# 4.3.18

Created: 2020-04-28 08:23:43 +0000 UTC

Image Digest: `sha256:1f0fd38ac0640646ab8e7fec6821c8928341ad93ac5ca3a48c513ab1fb63bc4b`

Promoted from registry.svc.ci.openshift.org/ocp/release:4.3.0-0.nightly-2020-04-28-044647


## Changes from 4.3.0

### Components

* Kubernetes 1.16.2


### New images

* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1322dc43](https://github.com/openshift/route-override-cni/commit/1322dc43712e12a021f5e83c8d752e7d8c30aa6e) `sha256:15c1b47da2e5e7574caffb1a212b9f94d8137deab40df9d4f90158f927804547`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9cca449d](https://github.com/openshift/whereabouts-cni/commit/9cca449d619ed0f93a06aca9255004672bb6c96e) `sha256:279e90b833f40a318951662482aca067b107ce8ba2fe053e5898893e523d2716`


### Rebuilt images without code change

* [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure) git [86ecb23d](https://github.com/openshift/cluster-api-provider-azure/commit/86ecb23daa83c78761414a7abcb169c73c18a756) `sha256:6d094bcc6584e136dfd488467c9dd02cc92244b6f9e7d121a628425ee7a6e9a5`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:6f2a7ee4191e915dc2a865fd1fdccfbfd42c86402976cab72bcd5350804cc338`
* [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator) git [df8cd95e](https://github.com/openshift/cluster-authentication-operator/commit/df8cd95ed3249e0fae70ddaea56c07950b819cad) `sha256:4552306fdb92edbc3bdda3cf3eed7fd1ad0fd9348fd7ecc9e3608fba209fb73c`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:f243a6c187d0aea037146f2694dc0eb60bceeae87c4ed6f8e1e5b051cd06442d`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [d5ddbcdd](https://github.com/openshift/cluster-config-operator/commit/d5ddbcdd4ec87bd4d0d109e81ed0be5dafd86061) `sha256:290d15ca3cd9837af2d3cc6ccb1d9a960249e235e362c56a38ee246463dbb9e4`
* [cluster-node-tuned](https://github.com/openshift/openshift-tuned) git [4de82474](https://github.com/openshift/openshift-tuned/commit/4de824748a0fa2dbf4b10f82a32e3784372bce54) `sha256:cb533037f0a1b723e4773e6467babe5795d60e30dd1af989f5415015c0519c15`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [10fc162e](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/10fc162e4f4c977a9c431884b9a063fa751514d0) `sha256:cf12265549e6b628e30c14a9476dfbfb4d9e07789bbd59fb5972cc1e02f0304c`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [9b6ccc80](https://github.com/openshift/cluster-policy-controller/commit/9b6ccc80eeef2eb85f78f8a70f319cbae0c5295a) `sha256:67f2f79584bde75b522e36aa3671cbc507adcf86ca8d664e8cabf02453440aa6`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [a9548e6d](https://github.com/openshift/cluster-storage-operator/commit/a9548e6d0ac621a5c6e8e3544ca680280a1ca746) `sha256:db3e823109cd1d375e65a99d92c5d2cb751ad14670023688a10202e6937f4e1b`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [727d37d9](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/727d37d929cb388744362c98fbcaf9ef547cd4b6) `sha256:c29c3706707df31e61890ab68735d698b29528831edf52b02667f645a0e1e492`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:047ff3b87f6cae5e41d7c53e2640af585feb5684bdc711fd8f47075324526e54`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:82fee091133a728e50c85247e2d1669a35725ce005f18a9fd5baaea48e5aa956`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [386465fe](https://github.com/openshift/containernetworking-plugins/commit/386465fe170c0e7299b357efbace235a3e5ce7ee) `sha256:a05407554e1ab71ca95088f9ab3eae15039b863d4c248dbd0c12c9b1577fd850`
* [etcd](https://github.com/openshift/etcd) git [e30a18f2](https://github.com/openshift/etcd/commit/e30a18f29c8bf1f16507d7983dde2aa51962d6c7) `sha256:5ec245797eed60ffd2c360f8d8d9b2937a089cd26d7f755205b8904840a53e3c`
* [grafana](https://github.com/openshift/grafana) git [e2261e14](https://github.com/openshift/grafana/commit/e2261e142909cb0fe70fc0996d7d375e57956589) `sha256:df14f5a552934be2c6a385b76d312bd89bab807385471f44a9c365f72d311be9`
* [haproxy-router](https://github.com/openshift/router) git [1526917a](https://github.com/openshift/router/commit/1526917a58021c8f6e465406501c32fa3fb618b5) `sha256:f43a88c5f27eed30d8a2195e0b7fa8c22cf9128e2cda6ca9cf5c95b7e074cbfa`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [5f57661e](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/5f57661eaaa3f8714c2b1904313b9ecf1a7bdba4) `sha256:ada6666e6dbe59a0dd30c40464ae04ceeef0ce5350aa7a89ff9b340b541595dd`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [b83630ce](https://github.com/openshift/ironic-inspector-image/commit/b83630cefa1a72b2d8ce03c9701acb4f117ab6f5) `sha256:957d28102d6d8a8825d3da20d213a1edb02d6342a0fe18bf6f4def62dad2da5a`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [2405ba63](https://github.com/openshift/ironic-rhcos-downloader/commit/2405ba63f22db1cbda255cfccf2fc84f15faa6ee) `sha256:8e15e3fbcb7407741af8f6dfd0f0a1267c113cde94f8b35a78f6a23455b54443`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e33314bd](https://github.com/openshift/ironic-static-ip-manager/commit/e33314bda6f366472a2371c5598ff2d7dba111c8) `sha256:72daf9fa09f2c3e70295727cf5dff66c8789728194d6005a142d54e3756619da`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [3d1c61e9](https://github.com/openshift/k8s-prometheus-adapter/commit/3d1c61e9a783d8c4a764b130837682fa9ab8e9df) `sha256:301eceb84701ed5ffba8a6d8197e03055e7a3a892a92237394a7c5a4de10cbbf`
* [keepalived-ipfailover](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:f30f6fcf8e2da3e01d72cf83d702d62c61a7ab1c55507d17d8b7fe414ae438d3`
* [kube-client-agent](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:def9761e6ae543fb7b3ba4232a54744bbff80732958c91f079181c1cc675782e`
* [kube-etcd-signer-server](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:2da5ef75a725b17dbe4724f9bac15415a49cfdb624877539cf36ea85f4f63a9f`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [84e7dac6](https://github.com/openshift/kube-rbac-proxy/commit/84e7dac69f8e3f90620729ee730327a3e168963d) `sha256:25e573fd3f7d4d47c1c4c9f46fe7b8ab2546466b7fe8bfcdd972bbb3570b63ff`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [83f9fc56](https://github.com/openshift/kube-state-metrics/commit/83f9fc5685cf3d7732687e1f07da6b27d6901c4f) `sha256:8c2344c1ee1b1dceb6512af140eecb0712e477dd4e6089d1a743057a18164c54`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:5a3196a91ddc987ffa7223f77b7a26b4da3390055930d5c6f4fc17f879766224`
* machine-os-content `sha256:4cd521fb34c0d362205a1e55ad8c9c8dd6c7365b71a357ef705692ed80f7b112`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [24135de2](https://github.com/openshift/mdns-publisher/commit/24135de29fc348f3ef455a288013cc1912d969bc) `sha256:0f3868074df4531ffcdefd1ad9a1ece38f13612c7c60740d1fcf3819bac7b68e`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ead10a3c](https://github.com/openshift/multus-admission-controller/commit/ead10a3cf30c5b4a2fbd7c987d83c07a46c5d5da) `sha256:eb0f0064c2bcdd2722b6f981a5e6dec511f2548088233a063e31a55a0d009285`
* [must-gather](https://github.com/openshift/must-gather) git [23037ad1](https://github.com/openshift/must-gather/commit/23037ad16c0aafd7186431c93ebca3f0d426a08d) `sha256:2e10ad0fc17f39c7a83aac32a725c78d7dd39cd9bbe3ec5ca0b76dcaa98416fa`
* [oauth-server](https://github.com/openshift/oauth-server) git [d3065e59](https://github.com/openshift/oauth-server/commit/d3065e59ce948f10364d0dd88cb70b860ec65ee2) `sha256:57079219d0a6ed718200811269c51c22c83063d55e81536a4e1395d0498ccf5a`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c01d2de6](https://github.com/openshift/openshift-state-metrics/commit/c01d2de651071389d2621c46e934fd9cb2bf4b8d) `sha256:b3bf5802f8106f832470506bb26eb2b4734bd524eb73a34a44de7a865ec4324f`
* [pod](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:102f71fc09bc11085718d24a3221a74a9a517372069447f047a1b19b63f13b66`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b8153a7f](https://github.com/openshift/prom-label-proxy/commit/b8153a7f39f1a34c03059f1b9dfb05d2c1297414) `sha256:682adb2f41e357604bfba88ddd9f2eb541434aea36bda5e7294d6ef10c5e1b20`
* [prometheus](https://github.com/openshift/prometheus) git [c086098d](https://github.com/openshift/prometheus/commit/c086098da5f01ab9565bdda772d3459bea2913f2) `sha256:71500395c957ad431622b3db0091d19375a07a34ecc81a04c234a75e902b592e`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [11aa2a87](https://github.com/openshift/prometheus-alertmanager/commit/11aa2a87c5bfb84cba76b90a3867a06a55e2605e) `sha256:c50ef2bafdf6c8a39bfa186f0d3c157381ad6f6f5fd0f2e18c3eeac1a47aaea1`
* [service-catalog](https://github.com/openshift/service-catalog) git [6f75f804](https://github.com/openshift/service-catalog/commit/6f75f8047dfab6ca8b979833f7f2a6036deee488) `sha256:cae4cf2a71a900655c933ff4a930b9ef771c3eb351c121adefc71588eb93ec2f`
* [thanos](https://github.com/openshift/thanos) git [4aaa91e9](https://github.com/openshift/thanos/commit/4aaa91e9b982177e113c80567ec3808dcf122769) `sha256:c74fd29d369468f40d1e6f724bb86a267a74793e13cd08e64e299ae414ee9b63`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/86a378fedb20eb9a998047407594baabe80dc345)

* [Bug 1800315](https://bugzilla.redhat.com/show_bug.cgi?id=1800315): [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller's changes [#298](https://github.com/openshift/cluster-api-provider-aws/pull/298)
* [Bug 1798597](https://bugzilla.redhat.com/show_bug.cgi?id=1798597): [release-4.3] take into consideration all instance states for deletion [#292](https://github.com/openshift/cluster-api-provider-aws/pull/292)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b59f34398847fd2047f4f1193654b505643afe79...86a378fedb20eb9a998047407594baabe80dc345)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/db4411451af55e0bab7258d25bdabd91ea48382f)

* [Bug 1810492](https://bugzilla.redhat.com/show_bug.cgi?id=1810492): OpenStack: pass all CAs to bootstrap ignition [#3242](https://github.com/openshift/installer/pull/3242)
* [Bug 1817717](https://bugzilla.redhat.com/show_bug.cgi?id=1817717): Backport Azure UPI to 4.3 [#3351](https://github.com/openshift/installer/pull/3351)
* [Bug 1818140](https://bugzilla.redhat.com/show_bug.cgi?id=1818140): Backport adding groundwork for multi-arch images [#3233](https://github.com/openshift/installer/pull/3233)
* [Bug 1786364](https://bugzilla.redhat.com/show_bug.cgi?id=1786364): filter out unsupported regions in Azure [#3320](https://github.com/openshift/installer/pull/3320)
* [Bug 1816705](https://bugzilla.redhat.com/show_bug.cgi?id=1816705): images/libvirt: remove epel-release [#3339](https://github.com/openshift/installer/pull/3339)
* [Bug 1816264](https://bugzilla.redhat.com/show_bug.cgi?id=1816264): Generic libvirt installer image for CI [#3331](https://github.com/openshift/installer/pull/3331)
* [Bug 1808973](https://bugzilla.redhat.com/show_bug.cgi?id=1808973): azure - vendor update to support multiple prefixes [#3316](https://github.com/openshift/installer/pull/3316)
* [Bug 1791995](https://bugzilla.redhat.com/show_bug.cgi?id=1791995): proxy: use explicit list of platforms for metadata addresses [#2944](https://github.com/openshift/installer/pull/2944)
* [Bug 1812599](https://bugzilla.redhat.com/show_bug.cgi?id=1812599): bump RHCOS boot images to 43.81.202003111353.0 [#3274](https://github.com/openshift/installer/pull/3274)
* [Bug 1807037](https://bugzilla.redhat.com/show_bug.cgi?id=1807037): data/data/gcp,azure: block private dns zone on public record [#3185](https://github.com/openshift/installer/pull/3185)
* [Bug 1810018](https://bugzilla.redhat.com/show_bug.cgi?id=1810018): create bootstrap floating ip after the bootstrap machine [#3281](https://github.com/openshift/installer/pull/3281)
* [Bug 1801801](https://bugzilla.redhat.com/show_bug.cgi?id=1801801): openstack docs day 2 ssc refresh [#3113](https://github.com/openshift/installer/pull/3113)
* [Bug 1809922](https://bugzilla.redhat.com/show_bug.cgi?id=1809922): OpenStack: return an error if load balancer deletion fails [#3231](https://github.com/openshift/installer/pull/3231)
* [Release 4.3] Bug 1811154: validation: Allow periods in gcp and azure cluster names. [#3264](https://github.com/openshift/installer/pull/3264)
* [Bug 1807203](https://bugzilla.redhat.com/show_bug.cgi?id=1807203): additionalTrustBundle IsCA check to warn instead of drop [#3190](https://github.com/openshift/installer/pull/3190)
* [Bug 1808095](https://bugzilla.redhat.com/show_bug.cgi?id=1808095): Bump survey vendor for panic [#3213](https://github.com/openshift/installer/pull/3213)
* [Bug 1801446](https://bugzilla.redhat.com/show_bug.cgi?id=1801446): Move permissions check to cluster asset [#3096](https://github.com/openshift/installer/pull/3096)
* [Bug 1808482](https://bugzilla.redhat.com/show_bug.cgi?id=1808482): OpenStack: allow to overwrite default os image in the install config [#3207](https://github.com/openshift/installer/pull/3207)
* [Bug 1803187](https://bugzilla.redhat.com/show_bug.cgi?id=1803187): baremetal: map hardware profile to baremetal-operator default [#3106](https://github.com/openshift/installer/pull/3106)
* [Bug 1796618](https://bugzilla.redhat.com/show_bug.cgi?id=1796618): [release-4.3 IPv6] Replace MachineCIDR with MachineNetwork, add Azure IPv6 [#3029](https://github.com/openshift/installer/pull/3029)
* [Bug 1803805](https://bugzilla.redhat.com/show_bug.cgi?id=1803805): cmd/openshift-install/create: wait 60 minutes for baremetal [#3116](https://github.com/openshift/installer/pull/3116)
* [Bug 1791440](https://bugzilla.redhat.com/show_bug.cgi?id=1791440): asset/manifests: add openshift-install configmap [#3031](https://github.com/openshift/installer/pull/3031)
* [Bug 1757244](https://bugzilla.redhat.com/show_bug.cgi?id=1757244): use region info when simulating permissions [#3102](https://github.com/openshift/installer/pull/3102)
* [Bug 1790537](https://bugzilla.redhat.com/show_bug.cgi?id=1790537): pkg/version: Prepare of extract-time oc version injection [#2907](https://github.com/openshift/installer/pull/2907)
* [Bug 1798805](https://bugzilla.redhat.com/show_bug.cgi?id=1798805): baremetal: Fix bootstrap local DNS for IPv6 [#3092](https://github.com/openshift/installer/pull/3092)
* [Bug 1791457](https://bugzilla.redhat.com/show_bug.cgi?id=1791457): [release-4.3] Add support for AWS Bahrain region me-south-1 [#2877](https://github.com/openshift/installer/pull/2877)
* [Bug 1779469](https://bugzilla.redhat.com/show_bug.cgi?id=1779469): Fix node ports [#3048](https://github.com/openshift/installer/pull/3048)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#3036](https://github.com/openshift/installer/pull/3036)
* [Bug 1789748](https://bugzilla.redhat.com/show_bug.cgi?id=1789748): Ensure enough number of retries for cluster with Kuryr SDN [#2903](https://github.com/openshift/installer/pull/2903)
* [Bug 1794765](https://bugzilla.redhat.com/show_bug.cgi?id=1794765): ipv6: Fix IPv6 address encoding [#2977](https://github.com/openshift/installer/pull/2977)
* [Bug 1788062](https://bugzilla.redhat.com/show_bug.cgi?id=1788062): OpenStack: create security rules sequentially [#2887](https://github.com/openshift/installer/pull/2887)
* [Bug 1798060](https://bugzilla.redhat.com/show_bug.cgi?id=1798060): cmd/openshift-install/create: add env var to preserve bootstrap [#3053](https://github.com/openshift/installer/pull/3053)
* [Full changelog](https://github.com/openshift/installer/compare/2055609f95b19322ee6cfdd0bea73399297c4a3e...db4411451af55e0bab7258d25bdabd91ea48382f)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/dc2d333c60a7a8457eb3e56ca3218aaad2011999)

* [Bug 1816122](https://bugzilla.redhat.com/show_bug.cgi?id=1816122): Don't assume IPv4 in introspection data [#54](https://github.com/openshift/baremetal-operator/pull/54)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/d981ea02fc551aeda75ccbf11da34ba9eed11f77...dc2d333c60a7a8457eb3e56ca3218aaad2011999)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1ba567febc0443115ed85d706c363766b039d46d)

* [Bug 1802675](https://bugzilla.redhat.com/show_bug.cgi?id=1802675): Consider mdns hostname file existence in utils.ShortHostname [#45](https://github.com/openshift/baremetal-runtimecfg/pull/45)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4a9707af8d6e018b652928c8141d25b5f1744123...1ba567febc0443115ed85d706c363766b039d46d)


### [cli, cli-artifacts, deployer](https://github.com/openshift/oc/tree/4fb2d4d96e6b604f7d4ee49080238a5aec04dc4f)

* [Bug 1821648](https://bugzilla.redhat.com/show_bug.cgi?id=1821648): Zeroing BearerTokenFile for prune [#376](https://github.com/openshift/oc/pull/376)
* [Bug 1790954](https://bugzilla.redhat.com/show_bug.cgi?id=1790954): fix version ldflags [#255](https://github.com/openshift/oc/pull/255)
* [Bug 1802262](https://bugzilla.redhat.com/show_bug.cgi?id=1802262): Use polymorphic helpers from exec, when reading a pod [#294](https://github.com/openshift/oc/pull/294)
* [Bug 1810533](https://bugzilla.redhat.com/show_bug.cgi?id=1810533): Don't default to always mirror manifestlists [#342](https://github.com/openshift/oc/pull/342)
* [Bug 1810959](https://bugzilla.redhat.com/show_bug.cgi?id=1810959): `oc adm inspect namespace` doesn't collect pod logs [#290](https://github.com/openshift/oc/pull/290)
* [Bug 1795302](https://bugzilla.redhat.com/show_bug.cgi?id=1795302): initialize auth plugins [#268](https://github.com/openshift/oc/pull/268)
* [Bug 1802881](https://bugzilla.redhat.com/show_bug.cgi?id=1802881): bump(github.com/mtrmac/gpgme): v0.1.2 [#307](https://github.com/openshift/oc/pull/307)
* [Bug 1809360](https://bugzilla.redhat.com/show_bug.cgi?id=1809360): fix(catalog): use registry image from openshift quay namespace [#335](https://github.com/openshift/oc/pull/335)
* [Bug 1796675](https://bugzilla.redhat.com/show_bug.cgi?id=1796675): bump(operator-framework/operator-registry) [#336](https://github.com/openshift/oc/pull/336)
* [Bug 1807812](https://bugzilla.redhat.com/show_bug.cgi?id=1807812): [release-4.3] override FileDir with FromFileDir if set in Complete [#325](https://github.com/openshift/oc/pull/325)
* [Bug 1792334](https://bugzilla.redhat.com/show_bug.cgi?id=1792334): pods that are no longer running can still have logs [#263](https://github.com/openshift/oc/pull/263)
* [Bug 1804463](https://bugzilla.redhat.com/show_bug.cgi?id=1804463): Option to force RepoDigest mirror [#313](https://github.com/openshift/oc/pull/313)
* [Bug 1792334](https://bugzilla.redhat.com/show_bug.cgi?id=1792334): collect endpoints for namespaces [#264](https://github.com/openshift/oc/pull/264)
* [Bug 1797026](https://bugzilla.redhat.com/show_bug.cgi?id=1797026): [CLI] oc adm catalog build neither support "-a, --registry-config=" flag, nor uses podman registry credentials file [#296](https://github.com/openshift/oc/pull/296)
* [Bug 1789857](https://bugzilla.redhat.com/show_bug.cgi?id=1789857): allow --config and --kubeconfig [#247](https://github.com/openshift/oc/pull/247)
* [Bug 1785201](https://bugzilla.redhat.com/show_bug.cgi?id=1785201): don't gather pod endpoints using tokens [#237](https://github.com/openshift/oc/pull/237)
* [Bug 1788016](https://bugzilla.redhat.com/show_bug.cgi?id=1788016): Suppress nil pointer dereference for job spec [#243](https://github.com/openshift/oc/pull/243)
* [Bug 1786062](https://bugzilla.redhat.com/show_bug.cgi?id=1786062): fix describe for HPA [#228](https://github.com/openshift/oc/pull/228)
* [Bug 1784756](https://bugzilla.redhat.com/show_bug.cgi?id=1784756): set insecure-skip-tls-verify-backend flag [#225](https://github.com/openshift/oc/pull/225)
* [Bug 1779353](https://bugzilla.redhat.com/show_bug.cgi?id=1779353): Verify outbound manifests now that schema1 support is dropped [#211](https://github.com/openshift/oc/pull/211)
* [Bug 1797730](https://bugzilla.redhat.com/show_bug.cgi?id=1797730): Mirror images one by one for oc adm catalog mirror [#278](https://github.com/openshift/oc/pull/278)
* [Bug 1790537](https://bugzilla.redhat.com/show_bug.cgi?id=1790537): pkg/cli/admin/release/extract_tools: Inject release version into installer [#249](https://github.com/openshift/oc/pull/249)
* [Bug 1796182](https://bugzilla.redhat.com/show_bug.cgi?id=1796182): remove destination digests if present [#274](https://github.com/openshift/oc/pull/274)
* [Full changelog](https://github.com/openshift/oc/compare/6a937dfe56ff26255d09702c69b8406040c14505...4fb2d4d96e6b604f7d4ee49080238a5aec04dc4f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/02be5758f755d9da56cb4b37ae3ea52a9a0c436e)

* [Bug 1816704](https://bugzilla.redhat.com/show_bug.cgi?id=1816704): handle old Infrastructure objects without PlatformStatus [#169](https://github.com/openshift/cloud-credential-operator/pull/169)
* [Bug 1801261](https://bugzilla.redhat.com/show_bug.cgi?id=1801261): [release-4.3] Fix exclusion annotation for hosted use case [#156](https://github.com/openshift/cloud-credential-operator/pull/156)
* [Bug 1757244](https://bugzilla.redhat.com/show_bug.cgi?id=1757244): improve permissions simulation by adding region info [#155](https://github.com/openshift/cloud-credential-operator/pull/155)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/835d9b25e076b4f058bf638a6fe61d622086d78d...02be5758f755d9da56cb4b37ae3ea52a9a0c436e)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/7278ebb2fb632dbfe102b930aa161f5b2a9bcc93)

* BUG 1805160: Ensure DeleteNodes doesn't delete a node twice [#129](https://github.com/openshift/kubernetes-autoscaler/pull/129)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d45f94da59de0f949b8d84e67f7c4074ed6e0952...7278ebb2fb632dbfe102b930aa161f5b2a9bcc93)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/23df15eeb0144268565ccbb28665efe82a1a5845)

* [Bug 1814091](https://bugzilla.redhat.com/show_bug.cgi?id=1814091): ROKS - remove additional autoscaler manifests [#138](https://github.com/openshift/cluster-autoscaler-operator/pull/138)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/3752471e05fb4a7ed923bef281109eae82eb9d75...23df15eeb0144268565ccbb28665efe82a1a5845)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ca11e642bfe8fe62688a04565f2fd3195c210344)

* [Bug 1798869](https://bugzilla.redhat.com/show_bug.cgi?id=1798869): Try TCP DNS in dns-node-resolver [#155](https://github.com/openshift/cluster-dns-operator/pull/155)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/6f4a6005c8fbb56586b542d179b5ca1c96345498...ca11e642bfe8fe62688a04565f2fd3195c210344)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/344a182f610a0d47e703de468e23d0f07aaa6075)

* [Bug 1816656](https://bugzilla.redhat.com/show_bug.cgi?id=1816656): update ClusterOperator object even if operator is unmanaged [#504](https://github.com/openshift/cluster-image-registry-operator/pull/504)
* [Bug 1820242](https://bugzilla.redhat.com/show_bug.cgi?id=1820242): nodeca daemon should tolerate all taints [#511](https://github.com/openshift/cluster-image-registry-operator/pull/511)
* [Bug 1808426](https://bugzilla.redhat.com/show_bug.cgi?id=1808426): ignore most kube-system events [#503](https://github.com/openshift/cluster-image-registry-operator/pull/503)
* [Bug 1815124](https://bugzilla.redhat.com/show_bug.cgi?id=1815124): force path style for custom endpoints [#500](https://github.com/openshift/cluster-image-registry-operator/pull/500)
* [Bug 1814759](https://bugzilla.redhat.com/show_bug.cgi?id=1814759): Use junit_*.xml pattern for junit reports [#497](https://github.com/openshift/cluster-image-registry-operator/pull/497)
* [Bug 1808426](https://bugzilla.redhat.com/show_bug.cgi?id=1808426): backport removing kubesystem configmap watch [#475](https://github.com/openshift/cluster-image-registry-operator/pull/475)
* [Bug 1808431](https://bugzilla.redhat.com/show_bug.cgi?id=1808431): tolerate all NoSchedule taints [#472](https://github.com/openshift/cluster-image-registry-operator/pull/472)
* [Bug 1796584](https://bugzilla.redhat.com/show_bug.cgi?id=1796584): aws-sdk-go v1.28.2 [#455](https://github.com/openshift/cluster-image-registry-operator/pull/455)
* [Bug 1785302](https://bugzilla.redhat.com/show_bug.cgi?id=1785302): Using types from openshift/api repository. [#424](https://github.com/openshift/cluster-image-registry-operator/pull/424)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#454](https://github.com/openshift/cluster-image-registry-operator/pull/454)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/1967d568e1fa6f2919ce964b69d441f18e64b8b4...344a182f610a0d47e703de468e23d0f07aaa6075)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9)

* [Bug 1800338](https://bugzilla.redhat.com/show_bug.cgi?id=1800338): [release-4.3] update to setDefaultPublishingStrategy() to add IBMCloudPlatform [#362](https://github.com/openshift/cluster-ingress-operator/pull/362)
* [Bug 1800338](https://bugzilla.redhat.com/show_bug.cgi?id=1800338): [release-4.3] add LB changes for IBM Cloud Platform [#355](https://github.com/openshift/cluster-ingress-operator/pull/355)
* [Bug 1788711](https://bugzilla.redhat.com/show_bug.cgi?id=1788711): [release-4.3] publish a router-ca that can be used to verify routes in golang clients [#336](https://github.com/openshift/cluster-ingress-operator/pull/336)
* [Bug 1798789](https://bugzilla.redhat.com/show_bug.cgi?id=1798789): Only initialize DNS providers if DNS config is present [#356](https://github.com/openshift/cluster-ingress-operator/pull/356)
* [Bug 1789124](https://bugzilla.redhat.com/show_bug.cgi?id=1789124): Configure router for IPv6 [#352](https://github.com/openshift/cluster-ingress-operator/pull/352)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/db62fb9e2656ba92059beeef3241b191e062d9a2...d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e04d17fba4a793664538b7df6423d9a2098e1517)

* [Bug 1827337](https://bugzilla.redhat.com/show_bug.cgi?id=1827337): Remove stale condition DefaultSecurityContextConstraintsUpgradeable [#838](https://github.com/openshift/cluster-kube-apiserver-operator/pull/838)
* [Bug 1820542](https://bugzilla.redhat.com/show_bug.cgi?id=1820542): certrotationcontroller: fix typo calling wrong internal LB func [#814](https://github.com/openshift/cluster-kube-apiserver-operator/pull/814)
* [Bug 1823921](https://bugzilla.redhat.com/show_bug.cgi?id=1823921): Revert SCC Upgradeable False [#830](https://github.com/openshift/cluster-kube-apiserver-operator/pull/830)
* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Components using globs in Dockerfile COPY commands may break on OCP 4 [#816](https://github.com/openshift/cluster-kube-apiserver-operator/pull/816)
* [Bug 1795617](https://bugzilla.redhat.com/show_bug.cgi?id=1795617): Remove entirely deprecated alerts [#741](https://github.com/openshift/cluster-kube-apiserver-operator/pull/741)
* [Bug 1808602](https://bugzilla.redhat.com/show_bug.cgi?id=1808602): kube-apiserver-operator should set upgradeable=false if default SCC mutates [#784](https://github.com/openshift/cluster-kube-apiserver-operator/pull/784)
* [Bug 1806634](https://bugzilla.redhat.com/show_bug.cgi?id=1806634): kube-apiserver should never use the bootstrap etcd member [#781](https://github.com/openshift/cluster-kube-apiserver-operator/pull/781)
* [Bug 1805865](https://bugzilla.redhat.com/show_bug.cgi?id=1805865): [release-4.3] baremetal: Explicitly advertise the host IP chosen by kubelet [#777](https://github.com/openshift/cluster-kube-apiserver-operator/pull/777)
* [Bug 1795701](https://bugzilla.redhat.com/show_bug.cgi?id=1795701): change the next empty encryption key's name for encryption e2e test [#717](https://github.com/openshift/cluster-kube-apiserver-operator/pull/717)
* [Bug 1789421](https://bugzilla.redhat.com/show_bug.cgi?id=1789421): [release-4.3] If the cluster is single-stack IPv6, bind to :: rather than 0.0.0.0. [#710](https://github.com/openshift/cluster-kube-apiserver-operator/pull/710)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/62da7e6b5d19114d32f5cf905a590edb9f4def0b...e04d17fba4a793664538b7df6423d9a2098e1517)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0b20d6028556a34abf80e55b7b3c0c8ec469d29f)

* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Remove wildcard COPY form Dockerfile [#371](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/371)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/7c430e3e821ec90916a205b71f5dfc6daf919ce2...0b20d6028556a34abf80e55b7b3c0c8ec469d29f)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/ffb17cb15fd1833f6118ddb3835972ca3b443f22)

* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Fix dockerfile [#220](https://github.com/openshift/cluster-kube-scheduler-operator/pull/220)
* [Bug 1803742](https://bugzilla.redhat.com/show_bug.cgi?id=1803742): [release-4.3] Improve node controller condition message [#210](https://github.com/openshift/cluster-kube-scheduler-operator/pull/210)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/da32b6a109a7729678c889935ff310809263077a...ffb17cb15fd1833f6118ddb3835972ca3b443f22)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/dd3147d9b2d1e54a2050d51390d1eca62d6189fc)

* [Bug 1815578](https://bugzilla.redhat.com/show_bug.cgi?id=1815578): ROKS - remove ClusterMachineApproverDown prometheus rule [#66](https://github.com/openshift/cluster-machine-approver/pull/66)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/86bdd875cd12c8598a5a7790bc1e7c6e348476c4...dd3147d9b2d1e54a2050d51390d1eca62d6189fc)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/417df3571061bac207af06773d0283e3c2787c15)

* [Bug 1814736](https://bugzilla.redhat.com/show_bug.cgi?id=1814736): Exclude Kubernetes control plane rules when running on IBM Cloud [#713](https://github.com/openshift/cluster-monitoring-operator/pull/713)
* [Bug 1791194](https://bugzilla.redhat.com/show_bug.cgi?id=1791194): Removing KubeVersionMismatch alert [#612](https://github.com/openshift/cluster-monitoring-operator/pull/612)
* [Bug 1807775](https://bugzilla.redhat.com/show_bug.cgi?id=1807775): Backport setting resource requests [#681](https://github.com/openshift/cluster-monitoring-operator/pull/681)
* [Bug 1805317](https://bugzilla.redhat.com/show_bug.cgi?id=1805317): pkg/manifests/telemeter: bump size limit to 5mb [#667](https://github.com/openshift/cluster-monitoring-operator/pull/667)
* [Bug 1805116](https://bugzilla.redhat.com/show_bug.cgi?id=1805116): Use aggregated up metrics [#664](https://github.com/openshift/cluster-monitoring-operator/pull/664)
* [Bug 1799540](https://bugzilla.redhat.com/show_bug.cgi?id=1799540): Node exporter init collectors must be privileged [#646](https://github.com/openshift/cluster-monitoring-operator/pull/646)
* [Bug 1791200](https://bugzilla.redhat.com/show_bug.cgi?id=1791200): Add alert for no routes configured in alertmanager [#613](https://github.com/openshift/cluster-monitoring-operator/pull/613)
* [Bug 1800513](https://bugzilla.redhat.com/show_bug.cgi?id=1800513): assets,jsonnet,pkg: Fix generate check [#649](https://github.com/openshift/cluster-monitoring-operator/pull/649)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/716a1868caa4c5800e35500f53667b12af9d66d9...417df3571061bac207af06773d0283e3c2787c15)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/932b28a55ee31d486a72413b38ade57a220adb0d)

* [Bug 1775838](https://bugzilla.redhat.com/show_bug.cgi?id=1775838): Back-port, OVNKubernetes: introduce OVS anti-selector [#492](https://github.com/openshift/cluster-network-operator/pull/492)
* [Bug 1821166](https://bugzilla.redhat.com/show_bug.cgi?id=1821166): [Back-port 4.3] Remove logfile from ovnkube configmap [#567](https://github.com/openshift/cluster-network-operator/pull/567)
* [Bug 1808997](https://bugzilla.redhat.com/show_bug.cgi?id=1808997): Ensure no API LB recreation happens upon Octavia upgrade [#517](https://github.com/openshift/cluster-network-operator/pull/517)
* [Bug 1812037](https://bugzilla.redhat.com/show_bug.cgi?id=1812037): Ensure correct Octavia API version is retrieved [#534](https://github.com/openshift/cluster-network-operator/pull/534)
* [Bug 1815457](https://bugzilla.redhat.com/show_bug.cgi?id=1815457): Ensure removal of not rendered resources upon CNO recreation [#547](https://github.com/openshift/cluster-network-operator/pull/547)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): Reintroduce whereabouts & routeoverride in 4.3.z [#526](https://github.com/openshift/cluster-network-operator/pull/526)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): Revert inclusion of route-override/whereabouts in 4.3 [#519](https://github.com/openshift/cluster-network-operator/pull/519)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): [Backport 4.3.z] Adds route-override-cni and whereabouts for secondary network routing and IPAM [#496](https://github.com/openshift/cluster-network-operator/pull/496)
* [Bug 1798142](https://bugzilla.redhat.com/show_bug.cgi?id=1798142): Add preserveUnknownFields tag in the CRDs [#501](https://github.com/openshift/cluster-network-operator/pull/501)
* [Bug 1805726](https://bugzilla.redhat.com/show_bug.cgi?id=1805726): Add MachineNetworks to proxy.status.noProxy [#504](https://github.com/openshift/cluster-network-operator/pull/504)
* [Bug 1805444](https://bugzilla.redhat.com/show_bug.cgi?id=1805444): Uses the readiness indicator file option for Multus [backport 4.3] [#485](https://github.com/openshift/cluster-network-operator/pull/485)
* [Bug 1806009](https://bugzilla.redhat.com/show_bug.cgi?id=1806009): Backport ovn-kubernetes-related changes to 4.3 [#483](https://github.com/openshift/cluster-network-operator/pull/483)
* [Bug 1791278](https://bugzilla.redhat.com/show_bug.cgi?id=1791278): Stop deploying kuryr-admission-controller if double listeners supported # [#449](https://github.com/openshift/cluster-network-operator/pull/449)
* [Bug 1779863](https://bugzilla.redhat.com/show_bug.cgi?id=1779863): backport ovn-controller rbac fix to 4.3 [#470](https://github.com/openshift/cluster-network-operator/pull/470)
* [Bug 1801802](https://bugzilla.redhat.com/show_bug.cgi?id=1801802): [4.3] Put brackets around IPv6 addresses passed to ovn-ctl [#471](https://github.com/openshift/cluster-network-operator/pull/471)
* [Bug 1792309](https://bugzilla.redhat.com/show_bug.cgi?id=1792309): IPv6 backports for 4.3 [#450](https://github.com/openshift/cluster-network-operator/pull/450)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#463](https://github.com/openshift/cluster-network-operator/pull/463)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5b7f073de0f3ced9e9b83bbaa7cab0ade8b7d01d...932b28a55ee31d486a72413b38ade57a220adb0d)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/8e4367fb61fe895fd310bed69544033d043420d4)

* [Bug 1795665](https://bugzilla.redhat.com/show_bug.cgi?id=1795665): Do not set owner references on tuned ServiceAccount [#108](https://github.com/openshift/cluster-node-tuning-operator/pull/108)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/769ba5c3cf596ccb0b17e0e47b0d413850798b5c...8e4367fb61fe895fd310bed69544033d043420d4)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/7d51dd65fcdb95bf51cf9d435b3aa5b112ee2732)

* [Bug 1809532](https://bugzilla.redhat.com/show_bug.cgi?id=1809532): waits for requestheader-client-ca-file in extension-apiserver-authentication  before rolling out a new version [#326](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/326)
* [Bug 1805388](https://bugzilla.redhat.com/show_bug.cgi?id=1805388): Cleanup 4.4 deployment on downgrade to 4.3 [#314](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/314)
* [Bug 1795693](https://bugzilla.redhat.com/show_bug.cgi?id=1795693): change the next empty encryption key's name for encryption e2e test [#298](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/298)
* [Bug 1790523](https://bugzilla.redhat.com/show_bug.cgi?id=1790523): [release-4.3] Specify "bindNetwork: tcp" so apiserver will work on IPv6 single-stack [#296](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/296)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9416571f9de98516e9bb13e3d9276259adf99aff...7d51dd65fcdb95bf51cf9d435b3aa5b112ee2732)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bfda4d3462fd7305573adb103137723d2bd4975c)

* [Bug 1812554](https://bugzilla.redhat.com/show_bug.cgi?id=1812554): manifests: add openshift/oauth-proxy:v4.4 image [#247](https://github.com/openshift/cluster-samples-operator/pull/247)
* [Bug 1805815](https://bugzilla.redhat.com/show_bug.cgi?id=1805815): no longer gate removed processing when imagestreams in progress [#232](https://github.com/openshift/cluster-samples-operator/pull/232)
* [Bug 1784317](https://bugzilla.redhat.com/show_bug.cgi?id=1784317): properly handle removal of samplesRegistry; clean up importError mess… [#219](https://github.com/openshift/cluster-samples-operator/pull/219)
* [Bug 1798573](https://bugzilla.redhat.com/show_bug.cgi?id=1798573): bootstrap as removed for if tbr inaccessible after 3 minutes [#218](https://github.com/openshift/cluster-samples-operator/pull/218)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/8ceee7276335336d625594f399b2ba116d6fd9d4...bfda4d3462fd7305573adb103137723d2bd4975c)


### [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator/tree/2523919a04d428bfa82602f5f6cc50ca38eb48c0)

* [Bug 1813488](https://bugzilla.redhat.com/show_bug.cgi?id=1813488): set Upgradeable to true [#84](https://github.com/openshift/cluster-svcat-apiserver-operator/pull/84)
* [Full changelog](https://github.com/openshift/cluster-svcat-apiserver-operator/compare/61c2f1d39a8c876aa5fd7ebc14ffa9b4e1360a5f...2523919a04d428bfa82602f5f6cc50ca38eb48c0)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/86b9bdba55a85e2e071603916db4c43b481e7588)

* [Bug 1820231](https://bugzilla.redhat.com/show_bug.cgi?id=1820231): loosen upgradeable condition to allow z-level upgrades [#315](https://github.com/openshift/cluster-version-operator/pull/315)
* [Bug 1783054](https://bugzilla.redhat.com/show_bug.cgi?id=1783054): Add signature verification in airgapped environments [#340](https://github.com/openshift/cluster-version-operator/pull/340)
* [Bug 1802331](https://bugzilla.redhat.com/show_bug.cgi?id=1802331): metrics: include upi installs in cluster_installer [#321](https://github.com/openshift/cluster-version-operator/pull/321)
* [Bug 1802710](https://bugzilla.redhat.com/show_bug.cgi?id=1802710): lib/resourcemerge: remove ports which are no longer required [#323](https://github.com/openshift/cluster-version-operator/pull/323)
* [Bug 1798049](https://bugzilla.redhat.com/show_bug.cgi?id=1798049): lib/resourcemerge/core: Fix panic on container/port removal [#313](https://github.com/openshift/cluster-version-operator/pull/313)
* [Bug 1792004](https://bugzilla.redhat.com/show_bug.cgi?id=1792004): lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required [#299](https://github.com/openshift/cluster-version-operator/pull/299)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/beee410fc8780e5613c09fc2690716b711747041...86b9bdba55a85e2e071603916db4c43b481e7588)


### [console](https://github.com/openshift/console/tree/afb0423dc566a63dd5518c466d157cf34f237396)

* [Bug 1804708](https://bugzilla.redhat.com/show_bug.cgi?id=1804708): only show "Create Project" option in project dropdown i… [#4369](https://github.com/openshift/console/pull/4369)
* [Bug 1821852](https://bugzilla.redhat.com/show_bug.cgi?id=1821852): Hide `OpenShift Cluster Manager` when branding is `azure` [#4957](https://github.com/openshift/console/pull/4957)
* [Bug 1798130](https://bugzilla.redhat.com/show_bug.cgi?id=1798130): add error boundary around OLM descriptors [#4241](https://github.com/openshift/console/pull/4241)
* [Bug 1823726](https://bugzilla.redhat.com/show_bug.cgi?id=1823726): Decode Noobaa secret details before passing to SecretValue in OBC page [#4993](https://github.com/openshift/console/pull/4993)
* [Bug 1818980](https://bugzilla.redhat.com/show_bug.cgi?id=1818980): Specify ts-loader configFile in webpack.config.ts [#4859](https://github.com/openshift/console/pull/4859)
* [Bug 1813185](https://bugzilla.redhat.com/show_bug.cgi?id=1813185): Add stable-4.4, fast-4.4 and candidate-4.4 channel for 4.4 release [#4727](https://github.com/openshift/console/pull/4727)
* [Bug 1819941](https://bugzilla.redhat.com/show_bug.cgi?id=1819941): Fix PackageManifest access review [#4902](https://github.com/openshift/console/pull/4902)
* [Bug 1800327](https://bugzilla.redhat.com/show_bug.cgi?id=1800327): fix runtime error creating PVC with no storage class [#4896](https://github.com/openshift/console/pull/4896)
* [Bug 1819603](https://bugzilla.redhat.com/show_bug.cgi?id=1819603): Limit Bucket Class search to storage namespace in OBC creation page [#4869](https://github.com/openshift/console/pull/4869)
* [Bug 1814075](https://bugzilla.redhat.com/show_bug.cgi?id=1814075): Mount OCS form when csv is available [#4746](https://github.com/openshift/console/pull/4746)
* [Bug 1813933](https://bugzilla.redhat.com/show_bug.cgi?id=1813933): Correct the selection nodes text [#4739](https://github.com/openshift/console/pull/4739)
* [Bug 1792847](https://bugzilla.redhat.com/show_bug.cgi?id=1792847): Kubevirt vm real node name [#4503](https://github.com/openshift/console/pull/4503)
* [Bug 1811520](https://bugzilla.redhat.com/show_bug.cgi?id=1811520): CreateContainerConfigError when obc is attached to deployment [#4690](https://github.com/openshift/console/pull/4690)
* [Bug 1811525](https://bugzilla.redhat.com/show_bug.cgi?id=1811525): Add Pipeline Resources on Pipelines Resources tab don't work [#4473](https://github.com/openshift/console/pull/4473)
* [Bug 1808968](https://bugzilla.redhat.com/show_bug.cgi?id=1808968): fixes sbr to work with knative services [#4578](https://github.com/openshift/console/pull/4578)
* [Version 4.3] Bug 1807291: Fix sort criteria for capacity for storage [#4560](https://github.com/openshift/console/pull/4560)
* [Bug 1808436](https://bugzilla.redhat.com/show_bug.cgi?id=1808436): Make dev-console project selector sticky again [#4557](https://github.com/openshift/console/pull/4557)
* [Bug 1808282](https://bugzilla.redhat.com/show_bug.cgi?id=1808282): fixes issue with new imageStream getting created for knative in case of internal image registry [#4546](https://github.com/openshift/console/pull/4546)
* [Bug 1794009](https://bugzilla.redhat.com/show_bug.cgi?id=1794009): Incorrect memory loads from edited vm template [#4625](https://github.com/openshift/console/pull/4625)
* [Bug 1796186](https://bugzilla.redhat.com/show_bug.cgi?id=1796186): Add pipeline for resource and runtime [#4509](https://github.com/openshift/console/pull/4509)
* [Bug 1806706](https://bugzilla.redhat.com/show_bug.cgi?id=1806706): add namespace level imagestream fetching [#4461](https://github.com/openshift/console/pull/4461)
* [Bug 1803935](https://bugzilla.redhat.com/show_bug.cgi?id=1803935): Fix bug where installed operators list status is missing or incorrect [#4343](https://github.com/openshift/console/pull/4343)
* [Bug 1780657](https://bugzilla.redhat.com/show_bug.cgi?id=1780657): Extend dashboard grey background to full height of view… [#4210](https://github.com/openshift/console/pull/4210)
* [Bug 1788246](https://bugzilla.redhat.com/show_bug.cgi?id=1788246): Fix "requires approval" install plan link [#4170](https://github.com/openshift/console/pull/4170)
* [Bug 1796461](https://bugzilla.redhat.com/show_bug.cgi?id=1796461): Fix bug where resource filter is broken for GroupVersion… [#4126](https://github.com/openshift/console/pull/4126)
* [Bug 1786272](https://bugzilla.redhat.com/show_bug.cgi?id=1786272): update the number of pods in daemon set with correct status prop [#4340](https://github.com/openshift/console/pull/4340)
* [Bug 1801660](https://bugzilla.redhat.com/show_bug.cgi?id=1801660): Property array should render its properties on schema page [#4281](https://github.com/openshift/console/pull/4281)
* [Bug 1800320](https://bugzilla.redhat.com/show_bug.cgi?id=1800320): Set default pullSecret [#4244](https://github.com/openshift/console/pull/4244)
* [Bug 1800331](https://bugzilla.redhat.com/show_bug.cgi?id=1800331): include `system:authenticated` when impersonating groups [#4238](https://github.com/openshift/console/pull/4238)
* [Bug 1800615](https://bugzilla.redhat.com/show_bug.cgi?id=1800615): Serverless apiVersion from v1beta1 to v1 [#4264](https://github.com/openshift/console/pull/4264)
* [Bug 1803955](https://bugzilla.redhat.com/show_bug.cgi?id=1803955): Fix "environment" typo on "Add to Secret" page [#4344](https://github.com/openshift/console/pull/4344)
* [Bug 1791346](https://bugzilla.redhat.com/show_bug.cgi?id=1791346): Error occurs while removing the second CD-ROM (4.3) [#4058](https://github.com/openshift/console/pull/4058)
* [Bug 1804077](https://bugzilla.redhat.com/show_bug.cgi?id=1804077): fixes issue with external image registry not working for tags [#4347](https://github.com/openshift/console/pull/4347)
* [Bug 1782558](https://bugzilla.redhat.com/show_bug.cgi?id=1782558): Fix edit link for cluster-scoped operand [#3764](https://github.com/openshift/console/pull/3764)
* [Bug 1801607](https://bugzilla.redhat.com/show_bug.cgi?id=1801607): updates apiGroup for knativeServing resource [#4277](https://github.com/openshift/console/pull/4277)
* [Bug 1794925](https://bugzilla.redhat.com/show_bug.cgi?id=1794925): correctly show schema information for all core resources [#4067](https://github.com/openshift/console/pull/4067)
* [Bug 1783312](https://bugzilla.redhat.com/show_bug.cgi?id=1783312): Replace multiple occurrences of log link variable expressions [#3778](https://github.com/openshift/console/pull/3778)
* [Bug 1789150](https://bugzilla.redhat.com/show_bug.cgi?id=1789150): support snippets in edit mode, not just create [#3902](https://github.com/openshift/console/pull/3902)
* [Bug 1788201](https://bugzilla.redhat.com/show_bug.cgi?id=1788201): Remove serviceAccount in favour of serviceAccountName [#3869](https://github.com/openshift/console/pull/3869)
* [Bug 1790750](https://bugzilla.redhat.com/show_bug.cgi?id=1790750): Fix off by one bug in metrics rows count [#3864](https://github.com/openshift/console/pull/3864)
* [Bug 1785010](https://bugzilla.redhat.com/show_bug.cgi?id=1785010): Added legacy plural url field in the OB/C models [#3852](https://github.com/openshift/console/pull/3852)
* [Bug 1797501](https://bugzilla.redhat.com/show_bug.cgi?id=1797501): Adds flexible OSD Sizes in the install flow [#4149](https://github.com/openshift/console/pull/4149)
* [Bug 1792507](https://bugzilla.redhat.com/show_bug.cgi?id=1792507): Add missing candidate-4.3 channel [#4093](https://github.com/openshift/console/pull/4093)
* [Bug 1792419](https://bugzilla.redhat.com/show_bug.cgi?id=1792419): fix(pipeline-tasks): Cancelled tasks [#3993](https://github.com/openshift/console/pull/3993)
* [Bug 1791101](https://bugzilla.redhat.com/show_bug.cgi?id=1791101): Make subscriptions & catalog sources optional so normal users can see installed operators [#3963](https://github.com/openshift/console/pull/3963)
* [Full changelog](https://github.com/openshift/console/compare/a7b51a5573cf36a0d0a88aa30ee0deb8e7c0da10...afb0423dc566a63dd5518c466d157cf34f237396)


### [console-operator](https://github.com/openshift/console-operator/tree/97050f23a6774c55d66aad271e2a73e76c95cccb)

* [Bug 1813302](https://bugzilla.redhat.com/show_bug.cgi?id=1813302): Update oc clidownload cr to indicate that certain builds are unsupported [#409](https://github.com/openshift/console-operator/pull/409)
* [Bug 1785492](https://bugzilla.redhat.com/show_bug.cgi?id=1785492): fix RBAC for ConsoleYAMLSample [#372](https://github.com/openshift/console-operator/pull/372)
* [Bug 1794548](https://bugzilla.redhat.com/show_bug.cgi?id=1794548): IPv6 support to console operator & console [openshift-4.3.z] [#376](https://github.com/openshift/console-operator/pull/376)
* [Full changelog](https://github.com/openshift/console-operator/compare/cb47e810bee8c56f0738f0723c98cf3192ea7736...97050f23a6774c55d66aad271e2a73e76c95cccb)


### [coredns](https://github.com/openshift/coredns/tree/052209affb1fe85bdd87b37e2cf9a6fb98585e91)

* [Bug 1801343](https://bugzilla.redhat.com/show_bug.cgi?id=1801343): Rebase to upstream 1.6.6 [#23](https://github.com/openshift/coredns/pull/23)
* [Full changelog](https://github.com/openshift/coredns/compare/51569b24b4a92d6d8df2020c2e8e2866c5e78266...052209affb1fe85bdd87b37e2cf9a6fb98585e91)


### [docker-builder](https://github.com/openshift/builder/tree/ba658c8b81615e5ed86ea5836b20ed738a534252)

* [Bug 1802894](https://bugzilla.redhat.com/show_bug.cgi?id=1802894): bump(github.com/mtrmac/gpgme): v0.1.2 [#136](https://github.com/openshift/builder/pull/136)
* [Bug 1790525](https://bugzilla.redhat.com/show_bug.cgi?id=1790525): bump github.com/containers/{storage,image,buildah} [#127](https://github.com/openshift/builder/pull/127)
* [Full changelog](https://github.com/openshift/builder/compare/50c6e17276dfc7d0acd9d943dac340fb4fa3ff24...ba658c8b81615e5ed86ea5836b20ed738a534252)


### [docker-registry](https://github.com/openshift/image-registry/tree/7511ca65e07b586464e5ec2e9efde67bfa48c3e2)

* [Bug 1804494](https://bugzilla.redhat.com/show_bug.cgi?id=1804494): Dockerfile: Clear yum cache after install [#223](https://github.com/openshift/image-registry/pull/223)
* [Bug 1796584](https://bugzilla.redhat.com/show_bug.cgi?id=1796584): aws-sdk-go v1.28.2 [#218](https://github.com/openshift/image-registry/pull/218)
* [Full changelog](https://github.com/openshift/image-registry/compare/8b12e0a3023dd39e59657984ba50c92a74f94dd5...7511ca65e07b586464e5ec2e9efde67bfa48c3e2)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/0600a78e9af54e22b04fabadd0b34d7b39565934)

* [Bug 1800315](https://bugzilla.redhat.com/show_bug.cgi?id=1800315): [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller's changes [#75](https://github.com/openshift/cluster-api-provider-gcp/pull/75)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/537d68ec0751a812755779f31d28155cc2afc454...0600a78e9af54e22b04fabadd0b34d7b39565934)


### [hyperkube, tests](https://github.com/openshift/ose/tree/e6f1cd7f07e312facef306167d3e7e1827438cce)

* [Bug 1822955](https://bugzilla.redhat.com/show_bug.cgi?id=1822955): UPSTREAM: 88734: Work-around for missing metrics on CRI-O exited containers [#24860](https://github.com/openshift/ose/pull/24860)
* [Bug 1821341](https://bugzilla.redhat.com/show_bug.cgi?id=1821341): UPSTREAM: 88440: Report deleted pod status correctly [#24841](https://github.com/openshift/ose/pull/24841)
* [Bug 1820266](https://bugzilla.redhat.com/show_bug.cgi?id=1820266): use rbac vs direct scc edit for s2i root bld test [#24821](https://github.com/openshift/ose/pull/24821)
* [Bug 1817618](https://bugzilla.redhat.com/show_bug.cgi?id=1817618): make s2i-dropcaps more reliable by not depending on a yum install to [#24784](https://github.com/openshift/ose/pull/24784)
* [Bug 1817040](https://bugzilla.redhat.com/show_bug.cgi?id=1817040): [4.3] UPSTREAM: 88507: Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs [#24763](https://github.com/openshift/ose/pull/24763)
* [Bug 1816408](https://bugzilla.redhat.com/show_bug.cgi?id=1816408): UPSTREAM: 87913: Add code to fix kubelet/metrics memory issue [#24758](https://github.com/openshift/ose/pull/24758)
* [Bug 1815944](https://bugzilla.redhat.com/show_bug.cgi?id=1815944): Pick up Ginkgo test performance fix to reduce e2e CPU usage [#24746](https://github.com/openshift/ose/pull/24746)
* [Bug 1806408](https://bugzilla.redhat.com/show_bug.cgi?id=1806408): Ensure upgrade tests verify application disruption [#24726](https://github.com/openshift/ose/pull/24726)
* [Bug 1808548](https://bugzilla.redhat.com/show_bug.cgi?id=1808548): UPSTREAM: 88146: remove duplicate pv delete commands [#24624](https://github.com/openshift/ose/pull/24624)
* [Bug 1813411](https://bugzilla.redhat.com/show_bug.cgi?id=1813411): UPSTREAM: 85912: Fixed bug in TopologyManager with SingleNUMANode Policy [#24688](https://github.com/openshift/ose/pull/24688)
* [Bug 1811200](https://bugzilla.redhat.com/show_bug.cgi?id=1811200): /readyz should start returning failure on shutdown initiation [#24712](https://github.com/openshift/ose/pull/24712)
* [Bug 1804516](https://bugzilla.redhat.com/show_bug.cgi?id=1804516): kubelet: Make default journal format precise [#24575](https://github.com/openshift/ose/pull/24575)
* [Bug 1803077](https://bugzilla.redhat.com/show_bug.cgi?id=1803077): 4.3: UPSTREAM: 87673: blank out value for unbounded client label [#24542](https://github.com/openshift/ose/pull/24542)
* [Bug 1795629](https://bugzilla.redhat.com/show_bug.cgi?id=1795629): fix deployment config flake by using informer [#24468](https://github.com/openshift/ose/pull/24468)
* [Bug 1802262](https://bugzilla.redhat.com/show_bug.cgi?id=1802262): Loosen help tests for oc rsh [#24660](https://github.com/openshift/ose/pull/24660)
* [Bug 1808429](https://bugzilla.redhat.com/show_bug.cgi?id=1808429): UPSTREAM: 88251: Partially fix incorrect configuration of kubepods.slice unit by kubelet [#24611](https://github.com/openshift/ose/pull/24611)
* Allow oauth token + cert fallback test to be skipped when running skew tests [#24561](https://github.com/openshift/ose/pull/24561)
* [Bug 1794852](https://bugzilla.redhat.com/show_bug.cgi?id=1794852): UPSTREAM: 86191: Sync the status of static Pods [#24453](https://github.com/openshift/ose/pull/24453)
* [Bug 1793587](https://bugzilla.redhat.com/show_bug.cgi?id=1793587): sccadmission plugin incorrectly reports "no SecurityContextConstraints found in xxx" [#24428](https://github.com/openshift/ose/pull/24428)
* [Bug 1796716](https://bugzilla.redhat.com/show_bug.cgi?id=1796716): Verify services and API are available during upgrade [#24479](https://github.com/openshift/ose/pull/24479)
* [Bug 1788065](https://bugzilla.redhat.com/show_bug.cgi?id=1788065): move more image-eco db template tests from upstream repos to sample operator installed [#24407](https://github.com/openshift/ose/pull/24407)
* [Bug 1800662](https://bugzilla.redhat.com/show_bug.cgi?id=1800662): [release-4.3] test/cmd: build.sh can't reach old openshift/origin:v1.1 image [#24519](https://github.com/openshift/ose/pull/24519)
* [Bug 1791730](https://bugzilla.redhat.com/show_bug.cgi?id=1791730): 4.3 ipv6 backports [#24405](https://github.com/openshift/ose/pull/24405)
* [Bug 1788065](https://bugzilla.redhat.com/show_bug.cgi?id=1788065): pin image-eco sclorg samples usage to specific versions to shield from upstream churn wrt EOL image removals [#24406](https://github.com/openshift/ose/pull/24406)
* [Bug 1791200](https://bugzilla.redhat.com/show_bug.cgi?id=1791200): test/extended/prometheus: exclude AlertmanagerReceiversNotConfigured from checking [#24465](https://github.com/openshift/ose/pull/24465)
* [Bug 1790481](https://bugzilla.redhat.com/show_bug.cgi?id=1790481): Fix delegated auth CM perms [#24392](https://github.com/openshift/ose/pull/24392)
* [Full changelog](https://github.com/openshift/ose/compare/0aee6a89a377364a4c73ab1c67bfb4bb35600a59...e6f1cd7f07e312facef306167d3e7e1827438cce)


### [insights-operator](https://github.com/openshift/insights-operator/tree/98ecaca13995901ce2b36c7c01bd6735f95142da)

* [Bug 1805919](https://bugzilla.redhat.com/show_bug.cgi?id=1805919): Insights operator does not require being in an openshift run-level to function [#80](https://github.com/openshift/insights-operator/pull/80)
* [Bug 1788112](https://bugzilla.redhat.com/show_bug.cgi?id=1788112): override node selector (4.3) [#63](https://github.com/openshift/insights-operator/pull/63)
* Backport code owners to 4.3 [#76](https://github.com/openshift/insights-operator/pull/76)
* [Full changelog](https://github.com/openshift/insights-operator/compare/6b7509911b5cf9bd292cb7f05c31a386503f58c3...98ecaca13995901ce2b36c7c01bd6735f95142da)


### [ironic](https://github.com/openshift/ironic-image/tree/b9e59afd03655d1694318e83d1bc7f98fc510512)

* [Bug 1810078](https://bugzilla.redhat.com/show_bug.cgi?id=1810078): Copy iPXE binaries directly to /shared at runtime [#61](https://github.com/openshift/ironic-image/pull/61)
* [Full changelog](https://github.com/openshift/ironic-image/compare/7b39640a4517f9d0077b5d712715d997c0f44746...b9e59afd03655d1694318e83d1bc7f98fc510512)


### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/9a9e4d486d5773427ff44cdd7fcb821431d80853)

* [Bug 1804278](https://bugzilla.redhat.com/show_bug.cgi?id=1804278): set hostnames and make DHCPv6 IDs predictable [#29](https://github.com/openshift/ironic-ipa-downloader/pull/29)
* [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/1b2dae6b0e7ce5739fbd23fc5b6501d8aa6e373c...9a9e4d486d5773427ff44cdd7fcb821431d80853)


### [jenkins, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26)

* [Bug 1797144](https://bugzilla.redhat.com/show_bug.cgi?id=1797144): Bump Jenkins 2.204.2 [#1036](https://github.com/openshift/jenkins/pull/1036)
* [Bug 1809924](https://bugzilla.redhat.com/show_bug.cgi?id=1809924): Bump login plugin to 1.0.23 [#1030](https://github.com/openshift/jenkins/pull/1030)
* [Bug 1793322](https://bugzilla.redhat.com/show_bug.cgi?id=1793322): [4.3] Remove use of /etc/passwd and upgrade plugins versions [#1021](https://github.com/openshift/jenkins/pull/1021)
* [Full changelog](https://github.com/openshift/jenkins/compare/8b61349b6d454fae4e4d6521a9a1a70cb98a54cb...7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/10fba067e586b5e080fdabb720806b42bb268748)

* [Bug 1804745](https://bugzilla.redhat.com/show_bug.cgi?id=1804745): Revert excessive proxy logging [#109](https://github.com/openshift/sdn/pull/109)
* [Bug 1816390](https://bugzilla.redhat.com/show_bug.cgi?id=1816390): handle pod updates correctly in networkpolicy [#129](https://github.com/openshift/sdn/pull/129)
* [Bug 1820778](https://bugzilla.redhat.com/show_bug.cgi?id=1820778): fix health check in standalone kube-proxy [#126](https://github.com/openshift/sdn/pull/126)
* [Bug 1801737](https://bugzilla.redhat.com/show_bug.cgi?id=1801737): drop firewalld monitoring, add better iptables monitor [#39](https://github.com/openshift/sdn/pull/39)
* [Bug 1797042](https://bugzilla.redhat.com/show_bug.cgi?id=1797042): [4.3] Clean up stale egress IP iptables rules on startup [#100](https://github.com/openshift/sdn/pull/100)
* [Bug 1794024](https://bugzilla.redhat.com/show_bug.cgi?id=1794024): [4.3] Update deps, including informer fix [#94](https://github.com/openshift/sdn/pull/94)
* [Bug 1800324](https://bugzilla.redhat.com/show_bug.cgi?id=1800324): [4.3] Bug 1796157: Fix handling of VNID 0 with NetworkPolicy [#104](https://github.com/openshift/sdn/pull/104)
* [Bug 1790805](https://bugzilla.redhat.com/show_bug.cgi?id=1790805): Fix reinitialization of deny-all NetworkPolicy state on restart [#98](https://github.com/openshift/sdn/pull/98)
* [Full changelog](https://github.com/openshift/sdn/compare/85ab10333979853fee4e607f0d0a8d87dbf8c0b2...10fba067e586b5e080fdabb720806b42bb268748)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/ade8bb045c7e875c5bfe5a75c381e892e10465d3)

* [Bug 1818067](https://bugzilla.redhat.com/show_bug.cgi?id=1818067): Ensure no attempt to deleted sg rules owned by Octavia happens [#208](https://github.com/openshift/kuryr-kubernetes/pull/208)
* [Bug 1786298](https://bugzilla.redhat.com/show_bug.cgi?id=1786298): Nested CNI: Remove interfaces on DEL requests [#183](https://github.com/openshift/kuryr-kubernetes/pull/183)
* [Bug 1810522](https://bugzilla.redhat.com/show_bug.cgi?id=1810522): Ensure list of pods items is retrieved [#184](https://github.com/openshift/kuryr-kubernetes/pull/184)
* [Bug 1815019](https://bugzilla.redhat.com/show_bug.cgi?id=1815019): Ensures accurate quota calculation during the readiness checks [#194](https://github.com/openshift/kuryr-kubernetes/pull/194)
* [Bug 1799393](https://bugzilla.redhat.com/show_bug.cgi?id=1799393): Ensure LB with error status is only recreated after deleted [#160](https://github.com/openshift/kuryr-kubernetes/pull/160)
* [Bug 1799401](https://bugzilla.redhat.com/show_bug.cgi?id=1799401): Ensure no sg rule is repeated on the Network Policy CRD [#159](https://github.com/openshift/kuryr-kubernetes/pull/159)
* [Bug 1791278](https://bugzilla.redhat.com/show_bug.cgi?id=1791278): Add support for listeners on the same port but different protocol [#154](https://github.com/openshift/kuryr-kubernetes/pull/154)
* [Bug 1790339](https://bugzilla.redhat.com/show_bug.cgi?id=1790339): Add support to Octavia ACLs [#153](https://github.com/openshift/kuryr-kubernetes/pull/153)
* [Bug 1790339](https://bugzilla.redhat.com/show_bug.cgi?id=1790339): Ensure lb SG is not updated on member creation [#146](https://github.com/openshift/kuryr-kubernetes/pull/146)
* [Bug 1789330](https://bugzilla.redhat.com/show_bug.cgi?id=1789330): Fix more problem of changing size during dict iteration [#144](https://github.com/openshift/kuryr-kubernetes/pull/144)
* [Bug 1792240](https://bugzilla.redhat.com/show_bug.cgi?id=1792240): Avoid KeyError when deleting NPs [#142](https://github.com/openshift/kuryr-kubernetes/pull/142)
* [Bug 1789330](https://bugzilla.redhat.com/show_bug.cgi?id=1789330): Fix problem with dicts while iterating on for loops [#135](https://github.com/openshift/kuryr-kubernetes/pull/135)
* [Bug 1788635](https://bugzilla.redhat.com/show_bug.cgi?id=1788635): Fix Octavia version detection [#131](https://github.com/openshift/kuryr-kubernetes/pull/131)
* [Bug 1787343](https://bugzilla.redhat.com/show_bug.cgi?id=1787343): Protect from sg Not Found on multiple np enforcement [#129](https://github.com/openshift/kuryr-kubernetes/pull/129)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/1673bfa4581a5286c4bb4c7a58c47b502d5f4a3a...ade8bb045c7e875c5bfe5a75c381e892e10465d3)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/58b373500e8d9180bbfd38ca4663129d1bfa1ee9)

* [Bug 1818149](https://bugzilla.redhat.com/show_bug.cgi?id=1818149): Use virtio disk instead of config drive for injecting ignition for s390x/ppc64le [#189](https://github.com/openshift/cluster-api-provider-libvirt/pull/189)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/dd3fc51a8b7f51da61643a6286eb0fecfa2d03cd...58b373500e8d9180bbfd38ca4663129d1bfa1ee9)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/409274d4c429590723a1cea87f7435b341d0562f)

* [Bug 1814092](https://bugzilla.redhat.com/show_bug.cgi?id=1814092): ROKS: remove machine related CRDs from cluster [4.3] [#531](https://github.com/openshift/machine-api-operator/pull/531)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#485](https://github.com/openshift/machine-api-operator/pull/485)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/f552d33b6daa5b21eac7c0fde89eaa675e23e78a...409274d4c429590723a1cea87f7435b341d0562f)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/f6d1fe753cbcecb3aa1c2d3d3edd4a5d04ffca54)

* [Bug 1811720](https://bugzilla.redhat.com/show_bug.cgi?id=1811720): Specify cgroups in kubelet.conf so cAdvisor stats will be tracked [#1581](https://github.com/openshift/machine-config-operator/pull/1581)
* [Bug 1785279](https://bugzilla.redhat.com/show_bug.cgi?id=1785279): [release-4.3] Discard audit messages from journald [#1352](https://github.com/openshift/machine-config-operator/pull/1352)
* [Bug 1809693](https://bugzilla.redhat.com/show_bug.cgi?id=1809693): [release-4.3] prevent hitting annotation max size limit on nodes [#1433](https://github.com/openshift/machine-config-operator/pull/1433)
* [Bug 1807104](https://bugzilla.redhat.com/show_bug.cgi?id=1807104): Detect default hostname in its variants [#1534](https://github.com/openshift/machine-config-operator/pull/1534)
* [Bug 1807279](https://bugzilla.redhat.com/show_bug.cgi?id=1807279): templates/master/00-master/azure: bump raft tunables [#1507](https://github.com/openshift/machine-config-operator/pull/1507)
* [Bug 1807104](https://bugzilla.redhat.com/show_bug.cgi?id=1807104): daemon: Always create tempfiles in target dir [#1535](https://github.com/openshift/machine-config-operator/pull/1535)
* [Bug 1808004](https://bugzilla.redhat.com/show_bug.cgi?id=1808004): [release-4.3] CRI-O to set stream address in ctrl plane [#1510](https://github.com/openshift/machine-config-operator/pull/1510)
* [Bug 1802675](https://bugzilla.redhat.com/show_bug.cgi?id=1802675): [release-4.3] baremetal: Verify that mdns start only after hostname was set [#1479](https://github.com/openshift/machine-config-operator/pull/1479)
* [Bug 1806020](https://bugzilla.redhat.com/show_bug.cgi?id=1806020): [baremetal] Set hostname when DHCP6_FQDN_FQDN is set [#1502](https://github.com/openshift/machine-config-operator/pull/1502)
* [Bug 1801638](https://bugzilla.redhat.com/show_bug.cgi?id=1801638): [release-4.3] baremetal: all resolvconf editing to NM dispatcher [#1470](https://github.com/openshift/machine-config-operator/pull/1470)
* [Bug 1794495](https://bugzilla.redhat.com/show_bug.cgi?id=1794495): [release-4.3] fix ctrcfg and add e2e test [#1447](https://github.com/openshift/machine-config-operator/pull/1447)
* [Bug 1798170](https://bugzilla.redhat.com/show_bug.cgi?id=1798170): baremetal: Remove .template from path in dhcp-dhclient-conf.yaml [#1438](https://github.com/openshift/machine-config-operator/pull/1438)
* [Bug 1798639](https://bugzilla.redhat.com/show_bug.cgi?id=1798639): [release-4.3] baremetal: IPv6 add dhcp-duid to NetworkManager config [#1441](https://github.com/openshift/machine-config-operator/pull/1441)
* [Bug 1797647](https://bugzilla.redhat.com/show_bug.cgi?id=1797647): [release-4.3] [baremetal] Ipv6 non virtual ip fix [#1466](https://github.com/openshift/machine-config-operator/pull/1466)
* [Bug 1797035](https://bugzilla.redhat.com/show_bug.cgi?id=1797035): Get etcdctl binary from the etcd image and not from the upstream releases [#1431](https://github.com/openshift/machine-config-operator/pull/1431)
* [Bug 1793253](https://bugzilla.redhat.com/show_bug.cgi?id=1793253): [release-4.3] HAProxy infra pod: Make v4/v6 compatible [#1399](https://github.com/openshift/machine-config-operator/pull/1399)
* [Bug 1785718](https://bugzilla.redhat.com/show_bug.cgi?id=1785718): [release-4.3] etcd: Add initial support for an IPv6 control plane [#1353](https://github.com/openshift/machine-config-operator/pull/1353)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#1426](https://github.com/openshift/machine-config-operator/pull/1426)
* [Bug 1796440](https://bugzilla.redhat.com/show_bug.cgi?id=1796440): [release-4.3] DR: Cherry-pick  keep keys and data separate for snapshot backup [#1410](https://github.com/openshift/machine-config-operator/pull/1410)
* [Bug 1794699](https://bugzilla.redhat.com/show_bug.cgi?id=1794699): [release-4.3] baremetal: ipv6, switch to NM dispatcher for DNS VIP prepending [#1406](https://github.com/openshift/machine-config-operator/pull/1406)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/25bb6aeb58135c38a667e849edf5244871be4992...f6d1fe753cbcecb3aa1c2d3d3edd4a5d04ffca54)


### [multus-cni](https://github.com/openshift/multus-cni/tree/9e85cb1ba34b516b33da18cee4500be6a61fdf74)

* [Bug 1809283](https://bugzilla.redhat.com/show_bug.cgi?id=1809283): Removes configuration invalidation [4.3 backport] [#52](https://github.com/openshift/multus-cni/pull/52)
* [Bug 1805444](https://bugzilla.redhat.com/show_bug.cgi?id=1805444): Exposes readinessindicatorfile and uses wait.PollImmediate [backport 4.3] [#48](https://github.com/openshift/multus-cni/pull/48)
* [Full changelog](https://github.com/openshift/multus-cni/compare/1cb7d0f9c0a336ba7f33a0e2800c12205f10878c...9e85cb1ba34b516b33da18cee4500be6a61fdf74)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/d5df318830efb30c128e38390d26e695ac33c954)

* [Bug 1809253](https://bugzilla.redhat.com/show_bug.cgi?id=1809253): Reload serving certs [#160](https://github.com/openshift/oauth-proxy/pull/160)
* [Bug 1798195](https://bugzilla.redhat.com/show_bug.cgi?id=1798195): fix OAuth discovery in IPv6 environments [#150](https://github.com/openshift/oauth-proxy/pull/150)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/fbd062bbcb23538863a735f9823ac3fd6f47429e...d5df318830efb30c128e38390d26e695ac33c954)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a98ed7f79eb31b4e85149d4d1c9cc152df55fcaf)

* [release 4-3]  Bug 1824127: fixes configmap "extension-apiserver-authentication" not found [#92](https://github.com/openshift/openshift-apiserver/pull/92)
* [Bug 1803080](https://bugzilla.redhat.com/show_bug.cgi?id=1803080): 4.3: UPSTREAM: 87673: blank out value for unbounded client label [#75](https://github.com/openshift/openshift-apiserver/pull/75)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6868787f33f63c1c167c42f195a8bc98f89e827d...a98ed7f79eb31b4e85149d4d1c9cc152df55fcaf)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/07837c7258def4d41b25f5061217c5ea048255ee)

* [Bug 1819850](https://bugzilla.redhat.com/show_bug.cgi?id=1819850): Increase pull secrets controller QPS to 100 [#91](https://github.com/openshift/openshift-controller-manager/pull/91)
* [release 4.3] Bug 1779282: Use OwnerRefs to clean up SA pull secrets [#72](https://github.com/openshift/openshift-controller-manager/pull/72)
* [Bug 1802889](https://bugzilla.redhat.com/show_bug.cgi?id=1802889): bump(github.com/mtrmac/gpgme): v0.1.2 [#64](https://github.com/openshift/openshift-controller-manager/pull/64)
* [Bug 1810306](https://bugzilla.redhat.com/show_bug.cgi?id=1810306): Restore openshift-controller-manager metrics [#71](https://github.com/openshift/openshift-controller-manager/pull/71)
* [Bug 1785845](https://bugzilla.redhat.com/show_bug.cgi?id=1785845): use OCM config registry hostname with imagechangetrigger in case imagestream cache is stale (a la builds) for local ref streams [#59](https://github.com/openshift/openshift-controller-manager/pull/59)
* [Bug 1784569](https://bugzilla.redhat.com/show_bug.cgi?id=1784569): Exclude IPv6 Registry Locations [#57](https://github.com/openshift/openshift-controller-manager/pull/57)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/72436956543f5a9587a24191d0f130e312b82e50...07837c7258def4d41b25f5061217c5ea048255ee)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/7aa99e291276aa2f26260f8e654078ab6c2464f0)

* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#81](https://github.com/openshift/cluster-api-provider-openstack/pull/81)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/c14315ec71021976371f457598351db5c00fc586...7aa99e291276aa2f26260f8e654078ab6c2464f0)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/5ff376fd8c14bf6a99b314ad402ceb5641f71fdd)

* [Bug 1814777](https://bugzilla.redhat.com/show_bug.cgi?id=1814777): fix(catsrc): remove limits on catalogsource pods [#1406](https://github.com/operator-framework/operator-lifecycle-manager/pull/1406)
* [Bug 1807631](https://bugzilla.redhat.com/show_bug.cgi?id=1807631): Duplicate packages in packageserver APIService response [#1363](https://github.com/operator-framework/operator-lifecycle-manager/pull/1363)
* [Bug 1814263](https://bugzilla.redhat.com/show_bug.cgi?id=1814263): Make provided API ClusterRoles be owned by the corresponding API. [#1383](https://github.com/operator-framework/operator-lifecycle-manager/pull/1383)
* [Bug 1805268](https://bugzilla.redhat.com/show_bug.cgi?id=1805268): Fix configmap registry server readiness probe timeouts [#1365](https://github.com/operator-framework/operator-lifecycle-manager/pull/1365)
* [Bug 1808419](https://bugzilla.redhat.com/show_bug.cgi?id=1808419): Don't block on ctx.Done() if startup fails. [#1366](https://github.com/operator-framework/operator-lifecycle-manager/pull/1366)
* [Bug 1805574](https://bugzilla.redhat.com/show_bug.cgi?id=1805574): Remove run-level 1 from olm and openshift-operators namespaces [#1310](https://github.com/operator-framework/operator-lifecycle-manager/pull/1310)
* [Bug 1809649](https://bugzilla.redhat.com/show_bug.cgi?id=1809649): Update subscription_sync_count to include the package name [#1343](https://github.com/operator-framework/operator-lifecycle-manager/pull/1343)
* [Bug 1798665](https://bugzilla.redhat.com/show_bug.cgi?id=1798665): Fix cases where an operator's ready channel may never close. [#1280](https://github.com/operator-framework/operator-lifecycle-manager/pull/1280)
* [Bug 1797019](https://bugzilla.redhat.com/show_bug.cgi?id=1797019): [release-4.3] Fix bad opgroup annotations [#1272](https://github.com/operator-framework/operator-lifecycle-manager/pull/1272)
* [Bug 1803135](https://bugzilla.redhat.com/show_bug.cgi?id=1803135): fix(packagemanifests): Fix index key func to avoid key collision [#1292](https://github.com/operator-framework/operator-lifecycle-manager/pull/1292)
* [Bug 1780378](https://bugzilla.redhat.com/show_bug.cgi?id=1780378): Implement Structural Schema for CRDs [#1197](https://github.com/operator-framework/operator-lifecycle-manager/pull/1197)
* [Bug 1796913](https://bugzilla.redhat.com/show_bug.cgi?id=1796913): packageserver update fails to adopt APIService [#1270](https://github.com/operator-framework/operator-lifecycle-manager/pull/1270)
* [Bug 1791852](https://bugzilla.redhat.com/show_bug.cgi?id=1791852): Remove license year [#1243](https://github.com/operator-framework/operator-lifecycle-manager/pull/1243)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/c74333dbe61d92e1a75b09f74c0dc2c99b05405a...5ff376fd8c14bf6a99b314ad402ceb5641f71fdd)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/e0ddc0df2d65d935b1e33f203b781e99d505ad5b)

* [Bug 1813995](https://bugzilla.redhat.com/show_bug.cgi?id=1813995): support serving marketplace prometheus metrics over https [#296](https://github.com/operator-framework/operator-marketplace/pull/296)
* [Bug 1810048](https://bugzilla.redhat.com/show_bug.cgi?id=1810048): Use DNS for CatalogSource address [#285](https://github.com/operator-framework/operator-marketplace/pull/285)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a02f89919b89dac572d9b5264a22aeccc87da77...e0ddc0df2d65d935b1e33f203b781e99d505ad5b)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/36ee3a437614ca1cb781465e590613e01556e756)

* [Bug 1794176](https://bugzilla.redhat.com/show_bug.cgi?id=1794176): Updating summary for 'Operator Registry ' containers [#169](https://github.com/operator-framework/operator-registry/pull/169)
* [Bug 1805410](https://bugzilla.redhat.com/show_bug.cgi?id=1805410): fix(docker): add entrypoint [#185](https://github.com/operator-framework/operator-registry/pull/185)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/4aef889d760333aebac0f01459b3a8bf698fff0b...36ee3a437614ca1cb781465e590613e01556e756)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/1d9574bfc80b3947fe2246249b8c58057c155c20)

* [Bug 1819888](https://bugzilla.redhat.com/show_bug.cgi?id=1819888): [4.3] bump OVS/OVN to 2.13 [#127](https://github.com/openshift/ovn-kubernetes/pull/127)
* [Bug 1806667](https://bugzilla.redhat.com/show_bug.cgi?id=1806667): merge master to release-4.3 [#100](https://github.com/openshift/ovn-kubernetes/pull/100)
* ipv6: Make IPAddrToHWAddr() aware of IPv6 [#101](https://github.com/openshift/ovn-kubernetes/pull/101)
* HACK: add ipv4 interfaces to pods that need them [#94](https://github.com/openshift/ovn-kubernetes/pull/94)
* Upstream merge 2020-02-18 [#93](https://github.com/openshift/ovn-kubernetes/pull/93)
* fix IPv6 subnet dynamic addressing [#1072](https://github.com/openshift/ovn-kubernetes/pull/1072)
* config: don't let environment affect test results [#1071](https://github.com/openshift/ovn-kubernetes/pull/1071)
* add the ability for ovn-kubernetes to ignore a node by label [#1048](https://github.com/openshift/ovn-kubernetes/pull/1048)
* Fixes accidental override of file conf settings with defaults [#1044](https://github.com/openshift/ovn-kubernetes/pull/1044)
* Fix delete order for network policy [#1068](https://github.com/openshift/ovn-kubernetes/pull/1068)
* Remove kube-proxy in KIND deployment [#1067](https://github.com/openshift/ovn-kubernetes/pull/1067)
* remove unused methods from KClient [#1053](https://github.com/openshift/ovn-kubernetes/pull/1053)
* Ensure kind logs are always exported [#1065](https://github.com/openshift/ovn-kubernetes/pull/1065)
* ci: always export logs [#1054](https://github.com/openshift/ovn-kubernetes/pull/1054)
* Clustered database (aka RAFT) support for OVN DBs [#1051](https://github.com/openshift/ovn-kubernetes/pull/1051)
* [Bug 1795454](https://bugzilla.redhat.com/show_bug.cgi?id=1795454): Resync to upstream [#87](https://github.com/openshift/ovn-kubernetes/pull/87)
* when performing static ip allocation other-config:subnet is not required [#1046](https://github.com/openshift/ovn-kubernetes/pull/1046)
* Remove the compat annotation code for OvnPodAnnotationLegacyName and OvnHostSubnetLegacy [#1045](https://github.com/openshift/ovn-kubernetes/pull/1045)
* ci: remove Travis now that GitHub actions work [#1039](https://github.com/openshift/ovn-kubernetes/pull/1039)
* J2 render all templates [#1041](https://github.com/openshift/ovn-kubernetes/pull/1041)
* ci: bump master loglevel to 5 [#1040](https://github.com/openshift/ovn-kubernetes/pull/1040)
* CNI logging and timeout fixes, plus node handler locking fix [#1036](https://github.com/openshift/ovn-kubernetes/pull/1036)
* ci: use consistent kind cluster name and fix artifact retrieval [#1037](https://github.com/openshift/ovn-kubernetes/pull/1037)
* Also run CI for pull requests [#1033](https://github.com/openshift/ovn-kubernetes/pull/1033)
* Replace Travis CI with GitHub Actions [#1028](https://github.com/openshift/ovn-kubernetes/pull/1028)
* Iptables followup [#1032](https://github.com/openshift/ovn-kubernetes/pull/1032)
* Ensure j2 does not fail to run in daemonset.sh if installed globally [#1031](https://github.com/openshift/ovn-kubernetes/pull/1031)
* Fixes specifying geneve port [#1030](https://github.com/openshift/ovn-kubernetes/pull/1030)
* fix for iptables issue in CentOS 8 [#1027](https://github.com/openshift/ovn-kubernetes/pull/1027)
* do not delete integration bridge as part of ovnkube-node cleanup [#1029](https://github.com/openshift/ovn-kubernetes/pull/1029)
* Yet more cleanups [#1023](https://github.com/openshift/ovn-kubernetes/pull/1023)
* travis: bump timeout for e2e tests [#1024](https://github.com/openshift/ovn-kubernetes/pull/1024)
* a way to specify the encap-ip for a k8s worker node [#1016](https://github.com/openshift/ovn-kubernetes/pull/1016)
* Fix kubetest to enable conformance [#1018](https://github.com/openshift/ovn-kubernetes/pull/1018)
* add support for custom MAC specified in default network-attachment [#997](https://github.com/openshift/ovn-kubernetes/pull/997)
* Validates host subnet prefix length and default behavior [#979](https://github.com/openshift/ovn-kubernetes/pull/979)
* ovn: read pod addresses more quickly [#1012](https://github.com/openshift/ovn-kubernetes/pull/1012)
* Enable e2e CI [#1011](https://github.com/openshift/ovn-kubernetes/pull/1011)
* [Bug 1798613](https://bugzilla.redhat.com/show_bug.cgi?id=1798613): OVN: Bump image to include ovn2.12 [#72](https://github.com/openshift/ovn-kubernetes/pull/72)
* [Bug 1796531](https://bugzilla.redhat.com/show_bug.cgi?id=1796531): CARRY: fix race updating exclude IPs on node switch [#83](https://github.com/openshift/ovn-kubernetes/pull/83)
* Upstream rebase 2020-01-17 [#77](https://github.com/openshift/ovn-kubernetes/pull/77)
* Restrict address type requirements for tunneling [#1014](https://github.com/openshift/ovn-kubernetes/pull/1014)
* Allow IPv6 Node addresses for geneve tunnels [#1013](https://github.com/openshift/ovn-kubernetes/pull/1013)
* factory: parallelize Node events [#920](https://github.com/openshift/ovn-kubernetes/pull/920)
* scale: use light weight check to ensure OVN DB endpoints are up [#1007](https://github.com/openshift/ovn-kubernetes/pull/1007)
* trivial: use GetNodeWellKnownAddresses() to arrive at node mgmt port IP [#1009](https://github.com/openshift/ovn-kubernetes/pull/1009)
* determine whether we are running in IPv6 mode once at the start time [#1005](https://github.com/openshift/ovn-kubernetes/pull/1005)
* Fix multicast Port_Group update at pod creation/deletion. [#953](https://github.com/openshift/ovn-kubernetes/pull/953)
* IPv6 single-stack support [#968](https://github.com/openshift/ovn-kubernetes/pull/968)
* ovn: remove 'func (oc *Controller)' from functions that don't need it [#1002](https://github.com/openshift/ovn-kubernetes/pull/1002)
* avoid using --wait=sb in ovn-nbctl calls when using ovn-nbctl daemon [#1001](https://github.com/openshift/ovn-kubernetes/pull/1001)
* Factory and testcase cleanups [#999](https://github.com/openshift/ovn-kubernetes/pull/999)
* handle failed management logical_switch_port creation [#996](https://github.com/openshift/ovn-kubernetes/pull/996)
* scale: fixed MAC address for the logical router ports [#992](https://github.com/openshift/ovn-kubernetes/pull/992)
* do normal processing for all inbound packets that are not tracked [#993](https://github.com/openshift/ovn-kubernetes/pull/993)
* scale: clearInitialNodeNetworkUnavailableCondition() is very expensive [#994](https://github.com/openshift/ovn-kubernetes/pull/994)
* Fix Windows cross-compilation [#76](https://github.com/openshift/ovn-kubernetes/pull/76)
* Fixes missing oc client during openshift image build [#74](https://github.com/openshift/ovn-kubernetes/pull/74)
* correct the directory placement of windows binary [#73](https://github.com/openshift/ovn-kubernetes/pull/73)
* Build the windows binary as part of the container ovn-kubernetes container build [#69](https://github.com/openshift/ovn-kubernetes/pull/69)
* Upstream + hybrid-overlay merge 2019-12-28 [#70](https://github.com/openshift/ovn-kubernetes/pull/70)
* scale: waitForNodeLogicalSwitch() should get other-config:subnet itself [#989](https://github.com/openshift/ovn-kubernetes/pull/989)
* remove unwanted debug log messages in factory.go [#987](https://github.com/openshift/ovn-kubernetes/pull/987)
* ovn-controller: Set ovn-openflow-probe-interval [#986](https://github.com/openshift/ovn-kubernetes/pull/986)
* scale: ascertain gateway readiness by checking OpenFlow rules [#985](https://github.com/openshift/ovn-kubernetes/pull/985)
* scale: ascertain management port readiness by checking OpenFlow rules [#984](https://github.com/openshift/ovn-kubernetes/pull/984)
* set other_config:hwaaddr on br-local before you add br-nexthop [#983](https://github.com/openshift/ovn-kubernetes/pull/983)
* Support latest OVN [#926](https://github.com/openshift/ovn-kubernetes/pull/926)
* persist the mac address associated with the node management port [#950](https://github.com/openshift/ovn-kubernetes/pull/950)
* Better testcase failure descriptions and command matching [#976](https://github.com/openshift/ovn-kubernetes/pull/976)
* pkg/cluster: set br-nexthop mtu [#975](https://github.com/openshift/ovn-kubernetes/pull/975)
* go mod tidy [#973](https://github.com/openshift/ovn-kubernetes/pull/973)
* persist the mac address associated with br-nexthop OVS internal port [#949](https://github.com/openshift/ovn-kubernetes/pull/949)
* add node systemID to the list of information passed from node to master [#966](https://github.com/openshift/ovn-kubernetes/pull/966)
* Removes duplicate code setting ovn_db_host [#971](https://github.com/openshift/ovn-kubernetes/pull/971)
* Update metric service to include not-ready endpoints [#974](https://github.com/openshift/ovn-kubernetes/pull/974)
* Fixes detecting loopback for ovnkube-db endpoint [#970](https://github.com/openshift/ovn-kubernetes/pull/970)
* cmd: add --metrics-enable-pprof option to serve pprof on metrics port [#969](https://github.com/openshift/ovn-kubernetes/pull/969)
* get dynamic_addresses and addresses in one go instead of two execs [#963](https://github.com/openshift/ovn-kubernetes/pull/963)
* Manage log level during node bring up [#962](https://github.com/openshift/ovn-kubernetes/pull/962)
* Add networkpolicy test cases [#939](https://github.com/openshift/ovn-kubernetes/pull/939)
* Disable IPv6 DAD and ensure addresses are ready [#937](https://github.com/openshift/ovn-kubernetes/pull/937)
* add a switch to flip on/off multicast support (is disabled by default) [#954](https://github.com/openshift/ovn-kubernetes/pull/954)
* use ahostsv4 database to ensure we get IPv4 address always [#952](https://github.com/openshift/ovn-kubernetes/pull/952)
* Move pod annotation under k8s.ovn.org namespace [#922](https://github.com/openshift/ovn-kubernetes/pull/922)
* Enable IGMP Querier only if a source IPv4 is available. [#944](https://github.com/openshift/ovn-kubernetes/pull/944)
* Sync SubnetAllocator from openshift/sdn [#945](https://github.com/openshift/ovn-kubernetes/pull/945)
* Fix parsing of IPv6 addresses in ovn URLs [#938](https://github.com/openshift/ovn-kubernetes/pull/938)
* build: fix 'make lint' when GOPATH isn't explicitly set [#929](https://github.com/openshift/ovn-kubernetes/pull/929)
* AddFilteredEndpointsHandler must take label selector like other handlers [#936](https://github.com/openshift/ovn-kubernetes/pull/936)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2808c2cbb256460d929491f33ec5858ceebb211c...1d9574bfc80b3947fe2246249b8c58057c155c20)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/a6330ca349aae64643c2d0d7dff08ed2a444ccd5)

* [Bug 1805833](https://bugzilla.redhat.com/show_bug.cgi?id=1805833): Tighten permissions related to CRD create/update [#60](https://github.com/openshift/prometheus-operator/pull/60)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/6ba21de5746f7b009a24e48cc929135ddb3396ac...a6330ca349aae64643c2d0d7dff08ed2a444ccd5)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/d0b913aa0dc58d87bab16ed5a8799a9e06891705)

* [Bug 1789084](https://bugzilla.redhat.com/show_bug.cgi?id=1789084): Not reporting 'none' when no platforms located [#49](https://github.com/openshift/node_exporter/pull/49)
* [Full changelog](https://github.com/openshift/node_exporter/compare/1ea04fb0e09c14440bb97c3468b97f99db07dcfd...d0b913aa0dc58d87bab16ed5a8799a9e06891705)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/dd7235b4568fe22232f9cee2855967da5e0c52b2)

* [Bug 1810420](https://bugzilla.redhat.com/show_bug.cgi?id=1810420): Ensure service CA certs are created with unique serial numbers [#112](https://github.com/openshift/service-ca-operator/pull/112)
* [Bug 1791022](https://bugzilla.redhat.com/show_bug.cgi?id=1791022): Ensure removal of 4.4-only resources on downgrade to 4.3 [#93](https://github.com/openshift/service-ca-operator/pull/93)
* [Bug 1788179](https://bugzilla.redhat.com/show_bug.cgi?id=1788179): Enable automated rotation for 4.3 [#104](https://github.com/openshift/service-ca-operator/pull/104)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/774c394da334dec446703545d4baaf89611ccb9d...dd7235b4568fe22232f9cee2855967da5e0c52b2)


### [telemeter](https://github.com/openshift/telemeter/tree/227ae59d226d17eee26a60621bc884f4e8e83254)

* [Bug 1805116](https://bugzilla.redhat.com/show_bug.cgi?id=1805116): jsonnet/telemeter/metrics: add aggregated up metric, remove node_uname_info [#309](https://github.com/openshift/telemeter/pull/309)
* [Full changelog](https://github.com/openshift/telemeter/compare/aa7942931890dd361c117a6cbb7d84451415f7bf...227ae59d226d17eee26a60621bc884f4e8e83254)