# 4.3.25

Created: 2020-06-10 09:08:40 +0000 UTC

Image Digest: `sha256:ed4cf5ef4ea21151515343ff7326de457cc4543dd6cccbe6986fa8be972968d3`

Promoted from registry.svc.ci.openshift.org/ocp/release:4.3.0-0.nightly-2020-06-08-205315


## Changes from 4.3.0

### Components

* Kubernetes 1.16.2


### New images

* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1322dc43](https://github.com/openshift/route-override-cni/commit/1322dc43712e12a021f5e83c8d752e7d8c30aa6e) `sha256:c572afe7a0b3215e299a9f0117cbd311fa9fae42b24a6c46024b860eb61d653d`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9cca449d](https://github.com/openshift/whereabouts-cni/commit/9cca449d619ed0f93a06aca9255004672bb6c96e) `sha256:27b86e227e5d68e435b93b0aac2eefb135b7eb5413cf2b68905272038c5d1ad6`


### Rebuilt images without code change

* [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure) git [86ecb23d](https://github.com/openshift/cluster-api-provider-azure/commit/86ecb23daa83c78761414a7abcb169c73c18a756) `sha256:b7aa20cc3c62a34614adbe8e65944e65c24047d5a1161a0bf99c5571e3a8f372`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:195eb649c66092360f698c9a948fb379895f373f77b6d10e92d35393204bb4b7`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:7c1c8fa0ecc191613df2ecd3b9fbb6bb8c95d33dd68f82d5d4befa662883ac31`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [d5ddbcdd](https://github.com/openshift/cluster-config-operator/commit/d5ddbcdd4ec87bd4d0d109e81ed0be5dafd86061) `sha256:e1977a96529a401e226009f1d677a017e9809c634121ee19673f2acdd44eab08`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [10fc162e](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/10fc162e4f4c977a9c431884b9a063fa751514d0) `sha256:3b3a2711ae9d31bb6a406711bb4bafaae364198018ad6d57502cede7cf10003d`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [9b6ccc80](https://github.com/openshift/cluster-policy-controller/commit/9b6ccc80eeef2eb85f78f8a70f319cbae0c5295a) `sha256:47103d2d687f1b6cc689d8233dfc7df1b355ee944450533daa11675929eaa877`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [a9548e6d](https://github.com/openshift/cluster-storage-operator/commit/a9548e6d0ac621a5c6e8e3544ca680280a1ca746) `sha256:3b6b46a7a50a433a52da8592dbf9e170234676785cc481232fd6922d1fb5f7c7`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [727d37d9](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/727d37d929cb388744362c98fbcaf9ef547cd4b6) `sha256:a613df1b8ae9e34a3ea34bd28ddfd91ef6fc47ec493a70018342c8a8c938ab0b`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:5a0ed3f5b70c6250897cd3a71ab5a08b58769b52fc2aa2b74a3e34fd84a99397`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:976ca6b1bf432df7579ee3c5fb5e9edad7737e42025f6167e6421e3ce80700df`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [386465fe](https://github.com/openshift/containernetworking-plugins/commit/386465fe170c0e7299b357efbace235a3e5ce7ee) `sha256:e7c973ff29f776178ac7c8db15362d937279e40693f3601ea45fca1e5238461f`
* [etcd](https://github.com/openshift/etcd) git [e30a18f2](https://github.com/openshift/etcd/commit/e30a18f29c8bf1f16507d7983dde2aa51962d6c7) `sha256:7592956227324c64ca2e029670bb2bda1109b6b88414aedac23baed769541f87`
* [grafana](https://github.com/openshift/grafana) git [e2261e14](https://github.com/openshift/grafana/commit/e2261e142909cb0fe70fc0996d7d375e57956589) `sha256:ba2a2e07ec981f746883c92239b6e167b6e85e29b6a44818fc1af121e25455e2`
* [haproxy-router](https://github.com/openshift/router) git [1526917a](https://github.com/openshift/router/commit/1526917a58021c8f6e465406501c32fa3fb618b5) `sha256:be0f41b0aa2203a8a5a929af1d34bb8ab7990c698ea7ac8a78b84ec92d1afebd`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [5f57661e](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/5f57661eaaa3f8714c2b1904313b9ecf1a7bdba4) `sha256:763b4360b130cb5c0734ccb2463f768fb2b3a19886c5d583aa5d6c4b4966a71f`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [b83630ce](https://github.com/openshift/ironic-inspector-image/commit/b83630cefa1a72b2d8ce03c9701acb4f117ab6f5) `sha256:4797dd8bd3d3dca2fb74ef728f424e29bc512fdf85df608239390df44d280358`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [2405ba63](https://github.com/openshift/ironic-rhcos-downloader/commit/2405ba63f22db1cbda255cfccf2fc84f15faa6ee) `sha256:e4874a38ddba0a931e2448ec3dbf25394fbbadd94b5d8237ab7d199cb63b84bc`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e33314bd](https://github.com/openshift/ironic-static-ip-manager/commit/e33314bda6f366472a2371c5598ff2d7dba111c8) `sha256:1bce9f13ab3ab72fb4bc7d6ee8c0bb573996a525c80d09a1e1864e96ba897f9d`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [3d1c61e9](https://github.com/openshift/k8s-prometheus-adapter/commit/3d1c61e9a783d8c4a764b130837682fa9ab8e9df) `sha256:5776334c32ef8fbfcf8c1cbd4acf93bca6493d4c78f10f1b01f4b4d191796276`
* [keepalived-ipfailover](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:6d984c61ee2180b1c7506d070ce4113c34e4c8df893404834a5e28ee1fb1fb21`
* [kube-client-agent](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:2543bd6d153876869d5bd782f06c36a0b2a17494e0c735f3760d59c41c392116`
* [kube-etcd-signer-server](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:5dc20a2c89e58be716544e61dc8edb0a8e8969c5516022c5c68d95d90b30fed6`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [84e7dac6](https://github.com/openshift/kube-rbac-proxy/commit/84e7dac69f8e3f90620729ee730327a3e168963d) `sha256:c3804bacbb82ec9eba2cd55fd86b127757ed798968891989aaf26b82b17c88e0`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [83f9fc56](https://github.com/openshift/kube-state-metrics/commit/83f9fc5685cf3d7732687e1f07da6b27d6901c4f) `sha256:09bb2ac15e3d0ae96ac0ab490186938e845f8b8590b4aba60b597a61bcb22367`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:6a6cabb8647cba661e22559a40a6c2d2e5d0897cf672487bcf4d8143f17d0c41`
* machine-os-content `sha256:a20fcdb0e02b8bfd610711c9231789c54b403d4fcf91c9eb8a89a31bb52d0b87`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [24135de2](https://github.com/openshift/mdns-publisher/commit/24135de29fc348f3ef455a288013cc1912d969bc) `sha256:23659d1b848b00c3dff47209cd4410cb3db60db5cca59338fab6dc222b177d16`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ead10a3c](https://github.com/openshift/multus-admission-controller/commit/ead10a3cf30c5b4a2fbd7c987d83c07a46c5d5da) `sha256:4423d7d03a89d8260e1aad3d08e7180e59a5e48dd52f00a83ae78047a94d50cb`
* [must-gather](https://github.com/openshift/must-gather) git [23037ad1](https://github.com/openshift/must-gather/commit/23037ad16c0aafd7186431c93ebca3f0d426a08d) `sha256:dc92dae9efd8b63b58c70788e1bccb362c1c6931b73a74be6d7faddce97b5df0`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [c01d2de6](https://github.com/openshift/openshift-state-metrics/commit/c01d2de651071389d2621c46e934fd9cb2bf4b8d) `sha256:3293d4e68963c5565b6936690da68c048a6948164666b99d991c9df2efbd29c3`
* [pod](https://github.com/openshift/images) git [1be922de](https://github.com/openshift/images/commit/1be922de56a99f4e254eb9c2fc42d30e5596cf77) `sha256:79144c9701364b3f4ab8a0d115f1bb938ffe3862e1b4a5d217abf9c53c79078e`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b8153a7f](https://github.com/openshift/prom-label-proxy/commit/b8153a7f39f1a34c03059f1b9dfb05d2c1297414) `sha256:133954ccf6867d3e107fe0cb3714ad282e37656191218e530ec68444d002728f`
* [prometheus](https://github.com/openshift/prometheus) git [c086098d](https://github.com/openshift/prometheus/commit/c086098da5f01ab9565bdda772d3459bea2913f2) `sha256:06d0099c25dc0bbdc2df00b10e543a6467387664574ba90ad2cd629e7100871c`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [11aa2a87](https://github.com/openshift/prometheus-alertmanager/commit/11aa2a87c5bfb84cba76b90a3867a06a55e2605e) `sha256:7cf8eb17a355dbf0fb3bbeb3e2037177eb39b87193c36eb746d18c9978c11ce6`
* [service-catalog](https://github.com/openshift/service-catalog) git [6f75f804](https://github.com/openshift/service-catalog/commit/6f75f8047dfab6ca8b979833f7f2a6036deee488) `sha256:96c49ccd7ab107cdd8f6fe719bf6c5ca0f9723981de3e5718a389fc26257d91c`
* [thanos](https://github.com/openshift/thanos) git [4aaa91e9](https://github.com/openshift/thanos/commit/4aaa91e9b982177e113c80567ec3808dcf122769) `sha256:a50d54d1a8601f3f9d0aeb00ff8c939f342fb8539f063f196b63e406658a50fe`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/86a378fedb20eb9a998047407594baabe80dc345)

* [Bug 1800315](https://bugzilla.redhat.com/show_bug.cgi?id=1800315): [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller's changes [#298](https://github.com/openshift/cluster-api-provider-aws/pull/298)
* [Bug 1798597](https://bugzilla.redhat.com/show_bug.cgi?id=1798597): [release-4.3] take into consideration all instance states for deletion [#292](https://github.com/openshift/cluster-api-provider-aws/pull/292)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b59f34398847fd2047f4f1193654b505643afe79...86a378fedb20eb9a998047407594baabe80dc345)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/953f487b887b6a14ec6177f67b63620baf4d1649)

* [Bug 1842531](https://bugzilla.redhat.com/show_bug.cgi?id=1842531): images: libvirt: add yq to libvirt CI image [#3699](https://github.com/openshift/installer/pull/3699)
* [Bug 1840230](https://bugzilla.redhat.com/show_bug.cgi?id=1840230): data/azure/vnet: switch to HTTPS probes for lbs [#3665](https://github.com/openshift/installer/pull/3665)
* [Bug 1820222](https://bugzilla.redhat.com/show_bug.cgi?id=1820222): libvirt: Bump bootstrap memory to 5G for ppc64le [#3428](https://github.com/openshift/installer/pull/3428)
* [Bug 1828632](https://bugzilla.redhat.com/show_bug.cgi?id=1828632): Don't fail on unavailable features on OpenStack [#3514](https://github.com/openshift/installer/pull/3514)
* [Bug 1820591](https://bugzilla.redhat.com/show_bug.cgi?id=1820591): Add retries to DeleteSwiftContainer [#3408](https://github.com/openshift/installer/pull/3408)
* [Bug 1824921](https://bugzilla.redhat.com/show_bug.cgi?id=1824921): [release-4.3] OpenStack: Correcting the instructions to refresh a CA cert [#3466](https://github.com/openshift/installer/pull/3466)
* [Bug 1824239](https://bugzilla.redhat.com/show_bug.cgi?id=1824239): Validate Azure regions [#3460](https://github.com/openshift/installer/pull/3460)
* [Bug 1825973](https://bugzilla.redhat.com/show_bug.cgi?id=1825973): OpenStack: Replace remote_group_id with remote_ip_prefix [#3481](https://github.com/openshift/installer/pull/3481)
* [Bug 1825478](https://bugzilla.redhat.com/show_bug.cgi?id=1825478): OpenStack CI Install awscli from zip [#3478](https://github.com/openshift/installer/pull/3478)
* [Bug 1810492](https://bugzilla.redhat.com/show_bug.cgi?id=1810492): OpenStack: pass all CAs to bootstrap ignition [#3242](https://github.com/openshift/installer/pull/3242)
* [Bug 1817717](https://bugzilla.redhat.com/show_bug.cgi?id=1817717): Backport Azure UPI to 4.3 [#3351](https://github.com/openshift/installer/pull/3351)
* [Bug 1818140](https://bugzilla.redhat.com/show_bug.cgi?id=1818140): Backport adding groundwork for multi-arch images [#3233](https://github.com/openshift/installer/pull/3233)
* [Bug 1786364](https://bugzilla.redhat.com/show_bug.cgi?id=1786364): filter out unsupported regions in Azure [#3320](https://github.com/openshift/installer/pull/3320)
* [Bug 1816705](https://bugzilla.redhat.com/show_bug.cgi?id=1816705): images/libvirt: remove epel-release [#3339](https://github.com/openshift/installer/pull/3339)
* [Bug 1816264](https://bugzilla.redhat.com/show_bug.cgi?id=1816264): Generic libvirt installer image for CI [#3331](https://github.com/openshift/installer/pull/3331)
* [Bug 1808973](https://bugzilla.redhat.com/show_bug.cgi?id=1808973): azure - vendor update to support multiple prefixes [#3316](https://github.com/openshift/installer/pull/3316)
* [Bug 1791995](https://bugzilla.redhat.com/show_bug.cgi?id=1791995): proxy: use explicit list of platforms for metadata addresses [#2944](https://github.com/openshift/installer/pull/2944)
* [Bug 1812599](https://bugzilla.redhat.com/show_bug.cgi?id=1812599): bump RHCOS boot images to 43.81.202003111353.0 [#3274](https://github.com/openshift/installer/pull/3274)
* [Bug 1807037](https://bugzilla.redhat.com/show_bug.cgi?id=1807037): data/data/gcp,azure: block private dns zone on public record [#3185](https://github.com/openshift/installer/pull/3185)
* [Bug 1810018](https://bugzilla.redhat.com/show_bug.cgi?id=1810018): create bootstrap floating ip after the bootstrap machine [#3281](https://github.com/openshift/installer/pull/3281)
* [Bug 1801801](https://bugzilla.redhat.com/show_bug.cgi?id=1801801): openstack docs day 2 ssc refresh [#3113](https://github.com/openshift/installer/pull/3113)
* [Bug 1809922](https://bugzilla.redhat.com/show_bug.cgi?id=1809922): OpenStack: return an error if load balancer deletion fails [#3231](https://github.com/openshift/installer/pull/3231)
* [Release 4.3] Bug 1811154: validation: Allow periods in gcp and azure cluster names. [#3264](https://github.com/openshift/installer/pull/3264)
* [Bug 1807203](https://bugzilla.redhat.com/show_bug.cgi?id=1807203): additionalTrustBundle IsCA check to warn instead of drop [#3190](https://github.com/openshift/installer/pull/3190)
* [Bug 1808095](https://bugzilla.redhat.com/show_bug.cgi?id=1808095): Bump survey vendor for panic [#3213](https://github.com/openshift/installer/pull/3213)
* [Bug 1801446](https://bugzilla.redhat.com/show_bug.cgi?id=1801446): Move permissions check to cluster asset [#3096](https://github.com/openshift/installer/pull/3096)
* [Bug 1808482](https://bugzilla.redhat.com/show_bug.cgi?id=1808482): OpenStack: allow to overwrite default os image in the install config [#3207](https://github.com/openshift/installer/pull/3207)
* [Bug 1803187](https://bugzilla.redhat.com/show_bug.cgi?id=1803187): baremetal: map hardware profile to baremetal-operator default [#3106](https://github.com/openshift/installer/pull/3106)
* [Bug 1796618](https://bugzilla.redhat.com/show_bug.cgi?id=1796618): [release-4.3 IPv6] Replace MachineCIDR with MachineNetwork, add Azure IPv6 [#3029](https://github.com/openshift/installer/pull/3029)
* [Bug 1803805](https://bugzilla.redhat.com/show_bug.cgi?id=1803805): cmd/openshift-install/create: wait 60 minutes for baremetal [#3116](https://github.com/openshift/installer/pull/3116)
* [Bug 1791440](https://bugzilla.redhat.com/show_bug.cgi?id=1791440): asset/manifests: add openshift-install configmap [#3031](https://github.com/openshift/installer/pull/3031)
* [Bug 1757244](https://bugzilla.redhat.com/show_bug.cgi?id=1757244): use region info when simulating permissions [#3102](https://github.com/openshift/installer/pull/3102)
* [Bug 1790537](https://bugzilla.redhat.com/show_bug.cgi?id=1790537): pkg/version: Prepare of extract-time oc version injection [#2907](https://github.com/openshift/installer/pull/2907)
* [Bug 1798805](https://bugzilla.redhat.com/show_bug.cgi?id=1798805): baremetal: Fix bootstrap local DNS for IPv6 [#3092](https://github.com/openshift/installer/pull/3092)
* [Bug 1791457](https://bugzilla.redhat.com/show_bug.cgi?id=1791457): [release-4.3] Add support for AWS Bahrain region me-south-1 [#2877](https://github.com/openshift/installer/pull/2877)
* [Bug 1779469](https://bugzilla.redhat.com/show_bug.cgi?id=1779469): Fix node ports [#3048](https://github.com/openshift/installer/pull/3048)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#3036](https://github.com/openshift/installer/pull/3036)
* [Bug 1789748](https://bugzilla.redhat.com/show_bug.cgi?id=1789748): Ensure enough number of retries for cluster with Kuryr SDN [#2903](https://github.com/openshift/installer/pull/2903)
* [Bug 1794765](https://bugzilla.redhat.com/show_bug.cgi?id=1794765): ipv6: Fix IPv6 address encoding [#2977](https://github.com/openshift/installer/pull/2977)
* [Bug 1788062](https://bugzilla.redhat.com/show_bug.cgi?id=1788062): OpenStack: create security rules sequentially [#2887](https://github.com/openshift/installer/pull/2887)
* [Bug 1798060](https://bugzilla.redhat.com/show_bug.cgi?id=1798060): cmd/openshift-install/create: add env var to preserve bootstrap [#3053](https://github.com/openshift/installer/pull/3053)
* [Full changelog](https://github.com/openshift/installer/compare/2055609f95b19322ee6cfdd0bea73399297c4a3e...953f487b887b6a14ec6177f67b63620baf4d1649)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/dc2d333c60a7a8457eb3e56ca3218aaad2011999)

* [Bug 1816122](https://bugzilla.redhat.com/show_bug.cgi?id=1816122): Don't assume IPv4 in introspection data [#54](https://github.com/openshift/baremetal-operator/pull/54)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/d981ea02fc551aeda75ccbf11da34ba9eed11f77...dc2d333c60a7a8457eb3e56ca3218aaad2011999)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/1ba567febc0443115ed85d706c363766b039d46d)

* [Bug 1802675](https://bugzilla.redhat.com/show_bug.cgi?id=1802675): Consider mdns hostname file existence in utils.ShortHostname [#45](https://github.com/openshift/baremetal-runtimecfg/pull/45)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4a9707af8d6e018b652928c8141d25b5f1744123...1ba567febc0443115ed85d706c363766b039d46d)


### [cli, cli-artifacts, deployer](https://github.com/openshift/oc/tree/4fb2d4d96e6b604f7d4ee49080238a5aec04dc4f)

* [Bug 1821648](https://bugzilla.redhat.com/show_bug.cgi?id=1821648): Zeroing BearerTokenFile for prune [#376](https://github.com/openshift/oc/pull/376)
* [Bug 1790954](https://bugzilla.redhat.com/show_bug.cgi?id=1790954): fix version ldflags [#255](https://github.com/openshift/oc/pull/255)
* [Bug 1802262](https://bugzilla.redhat.com/show_bug.cgi?id=1802262): Use polymorphic helpers from exec, when reading a pod [#294](https://github.com/openshift/oc/pull/294)
* [Bug 1810533](https://bugzilla.redhat.com/show_bug.cgi?id=1810533): Don't default to always mirror manifestlists [#342](https://github.com/openshift/oc/pull/342)
* [Bug 1810959](https://bugzilla.redhat.com/show_bug.cgi?id=1810959): `oc adm inspect namespace` doesn't collect pod logs [#290](https://github.com/openshift/oc/pull/290)
* [Bug 1795302](https://bugzilla.redhat.com/show_bug.cgi?id=1795302): initialize auth plugins [#268](https://github.com/openshift/oc/pull/268)
* [Bug 1802881](https://bugzilla.redhat.com/show_bug.cgi?id=1802881): bump(github.com/mtrmac/gpgme): v0.1.2 [#307](https://github.com/openshift/oc/pull/307)
* [Bug 1809360](https://bugzilla.redhat.com/show_bug.cgi?id=1809360): fix(catalog): use registry image from openshift quay namespace [#335](https://github.com/openshift/oc/pull/335)
* [Bug 1796675](https://bugzilla.redhat.com/show_bug.cgi?id=1796675): bump(operator-framework/operator-registry) [#336](https://github.com/openshift/oc/pull/336)
* [Bug 1807812](https://bugzilla.redhat.com/show_bug.cgi?id=1807812): [release-4.3] override FileDir with FromFileDir if set in Complete [#325](https://github.com/openshift/oc/pull/325)
* [Bug 1792334](https://bugzilla.redhat.com/show_bug.cgi?id=1792334): pods that are no longer running can still have logs [#263](https://github.com/openshift/oc/pull/263)
* [Bug 1804463](https://bugzilla.redhat.com/show_bug.cgi?id=1804463): Option to force RepoDigest mirror [#313](https://github.com/openshift/oc/pull/313)
* [Bug 1792334](https://bugzilla.redhat.com/show_bug.cgi?id=1792334): collect endpoints for namespaces [#264](https://github.com/openshift/oc/pull/264)
* [Bug 1797026](https://bugzilla.redhat.com/show_bug.cgi?id=1797026): [CLI] oc adm catalog build neither support "-a, --registry-config=" flag, nor uses podman registry credentials file [#296](https://github.com/openshift/oc/pull/296)
* [Bug 1789857](https://bugzilla.redhat.com/show_bug.cgi?id=1789857): allow --config and --kubeconfig [#247](https://github.com/openshift/oc/pull/247)
* [Bug 1785201](https://bugzilla.redhat.com/show_bug.cgi?id=1785201): don't gather pod endpoints using tokens [#237](https://github.com/openshift/oc/pull/237)
* [Bug 1788016](https://bugzilla.redhat.com/show_bug.cgi?id=1788016): Suppress nil pointer dereference for job spec [#243](https://github.com/openshift/oc/pull/243)
* [Bug 1786062](https://bugzilla.redhat.com/show_bug.cgi?id=1786062): fix describe for HPA [#228](https://github.com/openshift/oc/pull/228)
* [Bug 1784756](https://bugzilla.redhat.com/show_bug.cgi?id=1784756): set insecure-skip-tls-verify-backend flag [#225](https://github.com/openshift/oc/pull/225)
* [Bug 1779353](https://bugzilla.redhat.com/show_bug.cgi?id=1779353): Verify outbound manifests now that schema1 support is dropped [#211](https://github.com/openshift/oc/pull/211)
* [Bug 1797730](https://bugzilla.redhat.com/show_bug.cgi?id=1797730): Mirror images one by one for oc adm catalog mirror [#278](https://github.com/openshift/oc/pull/278)
* [Bug 1790537](https://bugzilla.redhat.com/show_bug.cgi?id=1790537): pkg/cli/admin/release/extract_tools: Inject release version into installer [#249](https://github.com/openshift/oc/pull/249)
* [Bug 1796182](https://bugzilla.redhat.com/show_bug.cgi?id=1796182): remove destination digests if present [#274](https://github.com/openshift/oc/pull/274)
* [Full changelog](https://github.com/openshift/oc/compare/6a937dfe56ff26255d09702c69b8406040c14505...4fb2d4d96e6b604f7d4ee49080238a5aec04dc4f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/02be5758f755d9da56cb4b37ae3ea52a9a0c436e)

* [Bug 1816704](https://bugzilla.redhat.com/show_bug.cgi?id=1816704): handle old Infrastructure objects without PlatformStatus [#169](https://github.com/openshift/cloud-credential-operator/pull/169)
* [Bug 1801261](https://bugzilla.redhat.com/show_bug.cgi?id=1801261): [release-4.3] Fix exclusion annotation for hosted use case [#156](https://github.com/openshift/cloud-credential-operator/pull/156)
* [Bug 1757244](https://bugzilla.redhat.com/show_bug.cgi?id=1757244): improve permissions simulation by adding region info [#155](https://github.com/openshift/cloud-credential-operator/pull/155)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/835d9b25e076b4f058bf638a6fe61d622086d78d...02be5758f755d9da56cb4b37ae3ea52a9a0c436e)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/ee962bdec0cbfcd09a1f66b857727e6217903539)

* [Bug 1824167](https://bugzilla.redhat.com/show_bug.cgi?id=1824167): The oauth server should wait until it is out of rotation to shut down [#257](https://github.com/openshift/cluster-authentication-operator/pull/257)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/df8cd95ed3249e0fae70ddaea56c07950b819cad...ee962bdec0cbfcd09a1f66b857727e6217903539)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/59d52289f59ea5bd691e185f4b36a5d6f9160e7e)

* BUG 1824215: Raise maximum memory capacity difference [#144](https://github.com/openshift/kubernetes-autoscaler/pull/144)
* BUG 1805160: Ensure DeleteNodes doesn't delete a node twice [#129](https://github.com/openshift/kubernetes-autoscaler/pull/129)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/d45f94da59de0f949b8d84e67f7c4074ed6e0952...59d52289f59ea5bd691e185f4b36a5d6f9160e7e)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/23df15eeb0144268565ccbb28665efe82a1a5845)

* [Bug 1814091](https://bugzilla.redhat.com/show_bug.cgi?id=1814091): ROKS - remove additional autoscaler manifests [#138](https://github.com/openshift/cluster-autoscaler-operator/pull/138)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/3752471e05fb4a7ed923bef281109eae82eb9d75...23df15eeb0144268565ccbb28665efe82a1a5845)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/ca11e642bfe8fe62688a04565f2fd3195c210344)

* [Bug 1798869](https://bugzilla.redhat.com/show_bug.cgi?id=1798869): Try TCP DNS in dns-node-resolver [#155](https://github.com/openshift/cluster-dns-operator/pull/155)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/6f4a6005c8fbb56586b542d179b5ca1c96345498...ca11e642bfe8fe62688a04565f2fd3195c210344)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/15be154394b94dfa8eebe80b7af4493c3eef9efd)

* [Bug 1836753](https://bugzilla.redhat.com/show_bug.cgi?id=1836753): Use release-4.3 api [#564](https://github.com/openshift/cluster-image-registry-operator/pull/564)
* [Bug 1810563](https://bugzilla.redhat.com/show_bug.cgi?id=1810563): bootstrap HA configuration [#536](https://github.com/openshift/cluster-image-registry-operator/pull/536)
* [Bug 1825719](https://bugzilla.redhat.com/show_bug.cgi?id=1825719): update object dumper [#533](https://github.com/openshift/cluster-image-registry-operator/pull/533)
* [Bug 1830363](https://bugzilla.redhat.com/show_bug.cgi?id=1830363): removing verify-sec / gosec [#544](https://github.com/openshift/cluster-image-registry-operator/pull/544)
* [Bug 1816656](https://bugzilla.redhat.com/show_bug.cgi?id=1816656): update ClusterOperator object even if operator is unmanaged [#504](https://github.com/openshift/cluster-image-registry-operator/pull/504)
* [Bug 1820242](https://bugzilla.redhat.com/show_bug.cgi?id=1820242): nodeca daemon should tolerate all taints [#511](https://github.com/openshift/cluster-image-registry-operator/pull/511)
* [Bug 1808426](https://bugzilla.redhat.com/show_bug.cgi?id=1808426): ignore most kube-system events [#503](https://github.com/openshift/cluster-image-registry-operator/pull/503)
* [Bug 1815124](https://bugzilla.redhat.com/show_bug.cgi?id=1815124): force path style for custom endpoints [#500](https://github.com/openshift/cluster-image-registry-operator/pull/500)
* [Bug 1814759](https://bugzilla.redhat.com/show_bug.cgi?id=1814759): Use junit_*.xml pattern for junit reports [#497](https://github.com/openshift/cluster-image-registry-operator/pull/497)
* [Bug 1808426](https://bugzilla.redhat.com/show_bug.cgi?id=1808426): backport removing kubesystem configmap watch [#475](https://github.com/openshift/cluster-image-registry-operator/pull/475)
* [Bug 1808431](https://bugzilla.redhat.com/show_bug.cgi?id=1808431): tolerate all NoSchedule taints [#472](https://github.com/openshift/cluster-image-registry-operator/pull/472)
* [Bug 1796584](https://bugzilla.redhat.com/show_bug.cgi?id=1796584): aws-sdk-go v1.28.2 [#455](https://github.com/openshift/cluster-image-registry-operator/pull/455)
* [Bug 1785302](https://bugzilla.redhat.com/show_bug.cgi?id=1785302): Using types from openshift/api repository. [#424](https://github.com/openshift/cluster-image-registry-operator/pull/424)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#454](https://github.com/openshift/cluster-image-registry-operator/pull/454)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/1967d568e1fa6f2919ce964b69d441f18e64b8b4...15be154394b94dfa8eebe80b7af4493c3eef9efd)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9)

* [Bug 1800338](https://bugzilla.redhat.com/show_bug.cgi?id=1800338): [release-4.3] update to setDefaultPublishingStrategy() to add IBMCloudPlatform [#362](https://github.com/openshift/cluster-ingress-operator/pull/362)
* [Bug 1800338](https://bugzilla.redhat.com/show_bug.cgi?id=1800338): [release-4.3] add LB changes for IBM Cloud Platform [#355](https://github.com/openshift/cluster-ingress-operator/pull/355)
* [Bug 1788711](https://bugzilla.redhat.com/show_bug.cgi?id=1788711): [release-4.3] publish a router-ca that can be used to verify routes in golang clients [#336](https://github.com/openshift/cluster-ingress-operator/pull/336)
* [Bug 1798789](https://bugzilla.redhat.com/show_bug.cgi?id=1798789): Only initialize DNS providers if DNS config is present [#356](https://github.com/openshift/cluster-ingress-operator/pull/356)
* [Bug 1789124](https://bugzilla.redhat.com/show_bug.cgi?id=1789124): Configure router for IPv6 [#352](https://github.com/openshift/cluster-ingress-operator/pull/352)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/db62fb9e2656ba92059beeef3241b191e062d9a2...d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/8ea3f3acf87bf1a1b9e616067d4a017fcc3619a0)

* [Bug 1802161](https://bugzilla.redhat.com/show_bug.cgi?id=1802161): `regenerate-certificates` command blocked by error `illegal base64 data at input byte 3` [#765](https://github.com/openshift/cluster-kube-apiserver-operator/pull/765)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#825](https://github.com/openshift/cluster-kube-apiserver-operator/pull/825)
* [Bug 1827337](https://bugzilla.redhat.com/show_bug.cgi?id=1827337): Remove stale condition DefaultSecurityContextConstraintsUpgradeable [#838](https://github.com/openshift/cluster-kube-apiserver-operator/pull/838)
* [Bug 1820542](https://bugzilla.redhat.com/show_bug.cgi?id=1820542): certrotationcontroller: fix typo calling wrong internal LB func [#814](https://github.com/openshift/cluster-kube-apiserver-operator/pull/814)
* [Bug 1823921](https://bugzilla.redhat.com/show_bug.cgi?id=1823921): Revert SCC Upgradeable False [#830](https://github.com/openshift/cluster-kube-apiserver-operator/pull/830)
* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Components using globs in Dockerfile COPY commands may break on OCP 4 [#816](https://github.com/openshift/cluster-kube-apiserver-operator/pull/816)
* [Bug 1795617](https://bugzilla.redhat.com/show_bug.cgi?id=1795617): Remove entirely deprecated alerts [#741](https://github.com/openshift/cluster-kube-apiserver-operator/pull/741)
* [Bug 1808602](https://bugzilla.redhat.com/show_bug.cgi?id=1808602): kube-apiserver-operator should set upgradeable=false if default SCC mutates [#784](https://github.com/openshift/cluster-kube-apiserver-operator/pull/784)
* [Bug 1806634](https://bugzilla.redhat.com/show_bug.cgi?id=1806634): kube-apiserver should never use the bootstrap etcd member [#781](https://github.com/openshift/cluster-kube-apiserver-operator/pull/781)
* [Bug 1805865](https://bugzilla.redhat.com/show_bug.cgi?id=1805865): [release-4.3] baremetal: Explicitly advertise the host IP chosen by kubelet [#777](https://github.com/openshift/cluster-kube-apiserver-operator/pull/777)
* [Bug 1795701](https://bugzilla.redhat.com/show_bug.cgi?id=1795701): change the next empty encryption key's name for encryption e2e test [#717](https://github.com/openshift/cluster-kube-apiserver-operator/pull/717)
* [Bug 1789421](https://bugzilla.redhat.com/show_bug.cgi?id=1789421): [release-4.3] If the cluster is single-stack IPv6, bind to :: rather than 0.0.0.0. [#710](https://github.com/openshift/cluster-kube-apiserver-operator/pull/710)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/62da7e6b5d19114d32f5cf905a590edb9f4def0b...8ea3f3acf87bf1a1b9e616067d4a017fcc3619a0)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/84c0ab6b70c52859d81fb6bb66740fcac0b171dc)

* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#395](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/395)
* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Remove wildcard COPY form Dockerfile [#371](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/371)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/7c430e3e821ec90916a205b71f5dfc6daf919ce2...84c0ab6b70c52859d81fb6bb66740fcac0b171dc)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/976f6dc09a024d252dd78fdd99d645f244ab28d3)

* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#239](https://github.com/openshift/cluster-kube-scheduler-operator/pull/239)
* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Fix dockerfile [#220](https://github.com/openshift/cluster-kube-scheduler-operator/pull/220)
* [Bug 1803742](https://bugzilla.redhat.com/show_bug.cgi?id=1803742): [release-4.3] Improve node controller condition message [#210](https://github.com/openshift/cluster-kube-scheduler-operator/pull/210)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/da32b6a109a7729678c889935ff310809263077a...976f6dc09a024d252dd78fdd99d645f244ab28d3)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/dd3147d9b2d1e54a2050d51390d1eca62d6189fc)

* [Bug 1815578](https://bugzilla.redhat.com/show_bug.cgi?id=1815578): ROKS - remove ClusterMachineApproverDown prometheus rule [#66](https://github.com/openshift/cluster-machine-approver/pull/66)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/86bdd875cd12c8598a5a7790bc1e7c6e348476c4...dd3147d9b2d1e54a2050d51390d1eca62d6189fc)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/08a7ef41dbd19d25ebdbadd257b4f5de4dbd9fb7)

* [Bug 1812382](https://bugzilla.redhat.com/show_bug.cgi?id=1812382): Enable discovery of Podmonitors Custom Resource across namespaces [#694](https://github.com/openshift/cluster-monitoring-operator/pull/694)
* [Bug 1807141](https://bugzilla.redhat.com/show_bug.cgi?id=1807141): jsonnet/rules.jsonnet: Add MultipleContainersOOMKilled alert [#692](https://github.com/openshift/cluster-monitoring-operator/pull/692)
* [Bug 1814736](https://bugzilla.redhat.com/show_bug.cgi?id=1814736): Exclude Kubernetes control plane rules when running on IBM Cloud [#713](https://github.com/openshift/cluster-monitoring-operator/pull/713)
* [Bug 1791194](https://bugzilla.redhat.com/show_bug.cgi?id=1791194): Removing KubeVersionMismatch alert [#612](https://github.com/openshift/cluster-monitoring-operator/pull/612)
* [Bug 1807775](https://bugzilla.redhat.com/show_bug.cgi?id=1807775): Backport setting resource requests [#681](https://github.com/openshift/cluster-monitoring-operator/pull/681)
* [Bug 1805317](https://bugzilla.redhat.com/show_bug.cgi?id=1805317): pkg/manifests/telemeter: bump size limit to 5mb [#667](https://github.com/openshift/cluster-monitoring-operator/pull/667)
* [Bug 1805116](https://bugzilla.redhat.com/show_bug.cgi?id=1805116): Use aggregated up metrics [#664](https://github.com/openshift/cluster-monitoring-operator/pull/664)
* [Bug 1799540](https://bugzilla.redhat.com/show_bug.cgi?id=1799540): Node exporter init collectors must be privileged [#646](https://github.com/openshift/cluster-monitoring-operator/pull/646)
* [Bug 1791200](https://bugzilla.redhat.com/show_bug.cgi?id=1791200): Add alert for no routes configured in alertmanager [#613](https://github.com/openshift/cluster-monitoring-operator/pull/613)
* [Bug 1800513](https://bugzilla.redhat.com/show_bug.cgi?id=1800513): assets,jsonnet,pkg: Fix generate check [#649](https://github.com/openshift/cluster-monitoring-operator/pull/649)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/716a1868caa4c5800e35500f53667b12af9d66d9...08a7ef41dbd19d25ebdbadd257b4f5de4dbd9fb7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/78f18d18c5e352cdc3af77ece430e8fb45e1699f)

* [Bug 1807670](https://bugzilla.redhat.com/show_bug.cgi?id=1807670): Fixes to reliably save/restore flows [#626](https://github.com/openshift/cluster-network-operator/pull/626)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Don't override containernetworking binaries in SDN and Kuryr [#634](https://github.com/openshift/cluster-network-operator/pull/634)
* [Bug 1834858](https://bugzilla.redhat.com/show_bug.cgi?id=1834858): Kuryr: Remove old SG rules on upgrade [#637](https://github.com/openshift/cluster-network-operator/pull/637)
* [Bug 1832311](https://bugzilla.redhat.com/show_bug.cgi?id=1832311): Kuryr: Tighten security groups [#621](https://github.com/openshift/cluster-network-operator/pull/621)
* [Bug 1821294](https://bugzilla.redhat.com/show_bug.cgi?id=1821294): Normalize CPU requests on nodes [#587](https://github.com/openshift/cluster-network-operator/pull/587)
* [Bug 1814352](https://bugzilla.redhat.com/show_bug.cgi?id=1814352): Delete admission controller if double listeners is supported [#599](https://github.com/openshift/cluster-network-operator/pull/599)
* [Bug 1824866](https://bugzilla.redhat.com/show_bug.cgi?id=1824866): [release-4.3] Fix dhcp daemon api version [#598](https://github.com/openshift/cluster-network-operator/pull/598)
* [Bug 1775838](https://bugzilla.redhat.com/show_bug.cgi?id=1775838): Back-port, OVNKubernetes: introduce OVS anti-selector [#492](https://github.com/openshift/cluster-network-operator/pull/492)
* [Bug 1821166](https://bugzilla.redhat.com/show_bug.cgi?id=1821166): [Back-port 4.3] Remove logfile from ovnkube configmap [#567](https://github.com/openshift/cluster-network-operator/pull/567)
* [Bug 1808997](https://bugzilla.redhat.com/show_bug.cgi?id=1808997): Ensure no API LB recreation happens upon Octavia upgrade [#517](https://github.com/openshift/cluster-network-operator/pull/517)
* [Bug 1812037](https://bugzilla.redhat.com/show_bug.cgi?id=1812037): Ensure correct Octavia API version is retrieved [#534](https://github.com/openshift/cluster-network-operator/pull/534)
* [Bug 1815457](https://bugzilla.redhat.com/show_bug.cgi?id=1815457): Ensure removal of not rendered resources upon CNO recreation [#547](https://github.com/openshift/cluster-network-operator/pull/547)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): Reintroduce whereabouts & routeoverride in 4.3.z [#526](https://github.com/openshift/cluster-network-operator/pull/526)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): Revert inclusion of route-override/whereabouts in 4.3 [#519](https://github.com/openshift/cluster-network-operator/pull/519)
* [Bug 1807062](https://bugzilla.redhat.com/show_bug.cgi?id=1807062): [Backport 4.3.z] Adds route-override-cni and whereabouts for secondary network routing and IPAM [#496](https://github.com/openshift/cluster-network-operator/pull/496)
* [Bug 1798142](https://bugzilla.redhat.com/show_bug.cgi?id=1798142): Add preserveUnknownFields tag in the CRDs [#501](https://github.com/openshift/cluster-network-operator/pull/501)
* [Bug 1805726](https://bugzilla.redhat.com/show_bug.cgi?id=1805726): Add MachineNetworks to proxy.status.noProxy [#504](https://github.com/openshift/cluster-network-operator/pull/504)
* [Bug 1805444](https://bugzilla.redhat.com/show_bug.cgi?id=1805444): Uses the readiness indicator file option for Multus [backport 4.3] [#485](https://github.com/openshift/cluster-network-operator/pull/485)
* [Bug 1806009](https://bugzilla.redhat.com/show_bug.cgi?id=1806009): Backport ovn-kubernetes-related changes to 4.3 [#483](https://github.com/openshift/cluster-network-operator/pull/483)
* [Bug 1791278](https://bugzilla.redhat.com/show_bug.cgi?id=1791278): Stop deploying kuryr-admission-controller if double listeners supported # [#449](https://github.com/openshift/cluster-network-operator/pull/449)
* [Bug 1779863](https://bugzilla.redhat.com/show_bug.cgi?id=1779863): backport ovn-controller rbac fix to 4.3 [#470](https://github.com/openshift/cluster-network-operator/pull/470)
* [Bug 1801802](https://bugzilla.redhat.com/show_bug.cgi?id=1801802): [4.3] Put brackets around IPv6 addresses passed to ovn-ctl [#471](https://github.com/openshift/cluster-network-operator/pull/471)
* [Bug 1792309](https://bugzilla.redhat.com/show_bug.cgi?id=1792309): IPv6 backports for 4.3 [#450](https://github.com/openshift/cluster-network-operator/pull/450)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#463](https://github.com/openshift/cluster-network-operator/pull/463)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5b7f073de0f3ced9e9b83bbaa7cab0ade8b7d01d...78f18d18c5e352cdc3af77ece430e8fb45e1699f)


### [cluster-node-tuned](https://github.com/openshift/openshift-tuned/tree/8705571c5afaeac1953376e9eef734027267066b)

* [Bug 1825007](https://bugzilla.redhat.com/show_bug.cgi?id=1825007): Fix tuned reload behaviour on SIGHUP for invalid tuned profiles. [#38](https://github.com/openshift/openshift-tuned/pull/38)
* [Full changelog](https://github.com/openshift/openshift-tuned/compare/4de824748a0fa2dbf4b10f82a32e3784372bce54...8705571c5afaeac1953376e9eef734027267066b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eaacf04c6cc9e83ad4978c108aabb395d5a771ec)

* [Bug 1826167](https://bugzilla.redhat.com/show_bug.cgi?id=1826167): Mount host's /etc/sysctl.{conf,d/} to enable sysctl override from the host. [#128](https://github.com/openshift/cluster-node-tuning-operator/pull/128)
* [Bug 1795665](https://bugzilla.redhat.com/show_bug.cgi?id=1795665): Do not set owner references on tuned ServiceAccount [#108](https://github.com/openshift/cluster-node-tuning-operator/pull/108)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/769ba5c3cf596ccb0b17e0e47b0d413850798b5c...eaacf04c6cc9e83ad4978c108aabb395d5a771ec)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/18125a2f4cd2462c88123a906814385d82b50cb7)

* [Bug 1837353](https://bugzilla.redhat.com/show_bug.cgi?id=1837353): encryption: don't degrade when daemonset is not found [#365](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/365)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#351](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/351)
* [Bug 1809532](https://bugzilla.redhat.com/show_bug.cgi?id=1809532): waits for requestheader-client-ca-file in extension-apiserver-authentication  before rolling out a new version [#326](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/326)
* [Bug 1805388](https://bugzilla.redhat.com/show_bug.cgi?id=1805388): Cleanup 4.4 deployment on downgrade to 4.3 [#314](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/314)
* [Bug 1795693](https://bugzilla.redhat.com/show_bug.cgi?id=1795693): change the next empty encryption key's name for encryption e2e test [#298](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/298)
* [Bug 1790523](https://bugzilla.redhat.com/show_bug.cgi?id=1790523): [release-4.3] Specify "bindNetwork: tcp" so apiserver will work on IPv6 single-stack [#296](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/296)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9416571f9de98516e9bb13e3d9276259adf99aff...18125a2f4cd2462c88123a906814385d82b50cb7)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/e28078046145e1254db93f832aab84b26decf53f)

* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): ensure s390/ppc64le platforms bootstrap as removed following upgrade [#285](https://github.com/openshift/cluster-samples-operator/pull/285)
* [Bug 1841996](https://bugzilla.redhat.com/show_bug.cgi?id=1841996): correctly handle removed templates watch events as part of an upgrade [#280](https://github.com/openshift/cluster-samples-operator/pull/280)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): avoid listing file system content for unsupported architures [#273](https://github.com/openshift/cluster-samples-operator/pull/273)
* [Bug 1829083](https://bugzilla.redhat.com/show_bug.cgi?id=1829083): copy install pull secret when boostrapped as removed [#267](https://github.com/openshift/cluster-samples-operator/pull/267)
* [Bug 1814396](https://bugzilla.redhat.com/show_bug.cgi?id=1814396): abort metrics in general if removed/unmanaged [#251](https://github.com/openshift/cluster-samples-operator/pull/251)
* [Bug 1811206](https://bugzilla.redhat.com/show_bug.cgi?id=1811206): purge removed imagestreams as a part of upgrade from progessing/impor… [#243](https://github.com/openshift/cluster-samples-operator/pull/243)
* [Bug 1812554](https://bugzilla.redhat.com/show_bug.cgi?id=1812554): manifests: add openshift/oauth-proxy:v4.4 image [#247](https://github.com/openshift/cluster-samples-operator/pull/247)
* [Bug 1805815](https://bugzilla.redhat.com/show_bug.cgi?id=1805815): no longer gate removed processing when imagestreams in progress [#232](https://github.com/openshift/cluster-samples-operator/pull/232)
* [Bug 1784317](https://bugzilla.redhat.com/show_bug.cgi?id=1784317): properly handle removal of samplesRegistry; clean up importError mess… [#219](https://github.com/openshift/cluster-samples-operator/pull/219)
* [Bug 1798573](https://bugzilla.redhat.com/show_bug.cgi?id=1798573): bootstrap as removed for if tbr inaccessible after 3 minutes [#218](https://github.com/openshift/cluster-samples-operator/pull/218)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/8ceee7276335336d625594f399b2ba116d6fd9d4...e28078046145e1254db93f832aab84b26decf53f)


### [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator/tree/2523919a04d428bfa82602f5f6cc50ca38eb48c0)

* [Bug 1813488](https://bugzilla.redhat.com/show_bug.cgi?id=1813488): set Upgradeable to true [#84](https://github.com/openshift/cluster-svcat-apiserver-operator/pull/84)
* [Full changelog](https://github.com/openshift/cluster-svcat-apiserver-operator/compare/61c2f1d39a8c876aa5fd7ebc14ffa9b4e1360a5f...2523919a04d428bfa82602f5f6cc50ca38eb48c0)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/86b9bdba55a85e2e071603916db4c43b481e7588)

* [Bug 1820231](https://bugzilla.redhat.com/show_bug.cgi?id=1820231): loosen upgradeable condition to allow z-level upgrades [#315](https://github.com/openshift/cluster-version-operator/pull/315)
* [Bug 1783054](https://bugzilla.redhat.com/show_bug.cgi?id=1783054): Add signature verification in airgapped environments [#340](https://github.com/openshift/cluster-version-operator/pull/340)
* [Bug 1802331](https://bugzilla.redhat.com/show_bug.cgi?id=1802331): metrics: include upi installs in cluster_installer [#321](https://github.com/openshift/cluster-version-operator/pull/321)
* [Bug 1802710](https://bugzilla.redhat.com/show_bug.cgi?id=1802710): lib/resourcemerge: remove ports which are no longer required [#323](https://github.com/openshift/cluster-version-operator/pull/323)
* [Bug 1798049](https://bugzilla.redhat.com/show_bug.cgi?id=1798049): lib/resourcemerge/core: Fix panic on container/port removal [#313](https://github.com/openshift/cluster-version-operator/pull/313)
* [Bug 1792004](https://bugzilla.redhat.com/show_bug.cgi?id=1792004): lib/resourcemerge/core: Clear livenessProbe and readinessProbe if nil in required [#299](https://github.com/openshift/cluster-version-operator/pull/299)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/beee410fc8780e5613c09fc2690716b711747041...86b9bdba55a85e2e071603916db4c43b481e7588)


### [console](https://github.com/openshift/console/tree/88a9bc5de1655164fdaba92281f97b12f089e609)

* [Bug 1829046](https://bugzilla.redhat.com/show_bug.cgi?id=1829046): removes techpreview badge from serverless [#5220](https://github.com/openshift/console/pull/5220)
* [Bug 1840765](https://bugzilla.redhat.com/show_bug.cgi?id=1840765): Fixed legends on data consumption card [#5600](https://github.com/openshift/console/pull/5600)
* [Bug 1829276](https://bugzilla.redhat.com/show_bug.cgi?id=1829276): fix(prun): Rerun cancelled runs | release-4.3 [#5228](https://github.com/openshift/console/pull/5228)
* [Bug 1839036](https://bugzilla.redhat.com/show_bug.cgi?id=1839036): handle embedded pipeline spec in pipelinerun scenario [#5536](https://github.com/openshift/console/pull/5536)
* [Bug 1819289](https://bugzilla.redhat.com/show_bug.cgi?id=1819289): Fix navigation separator background colour [#4864](https://github.com/openshift/console/pull/4864)
* [Bug 1821647](https://bugzilla.redhat.com/show_bug.cgi?id=1821647): Correctly handle Unicode characters in pod terminal [#5198](https://github.com/openshift/console/pull/5198)
* [Bug 1804708](https://bugzilla.redhat.com/show_bug.cgi?id=1804708): only show "Create Project" option in project dropdown i… [#4369](https://github.com/openshift/console/pull/4369)
* [Bug 1821852](https://bugzilla.redhat.com/show_bug.cgi?id=1821852): Hide `OpenShift Cluster Manager` when branding is `azure` [#4957](https://github.com/openshift/console/pull/4957)
* [Bug 1798130](https://bugzilla.redhat.com/show_bug.cgi?id=1798130): add error boundary around OLM descriptors [#4241](https://github.com/openshift/console/pull/4241)
* [Bug 1823726](https://bugzilla.redhat.com/show_bug.cgi?id=1823726): Decode Noobaa secret details before passing to SecretValue in OBC page [#4993](https://github.com/openshift/console/pull/4993)
* [Bug 1818980](https://bugzilla.redhat.com/show_bug.cgi?id=1818980): Specify ts-loader configFile in webpack.config.ts [#4859](https://github.com/openshift/console/pull/4859)
* [Bug 1813185](https://bugzilla.redhat.com/show_bug.cgi?id=1813185): Add stable-4.4, fast-4.4 and candidate-4.4 channel for 4.4 release [#4727](https://github.com/openshift/console/pull/4727)
* [Bug 1819941](https://bugzilla.redhat.com/show_bug.cgi?id=1819941): Fix PackageManifest access review [#4902](https://github.com/openshift/console/pull/4902)
* [Bug 1800327](https://bugzilla.redhat.com/show_bug.cgi?id=1800327): fix runtime error creating PVC with no storage class [#4896](https://github.com/openshift/console/pull/4896)
* [Bug 1819603](https://bugzilla.redhat.com/show_bug.cgi?id=1819603): Limit Bucket Class search to storage namespace in OBC creation page [#4869](https://github.com/openshift/console/pull/4869)
* [Bug 1814075](https://bugzilla.redhat.com/show_bug.cgi?id=1814075): Mount OCS form when csv is available [#4746](https://github.com/openshift/console/pull/4746)
* [Bug 1813933](https://bugzilla.redhat.com/show_bug.cgi?id=1813933): Correct the selection nodes text [#4739](https://github.com/openshift/console/pull/4739)
* [Bug 1792847](https://bugzilla.redhat.com/show_bug.cgi?id=1792847): Kubevirt vm real node name [#4503](https://github.com/openshift/console/pull/4503)
* [Bug 1811520](https://bugzilla.redhat.com/show_bug.cgi?id=1811520): CreateContainerConfigError when obc is attached to deployment [#4690](https://github.com/openshift/console/pull/4690)
* [Bug 1811525](https://bugzilla.redhat.com/show_bug.cgi?id=1811525): Add Pipeline Resources on Pipelines Resources tab don't work [#4473](https://github.com/openshift/console/pull/4473)
* [Bug 1808968](https://bugzilla.redhat.com/show_bug.cgi?id=1808968): fixes sbr to work with knative services [#4578](https://github.com/openshift/console/pull/4578)
* [Version 4.3] Bug 1807291: Fix sort criteria for capacity for storage [#4560](https://github.com/openshift/console/pull/4560)
* [Bug 1808436](https://bugzilla.redhat.com/show_bug.cgi?id=1808436): Make dev-console project selector sticky again [#4557](https://github.com/openshift/console/pull/4557)
* [Bug 1808282](https://bugzilla.redhat.com/show_bug.cgi?id=1808282): fixes issue with new imageStream getting created for knative in case of internal image registry [#4546](https://github.com/openshift/console/pull/4546)
* [Bug 1794009](https://bugzilla.redhat.com/show_bug.cgi?id=1794009): Incorrect memory loads from edited vm template [#4625](https://github.com/openshift/console/pull/4625)
* [Bug 1796186](https://bugzilla.redhat.com/show_bug.cgi?id=1796186): Add pipeline for resource and runtime [#4509](https://github.com/openshift/console/pull/4509)
* [Bug 1806706](https://bugzilla.redhat.com/show_bug.cgi?id=1806706): add namespace level imagestream fetching [#4461](https://github.com/openshift/console/pull/4461)
* [Bug 1803935](https://bugzilla.redhat.com/show_bug.cgi?id=1803935): Fix bug where installed operators list status is missing or incorrect [#4343](https://github.com/openshift/console/pull/4343)
* [Bug 1780657](https://bugzilla.redhat.com/show_bug.cgi?id=1780657): Extend dashboard grey background to full height of view… [#4210](https://github.com/openshift/console/pull/4210)
* [Bug 1788246](https://bugzilla.redhat.com/show_bug.cgi?id=1788246): Fix "requires approval" install plan link [#4170](https://github.com/openshift/console/pull/4170)
* [Bug 1796461](https://bugzilla.redhat.com/show_bug.cgi?id=1796461): Fix bug where resource filter is broken for GroupVersion… [#4126](https://github.com/openshift/console/pull/4126)
* [Bug 1786272](https://bugzilla.redhat.com/show_bug.cgi?id=1786272): update the number of pods in daemon set with correct status prop [#4340](https://github.com/openshift/console/pull/4340)
* [Bug 1801660](https://bugzilla.redhat.com/show_bug.cgi?id=1801660): Property array should render its properties on schema page [#4281](https://github.com/openshift/console/pull/4281)
* [Bug 1800320](https://bugzilla.redhat.com/show_bug.cgi?id=1800320): Set default pullSecret [#4244](https://github.com/openshift/console/pull/4244)
* [Bug 1800331](https://bugzilla.redhat.com/show_bug.cgi?id=1800331): include `system:authenticated` when impersonating groups [#4238](https://github.com/openshift/console/pull/4238)
* [Bug 1800615](https://bugzilla.redhat.com/show_bug.cgi?id=1800615): Serverless apiVersion from v1beta1 to v1 [#4264](https://github.com/openshift/console/pull/4264)
* [Bug 1803955](https://bugzilla.redhat.com/show_bug.cgi?id=1803955): Fix "environment" typo on "Add to Secret" page [#4344](https://github.com/openshift/console/pull/4344)
* [Bug 1791346](https://bugzilla.redhat.com/show_bug.cgi?id=1791346): Error occurs while removing the second CD-ROM (4.3) [#4058](https://github.com/openshift/console/pull/4058)
* [Bug 1804077](https://bugzilla.redhat.com/show_bug.cgi?id=1804077): fixes issue with external image registry not working for tags [#4347](https://github.com/openshift/console/pull/4347)
* [Bug 1782558](https://bugzilla.redhat.com/show_bug.cgi?id=1782558): Fix edit link for cluster-scoped operand [#3764](https://github.com/openshift/console/pull/3764)
* [Bug 1801607](https://bugzilla.redhat.com/show_bug.cgi?id=1801607): updates apiGroup for knativeServing resource [#4277](https://github.com/openshift/console/pull/4277)
* [Bug 1794925](https://bugzilla.redhat.com/show_bug.cgi?id=1794925): correctly show schema information for all core resources [#4067](https://github.com/openshift/console/pull/4067)
* [Bug 1783312](https://bugzilla.redhat.com/show_bug.cgi?id=1783312): Replace multiple occurrences of log link variable expressions [#3778](https://github.com/openshift/console/pull/3778)
* [Bug 1789150](https://bugzilla.redhat.com/show_bug.cgi?id=1789150): support snippets in edit mode, not just create [#3902](https://github.com/openshift/console/pull/3902)
* [Bug 1788201](https://bugzilla.redhat.com/show_bug.cgi?id=1788201): Remove serviceAccount in favour of serviceAccountName [#3869](https://github.com/openshift/console/pull/3869)
* [Bug 1790750](https://bugzilla.redhat.com/show_bug.cgi?id=1790750): Fix off by one bug in metrics rows count [#3864](https://github.com/openshift/console/pull/3864)
* [Bug 1785010](https://bugzilla.redhat.com/show_bug.cgi?id=1785010): Added legacy plural url field in the OB/C models [#3852](https://github.com/openshift/console/pull/3852)
* [Bug 1797501](https://bugzilla.redhat.com/show_bug.cgi?id=1797501): Adds flexible OSD Sizes in the install flow [#4149](https://github.com/openshift/console/pull/4149)
* [Bug 1792507](https://bugzilla.redhat.com/show_bug.cgi?id=1792507): Add missing candidate-4.3 channel [#4093](https://github.com/openshift/console/pull/4093)
* [Bug 1792419](https://bugzilla.redhat.com/show_bug.cgi?id=1792419): fix(pipeline-tasks): Cancelled tasks [#3993](https://github.com/openshift/console/pull/3993)
* [Bug 1791101](https://bugzilla.redhat.com/show_bug.cgi?id=1791101): Make subscriptions & catalog sources optional so normal users can see installed operators [#3963](https://github.com/openshift/console/pull/3963)
* [Full changelog](https://github.com/openshift/console/compare/a7b51a5573cf36a0d0a88aa30ee0deb8e7c0da10...88a9bc5de1655164fdaba92281f97b12f089e609)


### [console-operator](https://github.com/openshift/console-operator/tree/730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)

* [Bug 1836939](https://bugzilla.redhat.com/show_bug.cgi?id=1836939): Bump godeps to get fix from library-go#799 [#430](https://github.com/openshift/console-operator/pull/430)
* [Bug 1813302](https://bugzilla.redhat.com/show_bug.cgi?id=1813302): Update oc clidownload cr to indicate that certain builds are unsupported [#409](https://github.com/openshift/console-operator/pull/409)
* [Bug 1785492](https://bugzilla.redhat.com/show_bug.cgi?id=1785492): fix RBAC for ConsoleYAMLSample [#372](https://github.com/openshift/console-operator/pull/372)
* [Bug 1794548](https://bugzilla.redhat.com/show_bug.cgi?id=1794548): IPv6 support to console operator & console [openshift-4.3.z] [#376](https://github.com/openshift/console-operator/pull/376)
* [Full changelog](https://github.com/openshift/console-operator/compare/cb47e810bee8c56f0738f0723c98cf3192ea7736...730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)


### [coredns](https://github.com/openshift/coredns/tree/052209affb1fe85bdd87b37e2cf9a6fb98585e91)

* [Bug 1801343](https://bugzilla.redhat.com/show_bug.cgi?id=1801343): Rebase to upstream 1.6.6 [#23](https://github.com/openshift/coredns/pull/23)
* [Full changelog](https://github.com/openshift/coredns/compare/51569b24b4a92d6d8df2020c2e8e2866c5e78266...052209affb1fe85bdd87b37e2cf9a6fb98585e91)


### [docker-builder](https://github.com/openshift/builder/tree/fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)

* [Bug 1832975](https://bugzilla.redhat.com/show_bug.cgi?id=1832975): use of ARG step in Dockerfile causes panic in imagebuilder [#152](https://github.com/openshift/builder/pull/152)
* [Bug 1821861](https://bugzilla.redhat.com/show_bug.cgi?id=1821861): manage-dockerfile: use the original form of ENV/LABEL [#149](https://github.com/openshift/builder/pull/149)
* [Bug 1802894](https://bugzilla.redhat.com/show_bug.cgi?id=1802894): bump(github.com/mtrmac/gpgme): v0.1.2 [#136](https://github.com/openshift/builder/pull/136)
* [Bug 1790525](https://bugzilla.redhat.com/show_bug.cgi?id=1790525): bump github.com/containers/{storage,image,buildah} [#127](https://github.com/openshift/builder/pull/127)
* [Full changelog](https://github.com/openshift/builder/compare/50c6e17276dfc7d0acd9d943dac340fb4fa3ff24...fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)


### [docker-registry](https://github.com/openshift/image-registry/tree/7511ca65e07b586464e5ec2e9efde67bfa48c3e2)

* [Bug 1804494](https://bugzilla.redhat.com/show_bug.cgi?id=1804494): Dockerfile: Clear yum cache after install [#223](https://github.com/openshift/image-registry/pull/223)
* [Bug 1796584](https://bugzilla.redhat.com/show_bug.cgi?id=1796584): aws-sdk-go v1.28.2 [#218](https://github.com/openshift/image-registry/pull/218)
* [Full changelog](https://github.com/openshift/image-registry/compare/8b12e0a3023dd39e59657984ba50c92a74f94dd5...7511ca65e07b586464e5ec2e9efde67bfa48c3e2)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/fbb2ed70b5db8b81abb68bb560f746751be306f7)

* [Bug 1837124](https://bugzilla.redhat.com/show_bug.cgi?id=1837124): Add the machine's name as a known NodeInternalDNS [#92](https://github.com/openshift/cluster-api-provider-gcp/pull/92)
* [Bug 1800315](https://bugzilla.redhat.com/show_bug.cgi?id=1800315): [release-4.3] Drop openshift/cluster-api in favour of openshift/machine-api-operator to get controller's changes [#75](https://github.com/openshift/cluster-api-provider-gcp/pull/75)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/537d68ec0751a812755779f31d28155cc2afc454...fbb2ed70b5db8b81abb68bb560f746751be306f7)


### [hyperkube, tests](https://github.com/openshift/origin/tree/5e2117ad2e842de0985d3a6fb11157389647333e)

* [Bug 1822487](https://bugzilla.redhat.com/show_bug.cgi?id=1822487): UPSTREAM: 89794: Clean up event messages for errors [#25049](https://github.com/openshift/origin/pull/25049)
* [Bug 1830093](https://bugzilla.redhat.com/show_bug.cgi?id=1830093): provides a temporal fix to improve CRD publishing e2e tests in an HA setup [#24940](https://github.com/openshift/origin/pull/24940)
* [Bug 1829959](https://bugzilla.redhat.com/show_bug.cgi?id=1829959): [release-4.3] Introduce IBMCloud provider, skip/fix tests [#24829](https://github.com/openshift/origin/pull/24829)
* [Bug 1835948](https://bugzilla.redhat.com/show_bug.cgi?id=1835948): unskip template extended tests [#24983](https://github.com/openshift/origin/pull/24983)
* [Bug 1822680](https://bugzilla.redhat.com/show_bug.cgi?id=1822680): UPSTREAM: 88424: Respect ignore-volume-az option in admission plugin [#24855](https://github.com/openshift/origin/pull/24855)
* [Bug 1798461](https://bugzilla.redhat.com/show_bug.cgi?id=1798461): makes unavailableGauge metric to always reflect the current state of a service [#24501](https://github.com/openshift/origin/pull/24501)
* [Bug 1830130](https://bugzilla.redhat.com/show_bug.cgi?id=1830130): Fix nil reference when accessing un-migrated platform status [#24810](https://github.com/openshift/origin/pull/24810)
* [Bug 1813847](https://bugzilla.redhat.com/show_bug.cgi?id=1813847): fixes configmap "extension-apiserver-authentication" not found [#24699](https://github.com/openshift/origin/pull/24699)
* [Bug 1822955](https://bugzilla.redhat.com/show_bug.cgi?id=1822955): UPSTREAM: 88734: Work-around for missing metrics on CRI-O exited containers [#24860](https://github.com/openshift/origin/pull/24860)
* [Bug 1821341](https://bugzilla.redhat.com/show_bug.cgi?id=1821341): UPSTREAM: 88440: Report deleted pod status correctly [#24841](https://github.com/openshift/origin/pull/24841)
* [Bug 1820266](https://bugzilla.redhat.com/show_bug.cgi?id=1820266): use rbac vs direct scc edit for s2i root bld test [#24821](https://github.com/openshift/origin/pull/24821)
* [Bug 1817618](https://bugzilla.redhat.com/show_bug.cgi?id=1817618): make s2i-dropcaps more reliable by not depending on a yum install to [#24784](https://github.com/openshift/origin/pull/24784)
* [Bug 1817040](https://bugzilla.redhat.com/show_bug.cgi?id=1817040): [4.3] UPSTREAM: 88507: Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs [#24763](https://github.com/openshift/origin/pull/24763)
* [Bug 1816408](https://bugzilla.redhat.com/show_bug.cgi?id=1816408): UPSTREAM: 87913: Add code to fix kubelet/metrics memory issue [#24758](https://github.com/openshift/origin/pull/24758)
* [Bug 1815944](https://bugzilla.redhat.com/show_bug.cgi?id=1815944): Pick up Ginkgo test performance fix to reduce e2e CPU usage [#24746](https://github.com/openshift/origin/pull/24746)
* [Bug 1806408](https://bugzilla.redhat.com/show_bug.cgi?id=1806408): Ensure upgrade tests verify application disruption [#24726](https://github.com/openshift/origin/pull/24726)
* [Bug 1808548](https://bugzilla.redhat.com/show_bug.cgi?id=1808548): UPSTREAM: 88146: remove duplicate pv delete commands [#24624](https://github.com/openshift/origin/pull/24624)
* [Bug 1813411](https://bugzilla.redhat.com/show_bug.cgi?id=1813411): UPSTREAM: 85912: Fixed bug in TopologyManager with SingleNUMANode Policy [#24688](https://github.com/openshift/origin/pull/24688)
* [Bug 1811200](https://bugzilla.redhat.com/show_bug.cgi?id=1811200): /readyz should start returning failure on shutdown initiation [#24712](https://github.com/openshift/origin/pull/24712)
* [Bug 1804516](https://bugzilla.redhat.com/show_bug.cgi?id=1804516): kubelet: Make default journal format precise [#24575](https://github.com/openshift/origin/pull/24575)
* [Bug 1803077](https://bugzilla.redhat.com/show_bug.cgi?id=1803077): 4.3: UPSTREAM: 87673: blank out value for unbounded client label [#24542](https://github.com/openshift/origin/pull/24542)
* [Bug 1795629](https://bugzilla.redhat.com/show_bug.cgi?id=1795629): fix deployment config flake by using informer [#24468](https://github.com/openshift/origin/pull/24468)
* [Bug 1802262](https://bugzilla.redhat.com/show_bug.cgi?id=1802262): Loosen help tests for oc rsh [#24660](https://github.com/openshift/origin/pull/24660)
* [Bug 1808429](https://bugzilla.redhat.com/show_bug.cgi?id=1808429): UPSTREAM: 88251: Partially fix incorrect configuration of kubepods.slice unit by kubelet [#24611](https://github.com/openshift/origin/pull/24611)
* Allow oauth token + cert fallback test to be skipped when running skew tests [#24561](https://github.com/openshift/origin/pull/24561)
* [Bug 1794852](https://bugzilla.redhat.com/show_bug.cgi?id=1794852): UPSTREAM: 86191: Sync the status of static Pods [#24453](https://github.com/openshift/origin/pull/24453)
* [Bug 1793587](https://bugzilla.redhat.com/show_bug.cgi?id=1793587): sccadmission plugin incorrectly reports "no SecurityContextConstraints found in xxx" [#24428](https://github.com/openshift/origin/pull/24428)
* [Bug 1796716](https://bugzilla.redhat.com/show_bug.cgi?id=1796716): Verify services and API are available during upgrade [#24479](https://github.com/openshift/origin/pull/24479)
* [Bug 1788065](https://bugzilla.redhat.com/show_bug.cgi?id=1788065): move more image-eco db template tests from upstream repos to sample operator installed [#24407](https://github.com/openshift/origin/pull/24407)
* [Bug 1800662](https://bugzilla.redhat.com/show_bug.cgi?id=1800662): [release-4.3] test/cmd: build.sh can't reach old openshift/origin:v1.1 image [#24519](https://github.com/openshift/origin/pull/24519)
* [Bug 1791730](https://bugzilla.redhat.com/show_bug.cgi?id=1791730): 4.3 ipv6 backports [#24405](https://github.com/openshift/origin/pull/24405)
* [Bug 1788065](https://bugzilla.redhat.com/show_bug.cgi?id=1788065): pin image-eco sclorg samples usage to specific versions to shield from upstream churn wrt EOL image removals [#24406](https://github.com/openshift/origin/pull/24406)
* [Bug 1791200](https://bugzilla.redhat.com/show_bug.cgi?id=1791200): test/extended/prometheus: exclude AlertmanagerReceiversNotConfigured from checking [#24465](https://github.com/openshift/origin/pull/24465)
* [Bug 1790481](https://bugzilla.redhat.com/show_bug.cgi?id=1790481): Fix delegated auth CM perms [#24392](https://github.com/openshift/origin/pull/24392)
* [Full changelog](https://github.com/openshift/origin/compare/0aee6a89a377364a4c73ab1c67bfb4bb35600a59...5e2117ad2e842de0985d3a6fb11157389647333e)


### [insights-operator](https://github.com/openshift/insights-operator/tree/969684362631b5d7c179a575dcd527e20b235fc4)

* [Bug 1825758](https://bugzilla.redhat.com/show_bug.cgi?id=1825758): Collecting config maps [#105](https://github.com/openshift/insights-operator/pull/105)
* [Bug 1821149](https://bugzilla.redhat.com/show_bug.cgi?id=1821149): Cherry-pick release 4.3 Support for specific http proxy for the service [#91](https://github.com/openshift/insights-operator/pull/91)
* [Bug 1805919](https://bugzilla.redhat.com/show_bug.cgi?id=1805919): Insights operator does not require being in an openshift run-level to function [#80](https://github.com/openshift/insights-operator/pull/80)
* [Bug 1788112](https://bugzilla.redhat.com/show_bug.cgi?id=1788112): override node selector (4.3) [#63](https://github.com/openshift/insights-operator/pull/63)
* Backport code owners to 4.3 [#76](https://github.com/openshift/insights-operator/pull/76)
* [Full changelog](https://github.com/openshift/insights-operator/compare/6b7509911b5cf9bd292cb7f05c31a386503f58c3...969684362631b5d7c179a575dcd527e20b235fc4)


### [ironic](https://github.com/openshift/ironic-image/tree/b9e59afd03655d1694318e83d1bc7f98fc510512)

* [Bug 1810078](https://bugzilla.redhat.com/show_bug.cgi?id=1810078): Copy iPXE binaries directly to /shared at runtime [#61](https://github.com/openshift/ironic-image/pull/61)
* [Full changelog](https://github.com/openshift/ironic-image/compare/7b39640a4517f9d0077b5d712715d997c0f44746...b9e59afd03655d1694318e83d1bc7f98fc510512)


### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/9a9e4d486d5773427ff44cdd7fcb821431d80853)

* [Bug 1804278](https://bugzilla.redhat.com/show_bug.cgi?id=1804278): set hostnames and make DHCPv6 IDs predictable [#29](https://github.com/openshift/ironic-ipa-downloader/pull/29)
* [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/1b2dae6b0e7ce5739fbd23fc5b6501d8aa6e373c...9a9e4d486d5773427ff44cdd7fcb821431d80853)


### [jenkins, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26)

* [Bug 1797144](https://bugzilla.redhat.com/show_bug.cgi?id=1797144): Bump Jenkins 2.204.2 [#1036](https://github.com/openshift/jenkins/pull/1036)
* [Bug 1809924](https://bugzilla.redhat.com/show_bug.cgi?id=1809924): Bump login plugin to 1.0.23 [#1030](https://github.com/openshift/jenkins/pull/1030)
* [Bug 1793322](https://bugzilla.redhat.com/show_bug.cgi?id=1793322): [4.3] Remove use of /etc/passwd and upgrade plugins versions [#1021](https://github.com/openshift/jenkins/pull/1021)
* [Full changelog](https://github.com/openshift/jenkins/compare/8b61349b6d454fae4e4d6521a9a1a70cb98a54cb...7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/9b40b2c2bc4ec22c00b5daa18e5d69bc9619f0e0)

* [Bug 1839109](https://bugzilla.redhat.com/show_bug.cgi?id=1839109): [backport-4.3] node/vnids: Correctly handle case where NetNamespace watch is far behind [#144](https://github.com/openshift/sdn/pull/144)
* [Bug 1804745](https://bugzilla.redhat.com/show_bug.cgi?id=1804745): Revert excessive proxy logging [#109](https://github.com/openshift/sdn/pull/109)
* [Bug 1816390](https://bugzilla.redhat.com/show_bug.cgi?id=1816390): handle pod updates correctly in networkpolicy [#129](https://github.com/openshift/sdn/pull/129)
* [Bug 1820778](https://bugzilla.redhat.com/show_bug.cgi?id=1820778): fix health check in standalone kube-proxy [#126](https://github.com/openshift/sdn/pull/126)
* [Bug 1801737](https://bugzilla.redhat.com/show_bug.cgi?id=1801737): drop firewalld monitoring, add better iptables monitor [#39](https://github.com/openshift/sdn/pull/39)
* [Bug 1797042](https://bugzilla.redhat.com/show_bug.cgi?id=1797042): [4.3] Clean up stale egress IP iptables rules on startup [#100](https://github.com/openshift/sdn/pull/100)
* [Bug 1794024](https://bugzilla.redhat.com/show_bug.cgi?id=1794024): [4.3] Update deps, including informer fix [#94](https://github.com/openshift/sdn/pull/94)
* [Bug 1800324](https://bugzilla.redhat.com/show_bug.cgi?id=1800324): [4.3] Bug 1796157: Fix handling of VNID 0 with NetworkPolicy [#104](https://github.com/openshift/sdn/pull/104)
* [Bug 1790805](https://bugzilla.redhat.com/show_bug.cgi?id=1790805): Fix reinitialization of deny-all NetworkPolicy state on restart [#98](https://github.com/openshift/sdn/pull/98)
* [Full changelog](https://github.com/openshift/sdn/compare/85ab10333979853fee4e607f0d0a8d87dbf8c0b2...9b40b2c2bc4ec22c00b5daa18e5d69bc9619f0e0)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/e2b2c980e521b62c2ec85ced437a3c68d0754233)

* [Bug 1828699](https://bugzilla.redhat.com/show_bug.cgi?id=1828699): Ensure NP are enforced on SVC with different port and target port [#227](https://github.com/openshift/kuryr-kubernetes/pull/227)
* [Bug 1829840](https://bugzilla.redhat.com/show_bug.cgi?id=1829840): Ensure LB state annotation sg matches the SG on the LB [#225](https://github.com/openshift/kuryr-kubernetes/pull/225)
* [Bug 1818067](https://bugzilla.redhat.com/show_bug.cgi?id=1818067): Ensure no attempt to deleted sg rules owned by Octavia happens [#208](https://github.com/openshift/kuryr-kubernetes/pull/208)
* [Bug 1786298](https://bugzilla.redhat.com/show_bug.cgi?id=1786298): Nested CNI: Remove interfaces on DEL requests [#183](https://github.com/openshift/kuryr-kubernetes/pull/183)
* [Bug 1810522](https://bugzilla.redhat.com/show_bug.cgi?id=1810522): Ensure list of pods items is retrieved [#184](https://github.com/openshift/kuryr-kubernetes/pull/184)
* [Bug 1815019](https://bugzilla.redhat.com/show_bug.cgi?id=1815019): Ensures accurate quota calculation during the readiness checks [#194](https://github.com/openshift/kuryr-kubernetes/pull/194)
* [Bug 1799393](https://bugzilla.redhat.com/show_bug.cgi?id=1799393): Ensure LB with error status is only recreated after deleted [#160](https://github.com/openshift/kuryr-kubernetes/pull/160)
* [Bug 1799401](https://bugzilla.redhat.com/show_bug.cgi?id=1799401): Ensure no sg rule is repeated on the Network Policy CRD [#159](https://github.com/openshift/kuryr-kubernetes/pull/159)
* [Bug 1791278](https://bugzilla.redhat.com/show_bug.cgi?id=1791278): Add support for listeners on the same port but different protocol [#154](https://github.com/openshift/kuryr-kubernetes/pull/154)
* [Bug 1790339](https://bugzilla.redhat.com/show_bug.cgi?id=1790339): Add support to Octavia ACLs [#153](https://github.com/openshift/kuryr-kubernetes/pull/153)
* [Bug 1790339](https://bugzilla.redhat.com/show_bug.cgi?id=1790339): Ensure lb SG is not updated on member creation [#146](https://github.com/openshift/kuryr-kubernetes/pull/146)
* [Bug 1789330](https://bugzilla.redhat.com/show_bug.cgi?id=1789330): Fix more problem of changing size during dict iteration [#144](https://github.com/openshift/kuryr-kubernetes/pull/144)
* [Bug 1792240](https://bugzilla.redhat.com/show_bug.cgi?id=1792240): Avoid KeyError when deleting NPs [#142](https://github.com/openshift/kuryr-kubernetes/pull/142)
* [Bug 1789330](https://bugzilla.redhat.com/show_bug.cgi?id=1789330): Fix problem with dicts while iterating on for loops [#135](https://github.com/openshift/kuryr-kubernetes/pull/135)
* [Bug 1788635](https://bugzilla.redhat.com/show_bug.cgi?id=1788635): Fix Octavia version detection [#131](https://github.com/openshift/kuryr-kubernetes/pull/131)
* [Bug 1787343](https://bugzilla.redhat.com/show_bug.cgi?id=1787343): Protect from sg Not Found on multiple np enforcement [#129](https://github.com/openshift/kuryr-kubernetes/pull/129)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/1673bfa4581a5286c4bb4c7a58c47b502d5f4a3a...e2b2c980e521b62c2ec85ced437a3c68d0754233)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/58b373500e8d9180bbfd38ca4663129d1bfa1ee9)

* [Bug 1818149](https://bugzilla.redhat.com/show_bug.cgi?id=1818149): Use virtio disk instead of config drive for injecting ignition for s390x/ppc64le [#189](https://github.com/openshift/cluster-api-provider-libvirt/pull/189)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/dd3fc51a8b7f51da61643a6286eb0fecfa2d03cd...58b373500e8d9180bbfd38ca4663129d1bfa1ee9)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/409274d4c429590723a1cea87f7435b341d0562f)

* [Bug 1814092](https://bugzilla.redhat.com/show_bug.cgi?id=1814092): ROKS: remove machine related CRDs from cluster [4.3] [#531](https://github.com/openshift/machine-api-operator/pull/531)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#485](https://github.com/openshift/machine-api-operator/pull/485)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/f552d33b6daa5b21eac7c0fde89eaa675e23e78a...409274d4c429590723a1cea87f7435b341d0562f)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/424c7d825a3df929d608f165ecbb6ad27d2abe98)

* [Bug 1840300](https://bugzilla.redhat.com/show_bug.cgi?id=1840300): kubelet: add log level environment variable [#1752](https://github.com/openshift/machine-config-operator/pull/1752)
* [Bug 1827540](https://bugzilla.redhat.com/show_bug.cgi?id=1827540): pkg/server: disable weak TLS versions [#1681](https://github.com/openshift/machine-config-operator/pull/1681)
* [Bug 1837124](https://bugzilla.redhat.com/show_bug.cgi?id=1837124): templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml [#1738](https://github.com/openshift/machine-config-operator/pull/1738)
* [Bug 1838984](https://bugzilla.redhat.com/show_bug.cgi?id=1838984): [release-4.3] templates: Don't enable machine-config-daemon-host.service by default [#1747](https://github.com/openshift/machine-config-operator/pull/1747)
* [Bug 1811827](https://bugzilla.redhat.com/show_bug.cgi?id=1811827): baremetal: Add missing network-online dependency to kubelet unit [#1549](https://github.com/openshift/machine-config-operator/pull/1549)
* [Bug 1804067](https://bugzilla.redhat.com/show_bug.cgi?id=1804067): Prevent etcd-member-add.sh from running on an active master [#1740](https://github.com/openshift/machine-config-operator/pull/1740)
* [Bug 1825221](https://bugzilla.redhat.com/show_bug.cgi?id=1825221): templates/master:openshift-recovery-tools pass --authfile to podman create [#1661](https://github.com/openshift/machine-config-operator/pull/1661)
* [Bug 1801430](https://bugzilla.redhat.com/show_bug.cgi?id=1801430): Write environment variables needed for etcdctl execution into ~/.profile [#1726](https://github.com/openshift/machine-config-operator/pull/1726)
* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): The Multus CNI configuration file "00-multus.conf" should not be removed [#1646](https://github.com/openshift/machine-config-operator/pull/1646)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Add containernetworking-plugin RPM's bin location to CRI-O config [#1722](https://github.com/openshift/machine-config-operator/pull/1722)
* [Bug 1822269](https://bugzilla.redhat.com/show_bug.cgi?id=1822269): Add new crio.conf field to the template [#1668](https://github.com/openshift/machine-config-operator/pull/1668)
* [Bug 1817458](https://bugzilla.redhat.com/show_bug.cgi?id=1817458): [release-4.3] fix wrongful backup of files not originally on the system [#1686](https://github.com/openshift/machine-config-operator/pull/1686)
* [Bug 1801824](https://bugzilla.redhat.com/show_bug.cgi?id=1801824): kubelet: add more system reservation to protect node [#1458](https://github.com/openshift/machine-config-operator/pull/1458)
* [Bug 1822750](https://bugzilla.redhat.com/show_bug.cgi?id=1822750): [ctrcfg controller] Use a struct array instead of map when creating new ignitions [#1645](https://github.com/openshift/machine-config-operator/pull/1645)
* [Bug 1824282](https://bugzilla.redhat.com/show_bug.cgi?id=1824282): [release 4.3] cri-o: set log level to info [#1635](https://github.com/openshift/machine-config-operator/pull/1635)
* [Bug 1811720](https://bugzilla.redhat.com/show_bug.cgi?id=1811720): Specify cgroups in kubelet.conf so cAdvisor stats will be tracked [#1581](https://github.com/openshift/machine-config-operator/pull/1581)
* [Bug 1785279](https://bugzilla.redhat.com/show_bug.cgi?id=1785279): [release-4.3] Discard audit messages from journald [#1352](https://github.com/openshift/machine-config-operator/pull/1352)
* [Bug 1809693](https://bugzilla.redhat.com/show_bug.cgi?id=1809693): [release-4.3] prevent hitting annotation max size limit on nodes [#1433](https://github.com/openshift/machine-config-operator/pull/1433)
* [Bug 1807104](https://bugzilla.redhat.com/show_bug.cgi?id=1807104): Detect default hostname in its variants [#1534](https://github.com/openshift/machine-config-operator/pull/1534)
* [Bug 1807279](https://bugzilla.redhat.com/show_bug.cgi?id=1807279): templates/master/00-master/azure: bump raft tunables [#1507](https://github.com/openshift/machine-config-operator/pull/1507)
* [Bug 1807104](https://bugzilla.redhat.com/show_bug.cgi?id=1807104): daemon: Always create tempfiles in target dir [#1535](https://github.com/openshift/machine-config-operator/pull/1535)
* [Bug 1808004](https://bugzilla.redhat.com/show_bug.cgi?id=1808004): [release-4.3] CRI-O to set stream address in ctrl plane [#1510](https://github.com/openshift/machine-config-operator/pull/1510)
* [Bug 1802675](https://bugzilla.redhat.com/show_bug.cgi?id=1802675): [release-4.3] baremetal: Verify that mdns start only after hostname was set [#1479](https://github.com/openshift/machine-config-operator/pull/1479)
* [Bug 1806020](https://bugzilla.redhat.com/show_bug.cgi?id=1806020): [baremetal] Set hostname when DHCP6_FQDN_FQDN is set [#1502](https://github.com/openshift/machine-config-operator/pull/1502)
* [Bug 1801638](https://bugzilla.redhat.com/show_bug.cgi?id=1801638): [release-4.3] baremetal: all resolvconf editing to NM dispatcher [#1470](https://github.com/openshift/machine-config-operator/pull/1470)
* [Bug 1794495](https://bugzilla.redhat.com/show_bug.cgi?id=1794495): [release-4.3] fix ctrcfg and add e2e test [#1447](https://github.com/openshift/machine-config-operator/pull/1447)
* [Bug 1798170](https://bugzilla.redhat.com/show_bug.cgi?id=1798170): baremetal: Remove .template from path in dhcp-dhclient-conf.yaml [#1438](https://github.com/openshift/machine-config-operator/pull/1438)
* [Bug 1798639](https://bugzilla.redhat.com/show_bug.cgi?id=1798639): [release-4.3] baremetal: IPv6 add dhcp-duid to NetworkManager config [#1441](https://github.com/openshift/machine-config-operator/pull/1441)
* [Bug 1797647](https://bugzilla.redhat.com/show_bug.cgi?id=1797647): [release-4.3] [baremetal] Ipv6 non virtual ip fix [#1466](https://github.com/openshift/machine-config-operator/pull/1466)
* [Bug 1797035](https://bugzilla.redhat.com/show_bug.cgi?id=1797035): Get etcdctl binary from the etcd image and not from the upstream releases [#1431](https://github.com/openshift/machine-config-operator/pull/1431)
* [Bug 1793253](https://bugzilla.redhat.com/show_bug.cgi?id=1793253): [release-4.3] HAProxy infra pod: Make v4/v6 compatible [#1399](https://github.com/openshift/machine-config-operator/pull/1399)
* [Bug 1785718](https://bugzilla.redhat.com/show_bug.cgi?id=1785718): [release-4.3] etcd: Add initial support for an IPv6 control plane [#1353](https://github.com/openshift/machine-config-operator/pull/1353)
* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#1426](https://github.com/openshift/machine-config-operator/pull/1426)
* [Bug 1796440](https://bugzilla.redhat.com/show_bug.cgi?id=1796440): [release-4.3] DR: Cherry-pick  keep keys and data separate for snapshot backup [#1410](https://github.com/openshift/machine-config-operator/pull/1410)
* [Bug 1794699](https://bugzilla.redhat.com/show_bug.cgi?id=1794699): [release-4.3] baremetal: ipv6, switch to NM dispatcher for DNS VIP prepending [#1406](https://github.com/openshift/machine-config-operator/pull/1406)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/25bb6aeb58135c38a667e849edf5244871be4992...424c7d825a3df929d608f165ecbb6ad27d2abe98)


### [multus-cni](https://github.com/openshift/multus-cni/tree/419b44ce151c1e996698c9272ac15abe843ec925)

* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): Adds readinessindicatorfile check on CNI DEL [#65](https://github.com/openshift/multus-cni/pull/65)
* [Bug 1809283](https://bugzilla.redhat.com/show_bug.cgi?id=1809283): Removes configuration invalidation [4.3 backport] [#52](https://github.com/openshift/multus-cni/pull/52)
* [Bug 1805444](https://bugzilla.redhat.com/show_bug.cgi?id=1805444): Exposes readinessindicatorfile and uses wait.PollImmediate [backport 4.3] [#48](https://github.com/openshift/multus-cni/pull/48)
* [Full changelog](https://github.com/openshift/multus-cni/compare/1cb7d0f9c0a336ba7f33a0e2800c12205f10878c...419b44ce151c1e996698c9272ac15abe843ec925)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/d5df318830efb30c128e38390d26e695ac33c954)

* [Bug 1809253](https://bugzilla.redhat.com/show_bug.cgi?id=1809253): Reload serving certs [#160](https://github.com/openshift/oauth-proxy/pull/160)
* [Bug 1798195](https://bugzilla.redhat.com/show_bug.cgi?id=1798195): fix OAuth discovery in IPv6 environments [#150](https://github.com/openshift/oauth-proxy/pull/150)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/fbd062bbcb23538863a735f9823ac3fd6f47429e...d5df318830efb30c128e38390d26e695ac33c954)


### [oauth-server](https://github.com/openshift/oauth-server/tree/e61459a3903327dddb515a54cd005d4494dfdd38)

* [Bug 1836974](https://bugzilla.redhat.com/show_bug.cgi?id=1836974): reduce ldap connection timeout from 60s to 30s [#43](https://github.com/openshift/oauth-server/pull/43)
* [Bug 1823777](https://bugzilla.redhat.com/show_bug.cgi?id=1823777): Add back some missing metrics [#41](https://github.com/openshift/oauth-server/pull/41)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3065e59ce948f10364d0dd88cb70b860ec65ee2...e61459a3903327dddb515a54cd005d4494dfdd38)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/6bcd81b62cd14c76378c918b4286016482b5563e)

* [Bug 1821500](https://bugzilla.redhat.com/show_bug.cgi?id=1821500): bump to kube 1.17.4 [#109](https://github.com/openshift/openshift-apiserver/pull/109)
* [Bug 1833019](https://bugzilla.redhat.com/show_bug.cgi?id=1833019): include ISI error message changes when determining new generation need [#106](https://github.com/openshift/openshift-apiserver/pull/106)
* [release 4-3]  Bug 1824127: fixes configmap "extension-apiserver-authentication" not found [#92](https://github.com/openshift/openshift-apiserver/pull/92)
* [Bug 1803080](https://bugzilla.redhat.com/show_bug.cgi?id=1803080): 4.3: UPSTREAM: 87673: blank out value for unbounded client label [#75](https://github.com/openshift/openshift-apiserver/pull/75)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/6868787f33f63c1c167c42f195a8bc98f89e827d...6bcd81b62cd14c76378c918b4286016482b5563e)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/28faa8d7eff4d04f7604ae864367b2ffd8369601)

* [Bug 1813420](https://bugzilla.redhat.com/show_bug.cgi?id=1813420): fix img reg ref on ICT if OCM knows img reg host before apiserver [#75](https://github.com/openshift/openshift-controller-manager/pull/75)
* [Bug 1819850](https://bugzilla.redhat.com/show_bug.cgi?id=1819850): Increase pull secrets controller QPS to 100 [#91](https://github.com/openshift/openshift-controller-manager/pull/91)
* [release 4.3] Bug 1779282: Use OwnerRefs to clean up SA pull secrets [#72](https://github.com/openshift/openshift-controller-manager/pull/72)
* [Bug 1802889](https://bugzilla.redhat.com/show_bug.cgi?id=1802889): bump(github.com/mtrmac/gpgme): v0.1.2 [#64](https://github.com/openshift/openshift-controller-manager/pull/64)
* [Bug 1810306](https://bugzilla.redhat.com/show_bug.cgi?id=1810306): Restore openshift-controller-manager metrics [#71](https://github.com/openshift/openshift-controller-manager/pull/71)
* [Bug 1785845](https://bugzilla.redhat.com/show_bug.cgi?id=1785845): use OCM config registry hostname with imagechangetrigger in case imagestream cache is stale (a la builds) for local ref streams [#59](https://github.com/openshift/openshift-controller-manager/pull/59)
* [Bug 1784569](https://bugzilla.redhat.com/show_bug.cgi?id=1784569): Exclude IPv6 Registry Locations [#57](https://github.com/openshift/openshift-controller-manager/pull/57)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/72436956543f5a9587a24191d0f130e312b82e50...28faa8d7eff4d04f7604ae864367b2ffd8369601)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/7aa99e291276aa2f26260f8e654078ab6c2464f0)

* [Bug 1796822](https://bugzilla.redhat.com/show_bug.cgi?id=1796822): Support deployment on OpenStack with self-signed certificate [#81](https://github.com/openshift/cluster-api-provider-openstack/pull/81)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/c14315ec71021976371f457598351db5c00fc586...7aa99e291276aa2f26260f8e654078ab6c2464f0)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/65cc3395a49eaaa016b53f9f1e68ca928f2f8bb3)

* [Bug 1840939](https://bugzilla.redhat.com/show_bug.cgi?id=1840939): fix(queues): use a single gc queue [#1553](https://github.com/operator-framework/operator-lifecycle-manager/pull/1553)
* [Bug 1827822](https://bugzilla.redhat.com/show_bug.cgi?id=1827822): Generation bug 4.3 [#1485](https://github.com/operator-framework/operator-lifecycle-manager/pull/1485)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): feat(catalogs): add spec validation for sourcetypes [#1508](https://github.com/operator-framework/operator-lifecycle-manager/pull/1508)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): Prevent nil pointer dereference [#1486](https://github.com/operator-framework/operator-lifecycle-manager/pull/1486)
* [Bug 1821318](https://bugzilla.redhat.com/show_bug.cgi?id=1821318): feat(packagemanifest): add default os/arch labels if not present [#1432](https://github.com/operator-framework/operator-lifecycle-manager/pull/1432)
* [Bug 1814777](https://bugzilla.redhat.com/show_bug.cgi?id=1814777): fix(catsrc): remove limits on catalogsource pods [#1406](https://github.com/operator-framework/operator-lifecycle-manager/pull/1406)
* [Bug 1807631](https://bugzilla.redhat.com/show_bug.cgi?id=1807631): Duplicate packages in packageserver APIService response [#1363](https://github.com/operator-framework/operator-lifecycle-manager/pull/1363)
* [Bug 1814263](https://bugzilla.redhat.com/show_bug.cgi?id=1814263): Make provided API ClusterRoles be owned by the corresponding API. [#1383](https://github.com/operator-framework/operator-lifecycle-manager/pull/1383)
* [Bug 1805268](https://bugzilla.redhat.com/show_bug.cgi?id=1805268): Fix configmap registry server readiness probe timeouts [#1365](https://github.com/operator-framework/operator-lifecycle-manager/pull/1365)
* [Bug 1808419](https://bugzilla.redhat.com/show_bug.cgi?id=1808419): Don't block on ctx.Done() if startup fails. [#1366](https://github.com/operator-framework/operator-lifecycle-manager/pull/1366)
* [Bug 1805574](https://bugzilla.redhat.com/show_bug.cgi?id=1805574): Remove run-level 1 from olm and openshift-operators namespaces [#1310](https://github.com/operator-framework/operator-lifecycle-manager/pull/1310)
* [Bug 1809649](https://bugzilla.redhat.com/show_bug.cgi?id=1809649): Update subscription_sync_count to include the package name [#1343](https://github.com/operator-framework/operator-lifecycle-manager/pull/1343)
* [Bug 1798665](https://bugzilla.redhat.com/show_bug.cgi?id=1798665): Fix cases where an operator's ready channel may never close. [#1280](https://github.com/operator-framework/operator-lifecycle-manager/pull/1280)
* [Bug 1797019](https://bugzilla.redhat.com/show_bug.cgi?id=1797019): [release-4.3] Fix bad opgroup annotations [#1272](https://github.com/operator-framework/operator-lifecycle-manager/pull/1272)
* [Bug 1803135](https://bugzilla.redhat.com/show_bug.cgi?id=1803135): fix(packagemanifests): Fix index key func to avoid key collision [#1292](https://github.com/operator-framework/operator-lifecycle-manager/pull/1292)
* [Bug 1780378](https://bugzilla.redhat.com/show_bug.cgi?id=1780378): Implement Structural Schema for CRDs [#1197](https://github.com/operator-framework/operator-lifecycle-manager/pull/1197)
* [Bug 1796913](https://bugzilla.redhat.com/show_bug.cgi?id=1796913): packageserver update fails to adopt APIService [#1270](https://github.com/operator-framework/operator-lifecycle-manager/pull/1270)
* [Bug 1791852](https://bugzilla.redhat.com/show_bug.cgi?id=1791852): Remove license year [#1243](https://github.com/operator-framework/operator-lifecycle-manager/pull/1243)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/c74333dbe61d92e1a75b09f74c0dc2c99b05405a...65cc3395a49eaaa016b53f9f1e68ca928f2f8bb3)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/e0148822df25f498e212e95f55556819d5516807)

* [Bug 1805271](https://bugzilla.redhat.com/show_bug.cgi?id=1805271): increase initial delay for appregistry pods [#301](https://github.com/operator-framework/operator-marketplace/pull/301)
* [Bug 1813995](https://bugzilla.redhat.com/show_bug.cgi?id=1813995): support serving marketplace prometheus metrics over https [#296](https://github.com/operator-framework/operator-marketplace/pull/296)
* [Bug 1810048](https://bugzilla.redhat.com/show_bug.cgi?id=1810048): Use DNS for CatalogSource address [#285](https://github.com/operator-framework/operator-marketplace/pull/285)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a02f89919b89dac572d9b5264a22aeccc87da77...e0148822df25f498e212e95f55556819d5516807)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/316991addd85f7e205526b26f65dbc94a47399c8)

* [Bug 1816185](https://bugzilla.redhat.com/show_bug.cgi?id=1816185): fix(dns): fix slow dns resolution of localhost for grpc health probe [#331](https://github.com/operator-framework/operator-registry/pull/331)
* [Bug 1794176](https://bugzilla.redhat.com/show_bug.cgi?id=1794176): Updating summary for 'Operator Registry ' containers [#169](https://github.com/operator-framework/operator-registry/pull/169)
* [Bug 1805410](https://bugzilla.redhat.com/show_bug.cgi?id=1805410): fix(docker): add entrypoint [#185](https://github.com/operator-framework/operator-registry/pull/185)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/4aef889d760333aebac0f01459b3a8bf698fff0b...316991addd85f7e205526b26f65dbc94a47399c8)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/1d9574bfc80b3947fe2246249b8c58057c155c20)

* [Bug 1819888](https://bugzilla.redhat.com/show_bug.cgi?id=1819888): [4.3] bump OVS/OVN to 2.13 [#127](https://github.com/openshift/ovn-kubernetes/pull/127)
* [Bug 1806667](https://bugzilla.redhat.com/show_bug.cgi?id=1806667): merge master to release-4.3 [#100](https://github.com/openshift/ovn-kubernetes/pull/100)
* ipv6: Make IPAddrToHWAddr() aware of IPv6 [#101](https://github.com/openshift/ovn-kubernetes/pull/101)
* HACK: add ipv4 interfaces to pods that need them [#94](https://github.com/openshift/ovn-kubernetes/pull/94)
* Upstream merge 2020-02-18 [#93](https://github.com/openshift/ovn-kubernetes/pull/93)
* fix IPv6 subnet dynamic addressing [#1072](https://github.com/openshift/ovn-kubernetes/pull/1072)
* config: don't let environment affect test results [#1071](https://github.com/openshift/ovn-kubernetes/pull/1071)
* add the ability for ovn-kubernetes to ignore a node by label [#1048](https://github.com/openshift/ovn-kubernetes/pull/1048)
* Fixes accidental override of file conf settings with defaults [#1044](https://github.com/openshift/ovn-kubernetes/pull/1044)
* Fix delete order for network policy [#1068](https://github.com/openshift/ovn-kubernetes/pull/1068)
* Remove kube-proxy in KIND deployment [#1067](https://github.com/openshift/ovn-kubernetes/pull/1067)
* remove unused methods from KClient [#1053](https://github.com/openshift/ovn-kubernetes/pull/1053)
* Ensure kind logs are always exported [#1065](https://github.com/openshift/ovn-kubernetes/pull/1065)
* ci: always export logs [#1054](https://github.com/openshift/ovn-kubernetes/pull/1054)
* Clustered database (aka RAFT) support for OVN DBs [#1051](https://github.com/openshift/ovn-kubernetes/pull/1051)
* [Bug 1795454](https://bugzilla.redhat.com/show_bug.cgi?id=1795454): Resync to upstream [#87](https://github.com/openshift/ovn-kubernetes/pull/87)
* when performing static ip allocation other-config:subnet is not required [#1046](https://github.com/openshift/ovn-kubernetes/pull/1046)
* Remove the compat annotation code for OvnPodAnnotationLegacyName and OvnHostSubnetLegacy [#1045](https://github.com/openshift/ovn-kubernetes/pull/1045)
* ci: remove Travis now that GitHub actions work [#1039](https://github.com/openshift/ovn-kubernetes/pull/1039)
* J2 render all templates [#1041](https://github.com/openshift/ovn-kubernetes/pull/1041)
* ci: bump master loglevel to 5 [#1040](https://github.com/openshift/ovn-kubernetes/pull/1040)
* CNI logging and timeout fixes, plus node handler locking fix [#1036](https://github.com/openshift/ovn-kubernetes/pull/1036)
* ci: use consistent kind cluster name and fix artifact retrieval [#1037](https://github.com/openshift/ovn-kubernetes/pull/1037)
* Also run CI for pull requests [#1033](https://github.com/openshift/ovn-kubernetes/pull/1033)
* Replace Travis CI with GitHub Actions [#1028](https://github.com/openshift/ovn-kubernetes/pull/1028)
* Iptables followup [#1032](https://github.com/openshift/ovn-kubernetes/pull/1032)
* Ensure j2 does not fail to run in daemonset.sh if installed globally [#1031](https://github.com/openshift/ovn-kubernetes/pull/1031)
* Fixes specifying geneve port [#1030](https://github.com/openshift/ovn-kubernetes/pull/1030)
* fix for iptables issue in CentOS 8 [#1027](https://github.com/openshift/ovn-kubernetes/pull/1027)
* do not delete integration bridge as part of ovnkube-node cleanup [#1029](https://github.com/openshift/ovn-kubernetes/pull/1029)
* Yet more cleanups [#1023](https://github.com/openshift/ovn-kubernetes/pull/1023)
* travis: bump timeout for e2e tests [#1024](https://github.com/openshift/ovn-kubernetes/pull/1024)
* a way to specify the encap-ip for a k8s worker node [#1016](https://github.com/openshift/ovn-kubernetes/pull/1016)
* Fix kubetest to enable conformance [#1018](https://github.com/openshift/ovn-kubernetes/pull/1018)
* add support for custom MAC specified in default network-attachment [#997](https://github.com/openshift/ovn-kubernetes/pull/997)
* Validates host subnet prefix length and default behavior [#979](https://github.com/openshift/ovn-kubernetes/pull/979)
* ovn: read pod addresses more quickly [#1012](https://github.com/openshift/ovn-kubernetes/pull/1012)
* Enable e2e CI [#1011](https://github.com/openshift/ovn-kubernetes/pull/1011)
* [Bug 1798613](https://bugzilla.redhat.com/show_bug.cgi?id=1798613): OVN: Bump image to include ovn2.12 [#72](https://github.com/openshift/ovn-kubernetes/pull/72)
* [Bug 1796531](https://bugzilla.redhat.com/show_bug.cgi?id=1796531): CARRY: fix race updating exclude IPs on node switch [#83](https://github.com/openshift/ovn-kubernetes/pull/83)
* Upstream rebase 2020-01-17 [#77](https://github.com/openshift/ovn-kubernetes/pull/77)
* Restrict address type requirements for tunneling [#1014](https://github.com/openshift/ovn-kubernetes/pull/1014)
* Allow IPv6 Node addresses for geneve tunnels [#1013](https://github.com/openshift/ovn-kubernetes/pull/1013)
* factory: parallelize Node events [#920](https://github.com/openshift/ovn-kubernetes/pull/920)
* scale: use light weight check to ensure OVN DB endpoints are up [#1007](https://github.com/openshift/ovn-kubernetes/pull/1007)
* trivial: use GetNodeWellKnownAddresses() to arrive at node mgmt port IP [#1009](https://github.com/openshift/ovn-kubernetes/pull/1009)
* determine whether we are running in IPv6 mode once at the start time [#1005](https://github.com/openshift/ovn-kubernetes/pull/1005)
* Fix multicast Port_Group update at pod creation/deletion. [#953](https://github.com/openshift/ovn-kubernetes/pull/953)
* IPv6 single-stack support [#968](https://github.com/openshift/ovn-kubernetes/pull/968)
* ovn: remove 'func (oc *Controller)' from functions that don't need it [#1002](https://github.com/openshift/ovn-kubernetes/pull/1002)
* avoid using --wait=sb in ovn-nbctl calls when using ovn-nbctl daemon [#1001](https://github.com/openshift/ovn-kubernetes/pull/1001)
* Factory and testcase cleanups [#999](https://github.com/openshift/ovn-kubernetes/pull/999)
* handle failed management logical_switch_port creation [#996](https://github.com/openshift/ovn-kubernetes/pull/996)
* scale: fixed MAC address for the logical router ports [#992](https://github.com/openshift/ovn-kubernetes/pull/992)
* do normal processing for all inbound packets that are not tracked [#993](https://github.com/openshift/ovn-kubernetes/pull/993)
* scale: clearInitialNodeNetworkUnavailableCondition() is very expensive [#994](https://github.com/openshift/ovn-kubernetes/pull/994)
* Fix Windows cross-compilation [#76](https://github.com/openshift/ovn-kubernetes/pull/76)
* Fixes missing oc client during openshift image build [#74](https://github.com/openshift/ovn-kubernetes/pull/74)
* correct the directory placement of windows binary [#73](https://github.com/openshift/ovn-kubernetes/pull/73)
* Build the windows binary as part of the container ovn-kubernetes container build [#69](https://github.com/openshift/ovn-kubernetes/pull/69)
* Upstream + hybrid-overlay merge 2019-12-28 [#70](https://github.com/openshift/ovn-kubernetes/pull/70)
* scale: waitForNodeLogicalSwitch() should get other-config:subnet itself [#989](https://github.com/openshift/ovn-kubernetes/pull/989)
* remove unwanted debug log messages in factory.go [#987](https://github.com/openshift/ovn-kubernetes/pull/987)
* ovn-controller: Set ovn-openflow-probe-interval [#986](https://github.com/openshift/ovn-kubernetes/pull/986)
* scale: ascertain gateway readiness by checking OpenFlow rules [#985](https://github.com/openshift/ovn-kubernetes/pull/985)
* scale: ascertain management port readiness by checking OpenFlow rules [#984](https://github.com/openshift/ovn-kubernetes/pull/984)
* set other_config:hwaaddr on br-local before you add br-nexthop [#983](https://github.com/openshift/ovn-kubernetes/pull/983)
* Support latest OVN [#926](https://github.com/openshift/ovn-kubernetes/pull/926)
* persist the mac address associated with the node management port [#950](https://github.com/openshift/ovn-kubernetes/pull/950)
* Better testcase failure descriptions and command matching [#976](https://github.com/openshift/ovn-kubernetes/pull/976)
* pkg/cluster: set br-nexthop mtu [#975](https://github.com/openshift/ovn-kubernetes/pull/975)
* go mod tidy [#973](https://github.com/openshift/ovn-kubernetes/pull/973)
* persist the mac address associated with br-nexthop OVS internal port [#949](https://github.com/openshift/ovn-kubernetes/pull/949)
* add node systemID to the list of information passed from node to master [#966](https://github.com/openshift/ovn-kubernetes/pull/966)
* Removes duplicate code setting ovn_db_host [#971](https://github.com/openshift/ovn-kubernetes/pull/971)
* Update metric service to include not-ready endpoints [#974](https://github.com/openshift/ovn-kubernetes/pull/974)
* Fixes detecting loopback for ovnkube-db endpoint [#970](https://github.com/openshift/ovn-kubernetes/pull/970)
* cmd: add --metrics-enable-pprof option to serve pprof on metrics port [#969](https://github.com/openshift/ovn-kubernetes/pull/969)
* get dynamic_addresses and addresses in one go instead of two execs [#963](https://github.com/openshift/ovn-kubernetes/pull/963)
* Manage log level during node bring up [#962](https://github.com/openshift/ovn-kubernetes/pull/962)
* Add networkpolicy test cases [#939](https://github.com/openshift/ovn-kubernetes/pull/939)
* Disable IPv6 DAD and ensure addresses are ready [#937](https://github.com/openshift/ovn-kubernetes/pull/937)
* add a switch to flip on/off multicast support (is disabled by default) [#954](https://github.com/openshift/ovn-kubernetes/pull/954)
* use ahostsv4 database to ensure we get IPv4 address always [#952](https://github.com/openshift/ovn-kubernetes/pull/952)
* Move pod annotation under k8s.ovn.org namespace [#922](https://github.com/openshift/ovn-kubernetes/pull/922)
* Enable IGMP Querier only if a source IPv4 is available. [#944](https://github.com/openshift/ovn-kubernetes/pull/944)
* Sync SubnetAllocator from openshift/sdn [#945](https://github.com/openshift/ovn-kubernetes/pull/945)
* Fix parsing of IPv6 addresses in ovn URLs [#938](https://github.com/openshift/ovn-kubernetes/pull/938)
* build: fix 'make lint' when GOPATH isn't explicitly set [#929](https://github.com/openshift/ovn-kubernetes/pull/929)
* AddFilteredEndpointsHandler must take label selector like other handlers [#936](https://github.com/openshift/ovn-kubernetes/pull/936)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2808c2cbb256460d929491f33ec5858ceebb211c...1d9574bfc80b3947fe2246249b8c58057c155c20)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/a6330ca349aae64643c2d0d7dff08ed2a444ccd5)

* [Bug 1805833](https://bugzilla.redhat.com/show_bug.cgi?id=1805833): Tighten permissions related to CRD create/update [#60](https://github.com/openshift/prometheus-operator/pull/60)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/6ba21de5746f7b009a24e48cc929135ddb3396ac...a6330ca349aae64643c2d0d7dff08ed2a444ccd5)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/d0b913aa0dc58d87bab16ed5a8799a9e06891705)

* [Bug 1789084](https://bugzilla.redhat.com/show_bug.cgi?id=1789084): Not reporting 'none' when no platforms located [#49](https://github.com/openshift/node_exporter/pull/49)
* [Full changelog](https://github.com/openshift/node_exporter/compare/1ea04fb0e09c14440bb97c3468b97f99db07dcfd...d0b913aa0dc58d87bab16ed5a8799a9e06891705)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/dd7235b4568fe22232f9cee2855967da5e0c52b2)

* [Bug 1810420](https://bugzilla.redhat.com/show_bug.cgi?id=1810420): Ensure service CA certs are created with unique serial numbers [#112](https://github.com/openshift/service-ca-operator/pull/112)
* [Bug 1791022](https://bugzilla.redhat.com/show_bug.cgi?id=1791022): Ensure removal of 4.4-only resources on downgrade to 4.3 [#93](https://github.com/openshift/service-ca-operator/pull/93)
* [Bug 1788179](https://bugzilla.redhat.com/show_bug.cgi?id=1788179): Enable automated rotation for 4.3 [#104](https://github.com/openshift/service-ca-operator/pull/104)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/774c394da334dec446703545d4baaf89611ccb9d...dd7235b4568fe22232f9cee2855967da5e0c52b2)


### [telemeter](https://github.com/openshift/telemeter/tree/227ae59d226d17eee26a60621bc884f4e8e83254)

* [Bug 1805116](https://bugzilla.redhat.com/show_bug.cgi?id=1805116): jsonnet/telemeter/metrics: add aggregated up metric, remove node_uname_info [#309](https://github.com/openshift/telemeter/pull/309)
* [Full changelog](https://github.com/openshift/telemeter/compare/aa7942931890dd361c117a6cbb7d84451415f7bf...227ae59d226d17eee26a60621bc884f4e8e83254)