# 4.3.0-0.nightly-2021-02-20-191327

Created: 2021-02-20 19:19:58 +0000 UTC

Image Digest: `sha256:c794a531c2014a5b3f80e19c5a7daccbfbc2023439a6636ac4c5cb470984ee2b`


## Changes from 4.3.0-0.nightly-2020-04-13-190424

### Components

* Kubernetes 1.16.2


### Rebuilt images without code change

* [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws) git [86a378fe](https://github.com/openshift/cluster-api-provider-aws/commit/86a378fedb20eb9a998047407594baabe80dc345) `sha256:441be48671dc046c8dbd817c85506d47261d1ac76e3d33bb11b5e7395e3799e4`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:35ea4e294f71920c64cb9a8720e4d90682223ba4a451ae3d7178501d805a333d`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:52a96cf8ff884f48f07d323b1776dcd0b5445ad788d10cbf52fcd1f506583f12`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [d5ddbcdd](https://github.com/openshift/cluster-config-operator/commit/d5ddbcdd4ec87bd4d0d109e81ed0be5dafd86061) `sha256:4d6fd38832c51d79672e7539d90ef02120ecb6d70ae3804d68adaca94c6fbeeb`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [d86b0316](https://github.com/openshift/cluster-ingress-operator/commit/d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9) `sha256:2a17009227fa1f2f7db34bfd04d014aa9be2ef514781439c0e91e469d6ba44ea`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [dd3147d9](https://github.com/openshift/cluster-machine-approver/commit/dd3147d9b2d1e54a2050d51390d1eca62d6189fc) `sha256:95ba32b8acc083bedd9592d81d3db6ef4ff456ddac287e6a0618514a071575d9`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [727d37d9](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/727d37d929cb388744362c98fbcaf9ef547cd4b6) `sha256:ed9e1dd5ea87d302ca44858d5952b75f582eb2bfcac3ea4405bdf5c7446191d9`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:1edceaa23bc04aae9b137930e631ed74d5c6d77beec4ebeb7270ecbac122b8aa`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:4e4c512e890840a0f88f726af767e3ca58f10a0c08f9cfc73d1a5966bb2172ad`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [386465fe](https://github.com/openshift/containernetworking-plugins/commit/386465fe170c0e7299b357efbace235a3e5ce7ee) `sha256:e0e1ef92cb63d6a554450ccbf3bf5e32894262e08011ebe159b007283efe58d3`
* [coredns](https://github.com/openshift/coredns) git [052209af](https://github.com/openshift/coredns/commit/052209affb1fe85bdd87b37e2cf9a6fb98585e91) `sha256:e4c8ae684441a048e5f278a540921f7a9f84e3ce9435ba968e3930f198a518c2`
* [docker-registry](https://github.com/openshift/image-registry) git [7511ca65](https://github.com/openshift/image-registry/commit/7511ca65e07b586464e5ec2e9efde67bfa48c3e2) `sha256:563a67ca16fd82a237a4695be1cb76b82a53cb3cfddf93817d4d18ac579ca9b8`
* [grafana](https://github.com/openshift/grafana) git [e2261e14](https://github.com/openshift/grafana/commit/e2261e142909cb0fe70fc0996d7d375e57956589) `sha256:8f260bc9fe3c2913e818685ddc9626a37c6a087e9ca35fc4a45f6c6e49fd5042`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [5f57661e](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/5f57661eaaa3f8714c2b1904313b9ecf1a7bdba4) `sha256:7c4329c93795b0f7d7694b37c5a389204816df32d9162e926802cd6133d455bf`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [b83630ce](https://github.com/openshift/ironic-inspector-image/commit/b83630cefa1a72b2d8ce03c9701acb4f117ab6f5) `sha256:ca0fca0dabb585e90262d9737b0ca600532c174993c9e90b87afcb43ad40d8b2`
* [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [9a9e4d48](https://github.com/openshift/ironic-ipa-downloader/commit/9a9e4d486d5773427ff44cdd7fcb821431d80853) `sha256:628a0cc3c133a24170da2c6e3375c314a71ee9ff7336b99b7471f97a8fbbdcc4`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [2405ba63](https://github.com/openshift/ironic-rhcos-downloader/commit/2405ba63f22db1cbda255cfccf2fc84f15faa6ee) `sha256:b3fe620543f8f9b807f67844534f0c6eeb8f8879be08dda4f4b936e4a96fcdc5`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e33314bd](https://github.com/openshift/ironic-static-ip-manager/commit/e33314bda6f366472a2371c5598ff2d7dba111c8) `sha256:cab3bda42ca6add19b70eaf5179e4cb309b22ee5d0ea8c4c6d9284ffb9fafd93`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [3d1c61e9](https://github.com/openshift/k8s-prometheus-adapter/commit/3d1c61e9a783d8c4a764b130837682fa9ab8e9df) `sha256:06ab1a4160c4a6039b5b5487225ec7c2eedbf3407b4be53a3884163733f3e48d`
* [kube-client-agent](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:76e0bd93862957461fd14ccd172441a475aa920267f29af9a52d5f8ff3886797`
* [kube-etcd-signer-server](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:8a3232a818cc130e50076f4a547c57211963cfdc9811d61b8a7371b59a51e267`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [84e7dac6](https://github.com/openshift/kube-rbac-proxy/commit/84e7dac69f8e3f90620729ee730327a3e168963d) `sha256:c5e27d3f986785554706ecd8484f965351469b292d6f497bef4c38fee5a8f28f`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [83f9fc56](https://github.com/openshift/kube-state-metrics/commit/83f9fc5685cf3d7732687e1f07da6b27d6901c4f) `sha256:0889a874a36c39427c30c39b09752f834d2f4f067f193ef65d6216e0073d6458`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:9fe5fcda38e85eb3f3de309e9bf99229d026577dc7896e3975b3eee7e94ad223`
* machine-os-content `sha256:db38274118ee02806b54e6ef0654d49f76bbb9aaab559f06c91948391c74d801`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [24135de2](https://github.com/openshift/mdns-publisher/commit/24135de29fc348f3ef455a288013cc1912d969bc) `sha256:076db816d22f3638bd78300af82a64eaa2f814715d01cf0fd83dcab0abe02c74`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ead10a3c](https://github.com/openshift/multus-admission-controller/commit/ead10a3cf30c5b4a2fbd7c987d83c07a46c5d5da) `sha256:ede1ce9de0e4e491511df5a2d5974d682bb0e33dc199e88d6bdffa30185dcea0`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1322dc43](https://github.com/openshift/route-override-cni/commit/1322dc43712e12a021f5e83c8d752e7d8c30aa6e) `sha256:938f5b4e48667cba8d93b38ba8c430fe30f58a7e3960f53a67141ba9de416191`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9cca449d](https://github.com/openshift/whereabouts-cni/commit/9cca449d619ed0f93a06aca9255004672bb6c96e) `sha256:6d44e2513e9a495376971cfef7655cf0e7fae655f82b2906fb446c5a87510d88`
* [must-gather](https://github.com/openshift/must-gather) git [23037ad1](https://github.com/openshift/must-gather/commit/23037ad16c0aafd7186431c93ebca3f0d426a08d) `sha256:fb291d3a0cac6fe3098deeb722d685f124e0db7471b8ad63de5ba10c950331b4`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [d5df3188](https://github.com/openshift/oauth-proxy/commit/d5df318830efb30c128e38390d26e695ac33c954) `sha256:d46186e05dd0846010372016193657f6927ce162926b390b83c0d249586d5116`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [7aa99e29](https://github.com/openshift/cluster-api-provider-openstack/commit/7aa99e291276aa2f26260f8e654078ab6c2464f0) `sha256:20faf5a8fed997ac6d572f3170a6e2238bf5165088ef744b81d9760f17eea539`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [1d9574bf](https://github.com/openshift/ovn-kubernetes/commit/1d9574bfc80b3947fe2246249b8c58057c155c20) `sha256:21183f5bee88400b1656cdee95f8325e0ebfbb515df168aea6faacc91cd19869`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b8153a7f](https://github.com/openshift/prom-label-proxy/commit/b8153a7f39f1a34c03059f1b9dfb05d2c1297414) `sha256:3cd30e3b2c82e81d1f5da6d4108846aadcf713e62fd9af841d99df5058f51814`
* [prometheus](https://github.com/openshift/prometheus) git [c086098d](https://github.com/openshift/prometheus/commit/c086098da5f01ab9565bdda772d3459bea2913f2) `sha256:48014184bd2c6d8140dd4d8faed8571d098719cf51e4dbcd229212fd158d8340`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [11aa2a87](https://github.com/openshift/prometheus-alertmanager/commit/11aa2a87c5bfb84cba76b90a3867a06a55e2605e) `sha256:3980fd128720e446957c656e5eedc00c1d1d45353db84c52caad3a80da6e4b88`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [d0b913aa](https://github.com/openshift/node_exporter/commit/d0b913aa0dc58d87bab16ed5a8799a9e06891705) `sha256:0cf26096e8b0ccb1c9fcdd3ebdf1f8954ec970a5a3d9adcc5d38499b35e07312`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [dd7235b4](https://github.com/openshift/service-ca-operator/commit/dd7235b4568fe22232f9cee2855967da5e0c52b2) `sha256:6262ab08089f052cabf2572232deaef17f01a76d01a3546c929861b0a215efb6`
* [service-catalog](https://github.com/openshift/service-catalog) git [6f75f804](https://github.com/openshift/service-catalog/commit/6f75f8047dfab6ca8b979833f7f2a6036deee488) `sha256:a68b33644678b1c1dc8329b60da744be4eb58a6da2640e2a8f775cd4f34daaa4`
* [thanos](https://github.com/openshift/thanos) git [4aaa91e9](https://github.com/openshift/thanos/commit/4aaa91e9b982177e113c80567ec3808dcf122769) `sha256:09514b806ec048fd4cb2b17008d07086a428702fdf1d7521db183b211bbb5eb7`


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/4ce88ba4dc8626056df4525c7e5acbbd83a94c1c)

* install-approvers: add staebler [#4303](https://github.com/openshift/installer/pull/4303)
* [Bug 1862114](https://bugzilla.redhat.com/show_bug.cgi?id=1862114): bump RHCOS images for CVE-2020-10713 [#3987](https://github.com/openshift/installer/pull/3987)
* [Bug 1851949](https://bugzilla.redhat.com/show_bug.cgi?id=1851949): Add the --pod-infra-container-image flag to the kubelet service [#3815](https://github.com/openshift/installer/pull/3815)
* [Bug 1849171](https://bugzilla.redhat.com/show_bug.cgi?id=1849171): OpenStack: Wait for router interface to create FIP [#3780](https://github.com/openshift/installer/pull/3780)
* BUG 1826073: Disable client side rate limiting in Azure. [#3714](https://github.com/openshift/installer/pull/3714)
* [Bug 1842531](https://bugzilla.redhat.com/show_bug.cgi?id=1842531): images: libvirt: add yq to libvirt CI image [#3699](https://github.com/openshift/installer/pull/3699)
* [Bug 1840230](https://bugzilla.redhat.com/show_bug.cgi?id=1840230): data/azure/vnet: switch to HTTPS probes for lbs [#3665](https://github.com/openshift/installer/pull/3665)
* [Bug 1820222](https://bugzilla.redhat.com/show_bug.cgi?id=1820222): libvirt: Bump bootstrap memory to 5G for ppc64le [#3428](https://github.com/openshift/installer/pull/3428)
* [Bug 1828632](https://bugzilla.redhat.com/show_bug.cgi?id=1828632): Don't fail on unavailable features on OpenStack [#3514](https://github.com/openshift/installer/pull/3514)
* [Bug 1820591](https://bugzilla.redhat.com/show_bug.cgi?id=1820591): Add retries to DeleteSwiftContainer [#3408](https://github.com/openshift/installer/pull/3408)
* [Bug 1824921](https://bugzilla.redhat.com/show_bug.cgi?id=1824921): [release-4.3] OpenStack: Correcting the instructions to refresh a CA cert [#3466](https://github.com/openshift/installer/pull/3466)
* [Bug 1824239](https://bugzilla.redhat.com/show_bug.cgi?id=1824239): Validate Azure regions [#3460](https://github.com/openshift/installer/pull/3460)
* [Bug 1825973](https://bugzilla.redhat.com/show_bug.cgi?id=1825973): OpenStack: Replace remote_group_id with remote_ip_prefix [#3481](https://github.com/openshift/installer/pull/3481)
* [Bug 1825478](https://bugzilla.redhat.com/show_bug.cgi?id=1825478): OpenStack CI Install awscli from zip [#3478](https://github.com/openshift/installer/pull/3478)
* [Full changelog](https://github.com/openshift/installer/compare/db4411451af55e0bab7258d25bdabd91ea48382f...4ce88ba4dc8626056df4525c7e5acbbd83a94c1c)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/dc2d333c60a7a8457eb3e56ca3218aaad2011999)

* [Bug 1816122](https://bugzilla.redhat.com/show_bug.cgi?id=1816122): Don't assume IPv4 in introspection data [#54](https://github.com/openshift/baremetal-operator/pull/54)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/d981ea02fc551aeda75ccbf11da34ba9eed11f77...dc2d333c60a7a8457eb3e56ca3218aaad2011999)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/052128b671dc2e7fd386f3c25b60b87a197cded3)

* [Bug 1843488](https://bugzilla.redhat.com/show_bug.cgi?id=1843488): Move haproxy listening port due to conflict [#66](https://github.com/openshift/baremetal-runtimecfg/pull/66)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/1ba567febc0443115ed85d706c363766b039d46d...052128b671dc2e7fd386f3c25b60b87a197cded3)


### [cli, cli-artifacts, deployer](https://github.com/openshift/oc/tree/14278ac2ddb27d49e8911efe127aca57e476087f)

* [Bug 1822638](https://bugzilla.redhat.com/show_bug.cgi?id=1822638): Place apache license in cli-artifacts [#473](https://github.com/openshift/oc/pull/473)
* [Bug 1806782](https://bugzilla.redhat.com/show_bug.cgi?id=1806782): Allow a file:// release argument to release mirror [#458](https://github.com/openshift/oc/pull/458)
* [Bug 1808221](https://bugzilla.redhat.com/show_bug.cgi?id=1808221): bump(golang.org/x/crypto|net|sys) [#429](https://github.com/openshift/oc/pull/429)
* [Bug 1806782](https://bugzilla.redhat.com/show_bug.cgi?id=1806782): Allow a file:// release argument to release mirror [#328](https://github.com/openshift/oc/pull/328)
* [Full changelog](https://github.com/openshift/oc/compare/4fb2d4d96e6b604f7d4ee49080238a5aec04dc4f...14278ac2ddb27d49e8911efe127aca57e476087f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d92d0dcf7f1de424fa82c3f83dafe930ae09be6f)

* [Bug 1808222](https://bugzilla.redhat.com/show_bug.cgi?id=1808222): CVE-2020-9283 ose-cloud-credential-operator-container: golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic [#221](https://github.com/openshift/cloud-credential-operator/pull/221)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/02be5758f755d9da56cb4b37ae3ea52a9a0c436e...d92d0dcf7f1de424fa82c3f83dafe930ae09be6f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/27195a2d88296729a9657e9dab14045f4d24a8f9)

* [Bug 1842465](https://bugzilla.redhat.com/show_bug.cgi?id=1842465): explicitly set operator's and operand's container's root file system to writable [#297](https://github.com/openshift/cluster-authentication-operator/pull/297)
* [Bug 1824167](https://bugzilla.redhat.com/show_bug.cgi?id=1824167): The oauth server should wait until it is out of rotation to shut down [#257](https://github.com/openshift/cluster-authentication-operator/pull/257)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/df8cd95ed3249e0fae70ddaea56c07950b819cad...27195a2d88296729a9657e9dab14045f4d24a8f9)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/59d52289f59ea5bd691e185f4b36a5d6f9160e7e)

* BUG 1824215: Raise maximum memory capacity difference [#144](https://github.com/openshift/kubernetes-autoscaler/pull/144)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7278ebb2fb632dbfe102b930aa161f5b2a9bcc93...59d52289f59ea5bd691e185f4b36a5d6f9160e7e)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/fa71866510868d6ff205ef63293bec456fcf36e2)

* [Bug 1807762](https://bugzilla.redhat.com/show_bug.cgi?id=1807762): Drop run-level [#154](https://github.com/openshift/cluster-autoscaler-operator/pull/154)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/23df15eeb0144268565ccbb28665efe82a1a5845...fa71866510868d6ff205ef63293bec456fcf36e2)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/e1b63cc5f68d3505f4dc657b029550d8003d4c9d)

* [Bug 1859685](https://bugzilla.redhat.com/show_bug.cgi?id=1859685): Tolerate all taints [#186](https://github.com/openshift/cluster-dns-operator/pull/186)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/ca11e642bfe8fe62688a04565f2fd3195c210344...e1b63cc5f68d3505f4dc657b029550d8003d4c9d)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/bc621396a3b1386854bef7832afbd14e31b7e798)

* [Bug 1832144](https://bugzilla.redhat.com/show_bug.cgi?id=1832144): Assure storage bucket names in lowercase [#541](https://github.com/openshift/cluster-image-registry-operator/pull/541)
* [Bug 1836753](https://bugzilla.redhat.com/show_bug.cgi?id=1836753): Use release-4.3 api [#564](https://github.com/openshift/cluster-image-registry-operator/pull/564)
* [Bug 1810563](https://bugzilla.redhat.com/show_bug.cgi?id=1810563): bootstrap HA configuration [#536](https://github.com/openshift/cluster-image-registry-operator/pull/536)
* [Bug 1825719](https://bugzilla.redhat.com/show_bug.cgi?id=1825719): update object dumper [#533](https://github.com/openshift/cluster-image-registry-operator/pull/533)
* [Bug 1830363](https://bugzilla.redhat.com/show_bug.cgi?id=1830363): removing verify-sec / gosec [#544](https://github.com/openshift/cluster-image-registry-operator/pull/544)
* [Bug 1816656](https://bugzilla.redhat.com/show_bug.cgi?id=1816656): update ClusterOperator object even if operator is unmanaged [#504](https://github.com/openshift/cluster-image-registry-operator/pull/504)
* [Bug 1820242](https://bugzilla.redhat.com/show_bug.cgi?id=1820242): nodeca daemon should tolerate all taints [#511](https://github.com/openshift/cluster-image-registry-operator/pull/511)
* [Bug 1808426](https://bugzilla.redhat.com/show_bug.cgi?id=1808426): ignore most kube-system events [#503](https://github.com/openshift/cluster-image-registry-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/afad871bae080e11656f3d0464859f632536106e...bc621396a3b1386854bef7832afbd14e31b7e798)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e6a57821a09bbd4b06d617216ffc78a3edf5de54)

* [Bug 1876486](https://bugzilla.redhat.com/show_bug.cgi?id=1876486): static-pod-installer: remove deadlock by recreating inst… [#960](https://github.com/openshift/cluster-kube-apiserver-operator/pull/960)
* [Bug 1829576](https://bugzilla.redhat.com/show_bug.cgi?id=1829576): Add e2e test that ensures stale condition is removed [#840](https://github.com/openshift/cluster-kube-apiserver-operator/pull/840)
* [Bug 1802161](https://bugzilla.redhat.com/show_bug.cgi?id=1802161): `regenerate-certificates` command blocked by error `illegal base64 data at input byte 3` [#765](https://github.com/openshift/cluster-kube-apiserver-operator/pull/765)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#825](https://github.com/openshift/cluster-kube-apiserver-operator/pull/825)
* [Bug 1827337](https://bugzilla.redhat.com/show_bug.cgi?id=1827337): Remove stale condition DefaultSecurityContextConstraintsUpgradeable [#838](https://github.com/openshift/cluster-kube-apiserver-operator/pull/838)
* [Bug 1820542](https://bugzilla.redhat.com/show_bug.cgi?id=1820542): certrotationcontroller: fix typo calling wrong internal LB func [#814](https://github.com/openshift/cluster-kube-apiserver-operator/pull/814)
* [Bug 1823921](https://bugzilla.redhat.com/show_bug.cgi?id=1823921): Revert SCC Upgradeable False [#830](https://github.com/openshift/cluster-kube-apiserver-operator/pull/830)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/ab2a9b24e9061808a74860d812da0f2ee74fac0a...e6a57821a09bbd4b06d617216ffc78a3edf5de54)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/85291ab536a3a258d847e12964b4c08bb402ba87)

* [Bug 1876486](https://bugzilla.redhat.com/show_bug.cgi?id=1876486): static-pod-installer: remove deadlock by recreating inst… [#458](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/458)
* [Bug 1851398](https://bugzilla.redhat.com/show_bug.cgi?id=1851398): Check port availability in the same container [#424](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/424)
* [Bug 1853171](https://bugzilla.redhat.com/show_bug.cgi?id=1853171): Fix gce cloud provider permissions [#427](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/427)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#395](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/395)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0b20d6028556a34abf80e55b7b3c0c8ec469d29f...85291ab536a3a258d847e12964b4c08bb402ba87)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0acedc7bfdaf0b7b369fcc4feb2c71c684b51571)

* [Bug 1876486](https://bugzilla.redhat.com/show_bug.cgi?id=1876486): static-pod-installer: remove deadlock by recreating inst… [#285](https://github.com/openshift/cluster-kube-scheduler-operator/pull/285)
* [Bug 1848583](https://bugzilla.redhat.com/show_bug.cgi?id=1848583): bump(library-go): Add resource requests to installer/pruner pods [#256](https://github.com/openshift/cluster-kube-scheduler-operator/pull/256)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#239](https://github.com/openshift/cluster-kube-scheduler-operator/pull/239)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/ffb17cb15fd1833f6118ddb3835972ca3b443f22...0acedc7bfdaf0b7b369fcc4feb2c71c684b51571)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/abd0a78509a284adf0f749e01f992e7828c38cba)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet/*: adapt resource requests [#852](https://github.com/openshift/cluster-monitoring-operator/pull/852)
* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): remove cpu limits for config reloader [#848](https://github.com/openshift/cluster-monitoring-operator/pull/848)
* [Bug 1812382](https://bugzilla.redhat.com/show_bug.cgi?id=1812382): Enable discovery of Podmonitors Custom Resource across namespaces [#694](https://github.com/openshift/cluster-monitoring-operator/pull/694)
* [Bug 1807141](https://bugzilla.redhat.com/show_bug.cgi?id=1807141): jsonnet/rules.jsonnet: Add MultipleContainersOOMKilled alert [#692](https://github.com/openshift/cluster-monitoring-operator/pull/692)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/417df3571061bac207af06773d0283e3c2787c15...abd0a78509a284adf0f749e01f992e7828c38cba)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/42c1a06674b4466b190f09394bbf5ad04d9e9a76)

* [Bug 1857744](https://bugzilla.redhat.com/show_bug.cgi?id=1857744): [release-4.3] Set timeoutSeconds to reflect expected timeout for OVS commands [#725](https://github.com/openshift/cluster-network-operator/pull/725)
* [Bug 1846344](https://bugzilla.redhat.com/show_bug.cgi?id=1846344): Remove dead member from LB pool. [#666](https://github.com/openshift/cluster-network-operator/pull/666)
* [Bug 1851338](https://bugzilla.redhat.com/show_bug.cgi?id=1851338): Split etcd sg rule ports range into different sg rules [#680](https://github.com/openshift/cluster-network-operator/pull/680)
* [Bug 1846459](https://bugzilla.redhat.com/show_bug.cgi?id=1846459): Recreate DNS service upon Octavia upgrade [#667](https://github.com/openshift/cluster-network-operator/pull/667)
* [Bug 1844135](https://bugzilla.redhat.com/show_bug.cgi?id=1844135): Setting resource request for kube-proxy deployment [#658](https://github.com/openshift/cluster-network-operator/pull/658)
* [Bug 1807670](https://bugzilla.redhat.com/show_bug.cgi?id=1807670): Fixes to reliably save/restore flows [#626](https://github.com/openshift/cluster-network-operator/pull/626)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Don't override containernetworking binaries in SDN and Kuryr [#634](https://github.com/openshift/cluster-network-operator/pull/634)
* [Bug 1834858](https://bugzilla.redhat.com/show_bug.cgi?id=1834858): Kuryr: Remove old SG rules on upgrade [#637](https://github.com/openshift/cluster-network-operator/pull/637)
* [Bug 1832311](https://bugzilla.redhat.com/show_bug.cgi?id=1832311): Kuryr: Tighten security groups [#621](https://github.com/openshift/cluster-network-operator/pull/621)
* [Bug 1821294](https://bugzilla.redhat.com/show_bug.cgi?id=1821294): Normalize CPU requests on nodes [#587](https://github.com/openshift/cluster-network-operator/pull/587)
* [Bug 1814352](https://bugzilla.redhat.com/show_bug.cgi?id=1814352): Delete admission controller if double listeners is supported [#599](https://github.com/openshift/cluster-network-operator/pull/599)
* [Bug 1824866](https://bugzilla.redhat.com/show_bug.cgi?id=1824866): [release-4.3] Fix dhcp daemon api version [#598](https://github.com/openshift/cluster-network-operator/pull/598)
* [Bug 1775838](https://bugzilla.redhat.com/show_bug.cgi?id=1775838): Back-port, OVNKubernetes: introduce OVS anti-selector [#492](https://github.com/openshift/cluster-network-operator/pull/492)
* [Bug 1821166](https://bugzilla.redhat.com/show_bug.cgi?id=1821166): [Back-port 4.3] Remove logfile from ovnkube configmap [#567](https://github.com/openshift/cluster-network-operator/pull/567)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/398bed0b9091834c22c91a12066305848625ce98...42c1a06674b4466b190f09394bbf5ad04d9e9a76)


### [cluster-node-tuned](https://github.com/openshift/openshift-tuned/tree/8705571c5afaeac1953376e9eef734027267066b)

* [Bug 1825007](https://bugzilla.redhat.com/show_bug.cgi?id=1825007): Fix tuned reload behaviour on SIGHUP for invalid tuned profiles. [#38](https://github.com/openshift/openshift-tuned/pull/38)
* [Full changelog](https://github.com/openshift/openshift-tuned/compare/4de824748a0fa2dbf4b10f82a32e3784372bce54...8705571c5afaeac1953376e9eef734027267066b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eaacf04c6cc9e83ad4978c108aabb395d5a771ec)

* [Bug 1826167](https://bugzilla.redhat.com/show_bug.cgi?id=1826167): Mount host's /etc/sysctl.{conf,d/} to enable sysctl override from the host. [#128](https://github.com/openshift/cluster-node-tuning-operator/pull/128)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8e4367fb61fe895fd310bed69544033d043420d4...eaacf04c6cc9e83ad4978c108aabb395d5a771ec)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/18125a2f4cd2462c88123a906814385d82b50cb7)

* [Bug 1837353](https://bugzilla.redhat.com/show_bug.cgi?id=1837353): encryption: don't degrade when daemonset is not found [#365](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/365)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#351](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/7d51dd65fcdb95bf51cf9d435b3aa5b112ee2732...18125a2f4cd2462c88123a906814385d82b50cb7)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/d58076f2f1a9839a5887ddd7aeb4ad163b4ada8b)

* [Bug 1867175](https://bugzilla.redhat.com/show_bug.cgi?id=1867175): account for nil DaemonSet returned from library-go [#168](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/168)
* [Bug 1854133](https://bugzilla.redhat.com/show_bug.cgi?id=1854133): ensure progressing is not set to false if version is missing [#161](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/161)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/10fc162e4f4c977a9c431884b9a063fa751514d0...d58076f2f1a9839a5887ddd7aeb4ad163b4ada8b)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/bc78df73a234485eaf300884d02fef693d62b9be)

* [Bug 1858802](https://bugzilla.redhat.com/show_bug.cgi?id=1858802): add UID deallocation logic [#34](https://github.com/openshift/cluster-policy-controller/pull/34)
* [Bug 1829328](https://bugzilla.redhat.com/show_bug.cgi?id=1829328): use patch when updating namespace [#26](https://github.com/openshift/cluster-policy-controller/pull/26)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/9b6ccc80eeef2eb85f78f8a70f319cbae0c5295a...bc78df73a234485eaf300884d02fef693d62b9be)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/c7888fd728c778b8bacacdfeb00874daf2db8bc8)

* [Bug 1852429](https://bugzilla.redhat.com/show_bug.cgi?id=1852429): Fix Jenkins Monitored templates typo and other updates [#295](https://github.com/openshift/cluster-samples-operator/pull/295)
* [Bug 1826028](https://bugzilla.redhat.com/show_bug.cgi?id=1826028): revert pr 177; no override jenkins* registry hosts for mirrors [#263](https://github.com/openshift/cluster-samples-operator/pull/263)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): ensure s390/ppc64le platforms bootstrap as removed following upgrade [#285](https://github.com/openshift/cluster-samples-operator/pull/285)
* [Bug 1841996](https://bugzilla.redhat.com/show_bug.cgi?id=1841996): correctly handle removed templates watch events as part of an upgrade [#280](https://github.com/openshift/cluster-samples-operator/pull/280)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): avoid listing file system content for unsupported architures [#273](https://github.com/openshift/cluster-samples-operator/pull/273)
* [Bug 1829083](https://bugzilla.redhat.com/show_bug.cgi?id=1829083): copy install pull secret when boostrapped as removed [#267](https://github.com/openshift/cluster-samples-operator/pull/267)
* [Bug 1814396](https://bugzilla.redhat.com/show_bug.cgi?id=1814396): abort metrics in general if removed/unmanaged [#251](https://github.com/openshift/cluster-samples-operator/pull/251)
* [Bug 1811206](https://bugzilla.redhat.com/show_bug.cgi?id=1811206): purge removed imagestreams as a part of upgrade from progessing/impor… [#243](https://github.com/openshift/cluster-samples-operator/pull/243)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bfda4d3462fd7305573adb103137723d2bd4975c...c7888fd728c778b8bacacdfeb00874daf2db8bc8)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/b3582cdca736c6cabad4b4f63d5483872f6cb0e9)

* [Bug 1879110](https://bugzilla.redhat.com/show_bug.cgi?id=1879110): Move notUpgradeable check later to prevent z-stream upgrade failures [#88](https://github.com/openshift/cluster-storage-operator/pull/88)
* [Bug 1860100](https://bugzilla.redhat.com/show_bug.cgi?id=1860100): Includes validation check for VolumeSnapshot v1alpha1 CRDs [#63](https://github.com/openshift/cluster-storage-operator/pull/63)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a9548e6d0ac621a5c6e8e3544ca680280a1ca746...b3582cdca736c6cabad4b4f63d5483872f6cb0e9)


### [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator/tree/2523919a04d428bfa82602f5f6cc50ca38eb48c0)

* [Bug 1813488](https://bugzilla.redhat.com/show_bug.cgi?id=1813488): set Upgradeable to true [#84](https://github.com/openshift/cluster-svcat-apiserver-operator/pull/84)
* [Full changelog](https://github.com/openshift/cluster-svcat-apiserver-operator/compare/61c2f1d39a8c876aa5fd7ebc14ffa9b4e1360a5f...2523919a04d428bfa82602f5f6cc50ca38eb48c0)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b033473ff86183a5389b720ada21b6cb955e9405)

* [Bug 1844117](https://bugzilla.redhat.com/show_bug.cgi?id=1844117): pkg/cvo/sync_worker: Do not treat "All errors were context errors..." as success [#380](https://github.com/openshift/cluster-version-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/86b9bdba55a85e2e071603916db4c43b481e7588...b033473ff86183a5389b720ada21b6cb955e9405)


### [console](https://github.com/openshift/console/tree/19a1bfb76f0271cdbf48e3ba8363352fdb4f12a7)

* [Bug 1825722](https://bugzilla.redhat.com/show_bug.cgi?id=1825722): Handle undefined MachineConfigPools status [#6000](https://github.com/openshift/console/pull/6000)
* [Bug 1827747](https://bugzilla.redhat.com/show_bug.cgi?id=1827747): Register Subscription list page from plugin [#5163](https://github.com/openshift/console/pull/5163)
* [Bug 1796079](https://bugzilla.redhat.com/show_bug.cgi?id=1796079): Backport OLM filter by OS and ARCH [#4928](https://github.com/openshift/console/pull/4928)
* [Bug 1829046](https://bugzilla.redhat.com/show_bug.cgi?id=1829046): removes techpreview badge from serverless [#5220](https://github.com/openshift/console/pull/5220)
* [Bug 1840765](https://bugzilla.redhat.com/show_bug.cgi?id=1840765): Fixed legends on data consumption card [#5600](https://github.com/openshift/console/pull/5600)
* [Bug 1829276](https://bugzilla.redhat.com/show_bug.cgi?id=1829276): fix(prun): Rerun cancelled runs | release-4.3 [#5228](https://github.com/openshift/console/pull/5228)
* [Bug 1839036](https://bugzilla.redhat.com/show_bug.cgi?id=1839036): handle embedded pipeline spec in pipelinerun scenario [#5536](https://github.com/openshift/console/pull/5536)
* [Bug 1819289](https://bugzilla.redhat.com/show_bug.cgi?id=1819289): Fix navigation separator background colour [#4864](https://github.com/openshift/console/pull/4864)
* [Bug 1821647](https://bugzilla.redhat.com/show_bug.cgi?id=1821647): Correctly handle Unicode characters in pod terminal [#5198](https://github.com/openshift/console/pull/5198)
* [Bug 1804708](https://bugzilla.redhat.com/show_bug.cgi?id=1804708): only show "Create Project" option in project dropdown i… [#4369](https://github.com/openshift/console/pull/4369)
* [Bug 1821852](https://bugzilla.redhat.com/show_bug.cgi?id=1821852): Hide `OpenShift Cluster Manager` when branding is `azure` [#4957](https://github.com/openshift/console/pull/4957)
* [Bug 1798130](https://bugzilla.redhat.com/show_bug.cgi?id=1798130): add error boundary around OLM descriptors [#4241](https://github.com/openshift/console/pull/4241)
* [Bug 1823726](https://bugzilla.redhat.com/show_bug.cgi?id=1823726): Decode Noobaa secret details before passing to SecretValue in OBC page [#4993](https://github.com/openshift/console/pull/4993)
* [Bug 1818980](https://bugzilla.redhat.com/show_bug.cgi?id=1818980): Specify ts-loader configFile in webpack.config.ts [#4859](https://github.com/openshift/console/pull/4859)
* [Bug 1813185](https://bugzilla.redhat.com/show_bug.cgi?id=1813185): Add stable-4.4, fast-4.4 and candidate-4.4 channel for 4.4 release [#4727](https://github.com/openshift/console/pull/4727)
* [Full changelog](https://github.com/openshift/console/compare/39ad00573379c2ecb40884e694829849e23d6554...19a1bfb76f0271cdbf48e3ba8363352fdb4f12a7)


### [console-operator](https://github.com/openshift/console-operator/tree/730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)

* [Bug 1836939](https://bugzilla.redhat.com/show_bug.cgi?id=1836939): Bump godeps to get fix from library-go#799 [#430](https://github.com/openshift/console-operator/pull/430)
* [Bug 1813302](https://bugzilla.redhat.com/show_bug.cgi?id=1813302): Update oc clidownload cr to indicate that certain builds are unsupported [#409](https://github.com/openshift/console-operator/pull/409)
* [Full changelog](https://github.com/openshift/console-operator/compare/4410ab4a58a70e003d7c8578d362aa71fc1bc583...730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)


### [docker-builder](https://github.com/openshift/builder/tree/fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)

* [Bug 1832975](https://bugzilla.redhat.com/show_bug.cgi?id=1832975): use of ARG step in Dockerfile causes panic in imagebuilder [#152](https://github.com/openshift/builder/pull/152)
* [Bug 1821861](https://bugzilla.redhat.com/show_bug.cgi?id=1821861): manage-dockerfile: use the original form of ENV/LABEL [#149](https://github.com/openshift/builder/pull/149)
* [Full changelog](https://github.com/openshift/builder/compare/ba658c8b81615e5ed86ea5836b20ed738a534252...fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)


### [etcd](https://github.com/openshift/etcd/tree/87f03ed81748f8cb7a4014e954762767c976d3ae)

* [Bug 1815634](https://bugzilla.redhat.com/show_bug.cgi?id=1815634): bump etcd v3.3.22 [#53](https://github.com/openshift/etcd/pull/53)
* Automated cherry pick of #11817 on release-3.3 [#11856](https://github.com/openshift/etcd/pull/11856)
* Automated cherry pick of #11652 #11670 #11710 [#11753](https://github.com/openshift/etcd/pull/11753)
* Automated cherry pick of #11638 on release-3.3 [#11665](https://github.com/openshift/etcd/pull/11665)
* Automated cherry pick of #11630 to release-3.3 [#11632](https://github.com/openshift/etcd/pull/11632)
* Automated cherry pick of #11613 to release-3.3 [#11623](https://github.com/openshift/etcd/pull/11623)
* Automated cherry pick of #10218 #10468 on release 3.3 [#11378](https://github.com/openshift/etcd/pull/11378)
* Automated cherry pick of #11374 on release 3.3 [#11394](https://github.com/openshift/etcd/pull/11394)
* Automated cherry pick of #11308 on release-3.3 [#11314](https://github.com/openshift/etcd/pull/11314)
* Automated cherry pick of #11247 [#11253](https://github.com/openshift/etcd/pull/11253)
* cherry pick "etcd_cluster_version" metric" (#10257, #11233, #11254, #11265) to release-3.3 [#11261](https://github.com/openshift/etcd/pull/11261)
* scripts: avoid release builds on darwin machine. [#11245](https://github.com/openshift/etcd/pull/11245)
* [Full changelog](https://github.com/openshift/etcd/compare/e30a18f29c8bf1f16507d7983dde2aa51962d6c7...87f03ed81748f8cb7a4014e954762767c976d3ae)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/fbb2ed70b5db8b81abb68bb560f746751be306f7)

* [Bug 1837124](https://bugzilla.redhat.com/show_bug.cgi?id=1837124): Add the machine's name as a known NodeInternalDNS [#92](https://github.com/openshift/cluster-api-provider-gcp/pull/92)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/0600a78e9af54e22b04fabadd0b34d7b39565934...fbb2ed70b5db8b81abb68bb560f746751be306f7)


### [haproxy-router](https://github.com/openshift/router/tree/1e27f2683c53589304304b8e81261ecb55013de2)

* [Bug 1857023](https://bugzilla.redhat.com/show_bug.cgi?id=1857023): Sanitize TLS config that has key bundled with cert [#152](https://github.com/openshift/router/pull/152)
* Sync OWNERS with master branch [#164](https://github.com/openshift/router/pull/164)
* [Bug 1816540](https://bugzilla.redhat.com/show_bug.cgi?id=1816540): [4.3] Backport "remove proto-version header field" [#105](https://github.com/openshift/router/pull/105)
* [Bug 1818856](https://bugzilla.redhat.com/show_bug.cgi?id=1818856): Wildcard is not needed to copy subdirectory in dockerfile [#101](https://github.com/openshift/router/pull/101)
* [Full changelog](https://github.com/openshift/router/compare/1526917a58021c8f6e465406501c32fa3fb618b5...1e27f2683c53589304304b8e81261ecb55013de2)


### [hyperkube, tests](https://github.com/openshift/origin/tree/853223d074870a9db28c9c21f00d4ac362f88b40)

* [Bug 1880293](https://bugzilla.redhat.com/show_bug.cgi?id=1880293): OpenShift APIs become unavailable for more than 15 minutes [#25546](https://github.com/openshift/origin/pull/25546)
* [Bug 1855479](https://bugzilla.redhat.com/show_bug.cgi?id=1855479): UPSTREAM: 91648: Changes to ManagedFields is not mutation for GC [#25266](https://github.com/openshift/origin/pull/25266)
* [Bug 1857079](https://bugzilla.redhat.com/show_bug.cgi?id=1857079): Include pod /etc/hosts in ephemeral storage calculation for eviction [#25289](https://github.com/openshift/origin/pull/25289)
* [Bug 1852857](https://bugzilla.redhat.com/show_bug.cgi?id=1852857): UPSTREAM: 90740: Update createBalancedPodForNodes function in scheduler e2e [#25344](https://github.com/openshift/origin/pull/25344)
* [Bug 1860832](https://bugzilla.redhat.com/show_bug.cgi?id=1860832): Ensure Azure availability zone is always in lower cases [#25327](https://github.com/openshift/origin/pull/25327)
* Fix commit checker [#25368](https://github.com/openshift/origin/pull/25368)
* [Bug 1867402](https://bugzilla.redhat.com/show_bug.cgi?id=1867402): Drop registry.fedoraproject.org/fedora:30 in favour of quay.io/fedora:32-x86_64 [#25394](https://github.com/openshift/origin/pull/25394)
* [Bug 1845773](https://bugzilla.redhat.com/show_bug.cgi?id=1845773): [release-4.3] kubelet: block non-forwarded packets from crossing the localhost boundary [#25144](https://github.com/openshift/origin/pull/25144)
* [Bug 1843877](https://bugzilla.redhat.com/show_bug.cgi?id=1843877): UPSTREAM: 91008: Do not swallow NotFound error for DeletePod in dsc.manage [#25063](https://github.com/openshift/origin/pull/25063)
* [Bug 1851606](https://bugzilla.redhat.com/show_bug.cgi?id=1851606): remove problematic upstream client plugin test [#25215](https://github.com/openshift/origin/pull/25215)
* [Bug 1838196](https://bugzilla.redhat.com/show_bug.cgi?id=1838196): stop printing usage help when the server commands exit [#25003](https://github.com/openshift/origin/pull/25003)
* [Bug 1847089](https://bugzilla.redhat.com/show_bug.cgi?id=1847089): UPSTREAM: 86691: fix: azure disk could not mounted on Standard_DC4s/DC2s [#25110](https://github.com/openshift/origin/pull/25110)
* [Bug 1848976](https://bugzilla.redhat.com/show_bug.cgi?id=1848976): reenable jenkins e2e in e2e-gcp-builds [#25171](https://github.com/openshift/origin/pull/25171)
* [Bug 1848622](https://bugzilla.redhat.com/show_bug.cgi?id=1848622): [release-4.3]: UPSTREAM: 92166: fix: GetLabelsForVolume panic issue for azure disk PV [#25138](https://github.com/openshift/origin/pull/25138)
* [Bug 1841988](https://bugzilla.redhat.com/show_bug.cgi?id=1841988): more upstream to installed template switch in image-eco (django this time) [#25046](https://github.com/openshift/origin/pull/25046)
* [Bug 1822487](https://bugzilla.redhat.com/show_bug.cgi?id=1822487): UPSTREAM: 89794: Clean up event messages for errors [#25049](https://github.com/openshift/origin/pull/25049)
* [Bug 1830093](https://bugzilla.redhat.com/show_bug.cgi?id=1830093): provides a temporal fix to improve CRD publishing e2e tests in an HA setup [#24940](https://github.com/openshift/origin/pull/24940)
* [Bug 1829959](https://bugzilla.redhat.com/show_bug.cgi?id=1829959): [release-4.3] Introduce IBMCloud provider, skip/fix tests [#24829](https://github.com/openshift/origin/pull/24829)
* [Bug 1835948](https://bugzilla.redhat.com/show_bug.cgi?id=1835948): unskip template extended tests [#24983](https://github.com/openshift/origin/pull/24983)
* [Bug 1822680](https://bugzilla.redhat.com/show_bug.cgi?id=1822680): UPSTREAM: 88424: Respect ignore-volume-az option in admission plugin [#24855](https://github.com/openshift/origin/pull/24855)
* [Bug 1798461](https://bugzilla.redhat.com/show_bug.cgi?id=1798461): makes unavailableGauge metric to always reflect the current state of a service [#24501](https://github.com/openshift/origin/pull/24501)
* [Bug 1830130](https://bugzilla.redhat.com/show_bug.cgi?id=1830130): Fix nil reference when accessing un-migrated platform status [#24810](https://github.com/openshift/origin/pull/24810)
* [Bug 1813847](https://bugzilla.redhat.com/show_bug.cgi?id=1813847): fixes configmap "extension-apiserver-authentication" not found [#24699](https://github.com/openshift/origin/pull/24699)
* [Bug 1822955](https://bugzilla.redhat.com/show_bug.cgi?id=1822955): UPSTREAM: 88734: Work-around for missing metrics on CRI-O exited containers [#24860](https://github.com/openshift/origin/pull/24860)
* [Full changelog](https://github.com/openshift/origin/compare/a02f27a58294ab787ea325d6d3f7431865233b67...853223d074870a9db28c9c21f00d4ac362f88b40)


### [insights-operator](https://github.com/openshift/insights-operator/tree/97333c699439bceb6b042a8940721138493f9083)

* [Bug 1885261](https://bugzilla.redhat.com/show_bug.cgi?id=1885261): Add new team members to OWNERS [#203](https://github.com/openshift/insights-operator/pull/203)
* [Bug 1836815](https://bugzilla.redhat.com/show_bug.cgi?id=1836815): Gather image registry config [#111](https://github.com/openshift/insights-operator/pull/111)
* [Bug 1874018](https://bugzilla.redhat.com/show_bug.cgi?id=1874018): Limit collection of ALERTS metric to 1000 lines (~500KiB) to avoid unbearably large archives [#169](https://github.com/openshift/insights-operator/pull/169)
* [Bug 1843923](https://bugzilla.redhat.com/show_bug.cgi?id=1843923): Don't delay first [#137](https://github.com/openshift/insights-operator/pull/137)
* [Bug 1874427](https://bugzilla.redhat.com/show_bug.cgi?id=1874427): Add @natiiix to OWNERS [#170](https://github.com/openshift/insights-operator/pull/170)
* [Bug 1825758](https://bugzilla.redhat.com/show_bug.cgi?id=1825758): Collecting config maps [#105](https://github.com/openshift/insights-operator/pull/105)
* [Bug 1821149](https://bugzilla.redhat.com/show_bug.cgi?id=1821149): Cherry-pick release 4.3 Support for specific http proxy for the service [#91](https://github.com/openshift/insights-operator/pull/91)
* [Full changelog](https://github.com/openshift/insights-operator/compare/98ecaca13995901ce2b36c7c01bd6735f95142da...97333c699439bceb6b042a8940721138493f9083)


### [ironic](https://github.com/openshift/ironic-image/tree/917efbeb9739b47acae2f30730ca9d3c4ba84513)

* [Bug 1847317](https://bugzilla.redhat.com/show_bug.cgi?id=1847317): Add WORKDIR to builder [#82](https://github.com/openshift/ironic-image/pull/82)
* [Full changelog](https://github.com/openshift/ironic-image/compare/b9e59afd03655d1694318e83d1bc7f98fc510512...917efbeb9739b47acae2f30730ca9d3c4ba84513)


### [jenkins, jenkins-agent-maven](https://github.com/openshift/jenkins/tree/60738dde42afde4fead149fb2649fb863d69206b)

* [Bug 1875257](https://bugzilla.redhat.com/show_bug.cgi?id=1875257): Bump Jenkins version to 2.235.5 (cve) [#1154](https://github.com/openshift/jenkins/pull/1154)
* [Bug 1857557](https://bugzilla.redhat.com/show_bug.cgi?id=1857557): Bump matrix plugin [#1133](https://github.com/openshift/jenkins/pull/1133)
* [Bug 1861842](https://bugzilla.redhat.com/show_bug.cgi?id=1861842): CVE-2020-2182 credentials-binding 1.23 [#1124](https://github.com/openshift/jenkins/pull/1124)
* [Bug 1857548](https://bugzilla.redhat.com/show_bug.cgi?id=1857548): bump jenkins to 2.235.2 [#1121](https://github.com/openshift/jenkins/pull/1121)
* [Bug 1819530](https://bugzilla.redhat.com/show_bug.cgi?id=1819530): update subversion plugin [#1131](https://github.com/openshift/jenkins/pull/1131)
* [Bug 1847452](https://bugzilla.redhat.com/show_bug.cgi?id=1847452): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1083](https://github.com/openshift/jenkins/pull/1083)
* [Bug 1843941](https://bugzilla.redhat.com/show_bug.cgi?id=1843941): bump jenkins to 2.222.1 and update plugins [#1067](https://github.com/openshift/jenkins/pull/1067)
* [Bug 1848335](https://bugzilla.redhat.com/show_bug.cgi?id=1848335): [release-4.3] Support Nodejs 12 Agent [#1075](https://github.com/openshift/jenkins/pull/1075)
* [Bug 1826172](https://bugzilla.redhat.com/show_bug.cgi?id=1826172): handle ingress certificate signed by custom ca [#1049](https://github.com/openshift/jenkins/pull/1049)
* [Full changelog](https://github.com/openshift/jenkins/compare/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26...60738dde42afde4fead149fb2649fb863d69206b)


### [jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/f1b145a8c81b646f6e921202c920c272a9fd0da5)

* [Bug 1847452](https://bugzilla.redhat.com/show_bug.cgi?id=1847452): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1083](https://github.com/openshift/jenkins/pull/1083)
* [Bug 1843941](https://bugzilla.redhat.com/show_bug.cgi?id=1843941): bump jenkins to 2.222.1 and update plugins [#1067](https://github.com/openshift/jenkins/pull/1067)
* [Bug 1848335](https://bugzilla.redhat.com/show_bug.cgi?id=1848335): [release-4.3] Support Nodejs 12 Agent [#1075](https://github.com/openshift/jenkins/pull/1075)
* [Bug 1826172](https://bugzilla.redhat.com/show_bug.cgi?id=1826172): handle ingress certificate signed by custom ca [#1049](https://github.com/openshift/jenkins/pull/1049)
* [Full changelog](https://github.com/openshift/jenkins/compare/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26...f1b145a8c81b646f6e921202c920c272a9fd0da5)


### [keepalived-ipfailover, pod](https://github.com/openshift/images/tree/300794f6c18b6208eeb388f616642358cc759f29)

* [Bug 1851398](https://bugzilla.redhat.com/show_bug.cgi?id=1851398): Add iproute package to get `ss` tool for port wait [#22](https://github.com/openshift/images/pull/22)
* [Full changelog](https://github.com/openshift/images/compare/1be922de56a99f4e254eb9c2fc42d30e5596cf77...300794f6c18b6208eeb388f616642358cc759f29)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/1bd32df6cd4f6c4907d7751939d0af555ec6a03d)

* [Bug 1859869](https://bugzilla.redhat.com/show_bug.cgi?id=1859869): [release-4.3] Add support for --may-exist when adding the bridge in sdn [#167](https://github.com/openshift/sdn/pull/167)
* [Bug 1853198](https://bugzilla.redhat.com/show_bug.cgi?id=1853198): [release-4.3] Backport OVS-retries [#156](https://github.com/openshift/sdn/pull/156)
* [Bug 1840762](https://bugzilla.redhat.com/show_bug.cgi?id=1840762): Fix egressVXLANMonitor and egressIPTracker deadlock [#146](https://github.com/openshift/sdn/pull/146)
* [Bug 1839109](https://bugzilla.redhat.com/show_bug.cgi?id=1839109): [backport-4.3] node/vnids: Correctly handle case where NetNamespace watch is far behind [#144](https://github.com/openshift/sdn/pull/144)
* [Bug 1804745](https://bugzilla.redhat.com/show_bug.cgi?id=1804745): Revert excessive proxy logging [#109](https://github.com/openshift/sdn/pull/109)
* [Bug 1816390](https://bugzilla.redhat.com/show_bug.cgi?id=1816390): handle pod updates correctly in networkpolicy [#129](https://github.com/openshift/sdn/pull/129)
* [Full changelog](https://github.com/openshift/sdn/compare/6c1da609d2587ad67629485035fe7ba87b7eb936...1bd32df6cd4f6c4907d7751939d0af555ec6a03d)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/2dda0643ade9ba1b4e04de08a3c927d156e5fced)

* [Bug 1786298](https://bugzilla.redhat.com/show_bug.cgi?id=1786298): Bunch of kuryr-daemon NetlinkError fixes [#292](https://github.com/openshift/kuryr-kubernetes/pull/292)
* [Bug 1845923](https://bugzilla.redhat.com/show_bug.cgi?id=1845923): Get RPM and Kuryr version from git [#273](https://github.com/openshift/kuryr-kubernetes/pull/273)
* [Bug 1852834](https://bugzilla.redhat.com/show_bug.cgi?id=1852834): Fix hacking min version to 3.0.1 [#294](https://github.com/openshift/kuryr-kubernetes/pull/294)
* [Bug 1846259](https://bugzilla.redhat.com/show_bug.cgi?id=1846259): Ensure LB resources with ERROR status are deleted [#276](https://github.com/openshift/kuryr-kubernetes/pull/276)
* [Bug 1846228](https://bugzilla.redhat.com/show_bug.cgi?id=1846228): Skip LB sg update when no endpoint is found [#275](https://github.com/openshift/kuryr-kubernetes/pull/275)
* [Bug 1828699](https://bugzilla.redhat.com/show_bug.cgi?id=1828699): Ensure NP are enforced on SVC with different port and target port [#227](https://github.com/openshift/kuryr-kubernetes/pull/227)
* [Bug 1829840](https://bugzilla.redhat.com/show_bug.cgi?id=1829840): Ensure LB state annotation sg matches the SG on the LB [#225](https://github.com/openshift/kuryr-kubernetes/pull/225)
* [Bug 1818067](https://bugzilla.redhat.com/show_bug.cgi?id=1818067): Ensure no attempt to deleted sg rules owned by Octavia happens [#208](https://github.com/openshift/kuryr-kubernetes/pull/208)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/fff0456c606410549d343a746bca166bb160fe3d...2dda0643ade9ba1b4e04de08a3c927d156e5fced)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/27c6396760b749b063726186dd14b1e0ea0f00bc)

* BUG 1859308: fix memory leak that leads to unresponsive libvirt URI [#205](https://github.com/openshift/cluster-api-provider-libvirt/pull/205)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/58b373500e8d9180bbfd38ca4663129d1bfa1ee9...27c6396760b749b063726186dd14b1e0ea0f00bc)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/129b63f8a58c2502dfabcd42eda8ae212ca1bb1d)

* BUG 1807762: Drop run-level [#500](https://github.com/openshift/machine-api-operator/pull/500)
* BUG 1807762: Remove explicit securityContext and add granular securitycontextconstraints "use" permissions in machine-api-controllers clusterRole [#635](https://github.com/openshift/machine-api-operator/pull/635)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/409274d4c429590723a1cea87f7435b341d0562f...129b63f8a58c2502dfabcd42eda8ae212ca1bb1d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/747de90fbfb379582694160dcc1181734c795695)

* [Bug 1874399](https://bugzilla.redhat.com/show_bug.cgi?id=1874399): Pull the image using authfile before creating the container layer [#2069](https://github.com/openshift/machine-config-operator/pull/2069)
* [Bug 1845494](https://bugzilla.redhat.com/show_bug.cgi?id=1845494): daemon: fix restoring file logic to avoid unnecessary deletion [#1796](https://github.com/openshift/machine-config-operator/pull/1796)
* [Bug 1855304](https://bugzilla.redhat.com/show_bug.cgi?id=1855304): Parse the kubelet.conf data after an update [#1916](https://github.com/openshift/machine-config-operator/pull/1916)
* [Bug 1846358](https://bugzilla.redhat.com/show_bug.cgi?id=1846358): MCD: tolerate all taints [#1816](https://github.com/openshift/machine-config-operator/pull/1816)
* [Bug 1826021](https://bugzilla.redhat.com/show_bug.cgi?id=1826021): Fix a problem with a greedy regular expression matching more than needed [#1913](https://github.com/openshift/machine-config-operator/pull/1913)
* [Bug 1851949](https://bugzilla.redhat.com/show_bug.cgi?id=1851949): Set the pod-infra-container-image flag in kubelet to ocp pause image [#1877](https://github.com/openshift/machine-config-operator/pull/1877)
* [Bug 1840300](https://bugzilla.redhat.com/show_bug.cgi?id=1840300): kubelet: add log level environment variable [#1752](https://github.com/openshift/machine-config-operator/pull/1752)
* [Bug 1827540](https://bugzilla.redhat.com/show_bug.cgi?id=1827540): pkg/server: disable weak TLS versions [#1681](https://github.com/openshift/machine-config-operator/pull/1681)
* [Bug 1837124](https://bugzilla.redhat.com/show_bug.cgi?id=1837124): templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml [#1738](https://github.com/openshift/machine-config-operator/pull/1738)
* [Bug 1838984](https://bugzilla.redhat.com/show_bug.cgi?id=1838984): [release-4.3] templates: Don't enable machine-config-daemon-host.service by default [#1747](https://github.com/openshift/machine-config-operator/pull/1747)
* [Bug 1811827](https://bugzilla.redhat.com/show_bug.cgi?id=1811827): baremetal: Add missing network-online dependency to kubelet unit [#1549](https://github.com/openshift/machine-config-operator/pull/1549)
* [Bug 1804067](https://bugzilla.redhat.com/show_bug.cgi?id=1804067): Prevent etcd-member-add.sh from running on an active master [#1740](https://github.com/openshift/machine-config-operator/pull/1740)
* [Bug 1825221](https://bugzilla.redhat.com/show_bug.cgi?id=1825221): templates/master:openshift-recovery-tools pass --authfile to podman create [#1661](https://github.com/openshift/machine-config-operator/pull/1661)
* [Bug 1801430](https://bugzilla.redhat.com/show_bug.cgi?id=1801430): Write environment variables needed for etcdctl execution into ~/.profile [#1726](https://github.com/openshift/machine-config-operator/pull/1726)
* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): The Multus CNI configuration file "00-multus.conf" should not be removed [#1646](https://github.com/openshift/machine-config-operator/pull/1646)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Add containernetworking-plugin RPM's bin location to CRI-O config [#1722](https://github.com/openshift/machine-config-operator/pull/1722)
* [Bug 1822269](https://bugzilla.redhat.com/show_bug.cgi?id=1822269): Add new crio.conf field to the template [#1668](https://github.com/openshift/machine-config-operator/pull/1668)
* [Bug 1817458](https://bugzilla.redhat.com/show_bug.cgi?id=1817458): [release-4.3] fix wrongful backup of files not originally on the system [#1686](https://github.com/openshift/machine-config-operator/pull/1686)
* [Bug 1801824](https://bugzilla.redhat.com/show_bug.cgi?id=1801824): kubelet: add more system reservation to protect node [#1458](https://github.com/openshift/machine-config-operator/pull/1458)
* [Bug 1822750](https://bugzilla.redhat.com/show_bug.cgi?id=1822750): [ctrcfg controller] Use a struct array instead of map when creating new ignitions [#1645](https://github.com/openshift/machine-config-operator/pull/1645)
* [Bug 1824282](https://bugzilla.redhat.com/show_bug.cgi?id=1824282): [release 4.3] cri-o: set log level to info [#1635](https://github.com/openshift/machine-config-operator/pull/1635)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f6d1fe753cbcecb3aa1c2d3d3edd4a5d04ffca54...747de90fbfb379582694160dcc1181734c795695)


### [multus-cni](https://github.com/openshift/multus-cni/tree/419b44ce151c1e996698c9272ac15abe843ec925)

* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): Adds readinessindicatorfile check on CNI DEL [#65](https://github.com/openshift/multus-cni/pull/65)
* [Full changelog](https://github.com/openshift/multus-cni/compare/9e85cb1ba34b516b33da18cee4500be6a61fdf74...419b44ce151c1e996698c9272ac15abe843ec925)


### [oauth-server](https://github.com/openshift/oauth-server/tree/e61459a3903327dddb515a54cd005d4494dfdd38)

* [Bug 1836974](https://bugzilla.redhat.com/show_bug.cgi?id=1836974): reduce ldap connection timeout from 60s to 30s [#43](https://github.com/openshift/oauth-server/pull/43)
* [Bug 1823777](https://bugzilla.redhat.com/show_bug.cgi?id=1823777): Add back some missing metrics [#41](https://github.com/openshift/oauth-server/pull/41)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3065e59ce948f10364d0dd88cb70b860ec65ee2...e61459a3903327dddb515a54cd005d4494dfdd38)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/95686282f6f308e824645f13cd7a9ee1a936216b)

* [Bug 1829328](https://bugzilla.redhat.com/show_bug.cgi?id=1829328): allow patch for updating namespace [#101](https://github.com/openshift/openshift-apiserver/pull/101)
* [Bug 1821500](https://bugzilla.redhat.com/show_bug.cgi?id=1821500): bump to kube 1.17.4 [#109](https://github.com/openshift/openshift-apiserver/pull/109)
* [Bug 1833019](https://bugzilla.redhat.com/show_bug.cgi?id=1833019): include ISI error message changes when determining new generation need [#106](https://github.com/openshift/openshift-apiserver/pull/106)
* [release 4-3]  Bug 1824127: fixes configmap "extension-apiserver-authentication" not found [#92](https://github.com/openshift/openshift-apiserver/pull/92)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/0b018bee77bd24511229d65001265d56d689cc97...95686282f6f308e824645f13cd7a9ee1a936216b)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/b53122d6370a1a7241e53cc5686a751faec7d684)

* [Bug 1849176](https://bugzilla.redhat.com/show_bug.cgi?id=1849176): Revert "Remove unnecessary yum install" [#134](https://github.com/openshift/openshift-controller-manager/pull/134)
* [Bug 1849176](https://bugzilla.redhat.com/show_bug.cgi?id=1849176): Allow image push after postCommit script completes [#132](https://github.com/openshift/openshift-controller-manager/pull/132)
* [Bug 1831888](https://bugzilla.redhat.com/show_bug.cgi?id=1831888): StatefulSets v1 do not trigger on image changes [#116](https://github.com/openshift/openshift-controller-manager/pull/116)
* [Bug 1813420](https://bugzilla.redhat.com/show_bug.cgi?id=1813420): fix img reg ref on ICT if OCM knows img reg host before apiserver [#75](https://github.com/openshift/openshift-controller-manager/pull/75)
* [Bug 1819850](https://bugzilla.redhat.com/show_bug.cgi?id=1819850): Increase pull secrets controller QPS to 100 [#91](https://github.com/openshift/openshift-controller-manager/pull/91)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/c7c802a8a67697782cfaa10f266c36f9adb66860...b53122d6370a1a7241e53cc5686a751faec7d684)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/06c41918200d7ad324b10ae959d1240083f13513)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet: set cpu requests [#49](https://github.com/openshift/openshift-state-metrics/pull/49)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/c01d2de651071389d2621c46e934fd9cb2bf4b8d...06c41918200d7ad324b10ae959d1240083f13513)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/3af2a4b1875bc4af5dea61044792e6626a4d6017)

* [Bug 1859748](https://bugzilla.redhat.com/show_bug.cgi?id=1859748): fix(resolver): Exclude all installed packages in dependency search [#1676](https://github.com/operator-framework/operator-lifecycle-manager/pull/1676)
* [Bug 1856125](https://bugzilla.redhat.com/show_bug.cgi?id=1856125): Resolve only default channels [#1634](https://github.com/operator-framework/operator-lifecycle-manager/pull/1634)
* [Bug 1843703](https://bugzilla.redhat.com/show_bug.cgi?id=1843703): Deleting a CSV removes related CSV metrics [#1569](https://github.com/operator-framework/operator-lifecycle-manager/pull/1569)
* [Bug 1846220](https://bugzilla.redhat.com/show_bug.cgi?id=1846220): Update PkgManifest upon catsrc update [#1581](https://github.com/operator-framework/operator-lifecycle-manager/pull/1581)
* [Bug 1843694](https://bugzilla.redhat.com/show_bug.cgi?id=1843694): fix(resolver): don't pick operator from same package when resolve requiredAPI [#1571](https://github.com/operator-framework/operator-lifecycle-manager/pull/1571)
* [Bug 1840939](https://bugzilla.redhat.com/show_bug.cgi?id=1840939): fix(queues): use a single gc queue [#1553](https://github.com/operator-framework/operator-lifecycle-manager/pull/1553)
* [Bug 1827822](https://bugzilla.redhat.com/show_bug.cgi?id=1827822): Generation bug 4.3 [#1485](https://github.com/operator-framework/operator-lifecycle-manager/pull/1485)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): feat(catalogs): add spec validation for sourcetypes [#1508](https://github.com/operator-framework/operator-lifecycle-manager/pull/1508)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): Prevent nil pointer dereference [#1486](https://github.com/operator-framework/operator-lifecycle-manager/pull/1486)
* [Bug 1821318](https://bugzilla.redhat.com/show_bug.cgi?id=1821318): feat(packagemanifest): add default os/arch labels if not present [#1432](https://github.com/operator-framework/operator-lifecycle-manager/pull/1432)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/5ff376fd8c14bf6a99b314ad402ceb5641f71fdd...3af2a4b1875bc4af5dea61044792e6626a4d6017)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/cb36f0b17d7c92c3085d54e54efe0bf279e07e04)

* [Bug 1849153](https://bugzilla.redhat.com/show_bug.cgi?id=1849153): Ensure correct registry image [#317](https://github.com/operator-framework/operator-marketplace/pull/317)
* [Bug 1805271](https://bugzilla.redhat.com/show_bug.cgi?id=1805271): increase initial delay for appregistry pods [#301](https://github.com/operator-framework/operator-marketplace/pull/301)
* [Bug 1813995](https://bugzilla.redhat.com/show_bug.cgi?id=1813995): support serving marketplace prometheus metrics over https [#296](https://github.com/operator-framework/operator-marketplace/pull/296)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c6534cc7f7e13e5a24c63c75485ef443f1892d9f...cb36f0b17d7c92c3085d54e54efe0bf279e07e04)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/a9ae6f9f68c17af4f7d60e5292603f05cb3a3b7e)

* [Bug 1849152](https://bugzilla.redhat.com/show_bug.cgi?id=1849152): fix(server): make a copy of the db before migrating it [#364](https://github.com/operator-framework/operator-registry/pull/364)
* [Bug 1843647](https://bugzilla.redhat.com/show_bug.cgi?id=1843647): Detect replacement cycles while adding package channels [#345](https://github.com/operator-framework/operator-registry/pull/345)
* [Bug 1816185](https://bugzilla.redhat.com/show_bug.cgi?id=1816185): fix(dns): fix slow dns resolution of localhost for grpc health probe [#331](https://github.com/operator-framework/operator-registry/pull/331)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/36ee3a437614ca1cb781465e590613e01556e756...a9ae6f9f68c17af4f7d60e5292603f05cb3a3b7e)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/33f333ed95cc1a9c5c86e6b8f57fcae1e70d4102)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): pkg/alertmanager: mergepatch alertmanager containers [#75](https://github.com/openshift/prometheus-operator/pull/75)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/a6330ca349aae64643c2d0d7dff08ed2a444ccd5...33f333ed95cc1a9c5c86e6b8f57fcae1e70d4102)


### [telemeter](https://github.com/openshift/telemeter/tree/1c05598922c2a9160c83057e7786de06a8b0080b)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet/telemeter: set cpu requests, unset limits [#346](https://github.com/openshift/telemeter/pull/346)
* [Full changelog](https://github.com/openshift/telemeter/compare/227ae59d226d17eee26a60621bc884f4e8e83254...1c05598922c2a9160c83057e7786de06a8b0080b)