# 4.3.10

Created: 2020-04-01 10:47:49 +0000 UTC

Image Digest: `sha256:edb4364367cff4f751ffdc032bc830a469548f998127b523047a8dd518c472cd`

Promoted from registry.svc.ci.openshift.org/ocp/release:4.3.0-0.nightly-2020-03-31-203232


## Changes from 4.3.0

### Components

* Kubernetes 1.16.2


### New images

* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1322dc43](https://github.com/openshift/route-override-cni/commit/1322dc43712e12a021f5e83c8d752e7d8c30aa6e) `sha256:dbc83d9fc7d3b462e180c4f5265729a64649df51f98803ac507ca1ff79cc7f37`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9cca449d](https://github.com/openshift/whereabouts-cni/commit/9cca449d619ed0f93a06aca9255004672bb6c96e) `sha256:dff3f3c3f7e93f338f3dfd310aabc0da9e393333bf06b1342921fc0e3158d2cc`


### Rebuilt images without code change

* [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure) git [86ecb23d](https://github.com/openshift/cluster-api-provider-azure/commit/86ecb23daa83c78761414a7abcb169c73c18a756) `sha256:bc97a164bd5e2b71b50ff50cbc1ad185d5116a0cf29889ea8fb2ef0c5a9a505f`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:ed12204d0025901deeeb1d45c90dffcbe97a31be9408999c45e993954acc3477`
* [baremetal-operator](https://github.com/openshift/baremetal-operator) git [d981ea02](https://github.com/openshift/baremetal-operator/commit/d981ea02fc551aeda75ccbf11da34ba9eed11f77) `sha256:6deba6ed870a465b05eb0575e25111addd7125665be61311b7e12e220e9dcf6d`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [df8cd95e](https://github.com/openshift/cluster-authentication-operator/commit/df8cd95ed3249e0fae70ddaea56c07950b819cad) `sha256:d3369e7d4a78592c65e926c75a8c9e2030eb0ab0c0fae3ccbf973359eaa60c82`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:fb479db9ab4fdac85bd079c2f2cd25a8aa64676837c669076c63e51d77858123`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [d5ddbcdd](https://github.com/openshift/cluster-config-operator/commit/d5ddbcdd4ec87bd4d0d109e81ed0be5dafd86061) `sha256:cdf430dbda146b84b0d2936422163be69282003f89655826866dc444c9f4f9bb`
* [cluster-node-tuned](https://github.com/openshift/openshift-tuned) git [4de82474](https://github.com/openshift/openshift-tuned/commit/4de824748a0fa2dbf4b10f82a32e3784372bce54) `sha256:e0505e2fab966054f3d3bd567a62f5e07c7f6ab984e963cc5a490e4713971d52`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [10fc162e](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/10fc162e4f4c977a9c431884b9a063fa751514d0) `sha256:8beb6d790fceac9cffe0aae6ed638db642e93c946c518432cce705bf70033adb`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [9b6ccc80](https://github.com/openshift/cluster-policy-controller/commit/9b6ccc80eeef2eb85f78f8a70f319cbae0c5295a) `sha256:902656c0f0d3e7088a37a8285f9ebef0a4eb84158e1c33a0acd9727abd3ab2e2`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [a9548e6d](https://github.com/openshift/cluster-storage-operator/commit/a9548e6d0ac621a5c6e8e3544ca680280a1ca746) `sha256:14aa9f25ac3dd0bc09fac65f503ba60317525819a9850dd66cd6c4f1ea324c5b`
* [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator) git [61c2f1d3](https://github.com/openshift/cluster-svcat-apiserver-operator/commit/61c2f1d39a8c876aa5fd7ebc14ffa9b4e1360a5f) `sha256:cd3158dbace84ce9015975fc7ca31fa43aec0797aae858302210a86af246afa7`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [727d37d9](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/727d37d929cb388744362c98fbcaf9ef547cd4b6) `sha256:9c43cfd7d8264fda1e9b073bb4bf8e6acd562f24b6001eb13570454d3c983e43`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:e842c7359dc7f51d0d0c3f2f0a07ca487c722a72b4ed13b844993d2c89e84c74`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:27745d85a55b0a0b65e482480bdc348d9f6e73f3ce3f4c015d4706381899b3a3`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [386465fe](https://github.com/openshift/containernetworking-plugins/commit/386465fe170c0e7299b357efbace235a3e5ce7ee) `sha256:e8c109be827c2e8fdbce2743818029a4e3bd4c5db8aed885ebb28536d11e08b5`
* [etcd](https://github.com/openshift/etcd) git [e30a18f2](https://github.com/openshift/etcd/commit/e30a18f29c8bf1f16507d7983dde2aa51962d6c7) `sha256:978e7aaf2d1b14ac9335044576dfc3f9621ffa02cfbaf6e8a72b5155be975b49`
* [grafana](https://github.com/openshift/grafana) git [e2261e14](https://github.com/openshift/grafana/commit/e2261e142909cb0fe70fc0996d7d375e57956589) `sha256:f6bfee1dd32add541c2e137de06cd06a1e6af22e711bcd10531c98333fd70fb6`
* [haproxy-router](https://github.com/openshift/router) git [1526917a](https://github.com/openshift/router/commit/1526917a58021c8f6e465406501c32fa3fb618b5) `sha256:a4263ebc8f03c9ee629a23892afcdc450328e05c3b42717dc1c533a9c317a8fc`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [5f57661e](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/5f57661eaaa3f8714c2b1904313b9ecf1a7bdba4) `sha256:51b2931df2e369d0b30b723c3baf8d5e255ebce0da6862a13087e769edbd7be4`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [b83630ce](https://github.com/openshift/ironic-inspector-image/commit/b83630cefa1a72b2d8ce03c9701acb4f117ab6f5) `sha256:82a6a3f10c4369e45b9bc4f623f2680fcd5c5a3ee363656300d119ac8fc85177`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [2405ba63](https://github.com/openshift/ironic-rhcos-downloader/commit/2405ba63f22db1cbda255cfccf2fc84f15faa6ee) `sha256:023eecd0a8dd306f369dffeea75cd3e7f2dce930bf8a21b5db59df4fba900e1b`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e33314bd](https://github.com/openshift/ironic-static-ip-manager/commit/e33314bda6f366472a2371c5598ff2d7dba111c8) `sha256:d82a00a816a63d7662729d3861686a9eb1e9f3372210813aec3a7c0a50ea0564`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [3d1c61e9](https://github.com/openshift/k8s-prometheus-adapter/commit/3d1c61e9a783d8c4a764b130837682fa9ab8e9df) `sha256:172e85b797718d9a040dbc7b2563425597de71fe5af7dc64e276f504e242d799`
* [keepalived-ipfailover](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:0db78a3ad85cf3dc24f2814fa51efeb88d487e1b48abc3fb65ed6b8333a9d694`
* [kube-client-agent](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:2fe45e34294ea84f1707a95ae17e82c1d28fba529a307670debe4a21092f65f4`
* [kube-etcd-signer-server](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:6eea5e8f5184ff13c49b4ff3c78a8f4a583be03537086edd68a5d8b8119f0f78`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [84e7dac6](https://github.com/openshift/kube-rbac-proxy/commit/84e7dac69f8e3f90620729ee730327a3e168963d) `sha256:0ac41d102c67603dc0da46c5e56d6ed1a48f6885d5786e507bf65c3e791b5c14`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [83f9fc56](https://github.com/openshift/kube-state-metrics/commit/83f9fc5685cf3d7732687e1f07da6b27d6901c4f) `sha256:2396b6931ca5e46b6f036e546ce2fadb7ba2ebfe98172e636631ea9fd03663e6`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [dd3fc51a](https://github.com/openshift/cluster-api-provider-libvirt/commit/dd3fc51a8b7f51da61643a6286eb0fecfa2d03cd) `sha256:c08062c022bc3eaf2b863090baab7f3467dd4f6c70d676a6dcca1fa8c9bb6ee0`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:f436b8d17ee44b7bbf2bb73fba6199ea4b39b1dde1e6d4f989b0c88e5d8f4c8b`
* machine-os-content `sha256:d4588b9d2e45e1734c3d037769237175ec125cf606dc14e0b4c9594fff785f6e`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [24135de2](https://github.com/openshift/mdns-publisher/commit/24135de29fc348f3ef455a288013cc1912d969bc) `sha256:0a436b9e580a5ab15588e8ddf951017f87c642b1313dbfae6a959bab83d36c45`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ead10a3c](https://github.com/openshift/multus-admission-controller/commit/ead10a3cf30c5b4a2fbd7c987d83c07a46c5d5da) `sha256:6dbc8f7a54bfe8975f4fd19b89e6da7d8db3acaed4c34eb21f2ae3b9e551d5c6`
* [must-gather](https://github.com/openshift/must-gather) git [23037ad1](https://github.com/openshift/must-gather/commit/23037ad16c0aafd7186431c93ebca3f0d426a08d) `sha256:7b4b7938d33cc9f86d822cf6a4dbffb99444566ef93f45a313f600cad11cfee3`
* [oauth-server](https://github.com/openshift/oauth-server) git [d3065e59](https://github.com/openshift/oauth-server/commit/d3065e59ce948f10364d0dd88cb70b860ec65ee2) `sha256:1db50cb38ef2d591e5a39ea2aeb9707aba07382973321281fb489727d9cac72c`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c01d2de6](https://github.com/openshift/openshift-state-metrics/commit/c01d2de651071389d2621c46e934fd9cb2bf4b8d) `sha256:bed7efc77fb0637accc52ecf95647f9a9ee737d8d8c68c8ffeefc9fc5263fdb7`
* [pod](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:d2d6e45c9b45950259c392c8624c81e6d729087e91fb033d9d5adcb09e4abd3c`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b8153a7f](https://github.com/openshift/prom-label-proxy/commit/b8153a7f39f1a34c03059f1b9dfb05d2c1297414) `sha256:082b2028faf0bee025b10a70becae6c24948ea151a327c118692b7277a6cc477`
* [prometheus](https://github.com/openshift/prometheus) git [c086098d](https://github.com/openshift/prometheus/commit/c086098da5f01ab9565bdda772d3459bea2913f2) `sha256:6349dd4b3c59616844f3c6ca20c94932a79848f161316c67060e4ef0aa5a0e45`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [11aa2a87](https://github.com/openshift/prometheus-alertmanager/commit/11aa2a87c5bfb84cba76b90a3867a06a55e2605e) `sha256:a94019c307c3db5f531f1eb06c9b6a018efd8b7a7827c1448dc8aca310585376`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [6ba21de5](https://github.com/openshift/prometheus-operator/commit/6ba21de5746f7b009a24e48cc929135ddb3396ac) `sha256:92a889d663ca78fb90463804c6755db06dab454126d52c5609eb46a121d1ffc8`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [6ba21de5](https://github.com/openshift/prometheus-operator/commit/6ba21de5746f7b009a24e48cc929135ddb3396ac) `sha256:2d4eace797ed84cd7dc9c62cff31ddec0a1f87bbbe7ae3b0c1e3501e345bd003`
* [service-catalog](https://github.com/openshift/service-catalog) git [6f75f804](https://github.com/openshift/service-catalog/commit/6f75f8047dfab6ca8b979833f7f2a6036deee488) `sha256:5bc56d4fba91f5d91ef29658e4c44ff377b39dc85b1f8bfd45389a3a720638dd`
* [thanos](https://github.com/openshift/thanos) git [4aaa91e9](https://github.com/openshift/thanos/commit/4aaa91e9b982177e113c80567ec3808dcf122769) `sha256:85d258c953e5f47ef436f0ea6e8fba668496234e88fc100da8b83f0c9a4b3182`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/86a378fedb20eb9a998047407594baabe80dc345)

* [Bug 1800315](https://bugzilla.redhat.com/show_bug.cgi?id=1800315): [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller's changes [#298](https://github.com/openshift/cluster-api-provider-aws/pull/298)
* [Bug 1798597](https://bugzilla.redhat.com/show_bug.cgi?id=1798597): [release-4.3] take into consideration all instance states for deletion [#292](https://github.com/openshift/cluster-api-provider-aws/pull/292)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b59f34398847fd2047f4f1193654b505643afe79...86a378fedb20eb9a998047407594baabe80dc345)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/0a7f198c1d5667152ef5982fd2fc0c22abc4336f)

* [Bug 1818140](https://bugzilla.redhat.com/show_bug.cgi?id=1818140): Backport adding groundwork for multi-arch images [#3233](https://github.com/openshift/installer/pull/3233)
* [Bug 1786364](https://bugzilla.redhat.com/show_bug.cgi?id=1786364): filter out unsupported regions in Azure [#3320](https://github.com/openshift/installer/pull/3320)
* [Bug 1816705](https://bugzilla.redhat.com/show_bug.cgi?id=1816705): images/libvirt: remove epel-release [#3339](https://github.com/openshift/installer/pull/3339)
* [Bug 1816264](https://bugzilla.redhat.com/show_bug.cgi?id=1816264): Generic libvirt installer image for CI [#3331](https://github.com/openshift/installer/pull/3331)
* [Bug 1808973](https://bugzilla.redhat.com/show_bug.cgi?id=1808973): azure - vendor update to support multiple prefixes [#3316](https://github.com/openshift/installer/pull/3316)
* [Bug 1791995](https://bugzilla.redhat.com/show_bug.cgi?id=1791995): proxy: use explicit list of platforms for metadata addresses [#2944](https://github.com/openshift/installer/pull/2944)
* [Bug 1812599](https://bugzilla.redhat.com/show_bug.cgi?id=1812599): bump RHCOS boot images to 43.81.202003111353.0 [#3274](https://github.com/openshift/installer/pull/3274)
* [Bug 1807037](https://bugzilla.redhat.com/show_bug.cgi?id=1807037): data/data/gcp,azure: block private dns zone on public record [#3185](https://github.com/openshift/installer/pull/3185)
* [Bug 1810018](https://bugzilla.redhat.com/show_bug.cgi?id=1810018): create bootstrap floating ip after the bootstrap machine [#3281](https://github.com/openshift/installer/pull/3281)
* [Bug 1801801](https://bugzilla.redhat.com/show_bug.cgi?id=1801801): openstack docs day 2 ssc refresh [#3113](https://github.com/openshift/installer/pull/3113)
* [Bug 1809922](https://bugzilla.redhat.com/show_bug.cgi?id=1809922): OpenStack: return an error if load balancer deletion fails [#3231](https://github.com/openshift/installer/pull/3231)
* [Release 4.3] Bug 1811154: validation: Allow periods in gcp and azure cluster names. [#3264](https://github.com/openshift/installer/pull/3264)
* [Bug 1807203](https://bugzilla.redhat.com/show_bug.cgi?id=1807203): additionalTrustBundle IsCA check to warn instead of drop [#3190](https://github.com/openshift/installer/pull/3190)
* [Bug 1808095](https://bugzilla.redhat.com/show_bug.cgi?id=1808095): Bump survey vendor for panic [#3213](https://github.com/openshift/installer/pull/3213)
* [Bug 1801446](https://bugzilla.redhat.com/show_bug.cgi?id=1801446): Move permissions check to cluster asset [#3096](https://github.com/openshift/installer/pull/3096)
* [Bug 1808482](https://bugzilla.redhat.com/show_bug.cgi?id=1808482): OpenStack: allow to overwrite default os image in the install config [#3207](https://github.com/openshift/installer/pull/3207)
* [Bug 1803187](https://bugzilla.redhat.com/show_bug.cgi?id=1803187): baremetal: map hardware profile to baremetal-operator default [#3106](https://github.com/openshift/installer/pull/3106)
* [Bug 1796618](https://bugzilla.redhat.com/show_bug.cgi?id=1796618): [release-4.3 IPv6] Replace MachineCIDR with MachineNetwork, add Azure IPv6 [#3029](https://github.com/openshift/installer/pull/3029)
* [Bug 1803805](https://bugzilla.redhat.com/show_bug.cgi?id=1803805): cmd/openshift-install/create: wait 60 minutes for baremetal [#3116](https://github.com/openshift/installer/pull/3116)
* [Bug 1791440](https://bugzilla.redhat.com/show_bug.cgi?id=1791440): asset/manifests: add openshift-install configmap [#3031](https://github.com/openshift/installer/pull/3031)
* [Bug 1757244](https://bugzilla.redhat.com/show_bug.cgi?id=1757244): use region info when simulating permissions [#3102](https://github.com/openshift/installer/pull/3102)
* [Bug 1790537](https://bugzilla.redhat.com/show_bug.cgi?id=1790537): pkg/version: Prepare of extract-time oc version injection [#2907](https://github.com/openshift/installer/pull/2907)
* [Bug 1798805](https://bugzilla.redhat.com/show_bug.cgi?id=1798805): baremetal: Fix bootstrap local DNS for IPv6 [#3092](https://github.com/openshift/installer/pull/3092)
* [Bug 1791457](https://bugzilla.redhat.com/show_bug.cgi?id=1791457): [release-4.3] Add support for AWS Bahrain region me-south-1 [#2877](https://github.com/openshift/installer/pull/2877)
* [Bug 1779469](https://bugzilla.redhat.com/show_bug.cgi?id=1779469): Fix node ports [#3048](https://github.com/openshift/installer/pull/3048)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#3036](https://github.com/openshift/installer/pull/3036)
* [Bug 1789748](https://bugzilla.redhat.com/show_bug.cgi?id=1789748): Ensure enough number of retries for cluster with Kuryr SDN [#2903](https://github.com/openshift/installer/pull/2903)
* [Bug 1794765](https://bugzilla.redhat.com/show_bug.cgi?id=1794765): ipv6: Fix IPv6 address encoding [#2977](https://github.com/openshift/installer/pull/2977)
* [Bug 1788062](https://bugzilla.redhat.com/show_bug.cgi?id=1788062): OpenStack: create security rules sequentially [#2887](https://github.com/openshift/installer/pull/2887)
* [Bug 1798060](https://bugzilla.redhat.com/show_bug.cgi?id=1798060): cmd/openshift-install/create: add env var to preserve bootstrap [#3053](https://github.com/openshift/installer/pull/3053)
* [Full changelog](https://github.com/openshift/installer/compare/2055609f95b19322ee6cfdd0bea73399297c4a3e...0a7f198c1d5667152ef5982fd2fc0c22abc4336f)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1ba567febc0443115ed85d706c363766b039d46d)

* [Bug 1802675](https://bugzilla.redhat.com/show_bug.cgi?id=1802675): Consider mdns hostname file existence in utils.ShortHostname [#45](https://github.com/openshift/baremetal-runtimecfg/pull/45)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4a9707af8d6e018b652928c8141d25b5f1744123...1ba567febc0443115ed85d706c363766b039d46d)


### [cli, cli-artifacts, deployer](https://github.com/openshift/oc/tree/081196cac40a01e541152175cc4da92d3a5ab07d)

* [Bug 1790954](https://bugzilla.redhat.com/show_bug.cgi?id=1790954): fix version ldflags [#255](https://github.com/openshift/oc/pull/255)
* [Bug 1802262](https://bugzilla.redhat.com/show_bug.cgi?id=1802262): Use polymorphic helpers from exec, when reading a pod [#294](https://github.com/openshift/oc/pull/294)
* [Bug 1810533](https://bugzilla.redhat.com/show_bug.cgi?id=1810533): Don't default to always mirror manifestlists [#342](https://github.com/openshift/oc/pull/342)
* [Bug 1810959](https://bugzilla.redhat.com/show_bug.cgi?id=1810959): `oc adm inspect namespace` doesn't collect pod logs [#290](https://github.com/openshift/oc/pull/290)
* [Bug 1795302](https://bugzilla.redhat.com/show_bug.cgi?id=1795302): initialize auth plugins [#268](https://github.com/openshift/oc/pull/268)
* [Bug 1802881](https://bugzilla.redhat.com/show_bug.cgi?id=1802881): bump(github.com/mtrmac/gpgme): v0.1.2 [#307](https://github.com/openshift/oc/pull/307)
* [Bug 1809360](https://bugzilla.redhat.com/show_bug.cgi?id=1809360): fix(catalog): use registry image from openshift quay namespace [#335](https://github.com/openshift/oc/pull/335)
* [Bug 1796675](https://bugzilla.redhat.com/show_bug.cgi?id=1796675): bump(operator-framework/operator-registry) [#336](https://github.com/openshift/oc/pull/336)
* [Bug 1807812](https://bugzilla.redhat.com/show_bug.cgi?id=1807812): [release-4.3] override FileDir with FromFileDir if set in Complete [#325](https://github.com/openshift/oc/pull/325)
* [Bug 1792334](https://bugzilla.redhat.com/show_bug.cgi?id=1792334): pods that are no longer running can still have logs [#263](https://github.com/openshift/oc/pull/263)
* [Bug 1804463](https://bugzilla.redhat.com/show_bug.cgi?id=1804463): Option to force RepoDigest mirror [#313](https://github.com/openshift/oc/pull/313)
* [Bug 1792334](https://bugzilla.redhat.com/show_bug.cgi?id=1792334): collect endpoints for namespaces [#264](https://github.com/openshift/oc/pull/264)
* [Bug 1797026](https://bugzilla.redhat.com/show_bug.cgi?id=1797026): [CLI] oc adm catalog build neither support "-a, --registry-config=" flag, nor uses podman registry credentials file [#296](https://github.com/openshift/oc/pull/296)
* [Bug 1789857](https://bugzilla.redhat.com/show_bug.cgi?id=1789857): allow --config and --kubeconfig [#247](https://github.com/openshift/oc/pull/247)
* [Bug 1785201](https://bugzilla.redhat.com/show_bug.cgi?id=1785201): don't gather pod endpoints using tokens [#237](https://github.com/openshift/oc/pull/237)
* [Bug 1788016](https://bugzilla.redhat.com/show_bug.cgi?id=1788016): Suppress nil pointer dereference for job spec [#243](https://github.com/openshift/oc/pull/243)
* [Bug 1786062](https://bugzilla.redhat.com/show_bug.cgi?id=1786062): fix describe for HPA [#228](https://github.com/openshift/oc/pull/228)
* [Bug 1784756](https://bugzilla.redhat.com/show_bug.cgi?id=1784756): set insecure-skip-tls-verify-backend flag [#225](https://github.com/openshift/oc/pull/225)
* [Bug 1779353](https://bugzilla.redhat.com/show_bug.cgi?id=1779353): Verify outbound manifests now that schema1 support is dropped [#211](https://github.com/openshift/oc/pull/211)
* [Bug 1797730](https://bugzilla.redhat.com/show_bug.cgi?id=1797730): Mirror images one by one for oc adm catalog mirror [#278](https://github.com/openshift/oc/pull/278)
* [Bug 1790537](https://bugzilla.redhat.com/show_bug.cgi?id=1790537): pkg/cli/admin/release/extract_tools: Inject release version into installer [#249](https://github.com/openshift/oc/pull/249)
* [Bug 1796182](https://bugzilla.redhat.com/show_bug.cgi?id=1796182): remove destination digests if present [#274](https://github.com/openshift/oc/pull/274)
* [Full changelog](https://github.com/openshift/oc/compare/6a937dfe56ff26255d09702c69b8406040c14505...081196cac40a01e541152175cc4da92d3a5ab07d)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/88c7f1b1dfe63bb61e874acffa37bb69ff334a7d)

* [Bug 1801261](https://bugzilla.redhat.com/show_bug.cgi?id=1801261): [release-4.3] Fix exclusion annotation for hosted use case [#156](https://github.com/openshift/cloud-credential-operator/pull/156)
* [Bug 1757244](https://bugzilla.redhat.com/show_bug.cgi?id=1757244): improve permissions simulation by adding region info [#155](https://github.com/openshift/cloud-credential-operator/pull/155)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/835d9b25e076b4f058bf638a6fe61d622086d78d...88c7f1b1dfe63bb61e874acffa37bb69ff334a7d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/7278ebb2fb632dbfe102b930aa161f5b2a9bcc93)

* BUG 1805160: Ensure DeleteNodes doesn't delete a node twice [#129](https://github.com/openshift/kubernetes-autoscaler/pull/129)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d45f94da59de0f949b8d84e67f7c4074ed6e0952...7278ebb2fb632dbfe102b930aa161f5b2a9bcc93)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/23df15eeb0144268565ccbb28665efe82a1a5845)

* [Bug 1814091](https://bugzilla.redhat.com/show_bug.cgi?id=1814091): ROKS - remove additional autoscaler manifests [#138](https://github.com/openshift/cluster-autoscaler-operator/pull/138)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/3752471e05fb4a7ed923bef281109eae82eb9d75...23df15eeb0144268565ccbb28665efe82a1a5845)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ca11e642bfe8fe62688a04565f2fd3195c210344)

* [Bug 1798869](https://bugzilla.redhat.com/show_bug.cgi?id=1798869): Try TCP DNS in dns-node-resolver [#155](https://github.com/openshift/cluster-dns-operator/pull/155)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/6f4a6005c8fbb56586b542d179b5ca1c96345498...ca11e642bfe8fe62688a04565f2fd3195c210344)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/afad871bae080e11656f3d0464859f632536106e)

* [Bug 1815124](https://bugzilla.redhat.com/show_bug.cgi?id=1815124): force path style for custom endpoints [#500](https://github.com/openshift/cluster-image-registry-operator/pull/500)
* [Bug 1814759](https://bugzilla.redhat.com/show_bug.cgi?id=1814759): Use junit_*.xml pattern for junit reports [#497](https://github.com/openshift/cluster-image-registry-operator/pull/497)
* [Bug 1808426](https://bugzilla.redhat.com/show_bug.cgi?id=1808426): backport removing kubesystem configmap watch [#475](https://github.com/openshift/cluster-image-registry-operator/pull/475)
* [Bug 1808431](https://bugzilla.redhat.com/show_bug.cgi?id=1808431): tolerate all NoSchedule taints [#472](https://github.com/openshift/cluster-image-registry-operator/pull/472)
* [Bug 1796584](https://bugzilla.redhat.com/show_bug.cgi?id=1796584): aws-sdk-go v1.28.2 [#455](https://github.com/openshift/cluster-image-registry-operator/pull/455)
* [Bug 1785302](https://bugzilla.redhat.com/show_bug.cgi?id=1785302): Using types from openshift/api repository. [#424](https://github.com/openshift/cluster-image-registry-operator/pull/424)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#454](https://github.com/openshift/cluster-image-registry-operator/pull/454)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/1967d568e1fa6f2919ce964b69d441f18e64b8b4...afad871bae080e11656f3d0464859f632536106e)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9)

* [Bug 1800338](https://bugzilla.redhat.com/show_bug.cgi?id=1800338): [release-4.3] update to setDefaultPublishingStrategy() to add IBMCloudPlatform [#362](https://github.com/openshift/cluster-ingress-operator/pull/362)
* [Bug 1800338](https://bugzilla.redhat.com/show_bug.cgi?id=1800338): [release-4.3] add LB changes for IBM Cloud Platform [#355](https://github.com/openshift/cluster-ingress-operator/pull/355)
* [Bug 1788711](https://bugzilla.redhat.com/show_bug.cgi?id=1788711): [release-4.3] publish a router-ca that can be used to verify routes in golang clients [#336](https://github.com/openshift/cluster-ingress-operator/pull/336)
* [Bug 1798789](https://bugzilla.redhat.com/show_bug.cgi?id=1798789): Only initialize DNS providers if DNS config is present [#356](https://github.com/openshift/cluster-ingress-operator/pull/356)
* [Bug 1789124](https://bugzilla.redhat.com/show_bug.cgi?id=1789124): Configure router for IPv6 [#352](https://github.com/openshift/cluster-ingress-operator/pull/352)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/db62fb9e2656ba92059beeef3241b191e062d9a2...d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e3b739673cd81aade4c10dc1bd6c2b0e24a82ffb)

* [Bug 1795617](https://bugzilla.redhat.com/show_bug.cgi?id=1795617): Remove entirely deprecated alerts [#741](https://github.com/openshift/cluster-kube-apiserver-operator/pull/741)
* [Bug 1808602](https://bugzilla.redhat.com/show_bug.cgi?id=1808602): kube-apiserver-operator should set upgradeable=false if default SCC mutates [#784](https://github.com/openshift/cluster-kube-apiserver-operator/pull/784)
* [Bug 1806634](https://bugzilla.redhat.com/show_bug.cgi?id=1806634): kube-apiserver should never use the bootstrap etcd member [#781](https://github.com/openshift/cluster-kube-apiserver-operator/pull/781)
* [Bug 1805865](https://bugzilla.redhat.com/show_bug.cgi?id=1805865): [release-4.3] baremetal: Explicitly advertise the host IP chosen by kubelet [#777](https://github.com/openshift/cluster-kube-apiserver-operator/pull/777)
* [Bug 1795701](https://bugzilla.redhat.com/show_bug.cgi?id=1795701): change the next empty encryption key's name for encryption e2e test [#717](https://github.com/openshift/cluster-kube-apiserver-operator/pull/717)
* [Bug 1789421](https://bugzilla.redhat.com/show_bug.cgi?id=1789421): [release-4.3] If the cluster is single-stack IPv6, bind to :: rather than 0.0.0.0. [#710](https://github.com/openshift/cluster-kube-apiserver-operator/pull/710)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/62da7e6b5d19114d32f5cf905a590edb9f4def0b...e3b739673cd81aade4c10dc1bd6c2b0e24a82ffb)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0b20d6028556a34abf80e55b7b3c0c8ec469d29f)

* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Remove wildcard COPY form Dockerfile [#371](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/371)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/7c430e3e821ec90916a205b71f5dfc6daf919ce2...0b20d6028556a34abf80e55b7b3c0c8ec469d29f)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/ffb17cb15fd1833f6118ddb3835972ca3b443f22)

* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Fix dockerfile [#220](https://github.com/openshift/cluster-kube-scheduler-operator/pull/220)
* [Bug 1803742](https://bugzilla.redhat.com/show_bug.cgi?id=1803742): [release-4.3] Improve node controller condition message [#210](https://github.com/openshift/cluster-kube-scheduler-operator/pull/210)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/da32b6a109a7729678c889935ff310809263077a...ffb17cb15fd1833f6118ddb3835972ca3b443f22)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/dd3147d9b2d1e54a2050d51390d1eca62d6189fc)

* [Bug 1815578](https://bugzilla.redhat.com/show_bug.cgi?id=1815578): ROKS - remove ClusterMachineApproverDown prometheus rule [#66](https://github.com/openshift/cluster-machine-approver/pull/66)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/86bdd875cd12c8598a5a7790bc1e7c6e348476c4...dd3147d9b2d1e54a2050d51390d1eca62d6189fc)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/417df3571061bac207af06773d0283e3c2787c15)

* [Bug 1814736](https://bugzilla.redhat.com/show_bug.cgi?id=1814736): Exclude Kubernetes control plane rules when running on IBM Cloud [#713](https://github.com/openshift/cluster-monitoring-operator/pull/713)
* [Bug 1791194](https://bugzilla.redhat.com/show_bug.cgi?id=1791194): Removing KubeVersionMismatch alert [#612](https://github.com/openshift/cluster-monitoring-operator/pull/612)
* [Bug 1807775](https://bugzilla.redhat.com/show_bug.cgi?id=1807775): Backport setting resource requests [#681](https://github.com/openshift/cluster-monitoring-operator/pull/681)
* [Bug 1805317](https://bugzilla.redhat.com/show_bug.cgi?id=1805317): pkg/manifests/telemeter: bump size limit to 5mb [#667](https://github.com/openshift/cluster-monitoring-operator/pull/667)
* [Bug 1805116](https://bugzilla.redhat.com/show_bug.cgi?id=1805116): Use aggregated up metrics [#664](https://github.com/openshift/cluster-monitoring-operator/pull/664)
* [Bug 1799540](https://bugzilla.redhat.com/show_bug.cgi?id=1799540): Node exporter init collectors must be privileged [#646](https://github.com/openshift/cluster-monitoring-operator/pull/646)
* [Bug 1791200](https://bugzilla.redhat.com/show_bug.cgi?id=1791200): Add alert for no routes configured in alertmanager [#613](https://github.com/openshift/cluster-monitoring-operator/pull/613)
* [Bug 1800513](https://bugzilla.redhat.com/show_bug.cgi?id=1800513): assets,jsonnet,pkg: Fix generate check [#649](https://github.com/openshift/cluster-monitoring-operator/pull/649)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/716a1868caa4c5800e35500f53667b12af9d66d9...417df3571061bac207af06773d0283e3c2787c15)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/cc8e0df5743f6d45b57e1001de02aa663331fa41)

* [Bug 1812037](https://bugzilla.redhat.com/show_bug.cgi?id=1812037): Ensure correct Octavia API version is retrieved [#534](https://github.com/openshift/cluster-network-operator/pull/534)
* [Bug 1815457](https://bugzilla.redhat.com/show_bug.cgi?id=1815457): Ensure removal of not rendered resources upon CNO recreation [#547](https://github.com/openshift/cluster-network-operator/pull/547)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): Reintroduce whereabouts & routeoverride in 4.3.z [#526](https://github.com/openshift/cluster-network-operator/pull/526)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): Revert inclusion of route-override/whereabouts in 4.3 [#519](https://github.com/openshift/cluster-network-operator/pull/519)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): [Backport 4.3.z] Adds route-override-cni and whereabouts for secondary network routing and IPAM [#496](https://github.com/openshift/cluster-network-operator/pull/496)
* [Bug 1798142](https://bugzilla.redhat.com/show_bug.cgi?id=1798142): Add preserveUnknownFields tag in the CRDs [#501](https://github.com/openshift/cluster-network-operator/pull/501)
* [Bug 1805726](https://bugzilla.redhat.com/show_bug.cgi?id=1805726): Add MachineNetworks to proxy.status.noProxy [#504](https://github.com/openshift/cluster-network-operator/pull/504)
* [Bug 1805444](https://bugzilla.redhat.com/show_bug.cgi?id=1805444): Uses the readiness indicator file option for Multus [backport 4.3] [#485](https://github.com/openshift/cluster-network-operator/pull/485)
* [Bug 1806009](https://bugzilla.redhat.com/show_bug.cgi?id=1806009): Backport ovn-kubernetes-related changes to 4.3 [#483](https://github.com/openshift/cluster-network-operator/pull/483)
* [Bug 1791278](https://bugzilla.redhat.com/show_bug.cgi?id=1791278): Stop deploying kuryr-admission-controller if double listeners supported # [#449](https://github.com/openshift/cluster-network-operator/pull/449)
* [Bug 1779863](https://bugzilla.redhat.com/show_bug.cgi?id=1779863): backport ovn-controller rbac fix to 4.3 [#470](https://github.com/openshift/cluster-network-operator/pull/470)
* [Bug 1801802](https://bugzilla.redhat.com/show_bug.cgi?id=1801802): [4.3] Put brackets around IPv6 addresses passed to ovn-ctl [#471](https://github.com/openshift/cluster-network-operator/pull/471)
* [Bug 1792309](https://bugzilla.redhat.com/show_bug.cgi?id=1792309): IPv6 backports for 4.3 [#450](https://github.com/openshift/cluster-network-operator/pull/450)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#463](https://github.com/openshift/cluster-network-operator/pull/463)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5b7f073de0f3ced9e9b83bbaa7cab0ade8b7d01d...cc8e0df5743f6d45b57e1001de02aa663331fa41)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/8e4367fb61fe895fd310bed69544033d043420d4)

* [Bug 1795665](https://bugzilla.redhat.com/show_bug.cgi?id=1795665): Do not set owner references on tuned ServiceAccount [#108](https://github.com/openshift/cluster-node-tuning-operator/pull/108)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/769ba5c3cf596ccb0b17e0e47b0d413850798b5c...8e4367fb61fe895fd310bed69544033d043420d4)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/7d51dd65fcdb95bf51cf9d435b3aa5b112ee2732)

* [Bug 1809532](https://bugzilla.redhat.com/show_bug.cgi?id=1809532): waits for requestheader-client-ca-file in extension-apiserver-authentication  before rolling out a new version [#326](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/326)
* [Bug 1805388](https://bugzilla.redhat.com/show_bug.cgi?id=1805388): Cleanup 4.4 deployment on downgrade to 4.3 [#314](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/314)
* [Bug 1795693](https://bugzilla.redhat.com/show_bug.cgi?id=1795693): change the next empty encryption key's name for encryption e2e test [#298](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/298)
* [Bug 1790523](https://bugzilla.redhat.com/show_bug.cgi?id=1790523): [release-4.3] Specify "bindNetwork: tcp" so apiserver will work on IPv6 single-stack [#296](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/296)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9416571f9de98516e9bb13e3d9276259adf99aff...7d51dd65fcdb95bf51cf9d435b3aa5b112ee2732)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bfda4d3462fd7305573adb103137723d2bd4975c)

* [Bug 1812554](https://bugzilla.redhat.com/show_bug.cgi?id=1812554): manifests: add openshift/oauth-proxy:v4.4 image [#247](https://github.com/openshift/cluster-samples-operator/pull/247)
* [Bug 1805815](https://bugzilla.redhat.com/show_bug.cgi?id=1805815): no longer gate removed processing when imagestreams in progress [#232](https://github.com/openshift/cluster-samples-operator/pull/232)
* [Bug 1784317](https://bugzilla.redhat.com/show_bug.cgi?id=1784317): properly handle removal of samplesRegistry; clean up importError mess… [#219](https://github.com/openshift/cluster-samples-operator/pull/219)
* [Bug 1798573](https://bugzilla.redhat.com/show_bug.cgi?id=1798573): bootstrap as removed for if tbr inaccessible after 3 minutes [#218](https://github.com/openshift/cluster-samples-operator/pull/218)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/8ceee7276335336d625594f399b2ba116d6fd9d4...bfda4d3462fd7305573adb103137723d2bd4975c)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/210b4b1e6b1b7f53b5dc0d935de9c5d27058280c)

* [Bug 1802331](https://bugzilla.redhat.com/show_bug.cgi?id=1802331): metrics: include upi installs in cluster_installer [#321](https://github.com/openshift/cluster-version-operator/pull/321)
* [Bug 1802710](https://bugzilla.redhat.com/show_bug.cgi?id=1802710): lib/resourcemerge: remove ports which are no longer required [#323](https://github.com/openshift/cluster-version-operator/pull/323)
* [Bug 1798049](https://bugzilla.redhat.com/show_bug.cgi?id=1798049): lib/resourcemerge/core: Fix panic on container/port removal [#313](https://github.com/openshift/cluster-version-operator/pull/313)
* [Bug 1792004](https://bugzilla.redhat.com/show_bug.cgi?id=1792004): lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required [#299](https://github.com/openshift/cluster-version-operator/pull/299)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/beee410fc8780e5613c09fc2690716b711747041...210b4b1e6b1b7f53b5dc0d935de9c5d27058280c)


### [console](https://github.com/openshift/console/tree/23b7ac9cf631b2e33663e492c44202d0f099cfe1)

* [Bug 1814075](https://bugzilla.redhat.com/show_bug.cgi?id=1814075): Mount OCS form when csv is available [#4746](https://github.com/openshift/console/pull/4746)
* [Bug 1813933](https://bugzilla.redhat.com/show_bug.cgi?id=1813933): Correct the selection nodes text [#4739](https://github.com/openshift/console/pull/4739)
* [Bug 1792847](https://bugzilla.redhat.com/show_bug.cgi?id=1792847): Kubevirt vm real node name [#4503](https://github.com/openshift/console/pull/4503)
* [Bug 1811520](https://bugzilla.redhat.com/show_bug.cgi?id=1811520): CreateContainerConfigError when obc is attached to deployment [#4690](https://github.com/openshift/console/pull/4690)
* [Bug 1811525](https://bugzilla.redhat.com/show_bug.cgi?id=1811525): Add Pipeline Resources on Pipelines Resources tab don't work [#4473](https://github.com/openshift/console/pull/4473)
* [Bug 1808968](https://bugzilla.redhat.com/show_bug.cgi?id=1808968): fixes sbr to work with knative services [#4578](https://github.com/openshift/console/pull/4578)
* [Version 4.3] Bug 1807291: Fix sort criteria for capacity for storage [#4560](https://github.com/openshift/console/pull/4560)
* [Bug 1808436](https://bugzilla.redhat.com/show_bug.cgi?id=1808436): Make dev-console project selector sticky again [#4557](https://github.com/openshift/console/pull/4557)
* [Bug 1808282](https://bugzilla.redhat.com/show_bug.cgi?id=1808282): fixes issue with new imageStream getting created for knative in case of internal image registry [#4546](https://github.com/openshift/console/pull/4546)
* [Bug 1794009](https://bugzilla.redhat.com/show_bug.cgi?id=1794009): Incorrect memory loads from edited vm template [#4625](https://github.com/openshift/console/pull/4625)
* [Bug 1796186](https://bugzilla.redhat.com/show_bug.cgi?id=1796186): Add pipeline for resource and runtime [#4509](https://github.com/openshift/console/pull/4509)
* [Bug 1806706](https://bugzilla.redhat.com/show_bug.cgi?id=1806706): add namespace level imagestream fetching [#4461](https://github.com/openshift/console/pull/4461)
* [Bug 1803935](https://bugzilla.redhat.com/show_bug.cgi?id=1803935): Fix bug where installed operators list status is missing or incorrect [#4343](https://github.com/openshift/console/pull/4343)
* [Bug 1780657](https://bugzilla.redhat.com/show_bug.cgi?id=1780657): Extend dashboard grey background to full height of view… [#4210](https://github.com/openshift/console/pull/4210)
* [Bug 1788246](https://bugzilla.redhat.com/show_bug.cgi?id=1788246): Fix "requires approval" install plan link [#4170](https://github.com/openshift/console/pull/4170)
* [Bug 1796461](https://bugzilla.redhat.com/show_bug.cgi?id=1796461): Fix bug where resource filter is broken for GroupVersion… [#4126](https://github.com/openshift/console/pull/4126)
* [Bug 1786272](https://bugzilla.redhat.com/show_bug.cgi?id=1786272): update the number of pods in daemon set with correct status prop [#4340](https://github.com/openshift/console/pull/4340)
* [Bug 1801660](https://bugzilla.redhat.com/show_bug.cgi?id=1801660): Property array should render its properties on schema page [#4281](https://github.com/openshift/console/pull/4281)
* [Bug 1800320](https://bugzilla.redhat.com/show_bug.cgi?id=1800320): Set default pullSecret [#4244](https://github.com/openshift/console/pull/4244)
* [Bug 1800331](https://bugzilla.redhat.com/show_bug.cgi?id=1800331): include `system:authenticated` when impersonating groups [#4238](https://github.com/openshift/console/pull/4238)
* [Bug 1800615](https://bugzilla.redhat.com/show_bug.cgi?id=1800615): Serverless apiVersion from v1beta1 to v1 [#4264](https://github.com/openshift/console/pull/4264)
* [Bug 1803955](https://bugzilla.redhat.com/show_bug.cgi?id=1803955): Fix "environment" typo on "Add to Secret" page [#4344](https://github.com/openshift/console/pull/4344)
* [Bug 1791346](https://bugzilla.redhat.com/show_bug.cgi?id=1791346): Error occurs while removing the second CD-ROM (4.3) [#4058](https://github.com/openshift/console/pull/4058)
* [Bug 1804077](https://bugzilla.redhat.com/show_bug.cgi?id=1804077): fixes issue with external image registry not working for tags [#4347](https://github.com/openshift/console/pull/4347)
* [Bug 1782558](https://bugzilla.redhat.com/show_bug.cgi?id=1782558): Fix edit link for cluster-scoped operand [#3764](https://github.com/openshift/console/pull/3764)
* [Bug 1801607](https://bugzilla.redhat.com/show_bug.cgi?id=1801607): updates apiGroup for knativeServing resource [#4277](https://github.com/openshift/console/pull/4277)
* [Bug 1794925](https://bugzilla.redhat.com/show_bug.cgi?id=1794925): correctly show schema information for all core resources [#4067](https://github.com/openshift/console/pull/4067)
* [Bug 1783312](https://bugzilla.redhat.com/show_bug.cgi?id=1783312): Replace multiple occurrences of log link variable expressions [#3778](https://github.com/openshift/console/pull/3778)
* [Bug 1789150](https://bugzilla.redhat.com/show_bug.cgi?id=1789150): support snippets in edit mode, not just create [#3902](https://github.com/openshift/console/pull/3902)
* [Bug 1788201](https://bugzilla.redhat.com/show_bug.cgi?id=1788201): Remove serviceAccount in favour of serviceAccountName [#3869](https://github.com/openshift/console/pull/3869)
* [Bug 1790750](https://bugzilla.redhat.com/show_bug.cgi?id=1790750): Fix off by one bug in metrics rows count [#3864](https://github.com/openshift/console/pull/3864)
* [Bug 1785010](https://bugzilla.redhat.com/show_bug.cgi?id=1785010): Added legacy plural url field in the OB/C models [#3852](https://github.com/openshift/console/pull/3852)
* [Bug 1797501](https://bugzilla.redhat.com/show_bug.cgi?id=1797501): Adds flexible OSD Sizes in the install flow [#4149](https://github.com/openshift/console/pull/4149)
* [Bug 1792507](https://bugzilla.redhat.com/show_bug.cgi?id=1792507): Add missing candidate-4.3 channel [#4093](https://github.com/openshift/console/pull/4093)
* [Bug 1792419](https://bugzilla.redhat.com/show_bug.cgi?id=1792419): fix(pipeline-tasks): Cancelled tasks [#3993](https://github.com/openshift/console/pull/3993)
* [Bug 1791101](https://bugzilla.redhat.com/show_bug.cgi?id=1791101): Make subscriptions & catalog sources optional so normal users can see installed operators [#3963](https://github.com/openshift/console/pull/3963)
* [Full changelog](https://github.com/openshift/console/compare/a7b51a5573cf36a0d0a88aa30ee0deb8e7c0da10...23b7ac9cf631b2e33663e492c44202d0f099cfe1)


### [console-operator](https://github.com/openshift/console-operator/tree/4410ab4a58a70e003d7c8578d362aa71fc1bc583)

* [Bug 1785492](https://bugzilla.redhat.com/show_bug.cgi?id=1785492): fix RBAC for ConsoleYAMLSample [#372](https://github.com/openshift/console-operator/pull/372)
* [Bug 1794548](https://bugzilla.redhat.com/show_bug.cgi?id=1794548): IPv6 support to console operator & console [openshift-4.3.z] [#376](https://github.com/openshift/console-operator/pull/376)
* [Full changelog](https://github.com/openshift/console-operator/compare/cb47e810bee8c56f0738f0723c98cf3192ea7736...4410ab4a58a70e003d7c8578d362aa71fc1bc583)


### [coredns](https://github.com/openshift/coredns/tree/052209affb1fe85bdd87b37e2cf9a6fb98585e91)

* [Bug 1801343](https://bugzilla.redhat.com/show_bug.cgi?id=1801343): Rebase to upstream 1.6.6 [#23](https://github.com/openshift/coredns/pull/23)
* [Full changelog](https://github.com/openshift/coredns/compare/51569b24b4a92d6d8df2020c2e8e2866c5e78266...052209affb1fe85bdd87b37e2cf9a6fb98585e91)


### [docker-builder](https://github.com/openshift/builder/tree/ba658c8b81615e5ed86ea5836b20ed738a534252)

* [Bug 1802894](https://bugzilla.redhat.com/show_bug.cgi?id=1802894): bump(github.com/mtrmac/gpgme): v0.1.2 [#136](https://github.com/openshift/builder/pull/136)
* [Bug 1790525](https://bugzilla.redhat.com/show_bug.cgi?id=1790525): bump github.com/containers/{storage,image,buildah} [#127](https://github.com/openshift/builder/pull/127)
* [Full changelog](https://github.com/openshift/builder/compare/50c6e17276dfc7d0acd9d943dac340fb4fa3ff24...ba658c8b81615e5ed86ea5836b20ed738a534252)


### [docker-registry](https://github.com/openshift/image-registry/tree/7511ca65e07b586464e5ec2e9efde67bfa48c3e2)

* [Bug 1804494](https://bugzilla.redhat.com/show_bug.cgi?id=1804494): Dockerfile: Clear yum cache after install [#223](https://github.com/openshift/image-registry/pull/223)
* [Bug 1796584](https://bugzilla.redhat.com/show_bug.cgi?id=1796584): aws-sdk-go v1.28.2 [#218](https://github.com/openshift/image-registry/pull/218)
* [Full changelog](https://github.com/openshift/image-registry/compare/8b12e0a3023dd39e59657984ba50c92a74f94dd5...7511ca65e07b586464e5ec2e9efde67bfa48c3e2)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/0600a78e9af54e22b04fabadd0b34d7b39565934)

* [Bug 1800315](https://bugzilla.redhat.com/show_bug.cgi?id=1800315): [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller's changes [#75](https://github.com/openshift/cluster-api-provider-gcp/pull/75)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/537d68ec0751a812755779f31d28155cc2afc454...0600a78e9af54e22b04fabadd0b34d7b39565934)


### [hyperkube, tests](https://github.com/openshift/ose/tree/26ae0dee60eeca5d5429cfdda77db8041c702f46)

* [Bug 1817040](https://bugzilla.redhat.com/show_bug.cgi?id=1817040): [4.3] UPSTREAM: 88507: Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs [#24763](https://github.com/openshift/ose/pull/24763)
* [Bug 1816408](https://bugzilla.redhat.com/show_bug.cgi?id=1816408): UPSTREAM: 87913: Add code to fix kubelet/metrics memory issue [#24758](https://github.com/openshift/ose/pull/24758)
* [Bug 1815944](https://bugzilla.redhat.com/show_bug.cgi?id=1815944): Pick up Ginkgo test performance fix to reduce e2e CPU usage [#24746](https://github.com/openshift/ose/pull/24746)
* [Bug 1806408](https://bugzilla.redhat.com/show_bug.cgi?id=1806408): Ensure upgrade tests verify application disruption [#24726](https://github.com/openshift/ose/pull/24726)
* [Bug 1808548](https://bugzilla.redhat.com/show_bug.cgi?id=1808548): UPSTREAM: 88146: remove duplicate pv delete commands [#24624](https://github.com/openshift/ose/pull/24624)
* [Bug 1813411](https://bugzilla.redhat.com/show_bug.cgi?id=1813411): UPSTREAM: 85912: Fixed bug in TopologyManager with SingleNUMANode Policy [#24688](https://github.com/openshift/ose/pull/24688)
* [Bug 1811200](https://bugzilla.redhat.com/show_bug.cgi?id=1811200): /readyz should start returning failure on shutdown initiation [#24712](https://github.com/openshift/ose/pull/24712)
* [Bug 1804516](https://bugzilla.redhat.com/show_bug.cgi?id=1804516): kubelet: Make default journal format precise [#24575](https://github.com/openshift/ose/pull/24575)
* [Bug 1803077](https://bugzilla.redhat.com/show_bug.cgi?id=1803077): 4.3: UPSTREAM: 87673: blank out value for unbounded client label [#24542](https://github.com/openshift/ose/pull/24542)
* [Bug 1795629](https://bugzilla.redhat.com/show_bug.cgi?id=1795629): fix deployment config flake by using informer [#24468](https://github.com/openshift/ose/pull/24468)
* [Bug 1802262](https://bugzilla.redhat.com/show_bug.cgi?id=1802262): Loosen help tests for oc rsh [#24660](https://github.com/openshift/ose/pull/24660)
* [Bug 1808429](https://bugzilla.redhat.com/show_bug.cgi?id=1808429): UPSTREAM: 88251: Partially fix incorrect configuration of kubepods.slice unit by kubelet [#24611](https://github.com/openshift/ose/pull/24611)
* Allow oauth token + cert fallback test to be skipped when running skew tests [#24561](https://github.com/openshift/ose/pull/24561)
* [Bug 1794852](https://bugzilla.redhat.com/show_bug.cgi?id=1794852): UPSTREAM: 86191: Sync the status of static Pods [#24453](https://github.com/openshift/ose/pull/24453)
* [Bug 1793587](https://bugzilla.redhat.com/show_bug.cgi?id=1793587): sccadmission plugin incorrectly reports "no SecurityContextConstraints found in xxx" [#24428](https://github.com/openshift/ose/pull/24428)
* [Bug 1796716](https://bugzilla.redhat.com/show_bug.cgi?id=1796716): Verify services and API are available during upgrade [#24479](https://github.com/openshift/ose/pull/24479)
* [Bug 1788065](https://bugzilla.redhat.com/show_bug.cgi?id=1788065): move more image-eco db template tests from upstream repos to sample operator installed [#24407](https://github.com/openshift/ose/pull/24407)
* [Bug 1800662](https://bugzilla.redhat.com/show_bug.cgi?id=1800662): [release-4.3] test/cmd: build.sh can't reach old openshift/origin:v1.1 image [#24519](https://github.com/openshift/ose/pull/24519)
* [Bug 1791730](https://bugzilla.redhat.com/show_bug.cgi?id=1791730): 4.3 ipv6 backports [#24405](https://github.com/openshift/ose/pull/24405)
* [Bug 1788065](https://bugzilla.redhat.com/show_bug.cgi?id=1788065): pin image-eco sclorg samples usage to specific versions to shield from upstream churn wrt EOL image removals [#24406](https://github.com/openshift/ose/pull/24406)
* [Bug 1791200](https://bugzilla.redhat.com/show_bug.cgi?id=1791200): test/extended/prometheus: exclude AlertmanagerReceiversNotConfigured from checking [#24465](https://github.com/openshift/ose/pull/24465)
* [Bug 1790481](https://bugzilla.redhat.com/show_bug.cgi?id=1790481): Fix delegated auth CM perms [#24392](https://github.com/openshift/ose/pull/24392)
* [Full changelog](https://github.com/openshift/ose/compare/0aee6a89a377364a4c73ab1c67bfb4bb35600a59...26ae0dee60eeca5d5429cfdda77db8041c702f46)


### [insights-operator](https://github.com/openshift/insights-operator/tree/98ecaca13995901ce2b36c7c01bd6735f95142da)

* [Bug 1805919](https://bugzilla.redhat.com/show_bug.cgi?id=1805919): Insights operator does not require being in an openshift run-level to function [#80](https://github.com/openshift/insights-operator/pull/80)
* [Bug 1788112](https://bugzilla.redhat.com/show_bug.cgi?id=1788112): override node selector (4.3) [#63](https://github.com/openshift/insights-operator/pull/63)
* Backport code owners to 4.3 [#76](https://github.com/openshift/insights-operator/pull/76)
* [Full changelog](https://github.com/openshift/insights-operator/compare/6b7509911b5cf9bd292cb7f05c31a386503f58c3...98ecaca13995901ce2b36c7c01bd6735f95142da)


### [ironic](https://github.com/openshift/ironic-image/tree/b9e59afd03655d1694318e83d1bc7f98fc510512)

* [Bug 1810078](https://bugzilla.redhat.com/show_bug.cgi?id=1810078): Copy iPXE binaries directly to /shared at runtime [#61](https://github.com/openshift/ironic-image/pull/61)
* [Full changelog](https://github.com/openshift/ironic-image/compare/7b39640a4517f9d0077b5d712715d997c0f44746...b9e59afd03655d1694318e83d1bc7f98fc510512)


### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/9a9e4d486d5773427ff44cdd7fcb821431d80853)

* [Bug 1804278](https://bugzilla.redhat.com/show_bug.cgi?id=1804278): set hostnames and make DHCPv6 IDs predictable [#29](https://github.com/openshift/ironic-ipa-downloader/pull/29)
* [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/1b2dae6b0e7ce5739fbd23fc5b6501d8aa6e373c...9a9e4d486d5773427ff44cdd7fcb821431d80853)


### [jenkins, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26)

* [Bug 1797144](https://bugzilla.redhat.com/show_bug.cgi?id=1797144): Bump Jenkins 2.204.2 [#1036](https://github.com/openshift/jenkins/pull/1036)
* [Bug 1809924](https://bugzilla.redhat.com/show_bug.cgi?id=1809924): Bump login plugin to 1.0.23 [#1030](https://github.com/openshift/jenkins/pull/1030)
* [Bug 1793322](https://bugzilla.redhat.com/show_bug.cgi?id=1793322): [4.3] Remove use of /etc/passwd and upgrade plugins versions [#1021](https://github.com/openshift/jenkins/pull/1021)
* [Full changelog](https://github.com/openshift/jenkins/compare/8b61349b6d454fae4e4d6521a9a1a70cb98a54cb...7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/be3eca0eee6aa16fd6101aecdda42391b46828f9)

* [Bug 1801737](https://bugzilla.redhat.com/show_bug.cgi?id=1801737): drop firewalld monitoring, add better iptables monitor [#39](https://github.com/openshift/sdn/pull/39)
* [Bug 1797042](https://bugzilla.redhat.com/show_bug.cgi?id=1797042): [4.3] Clean up stale egress IP iptables rules on startup [#100](https://github.com/openshift/sdn/pull/100)
* [Bug 1794024](https://bugzilla.redhat.com/show_bug.cgi?id=1794024): [4.3] Update deps, including informer fix [#94](https://github.com/openshift/sdn/pull/94)
* [Bug 1800324](https://bugzilla.redhat.com/show_bug.cgi?id=1800324): [4.3] Bug 1796157: Fix handling of VNID 0 with NetworkPolicy [#104](https://github.com/openshift/sdn/pull/104)
* [Bug 1790805](https://bugzilla.redhat.com/show_bug.cgi?id=1790805): Fix reinitialization of deny-all NetworkPolicy state on restart [#98](https://github.com/openshift/sdn/pull/98)
* [Full changelog](https://github.com/openshift/sdn/compare/85ab10333979853fee4e607f0d0a8d87dbf8c0b2...be3eca0eee6aa16fd6101aecdda42391b46828f9)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/fff0456c606410549d343a746bca166bb160fe3d)

* [Bug 1786298](https://bugzilla.redhat.com/show_bug.cgi?id=1786298): Nested CNI: Remove interfaces on DEL requests [#183](https://github.com/openshift/kuryr-kubernetes/pull/183)
* [Bug 1810522](https://bugzilla.redhat.com/show_bug.cgi?id=1810522): Ensure list of pods items is retrieved [#184](https://github.com/openshift/kuryr-kubernetes/pull/184)
* [Bug 1815019](https://bugzilla.redhat.com/show_bug.cgi?id=1815019): Ensures accurate quota calculation during the readiness checks [#194](https://github.com/openshift/kuryr-kubernetes/pull/194)
* [Bug 1799393](https://bugzilla.redhat.com/show_bug.cgi?id=1799393): Ensure LB with error status is only recreated after deleted [#160](https://github.com/openshift/kuryr-kubernetes/pull/160)
* [Bug 1799401](https://bugzilla.redhat.com/show_bug.cgi?id=1799401): Ensure no sg rule is repeated on the Network Policy CRD [#159](https://github.com/openshift/kuryr-kubernetes/pull/159)
* [Bug 1791278](https://bugzilla.redhat.com/show_bug.cgi?id=1791278): Add support for listeners on the same port but different protocol [#154](https://github.com/openshift/kuryr-kubernetes/pull/154)
* [Bug 1790339](https://bugzilla.redhat.com/show_bug.cgi?id=1790339): Add support to Octavia ACLs [#153](https://github.com/openshift/kuryr-kubernetes/pull/153)
* [Bug 1790339](https://bugzilla.redhat.com/show_bug.cgi?id=1790339): Ensure lb SG is not updated on member creation [#146](https://github.com/openshift/kuryr-kubernetes/pull/146)
* [Bug 1789330](https://bugzilla.redhat.com/show_bug.cgi?id=1789330): Fix more problem of changing size during dict iteration [#144](https://github.com/openshift/kuryr-kubernetes/pull/144)
* [Bug 1792240](https://bugzilla.redhat.com/show_bug.cgi?id=1792240): Avoid KeyError when deleting NPs [#142](https://github.com/openshift/kuryr-kubernetes/pull/142)
* [Bug 1789330](https://bugzilla.redhat.com/show_bug.cgi?id=1789330): Fix problem with dicts while iterating on for loops [#135](https://github.com/openshift/kuryr-kubernetes/pull/135)
* [Bug 1788635](https://bugzilla.redhat.com/show_bug.cgi?id=1788635): Fix Octavia version detection [#131](https://github.com/openshift/kuryr-kubernetes/pull/131)
* [Bug 1787343](https://bugzilla.redhat.com/show_bug.cgi?id=1787343): Protect from sg Not Found on multiple np enforcement [#129](https://github.com/openshift/kuryr-kubernetes/pull/129)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/1673bfa4581a5286c4bb4c7a58c47b502d5f4a3a...fff0456c606410549d343a746bca166bb160fe3d)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/409274d4c429590723a1cea87f7435b341d0562f)

* [Bug 1814092](https://bugzilla.redhat.com/show_bug.cgi?id=1814092): ROKS: remove machine related CRDs from cluster [4.3] [#531](https://github.com/openshift/machine-api-operator/pull/531)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#485](https://github.com/openshift/machine-api-operator/pull/485)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/f552d33b6daa5b21eac7c0fde89eaa675e23e78a...409274d4c429590723a1cea87f7435b341d0562f)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ab4d62a3bf3774b77b6f9b04a2028faec1568aca)

* [Bug 1785279](https://bugzilla.redhat.com/show_bug.cgi?id=1785279): [release-4.3] Discard audit messages from journald [#1352](https://github.com/openshift/machine-config-operator/pull/1352)
* [Bug 1809693](https://bugzilla.redhat.com/show_bug.cgi?id=1809693): [release-4.3] prevent hitting annotation max size limit on nodes [#1433](https://github.com/openshift/machine-config-operator/pull/1433)
* [Bug 1807104](https://bugzilla.redhat.com/show_bug.cgi?id=1807104): Detect default hostname in its variants [#1534](https://github.com/openshift/machine-config-operator/pull/1534)
* [Bug 1807279](https://bugzilla.redhat.com/show_bug.cgi?id=1807279): templates/master/00-master/azure: bump raft tunables [#1507](https://github.com/openshift/machine-config-operator/pull/1507)
* [Bug 1807104](https://bugzilla.redhat.com/show_bug.cgi?id=1807104): daemon: Always create tempfiles in target dir [#1535](https://github.com/openshift/machine-config-operator/pull/1535)
* [Bug 1808004](https://bugzilla.redhat.com/show_bug.cgi?id=1808004): [release-4.3] CRI-O to set stream address in ctrl plane [#1510](https://github.com/openshift/machine-config-operator/pull/1510)
* [Bug 1802675](https://bugzilla.redhat.com/show_bug.cgi?id=1802675): [release-4.3] baremetal: Verify that mdns start only after hostname was set [#1479](https://github.com/openshift/machine-config-operator/pull/1479)
* [Bug 1806020](https://bugzilla.redhat.com/show_bug.cgi?id=1806020): [baremetal] Set hostname when DHCP6_FQDN_FQDN is set [#1502](https://github.com/openshift/machine-config-operator/pull/1502)
* [Bug 1801638](https://bugzilla.redhat.com/show_bug.cgi?id=1801638): [release-4.3] baremetal: all resolvconf editing to NM dispatcher [#1470](https://github.com/openshift/machine-config-operator/pull/1470)
* [Bug 1794495](https://bugzilla.redhat.com/show_bug.cgi?id=1794495): [release-4.3] fix ctrcfg and add e2e test [#1447](https://github.com/openshift/machine-config-operator/pull/1447)
* [Bug 1798170](https://bugzilla.redhat.com/show_bug.cgi?id=1798170): baremetal: Remove .template from path in dhcp-dhclient-conf.yaml [#1438](https://github.com/openshift/machine-config-operator/pull/1438)
* [Bug 1798639](https://bugzilla.redhat.com/show_bug.cgi?id=1798639): [release-4.3] baremetal: IPv6 add dhcp-duid to NetworkManager config [#1441](https://github.com/openshift/machine-config-operator/pull/1441)
* [Bug 1797647](https://bugzilla.redhat.com/show_bug.cgi?id=1797647): [release-4.3] [baremetal] Ipv6 non virtual ip fix [#1466](https://github.com/openshift/machine-config-operator/pull/1466)
* [Bug 1797035](https://bugzilla.redhat.com/show_bug.cgi?id=1797035): Get etcdctl binary from the etcd image and not from the upstream releases [#1431](https://github.com/openshift/machine-config-operator/pull/1431)
* [Bug 1793253](https://bugzilla.redhat.com/show_bug.cgi?id=1793253): [release-4.3] HAProxy infra pod: Make v4/v6 compatible [#1399](https://github.com/openshift/machine-config-operator/pull/1399)
* [Bug 1785718](https://bugzilla.redhat.com/show_bug.cgi?id=1785718): [release-4.3] etcd: Add initial support for an IPv6 control plane [#1353](https://github.com/openshift/machine-config-operator/pull/1353)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#1426](https://github.com/openshift/machine-config-operator/pull/1426)
* [Bug 1796440](https://bugzilla.redhat.com/show_bug.cgi?id=1796440): [release-4.3] DR: Cherry-pick  keep keys and data separate for snapshot backup [#1410](https://github.com/openshift/machine-config-operator/pull/1410)
* [Bug 1794699](https://bugzilla.redhat.com/show_bug.cgi?id=1794699): [release-4.3] baremetal: ipv6, switch to NM dispatcher for DNS VIP prepending [#1406](https://github.com/openshift/machine-config-operator/pull/1406)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/25bb6aeb58135c38a667e849edf5244871be4992...ab4d62a3bf3774b77b6f9b04a2028faec1568aca)


### [multus-cni](https://github.com/openshift/multus-cni/tree/9e85cb1ba34b516b33da18cee4500be6a61fdf74)

* [Bug 1809283](https://bugzilla.redhat.com/show_bug.cgi?id=1809283): Removes configuration invalidation [4.3 backport] [#52](https://github.com/openshift/multus-cni/pull/52)
* [Bug 1805444](https://bugzilla.redhat.com/show_bug.cgi?id=1805444): Exposes readinessindicatorfile and uses wait.PollImmediate [backport 4.3] [#48](https://github.com/openshift/multus-cni/pull/48)
* [Full changelog](https://github.com/openshift/multus-cni/compare/1cb7d0f9c0a336ba7f33a0e2800c12205f10878c...9e85cb1ba34b516b33da18cee4500be6a61fdf74)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/d5df318830efb30c128e38390d26e695ac33c954)

* [Bug 1809253](https://bugzilla.redhat.com/show_bug.cgi?id=1809253): Reload serving certs [#160](https://github.com/openshift/oauth-proxy/pull/160)
* [Bug 1798195](https://bugzilla.redhat.com/show_bug.cgi?id=1798195): fix OAuth discovery in IPv6 environments [#150](https://github.com/openshift/oauth-proxy/pull/150)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/fbd062bbcb23538863a735f9823ac3fd6f47429e...d5df318830efb30c128e38390d26e695ac33c954)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/0b018bee77bd24511229d65001265d56d689cc97)

* [Bug 1803080](https://bugzilla.redhat.com/show_bug.cgi?id=1803080): 4.3: UPSTREAM: 87673: blank out value for unbounded client label [#75](https://github.com/openshift/openshift-apiserver/pull/75)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6868787f33f63c1c167c42f195a8bc98f89e827d...0b018bee77bd24511229d65001265d56d689cc97)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c7c802a8a67697782cfaa10f266c36f9adb66860)

* [release 4.3] Bug 1779282: Use OwnerRefs to clean up SA pull secrets [#72](https://github.com/openshift/openshift-controller-manager/pull/72)
* [Bug 1802889](https://bugzilla.redhat.com/show_bug.cgi?id=1802889): bump(github.com/mtrmac/gpgme): v0.1.2 [#64](https://github.com/openshift/openshift-controller-manager/pull/64)
* [Bug 1810306](https://bugzilla.redhat.com/show_bug.cgi?id=1810306): Restore openshift-controller-manager metrics [#71](https://github.com/openshift/openshift-controller-manager/pull/71)
* [Bug 1785845](https://bugzilla.redhat.com/show_bug.cgi?id=1785845): use OCM config registry hostname with imagechangetrigger in case imagestream cache is stale (a la builds) for local ref streams [#59](https://github.com/openshift/openshift-controller-manager/pull/59)
* [Bug 1784569](https://bugzilla.redhat.com/show_bug.cgi?id=1784569): Exclude IPv6 Registry Locations [#57](https://github.com/openshift/openshift-controller-manager/pull/57)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/72436956543f5a9587a24191d0f130e312b82e50...c7c802a8a67697782cfaa10f266c36f9adb66860)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/7aa99e291276aa2f26260f8e654078ab6c2464f0)

* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#81](https://github.com/openshift/cluster-api-provider-openstack/pull/81)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/c14315ec71021976371f457598351db5c00fc586...7aa99e291276aa2f26260f8e654078ab6c2464f0)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/5ff376fd8c14bf6a99b314ad402ceb5641f71fdd)

* [Bug 1814777](https://bugzilla.redhat.com/show_bug.cgi?id=1814777): fix(catsrc): remove limits on catalogsource pods [#1406](https://github.com/operator-framework/operator-lifecycle-manager/pull/1406)
* [Bug 1807631](https://bugzilla.redhat.com/show_bug.cgi?id=1807631): Duplicate packages in packageserver APIService response [#1363](https://github.com/operator-framework/operator-lifecycle-manager/pull/1363)
* [Bug 1814263](https://bugzilla.redhat.com/show_bug.cgi?id=1814263): Make provided API ClusterRoles be owned by the corresponding API. [#1383](https://github.com/operator-framework/operator-lifecycle-manager/pull/1383)
* [Bug 1805268](https://bugzilla.redhat.com/show_bug.cgi?id=1805268): Fix configmap registry server readiness probe timeouts [#1365](https://github.com/operator-framework/operator-lifecycle-manager/pull/1365)
* [Bug 1808419](https://bugzilla.redhat.com/show_bug.cgi?id=1808419): Don't block on ctx.Done() if startup fails. [#1366](https://github.com/operator-framework/operator-lifecycle-manager/pull/1366)
* [Bug 1805574](https://bugzilla.redhat.com/show_bug.cgi?id=1805574): Remove run-level 1 from olm and openshift-operators namespaces [#1310](https://github.com/operator-framework/operator-lifecycle-manager/pull/1310)
* [Bug 1809649](https://bugzilla.redhat.com/show_bug.cgi?id=1809649): Update subscription_sync_count to include the package name [#1343](https://github.com/operator-framework/operator-lifecycle-manager/pull/1343)
* [Bug 1798665](https://bugzilla.redhat.com/show_bug.cgi?id=1798665): Fix cases where an operator's ready channel may never close. [#1280](https://github.com/operator-framework/operator-lifecycle-manager/pull/1280)
* [Bug 1797019](https://bugzilla.redhat.com/show_bug.cgi?id=1797019): [release-4.3] Fix bad opgroup annotations [#1272](https://github.com/operator-framework/operator-lifecycle-manager/pull/1272)
* [Bug 1803135](https://bugzilla.redhat.com/show_bug.cgi?id=1803135): fix(packagemanifests): Fix index key func to avoid key collision [#1292](https://github.com/operator-framework/operator-lifecycle-manager/pull/1292)
* [Bug 1780378](https://bugzilla.redhat.com/show_bug.cgi?id=1780378): Implement Structural Schema for CRDs [#1197](https://github.com/operator-framework/operator-lifecycle-manager/pull/1197)
* [Bug 1796913](https://bugzilla.redhat.com/show_bug.cgi?id=1796913): packageserver update fails to adopt APIService [#1270](https://github.com/operator-framework/operator-lifecycle-manager/pull/1270)
* [Bug 1791852](https://bugzilla.redhat.com/show_bug.cgi?id=1791852): Remove license year [#1243](https://github.com/operator-framework/operator-lifecycle-manager/pull/1243)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/c74333dbe61d92e1a75b09f74c0dc2c99b05405a...5ff376fd8c14bf6a99b314ad402ceb5641f71fdd)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/c6534cc7f7e13e5a24c63c75485ef443f1892d9f)

* [Bug 1810048](https://bugzilla.redhat.com/show_bug.cgi?id=1810048): Use DNS for CatalogSource address [#285](https://github.com/operator-framework/operator-marketplace/pull/285)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a02f89919b89dac572d9b5264a22aeccc87da77...c6534cc7f7e13e5a24c63c75485ef443f1892d9f)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/36ee3a437614ca1cb781465e590613e01556e756)

* [Bug 1794176](https://bugzilla.redhat.com/show_bug.cgi?id=1794176): Updating summary for 'Operator Registry ' containers [#169](https://github.com/operator-framework/operator-registry/pull/169)
* [Bug 1805410](https://bugzilla.redhat.com/show_bug.cgi?id=1805410): fix(docker): add entrypoint [#185](https://github.com/operator-framework/operator-registry/pull/185)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/4aef889d760333aebac0f01459b3a8bf698fff0b...36ee3a437614ca1cb781465e590613e01556e756)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/49545a5ff653cb9b9f156263348e317c0940e7a6)

* [Bug 1806667](https://bugzilla.redhat.com/show_bug.cgi?id=1806667): merge master to release-4.3 [#100](https://github.com/openshift/ovn-kubernetes/pull/100)
* ipv6: Make IPAddrToHWAddr() aware of IPv6 [#101](https://github.com/openshift/ovn-kubernetes/pull/101)
* HACK: add ipv4 interfaces to pods that need them [#94](https://github.com/openshift/ovn-kubernetes/pull/94)
* Upstream merge 2020-02-18 [#93](https://github.com/openshift/ovn-kubernetes/pull/93)
* fix IPv6 subnet dynamic addressing [#1072](https://github.com/openshift/ovn-kubernetes/pull/1072)
* config: don't let environment affect test results [#1071](https://github.com/openshift/ovn-kubernetes/pull/1071)
* add the ability for ovn-kubernetes to ignore a node by label [#1048](https://github.com/openshift/ovn-kubernetes/pull/1048)
* Fixes accidental override of file conf settings with defaults [#1044](https://github.com/openshift/ovn-kubernetes/pull/1044)
* Fix delete order for network policy [#1068](https://github.com/openshift/ovn-kubernetes/pull/1068)
* Remove kube-proxy in KIND deployment [#1067](https://github.com/openshift/ovn-kubernetes/pull/1067)
* remove unused methods from KClient [#1053](https://github.com/openshift/ovn-kubernetes/pull/1053)
* Ensure kind logs are always exported [#1065](https://github.com/openshift/ovn-kubernetes/pull/1065)
* ci: always export logs [#1054](https://github.com/openshift/ovn-kubernetes/pull/1054)
* Clustered database (aka RAFT) support for OVN DBs [#1051](https://github.com/openshift/ovn-kubernetes/pull/1051)
* [Bug 1795454](https://bugzilla.redhat.com/show_bug.cgi?id=1795454): Resync to upstream [#87](https://github.com/openshift/ovn-kubernetes/pull/87)
* when performing static ip allocation other-config:subnet is not required [#1046](https://github.com/openshift/ovn-kubernetes/pull/1046)
* Remove the compat annotation code for OvnPodAnnotationLegacyName and OvnHostSubnetLegacy [#1045](https://github.com/openshift/ovn-kubernetes/pull/1045)
* ci: remove Travis now that GitHub actions work [#1039](https://github.com/openshift/ovn-kubernetes/pull/1039)
* J2 render all templates [#1041](https://github.com/openshift/ovn-kubernetes/pull/1041)
* ci: bump master loglevel to 5 [#1040](https://github.com/openshift/ovn-kubernetes/pull/1040)
* CNI logging and timeout fixes, plus node handler locking fix [#1036](https://github.com/openshift/ovn-kubernetes/pull/1036)
* ci: use consistent kind cluster name and fix artifact retrieval [#1037](https://github.com/openshift/ovn-kubernetes/pull/1037)
* Also run CI for pull requests [#1033](https://github.com/openshift/ovn-kubernetes/pull/1033)
* Replace Travis CI with GitHub Actions [#1028](https://github.com/openshift/ovn-kubernetes/pull/1028)
* Iptables followup [#1032](https://github.com/openshift/ovn-kubernetes/pull/1032)
* Ensure j2 does not fail to run in daemonset.sh if installed globally [#1031](https://github.com/openshift/ovn-kubernetes/pull/1031)
* Fixes specifying geneve port [#1030](https://github.com/openshift/ovn-kubernetes/pull/1030)
* fix for iptables issue in CentOS 8 [#1027](https://github.com/openshift/ovn-kubernetes/pull/1027)
* do not delete integration bridge as part of ovnkube-node cleanup [#1029](https://github.com/openshift/ovn-kubernetes/pull/1029)
* Yet more cleanups [#1023](https://github.com/openshift/ovn-kubernetes/pull/1023)
* travis: bump timeout for e2e tests [#1024](https://github.com/openshift/ovn-kubernetes/pull/1024)
* a way to specify the encap-ip for a k8s worker node [#1016](https://github.com/openshift/ovn-kubernetes/pull/1016)
* Fix kubetest to enable conformance [#1018](https://github.com/openshift/ovn-kubernetes/pull/1018)
* add support for custom MAC specified in default network-attachment [#997](https://github.com/openshift/ovn-kubernetes/pull/997)
* Validates host subnet prefix length and default behavior [#979](https://github.com/openshift/ovn-kubernetes/pull/979)
* ovn: read pod addresses more quickly [#1012](https://github.com/openshift/ovn-kubernetes/pull/1012)
* Enable e2e CI [#1011](https://github.com/openshift/ovn-kubernetes/pull/1011)
* [Bug 1798613](https://bugzilla.redhat.com/show_bug.cgi?id=1798613): OVN: Bump image to include ovn2.12 [#72](https://github.com/openshift/ovn-kubernetes/pull/72)
* [Bug 1796531](https://bugzilla.redhat.com/show_bug.cgi?id=1796531): CARRY: fix race updating exclude IPs on node switch [#83](https://github.com/openshift/ovn-kubernetes/pull/83)
* Upstream rebase 2020-01-17 [#77](https://github.com/openshift/ovn-kubernetes/pull/77)
* Restrict address type requirements for tunneling [#1014](https://github.com/openshift/ovn-kubernetes/pull/1014)
* Allow IPv6 Node addresses for geneve tunnels [#1013](https://github.com/openshift/ovn-kubernetes/pull/1013)
* factory: parallelize Node events [#920](https://github.com/openshift/ovn-kubernetes/pull/920)
* scale: use light weight check to ensure OVN DB endpoints are up [#1007](https://github.com/openshift/ovn-kubernetes/pull/1007)
* trivial: use GetNodeWellKnownAddresses() to arrive at node mgmt port IP [#1009](https://github.com/openshift/ovn-kubernetes/pull/1009)
* determine whether we are running in IPv6 mode once at the start time [#1005](https://github.com/openshift/ovn-kubernetes/pull/1005)
* Fix multicast Port_Group update at pod creation/deletion. [#953](https://github.com/openshift/ovn-kubernetes/pull/953)
* IPv6 single-stack support [#968](https://github.com/openshift/ovn-kubernetes/pull/968)
* ovn: remove 'func (oc *Controller)' from functions that don't need it [#1002](https://github.com/openshift/ovn-kubernetes/pull/1002)
* avoid using --wait=sb in ovn-nbctl calls when using ovn-nbctl daemon [#1001](https://github.com/openshift/ovn-kubernetes/pull/1001)
* Factory and testcase cleanups [#999](https://github.com/openshift/ovn-kubernetes/pull/999)
* handle failed management logical_switch_port creation [#996](https://github.com/openshift/ovn-kubernetes/pull/996)
* scale: fixed MAC address for the logical router ports [#992](https://github.com/openshift/ovn-kubernetes/pull/992)
* do normal processing for all inbound packets that are not tracked [#993](https://github.com/openshift/ovn-kubernetes/pull/993)
* scale: clearInitialNodeNetworkUnavailableCondition() is very expensive [#994](https://github.com/openshift/ovn-kubernetes/pull/994)
* Fix Windows cross-compilation [#76](https://github.com/openshift/ovn-kubernetes/pull/76)
* Fixes missing oc client during openshift image build [#74](https://github.com/openshift/ovn-kubernetes/pull/74)
* correct the directory placement of windows binary [#73](https://github.com/openshift/ovn-kubernetes/pull/73)
* Build the windows binary as part of the container ovn-kubernetes container build [#69](https://github.com/openshift/ovn-kubernetes/pull/69)
* Upstream + hybrid-overlay merge 2019-12-28 [#70](https://github.com/openshift/ovn-kubernetes/pull/70)
* scale: waitForNodeLogicalSwitch() should get other-config:subnet itself [#989](https://github.com/openshift/ovn-kubernetes/pull/989)
* remove unwanted debug log messages in factory.go [#987](https://github.com/openshift/ovn-kubernetes/pull/987)
* ovn-controller: Set ovn-openflow-probe-interval [#986](https://github.com/openshift/ovn-kubernetes/pull/986)
* scale: ascertain gateway readiness by checking OpenFlow rules [#985](https://github.com/openshift/ovn-kubernetes/pull/985)
* scale: ascertain management port readiness by checking OpenFlow rules [#984](https://github.com/openshift/ovn-kubernetes/pull/984)
* set other_config:hwaaddr on br-local before you add br-nexthop [#983](https://github.com/openshift/ovn-kubernetes/pull/983)
* Support latest OVN [#926](https://github.com/openshift/ovn-kubernetes/pull/926)
* persist the mac address associated with the node management port [#950](https://github.com/openshift/ovn-kubernetes/pull/950)
* Better testcase failure descriptions and command matching [#976](https://github.com/openshift/ovn-kubernetes/pull/976)
* pkg/cluster: set br-nexthop mtu [#975](https://github.com/openshift/ovn-kubernetes/pull/975)
* go mod tidy [#973](https://github.com/openshift/ovn-kubernetes/pull/973)
* persist the mac address associated with br-nexthop OVS internal port [#949](https://github.com/openshift/ovn-kubernetes/pull/949)
* add node systemID to the list of information passed from node to master [#966](https://github.com/openshift/ovn-kubernetes/pull/966)
* Removes duplicate code setting ovn_db_host [#971](https://github.com/openshift/ovn-kubernetes/pull/971)
* Update metric service to include not-ready endpoints [#974](https://github.com/openshift/ovn-kubernetes/pull/974)
* Fixes detecting loopback for ovnkube-db endpoint [#970](https://github.com/openshift/ovn-kubernetes/pull/970)
* cmd: add --metrics-enable-pprof option to serve pprof on metrics port [#969](https://github.com/openshift/ovn-kubernetes/pull/969)
* get dynamic_addresses and addresses in one go instead of two execs [#963](https://github.com/openshift/ovn-kubernetes/pull/963)
* Manage log level during node bring up [#962](https://github.com/openshift/ovn-kubernetes/pull/962)
* Add networkpolicy test cases [#939](https://github.com/openshift/ovn-kubernetes/pull/939)
* Disable IPv6 DAD and ensure addresses are ready [#937](https://github.com/openshift/ovn-kubernetes/pull/937)
* add a switch to flip on/off multicast support (is disabled by default) [#954](https://github.com/openshift/ovn-kubernetes/pull/954)
* use ahostsv4 database to ensure we get IPv4 address always [#952](https://github.com/openshift/ovn-kubernetes/pull/952)
* Move pod annotation under k8s.ovn.org namespace [#922](https://github.com/openshift/ovn-kubernetes/pull/922)
* Enable IGMP Querier only if a source IPv4 is available. [#944](https://github.com/openshift/ovn-kubernetes/pull/944)
* Sync SubnetAllocator from openshift/sdn [#945](https://github.com/openshift/ovn-kubernetes/pull/945)
* Fix parsing of IPv6 addresses in ovn URLs [#938](https://github.com/openshift/ovn-kubernetes/pull/938)
* build: fix 'make lint' when GOPATH isn't explicitly set [#929](https://github.com/openshift/ovn-kubernetes/pull/929)
* AddFilteredEndpointsHandler must take label selector like other handlers [#936](https://github.com/openshift/ovn-kubernetes/pull/936)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2808c2cbb256460d929491f33ec5858ceebb211c...49545a5ff653cb9b9f156263348e317c0940e7a6)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/d0b913aa0dc58d87bab16ed5a8799a9e06891705)

* [Bug 1789084](https://bugzilla.redhat.com/show_bug.cgi?id=1789084): Not reporting 'none' when no platforms located [#49](https://github.com/openshift/node_exporter/pull/49)
* [Full changelog](https://github.com/openshift/node_exporter/compare/1ea04fb0e09c14440bb97c3468b97f99db07dcfd...d0b913aa0dc58d87bab16ed5a8799a9e06891705)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/dd7235b4568fe22232f9cee2855967da5e0c52b2)

* [Bug 1810420](https://bugzilla.redhat.com/show_bug.cgi?id=1810420): Ensure service CA certs are created with unique serial numbers [#112](https://github.com/openshift/service-ca-operator/pull/112)
* [Bug 1791022](https://bugzilla.redhat.com/show_bug.cgi?id=1791022): Ensure removal of 4.4-only resources on downgrade to 4.3 [#93](https://github.com/openshift/service-ca-operator/pull/93)
* [Bug 1788179](https://bugzilla.redhat.com/show_bug.cgi?id=1788179): Enable automated rotation for 4.3 [#104](https://github.com/openshift/service-ca-operator/pull/104)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/774c394da334dec446703545d4baaf89611ccb9d...dd7235b4568fe22232f9cee2855967da5e0c52b2)


### [telemeter](https://github.com/openshift/telemeter/tree/227ae59d226d17eee26a60621bc884f4e8e83254)

* [Bug 1805116](https://bugzilla.redhat.com/show_bug.cgi?id=1805116): jsonnet/telemeter/metrics: add aggregated up metric, remove node_uname_info [#309](https://github.com/openshift/telemeter/pull/309)
* [Full changelog](https://github.com/openshift/telemeter/compare/aa7942931890dd361c117a6cbb7d84451415f7bf...227ae59d226d17eee26a60621bc884f4e8e83254)