# 4.2.33

Created: 2020-05-07 23:08:38 +0000 UTC

Image Digest: `sha256:52e780ccc7e3af73b11dcb4afe275e2e743b59ccea6f228089ac93337de244d7`

Promoted from registry.svc.ci.openshift.org/ocp/release:4.2.0-0.nightly-2020-05-07-194422


## Changes from 4.2.0

### Components

* Kubernetes 1.14.6


### Rebuilt images without code change

* [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure) git [719f40a4](https://github.com/openshift/cluster-api-provider-azure/commit/719f40a46924bb1a46143a8df291b33ec17075b8) `sha256:c26569febde45e812d45cde1c193785ebfd4a656e69ea3e84a2929ab691c52c2`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:54a0682d8f916a935078e34fe7d6f6ea96a9464079fd873c25acd41896848ac2`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [7869f83d](https://github.com/openshift/baremetal-operator/commit/7869f83d0e93fdb9c589eaf66b7d459d67b39f83) `sha256:94b0f1bcedd14a763bef24ad4f527ff9c863450e314829b085cde435477814eb`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [c44b83da](https://github.com/openshift/kubernetes-autoscaler/commit/c44b83dacbdd3dc6bc051c96a1b0d6f6865c685b) `sha256:4d3aac6b6005b5225c6addcfea6e861df339b0718dbbd3e9436ebffddcf23d77`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:89169dc654f9a5b769df6cebb1e235dac16941f6fceab3cb3bd3027b2e93f6d3`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [7e4895c7](https://github.com/openshift/cluster-config-operator/commit/7e4895c7e79826566b0bcfab724b8b21cecc597d) `sha256:bdf3d0cf995075cb0e559d973601ee5557acccf9fa2b513abf96c7d55d7181a6`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [76ae60eb](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/76ae60eb1baa4496a5097c3be282873f99ea70d3) `sha256:3ce9b7b7d490978f0bb0c60f8b4dcac5b0bf05cd1ab4668b1430225b05b21de1`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [377cff19](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/377cff19428838c0b2c4fbde762e535471922a92) `sha256:76332b26664d5763370d57023f97b33eea9ffbcc41692864e5e92831878b80b8`
* [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator) git [f8b8b5b3](https://github.com/openshift/cluster-svcat-apiserver-operator/commit/f8b8b5b355d0b525d25600fe8713297be0a3e8bf) `sha256:b6ae9fa453f3bee469d5f4c652685191e904c5e4b27efc6f9ec14f51b2c694d4`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [9ef3f62c](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/9ef3f62c4b3d7b824c9b0b86c2081d694faff5ea) `sha256:5362ec40d4744d252bf2cfcc6396c29f3cb9ab9a757762654061f51c2420d57e`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:a039b869b0d5b44eb72f4c5a7eaa55eb11ee7e65bf63f89c54114077a3b765ed`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:4ad8204c0343cabc1233c04e1aa5ab3395d00080eb3c5dcbd97467d12a0559ab`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [b5e1059a](https://github.com/openshift/containernetworking-plugins/commit/b5e1059a79397ef886a8047cb4c61919c787f5f5) `sha256:cf119417315e674e87541b2487aacc9323232ea27101f7c8d16fcd4746368e32`
* [coredns](https://github.com/openshift/coredns) git [51569b24](https://github.com/openshift/coredns/commit/51569b24b4a92d6d8df2020c2e8e2866c5e78266) `sha256:c64763e6c46ac4efccc475511cc4c4d0320c9eee99df607ccb089463fca37169`
* [etcd](https://github.com/openshift/etcd) git [3ebe3d9f](https://github.com/openshift/etcd/commit/3ebe3d9fa2302e5ae4712781caac61fc12d5f7f9) `sha256:11a9c9a95ef9015a764a96dd74563bf715569bd2a27c9011a62a5b3fb06848b5`
* [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [602750a8](https://github.com/openshift/cluster-api-provider-gcp/commit/602750a8c1762faf052124fc400b9342514ed8f3) `sha256:8aeb237d07c517df53756166a843194cb806faaa332e7a253e7c91af7f49ccaf`
* [grafana](https://github.com/openshift/grafana) git [91b439ee](https://github.com/openshift/grafana/commit/91b439eee0cf1ac742ef63cf2a8f7fc9ea3e1432) `sha256:9df696786a8f41693fc6c520a343f14dd6c108cf69b7dfe356fbbd0feca564cf`
* [ironic](https://github.com/openshift/ironic-image) git [246346b5](https://github.com/openshift/ironic-image/commit/246346b5f7fb8f871ab61f6a49f820f84bda9d2f) `sha256:2ba01721f57269cb86e426ac19dcfe2bef280fa19bc59ba5caec5de87dcdbea6`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [b83630ce](https://github.com/openshift/ironic-inspector-image/commit/b83630cefa1a72b2d8ce03c9701acb4f117ab6f5) `sha256:bf0df289c5787092f3f9b0e60e12ae21fbe0c5f6b625b3dd490e09ec2d8cd2d7`
* [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [b1a14498](https://github.com/openshift/ironic-ipa-downloader/commit/b1a144985e413d0c7f3d66bf8f47ecf14e8d617d) `sha256:335cd4f9b28f8130f117995dd8768bbdfc1eb11a09df41b9c01c621817424f65`
* [ironic-rhcos-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [93c9e1c5](https://github.com/openshift/ironic-rhcos-downloader/commit/93c9e1c5cf83e25487933e46d5aadbe1c68dfea5) `sha256:eb3189dcf8206a1e981d76ae7aea278ea3af14732717c4a5175582e67993bb99`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e33314bd](https://github.com/openshift/ironic-static-ip-manager/commit/e33314bda6f366472a2371c5598ff2d7dba111c8) `sha256:5b64a7d3d69873b316c0d72b9940f34a55d5214d0c168ae13b0961f79eec3578`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [9c5a42a3](https://github.com/openshift/k8s-prometheus-adapter/commit/9c5a42a3fb4bd2adfa24fc10292a36becc669e1e) `sha256:33a43538caf23b9e0d0ffa6839723fa6a0ebed6d593e420660df86a1445f1094`
* [keepalived-ipfailover](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:0d15bd4b25bb77eb410cd4107b4fad07f0d345386c2fed6aac8c82c1299678b3`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [2658b244](https://github.com/openshift/kube-rbac-proxy/commit/2658b2444b9992ea474177c73ca9f40f68f04304) `sha256:4ed7cf125a78f2eafa345872415d75480476451f2b65dd87bc65bbc05594b078`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [07b29740](https://github.com/openshift/kube-state-metrics/commit/07b29740ca81f5ddf527b8eb700247f7be4474a8) `sha256:393e3c3e92d57e6fa70841778bd731b59156f9352f6b734968bc2483de550b2c`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:e9ac0d9843b0c1a14b7a53dafccf3b8b567ca53c8c09a85ef6e0c5f7038c907f`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [474e14e4](https://github.com/openshift/machine-api-operator/commit/474e14e4965a8c5e6788417c851ccc7fad1acb3a) `sha256:de2d03360937ea7e1c9f668b6a6ab68a4a4af695fe674d00ed6ffb6a8df161d2`
* machine-os-content `sha256:bd6213760392decfafd9931eb8eda877bc2cb960f9ca9232fbf2123f81df7050`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [b02f19c5](https://github.com/openshift/mdns-publisher/commit/b02f19c5243c9a3ef41eafc41e9d90a24adc0f60) `sha256:653756b4d93c8153976ea0f472b57199842cd13ca6de973d43ba89880106086e`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ccd6c61c](https://github.com/openshift/multus-admission-controller/commit/ccd6c61c10aaa02c31a2053a1a6ac587cee6abb6) `sha256:566d597d9c7cd0f7901ab3d10f29e7b74e56a4ab39fbded4a68f29236c6b11be`
* [multus-cni](https://github.com/openshift/multus-cni) git [d3a18156](https://github.com/openshift/multus-cni/commit/d3a1815632cc3e1c7beb10165f960b4708d097fa) `sha256:4086aabc6653952dfa7ad905a9b2ce69d97a6df7781b221e0557d3fc36679aaa`
* [must-gather](https://github.com/openshift/must-gather) git [318faeff](https://github.com/openshift/must-gather/commit/318faeffd87d70d6727fd4cb30da28aab7c87da3) `sha256:5949b16c2ac5c57c9e50c7846c6787266e09fe104c7130fd0b081ab3f94af5e2`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c01d2de6](https://github.com/openshift/openshift-state-metrics/commit/c01d2de651071389d2621c46e934fd9cb2bf4b8d) `sha256:60638e9986ff72ce6415e23fd31591c98abef2cfda9401c6e4c46ebede0fdda0`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [52a3e249](https://github.com/openshift/cluster-api-provider-openstack/commit/52a3e249a7053149b08374fd989fd5543d3bdcbd) `sha256:7ab392575b4d575b269ccb380c58e7c4583838a5f733a34aa224ab12fa83c054`
* [operator-registry](https://github.com/operator-framework/operator-registry) git [98ebd340](https://github.com/operator-framework/operator-registry/commit/98ebd3400de159c019b864c6ef7c17eb426d9698) `sha256:2b7f56149bdc61bf5a3667c4d95fcbb1fc19211890a30c987579a4f5e60f3f1b`
* [pod](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:1573163f66a4e0d29b830f79a1016a25d40912a972822885cabb4a1133b311ed`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [dd9a418a](https://github.com/openshift/prom-label-proxy/commit/dd9a418af5835ddb1a5181ae6f1303f86d8b1ef3) `sha256:fb4b3fb060b87637c8e881e4ae3b3f442a9a8c87d68d7e64d02e9d6f6f5dbf69`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [6858fa0f](https://github.com/openshift/prometheus-alertmanager/commit/6858fa0f51a7d37db0bb7ff7497aaeef3333f18b) `sha256:e1b535d2bfb6221e1a4cabbd0ce55d96d524d44c28dfdd21e5bf1f09d52b565f`
* [service-catalog](https://github.com/openshift/service-catalog) git [7d8b2a29](https://github.com/openshift/service-catalog/commit/7d8b2a29d2e6f1daa81b9b788c944f07cf3513e1) `sha256:6c78538c1ace549794027237b918d5f2ee6c3b6c166f8bedc78007bb4eaed46f`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/75ed797523afaa1ba457b5a92ec6540673850f49)

* [Bug 1796595](https://bugzilla.redhat.com/show_bug.cgi?id=1796595): [release-4.2] Mitigate aws eventual consistency issues [#295](https://github.com/openshift/cluster-api-provider-aws/pull/295)
* [Bug 1799034](https://bugzilla.redhat.com/show_bug.cgi?id=1799034): [release-4.2] take into consideration all instance states for deletion [#294](https://github.com/openshift/cluster-api-provider-aws/pull/294)
* [Bug 1781160](https://bugzilla.redhat.com/show_bug.cgi?id=1781160): Update Machine status with all instance IP addresses [#279](https://github.com/openshift/cluster-api-provider-aws/pull/279)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/d77b7ae80f23ce511c620f095e8d10844929311c...75ed797523afaa1ba457b5a92ec6540673850f49)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/202b1e3725e1b7e98771515891c39e645d0c48fe)

* [Bug 1827795](https://bugzilla.redhat.com/show_bug.cgi?id=1827795): OpenStack: Replace remote_group_id with remote_ip_prefix [#3505](https://github.com/openshift/installer/pull/3505)
* [Bug 1803221](https://bugzilla.redhat.com/show_bug.cgi?id=1803221): use region info when simulating permissions [#3142](https://github.com/openshift/installer/pull/3142)
* [Bug 1788585](https://bugzilla.redhat.com/show_bug.cgi?id=1788585): OpenStack: create security rules sequentially [#2888](https://github.com/openshift/installer/pull/2888)
* [Bug 1793128](https://bugzilla.redhat.com/show_bug.cgi?id=1793128): enable s390x bootimage support [#2933](https://github.com/openshift/installer/pull/2933)
* [Bug 1788707](https://bugzilla.redhat.com/show_bug.cgi?id=1788707): Backport Azure private DNS to 4.2 branch [#2825](https://github.com/openshift/installer/pull/2825)
* [Bug 1778969](https://bugzilla.redhat.com/show_bug.cgi?id=1778969): Default new file and directory permissions to not be world readable [#2793](https://github.com/openshift/installer/pull/2793)
* images: add a new generic libvirt CI image [#2923](https://github.com/openshift/installer/pull/2923)
* [Bug 1782994](https://bugzilla.redhat.com/show_bug.cgi?id=1782994): terraform/plugins: update libvirt provider [#2804](https://github.com/openshift/installer/pull/2804)
* [Bug 1782588](https://bugzilla.redhat.com/show_bug.cgi?id=1782588): destroy/gcp/policybinding.go: identity deleted service accounts belonging to the cluster [#2798](https://github.com/openshift/installer/pull/2798)
* [Bug 1771358](https://bugzilla.redhat.com/show_bug.cgi?id=1771358): manually prepare cloud provider's config [#2660](https://github.com/openshift/installer/pull/2660)
* [Bug 1779793](https://bugzilla.redhat.com/show_bug.cgi?id=1779793): vSphere UPI: set specific version of ignition provider [#2752](https://github.com/openshift/installer/pull/2752)
* [Bug 1773909](https://bugzilla.redhat.com/show_bug.cgi?id=1773909): OpenStack: Fix destroy module [#2701](https://github.com/openshift/installer/pull/2701)
* [Bug 1775062](https://bugzilla.redhat.com/show_bug.cgi?id=1775062): OpenStack: Use UTF-8 locales in CI container image [#2700](https://github.com/openshift/installer/pull/2700)
* [Bug 1775531](https://bugzilla.redhat.com/show_bug.cgi?id=1775531): images/openstack: add awscli to image [#2707](https://github.com/openshift/installer/pull/2707)
* [Bug 1770223](https://bugzilla.redhat.com/show_bug.cgi?id=1770223): bootstrap kubeconfig to use api-int [#2668](https://github.com/openshift/installer/pull/2668)
* [Bug 1766066](https://bugzilla.redhat.com/show_bug.cgi?id=1766066): Revert "Merge pull request #2471 from openshift-cherrypick-robot/cher… [#2640](https://github.com/openshift/installer/pull/2640)
* [Bug 1765308](https://bugzilla.redhat.com/show_bug.cgi?id=1765308): pkg/types/aws/validation/platform: Include eu-north-1 [#2568](https://github.com/openshift/installer/pull/2568)
* [Bug 1758663](https://bugzilla.redhat.com/show_bug.cgi?id=1758663): asset/manifests: Removes external api server from default noProxy [#2471](https://github.com/openshift/installer/pull/2471)
* [Bug 1760197](https://bugzilla.redhat.com/show_bug.cgi?id=1760197): Change GCP UPI firewall rules for network LB health check. [#2488](https://github.com/openshift/installer/pull/2488)
* [Full changelog](https://github.com/openshift/installer/compare/90ccb37ac1f85ae811c50a29f9bb7e779c5045fb...202b1e3725e1b7e98771515891c39e645d0c48fe)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/d22abd22d1f7f227721b29f9c842c23d846021d1)

* [Bug 1775123](https://bugzilla.redhat.com/show_bug.cgi?id=1775123): Tweak VRID calculation to avoid 0 [#35](https://github.com/openshift/baremetal-runtimecfg/pull/35)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/d5bb4c0889ee6c57675def821103f42f6eefcd35...d22abd22d1f7f227721b29f9c842c23d846021d1)


### [cli, cli-artifacts, deployer](https://github.com/openshift/oc/tree/1337b299ce122ba5f4d38fa6d8aea1ca202fd009)

* [Bug 1795312](https://bugzilla.redhat.com/show_bug.cgi?id=1795312): initialize auth plugins [#270](https://github.com/openshift/oc/pull/270)
* [Bug 1789869](https://bugzilla.redhat.com/show_bug.cgi?id=1789869): allow --config and --kubeconfig [#248](https://github.com/openshift/oc/pull/248)
* [Bug 1776495](https://bugzilla.redhat.com/show_bug.cgi?id=1776495): don't install quota CRDs [#214](https://github.com/openshift/oc/pull/214)
* [Bug 1772463](https://bugzilla.redhat.com/show_bug.cgi?id=1772463): Set TypeSetter in get print flags, like we do everywhere elsewhere [#163](https://github.com/openshift/oc/pull/163)
* [Bug 1770741](https://bugzilla.redhat.com/show_bug.cgi?id=1770741): Fixed Dockerfile FROM statement parser. [#154](https://github.com/openshift/oc/pull/154)
* [Bug 1761922](https://bugzilla.redhat.com/show_bug.cgi?id=1761922): Manifest lists can fail to mirror because dependent manifests are not uploaded [#128](https://github.com/openshift/oc/pull/128)
* [Bug 1773807](https://bugzilla.redhat.com/show_bug.cgi?id=1773807): Enable all Linux arches in cli-artifacts [4.2] [#168](https://github.com/openshift/oc/pull/168)
* [Bug 1771420](https://bugzilla.redhat.com/show_bug.cgi?id=1771420): Update ruby-22-centos7 to ruby-25-centos7 [#195](https://github.com/openshift/oc/pull/195)
* [Bug 1760269](https://bugzilla.redhat.com/show_bug.cgi?id=1760269): UPSTREAM: 77874: fix CVE-2019-11244: kubectl --http-cache=<world-accessible dir> [#125](https://github.com/openshift/oc/pull/125)
* [Full changelog](https://github.com/openshift/oc/compare/d5465d715197862b15c8cf05e864d7c3cfea6917...1337b299ce122ba5f4d38fa6d8aea1ca202fd009)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/3a1e5f22704e1c780076164654dcc68c632e0b42)

* [Bug 1819183](https://bugzilla.redhat.com/show_bug.cgi?id=1819183): handle old Infrastructure objects without PlatformStatus [#173](https://github.com/openshift/cloud-credential-operator/pull/173)
* [Bug 1803221](https://bugzilla.redhat.com/show_bug.cgi?id=1803221): improve permissions simulation by adding region info [#157](https://github.com/openshift/cloud-credential-operator/pull/157)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/b905f49fd022cdc6674a85fa4bcf0f423128831b...3a1e5f22704e1c780076164654dcc68c632e0b42)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/ed95fe78361f5ba05b9464a7972fe89b00e1dc86)

* [Bug 1772839](https://bugzilla.redhat.com/show_bug.cgi?id=1772839): operator: add ingress and routes to related objects [#217](https://github.com/openshift/cluster-authentication-operator/pull/217)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/64fc3691e84c60d7e395c9f3c7d1653bcbe78604...ed95fe78361f5ba05b9464a7972fe89b00e1dc86)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/0ea559ca1490d7bea4fb7ee6c3619b7696b2ef49)

* [Bug 1779743](https://bugzilla.redhat.com/show_bug.cgi?id=1779743): Don't suppress errors when reporting operator status [#126](https://github.com/openshift/cluster-autoscaler-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/045aea45264c5d47ccfdc924906f43a016eab169...0ea559ca1490d7bea4fb7ee6c3619b7696b2ef49)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/221cae05254ff889f2ad0f4c08e8b82618d95a0b)

* [Bug 1780213](https://bugzilla.redhat.com/show_bug.cgi?id=1780213): Don't start DNS on NotReady nodes [#150](https://github.com/openshift/cluster-dns-operator/pull/150)
* [Bug 1762960](https://bugzilla.redhat.com/show_bug.cgi?id=1762960): status: prevent degraded status flapping on rollout [#135](https://github.com/openshift/cluster-dns-operator/pull/135)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/6db7931cc2e4c45016fa9fb9b417ae50e95a8c7a...221cae05254ff889f2ad0f4c08e8b82618d95a0b)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/2f08889ca73fd78cc8432ec8a03762a92b8ef011)

* [Bug 1820243](https://bugzilla.redhat.com/show_bug.cgi?id=1820243): nodeca daemon should tolerate all taints [#538](https://github.com/openshift/cluster-image-registry-operator/pull/538)
* [Bug 1825718](https://bugzilla.redhat.com/show_bug.cgi?id=1825718): update object dumper [#534](https://github.com/openshift/cluster-image-registry-operator/pull/534)
* [Bug 1808433](https://bugzilla.redhat.com/show_bug.cgi?id=1808433): tolerate all NoSchedule taints [#473](https://github.com/openshift/cluster-image-registry-operator/pull/473)
* [Bug 1814765](https://bugzilla.redhat.com/show_bug.cgi?id=1814765): use junit_*.xml pattern for junit reports [#498](https://github.com/openshift/cluster-image-registry-operator/pull/498)
* [Bug 1815125](https://bugzilla.redhat.com/show_bug.cgi?id=1815125): force path style for custom endpoints [#501](https://github.com/openshift/cluster-image-registry-operator/pull/501)
* [Bug 1808505](https://bugzilla.redhat.com/show_bug.cgi?id=1808505): only process install config changes to configmaps in the… [#477](https://github.com/openshift/cluster-image-registry-operator/pull/477)
* [Bug 1770658](https://bugzilla.redhat.com/show_bug.cgi?id=1770658): report Available when registry is explicitly Removed [#412](https://github.com/openshift/cluster-image-registry-operator/pull/412)
* [Bug 1770658](https://bugzilla.redhat.com/show_bug.cgi?id=1770658): Set Version on Operator status even if Removed. [#408](https://github.com/openshift/cluster-image-registry-operator/pull/408)
* [Bug 1760480](https://bugzilla.redhat.com/show_bug.cgi?id=1760480): Remove CGO_ENABLED=0 from build script [#401](https://github.com/openshift/cluster-image-registry-operator/pull/401)
* [Bug 1756478](https://bugzilla.redhat.com/show_bug.cgi?id=1756478): Add flag 'DisableRedirect', decide to route all data through the registry [#400](https://github.com/openshift/cluster-image-registry-operator/pull/400)
* [Bug 1759159](https://bugzilla.redhat.com/show_bug.cgi?id=1759159): Reset storage when swapping back end type [#399](https://github.com/openshift/cluster-image-registry-operator/pull/399)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/4599a8e42e1d329a7262470f81fda4808e073b2a...2f08889ca73fd78cc8432ec8a03762a92b8ef011)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/c0a5e5eb5a9e80dd304f4e49066e4bf52708be4a)

* [Bug 1788707](https://bugzilla.redhat.com/show_bug.cgi?id=1788707): [release-4.2] NE-250: Support both DNSZone and PrivateDNSZone resources [#344](https://github.com/openshift/cluster-ingress-operator/pull/344)
* [Bug 1756303](https://bugzilla.redhat.com/show_bug.cgi?id=1756303): dns/aws: Do not include record in error messages [#305](https://github.com/openshift/cluster-ingress-operator/pull/305)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/1f0e98982c8c31829c6847cbaa70c40817805508...c0a5e5eb5a9e80dd304f4e49066e4bf52708be4a)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/1224485d03c5b146126f41a11711c4d35d00f476)

* [Bug 1820543](https://bugzilla.redhat.com/show_bug.cgi?id=1820543): certrotationcontroller: fix typo calling wrong internal LB func [#813](https://github.com/openshift/cluster-kube-apiserver-operator/pull/813)
* [release 4-2] Bug 1810185: Components using globs in Dockerfile COPY commands may break on OCP 4 [#824](https://github.com/openshift/cluster-kube-apiserver-operator/pull/824)
* [Bug 1803750](https://bugzilla.redhat.com/show_bug.cgi?id=1803750): [release-4.2] Improve node controller condition message [#766](https://github.com/openshift/cluster-kube-apiserver-operator/pull/766)
* [Bug 1771665](https://bugzilla.redhat.com/show_bug.cgi?id=1771665): file observer has not restarted process on serving cert change [#680](https://github.com/openshift/cluster-kube-apiserver-operator/pull/680)
* [Bug 1758958](https://bugzilla.redhat.com/show_bug.cgi?id=1758958): hide secrets in logs [#647](https://github.com/openshift/cluster-kube-apiserver-operator/pull/647)
* [Bug 1731228](https://bugzilla.redhat.com/show_bug.cgi?id=1731228): add alert when feature set is set [#590](https://github.com/openshift/cluster-kube-apiserver-operator/pull/590)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/5ae09894bc60a23a1f9072c095414cd7fc77a6f3...1224485d03c5b146126f41a11711c4d35d00f476)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/be2c8227b8c58b162f1749409546f97ac2910d28)

* [Bug 1770303](https://bugzilla.redhat.com/show_bug.cgi?id=1770303): alert when number of expected pods is equal or lower than desired healthy pods in a PDB [#306](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/306)
* [Bug 1810185](https://bugzilla.redhat.com/show_bug.cgi?id=1810185): Remove wildcard COPY form Dockerfile [#372](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/372)
* [Bug 1802297](https://bugzilla.redhat.com/show_bug.cgi?id=1802297): Inject kube-controller-manager pods trust stores with trusted ca bundle [#350](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/350)
* [Bug 1803750](https://bugzilla.redhat.com/show_bug.cgi?id=1803750): [release-4.2] Improve node controller condition message [#348](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/348)
* [Bug 1718061](https://bugzilla.redhat.com/show_bug.cgi?id=1718061): Fix KCM leader election configmap deletion recovery [#323](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/323)
* [Bug 1779801](https://bugzilla.redhat.com/show_bug.cgi?id=1779801): watch for changes to input secrets from the operator namespace [#305](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/305)
* [Bug 1758959](https://bugzilla.redhat.com/show_bug.cgi?id=1758959): hide secrets in logs [#314](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/314)
* [Bug 1767047](https://bugzilla.redhat.com/show_bug.cgi?id=1767047): move rbac for cluster-policy-controller leader lock to kcm-o [#300](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/300)
* [Bug 1759400](https://bugzilla.redhat.com/show_bug.cgi?id=1759400): add non-MITM proxy support [#286](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/286)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/423f9d1fa0f92d01a8620b0423c1a88977bcd504...be2c8227b8c58b162f1749409546f97ac2910d28)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/3e1ab1a5909f94a1ef971a191802ecc053ce6b36)

* [Bug 1810185](https://bugzilla.redhat.com/show_bug.cgi?id=1810185): Fix dockerfile [#221](https://github.com/openshift/cluster-kube-scheduler-operator/pull/221)
* [Bug 1803744](https://bugzilla.redhat.com/show_bug.cgi?id=1803744): [release-4.2] Improve node controller condition message [#209](https://github.com/openshift/cluster-kube-scheduler-operator/pull/209)
* [Bug 1758957](https://bugzilla.redhat.com/show_bug.cgi?id=1758957): hide secrets in logs [#186](https://github.com/openshift/cluster-kube-scheduler-operator/pull/186)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/a42fcb7538e6fecad9278d650b04aced7c4e88be...3e1ab1a5909f94a1ef971a191802ecc053ce6b36)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/a226e0fc46cabee7186de69e7409020c861e454c)

* [Bug 1781160](https://bugzilla.redhat.com/show_bug.cgi?id=1781160): Fall back to machine-api check if certificate check fails [#59](https://github.com/openshift/cluster-machine-approver/pull/59)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/a4a28b0e09ea04592319782a9fb9398aa9569934...a226e0fc46cabee7186de69e7409020c861e454c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/add5655ff38248a0c18492b8a0e7de92f70213b9)

* [Bug 1803957](https://bugzilla.redhat.com/show_bug.cgi?id=1803957): Specify grafana-proxy container by name [#719](https://github.com/openshift/cluster-monitoring-operator/pull/719)
* [Bug 1791211](https://bugzilla.redhat.com/show_bug.cgi?id=1791211): Add alert for no routes configured in alertmanager [#614](https://github.com/openshift/cluster-monitoring-operator/pull/614)
* [Bug 1803957](https://bugzilla.redhat.com/show_bug.cgi?id=1803957): Backport trusted ca support for prometheus [#683](https://github.com/openshift/cluster-monitoring-operator/pull/683)
* [Bug 1796040](https://bugzilla.redhat.com/show_bug.cgi?id=1796040): pkg/manifests: change location of trustedCA bundle; add trustedCA to … [#658](https://github.com/openshift/cluster-monitoring-operator/pull/658)
* [Bug 1788477](https://bugzilla.redhat.com/show_bug.cgi?id=1788477): trustedCA bundle support for grafana oauth proxy [#602](https://github.com/openshift/cluster-monitoring-operator/pull/602)
* [Bug 1773665](https://bugzilla.redhat.com/show_bug.cgi?id=1773665): Bump telemeter to backport changes BZ 1760393 to 4.2.z [#589](https://github.com/openshift/cluster-monitoring-operator/pull/589)
* [Bug 1773665](https://bugzilla.redhat.com/show_bug.cgi?id=1773665): add cluster cpu recording rules [#572](https://github.com/openshift/cluster-monitoring-operator/pull/572)
* [Bug 1773246](https://bugzilla.redhat.com/show_bug.cgi?id=1773246): Bump telemeter to get whitelist changes for virt_platform [#573](https://github.com/openshift/cluster-monitoring-operator/pull/573)
* [Bug 1773246](https://bugzilla.redhat.com/show_bug.cgi?id=1773246): Add a rule that sums the nodes reporting virt_platform types [#557](https://github.com/openshift/cluster-monitoring-operator/pull/557)
* [Bug 1770779](https://bugzilla.redhat.com/show_bug.cgi?id=1770779): Fix filesystem alerts [#540](https://github.com/openshift/cluster-monitoring-operator/pull/540)
* [Bug 1763057](https://bugzilla.redhat.com/show_bug.cgi?id=1763057): pkg/client: Fix setting number of unavailable pods for DaemonSet [#513](https://github.com/openshift/cluster-monitoring-operator/pull/513)
* [Bug 1761887](https://bugzilla.redhat.com/show_bug.cgi?id=1761887): tasks/prometheusoperator: Change deployment selector migration strategy [#507](https://github.com/openshift/cluster-monitoring-operator/pull/507)
* [Bug 1755242](https://bugzilla.redhat.com/show_bug.cgi?id=1755242): jsonnet/rules: fix memory_usage_bytes recording rule [#491](https://github.com/openshift/cluster-monitoring-operator/pull/491)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9c4af96e91155bcadc0e389b5d421a31101625c8...add5655ff38248a0c18492b8a0e7de92f70213b9)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6d9c42b2f2d18932036a4d34b0ce14f192a80584)

* [Bug 1785728](https://bugzilla.redhat.com/show_bug.cgi?id=1785728): openshift-sdn, CNO: handle new kubeconfig path [#431](https://github.com/openshift/cluster-network-operator/pull/431)
* [Bug 1778314](https://bugzilla.redhat.com/show_bug.cgi?id=1778314): False Alarm - SDN pod has gone too long without syncing iptables rule [#416](https://github.com/openshift/cluster-network-operator/pull/416)
* [Bug 1778235](https://bugzilla.redhat.com/show_bug.cgi?id=1778235): network operator crashes when infra.status.platformStatus is missing [#407](https://github.com/openshift/cluster-network-operator/pull/407)
* [Bug 1770223](https://bugzilla.redhat.com/show_bug.cgi?id=1770223): Reverts PR #388 [#405](https://github.com/openshift/cluster-network-operator/pull/405)
* [Bug 1769482](https://bugzilla.redhat.com/show_bug.cgi?id=1769482): pkg/controller/operconfig/operconfig_controller: Add operator namespace to relatedObjects [#387](https://github.com/openshift/cluster-network-operator/pull/387)
* [Bug 1760790](https://bugzilla.redhat.com/show_bug.cgi?id=1760790): Fix dereference in macvlan IPAM validation function (backport 4.2) [#349](https://github.com/openshift/cluster-network-operator/pull/349)
* [Bug 1766066](https://bugzilla.redhat.com/show_bug.cgi?id=1766066): Revert "Merge pull request #334 from danehans/bz_1758656" [#388](https://github.com/openshift/cluster-network-operator/pull/388)
* [Bug 1758656](https://bugzilla.redhat.com/show_bug.cgi?id=1758656): Removes external api server from default noProxy [#334](https://github.com/openshift/cluster-network-operator/pull/334)
* [Bug 1761345](https://bugzilla.redhat.com/show_bug.cgi?id=1761345): Tweaking kuryr-controller configuration to avoid restarts [#352](https://github.com/openshift/cluster-network-operator/pull/352)
* [Bug 1762921](https://bugzilla.redhat.com/show_bug.cgi?id=1762921): [4.2] The Multus admission controller should not have the not-ready toleration [#343](https://github.com/openshift/cluster-network-operator/pull/343)
* [Bug 1754686](https://bugzilla.redhat.com/show_bug.cgi?id=1754686): The DHCP daemon should mount the directory for the socketfile (backport 4.2) [#331](https://github.com/openshift/cluster-network-operator/pull/331)
* [Bug 1754606](https://bugzilla.redhat.com/show_bug.cgi?id=1754606): [release-4.2] Correct the way nodes are computed for alert ClusterIPTablesStale [#323](https://github.com/openshift/cluster-network-operator/pull/323)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/86be17e24988457ae44d56fdcbc8222805eb1811...6d9c42b2f2d18932036a4d34b0ce14f192a80584)


### [cluster-node-tuned](https://github.com/openshift/openshift-tuned/tree/eeaa972122468e5521344d3d88e18565f308c304)

* [Bug 1769832](https://bugzilla.redhat.com/show_bug.cgi?id=1769832): [release-4.2] Improve scalability of openshift-tuned. [#32](https://github.com/openshift/openshift-tuned/pull/32)
* [Full changelog](https://github.com/openshift/openshift-tuned/compare/757086bd35f7b2d70c669da9629ebd5eb651262e...eeaa972122468e5521344d3d88e18565f308c304)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f135787cf9cd2e23a27f7a55ff98d40f486d66a5)

* [Bug 1795671](https://bugzilla.redhat.com/show_bug.cgi?id=1795671): Do not set owner references on tuned ServiceAccount (4.2) [#109](https://github.com/openshift/cluster-node-tuning-operator/pull/109)
* [Bug 1769471](https://bugzilla.redhat.com/show_bug.cgi?id=1769471): Use net.ipv4.conf.all.arp_announce=2 in the openshift profile. [#93](https://github.com/openshift/cluster-node-tuning-operator/pull/93)
* [Bug 1766628](https://bugzilla.redhat.com/show_bug.cgi?id=1766628): Bump PID limits to help capture goroutine stack traces [#87](https://github.com/openshift/cluster-node-tuning-operator/pull/87)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ee308040a94323ea7cac103d41812ef1d2fdcd89...f135787cf9cd2e23a27f7a55ff98d40f486d66a5)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/37968e2ae5136b02fc5376bcc321c8b4ba84029e)

* [Bug 1805615](https://bugzilla.redhat.com/show_bug.cgi?id=1805615): no longer gate removed processing when imagestreams in progress [#234](https://github.com/openshift/cluster-samples-operator/pull/234)
* [Bug 1805250](https://bugzilla.redhat.com/show_bug.cgi?id=1805250): manifests: add openshift/oauth-proxy:v4.4 image [#248](https://github.com/openshift/cluster-samples-operator/pull/248)
* [Bug 1779935](https://bugzilla.redhat.com/show_bug.cgi?id=1779935): set version to start for s390/ppc until we have actual samples [#206](https://github.com/openshift/cluster-samples-operator/pull/206)
* [Bug 1775333](https://bugzilla.redhat.com/show_bug.cgi?id=1775333): fetch arch from GOARCH, allow for z/ppc [#200](https://github.com/openshift/cluster-samples-operator/pull/200)
* [Bug 1772178](https://bugzilla.redhat.com/show_bug.cgi?id=1772178): no longer gate setting progressing to false on in flight imagestream … [#199](https://github.com/openshift/cluster-samples-operator/pull/199)
* [Bug 1768816](https://bugzilla.redhat.com/show_bug.cgi?id=1768816): retry every failed IST; track retry on imagestream basis vs. global b… [#196](https://github.com/openshift/cluster-samples-operator/pull/196)
* [Bug 1763891](https://bugzilla.redhat.com/show_bug.cgi?id=1763891): retry failed imagestream imports more than once [#189](https://github.com/openshift/cluster-samples-operator/pull/189)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/ee6f90967b5bb106a76fffb6600fd36352490876...37968e2ae5136b02fc5376bcc321c8b4ba84029e)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/8682a2af65d0a2199432b97db531ddfe68e5d9b2)

* [Bug 1753355](https://bugzilla.redhat.com/show_bug.cgi?id=1753355): Enables updating of StorageClass if a change is detected. [#48](https://github.com/openshift/cluster-storage-operator/pull/48)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/7c627a01ca2b85f5dfdd901950398c697e3c87e9...8682a2af65d0a2199432b97db531ddfe68e5d9b2)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/4b39863ed739013e58fa9ca22fa6c945ec6c2f51)

* [Bug 1800346](https://bugzilla.redhat.com/show_bug.cgi?id=1800346): lib/resourcemerge/core: Fix panic on container removal [#314](https://github.com/openshift/cluster-version-operator/pull/314)
* [Bug 1792005](https://bugzilla.redhat.com/show_bug.cgi?id=1792005): lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required [#300](https://github.com/openshift/cluster-version-operator/pull/300)
* [Bug 1802248](https://bugzilla.redhat.com/show_bug.cgi?id=1802248): lib/resourcemerge: remove ports which are no longer required [#325](https://github.com/openshift/cluster-version-operator/pull/325)
* [Bug 1786315](https://bugzilla.redhat.com/show_bug.cgi?id=1786315): pkg/cvo/updatepayload: Drop ephemeral-storage request [#288](https://github.com/openshift/cluster-version-operator/pull/288)
* [Bug 1785533](https://bugzilla.redhat.com/show_bug.cgi?id=1785533): Set resource requests on the extract job [#286](https://github.com/openshift/cluster-version-operator/pull/286)
* [Bug 1775836](https://bugzilla.redhat.com/show_bug.cgi?id=1775836): Add proxy support for CVO [#271](https://github.com/openshift/cluster-version-operator/pull/271)
* [Bug 1763822](https://bugzilla.redhat.com/show_bug.cgi?id=1763822): A timeout in applying an upgrade should not result in the CVO thinking that it is reconciling the payload [#262](https://github.com/openshift/cluster-version-operator/pull/262)
* [Bug 1759710](https://bugzilla.redhat.com/show_bug.cgi?id=1759710): pkg/cvo/status: Don't clobber last.CompletionTime when adding new entries [#250](https://github.com/openshift/cluster-version-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/0725bd53c732c8e3a490d1080f03edbe7e579b3a...4b39863ed739013e58fa9ca22fa6c945ec6c2f51)


### [console](https://github.com/openshift/console/tree/3b1ae8627c22b6bcc8e29e5810179075116f0a10)

* [Bug 1807294](https://bugzilla.redhat.com/show_bug.cgi?id=1807294): Fix sort criteria for capacity for storage tables [#4688](https://github.com/openshift/console/pull/4688)
* [Bug 1798646](https://bugzilla.redhat.com/show_bug.cgi?id=1798646): Backport fix for incorrect channel displayed in OperatorHub [#4379](https://github.com/openshift/console/pull/4379)
* [Bug 1796634](https://bugzilla.redhat.com/show_bug.cgi?id=1796634): Fix bug where booleanSwitch does not default to false [#4142](https://github.com/openshift/console/pull/4142)
* [Bug 1787585](https://bugzilla.redhat.com/show_bug.cgi?id=1787585): Fix off by one bug in metrics rows count [#3859](https://github.com/openshift/console/pull/3859)
* [Bug 1790557](https://bugzilla.redhat.com/show_bug.cgi?id=1790557): Fix Pipeline Params [#3983](https://github.com/openshift/console/pull/3983)
* [Bug 1774843](https://bugzilla.redhat.com/show_bug.cgi?id=1774843): Fix clone build access review [#3683](https://github.com/openshift/console/pull/3683)
* [Bug 1791182](https://bugzilla.redhat.com/show_bug.cgi?id=1791182): Add 4.3 channels to UI in 4.2.z [#3991](https://github.com/openshift/console/pull/3991)
* [Bug 1789903](https://bugzilla.redhat.com/show_bug.cgi?id=1789903): Fixed the display issue in operand detail view, when the value of the… [#3920](https://github.com/openshift/console/pull/3920)
* [Bug 1789119](https://bugzilla.redhat.com/show_bug.cgi?id=1789119): Support for Pipeline Operator 0.9 on OpenShift 4.2 [#3898](https://github.com/openshift/console/pull/3898)
* [Bug 1786591](https://bugzilla.redhat.com/show_bug.cgi?id=1786591): Shows the values in expand modal dropdown [#3843](https://github.com/openshift/console/pull/3843)
* [Bug 1788705](https://bugzilla.redhat.com/show_bug.cgi?id=1788705): Lazy load images in OperatorHub [#3885](https://github.com/openshift/console/pull/3885)
* [Bug 1776164](https://bugzilla.redhat.com/show_bug.cgi?id=1776164): Filtering Storage Class logic added [release-4.2] [#3576](https://github.com/openshift/console/pull/3576)
* [Bug 1781055](https://bugzilla.redhat.com/show_bug.cgi?id=1781055): Fix new/old alerts comparison in withDashboardResources [#3638](https://github.com/openshift/console/pull/3638)
* [Bug 1781146](https://bugzilla.redhat.com/show_bug.cgi?id=1781146): Fixes selection of SC from dropdown [#3748](https://github.com/openshift/console/pull/3748)
* [Bug 1775217](https://bugzilla.redhat.com/show_bug.cgi?id=1775217): Fix access review message for namespaced resources [#3527](https://github.com/openshift/console/pull/3527)
* [Bug 1776769](https://bugzilla.redhat.com/show_bug.cgi?id=1776769): Added CSI provisioner to storage class [#3595](https://github.com/openshift/console/pull/3595)
* [Bug 1760357](https://bugzilla.redhat.com/show_bug.cgi?id=1760357): "VolumeMode Block" should be set for RBD+RWX in pvc creation [#3152](https://github.com/openshift/console/pull/3152)
* [Bug 1775720](https://bugzilla.redhat.com/show_bug.cgi?id=1775720): Backport to 4.2 - Chargeback Reports and ReportQueries change to v1 apiVersion [#3523](https://github.com/openshift/console/pull/3523)
* [Bug 1774508](https://bugzilla.redhat.com/show_bug.cgi?id=1774508): webpack: include contenthash in CSS filenames [#3491](https://github.com/openshift/console/pull/3491)
* [Bug 1774653](https://bugzilla.redhat.com/show_bug.cgi?id=1774653): Fix overview dashboard prometheus queries [#3557](https://github.com/openshift/console/pull/3557)
* [Bug 1772009](https://bugzilla.redhat.com/show_bug.cgi?id=1772009): Increase OSD size from 1Ti to 2Ti [#3502](https://github.com/openshift/console/pull/3502)
* [Bug 1777012](https://bugzilla.redhat.com/show_bug.cgi?id=1777012): Align info tootip [#3594](https://github.com/openshift/console/pull/3594)
* [Bug 1756403](https://bugzilla.redhat.com/show_bug.cgi?id=1756403): Backport for disabling ROX for the OCS based SC when creating PVs [#3414](https://github.com/openshift/console/pull/3414)
* [Bug 1767865](https://bugzilla.redhat.com/show_bug.cgi?id=1767865): Bump kubevirt-web-ui-components-v0.1.44-2 [#3231](https://github.com/openshift/console/pull/3231)
* [Bug 1768658](https://bugzilla.redhat.com/show_bug.cgi?id=1768658): Fix ScrollToTopOnMount for MS Edge [#3247](https://github.com/openshift/console/pull/3247)
* [Bug 1767961](https://bugzilla.redhat.com/show_bug.cgi?id=1767961): Client Fix for Pipeline Operator 0.7.0 [#3220](https://github.com/openshift/console/pull/3220)
* [Bug 1766376](https://bugzilla.redhat.com/show_bug.cgi?id=1766376): Incorrect link to unhealthy resource on Object Service Dashboard [#3126](https://github.com/openshift/console/pull/3126)
* [Bug 1756935](https://bugzilla.redhat.com/show_bug.cgi?id=1756935): Modified the text to remove tainting of nodes text on ocs install flow [#3117](https://github.com/openshift/console/pull/3117)
* [Bug 1756935](https://bugzilla.redhat.com/show_bug.cgi?id=1756935): Removed the tainting of nodes from ocs install flow [#3116](https://github.com/openshift/console/pull/3116)
* [Bug 1755980](https://bugzilla.redhat.com/show_bug.cgi?id=1755980): Removes Add capacity option for other storage operators [#2863](https://github.com/openshift/console/pull/2863)
* [Bug 1761879](https://bugzilla.redhat.com/show_bug.cgi?id=1761879): Fix crash with operand resources [#2981](https://github.com/openshift/console/pull/2981)
* [Bug 1760044](https://bugzilla.redhat.com/show_bug.cgi?id=1760044): Console workload show restricted acccess if knative serverless TP1 operator is installed and logged in as non admin [#2960](https://github.com/openshift/console/pull/2960)
* [Bug 1757134](https://bugzilla.redhat.com/show_bug.cgi?id=1757134): Modify View Update Strategy Descriptor [#2993](https://github.com/openshift/console/pull/2993)
* tests: Combine e2e and olm tests suites back into one [#3092](https://github.com/openshift/console/pull/3092)
* [Bug 1758170](https://bugzilla.redhat.com/show_bug.cgi?id=1758170): Query Browser: Fix UI rapidly flipping between two different queries [#2837](https://github.com/openshift/console/pull/2837)
* [Bug 1762218](https://bugzilla.redhat.com/show_bug.cgi?id=1762218): Bump kubevirt-web-ui-components-v0.1.44.1 [#3010](https://github.com/openshift/console/pull/3010)
* [Full changelog](https://github.com/openshift/console/compare/58f965df6c31aed51477c78b6c15651a910d8dff...3b1ae8627c22b6bcc8e29e5810179075116f0a10)


### [console-operator](https://github.com/openshift/console-operator/tree/c7f433dbe8da9750b119cfad367d51f127baf826)

* [Bug 1773808](https://bugzilla.redhat.com/show_bug.cgi?id=1773808): Enable multi-arch support in downloads [4.2] [#352](https://github.com/openshift/console-operator/pull/352)
* [Bug 1764227](https://bugzilla.redhat.com/show_bug.cgi?id=1764227): Incorrect validation pattern on ConsoleCLIDownloads Href field [#324](https://github.com/openshift/console-operator/pull/324)
* [Full changelog](https://github.com/openshift/console-operator/compare/ea390b2345ff653a98ab7b5c65f6b907edef4e4b...c7f433dbe8da9750b119cfad367d51f127baf826)


### [docker-builder](https://github.com/openshift/builder/tree/942630c84b34f4cb6ccae4f1ba08a20dc8546fe6)

* [Bug 1802888](https://bugzilla.redhat.com/show_bug.cgi?id=1802888): bump(*): CVE-2020-8945 [#137](https://github.com/openshift/builder/pull/137)
* [Bug 1754680](https://bugzilla.redhat.com/show_bug.cgi?id=1754680): do not force skip tls verify to true on image source injection [#111](https://github.com/openshift/builder/pull/111)
* [Full changelog](https://github.com/openshift/builder/compare/2f99856fb715f9ae1584a996ddef0770d3952167...942630c84b34f4cb6ccae4f1ba08a20dc8546fe6)


### [docker-registry](https://github.com/openshift/image-registry/tree/a7655f1922932b3b0b2a70c2f20e4e6fbc8c70a0)

* Use Spyglass-compatible name for junit reports [#212](https://github.com/openshift/image-registry/pull/212)
* [Bug 1755780](https://bugzilla.redhat.com/show_bug.cgi?id=1755780): Checking if image name is valid, prune otherwise. [#197](https://github.com/openshift/image-registry/pull/197)
* [Bug 1755780](https://bugzilla.redhat.com/show_bug.cgi?id=1755780): Disabled gosec [#200](https://github.com/openshift/image-registry/pull/200)
* [Full changelog](https://github.com/openshift/image-registry/compare/9beb3f4d795f66d9c0ecf07665d6c7837ab5dff0...a7655f1922932b3b0b2a70c2f20e4e6fbc8c70a0)


### [haproxy-router](https://github.com/openshift/router/tree/9d1233b4a7c230969f0f7e1679caedcc2ba64dee)

* [Bug 1809398](https://bugzilla.redhat.com/show_bug.cgi?id=1809398): Dynamically reload metrics certificate/key file changes [#96](https://github.com/openshift/router/pull/96)
* [Bug 1758373](https://bugzilla.redhat.com/show_bug.cgi?id=1758373): fix haproxy reload crash when processing ECDSA keys [#44](https://github.com/openshift/router/pull/44)
* [Full changelog](https://github.com/openshift/router/compare/e7479192fadbc469e6f16ef752c5acfa99519690...9d1233b4a7c230969f0f7e1679caedcc2ba64dee)


### [hyperkube, tests](https://github.com/openshift/origin/tree/20b13ba3d745c2c0060be4fbf485311c6d8c672c)

* [Bug 1794854](https://bugzilla.redhat.com/show_bug.cgi?id=1794854): UPSTREAM: 86195: Sync the status of static Pods [#24454](https://github.com/openshift/origin/pull/24454)
* [Bug 1803083](https://bugzilla.redhat.com/show_bug.cgi?id=1803083): 4.2: UPSTREAM: 87673: blank out value for unbounded client label [#24543](https://github.com/openshift/origin/pull/24543)
* [Bug 1817619](https://bugzilla.redhat.com/show_bug.cgi?id=1817619): make s2i-dropcaps more reliable by not depending on a yum install to [#24785](https://github.com/openshift/origin/pull/24785)
* [Bug 1791855](https://bugzilla.redhat.com/show_bug.cgi?id=1791855): backport e2e testing oauth-server fixes [#24747](https://github.com/openshift/origin/pull/24747)
* [Bug 1791211](https://bugzilla.redhat.com/show_bug.cgi?id=1791211): test/extended/prometheus: exclude AlertmanagerReceiversNotConfigured from checking [#24638](https://github.com/openshift/origin/pull/24638)
* [Bug 1794830](https://bugzilla.redhat.com/show_bug.cgi?id=1794830): move more image-eco db template tests from upstream repos to samples operator [#24511](https://github.com/openshift/origin/pull/24511)
* [Bug 1800894](https://bugzilla.redhat.com/show_bug.cgi?id=1800894): test/cmd: build.sh can't reach old openshift/origin:v1.1 [#24521](https://github.com/openshift/origin/pull/24521)
* [Bug 1765249](https://bugzilla.redhat.com/show_bug.cgi?id=1765249): CL fix fixture path & update config path, quickstarts & bindata [#24127](https://github.com/openshift/origin/pull/24127)
* [Bug 1794813](https://bugzilla.redhat.com/show_bug.cgi?id=1794813): UPSTREAM: 79160: e2e Flake: Pass updated deployment for comparison of replica count [#24474](https://github.com/openshift/origin/pull/24474)
* [Bug 1794830](https://bugzilla.redhat.com/show_bug.cgi?id=1794830): pin image-eco sclorg samples usage to specific versions to shield from upstream development changes [#24457](https://github.com/openshift/origin/pull/24457)
* [Bug 1785268](https://bugzilla.redhat.com/show_bug.cgi?id=1785268): bump(*): pin ghodss/yaml [#24331](https://github.com/openshift/origin/pull/24331)
* [Bug 1784881](https://bugzilla.redhat.com/show_bug.cgi?id=1784881): fix up ruby-25-centos7 tag check logic [#24325](https://github.com/openshift/origin/pull/24325)
* [Bug 1781281](https://bugzilla.redhat.com/show_bug.cgi?id=1781281): UPSTREAM: 86009: kubelet: guarantee at most only one cinfo per containerID [#24271](https://github.com/openshift/origin/pull/24271)
* [Bug 1781302](https://bugzilla.redhat.com/show_bug.cgi?id=1781302): Handle build controller skew in tests [#24273](https://github.com/openshift/origin/pull/24273)
* [Bug 1764044](https://bugzilla.redhat.com/show_bug.cgi?id=1764044): 4.2: UPSTREAM: 83567: Fix attachment of just detached AWS volumes [#24240](https://github.com/openshift/origin/pull/24240)
* [Bug 1772087](https://bugzilla.redhat.com/show_bug.cgi?id=1772087): Fix RS expectations [#24144](https://github.com/openshift/origin/pull/24144)
* [Bug 1762658](https://bugzilla.redhat.com/show_bug.cgi?id=1762658): UPSTREAM: 83747: Improve efficiency of csiMountMgr.GetAttributes [#24006](https://github.com/openshift/origin/pull/24006)
* [Bug 1775736](https://bugzilla.redhat.com/show_bug.cgi?id=1775736): KubeAPI server doesn't accept large patch requests [#24190](https://github.com/openshift/origin/pull/24190)
* [Bug 1767182](https://bugzilla.redhat.com/show_bug.cgi?id=1767182): test/extended/prometheus: run full promQL queries and improve reporting firing alerts [#24152](https://github.com/openshift/origin/pull/24152)
* [Bug 1758158](https://bugzilla.redhat.com/show_bug.cgi?id=1758158): aws: sort addresses of multiple interfaces correctly [4.2] [#23908](https://github.com/openshift/origin/pull/23908)
* [Bug 1769950](https://bugzilla.redhat.com/show_bug.cgi?id=1769950): React to openshift/ruby-hello-world update [#24109](https://github.com/openshift/origin/pull/24109)
* [Bug 1765179](https://bugzilla.redhat.com/show_bug.cgi?id=1765179): e2e: fix flaky route wait functions [#24063](https://github.com/openshift/origin/pull/24063)
* [Bug 1757807](https://bugzilla.redhat.com/show_bug.cgi?id=1757807): e2e: stabilize ingress metrics tests [#23901](https://github.com/openshift/origin/pull/23901)
* [Bug 1766365](https://bugzilla.redhat.com/show_bug.cgi?id=1766365): TestNamespaceCondition integration test fails [#23910](https://github.com/openshift/origin/pull/23910)
* [Bug 1759181](https://bugzilla.redhat.com/show_bug.cgi?id=1759181): UPSTREAM: <carry>:Add a RBAC checker for external IP ranger [#23955](https://github.com/openshift/origin/pull/23955)
* [Bug 1758682](https://bugzilla.redhat.com/show_bug.cgi?id=1758682): Make the quorum restore disruptive test to be resilient and add disruptive suite [#23877](https://github.com/openshift/origin/pull/23877)
* [Bug 1757234](https://bugzilla.redhat.com/show_bug.cgi?id=1757234): Cherry-pick: Kubelet should use watch-based configMapAndSecretChangeDetectionStrategy [#23887](https://github.com/openshift/origin/pull/23887)
* [Bug 1761814](https://bugzilla.redhat.com/show_bug.cgi?id=1761814): Informers can miss notifications [#23965](https://github.com/openshift/origin/pull/23965)
* UPSTREAM: 00000: add debugging for upgrade tests [#23944](https://github.com/openshift/origin/pull/23944)
* [Full changelog](https://github.com/openshift/origin/compare/c07e432dacb29626147514eddc3d910bb14ae0b9...20b13ba3d745c2c0060be4fbf485311c6d8c672c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/39dbbca170d2b1baa5919fa8c5b9158b9ad7dd39)

* [Bug 1798889](https://bugzilla.redhat.com/show_bug.cgi?id=1798889): initial commit for tests for release 4.2 [#57](https://github.com/openshift/insights-operator/pull/57)
* [Bug 1788116](https://bugzilla.redhat.com/show_bug.cgi?id=1788116): override node selector (4.2) [#64](https://github.com/openshift/insights-operator/pull/64)
* Backport code owners to 4.2 [#75](https://github.com/openshift/insights-operator/pull/75)
* Added dummy e2e target for release 4.2 [#54](https://github.com/openshift/insights-operator/pull/54)
* [Bug 1767719](https://bugzilla.redhat.com/show_bug.cgi?id=1767719): Fix the event reporting in insights operator [#56](https://github.com/openshift/insights-operator/pull/56)
* [Bug 1767719](https://bugzilla.redhat.com/show_bug.cgi?id=1767719): gather: include network events for namespace that has degraded operator [#38](https://github.com/openshift/insights-operator/pull/38)
* [Full changelog](https://github.com/openshift/insights-operator/compare/27768551b735b1cd6a4c9363db8b71a2a2b5c471...39dbbca170d2b1baa5919fa8c5b9158b9ad7dd39)


### [jenkins, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/b1276b03231e5c93cb4acc1a99b4e70048ca6271)

* [Bug 1810389](https://bugzilla.redhat.com/show_bug.cgi?id=1810389): Bump login plugin to 1.0.23 [#1031](https://github.com/openshift/jenkins/pull/1031)
* [Bug 1793321](https://bugzilla.redhat.com/show_bug.cgi?id=1793321): [4.2] Remove use of /etc/passwd and upgrade plugins versions [#1022](https://github.com/openshift/jenkins/pull/1022)
* [Bug 1773434](https://bugzilla.redhat.com/show_bug.cgi?id=1773434): Bump Sync Plugin to 1.0.42 #980 [#980](https://github.com/openshift/jenkins/pull/980)
* [Bug 1764461](https://bugzilla.redhat.com/show_bug.cgi?id=1764461): cve-2019-10432: Stored xss vulnerability [#981](https://github.com/openshift/jenkins/pull/981)
* [Full changelog](https://github.com/openshift/jenkins/compare/e13fbe9ff385ff29f7627aecbfb0727bbfe2d565...b1276b03231e5c93cb4acc1a99b4e70048ca6271)


### [kube-client-agent, kube-etcd-signer-server](https://github.com/openshift/kubecsr/tree/cc0d71d58118b4c65fe3fa2b4f2e4747c5774668)

* [Bug 1769992](https://bugzilla.redhat.com/show_bug.cgi?id=1769992): pkg/certsigner/signer: Add "client" usage to server profile [#17](https://github.com/openshift/kubecsr/pull/17)
* [Full changelog](https://github.com/openshift/kubecsr/compare/227189dae8e64eca5ad13a8bb96df8d8d5502f35...cc0d71d58118b4c65fe3fa2b4f2e4747c5774668)


### [kube-proxy, node, sdn-controller](https://github.com/openshift/sdn/tree/88af32d0d59282f9a1160b61e0f73a6695aa9c9e)

* [Bug 1816389](https://bugzilla.redhat.com/show_bug.cgi?id=1816389): handle pod updates correctly in networkpolicy [#130](https://github.com/openshift/sdn/pull/130)
* [Bug 1797043](https://bugzilla.redhat.com/show_bug.cgi?id=1797043): [4.2] Clean up stale egress IP iptables rules on startup [#101](https://github.com/openshift/sdn/pull/101)
* [Bug 1806648](https://bugzilla.redhat.com/show_bug.cgi?id=1806648): Fix pod startup reattach/kill loop [#110](https://github.com/openshift/sdn/pull/110)
* [Bug 1793952](https://bugzilla.redhat.com/show_bug.cgi?id=1793952): [4.2] Fix reinitialization of deny-all NetworkPolicy state on restart [#105](https://github.com/openshift/sdn/pull/105)
* [Bug 1794029](https://bugzilla.redhat.com/show_bug.cgi?id=1794029): [4.2] Use k8s.io/client-go fork with informer fix, run update-deps [#95](https://github.com/openshift/sdn/pull/95)
* [Bug 1772592](https://bugzilla.redhat.com/show_bug.cgi?id=1772592): Make DNS querying more efficient by querying once per dns name [#72](https://github.com/openshift/sdn/pull/72)
* [Bug 1790704](https://bugzilla.redhat.com/show_bug.cgi?id=1790704): proxy: add handler with same ResyncPeriod as shared informer. [#90](https://github.com/openshift/sdn/pull/90)
* [Bug 1772905](https://bugzilla.redhat.com/show_bug.cgi?id=1772905): [4.2] Clean up egress IPs on startup [#73](https://github.com/openshift/sdn/pull/73)
* [Bug 1768436](https://bugzilla.redhat.com/show_bug.cgi?id=1768436): UPSTREAM: 74840: kube-proxy: Drop packets in INVALID state [#56](https://github.com/openshift/sdn/pull/56)
* [Bug 1769808](https://bugzilla.redhat.com/show_bug.cgi?id=1769808): Use protobuf for SDN where possible for better performance [#68](https://github.com/openshift/sdn/pull/68)
* [Bug 1758232](https://bugzilla.redhat.com/show_bug.cgi?id=1758232): NetworkPolicy performance fixes [4.2] [#45](https://github.com/openshift/sdn/pull/45)
* [Bug 1759831](https://bugzilla.redhat.com/show_bug.cgi?id=1759831): Fix parsing of IFLA_GRE_COLLECT_METADATA [#50](https://github.com/openshift/sdn/pull/50)
* [Full changelog](https://github.com/openshift/sdn/compare/60adbfbaf21587f4b1a3b5801d7ed3f09009fae1...88af32d0d59282f9a1160b61e0f73a6695aa9c9e)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/87d0a1bf2af11636cef2089f4e575a1fbb5db6af)

* [Bug 1761507](https://bugzilla.redhat.com/show_bug.cgi?id=1761507): Avoid controller crash upon unexpected neutron error handling ports [#72](https://github.com/openshift/kuryr-kubernetes/pull/72)
* [Bug 1763279](https://bugzilla.redhat.com/show_bug.cgi?id=1763279): Remove namespace leftover upon kuryr-controller restart [#74](https://github.com/openshift/kuryr-kubernetes/pull/74)
* [Bug 1759986](https://bugzilla.redhat.com/show_bug.cgi?id=1759986): Fix race conditions between handling ResourceNotReady and deletions [#71](https://github.com/openshift/kuryr-kubernetes/pull/71)
* [Bug 1757561](https://bugzilla.redhat.com/show_bug.cgi?id=1757561): Ensure pod IP is retrieved from annotation [#44](https://github.com/openshift/kuryr-kubernetes/pull/44)
* [Bug 1757558](https://bugzilla.redhat.com/show_bug.cgi?id=1757558): Ensure lb sg rules are updated upon namespace label updates [#47](https://github.com/openshift/kuryr-kubernetes/pull/47)
* [Bug 1757560](https://bugzilla.redhat.com/show_bug.cgi?id=1757560): Ensure no LBaaS SG update is triggered for SVCs without selectors and ports [#45](https://github.com/openshift/kuryr-kubernetes/pull/45)
* [Bug 1762788](https://bugzilla.redhat.com/show_bug.cgi?id=1762788): NestedVIFPool: React when status.hostIP is missing [#67](https://github.com/openshift/kuryr-kubernetes/pull/67)
* [Bug 1759973](https://bugzilla.redhat.com/show_bug.cgi?id=1759973): Make sure subports are unique when removing them [#58](https://github.com/openshift/kuryr-kubernetes/pull/58)
* [Bug 1758533](https://bugzilla.redhat.com/show_bug.cgi?id=1758533): Ensure ports from pool do not reference deleted SGs/NPs [#57](https://github.com/openshift/kuryr-kubernetes/pull/57)
* [Bug 1759097](https://bugzilla.redhat.com/show_bug.cgi?id=1759097): Prevent Kuryr from restarting due to corner-cases [#56](https://github.com/openshift/kuryr-kubernetes/pull/56)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/db59757b0395530a24be1bb24aba2ae9f9963078...87d0a1bf2af11636cef2089f4e575a1fbb5db6af)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/79d3a265492b1658d57ca6ff1f610ebd7efc59cf)

* [Bug 1783013](https://bugzilla.redhat.com/show_bug.cgi?id=1783013): Replace guestfish with config drive on s390x platform [#183](https://github.com/openshift/cluster-api-provider-libvirt/pull/183)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/8bf0d9472acb65f1c5134d847f6a5f7e5258a5b3...79d3a265492b1658d57ca6ff1f610ebd7efc59cf)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b3a05b2e61aad309577740140e84532375bec037)

* [Bug 1785219](https://bugzilla.redhat.com/show_bug.cgi?id=1785219): [release-4.2] Discard audit messages from journald [#1350](https://github.com/openshift/machine-config-operator/pull/1350)
* [Bug 1797790](https://bugzilla.redhat.com/show_bug.cgi?id=1797790): [release-4.2] prevent hitting annotation max size limit on nodes (cherry-pick) [#1432](https://github.com/openshift/machine-config-operator/pull/1432)
* [Bug 1797038](https://bugzilla.redhat.com/show_bug.cgi?id=1797038): Get etcdctl binary from the etcd image and not from the upstream releases [#1464](https://github.com/openshift/machine-config-operator/pull/1464)
* [Bug 1795561](https://bugzilla.redhat.com/show_bug.cgi?id=1795561): machineconfig.crd.yaml: add passwd schema [#1435](https://github.com/openshift/machine-config-operator/pull/1435)
* [Bug 1781665](https://bugzilla.redhat.com/show_bug.cgi?id=1781665): pkg/daemon: randomize pivot container name [#1347](https://github.com/openshift/machine-config-operator/pull/1347)
* [Bug 1789248](https://bugzilla.redhat.com/show_bug.cgi?id=1789248): cleanup sdn ips on reboot [#1362](https://github.com/openshift/machine-config-operator/pull/1362)
* [Bug 1782152](https://bugzilla.redhat.com/show_bug.cgi?id=1782152): templates/container-storage: Add a "this is generated" note [#1323](https://github.com/openshift/machine-config-operator/pull/1323)
* [Bug 1789565](https://bugzilla.redhat.com/show_bug.cgi?id=1789565): [release-4.2] Fix osImageURL upgrade race [#1358](https://github.com/openshift/machine-config-operator/pull/1358)
* [Bug 1766514](https://bugzilla.redhat.com/show_bug.cgi?id=1766514): [release-4.2] pkg/daemon: remove force validation file if it exists [#1148](https://github.com/openshift/machine-config-operator/pull/1148)
* [Bug 1772680](https://bugzilla.redhat.com/show_bug.cgi?id=1772680): [release-4.2] pkg/controller: do not enqueue a nil MCP [#1282](https://github.com/openshift/machine-config-operator/pull/1282)
* [Bug 1763695](https://bugzilla.redhat.com/show_bug.cgi?id=1763695): [release-4.2] pkg/daemon: drain before applying changes [#1194](https://github.com/openshift/machine-config-operator/pull/1194)
* [Bug 1765759](https://bugzilla.redhat.com/show_bug.cgi?id=1765759): templates/*etcd-member.yaml: give etcd-metrics container privilege [#1263](https://github.com/openshift/machine-config-operator/pull/1263)
* [Bug 1759611](https://bugzilla.redhat.com/show_bug.cgi?id=1759611): [release-4.2] lib/resourcemerge: account for proxy changes [#1175](https://github.com/openshift/machine-config-operator/pull/1175)
* [Bug 1769581](https://bugzilla.redhat.com/show_bug.cgi?id=1769581): 4.2: Specfile: Make `%global commit ...` overridable [#1249](https://github.com/openshift/machine-config-operator/pull/1249)
* [Bug 1764720](https://bugzilla.redhat.com/show_bug.cgi?id=1764720): [release-4.2] kubelet: add dependency on network-online.target [#1212](https://github.com/openshift/machine-config-operator/pull/1212)
* [Bug 1755557](https://bugzilla.redhat.com/show_bug.cgi?id=1755557): Ensure ETCD_INITIAL_CLUSTER is preserved during restore [#1134](https://github.com/openshift/machine-config-operator/pull/1134)
* [Bug 1757390](https://bugzilla.redhat.com/show_bug.cgi?id=1757390): Revert: "Temporarily put OpenStack infra pods into non-existing namespace" [#1143](https://github.com/openshift/machine-config-operator/pull/1143)
* [Bug 1763205](https://bugzilla.redhat.com/show_bug.cgi?id=1763205): revert #1177 and fix common templates in MCs [#1202](https://github.com/openshift/machine-config-operator/pull/1202)
* [Bug 1763636](https://bugzilla.redhat.com/show_bug.cgi?id=1763636): [release-4.2] pkg/operator: fix race between images CM and MCO [#1196](https://github.com/openshift/machine-config-operator/pull/1196)
* [Bug 1762565](https://bugzilla.redhat.com/show_bug.cgi?id=1762565): pkg/controller/template: avoid resyncing templates if the cc didn't change [#1182](https://github.com/openshift/machine-config-operator/pull/1182)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/62b0b6d2a751a5f364f2e6d5c9cfe63419668777...b3a05b2e61aad309577740140e84532375bec037)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/f703423f84b93606ab27620aa6f1117d4758f701)

* [Bug 1809258](https://bugzilla.redhat.com/show_bug.cgi?id=1809258): Reload serving certs [#164](https://github.com/openshift/oauth-proxy/pull/164)
* [Bug 1762748](https://bugzilla.redhat.com/show_bug.cgi?id=1762748): Fix high memory usage [#139](https://github.com/openshift/oauth-proxy/pull/139)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/104fe17337fb627194e0848d2907a73016fef000...f703423f84b93606ab27620aa6f1117d4758f701)


### [oauth-server](https://github.com/openshift/oauth-server/tree/3ac077fa8097fb851532453fa6e772e1dcfcb3bb)

* [Bug 1768785](https://bugzilla.redhat.com/show_bug.cgi?id=1768785): RequestHeaders IdP: fix TLS handshake [#21](https://github.com/openshift/oauth-server/pull/21)
* [Bug 1757044](https://bugzilla.redhat.com/show_bug.cgi?id=1757044): [release-4.2] Sanitize user input when erroring on an unknown redirect handler [#17](https://github.com/openshift/oauth-server/pull/17)
* [Full changelog](https://github.com/openshift/oauth-server/compare/e7bf1103b1251f0ec57df1ed31aa40c27b4d57fd...3ac077fa8097fb851532453fa6e772e1dcfcb3bb)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/5bfde78e8d058caaaf15a143316d924a4bdbdf78)

* [Bug 1803084](https://bugzilla.redhat.com/show_bug.cgi?id=1803084): 4.2: UPSTREAM: 87673: blank out value for unbounded client label [#76](https://github.com/openshift/openshift-apiserver/pull/76)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/55d971b2b5aa43b2ae45fed148cf73c149ca79a7...5bfde78e8d058caaaf15a143316d924a4bdbdf78)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/79fb7a5f3d8417766529150986eb5648bf65b733)

* [Bug 1767047](https://bugzilla.redhat.com/show_bug.cgi?id=1767047): add leader lock for cluster-policy-controller in scc_namespace_allocator controller [#42](https://github.com/openshift/openshift-controller-manager/pull/42)
* [Bug 1754680](https://bugzilla.redhat.com/show_bug.cgi?id=1754680): add build ca bundle to init containers [#47](https://github.com/openshift/openshift-controller-manager/pull/47)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/76900b07c76cb81079d1421ac650c0d04c69a48f...79fb7a5f3d8417766529150986eb5648bf65b733)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/4f7a7cce5c7ab50c8ea6b38f0af26c4dc9bbb97b)

* [Bug 1808422](https://bugzilla.redhat.com/show_bug.cgi?id=1808422): Don't block on ctx.Done() if startup fails [#1422](https://github.com/operator-framework/operator-lifecycle-manager/pull/1422)
* [Bug 1798666](https://bugzilla.redhat.com/show_bug.cgi?id=1798666): Fix cases where an operator's ready channel may never close. [#1281](https://github.com/operator-framework/operator-lifecycle-manager/pull/1281)
* [Bug 1805575](https://bugzilla.redhat.com/show_bug.cgi?id=1805575): Remove run-level 1 from olm and openshift-operators namespaces [#1309](https://github.com/operator-framework/operator-lifecycle-manager/pull/1309)
* [Bug 1805269](https://bugzilla.redhat.com/show_bug.cgi?id=1805269): Fix configmap registry server readiness probe timeouts [#1378](https://github.com/operator-framework/operator-lifecycle-manager/pull/1378)
* [Bug 1809661](https://bugzilla.redhat.com/show_bug.cgi?id=1809661): Update subscription_sync_count to include the package name [#1367](https://github.com/operator-framework/operator-lifecycle-manager/pull/1367)
* [Bug 1803148](https://bugzilla.redhat.com/show_bug.cgi?id=1803148): fix(packagemanifests): Fix index key func to avoid key collision [#1357](https://github.com/operator-framework/operator-lifecycle-manager/pull/1357)
* [Bug 1797021](https://bugzilla.redhat.com/show_bug.cgi?id=1797021): Fix bad opgroup annotations [#1373](https://github.com/operator-framework/operator-lifecycle-manager/pull/1373)
* [Bug 1796914](https://bugzilla.redhat.com/show_bug.cgi?id=1796914): packageserver update fails to adopt APIService [#1271](https://github.com/operator-framework/operator-lifecycle-manager/pull/1271)
* [Bug 1774752](https://bugzilla.redhat.com/show_bug.cgi?id=1774752): schedule catalogsource pods to linux nodes only [#1145](https://github.com/operator-framework/operator-lifecycle-manager/pull/1145)
* [Bug 1769561](https://bugzilla.redhat.com/show_bug.cgi?id=1769561): Replacing operator creates duplicate secrets [#1159](https://github.com/operator-framework/operator-lifecycle-manager/pull/1159)
* [Bug 1787597](https://bugzilla.redhat.com/show_bug.cgi?id=1787597): fix(packageserver): cache packagemanifests [#1240](https://github.com/operator-framework/operator-lifecycle-manager/pull/1240)
* [Bug 1749031](https://bugzilla.redhat.com/show_bug.cgi?id=1749031): Enable multiple namespaces sync if catsrc is updated in global ns [#1169](https://github.com/operator-framework/operator-lifecycle-manager/pull/1169)
* [Bug 1775250](https://bugzilla.redhat.com/show_bug.cgi?id=1775250): make certificate updates live upon update [#1170](https://github.com/operator-framework/operator-lifecycle-manager/pull/1170)
* [Bug 1767848](https://bugzilla.redhat.com/show_bug.cgi?id=1767848): Manual approval strategy ignored for subsequent release [#1112](https://github.com/operator-framework/operator-lifecycle-manager/pull/1112)
* [Bug 1763749](https://bugzilla.redhat.com/show_bug.cgi?id=1763749): Prioritize APIs from same CatSrc [#1091](https://github.com/operator-framework/operator-lifecycle-manager/pull/1091)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/1c371728a2d5e65c970369c15ac17edb8fdb3442...4f7a7cce5c7ab50c8ea6b38f0af26c4dc9bbb97b)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/4a3f862f017c052290c0710a808c618ba3af58d0)

* [Bug 1814012](https://bugzilla.redhat.com/show_bug.cgi?id=1814012): support serving marketplace prometheus metrics over https [#297](https://github.com/operator-framework/operator-marketplace/pull/297)
* [Bug 1772768](https://bugzilla.redhat.com/show_bug.cgi?id=1772768): Schedule registry pods onto linux nodes only [#272](https://github.com/operator-framework/operator-marketplace/pull/272)
* [Bug 1769841](https://bugzilla.redhat.com/show_bug.cgi?id=1769841): Don't create invalid deployment [#269](https://github.com/operator-framework/operator-marketplace/pull/269)
* [Bug 1762006](https://bugzilla.redhat.com/show_bug.cgi?id=1762006): Assume available status is true without defaults [#263](https://github.com/operator-framework/operator-marketplace/pull/263)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/4ef67b2f50e9d884847c1c784b3a0040c45de1d1...4a3f862f017c052290c0710a808c618ba3af58d0)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/9f13be1d317c5c57b4ffb7102cee7b2c2f035cac)

* [Bug 1755190](https://bugzilla.redhat.com/show_bug.cgi?id=1755190): ovn: fix a deadlock in the NetworkPolicy code [#54](https://github.com/openshift/ovn-kubernetes/pull/54)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2838bf96025aa08e0472c016294ce425b2ff15df...9f13be1d317c5c57b4ffb7102cee7b2c2f035cac)


### [prometheus](https://github.com/openshift/prometheus/tree/52650c0fd84e82e20b5dcfa283c69a9e7ada16cb)

* [Bug 1759054](https://bugzilla.redhat.com/show_bug.cgi?id=1759054): Bump to v2.11.2 [#36](https://github.com/openshift/prometheus/pull/36)
* [Full changelog](https://github.com/openshift/prometheus/compare/ca080f0ac97f903b2ea45419eb2fb370c9d6a467...52650c0fd84e82e20b5dcfa283c69a9e7ada16cb)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/9ead628b3c468174a31c93bf74ad158637727706)

* [Bug 1763098](https://bugzilla.redhat.com/show_bug.cgi?id=1763098): *: Ensure containers have "FallbackToLogsOnError" termination policy [#41](https://github.com/openshift/prometheus-operator/pull/41)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/38109e45e3a6de5243de6ec45067402b67726c95...9ead628b3c468174a31c93bf74ad158637727706)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/c8633ae9973bf7a6cb61dd00cb5558325cade8ac)

* [Bug 1789085](https://bugzilla.redhat.com/show_bug.cgi?id=1789085): Not reporting 'none' when no platforms located [#50](https://github.com/openshift/node_exporter/pull/50)
* [Bug 1791414](https://bugzilla.redhat.com/show_bug.cgi?id=1791414): Disable cpu info metric on non x86 arches [#54](https://github.com/openshift/node_exporter/pull/54)
* [Bug 1773665](https://bugzilla.redhat.com/show_bug.cgi?id=1773665): cpu info metric [#46](https://github.com/openshift/node_exporter/pull/46)
* [Bug 1773246](https://bugzilla.redhat.com/show_bug.cgi?id=1773246): Add a virtualization metric series from virt-what [#40](https://github.com/openshift/node_exporter/pull/40)
* [Full changelog](https://github.com/openshift/node_exporter/compare/177a938ce401c3928a025fc1fd2ea1ca0ce1c230...c8633ae9973bf7a6cb61dd00cb5558325cade8ac)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/9947ab9d0d750b0a42b08527adbca81018d477c7)

* [Bug 1810421](https://bugzilla.redhat.com/show_bug.cgi?id=1810421): Ensure service CA certs are created with unique serial numbers [#113](https://github.com/openshift/service-ca-operator/pull/113)
* [Bug 1774156](https://bugzilla.redhat.com/show_bug.cgi?id=1774156): 4.2 cherry-picks in support of automated service ca rotation [#105](https://github.com/openshift/service-ca-operator/pull/105)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/f6720573b9b63147436374e51e6fda44683b1e9f...9947ab9d0d750b0a42b08527adbca81018d477c7)


### [telemeter](https://github.com/openshift/telemeter/tree/152b1b3355fbc5c9ed760b58f2fe6fc8fc082d31)

* [Bug 1773665](https://bugzilla.redhat.com/show_bug.cgi?id=1773665): Backport changes from BZ 1760393 to 4.2.z [#281](https://github.com/openshift/telemeter/pull/281)
* [Bug 1773246](https://bugzilla.redhat.com/show_bug.cgi?id=1773246): Report cluster:virt_platform_nodes:sum to telemetry [#266](https://github.com/openshift/telemeter/pull/266)
* [Full changelog](https://github.com/openshift/telemeter/compare/3308c2642bfb673cb6bb61d8e120436675c06c13...152b1b3355fbc5c9ed760b58f2fe6fc8fc082d31)