBUGS-6832](https://issues.redhat.com/browse/OCPBUGS-6832): feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) (#739) [#726](https://github.com/openshift/insights-operator/pull/726)
* [OCPBUGS-6783](https://issues.redhat.com/browse/OCPBUGS-6783): Create gatherer for gathering machines. (#737) [#737](https://github.com/openshift/insights-operator/pull/737)
* [OCPBUGS-3380](https://issues.redhat.com/browse/OCPBUGS-3380): fix storage/ceph path structure (#698) [#698](https://github.com/openshift/insights-operator/pull/698)
* [OCPBUGS-6025](https://issues.redhat.com/browse/OCPBUGS-6025): operators gatherer - handle ingresscontroller relatedObject & simplify (#719) (#722) [#719](https://github.com/openshift/insights-operator/pull/719)
* [OCPBUGS-5349](https://issues.redhat.com/browse/OCPBUGS-5349): do not periodically update Available clusteroperator co… (#718) [#718](https://github.com/openshift/insights-operator/pull/718)
* [OCPBUGS-2346](https://issues.redhat.com/browse/OCPBUGS-2346): refactor(dvo_metrics): remove name and namespace from dvo metrics (#685) (#689) [#685](https://github.com/openshift/insights-operator/pull/685)
* [Full changelog](https://github.com/openshift/insights-operator/compare/6c013e7de603b9cbce7e12be83011274dcf54b90...3274db13bef3744fcf69fd08187e72a6fd9cf671)


### [ironic](https://github.com/openshift/ironic-image/tree/240777d34c88ec9a6780510307ced3d4ac96b1ba)

* [OCPBUGS-13585](https://issues.redhat.com/browse/OCPBUGS-13585): Add python-flask dependency [#381](https://github.com/openshift/ironic-image/pull/381)
* [OCPBUGS-14654](https://issues.redhat.com/browse/OCPBUGS-14654): Include fix to OCPBUGS-13335 in OCP 4.11. [#380](https://github.com/openshift/ironic-image/pull/380)
* [OCPBUGS-13645](https://issues.redhat.com/browse/OCPBUGS-13645): Bump python-sushy [#369](https://github.com/openshift/ironic-image/pull/369)
* [OCPBUGS-7565](https://issues.redhat.com/browse/OCPBUGS-7565): Adding dep on python3-werkzeug >= 2.0.3-4 [#356](https://github.com/openshift/ironic-image/pull/356)
* Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image [#344](https://github.com/openshift/ironic-image/pull/344)
* [OCPBUGS-4908](https://issues.redhat.com/browse/OCPBUGS-4908): Update packages versions with latest available [#336](https://github.com/openshift/ironic-image/pull/336)
* [OCPBUGS-5145](https://issues.redhat.com/browse/OCPBUGS-5145): Configure Ironic iLO driver to use web server [#342](https://github.com/openshift/ironic-image/pull/342)
* [OCPBUGS-3674](https://issues.redhat.com/browse/OCPBUGS-3674): Don't save OS_ prefixed variables [#318](https://github.com/openshift/ironic-image/pull/318)
* Bug OCPBUGS-3478: Improve resiliency of eTag handling [#314](https://github.com/openshift/ironic-image/pull/314)
* [OCPBUGS-4410](https://issues.redhat.com/browse/OCPBUGS-4410): Remove RDO distribution configuration (finally fixes #46) [#328](https://github.com/openshift/ironic-image/pull/328)
* [OCPBUGS-1972](https://issues.redhat.com/browse/OCPBUGS-1972): Removed ServerName from VirtualHost Directives [#306](https://github.com/openshift/ironic-image/pull/306)
* [OCPBUGS-2011](https://issues.redhat.com/browse/OCPBUGS-2011): Backport improvements to iDRAC steps to OCP 4.11 [#302](https://github.com/openshift/ironic-image/pull/302)
* [Full changelog](https://github.com/openshift/ironic-image/compare/97530a75c08f2b5b80edb875f461ff3cb0ded70e...240777d34c88ec9a6780510307ced3d4ac96b1ba)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/a6ddbab2189b3f2e74d8e3f61662a5d405e5c30a)

* [OCPBUGS-11438](https://issues.redhat.com/browse/OCPBUGS-11438): Adding dep on python3-werkzeug >= 2.0.3-4 [#74](https://github.com/openshift/ironic-agent-image/pull/74)
* [OCPBUGS-5099](https://issues.redhat.com/browse/OCPBUGS-5099): make coreos-installer output available in the logs [#67](https://github.com/openshift/ironic-agent-image/pull/67)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/501911577eed7db671c45b2c8fdee43a392935ba...a6ddbab2189b3f2e74d8e3f61662a5d405e5c30a)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/8c8af7bec058936780626d6b5d1b44f15b88791c)

* [OCPBUGS-14564](https://issues.redhat.com/browse/OCPBUGS-14564): Flush addresses on provisioning interface with global scope only [#38](https://github.com/openshift/ironic-static-ip-manager/pull/38)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/84a378e035d863ab3c4ee01d2f7006e548603de3...8c8af7bec058936780626d6b5d1b44f15b88791c)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/d3a01587650c19be9c6b62b6ab945262f4efa2a5)

* [OCPBUGS-14305](https://issues.redhat.com/browse/OCPBUGS-14305): fix possible concurrent map read/write [#552](https://github.com/openshift/sdn/pull/552)
* [OCPBUGS-13917](https://issues.redhat.com/browse/OCPBUGS-13917): save and delete the old egress network policy [#544](https://github.com/openshift/sdn/pull/544)
* [OCPBUGS-13902](https://issues.redhat.com/browse/OCPBUGS-13902): CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [openshift-4] [#543](https://github.com/openshift/sdn/pull/543)
* [OCPBUGS-10853](https://issues.redhat.com/browse/OCPBUGS-10853): Fix race in Egress IP Tracker start [#522](https://github.com/openshift/sdn/pull/522)
* [OCPBUGS-8399](https://issues.redhat.com/browse/OCPBUGS-8399): Initialize egress node monitoring struct with previous reachability status [#513](https://github.com/openshift/sdn/pull/513)
* [OCPBUGS-7515](https://issues.redhat.com/browse/OCPBUGS-7515): Handle race condition to setup default vnid flows [#506](https://github.com/openshift/sdn/pull/506)
* [OCPBUGS-5926](https://issues.redhat.com/browse/OCPBUGS-5926): Add node egress IP assignment resync [#492](https://github.com/openshift/sdn/pull/492)
* [OCPBUGS-4607](https://issues.redhat.com/browse/OCPBUGS-4607): pass ResourceVersion:0 for kube List() calls [#479](https://github.com/openshift/sdn/pull/479)
* [OCPBUGS-998](https://issues.redhat.com/browse/OCPBUGS-998): [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade [#488](https://github.com/openshift/sdn/pull/488)
* [OCPBUGS-2105](https://issues.redhat.com/browse/OCPBUGS-2105): fix network policy egress [#464](https://github.com/openshift/sdn/pull/464)
* Bug OCPBUGS-4386: Rebase against cherry-pick of kubernetes#107413 [#477](https://github.com/openshift/sdn/pull/477)
* [OCPBUGS-668](https://issues.redhat.com/browse/OCPBUGS-668): Fix DNS endpoint hack to prefer local instead of forcing it [#466](https://github.com/openshift/sdn/pull/466)
* [Full changelog](https://github.com/openshift/sdn/compare/6e805d5017c7a75c3800d72eea77b0564d21afbc...d3a01587650c19be9c6b62b6ab945262f4efa2a5)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/8dc2dc0b897ff81a9dee8c1288c943dbb8ad5cce)

* [OCPBUGS-4087](https://issues.redhat.com/browse/OCPBUGS-4087): cherry-pick, do not expose ingress path metric when service is nil [#85](https://github.com/openshift/kube-state-metrics/pull/85)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/896d0003be0a7875110021b2e0fb71d476901eec...8dc2dc0b897ff81a9dee8c1288c943dbb8ad5cce)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/c7326997276f4fb2bf78d0454d076795c2cfb645)

* [OCPBUGS-14931](https://issues.redhat.com/browse/OCPBUGS-14931): KuryrPort cleanup: Fix issue of subport not found [#733](https://github.com/openshift/kuryr-kubernetes/pull/733)
* Bug OCPBUGS-13428: Fix ValueError when Pod has no IP address [#727](https://github.com/openshift/kuryr-kubernetes/pull/727)
* [OCPBUGS-12840](https://issues.redhat.com/browse/OCPBUGS-12840): Fix VIF revert on KuryrPort status update error [#725](https://github.com/openshift/kuryr-kubernetes/pull/725)
* Bug OCPBUGS-1713: Cleanup KuryrPort when Pod is missing [#694](https://github.com/openshift/kuryr-kubernetes/pull/694)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/5bf2a61c6539c6a2043388379d023654e18091b9...c7326997276f4fb2bf78d0454d076795c2cfb645)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/aba3049a893c4fd45eee97fc6cf069452f481490)

* [OCPBUGS-10719](https://issues.redhat.com/browse/OCPBUGS-10719): [release-4.11] - manual cp #1057 - machines stuck in provisioned or provisioning [#1141](https://github.com/openshift/machine-api-operator/pull/1141)
* [OCPBUGS-11326](https://issues.redhat.com/browse/OCPBUGS-11326): Fix empty component version [#1133](https://github.com/openshift/machine-api-operator/pull/1133)
* [OCPBUGS-10901](https://issues.redhat.com/browse/OCPBUGS-10901): Block machine deletion if extra disks are attached [#1131](https://github.com/openshift/machine-api-operator/pull/1131)
* [OCPBUGS-8311](https://issues.redhat.com/browse/OCPBUGS-8311): Short circuit misfiring [#1124](https://github.com/openshift/machine-api-operator/pull/1124)
* [OCPBUGS-8257](https://issues.redhat.com/browse/OCPBUGS-8257): Append annotations from machine template spec to the node [#1123](https://github.com/openshift/machine-api-operator/pull/1123)
* [OCPBUGS-536](https://issues.redhat.com/browse/OCPBUGS-536): vSphere - enable steal time accounting [#1081](https://github.com/openshift/machine-api-operator/pull/1081)
* [OCPBUGS-955](https://issues.redhat.com/browse/OCPBUGS-955): Change "create" sequence with powering on the vm after clone [#1064](https://github.com/openshift/machine-api-operator/pull/1064)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/88e8c7606b4226ec67f478a0cdfd64cba045371d...aba3049a893c4fd45eee97fc6cf069452f481490)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/8f952d7fd1397bef3b488eb53e630291ef180563)

* [OCPBUGS-11556](https://issues.redhat.com/browse/OCPBUGS-11556): Prevent possible split-brain scenario with keepalived unicast [#3667](https://github.com/openshift/machine-config-operator/pull/3667)
* [OCPBUGS-11283](https://issues.redhat.com/browse/OCPBUGS-11283): Wrap podman commands in a while loop [#3657](https://github.com/openshift/machine-config-operator/pull/3657)
* [OCPBUGS-9986](https://issues.redhat.com/browse/OCPBUGS-9986): configure-ovs: fix mtu-migration cleanup [#3607](https://github.com/openshift/machine-config-operator/pull/3607)
* [OCPBUGS-10425](https://issues.redhat.com/browse/OCPBUGS-10425): Remove hard requirement for the afterburn from early-running aws-related services [#3615](https://github.com/openshift/machine-config-operator/pull/3615)
* [OCPBUGS-8260](https://issues.redhat.com/browse/OCPBUGS-8260): [release-4.11] backport cleanupDuplicateMC [#3577](https://github.com/openshift/machine-config-operator/pull/3577)
* [OCPBUGS-6002](https://issues.redhat.com/browse/OCPBUGS-6002): There are not enough logs in case "oc extract" is stuck in mco first boot in mco first boot [#3497](https://github.com/openshift/machine-config-operator/pull/3497)
* [OCPBUGS-5694](https://issues.redhat.com/browse/OCPBUGS-5694): 4.11 - remove goutils from dependency tree [#3499](https://github.com/openshift/machine-config-operator/pull/3499)
* [OCPBUGS-3507](https://issues.redhat.com/browse/OCPBUGS-3507): On-prem: Ensure resolv-prepender respects NM dispatcher timeout [#3422](https://github.com/openshift/machine-config-operator/pull/3422)
* [OCPBUGS-6622](https://issues.redhat.com/browse/OCPBUGS-6622): controller: don't render new MC until base MCs update [#3511](https://github.com/openshift/machine-config-operator/pull/3511)
* [OCPBUGS-4945](https://issues.redhat.com/browse/OCPBUGS-4945): Do not allow empty system reserved values [#3459](https://github.com/openshift/machine-config-operator/pull/3459)
* [OCPBUGS-4099](https://issues.redhat.com/browse/OCPBUGS-4099): daemon: gate done state on uncordon completion [#3434](https://github.com/openshift/machine-config-operator/pull/3434)
* [OCPBUGS-3882](https://issues.redhat.com/browse/OCPBUGS-3882): Sync controllerconfig anyway if daemon sync fails [#3421](https://github.com/openshift/machine-config-operator/pull/3421)
* [OCPBUGS-3807](https://issues.redhat.com/browse/OCPBUGS-3807): configure-ovs: auto-connect ovs-if-phys0 with br-ex [#3419](https://github.com/openshift/machine-config-operator/pull/3419)
* [OCPBUGS-3756](https://issues.redhat.com/browse/OCPBUGS-3756): daemon: Stop setting I/O scheduler to bfq [#3418](https://github.com/openshift/machine-config-operator/pull/3418)
* [OCPBUGS-2730](https://issues.redhat.com/browse/OCPBUGS-2730): Add ephemeral storage to kubelet system reserved args [#3381](https://github.com/openshift/machine-config-operator/pull/3381)
* [OCPBUGS-2091](https://issues.redhat.com/browse/OCPBUGS-2091): [release-4.11] TRT-540: Add privileged label to infra namespaces [#3346](https://github.com/openshift/machine-config-operator/pull/3346)
* [OCPBUGS-1939](https://issues.redhat.com/browse/OCPBUGS-1939): Create a drop-in file for cri-o's add inheritable capabilities [#3352](https://github.com/openshift/machine-config-operator/pull/3352)
* [OCPBUGS-1099](https://issues.redhat.com/browse/OCPBUGS-1099): Make sure there is a search domain in resolv.conf [#3330](https://github.com/openshift/machine-config-operator/pull/3330)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b7aa1d499f15ce7d211d30a823acf83f47aabbe3...8f952d7fd1397bef3b488eb53e630291ef180563)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/e0e39797b92fe2faab4d674526d7673ac6b697a9)

* [OCPBUGS-5652](https://issues.redhat.com/browse/OCPBUGS-5652): Update dependencies and explicit go 1.18 usage [#77](https://github.com/openshift/image-customization-controller/pull/77)
* [OCPBUGS-3687](https://issues.redhat.com/browse/OCPBUGS-3687): use host IPC for the agent container [#70](https://github.com/openshift/image-customization-controller/pull/70)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/9d0dcba72dc5027b4557220dc1ba4d1dc2bf926c...e0e39797b92fe2faab4d674526d7673ac6b697a9)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/b8760649c6b2fea1fdb4d564cbf5ecf87c9c3af9)

* Updating ose-multus-admission-controller images to be consistent with ART [#63](https://github.com/openshift/multus-admission-controller/pull/63)
* [OCPBUGS-9784](https://issues.redhat.com/browse/OCPBUGS-9784): Client golang [backport 4.11] [#60](https://github.com/openshift/multus-admission-controller/pull/60)
* [OCPBUGS-6176](https://issues.redhat.com/browse/OCPBUGS-6176): Configure ignored namespaces into multus-admission-controller [#56](https://github.com/openshift/multus-admission-controller/pull/56)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/f38aae4ff7f595b8c8864a550271d7651491fa9c...b8760649c6b2fea1fdb4d564cbf5ecf87c9c3af9)


### [multus-cni](https://github.com/openshift/multus-cni/tree/67cf2973b0603df845471424fd24ef9c6bd271b4)

* Updating multus-cni images to be consistent with ART [#155](https://github.com/openshift/multus-cni/pull/155)
* [OCPBUGS-9863](https://issues.redhat.com/browse/OCPBUGS-9863): Multus sync to OCP 4.11 mar-21-2023 [#152](https://github.com/openshift/multus-cni/pull/152)
* [Full changelog](https://github.com/openshift/multus-cni/compare/3cc5a3acfd687808adc7c0b2acfc4b26bcfacabf...67cf2973b0603df845471424fd24ef9c6bd271b4)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/47c8f7b28edefd7105deb231b9c1ef021ee2879d)

* [OCPBUGS-13241](https://issues.redhat.com/browse/OCPBUGS-13241): Added trailing 0 to ipv6 ranges that end in ":" [Backport 4.11] [#132](https://github.com/openshift/whereabouts-cni/pull/132)
* [OCPBUGS-11067](https://issues.redhat.com/browse/OCPBUGS-11067): respect requested allocation range when exluding ranges [backport 4.11] [#124](https://github.com/openshift/whereabouts-cni/pull/124)
* [OCPBUGS-3942](https://issues.redhat.com/browse/OCPBUGS-3942): Excluded ranges bug (#282) [#104](https://github.com/openshift/whereabouts-cni/pull/104)
* [OCPBUGS-1658](https://issues.redhat.com/browse/OCPBUGS-1658): ip-reconciler Add all non default interfaces to Pod IP list [backport 4.11] [#97](https://github.com/openshift/whereabouts-cni/pull/97)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/9951259f26d7ed7ba81e6a05cba41891e6973edd...47c8f7b28edefd7105deb231b9c1ef021ee2879d)


### [must-gather](https://github.com/openshift/must-gather/tree/44f6adacb094952723f957d4d7d61043b6f2fe04)

* [OCPBUGS-4324](https://issues.redhat.com/browse/OCPBUGS-4324): backport PodNetworkConnectivityCheck gather script #334 [#338](https://github.com/openshift/must-gather/pull/338)
* [Full changelog](https://github.com/openshift/must-gather/compare/32bca4033d79326225d966d98641935927888428...44f6adacb094952723f957d4d7d61043b6f2fe04)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/beda9967304b0205f9bfb1371d50cd4c4de33e19)

* Update golang.org/x/text to 0.7.0 (#67) [#67](https://github.com/openshift/network-metrics-daemon/pull/67)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/9482ac9af2f5ff31d5ef237dba3db9b3f5697935...beda9967304b0205f9bfb1371d50cd4c4de33e19)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/c9c2dd15751d391a6a81ceee744db7b2d07a208b)

* [OCPBUGS-2140](https://issues.redhat.com/browse/OCPBUGS-2140): [release-4.11]  bump kube to 1.24.4 to fix group sync [#84](https://github.com/openshift/oauth-apiserver/pull/84)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/3ca701f31a43f04fb8854240bbc5439f4c49b3fc...c9c2dd15751d391a6a81ceee744db7b2d07a208b)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/cb3fce3248c4390a429ee80d42501f4b0912d24c)

* changes the OWNERS file (#647) [#647](https://github.com/openshift/oc-mirror/pull/647)
* fix: remove release architecture validation at the config level (#504) [#504](https://github.com/openshift/oc-mirror/pull/504)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/3c1c80ca6a5a22b5826c88897e7a9e5acd7c1a96...cb3fce3248c4390a429ee80d42501f4b0912d24c)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/35df5a026c69f864c3ca499718256f6b2592d811)

* [OCPBUGS-4340](https://issues.redhat.com/browse/OCPBUGS-4340): fix printer panic [#336](https://github.com/openshift/openshift-apiserver/pull/336)
* [OCPBUGS-2809](https://issues.redhat.com/browse/OCPBUGS-2809): Revert "projects: add rw mutex to auth cache" [#327](https://github.com/openshift/openshift-apiserver/pull/327)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/4b6f8748ac98304a3fbe2a87f518d50d3927f15f...35df5a026c69f864c3ca499718256f6b2592d811)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/df9f0367e66448b0e8736111e4d6c4f7d98eec4d)

* Bug OCPBUGS-4103: Add SecretHashAnnotation to node service [#99](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/ae4c45caf3f689d9797972ab133612e5cc030d90...df9f0367e66448b0e8736111e4d6c4f7d98eec4d)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/0446d771465fa6e03ea8ed24f1cea706d0d2b15e)

* [OCPBUGS-10954](https://issues.redhat.com/browse/OCPBUGS-10954): machineset_controller: Stop caching clouds credentials [#67](https://github.com/openshift/machine-api-provider-openstack/pull/67)
* [OCPBUGS-7322](https://issues.redhat.com/browse/OCPBUGS-7322): Address CVE-2022-41717 [#57](https://github.com/openshift/machine-api-provider-openstack/pull/57)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/eb7e497ff47739d9289063cb864436277c6f7bc0...0446d771465fa6e03ea8ed24f1cea706d0d2b15e)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/38f15dbc704ea4ec65565194f27779177b4f1886)

* [OCPBUGS-2626](https://issues.redhat.com/browse/OCPBUGS-2626): Ensure network defs without subnet follow noAllowedAddressPairs [#248](https://github.com/openshift/cluster-api-provider-openstack/pull/248)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/ee97013a91c956e505c972ace5a88164912bb007...38f15dbc704ea4ec65565194f27779177b4f1886)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c97e06cd58c68019b265c07abd324a4d6aa4b682)

* [OCPBUGS-16075](https://issues.redhat.com/browse/OCPBUGS-16075): fix dynamic conversion webhook [#536](https://github.com/openshift/operator-framework-olm/pull/536)
* Introduce DOWNSTREAM_OWNERS file [#542](https://github.com/openshift/operator-framework-olm/pull/542)
* [OCPBUGS-16126](https://issues.redhat.com/browse/OCPBUGS-16126): Catalog Pod Startup Probe Timeout [#509](https://github.com/openshift/operator-framework-olm/pull/509)
* Allow cpb to be statically compiled / exempt from FIPS compliance [#513](https://github.com/openshift/operator-framework-olm/pull/513)
* [OCPBUGS-12263](https://issues.redhat.com/browse/OCPBUGS-12263): cherry-pick pull request refactor FBC caching (#1051) f… [#482](https://github.com/openshift/operator-framework-olm/pull/482)
* [OCPBUGS-3876](https://issues.redhat.com/browse/OCPBUGS-3876): Order an operator CR's status.Component.Refs array (#2880) [#413](https://github.com/openshift/operator-framework-olm/pull/413)
* [OCPBUGS-4446](https://issues.redhat.com/browse/OCPBUGS-4446): fix service account token secret reference (#2862) [#416](https://github.com/openshift/operator-framework-olm/pull/416)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/60941887ec69e459e82398f5a523eac84b5b3996...c97e06cd58c68019b265c07abd324a4d6aa4b682)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/c7a65336f4a37e48429bd7119ff05ce21ef03eb8)

* [OCPBUGS-697](https://issues.redhat.com/browse/OCPBUGS-697): [release-4.11] Dockerfile.okd: include custom OperatorHub manifest [#485](https://github.com/operator-framework/operator-marketplace/pull/485)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/040c64e73192f7b03169a841fbcb661137b0d999...c7a65336f4a37e48429bd7119ff05ce21ef03eb8)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/d7b132e976da1e23ed533281b0c3002bbd2c1f4c)

* [OCPBUGS-16691](https://issues.redhat.com/browse/OCPBUGS-16691): ovnkube-master pod failed to reconnect to ovn db due to ssl expire [#1779](https://github.com/openshift/ovn-kubernetes/pull/1779)
* [OCPBUGS-15731](https://issues.redhat.com/browse/OCPBUGS-15731), [OCPBUGS-15745](https://issues.redhat.com/browse/OCPBUGS-15745): Improve syncNodes to remove stale data [#1734](https://github.com/openshift/ovn-kubernetes/pull/1734)
* [OCPBUGS-15876](https://issues.redhat.com/browse/OCPBUGS-15876): Remove non-existing functions test. [#1740](https://github.com/openshift/ovn-kubernetes/pull/1740)
* [OCPBUGS-16003](https://issues.redhat.com/browse/OCPBUGS-16003): Fix stale SNAT entries for completed pods [#1751](https://github.com/openshift/ovn-kubernetes/pull/1751)
* [OCPBUGS-12791](https://issues.redhat.com/browse/OCPBUGS-12791): : Delete equivalent ACLs when searching by predicate. [#1666](https://github.com/openshift/ovn-kubernetes/pull/1666)
* [OCPBUGS-11110](https://issues.redhat.com/browse/OCPBUGS-11110): [release-4.11] Batch potentially big transaction on egress firewall ACLs migration [#1629](https://github.com/openshift/ovn-kubernetes/pull/1629)
* [OCPBUGS-10734](https://issues.redhat.com/browse/OCPBUGS-10734): Bump OVN to 22.12 and turn off neighbour response in router options. [#1599](https://github.com/openshift/ovn-kubernetes/pull/1599)
* [OCPBUGS-10688](https://issues.redhat.com/browse/OCPBUGS-10688): Fix leak in service controller cache [#1598](https://github.com/openshift/ovn-kubernetes/pull/1598)
* [OCPBUGS-11035](https://issues.redhat.com/browse/OCPBUGS-11035): [release-4.11] Handle Completed pods deletion [#1616](https://github.com/openshift/ovn-kubernetes/pull/1616)
* [OCPBUGS-2303](https://issues.redhat.com/browse/OCPBUGS-2303): [4.11] Stale chassis are not removed [#1310](https://github.com/openshift/ovn-kubernetes/pull/1310)
* [OCPBUGS-10486](https://issues.redhat.com/browse/OCPBUGS-10486): [release-4.11] node: add node healthz server for cloud load balancers [#1594](https://github.com/openshift/ovn-kubernetes/pull/1594)
* [OCPBUGS-8510](https://issues.redhat.com/browse/OCPBUGS-8510): [release-4.11] Don't recreate clusterPGs and clusterRtrPGs unless needed [#1560](https://github.com/openshift/ovn-kubernetes/pull/1560)
* [OCPBUGS-7858](https://issues.redhat.com/browse/OCPBUGS-7858): [release-4.11] Delete stale egress ip snat entries by node [#1543](https://github.com/openshift/ovn-kubernetes/pull/1543)
* [OCPBUGS-6640](https://issues.redhat.com/browse/OCPBUGS-6640): Drop in-cluster traffic towards svcCIDR at wrong port [#1491](https://github.com/openshift/ovn-kubernetes/pull/1491)
* [OCPBUGS-7319](https://issues.redhat.com/browse/OCPBUGS-7319): Bump OVN to 22.09, enable session affinity timeout [#1522](https://github.com/openshift/ovn-kubernetes/pull/1522)
* [OCPBUGS-5245](https://issues.redhat.com/browse/OCPBUGS-5245): Move check_pkt_larger to gateway router ports [#1505](https://github.com/openshift/ovn-kubernetes/pull/1505)
* [OCPBUGS-7010](https://issues.redhat.com/browse/OCPBUGS-7010): [release-4.11] Fix Egress FW ACL rules in dualstack mode [#1507](https://github.com/openshift/ovn-kubernetes/pull/1507)
* [OCPBUGS-6813](https://issues.redhat.com/browse/OCPBUGS-6813): [release-4.11] Ensure loadbalancer cleanup doesn't fail [#1498](https://github.com/openshift/ovn-kubernetes/pull/1498)
* [OCPBUGS-5928](https://issues.redhat.com/browse/OCPBUGS-5928): [release-4.11] Fix egress firewall to allow inbound connections in both gw modes [#1478](https://github.com/openshift/ovn-kubernetes/pull/1478)
* [OCPBUGS-5766](https://issues.redhat.com/browse/OCPBUGS-5766): egressip: fix test data race accessing podAssignment cache [#1471](https://github.com/openshift/ovn-kubernetes/pull/1471)
* [OCPBUGS-4761](https://issues.redhat.com/browse/OCPBUGS-4761): [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp [#1438](https://github.com/openshift/ovn-kubernetes/pull/1438)
* [OCPBUGS-1720](https://issues.redhat.com/browse/OCPBUGS-1720): Backport changes to ovnkube-trace [#1436](https://github.com/openshift/ovn-kubernetes/pull/1436)
* [OCPBUGS-4829](https://issues.redhat.com/browse/OCPBUGS-4829): Set the node as reachable only when it is being added as an egressip node [#1445](https://github.com/openshift/ovn-kubernetes/pull/1445)
* [OCPBUGS-4655](https://issues.redhat.com/browse/OCPBUGS-4655): [release-4.11] Don't delete equivalent ACLs by predicate, since it will fail if [#1444](https://github.com/openshift/ovn-kubernetes/pull/1444)
* [OCPBUGS-4992](https://issues.redhat.com/browse/OCPBUGS-4992): [release-4.11] fixing hybrid subnet allocator [#1459](https://github.com/openshift/ovn-kubernetes/pull/1459)
* [OCPBUGS-4863](https://issues.redhat.com/browse/OCPBUGS-4863): [release-4.11] Fix address set cleanup: only delete address sets owned by given object [#1448](https://github.com/openshift/ovn-kubernetes/pull/1448)
* [OCPBUGS-4887](https://issues.redhat.com/browse/OCPBUGS-4887): [release-4.11] Fixes scenario where deleted + completed pods may leak [#1455](https://github.com/openshift/ovn-kubernetes/pull/1455)
* [OCPBUGS-4838](https://issues.redhat.com/browse/OCPBUGS-4838), [OCPBUGS-4860](https://issues.redhat.com/browse/OCPBUGS-4860): [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors [#1447](https://github.com/openshift/ovn-kubernetes/pull/1447)
* [OCPBUGS-3614](https://issues.redhat.com/browse/OCPBUGS-3614): [4.11] CARRY: client: don't construct transaction log string when it's not needed [#1374](https://github.com/openshift/ovn-kubernetes/pull/1374)
* [OCPBUGS-3116](https://issues.redhat.com/browse/OCPBUGS-3116): append instead of overwrite logicalSwitch other-config [#1350](https://github.com/openshift/ovn-kubernetes/pull/1350)
* [OCPBUGS-4475](https://issues.redhat.com/browse/OCPBUGS-4475): Handle expired entry while handling dns update [#1417](https://github.com/openshift/ovn-kubernetes/pull/1417)
* [OCPBUGS-4564](https://issues.redhat.com/browse/OCPBUGS-4564): pods: deleteLogicalPort should not fail when node is gone [#1422](https://github.com/openshift/ovn-kubernetes/pull/1422)
* [OCPBUGS-4408](https://issues.redhat.com/browse/OCPBUGS-4408): Validate node subnet annotations against cluster networks [#1415](https://github.com/openshift/ovn-kubernetes/pull/1415)
* [OCPBUGS-4167](https://issues.redhat.com/browse/OCPBUGS-4167): EgressIP: Merge ops into pendingCloudPrivateIPConfigsOps on add [#1404](https://github.com/openshift/ovn-kubernetes/pull/1404)
* [OCPBUGS-3908](https://issues.redhat.com/browse/OCPBUGS-3908): [release-4.11] Support proper parsing of IPs with leading zeros [#1393](https://github.com/openshift/ovn-kubernetes/pull/1393)
* [OCPBUGS-2554](https://issues.redhat.com/browse/OCPBUGS-2554): Fix UpdateService healthport checks [#1389](https://github.com/openshift/ovn-kubernetes/pull/1389)
* Bug OCPBUGS-3077: [release-4.11] Fix netpol races [#1353](https://github.com/openshift/ovn-kubernetes/pull/1353)
* [OCPBUGS-3830](https://issues.redhat.com/browse/OCPBUGS-3830): Adjust ovs bundle timeout [#1383](https://github.com/openshift/ovn-kubernetes/pull/1383)
* [OCPBUGS-2222](https://issues.redhat.com/browse/OCPBUGS-2222): Don't add ITP specific gw setup for DPU mode [#1305](https://github.com/openshift/ovn-kubernetes/pull/1305)
* Updating ose-ovn-kubernetes images to be consistent with ART [#937](https://github.com/openshift/ovn-kubernetes/pull/937)
* [OCPBUGS-2745](https://issues.redhat.com/browse/OCPBUGS-2745): Fixes SNAT-ing Logic for EgressIPs [#1334](https://github.com/openshift/ovn-kubernetes/pull/1334)
* [OCPBUGS-2659](https://issues.redhat.com/browse/OCPBUGS-2659): Add logging verbosity to configuring OVN logs [#1325](https://github.com/openshift/ovn-kubernetes/pull/1325)
* [OCPBUGS-1739](https://issues.redhat.com/browse/OCPBUGS-1739): pods: deleteLogicalPort should not fail when ls is gone [#1290](https://github.com/openshift/ovn-kubernetes/pull/1290)
* [OCPBUGS-1955](https://issues.redhat.com/browse/OCPBUGS-1955): 4.11 multihop [#1296](https://github.com/openshift/ovn-kubernetes/pull/1296)
* [OCPBUGS-1750](https://issues.redhat.com/browse/OCPBUGS-1750): Trim ACL names according to RFC1123 [#1282](https://github.com/openshift/ovn-kubernetes/pull/1282)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/bf1b5876ff014ad9108daed756e978bfea1cb575...d7b132e976da1e23ed533281b0c3002bbd2c1f4c)


### [prometheus](https://github.com/openshift/prometheus/tree/e751c61e3d18fb85fd9dfb1cd811568be6bd397d)

* [OCPBUGS-2640](https://issues.redhat.com/browse/OCPBUGS-2640): Fix 'invalid magic number 0' bug (#11338) [#143](https://github.com/openshift/prometheus/pull/143)
* [Full changelog](https://github.com/openshift/prometheus/compare/d2dfc27902b0605a5b4cc1eee7210eb6fa6d6646...e751c61e3d18fb85fd9dfb1cd811568be6bd397d)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/5752c42b160915a9c85abc05ced80f206d8078ba)

* [OCPBUGS-7590](https://issues.redhat.com/browse/OCPBUGS-7590): Fixes ThanoRuler StatefulSet re-creation bug [#218](https://github.com/openshift/prometheus-operator/pull/218)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/cb3afa25568219bcb6d17b194fe6a5d82fe5fc76...5752c42b160915a9c85abc05ced80f206d8078ba)


### [tests](https://github.com/openshift/origin/tree/7fbbd1949eccd4921c440cc8aaf4276bbb80af30)

* [OCPBUGS-15942](https://issues.redhat.com/browse/OCPBUGS-15942): remove references to registry.centos.org [#28036](https://github.com/openshift/origin/pull/28036)
* [OCPBUGS-15151](https://issues.redhat.com/browse/OCPBUGS-15151): Move from registry.centos.org to quay.io [#27985](https://github.com/openshift/origin/pull/27985)
* [CCO-367](https://issues.redhat.com/browse/CCO-367): Allow CCO to be Upgradeable=False when credentialsMode=Manual [#27961](https://github.com/openshift/origin/pull/27961)
* [OCPBUGS-12962](https://issues.redhat.com/browse/OCPBUGS-12962): Add (optional) dual-stack tests to the CNI certification test suite [#27904](https://github.com/openshift/origin/pull/27904)
* [OCPBUGS-10215](https://issues.redhat.com/browse/OCPBUGS-10215): Bump(openshift/kubernetes): to get fix for resizing flake [#27796](https://github.com/openshift/origin/pull/27796)
* [OCPBUGS-7727](https://issues.redhat.com/browse/OCPBUGS-7727): remove reference to old guard pods [#27735](https://github.com/openshift/origin/pull/27735)
* [OCPBUGS-7319](https://issues.redhat.com/browse/OCPBUGS-7319): Unskip service session affinity tests [#27722](https://github.com/openshift/origin/pull/27722)
* [OCPBUGS-6851](https://issues.redhat.com/browse/OCPBUGS-6851): [release-4.11] upgrade/adminack: guarantee one admin ack check post-upgrade [#27685](https://github.com/openshift/origin/pull/27685)
* [OCPBUGS-5091](https://issues.redhat.com/browse/OCPBUGS-5091): Add Kuryr exception to "pods should successfully create sandboxes" test [#27621](https://github.com/openshift/origin/pull/27621)
* [SPLAT-856](https://issues.redhat.com/browse/SPLAT-856): [release-4.11] include storage and must-gather tests in expectedTestCount [#27494](https://github.com/openshift/origin/pull/27494)
* [OCPBUGS-3819](https://issues.redhat.com/browse/OCPBUGS-3819): Add bond cni test [#27554](https://github.com/openshift/origin/pull/27554)
* [OCPBUGS-2616](https://issues.redhat.com/browse/OCPBUGS-2616): Fix s2i ruby test that relys on rack [#27480](https://github.com/openshift/origin/pull/27480)
* disruption checking is disabled for prior releases because we lack a good baseline [#27468](https://github.com/openshift/origin/pull/27468)
* [Full changelog](https://github.com/openshift/origin/compare/011cfa5e00feeeae2c4a18366da95b3ccd488cfb...7fbbd1949eccd4921c440cc8aaf4276bbb80af30)


### [thanos](https://github.com/openshift/thanos/tree/5ecb95b3897b52104b363f01e6e563dd5d4f672f)

* [OCPBUGS-14559](https://issues.redhat.com/browse/OCPBUGS-14559): require at least TLS 1.2 instead of 1.3 [#113](https://github.com/openshift/thanos/pull/113)
* Updating thanos images to be consistent with ART [#99](https://github.com/openshift/thanos/pull/99)
* [OCPBUGS-3764](https://issues.redhat.com/browse/OCPBUGS-3764): Fix local-test for go 1.18 [#87](https://github.com/openshift/thanos/pull/87)
* [Full changelog](https://github.com/openshift/thanos/compare/f08da2d77e40a0612587859f8e2660af712f9292...5ecb95b3897b52104b363f01e6e563dd5d4f672f)


### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/91f7b1fab3342f890274bec2b93b2bc0de8d99e1)

* [OCPBUGS-2058](https://issues.redhat.com/browse/OCPBUGS-2058): fix .dockerignore to satisfy OCP specific requirements [#26](https://github.com/openshift/cloud-provider-vsphere/pull/26)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/6fd8e8ddcec4eae47e0238af4c29ebb68069d30b...91f7b1fab3342f890274bec2b93b2bc0de8d99e1)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/e84cbfa4f66f09a77aac8ef6d24e6070b37d77e3)

* [OCPBUGS-7404](https://issues.redhat.com/browse/OCPBUGS-7404): fix for nil user session (#1859) [#58](https://github.com/openshift/vmware-vsphere-csi-driver/pull/58)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/d4721ba6c23605fcd535aa588999e17be2c3bbe5...e84cbfa4f66f09a77aac8ef6d24e6070b37d77e3)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/82cfcd53e2776a35e3c040a4081aa8fe0b02957d)

* [OCPBUGS-5790](https://issues.redhat.com/browse/OCPBUGS-5790): Allow cluster to be upgraded even if using multiple datacenters [#130](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/130)
* [OCPBUGS-5472](https://issues.redhat.com/browse/OCPBUGS-5472): Fix sc creation on resync [#127](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/127)
* [OCPBUGS-3285](https://issues.redhat.com/browse/OCPBUGS-3285): set TLS cipher suites in Kube RBAC sidecars [#119](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/119)
* [OCPBUGS-1710](https://issues.redhat.com/browse/OCPBUGS-1710): Add HTTP proxy to syncer container [#111](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/111)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/23c555e2a9f9922aeedfb1622d61b3a5010cbc2d...82cfcd53e2776a35e3c040a4081aa8fe0b02957d)