# 4.16.6

Created: 2024-08-01 08:19:17 +0000 UTC

Image Digest: `sha256:24ea553ce2e79fab0ff9cf2917d26433cffb3da954583921926034b9d5d309bd`

Promoted from registry.ci.openshift.org/ocp/release:4.16.0-0.nightly-2024-07-31-182118


## Changes from 4.16.3

### Components

* Kubectl upgraded from 1.29.6 to 1.29.7
* Kubernetes 1.29.6
* Kubernetes Tests 1.29.0
* Red Hat Enterprise Linux CoreOS upgraded from 416.94.202407081958-0 to 416.94.202407251849-0


### New images

* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [a897b786](https://github.com/openshift/operator-framework-olm/commit/a897b786370bbb7d3f9cc2f523aa4c5e5c9fcd55) `sha256:577d38881d95e8fd66fe6c36c25b2080b8b7b1b58c46298a68badf07fbe357b9`


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [6b26a25e](https://github.com/openshift/assisted-service/commit/6b26a25e2ae7c4eae4a0f3ee0cedbd16c29bab8a) `sha256:5bb98edf376dfa838ce6899b0fc0e867237f34df63e8bf476d0ba9d2195131bd`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [373c87ad](https://github.com/openshift/assisted-installer/commit/373c87ad8f0d88816031b5c39764c80d900228d9) `sha256:6a8a7825b2039759548c6d83db384979cf4bf0a17d231c2a588c57e80623f74c`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [9ca7b58d](https://github.com/openshift/assisted-installer-agent/commit/9ca7b58d937c413f670a26c02435829b1fb3a196) `sha256:667efccd05c2154ebda8ae7a14fbb3ed4523ad8c1f459df9eda77a041239ae1c`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [6e6bb40d](https://github.com/openshift/agent-installer-utils/commit/6e6bb40d95bd966eb6b152e66c5b91794806c4bc) `sha256:041d983c6807129d0e0cf371133f8a1c0d5fde78a813c60aa1f293e64004fb43`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [2bd8891e](https://github.com/openshift/cluster-node-tuning-operator/commit/2bd8891ead93e161b9a871ac2eaa947bfc17309f) `sha256:699640d9d6b0e72589087f2b39a102b9cf816327171d449110bb12b8062ca656`
* [docker-builder](https://github.com/openshift/builder) git [3b7a1b1b](https://github.com/openshift/builder/commit/3b7a1b1be130d5068481fe005b0a119fbd7057a6) `sha256:6d499d4ec94667a1000a88fef19de7a0f0f5133b8692b9bc20fa1575f79c77fb`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [1d5732f0](https://github.com/openshift/driver-toolkit/commit/1d5732f0209bb7d98661a53c66c5ac265272dce6) `sha256:d00bda2d25cbe078e1260fbe7257dc135a0a93b876025c041c0d937141bd806d`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [63681a46](https://github.com/openshift/ironic-agent-image/commit/63681a469fdba2f223373ff36350bf2462b997a3) `sha256:a03318e3157fc24898e0f964443b78790ad4ea85df4b355fbbffc6c25e3234f9`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93b8b5fa](https://github.com/openshift/ironic-rhcos-downloader/commit/93b8b5fa33950cadd2310278b7c762ebe0057418) `sha256:9ffc37fb5bef1c49ab01142d0107dc0fb376c6a318d87c1471ceb50f047feaf2`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:cd5fc310ea39597c3c4f00a8cb83ca1e598d6ad1bfa4fec67bac3395c3438246`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [3cc97098](https://github.com/openshift/machine-os-images/commit/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c) `sha256:9615248ba65205e898b0ebdd43388896a450ccb462a2b7e7ed2d08941d576b60`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [aa339e45](https://github.com/openshift/monitoring-plugin/commit/aa339e459718c1644d53fcdaf6a59bb751bfecea) `sha256:9a10fc210f900525f585aa029bd384efa6ad9177f38e5783ac9b22e30ee2cd20`
* [must-gather](https://github.com/openshift/must-gather) git [aea114c0](https://github.com/openshift/must-gather/commit/aea114c0e263e6148b6a26f69f45af559a4f7bc7) `sha256:2d50634579d0c9be102647fa2eeca253f99e381002695b08fe22ae309b0f456d`
* [network-tools](https://github.com/openshift/network-tools) git [39eca100](https://github.com/openshift/network-tools/commit/39eca100c0978fb59234e21bf549b130914616ac) `sha256:786a76fdd76e9c1407ac3f5a94853c77dfe9826e3a327e6ddcdd670872f02863`
* rhel-coreos `sha256:d0b8a6779d0de1cdd4fa8497ac1b900c7314fa5288928eb115a5e81c5b80434e`
* rhel-coreos-extensions `sha256:ec38b0c2b735998ecc2ec7bcebf2d71c6e5b805d96cefd37fa44945c467d0572`
* [sdn](https://github.com/openshift/sdn) git [5b658c43](https://github.com/openshift/sdn/commit/5b658c433786797d0ac1b870db08346584794514) `sha256:dee89d607ae8b4e217cc114102ea0e808fe07fccf60e20c4325e9621a97b2af7`
* [tests](https://github.com/openshift/origin) git [ac6867d1](https://github.com/openshift/origin/commit/ac6867d1c00e18bf9a933863b8dcb32a133cbc5f) `sha256:398a8756d59ff44f730bd2dd6b62e57ab2507b762442aba34b817d36e76f86e2`


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/a6bd63426517c90897a7e902f06ce89c23ad8dbd)

* [OCPBUGS-37510](https://issues.redhat.com/browse/OCPBUGS-37510): [release-4.16] aws: bump CAPA for subnet tagging fix [#8772](https://github.com/openshift/installer/pull/8772)
* [OCPBUGS-37180](https://issues.redhat.com/browse/OCPBUGS-37180): ic: fix typo in warning message [#8769](https://github.com/openshift/installer/pull/8769)
* [OCPBUGS-36968](https://issues.redhat.com/browse/OCPBUGS-36968): [release-4.16]: capi/aws: bump provider for ingress rules fix [#8734](https://github.com/openshift/installer/pull/8734)
* [OCPBUGS-36965](https://issues.redhat.com/browse/OCPBUGS-36965): destroy/gcp: set value for DiscardLocalSsd [#8733](https://github.com/openshift/installer/pull/8733)
* [OCPBUGS-36720](https://issues.redhat.com/browse/OCPBUGS-36720): CORS-3582: capi: remove unused feature gates [#8716](https://github.com/openshift/installer/pull/8716)
* [OCPBUGS-36890](https://issues.redhat.com/browse/OCPBUGS-36890): [release-4.16] capi: start controllers after WaitGroup is created [#8726](https://github.com/openshift/installer/pull/8726)
* [OCPBUGS-36091](https://issues.redhat.com/browse/OCPBUGS-36091): [release-4.16] bump go-retryablehttp for CVE fix [#8654](https://github.com/openshift/installer/pull/8654)
* [OCPBUGS-36777](https://issues.redhat.com/browse/OCPBUGS-36777): Cleanup capi artifacts [#8719](https://github.com/openshift/installer/pull/8719)
* [Full changelog](https://github.com/openshift/installer/compare/e1f9f057ce87c1a4a5f3c268812fa4c9dc003cb7...a6bd63426517c90897a7e902f06ce89c23ad8dbd)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/cf55631bb24915a360f8070e2f167183daf13f60)

* [OCPBUGS-37262](https://issues.redhat.com/browse/OCPBUGS-37262): fix(redfish): set correct idrac-redfish management interface [#366](https://github.com/openshift/baremetal-operator/pull/366)
* [OCPBUGS-36673](https://issues.redhat.com/browse/OCPBUGS-36673): [4.16] Firmware Update causes BMH to get stuck in Preparing [#363](https://github.com/openshift/baremetal-operator/pull/363)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/7673d14fc567c3621e8d5fdca69ff03bd99504ef...cf55631bb24915a360f8070e2f167183daf13f60)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/f55a330f8139ef660b3f60b735ef77538f7b9cbe)

* [OCPBUGS-35891](https://issues.redhat.com/browse/OCPBUGS-35891): Change mechanism of debug flag [#323](https://github.com/openshift/baremetal-runtimecfg/pull/323)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/02cb6e18f7e2e1c5eaf4140229a1bf38e2c67def...f55a330f8139ef660b3f60b735ef77538f7b9cbe)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/ada2fa874dc7dc175da036dae67e8d7a61a27291)

* [OCPBUGS-31639](https://issues.redhat.com/browse/OCPBUGS-31639): Bump k8s dependencies to 1.29.7 [#1824](https://github.com/openshift/oc/pull/1824)
* [OCPBUGS-36764](https://issues.redhat.com/browse/OCPBUGS-36764): pkg/cli/admin/upgrade/rollback: Drop this command [#1820](https://github.com/openshift/oc/pull/1820)
* [Full changelog](https://github.com/openshift/oc/compare/0127eb4d4f1131758ef39f445eba783eaf7b240f...ada2fa874dc7dc175da036dae67e8d7a61a27291)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/38ef552e182880d3053bcbd43bda3f45a11ed01e)

* [OCPBUGS-37418](https://issues.redhat.com/browse/OCPBUGS-37418): SNYK ignore go-client misreporting [#735](https://github.com/openshift/cloud-credential-operator/pull/735)
* [OCPBUGS-36834](https://issues.redhat.com/browse/OCPBUGS-36834): GCP passthrough permissions check to ignore problematic permissions. [#714](https://github.com/openshift/cloud-credential-operator/pull/714)
* [OCPBUGS-36954](https://issues.redhat.com/browse/OCPBUGS-36954): Update to azidentity v1.7.0 [#727](https://github.com/openshift/cloud-credential-operator/pull/727)
* [OCPBUGS-36031](https://issues.redhat.com/browse/OCPBUGS-36031): IBM/go-sdk-core update to v5.6.3 [#718](https://github.com/openshift/cloud-credential-operator/pull/718)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c6c1b0b0977d9e0e33eb0b75c5d1c1f901a70ed0...38ef552e182880d3053bcbd43bda3f45a11ed01e)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/cda1c4bd1c4a4d2b08c58e8153190016ac09c87c)

* [OCPBUGS-36285](https://issues.redhat.com/browse/OCPBUGS-36285): Move pull secret from env var to VolumeMount in metal3-image-customization container [#436](https://github.com/openshift/cluster-baremetal-operator/pull/436)
* [OCPBUGS-36285](https://issues.redhat.com/browse/OCPBUGS-36285): Mount htpasswds as volumeMounts in metal3-httpd container [#434](https://github.com/openshift/cluster-baremetal-operator/pull/434)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/5556c245c312981380136fe5380ed2e39e27168e...cda1c4bd1c4a4d2b08c58e8153190016ac09c87c)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b0d0d6ad7ff87305a486e5f501c39e495931e4ac)

* [OCPBUGS-36489](https://issues.redhat.com/browse/OCPBUGS-36489): parallelize member health checks [#1290](https://github.com/openshift/cluster-etcd-operator/pull/1290)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/f8ec2ac5a4a4707771d48fcf5b92c632ac716d43...b0d0d6ad7ff87305a486e5f501c39e495931e4ac)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/af5d3f6c171354c387e0cfc901110a7211715e9b)

* [OCPBUGS-32887](https://issues.redhat.com/browse/OCPBUGS-32887): Delete and recreate canary route to clear spec.host [#1099](https://github.com/openshift/cluster-ingress-operator/pull/1099)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/9eae38dce9615897991a3b0b1f73e2cdb33b7f8e...af5d3f6c171354c387e0cfc901110a7211715e9b)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0)

* [OCPBUGS-37563](https://issues.redhat.com/browse/OCPBUGS-37563): add disabled syncer as reason to CFE for PSA [#1714](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1714)
* [OCPBUGS-35303](https://issues.redhat.com/browse/OCPBUGS-35303): manifests: add ownership annotation for kubelet-bootstrap-kubeconfig [#1701](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1701)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b0eea1220af097c61241ebe221af4c220d72f0b7...de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/cb3d884237cda666ad740cc9a104fc885b05bdae)

* [OCPBUGS-36907](https://issues.redhat.com/browse/OCPBUGS-36907): Add deprecated config runbook [#2411](https://github.com/openshift/cluster-monitoring-operator/pull/2411)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/70b819ecdd9199aa14e73869324cb2c962cb597b...cb3d884237cda666ad740cc9a104fc885b05bdae)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/739536971534310704707375a4903858d7331ad3)

* [OCPBUGS-37362](https://issues.redhat.com/browse/OCPBUGS-37362): Fix IC distributed control plane alerts [#2445](https://github.com/openshift/cluster-network-operator/pull/2445)
* [OCPBUGS-35836](https://issues.redhat.com/browse/OCPBUGS-35836): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2417](https://github.com/openshift/cluster-network-operator/pull/2417)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/e2f42540a5cbde654ef1b2535b1a6afc1fc7ab29...739536971534310704707375a4903858d7331ad3)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/b990582d516e3fc8452dd658608a5e15522c3d1e)

* [OCPBUGS-36969](https://issues.redhat.com/browse/OCPBUGS-36969): STOR-1839: VSphereDriverConfiguration feature Accessible-by-default [#491](https://github.com/openshift/cluster-storage-operator/pull/491)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/f1a3570e66b909af2544bc68bc7fe52d5bc566d6...b990582d516e3fc8452dd658608a5e15522c3d1e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f82b0611f8d0cd637036bcede4684a8f466edb6a)

* [OCPBUGS-36898](https://issues.redhat.com/browse/OCPBUGS-36898): vendor: Update openshift/api to pick up zz_generated.crd-manifests [#1069](https://github.com/openshift/cluster-version-operator/pull/1069)
* [OCPBUGS-36764](https://issues.redhat.com/browse/OCPBUGS-36764): Revert "OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream" [#1065](https://github.com/openshift/cluster-version-operator/pull/1065)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6f553e98877e87d08a5c5fa9b13758a12cdcef8c...f82b0611f8d0cd637036bcede4684a8f466edb6a)


### [console](https://github.com/openshift/console/tree/23a76d860869248d43fd41b9abb1e237f6a0f0c9)

* [OCPBUGS-36864](https://issues.redhat.com/browse/OCPBUGS-36864): maintain session across tabs [#14051](https://github.com/openshift/console/pull/14051)
* [OCPBUGS-36620](https://issues.redhat.com/browse/OCPBUGS-36620): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14035](https://github.com/openshift/console/pull/14035)
* [OCPBUGS-36759](https://issues.redhat.com/browse/OCPBUGS-36759): RWOP accessMode is not available on OpenShift console UI [#14040](https://github.com/openshift/console/pull/14040)
* [OCPBUGS-37063](https://issues.redhat.com/browse/OCPBUGS-37063): hide 'View all steps in documentation' for ROSA and OSD [#14069](https://github.com/openshift/console/pull/14069)
* [OCPBUGS-36411](https://issues.redhat.com/browse/OCPBUGS-36411): fix BMH restart annotation [#14022](https://github.com/openshift/console/pull/14022)
* [OCPBUGS-36841](https://issues.redhat.com/browse/OCPBUGS-36841): ensure correct API version for OperandDetails [#14049](https://github.com/openshift/console/pull/14049)
* [Full changelog](https://github.com/openshift/console/compare/c76720242be623e84657ab63d19052e1770c1aff...23a76d860869248d43fd41b9abb1e237f6a0f0c9)


### [console-operator](https://github.com/openshift/console-operator/tree/595d9d4a1d9a9a7d77e143a897446e52b65abf20)

* [OCPBUGS-34012](https://issues.redhat.com/browse/OCPBUGS-34012): Cache organization ID [#916](https://github.com/openshift/console-operator/pull/916)
* [Full changelog](https://github.com/openshift/console-operator/compare/70c05de7096e5eac77015f08a57c38c61309da55...595d9d4a1d9a9a7d77e143a897446e52b65abf20)


### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/73b4123cc75abd22af8dc3b429836be2bea45fd5)

* [OCPBUGS-37725](https://issues.redhat.com/browse/OCPBUGS-37725): Update owners [#166](https://github.com/openshift/containernetworking-plugins/pull/166)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/f503997690a236f322ae062ab2ebcf720b0457bf...73b4123cc75abd22af8dc3b429836be2bea45fd5)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/7089efe6100c1f52f28adccf1dccc722b8dcacdc)

* [OCPBUGS-35525](https://issues.redhat.com/browse/OCPBUGS-35525): update to go 1.21 and k8s.io mods to v0.29.2 [#85](https://github.com/openshift/egress-router-cni/pull/85)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/7534ab906e5f9d38defbbbc6b169e5d829463bb5...7089efe6100c1f52f28adccf1dccc722b8dcacdc)


### [hypershift](https://github.com/openshift/hypershift/tree/c98155a29bca64fa37d84ee6af11b25f5ac50e0c)

* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 (release-4.16) [#4430](https://github.com/openshift/hypershift/pull/4430)
* [HOSTEDCP-1569](https://issues.redhat.com/browse/HOSTEDCP-1569): test: e2e: skip unknown conditions instead of erroring [#4440](https://github.com/openshift/hypershift/pull/4440)
* [OCPBUGS-37645](https://issues.redhat.com/browse/OCPBUGS-37645): Set right endpointSlice port [#4431](https://github.com/openshift/hypershift/pull/4431)
* [OCPBUGS-37214](https://issues.redhat.com/browse/OCPBUGS-37214): Separate ibmcloud kms encryption configuration types [#4380](https://github.com/openshift/hypershift/pull/4380)
* [OCPBUGS-37302](https://issues.redhat.com/browse/OCPBUGS-37302): fix(api): Nodepool CEL validation fix [#4395](https://github.com/openshift/hypershift/pull/4395)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-26 [#4392](https://github.com/openshift/hypershift/pull/4392)
* [OCPBUGS-37241](https://issues.redhat.com/browse/OCPBUGS-37241): extract rhel9 MCO binaries for rhel8 based MCO images [#4383](https://github.com/openshift/hypershift/pull/4383)
* NO-JIRA: [release-4.16] test/e2e: remove api budget checks [#4368](https://github.com/openshift/hypershift/pull/4368)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4371](https://github.com/openshift/hypershift/pull/4371)
* NO-JIRA: chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.21.11-2 (release-4.16) - abandoned [#4364](https://github.com/openshift/hypershift/pull/4364)
* NO-JIRA: trivial typo fixes to configuring-storage.md [#4353](https://github.com/openshift/hypershift/pull/4353)
* [OCPBUGS-36849](https://issues.redhat.com/browse/OCPBUGS-36849): Add newline after TLS certs referenced by image.config [#4352](https://github.com/openshift/hypershift/pull/4352)
* [OCPBUGS-36589](https://issues.redhat.com/browse/OCPBUGS-36589): Fix Hypershift dump for non-OpenShift Management Clusters [#4317](https://github.com/openshift/hypershift/pull/4317)
* [Full changelog](https://github.com/openshift/hypershift/compare/073e376e1188a6883e83d091c110a59505144d3e...c98155a29bca64fa37d84ee6af11b25f5ac50e0c)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/957197389ec49234c3883bbb730bb630b459e24f)

* [OCPBUGS-36067](https://issues.redhat.com/browse/OCPBUGS-36067): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#71](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/32b4c00517de0f54bf738380064a12d58b031eec...957197389ec49234c3883bbb730bb630b459e24f)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/72d41aa9bf0e8ef7bffac13bd60a7c22d183fb72)

* [OCPBUGS-36073](https://issues.redhat.com/browse/OCPBUGS-36073): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#120](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/34fc9a4d3a4ae00d75bbfc01ac4c6385f9e94130...72d41aa9bf0e8ef7bffac13bd60a7c22d183fb72)


### [insights-operator](https://github.com/openshift/insights-operator/tree/c9ba6b040d8e5c66eb1ad092b22d3336facc1b64)

* [OCPBUGS-37671](https://issues.redhat.com/browse/OCPBUGS-37671): Ingress controller related certificates' validate dates gathering (#970) [#970](https://github.com/openshift/insights-operator/pull/970)
* fix the configmapobserver notifications (#969) [#969](https://github.com/openshift/insights-operator/pull/969)
* [Full changelog](https://github.com/openshift/insights-operator/compare/3912e2f10a309e3cfb51aa7829971aaa445e5772...c9ba6b040d8e5c66eb1ad092b22d3336facc1b64)


### [ironic](https://github.com/openshift/ironic-image/tree/39aee9b58edba6a7b4038b299b75fb93c73f67e9)

* [OCPBUGS-36838](https://issues.redhat.com/browse/OCPBUGS-36838): Update Jinja2 [#521](https://github.com/openshift/ironic-image/pull/521)
* [Full changelog](https://github.com/openshift/ironic-image/compare/2a0823e1b97f64209e5cee29e024a5abf3b436b8...39aee9b58edba6a7b4038b299b75fb93c73f67e9)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a4756652d07e380d7c6176af382f756d5c48281f)

* [OCPBUGS-35891](https://issues.redhat.com/browse/OCPBUGS-35891): Make logging configurable for on-prem components [#4418](https://github.com/openshift/machine-config-operator/pull/4418)
* [OCPBUGS-37470](https://issues.redhat.com/browse/OCPBUGS-37470): Nodes are drained twice when an OCB image is applied [#4484](https://github.com/openshift/machine-config-operator/pull/4484)
* [OCPBUGS-37460](https://issues.redhat.com/browse/OCPBUGS-37460): Openshift uncordoned compute-node that was intentionally cordoned [#4483](https://github.com/openshift/machine-config-operator/pull/4483)
* [OCPBUGS-37428](https://issues.redhat.com/browse/OCPBUGS-37428): Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events [#4482](https://github.com/openshift/machine-config-operator/pull/4482)
* [OCPBUGS-36775](https://issues.redhat.com/browse/OCPBUGS-36775): templates: run disable-mglru conditionally [#4462](https://github.com/openshift/machine-config-operator/pull/4462)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1ec936b6519a118ba05617efbe338e4961c71e7f...a4756652d07e380d7c6176af382f756d5c48281f)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/f988f894ded7e6645a1b3cc0d6090601809d4e7c)

* Update owners (#57) [#57](https://github.com/openshift/multus-networkpolicy/pull/57)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/c9a6ba24e92dad55e00fc17815a3e9988ee14d2d...f988f894ded7e6645a1b3cc0d6090601809d4e7c)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/73594f7759e76600c95601138ab5be4969978f63)

* [OCPBUGS-37726](https://issues.redhat.com/browse/OCPBUGS-37726): Update owners [#58](https://github.com/openshift/route-override-cni/pull/58)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/6a04feea1b1ab85914d9793a3bb8502c54bef172...73594f7759e76600c95601138ab5be4969978f63)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/1d25d8d92e177465edfac9b364197c13f264e34a)

* [OCPBUGS-37723](https://issues.redhat.com/browse/OCPBUGS-37723): Update owners [#294](https://github.com/openshift/whereabouts-cni/pull/294)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/2d7b9ebb4b608d6891a151f2b46ec453a932656d...1d25d8d92e177465edfac9b364197c13f264e34a)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/dfed9f10cd9aabfe3fe8dae0e6a8afe237c901ba)

* [OCPBUGS-37055](https://issues.redhat.com/browse/OCPBUGS-37055): Use proxy for HTTP request release signatures (#893) [#893](https://github.com/openshift/oc-mirror/pull/893)
* [OCPBUGS-37040](https://issues.redhat.com/browse/OCPBUGS-37040): use current working-dir for fetching release content for disk to mirror (#892) [#892](https://github.com/openshift/oc-mirror/pull/892)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/75da281989a147ead237e738507bbd8cec3175e5...dfed9f10cd9aabfe3fe8dae0e6a8afe237c901ba)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/f0536caff57932e0b5fb88987477f4978463574a)

* [OCPBUGS-36862](https://issues.redhat.com/browse/OCPBUGS-36862): 4.16 "Bad" reconciliation loops can cause unbounded dockercfg secret creation [#323](https://github.com/openshift/openshift-controller-manager/pull/323)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/1432fe0aa630ce83c0c3fd18c86e1fb9a47ae4cc...f0536caff57932e0b5fb88987477f4978463574a)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/a897b786370bbb7d3f9cc2f523aa4c5e5c9fcd55)

* [OCPBUGS-37559](https://issues.redhat.com/browse/OCPBUGS-37559): [release-4.16] Update e2e config and backport list of flakes [#814](https://github.com/openshift/operator-framework-olm/pull/814)
* [OCPBUGS-37018](https://issues.redhat.com/browse/OCPBUGS-37018): Bump github.com/containers/image/v5 [#822](https://github.com/openshift/operator-framework-olm/pull/822)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f4eac4271317504fcdeaf45fcf30bb01b1cd8bb0...a897b786370bbb7d3f9cc2f523aa4c5e5c9fcd55)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/494993b7702336ed9d527c2c9899b85cdd22c7bf)

* [OCPBUGS-37362](https://issues.redhat.com/browse/OCPBUGS-37362): Fix registering northd metrics on appropriate nodes [#2232](https://github.com/openshift/ovn-kubernetes/pull/2232)
* [OCPBUGS-36608](https://issues.redhat.com/browse/OCPBUGS-36608): [release-4.16] ovspinning: Set affinity of each thread [#2220](https://github.com/openshift/ovn-kubernetes/pull/2220)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7f412836bd26c3d6e9735552a7fd615e7e7e9695...494993b7702336ed9d527c2c9899b85cdd22c7bf)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/20e6dc70d665e5d085df17d757a07e17c0e18fe0)

* [OCPBUGS-36107](https://issues.redhat.com/browse/OCPBUGS-36107): UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.16 [#73](https://github.com/openshift/cloud-provider-powervs/pull/73)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/87386cd444b4b9fe745d0198ab959ccedb5e318a...20e6dc70d665e5d085df17d757a07e17c0e18fe0)


### [prometheus](https://github.com/openshift/prometheus/tree/bc04420c7556a9ba168ce160466a99461dd9746e)

* [OCPBUGS-37446](https://issues.redhat.com/browse/OCPBUGS-37446): backport of upstream fix [#217](https://github.com/openshift/prometheus/pull/217)
* [OCPBUGS-36854](https://issues.redhat.com/browse/OCPBUGS-36854): cherry-pick upstream remote-write fix [#212](https://github.com/openshift/prometheus/pull/212)
* [Full changelog](https://github.com/openshift/prometheus/compare/69e2ed89ac1e73cfa36ce792d8b045b2e7f3c649...bc04420c7556a9ba168ce160466a99461dd9746e)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/3683c120278fb79a30340f66d22948aaddf3c16a)

* [OCPBUGS-37735](https://issues.redhat.com/browse/OCPBUGS-37735): Drop event when CheckDefaultDatastore fails [#168](https://github.com/openshift/vsphere-problem-detector/pull/168)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/9578848ca71c730ba305fc3ff286eeb87c865f1e...3683c120278fb79a30340f66d22948aaddf3c16a)