# 4.3.35

Created: 2020-09-02 03:08:29 +0000 UTC

Image Digest: `sha256:557107b1a5911d73d9fa749cf103cc3b45d688bf0da991471279042eec84f830`

Promoted from registry.svc.ci.openshift.org/ocp/release:4.3.0-0.nightly-2020-09-01-015751


## Changes from 4.3.10

### Components

* Kubernetes 1.16.2


### Rebuilt images without code change

* [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws) git [86a378fe](https://github.com/openshift/cluster-api-provider-aws/commit/86a378fedb20eb9a998047407594baabe80dc345) `sha256:71f2552c7be7361d4e28e7c36e20802c088917696e506760273fac92be50ea2a`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [a2a47790](https://github.com/openshift/cluster-api-provider-baremetal/commit/a2a477909c1d518ef7cf28601e5d7db56a4d4069) `sha256:8103861017a2fb33675062a73af9765da286337b2d21f5790ade0020985e779a`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [106f76b4](https://github.com/openshift/cluster-bootstrap/commit/106f76b4d183cc24e58d26b3b57b2bf1e2362a9d) `sha256:46cc53787e75413bcddc967452649e4ab4e94826269946966f57dff68332e589`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [d5ddbcdd](https://github.com/openshift/cluster-config-operator/commit/d5ddbcdd4ec87bd4d0d109e81ed0be5dafd86061) `sha256:cf435388f8bd037254129a6d86c58b8feb81854af6f610f690e9e92ad416abaa`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [d86b0316](https://github.com/openshift/cluster-ingress-operator/commit/d86b0316cc9c9b3be95c7bb2a8924be3d08a5db9) `sha256:10b1798c63b7700f19ae29d9786ffa62fdd20713108b199d13763e20d2392bde`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [dd3147d9](https://github.com/openshift/cluster-machine-approver/commit/dd3147d9b2d1e54a2050d51390d1eca62d6189fc) `sha256:b37a8e180f47d2734724bdb4af371601f21816f6d25547b48ba83eb0cf0f0d36`
* [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator) git [727d37d9](https://github.com/openshift/cluster-svcat-controller-manager-operator/commit/727d37d929cb388744362c98fbcaf9ef547cd4b6) `sha256:d77957f859d67feff23886d3e868f3d15d9dfb6a7c5471f6a9abd8dfb1c225c7`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [cca4ce69](https://github.com/openshift/cluster-update-keys/commit/cca4ce696383e70ae669e770bd63265a9540b721) `sha256:bad449c2ca44637e214e160f8bac19646c0aa6a0a4471fdf0b0cef4e387469db`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [841b0bfe](https://github.com/openshift/configmap-reload/commit/841b0bfe743999fcc9b0528ea689f728eb92aee7) `sha256:a981ca1452765021bdf94079e0b91a62980eb9bafd340e1001c94ab3f653fa6b`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [386465fe](https://github.com/openshift/containernetworking-plugins/commit/386465fe170c0e7299b357efbace235a3e5ce7ee) `sha256:7038367facd4ea0a6eb001a9ecc57fed26b4a9a25181c6b5c321f8023dce325d`
* [coredns](https://github.com/openshift/coredns) git [052209af](https://github.com/openshift/coredns/commit/052209affb1fe85bdd87b37e2cf9a6fb98585e91) `sha256:9a984a555dd4d08b9c3572ed367fe27c6b38d1b5c03a3f6defb85eab983a9293`
* [docker-registry](https://github.com/openshift/image-registry) git [7511ca65](https://github.com/openshift/image-registry/commit/7511ca65e07b586464e5ec2e9efde67bfa48c3e2) `sha256:921ee21bb2bf3f1d62ccee1d6828c3c41fb99438ec3327709ce70bec6c532d0e`
* [grafana](https://github.com/openshift/grafana) git [e2261e14](https://github.com/openshift/grafana/commit/e2261e142909cb0fe70fc0996d7d375e57956589) `sha256:3919074ce21f200676213453508ae262175a9b66f528a730a88915e5739ab62e`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [5f57661e](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/5f57661eaaa3f8714c2b1904313b9ecf1a7bdba4) `sha256:c57852ba4bcf5cc38e7e0e88ba752c854fca2ea5e6023fa9c65910aec655e40f`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [b83630ce](https://github.com/openshift/ironic-inspector-image/commit/b83630cefa1a72b2d8ce03c9701acb4f117ab6f5) `sha256:2ed0cc51189f8b2238277eeb5700b6c47e22af1e9d08ec50cd100fb8605b5f86`
* [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [9a9e4d48](https://github.com/openshift/ironic-ipa-downloader/commit/9a9e4d486d5773427ff44cdd7fcb821431d80853) `sha256:4a3442ba6bb3301b842067cc6d75a94ecc775affef250b6c8259946fc25fea28`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [2405ba63](https://github.com/openshift/ironic-rhcos-downloader/commit/2405ba63f22db1cbda255cfccf2fc84f15faa6ee) `sha256:402442e59e2f15d4099847ee8b7dcbb65a5a2837cfe50e4ec8db221c06054498`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [e33314bd](https://github.com/openshift/ironic-static-ip-manager/commit/e33314bda6f366472a2371c5598ff2d7dba111c8) `sha256:3a958a211e0be4b6db50ed899745d7a33d532365b4bb65efe199777a03457428`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [3d1c61e9](https://github.com/openshift/k8s-prometheus-adapter/commit/3d1c61e9a783d8c4a764b130837682fa9ab8e9df) `sha256:b6e78e1702f804f23f55eaaebb1587487a3ffd1fd1b9b769e76cae85047db761`
* [kube-client-agent](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:b0f7e230d2d90cccc3f9e5087dfda095dbf9a48d1ca07dc5c5ad9e2709bd7500`
* [kube-etcd-signer-server](https://github.com/openshift/kubecsr) git [878550ca](https://github.com/openshift/kubecsr/commit/878550ca31308b77ebe4bf5574440a1457ec7fe7) `sha256:3933cd5fd8de1ecc2dea19145045a97006d2350d1e50ef00ccd4560e19513a8c`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [84e7dac6](https://github.com/openshift/kube-rbac-proxy/commit/84e7dac69f8e3f90620729ee730327a3e168963d) `sha256:a7389cda6a999df24dac94247342a5e14485dcf93ed75ac68c5c2ed484a8ecb3`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [83f9fc56](https://github.com/openshift/kube-state-metrics/commit/83f9fc5685cf3d7732687e1f07da6b27d6901c4f) `sha256:a3128c4131c426a1df30d544daa9196f7049411bf73445ed41b220d6442a0aa0`
* [local-storage-static-provisioner](https://github.com/openshift/sig-storage-local-static-provisioner) git [da340b47](https://github.com/openshift/sig-storage-local-static-provisioner/commit/da340b475eb847c17cefe2f2f9bf9be1a3382d4a) `sha256:d4d6358304f5613591b4103a9f2948a846f37263cd7c1da24ffee6f0e470cb7d`
* machine-os-content `sha256:4192378a72aa43618505273119881e6dd485f9ef1098e156d4ee022a085a1012`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [24135de2](https://github.com/openshift/mdns-publisher/commit/24135de29fc348f3ef455a288013cc1912d969bc) `sha256:787bf5229625711a01e31e824fae9c5b9a9c6ff66b4d82168907675bbb01d8d1`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [ead10a3c](https://github.com/openshift/multus-admission-controller/commit/ead10a3cf30c5b4a2fbd7c987d83c07a46c5d5da) `sha256:4c550e27a12cbb406638fd79b34df312066d27d1f26e798597a32406824a2caf`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1322dc43](https://github.com/openshift/route-override-cni/commit/1322dc43712e12a021f5e83c8d752e7d8c30aa6e) `sha256:8095b3cd97dcf5b08833c0ca5a2e3eae50810c785d22099034978078bc0407f1`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [9cca449d](https://github.com/openshift/whereabouts-cni/commit/9cca449d619ed0f93a06aca9255004672bb6c96e) `sha256:17c89408d027303022880396641e47d210ea6f5e0e77c2e75e666a5c5ae12292`
* [must-gather](https://github.com/openshift/must-gather) git [23037ad1](https://github.com/openshift/must-gather/commit/23037ad16c0aafd7186431c93ebca3f0d426a08d) `sha256:58bba19084b2c4ead3bad2575491cd98c2475c80934c75cc01da2b91ce3fc75e`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [d5df3188](https://github.com/openshift/oauth-proxy/commit/d5df318830efb30c128e38390d26e695ac33c954) `sha256:0b8044828bcc1c426088901c1e61d0e0af2360afc7808b00578be7dc257b0a9e`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [7aa99e29](https://github.com/openshift/cluster-api-provider-openstack/commit/7aa99e291276aa2f26260f8e654078ab6c2464f0) `sha256:3b1a4d2068f5aceaba452edb7dd4c2f136bce38b1ac37f74459c8eb3049a059e`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [b8153a7f](https://github.com/openshift/prom-label-proxy/commit/b8153a7f39f1a34c03059f1b9dfb05d2c1297414) `sha256:eae3e6947f6bd5fd3530a51bf53b50d00ea4dbe08cdb9f924098bf569ff90bd7`
* [prometheus](https://github.com/openshift/prometheus) git [c086098d](https://github.com/openshift/prometheus/commit/c086098da5f01ab9565bdda772d3459bea2913f2) `sha256:ca657980d4b9c432afb4f16ab72a2ddd309649363bbc0f1e13ef952f7015ae90`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [11aa2a87](https://github.com/openshift/prometheus-alertmanager/commit/11aa2a87c5bfb84cba76b90a3867a06a55e2605e) `sha256:f95c4d173bf641a0f8e26a6deb91defa3768cee50a008558b3699f146b8c566e`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [d0b913aa](https://github.com/openshift/node_exporter/commit/d0b913aa0dc58d87bab16ed5a8799a9e06891705) `sha256:06875d12f7064ce086476bbf05551d4494112fca059001b51c435c18c30783f9`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [dd7235b4](https://github.com/openshift/service-ca-operator/commit/dd7235b4568fe22232f9cee2855967da5e0c52b2) `sha256:2d26d20edf48a1dc5c1fce41da47e477753d483d2e1c2cac0ed2955a0f489c7b`
* [service-catalog](https://github.com/openshift/service-catalog) git [6f75f804](https://github.com/openshift/service-catalog/commit/6f75f8047dfab6ca8b979833f7f2a6036deee488) `sha256:ff247a81ce4f09c0266a92e415347f86db66badebad46cbbc1f3a36bb648314c`
* [thanos](https://github.com/openshift/thanos) git [4aaa91e9](https://github.com/openshift/thanos/commit/4aaa91e9b982177e113c80567ec3808dcf122769) `sha256:1d5b6719e5f6be52891cb83a5384adea75af4d0a7084d3d9965105110a581177`


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/43f11cfb64edafaed1941327526efd373a829b63)

* [Bug 1862114](https://bugzilla.redhat.com/show_bug.cgi?id=1862114): bump RHCOS images for CVE-2020-10713 [#3987](https://github.com/openshift/installer/pull/3987)
* [Bug 1851949](https://bugzilla.redhat.com/show_bug.cgi?id=1851949): Add the --pod-infra-container-image flag to the kubelet service [#3815](https://github.com/openshift/installer/pull/3815)
* [Bug 1849171](https://bugzilla.redhat.com/show_bug.cgi?id=1849171): OpenStack: Wait for router interface to create FIP [#3780](https://github.com/openshift/installer/pull/3780)
* BUG 1826073: Disable client side rate limiting in Azure. [#3714](https://github.com/openshift/installer/pull/3714)
* [Bug 1842531](https://bugzilla.redhat.com/show_bug.cgi?id=1842531): images: libvirt: add yq to libvirt CI image [#3699](https://github.com/openshift/installer/pull/3699)
* [Bug 1840230](https://bugzilla.redhat.com/show_bug.cgi?id=1840230): data/azure/vnet: switch to HTTPS probes for lbs [#3665](https://github.com/openshift/installer/pull/3665)
* [Bug 1820222](https://bugzilla.redhat.com/show_bug.cgi?id=1820222): libvirt: Bump bootstrap memory to 5G for ppc64le [#3428](https://github.com/openshift/installer/pull/3428)
* [Bug 1828632](https://bugzilla.redhat.com/show_bug.cgi?id=1828632): Don't fail on unavailable features on OpenStack [#3514](https://github.com/openshift/installer/pull/3514)
* [Bug 1820591](https://bugzilla.redhat.com/show_bug.cgi?id=1820591): Add retries to DeleteSwiftContainer [#3408](https://github.com/openshift/installer/pull/3408)
* [Bug 1824921](https://bugzilla.redhat.com/show_bug.cgi?id=1824921): [release-4.3] OpenStack: Correcting the instructions to refresh a CA cert [#3466](https://github.com/openshift/installer/pull/3466)
* [Bug 1824239](https://bugzilla.redhat.com/show_bug.cgi?id=1824239): Validate Azure regions [#3460](https://github.com/openshift/installer/pull/3460)
* [Bug 1825973](https://bugzilla.redhat.com/show_bug.cgi?id=1825973): OpenStack: Replace remote_group_id with remote_ip_prefix [#3481](https://github.com/openshift/installer/pull/3481)
* [Bug 1825478](https://bugzilla.redhat.com/show_bug.cgi?id=1825478): OpenStack CI Install awscli from zip [#3478](https://github.com/openshift/installer/pull/3478)
* [Bug 1810492](https://bugzilla.redhat.com/show_bug.cgi?id=1810492): OpenStack: pass all CAs to bootstrap ignition [#3242](https://github.com/openshift/installer/pull/3242)
* [Bug 1817717](https://bugzilla.redhat.com/show_bug.cgi?id=1817717): Backport Azure UPI to 4.3 [#3351](https://github.com/openshift/installer/pull/3351)
* [Full changelog](https://github.com/openshift/installer/compare/0a7f198c1d5667152ef5982fd2fc0c22abc4336f...43f11cfb64edafaed1941327526efd373a829b63)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/dc2d333c60a7a8457eb3e56ca3218aaad2011999)

* [Bug 1816122](https://bugzilla.redhat.com/show_bug.cgi?id=1816122): Don't assume IPv4 in introspection data [#54](https://github.com/openshift/baremetal-operator/pull/54)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/d981ea02fc551aeda75ccbf11da34ba9eed11f77...dc2d333c60a7a8457eb3e56ca3218aaad2011999)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/052128b671dc2e7fd386f3c25b60b87a197cded3)

* [Bug 1843488](https://bugzilla.redhat.com/show_bug.cgi?id=1843488): Move haproxy listening port due to conflict [#66](https://github.com/openshift/baremetal-runtimecfg/pull/66)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/1ba567febc0443115ed85d706c363766b039d46d...052128b671dc2e7fd386f3c25b60b87a197cded3)


### [cli, cli-artifacts, deployer](https://github.com/openshift/oc/tree/bb196ae1fbc03fedaa734f70cfbf509a6e881487)

* [Bug 1806782](https://bugzilla.redhat.com/show_bug.cgi?id=1806782): Allow a file:// release argument to release mirror [#458](https://github.com/openshift/oc/pull/458)
* [Bug 1808221](https://bugzilla.redhat.com/show_bug.cgi?id=1808221): bump(golang.org/x/crypto|net|sys) [#429](https://github.com/openshift/oc/pull/429)
* [Bug 1806782](https://bugzilla.redhat.com/show_bug.cgi?id=1806782): Allow a file:// release argument to release mirror [#328](https://github.com/openshift/oc/pull/328)
* [Bug 1821648](https://bugzilla.redhat.com/show_bug.cgi?id=1821648): Zeroing BearerTokenFile for prune [#376](https://github.com/openshift/oc/pull/376)
* [Full changelog](https://github.com/openshift/oc/compare/081196cac40a01e541152175cc4da92d3a5ab07d...bb196ae1fbc03fedaa734f70cfbf509a6e881487)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d92d0dcf7f1de424fa82c3f83dafe930ae09be6f)

* [Bug 1808222](https://bugzilla.redhat.com/show_bug.cgi?id=1808222): CVE-2020-9283 ose-cloud-credential-operator-container: golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic [#221](https://github.com/openshift/cloud-credential-operator/pull/221)
* [Bug 1816704](https://bugzilla.redhat.com/show_bug.cgi?id=1816704): handle old Infrastructure objects without PlatformStatus [#169](https://github.com/openshift/cloud-credential-operator/pull/169)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/88c7f1b1dfe63bb61e874acffa37bb69ff334a7d...d92d0dcf7f1de424fa82c3f83dafe930ae09be6f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/27195a2d88296729a9657e9dab14045f4d24a8f9)

* [Bug 1842465](https://bugzilla.redhat.com/show_bug.cgi?id=1842465): explicitly set operator's and operand's container's root file system to writable [#297](https://github.com/openshift/cluster-authentication-operator/pull/297)
* [Bug 1824167](https://bugzilla.redhat.com/show_bug.cgi?id=1824167): The oauth server should wait until it is out of rotation to shut down [#257](https://github.com/openshift/cluster-authentication-operator/pull/257)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/df8cd95ed3249e0fae70ddaea56c07950b819cad...27195a2d88296729a9657e9dab14045f4d24a8f9)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/59d52289f59ea5bd691e185f4b36a5d6f9160e7e)

* BUG 1824215: Raise maximum memory capacity difference [#144](https://github.com/openshift/kubernetes-autoscaler/pull/144)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/7278ebb2fb632dbfe102b930aa161f5b2a9bcc93...59d52289f59ea5bd691e185f4b36a5d6f9160e7e)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/fa71866510868d6ff205ef63293bec456fcf36e2)

* [Bug 1807762](https://bugzilla.redhat.com/show_bug.cgi?id=1807762): Drop run-level [#154](https://github.com/openshift/cluster-autoscaler-operator/pull/154)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/23df15eeb0144268565ccbb28665efe82a1a5845...fa71866510868d6ff205ef63293bec456fcf36e2)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/e1b63cc5f68d3505f4dc657b029550d8003d4c9d)

* [Bug 1859685](https://bugzilla.redhat.com/show_bug.cgi?id=1859685): Tolerate all taints [#186](https://github.com/openshift/cluster-dns-operator/pull/186)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/ca11e642bfe8fe62688a04565f2fd3195c210344...e1b63cc5f68d3505f4dc657b029550d8003d4c9d)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/bc621396a3b1386854bef7832afbd14e31b7e798)

* [Bug 1832144](https://bugzilla.redhat.com/show_bug.cgi?id=1832144): Assure storage bucket names in lowercase [#541](https://github.com/openshift/cluster-image-registry-operator/pull/541)
* [Bug 1836753](https://bugzilla.redhat.com/show_bug.cgi?id=1836753): Use release-4.3 api [#564](https://github.com/openshift/cluster-image-registry-operator/pull/564)
* [Bug 1810563](https://bugzilla.redhat.com/show_bug.cgi?id=1810563): bootstrap HA configuration [#536](https://github.com/openshift/cluster-image-registry-operator/pull/536)
* [Bug 1825719](https://bugzilla.redhat.com/show_bug.cgi?id=1825719): update object dumper [#533](https://github.com/openshift/cluster-image-registry-operator/pull/533)
* [Bug 1830363](https://bugzilla.redhat.com/show_bug.cgi?id=1830363): removing verify-sec / gosec [#544](https://github.com/openshift/cluster-image-registry-operator/pull/544)
* [Bug 1816656](https://bugzilla.redhat.com/show_bug.cgi?id=1816656): update ClusterOperator object even if operator is unmanaged [#504](https://github.com/openshift/cluster-image-registry-operator/pull/504)
* [Bug 1820242](https://bugzilla.redhat.com/show_bug.cgi?id=1820242): nodeca daemon should tolerate all taints [#511](https://github.com/openshift/cluster-image-registry-operator/pull/511)
* [Bug 1808426](https://bugzilla.redhat.com/show_bug.cgi?id=1808426): ignore most kube-system events [#503](https://github.com/openshift/cluster-image-registry-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/afad871bae080e11656f3d0464859f632536106e...bc621396a3b1386854bef7832afbd14e31b7e798)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ccb80d3c77a58a28cd1ec95cbb6584adba3b09fd)

* [Bug 1829576](https://bugzilla.redhat.com/show_bug.cgi?id=1829576): Add e2e test that ensures stale condition is removed [#840](https://github.com/openshift/cluster-kube-apiserver-operator/pull/840)
* [Bug 1802161](https://bugzilla.redhat.com/show_bug.cgi?id=1802161): `regenerate-certificates` command blocked by error `illegal base64 data at input byte 3` [#765](https://github.com/openshift/cluster-kube-apiserver-operator/pull/765)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#825](https://github.com/openshift/cluster-kube-apiserver-operator/pull/825)
* [Bug 1827337](https://bugzilla.redhat.com/show_bug.cgi?id=1827337): Remove stale condition DefaultSecurityContextConstraintsUpgradeable [#838](https://github.com/openshift/cluster-kube-apiserver-operator/pull/838)
* [Bug 1820542](https://bugzilla.redhat.com/show_bug.cgi?id=1820542): certrotationcontroller: fix typo calling wrong internal LB func [#814](https://github.com/openshift/cluster-kube-apiserver-operator/pull/814)
* [Bug 1823921](https://bugzilla.redhat.com/show_bug.cgi?id=1823921): Revert SCC Upgradeable False [#830](https://github.com/openshift/cluster-kube-apiserver-operator/pull/830)
* [Bug 1810184](https://bugzilla.redhat.com/show_bug.cgi?id=1810184): Components using globs in Dockerfile COPY commands may break on OCP 4 [#816](https://github.com/openshift/cluster-kube-apiserver-operator/pull/816)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e3b739673cd81aade4c10dc1bd6c2b0e24a82ffb...ccb80d3c77a58a28cd1ec95cbb6584adba3b09fd)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/67ec20d29bc1bff0f3d4bda05a88f39b4148215b)

* [Bug 1853171](https://bugzilla.redhat.com/show_bug.cgi?id=1853171): Fix gce cloud provider permissions [#427](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/427)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#395](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/395)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0b20d6028556a34abf80e55b7b3c0c8ec469d29f...67ec20d29bc1bff0f3d4bda05a88f39b4148215b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/870eb3328a40cada0f15e90b072655b6d1256a68)

* [Bug 1848583](https://bugzilla.redhat.com/show_bug.cgi?id=1848583): bump(library-go): Add resource requests to installer/pruner pods [#256](https://github.com/openshift/cluster-kube-scheduler-operator/pull/256)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#239](https://github.com/openshift/cluster-kube-scheduler-operator/pull/239)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/ffb17cb15fd1833f6118ddb3835972ca3b443f22...870eb3328a40cada0f15e90b072655b6d1256a68)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/abd0a78509a284adf0f749e01f992e7828c38cba)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet/*: adapt resource requests [#852](https://github.com/openshift/cluster-monitoring-operator/pull/852)
* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): remove cpu limits for config reloader [#848](https://github.com/openshift/cluster-monitoring-operator/pull/848)
* [Bug 1812382](https://bugzilla.redhat.com/show_bug.cgi?id=1812382): Enable discovery of Podmonitors Custom Resource across namespaces [#694](https://github.com/openshift/cluster-monitoring-operator/pull/694)
* [Bug 1807141](https://bugzilla.redhat.com/show_bug.cgi?id=1807141): jsonnet/rules.jsonnet: Add MultipleContainersOOMKilled alert [#692](https://github.com/openshift/cluster-monitoring-operator/pull/692)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/417df3571061bac207af06773d0283e3c2787c15...abd0a78509a284adf0f749e01f992e7828c38cba)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/42c1a06674b4466b190f09394bbf5ad04d9e9a76)

* [Bug 1857744](https://bugzilla.redhat.com/show_bug.cgi?id=1857744): [release-4.3] Set timeoutSeconds to reflect expected timeout for OVS commands [#725](https://github.com/openshift/cluster-network-operator/pull/725)
* [Bug 1846344](https://bugzilla.redhat.com/show_bug.cgi?id=1846344): Remove dead member from LB pool. [#666](https://github.com/openshift/cluster-network-operator/pull/666)
* [Bug 1851338](https://bugzilla.redhat.com/show_bug.cgi?id=1851338): Split etcd sg rule ports range into different sg rules [#680](https://github.com/openshift/cluster-network-operator/pull/680)
* [Bug 1846459](https://bugzilla.redhat.com/show_bug.cgi?id=1846459): Recreate DNS service upon Octavia upgrade [#667](https://github.com/openshift/cluster-network-operator/pull/667)
* [Bug 1844135](https://bugzilla.redhat.com/show_bug.cgi?id=1844135): Setting resource request for kube-proxy deployment [#658](https://github.com/openshift/cluster-network-operator/pull/658)
* [Bug 1807670](https://bugzilla.redhat.com/show_bug.cgi?id=1807670): Fixes to reliably save/restore flows [#626](https://github.com/openshift/cluster-network-operator/pull/626)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Don't override containernetworking binaries in SDN and Kuryr [#634](https://github.com/openshift/cluster-network-operator/pull/634)
* [Bug 1834858](https://bugzilla.redhat.com/show_bug.cgi?id=1834858): Kuryr: Remove old SG rules on upgrade [#637](https://github.com/openshift/cluster-network-operator/pull/637)
* [Bug 1832311](https://bugzilla.redhat.com/show_bug.cgi?id=1832311): Kuryr: Tighten security groups [#621](https://github.com/openshift/cluster-network-operator/pull/621)
* [Bug 1821294](https://bugzilla.redhat.com/show_bug.cgi?id=1821294): Normalize CPU requests on nodes [#587](https://github.com/openshift/cluster-network-operator/pull/587)
* [Bug 1814352](https://bugzilla.redhat.com/show_bug.cgi?id=1814352): Delete admission controller if double listeners is supported [#599](https://github.com/openshift/cluster-network-operator/pull/599)
* [Bug 1824866](https://bugzilla.redhat.com/show_bug.cgi?id=1824866): [release-4.3] Fix dhcp daemon api version [#598](https://github.com/openshift/cluster-network-operator/pull/598)
* [Bug 1775838](https://bugzilla.redhat.com/show_bug.cgi?id=1775838): Back-port, OVNKubernetes: introduce OVS anti-selector [#492](https://github.com/openshift/cluster-network-operator/pull/492)
* [Bug 1821166](https://bugzilla.redhat.com/show_bug.cgi?id=1821166): [Back-port 4.3] Remove logfile from ovnkube configmap [#567](https://github.com/openshift/cluster-network-operator/pull/567)
* [Bug 1808997](https://bugzilla.redhat.com/show_bug.cgi?id=1808997): Ensure no API LB recreation happens upon Octavia upgrade [#517](https://github.com/openshift/cluster-network-operator/pull/517)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/cc8e0df5743f6d45b57e1001de02aa663331fa41...42c1a06674b4466b190f09394bbf5ad04d9e9a76)


### [cluster-node-tuned](https://github.com/openshift/openshift-tuned/tree/8705571c5afaeac1953376e9eef734027267066b)

* [Bug 1825007](https://bugzilla.redhat.com/show_bug.cgi?id=1825007): Fix tuned reload behaviour on SIGHUP for invalid tuned profiles. [#38](https://github.com/openshift/openshift-tuned/pull/38)
* [Full changelog](https://github.com/openshift/openshift-tuned/compare/4de824748a0fa2dbf4b10f82a32e3784372bce54...8705571c5afaeac1953376e9eef734027267066b)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eaacf04c6cc9e83ad4978c108aabb395d5a771ec)

* [Bug 1826167](https://bugzilla.redhat.com/show_bug.cgi?id=1826167): Mount host's /etc/sysctl.{conf,d/} to enable sysctl override from the host. [#128](https://github.com/openshift/cluster-node-tuning-operator/pull/128)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8e4367fb61fe895fd310bed69544033d043420d4...eaacf04c6cc9e83ad4978c108aabb395d5a771ec)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/18125a2f4cd2462c88123a906814385d82b50cb7)

* [Bug 1837353](https://bugzilla.redhat.com/show_bug.cgi?id=1837353): encryption: don't degrade when daemonset is not found [#365](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/365)
* [Bug 1822770](https://bugzilla.redhat.com/show_bug.cgi?id=1822770): Normalize CPU requests on masters [#351](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/351)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/7d51dd65fcdb95bf51cf9d435b3aa5b112ee2732...18125a2f4cd2462c88123a906814385d82b50cb7)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/d58076f2f1a9839a5887ddd7aeb4ad163b4ada8b)

* [Bug 1867175](https://bugzilla.redhat.com/show_bug.cgi?id=1867175): account for nil DaemonSet returned from library-go [#168](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/168)
* [Bug 1854133](https://bugzilla.redhat.com/show_bug.cgi?id=1854133): ensure progressing is not set to false if version is missing [#161](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/161)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/10fc162e4f4c977a9c431884b9a063fa751514d0...d58076f2f1a9839a5887ddd7aeb4ad163b4ada8b)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/551f86fa2c2103fe6103e694c9c84b45ef0b0ad3)

* [Bug 1829328](https://bugzilla.redhat.com/show_bug.cgi?id=1829328): use patch when updating namespace [#26](https://github.com/openshift/cluster-policy-controller/pull/26)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/9b6ccc80eeef2eb85f78f8a70f319cbae0c5295a...551f86fa2c2103fe6103e694c9c84b45ef0b0ad3)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/0887695ef7b969dc9b4288cee79f1d5eac36ee2f)

* [Bug 1826028](https://bugzilla.redhat.com/show_bug.cgi?id=1826028): revert pr 177; no override jenkins* registry hosts for mirrors [#263](https://github.com/openshift/cluster-samples-operator/pull/263)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): ensure s390/ppc64le platforms bootstrap as removed following upgrade [#285](https://github.com/openshift/cluster-samples-operator/pull/285)
* [Bug 1841996](https://bugzilla.redhat.com/show_bug.cgi?id=1841996): correctly handle removed templates watch events as part of an upgrade [#280](https://github.com/openshift/cluster-samples-operator/pull/280)
* [Bug 1835996](https://bugzilla.redhat.com/show_bug.cgi?id=1835996): avoid listing file system content for unsupported architures [#273](https://github.com/openshift/cluster-samples-operator/pull/273)
* [Bug 1829083](https://bugzilla.redhat.com/show_bug.cgi?id=1829083): copy install pull secret when boostrapped as removed [#267](https://github.com/openshift/cluster-samples-operator/pull/267)
* [Bug 1814396](https://bugzilla.redhat.com/show_bug.cgi?id=1814396): abort metrics in general if removed/unmanaged [#251](https://github.com/openshift/cluster-samples-operator/pull/251)
* [Bug 1811206](https://bugzilla.redhat.com/show_bug.cgi?id=1811206): purge removed imagestreams as a part of upgrade from progessing/impor… [#243](https://github.com/openshift/cluster-samples-operator/pull/243)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/bfda4d3462fd7305573adb103137723d2bd4975c...0887695ef7b969dc9b4288cee79f1d5eac36ee2f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/6a117a8d60772e72d1cf4dc0fa63e196c5776f04)

* [Bug 1860100](https://bugzilla.redhat.com/show_bug.cgi?id=1860100): Includes validation check for VolumeSnapshot v1alpha1 CRDs [#63](https://github.com/openshift/cluster-storage-operator/pull/63)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a9548e6d0ac621a5c6e8e3544ca680280a1ca746...6a117a8d60772e72d1cf4dc0fa63e196c5776f04)


### [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator/tree/2523919a04d428bfa82602f5f6cc50ca38eb48c0)

* [Bug 1813488](https://bugzilla.redhat.com/show_bug.cgi?id=1813488): set Upgradeable to true [#84](https://github.com/openshift/cluster-svcat-apiserver-operator/pull/84)
* [Full changelog](https://github.com/openshift/cluster-svcat-apiserver-operator/compare/61c2f1d39a8c876aa5fd7ebc14ffa9b4e1360a5f...2523919a04d428bfa82602f5f6cc50ca38eb48c0)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b033473ff86183a5389b720ada21b6cb955e9405)

* [Bug 1844117](https://bugzilla.redhat.com/show_bug.cgi?id=1844117): pkg/cvo/sync_worker: Do not treat "All errors were context errors..." as success [#380](https://github.com/openshift/cluster-version-operator/pull/380)
* [Bug 1820231](https://bugzilla.redhat.com/show_bug.cgi?id=1820231): loosen upgradeable condition to allow z-level upgrades [#315](https://github.com/openshift/cluster-version-operator/pull/315)
* [Bug 1783054](https://bugzilla.redhat.com/show_bug.cgi?id=1783054): Add signature verification in airgapped environments [#340](https://github.com/openshift/cluster-version-operator/pull/340)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/210b4b1e6b1b7f53b5dc0d935de9c5d27058280c...b033473ff86183a5389b720ada21b6cb955e9405)


### [console](https://github.com/openshift/console/tree/19a1bfb76f0271cdbf48e3ba8363352fdb4f12a7)

* [Bug 1825722](https://bugzilla.redhat.com/show_bug.cgi?id=1825722): Handle undefined MachineConfigPools status [#6000](https://github.com/openshift/console/pull/6000)
* [Bug 1827747](https://bugzilla.redhat.com/show_bug.cgi?id=1827747): Register Subscription list page from plugin [#5163](https://github.com/openshift/console/pull/5163)
* [Bug 1796079](https://bugzilla.redhat.com/show_bug.cgi?id=1796079): Backport OLM filter by OS and ARCH [#4928](https://github.com/openshift/console/pull/4928)
* [Bug 1829046](https://bugzilla.redhat.com/show_bug.cgi?id=1829046): removes techpreview badge from serverless [#5220](https://github.com/openshift/console/pull/5220)
* [Bug 1840765](https://bugzilla.redhat.com/show_bug.cgi?id=1840765): Fixed legends on data consumption card [#5600](https://github.com/openshift/console/pull/5600)
* [Bug 1829276](https://bugzilla.redhat.com/show_bug.cgi?id=1829276): fix(prun): Rerun cancelled runs | release-4.3 [#5228](https://github.com/openshift/console/pull/5228)
* [Bug 1839036](https://bugzilla.redhat.com/show_bug.cgi?id=1839036): handle embedded pipeline spec in pipelinerun scenario [#5536](https://github.com/openshift/console/pull/5536)
* [Bug 1819289](https://bugzilla.redhat.com/show_bug.cgi?id=1819289): Fix navigation separator background colour [#4864](https://github.com/openshift/console/pull/4864)
* [Bug 1821647](https://bugzilla.redhat.com/show_bug.cgi?id=1821647): Correctly handle Unicode characters in pod terminal [#5198](https://github.com/openshift/console/pull/5198)
* [Bug 1804708](https://bugzilla.redhat.com/show_bug.cgi?id=1804708): only show "Create Project" option in project dropdown i… [#4369](https://github.com/openshift/console/pull/4369)
* [Bug 1821852](https://bugzilla.redhat.com/show_bug.cgi?id=1821852): Hide `OpenShift Cluster Manager` when branding is `azure` [#4957](https://github.com/openshift/console/pull/4957)
* [Bug 1798130](https://bugzilla.redhat.com/show_bug.cgi?id=1798130): add error boundary around OLM descriptors [#4241](https://github.com/openshift/console/pull/4241)
* [Bug 1823726](https://bugzilla.redhat.com/show_bug.cgi?id=1823726): Decode Noobaa secret details before passing to SecretValue in OBC page [#4993](https://github.com/openshift/console/pull/4993)
* [Bug 1818980](https://bugzilla.redhat.com/show_bug.cgi?id=1818980): Specify ts-loader configFile in webpack.config.ts [#4859](https://github.com/openshift/console/pull/4859)
* [Bug 1813185](https://bugzilla.redhat.com/show_bug.cgi?id=1813185): Add stable-4.4, fast-4.4 and candidate-4.4 channel for 4.4 release [#4727](https://github.com/openshift/console/pull/4727)
* [Bug 1819941](https://bugzilla.redhat.com/show_bug.cgi?id=1819941): Fix PackageManifest access review [#4902](https://github.com/openshift/console/pull/4902)
* [Bug 1800327](https://bugzilla.redhat.com/show_bug.cgi?id=1800327): fix runtime error creating PVC with no storage class [#4896](https://github.com/openshift/console/pull/4896)
* [Bug 1819603](https://bugzilla.redhat.com/show_bug.cgi?id=1819603): Limit Bucket Class search to storage namespace in OBC creation page [#4869](https://github.com/openshift/console/pull/4869)
* [Full changelog](https://github.com/openshift/console/compare/23b7ac9cf631b2e33663e492c44202d0f099cfe1...19a1bfb76f0271cdbf48e3ba8363352fdb4f12a7)


### [console-operator](https://github.com/openshift/console-operator/tree/730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)

* [Bug 1836939](https://bugzilla.redhat.com/show_bug.cgi?id=1836939): Bump godeps to get fix from library-go#799 [#430](https://github.com/openshift/console-operator/pull/430)
* [Bug 1813302](https://bugzilla.redhat.com/show_bug.cgi?id=1813302): Update oc clidownload cr to indicate that certain builds are unsupported [#409](https://github.com/openshift/console-operator/pull/409)
* [Full changelog](https://github.com/openshift/console-operator/compare/4410ab4a58a70e003d7c8578d362aa71fc1bc583...730b8fcce00871cfe56b948a1aaf23fbf4c45ff7)


### [docker-builder](https://github.com/openshift/builder/tree/fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)

* [Bug 1832975](https://bugzilla.redhat.com/show_bug.cgi?id=1832975): use of ARG step in Dockerfile causes panic in imagebuilder [#152](https://github.com/openshift/builder/pull/152)
* [Bug 1821861](https://bugzilla.redhat.com/show_bug.cgi?id=1821861): manage-dockerfile: use the original form of ENV/LABEL [#149](https://github.com/openshift/builder/pull/149)
* [Full changelog](https://github.com/openshift/builder/compare/ba658c8b81615e5ed86ea5836b20ed738a534252...fcef31c2fe73b69f01a6f8f3acf71b0a27eafda1)


### [etcd](https://github.com/openshift/etcd/tree/87f03ed81748f8cb7a4014e954762767c976d3ae)

* [Bug 1815634](https://bugzilla.redhat.com/show_bug.cgi?id=1815634): bump etcd v3.3.22 [#53](https://github.com/openshift/etcd/pull/53)
* Automated cherry pick of #11817 on release-3.3 [#11856](https://github.com/openshift/etcd/pull/11856)
* Automated cherry pick of #11652 #11670 #11710 [#11753](https://github.com/openshift/etcd/pull/11753)
* Automated cherry pick of #11638 on release-3.3 [#11665](https://github.com/openshift/etcd/pull/11665)
* Automated cherry pick of #11630 to release-3.3 [#11632](https://github.com/openshift/etcd/pull/11632)
* Automated cherry pick of #11613 to release-3.3 [#11623](https://github.com/openshift/etcd/pull/11623)
* Automated cherry pick of #10218 #10468 on release 3.3 [#11378](https://github.com/openshift/etcd/pull/11378)
* Automated cherry pick of #11374 on release 3.3 [#11394](https://github.com/openshift/etcd/pull/11394)
* Automated cherry pick of #11308 on release-3.3 [#11314](https://github.com/openshift/etcd/pull/11314)
* Automated cherry pick of #11247 [#11253](https://github.com/openshift/etcd/pull/11253)
* cherry pick "etcd_cluster_version" metric" (#10257, #11233, #11254, #11265) to release-3.3 [#11261](https://github.com/openshift/etcd/pull/11261)
* scripts: avoid release builds on darwin machine. [#11245](https://github.com/openshift/etcd/pull/11245)
* [Full changelog](https://github.com/openshift/etcd/compare/e30a18f29c8bf1f16507d7983dde2aa51962d6c7...87f03ed81748f8cb7a4014e954762767c976d3ae)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/fbb2ed70b5db8b81abb68bb560f746751be306f7)

* [Bug 1837124](https://bugzilla.redhat.com/show_bug.cgi?id=1837124): Add the machine's name as a known NodeInternalDNS [#92](https://github.com/openshift/cluster-api-provider-gcp/pull/92)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/0600a78e9af54e22b04fabadd0b34d7b39565934...fbb2ed70b5db8b81abb68bb560f746751be306f7)


### [haproxy-router](https://github.com/openshift/router/tree/708329f2d0edd1524e82b1cfd920400af4ccc638)

* Sync OWNERS with master branch [#164](https://github.com/openshift/router/pull/164)
* [Bug 1816540](https://bugzilla.redhat.com/show_bug.cgi?id=1816540): [4.3] Backport "remove proto-version header field" [#105](https://github.com/openshift/router/pull/105)
* [Bug 1818856](https://bugzilla.redhat.com/show_bug.cgi?id=1818856): Wildcard is not needed to copy subdirectory in dockerfile [#101](https://github.com/openshift/router/pull/101)
* [Full changelog](https://github.com/openshift/router/compare/1526917a58021c8f6e465406501c32fa3fb618b5...708329f2d0edd1524e82b1cfd920400af4ccc638)


### [hyperkube, tests](https://github.com/openshift/origin/tree/7279a4a467d82d50f04c16a19afeb38505aabb96)

* [Bug 1852857](https://bugzilla.redhat.com/show_bug.cgi?id=1852857): UPSTREAM: 90740: Update createBalancedPodForNodes function in scheduler e2e [#25344](https://github.com/openshift/origin/pull/25344)
* [Bug 1860832](https://bugzilla.redhat.com/show_bug.cgi?id=1860832): Ensure Azure availability zone is always in lower cases [#25327](https://github.com/openshift/origin/pull/25327)
* Fix commit checker [#25368](https://github.com/openshift/origin/pull/25368)
* [Bug 1867402](https://bugzilla.redhat.com/show_bug.cgi?id=1867402): Drop registry.fedoraproject.org/fedora:30 in favour of quay.io/fedora:32-x86_64 [#25394](https://github.com/openshift/origin/pull/25394)
* [Bug 1845773](https://bugzilla.redhat.com/show_bug.cgi?id=1845773): [release-4.3] kubelet: block non-forwarded packets from crossing the localhost boundary [#25144](https://github.com/openshift/origin/pull/25144)
* [Bug 1843877](https://bugzilla.redhat.com/show_bug.cgi?id=1843877): UPSTREAM: 91008: Do not swallow NotFound error for DeletePod in dsc.manage [#25063](https://github.com/openshift/origin/pull/25063)
* [Bug 1851606](https://bugzilla.redhat.com/show_bug.cgi?id=1851606): remove problematic upstream client plugin test [#25215](https://github.com/openshift/origin/pull/25215)
* [Bug 1838196](https://bugzilla.redhat.com/show_bug.cgi?id=1838196): stop printing usage help when the server commands exit [#25003](https://github.com/openshift/origin/pull/25003)
* [Bug 1847089](https://bugzilla.redhat.com/show_bug.cgi?id=1847089): UPSTREAM: 86691: fix: azure disk could not mounted on Standard_DC4s/DC2s [#25110](https://github.com/openshift/origin/pull/25110)
* [Bug 1848976](https://bugzilla.redhat.com/show_bug.cgi?id=1848976): reenable jenkins e2e in e2e-gcp-builds [#25171](https://github.com/openshift/origin/pull/25171)
* [Bug 1848622](https://bugzilla.redhat.com/show_bug.cgi?id=1848622): [release-4.3]: UPSTREAM: 92166: fix: GetLabelsForVolume panic issue for azure disk PV [#25138](https://github.com/openshift/origin/pull/25138)
* [Bug 1841988](https://bugzilla.redhat.com/show_bug.cgi?id=1841988): more upstream to installed template switch in image-eco (django this time) [#25046](https://github.com/openshift/origin/pull/25046)
* [Bug 1822487](https://bugzilla.redhat.com/show_bug.cgi?id=1822487): UPSTREAM: 89794: Clean up event messages for errors [#25049](https://github.com/openshift/origin/pull/25049)
* [Bug 1830093](https://bugzilla.redhat.com/show_bug.cgi?id=1830093): provides a temporal fix to improve CRD publishing e2e tests in an HA setup [#24940](https://github.com/openshift/origin/pull/24940)
* [Bug 1829959](https://bugzilla.redhat.com/show_bug.cgi?id=1829959): [release-4.3] Introduce IBMCloud provider, skip/fix tests [#24829](https://github.com/openshift/origin/pull/24829)
* [Bug 1835948](https://bugzilla.redhat.com/show_bug.cgi?id=1835948): unskip template extended tests [#24983](https://github.com/openshift/origin/pull/24983)
* [Bug 1822680](https://bugzilla.redhat.com/show_bug.cgi?id=1822680): UPSTREAM: 88424: Respect ignore-volume-az option in admission plugin [#24855](https://github.com/openshift/origin/pull/24855)
* [Bug 1798461](https://bugzilla.redhat.com/show_bug.cgi?id=1798461): makes unavailableGauge metric to always reflect the current state of a service [#24501](https://github.com/openshift/origin/pull/24501)
* [Bug 1830130](https://bugzilla.redhat.com/show_bug.cgi?id=1830130): Fix nil reference when accessing un-migrated platform status [#24810](https://github.com/openshift/origin/pull/24810)
* [Bug 1813847](https://bugzilla.redhat.com/show_bug.cgi?id=1813847): fixes configmap "extension-apiserver-authentication" not found [#24699](https://github.com/openshift/origin/pull/24699)
* [Bug 1822955](https://bugzilla.redhat.com/show_bug.cgi?id=1822955): UPSTREAM: 88734: Work-around for missing metrics on CRI-O exited containers [#24860](https://github.com/openshift/origin/pull/24860)
* [Bug 1821341](https://bugzilla.redhat.com/show_bug.cgi?id=1821341): UPSTREAM: 88440: Report deleted pod status correctly [#24841](https://github.com/openshift/origin/pull/24841)
* [Bug 1820266](https://bugzilla.redhat.com/show_bug.cgi?id=1820266): use rbac vs direct scc edit for s2i root bld test [#24821](https://github.com/openshift/origin/pull/24821)
* [Bug 1817618](https://bugzilla.redhat.com/show_bug.cgi?id=1817618): make s2i-dropcaps more reliable by not depending on a yum install to [#24784](https://github.com/openshift/origin/pull/24784)
* [Full changelog](https://github.com/openshift/origin/compare/26ae0dee60eeca5d5429cfdda77db8041c702f46...7279a4a467d82d50f04c16a19afeb38505aabb96)


### [insights-operator](https://github.com/openshift/insights-operator/tree/969684362631b5d7c179a575dcd527e20b235fc4)

* [Bug 1825758](https://bugzilla.redhat.com/show_bug.cgi?id=1825758): Collecting config maps [#105](https://github.com/openshift/insights-operator/pull/105)
* [Bug 1821149](https://bugzilla.redhat.com/show_bug.cgi?id=1821149): Cherry-pick release 4.3 Support for specific http proxy for the service [#91](https://github.com/openshift/insights-operator/pull/91)
* [Full changelog](https://github.com/openshift/insights-operator/compare/98ecaca13995901ce2b36c7c01bd6735f95142da...969684362631b5d7c179a575dcd527e20b235fc4)


### [ironic](https://github.com/openshift/ironic-image/tree/917efbeb9739b47acae2f30730ca9d3c4ba84513)

* [Bug 1847317](https://bugzilla.redhat.com/show_bug.cgi?id=1847317): Add WORKDIR to builder [#82](https://github.com/openshift/ironic-image/pull/82)
* [Full changelog](https://github.com/openshift/ironic-image/compare/b9e59afd03655d1694318e83d1bc7f98fc510512...917efbeb9739b47acae2f30730ca9d3c4ba84513)


### [jenkins, jenkins-agent-maven](https://github.com/openshift/jenkins/tree/43127dc1449278f595ddbb682dfcec2ce0f63cac)

* [Bug 1819530](https://bugzilla.redhat.com/show_bug.cgi?id=1819530): update subversion plugin [#1131](https://github.com/openshift/jenkins/pull/1131)
* [Bug 1847452](https://bugzilla.redhat.com/show_bug.cgi?id=1847452): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1083](https://github.com/openshift/jenkins/pull/1083)
* [Bug 1843941](https://bugzilla.redhat.com/show_bug.cgi?id=1843941): bump jenkins to 2.222.1 and update plugins [#1067](https://github.com/openshift/jenkins/pull/1067)
* [Bug 1848335](https://bugzilla.redhat.com/show_bug.cgi?id=1848335): [release-4.3] Support Nodejs 12 Agent [#1075](https://github.com/openshift/jenkins/pull/1075)
* [Bug 1826172](https://bugzilla.redhat.com/show_bug.cgi?id=1826172): handle ingress certificate signed by custom ca [#1049](https://github.com/openshift/jenkins/pull/1049)
* [Full changelog](https://github.com/openshift/jenkins/compare/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26...43127dc1449278f595ddbb682dfcec2ce0f63cac)


### [jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/f1b145a8c81b646f6e921202c920c272a9fd0da5)

* [Bug 1847452](https://bugzilla.redhat.com/show_bug.cgi?id=1847452): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1083](https://github.com/openshift/jenkins/pull/1083)
* [Bug 1843941](https://bugzilla.redhat.com/show_bug.cgi?id=1843941): bump jenkins to 2.222.1 and update plugins [#1067](https://github.com/openshift/jenkins/pull/1067)
* [Bug 1848335](https://bugzilla.redhat.com/show_bug.cgi?id=1848335): [release-4.3] Support Nodejs 12 Agent [#1075](https://github.com/openshift/jenkins/pull/1075)
* [Bug 1826172](https://bugzilla.redhat.com/show_bug.cgi?id=1826172): handle ingress certificate signed by custom ca [#1049](https://github.com/openshift/jenkins/pull/1049)
* [Full changelog](https://github.com/openshift/jenkins/compare/7a84fda35e5dcc4ce3d21061b9e1f4a1d7861c26...f1b145a8c81b646f6e921202c920c272a9fd0da5)


### [keepalived-ipfailover, pod](https://github.com/openshift/images/tree/300794f6c18b6208eeb388f616642358cc759f29)

* [Bug 1851398](https://bugzilla.redhat.com/show_bug.cgi?id=1851398): Add iproute package to get `ss` tool for port wait [#22](https://github.com/openshift/images/pull/22)
* [Full changelog](https://github.com/openshift/images/compare/1be922de56a99f4e254eb9c2fc42d30e5596cf77...300794f6c18b6208eeb388f616642358cc759f29)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/1bd32df6cd4f6c4907d7751939d0af555ec6a03d)

* [Bug 1859869](https://bugzilla.redhat.com/show_bug.cgi?id=1859869): [release-4.3] Add support for --may-exist when adding the bridge in sdn [#167](https://github.com/openshift/sdn/pull/167)
* [Bug 1853198](https://bugzilla.redhat.com/show_bug.cgi?id=1853198): [release-4.3] Backport OVS-retries [#156](https://github.com/openshift/sdn/pull/156)
* [Bug 1840762](https://bugzilla.redhat.com/show_bug.cgi?id=1840762): Fix egressVXLANMonitor and egressIPTracker deadlock [#146](https://github.com/openshift/sdn/pull/146)
* [Bug 1839109](https://bugzilla.redhat.com/show_bug.cgi?id=1839109): [backport-4.3] node/vnids: Correctly handle case where NetNamespace watch is far behind [#144](https://github.com/openshift/sdn/pull/144)
* [Bug 1804745](https://bugzilla.redhat.com/show_bug.cgi?id=1804745): Revert excessive proxy logging [#109](https://github.com/openshift/sdn/pull/109)
* [Bug 1816390](https://bugzilla.redhat.com/show_bug.cgi?id=1816390): handle pod updates correctly in networkpolicy [#129](https://github.com/openshift/sdn/pull/129)
* [Bug 1820778](https://bugzilla.redhat.com/show_bug.cgi?id=1820778): fix health check in standalone kube-proxy [#126](https://github.com/openshift/sdn/pull/126)
* [Full changelog](https://github.com/openshift/sdn/compare/be3eca0eee6aa16fd6101aecdda42391b46828f9...1bd32df6cd4f6c4907d7751939d0af555ec6a03d)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/2dda0643ade9ba1b4e04de08a3c927d156e5fced)

* [Bug 1786298](https://bugzilla.redhat.com/show_bug.cgi?id=1786298): Bunch of kuryr-daemon NetlinkError fixes [#292](https://github.com/openshift/kuryr-kubernetes/pull/292)
* [Bug 1845923](https://bugzilla.redhat.com/show_bug.cgi?id=1845923): Get RPM and Kuryr version from git [#273](https://github.com/openshift/kuryr-kubernetes/pull/273)
* [Bug 1852834](https://bugzilla.redhat.com/show_bug.cgi?id=1852834): Fix hacking min version to 3.0.1 [#294](https://github.com/openshift/kuryr-kubernetes/pull/294)
* [Bug 1846259](https://bugzilla.redhat.com/show_bug.cgi?id=1846259): Ensure LB resources with ERROR status are deleted [#276](https://github.com/openshift/kuryr-kubernetes/pull/276)
* [Bug 1846228](https://bugzilla.redhat.com/show_bug.cgi?id=1846228): Skip LB sg update when no endpoint is found [#275](https://github.com/openshift/kuryr-kubernetes/pull/275)
* [Bug 1828699](https://bugzilla.redhat.com/show_bug.cgi?id=1828699): Ensure NP are enforced on SVC with different port and target port [#227](https://github.com/openshift/kuryr-kubernetes/pull/227)
* [Bug 1829840](https://bugzilla.redhat.com/show_bug.cgi?id=1829840): Ensure LB state annotation sg matches the SG on the LB [#225](https://github.com/openshift/kuryr-kubernetes/pull/225)
* [Bug 1818067](https://bugzilla.redhat.com/show_bug.cgi?id=1818067): Ensure no attempt to deleted sg rules owned by Octavia happens [#208](https://github.com/openshift/kuryr-kubernetes/pull/208)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/fff0456c606410549d343a746bca166bb160fe3d...2dda0643ade9ba1b4e04de08a3c927d156e5fced)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/27c6396760b749b063726186dd14b1e0ea0f00bc)

* BUG 1859308: fix memory leak that leads to unresponsive libvirt URI [#205](https://github.com/openshift/cluster-api-provider-libvirt/pull/205)
* [Bug 1818149](https://bugzilla.redhat.com/show_bug.cgi?id=1818149): Use virtio disk instead of config drive for injecting ignition for s390x/ppc64le [#189](https://github.com/openshift/cluster-api-provider-libvirt/pull/189)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/dd3fc51a8b7f51da61643a6286eb0fecfa2d03cd...27c6396760b749b063726186dd14b1e0ea0f00bc)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/129b63f8a58c2502dfabcd42eda8ae212ca1bb1d)

* BUG 1807762: Drop run-level [#500](https://github.com/openshift/machine-api-operator/pull/500)
* BUG 1807762: Remove explicit securityContext and add granular securitycontextconstraints "use" permissions in machine-api-controllers clusterRole [#635](https://github.com/openshift/machine-api-operator/pull/635)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/409274d4c429590723a1cea87f7435b341d0562f...129b63f8a58c2502dfabcd42eda8ae212ca1bb1d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/55f7317224e7d8badc98879662771a14185e5739)

* [Bug 1845494](https://bugzilla.redhat.com/show_bug.cgi?id=1845494): daemon: fix restoring file logic to avoid unnecessary deletion [#1796](https://github.com/openshift/machine-config-operator/pull/1796)
* [Bug 1855304](https://bugzilla.redhat.com/show_bug.cgi?id=1855304): Parse the kubelet.conf data after an update [#1916](https://github.com/openshift/machine-config-operator/pull/1916)
* [Bug 1846358](https://bugzilla.redhat.com/show_bug.cgi?id=1846358): MCD: tolerate all taints [#1816](https://github.com/openshift/machine-config-operator/pull/1816)
* [Bug 1826021](https://bugzilla.redhat.com/show_bug.cgi?id=1826021): Fix a problem with a greedy regular expression matching more than needed [#1913](https://github.com/openshift/machine-config-operator/pull/1913)
* [Bug 1851949](https://bugzilla.redhat.com/show_bug.cgi?id=1851949): Set the pod-infra-container-image flag in kubelet to ocp pause image [#1877](https://github.com/openshift/machine-config-operator/pull/1877)
* [Bug 1840300](https://bugzilla.redhat.com/show_bug.cgi?id=1840300): kubelet: add log level environment variable [#1752](https://github.com/openshift/machine-config-operator/pull/1752)
* [Bug 1827540](https://bugzilla.redhat.com/show_bug.cgi?id=1827540): pkg/server: disable weak TLS versions [#1681](https://github.com/openshift/machine-config-operator/pull/1681)
* [Bug 1837124](https://bugzilla.redhat.com/show_bug.cgi?id=1837124): templates: add etc-networkmanager-dispatcher.d-90-long-hostname.yaml [#1738](https://github.com/openshift/machine-config-operator/pull/1738)
* [Bug 1838984](https://bugzilla.redhat.com/show_bug.cgi?id=1838984): [release-4.3] templates: Don't enable machine-config-daemon-host.service by default [#1747](https://github.com/openshift/machine-config-operator/pull/1747)
* [Bug 1811827](https://bugzilla.redhat.com/show_bug.cgi?id=1811827): baremetal: Add missing network-online dependency to kubelet unit [#1549](https://github.com/openshift/machine-config-operator/pull/1549)
* [Bug 1804067](https://bugzilla.redhat.com/show_bug.cgi?id=1804067): Prevent etcd-member-add.sh from running on an active master [#1740](https://github.com/openshift/machine-config-operator/pull/1740)
* [Bug 1825221](https://bugzilla.redhat.com/show_bug.cgi?id=1825221): templates/master:openshift-recovery-tools pass --authfile to podman create [#1661](https://github.com/openshift/machine-config-operator/pull/1661)
* [Bug 1801430](https://bugzilla.redhat.com/show_bug.cgi?id=1801430): Write environment variables needed for etcdctl execution into ~/.profile [#1726](https://github.com/openshift/machine-config-operator/pull/1726)
* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): The Multus CNI configuration file "00-multus.conf" should not be removed [#1646](https://github.com/openshift/machine-config-operator/pull/1646)
* [Bug 1834247](https://bugzilla.redhat.com/show_bug.cgi?id=1834247): Add containernetworking-plugin RPM's bin location to CRI-O config [#1722](https://github.com/openshift/machine-config-operator/pull/1722)
* [Bug 1822269](https://bugzilla.redhat.com/show_bug.cgi?id=1822269): Add new crio.conf field to the template [#1668](https://github.com/openshift/machine-config-operator/pull/1668)
* [Bug 1817458](https://bugzilla.redhat.com/show_bug.cgi?id=1817458): [release-4.3] fix wrongful backup of files not originally on the system [#1686](https://github.com/openshift/machine-config-operator/pull/1686)
* [Bug 1801824](https://bugzilla.redhat.com/show_bug.cgi?id=1801824): kubelet: add more system reservation to protect node [#1458](https://github.com/openshift/machine-config-operator/pull/1458)
* [Bug 1822750](https://bugzilla.redhat.com/show_bug.cgi?id=1822750): [ctrcfg controller] Use a struct array instead of map when creating new ignitions [#1645](https://github.com/openshift/machine-config-operator/pull/1645)
* [Bug 1824282](https://bugzilla.redhat.com/show_bug.cgi?id=1824282): [release 4.3] cri-o: set log level to info [#1635](https://github.com/openshift/machine-config-operator/pull/1635)
* [Bug 1811720](https://bugzilla.redhat.com/show_bug.cgi?id=1811720): Specify cgroups in kubelet.conf so cAdvisor stats will be tracked [#1581](https://github.com/openshift/machine-config-operator/pull/1581)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/ab4d62a3bf3774b77b6f9b04a2028faec1568aca...55f7317224e7d8badc98879662771a14185e5739)


### [multus-cni](https://github.com/openshift/multus-cni/tree/419b44ce151c1e996698c9272ac15abe843ec925)

* [Bug 1824940](https://bugzilla.redhat.com/show_bug.cgi?id=1824940): Adds readinessindicatorfile check on CNI DEL [#65](https://github.com/openshift/multus-cni/pull/65)
* [Full changelog](https://github.com/openshift/multus-cni/compare/9e85cb1ba34b516b33da18cee4500be6a61fdf74...419b44ce151c1e996698c9272ac15abe843ec925)


### [oauth-server](https://github.com/openshift/oauth-server/tree/e61459a3903327dddb515a54cd005d4494dfdd38)

* [Bug 1836974](https://bugzilla.redhat.com/show_bug.cgi?id=1836974): reduce ldap connection timeout from 60s to 30s [#43](https://github.com/openshift/oauth-server/pull/43)
* [Bug 1823777](https://bugzilla.redhat.com/show_bug.cgi?id=1823777): Add back some missing metrics [#41](https://github.com/openshift/oauth-server/pull/41)
* [Full changelog](https://github.com/openshift/oauth-server/compare/d3065e59ce948f10364d0dd88cb70b860ec65ee2...e61459a3903327dddb515a54cd005d4494dfdd38)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/95686282f6f308e824645f13cd7a9ee1a936216b)

* [Bug 1829328](https://bugzilla.redhat.com/show_bug.cgi?id=1829328): allow patch for updating namespace [#101](https://github.com/openshift/openshift-apiserver/pull/101)
* [Bug 1821500](https://bugzilla.redhat.com/show_bug.cgi?id=1821500): bump to kube 1.17.4 [#109](https://github.com/openshift/openshift-apiserver/pull/109)
* [Bug 1833019](https://bugzilla.redhat.com/show_bug.cgi?id=1833019): include ISI error message changes when determining new generation need [#106](https://github.com/openshift/openshift-apiserver/pull/106)
* [release 4-3]  Bug 1824127: fixes configmap "extension-apiserver-authentication" not found [#92](https://github.com/openshift/openshift-apiserver/pull/92)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/0b018bee77bd24511229d65001265d56d689cc97...95686282f6f308e824645f13cd7a9ee1a936216b)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/118d87ddde9ee36ccea08b17461f3c6dca3a2ff5)

* [Bug 1831888](https://bugzilla.redhat.com/show_bug.cgi?id=1831888): StatefulSets v1 do not trigger on image changes [#116](https://github.com/openshift/openshift-controller-manager/pull/116)
* [Bug 1813420](https://bugzilla.redhat.com/show_bug.cgi?id=1813420): fix img reg ref on ICT if OCM knows img reg host before apiserver [#75](https://github.com/openshift/openshift-controller-manager/pull/75)
* [Bug 1819850](https://bugzilla.redhat.com/show_bug.cgi?id=1819850): Increase pull secrets controller QPS to 100 [#91](https://github.com/openshift/openshift-controller-manager/pull/91)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/c7c802a8a67697782cfaa10f266c36f9adb66860...118d87ddde9ee36ccea08b17461f3c6dca3a2ff5)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/06c41918200d7ad324b10ae959d1240083f13513)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet: set cpu requests [#49](https://github.com/openshift/openshift-state-metrics/pull/49)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/c01d2de651071389d2621c46e934fd9cb2bf4b8d...06c41918200d7ad324b10ae959d1240083f13513)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/3af2a4b1875bc4af5dea61044792e6626a4d6017)

* [Bug 1859748](https://bugzilla.redhat.com/show_bug.cgi?id=1859748): fix(resolver): Exclude all installed packages in dependency search [#1676](https://github.com/operator-framework/operator-lifecycle-manager/pull/1676)
* [Bug 1856125](https://bugzilla.redhat.com/show_bug.cgi?id=1856125): Resolve only default channels [#1634](https://github.com/operator-framework/operator-lifecycle-manager/pull/1634)
* [Bug 1843703](https://bugzilla.redhat.com/show_bug.cgi?id=1843703): Deleting a CSV removes related CSV metrics [#1569](https://github.com/operator-framework/operator-lifecycle-manager/pull/1569)
* [Bug 1846220](https://bugzilla.redhat.com/show_bug.cgi?id=1846220): Update PkgManifest upon catsrc update [#1581](https://github.com/operator-framework/operator-lifecycle-manager/pull/1581)
* [Bug 1843694](https://bugzilla.redhat.com/show_bug.cgi?id=1843694): fix(resolver): don't pick operator from same package when resolve requiredAPI [#1571](https://github.com/operator-framework/operator-lifecycle-manager/pull/1571)
* [Bug 1840939](https://bugzilla.redhat.com/show_bug.cgi?id=1840939): fix(queues): use a single gc queue [#1553](https://github.com/operator-framework/operator-lifecycle-manager/pull/1553)
* [Bug 1827822](https://bugzilla.redhat.com/show_bug.cgi?id=1827822): Generation bug 4.3 [#1485](https://github.com/operator-framework/operator-lifecycle-manager/pull/1485)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): feat(catalogs): add spec validation for sourcetypes [#1508](https://github.com/operator-framework/operator-lifecycle-manager/pull/1508)
* [Bug 1818851](https://bugzilla.redhat.com/show_bug.cgi?id=1818851): Prevent nil pointer dereference [#1486](https://github.com/operator-framework/operator-lifecycle-manager/pull/1486)
* [Bug 1821318](https://bugzilla.redhat.com/show_bug.cgi?id=1821318): feat(packagemanifest): add default os/arch labels if not present [#1432](https://github.com/operator-framework/operator-lifecycle-manager/pull/1432)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/5ff376fd8c14bf6a99b314ad402ceb5641f71fdd...3af2a4b1875bc4af5dea61044792e6626a4d6017)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/cb36f0b17d7c92c3085d54e54efe0bf279e07e04)

* [Bug 1849153](https://bugzilla.redhat.com/show_bug.cgi?id=1849153): Ensure correct registry image [#317](https://github.com/operator-framework/operator-marketplace/pull/317)
* [Bug 1805271](https://bugzilla.redhat.com/show_bug.cgi?id=1805271): increase initial delay for appregistry pods [#301](https://github.com/operator-framework/operator-marketplace/pull/301)
* [Bug 1813995](https://bugzilla.redhat.com/show_bug.cgi?id=1813995): support serving marketplace prometheus metrics over https [#296](https://github.com/operator-framework/operator-marketplace/pull/296)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c6534cc7f7e13e5a24c63c75485ef443f1892d9f...cb36f0b17d7c92c3085d54e54efe0bf279e07e04)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/a9ae6f9f68c17af4f7d60e5292603f05cb3a3b7e)

* [Bug 1849152](https://bugzilla.redhat.com/show_bug.cgi?id=1849152): fix(server): make a copy of the db before migrating it [#364](https://github.com/operator-framework/operator-registry/pull/364)
* [Bug 1843647](https://bugzilla.redhat.com/show_bug.cgi?id=1843647): Detect replacement cycles while adding package channels [#345](https://github.com/operator-framework/operator-registry/pull/345)
* [Bug 1816185](https://bugzilla.redhat.com/show_bug.cgi?id=1816185): fix(dns): fix slow dns resolution of localhost for grpc health probe [#331](https://github.com/operator-framework/operator-registry/pull/331)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/36ee3a437614ca1cb781465e590613e01556e756...a9ae6f9f68c17af4f7d60e5292603f05cb3a3b7e)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/1d9574bfc80b3947fe2246249b8c58057c155c20)

* [Bug 1819888](https://bugzilla.redhat.com/show_bug.cgi?id=1819888): [4.3] bump OVS/OVN to 2.13 [#127](https://github.com/openshift/ovn-kubernetes/pull/127)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/49545a5ff653cb9b9f156263348e317c0940e7a6...1d9574bfc80b3947fe2246249b8c58057c155c20)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/33f333ed95cc1a9c5c86e6b8f57fcae1e70d4102)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): pkg/alertmanager: mergepatch alertmanager containers [#75](https://github.com/openshift/prometheus-operator/pull/75)
* [Bug 1805833](https://bugzilla.redhat.com/show_bug.cgi?id=1805833): Tighten permissions related to CRD create/update [#60](https://github.com/openshift/prometheus-operator/pull/60)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/6ba21de5746f7b009a24e48cc929135ddb3396ac...33f333ed95cc1a9c5c86e6b8f57fcae1e70d4102)


### [telemeter](https://github.com/openshift/telemeter/tree/1c05598922c2a9160c83057e7786de06a8b0080b)

* [Bug 1818806](https://bugzilla.redhat.com/show_bug.cgi?id=1818806): jsonnet/telemeter: set cpu requests, unset limits [#346](https://github.com/openshift/telemeter/pull/346)
* [Full changelog](https://github.com/openshift/telemeter/compare/227ae59d226d17eee26a60621bc884f4e8e83254...1c05598922c2a9160c83057e7786de06a8b0080b)