# 4.6.25

Created: 2021-04-15 12:20:57 +0000 UTC

Image Digest: `sha256:7f26b56dc31547a26ce1f67eeb59ecee92dc07f3622e203c51e39fd6d7bcc930`

Promoted from registry.ci.openshift.org/ocp/release:4.6.0-0.nightly-2021-04-14-161003


## Changes from 4.6.15

### Components

* Kubernetes 1.19.4
* Red Hat Enterprise Linux CoreOS upgraded from 46.82.202101262043-0 to 46.82.202104131441-0


### Removed images

* local-storage-static-provisioner


### Rebuilt images without code change

* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [b4647c12](https://github.com/openshift/aws-ebs-csi-driver/commit/b4647c129df74ac1d731c03b5a12c45cdac77f7d) `sha256:a3b663ff424acfa7efce2eb605a0ffef158ee22179039992037b16a3777b0a95`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [8e81a68d](https://github.com/openshift/cluster-autoscaler-operator/commit/8e81a68d7dccf65293328e3d775c1f9c879f167b) `sha256:4d52520cd39a3e574bd4ab7bb12acdb3ae7ee679082f940a2e20b0960f934bfe`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [64410191](https://github.com/openshift/cluster-bootstrap/commit/6441019151cdc7cbbdd034fb7d459235682b4a74) `sha256:39686cf2f1a0351407dc440b6a8bdd8f11523311f2345ae7813405d5c09e2d71`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [68618ad3](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/68618ad3891579c0dcff5c3a701a927f2f383a42) `sha256:30edfa5bf65b2b7ebaed5ccbd83c83a1d7e6ba76bc811b7bce43df60358bb4d2`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [0a8f1f99](https://github.com/openshift/cluster-kube-apiserver-operator/commit/0a8f1f99f98b4637cfb5a22c61c92264687da859) `sha256:8f9a25aa93bfbf9162e83810cdd0d75d739380b4ecd222d49db51aefe81a537e`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [a6320f45](https://github.com/openshift/cluster-machine-approver/commit/a6320f458e1bc658048625ab9a1c3020f3a6e165) `sha256:2e3b981980a3782e6e180a10e17d55e4ae74e36b8dbe139f38879ee09d345a8d`
* [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [163e5e79](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/163e5e795d9f273a28a47b8950c9c8553994fca0) `sha256:10d5563efb7d78ce764f0233e1062ed4bb0a157dc0a09107258da279eb5f6a77`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [5d0e8326](https://github.com/openshift/cluster-samples-operator/commit/5d0e832611ac8d147aa202be70a2eb3ee588b7f1) `sha256:80c84b748cdb5e6a66ae085b9761b4fa68fe4c61c9215956e19915a14235a543`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [70c87c70](https://github.com/openshift/cluster-update-keys/commit/70c87c7025f2c726e523b2fefbb9252772550c1c) `sha256:fa02f1934f7ee4f118942e646a2d86f8458b267f5a23fee71f175b7836bbc2b4`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [2ac2b635](https://github.com/openshift/configmap-reload/commit/2ac2b6353aa536ddbb5785509a182baea7829b57) `sha256:7fe463796de471e2aec3cf1e2ce84cf081c744c03b75e0fd49ba8159696d0ad5`
* [console-operator](https://github.com/openshift/console-operator) git [7fd78a28](https://github.com/openshift/console-operator/commit/7fd78a283616d3b0a99b5b5b1f2b765a192d9165) `sha256:f5d1c1bbdd2d24bcd6ce8cf78557f18e593669ccc1003656c7fbfb40b842af24`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [ca372dec](https://github.com/openshift/containernetworking-plugins/commit/ca372decc534a71f425bbe972395f46c5de227b4) `sha256:41293fbd496a9d54271ca4e18281841ff2f97ade123b6eca90f0cc305c96b221`
* [coredns](https://github.com/openshift/coredns) git [885fb55e](https://github.com/openshift/coredns/commit/885fb55e59fe360b17f9f8eb3c0aebd1d5f49987) `sha256:bfd067da6e3d41dfa5268ce0bbb3b731e55772debe918a0e3c79b4a889eaf92c`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [6dd9c201](https://github.com/openshift/cloud-provider-openstack/commit/6dd9c20135583f65c7f8caca9ad583cf0c2281c8) `sha256:4f2ce546412e1ae3c9bc20462f2665406056762f46b7b8385d47afe1d8a26974`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [5e962cbd](https://github.com/openshift/csi-driver-nfs/commit/5e962cbd824dc5b5634f54a645e4907a1494fe04) `sha256:08b87b27c4dc126c470161b9c3c78f52b503a70a2e4ebf9eada5faa1935f8afc`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [45e712af](https://github.com/openshift/csi-external-attacher/commit/45e712af8947aa25865ffb4ebf1f8e466a1d3281) `sha256:f3d9d74eb6dadeda117d07031638a8547cd6e9ab46899662322ba49ef50a2c84`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [e079d112](https://github.com/openshift/csi-external-provisioner/commit/e079d112ff1a9b751fb85c2972f71031af08f0c1) `sha256:2b63a08c44baea54db10876045d6bc5ada707a0a7ad57de5b25b7443f3efef7a`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [b2c4b923](https://github.com/openshift/csi-external-resizer/commit/b2c4b92328ad1a1dd81498170d107ce9a57d89e3) `sha256:adb0a51b427bd0b8d24a5e9165a70793698b7a7507a98ebf94741b9e4254a6d7`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [c80c3836](https://github.com/openshift/csi-external-snapshotter/commit/c80c3836d33131ed810cbe9f599e3cc2d2746dfd) `sha256:93bcd33e736b8ecfd12f953ce93ad938466d73b1e3934fccbc698a9b95e56518`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [53f2398a](https://github.com/openshift/csi-livenessprobe/commit/53f2398ae6f0c7397a8854a2160d55a79b429252) `sha256:c8d2fb3f2a335a7d54d4e34a83cd140d5064c654ab5eea16bf23ae09603248ed`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [4ba25176](https://github.com/openshift/csi-node-driver-registrar/commit/4ba25176eb3657f7b86b7c34854faae895212ce6) `sha256:a6f6efdd5822ebcc5a269561bbfa54aca5bcf5ed7eacfb66f9bf1a905d2983c0`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [c80c3836](https://github.com/openshift/csi-external-snapshotter/commit/c80c3836d33131ed810cbe9f599e3cc2d2746dfd) `sha256:a701393eea9b48aa11c27543c9c87b43b7085215fe5e4ada490cf7bcea71a7ff`
* [etcd](https://github.com/openshift/etcd) git [edb78716](https://github.com/openshift/etcd/commit/edb78716d0c20e00518843e23129483786080cb6) `sha256:d990dd0b848a22749ec2e20599a003a22fd913f761679e478f6028c6ad7f524b`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [2205538a](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/2205538ae2eec1e1c9ca002011820ab86011b121) `sha256:96621c04b17b797006944daec788c23760407c9c6605b9ecf3047c1a2e91a8e4`
* [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [085dd5f1](https://github.com/openshift/ironic-ipa-downloader/commit/085dd5f10d9b6689aad2a26ded832b2ecc36bcc7) `sha256:dd52ccabc781289e849a4dd32fe1ecbf4201802857b8bcca09f6bf22fb024854`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [6deeefa7](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/6deeefa7d0ef32abd3ff7df04642cb7b29fc7ffa) `sha256:4b6232bb5a2312e59d1e1962c5ed456ec4ae15c80d6f65024e47db50807cefbc`
* machine-os-content `sha256:ad4be86a46c0e4a5f1d236a7e39fc82cce667e6d3a8d89138bbb318345cc876f`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [de9b6e18](https://github.com/openshift/multus-admission-controller/commit/de9b6e18cc0d3047cb05185e09b9e2e8bb3c5c34) `sha256:453a23b5bdb11b9a7bc2605ce5f154b992aca89e55b85046469ea7dd38a28c48`
* [multus-cni](https://github.com/openshift/multus-cni) git [30668ec2](https://github.com/openshift/multus-cni/commit/30668ec22bd3e92ae2bb258aeff8aca744377574) `sha256:8422f03f863e028985c4cb43c2381787df796ec63c3c68f47d61f978844ad43a`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [da944e11](https://github.com/openshift/route-override-cni/commit/da944e11953b64c1f6e6b8a0319c3a988997bcf6) `sha256:6d9d8765688da5cd411c32e1a9b137bb13f386cda456e6866f34a8d9c9497793`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [c5b56ed9](https://github.com/openshift/network-metrics-daemon/commit/c5b56ed97be71c04fe1e56dbee3bbbb1dc28f4ad) `sha256:dc86c11c0825c96189ffe2bb5eb756b828418612bae45aa9004ec1a148b8087a`
* [oauth-server](https://github.com/openshift/oauth-server) git [48380052](https://github.com/openshift/oauth-server/commit/483800527504294f89aaacf165c2ccb873c44122) `sha256:f21ae728496a2b2d743cae01d0060d54c484b141db40c94c04474b2d641a6de9`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [2b514992](https://github.com/openshift/prom-label-proxy/commit/2b51499247434f960a5b543803a92309e3e7ab22) `sha256:7e44273923f674f738dcf6dcf57e8ac6a8a28cc6e9549a885a1014ed0c76be75`
* [prometheus](https://github.com/openshift/prometheus) git [f97d7ec8](https://github.com/openshift/prometheus/commit/f97d7ec81d51522546a076095c141b2d1eb21030) `sha256:abfe4a5f6efde17977f43e5b23af425bbf08f99d4d67d9961865098807f474fe`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [ddfb948a](https://github.com/openshift/prometheus-alertmanager/commit/ddfb948a847563191515bd7edeb77e7a1deed596) `sha256:f932ee7788d52cb3bd0d7d9aad5366ab1047d35a02bdbaf9514e2d6009130797`


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/71b6b96427de49ecbba3cf35726ff1607b9f4ae8)

* [Bug 1915467](https://bugzilla.redhat.com/show_bug.cgi?id=1915467): redeploy CSI Controller Deployment when secret change [#110](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/110)
* [Bug 1912720](https://bugzilla.redhat.com/show_bug.cgi?id=1912720): Remove stale ResourceSyncControllerDegraded condition [#105](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/105)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/e467425cf79adc82189ecb54adeaabbd49a8f4ed...71b6b96427de49ecbba3cf35726ff1607b9f4ae8)


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/878b3a16e964d29d8c76a093efa0fab47d6f6b51)

* [Bug 1941563](https://bugzilla.redhat.com/show_bug.cgi?id=1941563): Ensure response body is closed when we are finished with the request [#395](https://github.com/openshift/cluster-api-provider-aws/pull/395)
* "Bug 1912531: revendor mao" [#388](https://github.com/openshift/cluster-api-provider-aws/pull/388)
* Updating ose-aws-machine-controllers builder & base images to be consistent with ART [#383](https://github.com/openshift/cluster-api-provider-aws/pull/383)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b1a6ba661ed8096ba75c24deeb03fc4287d30fa9...878b3a16e964d29d8c76a093efa0fab47d6f6b51)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/d5f1271996d1feede3e6bcf0d4eda8246e535063)

* Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART [#131](https://github.com/openshift/aws-pod-identity-webhook/pull/131)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/f9408af1ad376cb39d4fe5d11ab2c48d1c5277d0...d5f1271996d1feede3e6bcf0d4eda8246e535063)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/9c86c823fff234c104f574eaf25953485edfe4b1)

* [Bug 1929872](https://bugzilla.redhat.com/show_bug.cgi?id=1929872): remove GCP role bindings before service accounts [#4665](https://github.com/openshift/installer/pull/4665)
* [Bug 1920552](https://bugzilla.redhat.com/show_bug.cgi?id=1920552): vSphere destroy: handle failed clusters [#4618](https://github.com/openshift/installer/pull/4618)
* Updating ose-baremetal-installer builder & base images to be consistent with ART [#4539](https://github.com/openshift/installer/pull/4539)
* Updating ose-installer builder & base images to be consistent with ART [#4538](https://github.com/openshift/installer/pull/4538)
* Updating ose-installer-artifacts builder & base images to be consistent with ART [#4547](https://github.com/openshift/installer/pull/4547)
* [Bug 1916297](https://bugzilla.redhat.com/show_bug.cgi?id=1916297): openstack: Create Control plane nodes sequentially [#4550](https://github.com/openshift/installer/pull/4550)
* [Bug 1918510](https://bugzilla.redhat.com/show_bug.cgi?id=1918510): installconfig: enable vsphere folders for datacenters and clusters. [#4574](https://github.com/openshift/installer/pull/4574)
* [Bug 1915050](https://bugzilla.redhat.com/show_bug.cgi?id=1915050): Set same additional networks on Bootstrap as Control Plane [#4535](https://github.com/openshift/installer/pull/4535)
* [Bug 1917928](https://bugzilla.redhat.com/show_bug.cgi?id=1917928): Set Additional Control Plane Security Groups on Bootstrap Node [#4570](https://github.com/openshift/installer/pull/4570)
* [Bug 1924670](https://bugzilla.redhat.com/show_bug.cgi?id=1924670): openstack/validation: enforce control plane size [#4612](https://github.com/openshift/installer/pull/4612)
* [Bug 1918961](https://bugzilla.redhat.com/show_bug.cgi?id=1918961): vsphere destroy: delete tag category created by installer [#4579](https://github.com/openshift/installer/pull/4579)
* [Bug 1920253](https://bugzilla.redhat.com/show_bug.cgi?id=1920253): disable anonymous auth on bootstrap nodes [#4591](https://github.com/openshift/installer/pull/4591)
* [Full changelog](https://github.com/openshift/installer/compare/26aab99447a65a1a3d46342318486bd1dd11b1e2...9c86c823fff234c104f574eaf25953485edfe4b1)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/16b67b78b538ec2bf24e6457fe469dfb92db9d77)

* "Bug 1912531: revendor mao" [#137](https://github.com/openshift/cluster-api-provider-baremetal/pull/137)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/fcd9e769a45cc54b4d13959b2253fefc2e1d76d4...16b67b78b538ec2bf24e6457fe469dfb92db9d77)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/b4b10a088a0cef66c1ba8a9c0d88db4fa33699d3)

* Updating ose-baremetal-operator builder & base images to be consistent with ART [#119](https://github.com/openshift/baremetal-operator/pull/119)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/9c39676f01fa180cf3e263c225eb52778b5ced16...b4b10a088a0cef66c1ba8a9c0d88db4fa33699d3)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/c08b59c62faf9cf6d609e817a501a91ddaa95942)

* [Bug 1932967](https://bugzilla.redhat.com/show_bug.cgi?id=1932967): Allow baremetal-runtimecfg to function when the node isn't attached to the VIP network [#123](https://github.com/openshift/baremetal-runtimecfg/pull/123)
* [Bug 1926732](https://bugzilla.redhat.com/show_bug.cgi?id=1926732): add CloseIdleConnections for HTTP K8S API healthcheck [#121](https://github.com/openshift/baremetal-runtimecfg/pull/121)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/b8407f88e512e45ae15140a275289c0f1b055ef3...c08b59c62faf9cf6d609e817a501a91ddaa95942)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/c3dc785cf52536afd7b661728747292e848e74b7)

* [Bug 1926172](https://bugzilla.redhat.com/show_bug.cgi?id=1926172): add rsync & log re-tries [#760](https://github.com/openshift/oc/pull/760)
* [Bug 1939549](https://bugzilla.redhat.com/show_bug.cgi?id=1939549): Fix unit test to use new IS [#770](https://github.com/openshift/oc/pull/770)
* [Bug 1923054](https://bugzilla.redhat.com/show_bug.cgi?id=1923054): Fix error in jsonpath when object is empty [#724](https://github.com/openshift/oc/pull/724)
* [Bug 1900991](https://bugzilla.redhat.com/show_bug.cgi?id=1900991): idle: also annotate the service [#727](https://github.com/openshift/oc/pull/727)
* [Bug 1891892](https://bugzilla.redhat.com/show_bug.cgi?id=1891892): Create Windows version information [#630](https://github.com/openshift/oc/pull/630)
* [Bug 1913109](https://bugzilla.redhat.com/show_bug.cgi?id=1913109): Should be able to debug an init container [#686](https://github.com/openshift/oc/pull/686)
* [Bug 1906796](https://bugzilla.redhat.com/show_bug.cgi?id=1906796): use proper username for image verification [#667](https://github.com/openshift/oc/pull/667)
* [Bug 1917548](https://bugzilla.redhat.com/show_bug.cgi?id=1917548): 4.6 backports for oc adm catalog mirror [#711](https://github.com/openshift/oc/pull/711)
* [Bug 1906332](https://bugzilla.redhat.com/show_bug.cgi?id=1906332): bump discovery burst to 250 [#716](https://github.com/openshift/oc/pull/716)
* [Full changelog](https://github.com/openshift/oc/compare/5797eaecac19b9c0e4d10d3d6b559c074e3c3c88...c3dc785cf52536afd7b661728747292e848e74b7)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d456390c24f6a9e32436fcc347eff9799aa0e21e)

* [Bug 1916868](https://bugzilla.redhat.com/show_bug.cgi?id=1916868): Check 47 creds backport [#287](https://github.com/openshift/cloud-credential-operator/pull/287)
* [Bug 1910372](https://bugzilla.redhat.com/show_bug.cgi?id=1910372): Backport redistribute new root creds in passthrough mode [#279](https://github.com/openshift/cloud-credential-operator/pull/279)
* Updating ose-cloud-credential-operator builder & base images to be consistent with ART [#281](https://github.com/openshift/cloud-credential-operator/pull/281)
* [Bug 1921901](https://bugzilla.redhat.com/show_bug.cgi?id=1921901): exclude run-level 0 namespaces from MutatingWebhook for Pods [#292](https://github.com/openshift/cloud-credential-operator/pull/292)
* [Bug 1896919](https://bugzilla.redhat.com/show_bug.cgi?id=1896919): [release-4.6] add new credentials field for AWS Secrets [#268](https://github.com/openshift/cloud-credential-operator/pull/268)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/2f87c2513d1365283b89f8f700971707ee4a8659...d456390c24f6a9e32436fcc347eff9799aa0e21e)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/938196ece243bfffb6f0f3d634f86ae740e29118)

* Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#397](https://github.com/openshift/cluster-authentication-operator/pull/397)
* [Bug 1914848](https://bugzilla.redhat.com/show_bug.cgi?id=1914848): add ServiceMonitor for the oauth apiserver [#396](https://github.com/openshift/cluster-authentication-operator/pull/396)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/63a7c98705bffe601efcc6722e175f5527c7d756...938196ece243bfffb6f0f3d634f86ae740e29118)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/e95246c692290d591d507b85d4ce8e6004a84013)

* [Bug 1927854](https://bugzilla.redhat.com/show_bug.cgi?id=1927854): VPA: Ignore admission hook failures [#186](https://github.com/openshift/kubernetes-autoscaler/pull/186)
* Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#189](https://github.com/openshift/kubernetes-autoscaler/pull/189)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/698efa2f989b509c5c1a2549a531a08e7639bd9f...e95246c692290d591d507b85d4ce8e6004a84013)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/d7db686cd420964efa14cb3d0cdfebd6b222219e)

* Updating ose-cluster-config-operator builder & base images to be consistent with ART [#177](https://github.com/openshift/cluster-config-operator/pull/177)
* [Bug 1905573](https://bugzilla.redhat.com/show_bug.cgi?id=1905573): [release 4.6] Add warning of the consequences of changing bound token issuer [#179](https://github.com/openshift/cluster-config-operator/pull/179)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/60c2657a060979da79704c5c7b4cd7db8ed62e23...d7db686cd420964efa14cb3d0cdfebd6b222219e)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/0ab46771124dfc0bb306572d5ca086c0b8aa13d9)

* [Bug 1944245](https://bugzilla.redhat.com/show_bug.cgi?id=1944245): Corefile: Use 30 second max TTL for caching of negative responses [#256](https://github.com/openshift/cluster-dns-operator/pull/256)
* [Bug 1936589](https://bugzilla.redhat.com/show_bug.cgi?id=1936589): Set CoreDNS's cache's maximum TTL to 900 seconds [#246](https://github.com/openshift/cluster-dns-operator/pull/246)
* [Bug 1928773](https://bugzilla.redhat.com/show_bug.cgi?id=1928773): Set CoreDNS readiness probe period and timeout each to 3 seconds [#236](https://github.com/openshift/cluster-dns-operator/pull/236)
* [Bug 1916907](https://bugzilla.redhat.com/show_bug.cgi?id=1916907): Prevent dig errors from corrupting host's /etc/hosts [#231](https://github.com/openshift/cluster-dns-operator/pull/231)
* [Bug 1903887](https://bugzilla.redhat.com/show_bug.cgi?id=1903887): Set DNS DaemonSet's maxUnavailable value to 10% [#219](https://github.com/openshift/cluster-dns-operator/pull/219)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/72134d56803a4b32b79f4466452ad46fd9f02356...0ab46771124dfc0bb306572d5ca086c0b8aa13d9)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/c5ec85841302bf4c93fbf2da860b96fea10e068d)

* [Bug 1905566](https://bugzilla.redhat.com/show_bug.cgi?id=1905566): Backup script should get the latest revision of static-pod-resources [#508](https://github.com/openshift/cluster-etcd-operator/pull/508)
* [Bug 1934342](https://bugzilla.redhat.com/show_bug.cgi?id=1934342): pkg/operator/metriccontroller: cleanup transports [#551](https://github.com/openshift/cluster-etcd-operator/pull/551)
* [Bug 1915560](https://bugzilla.redhat.com/show_bug.cgi?id=1915560): operator: remove EtcdMemberIPMigratorDegraded stale condition [#521](https://github.com/openshift/cluster-etcd-operator/pull/521)
* [Bug 1918281](https://bugzilla.redhat.com/show_bug.cgi?id=1918281): *: ensure etcd listens on strong ciphers [#526](https://github.com/openshift/cluster-etcd-operator/pull/526)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1685aa09c371d6a118a9e777e161bb789eb64a76...c5ec85841302bf4c93fbf2da860b96fea10e068d)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/4739c685a8aee7748566ded9f711e5ceb0f77f00)

* [Bug 1949040](https://bugzilla.redhat.com/show_bug.cgi?id=1949040): Use mkdir -p to create ca-trust directories [#678](https://github.com/openshift/cluster-image-registry-operator/pull/678)
* [Bug 1936984](https://bugzilla.redhat.com/show_bug.cgi?id=1936984): Make /etc/pki/ca-trust/extracted writable [#672](https://github.com/openshift/cluster-image-registry-operator/pull/672)
* [Bug 1923993](https://bugzilla.redhat.com/show_bug.cgi?id=1923993): Make pruner always aware of registry name [#659](https://github.com/openshift/cluster-image-registry-operator/pull/659)
* [Bug 1904091](https://bugzilla.redhat.com/show_bug.cgi?id=1904091): Creating prometheus record rule for v1 imports [#646](https://github.com/openshift/cluster-image-registry-operator/pull/646)
* [Bug 1916857](https://bugzilla.redhat.com/show_bug.cgi?id=1916857): Sync status to spec with regards to Swift config [#654](https://github.com/openshift/cluster-image-registry-operator/pull/654)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/be99ea05e4a6c527dedfb222e95e5fbef0a57d83...4739c685a8aee7748566ded9f711e5ceb0f77f00)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/17dfa4424be9f0c002e262726d7e8695ed85fe18)

* [Bug 1921193](https://bugzilla.redhat.com/show_bug.cgi?id=1921193): Fix inconsistent ingress operator status after upgrade [#541](https://github.com/openshift/cluster-ingress-operator/pull/541)
* [Bug 1927364](https://bugzilla.redhat.com/show_bug.cgi?id=1927364): Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. [#547](https://github.com/openshift/cluster-ingress-operator/pull/547)
* [Bug 1918994](https://bugzilla.redhat.com/show_bug.cgi?id=1918994): Override termination grace period for the router deployment [#539](https://github.com/openshift/cluster-ingress-operator/pull/539)
* [Bug 1896167](https://bugzilla.redhat.com/show_bug.cgi?id=1896167): Back port HAProxy reload failures alert fix [#486](https://github.com/openshift/cluster-ingress-operator/pull/486)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2377f7a11eeaa70a593c2296968548ac003c38b6...17dfa4424be9f0c002e262726d7e8695ed85fe18)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b05961c979fff825cc17fbd66660f7409cc82f28)

* [Bug 1913030](https://bugzilla.redhat.com/show_bug.cgi?id=1913030): Add recycler pod template as a ConfigMap [#490](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/490)
* [Bug 1916347](https://bugzilla.redhat.com/show_bug.cgi?id=1916347): Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART [#496](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/496)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/4ef6eea75afebf1cc8a7d6008181041ad7b094db...b05961c979fff825cc17fbd66660f7409cc82f28)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/0b9b05bc63e9b079827b3fea86524811bf483612)

* [Bug 1916347](https://bugzilla.redhat.com/show_bug.cgi?id=1916347): Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART [#320](https://github.com/openshift/cluster-kube-scheduler-operator/pull/320)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/4d9ce87a1c953d42d1eefb20308caab56cea1358...0b9b05bc63e9b079827b3fea86524811bf483612)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/a75236dc5a0ad8bc058a3f1e5f38adb1c70af1c4)

* Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART [#37](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/37)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/9a52b3771d325d3025f09b1338ebb743e7ba0c4c...a75236dc5a0ad8bc058a3f1e5f38adb1c70af1c4)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/b81e226b213fceb1ffaa67a41fe3448153c0e333)

* [Bug 1929354](https://bugzilla.redhat.com/show_bug.cgi?id=1929354): [4.6] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus [#1071](https://github.com/openshift/cluster-monitoring-operator/pull/1071)
* [Bug 1920898](https://bugzilla.redhat.com/show_bug.cgi?id=1920898): [4.6] pkg/manifests: fix prometheus-proxy trustedCA [#1083](https://github.com/openshift/cluster-monitoring-operator/pull/1083)
* [Bug 1937907](https://bugzilla.redhat.com/show_bug.cgi?id=1937907): etcdInsufficientMembers is wrong when etcd is in a pod [#1080](https://github.com/openshift/cluster-monitoring-operator/pull/1080)
* [Bug 1918202](https://bugzilla.redhat.com/show_bug.cgi?id=1918202): jsonnet: remove Ceph block devices in rules [#1040](https://github.com/openshift/cluster-monitoring-operator/pull/1040)
* [Bug 1904091](https://bugzilla.redhat.com/show_bug.cgi?id=1904091): Exporting registry v1 protocol usage metric [#1002](https://github.com/openshift/cluster-monitoring-operator/pull/1002)
* [Bug 1912430](https://bugzilla.redhat.com/show_bug.cgi?id=1912430): [Backport 4.6] Set resources to the native spec field [#1028](https://github.com/openshift/cluster-monitoring-operator/pull/1028)
* [Bug 1907830](https://bugzilla.redhat.com/show_bug.cgi?id=1907830): Backporting #965 [#1022](https://github.com/openshift/cluster-monitoring-operator/pull/1022)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e5d64e85bec8980215568ef86059acca84b5c0a3...b81e226b213fceb1ffaa67a41fe3448153c0e333)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/f37ef903258fdb4581ad0897169a4403c4dea753)

* [Bug 1942862](https://bugzilla.redhat.com/show_bug.cgi?id=1942862): Kuryr: Let Kuryr autodetect primary CNI interface [#1035](https://github.com/openshift/cluster-network-operator/pull/1035)
* [Bug 1934652](https://bugzilla.redhat.com/show_bug.cgi?id=1934652): [release-4.6] - Improve the sb-db and nb-db readiness check to ensure it fails when cluster is not stable [#998](https://github.com/openshift/cluster-network-operator/pull/998)
* [Bug 1938280](https://bugzilla.redhat.com/show_bug.cgi?id=1938280): Include LB members for Machines created on day-2 operation [#1018](https://github.com/openshift/cluster-network-operator/pull/1018)
* [Bug 1916601](https://bugzilla.redhat.com/show_bug.cgi?id=1916601): guard against the deletion of the network CRD: `network.operator.openshift.io` [#953](https://github.com/openshift/cluster-network-operator/pull/953)
* [Bug 1901605](https://bugzilla.redhat.com/show_bug.cgi?id=1901605): Kuryr: Allow changes to KuryrConfig [#890](https://github.com/openshift/cluster-network-operator/pull/890)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8798f23e1e4d3fcb277edec0d9b1f2a52e646029...f37ef903258fdb4581ad0897169a4403c4dea753)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/191ec1e8327287cd560914fccad909817fe087b1)

* [Bug 1920525](https://bugzilla.redhat.com/show_bug.cgi?id=1920525): Recover gracefully after Tuned errors. [#197](https://github.com/openshift/cluster-node-tuning-operator/pull/197)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/01d9abf710ff903e2020ae04b8c279c3314dd11b...191ec1e8327287cd560914fccad909817fe087b1)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/272d92ff12e548b238fdc3e61d1622de1e311916)

* [Bug 1931857](https://bugzilla.redhat.com/show_bug.cgi?id=1931857): Set registry routes in operand config [#200](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/200)
* [Bug 1916347](https://bugzilla.redhat.com/show_bug.cgi?id=1916347): Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART [#193](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/193)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2b575c96419f8d5ebde7126ef4fa37a548b91fb2...272d92ff12e548b238fdc3e61d1622de1e311916)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/aa12fbe31eb4704d221ddcbc245fd4b2f7d45a42)

* Updating cluster-policy-controller builder & base images to be consistent with ART [#53](https://github.com/openshift/cluster-policy-controller/pull/53)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/b711c8a66563067ac5cb46715ea48306cb1b3bcf...aa12fbe31eb4704d221ddcbc245fd4b2f7d45a42)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/58bf46eaaee91a3be03625177fb884b735fc520c)

* [Bug 1921599](https://bugzilla.redhat.com/show_bug.cgi?id=1921599): Add annotations to cluster-csi-drivers namespace [#132](https://github.com/openshift/cluster-storage-operator/pull/132)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a84071bf2e5600c806f8bac582316060c1f748a3...58bf46eaaee91a3be03625177fb884b735fc520c)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/da9bee6b68c05e0c75bb5526c52d4f184eea7220)

* [Bug 1924194](https://bugzilla.redhat.com/show_bug.cgi?id=1924194): pkg/payload/task_graph: Require firstIncompleteNode to have tasks [#510](https://github.com/openshift/cluster-version-operator/pull/510)
* [Bug 1925199](https://bugzilla.redhat.com/show_bug.cgi?id=1925199): add current profile annotations to CVO manifests [#512](https://github.com/openshift/cluster-version-operator/pull/512)
* [Bug 1927515](https://bugzilla.redhat.com/show_bug.cgi?id=1927515): pkg/cvo: Use shutdownContext for final status synchronization [#517](https://github.com/openshift/cluster-version-operator/pull/517)
* [Bug 1921180](https://bugzilla.redhat.com/show_bug.cgi?id=1921180): pkg/cvo/sync_worker.go: Ignore work changes during init [#506](https://github.com/openshift/cluster-version-operator/pull/506)
* [Bug 1918494](https://bugzilla.redhat.com/show_bug.cgi?id=1918494): use child context to verify payload signature on forced update [#504](https://github.com/openshift/cluster-version-operator/pull/504)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/94358e80fa8151e43690d5925abc9337e90dca1c...da9bee6b68c05e0c75bb5526c52d4f184eea7220)


### [console](https://github.com/openshift/console/tree/10eb7b373babf28258d3a072d2c38f56f42b51b3)

* [Bug 1943705](https://bugzilla.redhat.com/show_bug.cgi?id=1943705): Add 'Roll Back' action for Replication Controllers [#8491](https://github.com/openshift/console/pull/8491)
* [Bug 1927855](https://bugzilla.redhat.com/show_bug.cgi?id=1927855): sort cluster task in pipeline builder [#8139](https://github.com/openshift/console/pull/8139)
* [Bug 1925037](https://bugzilla.redhat.com/show_bug.cgi?id=1925037): fix delete app modal error when resource not found [#8053](https://github.com/openshift/console/pull/8053)
* [Bug 1935096](https://bugzilla.redhat.com/show_bug.cgi?id=1935096): Apply var pf-global--FontFamily--monospace to the create secret textarea input [#8312](https://github.com/openshift/console/pull/8312)
* [Bug 1931515](https://bugzilla.redhat.com/show_bug.cgi?id=1931515): allow choice of binding type when creating RoleBinding [#8212](https://github.com/openshift/console/pull/8212)
* [Bug 1933017](https://bugzilla.redhat.com/show_bug.cgi?id=1933017): Fix to avoid overriding of d/dc pod template container values [#8322](https://github.com/openshift/console/pull/8322)
* [Bug 1934664](https://bugzilla.redhat.com/show_bug.cgi?id=1934664): Consider finally tasks when calculating task status [#8292](https://github.com/openshift/console/pull/8292)
* [Bug 1928230](https://bugzilla.redhat.com/show_bug.cgi?id=1928230): retry co-fetch on 409 POST or 429 [#8155](https://github.com/openshift/console/pull/8155)
* [Bug 1933727](https://bugzilla.redhat.com/show_bug.cgi?id=1933727): fix Internal registry deploy flow [#8267](https://github.com/openshift/console/pull/8267)
* [Bug 1926121](https://bugzilla.redhat.com/show_bug.cgi?id=1926121): Listing Subscriptions in OLM should also show them when 'All Projects' namespace is picked [#8096](https://github.com/openshift/console/pull/8096)
* [Bug 1923939](https://bugzilla.redhat.com/show_bug.cgi?id=1923939): add missing trigger types and update the optional fields - 4.6 [#8015](https://github.com/openshift/console/pull/8015)
* [Bug 1927800](https://bugzilla.redhat.com/show_bug.cgi?id=1927800): fix query browser prometheus URL for non admin user [#8138](https://github.com/openshift/console/pull/8138)
* [Bug 1926371](https://bugzilla.redhat.com/show_bug.cgi?id=1926371): scale pods using the 'scale' subresource [#8099](https://github.com/openshift/console/pull/8099)
* [Bug 1926340](https://bugzilla.redhat.com/show_bug.cgi?id=1926340): Fix that image containers are fetched from external container registries (which doesn't work for private image containers) [#8098](https://github.com/openshift/console/pull/8098)
* [Bug 1924437](https://bugzilla.redhat.com/show_bug.cgi?id=1924437): Missing User RoleBindings in the Project Access Web UI [#8034](https://github.com/openshift/console/pull/8034)
* [Bug 1924069](https://bugzilla.redhat.com/show_bug.cgi?id=1924069): fix pipeline rerun when pipelineSpec is embedded [#8024](https://github.com/openshift/console/pull/8024)
* [Bug 1919138](https://bugzilla.redhat.com/show_bug.cgi?id=1919138): helmchartrepo is not http(s)_proxy-aware [#7901](https://github.com/openshift/console/pull/7901)
* [Bug 1916860](https://bugzilla.redhat.com/show_bug.cgi?id=1916860): Filter out helm charts based on kubernetes version [#7851](https://github.com/openshift/console/pull/7851)
* [Bug 1920493](https://bugzilla.redhat.com/show_bug.cgi?id=1920493): fix pipeline visualization with same pipeline & task name [#7927](https://github.com/openshift/console/pull/7927)
* [Bug 1920530](https://bugzilla.redhat.com/show_bug.cgi?id=1920530): - System roles are not present while trying to create new role binding through web console [#7929](https://github.com/openshift/console/pull/7929)
* [Bug 1914342](https://bugzilla.redhat.com/show_bug.cgi?id=1914342): make filesystem queries compatible with both RHCOS and RHEL nodes [#7777](https://github.com/openshift/console/pull/7777)
* [Bug 1916406](https://bugzilla.redhat.com/show_bug.cgi?id=1916406): Helm chart repository index can contain unresolvable relative URL's [#7841](https://github.com/openshift/console/pull/7841)
* [Bug 1911260](https://bugzilla.redhat.com/show_bug.cgi?id=1911260): Fix logs streaming issue in multistream logs [#7663](https://github.com/openshift/console/pull/7663)
* [Bug 1924224](https://bugzilla.redhat.com/show_bug.cgi?id=1924224): Fix source code URL for apps created using self-hosted repositories [#8031](https://github.com/openshift/console/pull/8031)
* [Bug 1921603](https://bugzilla.redhat.com/show_bug.cgi?id=1921603): Fix crash when loaded is true but the data set doesn't include the pods [#7985](https://github.com/openshift/console/pull/7985)
* [Bug 1916378](https://bugzilla.redhat.com/show_bug.cgi?id=1916378): fix skipped tasks in conditional pipelines [#7843](https://github.com/openshift/console/pull/7843)
* [Bug 1915013](https://bugzilla.redhat.com/show_bug.cgi?id=1915013): Fix pipeline visualization issue when taskspecs is used [#7859](https://github.com/openshift/console/pull/7859)
* [Bug 1910199](https://bugzilla.redhat.com/show_bug.cgi?id=1910199): Replace 'Baremetal' with 'BareMetal' in the supported platforms for I… [#7637](https://github.com/openshift/console/pull/7637)
* [Bug 1924085](https://bugzilla.redhat.com/show_bug.cgi?id=1924085): don't hard-code artifact dir path [#8025](https://github.com/openshift/console/pull/8025)
* [Bug 1893738](https://bugzilla.redhat.com/show_bug.cgi?id=1893738): Fix crash when helm manifest yaml contains duplicate keys [#7069](https://github.com/openshift/console/pull/7069)
* [Bug 1887813](https://bugzilla.redhat.com/show_bug.cgi?id=1887813): assign masquerade to pod interface in RHV import [#6936](https://github.com/openshift/console/pull/6936)
* [Bug 1907827](https://bugzilla.redhat.com/show_bug.cgi?id=1907827): fixes issue with kn resources if trigger goes to ksvc and IMC from same broker [#7550](https://github.com/openshift/console/pull/7550)
* [Bug 1905788](https://bugzilla.redhat.com/show_bug.cgi?id=1905788): - Role name missing on create role binding form [#7476](https://github.com/openshift/console/pull/7476)
* [Bug 1909673](https://bugzilla.redhat.com/show_bug.cgi?id=1909673): Hide scale buttons of pod donut for Pod resources [#7472](https://github.com/openshift/console/pull/7472)
* [Bug 1891697](https://bugzilla.redhat.com/show_bug.cgi?id=1891697): Handle missing labels as empty [#7002](https://github.com/openshift/console/pull/7002)
* [Full changelog](https://github.com/openshift/console/compare/345dca4f1ad414889828db3e99bd0fae674a6be7...10eb7b373babf28258d3a072d2c38f56f42b51b3)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/7b3806565bcf4b21d103896f369304ad28fbc9ac)

* Updating csi-driver-manila-operator builder & base images to be consistent with ART [#76](https://github.com/openshift/csi-driver-manila-operator/pull/76)
* [Bug 1918367](https://bugzilla.redhat.com/show_bug.cgi?id=1918367): Make Manila operator more tolerant [#88](https://github.com/openshift/csi-driver-manila-operator/pull/88)
* [Bug 1921599](https://bugzilla.redhat.com/show_bug.cgi?id=1921599): Add "openshift.io/node-selector" annotation to namespace [#87](https://github.com/openshift/csi-driver-manila-operator/pull/87)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/dbaa87c5c62e519764f082eb575cbe79830822f4...7b3806565bcf4b21d103896f369304ad28fbc9ac)


### [docker-builder](https://github.com/openshift/builder/tree/11392a0fec4bf6f622f7ac6d81d1cf69aa2d2e5d)

* [Bug 1939219](https://bugzilla.redhat.com/show_bug.cgi?id=1939219): bump(*): [#225](https://github.com/openshift/builder/pull/225)
* [Bug 1919359](https://bugzilla.redhat.com/show_bug.cgi?id=1919359): better surface dockerconfigjson errors causing image pull errors [#210](https://github.com/openshift/builder/pull/210)
* Updating openshift-enterprise-builder builder & base images to be consistent with ART [#201](https://github.com/openshift/builder/pull/201)
* [Bug 1920626](https://bugzilla.redhat.com/show_bug.cgi?id=1920626): more automount of cluster trust bundle reverts; no longer automount /run/secrets [#212](https://github.com/openshift/builder/pull/212)
* [Bug 1920626](https://bugzilla.redhat.com/show_bug.cgi?id=1920626): narrow scope of rhsm transient bind mount [#211](https://github.com/openshift/builder/pull/211)
* [Full changelog](https://github.com/openshift/builder/compare/8aa171c125c5d1a9a3aead88af7df140edfe50d5...11392a0fec4bf6f622f7ac6d81d1cf69aa2d2e5d)


### [docker-registry](https://github.com/openshift/image-registry/tree/7391d45cae13e8abe26e467e91029d7c512de429)

* [Bug 1930802](https://bugzilla.redhat.com/show_bug.cgi?id=1930802): Replace bitbucket.org/ww/goautoneg with its mirror [#266](https://github.com/openshift/image-registry/pull/266)
* Updating openshift-enterprise-registry builder & base images to be consistent with ART [#261](https://github.com/openshift/image-registry/pull/261)
* [Full changelog](https://github.com/openshift/image-registry/compare/077ff76b50c443a525afbb78ad4159bf35f28c0b...7391d45cae13e8abe26e467e91029d7c512de429)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/9b15b1192f37d45821100ca047617849db996342)

* [Bug 1941563](https://bugzilla.redhat.com/show_bug.cgi?id=1941563): Ensure response body is closed when we are finished with the request [#154](https://github.com/openshift/cluster-api-provider-gcp/pull/154)
* "Bug 1912531: revendor mao" [#149](https://github.com/openshift/cluster-api-provider-gcp/pull/149)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/a0fc9aa4ce818d9f8e5f1a4f84ef703ec6180558...9b15b1192f37d45821100ca047617849db996342)


### [grafana](https://github.com/openshift/grafana/tree/1075a442529594154a8fd148a9679b634194cc3b)

* Updating grafana builder & base images to be consistent with ART [#53](https://github.com/openshift/grafana/pull/53)
* [Full changelog](https://github.com/openshift/grafana/compare/0ef8a9c1bb49a85dad67d2143c31bc8bc53c6371...1075a442529594154a8fd148a9679b634194cc3b)


### [haproxy-router](https://github.com/openshift/router/tree/84e7d0c768c3529a633af68a56605cb21362533e)

* [Bug 1938922](https://bugzilla.redhat.com/show_bug.cgi?id=1938922): router/template: Cache compiled regular expressions [#270](https://github.com/openshift/router/pull/270)
* [Bug 1900991](https://bugzilla.redhat.com/show_bug.cgi?id=1900991): Move idle check from endpoints to service [#253](https://github.com/openshift/router/pull/253)
* [Bug 1896167](https://bugzilla.redhat.com/show_bug.cgi?id=1896167): metrics: Rework template_router_reload_failure metric [#215](https://github.com/openshift/router/pull/215)
* [Bug 1918194](https://bugzilla.redhat.com/show_bug.cgi?id=1918194): Prevent unnecessary reloads in router shards [#247](https://github.com/openshift/router/pull/247)
* [Full changelog](https://github.com/openshift/router/compare/00a16cb69025f8c7e1ff86dbc23a57f515011089...84e7d0c768c3529a633af68a56605cb21362533e)


### [hyperkube](https://github.com/openshift/kubernetes/tree/a5a0987268903082e32a9217c88d60bf59c0ccfe)

* [Bug 1942630](https://bugzilla.redhat.com/show_bug.cgi?id=1942630): UPSTREAM: 96789: Choosing the right source VIP for local endpoints [#639](https://github.com/openshift/kubernetes/pull/639)
* [Bug 1933624](https://bugzilla.redhat.com/show_bug.cgi?id=1933624): 4.6: UPSTREAM: 96751: Lower the frequency of volume plugin deprecation warning [#596](https://github.com/openshift/kubernetes/pull/596)
* [Bug 1930960](https://bugzilla.redhat.com/show_bug.cgi?id=1930960): UPSTREAM: 94087: kubelet: node sync at least once [#582](https://github.com/openshift/kubernetes/pull/582)
* [Bug 1918994](https://bugzilla.redhat.com/show_bug.cgi?id=1918994): Override termination grace period on annotation [#533](https://github.com/openshift/kubernetes/pull/533)
* [Bug 1913543](https://bugzilla.redhat.com/show_bug.cgi?id=1913543): UPSTREAM: 97006: kubelet: Fix cadvisor machine metrics [#511](https://github.com/openshift/kubernetes/pull/511)
* [Bug 1924785](https://bugzilla.redhat.com/show_bug.cgi?id=1924785): UPSTREAM: 89885: SQUASH: Fix cinder crash [#548](https://github.com/openshift/kubernetes/pull/548)
* BUG 1891107: UPSTREAM: 95259: allocate service-account flowschema to global-default [#428](https://github.com/openshift/kubernetes/pull/428)
* [Bug 1926262](https://bugzilla.redhat.com/show_bug.cgi?id=1926262): Prevent GCP e2e tests from triggering a rate limit on the listZone API [#556](https://github.com/openshift/kubernetes/pull/556)
* [Bug 1919453](https://bugzilla.redhat.com/show_bug.cgi?id=1919453): Allow test images to be in a single mirror [#536](https://github.com/openshift/kubernetes/pull/536)
* [Bug 1919069](https://bugzilla.redhat.com/show_bug.cgi?id=1919069): UPSTREAM: 98103: kubelet: Delete static pod gracefully and fix mirrorPodTerminationMap leak [#535](https://github.com/openshift/kubernetes/pull/535)
* [Bug 1900241](https://bugzilla.redhat.com/show_bug.cgi?id=1900241): UPSTREAM: Skip "subPath should be able to unmount" NFS test [#468](https://github.com/openshift/kubernetes/pull/468)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#519](https://github.com/openshift/kubernetes/pull/519)
* [Bug 1894916](https://bugzilla.redhat.com/show_bug.cgi?id=1894916): Panic output due to timeouts in kube apiserver [#480](https://github.com/openshift/kubernetes/pull/480)
* Merge [#540](https://github.com/openshift/kubernetes/pull/540)
* [Full changelog](https://github.com/openshift/kubernetes/compare/183305424c91636d683dfb4a379204c313976be2...a5a0987268903082e32a9217c88d60bf59c0ccfe)


### [insights-operator](https://github.com/openshift/insights-operator/tree/aafc477dac589c95e720df61d3527d150bef8d9d)

* [release 4.6] Bug 1891544: Adds ContainerRuntimeConfig gatherer [#238](https://github.com/openshift/insights-operator/pull/238)
* [Bug 1913645](https://bugzilla.redhat.com/show_bug.cgi?id=1913645): Improved Red Hat image and crashlooping OpenShift pod collection [#304](https://github.com/openshift/insights-operator/pull/304)
* [release 4.6] Bug 1889676: Gather installplans [#243](https://github.com/openshift/insights-operator/pull/243)
* [release 4.6] Bug 1887759: Adds MachineConfigPool gatherer [#213](https://github.com/openshift/insights-operator/pull/213)
* [release 4.6] Bug 1905031: Collect spec config for clusteroperator resources [#286](https://github.com/openshift/insights-operator/pull/286)
* [Full changelog](https://github.com/openshift/insights-operator/compare/d07f01893d194493b129b30814d15f8fcde16a68...aafc477dac589c95e720df61d3527d150bef8d9d)


### [ironic](https://github.com/openshift/ironic-image/tree/e4a23ad4f2dbc42fca204c3fba272991dc4ba271)

* [Bug 1917481](https://bugzilla.redhat.com/show_bug.cgi?id=1917481): Wait for expected number of drivers starting API [#136](https://github.com/openshift/ironic-image/pull/136)
* [Bug 1918178](https://bugzilla.redhat.com/show_bug.cgi?id=1918178): Explicitly set minimum versions of ironic packages [#141](https://github.com/openshift/ironic-image/pull/141)
* [Bug 1899107](https://bugzilla.redhat.com/show_bug.cgi?id=1899107): Limit the default number of API workers to 4 [#122](https://github.com/openshift/ironic-image/pull/122)
* [Bug 1903649](https://bugzilla.redhat.com/show_bug.cgi?id=1903649): Re-enable automated_clean [#128](https://github.com/openshift/ironic-image/pull/128)
* [Full changelog](https://github.com/openshift/ironic-image/compare/4218e0748055bba232139e6e40b2fb5800880689...e4a23ad4f2dbc42fca204c3fba272991dc4ba271)


### [ironic-inspector](https://github.com/openshift/ironic-inspector-image/tree/38c91c8e3c96a76ea3cb4ecc3b629dce102217e4)

* Updating ironic-inspector builder & base images to be consistent with ART [#55](https://github.com/openshift/ironic-inspector-image/pull/55)
* [Bug 1918178](https://bugzilla.redhat.com/show_bug.cgi?id=1918178): Explicitly set minimum versions of python libraries [#60](https://github.com/openshift/ironic-inspector-image/pull/60)
* [Full changelog](https://github.com/openshift/ironic-inspector-image/compare/30a7017a8d541db2a9cfd1331ca442aa84429e84...38c91c8e3c96a76ea3cb4ecc3b629dce102217e4)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/b289a391a2a370e503e35005176f2587c6d4d9bf)

* Updating ironic-rhcos-downloader builder & base images to be consistent with ART [#35](https://github.com/openshift/ironic-rhcos-downloader/pull/35)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/555bf2c8a91b7b9b2166ad99893514e96beab5a1...b289a391a2a370e503e35005176f2587c6d4d9bf)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/2f197d075db5cec48803455808e62b5f0ce03eb1)

* [Bug 1918779](https://bugzilla.redhat.com/show_bug.cgi?id=1918779): Toggle addr_gen_mode to 1 and back [#17](https://github.com/openshift/ironic-static-ip-manager/pull/17)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/b8d3cfad0f0c51028a7aa86377fc1dbabf4ddb94...2f197d075db5cec48803455808e62b5f0ce03eb1)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/5fde10091a6ccd6c229c4f8feede5dd3f85105e5)

* [release 4.6] Bug 1929121: update kubernetes-client-api [#1231](https://github.com/openshift/jenkins/pull/1231)
* [release 4.6] Bug 1929919: Upgrade Jenkins to 2.263.3 [#1234](https://github.com/openshift/jenkins/pull/1234)
* [Bug 1922139](https://bugzilla.redhat.com/show_bug.cgi?id=1922139): Update Maven version to 3.6 in maven agent [#1209](https://github.com/openshift/jenkins/pull/1209)
* [Bug 1918637](https://bugzilla.redhat.com/show_bug.cgi?id=1918637): Updating openshift-jenkins-2 builder & base images to be consistent with ART [#1202](https://github.com/openshift/jenkins/pull/1202)
* [Bug 1918619](https://bugzilla.redhat.com/show_bug.cgi?id=1918619): Updating ose-jenkins-agent-base builder & base images to be consistent with ART [#1201](https://github.com/openshift/jenkins/pull/1201)
* [Bug 1918628](https://bugzilla.redhat.com/show_bug.cgi?id=1918628): Updating ose-jenkins-agent-nodejs-10 builder & base images to be consistent with ART [#1205](https://github.com/openshift/jenkins/pull/1205)
* [Bug 1918632](https://bugzilla.redhat.com/show_bug.cgi?id=1918632): Updating ose-jenkins-agent-nodejs-12 builder & base images to be consistent with ART [#1204](https://github.com/openshift/jenkins/pull/1204)
* [Bug 1918630](https://bugzilla.redhat.com/show_bug.cgi?id=1918630): Updating ose-jenkins-agent-maven builder & base images to be consistent with ART [#1203](https://github.com/openshift/jenkins/pull/1203)
* [Bug 1914101](https://bugzilla.redhat.com/show_bug.cgi?id=1914101): Update ant plugin CVE-2020-11979 [#1194](https://github.com/openshift/jenkins/pull/1194)
* [Full changelog](https://github.com/openshift/jenkins/compare/6e8416518550a5d7cc7e6482e5452b661a2e6cb6...5fde10091a6ccd6c229c4f8feede5dd3f85105e5)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/7f012a26a1b7ccce4344d676e35f220fd209c614)

* Updating ose-prometheus-adapter builder & base images to be consistent with ART [#42](https://github.com/openshift/k8s-prometheus-adapter/pull/42)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/06726fb077f7dcb5f610163d74617744a4bcabf3...7f012a26a1b7ccce4344d676e35f220fd209c614)


### [keepalived-ipfailover, pod](https://github.com/openshift/images/tree/618b71dbd1ec125da6b0dd004e4dcc2a085f3cb3)

* [Bug 1926267](https://bugzilla.redhat.com/show_bug.cgi?id=1926267): Egress router: Add iptables package to Dockerfile [#78](https://github.com/openshift/images/pull/78)
* [Full changelog](https://github.com/openshift/images/compare/56a73fe509cde3eb89c3d73e6e243cb66403c93f...618b71dbd1ec125da6b0dd004e4dcc2a085f3cb3)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/e7dfccf27ae848cdc343fce4b65b9e7659b63741)

* [Bug 1937547](https://bugzilla.redhat.com/show_bug.cgi?id=1937547): networkpolicy: pass traffic through NAT to handle possible tuple collisions [#274](https://github.com/openshift/sdn/pull/274)
* [Bug 1928773](https://bugzilla.redhat.com/show_bug.cgi?id=1928773): Prefer local endpoint for cluster DNS service [#261](https://github.com/openshift/sdn/pull/261)
* Updating ose-sdn builder & base images to be consistent with ART [#244](https://github.com/openshift/sdn/pull/244)
* Updating kube-proxy builder & base images to be consistent with ART [#247](https://github.com/openshift/sdn/pull/247)
* [Bug 1904455](https://bugzilla.redhat.com/show_bug.cgi?id=1904455): NetworkPolicy performance fixes, v2 [#249](https://github.com/openshift/sdn/pull/249)
* [Full changelog](https://github.com/openshift/sdn/compare/7106dab9c5785ae163237d443de0ddc19cb1f040...e7dfccf27ae848cdc343fce4b65b9e7659b63741)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/fae6ace52b865699ddd6dc4608ee3637ee4ee1b0)

* Updating kube-rbac-proxy builder & base images to be consistent with ART [#39](https://github.com/openshift/kube-rbac-proxy/pull/39)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/0163f7c1cb7061a2f2de4c38c5e3c7f7921cb368...fae6ace52b865699ddd6dc4608ee3637ee4ee1b0)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/3a6c689c6c7da5fc2a0488276c98e051c74e89b1)

* Updating kube-state-metrics builder & base images to be consistent with ART [#42](https://github.com/openshift/kube-state-metrics/pull/42)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/104235b443edc83d3e6a96e2cfdac82a888acef6...3a6c689c6c7da5fc2a0488276c98e051c74e89b1)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/7bf9b112576addc75f8b704e3429baf864d94e09)

* [Bug 1940141](https://bugzilla.redhat.com/show_bug.cgi?id=1940141): Do not default protocol to TCP for allow-all NPs [#484](https://github.com/openshift/kuryr-kubernetes/pull/484)
* [Bug 1938161](https://bugzilla.redhat.com/show_bug.cgi?id=1938161): Get trunks more diligently [#478](https://github.com/openshift/kuryr-kubernetes/pull/478)
* [Bug 1897526](https://bugzilla.redhat.com/show_bug.cgi?id=1897526): Fix ports count on subnet [#427](https://github.com/openshift/kuryr-kubernetes/pull/427)
* [Bug 1894408](https://bugzilla.redhat.com/show_bug.cgi?id=1894408): Delete ports created for host networking pods [#395](https://github.com/openshift/kuryr-kubernetes/pull/395)
* [Bug 1893681](https://bugzilla.redhat.com/show_bug.cgi?id=1893681): Bulk port creation exception not completely formatted [#390](https://github.com/openshift/kuryr-kubernetes/pull/390)
* [Bug 1906741](https://bugzilla.redhat.com/show_bug.cgi?id=1906741): Skip unscheduled pods when deleting NPs [#428](https://github.com/openshift/kuryr-kubernetes/pull/428)
* [Bug 1920995](https://bugzilla.redhat.com/show_bug.cgi?id=1920995): Decrease CPU usage of Prometheus exporter [#440](https://github.com/openshift/kuryr-kubernetes/pull/440)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/35de8de5bedc1b1bea0238febb58f1e70ac3a08b...7bf9b112576addc75f8b704e3429baf864d94e09)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/b3e2718f198ee2ca5c0c29a8bc91b3b241a9aed9)

* [Bug 1939259](https://bugzilla.redhat.com/show_bug.cgi?id=1939259): [release-4.6] Update MAO and set metrics on :8081 address [#220](https://github.com/openshift/cluster-api-provider-libvirt/pull/220)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/1ca52adab176154cbdd27e150fc67e2513acc84b...b3e2718f198ee2ca5c0c29a8bc91b3b241a9aed9)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/b5fb76b27015004cfeba70c1210c19cde6b20e79)

* [Bug 1933676](https://bugzilla.redhat.com/show_bug.cgi?id=1933676): Cherry-pick: Azure disconnected reject publicIP setting [#812](https://github.com/openshift/machine-api-operator/pull/812)
* Updating ose-machine-api-operator builder & base images to be consistent with ART [#786](https://github.com/openshift/machine-api-operator/pull/786)
* [Bug 1912531](https://bugzilla.redhat.com/show_bug.cgi?id=1912531): 4.6: Update kubectl dep [#782](https://github.com/openshift/machine-api-operator/pull/782)
* [Bug 1890452](https://bugzilla.redhat.com/show_bug.cgi?id=1890452): Bump Azure dependency to include BYOK encryption fields [#763](https://github.com/openshift/machine-api-operator/pull/763)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/7604f6a9f2fc46053e31bc4b6b6f9fa1bff596dd...b5fb76b27015004cfeba70c1210c19cde6b20e79)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/d5dc2b519aed5b3ed6a6ab9e7f70f33740f9f8af)

* [Bug 1940585](https://bugzilla.redhat.com/show_bug.cgi?id=1940585): conditionally set nodeip-service enabled for vSphere [#2493](https://github.com/openshift/machine-config-operator/pull/2493)
* [Bug 1883916](https://bugzilla.redhat.com/show_bug.cgi?id=1883916): [4.6z backport] Fixes setting route metric for ovs-config [#2467](https://github.com/openshift/machine-config-operator/pull/2467)
* [Bug 1931617](https://bugzilla.redhat.com/show_bug.cgi?id=1931617): OVS Config: fixes detecting bond NM files with static IP [#2453](https://github.com/openshift/machine-config-operator/pull/2453)
* [Bug 1908534](https://bugzilla.redhat.com/show_bug.cgi?id=1908534): update ctrcfg crd to make spec & containerruntimeconfig required [#2308](https://github.com/openshift/machine-config-operator/pull/2308)
* [Bug 1897552](https://bugzilla.redhat.com/show_bug.cgi?id=1897552): Mode mismatch fix for confusing strings [#2353](https://github.com/openshift/machine-config-operator/pull/2353)
* [Bug 1933075](https://bugzilla.redhat.com/show_bug.cgi?id=1933075): backport systemd dropin/units zero-length handling [#2435](https://github.com/openshift/machine-config-operator/pull/2435)
* [Bug 1906298](https://bugzilla.redhat.com/show_bug.cgi?id=1906298): update MCDDrainErr to reduce cardinality & fix nodename [#2419](https://github.com/openshift/machine-config-operator/pull/2419)
* [Bug 1908940](https://bugzilla.redhat.com/show_bug.cgi?id=1908940): [test] Skip TestKernelType on OKD [#2311](https://github.com/openshift/machine-config-operator/pull/2311)
* [Bug 1919272](https://bugzilla.redhat.com/show_bug.cgi?id=1919272): [release-4.6] NM resolve prepender: support appending a nameserver for systemd-resolved [#2356](https://github.com/openshift/machine-config-operator/pull/2356)
* [Bug 1901602](https://bugzilla.redhat.com/show_bug.cgi?id=1901602): Inject version into controllerconfig, refuse mismatches [#2257](https://github.com/openshift/machine-config-operator/pull/2257)
* [Bug 1899535](https://bugzilla.redhat.com/show_bug.cgi?id=1899535): ds/machine-config-daemon: Set maxUnavailable 10% [#2240](https://github.com/openshift/machine-config-operator/pull/2240)
* [Bug 1893409](https://bugzilla.redhat.com/show_bug.cgi?id=1893409): daemon: add back metrics for pivot error [#2216](https://github.com/openshift/machine-config-operator/pull/2216)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/ead62052138543eb3e19b4de493a94ed7c88b3b9...d5dc2b519aed5b3ed6a6ab9e7f70f33740f9f8af)


### [mdns-publisher](https://github.com/openshift/mdns-publisher/tree/793a43fcc1e15890ea7e20c5aee2baf1dddda9f0)

* [Bug 1936539](https://bugzilla.redhat.com/show_bug.cgi?id=1936539): Update zeroconf to pull in rate-limiting fix [#27](https://github.com/openshift/mdns-publisher/pull/27)
* Updating ose-mdns-publisher builder & base images to be consistent with ART [#22](https://github.com/openshift/mdns-publisher/pull/22)
* [Full changelog](https://github.com/openshift/mdns-publisher/compare/1a83a8058ab22b5874ff198c3d3a97568f70ba7b...793a43fcc1e15890ea7e20c5aee2baf1dddda9f0)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/cf872fff2d6166f1c0a9b389df80e100f1284a26)

* [Bug 1898616](https://bugzilla.redhat.com/show_bug.cgi?id=1898616): Excluded subnet handling for ipv6 [backport 4.6] [#37](https://github.com/openshift/whereabouts-cni/pull/37)
* [Bug 1898672](https://bugzilla.redhat.com/show_bug.cgi?id=1898672): Removes error when deallocating IP errors out, instead just warns [backport 4.6] [#40](https://github.com/openshift/whereabouts-cni/pull/40)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/b073337af4ac5eea6e1b4545510992dfdab0ab28...cf872fff2d6166f1c0a9b389df80e100f1284a26)


### [must-gather](https://github.com/openshift/must-gather/tree/6f310efcaedc68b16a14618abbdbb1b0e97c337d)

* Updating ose-must-gather builder & base images to be consistent with ART [#203](https://github.com/openshift/must-gather/pull/203)
* [Full changelog](https://github.com/openshift/must-gather/compare/5377c81a6d9e8dedbb85cb81fee667bfd294b5b1...6f310efcaedc68b16a14618abbdbb1b0e97c337d)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/3412a192ea1c2cd30acdf86dc8183e0235e78a16)

* Updating ose-oauth-apiserver builder & base images to be consistent with ART [#36](https://github.com/openshift/oauth-apiserver/pull/36)
* [Bug 1919966](https://bugzilla.redhat.com/show_bug.cgi?id=1919966): fixes a data race in SerializeObject function [#38](https://github.com/openshift/oauth-apiserver/pull/38)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/d5a9d3771899995f1927a2a7c0d3f0cd92151410...3412a192ea1c2cd30acdf86dc8183e0235e78a16)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/63af096e2762f9165bc7b30d65b8cd11d60119e7)

* [Bug 1915667](https://bugzilla.redhat.com/show_bug.cgi?id=1915667): remove logging when authz header is present but basic auth is not attempted [#200](https://github.com/openshift/oauth-proxy/pull/200)
* [Bug 1891725](https://bugzilla.redhat.com/show_bug.cgi?id=1891725): don't segfault on wrong option combination [#193](https://github.com/openshift/oauth-proxy/pull/193)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/e384b2cc40d42ad7d28bfb468ae9f5760eac4e1f...63af096e2762f9165bc7b30d65b8cd11d60119e7)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/c09e60bc9c6e15cb432880858e5d14c711ff1d8d)

* [Bug 1919966](https://bugzilla.redhat.com/show_bug.cgi?id=1919966): fixes a data race in SerializeObject function [#182](https://github.com/openshift/openshift-apiserver/pull/182)
* [Bug 1900991](https://bugzilla.redhat.com/show_bug.cgi?id=1900991): policy/unidling-controller: allow get/update on services [#183](https://github.com/openshift/openshift-apiserver/pull/183)
* [Bug 1905195](https://bugzilla.redhat.com/show_bug.cgi?id=1905195): Detecting broken connections to the Kube API takes up to 15 minutes [#162](https://github.com/openshift/openshift-apiserver/pull/162)
* [Bug 1894916](https://bugzilla.redhat.com/show_bug.cgi?id=1894916): Panic output due to timeouts in openshift-apiserver [#161](https://github.com/openshift/openshift-apiserver/pull/161)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/9143a79e2fe8057e6763ae639de81c7f507fbcd5...c09e60bc9c6e15cb432880858e5d14c711ff1d8d)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/8a39c64da365349ac8a379e2450a6e8bf9597827)

* [Bug 1935362](https://bugzilla.redhat.com/show_bug.cgi?id=1935362): Listing All Events with Chunking [#170](https://github.com/openshift/openshift-controller-manager/pull/170)
* [Bug 1900991](https://bugzilla.redhat.com/show_bug.cgi?id=1900991): unidling: switch away from endpoints to the service [#167](https://github.com/openshift/openshift-controller-manager/pull/167)
* Updating ose-openshift-controller-manager builder & base images to be consistent with ART [#157](https://github.com/openshift/openshift-controller-manager/pull/157)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/fe4610756697d612c85b03a5db91d784f2b91dba...8a39c64da365349ac8a379e2450a6e8bf9597827)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/24b34520a3a110dfc9884100d4f242da878dee35)

* Updating openshift-state-metrics builder & base images to be consistent with ART [#65](https://github.com/openshift/openshift-state-metrics/pull/65)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/041528b3321d5b20ac86a337693bc4cce1d36ca1...24b34520a3a110dfc9884100d4f242da878dee35)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/48b73415908af2333641faef06fb104666120177)

* [Bug 1933667](https://bugzilla.redhat.com/show_bug.cgi?id=1933667): Update ose-openstack-machine-controllers builder & base images to be consistent with ART [#154](https://github.com/openshift/cluster-api-provider-openstack/pull/154)
* [Bug 1933667](https://bugzilla.redhat.com/show_bug.cgi?id=1933667): Updating ose-openstack-machine-controllers builder & base images to be consistent with ART [#165](https://github.com/openshift/cluster-api-provider-openstack/pull/165)
* "Bug 1912531: revendor mao" [#164](https://github.com/openshift/cluster-api-provider-openstack/pull/164)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/3622a0ce6b56750a9833d20554dcad3e214ac742...48b73415908af2333641faef06fb104666120177)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/85939efe2b65b47ad6727783c114e4c94e7e71b8)

* Updating operator-lifecycle-manager builder & base images to be consistent with ART [#1952](https://github.com/operator-framework/operator-lifecycle-manager/pull/1952)
* [Bug 1940649](https://bugzilla.redhat.com/show_bug.cgi?id=1940649): Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. [#2051](https://github.com/operator-framework/operator-lifecycle-manager/pull/2051)
* [Bug 1940453](https://bugzilla.redhat.com/show_bug.cgi?id=1940453): Support jittering relatively small resync intervals. [#2050](https://github.com/operator-framework/operator-lifecycle-manager/pull/2050)
* [Bug 1938618](https://bugzilla.redhat.com/show_bug.cgi?id=1938618): Infer package name property for unannotated CSVs, if possible. [#2043](https://github.com/operator-framework/operator-lifecycle-manager/pull/2043)
* [Bug 1938369](https://bugzilla.redhat.com/show_bug.cgi?id=1938369): fix(resolver): Allow skipped versions to be installed initially [#2040](https://github.com/operator-framework/operator-lifecycle-manager/pull/2040)
* [Bug 1934637](https://bugzilla.redhat.com/show_bug.cgi?id=1934637): Honor all subscriptions to a package [#2026](https://github.com/operator-framework/operator-lifecycle-manager/pull/2026)
* [Bug 1929335](https://bugzilla.redhat.com/show_bug.cgi?id=1929335): Only re-create operator resource if it has existing components [#2008](https://github.com/operator-framework/operator-lifecycle-manager/pull/2008)
* [Bug 1922919](https://bugzilla.redhat.com/show_bug.cgi?id=1922919): Fix zero-delay resyncs for certain registry update policies. [#1989](https://github.com/operator-framework/operator-lifecycle-manager/pull/1989)
* [Bug 1924257](https://bugzilla.redhat.com/show_bug.cgi?id=1924257): Fix time comparison in CSV reconcile loop [#1991](https://github.com/operator-framework/operator-lifecycle-manager/pull/1991)
* Use docker driver for minikube installation test. [#1988](https://github.com/operator-framework/operator-lifecycle-manager/pull/1988)
* [Bug 1917498](https://bugzilla.redhat.com/show_bug.cgi?id=1917498): use OLM client when installing CRDs [#1967](https://github.com/operator-framework/operator-lifecycle-manager/pull/1967)
* [Bug 1918525](https://bugzilla.redhat.com/show_bug.cgi?id=1918525): Fix infinite loop when a CSV replacement chain contains a cycle. [#1970](https://github.com/operator-framework/operator-lifecycle-manager/pull/1970)
* [Bug 1920873](https://bugzilla.redhat.com/show_bug.cgi?id=1920873): Support InstallPlan steps upgrading existing ClusterIP Services. [#1977](https://github.com/operator-framework/operator-lifecycle-manager/pull/1977)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/09f6590a10e4925e7382e1a389c002d761e341fb...85939efe2b65b47ad6727783c114e4c94e7e71b8)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/f0c3f9d6acc14bc3fc98f9c8c1766f60a1b9efc6)

* Updating marketplace-operator builder & base images to be consistent with ART [#374](https://github.com/operator-framework/operator-marketplace/pull/374)
* [Bug 1937986](https://bugzilla.redhat.com/show_bug.cgi?id=1937986): wrong community catalog image reference [#384](https://github.com/operator-framework/operator-marketplace/pull/384)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/fb176f7cc10fae33eaef1b08d725c01a1f9b7790...f0c3f9d6acc14bc3fc98f9c8c1766f60a1b9efc6)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/d0b49148a4f476f1403c7b8fd262173789009484)

* Updating operator-registry builder & base images to be consistent with ART [#550](https://github.com/operator-framework/operator-registry/pull/550)
* [Bug 1915068](https://bugzilla.redhat.com/show_bug.cgi?id=1915068): Fix windows build with golang 1.15 [#547](https://github.com/operator-framework/operator-registry/pull/547)
* [Bug 1918012](https://bugzilla.redhat.com/show_bug.cgi?id=1918012): Unexpected images left in `related_images` after pruning [#560](https://github.com/operator-framework/operator-registry/pull/560)
* [Bug 1889865](https://bugzilla.redhat.com/show_bug.cgi?id=1889865): Avoid duplicate registry binaries across downstream image layers. [#535](https://github.com/operator-framework/operator-registry/pull/535)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/33f1688e66420b26aa3d36b1e12d0c3fdc31bbea...d0b49148a4f476f1403c7b8fd262173789009484)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/dbe2fcdbb8a3e4d23b104e3379d9b2a490d2d602)

* [Bug 1924623](https://bugzilla.redhat.com/show_bug.cgi?id=1924623): pass ovirtClient to identity and remove redundant call to Test connection [#69](https://github.com/openshift/ovirt-csi-driver/pull/69)
* Updating ose-ovirt-csi-driver builder & base images to be consistent with ART [#71](https://github.com/openshift/ovirt-csi-driver/pull/71)
* [Bug 1921817](https://bugzilla.redhat.com/show_bug.cgi?id=1921817): support raw block devices [#68](https://github.com/openshift/ovirt-csi-driver/pull/68)
* [Bug 1917149](https://bugzilla.redhat.com/show_bug.cgi?id=1917149): [release-4.6] bump go-ovirt and run make vendor [#64](https://github.com/openshift/ovirt-csi-driver/pull/64)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/230e4c345f0888cfbf68c1b8d22e384e76c8ec3a...dbe2fcdbb8a3e4d23b104e3379d9b2a490d2d602)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/c4fc2c7537199df38adc1bdc92bfa15794d99c47)

* [Bug 1924626](https://bugzilla.redhat.com/show_bug.cgi?id=1924626): increase livenessProbe period [#44](https://github.com/openshift/ovirt-csi-driver-operator/pull/44)
* [Bug 1916100](https://bugzilla.redhat.com/show_bug.cgi?id=1916100): [release-4.6] bump go-ovirt to 2020-10-23 [#38](https://github.com/openshift/ovirt-csi-driver-operator/pull/38)
* [Bug 1916096](https://bugzilla.redhat.com/show_bug.cgi?id=1916096): [release-4.6] check FollowLink errors [#37](https://github.com/openshift/ovirt-csi-driver-operator/pull/37)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/b4665dfef8af00d5ec4ae318154e2294996611ab...c4fc2c7537199df38adc1bdc92bfa15794d99c47)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/91f12f3f7dee290fa0f6977f5e06e3259e588087)

* Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART [#81](https://github.com/openshift/cluster-api-provider-ovirt/pull/81)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/488f970d6c53b62aaf91abfbda956b0e136097c5...91f12f3f7dee290fa0f6977f5e06e3259e588087)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/fbb70bbcc412018c842b6afa9330bc243386c048)

* [Bug 1945725](https://bugzilla.redhat.com/show_bug.cgi?id=1945725): Revert the ovn change to avoid a crash [#485](https://github.com/openshift/ovn-kubernetes/pull/485)
* [Bug 1935691](https://bugzilla.redhat.com/show_bug.cgi?id=1935691): [release-4.6] Backport port_claim improvement [#459](https://github.com/openshift/ovn-kubernetes/pull/459)
* [Bug 1933752](https://bugzilla.redhat.com/show_bug.cgi?id=1933752): Bump to ovn2.13-20.09.0-7.el8fdn [#455](https://github.com/openshift/ovn-kubernetes/pull/455)
* [Bug 1889460](https://bugzilla.redhat.com/show_bug.cgi?id=1889460): Guard against nil address set usage [#353](https://github.com/openshift/ovn-kubernetes/pull/353)
* [Bug 1920482](https://bugzilla.redhat.com/show_bug.cgi?id=1920482): Configure GARP for egress IP re-assignment [#424](https://github.com/openshift/ovn-kubernetes/pull/424)
* [Bug 1921274](https://bugzilla.redhat.com/show_bug.cgi?id=1921274): Fix MCS-blocking iptables rules [#425](https://github.com/openshift/ovn-kubernetes/pull/425)
* [Bug 1890274](https://bugzilla.redhat.com/show_bug.cgi?id=1890274): Fixes External IP with local gateway mode [#354](https://github.com/openshift/ovn-kubernetes/pull/354)
* [Bug 1912328](https://bugzilla.redhat.com/show_bug.cgi?id=1912328): Bump OVS to 2.13.0-72 [#372](https://github.com/openshift/ovn-kubernetes/pull/372)
* [Bug 1917240](https://bugzilla.redhat.com/show_bug.cgi?id=1917240): [4.6] Backport Add clusterIP to ingress policy AS for SNAT-ed hairpin Traffic Cherry Pick [#411](https://github.com/openshift/ovn-kubernetes/pull/411)
* [Bug 1917609](https://bugzilla.redhat.com/show_bug.cgi?id=1917609): Fixes deleting exgw pod [#421](https://github.com/openshift/ovn-kubernetes/pull/421)
* [Bug 1912388](https://bugzilla.redhat.com/show_bug.cgi?id=1912388): Fix broken make check on 4.6 [#395](https://github.com/openshift/ovn-kubernetes/pull/395)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/b4900a816e095a093fa59b6ef87ea0236060e3e1...fbb70bbcc412018c842b6afa9330bc243386c048)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/555d6020fa7e3cfd8237daa9802e2bd9cd72ba63)

* [Bug 1935586](https://bugzilla.redhat.com/show_bug.cgi?id=1935586): pkg/prometheus: remove liveness probe [#110](https://github.com/openshift/prometheus-operator/pull/110)
* Updating prometheus-operator builder & base images to be consistent with ART [#103](https://github.com/openshift/prometheus-operator/pull/103)
* Updating prometheus-config-reloader builder & base images to be consistent with ART [#104](https://github.com/openshift/prometheus-operator/pull/104)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/1cbb5d5a81a80c2f996b4c9045a3cc85650cdfd7...555d6020fa7e3cfd8237daa9802e2bd9cd72ba63)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/56d350391862f9f27f4abbb5201a9e3e99e996ec)

* [Bug 1928073](https://bugzilla.redhat.com/show_bug.cgi?id=1928073): Remove escape characters [#83](https://github.com/openshift/node_exporter/pull/83)
* [Full changelog](https://github.com/openshift/node_exporter/compare/9d6c0cf2c105560086efa4bc7230680835f4ccf2...56d350391862f9f27f4abbb5201a9e3e99e996ec)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/0a3162106840fcded685eb23f1a8beadc6ee2837)

* Updating ose-service-ca-operator builder & base images to be consistent with ART [#135](https://github.com/openshift/service-ca-operator/pull/135)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/4f5b8bad62b562814fdfce5ae0ddf57bc4be2c02...0a3162106840fcded685eb23f1a8beadc6ee2837)


### [telemeter](https://github.com/openshift/telemeter/tree/d7cd4df1ba5ff2b4d51015cfcfee916365dc5192)

* Updating telemeter builder & base images to be consistent with ART [#368](https://github.com/openshift/telemeter/pull/368)
* [Full changelog](https://github.com/openshift/telemeter/compare/895aca154f5ca7f7ddd7602231d9a770d1e9d3c2...d7cd4df1ba5ff2b4d51015cfcfee916365dc5192)


### [tests](https://github.com/openshift/origin/tree/33582e264093ed738f7439abef01a7885236368d)

* [Bug 1931864](https://bugzilla.redhat.com/show_bug.cgi?id=1931864): test: add vsphere and libvirt to unsupported platforms for LB service [#25914](https://github.com/openshift/origin/pull/25914)
* [Bug 1930537](https://bugzilla.redhat.com/show_bug.cgi?id=1930537): improve handling of pending pods crashloop detection test [#25600](https://github.com/openshift/origin/pull/25600)
* [Bug 1902008](https://bugzilla.redhat.com/show_bug.cgi?id=1902008): fix ldap group sync tests and move them from bash to golang [#25808](https://github.com/openshift/origin/pull/25808)
* [Bug 1939549](https://bugzilla.redhat.com/show_bug.cgi?id=1939549): Update tests to use Ruby 2.7 [#25967](https://github.com/openshift/origin/pull/25967)
* [Bug 1930724](https://bugzilla.redhat.com/show_bug.cgi?id=1930724): server-side apply e2e: fix oauthclientauthorization race with KCM [#25908](https://github.com/openshift/origin/pull/25908)
* [Bug 1902054](https://bugzilla.redhat.com/show_bug.cgi?id=1902054): Update multicast test image for use in release-4.6 [#25825](https://github.com/openshift/origin/pull/25825)
* [Bug 1900991](https://bugzilla.redhat.com/show_bug.cgi?id=1900991): test/extended/router: add idle/unidle e2e test [#25858](https://github.com/openshift/origin/pull/25858)
* [Bug 1925539](https://bugzilla.redhat.com/show_bug.cgi?id=1925539): Allow RHE7 /run contents for build fs test [#25864](https://github.com/openshift/origin/pull/25864)
* [Bug 1924744](https://bugzilla.redhat.com/show_bug.cgi?id=1924744): allow OKD /run contents for build fs test [#25851](https://github.com/openshift/origin/pull/25851)
* [Bug 1900991](https://bugzilla.redhat.com/show_bug.cgi?id=1900991): idle.sh: Drop endpoints mocks from idle tests [#25855](https://github.com/openshift/origin/pull/25855)
* [Bug 1920626](https://bugzilla.redhat.com/show_bug.cgi?id=1920626): add test to verify build /run fs contents [#25838](https://github.com/openshift/origin/pull/25838)
* [Bug 1921473](https://bugzilla.redhat.com/show_bug.cgi?id=1921473): don't wait for PV removal in volumes.sh [#25831](https://github.com/openshift/origin/pull/25831)
* Updating openshift-enterprise-tests builder & base images to be consistent with ART [#25796](https://github.com/openshift/origin/pull/25796)
* [Full changelog](https://github.com/openshift/origin/compare/32cfba83d5618dfd9aaf27a2eafb2e123af0a122...33582e264093ed738f7439abef01a7885236368d)


### [thanos](https://github.com/openshift/thanos/tree/1f326d28172cde98087392b1eab5aa14fca31f2f)

* Updating thanos builder & base images to be consistent with ART [#44](https://github.com/openshift/thanos/pull/44)
* [Bug 1918792](https://bugzilla.redhat.com/show_bug.cgi?id=1918792): pkg/rules/proxy: fix hotlooping when receiving client errors [#47](https://github.com/openshift/thanos/pull/47)
* [Full changelog](https://github.com/openshift/thanos/compare/2589790033e14a550a47c664f646eb32a1500e7d...1f326d28172cde98087392b1eab5aa14fca31f2f)