# 4.8.37

Created: 2022-04-13 22:26:54 +0000 UTC

Image Digest: `sha256:462178399720c61fc4f9a99e572e3c10428c35f704ed36a44e75def2fc6261c7`

Promoted from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-04-13-042657


## Changes from 4.7.32

### Components

* Kubernetes upgraded from 1.20.10 to 1.21.8
* Red Hat Enterprise Linux CoreOS upgraded from 47.84.202109210831-0 to 48.84.202204041528-0


### New images

* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [2d461b39](https://github.com/openshift/azure-disk-csi-driver/commit/2d461b39bacc76f0b879f943015df4d2191f72f4) `sha256:456b93aaae9e1e44de9d74354c748cfd12e8bf760fa189d233e26f4ff0b32764`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [d3a3c298](https://github.com/openshift/azure-disk-csi-driver-operator/commit/d3a3c298c91371ccd37896857f623f4494dd78a6) `sha256:37ba874d506ab087f62b4f29fdce0254b7f50bfe28e0361b54d9e09f493a41a6`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [187ad91f](https://github.com/openshift/multus-networkpolicy/commit/187ad91f119ff6b73610922012e7af4e704c5e93) `sha256:1e66326fff2f0759d96fe4be2b55d7cb026fd19b5108662b89eaea79c89d84c6`
* [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:b71cc69272e34301a6f505f2ad7f9fde9af8d352487219076999945368c3b05f`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:8b04c7cd23ebdc2c8553322016e93e727c47f1c0ecc29c482295d9330fa5ad27`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [18cd9873](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/18cd9873078206f26d25ecf18893ba0864c0cf62) `sha256:3f2c4826365a6cd756bdeebb62d676a8569b0a01783f712fde62a937a8c57cd3`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:ab087b8534cf98cb516ca51a3c8280d0b97d01ad157693abc2006fc644fbeedc`


### Removed images

* hello-openshift


### Rebuilt images without code change

* machine-os-content `sha256:52988bb906c3705f5594e3336eed6eebd85fcccf1c20b81e3b576c85a2261c28`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [1662c3ec](https://github.com/openshift/route-override-cni/commit/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00) `sha256:397fdbd2957eb77d568b147a571a1e5561752de4febc1b1ea5a95f7564239841`


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/8c036e44147d9e4546c726b934dedda3940790af)

* [Bug 1962415](https://bugzilla.redhat.com/show_bug.cgi?id=1962415): Rebase v1.1.0 [#187](https://github.com/openshift/aws-ebs-csi-driver/pull/187)
* release v1.1.0 [#917](https://github.com/openshift/aws-ebs-csi-driver/pull/917)
* remove WellKnownTopologyKey from PV Topology [#912](https://github.com/openshift/aws-ebs-csi-driver/pull/912)
* Bump chart-releaser-action to v1.2.1 [#914](https://github.com/openshift/aws-ebs-csi-driver/pull/914)
* Skip volume expansion if block node [#916](https://github.com/openshift/aws-ebs-csi-driver/pull/916)
* add custom useragent suffix [#910](https://github.com/openshift/aws-ebs-csi-driver/pull/910)
* Add podAnnotations to snapshotController StatefulSet [#884](https://github.com/openshift/aws-ebs-csi-driver/pull/884)
* Support custom pod labels in Helm chart [#905](https://github.com/openshift/aws-ebs-csi-driver/pull/905)
* Add pod disruption budgets that got missed in a rebase [#906](https://github.com/openshift/aws-ebs-csi-driver/pull/906)
* Reduce default log level to 2 [#903](https://github.com/openshift/aws-ebs-csi-driver/pull/903)
* Cleanup helm chart [#856](https://github.com/openshift/aws-ebs-csi-driver/pull/856)
* remove hardcoded namespace for pod disruption budget [#895](https://github.com/openshift/aws-ebs-csi-driver/pull/895)
* Only initialize the in-cluster kube client when metadata service is actually unavailable [#897](https://github.com/openshift/aws-ebs-csi-driver/pull/897)
* rename node clusterrolebinding to make auto upgrade work [#894](https://github.com/openshift/aws-ebs-csi-driver/pull/894)
* bump helm chart version [#881](https://github.com/openshift/aws-ebs-csi-driver/pull/881)
* fix naming mistake in clusterrolebinding, expose env var to controller via downward api [#874](https://github.com/openshift/aws-ebs-csi-driver/pull/874)
* Fix kustomize RBAC bindings to have namespace kube-system [#878](https://github.com/openshift/aws-ebs-csi-driver/pull/878)
* add self as owner [#866](https://github.com/openshift/aws-ebs-csi-driver/pull/866)
* release v1.0.0 [#865](https://github.com/openshift/aws-ebs-csi-driver/pull/865)
* Add eksctl support to e2e scripts [#852](https://github.com/openshift/aws-ebs-csi-driver/pull/852)
* [Bug 1955474](https://bugzilla.redhat.com/show_bug.cgi?id=1955474): Rebase v1.0.0 [#185](https://github.com/openshift/aws-ebs-csi-driver/pull/185)
* release v1.0.0 [#862](https://github.com/openshift/aws-ebs-csi-driver/pull/862)
* instance metadata issue fix [#855](https://github.com/openshift/aws-ebs-csi-driver/pull/855)
* add pod disruption budget for csi controller [#857](https://github.com/openshift/aws-ebs-csi-driver/pull/857)
* Add empty StorageClasses to static example [#850](https://github.com/openshift/aws-ebs-csi-driver/pull/850)
* Add additional logging for outpost arn handling [#851](https://github.com/openshift/aws-ebs-csi-driver/pull/851)
* Resize filesystem when restore a snapshot to larger size volume [#753](https://github.com/openshift/aws-ebs-csi-driver/pull/753)
* Fix missing import [#849](https://github.com/openshift/aws-ebs-csi-driver/pull/849)
* Emit AWS API operation duration/error/throttle metrics [#842](https://github.com/openshift/aws-ebs-csi-driver/pull/842)
* Update readme file to provide more info on driver options and tagging [#844](https://github.com/openshift/aws-ebs-csi-driver/pull/844)
* Bump/reconcile sidecar versions in helm/kustomize [#834](https://github.com/openshift/aws-ebs-csi-driver/pull/834)
* Fix broken gomocks [#843](https://github.com/openshift/aws-ebs-csi-driver/pull/843)
* [helm/CSIDriver] Switch to non-deprecated apiVersion [#836](https://github.com/openshift/aws-ebs-csi-driver/pull/836)
* handling describe instances consistency issue [#801](https://github.com/openshift/aws-ebs-csi-driver/pull/801)
* update IAM policy sample and add new driver level tag [#835](https://github.com/openshift/aws-ebs-csi-driver/pull/835)
* add options to enable aws sdk debug log and add more logs when driver… [#830](https://github.com/openshift/aws-ebs-csi-driver/pull/830)
* Rebase 1.21 [#828](https://github.com/openshift/aws-ebs-csi-driver/pull/828)
* update installation command to use latest stable version [#832](https://github.com/openshift/aws-ebs-csi-driver/pull/832)
* Cap IOPS when calculating from iopsPerGB [#809](https://github.com/openshift/aws-ebs-csi-driver/pull/809)
* release v0.10.1 [#827](https://github.com/openshift/aws-ebs-csi-driver/pull/827)
* support volume partition [#824](https://github.com/openshift/aws-ebs-csi-driver/pull/824)
* Warn users of migrating without draining [#822](https://github.com/openshift/aws-ebs-csi-driver/pull/822)
* release v0.10.0 [#820](https://github.com/openshift/aws-ebs-csi-driver/pull/820)
* AWS EBS CSI Driver Helm chart to inject environment variables [#817](https://github.com/openshift/aws-ebs-csi-driver/pull/817)
* release v0.9.1 [#813](https://github.com/openshift/aws-ebs-csi-driver/pull/813)
* Track driver deploy time in e2e test pipeline [#815](https://github.com/openshift/aws-ebs-csi-driver/pull/815)
* [Bug 1932152](https://bugzilla.redhat.com/show_bug.cgi?id=1932152): UPSTREAM: 809: Cap IOPS when calculating from iopsPerGB [#184](https://github.com/openshift/aws-ebs-csi-driver/pull/184)
* [Bug 1942883](https://bugzilla.redhat.com/show_bug.cgi?id=1942883): Rebase to v0.10.1 [#183](https://github.com/openshift/aws-ebs-csi-driver/pull/183)
* Release 0.10.1 [#826](https://github.com/openshift/aws-ebs-csi-driver/pull/826)
* Release 0.10 [#811](https://github.com/openshift/aws-ebs-csi-driver/pull/811)
* fix deploy stable ecr error kustomization file [#808](https://github.com/openshift/aws-ebs-csi-driver/pull/808)
* Use the old topology key for e2e tests [#814](https://github.com/openshift/aws-ebs-csi-driver/pull/814)
* csi.storage.k8s.io/fstype is case sensitive [#807](https://github.com/openshift/aws-ebs-csi-driver/pull/807)
* Don't exit script prematurely if test fails [#802](https://github.com/openshift/aws-ebs-csi-driver/pull/802)
* Update snapshot controller resources [#791](https://github.com/openshift/aws-ebs-csi-driver/pull/791)
* Add well-known topology label [#773](https://github.com/openshift/aws-ebs-csi-driver/pull/773)
* Remove storageclass from static example [#794](https://github.com/openshift/aws-ebs-csi-driver/pull/794)
* Print csi plugin logs at end of e2e test [#789](https://github.com/openshift/aws-ebs-csi-driver/pull/789)
* Prep for Windows support: Copy pkg/mounter and refactor to use k8s.io/mount-utils [#786](https://github.com/openshift/aws-ebs-csi-driver/pull/786)
* hack/e2e: Support passing helm values as values.yaml and make other similar files optional [#787](https://github.com/openshift/aws-ebs-csi-driver/pull/787)
* add toleration time to NoExecute effect --- Enable in next release [#776](https://github.com/openshift/aws-ebs-csi-driver/pull/776)
* Removing prestop hook for node-driver-registrar [#778](https://github.com/openshift/aws-ebs-csi-driver/pull/778)
* go mod tidy [#777](https://github.com/openshift/aws-ebs-csi-driver/pull/777)
* Add self as reviewer [#774](https://github.com/openshift/aws-ebs-csi-driver/pull/774)
* Add readiness probe so controller does not report "Ready" prematurely [#751](https://github.com/openshift/aws-ebs-csi-driver/pull/751)
* removed harcoded NAMESPACE from helm chart [#768](https://github.com/openshift/aws-ebs-csi-driver/pull/768)
* Update chart version [#772](https://github.com/openshift/aws-ebs-csi-driver/pull/772)
* Add ability to specify topologySpreadConstraints [#770](https://github.com/openshift/aws-ebs-csi-driver/pull/770)
* Allow setting http proxy and no proxy environment values [#765](https://github.com/openshift/aws-ebs-csi-driver/pull/765)
* add a document separator for storageclass template file [#762](https://github.com/openshift/aws-ebs-csi-driver/pull/762)
* delete leaked volume if driver don't know the volume status [#771](https://github.com/openshift/aws-ebs-csi-driver/pull/771)
* Update livenessprobe image version from 2.1.0 to 2.2.0 [#756](https://github.com/openshift/aws-ebs-csi-driver/pull/756)
* Fix error message when IOPSPerGB is missing in io1 volumes [#767](https://github.com/openshift/aws-ebs-csi-driver/pull/767)
* Aws client config: increase MaxRetries [#769](https://github.com/openshift/aws-ebs-csi-driver/pull/769)
* Sets the imagePullSecrets if the value is set in the chart [#755](https://github.com/openshift/aws-ebs-csi-driver/pull/755)
* Update test k8s version to 1.18.16 [#759](https://github.com/openshift/aws-ebs-csi-driver/pull/759)
* Set enableVolumeScheduling to true by default in the helm chart [#752](https://github.com/openshift/aws-ebs-csi-driver/pull/752)
* Refactor inFlight key to add lock per volumeId [#702](https://github.com/openshift/aws-ebs-csi-driver/pull/702)
* Add storage class annotation and label handling [#734](https://github.com/openshift/aws-ebs-csi-driver/pull/734)
* Make CreateVolume idempotent [#744](https://github.com/openshift/aws-ebs-csi-driver/pull/744)
* Remove hardcoded snapshot controller image references [#711](https://github.com/openshift/aws-ebs-csi-driver/pull/711)
* Update ECR overlay [#745](https://github.com/openshift/aws-ebs-csi-driver/pull/745)
* correct kustomization gcr image repo [#742](https://github.com/openshift/aws-ebs-csi-driver/pull/742)
* patch stable release to use gcr image [#740](https://github.com/openshift/aws-ebs-csi-driver/pull/740)
* Updated installation to use latest 0.9 release [#735](https://github.com/openshift/aws-ebs-csi-driver/pull/735)
* Allow resources override for node DaemonSet + priorityClassName [#732](https://github.com/openshift/aws-ebs-csi-driver/pull/732)
* Allow all fields to be set on StorageClasses [#730](https://github.com/openshift/aws-ebs-csi-driver/pull/730)
* Add support for node existing service accounts [#704](https://github.com/openshift/aws-ebs-csi-driver/pull/704)
* modify error message when request volume is in use with other node [#698](https://github.com/openshift/aws-ebs-csi-driver/pull/698)
* Integrate external e2e test in the testsuits [#726](https://github.com/openshift/aws-ebs-csi-driver/pull/726)
* More controll over snapshot-controller scheduling [#708](https://github.com/openshift/aws-ebs-csi-driver/pull/708)
* Bump chart version [#724](https://github.com/openshift/aws-ebs-csi-driver/pull/724)
* feat: Add option to provision StorageClasses [#697](https://github.com/openshift/aws-ebs-csi-driver/pull/697)
* Add documentation for release process [#610](https://github.com/openshift/aws-ebs-csi-driver/pull/610)
* release 0.9.0 [#718](https://github.com/openshift/aws-ebs-csi-driver/pull/718)
* Move cr.yaml out of github workflows [#720](https://github.com/openshift/aws-ebs-csi-driver/pull/720)
* Remove arm overlay [#719](https://github.com/openshift/aws-ebs-csi-driver/pull/719)
* Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART [#182](https://github.com/openshift/aws-ebs-csi-driver/pull/182)
* Add BZ component to OWNERS [#181](https://github.com/openshift/aws-ebs-csi-driver/pull/181)
* [Bug 1932229](https://bugzilla.redhat.com/show_bug.cgi?id=1932229): Rebase to v0.9.0 [#180](https://github.com/openshift/aws-ebs-csi-driver/pull/180)
* Increase timout for cloudbuild [#715](https://github.com/openshift/aws-ebs-csi-driver/pull/715)
* Bump cloudbuild timeout to 1800s [#713](https://github.com/openshift/aws-ebs-csi-driver/pull/713)
* release v0.9.0 [#710](https://github.com/openshift/aws-ebs-csi-driver/pull/710)
* Allow specifying --volume-attach-limit in the helm chart [#700](https://github.com/openshift/aws-ebs-csi-driver/pull/700)
* add e2e test for volume resizing [#705](https://github.com/openshift/aws-ebs-csi-driver/pull/705)
* Update sidecars to newer version [#707](https://github.com/openshift/aws-ebs-csi-driver/pull/707)
* Update to golang@1.15.6 [#699](https://github.com/openshift/aws-ebs-csi-driver/pull/699)
* NodeExpandVolume no-op for raw block [#695](https://github.com/openshift/aws-ebs-csi-driver/pull/695)
* Adds patch for ebs-csi-controller-sa to volumeattachments/status [#690](https://github.com/openshift/aws-ebs-csi-driver/pull/690)
* Refactor e2e testing scripts to be more reusable and use them instead… [#694](https://github.com/openshift/aws-ebs-csi-driver/pull/694)
* Add support for existing service accounts [#688](https://github.com/openshift/aws-ebs-csi-driver/pull/688)
* Add a prerequisite to dynamic provisioning [#691](https://github.com/openshift/aws-ebs-csi-driver/pull/691)
* add volume stats metrics - [#677](https://github.com/openshift/aws-ebs-csi-driver/pull/677)
* Push debian target to Docker Hub [#686](https://github.com/openshift/aws-ebs-csi-driver/pull/686)
* add import snapshot e2e test [#678](https://github.com/openshift/aws-ebs-csi-driver/pull/678)
* Release 0.8.1 [#683](https://github.com/openshift/aws-ebs-csi-driver/pull/683)
* Prefix helm chart releases with "helm-chart-" [#682](https://github.com/openshift/aws-ebs-csi-driver/pull/682)
* Fix outdated ecr login command [#680](https://github.com/openshift/aws-ebs-csi-driver/pull/680)
* cloudbuild: Set _STAGING_PROJECT [#668](https://github.com/openshift/aws-ebs-csi-driver/pull/668)
* Call hack/prow.sh from cloudbuild [#666](https://github.com/openshift/aws-ebs-csi-driver/pull/666)
* Add note for gp3 on outposts [#665](https://github.com/openshift/aws-ebs-csi-driver/pull/665)
* Fix stray argument in cloudbuild.yaml [#661](https://github.com/openshift/aws-ebs-csi-driver/pull/661)
* (Try to) fix cloudbuild [#659](https://github.com/openshift/aws-ebs-csi-driver/pull/659)
* Feature: Add ability to customize node daemonset nodeselector [#647](https://github.com/openshift/aws-ebs-csi-driver/pull/647)
* Update README.md [#607](https://github.com/openshift/aws-ebs-csi-driver/pull/607)
* Use buildx in cloudbuild [#658](https://github.com/openshift/aws-ebs-csi-driver/pull/658)
* Add self to OWNERS [#638](https://github.com/openshift/aws-ebs-csi-driver/pull/638)
* Arm overlay [#653](https://github.com/openshift/aws-ebs-csi-driver/pull/653)
* Bring Go to 1.15.6 in Travis [#648](https://github.com/openshift/aws-ebs-csi-driver/pull/648)
* Fix overlays not being updated for gcr migration [#649](https://github.com/openshift/aws-ebs-csi-driver/pull/649)
* Updating ose-aws-ebs-csi-driver builder & base images to be consistent with ART [#179](https://github.com/openshift/aws-ebs-csi-driver/pull/179)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/f6a71bf783f3b7429a8c2fbbc6f3d586e6a7eb60...8c036e44147d9e4546c726b934dedda3940790af)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/d1fe616c0da0edddb7019a64b0ad1136b36a5f26)

* [Bug 1969538](https://bugzilla.redhat.com/show_bug.cgi?id=1969538): Include default VolumeSnapshotClass [#129](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/129)
* [Bug 1960732](https://bugzilla.redhat.com/show_bug.cgi?id=1960732): update manifest and readme [#127](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/127)
* [Bug 1947402](https://bugzilla.redhat.com/show_bug.cgi?id=1947402): Deploy multiple replicas of CSI Controller Service [#122](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/122)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#126](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/126)
* [Bug 1951952](https://bugzilla.redhat.com/show_bug.cgi?id=1951952): Metrics for cloudprovider error requests are lost [#125](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/125)
* [Bug 1956411](https://bugzilla.redhat.com/show_bug.cgi?id=1956411): Add custom tags from Infrastructure [#116](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/116)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#120](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/120)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#121](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/121)
* [Bug 1924470](https://bugzilla.redhat.com/show_bug.cgi?id=1924470): Bump Kubernetes to 1.21 [#119](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/119)
* Fix kube-rbac-proxy image reference [#118](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/118)
* Add metrics scraping [#117](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/117)
* Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART [#115](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/115)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#114](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/114)
* Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART [#112](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/112)
* Cleanup: Remove serviceName from controller manifest [#113](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/113)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/3a9ff17d523a342ee71a967a2b82d5cf044f1eb8...d1fe616c0da0edddb7019a64b0ad1136b36a5f26)


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/4b38982f44a3446a5443076fe20c11d136f7b629)

* [Bug 2066675](https://bugzilla.redhat.com/show_bug.cgi?id=2066675): Ensure IOPS setting is honoured on all supported block device types [#437](https://github.com/openshift/cluster-api-provider-aws/pull/437)
* [Bug 2031905](https://bugzilla.redhat.com/show_bug.cgi?id=2031905): Prevent Machine from being considered provisioned until it exists in AWS [#432](https://github.com/openshift/cluster-api-provider-aws/pull/432)
* [Bug 2016926](https://bugzilla.redhat.com/show_bug.cgi?id=2016926): do not requeue if the machine has been updated [#426](https://github.com/openshift/cluster-api-provider-aws/pull/426)
* [Bug 1974680](https://bugzilla.redhat.com/show_bug.cgi?id=1974680): Fix eventual consistency logic to be consistent [#416](https://github.com/openshift/cluster-api-provider-aws/pull/416)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#408](https://github.com/openshift/cluster-api-provider-aws/pull/408)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#407](https://github.com/openshift/cluster-api-provider-aws/pull/407)
* [Bug 1949626](https://bugzilla.redhat.com/show_bug.cgi?id=1949626): update aws-sdk-go to v1.38.25 [#403](https://github.com/openshift/cluster-api-provider-aws/pull/403)
* [Bug 1952611](https://bugzilla.redhat.com/show_bug.cgi?id=1952611): [OCPCLOUD-1115] Get instance tags from infrastructure object [#402](https://github.com/openshift/cluster-api-provider-aws/pull/402)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update makefile to ensure that CGO_ENABLE is set properly [#401](https://github.com/openshift/cluster-api-provider-aws/pull/401)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update dependencies to 1.21 [#399](https://github.com/openshift/cluster-api-provider-aws/pull/399)
* Updating ose-aws-machine-controllers builder & base images to be consistent with ART [#385](https://github.com/openshift/cluster-api-provider-aws/pull/385)
* [Bug 1918910](https://bugzilla.redhat.com/show_bug.cgi?id=1918910): Only log error on wrong instance type for scale from zero [#397](https://github.com/openshift/cluster-api-provider-aws/pull/397)
* [Bug 1880757](https://bugzilla.redhat.com/show_bug.cgi?id=1880757): Unset target groups from LB on deletion [#389](https://github.com/openshift/cluster-api-provider-aws/pull/389)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Ensure original conditions aren't mutated during reconcile [#396](https://github.com/openshift/cluster-api-provider-aws/pull/396)
* Update EC2 instance types [#393](https://github.com/openshift/cluster-api-provider-aws/pull/393)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Add condition to show actuator exists condition on machine [#392](https://github.com/openshift/cluster-api-provider-aws/pull/392)
* Makefile fix [#386](https://github.com/openshift/cluster-api-provider-aws/pull/386)
* [Bug 1934021](https://bugzilla.redhat.com/show_bug.cgi?id=1934021): Ensure response body is closed when we are finished with the request [#390](https://github.com/openshift/cluster-api-provider-aws/pull/390)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5368195c02ca672dc7f7a4ad571df5584fa4087f...4b38982f44a3446a5443076fe20c11d136f7b629)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/58ef8af861317beceac26691d5c452af45ca0e4a)

* [Bug 2029253](https://bugzilla.redhat.com/show_bug.cgi?id=2029253): update go.mod for go1.16 [#148](https://github.com/openshift/aws-pod-identity-webhook/pull/148)
* Updating ose-aws-pod-identity-webhook images to be consistent with ART [#141](https://github.com/openshift/aws-pod-identity-webhook/pull/141)
* [Bug 1958492](https://bugzilla.redhat.com/show_bug.cgi?id=1958492): UPSTREAM: 115: certificatesigningrequests/v1beta1 to v1 [#138](https://github.com/openshift/aws-pod-identity-webhook/pull/138)
* Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART [#132](https://github.com/openshift/aws-pod-identity-webhook/pull/132)
* [Bug 1924472](https://bugzilla.redhat.com/show_bug.cgi?id=1924472): UPSTREAM: 106: vendor bump to gogo/protobuf 1.3.2 [#136](https://github.com/openshift/aws-pod-identity-webhook/pull/136)
* Rebase master [#135](https://github.com/openshift/aws-pod-identity-webhook/pull/135)
* Add additional log statements and update client-go [#92](https://github.com/openshift/aws-pod-identity-webhook/pull/92)
* Add a debug handler to list cache contents and log mutation decision [#90](https://github.com/openshift/aws-pod-identity-webhook/pull/90)
* README: add documentation for running containers as non-root [#88](https://github.com/openshift/aws-pod-identity-webhook/pull/88)
* patch pod spec even if it's already been patched [#62](https://github.com/openshift/aws-pod-identity-webhook/pull/62)
* Fix panic in cache informer [#70](https://github.com/openshift/aws-pod-identity-webhook/pull/70)
* Change master branch image tag and update README [#81](https://github.com/openshift/aws-pod-identity-webhook/pull/81)
* Add github worflow to automate docker image creation [#80](https://github.com/openshift/aws-pod-identity-webhook/pull/80)
* deploy: add sideEffects to webhook [#79](https://github.com/openshift/aws-pod-identity-webhook/pull/79)
* Add attribution document to container [#76](https://github.com/openshift/aws-pod-identity-webhook/pull/76)
* Update Makefile to delete created tls cert [#60](https://github.com/openshift/aws-pod-identity-webhook/pull/60)
* Update ecr login command for both aws-cli v1 and v2 [#53](https://github.com/openshift/aws-pod-identity-webhook/pull/53)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/0074d6afef9e20f5a1bcbde85cd7c01e422202ca...58ef8af861317beceac26691d5c452af45ca0e4a)


### [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/ad5852b1255c2ecd3c5e385fee4a5e56b8ed8b22)

* [Bug 2051576](https://bugzilla.redhat.com/show_bug.cgi?id=2051576): Requeue create on invalid credentials errors [#253](https://github.com/openshift/cluster-api-provider-azure/pull/253)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/723b7ab157677bbeac6b9fa72ddeaf865aab54bf...ad5852b1255c2ecd3c5e385fee4a5e56b8ed8b22)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/45c6c1d018280e88e989ec066918f0d93afd3535)

* [Bug 2069166](https://bugzilla.redhat.com/show_bug.cgi?id=2069166): stop considering Mint mode as supported on Azure (#5699) [#5753](https://github.com/openshift/installer/pull/5753)
* [Bug 2022171](https://bugzilla.redhat.com/show_bug.cgi?id=2022171): Relax vcenter hostname check [#5371](https://github.com/openshift/installer/pull/5371)
* Updating ose-installer-artifacts builder & base images to be consistent with ART [#4782](https://github.com/openshift/installer/pull/4782)
* [Bug 2023363](https://bugzilla.redhat.com/show_bug.cgi?id=2023363): Add ingress rules to master SG for compact clusters [#5386](https://github.com/openshift/installer/pull/5386)
* [Bug 2017986](https://bugzilla.redhat.com/show_bug.cgi?id=2017986): Set AWS Bootstrap Type == Master [#5338](https://github.com/openshift/installer/pull/5338)
* [Bug 2017258](https://bugzilla.redhat.com/show_bug.cgi?id=2017258): bump oVirt terraform provider version which fix "Disk is locked" bug [#5329](https://github.com/openshift/installer/pull/5329)
* [Bug 2002349](https://bugzilla.redhat.com/show_bug.cgi?id=2002349): Fix invalid UPI AWS instance type [#5199](https://github.com/openshift/installer/pull/5199)
* [Bug 2008823](https://bugzilla.redhat.com/show_bug.cgi?id=2008823): baremetal: Ensure ipv6 bootstrap VM client-id is predictable [#5250](https://github.com/openshift/installer/pull/5250)
* [Bug 2009019](https://bugzilla.redhat.com/show_bug.cgi?id=2009019): update legacy RHCOS boot image metadata [#5255](https://github.com/openshift/installer/pull/5255)
* [Bug 1982001](https://bugzilla.redhat.com/show_bug.cgi?id=1982001): Bump RHCOS 4.8 boot image [#5227](https://github.com/openshift/installer/pull/5227)
* Update OWNERS [#5242](https://github.com/openshift/installer/pull/5242)
* [Bug 2004236](https://bugzilla.redhat.com/show_bug.cgi?id=2004236): Document how to enable Octavia Day 2 [#5161](https://github.com/openshift/installer/pull/5161)
* [Bug 1973421](https://bugzilla.redhat.com/show_bug.cgi?id=1973421): [4.8] improve dual-stack install-config validation [#5114](https://github.com/openshift/installer/pull/5114)
* [Bug 1987848](https://bugzilla.redhat.com/show_bug.cgi?id=1987848): openstack: quotas/BYON improvements [#5122](https://github.com/openshift/installer/pull/5122)
* [Bug 1969651](https://bugzilla.redhat.com/show_bug.cgi?id=1969651): bump RHCOS 4.8 boot images [#5051](https://github.com/openshift/installer/pull/5051)
* [Bug 1981548](https://bugzilla.redhat.com/show_bug.cgi?id=1981548): [release-4.8] aws: move elastic ip permissions to create networking category [#5056](https://github.com/openshift/installer/pull/5056)
* OWNERS: add more core team members as approvers [#5124](https://github.com/openshift/installer/pull/5124)
* Updating ose-installer builder & base images to be consistent with ART [#4780](https://github.com/openshift/installer/pull/4780)
* [Bug 1962850](https://bugzilla.redhat.com/show_bug.cgi?id=1962850): Bump RHCOS bootimages for various fixes [#4977](https://github.com/openshift/installer/pull/4977)
* [Bug 1971068](https://bugzilla.redhat.com/show_bug.cgi?id=1971068): Updating AWS instance types [#4990](https://github.com/openshift/installer/pull/4990)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): baremetal: pass IP_OPTIONS to os downloader [#4989](https://github.com/openshift/installer/pull/4989)
* [Bug 1955697](https://bugzilla.redhat.com/show_bug.cgi?id=1955697): Revert "tfvars/vsphere: use explicit path for datacenter." [#4978](https://github.com/openshift/installer/pull/4978)
* [Bug 1925343](https://bugzilla.redhat.com/show_bug.cgi?id=1925343): upi/metal: add more configuration options for bare metal [#4938](https://github.com/openshift/installer/pull/4938)
* [Bug 1970415](https://bugzilla.redhat.com/show_bug.cgi?id=1970415): Document SR-IOV use case: using network with port security disabled [#4958](https://github.com/openshift/installer/pull/4958)
* [Bug 1969601](https://bugzilla.redhat.com/show_bug.cgi?id=1969601): manifests: link networking CRD from API [#4984](https://github.com/openshift/installer/pull/4984)
* [Bug 1969578](https://bugzilla.redhat.com/show_bug.cgi?id=1969578): manifests: don't use deprecated api in role-cloud-creds-secret-reader [#4982](https://github.com/openshift/installer/pull/4982)
* /pkg/tfvars/vsphere: add OWNERS [#4980](https://github.com/openshift/installer/pull/4980)
* [Bug 1952604](https://bugzilla.redhat.com/show_bug.cgi?id=1952604): [baremetal] Fix port in external loadbalancer example config [#4867](https://github.com/openshift/installer/pull/4867)
* [Bug 1963205](https://bugzilla.redhat.com/show_bug.cgi?id=1963205): rhcos: Use ART redirector [#4928](https://github.com/openshift/installer/pull/4928)
* [Bug 1967623](https://bugzilla.redhat.com/show_bug.cgi?id=1967623): oVirt: Fix password input [#4976](https://github.com/openshift/installer/pull/4976)
* [Bug 1820238](https://bugzilla.redhat.com/show_bug.cgi?id=1820238): delete manila shares and snapshots along with the cluster [#4952](https://github.com/openshift/installer/pull/4952)
* [Bug 1965182](https://bugzilla.redhat.com/show_bug.cgi?id=1965182): update baremetal-operator to fix miss IPMI credentials [#4965](https://github.com/openshift/installer/pull/4965)
* [Bug 1966862](https://bugzilla.redhat.com/show_bug.cgi?id=1966862): pattern removed from sed to prevent expansion [#4973](https://github.com/openshift/installer/pull/4973)
* [Bug 1949859](https://bugzilla.redhat.com/show_bug.cgi?id=1949859): baremetal: stop provisioning services once control plane is deployed [#4900](https://github.com/openshift/installer/pull/4900)
* [Bug 1965921](https://bugzilla.redhat.com/show_bug.cgi?id=1965921): [oVirt] High performance VMs shouldn't be created with Existing policy [#4969](https://github.com/openshift/installer/pull/4969)
* [Bug 1909136](https://bugzilla.redhat.com/show_bug.cgi?id=1909136): OpenStack: delete volume snapshots [#4962](https://github.com/openshift/installer/pull/4962)
* Updates azure-reviewers [#4878](https://github.com/openshift/installer/pull/4878)
* [Bug 1946506](https://bugzilla.redhat.com/show_bug.cgi?id=1946506): Bootstrap no longer relies on mdns [#4821](https://github.com/openshift/installer/pull/4821)
* [Bug 1951713](https://bugzilla.redhat.com/show_bug.cgi?id=1951713): docs/openstack/known-issues: add section for machine spec edits [#4959](https://github.com/openshift/installer/pull/4959)
* [Bug 1962274](https://bugzilla.redhat.com/show_bug.cgi?id=1962274): oVirt move affinity groups validations to ValidateForProvisioning [#4944](https://github.com/openshift/installer/pull/4944)
* [Bug 1957260](https://bugzilla.redhat.com/show_bug.cgi?id=1957260): gcp: add new region europe-central2 [#4901](https://github.com/openshift/installer/pull/4901)
* [Bug 1956480](https://bugzilla.redhat.com/show_bug.cgi?id=1956480): Boot image bump for RHEL 8.4 GA [#4942](https://github.com/openshift/installer/pull/4942)
* [Bug 1959920](https://bugzilla.redhat.com/show_bug.cgi?id=1959920): baremetal: Do not use ironic allocation [#4941](https://github.com/openshift/installer/pull/4941)
* [Bug 1926547](https://bugzilla.redhat.com/show_bug.cgi?id=1926547): pkg/destroy/aws: Log errors untagging shared resources [#4913](https://github.com/openshift/installer/pull/4913)
* [Bug 1959981](https://bugzilla.redhat.com/show_bug.cgi?id=1959981): oVirt: fix empty AffinityGroupsNames handling [#4935](https://github.com/openshift/installer/pull/4935)
* [Bug 1954873](https://bugzilla.redhat.com/show_bug.cgi?id=1954873): CoreOS only supports three dns namservers [#4939](https://github.com/openshift/installer/pull/4939)
* [Bug 1957597](https://bugzilla.redhat.com/show_bug.cgi?id=1957597): aws: using dotted domain when looking for public hosted zone [#4933](https://github.com/openshift/installer/pull/4933)
* [Bug 1955697](https://bugzilla.redhat.com/show_bug.cgi?id=1955697): tfvars/vsphere: use explicit path for datacenter. [#4894](https://github.com/openshift/installer/pull/4894)
* [Bug 1959703](https://bugzilla.redhat.com/show_bug.cgi?id=1959703): Avoid scp wildcard recursion with installer-masters-gather.sh [#4896](https://github.com/openshift/installer/pull/4896)
* [Bug 1955336](https://bugzilla.redhat.com/show_bug.cgi?id=1955336): Check cluster name for similarities with word 'google' [#4925](https://github.com/openshift/installer/pull/4925)
* [Bug 1960323](https://bugzilla.redhat.com/show_bug.cgi?id=1960323): Address issues raised by coverity security scan [#4932](https://github.com/openshift/installer/pull/4932)
* [Bug 1940159](https://bugzilla.redhat.com/show_bug.cgi?id=1940159): Fix Routers destroy with BYO [#4919](https://github.com/openshift/installer/pull/4919)
* [Bug 1947067](https://bugzilla.redhat.com/show_bug.cgi?id=1947067): vendor/AlecAivazis/survey: Bump API to v2 [#4895](https://github.com/openshift/installer/pull/4895)
* [Bug 1953019](https://bugzilla.redhat.com/show_bug.cgi?id=1953019): Baremetal: While deleting cluster, warn instead of exiting [#4897](https://github.com/openshift/installer/pull/4897)
* [Bug 1953035](https://bugzilla.redhat.com/show_bug.cgi?id=1953035): Disallow publish internal for non-cloud installations [#4905](https://github.com/openshift/installer/pull/4905)
* [Bug 1940337](https://bugzilla.redhat.com/show_bug.cgi?id=1940337): openstack: Report missing flavor [#4924](https://github.com/openshift/installer/pull/4924)
* [Bug 1957809](https://bugzilla.redhat.com/show_bug.cgi?id=1957809): Validation of platform.openstack.machineSubnet [#4917](https://github.com/openshift/installer/pull/4917)
* [Bug 1958884](https://bugzilla.redhat.com/show_bug.cgi?id=1958884): openstack: Fix error message typo when getting volume availability zones [#4911](https://github.com/openshift/installer/pull/4911)
* [Bug 1957869](https://bugzilla.redhat.com/show_bug.cgi?id=1957869): vendor: update baremetal-operator to align irmc PowerInterface [#4908](https://github.com/openshift/installer/pull/4908)
* [Bug 1953551](https://bugzilla.redhat.com/show_bug.cgi?id=1953551): Revert "Link ppc64le binary dynamically" [#4890](https://github.com/openshift/installer/pull/4890)
* [Bug 1958420](https://bugzilla.redhat.com/show_bug.cgi?id=1958420): aws: restore setting aws platform spec in infra resource [#4916](https://github.com/openshift/installer/pull/4916)
* [Bug 1956208](https://bugzilla.redhat.com/show_bug.cgi?id=1956208): openstack: add validation for volume types [#4904](https://github.com/openshift/installer/pull/4904)
* [Bug 1948563](https://bugzilla.redhat.com/show_bug.cgi?id=1948563): Handle instance_info capabilities and update ironic-terraform [#4903](https://github.com/openshift/installer/pull/4903)
* [Bug 1958216](https://bugzilla.redhat.com/show_bug.cgi?id=1958216): libvirt: Allow duplicate dnsmasq options [#4852](https://github.com/openshift/installer/pull/4852)
* [Bug 1957951](https://bugzilla.redhat.com/show_bug.cgi?id=1957951): AWS: Periodically send shut down requests for stuck EC2 instances [#4848](https://github.com/openshift/installer/pull/4848)
* [Bug 1956281](https://bugzilla.redhat.com/show_bug.cgi?id=1956281): crio: fix bootstrap given new crio config behavior [#4898](https://github.com/openshift/installer/pull/4898)
* [Bug 1943175](https://bugzilla.redhat.com/show_bug.cgi?id=1943175): azure: set storage account tls default to 1.2 [#4883](https://github.com/openshift/installer/pull/4883)
* [Bug 1931217](https://bugzilla.redhat.com/show_bug.cgi?id=1931217): add affinity groups to oVirt installer [#4674](https://github.com/openshift/installer/pull/4674)
* [Bug 1956978](https://bugzilla.redhat.com/show_bug.cgi?id=1956978): install-gather: use names in pod logs too [#4902](https://github.com/openshift/installer/pull/4902)
* [Bug 1956496](https://bugzilla.redhat.com/show_bug.cgi?id=1956496): Openstack SRIOV docs [#4718](https://github.com/openshift/installer/pull/4718)
* [Bug 1949923](https://bugzilla.redhat.com/show_bug.cgi?id=1949923): apply defaults for root volume AZs if they aren't set [#4860](https://github.com/openshift/installer/pull/4860)
* [Bug 1951670](https://bugzilla.redhat.com/show_bug.cgi?id=1951670): Error gathering bootstrap log after pivot: The bootstrap… [#4872](https://github.com/openshift/installer/pull/4872)
* [Bug 1956079](https://bugzilla.redhat.com/show_bug.cgi?id=1956079): gather: collect networking information in log bundle [#4892](https://github.com/openshift/installer/pull/4892)
* [Bug 1953803](https://bugzilla.redhat.com/show_bug.cgi?id=1953803): aws: validate byo hostedzone is parent of cluster domain [#4886](https://github.com/openshift/installer/pull/4886)
* [Bug 1955701](https://bugzilla.redhat.com/show_bug.cgi?id=1955701): Bump boot images for RHEL 8.4 Beta [#4861](https://github.com/openshift/installer/pull/4861)
* [Bug 1878655](https://bugzilla.redhat.com/show_bug.cgi?id=1878655): aws installconfig: endpoint validation should be before others [#4805](https://github.com/openshift/installer/pull/4805)
* [Bug 1943219](https://bugzilla.redhat.com/show_bug.cgi?id=1943219): azure: remove bootstrap ssh rule on private clusters [#4864](https://github.com/openshift/installer/pull/4864)
* [Bug 1948359](https://bugzilla.redhat.com/show_bug.cgi?id=1948359): destroy: remove shared tag from byo aws iam role [#4881](https://github.com/openshift/installer/pull/4881)
* [Bug 1953551](https://bugzilla.redhat.com/show_bug.cgi?id=1953551): Link ppc64le binary dynamically [#4875](https://github.com/openshift/installer/pull/4875)
* [Bug 1952632](https://bugzilla.redhat.com/show_bug.cgi?id=1952632): data/manifests/bootkube/cvo-overrides: Bump default to stable-4.8 [#4868](https://github.com/openshift/installer/pull/4868)
* [Bug 1950113](https://bugzilla.redhat.com/show_bug.cgi?id=1950113): manifests: populate aws user tags in infrastructure [#4755](https://github.com/openshift/installer/pull/4755)
* [Bug 1948359](https://bugzilla.redhat.com/show_bug.cgi?id=1948359): aws: add permissions for untagging shared byo instance roles [#4859](https://github.com/openshift/installer/pull/4859)
* [Bug 1948923](https://bugzilla.redhat.com/show_bug.cgi?id=1948923): aws: improve ami validation [#4846](https://github.com/openshift/installer/pull/4846)
* [Bug 1951174](https://bugzilla.redhat.com/show_bug.cgi?id=1951174): Dockerfile: repin libvirt [#4854](https://github.com/openshift/installer/pull/4854)
* [Bug 1909136](https://bugzilla.redhat.com/show_bug.cgi?id=1909136): destroy volumes and snapshots created by Cinder CSI driver [#4858](https://github.com/openshift/installer/pull/4858)
* [Bug 1931974](https://bugzilla.redhat.com/show_bug.cgi?id=1931974): Prefer IPv6 hostIP on bootstrap IPv6 deployments [#4756](https://github.com/openshift/installer/pull/4756)
* [Bug 1923786](https://bugzilla.redhat.com/show_bug.cgi?id=1923786): UPI oVirt - replace word in docs [#4855](https://github.com/openshift/installer/pull/4855)
* [Bug 1949923](https://bugzilla.redhat.com/show_bug.cgi?id=1949923): OpenStack: validate root volume availability zones [#4851](https://github.com/openshift/installer/pull/4851)
* [Bug 1936223](https://bugzilla.redhat.com/show_bug.cgi?id=1936223): [ovirt] Fix typo in connect to Engine [#4719](https://github.com/openshift/installer/pull/4719)
* [Bug 1950007](https://bugzilla.redhat.com/show_bug.cgi?id=1950007): UPI image: use get-pip instead of easy_install [#4850](https://github.com/openshift/installer/pull/4850)
* [Bug 1941759](https://bugzilla.redhat.com/show_bug.cgi?id=1941759): Make failure to fetch cloud info non-fatal [#4733](https://github.com/openshift/installer/pull/4733)
* aws: support for bring-your-own hosted zone [#4772](https://github.com/openshift/installer/pull/4772)
* update terraform-provider-ironic to v0.2.5 to get better error handling [#4835](https://github.com/openshift/installer/pull/4835)
* pkg/destroy/gcp: fix dropped error [#4836](https://github.com/openshift/installer/pull/4836)
* Revert "Dockerfile.upi.ci: Drop pip+pyopenssl installs" [#4831](https://github.com/openshift/installer/pull/4831)
* [Bug 1945659](https://bugzilla.redhat.com/show_bug.cgi?id=1945659): remove ovirt_cafile from ovirt-credentials secret [#4809](https://github.com/openshift/installer/pull/4809)
* OpenStack: Availability zones for root volumes [#4707](https://github.com/openshift/installer/pull/4707)
* [Bug 1945236](https://bugzilla.redhat.com/show_bug.cgi?id=1945236): add proxy params to bootstrap ignition [#4804](https://github.com/openshift/installer/pull/4804)
* [Bug 1938131](https://bugzilla.redhat.com/show_bug.cgi?id=1938131): pkg/asset/installconfig/aws: Add iam permission for destorying clusters [#4825](https://github.com/openshift/installer/pull/4825)
* [Bug 1946307](https://bugzilla.redhat.com/show_bug.cgi?id=1946307): gcp: install google cloud sdk with yum the recommended way [#4819](https://github.com/openshift/installer/pull/4819)
* cmd: diagnose problems downloading release image [#4751](https://github.com/openshift/installer/pull/4751)
* [Bug 1937722](https://bugzilla.redhat.com/show_bug.cgi?id=1937722): OCP 4.8: Passing oVirt certificate information to Terraform [#4737](https://github.com/openshift/installer/pull/4737)
* [Bug 1946119](https://bugzilla.redhat.com/show_bug.cgi?id=1946119): aws: support setting IAM role in the default AWS machine platform [#4818](https://github.com/openshift/installer/pull/4818)
* hack: use yaml for coreos manifest [#4814](https://github.com/openshift/installer/pull/4814)
* Updating ose-baremetal-installer builder & base images to be consistent with ART [#4781](https://github.com/openshift/installer/pull/4781)
* pkg/destroy/aws: fix dropped error [#4815](https://github.com/openshift/installer/pull/4815)
* Baremetal: Remove the -openstack rename in the os image. [#4725](https://github.com/openshift/installer/pull/4725)
* Byo IAM roles for IPI install [#4790](https://github.com/openshift/installer/pull/4790)
* Test GCP versioned binary [#4811](https://github.com/openshift/installer/pull/4811)
* [Bug 1944268](https://bugzilla.redhat.com/show_bug.cgi?id=1944268): aws: allow use of unknown regions in known partitions [#4801](https://github.com/openshift/installer/pull/4801)
* Fix ipv6/dual-stack validation with Azure [#4766](https://github.com/openshift/installer/pull/4766)
* installer-create: Provide user friendly error messages during failures [#4800](https://github.com/openshift/installer/pull/4800)
* data/bootstrap: Check if release image architecture matches host architecture [#4592](https://github.com/openshift/installer/pull/4592)
* installer/pkg/asset/installconfig/azure: fix dropped error [#4793](https://github.com/openshift/installer/pull/4793)
* [Bug 1925216](https://bugzilla.redhat.com/show_bug.cgi?id=1925216): Bump gophercloud utils [#4786](https://github.com/openshift/installer/pull/4786)
* Inject CoreOS stream metadata as configmap via CVO manifest [#4760](https://github.com/openshift/installer/pull/4760)
* pkg/asset/cluster: fix dropped error [#4770](https://github.com/openshift/installer/pull/4770)
* Add and use stream metadata for RHCOS, add openshift-install coreos print-stream-json [#4582](https://github.com/openshift/installer/pull/4582)
* [Bug 1931115](https://bugzilla.redhat.com/show_bug.cgi?id=1931115): Azure: Check Azure disk Instance Type for PremiumIO Capabilities [#4726](https://github.com/openshift/installer/pull/4726)
* Validate HotplugVolumes feature gate in Kubevirt [#4650](https://github.com/openshift/installer/pull/4650)
* [Bug 1934557](https://bugzilla.redhat.com/show_bug.cgi?id=1934557): RHCOS boot image bump for LUKS fixes [#4778](https://github.com/openshift/installer/pull/4778)
* images: Add Dockerfile.upi.ci.rhel8 [#4785](https://github.com/openshift/installer/pull/4785)
* gather-bootstrap: Gather logs before bootstrap shuts down [#4693](https://github.com/openshift/installer/pull/4693)
* Revert "Check if VIP IPs overlap with machine CIDR provided during vsphere installation" [#4779](https://github.com/openshift/installer/pull/4779)
* Dockerfile.upi.ci: Drop pip+pyopenssl installs [#4784](https://github.com/openshift/installer/pull/4784)
* Add resource filter that matches Label or ClusterID [#4717](https://github.com/openshift/installer/pull/4717)
* Update cluster-api-provider-ovirt, cluster-api-provider-aws and baremetal-operator [#4700](https://github.com/openshift/installer/pull/4700)
* Enable forward compatibility with kcmo rendering of signing keypair [#4771](https://github.com/openshift/installer/pull/4771)
* [Bug 1939513](https://bugzilla.redhat.com/show_bug.cgi?id=1939513): KubeVirt platform: Add the immediate request annotation to the source PVC [#4759](https://github.com/openshift/installer/pull/4759)
* [Bug 1918469](https://bugzilla.redhat.com/show_bug.cgi?id=1918469): Check if VIP IPs overlap with machine CIDR provided during vsphere installation [#4754](https://github.com/openshift/installer/pull/4754)
* Update owners with new Installer Team members [#4774](https://github.com/openshift/installer/pull/4774)
* asset/tls: fixes certkey unit test for Go >= 1.15 [#4769](https://github.com/openshift/installer/pull/4769)
* Baremetal: Explicitly set watchAllNamespaces [#4709](https://github.com/openshift/installer/pull/4709)
* README: change install to create [#4747](https://github.com/openshift/installer/pull/4747)
* gcp: add kubernetes owned label to master machines [#4752](https://github.com/openshift/installer/pull/4752)
* bootstrap: record progress of services [#4742](https://github.com/openshift/installer/pull/4742)
* gcp: divide machine CIDR into 2 networks for subnets [#4749](https://github.com/openshift/installer/pull/4749)
* Support configurable libvirt disk size [#4757](https://github.com/openshift/installer/pull/4757)
* IPI-BAREMETAL: document how to use external LB for api/ingress traffic [#4765](https://github.com/openshift/installer/pull/4765)
* [Bug 1804230](https://bugzilla.redhat.com/show_bug.cgi?id=1804230): fix broken ETCD link in user docs [#4764](https://github.com/openshift/installer/pull/4764)
* docs/user/aws/customization: Fix KMS-key link format [#4762](https://github.com/openshift/installer/pull/4762)
* [Bug 1933414](https://bugzilla.redhat.com/show_bug.cgi?id=1933414): openstack: Consistent port names [#4734](https://github.com/openshift/installer/pull/4734)
* [Bug 1934557](https://bugzilla.redhat.com/show_bug.cgi?id=1934557): bump RHCOS image for LUKS fix [#4745](https://github.com/openshift/installer/pull/4745)
* [Bug 1934123](https://bugzilla.redhat.com/show_bug.cgi?id=1934123): generate glance url considering the region [#4740](https://github.com/openshift/installer/pull/4740)
* installconfig/aws: validate connectivity to service endpoints. [#4699](https://github.com/openshift/installer/pull/4699)
* [Bug 1937460](https://bugzilla.redhat.com/show_bug.cgi?id=1937460): Update gophercloud module from master [#4741](https://github.com/openshift/installer/pull/4741)
* pkg/asset/cluster/aws: fix dropped error [#4727](https://github.com/openshift/installer/pull/4727)
* [Bug 1903055](https://bugzilla.redhat.com/show_bug.cgi?id=1903055): Set default values to machine pools before validation [#4695](https://github.com/openshift/installer/pull/4695)
* Add docs about issues on UPI with Kuryr [#4649](https://github.com/openshift/installer/pull/4649)
* [Bug 1936443](https://bugzilla.redhat.com/show_bug.cgi?id=1936443): Revert "baremetal: send full ignition to masters" [#4722](https://github.com/openshift/installer/pull/4722)
* kubevirt platfrom validate permissions [#4720](https://github.com/openshift/installer/pull/4720)
* Transition responsibility for CEO asset creation and placement [#4691](https://github.com/openshift/installer/pull/4691)
* [Bug 1930240](https://bugzilla.redhat.com/show_bug.cgi?id=1930240): baremetal: Set missing IP in clouds.yaml [#4702](https://github.com/openshift/installer/pull/4702)
* openstack: add networking quota checks [#4481](https://github.com/openshift/installer/pull/4481)
* docs/user/azure: add resourceGroupName customization [#4728](https://github.com/openshift/installer/pull/4728)
* cmd/openshift-install: fix dropped error [#4681](https://github.com/openshift/installer/pull/4681)
* : Removed '0' from machineset name [#4723](https://github.com/openshift/installer/pull/4723)
* vsphere: Validate vcenter user input to match RFC standards [#4708](https://github.com/openshift/installer/pull/4708)
* [Bug 1926364](https://bugzilla.redhat.com/show_bug.cgi?id=1926364): baremetal: update terraform diagnosis for API timeout [#4715](https://github.com/openshift/installer/pull/4715)
* Adjust master-update.fcc to the new ceo render secret structure [#4712](https://github.com/openshift/installer/pull/4712)
* [Bug 1924474](https://bugzilla.redhat.com/show_bug.cgi?id=1924474): upgrade gogo/protobuf to v1.3.2 and k8s.io/api to v0.20.1 [#4716](https://github.com/openshift/installer/pull/4716)
* [Bug 1923038](https://bugzilla.redhat.com/show_bug.cgi?id=1923038): OpenStack: cache cloud info [#4606](https://github.com/openshift/installer/pull/4606)
* [Bug 1894774](https://bugzilla.redhat.com/show_bug.cgi?id=1894774): openstack: Document setting affinity for workers [#4687](https://github.com/openshift/installer/pull/4687)
* [Bug 1932799](https://bugzilla.redhat.com/show_bug.cgi?id=1932799): baremetal: always use API VIP for installer communication [#4692](https://github.com/openshift/installer/pull/4692)
* [Bug 1880758](https://bugzilla.redhat.com/show_bug.cgi?id=1880758): Replace description to a more meaningful one [#4636](https://github.com/openshift/installer/pull/4636)
* doc: openstack/IPI - Provider Networks [#4646](https://github.com/openshift/installer/pull/4646)
* [Bug 1868755](https://bugzilla.redhat.com/show_bug.cgi?id=1868755): vsphereprivate: tf plugin to no longer error if no network found. [#4678](https://github.com/openshift/installer/pull/4678)
* [Bug 1932789](https://bugzilla.redhat.com/show_bug.cgi?id=1932789): Fix proxy validation when specified with port. [#4694](https://github.com/openshift/installer/pull/4694)
* [Bug 1873079](https://bugzilla.redhat.com/show_bug.cgi?id=1873079): openstack: restrict SSH to machineNetwork CIDR [#4659](https://github.com/openshift/installer/pull/4659)
* Enable bootkube compatibility for ceo rendering improvements [#4686](https://github.com/openshift/installer/pull/4686)
* OpenStack: Stop using deprecated interpolation syntax [#4679](https://github.com/openshift/installer/pull/4679)
* baremetal: automatic UEFI secure boot configuration [#4675](https://github.com/openshift/installer/pull/4675)
* use vendored mockgen for generating mock clients [#4662](https://github.com/openshift/installer/pull/4662)
* docs/aws-iam: improving the concepts for Account root user and IAM user [#4556](https://github.com/openshift/installer/pull/4556)
* Make copies of machine pools in machines asset [#4666](https://github.com/openshift/installer/pull/4666)
* docs: fix small typo in ignition url [#4685](https://github.com/openshift/installer/pull/4685)
* pkg/metrics/builder: fix test errors [#4028](https://github.com/openshift/installer/pull/4028)
* [Bug 1925291](https://bugzilla.redhat.com/show_bug.cgi?id=1925291): baremetal: include netmask in DNSMasq dhcp range [#4639](https://github.com/openshift/installer/pull/4639)
* baremetal:  pass an sshKey to ironic [#4677](https://github.com/openshift/installer/pull/4677)
* openstack: Test AZ Machines generation [#4473](https://github.com/openshift/installer/pull/4473)
* [Bug 1910067](https://bugzilla.redhat.com/show_bug.cgi?id=1910067): openstack UPI: Set the API microversion when operating openstack server groups [#4375](https://github.com/openshift/installer/pull/4375)
* baremetal: sync baremetal-operator [#4669](https://github.com/openshift/installer/pull/4669)
* [Bug 1917931](https://bugzilla.redhat.com/show_bug.cgi?id=1917931): Fix GCP openssl not found error [#4656](https://github.com/openshift/installer/pull/4656)
* openstack: allow for fewer than 3 masters [#4672](https://github.com/openshift/installer/pull/4672)
* proxy: Check if proxies are in cluster and service networks [#4670](https://github.com/openshift/installer/pull/4670)
* update ci image references [#4661](https://github.com/openshift/installer/pull/4661)
* Bump bootstrap in place MCS master ignition to v3_2 [#4668](https://github.com/openshift/installer/pull/4668)
* bootstrap: Ensure temp compat for old and new ceo secret structure [#4667](https://github.com/openshift/installer/pull/4667)
* Stream metadata prep [#4576](https://github.com/openshift/installer/pull/4576)
* vSphere: mark imported virtual machines as template [#4660](https://github.com/openshift/installer/pull/4660)
* vendor/hashicorp: Bump terraform-provider-vsphere [#4644](https://github.com/openshift/installer/pull/4644)
* openstack: refactor getZones() to use gophercloud/utils [#4462](https://github.com/openshift/installer/pull/4462)
* [Bug 1786314](https://bugzilla.redhat.com/show_bug.cgi?id=1786314): openstack: cacert does not require system trust [#4647](https://github.com/openshift/installer/pull/4647)
* [Bug 1786314](https://bugzilla.redhat.com/show_bug.cgi?id=1786314): Bump dependencies [#4561](https://github.com/openshift/installer/pull/4561)
* upi/vsphere: Use Afterburn guestinfo for static IP and hostname config [#3533](https://github.com/openshift/installer/pull/3533)
* [Bug 1928537](https://bugzilla.redhat.com/show_bug.cgi?id=1928537): bump ignition to v3_2 [#4653](https://github.com/openshift/installer/pull/4653)
* update iptables call with sudo [#4623](https://github.com/openshift/installer/pull/4623)
* Updating ose-installer-artifacts builder & base images to be consistent with ART [#4631](https://github.com/openshift/installer/pull/4631)
* Cleanup argument usage in bootkube.sh for ceo [#4609](https://github.com/openshift/installer/pull/4609)
* Updating ose-baremetal-installer builder & base images to be consistent with ART [#4630](https://github.com/openshift/installer/pull/4630)
* [Bug 1924701](https://bugzilla.redhat.com/show_bug.cgi?id=1924701): Fix FIP detach from Router [#4637](https://github.com/openshift/installer/pull/4637)
* Updating ose-installer builder & base images to be consistent with ART [#4629](https://github.com/openshift/installer/pull/4629)
* aws/session.go: include another internal provider name for static creds [#4655](https://github.com/openshift/installer/pull/4655)
* [Bug 1873649](https://bugzilla.redhat.com/show_bug.cgi?id=1873649): Validate noProxy input and add prefix for proxy urls [#4632](https://github.com/openshift/installer/pull/4632)
* asset: move common bootstrap ignition code into a helper type [#4652](https://github.com/openshift/installer/pull/4652)
* Add bootstrap-in-place files to bootstrap-in-place-for-live-iso.ign [#4651](https://github.com/openshift/installer/pull/4651)
* Workaround golang linux/arm64 link error [#4243](https://github.com/openshift/installer/pull/4243)
* OWNERS: Remove ehashman and asalkeld from azure reviewers [#4531](https://github.com/openshift/installer/pull/4531)
* vSphere: Updating Privileges, roles and permissions [#4466](https://github.com/openshift/installer/pull/4466)
* aws: support more auth options in manual mode [#4596](https://github.com/openshift/installer/pull/4596)
* Single Node deployment with bootstrap-in-place [#4482](https://github.com/openshift/installer/pull/4482)
* [Bug 1916593](https://bugzilla.redhat.com/show_bug.cgi?id=1916593): OpenStack UPI: Tag all resources with clusterID [#4622](https://github.com/openshift/installer/pull/4622)
* [Bug 1912571](https://bugzilla.redhat.com/show_bug.cgi?id=1912571): libvirt: support setting network dnsmasq options through the install config [#4494](https://github.com/openshift/installer/pull/4494)
* [Bug 1924140](https://bugzilla.redhat.com/show_bug.cgi?id=1924140): fix a typo in an env variable name [#4608](https://github.com/openshift/installer/pull/4608)
* machines/openstack: re-enable external clientOpts [#4638](https://github.com/openshift/installer/pull/4638)
* vSphere: add missing destroy OWNERS & update OWNERS_ALIASES [#4581](https://github.com/openshift/installer/pull/4581)
* Fix OWNERS for openstack [#4641](https://github.com/openshift/installer/pull/4641)
* data/rhcos.json: Update boot images [#4633](https://github.com/openshift/installer/pull/4633)
* Add controlPlaneTopology to infrastructure manifest [#4497](https://github.com/openshift/installer/pull/4497)
* [Full changelog](https://github.com/openshift/installer/compare/94125b21304a574ae5bc98039f8eb7f518293b83...45c6c1d018280e88e989ec066918f0d93afd3535)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/a60d493e45aa9d3c0391297fd77cb168092fed35)

* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#151](https://github.com/openshift/cluster-api-provider-baremetal/pull/151)
* [Bug 1949316](https://bugzilla.redhat.com/show_bug.cgi?id=1949316): Update BMO vendor to v0.0.0-20210303141721-86a42dcb0150 [#149](https://github.com/openshift/cluster-api-provider-baremetal/pull/149)
* [Bug 1857008](https://bugzilla.redhat.com/show_bug.cgi?id=1857008): Set the machine instance state annotation [#142](https://github.com/openshift/cluster-api-provider-baremetal/pull/142)
* Updating baremetal-machine-controller builder & base images to be consistent with ART [#135](https://github.com/openshift/cluster-api-provider-baremetal/pull/135)
* Updating baremetal-machine-controller builder & base images to be consistent with ART [#121](https://github.com/openshift/cluster-api-provider-baremetal/pull/121)
* Changing the default behaviour of the CAPBM to request hard reboot [#138](https://github.com/openshift/cluster-api-provider-baremetal/pull/138)
* add stbenjam to owners file [#141](https://github.com/openshift/cluster-api-provider-baremetal/pull/141)
* stop generating CRDs for provider spec and status [#140](https://github.com/openshift/cluster-api-provider-baremetal/pull/140)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/726d97e15db78b767234da98d2c75f794f4bf158...a60d493e45aa9d3c0391297fd77cb168092fed35)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/02a2d3cf8747de12f8f845575a11b7dd4519046d)

* [Bug 2000442](https://bugzilla.redhat.com/show_bug.cgi?id=2000442): Add LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE variable [#174](https://github.com/openshift/baremetal-operator/pull/174)
* [Bug 1972426](https://bugzilla.redhat.com/show_bug.cgi?id=1972426): Don't deprovision provisioned host due to error [#158](https://github.com/openshift/baremetal-operator/pull/158)
* [Bug 1969487](https://bugzilla.redhat.com/show_bug.cgi?id=1969487): Disable RAID for all drivers [#153](https://github.com/openshift/baremetal-operator/pull/153)
* [Bug 1969487](https://bugzilla.redhat.com/show_bug.cgi?id=1969487): Disable raid feature for iRMC server [#152](https://github.com/openshift/baremetal-operator/pull/152)
* [Bug 1969903](https://bugzilla.redhat.com/show_bug.cgi?id=1969903): Increase the default $BMO_CONCURRENCY for scale [#151](https://github.com/openshift/baremetal-operator/pull/151)
* [Bug 1965182](https://bugzilla.redhat.com/show_bug.cgi?id=1965182): IRMC fix missing IPMI credentials in node driver_info [#149](https://github.com/openshift/baremetal-operator/pull/149)
* [Bug 1960554](https://bugzilla.redhat.com/show_bug.cgi?id=1960554): config: use rbacv1 instead of rbacv1beta1 [#147](https://github.com/openshift/baremetal-operator/pull/147)
* [Bug 1956607](https://bugzilla.redhat.com/show_bug.cgi?id=1956607): Fix resources added to 0000_30_baremetal-operator_01_baremetalhost.crd.yaml [#146](https://github.com/openshift/baremetal-operator/pull/146)
* [Bug 1951671](https://bugzilla.redhat.com/show_bug.cgi?id=1951671): Lazily update Node image options in Ironic [#145](https://github.com/openshift/baremetal-operator/pull/145)
* [Bug 1949898](https://bugzilla.redhat.com/show_bug.cgi?id=1949898): modify power_interface for irmc [#144](https://github.com/openshift/baremetal-operator/pull/144)
* Merge upstream 2021-04-06 [#142](https://github.com/openshift/baremetal-operator/pull/142)
* Use PROVISIONING_LIMIT also for deprovisioning. [#807](https://github.com/openshift/baremetal-operator/pull/807)
* Add support for detached annotation [#827](https://github.com/openshift/baremetal-operator/pull/827)
* Fix error reporting when creating an host with invalid BMC url [#838](https://github.com/openshift/baremetal-operator/pull/838)
* Extend RAID configuration for iDRAC BMC type [#847](https://github.com/openshift/baremetal-operator/pull/847)
* Always update image details [#845](https://github.com/openshift/baremetal-operator/pull/845)
* dev env setup steps missed metal3 ns creation [#846](https://github.com/openshift/baremetal-operator/pull/846)
* Stop passing entire BareMetalHost to Provisioner [#837](https://github.com/openshift/baremetal-operator/pull/837)
* Define vlan interfaces to be included in introspection report [#821](https://github.com/openshift/baremetal-operator/pull/821)
* Inspection API implementation [#607](https://github.com/openshift/baremetal-operator/pull/607)
* Set bmh 'name' in metadata as hostname [#842](https://github.com/openshift/baremetal-operator/pull/842)
* Handle hardwaredetails annotation value error [#826](https://github.com/openshift/baremetal-operator/pull/826)
* Allow disable automated cleaning [#784](https://github.com/openshift/baremetal-operator/pull/784)
* Don't immediately retry on Inspect fail [#840](https://github.com/openshift/baremetal-operator/pull/840)
* Fix the bug that the inspector reverse proxy still runs even when Ironic TLS is disabled [#830](https://github.com/openshift/baremetal-operator/pull/830)
* Merge upstream 2021-03-30 [#139](https://github.com/openshift/baremetal-operator/pull/139)
* Prepend the namespace to ironic nodenames to avoid conflicts [#797](https://github.com/openshift/baremetal-operator/pull/797)
* Pass go tests flags via env. [#833](https://github.com/openshift/baremetal-operator/pull/833)
* Eliminate need for "empty" provisioner [#820](https://github.com/openshift/baremetal-operator/pull/820)
* Add a unit test for unsupported secure boot [#831](https://github.com/openshift/baremetal-operator/pull/831)
* Change default of RAIDInterface [#829](https://github.com/openshift/baremetal-operator/pull/829)
* Review registration log traces for Provisioner [#757](https://github.com/openshift/baremetal-operator/pull/757)
* Fix some lint errors [#823](https://github.com/openshift/baremetal-operator/pull/823)
* Decouple Unmanaged state from externallyProvisioned [#824](https://github.com/openshift/baremetal-operator/pull/824)
* Bug: fix missing Inspecting state [#822](https://github.com/openshift/baremetal-operator/pull/822)
* Apache webserver handles TLS on Ironic [#728](https://github.com/openshift/baremetal-operator/pull/728)
* Use the correct version of tools (from go.mod) [#813](https://github.com/openshift/baremetal-operator/pull/813)
* Add idrac-redfish url type (continue) [#633](https://github.com/openshift/baremetal-operator/pull/633)
* upgrade k8s/api to v0.2.1 [#808](https://github.com/openshift/baremetal-operator/pull/808)
* Use separate methods for setting update node options. [#794](https://github.com/openshift/baremetal-operator/pull/794)
* Upgrade CRD & Webhook to v1 [#805](https://github.com/openshift/baremetal-operator/pull/805)
* add dmitry tantsur as approver [#815](https://github.com/openshift/baremetal-operator/pull/815)
* Updating ose-baremetal-operator builder & base images to be consistent with ART [#136](https://github.com/openshift/baremetal-operator/pull/136)
* [Bug 1941636](https://bugzilla.redhat.com/show_bug.cgi?id=1941636): BM worker nodes deployment with virtual media failed while trying to clean raid [#138](https://github.com/openshift/baremetal-operator/pull/138)
* Copy generated BMH CRD to /manifests directory for CVO to install it [#135](https://github.com/openshift/baremetal-operator/pull/135)
* Generate BMH CRD with annotations needed for OpenShift [#134](https://github.com/openshift/baremetal-operator/pull/134)
* Merge upstream 20210311 [#133](https://github.com/openshift/baremetal-operator/pull/133)
* Add fmuyassarov in the reviewers list [#812](https://github.com/openshift/baremetal-operator/pull/812)
* update controller-runtime to v0.7 [#806](https://github.com/openshift/baremetal-operator/pull/806)
* Add inspect.metal3.io/hardwaredetails annotation [#796](https://github.com/openshift/baremetal-operator/pull/796)
* Fix some typos in PR292 [#809](https://github.com/openshift/baremetal-operator/pull/809)
* Development: account for unset GOPATH [#800](https://github.com/openshift/baremetal-operator/pull/800)
* Support RAID configuration for baremetal server [#292](https://github.com/openshift/baremetal-operator/pull/292)
* Make BMH HardwareDetails fields optional [#803](https://github.com/openshift/baremetal-operator/pull/803)
* Bump the Golang version to 1.16 [#799](https://github.com/openshift/baremetal-operator/pull/799)
* Implement explicit reboot mode options [#795](https://github.com/openshift/baremetal-operator/pull/795)
* docs: clarifies power management for externally managed hosts [#801](https://github.com/openshift/baremetal-operator/pull/801)
* [Bug 1927678](https://bugzilla.redhat.com/show_bug.cgi?id=1927678): Backporting BMO extensions to support different reboot modes [#128](https://github.com/openshift/baremetal-operator/pull/128)
* Remove yum install genisoimage from Dockerfile.ocp [#126](https://github.com/openshift/baremetal-operator/pull/126)
* Merge upstream 2021-02-11 [#125](https://github.com/openshift/baremetal-operator/pull/125)
* Automatic setting of UEFI secure boot [#786](https://github.com/openshift/baremetal-operator/pull/786)
* Bump controller-tools to v0.4.1 [#766](https://github.com/openshift/baremetal-operator/pull/766)
* Add inspect.metal3.io=disabled annotation [#787](https://github.com/openshift/baremetal-operator/pull/787)
* Fix the CPU clock rate unit in the API description [#788](https://github.com/openshift/baremetal-operator/pull/788)
* Wait for inspection completion [#785](https://github.com/openshift/baremetal-operator/pull/785)
* Refactor capabilities parsing [#783](https://github.com/openshift/baremetal-operator/pull/783)
* Make operationHistory none-required field [#777](https://github.com/openshift/baremetal-operator/pull/777)
* Add Preparing state to do manual clean [#763](https://github.com/openshift/baremetal-operator/pull/763)
* Add BuildTime to manager binary. [#773](https://github.com/openshift/baremetal-operator/pull/773)
* Add "NET_RAW" to ironic-endpoint-keepalived [#782](https://github.com/openshift/baremetal-operator/pull/782)
* Limit the number of hosts simultaneously provisioned [#725](https://github.com/openshift/baremetal-operator/pull/725)
* Fail registration when boot MAC conflicts [#780](https://github.com/openshift/baremetal-operator/pull/780)
* Ask Ironic to include NodeUUID when querying ports [#776](https://github.com/openshift/baremetal-operator/pull/776)
* Ironic: Don't adopt after clean failure during deprovisioning [#772](https://github.com/openshift/baremetal-operator/pull/772)
* Add missing newline in console log [#778](https://github.com/openshift/baremetal-operator/pull/778)
* Use errorType intead of errorMessage [#774](https://github.com/openshift/baremetal-operator/pull/774)
* Add test coverage of Spec vs Status Image [#770](https://github.com/openshift/baremetal-operator/pull/770)
* Force retry when adoption fails [#762](https://github.com/openshift/baremetal-operator/pull/762)
* Add live-iso support [#759](https://github.com/openshift/baremetal-operator/pull/759)
* A typo in the comment for WithNodeStatesProvisionUpdate [#727](https://github.com/openshift/baremetal-operator/pull/727)
* Fix issues with deprovisioning after an error/failover [#745](https://github.com/openshift/baremetal-operator/pull/745)
* Remove root_gb workaround [#771](https://github.com/openshift/baremetal-operator/pull/771)
* Get correct image checksum in getImageUpdateOptsForNode() [#768](https://github.com/openshift/baremetal-operator/pull/768)
* Improve communications between controller and provisioner [#761](https://github.com/openshift/baremetal-operator/pull/761)
* Rename column of 'get bmh' short [#760](https://github.com/openshift/baremetal-operator/pull/760)
* Add andfasano to reviewers list [#764](https://github.com/openshift/baremetal-operator/pull/764)
* ironic provisioner de-duplicate image options [#750](https://github.com/openshift/baremetal-operator/pull/750)
* Do retries with backoff in ValidateManagementAccess, Inspect, and Deprovision [#749](https://github.com/openshift/baremetal-operator/pull/749)
* remove convenience methods from BareMetalHost [#741](https://github.com/openshift/baremetal-operator/pull/741)
* Fix manager namespace in docs [#756](https://github.com/openshift/baremetal-operator/pull/756)
* Handle dual-stack configuration in inspection data [#758](https://github.com/openshift/baremetal-operator/pull/758)
* Allow BMC details to be omitted for Hosts in Unmanaged state [#748](https://github.com/openshift/baremetal-operator/pull/748)
* Fix a typo in doc/dev-setup.md [#752](https://github.com/openshift/baremetal-operator/pull/752)
* [Bug 1907612](https://bugzilla.redhat.com/show_bug.cgi?id=1907612): Update kubernetes deps to 1.20 [#751](https://github.com/openshift/baremetal-operator/pull/751)
* Add console=ttyS0 to kernel params [#736](https://github.com/openshift/baremetal-operator/pull/736)
* Filter out status updates from the reconcile loop [#747](https://github.com/openshift/baremetal-operator/pull/747)
* Add kubebuilder validation for ClockSpeed [#738](https://github.com/openshift/baremetal-operator/pull/738)
* Handle cleaning failures during provisioning [#735](https://github.com/openshift/baremetal-operator/pull/735)
* Updating ose-baremetal-operator builder & base images to be consistent with ART [#124](https://github.com/openshift/baremetal-operator/pull/124)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e36cbc13f82e290ca5f525a4da0fab516808d113...02a2d3cf8747de12f8f845575a11b7dd4519046d)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/710cb737702d9a13b3cfeead4386bd9a7fa9435a)

* [Bug 2059584](https://bugzilla.redhat.com/show_bug.cgi?id=2059584): Ignore VIPs in node-ip show [#172](https://github.com/openshift/baremetal-runtimecfg/pull/172)
* [Bug 2053720](https://bugzilla.redhat.com/show_bug.cgi?id=2053720): Avoid dynamically allocated port range for haproxy [#171](https://github.com/openshift/baremetal-runtimecfg/pull/171)
* [Bug 2050288](https://bugzilla.redhat.com/show_bug.cgi?id=2050288): Add delay after sending bootstrap stop and start messages [#170](https://github.com/openshift/baremetal-runtimecfg/pull/170)
* [Bug 1996573](https://bugzilla.redhat.com/show_bug.cgi?id=1996573): CoreDNS Corefile hosts - add support for dual-stack [#149](https://github.com/openshift/baremetal-runtimecfg/pull/149)
* [Bug 1886572](https://bugzilla.redhat.com/show_bug.cgi?id=1886572): Calculate keepalived priority for ingress [#141](https://github.com/openshift/baremetal-runtimecfg/pull/141)
* [Bug 1924476](https://bugzilla.redhat.com/show_bug.cgi?id=1924476): handle CVE-2021-3121 [#139](https://github.com/openshift/baremetal-runtimecfg/pull/139)
* Remove Brad from OWNERS [#142](https://github.com/openshift/baremetal-runtimecfg/pull/142)
* [Bug 1949859](https://bugzilla.redhat.com/show_bug.cgi?id=1949859): Add Ironic healthcheck to bootstrap keepalived checks [#135](https://github.com/openshift/baremetal-runtimecfg/pull/135)
* [Bug 1960716](https://bugzilla.redhat.com/show_bug.cgi?id=1960716): Log the output of render operations [#138](https://github.com/openshift/baremetal-runtimecfg/pull/138)
* [Bug 1957708](https://bugzilla.redhat.com/show_bug.cgi?id=1957708): Keepalived- verify that unicast peers list isn't empty on master nodes [#137](https://github.com/openshift/baremetal-runtimecfg/pull/137)
* Remove etcd name logic [#134](https://github.com/openshift/baremetal-runtimecfg/pull/134)
* Updating baremetal-runtimecfg builder & base images to be consistent with ART [#131](https://github.com/openshift/baremetal-runtimecfg/pull/131)
* Add node resolution to corednsmonitor [#129](https://github.com/openshift/baremetal-runtimecfg/pull/129)
* [Bug 1939740](https://bugzilla.redhat.com/show_bug.cgi?id=1939740): sort AddressesDefault by ifindex and IPv4/IPv6 preference [#130](https://github.com/openshift/baremetal-runtimecfg/pull/130)
* Build all commands at once in Dockerfiles [#127](https://github.com/openshift/baremetal-runtimecfg/pull/127)
* Sort node-ip addresses based on default route priority [#125](https://github.com/openshift/baremetal-runtimecfg/pull/125)
* Delete DNS-VIP and DNSVirtualRouterID [#124](https://github.com/openshift/baremetal-runtimecfg/pull/124)
* Switch Dockerfile to new image registry [#126](https://github.com/openshift/baremetal-runtimecfg/pull/126)
* Add dnsmasqmonitor [#118](https://github.com/openshift/baremetal-runtimecfg/pull/118)
* Updating baremetal-runtimecfg builder & base images to be consistent with ART [#120](https://github.com/openshift/baremetal-runtimecfg/pull/120)
* Move to quay.io dhcp image to avoid Dockerhub limits [#113](https://github.com/openshift/baremetal-runtimecfg/pull/113)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/9c5da32ba602e5881178e56269b0506fcb54ff92...710cb737702d9a13b3cfeead4386bd9a7fa9435a)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/41ff67edf43f0304d1482882f85e0069f175d521)

* [Bug 2066760](https://bugzilla.redhat.com/show_bug.cgi?id=2066760): Add TMOUT env to debug node pod [#1095](https://github.com/openshift/oc/pull/1095)
* [Bug 2039762](https://bugzilla.redhat.com/show_bug.cgi?id=2039762): Remove `git://` from new-app tests [#1023](https://github.com/openshift/oc/pull/1023)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix mirroring images that have dots in their namespace [#1069](https://github.com/openshift/oc/pull/1069)
* [Bug 2038931](https://bugzilla.redhat.com/show_bug.cgi?id=2038931): properly handle --dry-run=server [#1017](https://github.com/openshift/oc/pull/1017)
* [Bug 2004193](https://bugzilla.redhat.com/show_bug.cgi?id=2004193): Registry mirror panic [#926](https://github.com/openshift/oc/pull/926)
* Add kevinrizza as catalog-approver [#921](https://github.com/openshift/oc/pull/921)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): revert incorrect allowance of ssh:// prefix with scp styled URLs [#898](https://github.com/openshift/oc/pull/898)
* [Bug 1974267](https://bugzilla.redhat.com/show_bug.cgi?id=1974267): make oc logs work with BuildConfig's JenkinsPipeline strategy [#867](https://github.com/openshift/oc/pull/867)
* [Bug 1954124](https://bugzilla.redhat.com/show_bug.cgi?id=1954124): deprecate storage-class annotation in favor of spec.StorageClassName [#840](https://github.com/openshift/oc/pull/840)
* [Bug 1951203](https://bugzilla.redhat.com/show_bug.cgi?id=1951203): Allow users to set a limit on ICSP file size [#818](https://github.com/openshift/oc/pull/818)
* [Bug 1968515](https://bugzilla.redhat.com/show_bug.cgi?id=1968515): set User-Agent when talking with registries [#841](https://github.com/openshift/oc/pull/841)
* [Bug 1965330](https://bugzilla.redhat.com/show_bug.cgi?id=1965330): exclude security during exctraction [#835](https://github.com/openshift/oc/pull/835)
* [Bug 1893999](https://bugzilla.redhat.com/show_bug.cgi?id=1893999): guide user to provide username with basic auth error/only password IDP and no username provided [#834](https://github.com/openshift/oc/pull/834)
* [Bug 1936904](https://bugzilla.redhat.com/show_bug.cgi?id=1936904): Insert apiVersion and Kind into `oc adm groups sync` list output [#759](https://github.com/openshift/oc/pull/759)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Makefile: add verify-golang-versions [#814](https://github.com/openshift/oc/pull/814)
* [Bug 1964936](https://bugzilla.redhat.com/show_bug.cgi?id=1964936): fix error log for "oc adm catalog mirror" [#836](https://github.com/openshift/oc/pull/836)
* [Bug 1960758](https://bugzilla.redhat.com/show_bug.cgi?id=1960758): use recent pull spec for must-gather and debug [#833](https://github.com/openshift/oc/pull/833)
* [Bug 1942915](https://bugzilla.redhat.com/show_bug.cgi?id=1942915): pkg/.../create_error_template: fix error page template [#828](https://github.com/openshift/oc/pull/828)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): Bump k8s to 1.21 [#831](https://github.com/openshift/oc/pull/831)
* Generate docs separately for admin and non-admin users [#827](https://github.com/openshift/oc/pull/827)
* [Bug 1944581](https://bugzilla.redhat.com/show_bug.cgi?id=1944581): Preserve AuthInfo when switching projects [#692](https://github.com/openshift/oc/pull/692)
* Transfer root-image configuration to this repository [#823](https://github.com/openshift/oc/pull/823)
* Fix unit test failure [#821](https://github.com/openshift/oc/pull/821)
* [Bug 1957295](https://bugzilla.redhat.com/show_bug.cgi?id=1957295): Must gather pod should have priority class [#820](https://github.com/openshift/oc/pull/820)
* [Bug 1937020](https://bugzilla.redhat.com/show_bug.cgi?id=1937020): Releases from image streams must prefer status tag [#815](https://github.com/openshift/oc/pull/815)
* Add stress and fio packages to tools image [#771](https://github.com/openshift/oc/pull/771)
* [Bug 1949820](https://bugzilla.redhat.com/show_bug.cgi?id=1949820): Add an alias to imagestreams in top command [#810](https://github.com/openshift/oc/pull/810)
* [Bug 1937020](https://bugzilla.redhat.com/show_bug.cgi?id=1937020): `oc adm release new` should look at image stream status tags [#797](https://github.com/openshift/oc/pull/797)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): Update containers/image [#737](https://github.com/openshift/oc/pull/737)
* Remove tnozicka from OWNERS and clean those files too [#726](https://github.com/openshift/oc/pull/726)
* Remove `oc adm catalog build` [#787](https://github.com/openshift/oc/pull/787)
* [Bug 1890828](https://bugzilla.redhat.com/show_bug.cgi?id=1890828): Skip images that has already been deleted [#805](https://github.com/openshift/oc/pull/805)
* [Bug 1925148](https://bugzilla.redhat.com/show_bug.cgi?id=1925148): ImageRef Stream name priority increased [#768](https://github.com/openshift/oc/pull/768)
* [Bug 1946839](https://bugzilla.redhat.com/show_bug.cgi?id=1946839): Revert: Split work of oc image mirror [#780](https://github.com/openshift/oc/pull/780)
* [OSDOCS-2033](https://issues.redhat.com/browse/OSDOCS-2033): Adding examples for some CLI commands [#801](https://github.com/openshift/oc/pull/801)
* Updating generate docs output for product docs [#798](https://github.com/openshift/oc/pull/798)
* Updating oc-specific descriptions [#800](https://github.com/openshift/oc/pull/800)
* Bump 4.8 kubernetes 1 21 0 beta 1 [#773](https://github.com/openshift/oc/pull/773)
* Updating openshift-enterprise-cli builder & base images to be consistent with ART [#799](https://github.com/openshift/oc/pull/799)
* Fix usage error print [#788](https://github.com/openshift/oc/pull/788)
* Fixing oc status help example message [#791](https://github.com/openshift/oc/pull/791)
* Fix govet error after golang 1.16 bump [#796](https://github.com/openshift/oc/pull/796)
* Updating ose-cli-artifacts builder & base images to be consistent with ART [#794](https://github.com/openshift/oc/pull/794)
* Updating openshift-enterprise-cli builder & base images to be consistent with ART [#793](https://github.com/openshift/oc/pull/793)
* [Bug 1919168](https://bugzilla.redhat.com/show_bug.cgi?id=1919168): when mirroring to a file destination, mount images under the index location [#772](https://github.com/openshift/oc/pull/772)
* prevent inspect from panic-ing if pods are missing [#762](https://github.com/openshift/oc/pull/762)
* stop trying to gather metrics and other endpoints directly from pods [#763](https://github.com/openshift/oc/pull/763)
* [Bug 1874106](https://bugzilla.redhat.com/show_bug.cgi?id=1874106): Split work of oc image mirror to avoid AuthHeaderTooLong error from registry [#761](https://github.com/openshift/oc/pull/761)
* Fix unit test to use new IS [#765](https://github.com/openshift/oc/pull/765)
* [Bug 1935102](https://bugzilla.redhat.com/show_bug.cgi?id=1935102): Revert Avoid TLS cert checking when login with --insecure-skip-tls-verify=true [#757](https://github.com/openshift/oc/pull/757)
* inspect clusteroperators as a backup to must-gather if it fails [#749](https://github.com/openshift/oc/pull/749)
* pkg/cli/admin/inspect/namespace: Gather PDBs too [#750](https://github.com/openshift/oc/pull/750)
* [Bug 1880865](https://bugzilla.redhat.com/show_bug.cgi?id=1880865): Avoid TLS cert checking when login with --insecure-skip-tls-verify=true [#746](https://github.com/openshift/oc/pull/746)
* indicate how many bytes the hidden secret key was [#752](https://github.com/openshift/oc/pull/752)
* Remove old dependencies on dockerv1client and replace with newer equivalents [#745](https://github.com/openshift/oc/pull/745)
* [Bug 1928850](https://bugzilla.redhat.com/show_bug.cgi?id=1928850): update new-app help to avoid image references without registry/repository (docker.io throttling related) [#742](https://github.com/openshift/oc/pull/742)
* [Bug 1920024](https://bugzilla.redhat.com/show_bug.cgi?id=1920024): Allow debug to start with a single `--image` argument [#399](https://github.com/openshift/oc/pull/399)
* Add summary to oc must-gather [#738](https://github.com/openshift/oc/pull/738)
* [Bug 1925236](https://bugzilla.redhat.com/show_bug.cgi?id=1925236): RouteDescriber: Filter endpoints on route.Spec.Port [#730](https://github.com/openshift/oc/pull/730)
* Updating ose-cli-artifacts builder & base images to be consistent with ART [#735](https://github.com/openshift/oc/pull/735)
* [Bug 1904006](https://bugzilla.redhat.com/show_bug.cgi?id=1904006): update and clarify --dir --from-dir flags with 'oc image' [#729](https://github.com/openshift/oc/pull/729)
* Updating ose-tools builder & base images to be consistent with ART [#734](https://github.com/openshift/oc/pull/734)
* Updating openshift-enterprise-deployer builder & base images to be consistent with ART [#733](https://github.com/openshift/oc/pull/733)
* Updating openshift-enterprise-cli builder & base images to be consistent with ART [#732](https://github.com/openshift/oc/pull/732)
* upate registry.svc.ci->registry.ci [#731](https://github.com/openshift/oc/pull/731)
* add simple debug for image serve [#690](https://github.com/openshift/oc/pull/690)
* Add help text to 'oc registry login' when using --registry flag [#721](https://github.com/openshift/oc/pull/721)
* [Bug 1919032](https://bugzilla.redhat.com/show_bug.cgi?id=1919032): Fix image extract from Root Directory [#713](https://github.com/openshift/oc/pull/713)
* [Full changelog](https://github.com/openshift/oc/compare/e6f2e9b10e0c5f788dceb996badbaf9d6d625ffd...41ff67edf43f0304d1482882f85e0069f175d521)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c21a2f905948b8879c747da08cd8ed1c7091d43f)

* [Bug 2058270](https://bugzilla.redhat.com/show_bug.cgi?id=2058270): Remove Azure mint mode support as Active Directory Graph API will be sunset [#454](https://github.com/openshift/cloud-credential-operator/pull/454)
* [Bug 2027928](https://bugzilla.redhat.com/show_bug.cgi?id=2027928): pod-identity-webhook starts without tls [#429](https://github.com/openshift/cloud-credential-operator/pull/429)
* [Bug 2027832](https://bugzilla.redhat.com/show_bug.cgi?id=2027832): Stop putting CCO in degraded state when stale credentials are found [#428](https://github.com/openshift/cloud-credential-operator/pull/428)
* [Bug 2026098](https://bugzilla.redhat.com/show_bug.cgi?id=2026098): Check for aws status in infra platform status field before client setup [#425](https://github.com/openshift/cloud-credential-operator/pull/425)
* [Bug 1970062](https://bugzilla.redhat.com/show_bug.cgi?id=1970062): use shared session setup in ccoctl create-all [#354](https://github.com/openshift/cloud-credential-operator/pull/354)
* [Bug 1967531](https://bugzilla.redhat.com/show_bug.cgi?id=1967531): Fix ccoctl delete not removing iam roles [#351](https://github.com/openshift/cloud-credential-operator/pull/351)
* [Bug 1970062](https://bugzilla.redhat.com/show_bug.cgi?id=1970062): delete client should also use shared session function [#353](https://github.com/openshift/cloud-credential-operator/pull/353)
* [Bug 1970062](https://bugzilla.redhat.com/show_bug.cgi?id=1970062): enable shared config files for AWS SDK [#352](https://github.com/openshift/cloud-credential-operator/pull/352)
* [Bug 1960176](https://bugzilla.redhat.com/show_bug.cgi?id=1960176): Make sure credentials have newly generated azure client secret [#349](https://github.com/openshift/cloud-credential-operator/pull/349)
* [Bug 1957165](https://bugzilla.redhat.com/show_bug.cgi?id=1957165): Use gofrs/uuid for uuid generation [#350](https://github.com/openshift/cloud-credential-operator/pull/350)
* [Bug 1957446](https://bugzilla.redhat.com/show_bug.cgi?id=1957446): v1beta to v1 for the CredentialsRequest CRD [#336](https://github.com/openshift/cloud-credential-operator/pull/336)
* [Bug 1960176](https://bugzilla.redhat.com/show_bug.cgi?id=1960176): Recreate user when deleted in cloud providers [#345](https://github.com/openshift/cloud-credential-operator/pull/345)
* [Bug 1962602](https://bugzilla.redhat.com/show_bug.cgi?id=1962602): Remove log statement in frequently called function. [#343](https://github.com/openshift/cloud-credential-operator/pull/343)
* [Bug 1910396](https://bugzilla.redhat.com/show_bug.cgi?id=1910396): Add ErrorScrub utility to prevent infinite update/reconc… [#342](https://github.com/openshift/cloud-credential-operator/pull/342)
* [Bug 1864116](https://bugzilla.redhat.com/show_bug.cgi?id=1864116): Fix "unsupported platform type" log spamming on BareMetal. [#341](https://github.com/openshift/cloud-credential-operator/pull/341)
* [Bug 1958861](https://bugzilla.redhat.com/show_bug.cgi?id=1958861): back to no CSR permissions for pod-id-webhook [#340](https://github.com/openshift/cloud-credential-operator/pull/340)
* [Bug 1953077](https://bugzilla.redhat.com/show_bug.cgi?id=1953077): rework GCP passthrough permissions checking [#330](https://github.com/openshift/cloud-credential-operator/pull/330)
* [Bug 1954765](https://bugzilla.redhat.com/show_bug.cgi?id=1954765): v1beta1 to v1 mutatingwebhookconfiguration [#333](https://github.com/openshift/cloud-credential-operator/pull/333)
* [Bug 1949862](https://bugzilla.redhat.com/show_bug.cgi?id=1949862): avoid referencing object after error [#328](https://github.com/openshift/cloud-credential-operator/pull/328)
* [Bug 1954615](https://bugzilla.redhat.com/show_bug.cgi?id=1954615): do not assume result is valid after error [#335](https://github.com/openshift/cloud-credential-operator/pull/335)
* [Bug 1954865](https://bugzilla.redhat.com/show_bug.cgi?id=1954865): add priorityClass to pod-identity Deployment [#334](https://github.com/openshift/cloud-credential-operator/pull/334)
* [Bug 1952891](https://bugzilla.redhat.com/show_bug.cgi?id=1952891): Fix OpenStack clouds.yaml updating in secretannotator [#332](https://github.com/openshift/cloud-credential-operator/pull/332)
* [Bug 1949866](https://bugzilla.redhat.com/show_bug.cgi?id=1949866): use initialization structure for ID provider [#327](https://github.com/openshift/cloud-credential-operator/pull/327)
* Rename workload annotations [#329](https://github.com/openshift/cloud-credential-operator/pull/329)
* [Bug 1949218](https://bugzilla.redhat.com/show_bug.cgi?id=1949218): build and include ccoctl into image [#323](https://github.com/openshift/cloud-credential-operator/pull/323)
* [Bug 1927017](https://bugzilla.redhat.com/show_bug.cgi?id=1927017): Use file observer for Proxy CA changes [#320](https://github.com/openshift/cloud-credential-operator/pull/320)
* [Bug 1948628](https://bugzilla.redhat.com/show_bug.cgi?id=1948628): Fix ccoctl create aws iam-roles command and docs [#325](https://github.com/openshift/cloud-credential-operator/pull/325)
* [Bug 1948628](https://bugzilla.redhat.com/show_bug.cgi?id=1948628): Add aws subcommand to ccoctl and additional UX changes [#321](https://github.com/openshift/cloud-credential-operator/pull/321)
* [Bug 1946097](https://bugzilla.redhat.com/show_bug.cgi?id=1946097): oVirt credentials secret contains unnecessary "ovirt_cafile" [#317](https://github.com/openshift/cloud-credential-operator/pull/317)
* Add management workload annotations [#319](https://github.com/openshift/cloud-credential-operator/pull/319)
* [Bug 1940142](https://bugzilla.redhat.com/show_bug.cgi?id=1940142): Correct incorrect CACert in secrets created prior to 4.6 [#314](https://github.com/openshift/cloud-credential-operator/pull/314)
* installer manifests and 'all' subcommand [#311](https://github.com/openshift/cloud-credential-operator/pull/311)
* [CCO-73](https://issues.redhat.com/browse/CCO-73): Add command to delete resources created by ccoctl [#312](https://github.com/openshift/cloud-credential-operator/pull/312)
* make docs reflect reality of parameter names [#316](https://github.com/openshift/cloud-credential-operator/pull/316)
* Ccoctl docs [#307](https://github.com/openshift/cloud-credential-operator/pull/307)
* iam-roles subcommand [#306](https://github.com/openshift/cloud-credential-operator/pull/306)
* add generate-only mode for ccoctl create identity-provider [#304](https://github.com/openshift/cloud-credential-operator/pull/304)
* Updating ose-cloud-credential-operator builder & base images to be consistent with ART [#313](https://github.com/openshift/cloud-credential-operator/pull/313)
* [Bug 1927017](https://bugzilla.redhat.com/show_bug.cgi?id=1927017): Context cancel on stopped leading [#310](https://github.com/openshift/cloud-credential-operator/pull/310)
* manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown [#308](https://github.com/openshift/cloud-credential-operator/pull/308)
* no error when SecretRef does not exist [#305](https://github.com/openshift/cloud-credential-operator/pull/305)
* require annotation before upgrade when in manual mode [#286](https://github.com/openshift/cloud-credential-operator/pull/286)
* report STS as a submode of Manual [#303](https://github.com/openshift/cloud-credential-operator/pull/303)
* [CCO-67](https://issues.redhat.com/browse/CCO-67): Add command to setup OpenID Connect provider [#302](https://github.com/openshift/cloud-credential-operator/pull/302)
* Add service account names to credentials request manifest [#298](https://github.com/openshift/cloud-credential-operator/pull/298)
* Add a CredentialsRequest field to store service account names [#299](https://github.com/openshift/cloud-credential-operator/pull/299)
* new binary for setting up credentials outside of cluster [#296](https://github.com/openshift/cloud-credential-operator/pull/296)
* [Bug 1927925](https://bugzilla.redhat.com/show_bug.cgi?id=1927925): spell fix user-visible string [#300](https://github.com/openshift/cloud-credential-operator/pull/300)
* [Bug 1924477](https://bugzilla.redhat.com/show_bug.cgi?id=1924477): Tag gogo/protobuf to v1.3.2 [#297](https://github.com/openshift/cloud-credential-operator/pull/297)
* Updating ose-cloud-credential-operator builder & base images to be consistent with ART [#295](https://github.com/openshift/cloud-credential-operator/pull/295)
* Add controller to cleanup stale credentials requests [#285](https://github.com/openshift/cloud-credential-operator/pull/285)
* specify Azure and GCP as supporting Manual mode [#291](https://github.com/openshift/cloud-credential-operator/pull/291)
* Add initial documentation for using AWS Security Token Service [#290](https://github.com/openshift/cloud-credential-operator/pull/290)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0783477aa72edf998344740933a99c0417ebe573...c21a2f905948b8879c747da08cd8ed1c7091d43f)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a180c2ab5c9b09746e984f4f6459b4e8cc06de82)

* [Bug 2062591](https://bugzilla.redhat.com/show_bug.cgi?id=2062591): e2e: Pin Keycloack to the legacy variant [#557](https://github.com/openshift/cluster-authentication-operator/pull/557)
* [Bug 1997906](https://bugzilla.redhat.com/show_bug.cgi?id=1997906): csr request: use generate names to prevent getting stuck waiting for a cert [#494](https://github.com/openshift/cluster-authentication-operator/pull/494)
* [Bug 2003632](https://bugzilla.redhat.com/show_bug.cgi?id=2003632): manifests, bindata: explicitely set runAsUser for operator and operand [#484](https://github.com/openshift/cluster-authentication-operator/pull/484)
* [Bug 2003946](https://bugzilla.redhat.com/show_bug.cgi?id=2003946): Deploy PDB to prevent more than one replica going unavailable [#488](https://github.com/openshift/cluster-authentication-operator/pull/488)
* [Bug 1989587](https://bugzilla.redhat.com/show_bug.cgi?id=1989587): pkg/operator: Add deprecated stale status [#471](https://github.com/openshift/cluster-authentication-operator/pull/471)
* [Bug 1979303](https://bugzilla.redhat.com/show_bug.cgi?id=1979303): clear encryption conditions when there is no work to be done [#467](https://github.com/openshift/cluster-authentication-operator/pull/467)
* [Bug 1977233](https://bugzilla.redhat.com/show_bug.cgi?id=1977233): observe api-audiences for the oauth-apiserver [#459](https://github.com/openshift/cluster-authentication-operator/pull/459)
* [Bug 1969631](https://bugzilla.redhat.com/show_bug.cgi?id=1969631): encryption controllers wait for all informers before running the sync loops [#453](https://github.com/openshift/cluster-authentication-operator/pull/453)
* [Bug 1879182](https://bugzilla.redhat.com/show_bug.cgi?id=1879182): oauth-apiserver: audit policies now use 'secure-' by default [#451](https://github.com/openshift/cluster-authentication-operator/pull/451)
* [Bug 1965929](https://bugzilla.redhat.com/show_bug.cgi?id=1965929): bump lib-go to get improved performance for the CSR approver [#450](https://github.com/openshift/cluster-authentication-operator/pull/450)
* [Bug 1965929](https://bugzilla.redhat.com/show_bug.cgi?id=1965929): wire certs as the authentication means to openshift webhook authenticator [#416](https://github.com/openshift/cluster-authentication-operator/pull/416)
* [Bug 1967398](https://bugzilla.redhat.com/show_bug.cgi?id=1967398): operator: add OAuthServiceEndpointsCheckEndpointAccessibleControllerDegraded to stale conditions [#449](https://github.com/openshift/cluster-authentication-operator/pull/449)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): splits the encryption tests [#447](https://github.com/openshift/cluster-authentication-operator/pull/447)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): stub for splitting encryption tests [#446](https://github.com/openshift/cluster-authentication-operator/pull/446)
* [Bug 1950379](https://bugzilla.redhat.com/show_bug.cgi?id=1950379): routersecret: sync only the cert/key pair for the default domain [#438](https://github.com/openshift/cluster-authentication-operator/pull/438)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#439](https://github.com/openshift/cluster-authentication-operator/pull/439)
* [Bug 1953041](https://bugzilla.redhat.com/show_bug.cgi?id=1953041): manifests/deployment: bump cpu and memory resource requests [#444](https://github.com/openshift/cluster-authentication-operator/pull/444)
* [Bug 1955749](https://bugzilla.redhat.com/show_bug.cgi?id=1955749): OCP oauth translations for login pages [#428](https://github.com/openshift/cluster-authentication-operator/pull/428)
* [Bug 1939580](https://bugzilla.redhat.com/show_bug.cgi?id=1939580): wellknownready: delay going degraded on oauthmetadata changes [#442](https://github.com/openshift/cluster-authentication-operator/pull/442)
* [Bug 1954544](https://bugzilla.redhat.com/show_bug.cgi?id=1954544): endpoints controller: actually use the context-constrained request [#441](https://github.com/openshift/cluster-authentication-operator/pull/441)
* Rename workload annotations [#434](https://github.com/openshift/cluster-authentication-operator/pull/434)
* [Bug 1946540](https://bugzilla.redhat.com/show_bug.cgi?id=1946540): fix configuring webhook authenticators on upgrade [#435](https://github.com/openshift/cluster-authentication-operator/pull/435)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#436](https://github.com/openshift/cluster-authentication-operator/pull/436)
* Add management workload annotations [#431](https://github.com/openshift/cluster-authentication-operator/pull/431)
* [Bug 1946540](https://bugzilla.redhat.com/show_bug.cgi?id=1946540): only configure webhook authenticators when oauth-apiservers are ready during upgrade [#433](https://github.com/openshift/cluster-authentication-operator/pull/433)
* e2e: fix the token names in tokentimeout test to match the new format [#432](https://github.com/openshift/cluster-authentication-operator/pull/432)
* extends shutdown delay duration to 10 seconds [#429](https://github.com/openshift/cluster-authentication-operator/pull/429)
* move the oauth-server deployment into a generic workloads controller [#414](https://github.com/openshift/cluster-authentication-operator/pull/414)
* oauth-apiserver: add access token inactivity timeout observer [#422](https://github.com/openshift/cluster-authentication-operator/pull/422)
* Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#421](https://github.com/openshift/cluster-authentication-operator/pull/421)
* follow up changes to clean up endpoint accessible controller [#404](https://github.com/openshift/cluster-authentication-operator/pull/404)
* [Bug 1934107](https://bugzilla.redhat.com/show_bug.cgi?id=1934107): webhook authentication: fix oauth-apiserver IP for IPv6 environments [#415](https://github.com/openshift/cluster-authentication-operator/pull/415)
* switch to v1beta1 for the p&f APIs [#393](https://github.com/openshift/cluster-authentication-operator/pull/393)
* wire openshift authentication as a webhook authenticator [#304](https://github.com/openshift/cluster-authentication-operator/pull/304)
* removes the encryption provider [#409](https://github.com/openshift/cluster-authentication-operator/pull/409)
* e2e: Pin gitlab docker image to 13.8.4-ce.0 [#413](https://github.com/openshift/cluster-authentication-operator/pull/413)
* Remove the 'authentication.operator.openshift.io/managed' annotation from user,oauth apiservices [#407](https://github.com/openshift/cluster-authentication-operator/pull/407)
* Updating ose-cluster-authentication-operator builder & base images to be consistent with ART [#406](https://github.com/openshift/cluster-authentication-operator/pull/406)
* Support non-HA mode [#391](https://github.com/openshift/cluster-authentication-operator/pull/391)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/4c02b7b2322eab9bbcb969886211d541e5e4fcde...a180c2ab5c9b09746e984f4f6459b4e8cc06de82)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d)

* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): updating CA version to 1.21.0 [#203](https://github.com/openshift/kubernetes-autoscaler/pull/203)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): rebase on top of kubernetes/autoscaler 1.21 [#201](https://github.com/openshift/kubernetes-autoscaler/pull/201)
* updating vendor to 1.21.0 [#4042](https://github.com/openshift/kubernetes-autoscaler/pull/4042)
* additional memory reservation for gce cloud provider for low memory m... [#4028](https://github.com/openshift/kubernetes-autoscaler/pull/4028)
* Add enhancement proposal for feature request #3913 [#3914](https://github.com/openshift/kubernetes-autoscaler/pull/3914)
* Fix CAPI example [#4018](https://github.com/openshift/kubernetes-autoscaler/pull/4018)
* Make addon-resizer example deployment use k8s.gcr.io [#4003](https://github.com/openshift/kubernetes-autoscaler/pull/4003)
* cloudprovider: ClusterAPIProviderName spelling [#4015](https://github.com/openshift/kubernetes-autoscaler/pull/4015)
* CAPI Management cluster informer to watch single namespce [#4012](https://github.com/openshift/kubernetes-autoscaler/pull/4012)
* Proposal to circumvent 50 tag ASG limit for EKS ManagedNodegroups [#3968](https://github.com/openshift/kubernetes-autoscaler/pull/3968)
* Set cluster autoscaler-specific user agent. [#3989](https://github.com/openshift/kubernetes-autoscaler/pull/3989)
* Separate and refactor custom resources logic [#3971](https://github.com/openshift/kubernetes-autoscaler/pull/3971)
* Allow users to change thresholds for evicting pods in VPA [#3962](https://github.com/openshift/kubernetes-autoscaler/pull/3962)
* fix: add missing call to fetch autodiscovered nodegroups [#3972](https://github.com/openshift/kubernetes-autoscaler/pull/3972)
* Add A2 machine family pricing for GCE [#3974](https://github.com/openshift/kubernetes-autoscaler/pull/3974)
* Fix typo in values.yaml example for extraVolumeMounts [#3960](https://github.com/openshift/kubernetes-autoscaler/pull/3960)
* Log failed scale up metric based on string value of AutoscalerErrorType. [#3969](https://github.com/openshift/kubernetes-autoscaler/pull/3969)
* adds status-config-map-name to values.yaml of helm chart [#3954](https://github.com/openshift/kubernetes-autoscaler/pull/3954)
* Update VPA README with current default version [#3952](https://github.com/openshift/kubernetes-autoscaler/pull/3952)
* Update description of CA in main README [#3951](https://github.com/openshift/kubernetes-autoscaler/pull/3951)
* Support for reporting authorization errors during scale up [#3950](https://github.com/openshift/kubernetes-autoscaler/pull/3950)
* Fix GCE where no cloud-config-path is required [#3907](https://github.com/openshift/kubernetes-autoscaler/pull/3907)
* expose IP_SPACE_EXHAUSTED [#3945](https://github.com/openshift/kubernetes-autoscaler/pull/3945)
* Do not set limits when recommendation is 0 [#3903](https://github.com/openshift/kubernetes-autoscaler/pull/3903)
* Allow generic labels to be overwritten by tags coming from the ASG [#3926](https://github.com/openshift/kubernetes-autoscaler/pull/3926)
* Fix bug where a node that becomes ready after 2 [#3924](https://github.com/openshift/kubernetes-autoscaler/pull/3924)
* Cloudprovider hetzner [#3838](https://github.com/openshift/kubernetes-autoscaler/pull/3838)
* remove extra build command from cluster-autoscaler [#3863](https://github.com/openshift/kubernetes-autoscaler/pull/3863)
* feat(ovhcloud): add node group autoscaling options [#3866](https://github.com/openshift/kubernetes-autoscaler/pull/3866)
* Support AWS new GPU type - T4 [#3872](https://github.com/openshift/kubernetes-autoscaler/pull/3872)
* Allow name of cluster-autoscaler status ConfigMap to be specificed [#3888](https://github.com/openshift/kubernetes-autoscaler/pull/3888)
* Bugfix: Expander Priority warns misleading log. [#3758](https://github.com/openshift/kubernetes-autoscaler/pull/3758)
* updating the vendor for new release tag `v1.21.0-beta.1` [#3933](https://github.com/openshift/kubernetes-autoscaler/pull/3933)
* CA-Chart Readme Updates & Fix Chart Lint and Test Actions [#3932](https://github.com/openshift/kubernetes-autoscaler/pull/3932)
* Fixing Kernel Memory Usage estimation for GCE cloud provider [#3929](https://github.com/openshift/kubernetes-autoscaler/pull/3929)
* Add Fetch Error Output to Warning Log [#3893](https://github.com/openshift/kubernetes-autoscaler/pull/3893)
* Allow for specifying automountServiceAccountToken on cluster-autoscaler service account [#3912](https://github.com/openshift/kubernetes-autoscaler/pull/3912)
* add a metric for unregistered nodes removed by cluster autoscaler [#3922](https://github.com/openshift/kubernetes-autoscaler/pull/3922)
* Support additional-print-columns for VPA CR [#3918](https://github.com/openshift/kubernetes-autoscaler/pull/3918)
* Simplify update-vendor script [#3915](https://github.com/openshift/kubernetes-autoscaler/pull/3915)
* add cluster-api to provider list on cluster-autoscaler readme [#3920](https://github.com/openshift/kubernetes-autoscaler/pull/3920)
* add arch specific cluster-autoscaler targets to gitignore [#3921](https://github.com/openshift/kubernetes-autoscaler/pull/3921)
* feat: add prometheus rule support [#3900](https://github.com/openshift/kubernetes-autoscaler/pull/3900)
* distinguishing another 404 error in autoscaling_gce_client.go [#3904](https://github.com/openshift/kubernetes-autoscaler/pull/3904)
* Add e2-highcpu-32 price info [#3898](https://github.com/openshift/kubernetes-autoscaler/pull/3898)
* Helm Chart Image Update (v1.18.1 → v1.20.0) [#3880](https://github.com/openshift/kubernetes-autoscaler/pull/3880)
* Enhancements directory for VPA [#3895](https://github.com/openshift/kubernetes-autoscaler/pull/3895)
* Add gjtempleton to CA AWS cloud provider OWNERS approvers [#3896](https://github.com/openshift/kubernetes-autoscaler/pull/3896)
* Allow out-of-cluster operation of VPA [#3769](https://github.com/openshift/kubernetes-autoscaler/pull/3769)
* Reduce logging when creating placeholder instances [#3757](https://github.com/openshift/kubernetes-autoscaler/pull/3757)
* Add comment for exported type InstanceType in gen template [#3751](https://github.com/openshift/kubernetes-autoscaler/pull/3751)
* Add unremovable_nodes_count metric [#3690](https://github.com/openshift/kubernetes-autoscaler/pull/3690)
* Set different hostname label for upcoming nodes [#3883](https://github.com/openshift/kubernetes-autoscaler/pull/3883)
* Final removal of ca-chart chart post deprecation [#3885](https://github.com/openshift/kubernetes-autoscaler/pull/3885)
* CA-Chart - Mark Cluster-Autoscaler-Chart as Deprecated [#3719](https://github.com/openshift/kubernetes-autoscaler/pull/3719)
* Minor fix for timeout test [#3882](https://github.com/openshift/kubernetes-autoscaler/pull/3882)
* Remove .travis.yml [#3878](https://github.com/openshift/kubernetes-autoscaler/pull/3878)
* Test and verify using Git Actions [#3860](https://github.com/openshift/kubernetes-autoscaler/pull/3860)
* Add clusterapi into frontpage [#3859](https://github.com/openshift/kubernetes-autoscaler/pull/3859)
* Azure: Cleanup test [#3864](https://github.com/openshift/kubernetes-autoscaler/pull/3864)
* bump clusterapi sample suggested version from 1.18.1 to 1.20.0 [#3855](https://github.com/openshift/kubernetes-autoscaler/pull/3855)
* Allow for the leader election resourcelock to have a configurable name [#3630](https://github.com/openshift/kubernetes-autoscaler/pull/3630)
* implement new GetOptions method for linode provider [#3850](https://github.com/openshift/kubernetes-autoscaler/pull/3850)
* cloudprovider: linode cloud provider [#3790](https://github.com/openshift/kubernetes-autoscaler/pull/3790)
* doc: proposal custom cloud provider over gRPC [#3140](https://github.com/openshift/kubernetes-autoscaler/pull/3140)
* Per nodegroup scale-down config [#3789](https://github.com/openshift/kubernetes-autoscaler/pull/3789)
* Fix cluster-autoscaler chart to match with the examples [#3725](https://github.com/openshift/kubernetes-autoscaler/pull/3725)
* Add services into role of example file [#3842](https://github.com/openshift/kubernetes-autoscaler/pull/3842)
* Change VPA storage version from v1beta2 to v1 [#3810](https://github.com/openshift/kubernetes-autoscaler/pull/3810)
* Follow WG Naming Recommendations on Master -> Control Plane [#3803](https://github.com/openshift/kubernetes-autoscaler/pull/3803)
* Minor fixes. DaemonSet eviction for empty nodes [#3837](https://github.com/openshift/kubernetes-autoscaler/pull/3837)
* add DaemonSet eviction option for empty nodes [#3824](https://github.com/openshift/kubernetes-autoscaler/pull/3824)
* Implement round-robin for SchedulerBasedPredicateChecker [#3817](https://github.com/openshift/kubernetes-autoscaler/pull/3817)
* Add new aws instance types: r5b, m5zn, d3, d3en [#3746](https://github.com/openshift/kubernetes-autoscaler/pull/3746)
* Change VPA default version to 0.9.2 [#3827](https://github.com/openshift/kubernetes-autoscaler/pull/3827)
* Update values.yaml defaults to match real default values [#3777](https://github.com/openshift/kubernetes-autoscaler/pull/3777)
* Update pr.yaml [#3793](https://github.com/openshift/kubernetes-autoscaler/pull/3793)
* gcp: faster startup and refreshes with many MIGs [#3704](https://github.com/openshift/kubernetes-autoscaler/pull/3704)
* Switch from v1beta1 to v1 for rbac [#3820](https://github.com/openshift/kubernetes-autoscaler/pull/3820)
* Define clusterapi in cloudprovider layer [#3801](https://github.com/openshift/kubernetes-autoscaler/pull/3801)
* Adding functionality to cordon the node before destroying it. [#3649](https://github.com/openshift/kubernetes-autoscaler/pull/3649)
* added additional os-distributions [#3815](https://github.com/openshift/kubernetes-autoscaler/pull/3815)
* Revert 3744 [#3806](https://github.com/openshift/kubernetes-autoscaler/pull/3806)
* Wait with jitter between attempts to start watching pod evictions [#3807](https://github.com/openshift/kubernetes-autoscaler/pull/3807)
* Fix cluster-autoscaler clusterapi sample manifest [#3805](https://github.com/openshift/kubernetes-autoscaler/pull/3805)
* Regenerate Azure instances list [#3794](https://github.com/openshift/kubernetes-autoscaler/pull/3794)
* adding support to block ephemeral storage from boot disk [#3783](https://github.com/openshift/kubernetes-autoscaler/pull/3783)
* chart: fix reference to additionalLabels in deployment template [#3782](https://github.com/openshift/kubernetes-autoscaler/pull/3782)
* ignoring terminated pods in scaledown [#3545](https://github.com/openshift/kubernetes-autoscaler/pull/3545)
* feature(provider): Add OVHcloud provider [#3773](https://github.com/openshift/kubernetes-autoscaler/pull/3773)
* Make arch-specific releases use separate images instead of tags on the same image [#3768](https://github.com/openshift/kubernetes-autoscaler/pull/3768)
* Add towca to cluster-autoscaler Reviewers [#3774](https://github.com/openshift/kubernetes-autoscaler/pull/3774)
* subtract mirror pod utilization with ds utilization from node allocatable [#3749](https://github.com/openshift/kubernetes-autoscaler/pull/3749)
* Ephemeral Storage support for BuildNodeFromTemplate in GCE [#3763](https://github.com/openshift/kubernetes-autoscaler/pull/3763)
* cleanup: refactor Azure cache and remove redundant API calls [#3717](https://github.com/openshift/kubernetes-autoscaler/pull/3717)
* cleanup huaweicloud unused sdk [#3759](https://github.com/openshift/kubernetes-autoscaler/pull/3759)
* Add max pods per node config to build node [#3755](https://github.com/openshift/kubernetes-autoscaler/pull/3755)
* Initial Issue Templates [#3750](https://github.com/openshift/kubernetes-autoscaler/pull/3750)
* Do not panic on api errors [#3483](https://github.com/openshift/kubernetes-autoscaler/pull/3483)
* Generate VPA CRD v1 from types.go [#3606](https://github.com/openshift/kubernetes-autoscaler/pull/3606)
* Watch only pods in state Running and Unknown [#3744](https://github.com/openshift/kubernetes-autoscaler/pull/3744)
* Fixes copy / past error in comment [#3745](https://github.com/openshift/kubernetes-autoscaler/pull/3745)
* Add additionalLabels chart value [#3687](https://github.com/openshift/kubernetes-autoscaler/pull/3687)
* Add extraVolumeSecrets chart value [#3692](https://github.com/openshift/kubernetes-autoscaler/pull/3692)
* [Bug 1955324](https://bugzilla.redhat.com/show_bug.cgi?id=1955324): update testing scripts to use go 1.16 [#202](https://github.com/openshift/kubernetes-autoscaler/pull/202)
* Fix build with Go 1.16 [#200](https://github.com/openshift/kubernetes-autoscaler/pull/200)
* Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#199](https://github.com/openshift/kubernetes-autoscaler/pull/199)
* Housekeeping: add Chen to approvers, update to ci registry [#197](https://github.com/openshift/kubernetes-autoscaler/pull/197)
* Updating vertical-pod-autoscaler builder & base images to be consistent with ART [#193](https://github.com/openshift/kubernetes-autoscaler/pull/193)
* Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART [#192](https://github.com/openshift/kubernetes-autoscaler/pull/192)
* add component and subcomponent to OWNERS [#191](https://github.com/openshift/kubernetes-autoscaler/pull/191)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/8b2e494f7796639b46f9867407fe21546cfc01c3...7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/917d395f0483ba1b0f516283d9247c585039347a)

* Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART [#193](https://github.com/openshift/cluster-autoscaler-operator/pull/193)
* [Bug 2026237](https://bugzilla.redhat.com/show_bug.cgi?id=2026237): Change ClusterAutoscalerUnschedulablePods severity to info [#232](https://github.com/openshift/cluster-autoscaler-operator/pull/232)
* [Bug 1995595](https://bugzilla.redhat.com/show_bug.cgi?id=1995595): add csidrivers and csistoragecapacities to autoscaler cluster role [#220](https://github.com/openshift/cluster-autoscaler-operator/pull/220)
* [Bug 1991501](https://bugzilla.redhat.com/show_bug.cgi?id=1991501): Do not recreate CA deployment when CA CR is being deleted [#217](https://github.com/openshift/cluster-autoscaler-operator/pull/217)
* [Bug 1947785](https://bugzilla.redhat.com/show_bug.cgi?id=1947785): Move all webhooks to v1 [#202](https://github.com/openshift/cluster-autoscaler-operator/pull/202)
* [Bug 1960554](https://bugzilla.redhat.com/show_bug.cgi?id=1960554): manifests: use v1 for RBAC [#205](https://github.com/openshift/cluster-autoscaler-operator/pull/205)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#204](https://github.com/openshift/cluster-autoscaler-operator/pull/204)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update dependencies to 1.21 [#200](https://github.com/openshift/cluster-autoscaler-operator/pull/200)
* Add management workload annotations [#198](https://github.com/openshift/cluster-autoscaler-operator/pull/198)
* [Bug 1948706](https://bugzilla.redhat.com/show_bug.cgi?id=1948706): Add IBM Cloud managed annotations to CVO manifests [#183](https://github.com/openshift/cluster-autoscaler-operator/pull/183)
* [Bug 1938467](https://bugzilla.redhat.com/show_bug.cgi?id=1938467): Fix cluster autoscaler pod requests [#201](https://github.com/openshift/cluster-autoscaler-operator/pull/201)
* [Bug 1938467](https://bugzilla.redhat.com/show_bug.cgi?id=1938467): The default cluster-autoscaler should get default cpu and memory requests if user omits them [#197](https://github.com/openshift/cluster-autoscaler-operator/pull/197)
* [Bug 1947785](https://bugzilla.redhat.com/show_bug.cgi?id=1947785): Move webhook to v1 [#199](https://github.com/openshift/cluster-autoscaler-operator/pull/199)
* install/90_alertrules: Drop ClusterAutoscalerOperatorDown [#196](https://github.com/openshift/cluster-autoscaler-operator/pull/196)
* [Bug 1923823](https://bugzilla.redhat.com/show_bug.cgi?id=1923823): Improve TLS configuration for Kube RBAC Proxy [#194](https://github.com/openshift/cluster-autoscaler-operator/pull/194)
* Add dgrigore to owners [#182](https://github.com/openshift/cluster-autoscaler-operator/pull/182)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/7658bea6c42d770029e6928c1d74ec3bf0175a49...917d395f0483ba1b0f516283d9247c585039347a)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7cf2c50d413d323fe1fa8c2f841c752d903eac81)

* [Bug 2055279](https://bugzilla.redhat.com/show_bug.cgi?id=2055279): Calculating network stack only on supported Platforms [#248](https://github.com/openshift/cluster-baremetal-operator/pull/248)
* [Bug 2000445](https://bugzilla.redhat.com/show_bug.cgi?id=2000445): Set LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE=Never [#194](https://github.com/openshift/cluster-baremetal-operator/pull/194)
* [Bug 1975711](https://bugzilla.redhat.com/show_bug.cgi?id=1975711): Only start static ip set if provisioning net not disabled [#166](https://github.com/openshift/cluster-baremetal-operator/pull/166)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): Fix network stack calculation [#158](https://github.com/openshift/cluster-baremetal-operator/pull/158)
* [Bug 1968701](https://bugzilla.redhat.com/show_bug.cgi?id=1968701): Add ironic/inspector TlsMounts to baremetal pod [#156](https://github.com/openshift/cluster-baremetal-operator/pull/156)
* [Bug 1968615](https://bugzilla.redhat.com/show_bug.cgi?id=1968615): Restrict watches to openshift-machine-api [#153](https://github.com/openshift/cluster-baremetal-operator/pull/153)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): Fix parsing of IPv6 APIserver IP address [#151](https://github.com/openshift/cluster-baremetal-operator/pull/151)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): pass IP_OPTIONS env down to the OS downloader container [#148](https://github.com/openshift/cluster-baremetal-operator/pull/148)
* [Bug 1940518](https://bugzilla.redhat.com/show_bug.cgi?id=1940518): Set default resource requests for all containers [#121](https://github.com/openshift/cluster-baremetal-operator/pull/121)
* [Bug 1952448](https://bugzilla.redhat.com/show_bug.cgi?id=1952448): Fix condition for starting the metal3StaticIpManager container [#146](https://github.com/openshift/cluster-baremetal-operator/pull/146)
* [Bug 1962592](https://bugzilla.redhat.com/show_bug.cgi?id=1962592): Use a cache URL with the .svc.cluster.local suffix [#147](https://github.com/openshift/cluster-baremetal-operator/pull/147)
* [Bug 1947293](https://bugzilla.redhat.com/show_bug.cgi?id=1947293): Document ipv6 provisioning network size limitation [#145](https://github.com/openshift/cluster-baremetal-operator/pull/145)
* [Bug 1948787](https://bugzilla.redhat.com/show_bug.cgi?id=1948787): follow up : Use ApplySecret() [#127](https://github.com/openshift/cluster-baremetal-operator/pull/127)
* Revert "Bug 1953795: Set Ironic webserver_verify_ca" [#142](https://github.com/openshift/cluster-baremetal-operator/pull/142)
* [Bug 1952448](https://bugzilla.redhat.com/show_bug.cgi?id=1952448): Update condition for starting the metal3StaticIpManager container [#140](https://github.com/openshift/cluster-baremetal-operator/pull/140)
* [Bug 1954768](https://bugzilla.redhat.com/show_bug.cgi?id=1954768): Use AdmissionRegistration v1 not v1beta1 as it is going away [#141](https://github.com/openshift/cluster-baremetal-operator/pull/141)
* [Bug 1953795](https://bugzilla.redhat.com/show_bug.cgi?id=1953795): Set Ironic webserver_verify_ca [#139](https://github.com/openshift/cluster-baremetal-operator/pull/139)
* Rename workload annotations [#130](https://github.com/openshift/cluster-baremetal-operator/pull/130)
* [Bug 1952667](https://bugzilla.redhat.com/show_bug.cgi?id=1952667): Update Readme with detailed information about the CBO [#131](https://github.com/openshift/cluster-baremetal-operator/pull/131)
* [Bug 1903700](https://bugzilla.redhat.com/show_bug.cgi?id=1903700): Fix Pod Selectors in metal3 pods created by CBO [#126](https://github.com/openshift/cluster-baremetal-operator/pull/126)
* Add management workload annotations [#124](https://github.com/openshift/cluster-baremetal-operator/pull/124)
* [Bug 1948787](https://bugzilla.redhat.com/show_bug.cgi?id=1948787): secret.StringData is a WriteOnly convience field, stop using it to read [#125](https://github.com/openshift/cluster-baremetal-operator/pull/125)
* Updating ose-cluster-baremetal-operator builder & base images to be consistent with ART [#123](https://github.com/openshift/cluster-baremetal-operator/pull/123)
* Use BMH manifest provided by openshift/baremetal-operator [#122](https://github.com/openshift/cluster-baremetal-operator/pull/122)
* Use the webhook for CR validation [#84](https://github.com/openshift/cluster-baremetal-operator/pull/84)
* Support TLS for ironic and inspector [#80](https://github.com/openshift/cluster-baremetal-operator/pull/80)
* Ensure WATCH_NAMESPACE is always set whether enabled or not [#120](https://github.com/openshift/cluster-baremetal-operator/pull/120)
* Create a webhook for CR validation [#87](https://github.com/openshift/cluster-baremetal-operator/pull/87)
* Update BMH CRD [#118](https://github.com/openshift/cluster-baremetal-operator/pull/118)
* Only set IMAGES_JSON if not previously set [#116](https://github.com/openshift/cluster-baremetal-operator/pull/116)
* [Bug 1885349](https://bugzilla.redhat.com/show_bug.cgi?id=1885349): Inject proxy environment variables everywhere [#109](https://github.com/openshift/cluster-baremetal-operator/pull/109)
* Simplify the rbac roles under common groups if the verbs are the same [#113](https://github.com/openshift/cluster-baremetal-operator/pull/113)
* Allow BMO to watch all Namespaces [#106](https://github.com/openshift/cluster-baremetal-operator/pull/106)
* Add a couple more linters and fix some issues raised [#108](https://github.com/openshift/cluster-baremetal-operator/pull/108)
* Remove the CBO down alert [#111](https://github.com/openshift/cluster-baremetal-operator/pull/111)
* Fix annotations for the prometheus manifests [#110](https://github.com/openshift/cluster-baremetal-operator/pull/110)
* [Bug 1927068](https://bugzilla.redhat.com/show_bug.cgi?id=1927068): provisioning: configure DHCP range with netmask [#104](https://github.com/openshift/cluster-baremetal-operator/pull/104)
* Add POD_NAMESPACE env variable to bmo container [#107](https://github.com/openshift/cluster-baremetal-operator/pull/107)
* [Bug 1906102](https://bugzilla.redhat.com/show_bug.cgi?id=1906102): Add standard metrics support for CBO [#26](https://github.com/openshift/cluster-baremetal-operator/pull/26)
* Update BMH CRD from metal3-io/baremetal-operator [#105](https://github.com/openshift/cluster-baremetal-operator/pull/105)
* Updating ose-cluster-baremetal-operator builder & base images to be consistent with ART [#101](https://github.com/openshift/cluster-baremetal-operator/pull/101)
* Update bmh crd [#100](https://github.com/openshift/cluster-baremetal-operator/pull/100)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/f73e5fcb432e4b847cddec5ce8570f8c5c32e902...7cf2c50d413d323fe1fa8c2f841c752d903eac81)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/1af395b7881d951a824858f5d393357609bddbf0)

* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#60](https://github.com/openshift/cluster-bootstrap/pull/60)
* [Bug 1951639](https://bugzilla.redhat.com/show_bug.cgi?id=1951639): Add --tear-down-delay and --tear-down-termination-timeout [#58](https://github.com/openshift/cluster-bootstrap/pull/58)
* Updating ose-cluster-bootstrap builder & base images to be consistent with ART [#54](https://github.com/openshift/cluster-bootstrap/pull/54)
* [Bug 1933263](https://bugzilla.redhat.com/show_bug.cgi?id=1933263): bump(library-go) [#56](https://github.com/openshift/cluster-bootstrap/pull/56)
* allow bootstrapping to create SCCs [#55](https://github.com/openshift/cluster-bootstrap/pull/55)
* Single Node deployment with bootstrap-in-place [#51](https://github.com/openshift/cluster-bootstrap/pull/51)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/6665cae3374c18d466f11c9e0b8e41a61fcb0819...1af395b7881d951a824858f5d393357609bddbf0)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/c1022410bf9a000e84d9764f8e8a5cfa35cfa452)

* [Bug 1957822](https://bugzilla.redhat.com/show_bug.cgi?id=1957822): bump o/api to get the apiserver.TLSProfile doc update [#206](https://github.com/openshift/cluster-config-operator/pull/206)
* [Bug 1960339](https://bugzilla.redhat.com/show_bug.cgi?id=1960339): openshift-user-critical: unset globalDefault [#205](https://github.com/openshift/cluster-config-operator/pull/205)
* bump(*): openshift/api to pickup updated CRD's [#203](https://github.com/openshift/cluster-config-operator/pull/203)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#198](https://github.com/openshift/cluster-config-operator/pull/198)
* [Bug 1960339](https://bugzilla.redhat.com/show_bug.cgi?id=1960339): manifests: add preemptionPolicy for openshift-user-critical [#202](https://github.com/openshift/cluster-config-operator/pull/202)
* [Bug 1947803](https://bugzilla.redhat.com/show_bug.cgi?id=1947803): quota: switch to v1 crd [#201](https://github.com/openshift/cluster-config-operator/pull/201)
* Rename workload annotations [#194](https://github.com/openshift/cluster-config-operator/pull/194)
* [Bug 1950113](https://bugzilla.redhat.com/show_bug.cgi?id=1950113): vendor: bump to the latest openshift/api [#199](https://github.com/openshift/cluster-config-operator/pull/199)
* [Bug 1878199](https://bugzilla.redhat.com/show_bug.cgi?id=1878199): remove log level normalizer [#197](https://github.com/openshift/cluster-config-operator/pull/197)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#195](https://github.com/openshift/cluster-config-operator/pull/195)
* [Bug 1947800](https://bugzilla.redhat.com/show_bug.cgi?id=1947800): Bump openshift/api (and Kube 1.21 release) [#192](https://github.com/openshift/cluster-config-operator/pull/192)
* Add management workload annotations [#190](https://github.com/openshift/cluster-config-operator/pull/190)
* [Bug 1949145](https://bugzilla.redhat.com/show_bug.cgi?id=1949145): Add missing annotations to upc [#193](https://github.com/openshift/cluster-config-operator/pull/193)
* [Bug 1949145](https://bugzilla.redhat.com/show_bug.cgi?id=1949145): Add user facing priority class [#191](https://github.com/openshift/cluster-config-operator/pull/191)
* Add IBM Cloud managed annotations to CVO manifests [#166](https://github.com/openshift/cluster-config-operator/pull/166)
* pkg/operator/kube_cloud_config: Fix "kuberneted" -> "Kubernetes" doc typo [#172](https://github.com/openshift/cluster-config-operator/pull/172)
* [Bug 1901535](https://bugzilla.redhat.com/show_bug.cgi?id=1901535): Update openshift/api dependency [#187](https://github.com/openshift/cluster-config-operator/pull/187)
* Mark operator pod as system-cluster-critical [#184](https://github.com/openshift/cluster-config-operator/pull/184)
* Updating ose-cluster-config-operator builder & base images to be consistent with ART [#188](https://github.com/openshift/cluster-config-operator/pull/188)
* Updating ose-cluster-config-operator builder & base images to be consistent with ART [#182](https://github.com/openshift/cluster-config-operator/pull/182)
* bump openshift/api to support new field controlPlaneToplogy in [#175](https://github.com/openshift/cluster-config-operator/pull/175)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/07e059a6b0c98e98d71f0c08dc741605e2431914...c1022410bf9a000e84d9764f8e8a5cfa35cfa452)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/07b3f81036401073d68eb1ef152b96ab5e5a2fc6)

* [Bug 1940940](https://bugzilla.redhat.com/show_bug.cgi?id=1940940): Deploy multiple operand replicas [#88](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/88)
* [Bug 1961538](https://bugzilla.redhat.com/show_bug.cgi?id=1961538): manifests/05_operator_rbac: Drop the unused namespace property [#87](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/87)
* [Bug 1951066](https://bugzilla.redhat.com/show_bug.cgi?id=1951066): Remove exclude annotation from manifests to include in ROKS [#81](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/81)
* Add management workload annotations [#84](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/84)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#86](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/86)
* [Bug 1924483](https://bugzilla.redhat.com/show_bug.cgi?id=1924483): Bump Kubernetes to 1.21 [#85](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/85)
* Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART [#83](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/83)
* [Bug 1926444](https://bugzilla.redhat.com/show_bug.cgi?id=1926444): Fix installation on ROKS [#79](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/79)
* Updating ose-cluster-csi-snapshot-controller-operator builder & base images to be consistent with ART [#77](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/77)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/fc036b59b83b25ac6d1050aee0a172abb54502c6...07b3f81036401073d68eb1ef152b96ab5e5a2fc6)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/fdb2ebecdeb992444964f84fd0b5c17f37d80536)

* [Bug 1974978](https://bugzilla.redhat.com/show_bug.cgi?id=1974978): status: Watch daemonsets [#284](https://github.com/openshift/cluster-dns-operator/pull/284)
* [Bug 1951853](https://bugzilla.redhat.com/show_bug.cgi?id=1951853): Bump openshift/api for node placement API godoc fix [#278](https://github.com/openshift/cluster-dns-operator/pull/278)
* [Bug 1939723](https://bugzilla.redhat.com/show_bug.cgi?id=1939723): Don't check node-resolver status for DNS Degraded condition [#273](https://github.com/openshift/cluster-dns-operator/pull/273)
* [Bug 1966116](https://bugzilla.redhat.com/show_bug.cgi?id=1966116): Corefile: Set bufsize to 512 bytes for all servers [#276](https://github.com/openshift/cluster-dns-operator/pull/276)
* [Bug 1952174](https://bugzilla.redhat.com/show_bug.cgi?id=1952174): status: Report old versions while rolling out new [#274](https://github.com/openshift/cluster-dns-operator/pull/274)
* [Bug 1952174](https://bugzilla.redhat.com/show_bug.cgi?id=1952174): status: Report old versions while progressing [#269](https://github.com/openshift/cluster-dns-operator/pull/269)
* Rename workload annotations [#264](https://github.com/openshift/cluster-dns-operator/pull/264)
* [Bug 1948232](https://bugzilla.redhat.com/show_bug.cgi?id=1948232): Fix for daemonset's maxSurge and service's ipFamilies and ipFamilyPolicy defaulting [#263](https://github.com/openshift/cluster-dns-operator/pull/263)
* [Bug 1950270](https://bugzilla.redhat.com/show_bug.cgi?id=1950270): go.mod: Update openshift/api & go version [#265](https://github.com/openshift/cluster-dns-operator/pull/265)
* [Bug 1953280](https://bugzilla.redhat.com/show_bug.cgi?id=1953280): node-resolver: Set owner reference on the dns [#270](https://github.com/openshift/cluster-dns-operator/pull/270)
* [Bug 1946929](https://bugzilla.redhat.com/show_bug.cgi?id=1946929): Fix status reporting for default node placement [#262](https://github.com/openshift/cluster-dns-operator/pull/262)
* [Bug 1949361](https://bugzilla.redhat.com/show_bug.cgi?id=1949361): Corefile: Enable bufsize plugin for all servers [#266](https://github.com/openshift/cluster-dns-operator/pull/266)
* Add management workload annotations [#259](https://github.com/openshift/cluster-dns-operator/pull/259)
* [Bug 1946893](https://bugzilla.redhat.com/show_bug.cgi?id=1946893): update inconsistent error message for AvailableCondition [#258](https://github.com/openshift/cluster-dns-operator/pull/258)
* [Bug 1948708](https://bugzilla.redhat.com/show_bug.cgi?id=1948708): IBM Cloud manifest profile patch [#215](https://github.com/openshift/cluster-dns-operator/pull/215)
* Bump openshift/api, controller runtime, and kube component versions [#257](https://github.com/openshift/cluster-dns-operator/pull/257)
* node-resolver: Use "kubernetes.io/os" node label [#255](https://github.com/openshift/cluster-dns-operator/pull/255)
* Updating ose-cluster-dns-operator builder & base images to be consistent with ART [#249](https://github.com/openshift/cluster-dns-operator/pull/249)
* Add node-resolver daemonset [#209](https://github.com/openshift/cluster-dns-operator/pull/209)
* [Bug 1915473](https://bugzilla.redhat.com/show_bug.cgi?id=1915473): Annotate manifests for single-node-developer cluster profile [#216](https://github.com/openshift/cluster-dns-operator/pull/216)
* [Bug 1943578](https://bugzilla.redhat.com/show_bug.cgi?id=1943578): Corefile: Use 30 second max TTL for caching of negative responses [#253](https://github.com/openshift/cluster-dns-operator/pull/253)
* [Bug 1936022](https://bugzilla.redhat.com/show_bug.cgi?id=1936022): Fix spurious reconciliation of DNS daemonset and service [#243](https://github.com/openshift/cluster-dns-operator/pull/243)
* [NE-515](https://issues.redhat.com/browse/NE-515): Alerts: Update prometheus alert rules for CoreDNS v1.8.z [#239](https://github.com/openshift/cluster-dns-operator/pull/239)
* [Bug 1884053](https://bugzilla.redhat.com/show_bug.cgi?id=1884053): Configure CoreDNS to shut down gracefully [#237](https://github.com/openshift/cluster-dns-operator/pull/237)
* Give CoreDNS access to endpointslices [#244](https://github.com/openshift/cluster-dns-operator/pull/244)
* [Bug 1934905](https://bugzilla.redhat.com/show_bug.cgi?id=1934905): Enable errors plugin for custom upstream resolvers [#241](https://github.com/openshift/cluster-dns-operator/pull/241)
* [Bug 1933761](https://bugzilla.redhat.com/show_bug.cgi?id=1933761): Set CoreDNS's cache's maximum TTL to 900 seconds [#240](https://github.com/openshift/cluster-dns-operator/pull/240)
* [NE-514](https://issues.redhat.com/browse/NE-514): Corefile: Drop deprecated kubernetes `upstream` option [#238](https://github.com/openshift/cluster-dns-operator/pull/238)
* [Bug 1919737](https://bugzilla.redhat.com/show_bug.cgi?id=1919737): Set CoreDNS readiness probe period and timeout each to 3 seconds [#234](https://github.com/openshift/cluster-dns-operator/pull/234)
* Updating ose-cluster-dns-operator builder & base images to be consistent with ART [#233](https://github.com/openshift/cluster-dns-operator/pull/233)
* Add rfredette to OWNERS [#224](https://github.com/openshift/cluster-dns-operator/pull/224)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/cf8be7b279499d5010894b8c9bf79acc9853be36...fdb2ebecdeb992444964f84fd0b5c17f37d80536)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/35672edef2c867e135b0e9378a00764b363d8ba5)

* [Bug 2008414](https://bugzilla.redhat.com/show_bug.cgi?id=2008414): pkg/operator/metriccontroller: read etcd-operator SA token rather than using prometheus [#665](https://github.com/openshift/cluster-etcd-operator/pull/665)
* [Bug 1994483](https://bugzilla.redhat.com/show_bug.cgi?id=1994483): bindata/etcd: remove unix socket from advertised list [#642](https://github.com/openshift/cluster-etcd-operator/pull/642)
* [Bug 1999777](https://bugzilla.redhat.com/show_bug.cgi?id=1999777): [release-4.8]: pkg/operator: add cluster backup upgrade controller [#652](https://github.com/openshift/cluster-etcd-operator/pull/652)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#648](https://github.com/openshift/cluster-etcd-operator/pull/648)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): kube-apiserver failed to load SNI cert and key [#610](https://github.com/openshift/cluster-etcd-operator/pull/610)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): Improve etcd service observability and health checks [#596](https://github.com/openshift/cluster-etcd-operator/pull/596)
* [Bug 1965024](https://bugzilla.redhat.com/show_bug.cgi?id=1965024): Validate the status of the etcd snapshot during backup and restore [#603](https://github.com/openshift/cluster-etcd-operator/pull/603)
* [Bug 1966813](https://bugzilla.redhat.com/show_bug.cgi?id=1966813): Update the flowchart to accommodate modified logic [#601](https://github.com/openshift/cluster-etcd-operator/pull/601)
* [Bug 1924422](https://bugzilla.redhat.com/show_bug.cgi?id=1924422): go.mod, go.sum: Replace gogo/protobuf with v1.3.2 [#608](https://github.com/openshift/cluster-etcd-operator/pull/608)
* [Bug 1963871](https://bugzilla.redhat.com/show_bug.cgi?id=1963871): bump(*): Update the go version to 1.16 [#602](https://github.com/openshift/cluster-etcd-operator/pull/602)
* [Bug 1963871](https://bugzilla.redhat.com/show_bug.cgi?id=1963871): .ci-operator.yaml: Use golang-1.15 tag [#607](https://github.com/openshift/cluster-etcd-operator/pull/607)
* [Bug 1963871](https://bugzilla.redhat.com/show_bug.cgi?id=1963871): Move back to Golang 1.15 as in o/release [#599](https://github.com/openshift/cluster-etcd-operator/pull/599)
* Revert "Bug 1957498: Update policy.v1beta1 to v1 as it is deprecated in v1.21" [#592](https://github.com/openshift/cluster-etcd-operator/pull/592)
* [Bug 1902247](https://bugzilla.redhat.com/show_bug.cgi?id=1902247): pkg/dnshelpers: cleanup dead code [#591](https://github.com/openshift/cluster-etcd-operator/pull/591)
* [Bug 1958245](https://bugzilla.redhat.com/show_bug.cgi?id=1958245): etcd/pod: print static pod revision in logs [#586](https://github.com/openshift/cluster-etcd-operator/pull/586)
* [Bug 1957498](https://bugzilla.redhat.com/show_bug.cgi?id=1957498): Update policy.v1beta1 to v1 as it is deprecated in v1.21 [#589](https://github.com/openshift/cluster-etcd-operator/pull/589)
* [Bug 1902247](https://bugzilla.redhat.com/show_bug.cgi?id=1902247): pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork [#587](https://github.com/openshift/cluster-etcd-operator/pull/587)
* docs: Initial documentation for discover init cluster along with a flowchart [#585](https://github.com/openshift/cluster-etcd-operator/pull/585)
* [Bug 1946607](https://bugzilla.redhat.com/show_bug.cgi?id=1946607): bindata/etcd: improve readinessProbe checks by dialing unix socket target [#580](https://github.com/openshift/cluster-etcd-operator/pull/580)
* [Bug 1952268](https://bugzilla.redhat.com/show_bug.cgi?id=1952268): Increase inertia duration for the EtcdMembersDegraded condition [#579](https://github.com/openshift/cluster-etcd-operator/pull/579)
* [Bug 1952684](https://bugzilla.redhat.com/show_bug.cgi?id=1952684): pkg/operator/metriccontroller: check vector length [#584](https://github.com/openshift/cluster-etcd-operator/pull/584)
* OWNERS: add lilic as reviewer [#583](https://github.com/openshift/cluster-etcd-operator/pull/583)
* [Bug 1952684](https://bugzilla.redhat.com/show_bug.cgi?id=1952684): pkg/operator/metriccontroller: dont panic on invalid response from prom client [#573](https://github.com/openshift/cluster-etcd-operator/pull/573)
* [Bug 1952266](https://bugzilla.redhat.com/show_bug.cgi?id=1952266): Don't set operator version before operands update [#576](https://github.com/openshift/cluster-etcd-operator/pull/576)
* Rename workload annotations [#569](https://github.com/openshift/cluster-etcd-operator/pull/569)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#574](https://github.com/openshift/cluster-etcd-operator/pull/574)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#570](https://github.com/openshift/cluster-etcd-operator/pull/570)
* [Bug 1950934](https://bugzilla.redhat.com/show_bug.cgi?id=1950934): pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout [#567](https://github.com/openshift/cluster-etcd-operator/pull/567)
* Add management workload annotations [#560](https://github.com/openshift/cluster-etcd-operator/pull/560)
* [Bug 1949418](https://bugzilla.redhat.com/show_bug.cgi?id=1949418): bump(*): vendor update [#564](https://github.com/openshift/cluster-etcd-operator/pull/564)
* [Bug 1948553](https://bugzilla.redhat.com/show_bug.cgi?id=1948553): bindata, pkg: Propagate operator log level to etcd itself [#561](https://github.com/openshift/cluster-etcd-operator/pull/561)
* vendor: bump k8s v0.21.0-rc.0 [#563](https://github.com/openshift/cluster-etcd-operator/pull/563)
* [Bug 1948040](https://bugzilla.redhat.com/show_bug.cgi?id=1948040): *: enable zap as default logger [#562](https://github.com/openshift/cluster-etcd-operator/pull/562)
* [Bug 1927942](https://bugzilla.redhat.com/show_bug.cgi?id=1927942): pkg/etcdenvvar: enable SO_REUSEADDR [#553](https://github.com/openshift/cluster-etcd-operator/pull/553)
* Updating cluster-etcd-operator builder & base images to be consistent with ART [#557](https://github.com/openshift/cluster-etcd-operator/pull/557)
* update library-go to fix tight loops [#558](https://github.com/openshift/cluster-etcd-operator/pull/558)
* [Bug 1931658](https://bugzilla.redhat.com/show_bug.cgi?id=1931658): render: refactor scaling strategies [#547](https://github.com/openshift/cluster-etcd-operator/pull/547)
* Remove deprecated render options and remove default [#552](https://github.com/openshift/cluster-etcd-operator/pull/552)
* Remove unused render command options and configuration [#549](https://github.com/openshift/cluster-etcd-operator/pull/549)
* Migrate tls bootstrap from the installer [#546](https://github.com/openshift/cluster-etcd-operator/pull/546)
* pkg/etcdenvvar: set periodical watch progress notification to 5s [#548](https://github.com/openshift/cluster-etcd-operator/pull/548)
* Manage one aggregated cert secret rather than one per cert type [#544](https://github.com/openshift/cluster-etcd-operator/pull/544)
* switch to v1beta1 for the p&f APIs [#516](https://github.com/openshift/cluster-etcd-operator/pull/516)
* Refactor creation of aggregated cert secrets [#542](https://github.com/openshift/cluster-etcd-operator/pull/542)
* [Bug 1929359](https://bugzilla.redhat.com/show_bug.cgi?id=1929359): pkg/operator/quorumguardcontroller: use cli image from release payload [#543](https://github.com/openshift/cluster-etcd-operator/pull/543)
* Improve cert controller detection and correction of invalid certs [#540](https://github.com/openshift/cluster-etcd-operator/pull/540)
* Adding single node ocp cluster support [#527](https://github.com/openshift/cluster-etcd-operator/pull/527)
* Updating cluster-etcd-operator builder & base images to be consistent with ART [#538](https://github.com/openshift/cluster-etcd-operator/pull/538)
* [Bug 1925586](https://bugzilla.redhat.com/show_bug.cgi?id=1925586): pkg/operator/metriccontroller: cleanup transports [#534](https://github.com/openshift/cluster-etcd-operator/pull/534)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/51cb8c4147c45672c9645fae39bfcc6d696adc85...35672edef2c867e135b0e9378a00764b363d8ba5)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/d013f54bff415d4f7447333429f015611b31e612)

* [Bug 2067107](https://bugzilla.redhat.com/show_bug.cgi?id=2067107): Retry on pruner failures [#761](https://github.com/openshift/cluster-image-registry-operator/pull/761)
* [Bug 2015098](https://bugzilla.redhat.com/show_bug.cgi?id=2015098): Avoid disruptions [#725](https://github.com/openshift/cluster-image-registry-operator/pull/725)
* [Bug 2004028](https://bugzilla.redhat.com/show_bug.cgi?id=2004028): Update rolling update parameters [#717](https://github.com/openshift/cluster-image-registry-operator/pull/717)
* [Bug 1973662](https://bugzilla.redhat.com/show_bug.cgi?id=1973662): Properly set custom tolerations [#696](https://github.com/openshift/cluster-image-registry-operator/pull/696)
* Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#673](https://github.com/openshift/cluster-image-registry-operator/pull/673)
* [Bug 1918376](https://bugzilla.redhat.com/show_bug.cgi?id=1918376): Allowing system:registry to list ICSP rules [#668](https://github.com/openshift/cluster-image-registry-operator/pull/668)
* [Bug 1966459](https://bugzilla.redhat.com/show_bug.cgi?id=1966459): Use batch/v1 and policy/v1 [#691](https://github.com/openshift/cluster-image-registry-operator/pull/691)
* [Bug 1937464](https://bugzilla.redhat.com/show_bug.cgi?id=1937464): Swift: Do not modify driver config [#674](https://github.com/openshift/cluster-image-registry-operator/pull/674)
* [Bug 1952610](https://bugzilla.redhat.com/show_bug.cgi?id=1952610): Bump dependencies [#685](https://github.com/openshift/cluster-image-registry-operator/pull/685)
* [Bug 1960330](https://bugzilla.redhat.com/show_bug.cgi?id=1960330): manifests: fix selector in image-registry-operator [#688](https://github.com/openshift/cluster-image-registry-operator/pull/688)
* [Bug 1954891](https://bugzilla.redhat.com/show_bug.cgi?id=1954891): Setting PriorityClassName for pruner cronjob [#687](https://github.com/openshift/cluster-image-registry-operator/pull/687)
* [IR-181](https://issues.redhat.com/browse/IR-181): Use only one replica on single node clusters [#670](https://github.com/openshift/cluster-image-registry-operator/pull/670)
* [Bug 1945387](https://bugzilla.redhat.com/show_bug.cgi?id=1945387): Setting required pod anti-affinity rules [#681](https://github.com/openshift/cluster-image-registry-operator/pull/681)
* [Bug 1955879](https://bugzilla.redhat.com/show_bug.cgi?id=1955879): Setting user tags always when Storage is Managed [#683](https://github.com/openshift/cluster-image-registry-operator/pull/683)
* Add management workload annotations [#677](https://github.com/openshift/cluster-image-registry-operator/pull/677)
* [Bug 1954095](https://bugzilla.redhat.com/show_bug.cgi?id=1954095): Setting user provided tags on bucket creation [#679](https://github.com/openshift/cluster-image-registry-operator/pull/679)
* [Bug 1948714](https://bugzilla.redhat.com/show_bug.cgi?id=1948714): IBM Cloud manifest profile patch [#643](https://github.com/openshift/cluster-image-registry-operator/pull/643)
* [Bug 1923811](https://bugzilla.redhat.com/show_bug.cgi?id=1923811): Report ready replicas [#669](https://github.com/openshift/cluster-image-registry-operator/pull/669)
* [Bug 1944762](https://bugzilla.redhat.com/show_bug.cgi?id=1944762): Allow disruptions when operand has only one replica [#676](https://github.com/openshift/cluster-image-registry-operator/pull/676)
* [Bug 1939731](https://bugzilla.redhat.com/show_bug.cgi?id=1939731): Add PodDisruptionBudget for image-registry [#671](https://github.com/openshift/cluster-image-registry-operator/pull/671)
* Add service account names to credentials request manifest [#664](https://github.com/openshift/cluster-image-registry-operator/pull/664)
* [Bug 1933180](https://bugzilla.redhat.com/show_bug.cgi?id=1933180): Allow more node-ca unavailable replicas during upgrade [#667](https://github.com/openshift/cluster-image-registry-operator/pull/667)
* [Bug 1929654](https://bugzilla.redhat.com/show_bug.cgi?id=1929654): Creating StorageAccount V2 instead of V1 [#665](https://github.com/openshift/cluster-image-registry-operator/pull/665)
* Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART [#663](https://github.com/openshift/cluster-image-registry-operator/pull/663)
* [Bug 1902076](https://bugzilla.redhat.com/show_bug.cgi?id=1902076): Checking for route status [#660](https://github.com/openshift/cluster-image-registry-operator/pull/660)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/70a85883e406641339251b5c1473e4dec7083928...d013f54bff415d4f7447333429f015611b31e612)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f03d5e4a4ed014035ef97f86c70be30c69243015)

* [Bug 2066302](https://bugzilla.redhat.com/show_bug.cgi?id=2066302): Disable keepalive for canary probe [#726](https://github.com/openshift/cluster-ingress-operator/pull/726)
* [Bug 2017708](https://bugzilla.redhat.com/show_bug.cgi?id=2017708): Change default balancing algorithm to "leastconn" [#670](https://github.com/openshift/cluster-ingress-operator/pull/670)
* [Bug 1998103](https://bugzilla.redhat.com/show_bug.cgi?id=1998103): cleanup condition metrics for deleted ingress controllers [#649](https://github.com/openshift/cluster-ingress-operator/pull/649)
* [Bug 2000414](https://bugzilla.redhat.com/show_bug.cgi?id=2000414): Configure router to use "source" for passthrough [#651](https://github.com/openshift/cluster-ingress-operator/pull/651)
* [Bug 1935058](https://bugzilla.redhat.com/show_bug.cgi?id=1935058): Set AWS session region [#623](https://github.com/openshift/cluster-ingress-operator/pull/623)
* [Bug 1960284](https://bugzilla.redhat.com/show_bug.cgi?id=1960284): Set the "local-with-fallback" service annotation [#622](https://github.com/openshift/cluster-ingress-operator/pull/622)
* [Bug 1955822](https://bugzilla.redhat.com/show_bug.cgi?id=1955822): Ingress: Mount router stats secret as a volume [#621](https://github.com/openshift/cluster-ingress-operator/pull/621)
* [Bug 1881210](https://bugzilla.redhat.com/show_bug.cgi?id=1881210): desiredNodePortService: Add port 1936 [#466](https://github.com/openshift/cluster-ingress-operator/pull/466)
* [Bug 1901648](https://bugzilla.redhat.com/show_bug.cgi?id=1901648): Canonical router hostname not correct [#610](https://github.com/openshift/cluster-ingress-operator/pull/610)
* [Bug 1954892](https://bugzilla.redhat.com/show_bug.cgi?id=1954892): canary: Add priority class to canary daemonset [#620](https://github.com/openshift/cluster-ingress-operator/pull/620)
* [Bug 1959194](https://bugzilla.redhat.com/show_bug.cgi?id=1959194): Ingress rollouts should specify minReadySeconds [#569](https://github.com/openshift/cluster-ingress-operator/pull/569)
* [Bug 1949799](https://bugzilla.redhat.com/show_bug.cgi?id=1949799): Set maximum for ingresscontroller spec.tuningOptions.threadCount to 64 [#612](https://github.com/openshift/cluster-ingress-operator/pull/612)
* [Bug 1954330](https://bugzilla.redhat.com/show_bug.cgi?id=1954330): ingress: Fix up openshift-ingress namespace reconciliation [#611](https://github.com/openshift/cluster-ingress-operator/pull/611)
* [Bug 1955854](https://bugzilla.redhat.com/show_bug.cgi?id=1955854): Compute Available and Degraded from default ingress [#607](https://github.com/openshift/cluster-ingress-operator/pull/607)
* [Bug 1900819](https://bugzilla.redhat.com/show_bug.cgi?id=1900819): Specify topology spread constraints [#577](https://github.com/openshift/cluster-ingress-operator/pull/577)
* [Bug 1954330](https://bugzilla.redhat.com/show_bug.cgi?id=1954330): Reconcile openshift-ingress namespace on upgrade [#608](https://github.com/openshift/cluster-ingress-operator/pull/608)
* Rename workload annotations [#603](https://github.com/openshift/cluster-ingress-operator/pull/603)
* [Bug 1950270](https://bugzilla.redhat.com/show_bug.cgi?id=1950270): go.mod: Update openshift/api & go version [#604](https://github.com/openshift/cluster-ingress-operator/pull/604)
* [Bug 1950978](https://bugzilla.redhat.com/show_bug.cgi?id=1950978): ingressclass: Handle ingresscontroller deletion [#605](https://github.com/openshift/cluster-ingress-operator/pull/605)
* [Bug 1950284](https://bugzilla.redhat.com/show_bug.cgi?id=1950284): Annotate services of type LoadBalancer with user tags (AWS only) [#578](https://github.com/openshift/cluster-ingress-operator/pull/578)
* [Bug 1941592](https://bugzilla.redhat.com/show_bug.cgi?id=1941592): Alerts: Fix up HAProxyDown Alert Message [#597](https://github.com/openshift/cluster-ingress-operator/pull/597)
* Updating ose-cluster-ingress-operator builder & base images to be consistent with ART [#579](https://github.com/openshift/cluster-ingress-operator/pull/579)
* [Bug 1947498](https://bugzilla.redhat.com/show_bug.cgi?id=1947498): policy v1 beta1 PodDisruptionBudget is deprecated [#602](https://github.com/openshift/cluster-ingress-operator/pull/602)
* [Bug 1949435](https://bugzilla.redhat.com/show_bug.cgi?id=1949435): ingressclass: Fix API group name in watch predicate [#600](https://github.com/openshift/cluster-ingress-operator/pull/600)
* [Bug 1949880](https://bugzilla.redhat.com/show_bug.cgi?id=1949880): ingress: Propagate GCP ProviderParameters to Status [#599](https://github.com/openshift/cluster-ingress-operator/pull/599)
* [Bug 1919151](https://bugzilla.redhat.com/show_bug.cgi?id=1919151): Azure: Log when using domain not in zone [#537](https://github.com/openshift/cluster-ingress-operator/pull/537)
* [Bug 1948716](https://bugzilla.redhat.com/show_bug.cgi?id=1948716): IBM cloud managed profile patch [#587](https://github.com/openshift/cluster-ingress-operator/pull/587)
* [Bug 1948626](https://bugzilla.redhat.com/show_bug.cgi?id=1948626): test/e2e: Make `TestRouteAdmissionPolicy` deterministic. [#598](https://github.com/openshift/cluster-ingress-operator/pull/598)
* Add management workload annotations [#595](https://github.com/openshift/cluster-ingress-operator/pull/595)
* [NE-302](https://issues.redhat.com/browse/NE-302): Add field for configuring number of HAProxy threads in router [#580](https://github.com/openshift/cluster-ingress-operator/pull/580)
* Add h2spec client subcommand [#590](https://github.com/openshift/cluster-ingress-operator/pull/590)
* configurable_route_test: Preserve ingress spec [#593](https://github.com/openshift/cluster-ingress-operator/pull/593)
* [Bug 1946788](https://bugzilla.redhat.com/show_bug.cgi?id=1946788): ingressclass: Don't set default annotation [#592](https://github.com/openshift/cluster-ingress-operator/pull/592)
* ingressclass: New controller. [#574](https://github.com/openshift/cluster-ingress-operator/pull/574)
* [NE-551](https://issues.redhat.com/browse/NE-551): Configure router to use Power of Two Random Choices with Override [#589](https://github.com/openshift/cluster-ingress-operator/pull/589)
* [Bug 1943845](https://bugzilla.redhat.com/show_bug.cgi?id=1943845): Add startup probe to the router deployment [#583](https://github.com/openshift/cluster-ingress-operator/pull/583)
* Add http/2 and gRPC test server code as new subcommands [#585](https://github.com/openshift/cluster-ingress-operator/pull/585)
* Add the new NetworkPolicy-matching label to the namespace [#586](https://github.com/openshift/cluster-ingress-operator/pull/586)
* Introduce ingress controller [#552](https://github.com/openshift/cluster-ingress-operator/pull/552)
* [NE-553](https://issues.redhat.com/browse/NE-553): Implement the PROXY protocol API [#581](https://github.com/openshift/cluster-ingress-operator/pull/581)
* Add service account names to credentials request manifest [#548](https://github.com/openshift/cluster-ingress-operator/pull/548)
* [NE-354](https://issues.redhat.com/browse/NE-354): Implement Tunable router header buffers [#576](https://github.com/openshift/cluster-ingress-operator/pull/576)
* [Bug 1907315](https://bugzilla.redhat.com/show_bug.cgi?id=1907315): Change AWS interal LB annotation to match documentation [#543](https://github.com/openshift/cluster-ingress-operator/pull/543)
* [Bug 1928931](https://bugzilla.redhat.com/show_bug.cgi?id=1928931): Update DNSRecord CRD from v1beta1 to v1 [#575](https://github.com/openshift/cluster-ingress-operator/pull/575)
* NE 484: Use ingress-operator subcommand instead of hello-openshift [#561](https://github.com/openshift/cluster-ingress-operator/pull/561)
* Use HAProxy log level "info" to enable access logs [#572](https://github.com/openshift/cluster-ingress-operator/pull/572)
* [Bug 1936030](https://bugzilla.redhat.com/show_bug.cgi?id=1936030): Fix spurious reconciliation of NodePort services [#567](https://github.com/openshift/cluster-ingress-operator/pull/567)
* NE-518 GCP: Implement GCP Internal LB Global Access option [#550](https://github.com/openshift/cluster-ingress-operator/pull/550)
* [Bug 1935528](https://bugzilla.redhat.com/show_bug.cgi?id=1935528): Canary: Use cluster-wide proxy for canary client [#565](https://github.com/openshift/cluster-ingress-operator/pull/565)
* [Bug 1934773](https://bugzilla.redhat.com/show_bug.cgi?id=1934773): Canary: Perform canary test probes over https [#562](https://github.com/openshift/cluster-ingress-operator/pull/562)
* [Bug 1933102](https://bugzilla.redhat.com/show_bug.cgi?id=1933102): Canary: Schedule canary server pods to worker and infra nodes [#560](https://github.com/openshift/cluster-ingress-operator/pull/560)
* [Bug 1932401](https://bugzilla.redhat.com/show_bug.cgi?id=1932401): Canary: Add edge termination to canary route [#556](https://github.com/openshift/cluster-ingress-operator/pull/556)
* [Bug 1914127](https://bugzilla.redhat.com/show_bug.cgi?id=1914127): Delete the ingress.openshift.io/operator finalizer [#549](https://github.com/openshift/cluster-ingress-operator/pull/549)
* [Bug 1925245](https://bugzilla.redhat.com/show_bug.cgi?id=1925245): Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. [#542](https://github.com/openshift/cluster-ingress-operator/pull/542)
* Updating ose-cluster-ingress-operator builder & base images to be consistent with ART [#544](https://github.com/openshift/cluster-ingress-operator/pull/544)
* Add rfredette to OWNERS [#513](https://github.com/openshift/cluster-ingress-operator/pull/513)
* NE-508 Support cluster HA mode [#519](https://github.com/openshift/cluster-ingress-operator/pull/519)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b86f935f5e693f48dbf6ec23a490422b6e295eb7...f03d5e4a4ed014035ef97f86c70be30c69243015)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/25c54939bdd02bc8e68f1329fa3ebe16904b3282)

* [Bug 2026089](https://bugzilla.redhat.com/show_bug.cgi?id=2026089): library-go bump [#1320](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1320)
* [Bug 2016213](https://bugzilla.redhat.com/show_bug.cgi?id=2016213): Exempt metrics scrapes from APF. [#1247](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1247)
* [Bug 2012010](https://bugzilla.redhat.com/show_bug.cgi?id=2012010): alerts: give exact oc get apirequestcounts command in APIRemovedInNextReleaseInUse alert [#1241](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1241)
* [Bug 2001244](https://bugzilla.redhat.com/show_bug.cgi?id=2001244): Enforce OpenShift's defined kubelet version skew policies [#1224](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1224)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): bump(library-go): staticpod/installer: fix backoff of installers [#1214](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1214)
* [Bug 1979303](https://bugzilla.redhat.com/show_bug.cgi?id=1979303): clear encryption conditions when there is no work to be done [#1188](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1188)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): kube-apiserver failed to load SNI cert and key [#1153](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1153)
* [Bug 1974773](https://bugzilla.redhat.com/show_bug.cgi?id=1974773): SA token issuer observer: fix observing api-audiences [#1160](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1160)
* [Bug 1972768](https://bugzilla.redhat.com/show_bug.cgi?id=1972768): add sigterm handler to insecurereadyz [#1154](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1154)
* [Bug 1921139](https://bugzilla.redhat.com/show_bug.cgi?id=1921139): remove override for fast cert rotation for release [#1143](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1143)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): inject SA tokens as projected volumes to KAS install and prune pods [#1142](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1142)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): Fix incorrect 'scope' label in SLO recording rules [#1144](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1144)
* [Bug 1907309](https://bugzilla.redhat.com/show_bug.cgi?id=1907309): Add APF StorageVersionMigration manifest [#1139](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1139)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): alert: exclude kcm samples from removed API alerts [#1141](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1141)
* [Bug 1967090](https://bugzilla.redhat.com/show_bug.cgi?id=1967090): Revert webhookauth observer: set cache TTL to 30s [#1140](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1140)
* [Bug 1967090](https://bugzilla.redhat.com/show_bug.cgi?id=1967090): webhookauth observer: set cache TTL to 30s [#1129](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1129)
* [Bug 1956606](https://bugzilla.redhat.com/show_bug.cgi?id=1956606): Revert "Merge pull request #1060" (Use the flow schema introduced in upstream) [#1099](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1099)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): Add apiserver burn rate SLO alerts [#1126](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1126)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): Bump library-go for unrevisioned resourcs [#1136](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1136)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): increases termination timeouts for AWS [#1079](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1079)
* [Bug 1957645](https://bugzilla.redhat.com/show_bug.cgi?id=1957645): avoid warm loop for writing prometheus rules [#1127](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1127)
* [Bug 1961173](https://bugzilla.redhat.com/show_bug.cgi?id=1961173): bump(*): library-go update [#1132](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1132)
* Set proper root image in .ci-operator.yaml [#1134](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1134)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): split encryption tests [#1131](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1131)
* fixup ci-operator.yaml [#1133](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1133)
* [Bug 1959513](https://bugzilla.redhat.com/show_bug.cgi?id=1959513): add default policy, use lib go audit [#1089](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1089)
* [Bug 1958094](https://bugzilla.redhat.com/show_bug.cgi?id=1958094): Add flock to kube-apiserver startup [#1128](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1128)
* Add a nominal request to the kube-apiserver init container [#1124](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1124)
* [Bug 1954937](https://bugzilla.redhat.com/show_bug.cgi?id=1954937): update printer columns for apirequestcounts [#1123](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1123)
* [Bug 1956081](https://bugzilla.redhat.com/show_bug.cgi?id=1956081): Update bootstrap manifest namespace for SNO compatibility [#1125](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1125)
* [Bug 1955226](https://bugzilla.redhat.com/show_bug.cgi?id=1955226): update library-go to avoid CRD update loop [#1121](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1121)
* [Bug 1955256](https://bugzilla.redhat.com/show_bug.cgi?id=1955256): stop collecting deprecateapicount [#1122](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1122)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): stop doing live gets for optional cert syncer files that don't exist on disk yet [#1120](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1120)
* Rename workload annotations [#1111](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1111)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): stop created deprecateapirequests [#1115](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1115)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#1116](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1116)
* [Bug 1951637](https://bugzilla.redhat.com/show_bug.cgi?id=1951637): don't roll a new revision on tokentimeout changes [#1109](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1109)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#1110](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1110)
* [Bug 1949956](https://bugzilla.redhat.com/show_bug.cgi?id=1949956): add minreadyseconds to ensure we don't have an LB outage on kas [#1091](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1091)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): collect new style counts [#1107](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1107)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): switch APIRequestCount from DeprecatedAPIRequest [#1106](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1106)
* [Bug 1949591](https://bugzilla.redhat.com/show_bug.cgi?id=1949591): tweak removed api in use alert expression [#1044](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1044)
* Add management workload annotations [#1095](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1095)
* [Bug 1932165](https://bugzilla.redhat.com/show_bug.cgi?id=1932165): variables in DeprecatedAPIInUse alert's annotations.message are not parsed to existing values [#1055](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1055)
* [Bug 1949418](https://bugzilla.redhat.com/show_bug.cgi?id=1949418): bump(*): vendor update [#1103](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1103)
* [Bug 1949593](https://bugzilla.redhat.com/show_bug.cgi?id=1949593): rename DeprecatedAPIInUse alert to APIRemovedInNextReleaseInUse [#1045](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1045)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): add deprecated CRD manifest [#1102](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1102)
* [Bug 1948431](https://bugzilla.redhat.com/show_bug.cgi?id=1948431): Bump openshift/api to get the necessary CSIMigration feature gates [#1098](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1098)
* Update DeprecatedAPIInUse alert for new release. [#1092](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1092)
* bump(k8s.io/*): 1.21 [#1080](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1080)
* [Bug 1909600](https://bugzilla.redhat.com/show_bug.cgi?id=1909600): static-pods: retry failed installers [#1035](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1035)
* [Bug 1939226](https://bugzilla.redhat.com/show_bug.cgi?id=1939226): make kube-apiserver readiness checks, check readyz [#1065](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1065)
* Updating ose-cluster-kube-apiserver-operator builder & base images to be consistent with ART [#1039](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1039)
* [Bug 1937916](https://bugzilla.redhat.com/show_bug.cgi?id=1937916): add a flowschema to ensure that probes never get 429s [#1060](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1060)
* e2e token timeouts: remove the test that moved to CAO [#1076](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1076)
* config api-audiences along with SA issuer [#1050](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1050)
* [Bug 1939227](https://bugzilla.redhat.com/show_bug.cgi?id=1939227): make liveness hit livez [#1066](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1066)
* switch to v1beta1 for the p&f APIs [#1028](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1028)
* make KAS-o upgradable even when webhook authenticators are set [#1052](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1052)
* token inactivity e2e: wait for KAS to stop progressing [#1047](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1047)
* render initial SCC in addition to having the CVO reconcile [#1049](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1049)
* bump to get latest openshift api [#1048](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1048)
* clean up: uses a static encryption provider form the library-go [#1043](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1043)
* add DeprecatedAPIInUse alert [#1018](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1018)
* Speed up port reuse via SO_REUSEADDR [#1046](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1046)
* add rolebinding for delegated in-cluster authentication [#1038](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1038)
* [Bug 1926465](https://bugzilla.redhat.com/show_bug.cgi?id=1926465): bootstrap: add --advertise-address=pod.status.hostIP [#1040](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1040)
* [Bug 1926867](https://bugzilla.redhat.com/show_bug.cgi?id=1926867): competing connectivitycheckcontrollers cause pod restarts during upgrades [#1036](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1036)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/099c6afa1f8b4fe7654207f7eabd7784b42ce2e3...25c54939bdd02bc8e68f1329fa3ebe16904b3282)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c)

* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#560](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/560)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): allow upgraded clusters to use the vulnerable service-ca.crt [#549](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/549)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): kube-apiserver failed to load SNI cert and key [#532](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/532)
* [Bug 1938636](https://bugzilla.redhat.com/show_bug.cgi?id=1938636): Set logLevel for policy and recovery controllers [#511](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/511)
* [Bug 1954790](https://bugzilla.redhat.com/show_bug.cgi?id=1954790): pdb: Increase PDBAtLimit timeout [#534](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/534)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): manifests: use manual service account mounts [#531](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/531)
* [Bug 1954790](https://bugzilla.redhat.com/show_bug.cgi?id=1954790): Use appropriate metric for PDB alerts [#527](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/527)
* [Bug 1966126](https://bugzilla.redhat.com/show_bug.cgi?id=1966126): manifests: drop root_ca_cert_publisher_sync_duration_seconds metric [#526](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/526)
* [Bug 1963079](https://bugzilla.redhat.com/show_bug.cgi?id=1963079): a smoke test for preferred host for KCM [#510](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/510)
* [Bug 1961173](https://bugzilla.redhat.com/show_bug.cgi?id=1961173): bump(*): vendor update [#524](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/524)
* Rename workload annotations [#521](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/521)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Makefile: add verify-golang-versions [#523](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/523)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#522](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/522)
* Add management workload annotations [#516](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/516)
* [Bug 1949418](https://bugzilla.redhat.com/show_bug.cgi?id=1949418): bump(*): vendor update [#519](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/519)
* Remove tnozicka from OWNERS [#502](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/502)
* [Bug 1948431](https://bugzilla.redhat.com/show_bug.cgi?id=1948431): Bump openshift api version to get CSIMigrationXXX feature gates [#518](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/518)
* bump(k8s.io/*): 1.21 [#515](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/515)
* update library-go to fix tight loops [#514](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/514)
* Migrate to using keypair generation and validation from library-go [#512](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/512)
* Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART [#513](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/513)
* defines test-e2e-preferred-host job for running smoke tests to check if KCM talks to Kube over a preferred host [#509](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/509)
* [Bug 1934132](https://bugzilla.redhat.com/show_bug.cgi?id=1934132): Bump github.com/gogo/protobuf to v1.3.2 [#507](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/507)
* [Bug 1844989](https://bugzilla.redhat.com/show_bug.cgi?id=1844989): Allow to set --tls-cipher-suites and --tls-min-version of KCM instances through observed config [#506](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/506)
* Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART [#504](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/504)
* [Bug 1911211](https://bugzilla.redhat.com/show_bug.cgi?id=1911211): Update build-machinery-go to the latest master HEAD [#505](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/505)
* fixes Developing and debugging the operator section in the readme file. [#503](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/281590936f3a94d4ae1eb008709fda6614fe763b...7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/1b3b34440de93395c46c7a6526be9870e8914ce8)

* [Bug 2026110](https://bugzilla.redhat.com/show_bug.cgi?id=2026110): Disable balancedAllocation and add weight for HighNodeUtilization profile [#380](https://github.com/openshift/cluster-kube-scheduler-operator/pull/380)
* [Bug 1993800](https://bugzilla.redhat.com/show_bug.cgi?id=1993800): Bump library-go to include backoff fix of installers [#366](https://github.com/openshift/cluster-kube-scheduler-operator/pull/366)
* [Bug 1963730](https://bugzilla.redhat.com/show_bug.cgi?id=1963730): kube-apiserver failed to load SNI cert and key [#354](https://github.com/openshift/cluster-kube-scheduler-operator/pull/354)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): use manual service account tokens [#355](https://github.com/openshift/cluster-kube-scheduler-operator/pull/355)
* Added more complete unit tests [#352](https://github.com/openshift/cluster-kube-scheduler-operator/pull/352)
* [Bug 1963079](https://bugzilla.redhat.com/show_bug.cgi?id=1963079): Add e2e test for preferred host [#351](https://github.com/openshift/cluster-kube-scheduler-operator/pull/351)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Enable golang version verify target [#349](https://github.com/openshift/cluster-kube-scheduler-operator/pull/349)
* Transfer root-image configuration to this repository [#350](https://github.com/openshift/cluster-kube-scheduler-operator/pull/350)
* [Bug 1954087](https://bugzilla.redhat.com/show_bug.cgi?id=1954087): added test for manage config maps in targetconfigcontroller [#346](https://github.com/openshift/cluster-kube-scheduler-operator/pull/346)
* Rename workload annotations [#347](https://github.com/openshift/cluster-kube-scheduler-operator/pull/347)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#348](https://github.com/openshift/cluster-kube-scheduler-operator/pull/348)
* Add management workload annotations [#343](https://github.com/openshift/cluster-kube-scheduler-operator/pull/343)
* [Bug 1949364](https://bugzilla.redhat.com/show_bug.cgi?id=1949364): Mention scheduling profiles [#345](https://github.com/openshift/cluster-kube-scheduler-operator/pull/345)
* [Bug 1948431](https://bugzilla.redhat.com/show_bug.cgi?id=1948431): Bump openshift/api to get the necessary CSIMigration feature gates [#344](https://github.com/openshift/cluster-kube-scheduler-operator/pull/344)
* passing additional args to kubernetes-scheduler [#336](https://github.com/openshift/cluster-kube-scheduler-operator/pull/336)
* servicemonitor: Relabel kube_pod_resource_* pod/namespace labels [#340](https://github.com/openshift/cluster-kube-scheduler-operator/pull/340)
* bump(k8s.io/*): 1.21 [#342](https://github.com/openshift/cluster-kube-scheduler-operator/pull/342)
* Fix development readme to refer to actual pod/container [#339](https://github.com/openshift/cluster-kube-scheduler-operator/pull/339)
* update library-go to fix tight loops [#341](https://github.com/openshift/cluster-kube-scheduler-operator/pull/341)
* defines test-e2e-preferred-host job for running smoke tests to check if KS talks to Kube over a preferred host [#338](https://github.com/openshift/cluster-kube-scheduler-operator/pull/338)
* Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART [#337](https://github.com/openshift/cluster-kube-scheduler-operator/pull/337)
* [Bug 1938468](https://bugzilla.redhat.com/show_bug.cgi?id=1938468): Specify cpu resource request for kube-scheduler-operator-container container [#335](https://github.com/openshift/cluster-kube-scheduler-operator/pull/335)
* [Bug 1934154](https://bugzilla.redhat.com/show_bug.cgi?id=1934154): Bump github.com/gogo/protobuf to v1.3.2 [#333](https://github.com/openshift/cluster-kube-scheduler-operator/pull/333)
* [Bug 1844989](https://bugzilla.redhat.com/show_bug.cgi?id=1844989): Set --tls-cipher-suites, resp. --tls-min-version only when the fields under servingInfo observedConfig are found [#332](https://github.com/openshift/cluster-kube-scheduler-operator/pull/332)
* [Bug 1844989](https://bugzilla.redhat.com/show_bug.cgi?id=1844989): Allow to set --tls-cipher-suites and --tls-min-version of KS instances through observed config [#331](https://github.com/openshift/cluster-kube-scheduler-operator/pull/331)
* [Bug 1926579](https://bugzilla.redhat.com/show_bug.cgi?id=1926579): Move warning about deprecated spec.policy field [#330](https://github.com/openshift/cluster-kube-scheduler-operator/pull/330)
* Updating ose-cluster-kube-scheduler-operator builder & base images to be consistent with ART [#329](https://github.com/openshift/cluster-kube-scheduler-operator/pull/329)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/b2204ca23a57e9f01af915375e6a18fc86ffecda...1b3b34440de93395c46c7a6526be9870e8914ce8)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/50c639cc7e318c1dab38a2869b928cf703a38515)

* [Bug 2022844](https://bugzilla.redhat.com/show_bug.cgi?id=2022844): Extensive number of requests from storage version operator in cluster – Part 4 [#79](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/79)
* [Bug 2022844](https://bugzilla.redhat.com/show_bug.cgi?id=2022844): Extensive number of requests from storage version operator in cluster – Part 1 [#78](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/78)
* README: Stub in brief purpose docs [#44](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/44)
* [Bug 1962687](https://bugzilla.redhat.com/show_bug.cgi?id=1962687): manifests,assets: set runAsUser to not run as root [#58](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/58)
* [Bug 1957908](https://bugzilla.redhat.com/show_bug.cgi?id=1957908): stop reporting empty version [#57](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/57)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#56](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/56)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): Switch to v1 upstream CRDs [#55](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/55)
* Add management workload annotations [#52](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/52)
* [Bug 1953539](https://bugzilla.redhat.com/show_bug.cgi?id=1953539): Set priorityClassName: system-cluster-critical [#54](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/54)
* Add IBM cloud managed profile manifest patch [#51](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/51)
* add storageversionmigrations to related objects [#42](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/42)
* [Bug 1881938](https://bugzilla.redhat.com/show_bug.cgi?id=1881938): migrator deployment doesn't tolerate masters [#31](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/31)
* Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART [#43](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/43)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/54484757581ec26f178c599215715bafd6029582...50c639cc7e318c1dab38a2869b928cf703a38515)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/f0a396eee469a3ace9e473c0476a29d8983671eb)

* [Bug 2031047](https://bugzilla.redhat.com/show_bug.cgi?id=2031047): Ensure pending CSR count is valid post approval [#146](https://github.com/openshift/cluster-machine-approver/pull/146)
* [Bug 2032092](https://bugzilla.redhat.com/show_bug.cgi?id=2032092): Replace certificates with generated certificates [#148](https://github.com/openshift/cluster-machine-approver/pull/148)
* [Bug 2024689](https://bugzilla.redhat.com/show_bug.cgi?id=2024689): Allow fallback to serving cert renewal accounting for egress IPs on SDN [#142](https://github.com/openshift/cluster-machine-approver/pull/142)
* [Bug 1956609](https://bugzilla.redhat.com/show_bug.cgi?id=1956609): Use a direct client for uncached reads [#123](https://github.com/openshift/cluster-machine-approver/pull/123)
* [Bug 1956609](https://bugzilla.redhat.com/show_bug.cgi?id=1956609): Bypass cache when reading Node and Machine objects [#121](https://github.com/openshift/cluster-machine-approver/pull/121)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#119](https://github.com/openshift/cluster-machine-approver/pull/119)
* Add management workload annotations [#110](https://github.com/openshift/cluster-machine-approver/pull/110)
* [Bug 1952282](https://bugzilla.redhat.com/show_bug.cgi?id=1952282): Ensure serving certs requeued [#118](https://github.com/openshift/cluster-machine-approver/pull/118)
* [Bug 1940972](https://bugzilla.redhat.com/show_bug.cgi?id=1940972): Increase cache resync period to 10 min instead of 10 hours [#117](https://github.com/openshift/cluster-machine-approver/pull/117)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update dependencies to 1.21 [#115](https://github.com/openshift/cluster-machine-approver/pull/115)
* [Bug 1949741](https://bugzilla.redhat.com/show_bug.cgi?id=1949741): bump golang versions [#113](https://github.com/openshift/cluster-machine-approver/pull/113)
* [Bug 1947785](https://bugzilla.redhat.com/show_bug.cgi?id=1947785): Move certificates to v1 [#111](https://github.com/openshift/cluster-machine-approver/pull/111)
* Add IBM Cloud managed annotations to CVO manifests [#93](https://github.com/openshift/cluster-machine-approver/pull/93)
* Enable running make targets inside container [#107](https://github.com/openshift/cluster-machine-approver/pull/107)
* Refactor logging and error handling [#108](https://github.com/openshift/cluster-machine-approver/pull/108)
* [Bug 1923823](https://bugzilla.redhat.com/show_bug.cgi?id=1923823): Improve TLS configuration for Kube RBAC Proxy [#105](https://github.com/openshift/cluster-machine-approver/pull/105)
* Refactor csr approver to use controller runtime [#101](https://github.com/openshift/cluster-machine-approver/pull/101)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/9043e2bba8f4707a578895f8b29d4736a61a010c...f0a396eee469a3ace9e473c0476a29d8983671eb)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/edfadfb58c4167a62a7a7c1bf164c882b73eedb3)

* [Bug 2030698](https://bugzilla.redhat.com/show_bug.cgi?id=2030698): KubePodCrashLooping may fire when pod is not in CrashLoopBackOff [#1619](https://github.com/openshift/cluster-monitoring-operator/pull/1619)
* [Bug 2039538](https://bugzilla.redhat.com/show_bug.cgi?id=2039538): Add custom profile metric for Node Tuning Operator to telemetry [#1565](https://github.com/openshift/cluster-monitoring-operator/pull/1565)
* [Bug 2018431](https://bugzilla.redhat.com/show_bug.cgi?id=2018431): [4.8] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels [#1459](https://github.com/openshift/cluster-monitoring-operator/pull/1459)
* [Bug 2012039](https://bugzilla.redhat.com/show_bug.cgi?id=2012039): Allow namespace label in metric allow list [#1436](https://github.com/openshift/cluster-monitoring-operator/pull/1436)
* [Bug 2005205](https://bugzilla.redhat.com/show_bug.cgi?id=2005205): improve update and status reporting 4.8 [#1428](https://github.com/openshift/cluster-monitoring-operator/pull/1428)
* Revert "Bug 1999057: jsonnet: Sync with kube-prometheus" [#1394](https://github.com/openshift/cluster-monitoring-operator/pull/1394)
* [Bug 1999057](https://bugzilla.redhat.com/show_bug.cgi?id=1999057): jsonnet: Sync with kube-prometheus [#1360](https://github.com/openshift/cluster-monitoring-operator/pull/1360)
* [Bug 1997497](https://bugzilla.redhat.com/show_bug.cgi?id=1997497): Backport etcd telemetry [#1344](https://github.com/openshift/cluster-monitoring-operator/pull/1344)
* [Bug 1995699](https://bugzilla.redhat.com/show_bug.cgi?id=1995699): Get insights on series churn during upgrades [#1349](https://github.com/openshift/cluster-monitoring-operator/pull/1349)
* [Bug 1999148](https://bugzilla.redhat.com/show_bug.cgi?id=1999148): alert: ClusterMonitoringOperatorReconciliationErrors: reduce range du… [#1351](https://github.com/openshift/cluster-monitoring-operator/pull/1351)
* [Bug 1991836](https://bugzilla.redhat.com/show_bug.cgi?id=1991836): Revise Alert Severity in OCP 4.8 [#1342](https://github.com/openshift/cluster-monitoring-operator/pull/1342)
* [Bug 1984753](https://bugzilla.redhat.com/show_bug.cgi?id=1984753): jsonnet: Sync with kube-prometheus [#1323](https://github.com/openshift/cluster-monitoring-operator/pull/1323)
* [Bug 1978208](https://bugzilla.redhat.com/show_bug.cgi?id=1978208): Sync dependencies for 4.8 release backports [#1264](https://github.com/openshift/cluster-monitoring-operator/pull/1264)
* [Bug 1982778](https://bugzilla.redhat.com/show_bug.cgi?id=1982778): jsonnet: thanosquery: Use HTTP probes as opposed to exec [#1289](https://github.com/openshift/cluster-monitoring-operator/pull/1289)
* [Bug 1976765](https://bugzilla.redhat.com/show_bug.cgi?id=1976765): Update AlertmanagerMembersInconsistent rule [#1283](https://github.com/openshift/cluster-monitoring-operator/pull/1283)
* [Bug 1988991](https://bugzilla.redhat.com/show_bug.cgi?id=1988991): pkg/client/client.go: Add retry logic for daemonset create [#1309](https://github.com/openshift/cluster-monitoring-operator/pull/1309)
* [Bug 1982369](https://bugzilla.redhat.com/show_bug.cgi?id=1982369): Fix deployment update with retry option [#1285](https://github.com/openshift/cluster-monitoring-operator/pull/1285)
* [Bug 1981246](https://bugzilla.redhat.com/show_bug.cgi?id=1981246): [4.8]: Add HighlyAvailableWorkloadIncorrectlySpread alert [#1276](https://github.com/openshift/cluster-monitoring-operator/pull/1276)
* [Bug 1943565](https://bugzilla.redhat.com/show_bug.cgi?id=1943565): ThanosSidecarUnhealthy will never fire if the sidecar is never healthy [#1265](https://github.com/openshift/cluster-monitoring-operator/pull/1265)
* [Bug 1981871](https://bugzilla.redhat.com/show_bug.cgi?id=1981871): jsonnet: Disable cpufreq collector in node_exporter [#1272](https://github.com/openshift/cluster-monitoring-operator/pull/1272)
* [Bug 1967803](https://bugzilla.redhat.com/show_bug.cgi?id=1967803): update Grafana version to 7.5.5 [#1210](https://github.com/openshift/cluster-monitoring-operator/pull/1210)
* [Bug 1970624](https://bugzilla.redhat.com/show_bug.cgi?id=1970624): jsonnet: reduce threshold of AggregatedAPIDown [#1211](https://github.com/openshift/cluster-monitoring-operator/pull/1211)
* Extended PrometheusK8sConfig and PrometheusRestrictedConfig with AdditionalAlertManagerConfigs [#1132](https://github.com/openshift/cluster-monitoring-operator/pull/1132)
* [Bug 1949711](https://bugzilla.redhat.com/show_bug.cgi?id=1949711): Ignore failures from prometheusrules.openshift.io webhook [#1203](https://github.com/openshift/cluster-monitoring-operator/pull/1203)
* [Bug 1955589](https://bugzilla.redhat.com/show_bug.cgi?id=1955589): add PodDisruptionBudget to ThanosQuerier to meet HA requ… [#1202](https://github.com/openshift/cluster-monitoring-operator/pull/1202)
* [Bug 1964332](https://bugzilla.redhat.com/show_bug.cgi?id=1964332): upgrade prometheus to version 2.26.1 [#1208](https://github.com/openshift/cluster-monitoring-operator/pull/1208)
* [Bug 1967614](https://bugzilla.redhat.com/show_bug.cgi?id=1967614): Remove PDB for prometheus and alertmanager [#1204](https://github.com/openshift/cluster-monitoring-operator/pull/1204)
* [Bug 1967614](https://bugzilla.redhat.com/show_bug.cgi?id=1967614): Revert anti-affinity to soft [#1198](https://github.com/openshift/cluster-monitoring-operator/pull/1198)
* [Bug 1879495](https://bugzilla.redhat.com/show_bug.cgi?id=1879495): jsonnet: update prometheus-operator to 0.48 [#1187](https://github.com/openshift/cluster-monitoring-operator/pull/1187)
* [Bug 1933708](https://bugzilla.redhat.com/show_bug.cgi?id=1933708): Add deployment config in recording rule [#1192](https://github.com/openshift/cluster-monitoring-operator/pull/1192)
* [Bug 1945500](https://bugzilla.redhat.com/show_bug.cgi?id=1945500): Bump thanos version to v0.20.2 [#1190](https://github.com/openshift/cluster-monitoring-operator/pull/1190)
* [Bug 1966654](https://bugzilla.redhat.com/show_bug.cgi?id=1966654): pkg/tasks: fix creation of alertmanager PDB [#1189](https://github.com/openshift/cluster-monitoring-operator/pull/1189)
* [Bug 1958367](https://bugzilla.redhat.com/show_bug.cgi?id=1958367): Add recording rule for builds by strategy [#1136](https://github.com/openshift/cluster-monitoring-operator/pull/1136)
* [Bug 1964334](https://bugzilla.redhat.com/show_bug.cgi?id=1964334): guard monitoring related /metrics endpoint from unauthorised access [#1183](https://github.com/openshift/cluster-monitoring-operator/pull/1183)
* [Bug 1957190](https://bugzilla.redhat.com/show_bug.cgi?id=1957190): use NamespaceSelector instead of explicit allow/deny list [#1168](https://github.com/openshift/cluster-monitoring-operator/pull/1168)
* [Bug 1965367](https://bugzilla.redhat.com/show_bug.cgi?id=1965367): pkg/operator: Fix typo in etcd-metric-serving-ca resource name [#1185](https://github.com/openshift/cluster-monitoring-operator/pull/1185)
* [Bug 1958016](https://bugzilla.redhat.com/show_bug.cgi?id=1958016): should update to 0.47.1 for prometheus-operator resources label [#1182](https://github.com/openshift/cluster-monitoring-operator/pull/1182)
* [Bug 1961081](https://bugzilla.redhat.com/show_bug.cgi?id=1961081): update pdb apiversion to v1 [#1184](https://github.com/openshift/cluster-monitoring-operator/pull/1184)
* [Bug 1961081](https://bugzilla.redhat.com/show_bug.cgi?id=1961081): update PodDisruptionBudget api version to policy/v1 [#1179](https://github.com/openshift/cluster-monitoring-operator/pull/1179)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): Remove the upstream KubeAPIErrorBudgetBurn alerts [#1164](https://github.com/openshift/cluster-monitoring-operator/pull/1164)
* [Bug 1962172](https://bugzilla.redhat.com/show_bug.cgi?id=1962172): increase scrape timeouts for kubelet endpoints [#1175](https://github.com/openshift/cluster-monitoring-operator/pull/1175)
* [Bug 1963833](https://bugzilla.redhat.com/show_bug.cgi?id=1963833): don't attempt to delete nil PodDisruptionBudget object [#1176](https://github.com/openshift/cluster-monitoring-operator/pull/1176)
* [Bug 1960767](https://bugzilla.redhat.com/show_bug.cgi?id=1960767): Protect Grafana metrics endpoint [#1165](https://github.com/openshift/cluster-monitoring-operator/pull/1165)
* [Bug 1962261](https://bugzilla.redhat.com/show_bug.cgi?id=1962261): further adjust memory usage [#1172](https://github.com/openshift/cluster-monitoring-operator/pull/1172)
* [Bug 1955478](https://bugzilla.redhat.com/show_bug.cgi?id=1955478): fix regex patterns in kube-state-metrics deny list [#1173](https://github.com/openshift/cluster-monitoring-operator/pull/1173)
* [Bug 1933847](https://bugzilla.redhat.com/show_bug.cgi?id=1933847): Manage PodDisruptionBudget objects [#1151](https://github.com/openshift/cluster-monitoring-operator/pull/1151)
* [Bug 1959278](https://bugzilla.redhat.com/show_bug.cgi?id=1959278): Remove obsolete user-workload ServiceMonitor [#1166](https://github.com/openshift/cluster-monitoring-operator/pull/1166)
* [Bug 1962261](https://bugzilla.redhat.com/show_bug.cgi?id=1962261): jsonnet: consolidate memory requests for all resources [#1158](https://github.com/openshift/cluster-monitoring-operator/pull/1158)
* [Bug 1952744](https://bugzilla.redhat.com/show_bug.cgi?id=1952744): Remove obsolete prometheus service monitor [#1146](https://github.com/openshift/cluster-monitoring-operator/pull/1146)
* [Bug 1953647](https://bugzilla.redhat.com/show_bug.cgi?id=1953647): Add prometheus-adapter PodDisruptionBudget [#1149](https://github.com/openshift/cluster-monitoring-operator/pull/1149)
* [Bug 1958015](https://bugzilla.redhat.com/show_bug.cgi?id=1958015): jsonnet: fix setting resource limits on config-reloader containers [#1152](https://github.com/openshift/cluster-monitoring-operator/pull/1152)
* [Bug 1955445](https://bugzilla.redhat.com/show_bug.cgi?id=1955445): drop more CRI-O metrics [#1148](https://github.com/openshift/cluster-monitoring-operator/pull/1148)
* [Bug 1957832](https://bugzilla.redhat.com/show_bug.cgi?id=1957832): remove dependency of e2e tests on AWS [#1143](https://github.com/openshift/cluster-monitoring-operator/pull/1143)
* [Bug 1950908](https://bugzilla.redhat.com/show_bug.cgi?id=1950908): Allow all pod labels in metric labels [#1145](https://github.com/openshift/cluster-monitoring-operator/pull/1145)
* [Bug 1955478](https://bugzilla.redhat.com/show_bug.cgi?id=1955478): drop high-cardinality metrics from kube-state-metrics which aren't used [#1142](https://github.com/openshift/cluster-monitoring-operator/pull/1142)
* [Bug 1955051](https://bugzilla.redhat.com/show_bug.cgi?id=1955051): Update kube node status capacity metric [#1140](https://github.com/openshift/cluster-monitoring-operator/pull/1140)
* [Bug 1955467](https://bugzilla.redhat.com/show_bug.cgi?id=1955467): remove node_mountstats_nfs_* metrics [#1139](https://github.com/openshift/cluster-monitoring-operator/pull/1139)
* [Bug 1940933](https://bugzilla.redhat.com/show_bug.cgi?id=1940933): Revert "jsonnet: make AggregatedAPIDown more resilient" [#1120](https://github.com/openshift/cluster-monitoring-operator/pull/1120)
* [Bug 1946865](https://bugzilla.redhat.com/show_bug.cgi?id=1946865): Update kube prometheus and related assets [#1127](https://github.com/openshift/cluster-monitoring-operator/pull/1127)
* [Bug 1955445](https://bugzilla.redhat.com/show_bug.cgi?id=1955445): fix dropped crio metrics [#1133](https://github.com/openshift/cluster-monitoring-operator/pull/1133)
* [Bug 1955457](https://bugzilla.redhat.com/show_bug.cgi?id=1955457): drop container_memory_failures_total metric [#1131](https://github.com/openshift/cluster-monitoring-operator/pull/1131)
* [Bug 1949262](https://bugzilla.redhat.com/show_bug.cgi?id=1949262): jsonnet: add hard anti-affinity to Prometheuses [#1135](https://github.com/openshift/cluster-monitoring-operator/pull/1135)
* Rename workload annotations [#1123](https://github.com/openshift/cluster-monitoring-operator/pull/1123)
* [Bug 1948711](https://bugzilla.redhat.com/show_bug.cgi?id=1948711): Apply HA conventions to prometheus-adapter and thanos-ruler [#1124](https://github.com/openshift/cluster-monitoring-operator/pull/1124)
* [Bug 1952032](https://bugzilla.redhat.com/show_bug.cgi?id=1952032): jsonnet: add format changes made by make jsonnet-fmt [#1129](https://github.com/openshift/cluster-monitoring-operator/pull/1129)
* [Bug 1951052](https://bugzilla.redhat.com/show_bug.cgi?id=1951052): drop CRI-O image metrics [#1125](https://github.com/openshift/cluster-monitoring-operator/pull/1125)
* [Bug 1951505](https://bugzilla.redhat.com/show_bug.cgi?id=1951505): Remove deprecated techPreviewUserWorkload [#1126](https://github.com/openshift/cluster-monitoring-operator/pull/1126)
* [Bug 1950761](https://bugzilla.redhat.com/show_bug.cgi?id=1950761): Revert: jsonnet: apply HA conventions [#1122](https://github.com/openshift/cluster-monitoring-operator/pull/1122)
* [Bug 1945677](https://bugzilla.redhat.com/show_bug.cgi?id=1945677): manifest allowlist: add acm_managed_cluster_info [#1102](https://github.com/openshift/cluster-monitoring-operator/pull/1102)
* BUG 1949145: Delete 0000_50_cluster-monitoring-operator_00_0user-priority-class.yaml [#1115](https://github.com/openshift/cluster-monitoring-operator/pull/1115)
* [Bug 1948711](https://bugzilla.redhat.com/show_bug.cgi?id=1948711): jsonnet: apply HA conventions [#1119](https://github.com/openshift/cluster-monitoring-operator/pull/1119)
* [Bug 1948082](https://bugzilla.redhat.com/show_bug.cgi?id=1948082): Set unavailable message [#1112](https://github.com/openshift/cluster-monitoring-operator/pull/1112)
* Add management workload annotations [#1109](https://github.com/openshift/cluster-monitoring-operator/pull/1109)
* [Bug 1940933](https://bugzilla.redhat.com/show_bug.cgi?id=1940933): jsonnet: make AggregatedAPIDown more resilient to OCP upgrades [#1117](https://github.com/openshift/cluster-monitoring-operator/pull/1117)
* [Bug 1920700](https://bugzilla.redhat.com/show_bug.cgi?id=1920700): Bump prometheus-adapter to v0.8.4 [#1113](https://github.com/openshift/cluster-monitoring-operator/pull/1113)
* Refactor proxy config [#1108](https://github.com/openshift/cluster-monitoring-operator/pull/1108)
* Update denied metrics for kube-state-metrics [#1104](https://github.com/openshift/cluster-monitoring-operator/pull/1104)
* IBM Cloud manifest profile patch [#986](https://github.com/openshift/cluster-monitoring-operator/pull/986)
* [Bug 1934516](https://bugzilla.redhat.com/show_bug.cgi?id=1934516): Change prometheus priority class to system-cluster-critical again [#1110](https://github.com/openshift/cluster-monitoring-operator/pull/1110)
* [Bug 1938465](https://bugzilla.redhat.com/show_bug.cgi?id=1938465): increase CPU requests for Thanos querier [#1106](https://github.com/openshift/cluster-monitoring-operator/pull/1106)
* [Bug 1943667](https://bugzilla.redhat.com/show_bug.cgi?id=1943667): fix alert description [#1100](https://github.com/openshift/cluster-monitoring-operator/pull/1100)
* [Bug 1944974](https://bugzilla.redhat.com/show_bug.cgi?id=1944974): remove KubeControllerManagerDown and KubeSchedulerDown alerts [#1098](https://github.com/openshift/cluster-monitoring-operator/pull/1098)
* Bump kube-state-metrics to v2.0.0-rc.1 [#1099](https://github.com/openshift/cluster-monitoring-operator/pull/1099)
* jsonnet: replace external commit import [#1092](https://github.com/openshift/cluster-monitoring-operator/pull/1092)
* [Bug 1943667](https://bugzilla.redhat.com/show_bug.cgi?id=1943667): increase for duration of KubeDaemonSetRolloutStuck [#1094](https://github.com/openshift/cluster-monitoring-operator/pull/1094)
* Remove kube-state-metrics flag temporary [#1095](https://github.com/openshift/cluster-monitoring-operator/pull/1095)
* [Bug 1932624](https://bugzilla.redhat.com/show_bug.cgi?id=1932624): jsonnet/rules,pkg/operator: use gauge based reconcilation state metrics and alerting [#1078](https://github.com/openshift/cluster-monitoring-operator/pull/1078)
* [Bug 1934163](https://bugzilla.redhat.com/show_bug.cgi?id=1934163): adjust Thanos querier alerting rules [#1087](https://github.com/openshift/cluster-monitoring-operator/pull/1087)
* OWNERS: add Jan [#1089](https://github.com/openshift/cluster-monitoring-operator/pull/1089)
* Updating cluster-monitoring-operator builder & base images to be consistent with ART [#1088](https://github.com/openshift/cluster-monitoring-operator/pull/1088)
* [Bug 1921335](https://bugzilla.redhat.com/show_bug.cgi?id=1921335): Fix and adjust ThanosSidecarUnhealthy alert [#1090](https://github.com/openshift/cluster-monitoring-operator/pull/1090)
* Adapt deployment mode based on the infrastructure topology [#1077](https://github.com/openshift/cluster-monitoring-operator/pull/1077)
* hack: add check script for unused rules [#1082](https://github.com/openshift/cluster-monitoring-operator/pull/1082)
* Add jsonnet function to patch upstream rules [#1073](https://github.com/openshift/cluster-monitoring-operator/pull/1073)
* jsonnet: fix etcd mixin import [#1084](https://github.com/openshift/cluster-monitoring-operator/pull/1084)
* [Bug 1933805](https://bugzilla.redhat.com/show_bug.cgi?id=1933805): TargetDown should exclude unschedulable nodes [#1072](https://github.com/openshift/cluster-monitoring-operator/pull/1072)
* *: include all groups when testing prometheus rules [#1081](https://github.com/openshift/cluster-monitoring-operator/pull/1081)
* Run jsonnet-fmt [#1079](https://github.com/openshift/cluster-monitoring-operator/pull/1079)
* [Bug 1925061](https://bugzilla.redhat.com/show_bug.cgi?id=1925061): Remove the "instance" and "pod" labels for kube-state-metrics metrics [#1052](https://github.com/openshift/cluster-monitoring-operator/pull/1052)
* [Bug 1923984](https://bugzilla.redhat.com/show_bug.cgi?id=1923984): Refactor jsonnet to include latest kube-prometheus [#1044](https://github.com/openshift/cluster-monitoring-operator/pull/1044)
* [Bug 1929056](https://bugzilla.redhat.com/show_bug.cgi?id=1929056): Remove kube-apiserver-availability.rules [#1068](https://github.com/openshift/cluster-monitoring-operator/pull/1068)
* pkg/manifests: fix data race when accessing assets [#1054](https://github.com/openshift/cluster-monitoring-operator/pull/1054)
* jsonnet/rules: Mask KubeDeploymentReplicasMismatch alert for upgrade [#1065](https://github.com/openshift/cluster-monitoring-operator/pull/1065)
* [Bug 1929944](https://bugzilla.redhat.com/show_bug.cgi?id=1929944): etcdInsufficientMembers is wrong when etcd is in a pod [#1064](https://github.com/openshift/cluster-monitoring-operator/pull/1064)
* [Bug 1929277](https://bugzilla.redhat.com/show_bug.cgi?id=1929277): [master] jsonnet/prometheus.jsonnet: Apply openshift-user-critical class to cluster Prometheus [#1063](https://github.com/openshift/cluster-monitoring-operator/pull/1063)
* Updating cluster-monitoring-operator builder & base images to be consistent with ART [#1050](https://github.com/openshift/cluster-monitoring-operator/pull/1050)
* [Bug 1920901](https://bugzilla.redhat.com/show_bug.cgi?id=1920901): pkg/manifests: fix prometheus-proxy trustedCA [#1047](https://github.com/openshift/cluster-monitoring-operator/pull/1047)
* docs(data-collection): add newlines for visibility [#1031](https://github.com/openshift/cluster-monitoring-operator/pull/1031)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/035c8038f56cdcf0d402bea6671e81882e3ab8bd...edfadfb58c4167a62a7a7c1bf164c882b73eedb3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/a2b4ffef1f9ec49164fd26c8f1adf6c85fb30ca8)

* [Bug 2068895](https://bugzilla.redhat.com/show_bug.cgi?id=2068895): Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters [#1351](https://github.com/openshift/cluster-network-operator/pull/1351)
* [release 4.8] Updates owners [#1334](https://github.com/openshift/cluster-network-operator/pull/1334)
* [Bug 2054642](https://bugzilla.redhat.com/show_bug.cgi?id=2054642): sbdb and nbdb containers leave pid around if they restarted or crashed [#1310](https://github.com/openshift/cluster-network-operator/pull/1310)
* [Bug 2023426](https://bugzilla.redhat.com/show_bug.cgi?id=2023426): Add ip6tables NOTRACK rules for udp/6081 [#1228](https://github.com/openshift/cluster-network-operator/pull/1228)
* [Bug 2021221](https://bugzilla.redhat.com/show_bug.cgi?id=2021221): ovnkube: set ovn-controller lflow cache limit to 1GB [#1278](https://github.com/openshift/cluster-network-operator/pull/1278)
* [Bug 2034352](https://bugzilla.redhat.com/show_bug.cgi?id=2034352): Whereabouts IP Reconciliaton [backport 4.8] [#1265](https://github.com/openshift/cluster-network-operator/pull/1265)
* [Bug 2022747](https://bugzilla.redhat.com/show_bug.cgi?id=2022747): Allow to use proxy to connect to OSP cloud [#1225](https://github.com/openshift/cluster-network-operator/pull/1225)
* [Bug 2037500](https://bugzilla.redhat.com/show_bug.cgi?id=2037500): Bump openshift/build-machinery-go [#1271](https://github.com/openshift/cluster-network-operator/pull/1271)
* [Bug 2029590](https://bugzilla.redhat.com/show_bug.cgi?id=2029590): Set upgrade strategy on kube-proxy #1244 [#1244](https://github.com/openshift/cluster-network-operator/pull/1244)
* [Bug 2018513](https://bugzilla.redhat.com/show_bug.cgi?id=2018513): ovnkube: use ovn-nbctl daemon monitor mode to restart and log issues [#1211](https://github.com/openshift/cluster-network-operator/pull/1211)
* [Bug 2008589](https://bugzilla.redhat.com/show_bug.cgi?id=2008589): [4.8z] Slow OVN Recovery on SNO [#1200](https://github.com/openshift/cluster-network-operator/pull/1200)
* [Bug 1985308](https://bugzilla.redhat.com/show_bug.cgi?id=1985308): Add a newline between user CAs and system CAs [#1162](https://github.com/openshift/cluster-network-operator/pull/1162)
* [Bug 1990928](https://bugzilla.redhat.com/show_bug.cgi?id=1990928): [Backport 4.8] Whereabouts should have RBAC for leases [#1185](https://github.com/openshift/cluster-network-operator/pull/1185)
* [Bug 1985588](https://bugzilla.redhat.com/show_bug.cgi?id=1985588): Update service network status to reflect dual stack entries [#1164](https://github.com/openshift/cluster-network-operator/pull/1164)
* [Bug 1987046](https://bugzilla.redhat.com/show_bug.cgi?id=1987046): Add pre-puller ds to reduce upgrade downtime [#1167](https://github.com/openshift/cluster-network-operator/pull/1167)
* [Bug 1988425](https://bugzilla.redhat.com/show_bug.cgi?id=1988425): Change to use mountPath: /host [#1169](https://github.com/openshift/cluster-network-operator/pull/1169)
* [Bug 1967933](https://bugzilla.redhat.com/show_bug.cgi?id=1967933): Add network-tools to image-stream [#1126](https://github.com/openshift/cluster-network-operator/pull/1126)
* [Bug 1963964](https://bugzilla.redhat.com/show_bug.cgi?id=1963964): Escape characters on ini file [#1115](https://github.com/openshift/cluster-network-operator/pull/1115)
* [Bug 1968567](https://bugzilla.redhat.com/show_bug.cgi?id=1968567): egress router CNI command is missing [#1125](https://github.com/openshift/cluster-network-operator/pull/1125)
* [Bug 1955548](https://bugzilla.redhat.com/show_bug.cgi?id=1955548): Kuryr: Do not expand services subnet with OVN [#1100](https://github.com/openshift/cluster-network-operator/pull/1100)
* [Bug 1954870](https://bugzilla.redhat.com/show_bug.cgi?id=1954870): Add priorityClass to allow user load to preempt tests [#1110](https://github.com/openshift/cluster-network-operator/pull/1110)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Fix generated JSON format [#1117](https://github.com/openshift/cluster-network-operator/pull/1117)
* [Bug 1825219](https://bugzilla.redhat.com/show_bug.cgi?id=1825219): Fix nil checks in bootstrapSDN [#1107](https://github.com/openshift/cluster-network-operator/pull/1107)
* [Bug 1965834](https://bugzilla.redhat.com/show_bug.cgi?id=1965834): add management annotation to multus-additional-cni-plugins pods [#1114](https://github.com/openshift/cluster-network-operator/pull/1114)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Update egress router CRD from vendor to manifests [#1116](https://github.com/openshift/cluster-network-operator/pull/1116)
* [Bug 1954773](https://bugzilla.redhat.com/show_bug.cgi?id=1954773): update the cno to use the egressfirewall flag [#1095](https://github.com/openshift/cluster-network-operator/pull/1095)
* [Bug 1960711](https://bugzilla.redhat.com/show_bug.cgi?id=1960711): Revert "ipsec: Allow enablement/disablement at runtime" [#1108](https://github.com/openshift/cluster-network-operator/pull/1108)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Addressing original PR 1064 review comments. [#1094](https://github.com/openshift/cluster-network-operator/pull/1094)
* [Bug 1949677](https://bugzilla.redhat.com/show_bug.cgi?id=1949677): The Multus daemonset should be separate other CNI binary installation [#1058](https://github.com/openshift/cluster-network-operator/pull/1058)
* [Bug 1825219](https://bugzilla.redhat.com/show_bug.cgi?id=1825219): drop icmp frag needed received from other nodes in the cluster [#1059](https://github.com/openshift/cluster-network-operator/pull/1059)
* [Bug 1959406](https://bugzilla.redhat.com/show_bug.cgi?id=1959406): ovn-kube: enable pprof on the metrics endpoint [#1091](https://github.com/openshift/cluster-network-operator/pull/1091)
* [Bug 1958126](https://bugzilla.redhat.com/show_bug.cgi?id=1958126): Remove OVN "--disable-snat-multiple-gws" parameter [#1090](https://github.com/openshift/cluster-network-operator/pull/1090)
* [Bug 1952001](https://bugzilla.redhat.com/show_bug.cgi?id=1952001): Updating api to reduce the  number of watch requests [#1077](https://github.com/openshift/cluster-network-operator/pull/1077)
* [Bug 1954755](https://bugzilla.redhat.com/show_bug.cgi?id=1954755): Multus configuration should allow for net-attach-defs in certain namespaces to be used across namespaces [#956](https://github.com/openshift/cluster-network-operator/pull/956)
* [Bug 1952665](https://bugzilla.redhat.com/show_bug.cgi?id=1952665): Update multi-networkpolicy memory limits/requests [#1072](https://github.com/openshift/cluster-network-operator/pull/1072)
* [Bug 1951891](https://bugzilla.redhat.com/show_bug.cgi?id=1951891): Allow changing cluster network cidr during a migration [#1067](https://github.com/openshift/cluster-network-operator/pull/1067)
* [Bug 1939726](https://bugzilla.redhat.com/show_bug.cgi?id=1939726): Enclose ApplyObject on RetryOnConflict [#1056](https://github.com/openshift/cluster-network-operator/pull/1056)
* [Bug 1947795](https://bugzilla.redhat.com/show_bug.cgi?id=1947795): Remove reference to v1beta1 API [#1083](https://github.com/openshift/cluster-network-operator/pull/1083)
* [Bug 1948582](https://bugzilla.redhat.com/show_bug.cgi?id=1948582): Allow for local gateway mode to be configured [#1066](https://github.com/openshift/cluster-network-operator/pull/1066)
* [Bug 1954187](https://bugzilla.redhat.com/show_bug.cgi?id=1954187): The multus admission controller admissionReviewVersions should be v1 [#1079](https://github.com/openshift/cluster-network-operator/pull/1079)
* Rename workload annotations [#1065](https://github.com/openshift/cluster-network-operator/pull/1065)
* [Bug 1948718](https://bugzilla.redhat.com/show_bug.cgi?id=1948718): IBM Cloud manifest profile patch [#884](https://github.com/openshift/cluster-network-operator/pull/884)
* [Bug 1907353](https://bugzilla.redhat.com/show_bug.cgi?id=1907353): Remove OVS daemonsets [#1028](https://github.com/openshift/cluster-network-operator/pull/1028)
* [Bug 1950935](https://bugzilla.redhat.com/show_bug.cgi?id=1950935): Updating cluster-network-operator builder & base images to be consistent with ART [#974](https://github.com/openshift/cluster-network-operator/pull/974)
* [Bug 1942555](https://bugzilla.redhat.com/show_bug.cgi?id=1942555): Rely on status for ingress controller for endpointPublishingStrategy [#1062](https://github.com/openshift/cluster-network-operator/pull/1062)
* [Bug 1950590](https://bugzilla.redhat.com/show_bug.cgi?id=1950590): Bump openshift/api and update-codegen for netflow maxitems [#1068](https://github.com/openshift/cluster-network-operator/pull/1068)
* [Bug 1952079](https://bugzilla.redhat.com/show_bug.cgi?id=1952079): Don't try to disable the EndpointSlice feature gate [#1069](https://github.com/openshift/cluster-network-operator/pull/1069)
* [Bug 1937594](https://bugzilla.redhat.com/show_bug.cgi?id=1937594): Update the codegen with the latest API [#1063](https://github.com/openshift/cluster-network-operator/pull/1063)
* [Bug 1937594](https://bugzilla.redhat.com/show_bug.cgi?id=1937594): Split SDN migration into 2 phase [#763](https://github.com/openshift/cluster-network-operator/pull/763)
* Add management workload annotations [#1051](https://github.com/openshift/cluster-network-operator/pull/1051)
* [Bug 1937594](https://bugzilla.redhat.com/show_bug.cgi?id=1937594): Bump openshift/api [#1057](https://github.com/openshift/cluster-network-operator/pull/1057)
* [Bug 1948592](https://bugzilla.redhat.com/show_bug.cgi?id=1948592): Add Egress Router Controller [#887](https://github.com/openshift/cluster-network-operator/pull/887)
* [Bug 1949099](https://bugzilla.redhat.com/show_bug.cgi?id=1949099): Fix up network-check-target [#1049](https://github.com/openshift/cluster-network-operator/pull/1049)
* Set the host-network-namespace parameter for ovn-kubernetes [#1033](https://github.com/openshift/cluster-network-operator/pull/1033)
* Add capabilities in simpleMacvlan's staticIPAM config [#353](https://github.com/openshift/cluster-network-operator/pull/353)
* Fix run_locally namespace [#1054](https://github.com/openshift/cluster-network-operator/pull/1054)
* Minor cleanups [#1053](https://github.com/openshift/cluster-network-operator/pull/1053)
* automatic dual-stack conversion [#1034](https://github.com/openshift/cluster-network-operator/pull/1034)
* Remove LB management [#1014](https://github.com/openshift/cluster-network-operator/pull/1014)
* [Bug 1936515](https://bugzilla.redhat.com/show_bug.cgi?id=1936515): Use the election mechanism provided by library-go [#1052](https://github.com/openshift/cluster-network-operator/pull/1052)
* Allow Pods Network MTU to be configurable [#1043](https://github.com/openshift/cluster-network-operator/pull/1043)
* [Bug 1944160](https://bugzilla.redhat.com/show_bug.cgi?id=1944160): ovn: log more info about nbctl daemon database reconnections [#1040](https://github.com/openshift/cluster-network-operator/pull/1040)
* copy the service network slice [#1048](https://github.com/openshift/cluster-network-operator/pull/1048)
* [Bug 1943649](https://bugzilla.redhat.com/show_bug.cgi?id=1943649): Add command for network-check-target instead of hello-openshift [#1046](https://github.com/openshift/cluster-network-operator/pull/1046)
* Kuryr: Update OWNERS [#1044](https://github.com/openshift/cluster-network-operator/pull/1044)
* Update CNO for OVN acl audit logging [#993](https://github.com/openshift/cluster-network-operator/pull/993)
* Kuryr: Update CRDs from upstream [#1045](https://github.com/openshift/cluster-network-operator/pull/1045)
* Add support for exporting network flows [#1021](https://github.com/openshift/cluster-network-operator/pull/1021)
* Allow from router support in CNO [#981](https://github.com/openshift/cluster-network-operator/pull/981)
* [Bug 1905331](https://bugzilla.redhat.com/show_bug.cgi?id=1905331): Set requests on multus components [#1038](https://github.com/openshift/cluster-network-operator/pull/1038)
* [SDN-1249](https://issues.redhat.com/browse/SDN-1249): Bump openshift/api vendoring to pull egressrouter CRD [#1037](https://github.com/openshift/cluster-network-operator/pull/1037)
* [Bug 1916809](https://bugzilla.redhat.com/show_bug.cgi?id=1916809): mount node ovs db for multi-gather gather_network_logs [#1025](https://github.com/openshift/cluster-network-operator/pull/1025)
* Re-enable shared gateway mode [#897](https://github.com/openshift/cluster-network-operator/pull/897)
* MultiNetworkPolicy integration [#923](https://github.com/openshift/cluster-network-operator/pull/923)
* Update remaining CRDs and webhooks to v1 [#968](https://github.com/openshift/cluster-network-operator/pull/968)
* [Bug 1931997](https://bugzilla.redhat.com/show_bug.cgi?id=1931997): mark network-check-target non critical [#1004](https://github.com/openshift/cluster-network-operator/pull/1004)
* ovnkube: better logging for upgrades/downgrades [#1023](https://github.com/openshift/cluster-network-operator/pull/1023)
* [Bug 1939060](https://bugzilla.redhat.com/show_bug.cgi?id=1939060): OVN Upgrade: fix upgrade order of node and master [#1027](https://github.com/openshift/cluster-network-operator/pull/1027)
* ovn/ipsec: set maxUnavailable to 10% [#1024](https://github.com/openshift/cluster-network-operator/pull/1024)
* [Bug 1939752](https://bugzilla.redhat.com/show_bug.cgi?id=1939752): ovnkube: add missing resource requests for SBDB [#1026](https://github.com/openshift/cluster-network-operator/pull/1026)
* [Bug 1933159](https://bugzilla.redhat.com/show_bug.cgi?id=1933159): The Multus daemonset should handle 10% maxUnavailable [#992](https://github.com/openshift/cluster-network-operator/pull/992)
* [Bug 1938920](https://bugzilla.redhat.com/show_bug.cgi?id=1938920): Set maxUnavailable for ovs-node daemonset [#1020](https://github.com/openshift/cluster-network-operator/pull/1020)
* [Bug 1937452](https://bugzilla.redhat.com/show_bug.cgi?id=1937452): Fix golangci-lint violations [#1013](https://github.com/openshift/cluster-network-operator/pull/1013)
* Allow dual stack migration [#959](https://github.com/openshift/cluster-network-operator/pull/959)
* sdn: Add list/watch RBAC for endpointslices to openshift-sdn [#1003](https://github.com/openshift/cluster-network-operator/pull/1003)
* Fix possible name patterns on regex [#1015](https://github.com/openshift/cluster-network-operator/pull/1015)
* SDN-1571 ipsec: Allow enablement/disablement at runtime [#975](https://github.com/openshift/cluster-network-operator/pull/975)
* [Bug 1937005](https://bugzilla.redhat.com/show_bug.cgi?id=1937005): kuryr/alerts: change the rule for free count [#1009](https://github.com/openshift/cluster-network-operator/pull/1009)
* [Bug 1933174](https://bugzilla.redhat.com/show_bug.cgi?id=1933174): Use 10% for ovs maxUnavailable for rolling update [#996](https://github.com/openshift/cluster-network-operator/pull/996)
* config: Set enable-profiling true by default and allow `enable-profiling` as a proxy argument [#988](https://github.com/openshift/cluster-network-operator/pull/988)
* OSD-6600 network-metrics missing priorityClass [#994](https://github.com/openshift/cluster-network-operator/pull/994)
* [Bug 1934711](https://bugzilla.redhat.com/show_bug.cgi?id=1934711): Use 10% for ovnkube-node for maxUnavailable [#1000](https://github.com/openshift/cluster-network-operator/pull/1000)
* [Bug 1933173](https://bugzilla.redhat.com/show_bug.cgi?id=1933173): Use 10% for sdn maxUnavailable for rolling update [#995](https://github.com/openshift/cluster-network-operator/pull/995)
* [Bug 1933179](https://bugzilla.redhat.com/show_bug.cgi?id=1933179): Use 10% for nw-check-target maxUnavailable [#997](https://github.com/openshift/cluster-network-operator/pull/997)
* bump api version to get multiNetworkPolicy changes [#1005](https://github.com/openshift/cluster-network-operator/pull/1005)
* [Bug 1933269](https://bugzilla.redhat.com/show_bug.cgi?id=1933269): Include LB members for Machines created on day-2 operation [#999](https://github.com/openshift/cluster-network-operator/pull/999)
* cmd: stop using URL_ONLY_KUBECONFIG [#976](https://github.com/openshift/cluster-network-operator/pull/976)
* [Bug 1908916](https://bugzilla.redhat.com/show_bug.cgi?id=1908916): disable ovsdb column diffs if supported [#964](https://github.com/openshift/cluster-network-operator/pull/964)
* Enable golangci-lint; fix up lint issues [#984](https://github.com/openshift/cluster-network-operator/pull/984)
* [Bug 1924425](https://bugzilla.redhat.com/show_bug.cgi?id=1924425): Update protobuf version to address CVE-2021-3121 [#985](https://github.com/openshift/cluster-network-operator/pull/985)
* [Bug 1920209](https://bugzilla.redhat.com/show_bug.cgi?id=1920209): The pods in the Multus daemonset should exit in a reasonable time during an upgrade. [#962](https://github.com/openshift/cluster-network-operator/pull/962)
* [Bug 1927244](https://bugzilla.redhat.com/show_bug.cgi?id=1927244): Kuryr: Always set worker_nodes_subnets [#980](https://github.com/openshift/cluster-network-operator/pull/980)
* [Bug 1928157](https://bugzilla.redhat.com/show_bug.cgi?id=1928157): Don't set ClusterOperator Version until rollout is complete [#979](https://github.com/openshift/cluster-network-operator/pull/979)
* : Bug 1913399: Bump flow control apiVersion to beta [#937](https://github.com/openshift/cluster-network-operator/pull/937)
* Suppress sleep message in ovn-ipsec container [#971](https://github.com/openshift/cluster-network-operator/pull/971)
* [Bug 1921184](https://bugzilla.redhat.com/show_bug.cgi?id=1921184): Kuryr: Let Kuryr autodetect primary CNI interface [#969](https://github.com/openshift/cluster-network-operator/pull/969)
* [Bug 1838343](https://bugzilla.redhat.com/show_bug.cgi?id=1838343): Improve the sb-db and nb-db readiness check to ensure it fails when cluster is not stable. [#655](https://github.com/openshift/cluster-network-operator/pull/655)
* [Bug 1912820](https://bugzilla.redhat.com/show_bug.cgi?id=1912820): competing connectivitycheckcontrollers cause pod restarts during upgrades [#970](https://github.com/openshift/cluster-network-operator/pull/970)
* [Bug 1918375](https://bugzilla.redhat.com/show_bug.cgi?id=1918375): Add tokenreviews permissions for kube-proxy [#960](https://github.com/openshift/cluster-network-operator/pull/960)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c4b5b42127ac0ebd9ce5c5c57c1a15949319bdc1...a2b4ffef1f9ec49164fd26c8f1adf6c85fb30ca8)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fd64b6e2d00c8e793fd42fc8bff841aeb3f7dca1)

* [Bug 2018053](https://bugzilla.redhat.com/show_bug.cgi?id=2018053): tuned: add timeout and restarts [#286](https://github.com/openshift/cluster-node-tuning-operator/pull/286)
* [Bug 2013678](https://bugzilla.redhat.com/show_bug.cgi?id=2013678): TuneD: workaround for high CPU utilization of [scheduler] plug-in. [#280](https://github.com/openshift/cluster-node-tuning-operator/pull/280)
* [Bug 1998120](https://bugzilla.redhat.com/show_bug.cgi?id=1998120): Add a cgroup blacklisting rule to parent openshift profile. [#266](https://github.com/openshift/cluster-node-tuning-operator/pull/266)
* [Bug 1999608](https://bugzilla.redhat.com/show_bug.cgi?id=1999608): Reload when deps of recommended profile change. [#268](https://github.com/openshift/cluster-node-tuning-operator/pull/268)
* [Bug 1986992](https://bugzilla.redhat.com/show_bug.cgi?id=1986992): Handle kube-apiserver disruption more gracefully. [#257](https://github.com/openshift/cluster-node-tuning-operator/pull/257)
* [Bug 1985908](https://bugzilla.redhat.com/show_bug.cgi?id=1985908): scheduler: new option cgroup_ps_blacklist [#254](https://github.com/openshift/cluster-node-tuning-operator/pull/254)
* [Bug 1980788](https://bugzilla.redhat.com/show_bug.cgi?id=1980788): Updating to the latest stalld v1.13.0. [#247](https://github.com/openshift/cluster-node-tuning-operator/pull/247)
* [Bug 1974718](https://bugzilla.redhat.com/show_bug.cgi?id=1974718): Fix conditional order for setting net device param. [#240](https://github.com/openshift/cluster-node-tuning-operator/pull/240)
* [Bug 1973237](https://bugzilla.redhat.com/show_bug.cgi?id=1973237): Switch back to NTO-shipped stalld. [#237](https://github.com/openshift/cluster-node-tuning-operator/pull/237)
* [Bug 1969832](https://bugzilla.redhat.com/show_bug.cgi?id=1969832): TuneD: fix multiple inheritance where parents include common ancestor [#233](https://github.com/openshift/cluster-node-tuning-operator/pull/233)
* [Bug 1966294](https://bugzilla.redhat.com/show_bug.cgi?id=1966294): Address CVE-2021-33194 in golang.org/x/net [#232](https://github.com/openshift/cluster-node-tuning-operator/pull/232)
* [Bug 1963848](https://bugzilla.redhat.com/show_bug.cgi?id=1963848): Use OS-shipped stalld vs. the NTO-shipped one. [#226](https://github.com/openshift/cluster-node-tuning-operator/pull/226)
* [Bug 1963866](https://bugzilla.redhat.com/show_bug.cgi?id=1963866): Bump vendor dependencies to k8s 1.21.1 [#231](https://github.com/openshift/cluster-node-tuning-operator/pull/231)
* [Bug 1962219](https://bugzilla.redhat.com/show_bug.cgi?id=1962219): Switch to client-go leader-with-lease election. [#229](https://github.com/openshift/cluster-node-tuning-operator/pull/229)
* [Bug 1962630](https://bugzilla.redhat.com/show_bug.cgi?id=1962630): Update to the current upstream TuneD. [#230](https://github.com/openshift/cluster-node-tuning-operator/pull/230)
* [Bug 1960337](https://bugzilla.redhat.com/show_bug.cgi?id=1960337): manifests: fix selector in node-tuning-operator ServiceMonitor [#227](https://github.com/openshift/cluster-node-tuning-operator/pull/227)
* Rename workload annotations [#225](https://github.com/openshift/cluster-node-tuning-operator/pull/225)
* [Bug 1948782](https://bugzilla.redhat.com/show_bug.cgi?id=1948782): Revert "add 'single-node-production-edge' annotations to CVO manifests." [#224](https://github.com/openshift/cluster-node-tuning-operator/pull/224)
* Bump to golang 1.16 and various vendor deps. [#222](https://github.com/openshift/cluster-node-tuning-operator/pull/222)
* Add management workload annotations [#223](https://github.com/openshift/cluster-node-tuning-operator/pull/223)
* TuneD: udev: explicitly sort udev properties [#221](https://github.com/openshift/cluster-node-tuning-operator/pull/221)
* Add additionalPrinterColumns to profiles CRD. [#220](https://github.com/openshift/cluster-node-tuning-operator/pull/220)
* Updating cluster-node-tuning-operator builder & base images to be consistent with ART [#218](https://github.com/openshift/cluster-node-tuning-operator/pull/218)
* Add "core" e2e tests. [#217](https://github.com/openshift/cluster-node-tuning-operator/pull/217)
* Bump to the latest ignition 3.2 [#216](https://github.com/openshift/cluster-node-tuning-operator/pull/216)
* Add e2e test for adjusting netdev queue count. [#214](https://github.com/openshift/cluster-node-tuning-operator/pull/214)
* Updating to the latest stalld v1.9.0. [#213](https://github.com/openshift/cluster-node-tuning-operator/pull/213)
* Do not manupulate BLS entries and grub config [#212](https://github.com/openshift/cluster-node-tuning-operator/pull/212)
* [Bug 1926903](https://bugzilla.redhat.com/show_bug.cgi?id=1926903): Keep ignition units in sync with [service] plugin. [#211](https://github.com/openshift/cluster-node-tuning-operator/pull/211)
* [Bug 1926903](https://bugzilla.redhat.com/show_bug.cgi?id=1926903): Instantiate the stalld systemd unit as disabled. [#207](https://github.com/openshift/cluster-node-tuning-operator/pull/207)
* stalld: Remove another architecture specific gcc flag [#209](https://github.com/openshift/cluster-node-tuning-operator/pull/209)
* Do not include *-patch files in /manifests. [#208](https://github.com/openshift/cluster-node-tuning-operator/pull/208)
* Remove Dockerfile.rhel7 no longer needed [#203](https://github.com/openshift/cluster-node-tuning-operator/pull/203)
* Updating cluster-node-tuning-operator images to be consistent with new ART images [#194](https://github.com/openshift/cluster-node-tuning-operator/pull/194)
* Support for adjusting netdev queue count. [#205](https://github.com/openshift/cluster-node-tuning-operator/pull/205)
* Add more related objects to ClusterOperator. [#206](https://github.com/openshift/cluster-node-tuning-operator/pull/206)
* Updating cluster-node-tuning-operator builder & base images to be consistent with ART [#204](https://github.com/openshift/cluster-node-tuning-operator/pull/204)
* Add status conditions and profile applied to Profile(s) [#188](https://github.com/openshift/cluster-node-tuning-operator/pull/188)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3066601cab5378f1c155f9a98995614f0168f803...fd64b6e2d00c8e793fd42fc8bff841aeb3f7dca1)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/7f0e9b6659949421100469e3af399888cca7042e)

* [Bug 2052097](https://bugzilla.redhat.com/show_bug.cgi?id=2052097): global pull secret not working in OCP4.7.4+ for additio… [#493](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/493)
* [Bug 2003946](https://bugzilla.redhat.com/show_bug.cgi?id=2003946): Deploy PDB to prevent more than one replica going unavailable [#473](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/473)
* [Bug 1994655](https://bugzilla.redhat.com/show_bug.cgi?id=1994655): apiservice-controller: don't update the failing condition when an operator has been requested to shutdown [#482](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/482)
* [Bug 1996044](https://bugzilla.redhat.com/show_bug.cgi?id=1996044): bindata: run openshift-apiserver as root explicitly. [#467](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/467)
* [Bug 1979303](https://bugzilla.redhat.com/show_bug.cgi?id=1979303): clear encryption conditions when there is no work to be done [#463](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/463)
* [Bug 1969631](https://bugzilla.redhat.com/show_bug.cgi?id=1969631): encryption controllers wait for all informers before running the sync loops [#456](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/456)
* [Bug 1879182](https://bugzilla.redhat.com/show_bug.cgi?id=1879182): audit policies now use 'secure-' by default, remove custom getter [#455](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/455)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): splits the encryption tests [#454](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/454)
* [Bug 1943804](https://bugzilla.redhat.com/show_bug.cgi?id=1943804): stub for splitting encryption tests [#453](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/453)
* [Bug 1961561](https://bugzilla.redhat.com/show_bug.cgi?id=1961561): pick up the precondition checker for reducing encryption QPS [#451](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/451)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Switch to Golang 1.16 for build-root [#448](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/448)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#452](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/452)
* Rename workload annotations [#446](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/446)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#447](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/447)
* Add management workload annotations [#443](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/443)
* [Bug 1942725](https://bugzilla.redhat.com/show_bug.cgi?id=1942725): explicitly allow apiserver pods to write to their root FS [#437](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/437)
* extends shutdown delay duration to 10 seconds [#442](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/442)
* expose pod information to oas container via env variables [#440](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/440)
* bump lib-go to pick up workload progressing changes [#439](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/439)
* update library-go to fix tight loops [#438](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/438)
* Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#436](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/436)
* bump lib-go ti pick up latest audit config and workload controller changes [#435](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/435)
* removes the encryption provider [#432](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/432)
* Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART [#431](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/431)
* switch to v1beta1 for the p&f APIs [#425](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/425)
* [Bug 1912820](https://bugzilla.redhat.com/show_bug.cgi?id=1912820): competing connectivitycheckcontrollers cause pod restarts during upgrades [#430](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/430)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/df9b1a45165dd1a2cc17b5a885370093bb237e41...7f0e9b6659949421100469e3af399888cca7042e)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/286c157755c8120ce969c7c15f969737b46b1a0a)

* [Bug 1965283](https://bugzilla.redhat.com/show_bug.cgi?id=1965283): Static Resources Controller for Sync [#216](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/216)
* [Bug 1925409](https://bugzilla.redhat.com/show_bug.cgi?id=1925409): Let openshift-controller-manager create service account tokens [#213](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/213)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#212](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/212)
* [Bug 1948011](https://bugzilla.redhat.com/show_bug.cgi?id=1948011): seed upgradeable condition in ocm-o cluster operator status so library-go union code can find it [#210](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/210)
* Add management workload annotations [#206](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/206)
* [Bug 1947793](https://bugzilla.redhat.com/show_bug.cgi?id=1947793): Deprecated API in use [#208](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/208)
* Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART [#202](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/202)
* [Bug 1941526](https://bugzilla.redhat.com/show_bug.cgi?id=1941526): Bump kubernetes to 0.20.5 [#203](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/203)
* [BUILD-186](https://issues.redhat.com/browse/BUILD-186): add buildconfig/status permissions to ocm [#201](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/201)
* switch to v1beta1 for the p&f APIs [#192](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/192)
* [Bug 1911470](https://bugzilla.redhat.com/show_bug.cgi?id=1911470): Set registry routes in operand config [#197](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/197)
* Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART [#198](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/198)
* Remove tnozicka from OWNERS [#196](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/196)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2a8963a9c5755d4951d882bd816cd4d6ccdf02cd...286c157755c8120ce969c7c15f969737b46b1a0a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/ec46ea5ce3735fcb3d10290834f9ae5fb31148f0)

* Updating cluster-policy-controller builder & base images to be consistent with ART [#59](https://github.com/openshift/cluster-policy-controller/pull/59)
* [Bug 1934164](https://bugzilla.redhat.com/show_bug.cgi?id=1934164): Bump github.com/gogo/protobuf to v1.3.2 [#57](https://github.com/openshift/cluster-policy-controller/pull/57)
* Sync with the latest library-go to pull new crypto ciphers [#56](https://github.com/openshift/cluster-policy-controller/pull/56)
* Updating cluster-policy-controller builder & base images to be consistent with ART [#55](https://github.com/openshift/cluster-policy-controller/pull/55)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/42791bac64066daac0922b3d77e4bd86edae3b4e...ec46ea5ce3735fcb3d10290834f9ae5fb31148f0)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/31fb491fc14faed6ebbe41a526764947069ff0a2)

* seed relatedObjects in manifest yaml [#376](https://github.com/openshift/cluster-samples-operator/pull/376)
* [Bug 1960334](https://bugzilla.redhat.com/show_bug.cgi?id=1960334): manifests: fix selector in ServiceMonitor [#374](https://github.com/openshift/cluster-samples-operator/pull/374)
* [Bug 1955100](https://bugzilla.redhat.com/show_bug.cgi?id=1955100): Fixing Deprecated API in use [#373](https://github.com/openshift/cluster-samples-operator/pull/373)
* Rename workload annotations [#372](https://github.com/openshift/cluster-samples-operator/pull/372)
* [Bug 1949481](https://bugzilla.redhat.com/show_bug.cgi?id=1949481): add DeepCopy to avoid SharedInformer cache mutation [#369](https://github.com/openshift/cluster-samples-operator/pull/369)
* [Bug 1950236](https://bugzilla.redhat.com/show_bug.cgi?id=1950236): OKD: replace some docker.io images with quay.io [#360](https://github.com/openshift/cluster-samples-operator/pull/360)
* [BUILD-249](https://issues.redhat.com/browse/BUILD-249): openshift/library sync for 4.8 [#367](https://github.com/openshift/cluster-samples-operator/pull/367)
* [Bug 1948782](https://bugzilla.redhat.com/show_bug.cgi?id=1948782): revert single-node-production-edge annotation [#368](https://github.com/openshift/cluster-samples-operator/pull/368)
* bump(k8s) 1.21.0 [#365](https://github.com/openshift/cluster-samples-operator/pull/365)
* Add management workload annotations [#366](https://github.com/openshift/cluster-samples-operator/pull/366)
* Fix Typo [#364](https://github.com/openshift/cluster-samples-operator/pull/364)
* Add IBM cloud managed profile manifest patch [#363](https://github.com/openshift/cluster-samples-operator/pull/363)
* Remove hello-openshift imagestream [#362](https://github.com/openshift/cluster-samples-operator/pull/362)
* Updating ose-cluster-samples-operator builder & base images to be consistent with ART [#361](https://github.com/openshift/cluster-samples-operator/pull/361)
* Updating ose-cluster-samples-operator builder & base images to be consistent with ART [#355](https://github.com/openshift/cluster-samples-operator/pull/355)
* [Bug 1930570](https://bugzilla.redhat.com/show_bug.cgi?id=1930570): Update Jenkins monitored templates names [#357](https://github.com/openshift/cluster-samples-operator/pull/357)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/0df8f92c275b9eccfb1b3ccdd79fb861ddee1d99...31fb491fc14faed6ebbe41a526764947069ff0a2)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/54f1a906734849db6daf4951346816f005803d66)

* [Bug 2034270](https://bugzilla.redhat.com/show_bug.cgi?id=2034270): Add trusted CA bundle to vsphere operators [#249](https://github.com/openshift/cluster-storage-operator/pull/249)
* [Bug 1996672](https://bugzilla.redhat.com/show_bug.cgi?id=1996672): Add proxy support to cinder CSI [#210](https://github.com/openshift/cluster-storage-operator/pull/210)
* [Bug 1986026](https://bugzilla.redhat.com/show_bug.cgi?id=1986026): Manila CSI driver is not in must-gather [#192](https://github.com/openshift/cluster-storage-operator/pull/192)
* [Bug 1947402](https://bugzilla.redhat.com/show_bug.cgi?id=1947402): Add permissions poddisruptionbudgets in AWS CSI operator' [#171](https://github.com/openshift/cluster-storage-operator/pull/171)
* [Bug 1961120](https://bugzilla.redhat.com/show_bug.cgi?id=1961120): added permissions to service monitoring [#167](https://github.com/openshift/cluster-storage-operator/pull/167)
* [Bug 1936871](https://bugzilla.redhat.com/show_bug.cgi?id=1936871): Add volumes with credentials to Cinder operator deployment [#141](https://github.com/openshift/cluster-storage-operator/pull/141)
* [Bug 1961538](https://bugzilla.redhat.com/show_bug.cgi?id=1961538): manifests: remove namespace from cluster-storage-operator-role binding [#168](https://github.com/openshift/cluster-storage-operator/pull/168)
* [Bug 1943719](https://bugzilla.redhat.com/show_bug.cgi?id=1943719): Add alert about vsphere-problem-detector unable to connect [#166](https://github.com/openshift/cluster-storage-operator/pull/166)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#165](https://github.com/openshift/cluster-storage-operator/pull/165)
* Rename workload annotations [#164](https://github.com/openshift/cluster-storage-operator/pull/164)
* [Bug 1949357](https://bugzilla.redhat.com/show_bug.cgi?id=1949357): Add missing RBAC rules to Manila operator [#163](https://github.com/openshift/cluster-storage-operator/pull/163)
* [Bug 1948505](https://bugzilla.redhat.com/show_bug.cgi?id=1948505): Add missing RBAC rules for vSphere [#156](https://github.com/openshift/cluster-storage-operator/pull/156)
* [Bug 1948721](https://bugzilla.redhat.com/show_bug.cgi?id=1948721): IBM Cloud manifest profile patch [#146](https://github.com/openshift/cluster-storage-operator/pull/146)
* [Bug 1947360](https://bugzilla.redhat.com/show_bug.cgi?id=1947360): vSphere: set CPU/memory resource request [#157](https://github.com/openshift/cluster-storage-operator/pull/157)
* [Bug 1949357](https://bugzilla.redhat.com/show_bug.cgi?id=1949357): Allow Manila operator to create ServiceMonitor in the driver namespace [#162](https://github.com/openshift/cluster-storage-operator/pull/162)
* [Bug 1947866](https://bugzilla.redhat.com/show_bug.cgi?id=1947866): Add log level to Azure Disk CSI Operator [#159](https://github.com/openshift/cluster-storage-operator/pull/159)
* [Bug 1948448](https://bugzilla.redhat.com/show_bug.cgi?id=1948448): Add log level to vSphere operator [#158](https://github.com/openshift/cluster-storage-operator/pull/158)
* [Bug 1949554](https://bugzilla.redhat.com/show_bug.cgi?id=1949554): Pass KUBE_RBAC_PROXY to vSphere CSI driver operator [#161](https://github.com/openshift/cluster-storage-operator/pull/161)
* [Bug 1924500](https://bugzilla.redhat.com/show_bug.cgi?id=1924500): Rebase to Kubernetes 1.21 libraries [#160](https://github.com/openshift/cluster-storage-operator/pull/160)
* [Bug 1949041](https://bugzilla.redhat.com/show_bug.cgi?id=1949041): Update image-references for vsphere [#155](https://github.com/openshift/cluster-storage-operator/pull/155)
* Remove "vmware" prefix from CSI operator and driver [#149](https://github.com/openshift/cluster-storage-operator/pull/149)
* Add management workload annotations [#150](https://github.com/openshift/cluster-storage-operator/pull/150)
* Add vsphere syncer deployment [#153](https://github.com/openshift/cluster-storage-operator/pull/153)
* Degrade the cluster when an unsupported CSI driver is already installed [#152](https://github.com/openshift/cluster-storage-operator/pull/152)
* Add TokenReview permissions to newly introduced operators [#154](https://github.com/openshift/cluster-storage-operator/pull/154)
* Pass KUBE_RBAC_PROXY_IMAGE to CSI driver operators [#151](https://github.com/openshift/cluster-storage-operator/pull/151)
* Add AzureDisk CSI driver installation [#148](https://github.com/openshift/cluster-storage-operator/pull/148)
* Start tech-preview CSI driver operators when tech preview is enabled [#144](https://github.com/openshift/cluster-storage-operator/pull/144)
* Prepare for metrics collection in CSI driver operators [#145](https://github.com/openshift/cluster-storage-operator/pull/145)
* Add service account names to credentials request manifest [#136](https://github.com/openshift/cluster-storage-operator/pull/136)
* Updating cluster-storage-operator builder & base images to be consistent with ART [#143](https://github.com/openshift/cluster-storage-operator/pull/143)
* Allow log level to be replaced [#142](https://github.com/openshift/cluster-storage-operator/pull/142)
* Prevent panic on webhook authenticator and authorizer timeout before response [#139](https://github.com/openshift/cluster-storage-operator/pull/139)
* Propagate log level to GCE and Cinder CSI driver operators [#138](https://github.com/openshift/cluster-storage-operator/pull/138)
* Updating cluster-storage-operator builder & base images to be consistent with ART [#135](https://github.com/openshift/cluster-storage-operator/pull/135)
* Fix typo in README.md [#116](https://github.com/openshift/cluster-storage-operator/pull/116)
* vsphere: don't redeploy StorageClass in every sync [#129](https://github.com/openshift/cluster-storage-operator/pull/129)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6d2c25f3cfb931deca457a0c6261651c1a64c464...54f1a906734849db6daf4951346816f005803d66)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/87835b737f0a90a6259150746114f251241bf52e)

* Pack both keys in one verifier-public-key-ci entry [#35](https://github.com/openshift/cluster-update-keys/pull/35)
* Adding the new Openshift CI Signer key [#33](https://github.com/openshift/cluster-update-keys/pull/33)
* [Bug 1919356](https://bugzilla.redhat.com/show_bug.cgi?id=1919356): Add IBM Cloud managed annotations to CVO manifests [#24](https://github.com/openshift/cluster-update-keys/pull/24)
* Updating ose-cluster-update-keys builder & base images to be consistent with ART [#31](https://github.com/openshift/cluster-update-keys/pull/31)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/b7e791773b67f9acd6f521b8c1f69778e43a7d94...87835b737f0a90a6259150746114f251241bf52e)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/4b28e9e5d342f14fd599174c2dc2083e5ccdf3b4)

* [Bug 2047434](https://bugzilla.redhat.com/show_bug.cgi?id=2047434): Changing the ClusterNotUpgradeable alert to info [#731](https://github.com/openshift/cluster-version-operator/pull/731)
* [Bug 2038936](https://bugzilla.redhat.com/show_bug.cgi?id=2038936): *: Use --v=2 logging to drop client-side throttling noise [#724](https://github.com/openshift/cluster-version-operator/pull/724)
* [Bug 1982683](https://bugzilla.redhat.com/show_bug.cgi?id=1982683): [release-4.8] Respect noProxy [#691](https://github.com/openshift/cluster-version-operator/pull/691)
* [Bug 2025955](https://bugzilla.redhat.com/show_bug.cgi?id=2025955): Removing the extra indentation [#696](https://github.com/openshift/cluster-version-operator/pull/696)
* [Bug 2015025](https://bugzilla.redhat.com/show_bug.cgi?id=2015025): lib/resourcemerge/imagestream.go: Copy all data for new tag reference [#679](https://github.com/openshift/cluster-version-operator/pull/679)
* [Bug 2011954](https://bugzilla.redhat.com/show_bug.cgi?id=2011954): pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False [#672](https://github.com/openshift/cluster-version-operator/pull/672)
* [Bug 1999092](https://bugzilla.redhat.com/show_bug.cgi?id=1999092): Add and enable admin ack Upgradeable condition gate [#647](https://github.com/openshift/cluster-version-operator/pull/647)
* [Bug 1999777](https://bugzilla.redhat.com/show_bug.cgi?id=1999777): Ensure recent etcd backup before allowing minor-version updates [#649](https://github.com/openshift/cluster-version-operator/pull/649)
* [Bug 1980411](https://bugzilla.redhat.com/show_bug.cgi?id=1980411): [release-4.8] pkg/cvo/egress: Load HTTPS proxy from Proxy status [#627](https://github.com/openshift/cluster-version-operator/pull/627)
* [Bug 1879184](https://bugzilla.redhat.com/show_bug.cgi?id=1879184): Fixing the log message in rbac.go for clusterrole [#588](https://github.com/openshift/cluster-version-operator/pull/588)
* [Bug 1879184](https://bugzilla.redhat.com/show_bug.cgi?id=1879184): Log object updates and show existing/required diff [#561](https://github.com/openshift/cluster-version-operator/pull/561)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): prevent pod deployment deadlock due to custom SA projected volume injection [#585](https://github.com/openshift/cluster-version-operator/pull/585)
* docs/dev: Fix code block brackets in run-cvo-locally.md [#581](https://github.com/openshift/cluster-version-operator/pull/581)
* [Bug 1881484](https://bugzilla.redhat.com/show_bug.cgi?id=1881484): Set defaults in deployment [#559](https://github.com/openshift/cluster-version-operator/pull/559)
* [Bug 1941901](https://bugzilla.redhat.com/show_bug.cgi?id=1941901): lib/resourcemerge/core: Fix toleration matching logic [#578](https://github.com/openshift/cluster-version-operator/pull/578)
* [Bug 1881514](https://bugzilla.redhat.com/show_bug.cgi?id=1881514): Prevent hotlooping in ImageStreams [#579](https://github.com/openshift/cluster-version-operator/pull/579)
* hack/generate-lib-resources: Use library-go manifests [#552](https://github.com/openshift/cluster-version-operator/pull/552)
* [Bug 1947797](https://bugzilla.redhat.com/show_bug.cgi?id=1947797): Bumping openshift/api to vendor apiextensions.k8s.io/v1 [#567](https://github.com/openshift/cluster-version-operator/pull/567)
* Update a doc example to match modern OCP [#524](https://github.com/openshift/cluster-version-operator/pull/524)
* [Bug 1962882](https://bugzilla.redhat.com/show_bug.cgi?id=1962882): pkg/cvo/updatepayload: Set priorityClassName for the version Job [#571](https://github.com/openshift/cluster-version-operator/pull/571)
* [Bug 1927168](https://bugzilla.redhat.com/show_bug.cgi?id=1927168): pkg/cvo/sync_worker: Increment Attempt on failed reconciliation [#569](https://github.com/openshift/cluster-version-operator/pull/569)
* [Bug 1881481](https://bugzilla.redhat.com/show_bug.cgi?id=1881481): TargetPort should default to port in ServicePort if unset [#563](https://github.com/openshift/cluster-version-operator/pull/563)
* [Bug 1881520](https://bugzilla.redhat.com/show_bug.cgi?id=1881520): avoid hotlooping on RoleBindings with empty APIGroup [#562](https://github.com/openshift/cluster-version-operator/pull/562)
* Dockerfile*: Bump to Go 1.16 [#564](https://github.com/openshift/cluster-version-operator/pull/564)
* [Bug 1960554](https://bugzilla.redhat.com/show_bug.cgi?id=1960554): Remove rbacv1beta1 support [#565](https://github.com/openshift/cluster-version-operator/pull/565)
* [Bug 1927168](https://bugzilla.redhat.com/show_bug.cgi?id=1927168): pkg/cvo/internal/operatorstatus: Replace wait-for with single-shot "is it alive now?" [#560](https://github.com/openshift/cluster-version-operator/pull/560)
* [Bug 1881481](https://bugzilla.redhat.com/show_bug.cgi?id=1881481): Only compare ServiceType when set in manifest [#558](https://github.com/openshift/cluster-version-operator/pull/558)
* [Bug 1957991](https://bugzilla.redhat.com/show_bug.cgi?id=1957991): install/0000_90_cluster-version-operator_02_servicemonitor: Update ClusterOperatorDegraded message to 30m [#556](https://github.com/openshift/cluster-version-operator/pull/556)
* [Bug 1957775](https://bugzilla.redhat.com/show_bug.cgi?id=1957775): pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node [#553](https://github.com/openshift/cluster-version-operator/pull/553)
* [Bug 1957991](https://bugzilla.redhat.com/show_bug.cgi?id=1957991): install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded [#554](https://github.com/openshift/cluster-version-operator/pull/554)
* [Bug 1834551](https://bugzilla.redhat.com/show_bug.cgi?id=1834551): pkg/cvo/metrics: Ignore Degraded for cluster_operator_up [#550](https://github.com/openshift/cluster-version-operator/pull/550)
* Rename workload annotations [#548](https://github.com/openshift/cluster-version-operator/pull/548)
* [Bug 1951339](https://bugzilla.redhat.com/show_bug.cgi?id=1951339): lib/resourcemerge/core: Clear env and envFrom if unset in manifest [#549](https://github.com/openshift/cluster-version-operator/pull/549)
* [Bug 1950430](https://bugzilla.redhat.com/show_bug.cgi?id=1950430): pkg/cvo/metrics: Drop HTTP, require HTTPS for metrics access [#481](https://github.com/openshift/cluster-version-operator/pull/481)
* Add management workload annotations [#543](https://github.com/openshift/cluster-version-operator/pull/543)
* docs/user/reconciliation: Add some English to the release image inspection [#542](https://github.com/openshift/cluster-version-operator/pull/542)
* pkg/cvo/internal/operatorstatus: Drop deprecated failing/progressing handling [#527](https://github.com/openshift/cluster-version-operator/pull/527)
* lib/resourcemerge/rbac: Reconcile ClusterRole.AggregationRule [#544](https://github.com/openshift/cluster-version-operator/pull/544)
* docs/user/status: Mention channel-clearing for VersionNotFound [#541](https://github.com/openshift/cluster-version-operator/pull/541)
* [Bug 1938947](https://bugzilla.redhat.com/show_bug.cgi?id=1938947): Ensure automountServiceAccountToken is synced on service account updates [#537](https://github.com/openshift/cluster-version-operator/pull/537)
* Document impact of upgradeable condition on the ability to begin an upgrade [#538](https://github.com/openshift/cluster-version-operator/pull/538)
* Updating cluster-version-operator builder & base images to be consistent with ART [#515](https://github.com/openshift/cluster-version-operator/pull/515)
* [Bug 1871303](https://bugzilla.redhat.com/show_bug.cgi?id=1871303): metrics: serve metrics after leader lock acquired [#528](https://github.com/openshift/cluster-version-operator/pull/528)
* pkg/cvo/metrics: Exclude unrecognized statuses from cluster_operator_conditions [#530](https://github.com/openshift/cluster-version-operator/pull/530)
* [Bug 1929917](https://bugzilla.redhat.com/show_bug.cgi?id=1929917): pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator [#531](https://github.com/openshift/cluster-version-operator/pull/531)
* pkg/cvo/internal/operatorstatus: Change nested message [#514](https://github.com/openshift/cluster-version-operator/pull/514)
* Use profile from the installer to render CVO manifests [#522](https://github.com/openshift/cluster-version-operator/pull/522)
* Revert "Merge pull request #523 from jottofar/cv-logging" [#529](https://github.com/openshift/cluster-version-operator/pull/529)
* pkg/cvo: Add logging to track ClusterVersion [#523](https://github.com/openshift/cluster-version-operator/pull/523)
* pkg/payload/task: Fix UpdateEffectType const comments [#513](https://github.com/openshift/cluster-version-operator/pull/513)
* [Bug 1927944](https://bugzilla.redhat.com/show_bug.cgi?id=1927944): pkg/start: Fix shutdown deadlock when die before getting a leader lock [#519](https://github.com/openshift/cluster-version-operator/pull/519)
* pkg/cvo/upgradeable: Fix "Upgradebale" -> "Upgradeable" [#459](https://github.com/openshift/cluster-version-operator/pull/459)
* pkg/cvo/metrics: Log metrics-server shutdown [#453](https://github.com/openshift/cluster-version-operator/pull/453)
* pkg/cvo/sync_worker: Make expected/actual version mismatch fatal [#431](https://github.com/openshift/cluster-version-operator/pull/431)
* [Bug 1926310](https://bugzilla.redhat.com/show_bug.cgi?id=1926310): install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust "CannotRetrieveUpdates" to "warning" [#509](https://github.com/openshift/cluster-version-operator/pull/509)
* pkg/cvo/updatepayload: Fix "verifcation" -> "verification" typo [#511](https://github.com/openshift/cluster-version-operator/pull/511)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/cc81827c1bfe322bd78d2fa0d9b34d532190d850...4b28e9e5d342f14fd599174c2dc2083e5ccdf3b4)


### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/0d221296e3918abc3c1367a1e7c220baf000965a)

* Updating configmap-reload builder & base images to be consistent with ART [#32](https://github.com/openshift/configmap-reload/pull/32)
* vendor: fix inconsistent vendoring [#30](https://github.com/openshift/configmap-reload/pull/30)
* Updating configmap-reload builder & base images to be consistent with ART [#28](https://github.com/openshift/configmap-reload/pull/28)
* vendor: regenerate [#29](https://github.com/openshift/configmap-reload/pull/29)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/25dfb671c6ce9a73f5594efe699ed410fbf01d44...0d221296e3918abc3c1367a1e7c220baf000965a)


### [console](https://github.com/openshift/console/tree/7ed376d82fd9b12796a0a8c32f6964517ec9ff8a)

* [Bug 2066365](https://bugzilla.redhat.com/show_bug.cgi?id=2066365): (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls [#11271](https://github.com/openshift/console/pull/11271)
* [Bug 2060450](https://bugzilla.redhat.com/show_bug.cgi?id=2060450): Fix that the preferred namespace was not selected when it contains just numbers [#11134](https://github.com/openshift/console/pull/11134)
* [Bug 2055132](https://bugzilla.redhat.com/show_bug.cgi?id=2055132): Fix TypeError when application has HelmRelease [#11069](https://github.com/openshift/console/pull/11069)
* [Bug 2060616](https://bugzilla.redhat.com/show_bug.cgi?id=2060616): Add error boundary in edit-flows [#11137](https://github.com/openshift/console/pull/11137)
* [Bug 2061266](https://bugzilla.redhat.com/show_bug.cgi?id=2061266): Update e2e test to use 3scale operator to increase test stability [#11141](https://github.com/openshift/console/pull/11141)
* [Bug 2046215](https://bugzilla.redhat.com/show_bug.cgi?id=2046215): Filter superseded helm secrets and fix firehose to support partial metadata [#10936](https://github.com/openshift/console/pull/10936)
* [Bug 2045592](https://bugzilla.redhat.com/show_bug.cgi?id=2045592): Check if name label exists before comparing [#10929](https://github.com/openshift/console/pull/10929)
* [Bug 2048900](https://bugzilla.redhat.com/show_bug.cgi?id=2048900): Fix knative function label cherry pick [#10987](https://github.com/openshift/console/pull/10987)
* [Bug 2045051](https://bugzilla.redhat.com/show_bug.cgi?id=2045051): Add subject name selector field to SinkBinding form [#10925](https://github.com/openshift/console/pull/10925)
* [Bug 2046051](https://bugzilla.redhat.com/show_bug.cgi?id=2046051): Add support for fetching partial metadata and fix helm list page crash [#10932](https://github.com/openshift/console/pull/10932)
* [Bug 2004086](https://bugzilla.redhat.com/show_bug.cgi?id=2004086): Add name field in edit deployment form [#10873](https://github.com/openshift/console/pull/10873)
* [Bug 2046043](https://bugzilla.redhat.com/show_bug.cgi?id=2046043): Topology performance: Do not fetch HPA for each Deployment (Pod Ring) [#10931](https://github.com/openshift/console/pull/10931)
* [Bug 2008141](https://bugzilla.redhat.com/show_bug.cgi?id=2008141): Allow web terminal to be installed in any namespace [#10134](https://github.com/openshift/console/pull/10134)
* [Bug 2019301](https://bugzilla.redhat.com/show_bug.cgi?id=2019301): Check for resource in ServiceBinding spec's service reference [#10376](https://github.com/openshift/console/pull/10376)
* [Bug 2018064](https://bugzilla.redhat.com/show_bug.cgi?id=2018064): fix dev-catalog stuck in loading state [#10346](https://github.com/openshift/console/pull/10346)
* [Bug 2044571](https://bugzilla.redhat.com/show_bug.cgi?id=2044571): Update CRW operator name to fix failing e2e tests [#10918](https://github.com/openshift/console/pull/10918)
* [Bug 2036045](https://bugzilla.redhat.com/show_bug.cgi?id=2036045): fix resource limit form validation [#10788](https://github.com/openshift/console/pull/10788)
* [Bug 2034640](https://bugzilla.redhat.com/show_bug.cgi?id=2034640): cant delete VM with un-owned pvc attached [#10718](https://github.com/openshift/console/pull/10718)
* [Bug 2030443](https://bugzilla.redhat.com/show_bug.cgi?id=2030443): Fix ClusterOperators link [#10638](https://github.com/openshift/console/pull/10638)
* [Bug 2024206](https://bugzilla.redhat.com/show_bug.cgi?id=2024206): Fix resource metrics 403 errors for project admin users [#10496](https://github.com/openshift/console/pull/10496)
* [Bug 2026950](https://bugzilla.redhat.com/show_bug.cgi?id=2026950): Fix autofocus on pf select component for search resource dropdown [#10577](https://github.com/openshift/console/pull/10577)
* [Bug 2017469](https://bugzilla.redhat.com/show_bug.cgi?id=2017469): key not a valid prop name causing display issue in env editor [#10419](https://github.com/openshift/console/pull/10419)
* [Bug 2009224](https://bugzilla.redhat.com/show_bug.cgi?id=2009224): Regular user cannot restore VM snapshot [#10436](https://github.com/openshift/console/pull/10436)
* [Bug 2020162](https://bugzilla.redhat.com/show_bug.cgi?id=2020162): PVC is deleted along with VM even with "Delete Disks" unchecked [#10399](https://github.com/openshift/console/pull/10399)
* [Bug 2017326](https://bugzilla.redhat.com/show_bug.cgi?id=2017326): Update PatternFly/react-console [#10384](https://github.com/openshift/console/pull/10384)
* [Bug 1984102](https://bugzilla.redhat.com/show_bug.cgi?id=1984102): Switch Cypress OLM tests to use supported Red Hat operators [#9560](https://github.com/openshift/console/pull/9560)
* [Bug 2005871](https://bugzilla.redhat.com/show_bug.cgi?id=2005871): Cannot create Network Attachment Definition through UI [#10314](https://github.com/openshift/console/pull/10314)
* [Bug 1997901](https://bugzilla.redhat.com/show_bug.cgi?id=1997901): Cannot delete user created vm template [#10367](https://github.com/openshift/console/pull/10367)
* [Bug 2001212](https://bugzilla.redhat.com/show_bug.cgi?id=2001212): Notifications is not translated on the top right bar [#10040](https://github.com/openshift/console/pull/10040)
* [Bug 2002649](https://bugzilla.redhat.com/show_bug.cgi?id=2002649): Fix SerialConsole display bug [#10034](https://github.com/openshift/console/pull/10034)
* [Bug 1994983](https://bugzilla.redhat.com/show_bug.cgi?id=1994983): use strict promoted template list [#9824](https://github.com/openshift/console/pull/9824)
* [Bug 1977659](https://bugzilla.redhat.com/show_bug.cgi?id=1977659): Adjusting to new reference models changes - cherry-picked rls 4.8 [#9379](https://github.com/openshift/console/pull/9379)
* [Bug 2013091](https://bugzilla.redhat.com/show_bug.cgi?id=2013091): adds check for status in ksvc in util logic [#10211](https://github.com/openshift/console/pull/10211)
* [Bug 1998692](https://bugzilla.redhat.com/show_bug.cgi?id=1998692): Normal user cannot create VM because it cannot access v2v-vmware [#10171](https://github.com/openshift/console/pull/10171)
* (4.8 Backport) Bug 1981416: Change OCM links from cloud. to console.redhat.com [#9470](https://github.com/openshift/console/pull/9470)
* [Bug 2010076](https://bugzilla.redhat.com/show_bug.cgi?id=2010076): Update prow setup v4.8 [#10168](https://github.com/openshift/console/pull/10168)
* [Bug 1999717](https://bugzilla.redhat.com/show_bug.cgi?id=1999717): Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services [#9952](https://github.com/openshift/console/pull/9952)
* [Bug 2005917](https://bugzilla.redhat.com/show_bug.cgi?id=2005917): CONSOLE-2152: Improve upgrade messaging when ClusterVersion Upgradeable=False [#10103](https://github.com/openshift/console/pull/10103)
* [Bug 1993236](https://bugzilla.redhat.com/show_bug.cgi?id=1993236): Do not drop environment variables without name but with a value, also fix crash when ref is empty [#9799](https://github.com/openshift/console/pull/9799)
* [Bug 2000474](https://bugzilla.redhat.com/show_bug.cgi?id=2000474): Create BuildConfig webhook secrets before creating knative resources [#9970](https://github.com/openshift/console/pull/9970)
* [Bug 1996758](https://bugzilla.redhat.com/show_bug.cgi?id=1996758): Update Resource Dropdown Tech preview text [Release-4.8] [#9838](https://github.com/openshift/console/pull/9838)
* [Bug 1990141](https://bugzilla.redhat.com/show_bug.cgi?id=1990141): Console overview operators shown upgrading when still waiting on approval [#9732](https://github.com/openshift/console/pull/9732)
* [Bug 1995118](https://bugzilla.redhat.com/show_bug.cgi?id=1995118): Virtualization is not available in Home Overview [#9826](https://github.com/openshift/console/pull/9826)
* [Bug 1999931](https://bugzilla.redhat.com/show_bug.cgi?id=1999931): move event sources add option to serverless add group [#9958](https://github.com/openshift/console/pull/9958)
* [Bug 1984367](https://bugzilla.redhat.com/show_bug.cgi?id=1984367): OCS deployment using Multus: UI allows StorageCluster creation with empty public and cluster network in "Internal - Attached Devices" [#9566](https://github.com/openshift/console/pull/9566)
* [Bug 1992720](https://bugzilla.redhat.com/show_bug.cgi?id=1992720): Update Ingress to v1 API version [#9788](https://github.com/openshift/console/pull/9788)
* [Bug 1983644](https://bugzilla.redhat.com/show_bug.cgi?id=1983644): Add a TechPreviewBadge for Multus [#9539](https://github.com/openshift/console/pull/9539)
* [Bug 1972987](https://bugzilla.redhat.com/show_bug.cgi?id=1972987): chore(i18n): update translations [#9284](https://github.com/openshift/console/pull/9284)
* [Bug 1982458](https://bugzilla.redhat.com/show_bug.cgi?id=1982458): Remove kube admin notifier for kubeadmin crc user [#9516](https://github.com/openshift/console/pull/9516)
* [Bug 1985193](https://bugzilla.redhat.com/show_bug.cgi?id=1985193): Add create resource extension [#9601](https://github.com/openshift/console/pull/9601)
* [Bug 1989798](https://bugzilla.redhat.com/show_bug.cgi?id=1989798): Fix previously deleted dragged files that show up in import yaml editor [#9718](https://github.com/openshift/console/pull/9718)
* [Bug 1985081](https://bugzilla.redhat.com/show_bug.cgi?id=1985081): Fix Pipeline Download All [#9596](https://github.com/openshift/console/pull/9596)
* [Bug 1987167](https://bugzilla.redhat.com/show_bug.cgi?id=1987167): Add inspect url to devconsole monitoring chart [#9671](https://github.com/openshift/console/pull/9671)
* [Bug 1972258](https://bugzilla.redhat.com/show_bug.cgi?id=1972258): adds check for kamelet source in provider [#9254](https://github.com/openshift/console/pull/9254)
* [Bug 1971911](https://bugzilla.redhat.com/show_bug.cgi?id=1971911): Do not render samples column and helm link when add page customization disabled them [#9240](https://github.com/openshift/console/pull/9240)
* [Bug 1976144](https://bugzilla.redhat.com/show_bug.cgi?id=1976144): fix optional workspace checkbox check/uncheck [#9343](https://github.com/openshift/console/pull/9343)
* [Bug 1984242](https://bugzilla.redhat.com/show_bug.cgi?id=1984242): filter null yaml objects before validating to prevent undefined exception [#9565](https://github.com/openshift/console/pull/9565)
* [Bug 1973696](https://bugzilla.redhat.com/show_bug.cgi?id=1973696): Fix time range issue for devconsole monitoring dashboard [#9298](https://github.com/openshift/console/pull/9298)
* [Bug 1986581](https://bugzilla.redhat.com/show_bug.cgi?id=1986581): Web console doesn't list all the registries credentials in a secret [#9651](https://github.com/openshift/console/pull/9651)
* [Bug 1985356](https://bugzilla.redhat.com/show_bug.cgi?id=1985356): Check for nonexistent CSVs in installed block [#9735](https://github.com/openshift/console/pull/9735)
* [Bug 1989152](https://bugzilla.redhat.com/show_bug.cgi?id=1989152): [Release-4.8] Use specific release for files used in e2e tests [#9700](https://github.com/openshift/console/pull/9700)
* [Bug 1982246](https://bugzilla.redhat.com/show_bug.cgi?id=1982246): Skip empty categories (id and label) in OperatorHub tab view [#9509](https://github.com/openshift/console/pull/9509)
* [Bug 1980136](https://bugzilla.redhat.com/show_bug.cgi?id=1980136): Add cypress tests for key/value secrets with binary, ascii, and unicode values. [#9439](https://github.com/openshift/console/pull/9439)
* [Bug 1978043](https://bugzilla.redhat.com/show_bug.cgi?id=1978043): Monitoring dashboards: Dropdowns default to "All" if present [#9388](https://github.com/openshift/console/pull/9388)
* [Bug 1976008](https://bugzilla.redhat.com/show_bug.cgi?id=1976008): Monitoring dashboards: Custom time range fixes [#9342](https://github.com/openshift/console/pull/9342)
* [Bug 1975559](https://bugzilla.redhat.com/show_bug.cgi?id=1975559): Fix typo in olm message [#9334](https://github.com/openshift/console/pull/9334)
* [Bug 1972478](https://bugzilla.redhat.com/show_bug.cgi?id=1972478): improve failure alert for copied CSV [#9266](https://github.com/openshift/console/pull/9266)
* [Bug 1986955](https://bugzilla.redhat.com/show_bug.cgi?id=1986955): Fix to persist YAML Editor success message [#9664](https://github.com/openshift/console/pull/9664)
* [Bug 1982221](https://bugzilla.redhat.com/show_bug.cgi?id=1982221): Increase HTTP plugin proxy request timeout [#9506](https://github.com/openshift/console/pull/9506)
* [Bug 1977782](https://bugzilla.redhat.com/show_bug.cgi?id=1977782): Preserve user annotations while editing an app [#9381](https://github.com/openshift/console/pull/9381)
* [Bug 1974812](https://bugzilla.redhat.com/show_bug.cgi?id=1974812): In customize create vm wizard, warning on vm missing model [#9317](https://github.com/openshift/console/pull/9317)
* [Bug 1972788](https://bugzilla.redhat.com/show_bug.cgi?id=1972788): Convert probe data values from string to number type [#9277](https://github.com/openshift/console/pull/9277)
* [Bug 1980302](https://bugzilla.redhat.com/show_bug.cgi?id=1980302): VNC console stays in Connecting state [#9442](https://github.com/openshift/console/pull/9442)
* [Bug 1971188](https://bugzilla.redhat.com/show_bug.cgi?id=1971188): Creating a VM from the UI on OKD 4.7 fails [#9326](https://github.com/openshift/console/pull/9326)
* cnv-5162: [dev] change mouse cursor and add URL to results step [#9112](https://github.com/openshift/console/pull/9112)
* [Bug 1949019](https://bugzilla.redhat.com/show_bug.cgi?id=1949019): - PersistentVolumes page cannot sync project status automatically which will block user to create PV [#8726](https://github.com/openshift/console/pull/8726)
* [Bug 1967667](https://bugzilla.redhat.com/show_bug.cgi?id=1967667): Update translations for Sprint 202 (first half) [#9135](https://github.com/openshift/console/pull/9135)
* No color change on Add card hover [#9159](https://github.com/openshift/console/pull/9159)
* [Bug 1965909](https://bugzilla.redhat.com/show_bug.cgi?id=1965909): Replace "Enable Taint Nodes" by "Mark nodes as dedicated" [#9078](https://github.com/openshift/console/pull/9078)
* (fix): Hide RGW storage class in add capacity modal [#9225](https://github.com/openshift/console/pull/9225)
* Update Web Terminal custom resources to use v1alpha2 [#9144](https://github.com/openshift/console/pull/9144)
* [Bug 1967639](https://bugzilla.redhat.com/show_bug.cgi?id=1967639): fixes: console whitescreens if user settings fails to load [#9153](https://github.com/openshift/console/pull/9153)
* Block pool deletion testing - cypress [#8661](https://github.com/openshift/console/pull/8661)
* adds feature flag for revision decorator plugin [#9219](https://github.com/openshift/console/pull/9219)
* Fix quick starts label text [#9218](https://github.com/openshift/console/pull/9218)
* Fix a11y issue in virtualized tables with sortable headers and redesigned add page [#9217](https://github.com/openshift/console/pull/9217)
* translate the page heading in the edit flow [#9214](https://github.com/openshift/console/pull/9214)
* [Bug 1963027](https://bugzilla.redhat.com/show_bug.cgi?id=1963027): Upload qcow2 too PVC to small [#9179](https://github.com/openshift/console/pull/9179)
* Refactor multiple-storage-class-selection tests [#9123](https://github.com/openshift/console/pull/9123)
* [Bug 1966672](https://bugzilla.redhat.com/show_bug.cgi?id=1966672): Update translations for Sprint 201 [#9104](https://github.com/openshift/console/pull/9104)
* [ODC-5922](https://issues.redhat.com/browse/ODC-5922): pipeline workspaces script fixes [#9115](https://github.com/openshift/console/pull/9115)
* [ODC-5918](https://issues.redhat.com/browse/ODC-5918): fixed the create from builder image feature scripts [#9211](https://github.com/openshift/console/pull/9211)
* [ODC-5918](https://issues.redhat.com/browse/ODC-5918): fixed the create from builder image feature scripts [#9211](https://github.com/openshift/console/pull/9211)
* [ODC-5920](https://issues.redhat.com/browse/ODC-5920): Fixing Pipeline runs scripts [#9109](https://github.com/openshift/console/pull/9109)
* Install workflows - textual updates based on doc review [#8197](https://github.com/openshift/console/pull/8197)
* [ODC-5954](https://issues.redhat.com/browse/ODC-5954): Clean up code for 4.8 release [#9212](https://github.com/openshift/console/pull/9212)
* Filter disabled add actions for topology menus [#9210](https://github.com/openshift/console/pull/9210)
* Add support for default repo overwrites [#9001](https://github.com/openshift/console/pull/9001)
* [CONSOLE-1338](https://issues.redhat.com/browse/CONSOLE-1338): Add support for multiple documents when importing YAML [#8865](https://github.com/openshift/console/pull/8865)
* [CONSOLE-2384](https://issues.redhat.com/browse/CONSOLE-2384): Add metrics tab to select resources [#8763](https://github.com/openshift/console/pull/8763)
* [Bug 1970381](https://bugzilla.redhat.com/show_bug.cgi?id=1970381): Monitoring dashboards: Custom time range inputs should retain values [#9204](https://github.com/openshift/console/pull/9204)
* Remove ' from the text [#9203](https://github.com/openshift/console/pull/9203)
* replace storage cluster with StorageCluster in external dashboard [#9202](https://github.com/openshift/console/pull/9202)
* [CNV-6896](https://issues.redhat.com/browse/CNV-6896): New IP's popover for multi ip's [#9201](https://github.com/openshift/console/pull/9201)
* show `Stop` pipelinerun action if any of the tasks is running [#9200](https://github.com/openshift/console/pull/9200)
* Gherkin updation for topology and pipeline [#9195](https://github.com/openshift/console/pull/9195)
* fix guided tour spotlight [#9193](https://github.com/openshift/console/pull/9193)
* [Bug 1969891](https://bugzilla.redhat.com/show_bug.cgi?id=1969891): fix rotated pipelinerun status icon issue in safari [#9188](https://github.com/openshift/console/pull/9188)
* Updating the quick starts gherkin scripts with respect to latest UX [#9187](https://github.com/openshift/console/pull/9187)
* Update helm OWNERS [#9181](https://github.com/openshift/console/pull/9181)
* Fix rendering of add-capacity modal for smaller screen [#9178](https://github.com/openshift/console/pull/9178)
* Update hard coded colors to PF tokens and vars [#9164](https://github.com/openshift/console/pull/9164)
* [Bug 1933101](https://bugzilla.redhat.com/show_bug.cgi?id=1933101): Add chart URl to annotations during helm install/upgrade [#9161](https://github.com/openshift/console/pull/9161)
* GitOps environment UI page validation [#9150](https://github.com/openshift/console/pull/9150)
* Service mesh [#9141](https://github.com/openshift/console/pull/9141)
* add vm creation to smoke tests [#8997](https://github.com/openshift/console/pull/8997)
* fix(OCS dashboard): s/namesapce/namespace/ prometheus query typos [#8863](https://github.com/openshift/console/pull/8863)
* Block pool update testing - cypress [#8660](https://github.com/openshift/console/pull/8660)
* handles route decorator for revision [#9209](https://github.com/openshift/console/pull/9209)
* [Bug 1890678](https://bugzilla.redhat.com/show_bug.cgi?id=1890678): Fix different accessibility in developer catalog, topology and pipelines [#9124](https://github.com/openshift/console/pull/9124)
* [Bug 1955220](https://bugzilla.redhat.com/show_bug.cgi?id=1955220): Bump postcss [#8838](https://github.com/openshift/console/pull/8838)
* [Bug 1969951](https://bugzilla.redhat.com/show_bug.cgi?id=1969951): update cluster-local label for ksvc [#9197](https://github.com/openshift/console/pull/9197)
* [Bug 1969386](https://bugzilla.redhat.com/show_bug.cgi?id=1969386): deprecated metric kubevirt_vmi_storage_traffic_bytes_total [#9182](https://github.com/openshift/console/pull/9182)
* Replace storage class with StorageClass [#9176](https://github.com/openshift/console/pull/9176)
* Restructure Knative Plugin [#9194](https://github.com/openshift/console/pull/9194)
* Deploy new version of FormWithEditor. [#9191](https://github.com/openshift/console/pull/9191)
* [Bug 1967275](https://bugzilla.redhat.com/show_bug.cgi?id=1967275): Prevent awkward wrap of icons with getting started links and buttons [#9184](https://github.com/openshift/console/pull/9184)
* Fix issue with selected capacity donut chart [#9156](https://github.com/openshift/console/pull/9156)
* kubevirt: Add ci scripts [#9152](https://github.com/openshift/console/pull/9152)
* add unique name to the radio buttons to avoid name collision [#9146](https://github.com/openshift/console/pull/9146)
* ODC 5908-Helm update test cases [#9114](https://github.com/openshift/console/pull/9114)
* [Bug 1966677](https://bugzilla.redhat.com/show_bug.cgi?id=1966677): Change comma to semicolon [#9110](https://github.com/openshift/console/pull/9110)
* [ODC-5917](https://issues.redhat.com/browse/ODC-5917): Fix the scripts for create-from-add-options feature [#9103](https://github.com/openshift/console/pull/9103)
* Console-2857: port protractor Overview list tests [#8967](https://github.com/openshift/console/pull/8967)
* [Bug 1969900](https://bugzilla.redhat.com/show_bug.cgi?id=1969900): Move testing CRDs from v1beta1 to v1 [#9131](https://github.com/openshift/console/pull/9131)
* [Bug 1936788](https://bugzilla.redhat.com/show_bug.cgi?id=1936788): Fix for RBD + RWX Access Mode  UI issue [#8380](https://github.com/openshift/console/pull/8380)
* Topology - Connecting Workloads using Edit Annotations [#9177](https://github.com/openshift/console/pull/9177)
* kubevirt e2e: Scroll dev console add+ tab to bottom [#9175](https://github.com/openshift/console/pull/9175)
* fix pipeline graph height restriction issue [#9173](https://github.com/openshift/console/pull/9173)
* Tier-1 test cases for KMS workflow [#7683](https://github.com/openshift/console/pull/7683)
* Update  gherkin files according to test defenition implementation [#9151](https://github.com/openshift/console/pull/9151)
* [Bug 1967207](https://bugzilla.redhat.com/show_bug.cgi?id=1967207): Update "Getting started resources" links [#9121](https://github.com/openshift/console/pull/9121)
* Add pipeline annotation to secrets for private git repo import with pipeline [#9058](https://github.com/openshift/console/pull/9058)
* Fix project access reload and form footer [#8940](https://github.com/openshift/console/pull/8940)
* [Bug 1967316](https://bugzilla.redhat.com/show_bug.cgi?id=1967316): Sweep frontend/public folder for i18n - part 1 [#7720](https://github.com/openshift/console/pull/7720)
* [Bug 1967234](https://bugzilla.redhat.com/show_bug.cgi?id=1967234): Console is continuously polling for ConsoleLink acm-link [#9169](https://github.com/openshift/console/pull/9169)
* [Bug 1963209](https://bugzilla.redhat.com/show_bug.cgi?id=1963209): Some strings in public.json have errors [#9170](https://github.com/openshift/console/pull/9170)
* Inline Event Listener URL [#9166](https://github.com/openshift/console/pull/9166)
* [Bug 1966684](https://bugzilla.redhat.com/show_bug.cgi?id=1966684): Fix creating snapshot for claim <name> string [#9163](https://github.com/openshift/console/pull/9163)
* update eventsources static model version to latest supported [#9154](https://github.com/openshift/console/pull/9154)
* Update the name and value titles to primary texts [#9132](https://github.com/openshift/console/pull/9132)
* Explicitly touch pipeline builder task fields when workspaces are changed [#9130](https://github.com/openshift/console/pull/9130)
* add cypress automation script for pipeline builder [#9128](https://github.com/openshift/console/pull/9128)
* [Bug 1969284](https://bugzilla.redhat.com/show_bug.cgi?id=1969284): Query Browser: Fix resetting the zoom after dragging to zoom [#9174](https://github.com/openshift/console/pull/9174)
* Add error boundary to topology page [#9167](https://github.com/openshift/console/pull/9167)
* Omit bitbucket branch in URL if it contains slash [#9111](https://github.com/openshift/console/pull/9111)
* [ODC-5915](https://issues.redhat.com/browse/ODC-5915): update create from git feature scripts [#9165](https://github.com/openshift/console/pull/9165)
* Block pool management page capitalization [#9099](https://github.com/openshift/console/pull/9099)
* [CNV-6685](https://issues.redhat.com/browse/CNV-6685): UI: Add preallocation option to advanced VM disk parameters [#9079](https://github.com/openshift/console/pull/9079)
* [Bug 1965391](https://bugzilla.redhat.com/show_bug.cgi?id=1965391): Skip to 3rd step when SC present [#9077](https://github.com/openshift/console/pull/9077)
* [Bug 1966077](https://bugzilla.redhat.com/show_bug.cgi?id=1966077): Don't show empty hidden fields on operand details page [#9168](https://github.com/openshift/console/pull/9168)
* Allow passing additional arguments to run-bridge.sh [#9162](https://github.com/openshift/console/pull/9162)
* [Bug 1966487](https://bugzilla.redhat.com/show_bug.cgi?id=1966487): Update IP address on pods list to show podIP other than … [#9089](https://github.com/openshift/console/pull/9089)
* [Bug 1967717](https://bugzilla.redhat.com/show_bug.cgi?id=1967717): Rename Insights to Insights Advisor and add missing paragraph [#9139](https://github.com/openshift/console/pull/9139)
* [Bug 1934229](https://bugzilla.redhat.com/show_bug.cgi?id=1934229): Improve performance of ToolbarFilter [#8821](https://github.com/openshift/console/pull/8821)
* Resized Perspective Switcher to match height of side Nav Items [#9160](https://github.com/openshift/console/pull/9160)
* [ODC-5013](https://issues.redhat.com/browse/ODC-5013): Epic Automation [#9155](https://github.com/openshift/console/pull/9155)
* [Bug 1967713](https://bugzilla.redhat.com/show_bug.cgi?id=1967713): Show link to the OCM landing page when cluster ID is missing [#9138](https://github.com/openshift/console/pull/9138)
* Add Codeready Workspaces feature files. [#9113](https://github.com/openshift/console/pull/9113)
* [Bug 1966675](https://bugzilla.redhat.com/show_bug.cgi?id=1966675): Update Image Stream to ImageStream [#9137](https://github.com/openshift/console/pull/9137)
* [Bug 1888517](https://bugzilla.redhat.com/show_bug.cgi?id=1888517): Text changes in expand PVC modal [#8788](https://github.com/openshift/console/pull/8788)
* [Bug 1961391](https://bugzilla.redhat.com/show_bug.cgi?id=1961391): String updates [#9017](https://github.com/openshift/console/pull/9017)
* Remove tabIndex from scrollable containers to fix keyboard scroll issue [#9140](https://github.com/openshift/console/pull/9140)
* [Bug 1967276](https://bugzilla.redhat.com/show_bug.cgi?id=1967276): Remove tooltips from masthead toolbar [#9134](https://github.com/openshift/console/pull/9134)
* [ODC-5916](https://issues.redhat.com/browse/ODC-5916): Fix the pipeline triggers scripts [#9106](https://github.com/openshift/console/pull/9106)
* Fix isSubmitting logic of formik forms [#8984](https://github.com/openshift/console/pull/8984)
* Revert unintended changes during translations [#9145](https://github.com/openshift/console/pull/9145)
* fixes: WebTerminal widget should send resize events [#8909](https://github.com/openshift/console/pull/8909)
* pipeline builder cleanup [#9143](https://github.com/openshift/console/pull/9143)
* [Bug 1942125](https://bugzilla.redhat.com/show_bug.cgi?id=1942125): add i18n for serverless breadcrumbs [#9107](https://github.com/openshift/console/pull/9107)
* fixes: multiline code snippet buttons doesn't work properly [#9105](https://github.com/openshift/console/pull/9105)
* [CONSOLE-2769](https://issues.redhat.com/browse/CONSOLE-2769): Remove console plugin on operator uninstall [#8895](https://github.com/openshift/console/pull/8895)
* test: test pseudolocalization of all pages in CRUD tests [#9129](https://github.com/openshift/console/pull/9129)
* Make string interpolated in PROGRESS_STATUS function for i18n [#9147](https://github.com/openshift/console/pull/9147)
* Gherkin: customization of available roles in project membership [#9133](https://github.com/openshift/console/pull/9133)
* [ODC-5919](https://issues.redhat.com/browse/ODC-5919): Pipeline Actions script fixes [#9108](https://github.com/openshift/console/pull/9108)
* fix terminal new tab redirect [#9059](https://github.com/openshift/console/pull/9059)
* Block pool creation testing - cypress [#8657](https://github.com/openshift/console/pull/8657)
* [Bug 1957457](https://bugzilla.redhat.com/show_bug.cgi?id=1957457): Support secondary text in ResourceDropdown [#8973](https://github.com/openshift/console/pull/8973)
* [Bug 1967208](https://bugzilla.redhat.com/show_bug.cgi?id=1967208): Use semver to parse version for "Getting started" card [#9122](https://github.com/openshift/console/pull/9122)
* [Bug 1967316](https://bugzilla.redhat.com/show_bug.cgi?id=1967316): Sweep frontend/public folder for i18n - part 2 (was CONSOLE-2474) [#7670](https://github.com/openshift/console/pull/7670)
* Allow installation storageClass as default in the add capacity modal [#9084](https://github.com/openshift/console/pull/9084)
* [Bug 1967197](https://bugzilla.redhat.com/show_bug.cgi?id=1967197): Fix 404 errors loading i18n namespaces [#9119](https://github.com/openshift/console/pull/9119)
* handles check for kafkasource update with managed kafka [#9116](https://github.com/openshift/console/pull/9116)
* ODC 5914 update addflow gherkin scripts [#9098](https://github.com/openshift/console/pull/9098)
* [Bug 1964902](https://bugzilla.redhat.com/show_bug.cgi?id=1964902): rework network policy details page [#9102](https://github.com/openshift/console/pull/9102)
* Gherkin: Devfile samples should be included in Samples catalog & "searchable" via Topology [#9062](https://github.com/openshift/console/pull/9062)
* [Bug 1960612](https://bugzilla.redhat.com/show_bug.cgi?id=1960612): Make filesystem queries use all devices [#8978](https://github.com/openshift/console/pull/8978)
* [Bug 1938903](https://bugzilla.redhat.com/show_bug.cgi?id=1938903): Monitoring dashboards: Add "Custom time range" modal [#8701](https://github.com/openshift/console/pull/8701)
* [ODC-5910](https://issues.redhat.com/browse/ODC-5910): update kafka event source feature file [#9092](https://github.com/openshift/console/pull/9092)
* [Bug 1942736](https://bugzilla.redhat.com/show_bug.cgi?id=1942736): update Admin resource translations to new standard [#9094](https://github.com/openshift/console/pull/9094)
* [Bug 1966520](https://bugzilla.redhat.com/show_bug.cgi?id=1966520): Add button from ocs add capacity should not be enabled if there are no PV's [#9097](https://github.com/openshift/console/pull/9097)
* [Bug 1935087](https://bugzilla.redhat.com/show_bug.cgi?id=1935087): Align Arbiter text with the new behaviour introduced by BZ #1928319 [#9019](https://github.com/openshift/console/pull/9019)
* Disable portworx operator Cypress test until upstream version change is merged [#9100](https://github.com/openshift/console/pull/9100)
* Update failure_domain field of block pool from storage cluster CR [#9093](https://github.com/openshift/console/pull/9093)
* Fix traffic splitting modal crashing UI with no revision loaded [#9091](https://github.com/openshift/console/pull/9091)
* updates kafka source gherkin script [#9090](https://github.com/openshift/console/pull/9090)
* Update OWNERS for Insights Advisor plugin [#9080](https://github.com/openshift/console/pull/9080)
* Fix keyboard scroll issue of namespaced pages [#9068](https://github.com/openshift/console/pull/9068)
* remove visual fix that was breaking patternfly table [#9049](https://github.com/openshift/console/pull/9049)
* update table column classes for pipeline, helm, revision [#8936](https://github.com/openshift/console/pull/8936)
* [Bug 1962429](https://bugzilla.redhat.com/show_bug.cgi?id=1962429): Images are now saved in redux and can be accessed earlier in vm creation [#9065](https://github.com/openshift/console/pull/9065)
* [Bug 1966401](https://bugzilla.redhat.com/show_bug.cgi?id=1966401): Revamp Ceph Table in Install Wizard flow [#9087](https://github.com/openshift/console/pull/9087)
* Supplement: Add and update data-test for new add page [#8998](https://github.com/openshift/console/pull/8998)
* show helptext for workspaces in start pipeline form [#9081](https://github.com/openshift/console/pull/9081)
* Increase timeout for deployment created in OBC test. [#9082](https://github.com/openshift/console/pull/9082)
* Missing parens in the Last deployment column (#5899) [#9075](https://github.com/openshift/console/pull/9075)
* [ODC-5859](https://issues.redhat.com/browse/ODC-5859): Add owners to web terminal features folder [#9000](https://github.com/openshift/console/pull/9000)
* [Bug 1951043](https://bugzilla.redhat.com/show_bug.cgi?id=1951043): Fix Pipeline Parameters in Modals accept empty string defaults [#9074](https://github.com/openshift/console/pull/9074)
* [ODC-5837](https://issues.redhat.com/browse/ODC-5837): Add owners file to service mesh features folder [#8928](https://github.com/openshift/console/pull/8928)
* [ODC-5898](https://issues.redhat.com/browse/ODC-5898): Configuring gherkin-lintrc file [#9072](https://github.com/openshift/console/pull/9072)
* [Bug 1926029](https://bugzilla.redhat.com/show_bug.cgi?id=1926029): Disable snapshot save button when save isn't possible [#8962](https://github.com/openshift/console/pull/8962)
* [ODC-5895](https://issues.redhat.com/browse/ODC-5895): Fixed Gherkin linter errors in Dev Console folder [#9071](https://github.com/openshift/console/pull/9071)
* [Bug 1964756](https://bugzilla.redhat.com/show_bug.cgi?id=1964756): PVC status is always in Bound status when it is actually cloning [#9067](https://github.com/openshift/console/pull/9067)
* [Bug 1964472](https://bugzilla.redhat.com/show_bug.cgi?id=1964472): Make project and namespace requirements more visible rather than giving me an error after submission [#9060](https://github.com/openshift/console/pull/9060)
* Fix the alignment of success ratio and pipeline run count chart [#9022](https://github.com/openshift/console/pull/9022)
* [ODC-5863](https://issues.redhat.com/browse/ODC-5863): github templates [#9014](https://github.com/openshift/console/pull/9014)
* [Bug 1965116](https://bugzilla.redhat.com/show_bug.cgi?id=1965116): Add max height to resource and filter drop downs [#9061](https://github.com/openshift/console/pull/9061)
* [Bug 1964997](https://bugzilla.redhat.com/show_bug.cgi?id=1964997): Removing library charts from the merged helm repo index entries. [#9035](https://github.com/openshift/console/pull/9035)
* [Bug 1963213](https://bugzilla.redhat.com/show_bug.cgi?id=1963213): Fixed bug in Memsource download script [#9024](https://github.com/openshift/console/pull/9024)
* Add page loading indicator [#8974](https://github.com/openshift/console/pull/8974)
* Add tooltips to masthead icons and remove hover state from notification [#9041](https://github.com/openshift/console/pull/9041)
* PF Update to 2021-6 [#8937](https://github.com/openshift/console/pull/8937)
* Fix git type dropdown reset issue [#9056](https://github.com/openshift/console/pull/9056)
* PR 9051 review: Replace "RAW" by "Raw" in "Raw Capacity" card. [#9063](https://github.com/openshift/console/pull/9063)
* show menuaction label over model label on multiTabListPage create options [#9048](https://github.com/openshift/console/pull/9048)
* Change alignment of actions on the add page on small screens [#9046](https://github.com/openshift/console/pull/9046)
* Fix git type dropdown showing while form is submitting [#9045](https://github.com/openshift/console/pull/9045)
* Minor typo corrections [#8982](https://github.com/openshift/console/pull/8982)
* [CONSOLE-2223](https://issues.redhat.com/browse/CONSOLE-2223): Past logs for selected container on pod logs tab. [#8896](https://github.com/openshift/console/pull/8896)
* adding console.topology extension types to dynamic-plugin-sdk [#8847](https://github.com/openshift/console/pull/8847)
* Improve form validation and allow optional resources and workspaces [#8832](https://github.com/openshift/console/pull/8832)
* Monitoring dashboards: Show dashboard's tags in Dashboards dropdown [#8728](https://github.com/openshift/console/pull/8728)
* fix react-refresh not initiating on dev server [#9057](https://github.com/openshift/console/pull/9057)
* Force en_US locale for jest tests [#9052](https://github.com/openshift/console/pull/9052)
* Added Test Case IDs [#9050](https://github.com/openshift/console/pull/9050)
* [Bug 1957756](https://bugzilla.redhat.com/show_bug.cgi?id=1957756): Missing already replaced condition in disk modal [#9025](https://github.com/openshift/console/pull/9025)
* Gherkin Script Design: ODC-5013(Add Page Modification) [#9026](https://github.com/openshift/console/pull/9026)
* [Bug 1942614](https://bugzilla.redhat.com/show_bug.cgi?id=1942614): Externalization in storage menu navigation [#8954](https://github.com/openshift/console/pull/8954)
* Use same icon in status and list [#9043](https://github.com/openshift/console/pull/9043)
* fixes minimize/restore tooltip for web terminal [#9037](https://github.com/openshift/console/pull/9037)
* [Bug 1924916](https://bugzilla.redhat.com/show_bug.cgi?id=1924916): PVC reported as Uploading when it is actually cloning [#9033](https://github.com/openshift/console/pull/9033)
* [Bug 1962569](https://bugzilla.redhat.com/show_bug.cgi?id=1962569): Show NetworkPolicy egress rules [#9032](https://github.com/openshift/console/pull/9032)
* Adds tests for namespace bucket classes [#8721](https://github.com/openshift/console/pull/8721)
* Correcting some nits in gherkin [#9039](https://github.com/openshift/console/pull/9039)
* [Bug 1947663](https://bugzilla.redhat.com/show_bug.cgi?id=1947663): Disable BMN disks tab when LSO is installed [#9036](https://github.com/openshift/console/pull/9036)
* fix kafka connections topology sidebar heading [#9034](https://github.com/openshift/console/pull/9034)
* [Bug 1908169](https://bugzilla.redhat.com/show_bug.cgi?id=1908169): The example of Import URL is "Fedora cloud image list" for all templates. [#9031](https://github.com/openshift/console/pull/9031)
* [Bug 1934304](https://bugzilla.redhat.com/show_bug.cgi?id=1934304): Change query for top consumer pods in Nodes Page Memory Pressure popover [#9030](https://github.com/openshift/console/pull/9030)
* convert kubevirt dashboard extensions to dynamic [#9029](https://github.com/openshift/console/pull/9029)
* fixes scrollbar issue over topology on file drag [#9016](https://github.com/openshift/console/pull/9016)
* [Bug 1963267](https://bugzilla.redhat.com/show_bug.cgi?id=1963267): Fix console warnings about classnames when rendering volumes table [#9007](https://github.com/openshift/console/pull/9007)
* Removed references to Protractor tests which no longer exist [#8993](https://github.com/openshift/console/pull/8993)
* Wording changes in vm status [#9042](https://github.com/openshift/console/pull/9042)
* Add getting started section to the admin cluster dashboard [#8951](https://github.com/openshift/console/pull/8951)
* fixes terminal loading screen height on safari [#9027](https://github.com/openshift/console/pull/9027)
* Fix scrollbar height issue in pod terminal [#9020](https://github.com/openshift/console/pull/9020)
* adding dynamic plugin sdk support for dashboard extensions [#8837](https://github.com/openshift/console/pull/8837)
* [Bug 1963211](https://bugzilla.redhat.com/show_bug.cgi?id=1963211): Kubevirt i18n typo [#9009](https://github.com/openshift/console/pull/9009)
* Fix number spinner in  NumberSizeInput without default values [#9023](https://github.com/openshift/console/pull/9023)
* [Bug 1957982](https://bugzilla.redhat.com/show_bug.cgi?id=1957982): Make disabled action items not clickable and focusable [#9018](https://github.com/openshift/console/pull/9018)
* [Bug 1963896](https://bugzilla.redhat.com/show_bug.cgi?id=1963896): Add PVC link to disk table [#9021](https://github.com/openshift/console/pull/9021)
* converting yaml-templates extension types to dynamic-plugin-sdk [#8400](https://github.com/openshift/console/pull/8400)
* [Bug 1963502](https://bugzilla.redhat.com/show_bug.cgi?id=1963502): Add tooltip to creat new template kebab action item [#9011](https://github.com/openshift/console/pull/9011)
* Gherkin: QuickStarts-enhanced-capabilities [#8927](https://github.com/openshift/console/pull/8927)
* Gherkin:Add certification filter and certified badge in helm catalog [#8945](https://github.com/openshift/console/pull/8945)
* [Bug 1947311](https://bugzilla.redhat.com/show_bug.cgi?id=1947311): Run discovery directly on nodes [#8591](https://github.com/openshift/console/pull/8591)
* [Bug 1963676](https://bugzilla.redhat.com/show_bug.cgi?id=1963676): Vm wizard choose os not template [#9012](https://github.com/openshift/console/pull/9012)
* adjust styles of add page and getting started to align with UX [#9008](https://github.com/openshift/console/pull/9008)
* [Bug 1963159](https://bugzilla.redhat.com/show_bug.cgi?id=1963159): Add Sprint 200 translations [#9004](https://github.com/openshift/console/pull/9004)
* [Bug 1955803](https://bugzilla.redhat.com/show_bug.cgi?id=1955803): OperatorHub duplicate item details and empty infraFeatures [#9006](https://github.com/openshift/console/pull/9006)
* [Bug 1961897](https://bugzilla.redhat.com/show_bug.cgi?id=1961897): Remove history listener before console UI is unmounted [#8969](https://github.com/openshift/console/pull/8969)
* [Bug 1963219](https://bugzilla.redhat.com/show_bug.cgi?id=1963219): i18n ImageStreamTag page [#9005](https://github.com/openshift/console/pull/9005)
* Auto focus first input field of import forms [#8996](https://github.com/openshift/console/pull/8996)
* [Bug 1945312](https://bugzilla.redhat.com/show_bug.cgi?id=1945312): Fix project deletion issue and reset active namespace [#9003](https://github.com/openshift/console/pull/9003)
* [Bug 1962153](https://bugzilla.redhat.com/show_bug.cgi?id=1962153): fix VolumeSnapshot routes [#8979](https://github.com/openshift/console/pull/8979)
* [Bug 1961829](https://bugzilla.redhat.com/show_bug.cgi?id=1961829): Fix quick start prerequisites getting truncated [#8994](https://github.com/openshift/console/pull/8994)
* Gherkin: Implement the support needed for managed kafka connection, Visualisation of the serverless function in topology and Connection from kafka source to kafka connection [#8891](https://github.com/openshift/console/pull/8891)
* [ODC-5854](https://issues.redhat.com/browse/ODC-5854): updated helm automation scripts [#8981](https://github.com/openshift/console/pull/8981)
* Add helm config export in oc-environment script [#8910](https://github.com/openshift/console/pull/8910)
* Topology-Edit Workload and Resource Type [#8988](https://github.com/openshift/console/pull/8988)
* Gherkin for making deployment/deployment-config serverless [#8972](https://github.com/openshift/console/pull/8972)
* [Bug 1960534](https://bugzilla.redhat.com/show_bug.cgi?id=1960534): Monitoring dashboards: Always allow custom format for tooltip entries [#8986](https://github.com/openshift/console/pull/8986)
* [Bug 1962256](https://bugzilla.redhat.com/show_bug.cgi?id=1962256): Use shiny new rhel8 image in yaml [#8985](https://github.com/openshift/console/pull/8985)
* pipelinerun visualisation for status PipelineRunPending [#8664](https://github.com/openshift/console/pull/8664)
* Fix golang detection regex to only match .go files [#8992](https://github.com/openshift/console/pull/8992)
* Add getting started section to the add page in developer perspective [#8950](https://github.com/openshift/console/pull/8950)
* [Bug 1949338](https://bugzilla.redhat.com/show_bug.cgi?id=1949338): show the content of Insights widget when there are 0 recommendations for cluster [#8989](https://github.com/openshift/console/pull/8989)
* fix dev-catalog type tooltip [#8965](https://github.com/openshift/console/pull/8965)
* [Bug 1908169](https://bugzilla.redhat.com/show_bug.cgi?id=1908169): The example of Import URL is "Fedora cloud image list" for all templates. [#8920](https://github.com/openshift/console/pull/8920)
* [Bug 1960129](https://bugzilla.redhat.com/show_bug.cgi?id=1960129): Add smoke tests to verify pages are able to load [#8916](https://github.com/openshift/console/pull/8916)
* Redesign add page to follow masonry layout [#8867](https://github.com/openshift/console/pull/8867)
* Fix duplicate helm charts not showing up in catalog [#8983](https://github.com/openshift/console/pull/8983)
* [Bug 1962256](https://bugzilla.redhat.com/show_bug.cgi?id=1962256): virt: use the new rhel8 image as an example [#8980](https://github.com/openshift/console/pull/8980)
* [Bug 1961363](https://bugzilla.redhat.com/show_bug.cgi?id=1961363): remove extra space in string [#8977](https://github.com/openshift/console/pull/8977)
* Remove guards from Core OCS Operator API Pages [#8976](https://github.com/openshift/console/pull/8976)
* [Bug 1961675](https://bugzilla.redhat.com/show_bug.cgi?id=1961675): Hide TaskRun edit actions for rows in Pipelinerun's TaskRun tab [#8960](https://github.com/openshift/console/pull/8960)
* [Bug 1949889](https://bugzilla.redhat.com/show_bug.cgi?id=1949889): Enables text input for volume count in backingstore page [#8748](https://github.com/openshift/console/pull/8748)
* [Bug 1962062](https://bugzilla.redhat.com/show_bug.cgi?id=1962062): Monitoring dashboards: Allow variable dropdowns to default to "All" [#8975](https://github.com/openshift/console/pull/8975)
* Re enable customize boot source tests [#8959](https://github.com/openshift/console/pull/8959)
* ODC- 5807-Update add flow automation scripts [#8911](https://github.com/openshift/console/pull/8911)
* [Bug 1961393](https://bugzilla.redhat.com/show_bug.cgi?id=1961393): Use K8sModel as kindObj if available [#8888](https://github.com/openshift/console/pull/8888)
* [Bug 1917328](https://bugzilla.redhat.com/show_bug.cgi?id=1917328): Default to current namespace for non-common templates [#8939](https://github.com/openshift/console/pull/8939)
* remove quick starts check on Add page [#8970](https://github.com/openshift/console/pull/8970)
* [Bug 1961878](https://bugzilla.redhat.com/show_bug.cgi?id=1961878): Add Sprint 199 translations [#8912](https://github.com/openshift/console/pull/8912)
* [Bug 1932472](https://bugzilla.redhat.com/show_bug.cgi?id=1932472): Allow ManagedFields Code Folding on Form/YAML Switcher [#8964](https://github.com/openshift/console/pull/8964)
* [Bug 1961356](https://bugzilla.redhat.com/show_bug.cgi?id=1961356): Switch to double quotes in translation [#8963](https://github.com/openshift/console/pull/8963)
* [Bug 1961466](https://bugzilla.redhat.com/show_bug.cgi?id=1961466): Some dropdown placeholder text on route creation page is not translated [#8961](https://github.com/openshift/console/pull/8961)
* [Bug 1961452](https://bugzilla.redhat.com/show_bug.cgi?id=1961452): Monitoring: Remove "Alertmanager UI" link [#8952](https://github.com/openshift/console/pull/8952)
* Fix pipelinerun and taskrun log snippet message for timeout issue [#8907](https://github.com/openshift/console/pull/8907)
* [Bug 1943238](https://bugzilla.redhat.com/show_bug.cgi?id=1943238): Display olm conditions descriptors in their own page section on operand details pages [#8882](https://github.com/openshift/console/pull/8882)
* Fix tooltip on pipelineRunCount and TaskRunDuration graphs based of P… [#8868](https://github.com/openshift/console/pull/8868)
* [Bug 1924729](https://bugzilla.redhat.com/show_bug.cgi?id=1924729): Create Storageclass for CephFS provisioner assumes incorrect default FSName in external mode [#8825](https://github.com/openshift/console/pull/8825)
* [CONSOLE-2506](https://issues.redhat.com/browse/CONSOLE-2506): Added 'Advanced Cluster Management' to Perspective Switcher [#8199](https://github.com/openshift/console/pull/8199)
* [Bug 1954460](https://bugzilla.redhat.com/show_bug.cgi?id=1954460): The status of "Used Capacity Breakdown [Pods]" is "Not available" [#8955](https://github.com/openshift/console/pull/8955)
* Convert form field help uses of Popover to FieldLevelHelp [#8856](https://github.com/openshift/console/pull/8856)
* Add tests for creating custom templates from common templates [#8428](https://github.com/openshift/console/pull/8428)
* [Bug 1950916](https://bugzilla.redhat.com/show_bug.cgi?id=1950916): added warning message when vm is paused on console page and the option to pause a machine from kebab menu [#8957](https://github.com/openshift/console/pull/8957)
* [Bug 1961336](https://bugzilla.redhat.com/show_bug.cgi?id=1961336): Remove the broken Devfile Sample for BuildConfigs [#8948](https://github.com/openshift/console/pull/8948)
* Adding support to consume latest stable images of ocs operator [#8924](https://github.com/openshift/console/pull/8924)
* [Bug 1960683](https://bugzilla.redhat.com/show_bug.cgi?id=1960683): Fix hot loop in global config page [#8934](https://github.com/openshift/console/pull/8934)
* [CONSOLE-2855](https://issues.redhat.com/browse/CONSOLE-2855): Cypress: port protractor Storage tests [#8923](https://github.com/openshift/console/pull/8923)
* [Bug 1897621](https://bugzilla.redhat.com/show_bug.cgi?id=1897621): Auth test.Login times out - Wait for Cluster Auth Operator to start and finish Progressing 'test' IDP before e2e tests starts [#8820](https://github.com/openshift/console/pull/8820)
* Fix to hide object updated alert on reload in yaml view [#8946](https://github.com/openshift/console/pull/8946)
* fix helm rollback form footer alignment [#8933](https://github.com/openshift/console/pull/8933)
* Updated helm chart annotations namespace [#8908](https://github.com/openshift/console/pull/8908)
* [Bug 1960531](https://bugzilla.redhat.com/show_bug.cgi?id=1960531): Monitoring dashboards: Fix bug where panels could be duplicated [#8943](https://github.com/openshift/console/pull/8943)
* [CONSOLE-2527](https://issues.redhat.com/browse/CONSOLE-2527): Sprint 198 translations [#8720](https://github.com/openshift/console/pull/8720)
* Fix gitlab & bitbucket builder image detection [#8879](https://github.com/openshift/console/pull/8879)
* fixes issue with create menuitems on serverless, pipelines nav options [#8938](https://github.com/openshift/console/pull/8938)
* [Bug 1961064](https://bugzilla.redhat.com/show_bug.cgi?id=1961064): Fix documentation link to network policies [#8869](https://github.com/openshift/console/pull/8869)
* Topology - Delete Workload [#8942](https://github.com/openshift/console/pull/8942)
* [Bug 1954105](https://bugzilla.redhat.com/show_bug.cgi?id=1954105): Update Taskrun tab to make namespace based calls [#8860](https://github.com/openshift/console/pull/8860)
* GitOps: Add Sync Status and Latest Deployment Time to List Page (751) [#8931](https://github.com/openshift/console/pull/8931)
* [Bug 1942117](https://bugzilla.redhat.com/show_bug.cgi?id=1942117): i18n Add Storage page [#8932](https://github.com/openshift/console/pull/8932)
* Fix crashing of VM Templates page [#8922](https://github.com/openshift/console/pull/8922)
* [Bug 1960089](https://bugzilla.redhat.com/show_bug.cgi?id=1960089): CamelCase ImageStream related pages and breadcrumb [#8917](https://github.com/openshift/console/pull/8917)
* Fix Uncaught TypeError for OCS Internal mode [#8906](https://github.com/openshift/console/pull/8906)
* fixes monitoring nav route for dev perspective [#8929](https://github.com/openshift/console/pull/8929)
* Pipeline i18n refactor [#8894](https://github.com/openshift/console/pull/8894)
* [ODC-5364](https://issues.redhat.com/browse/ODC-5364): Consolidate plugins/index.js file in cypress framework [#8325](https://github.com/openshift/console/pull/8325)
* [ODC-5803](https://issues.redhat.com/browse/ODC-5803): epic automation for workspaces [#8836](https://github.com/openshift/console/pull/8836)
* [Bug 1958753](https://bugzilla.redhat.com/show_bug.cgi?id=1958753): added a check on vmiProp [#8899](https://github.com/openshift/console/pull/8899)
* [Bug 1951486](https://bugzilla.redhat.com/show_bug.cgi?id=1951486): replace metrics queries [#8904](https://github.com/openshift/console/pull/8904)
* [Bug 1920307](https://bugzilla.redhat.com/show_bug.cgi?id=1920307): changed comparison type [#8902](https://github.com/openshift/console/pull/8902)
* [Bug 1959550](https://bugzilla.redhat.com/show_bug.cgi?id=1959550): Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console [#8901](https://github.com/openshift/console/pull/8901)
* [Bug 1957756](https://bugzilla.redhat.com/show_bug.cgi?id=1957756): Fix key value in replacement object [#8880](https://github.com/openshift/console/pull/8880)
* update dnd icon [#8848](https://github.com/openshift/console/pull/8848)
* Followup to PR #8843 [#8918](https://github.com/openshift/console/pull/8918)
* [Bug 1960059](https://bugzilla.redhat.com/show_bug.cgi?id=1960059): Monitoring dashboards: Remove the "Grafana UI" link [#8900](https://github.com/openshift/console/pull/8900)
* Added missing icons to VM states and removing popup when no actual message available [#8886](https://github.com/openshift/console/pull/8886)
* [Bug 1958868](https://bugzilla.redhat.com/show_bug.cgi?id=1958868): Depracte isvmready [#8875](https://github.com/openshift/console/pull/8875)
* [Bug 1926776](https://bugzilla.redhat.com/show_bug.cgi?id=1926776): "Template support" modal appears when select the RHEL6 common template [#8905](https://github.com/openshift/console/pull/8905)
* [Bug 1930007](https://bugzilla.redhat.com/show_bug.cgi?id=1930007): Allow multiple selection on resources drop down [#8877](https://github.com/openshift/console/pull/8877)
* [Bug 1940318](https://bugzilla.redhat.com/show_bug.cgi?id=1940318): Monitoring dashboards: Support colored text for single values [#8921](https://github.com/openshift/console/pull/8921)
* GitOps- Convert list card view to table view [#8804](https://github.com/openshift/console/pull/8804)
* [Bug 1958811](https://bugzilla.redhat.com/show_bug.cgi?id=1958811): KubeVirt v1 GA api [#8874](https://github.com/openshift/console/pull/8874)
* [CONSOLE-2847](https://issues.redhat.com/browse/CONSOLE-2847): Cypress: port protractor Filtering tests [#8913](https://github.com/openshift/console/pull/8913)
* [Bug 1935814](https://bugzilla.redhat.com/show_bug.cgi?id=1935814): Fix row heights when additional columns in the pod & node list page have long text [#8851](https://github.com/openshift/console/pull/8851)
* [CONSOLE-2508](https://issues.redhat.com/browse/CONSOLE-2508): Memsource automation [#8819](https://github.com/openshift/console/pull/8819)
* adds devfile provider for dev catalog [#8812](https://github.com/openshift/console/pull/8812)
* [Bug 1959916](https://bugzilla.redhat.com/show_bug.cgi?id=1959916): Make console works against api proxy [#8872](https://github.com/openshift/console/pull/8872)
* [Bug 1959519](https://bugzilla.redhat.com/show_bug.cgi?id=1959519): Fix typo in OperandDetails components [#8893](https://github.com/openshift/console/pull/8893)
* [Bug 1959041](https://bugzilla.redhat.com/show_bug.cgi?id=1959041): "Troubleshoot" link doesn't exist after scaling down OSD pod [#8898](https://github.com/openshift/console/pull/8898)
* Topology List View Automation [#8884](https://github.com/openshift/console/pull/8884)
* Fix node-v15 pipeline test failures [#8892](https://github.com/openshift/console/pull/8892)
* Add devfile samples to samples catalog [#8794](https://github.com/openshift/console/pull/8794)
* [Bug 1946243](https://bugzilla.redhat.com/show_bug.cgi?id=1946243): Fix pool creation timout issue when PG count is limit is… [#8689](https://github.com/openshift/console/pull/8689)
* [Bug 1958679](https://bugzilla.redhat.com/show_bug.cgi?id=1958679): Disable pool compression via UI [#8897](https://github.com/openshift/console/pull/8897)
* Add Devfile Sample Endpoint [#8687](https://github.com/openshift/console/pull/8687)
* Navigate user to respective catalog-page on pressing enter while focused on quick-add view-all link [#8890](https://github.com/openshift/console/pull/8890)
* [Bug 1957590](https://bugzilla.redhat.com/show_bug.cgi?id=1957590): Translation of cluster updating message [#8889](https://github.com/openshift/console/pull/8889)
* [Bug 1958439](https://bugzilla.redhat.com/show_bug.cgi?id=1958439): fixes issue with html5 required validation for dynamic forms [#8887](https://github.com/openshift/console/pull/8887)
* give feedback when modal submit is clicked [#8855](https://github.com/openshift/console/pull/8855)
* [Bug 1952832](https://bugzilla.redhat.com/show_bug.cgi?id=1952832): Enable external mode for IBM cloud [#8790](https://github.com/openshift/console/pull/8790)
* [Bug 1942715](https://bugzilla.redhat.com/show_bug.cgi?id=1942715): Fix User Management i18n misses [#8786](https://github.com/openshift/console/pull/8786)
* Fix that boolean values (esp. false) are not loaded and synced correctly [#8885](https://github.com/openshift/console/pull/8885)
* [Bug 1957561](https://bugzilla.redhat.com/show_bug.cgi?id=1957561): lack of pseudolocalization for some text on Cluster Setting [#8883](https://github.com/openshift/console/pull/8883)
* [Bug 1957895](https://bugzilla.redhat.com/show_bug.cgi?id=1957895): Cypress helper projectDropdown.shouldContain is not an assertion [#8878](https://github.com/openshift/console/pull/8878)
* [Bug 1950460](https://bugzilla.redhat.com/show_bug.cgi?id=1950460): Change Request size input to a number spinner input [#8713](https://github.com/openshift/console/pull/8713)
* Adding login template strings for translation [#8587](https://github.com/openshift/console/pull/8587)
* [Bug 1885242](https://bugzilla.redhat.com/show_bug.cgi?id=1885242): Disables the clone button if no storage class available [#8744](https://github.com/openshift/console/pull/8744)
* Update prow deployment script [#8608](https://github.com/openshift/console/pull/8608)
* chore(OWNERS): add christianvogt to root OWNERS file [#8881](https://github.com/openshift/console/pull/8881)
* [Bug 1952487](https://bugzilla.redhat.com/show_bug.cgi?id=1952487): Template filter does not work properly [#8843](https://github.com/openshift/console/pull/8843)
* Added an icon prop to the HealthItem component, can now override default icon [#8876](https://github.com/openshift/console/pull/8876)
* [Bug 1942117](https://bugzilla.redhat.com/show_bug.cgi?id=1942117): Fix Workloads i18n misses [#8505](https://github.com/openshift/console/pull/8505)
* [Bug 1957967](https://bugzilla.redhat.com/show_bug.cgi?id=1957967): Increase specificity of listPage.row.clickRowByName [#8866](https://github.com/openshift/console/pull/8866)
* Make multus public network optional [#8834](https://github.com/openshift/console/pull/8834)
* Replaces OCS with storage in storage overiew page [#8849](https://github.com/openshift/console/pull/8849)
* SSH strings changes [#8871](https://github.com/openshift/console/pull/8871)
* [Bug 1924968](https://bugzilla.redhat.com/show_bug.cgi?id=1924968): Monitoring: Add some missing translations [#8048](https://github.com/openshift/console/pull/8048)
* [ODC-5592](https://issues.redhat.com/browse/ODC-5592): CI implementation for pipelines [#8320](https://github.com/openshift/console/pull/8320)
* [CONSOLE-2774](https://issues.redhat.com/browse/CONSOLE-2774): Consolidate i18n namespaces k-m [#8805](https://github.com/openshift/console/pull/8805)
* [CONSOLE-2775](https://issues.redhat.com/browse/CONSOLE-2775): Consolidate i18n namespaces n-r [#8806](https://github.com/openshift/console/pull/8806)
* Show roles in project access page based on customization [#8672](https://github.com/openshift/console/pull/8672)
* [CONSOLE-2776](https://issues.redhat.com/browse/CONSOLE-2776): Consolidate i18n namespaces s-z [#8808](https://github.com/openshift/console/pull/8808)
* Fix noobaa-namespace-store and noobaa-backing-store dropdown [#8675](https://github.com/openshift/console/pull/8675)
* [Bug 1956920](https://bugzilla.redhat.com/show_bug.cgi?id=1956920): can't open terminal for pods that have more than one co… [#8853](https://github.com/openshift/console/pull/8853)
* [Bug 1957756](https://bugzilla.redhat.com/show_bug.cgi?id=1957756): Device Replacemet UI, The status of the disk is "replacement ready" before I clicked on "start replacement" [#8864](https://github.com/openshift/console/pull/8864)
* [Bug 1937102](https://bugzilla.redhat.com/show_bug.cgi?id=1937102): i18n Pod Containers, labels [#8441](https://github.com/openshift/console/pull/8441)
* Yaml editor with connected form fields [#8862](https://github.com/openshift/console/pull/8862)
* add new approvers to console frontend OWNERS [#8854](https://github.com/openshift/console/pull/8854)
* fixes default image for operator backed list view [#8840](https://github.com/openshift/console/pull/8840)
* Add customized project access list to server flags [#8502](https://github.com/openshift/console/pull/8502)
* Fix Dev perspective nav items [#8861](https://github.com/openshift/console/pull/8861)
* externalize OCS [#8857](https://github.com/openshift/console/pull/8857)
* Add functionality to edit d/dc via form or yaml interchangeably [#8723](https://github.com/openshift/console/pull/8723)
* [Bug 1940206](https://bugzilla.redhat.com/show_bug.cgi?id=1940206): i18n details page text [#8407](https://github.com/openshift/console/pull/8407)
* [Bug 1955803](https://bugzilla.redhat.com/show_bug.cgi?id=1955803): OperatorHub - console accepts any value for infraFeatures [#8844](https://github.com/openshift/console/pull/8844)
* Make FieldLevelHelp button identifiable for testing [#8858](https://github.com/openshift/console/pull/8858)
* Use latest WebTerminal plugin instead of 4.5.0 [#8795](https://github.com/openshift/console/pull/8795)
* converting navigation extensions to dynamic-plugin-sdk [#8438](https://github.com/openshift/console/pull/8438)
* Add popover to storage in overview status card [#8835](https://github.com/openshift/console/pull/8835)
* Fix the add support annotations script [#8846](https://github.com/openshift/console/pull/8846)
* [Bug 1930007](https://bugzilla.redhat.com/show_bug.cgi?id=1930007): Filter dropdown doesn’t support multi selection [#8802](https://github.com/openshift/console/pull/8802)
* [Bug 1956353](https://bugzilla.redhat.com/show_bug.cgi?id=1956353): Fix analyze script [#8845](https://github.com/openshift/console/pull/8845)
* [Bug 1942548](https://bugzilla.redhat.com/show_bug.cgi?id=1942548): i18n translation of create route form [#8747](https://github.com/openshift/console/pull/8747)
* adding console.dashboards extension types to dynamic-plugin-sdk [#8339](https://github.com/openshift/console/pull/8339)
* convert kubevirt page extensions to dynamic [#8839](https://github.com/openshift/console/pull/8839)
* adding sdk support for dynamic page extensions [#8826](https://github.com/openshift/console/pull/8826)
* adding console.pages extension types to dynamic-plugin-sdk [#8818](https://github.com/openshift/console/pull/8818)
* Plugin SDK: Improve TS diagnostics reporting when parsing TS files [#8831](https://github.com/openshift/console/pull/8831)
* Reducer - convert extensions from static to dynamic [#7854](https://github.com/openshift/console/pull/7854)
* [Bug 1944761](https://bugzilla.redhat.com/show_bug.cgi?id=1944761): Use FieldLevelHelp component instead of Popover [#8793](https://github.com/openshift/console/pull/8793)
* Bump SDK dependencies: ts-json-schema-generator, typescript [#8828](https://github.com/openshift/console/pull/8828)
* multiline pipeline params: remove max height for multilined fields [#8797](https://github.com/openshift/console/pull/8797)
* Remove spaces between Pipeline Kinds translations [#8644](https://github.com/openshift/console/pull/8644)
* Provide add page customization config object as server flag and hide actions from the Add page [#8643](https://github.com/openshift/console/pull/8643)
* [CONSOLE-2773](https://issues.redhat.com/browse/CONSOLE-2773): Consolidate E-I namespaces [#8280](https://github.com/openshift/console/pull/8280)
* [Bug 1954566](https://bugzilla.redhat.com/show_bug.cgi?id=1954566): Cannot update a component (`UtilizationCard`) error [#8833](https://github.com/openshift/console/pull/8833)
* [Bug 1891696](https://bugzilla.redhat.com/show_bug.cgi?id=1891696): [LSO] Add capacity UI does not check for node present in selected storageclass [#8754](https://github.com/openshift/console/pull/8754)
* show all visited tasks of quickstart, change icon of failed tasks [#8757](https://github.com/openshift/console/pull/8757)
* [Bug 1944674](https://bugzilla.redhat.com/show_bug.cgi?id=1944674): Project field become to "All projects" and disabled [#8811](https://github.com/openshift/console/pull/8811)
* Add when expression in pipeline builder [#8779](https://github.com/openshift/console/pull/8779)
* Revert "Disable Alertmanager e2e tests" [#8824](https://github.com/openshift/console/pull/8824)
* Split cloud-init component to different logic and view components [#8817](https://github.com/openshift/console/pull/8817)
* add support for login with normal user [#8809](https://github.com/openshift/console/pull/8809)
* CONSOLE-2351 Add a "Wrap lines" toggle to log viewers [#8683](https://github.com/openshift/console/pull/8683)
* [CONSOLE-2772](https://issues.redhat.com/browse/CONSOLE-2772): Consolidate A-D i18n namespaces [#8279](https://github.com/openshift/console/pull/8279)
* [Bug 1953703](https://bugzilla.redhat.com/show_bug.cgi?id=1953703): Enable tech preview badge for arbiter [#8822](https://github.com/openshift/console/pull/8822)
* [Bug 1941669](https://bugzilla.redhat.com/show_bug.cgi?id=1941669): Translate pinned resources when labelPluralKey is available [#8816](https://github.com/openshift/console/pull/8816)
* [Bug 1952759](https://bugzilla.redhat.com/show_bug.cgi?id=1952759): It was not immediately clear what the Star icon meant [#8776](https://github.com/openshift/console/pull/8776)
* [Bug 1947665](https://bugzilla.redhat.com/show_bug.cgi?id=1947665): Replace dashboard namespace with ceph [#8764](https://github.com/openshift/console/pull/8764)
* [Bug 1952732](https://bugzilla.redhat.com/show_bug.cgi?id=1952732): Users did not understand the boot source labels [#8771](https://github.com/openshift/console/pull/8771)
* Migrate helm actions to use new action extensions [#8629](https://github.com/openshift/console/pull/8629)
* [Bug 1952214](https://bugzilla.redhat.com/show_bug.cgi?id=1952214): Save additional Devfile container parameters from build guidance container and drop it to fix ImagePullBackOff [#8807](https://github.com/openshift/console/pull/8807)
* [Bug 1952635](https://bugzilla.redhat.com/show_bug.cgi?id=1952635): fixes: Web console displays a blank page- white space instead of cluster information [#8810](https://github.com/openshift/console/pull/8810)
* Add certification filter and certified badge in helm catalog [#8662](https://github.com/openshift/console/pull/8662)
* Query Browser: Add seconds back to query browser tooltips [#8815](https://github.com/openshift/console/pull/8815)
* adds samples to topology quick search [#8789](https://github.com/openshift/console/pull/8789)
* [Bug 1926131](https://bugzilla.redhat.com/show_bug.cgi?id=1926131): Adding i18n for missed HPA form [#8272](https://github.com/openshift/console/pull/8272)
* Fix IO operations ChartTooltip (Performance Card, Object Dashboard) [#8798](https://github.com/openshift/console/pull/8798)
* Pipeline Builder AutoComplete (Part 2 - Improved UX) [#8752](https://github.com/openshift/console/pull/8752)
* [Bug 1941625](https://bugzilla.redhat.com/show_bug.cgi?id=1941625): Add two missing translations for topology list view [#8813](https://github.com/openshift/console/pull/8813)
* [Bug 1945103](https://bugzilla.redhat.com/show_bug.cgi?id=1945103): Not showing user creds if vm isnt up [#8791](https://github.com/openshift/console/pull/8791)
* [Bug 1951858](https://bugzilla.redhat.com/show_bug.cgi?id=1951858): Unexpected text '0' on filter toolbar [#8733](https://github.com/openshift/console/pull/8733)
* [Bug 1951212](https://bugzilla.redhat.com/show_bug.cgi?id=1951212): User/Group details shows unrelated subjects in role bindings tab [#8799](https://github.com/openshift/console/pull/8799)
* [Bug 1954248](https://bugzilla.redhat.com/show_bug.cgi?id=1954248): Disable Alertmanager e2e tests [#8801](https://github.com/openshift/console/pull/8801)
* [Bug 1952372](https://bugzilla.redhat.com/show_bug.cgi?id=1952372): VM stop action should not be there if the VM is not running [#8766](https://github.com/openshift/console/pull/8766)
* [Bug 1953418](https://bugzilla.redhat.com/show_bug.cgi?id=1953418): fix wizard validate tests [#8769](https://github.com/openshift/console/pull/8769)
* [Bug 1952325](https://bugzilla.redhat.com/show_bug.cgi?id=1952325): Check support modal in ssh tests and skip template parentSupport [#8737](https://github.com/openshift/console/pull/8737)
* [ODC-5786](https://issues.redhat.com/browse/ODC-5786): suppress focus outline on topology group elements [#8785](https://github.com/openshift/console/pull/8785)
* [Bug 1941798](https://bugzilla.redhat.com/show_bug.cgi?id=1941798): i18n kind on LimitRange and ResourceQuota list pages [#8782](https://github.com/openshift/console/pull/8782)
* [Bug 1941801](https://bugzilla.redhat.com/show_bug.cgi?id=1941801): Role bind toolbar dropdowns haven't been internationalized [#8781](https://github.com/openshift/console/pull/8781)
* [Bug 1952730](https://bugzilla.redhat.com/show_bug.cgi?id=1952730): “Customize virtual machine” and the “Advanced” feature are confusing in wizard [#8773](https://github.com/openshift/console/pull/8773)
* Add Trigger Param Auto Complete [#8753](https://github.com/openshift/console/pull/8753)
* [Bug 1952545](https://bugzilla.redhat.com/show_bug.cgi?id=1952545): Fix new selection after inserting a YAML snippet [#8741](https://github.com/openshift/console/pull/8741)
* disable Quick Starts [#8731](https://github.com/openshift/console/pull/8731)
* [Bug 1939753](https://bugzilla.redhat.com/show_bug.cgi?id=1939753): Track and show error messages in modals [#8439](https://github.com/openshift/console/pull/8439)
* Add .dockerignore file so that all node_modules are ignored [#8026](https://github.com/openshift/console/pull/8026)
* [Bug 1953691](https://bugzilla.redhat.com/show_bug.cgi?id=1953691): Remove unused mock file [#8778](https://github.com/openshift/console/pull/8778)
* [Bug 1952111](https://bugzilla.redhat.com/show_bug.cgi?id=1952111): Optimized imports from @patternfly/react-tokens [#8777](https://github.com/openshift/console/pull/8777)
* [Bug 1952728](https://bugzilla.redhat.com/show_bug.cgi?id=1952728): VM will be turned off when creating snapshots and a warning will be presented [#8774](https://github.com/openshift/console/pull/8774)
* [Bug 1952625](https://bugzilla.redhat.com/show_bug.cgi?id=1952625): Remove model and use Trans [#8750](https://github.com/openshift/console/pull/8750)
* fix: Update token length [#8770](https://github.com/openshift/console/pull/8770)
* [Bug 1952367](https://bugzilla.redhat.com/show_bug.cgi?id=1952367): No VM status on overview page when VM is pending [#8767](https://github.com/openshift/console/pull/8767)
* Avoid setting JAVA_ARGS if cmd args are not provided [#8758](https://github.com/openshift/console/pull/8758)
* [Bug 1921106](https://bugzilla.redhat.com/show_bug.cgi?id=1921106): A11y Violation: button name(s) on Utilization Card on Cluster Dashboard [#8706](https://github.com/openshift/console/pull/8706)
* add data for quickStarts from configmap to window.SERVER_FLAGS [#8695](https://github.com/openshift/console/pull/8695)
* fixes issue with kamelets not shown on catalog for sources [#8772](https://github.com/openshift/console/pull/8772)
* [Bug 1952495](https://bugzilla.redhat.com/show_bug.cgi?id=1952495): “Create” button on the Templates page is confuse [#8765](https://github.com/openshift/console/pull/8765)
* [Bug 1952394](https://bugzilla.redhat.com/show_bug.cgi?id=1952394): Not able to create a project in the wizard [#8743](https://github.com/openshift/console/pull/8743)
* [Bug 1926776](https://bugzilla.redhat.com/show_bug.cgi?id=1926776): "Template support" modal appears when select the RHEL6 common template [#8739](https://github.com/openshift/console/pull/8739)
* Use catalog extension type for catalog item labels [#8704](https://github.com/openshift/console/pull/8704)
* Added styling to vm status events [#8746](https://github.com/openshift/console/pull/8746)
* [Bug 1952310](https://bugzilla.redhat.com/show_bug.cgi?id=1952310): Added a create override options on useSecret hook [#8738](https://github.com/openshift/console/pull/8738)
* Kubevirt plugin falcky tests [#8768](https://github.com/openshift/console/pull/8768)
* Change tooltips for storage-efficiency-card [#8755](https://github.com/openshift/console/pull/8755)
* [Bug 1887849](https://bugzilla.redhat.com/show_bug.cgi?id=1887849): Fix for  new storage pool failure_domain missing [#8745](https://github.com/openshift/console/pull/8745)
* Add support for showing the dashboard based on components [#8669](https://github.com/openshift/console/pull/8669)
* Fixes used capacity based on storage class selection [#8647](https://github.com/openshift/console/pull/8647)
* QuickStart Actions [#8622](https://github.com/openshift/console/pull/8622)
* [Bug 1952958](https://bugzilla.redhat.com/show_bug.cgi?id=1952958): Gracefully degrade when `Intl.RelativeTimeFormat` unavailable [#8761](https://github.com/openshift/console/pull/8761)
* Add new customization snippet to list all available Add page actions [#8717](https://github.com/openshift/console/pull/8717)
* adds DnD support to TextColumnField component [#8715](https://github.com/openshift/console/pull/8715)
* [Bug 1951169](https://bugzilla.redhat.com/show_bug.cgi?id=1951169): Change "Explore" to "API Explorer" [#8682](https://github.com/openshift/console/pull/8682)
* [Bug 1950219](https://bugzilla.redhat.com/show_bug.cgi?id=1950219): fixes issue with KnativeServing not shown in list on global config page [#8740](https://github.com/openshift/console/pull/8740)
* fix Quick Search CTA in topology [#8718](https://github.com/openshift/console/pull/8718)
* fixes issue with ksvc edit for upload jar flow [#8759](https://github.com/openshift/console/pull/8759)
* [Bug 1942086](https://bugzilla.redhat.com/show_bug.cgi?id=1942086): Fix Home i18n misses [#8571](https://github.com/openshift/console/pull/8571)
* [Bug 1928319](https://bugzilla.redhat.com/show_bug.cgi?id=1928319): Stretch cluster installed on 6 storage node cluster with 2 LSO devices on each storage node fails to utilize 8 LSO devices [#8326](https://github.com/openshift/console/pull/8326)
* [Bug 1952697](https://bugzilla.redhat.com/show_bug.cgi?id=1952697): Add Segment support for analytics [#8638](https://github.com/openshift/console/pull/8638)
* [Bug 1952585](https://bugzilla.redhat.com/show_bug.cgi?id=1952585): Enhance operator modal repo and container links [#8703](https://github.com/openshift/console/pull/8703)
* [Bug 1944763](https://bugzilla.redhat.com/show_bug.cgi?id=1944763): Fix tooltips to use common component <FieldLevelHelp> [#8690](https://github.com/openshift/console/pull/8690)
* Add No Workspace value to Start Modal [#8663](https://github.com/openshift/console/pull/8663)
* fix(rhoas-plugin): Design alignments, add strings, and fix bugs [#8637](https://github.com/openshift/console/pull/8637)
* Workspaces and Resource dropdowns are FormSelect [#8624](https://github.com/openshift/console/pull/8624)
* Pipeline Builder Param AutoComplete (part 1) [#8692](https://github.com/openshift/console/pull/8692)
* Fixes time in cache bucket class review page [#8667](https://github.com/openshift/console/pull/8667)
* [Bug 1839101](https://bugzilla.redhat.com/show_bug.cgi?id=1839101): Add namespaced attribute to main navigation links [#8249](https://github.com/openshift/console/pull/8249)
* Support user help for workspaces over resources in the Pipeline Builder [#8735](https://github.com/openshift/console/pull/8735)
* [Bug 1951221](https://bugzilla.redhat.com/show_bug.cgi?id=1951221): remove VMDisksFirehose component in favor of a hook [#8711](https://github.com/openshift/console/pull/8711)
* Refactor Console plugin init code [#8676](https://github.com/openshift/console/pull/8676)
* [Bug 1949810](https://bugzilla.redhat.com/show_bug.cgi?id=1949810): adds check for templates [#8732](https://github.com/openshift/console/pull/8732)
* Guard OBC from showing up in Attach Storage [#8727](https://github.com/openshift/console/pull/8727)
* [Bug 1948789](https://bugzilla.redhat.com/show_bug.cgi?id=1948789): Pass all queries for area chart [#8697](https://github.com/openshift/console/pull/8697)
* Cypress:  numerically naming cypress screenshot files [#8408](https://github.com/openshift/console/pull/8408)
* Added a check for okd in ssh cypress testing [#8722](https://github.com/openshift/console/pull/8722)
* [Bug 1950532](https://bugzilla.redhat.com/show_bug.cgi?id=1950532): Include "update" when referring to operator approval [#8712](https://github.com/openshift/console/pull/8712)
* [Bug 1950196](https://bugzilla.redhat.com/show_bug.cgi?id=1950196): Added a check for enableSSHService before adding a secret to a machine [#8724](https://github.com/openshift/console/pull/8724)
* [Bug 1951209](https://bugzilla.redhat.com/show_bug.cgi?id=1951209): kubevirt-plugin: take into account Succeeded VMI Phase [#8708](https://github.com/openshift/console/pull/8708)
* [Bug 1942839](https://bugzilla.redhat.com/show_bug.cgi?id=1942839): Fix async return [#8719](https://github.com/openshift/console/pull/8719)
* Support webpack ConcatenatedModule in ExtensionValidator [#8705](https://github.com/openshift/console/pull/8705)
* [Bug 1949404](https://bugzilla.redhat.com/show_bug.cgi?id=1949404): Fix label selector translation on pvc creation page [#8688](https://github.com/openshift/console/pull/8688)
* build strategy i18n miss [#8659](https://github.com/openshift/console/pull/8659)
* [Bug 1942673](https://bugzilla.redhat.com/show_bug.cgi?id=1942673): Fix pipeline model label references not using keys [#8628](https://github.com/openshift/console/pull/8628)
* [Bug 1922063](https://bugzilla.redhat.com/show_bug.cgi?id=1922063): "Virtual Machine" should be "Templates" in template wizard [#8691](https://github.com/openshift/console/pull/8691)
* [Bug 1949384](https://bugzilla.redhat.com/show_bug.cgi?id=1949384): Localize Default Pull Secret modal [#8680](https://github.com/openshift/console/pull/8680)
* [Bug 1951214](https://bugzilla.redhat.com/show_bug.cgi?id=1951214): fix isEnvType null ptr and add missing volume types [#8709](https://github.com/openshift/console/pull/8709)
* [Bug 1922280](https://bugzilla.redhat.com/show_bug.cgi?id=1922280): No oVirt label in upstream [#8698](https://github.com/openshift/console/pull/8698)
* [Bug 1924728](https://bugzilla.redhat.com/show_bug.cgi?id=1924728): Add warning events to vm status and changed appearance to be more similar to cluster overview [#8700](https://github.com/openshift/console/pull/8700)
* [Bug 1950912](https://bugzilla.redhat.com/show_bug.cgi?id=1950912): kubevirt devconsole tests [#8352](https://github.com/openshift/console/pull/8352)
* Moved isWinToolsImage function to a different file [#8699](https://github.com/openshift/console/pull/8699)
* [Bug 1862989](https://bugzilla.redhat.com/show_bug.cgi?id=1862989): [RFE]VM import wizard - storage class filter or a tooltip [#8610](https://github.com/openshift/console/pull/8610)
* [Bug 1924788](https://bugzilla.redhat.com/show_bug.cgi?id=1924788): Not clear error message when there are no NADs available for the user [#8625](https://github.com/openshift/console/pull/8625)
* [Bug 1949155](https://bugzilla.redhat.com/show_bug.cgi?id=1949155): correctly check for favorited or last namespace on load [#8639](https://github.com/openshift/console/pull/8639)
* provide code snippet to customize roles in project access [#8533](https://github.com/openshift/console/pull/8533)
* Fix dynamic demo plugin build [#8677](https://github.com/openshift/console/pull/8677)
* [Bug 1949411](https://bugzilla.redhat.com/show_bug.cgi?id=1949411): VolumeSnapshot, VolumeSnapshotClass and VolumeSnapshotConent Details tab is not translated - i18n misses [#8684](https://github.com/openshift/console/pull/8684)
* [Bug 1948788](https://bugzilla.redhat.com/show_bug.cgi?id=1948788): always link to metrics viewer even if graph is empty [#8678](https://github.com/openshift/console/pull/8678)
* [Bug 1949774](https://bugzilla.redhat.com/show_bug.cgi?id=1949774): force postcss to ^8.2.0 [#8674](https://github.com/openshift/console/pull/8674)
* Avoid memoizing topology sidebar components [#8671](https://github.com/openshift/console/pull/8671)
* [Bug 1888517](https://bugzilla.redhat.com/show_bug.cgi?id=1888517): Implements increament when expanding storage [#8257](https://github.com/openshift/console/pull/8257)
* [Bug 1949410](https://bugzilla.redhat.com/show_bug.cgi?id=1949410): Fix "Create binding" link from Role page, RoleBindings tab [#8653](https://github.com/openshift/console/pull/8653)
* [Bug 1862084](https://bugzilla.redhat.com/show_bug.cgi?id=1862084): Consistent formatting of dates and times [#8490](https://github.com/openshift/console/pull/8490)
* fixes multi-namespace bucket class page, table and dropdown sync [#8656](https://github.com/openshift/console/pull/8656)
* [Bug 1948427](https://bugzilla.redhat.com/show_bug.cgi?id=1948427): Fix issue where react-modal was removing Operator modal from the DOM [#8679](https://github.com/openshift/console/pull/8679)
* [Bug 1949935](https://bugzilla.redhat.com/show_bug.cgi?id=1949935): Fix start pipeline action access review [#8670](https://github.com/openshift/console/pull/8670)
* Highlight only the navigation button when quick start hint clicked [#8668](https://github.com/openshift/console/pull/8668)
* Insights Makes review page for multiple namespace bucket class consistent [#8666](https://github.com/openshift/console/pull/8666)
* [Bug 1926289](https://bugzilla.redhat.com/show_bug.cgi?id=1926289): create app-content div with modal-container as sibling [#8617](https://github.com/openshift/console/pull/8617)
* [Bug 1888521](https://bugzilla.redhat.com/show_bug.cgi?id=1888521): Add support for adding dynamic storage providers for a Deployment [#8560](https://github.com/openshift/console/pull/8560)
* Topology - Workload Sidebar [#8651](https://github.com/openshift/console/pull/8651)
* Update CTA and description based on design [#8650](https://github.com/openshift/console/pull/8650)
* [ODC-5698](https://issues.redhat.com/browse/ODC-5698): knative smoke test cases [#8356](https://github.com/openshift/console/pull/8356)
* [Bug 1888525](https://bugzilla.redhat.com/show_bug.cgi?id=1888525): Adding capacity to the storage cluster [RHOCS Usability Study] [#8291](https://github.com/openshift/console/pull/8291)
* [Bug 1949514](https://bugzilla.redhat.com/show_bug.cgi?id=1949514): make Location column visible at smaller screen resolutions [#8658](https://github.com/openshift/console/pull/8658)
* [Bug 1942858](https://bugzilla.redhat.com/show_bug.cgi?id=1942858): [RFE]Confusing detach volume UX [#8652](https://github.com/openshift/console/pull/8652)
* Disallow executable permissions for all groups. [#8649](https://github.com/openshift/console/pull/8649)
* Add files required for plow deployment script [#8654](https://github.com/openshift/console/pull/8654)
* [Bug 1916553](https://bugzilla.redhat.com/show_bug.cgi?id=1916553): Default template description is empty on details tab [#8636](https://github.com/openshift/console/pull/8636)
* Remove noobaa package [#8648](https://github.com/openshift/console/pull/8648)
* [Bug 1949180](https://bugzilla.redhat.com/show_bug.cgi?id=1949180): Parse Pipelines kinds [#8640](https://github.com/openshift/console/pull/8640)
* fixes issue with kn resources not shown if KS is created [#8632](https://github.com/openshift/console/pull/8632)
* [Bug 1946705](https://bugzilla.redhat.com/show_bug.cgi?id=1946705): Use search terms as separate words in quick add search [#8572](https://github.com/openshift/console/pull/8572)
* [Bug 1924916](https://bugzilla.redhat.com/show_bug.cgi?id=1924916): PVC reported as Uploading when it is actually cloning [#8612](https://github.com/openshift/console/pull/8612)
* topology i18n misses [#8603](https://github.com/openshift/console/pull/8603)
* [Bug 1949093](https://bugzilla.redhat.com/show_bug.cgi?id=1949093): fix a.pf-c-button hover issues [#8634](https://github.com/openshift/console/pull/8634)
* [Bug 1948919](https://bugzilla.redhat.com/show_bug.cgi?id=1948919): change "desired channel" to "desired version" [#8635](https://github.com/openshift/console/pull/8635)
* [Bug 1948333](https://bugzilla.redhat.com/show_bug.cgi?id=1948333): Force glob-parent version to ^5.1.2 [#8620](https://github.com/openshift/console/pull/8620)
* Support Embedded Task/Pipeline/Pipeline Resources [#8630](https://github.com/openshift/console/pull/8630)
* [Bug 1918785](https://bugzilla.redhat.com/show_bug.cgi?id=1918785): Update all resource request/limit queries based on new labels [#8606](https://github.com/openshift/console/pull/8606)
* [Bug 1946922](https://bugzilla.redhat.com/show_bug.cgi?id=1946922): Fix ingress details page to show referenced secret name [#8623](https://github.com/openshift/console/pull/8623)
* Fix broken link document Sealing Virtual Machines on CNV [#8626](https://github.com/openshift/console/pull/8626)
* Misc Pipeline Workspace updates [#8604](https://github.com/openshift/console/pull/8604)
* Use active namespace for creating sample href [#8621](https://github.com/openshift/console/pull/8621)
* Added missing styling and machine ready check [#8618](https://github.com/openshift/console/pull/8618)
* [Bug 1922065](https://bugzilla.redhat.com/show_bug.cgi?id=1922065): Rootdisk size is default to 15GiB in customize wizard [#8615](https://github.com/openshift/console/pull/8615)
* imports sorting part 4 [#8567](https://github.com/openshift/console/pull/8567)
* [Bug 1942839](https://bugzilla.redhat.com/show_bug.cgi?id=1942839): Image is now pulled from config map data [#8549](https://github.com/openshift/console/pull/8549)
* show type header for serverless function in topology [#8516](https://github.com/openshift/console/pull/8516)
* converting pvc extension types to dynamic-plugin-sdk [#8162](https://github.com/openshift/console/pull/8162)
* [Bug 1925207](https://bugzilla.redhat.com/show_bug.cgi?id=1925207): fix custom template cloudint disk [#8611](https://github.com/openshift/console/pull/8611)
* Converting context provider extensions to dynamic [#8156](https://github.com/openshift/console/pull/8156)
* Prow script point to deleted resource [#8609](https://github.com/openshift/console/pull/8609)
* Improve generated dist/doc/console-extensions.md [#8543](https://github.com/openshift/console/pull/8543)
* Edit flow for knatified workload for git import with buildConfig, Pipelines and Container Image [#8607](https://github.com/openshift/console/pull/8607)
* Added plugin for delete block pool modal [#8600](https://github.com/openshift/console/pull/8600)
* Use redhat-developer devfile sample repository [#8585](https://github.com/openshift/console/pull/8585)
* [Bug 1946320](https://bugzilla.redhat.com/show_bug.cgi?id=1946320): Fix empty state message for PVC dropdown [#8561](https://github.com/openshift/console/pull/8561)
* Gherkin script for Pipeline Builder enhancements and parity with Tekton [#8501](https://github.com/openshift/console/pull/8501)
* Support FormSelect for Pipeline Resources [#8595](https://github.com/openshift/console/pull/8595)
* Fix for creation of visual connectors [#8541](https://github.com/openshift/console/pull/8541)
* Create component to visualize copy/execute snippets in the Quickstarts [#8527](https://github.com/openshift/console/pull/8527)
* fix: remove stray `}` from end of aria-label in delete dialog [#8484](https://github.com/openshift/console/pull/8484)
* [Bug 1947828](https://bugzilla.redhat.com/show_bug.cgi?id=1947828): fix resource log download filename for long lines [#8598](https://github.com/openshift/console/pull/8598)
* (fix): Remove `i18nKey` for translation [#8605](https://github.com/openshift/console/pull/8605)
* Add support to override and hide CSV Actions [#8597](https://github.com/openshift/console/pull/8597)
* Pool management - delete [#8550](https://github.com/openshift/console/pull/8550)
* [CONSOLE-2379](https://issues.redhat.com/browse/CONSOLE-2379): Add build config for dynamic plugin SDK [#8378](https://github.com/openshift/console/pull/8378)
* [Bug 1848151](https://bugzilla.redhat.com/show_bug.cgi?id=1848151): Don't poll ClusterVersion when user doesn't have authority [#8602](https://github.com/openshift/console/pull/8602)
* [Bug 1942193](https://bugzilla.redhat.com/show_bug.cgi?id=1942193): Override default PF Accordion blue border on the edit Operator form. Only target the field group heading when used to display dynamic form field groups. [#8575](https://github.com/openshift/console/pull/8575)
* show modal for editing resource limits [#8457](https://github.com/openshift/console/pull/8457)
* [Bug 1910500](https://bugzilla.redhat.com/show_bug.cgi?id=1910500): Fixes CSI provisioner additional parameters [#8337](https://github.com/openshift/console/pull/8337)
* Make multus behaviour common between two modes [#8599](https://github.com/openshift/console/pull/8599)
* Adds support to edit bucket class with namespace store resources [#8594](https://github.com/openshift/console/pull/8594)
* Gherkin script for Form based edit for Deployment & DeploymentConfig-ODC-5007 [#8588](https://github.com/openshift/console/pull/8588)
* Gherkin Script for Enhancements for feature parity with Tekton-ODC-5151 [#8555](https://github.com/openshift/console/pull/8555)
* [Bug 1943449](https://bugzilla.redhat.com/show_bug.cgi?id=1943449): Bump hosted-git-info package as part of CVE [#8481](https://github.com/openshift/console/pull/8481)
* Fixes inconsistency in tables in attached devices [#8578](https://github.com/openshift/console/pull/8578)
* [Bug 1866318](https://bugzilla.redhat.com/show_bug.cgi?id=1866318): [RHOCS Usability Study][Dashboard] Users found it difficult to navigate to the OCS dashboard [#8496](https://github.com/openshift/console/pull/8496)
* Gherkin script for updating empty state of topology-ODC-5595 [#8592](https://github.com/openshift/console/pull/8592)
* [Bug 1866331](https://bugzilla.redhat.com/show_bug.cgi?id=1866331): Add tooltips [#8590](https://github.com/openshift/console/pull/8590)
* [Bug 1942557](https://bugzilla.redhat.com/show_bug.cgi?id=1942557): Remove cluster label from predefined monitoring queries [#8519](https://github.com/openshift/console/pull/8519)
* Adds description in bucket class dropdown for OBC page [#8589](https://github.com/openshift/console/pull/8589)
* add support for workspaces [#8573](https://github.com/openshift/console/pull/8573)
* Add support for Alert Action in Dynamic SDK [#8569](https://github.com/openshift/console/pull/8569)
* Kafka Source creation form to support bootstrap server host from KC [#8518](https://github.com/openshift/console/pull/8518)
* View shortcuts on the topology list view [#8515](https://github.com/openshift/console/pull/8515)
* Add support for conditionally task in pipeline visualization [#8581](https://github.com/openshift/console/pull/8581)
* Fix remove trigger issue [#8521](https://github.com/openshift/console/pull/8521)
* [Bug 1942749](https://bugzilla.redhat.com/show_bug.cgi?id=1942749): standardize field level help to use FieldLevelHelp [#8471](https://github.com/openshift/console/pull/8471)
* Adds support for creating multi namespace bucket class [#8293](https://github.com/openshift/console/pull/8293)
* show kafka source connector [#8415](https://github.com/openshift/console/pull/8415)
* [Bug 1930015](https://bugzilla.redhat.com/show_bug.cgi?id=1930015): OS list is overlapped by buttons in template wizard [#8579](https://github.com/openshift/console/pull/8579)
* [Bug 1942716](https://bugzilla.redhat.com/show_bug.cgi?id=1942716): Fix different Image Manifest Vulnerabilities issues [#8474](https://github.com/openshift/console/pull/8474)
* [Bug 1940361](https://bugzilla.redhat.com/show_bug.cgi?id=1940361): enhance vm action test with storageClass HPP [#8411](https://github.com/openshift/console/pull/8411)
* Reconcile resolved extension types [#8224](https://github.com/openshift/console/pull/8224)
* [Bug 1935176](https://bugzilla.redhat.com/show_bug.cgi?id=1935176): Indicate single node deployment on cluster overview page [#8432](https://github.com/openshift/console/pull/8432)
* Replaces _.get with optional chaining in Ceph Storage Plugin [#8161](https://github.com/openshift/console/pull/8161)
* [Bug 1941915](https://bugzilla.redhat.com/show_bug.cgi?id=1941915): Added validation check for in progress custom boot source template name [#8580](https://github.com/openshift/console/pull/8580)
* Add support for MultiColumnField to support multiline [#8576](https://github.com/openshift/console/pull/8576)
* Adds UI support for creating cache bucket class [#8497](https://github.com/openshift/console/pull/8497)
* update label app.kubernetes.io/name and remove unused yamls [#8574](https://github.com/openshift/console/pull/8574)
* [Bug 1946449](https://bugzilla.redhat.com/show_bug.cgi?id=1946449): fix cloud init tests as UI changed [#8566](https://github.com/openshift/console/pull/8566)
* Create Edit flow for Upload Jar Form [#8458](https://github.com/openshift/console/pull/8458)
* converting global config extension to dynamic-plugin-sdk [#8088](https://github.com/openshift/console/pull/8088)
* Fix for Protractor project details dashboard card (Labels) test [#8586](https://github.com/openshift/console/pull/8586)
* cypress tests for ssh [#8565](https://github.com/openshift/console/pull/8565)
* Fix skipped task status when using conditions [#8577](https://github.com/openshift/console/pull/8577)
* ODC 5602: Added step definitions related to eventing features smoke test cases [#8564](https://github.com/openshift/console/pull/8564)
* Updating openshift-enterprise-console images to be consistent with ART [#8562](https://github.com/openshift/console/pull/8562)
* Test vm ssh connect - cypress [#8554](https://github.com/openshift/console/pull/8554)
* Embedded Tasks in Pipeline Builder [#8538](https://github.com/openshift/console/pull/8538)
* updates icon for serverless functions [#8525](https://github.com/openshift/console/pull/8525)
* Pool management - Update block pool [#8330](https://github.com/openshift/console/pull/8330)
* [CONSOLE-2400](https://issues.redhat.com/browse/CONSOLE-2400): Bump react to v17 [#7736](https://github.com/openshift/console/pull/7736)
* [Bug 1937941](https://bugzilla.redhat.com/show_bug.cgi?id=1937941): Fix wording for favorite templates [#8570](https://github.com/openshift/console/pull/8570)
* [Bug 1937717](https://bugzilla.redhat.com/show_bug.cgi?id=1937717): Set a kebab column in the template list [#8568](https://github.com/openshift/console/pull/8568)
* Rework terminal to check if the operator is installed before showing the terminal button [#8342](https://github.com/openshift/console/pull/8342)
* Create KSVC with min/max scale if workload has related HPA [#8476](https://github.com/openshift/console/pull/8476)
* Monitoring: Tidy files & imports [#8544](https://github.com/openshift/console/pull/8544)
* [Bug 1936620](https://bugzilla.redhat.com/show_bug.cgi?id=1936620): Fix create operand form default boolean field [#8504](https://github.com/openshift/console/pull/8504)
* Organize remaining files [#8557](https://github.com/openshift/console/pull/8557)
* Monitoring dashboards: All optional "All" to variable dropdowns [#8553](https://github.com/openshift/console/pull/8553)
* [Bug 1945630](https://bugzilla.redhat.com/show_bug.cgi?id=1945630): Fix default resource log download file name [#8559](https://github.com/openshift/console/pull/8559)
* [ODC-5507](https://issues.redhat.com/browse/ODC-5507): Topology cypress cucumber setup [#8530](https://github.com/openshift/console/pull/8530)
* part 2 of sorting imports [#8551](https://github.com/openshift/console/pull/8551)
* Adds support for creating single namespace store bucket class [#8266](https://github.com/openshift/console/pull/8266)
* Adding data test for ssh cypress tests [#8520](https://github.com/openshift/console/pull/8520)
* organized kubevirt plugin imports files [#8535](https://github.com/openshift/console/pull/8535)
* convert samples page to use catalog extensions [#8492](https://github.com/openshift/console/pull/8492)
* Simplify Console extension types [#8506](https://github.com/openshift/console/pull/8506)
* workspaces in pipeline start modal [#8372](https://github.com/openshift/console/pull/8372)
* [Bug 1916116](https://bugzilla.redhat.com/show_bug.cgi?id=1916116): Pf update to fix NavExpandable component [#8534](https://github.com/openshift/console/pull/8534)
* [Bug 1932673](https://bugzilla.redhat.com/show_bug.cgi?id=1932673): Virtual machine template provided by red hat should not be editable [#8540](https://github.com/openshift/console/pull/8540)
* Support URLs in Result values [#8522](https://github.com/openshift/console/pull/8522)
* [Bug 1945637](https://bugzilla.redhat.com/show_bug.cgi?id=1945637): odc 5666 fixing pipelines scripts issues [#8422](https://github.com/openshift/console/pull/8422)
* Changes according to UX requirements [#8529](https://github.com/openshift/console/pull/8529)
* Align checkboxes [#8510](https://github.com/openshift/console/pull/8510)
* Add extension types for console actions and topology details panel [#8467](https://github.com/openshift/console/pull/8467)
* [Bug 1933857](https://bugzilla.redhat.com/show_bug.cgi?id=1933857): Follow on fix to ensure operand details page 404s when no model is found [#8443](https://github.com/openshift/console/pull/8443)
* [CONSOLE-2524](https://issues.redhat.com/browse/CONSOLE-2524): Add Kata container RuntimeClass to workload detail pages [#8406](https://github.com/openshift/console/pull/8406)
* [Bug 1932281](https://bugzilla.redhat.com/show_bug.cgi?id=1932281): inform user when channels are unknown [#8392](https://github.com/openshift/console/pull/8392)
* [ODC-5545](https://issues.redhat.com/browse/ODC-5545): cypress cucumber helm setup [#8387](https://github.com/openshift/console/pull/8387)
* [Bug 1943356](https://bugzilla.redhat.com/show_bug.cgi?id=1943356): change "UI extension" to "plugin" [#8479](https://github.com/openshift/console/pull/8479)
* [Bug 1942839](https://bugzilla.redhat.com/show_bug.cgi?id=1942839): Use digest for virtio-win container image [#8514](https://github.com/openshift/console/pull/8514)
* [ODC-5725](https://issues.redhat.com/browse/ODC-5725): Add owners file to topology folder [#8539](https://github.com/openshift/console/pull/8539)
* [Bug 1945146](https://bugzilla.redhat.com/show_bug.cgi?id=1945146): Remove pipeline Tech preview badge for  pipelines GA operator [#8526](https://github.com/openshift/console/pull/8526)
* [Bug 1944602](https://bugzilla.redhat.com/show_bug.cgi?id=1944602): fixing-project-creation-and-updated-packageJson [#8513](https://github.com/openshift/console/pull/8513)
* [Bug 1939069](https://bugzilla.redhat.com/show_bug.cgi?id=1939069): Add source to vm template silently failed [#8512](https://github.com/openshift/console/pull/8512)
* [CONSOLE-2527](https://issues.redhat.com/browse/CONSOLE-2527): Add translations from Sprint 197 [#8404](https://github.com/openshift/console/pull/8404)
* changed ssh copy command to work with http and not only https [#8532](https://github.com/openshift/console/pull/8532)
* Fix to show resources to filter by in Topology [#8517](https://github.com/openshift/console/pull/8517)
* Query Browser: Switch colors to `ChartThemeColor.multiUnordered` [#8507](https://github.com/openshift/console/pull/8507)
* Adding aggregated services to catalog, topology and various views. [#8146](https://github.com/openshift/console/pull/8146)
* The field name VolumeSnapshotContent is wrong on VolumeSnapshotContent detail page [#8511](https://github.com/openshift/console/pull/8511)
* [Bug 1942673](https://bugzilla.redhat.com/show_bug.cgi?id=1942673): Fix breadcrumbs, delete modal, and create for i18n in pipelines models (and other kinds). [#8486](https://github.com/openshift/console/pull/8486)
* [Bug 1944509](https://bugzilla.redhat.com/show_bug.cgi?id=1944509): Add context to translation strings [#8508](https://github.com/openshift/console/pull/8508)
* [Bug 1944273](https://bugzilla.redhat.com/show_bug.cgi?id=1944273): don't use latest virtio disk image for downstream [#8509](https://github.com/openshift/console/pull/8509)
* [Bug 1943996](https://bugzilla.redhat.com/show_bug.cgi?id=1943996): Bump ua-parser-js to avoid ReDoS via malicious User-Agent header [#8495](https://github.com/openshift/console/pull/8495)
* Pipeline Builder Validation Rework [#8460](https://github.com/openshift/console/pull/8460)
* [RHSTOR-1554](https://issues.redhat.com/browse/RHSTOR-1554): Migrate object service dashboard tests [#8270](https://github.com/openshift/console/pull/8270)
* adds topology actions to upload a jar file [#8456](https://github.com/openshift/console/pull/8456)
* [Bug 1941995](https://bugzilla.redhat.com/show_bug.cgi?id=1941995): fix backwards incompatible trigger api changes [#8437](https://github.com/openshift/console/pull/8437)
* Added OWNERS file to frontend/packages/integration-tests-cypress [#8451](https://github.com/openshift/console/pull/8451)
* [Bug 1942641](https://bugzilla.redhat.com/show_bug.cgi?id=1942641): Fix build related i18n misses [#8473](https://github.com/openshift/console/pull/8473)
* [Bug 1943543](https://bugzilla.redhat.com/show_bug.cgi?id=1943543): Fix to include template and selected options for RC rollbacks [#8482](https://github.com/openshift/console/pull/8482)
* Fix for topology sub context menus placement [#8470](https://github.com/openshift/console/pull/8470)
* fix Task badge color in pipeline builder page [#8478](https://github.com/openshift/console/pull/8478)
* Update Dockerfile.product for nodejs v14.16.0 [#8427](https://github.com/openshift/console/pull/8427)
* Fix for topology crash on load when application group is selected [#8472](https://github.com/openshift/console/pull/8472)
* [Bug 1927902](https://bugzilla.redhat.com/show_bug.cgi?id=1927902): i18n Cluster Utilization dashboard durations [#8332](https://github.com/openshift/console/pull/8332)
* [Bug 1766287](https://bugzilla.redhat.com/show_bug.cgi?id=1766287): Use httpd in workload YAML templates [#8459](https://github.com/openshift/console/pull/8459)
* quick search modal close on starting quickstart [#8403](https://github.com/openshift/console/pull/8403)
* [Bug 1938140](https://bugzilla.redhat.com/show_bug.cgi?id=1938140): Add 'Roll Back' action for Replication Controllers and Replica Sets [#8381](https://github.com/openshift/console/pull/8381)
* Added thick-provision feature flag in Readme [#8468](https://github.com/openshift/console/pull/8468)
* [Bug 1942395](https://bugzilla.redhat.com/show_bug.cgi?id=1942395): Display Failed status for DeploymentConfig [#8463](https://github.com/openshift/console/pull/8463)
* [Bug 1942694](https://bugzilla.redhat.com/show_bug.cgi?id=1942694): decodeURIComponent for name in <title> so special chars… [#8466](https://github.com/openshift/console/pull/8466)
* [Bug 1915971](https://bugzilla.redhat.com/show_bug.cgi?id=1915971): Role and Role Binding breadcrumbs do not work as expected [#8010](https://github.com/openshift/console/pull/8010)
* [Bug 1927423](https://bugzilla.redhat.com/show_bug.cgi?id=1927423): Monitoring: Add warning to list pages when silences cannot be loaded [#8461](https://github.com/openshift/console/pull/8461)
* Pool management list and creation [#8254](https://github.com/openshift/console/pull/8254)
* Fix Add HorizontalPodAutoscaler page layout [#8455](https://github.com/openshift/console/pull/8455)
* Gherkin Script:Add workspaces support for pipelines-ODC-3991 [#8361](https://github.com/openshift/console/pull/8361)
* [Bug 1924641](https://bugzilla.redhat.com/show_bug.cgi?id=1924641): Remove error message for "missing storage class" [#8259](https://github.com/openshift/console/pull/8259)
* [Bug 1909091](https://bugzilla.redhat.com/show_bug.cgi?id=1909091): Removed prefix check [#8454](https://github.com/openshift/console/pull/8454)
* [Bug 1941667](https://bugzilla.redhat.com/show_bug.cgi?id=1941667): fixes i18n miss in ProjectAccess [#8447](https://github.com/openshift/console/pull/8447)
* odc 5670 code refactoring [#8433](https://github.com/openshift/console/pull/8433)
* Adds resource page for creating namespacestore CRs [#8223](https://github.com/openshift/console/pull/8223)
* ssh to vm [#8263](https://github.com/openshift/console/pull/8263)
* Improve fetching LSO status during cluster installation [#8159](https://github.com/openshift/console/pull/8159)
* [Bug 1941990](https://bugzilla.redhat.com/show_bug.cgi?id=1941990): fix pipeline metrics endpoint for 1.4 osp [#8445](https://github.com/openshift/console/pull/8445)
* Thick provisioned for Ceph RBD [#8186](https://github.com/openshift/console/pull/8186)
* Implement Add Capacity Modal using PF [#8178](https://github.com/openshift/console/pull/8178)
* [Bug 1905627](https://bugzilla.redhat.com/show_bug.cgi?id=1905627): Warn using an unsupported IE browser [#8384](https://github.com/openshift/console/pull/8384)
* Updating openshift-enterprise-console builder & base images to be consistent with ART [#8449](https://github.com/openshift/console/pull/8449)
* [Bug 1938321](https://bugzilla.redhat.com/show_bug.cgi?id=1938321): PackageManifest lists link to details pages [#8444](https://github.com/openshift/console/pull/8444)
* [Bug 1939606](https://bugzilla.redhat.com/show_bug.cgi?id=1939606): Attempting to put a host into maintenance mode warns about Ceph cluster health, but no storage cluster problems are apparent [#8446](https://github.com/openshift/console/pull/8446)
* [Bug 1937496](https://bugzilla.redhat.com/show_bug.cgi?id=1937496): Query Browser: Add timestamp date to tooltips [#8420](https://github.com/openshift/console/pull/8420)
* adding console.resource-metadata extension types to dynamic-plugin-sdk [#8284](https://github.com/openshift/console/pull/8284)
* [Bug 1939815](https://bugzilla.redhat.com/show_bug.cgi?id=1939815): Modified warning Alert for Encrypted PVs in Create StorageClass [#8435](https://github.com/openshift/console/pull/8435)
* Fix BRIDGE_K8S_AUTH_BEARER_TOKEN env var in readme [#8434](https://github.com/openshift/console/pull/8434)
* Monitoring: Fix list page default sort [#8429](https://github.com/openshift/console/pull/8429)
* [Bug 1928008](https://bugzilla.redhat.com/show_bug.cgi?id=1928008): Persist state on back navigation [#8157](https://github.com/openshift/console/pull/8157)
* Update the catalog item filter for vm templates [#8442](https://github.com/openshift/console/pull/8442)
* [Bug 1824911](https://bugzilla.redhat.com/show_bug.cgi?id=1824911): Fix RBAC check when creating a resource [#8440](https://github.com/openshift/console/pull/8440)
* [CONSOLE-2389](https://issues.redhat.com/browse/CONSOLE-2389): i18n translation of Storage section [#7123](https://github.com/openshift/console/pull/7123)
* [Bug 1937658](https://bugzilla.redhat.com/show_bug.cgi?id=1937658): Modified description for storage class encryption [#8402](https://github.com/openshift/console/pull/8402)
* Fix LSO's local-volume-discovery radio buttons [#8426](https://github.com/openshift/console/pull/8426)
* Make customize form footer sticky [#8409](https://github.com/openshift/console/pull/8409)
* [Bug 1879140](https://bugzilla.redhat.com/show_bug.cgi?id=1879140): Set proper loglevel for auth errors [#7217](https://github.com/openshift/console/pull/7217)
* [Bug 1937666](https://bugzilla.redhat.com/show_bug.cgi?id=1937666): Fixes mouseover on headline [#8430](https://github.com/openshift/console/pull/8430)
* [Bug 1931279](https://bugzilla.redhat.com/show_bug.cgi?id=1931279): Bump lodash-es to latest v4.17.21, to remove security vulnerabilities [#8247](https://github.com/openshift/console/pull/8247)
* GitOps Environment card title layout issue [#8316](https://github.com/openshift/console/pull/8316)
* Fix for creating visual connectors to operator workload nodes [#8423](https://github.com/openshift/console/pull/8423)
* Monitoring dashboards: Fix clearing queries when dashboard unmounts [#8419](https://github.com/openshift/console/pull/8419)
* Query Browser: Fix cutoff for when to show X axis seconds [#8418](https://github.com/openshift/console/pull/8418)
* [ODC-5660](https://issues.redhat.com/browse/ODC-5660): fixing linter issues in topology gherkin features [#8412](https://github.com/openshift/console/pull/8412)
* drag and drop jar file on topology graph / list view [#8374](https://github.com/openshift/console/pull/8374)
* truncate select task text to prevent overlap with the dropdown icon [#8328](https://github.com/openshift/console/pull/8328)
* Add provder and support fields when customizing source [#8313](https://github.com/openshift/console/pull/8313)
* [Bug 1940755](https://bugzilla.redhat.com/show_bug.cgi?id=1940755): Remove wrongly set namespace parameter when creating LocalVolumeSet [#8421](https://github.com/openshift/console/pull/8421)
* [Bug 1930546](https://bugzilla.redhat.com/show_bug.cgi?id=1930546): show error in RsourceDropdown on load error [#8275](https://github.com/openshift/console/pull/8275)
* [Bug 1925087](https://bugzilla.redhat.com/show_bug.cgi?id=1925087): Add i18n support to the Secret modals and add new hint for the servername [#8047](https://github.com/openshift/console/pull/8047)
* fix autofill name field values [#8414](https://github.com/openshift/console/pull/8414)
* Adds spinner for donut chart [#8397](https://github.com/openshift/console/pull/8397)
* [Bug 1939573](https://bugzilla.redhat.com/show_bug.cgi?id=1939573): Warn if git provider rate limits [#8390](https://github.com/openshift/console/pull/8390)
* Gherkin Script:Getting Started - Spring Boot-ODC-4389 [#8362](https://github.com/openshift/console/pull/8362)
* JAR upload from Add flow [#8355](https://github.com/openshift/console/pull/8355)
* Pipeline diagram finally task [#8399](https://github.com/openshift/console/pull/8399)
* Add form component for editing deployments [#8401](https://github.com/openshift/console/pull/8401)
* Monitoring: Replacing connect with useDispatch / useSelector [#8413](https://github.com/openshift/console/pull/8413)
* Remove unused Dex dependency [#8340](https://github.com/openshift/console/pull/8340)
* [CONSOLE-2494](https://issues.redhat.com/browse/CONSOLE-2494): Bump node and yarn versions in docker builder file [#7306](https://github.com/openshift/console/pull/7306)
* Add more space between template name and checkbox in Finish modal [#8410](https://github.com/openshift/console/pull/8410)
* Add info about customize flow when adding source [#8314](https://github.com/openshift/console/pull/8314)
* Feature: Taint Nodes [#8218](https://github.com/openshift/console/pull/8218)
* add support for finally tasks in pipeline builder [#8385](https://github.com/openshift/console/pull/8385)
* Update Dev perspective to show `Add` page on first visit [#8373](https://github.com/openshift/console/pull/8373)
* Query Browser: Show dates on X-axis when time range is over one day [#8365](https://github.com/openshift/console/pull/8365)
* [Bug 1926106](https://bugzilla.redhat.com/show_bug.cgi?id=1926106): i18n translation of create & delete project namespace modal [#8204](https://github.com/openshift/console/pull/8204)
* Fix for a11y issue on monitoring page [#8393](https://github.com/openshift/console/pull/8393)
* Migrate all usage of static catalog extensions to dynamic extensions [#8405](https://github.com/openshift/console/pull/8405)
* [Bug 1939869](https://bugzilla.redhat.com/show_bug.cgi?id=1939869): Add annotations to datavolume for HPP [#8398](https://github.com/openshift/console/pull/8398)
* Remove "Tech preview" encryption label [#8396](https://github.com/openshift/console/pull/8396)
* [Bug 1926798](https://bugzilla.redhat.com/show_bug.cgi?id=1926798): Check undefined values for Arbiter dropdown [#8388](https://github.com/openshift/console/pull/8388)
* [RHSTOR-1643](https://issues.redhat.com/browse/RHSTOR-1643): Fix Import Order [#8131](https://github.com/openshift/console/pull/8131)
* Monitoring dashboards: Support grouping of panels into rows [#8364](https://github.com/openshift/console/pull/8364)
* [Bug 1937018](https://bugzilla.redhat.com/show_bug.cgi?id=1937018): Fix null handling in FilterToolbar_ to prevent possible exceptions [#8391](https://github.com/openshift/console/pull/8391)
* adding navigation extension types to dynamic-plugin-sdk [#8171](https://github.com/openshift/console/pull/8171)
* Cypress: fixed skipping login when running locally [#8341](https://github.com/openshift/console/pull/8341)
* Monitoring: Highlight {{ ... }} tags in Prometheus templates [#8333](https://github.com/openshift/console/pull/8333)
* bump react-refresh versions [#8303](https://github.com/openshift/console/pull/8303)
* [Bug 1924536](https://bugzilla.redhat.com/show_bug.cgi?id=1924536): Change link for not available state [#8232](https://github.com/openshift/console/pull/8232)
* Update the scope of GitOpsService resource [#8379](https://github.com/openshift/console/pull/8379)
* Monitoring: Add missing i18n for "Stacked" [#8376](https://github.com/openshift/console/pull/8376)
* Update empty state for TopologyView [#8370](https://github.com/openshift/console/pull/8370)
* create infra to execute commands in terminal [#8302](https://github.com/openshift/console/pull/8302)
* Customize VM template boot source [#8151](https://github.com/openshift/console/pull/8151)
* (bug-fix): Fixes donut chart loading [#8383](https://github.com/openshift/console/pull/8383)
* YAML Editor Automation [#8369](https://github.com/openshift/console/pull/8369)
* Update descriptor reference doc to remove fieldDependency sibling restriction. [#8278](https://github.com/openshift/console/pull/8278)
* adding global config extension types to dynamic-plugin-sdk [#8087](https://github.com/openshift/console/pull/8087)
* [ODC-5622](https://issues.redhat.com/browse/ODC-5622): Create Namespaces script is failing on CI due to load issue [#8375](https://github.com/openshift/console/pull/8375)
* (refactor): Fix handling of nodes in internal attached devices wizard [#8256](https://github.com/openshift/console/pull/8256)
* Migrate all static AddAction extensions to dynamic extensions [#8371](https://github.com/openshift/console/pull/8371)
* [Bug 1937628](https://bugzilla.redhat.com/show_bug.cgi?id=1937628): Bump upgrade channels for 4.8 [#8367](https://github.com/openshift/console/pull/8367)
* Update PF package versions to 2021-3 [#8331](https://github.com/openshift/console/pull/8331)
* improve i18n parser to support console-extensions.json [#8363](https://github.com/openshift/console/pull/8363)
* [Bug 1937683](https://bugzilla.redhat.com/show_bug.cgi?id=1937683): Show plane image destination of output in buildConfig when the destination is a DockerImage [#8368](https://github.com/openshift/console/pull/8368)
* Improve Console TypeScript type declarations [#8343](https://github.com/openshift/console/pull/8343)
* Upgrade xterm v3.12.0 to v4.10.0 [#8260](https://github.com/openshift/console/pull/8260)
* Adding useSSHKeys hook, core usage for ssh feature [#8366](https://github.com/openshift/console/pull/8366)
* Fix ResolvedExtension type inference [#8358](https://github.com/openshift/console/pull/8358)
* Add .eslintrc to dynamic plugin SDK scripts directory [#8359](https://github.com/openshift/console/pull/8359)
* [Bug 1929243](https://bugzilla.redhat.com/show_bug.cgi?id=1929243): override normal namespace hiding for pods view in node details [#8253](https://github.com/openshift/console/pull/8253)
* Fix @console/active-plugins generation interfering with i18n [#8344](https://github.com/openshift/console/pull/8344)
* Query Browser: Fix bug where lines briefly appear outside graph frame [#8334](https://github.com/openshift/console/pull/8334)
* Monitoring dashboards: Fix bug where end time was not reset after zoom [#8321](https://github.com/openshift/console/pull/8321)
* [Bug 1926126](https://bugzilla.redhat.com/show_bug.cgi?id=1926126): Remove period in translation [#8129](https://github.com/openshift/console/pull/8129)
* adding yaml templates extension types to dynamic-plugin-sdk [#7935](https://github.com/openshift/console/pull/7935)
* [Bug 1909091](https://bugzilla.redhat.com/show_bug.cgi?id=1909091): Pod/node/ip/template isn't showing when vm is running [#8350](https://github.com/openshift/console/pull/8350)
* Consolidate Noobaa and Ceph Plugin [#8185](https://github.com/openshift/console/pull/8185)
* [Bug 1936854](https://bugzilla.redhat.com/show_bug.cgi?id=1936854): Fix to show correct internal image-stream name in container image edit flow's internal registry image-stream dropdown for kn service [#8338](https://github.com/openshift/console/pull/8338)
* [Bug 1936983](https://bugzilla.redhat.com/show_bug.cgi?id=1936983): Removed loaded prop and nested component [#8347](https://github.com/openshift/console/pull/8347)
* fixes shadow and form footer for edit form [#8346](https://github.com/openshift/console/pull/8346)
* Update console-extensions.json format [#8252](https://github.com/openshift/console/pull/8252)
* [Bug 1879638](https://bugzilla.redhat.com/show_bug.cgi?id=1879638): Support binary file type secret entries [#7399](https://github.com/openshift/console/pull/7399)
* [Bug 1935269](https://bugzilla.redhat.com/show_bug.cgi?id=1935269): Include jobs in operator backed sidebar & resource details page [#8306](https://github.com/openshift/console/pull/8306)
* [Bug 1928875](https://bugzilla.redhat.com/show_bug.cgi?id=1928875): Update translations [#8101](https://github.com/openshift/console/pull/8101)
* fix helm nav item delay to show up on page load [#8336](https://github.com/openshift/console/pull/8336)
* Improve plugin JSON schema generator code [#8297](https://github.com/openshift/console/pull/8297)
* Add workspaces to Pipeline Details Page [#8238](https://github.com/openshift/console/pull/8238)
* [Bug 1931005](https://bugzilla.redhat.com/show_bug.cgi?id=1931005): include related objects without a name [#8329](https://github.com/openshift/console/pull/8329)
* [Bug 1931755](https://bugzilla.redhat.com/show_bug.cgi?id=1931755): Fix test about VM start via kebab action [#8219](https://github.com/openshift/console/pull/8219)
* removes references of deprecated selfLink [#8318](https://github.com/openshift/console/pull/8318)
* Migrate obcTest.scenario.ts [#8061](https://github.com/openshift/console/pull/8061)
* [ODC-5596](https://issues.redhat.com/browse/ODC-5596): Updated cypress extensibility related files [#8305](https://github.com/openshift/console/pull/8305)
* [Bug 1883587](https://bugzilla.redhat.com/show_bug.cgi?id=1883587): Adds volume mode selector when restoring a volumesnapshot [#8136](https://github.com/openshift/console/pull/8136)
* display full quick start prerequisites in quick search [#8308](https://github.com/openshift/console/pull/8308)
* adding pvc extension types to dynamic-plugin-sdk [#7912](https://github.com/openshift/console/pull/7912)
* Install Web Terminal Operator [#8319](https://github.com/openshift/console/pull/8319)
* support service binding operator version 0.5.0 [#8309](https://github.com/openshift/console/pull/8309)
* odc-5564-select the builder image when git url is not validated [#8295](https://github.com/openshift/console/pull/8295)
* fixes shadow and form footer for ksvc form [#8285](https://github.com/openshift/console/pull/8285)
* odc-5571-fixed page details related smoke test case [#8287](https://github.com/openshift/console/pull/8287)
* [Bug 1888561](https://bugzilla.redhat.com/show_bug.cgi?id=1888561): Fixes MCG info [#8281](https://github.com/openshift/console/pull/8281)
* [Bug 1934329](https://bugzilla.redhat.com/show_bug.cgi?id=1934329): Bump sanitize-html version to 2.3.2 to improperly validate the hostnames [#8294](https://github.com/openshift/console/pull/8294)
* [CONSOLE-2380](https://issues.redhat.com/browse/CONSOLE-2380): Add UI for enabling/disabling dynamic plugins during op… [#8175](https://github.com/openshift/console/pull/8175)
* [Bug 1857477](https://bugzilla.redhat.com/show_bug.cgi?id=1857477): Updates helptext for storage cluster creation [#8237](https://github.com/openshift/console/pull/8237)
* [Bug 1918729](https://bugzilla.redhat.com/show_bug.cgi?id=1918729): add hide/reveal button for kms token [#8196](https://github.com/openshift/console/pull/8196)
* Monitoring dashboards: Allow zooming all graphs and sync their ranges [#8273](https://github.com/openshift/console/pull/8273)
* [Bug 1932453](https://bugzilla.redhat.com/show_bug.cgi?id=1932453): Update format for Japanese date/times [#8242](https://github.com/openshift/console/pull/8242)
* [Bug 1933857](https://bugzilla.redhat.com/show_bug.cgi?id=1933857): Fix uncaught exception in DetailsPage component [#8271](https://github.com/openshift/console/pull/8271)
* [CONSOLE-2758](https://issues.redhat.com/browse/CONSOLE-2758): Bump webpack-cli and webpack-dev-server to latest version [#8269](https://github.com/openshift/console/pull/8269)
* [Bug 1928893](https://bugzilla.redhat.com/show_bug.cgi?id=1928893): Fix mismatched disk and memory pressure condition status [#8268](https://github.com/openshift/console/pull/8268)
* Fix topology crash due to selfLink deprecation [#8264](https://github.com/openshift/console/pull/8264)
* Monitoring dashboards: Add "Last" to the time interval descriptions [#8258](https://github.com/openshift/console/pull/8258)
* [Bug 1919406](https://bugzilla.redhat.com/show_bug.cgi?id=1919406): Update OperatorHub 'Provider type' filter to 'Source' [#8251](https://github.com/openshift/console/pull/8251)
* [Bug 1927941](https://bugzilla.redhat.com/show_bug.cgi?id=1927941): Fix frontend descriptor API edge cases [#8145](https://github.com/openshift/console/pull/8145)
* [ODC-5590](https://issues.redhat.com/browse/ODC-5590): segregated the knative test cases [#8286](https://github.com/openshift/console/pull/8286)
* (bug-fix)Fix Object storage event filter [#8283](https://github.com/openshift/console/pull/8283)
* Remove unused /frontend/public/components/operator-hub/operator-hub-community-provider-modal.tsx [#8276](https://github.com/openshift/console/pull/8276)
* fix Create route text for import forms [#8274](https://github.com/openshift/console/pull/8274)
* [Bug 1933284](https://bugzilla.redhat.com/show_bug.cgi?id=1933284): Sort sample and snippets in the resource sidebar [#8262](https://github.com/openshift/console/pull/8262)
* [Bug 1852743](https://bugzilla.redhat.com/show_bug.cgi?id=1852743): Use consistent labels for CPU in node list [#8250](https://github.com/openshift/console/pull/8250)
* test: clear the session token before login [#8289](https://github.com/openshift/console/pull/8289)
* Update to PF4 Access Consoles [#8169](https://github.com/openshift/console/pull/8169)
* Add single control point of all toast notifications [#8227](https://github.com/openshift/console/pull/8227)
* Create workloads from Templates [#8246](https://github.com/openshift/console/pull/8246)
* Gherkin: Improve knative & build integration [#8235](https://github.com/openshift/console/pull/8235)
* Create ImageStream and other resources for samples step by step [#8222](https://github.com/openshift/console/pull/8222)
* change addForm layout to make footer full length [#8213](https://github.com/openshift/console/pull/8213)
* Make workload serverless [#8200](https://github.com/openshift/console/pull/8200)
* Gherkin:Added topology regression cases: ODC-4179 [#8228](https://github.com/openshift/console/pull/8228)
* Update topology quick search to include results from quick starts catalog [#8225](https://github.com/openshift/console/pull/8225)
* gherkin for scaling advanced option for knative service ODC-4744 [#8241](https://github.com/openshift/console/pull/8241)
* Migrate bucket class test into cypress [#7652](https://github.com/openshift/console/pull/7652)
* visualize serverless function in topology [#8233](https://github.com/openshift/console/pull/8233)
* Fix builder image version dropdown value in pipeline edit flow [#8215](https://github.com/openshift/console/pull/8215)
* [Bug 1929577](https://bugzilla.redhat.com/show_bug.cgi?id=1929577): Fix to avoid overriding of d/dc pod template container values [#8201](https://github.com/openshift/console/pull/8201)
* (test): Unit tests for flexible scaling feature [#7653](https://github.com/openshift/console/pull/7653)
* Avoid deep merging extension properties [#8243](https://github.com/openshift/console/pull/8243)
* Advance Scaling options 'Autoscale window and concurrency utilization' for Serverless [#8108](https://github.com/openshift/console/pull/8108)
* fix validation in number type input field [#8198](https://github.com/openshift/console/pull/8198)
* Add support for workspaces in pipeline builder [#8214](https://github.com/openshift/console/pull/8214)
* Improve standalone route page extension processing [#8192](https://github.com/openshift/console/pull/8192)
* Add badges support in catalog items and make cta optional [#8239](https://github.com/openshift/console/pull/8239)
* Remove offensive language [#8206](https://github.com/openshift/console/pull/8206)
* Recently running pipeline should be listed first [#8183](https://github.com/openshift/console/pull/8183)
* Monitoring: Add `title`s to the alert and alerting rule list rows [#8230](https://github.com/openshift/console/pull/8230)
* [Bug 1924083](https://bugzilla.redhat.com/show_bug.cgi?id=1924083): Fix Noobaa events filters [#8084](https://github.com/openshift/console/pull/8084)
* [Bug 1866322](https://bugzilla.redhat.com/show_bug.cgi?id=1866322): Add prop to AlertItem to hide default link [#8231](https://github.com/openshift/console/pull/8231)
* Consume KebabActions extension via standard API [#8226](https://github.com/openshift/console/pull/8226)
* fix alerts notification layout [#8181](https://github.com/openshift/console/pull/8181)
* move route section 'after create a route to the application' option [#8189](https://github.com/openshift/console/pull/8189)
* [Bug 1928045](https://bugzilla.redhat.com/show_bug.cgi?id=1928045): Fixes N+1 scaling info [#8217](https://github.com/openshift/console/pull/8217)
* [ODC-5474](https://issues.redhat.com/browse/ODC-5474): gitops cypress cucumber setup [#8180](https://github.com/openshift/console/pull/8180)
* [Bug 1917241](https://bugzilla.redhat.com/show_bug.cgi?id=1917241): Format UTC date in tooltips [#8193](https://github.com/openshift/console/pull/8193)
* Console extension processing improvements [#8202](https://github.com/openshift/console/pull/8202)
* refactor: Local volume discovery request and wizard footer changes for attached devices wizard [#8158](https://github.com/openshift/console/pull/8158)
* [Bug 1906304](https://bugzilla.redhat.com/show_bug.cgi?id=1906304): Fix NaN in Memory/CPU pod charts [#7806](https://github.com/openshift/console/pull/7806)
* QuickStart highlight fixed for collapsed nav [#8152](https://github.com/openshift/console/pull/8152)
* [Bug 1908343](https://bugzilla.redhat.com/show_bug.cgi?id=1908343): Allow clicking on column labels to configure column management in dialog [#7624](https://github.com/openshift/console/pull/7624)
* fix spacing for MulitColumnField component [#8208](https://github.com/openshift/console/pull/8208)
* add text area for multiline task param [#8195](https://github.com/openshift/console/pull/8195)
* Update the Task Results error message to be an empty state message [#8194](https://github.com/openshift/console/pull/8194)
* Remove dead code related to old catalog extension [#8191](https://github.com/openshift/console/pull/8191)
* Moved api types files to types/api folder, added index file [#8023](https://github.com/openshift/console/pull/8023)
* Gherkin Scripts: Deploy Application using Templates [#8207](https://github.com/openshift/console/pull/8207)
* [Bug 1929803](https://bugzilla.redhat.com/show_bug.cgi?id=1929803): Hide pipeline section in container image edit flow [#8184](https://github.com/openshift/console/pull/8184)
* [Bug 1899587](https://bugzilla.redhat.com/show_bug.cgi?id=1899587): Fix RGW Total Used Query [#8050](https://github.com/openshift/console/pull/8050)
* [Bug 1925261](https://bugzilla.redhat.com/show_bug.cgi?id=1925261): Fix KMS validation error [#8147](https://github.com/openshift/console/pull/8147)
* test: increase analyze script heap size [#8203](https://github.com/openshift/console/pull/8203)
* [Bug 1916450](https://bugzilla.redhat.com/show_bug.cgi?id=1916450): Alertmanager: add Title and Text fields to Adv. config section of Slack Receiver form [#7921](https://github.com/openshift/console/pull/7921)
* add close [x] button in the pipeline task sidebar [#8174](https://github.com/openshift/console/pull/8174)
* [Bug 1920677](https://bugzilla.redhat.com/show_bug.cgi?id=1920677): fixes missing i18n for create a project [#8069](https://github.com/openshift/console/pull/8069)
* Fix environment tests [#8163](https://github.com/openshift/console/pull/8163)
* Gherkin for Alert details page- ODC-5485 [#8132](https://github.com/openshift/console/pull/8132)
* odc-5518-cypress dev file[add flow] automation [#8141](https://github.com/openshift/console/pull/8141)
* [Bug 1929769](https://bugzilla.redhat.com/show_bug.cgi?id=1929769): Switch to correct perspective when loading non-shared routes [#8182](https://github.com/openshift/console/pull/8182)
* Add dynamic extension for standalone pages [#8170](https://github.com/openshift/console/pull/8170)
* [ODC-5473](https://issues.redhat.com/browse/ODC-5473): Moved the pipelines scripts from dev console to pipelines folder [#8124](https://github.com/openshift/console/pull/8124)
* make quickstart drawer resizable [#8089](https://github.com/openshift/console/pull/8089)
* Fix issues related to loading plugins via SERVER_FLAGS.consolePlugins [#8076](https://github.com/openshift/console/pull/8076)
* [Bug 1924983](https://bugzilla.redhat.com/show_bug.cgi?id=1924983): localize components in utils directory [#8049](https://github.com/openshift/console/pull/8049)
* Remove dead code for in context binding and fix wrong import [#8168](https://github.com/openshift/console/pull/8168)
* Pipeline Results [#8095](https://github.com/openshift/console/pull/8095)
* [Bug 1930064](https://bugzilla.redhat.com/show_bug.cgi?id=1930064): Do not fail new VM wizard when no storage classes are available [#8188](https://github.com/openshift/console/pull/8188)
* [Bug 1928869](https://bugzilla.redhat.com/show_bug.cgi?id=1928869): remove css overrides for search component and update pf dependency to 2021.2 [#8166](https://github.com/openshift/console/pull/8166)
* [Bug 1888561](https://bugzilla.redhat.com/show_bug.cgi?id=1888561): Improve explanations and definitions for MCG [#8179](https://github.com/openshift/console/pull/8179)
* YAMLs to install operator [#8134](https://github.com/openshift/console/pull/8134)
* Refactor Ceph Plugin Dashboard Directory Structure [#8111](https://github.com/openshift/console/pull/8111)
* Add default value to the runtime VERSION parameter in add flow pipelines [#8127](https://github.com/openshift/console/pull/8127)
* Interop UI install helmchart [#8090](https://github.com/openshift/console/pull/8090)
* [Bug 1888519](https://bugzilla.redhat.com/show_bug.cgi?id=1888519): Links OCS page from dashboard [#8148](https://github.com/openshift/console/pull/8148)
* [Bug 1926154](https://bugzilla.redhat.com/show_bug.cgi?id=1926154): Fix pool replica for arbiter [#8177](https://github.com/openshift/console/pull/8177)
* fix pipelinerun status icon rendering issue [#8173](https://github.com/openshift/console/pull/8173)
* [Bug 1924747](https://bugzilla.redhat.com/show_bug.cgi?id=1924747): InventoryItems aren't internationalized [#8040](https://github.com/openshift/console/pull/8040)
* [Bug 1922264](https://bugzilla.redhat.com/show_bug.cgi?id=1922264): Fix rendering of access-mode selector [#8055](https://github.com/openshift/console/pull/8055)
* Monitoring dashboards: Click a graph card to open the Metrics page [#7437](https://github.com/openshift/console/pull/7437)
* Gherkin: Added all types of health check [#8135](https://github.com/openshift/console/pull/8135)
* [Bug 1926154](https://bugzilla.redhat.com/show_bug.cgi?id=1926154): Fix for creating new pool with arbiter -  wrong replica [#8117](https://github.com/openshift/console/pull/8117)
* [Bug 1927882](https://bugzilla.redhat.com/show_bug.cgi?id=1927882): allow choice of binding type when creating RoleBinding [#8167](https://github.com/openshift/console/pull/8167)
* [Bug 1927797](https://bugzilla.redhat.com/show_bug.cgi?id=1927797): Add "Pod" in HPA pod donut label [#8137](https://github.com/openshift/console/pull/8137)
* [Bug 1926336](https://bugzilla.redhat.com/show_bug.cgi?id=1926336): Switch grid column responsive size to prevent breakage of Service port mappings content [#8164](https://github.com/openshift/console/pull/8164)
* [Bug 1905147](https://bugzilla.redhat.com/show_bug.cgi?id=1905147): Show multiple pre-requisites as unordered list in popover [#8133](https://github.com/openshift/console/pull/8133)
* [Bug 1924586](https://bugzilla.redhat.com/show_bug.cgi?id=1924586): internationalize control plane and operator status [#8113](https://github.com/openshift/console/pull/8113)
* Add support for taskSpec in pipeline visualization component in the pipeline details page. [#8106](https://github.com/openshift/console/pull/8106)
* Check for kindObj before accessing its properties [#8160](https://github.com/openshift/console/pull/8160)
* odc-5475-updated setting.json in frontend folder [#8082](https://github.com/openshift/console/pull/8082)
* [Bug 1927898](https://bugzilla.redhat.com/show_bug.cgi?id=1927898): i18n Admin Notifier [#8144](https://github.com/openshift/console/pull/8144)
* [Bug 1901207](https://bugzilla.redhat.com/show_bug.cgi?id=1901207): Pipeline resources table not immediately updated after Name filter applied or removed [#8142](https://github.com/openshift/console/pull/8142)
* [Bug 1927465](https://bugzilla.redhat.com/show_bug.cgi?id=1927465): i18n Dashboard content [#8143](https://github.com/openshift/console/pull/8143)
* Adds Christoph as an approver to DevConsole packages [#8153](https://github.com/openshift/console/pull/8153)
* Fix tests for CNV 2.5 [#8125](https://github.com/openshift/console/pull/8125)
* [Bug 1926072](https://bugzilla.redhat.com/show_bug.cgi?id=1926072): Fix close button in the new 'Storage cluster exists' warning alert modal [#8105](https://github.com/openshift/console/pull/8105)
* [Bug 1891766](https://bugzilla.redhat.com/show_bug.cgi?id=1891766): Disable submit button for incorrect validations (LSO/OCS local volume set) [#8092](https://github.com/openshift/console/pull/8092)
* Migrates backing store test to cypress [#7617](https://github.com/openshift/console/pull/7617)
* add copy to clipboard functionality to EventListenerURL [#8097](https://github.com/openshift/console/pull/8097)
* Remove dead code related to developer catalog and service catalog [#8112](https://github.com/openshift/console/pull/8112)
* Use dry run options directly to remove bad dependency [#8114](https://github.com/openshift/console/pull/8114)
* [Bug 1920699](https://bugzilla.redhat.com/show_bug.cgi?id=1920699): retry co-fetch on 409 POST or 429 [#8116](https://github.com/openshift/console/pull/8116)
* [Bug 1926843](https://bugzilla.redhat.com/show_bug.cgi?id=1926843): Consider finally tasks when calculating task status [#8110](https://github.com/openshift/console/pull/8110)
* [Bug 1921227](https://bugzilla.redhat.com/show_bug.cgi?id=1921227): Avoid require()'ing modules when generating @console/active-plugins [#7919](https://github.com/openshift/console/pull/7919)
* Refactor constants in Ceph Plugin [#5978](https://github.com/openshift/console/pull/5978)
* [Bug 1925083](https://bugzilla.redhat.com/show_bug.cgi?id=1925083): IDP Creation not fully i18ned [#8077](https://github.com/openshift/console/pull/8077)
* Fix flakes in Ceph CI [#8122](https://github.com/openshift/console/pull/8122)
* Fixes inconsistent fonts on step 1 and step 2 of baremetal wizard [#8103](https://github.com/openshift/console/pull/8103)
* Workloads on Topology Page Automation [#8037](https://github.com/openshift/console/pull/8037)
* [Bug 1921267](https://bugzilla.redhat.com/show_bug.cgi?id=1921267): i18n ResourceListDropdown [#7955](https://github.com/openshift/console/pull/7955)
* [Bug 1874931](https://bugzilla.redhat.com/show_bug.cgi?id=1874931): Add shortcut above YAML editor and tab toggle action shortcut to popover to improve accessibility [#8115](https://github.com/openshift/console/pull/8115)
* [Bug 1921227](https://bugzilla.redhat.com/show_bug.cgi?id=1921227): Improve code reference handling for Console dynamic plugins [#7898](https://github.com/openshift/console/pull/7898)
* [Bug 1927013](https://bugzilla.redhat.com/show_bug.cgi?id=1927013): update pf virtualized dependency to fix breakpoint prop missing in virtualized table [#8119](https://github.com/openshift/console/pull/8119)
* [Bug 1922992](https://bugzilla.redhat.com/show_bug.cgi?id=1922992): i18n missing items in YAML sidebar [#8027](https://github.com/openshift/console/pull/8027)
* adding context provider extension types to dynamic-plugin-sdk [#7882](https://github.com/openshift/console/pull/7882)
* [Bug 1902003](https://bugzilla.redhat.com/show_bug.cgi?id=1902003): Clarification of Jobs completions column data when sorting [#7760](https://github.com/openshift/console/pull/7760)
* Fix filname for multiple storage class test in cypress [#8081](https://github.com/openshift/console/pull/8081)
* [ODC-5076](https://issues.redhat.com/browse/ODC-5076): Updated knative-automation framework setup [#7875](https://github.com/openshift/console/pull/7875)
* Model Feature Flag - convert kubevirt extension to dynamic [#7881](https://github.com/openshift/console/pull/7881)
* [Bug 1927075](https://bugzilla.redhat.com/show_bug.cgi?id=1927075): fix pvc string in pvc.view [#8118](https://github.com/openshift/console/pull/8118)
* i18n: avoid 404 errors attempting to load en-US [#8100](https://github.com/openshift/console/pull/8100)
* [Bug 1921780](https://bugzilla.redhat.com/show_bug.cgi?id=1921780): Clean up Search i18n [#7967](https://github.com/openshift/console/pull/7967)
* [Bug 1926735](https://bugzilla.redhat.com/show_bug.cgi?id=1926735): add template support check if use it separately [#8107](https://github.com/openshift/console/pull/8107)
* Remove Noobaa Operator Page as this is an Internal CRD [#8102](https://github.com/openshift/console/pull/8102)
* Remove stale files and functions which are not required [#8094](https://github.com/openshift/console/pull/8094)
* [Bug 1921781](https://bugzilla.redhat.com/show_bug.cgi?id=1921781): i18n DefaultList [#7968](https://github.com/openshift/console/pull/7968)
* adding reducer extension types to dynamic-plugin-sdk [#7860](https://github.com/openshift/console/pull/7860)
* Document kubevirt DOWNSTREAM variable [#8086](https://github.com/openshift/console/pull/8086)
* Updating openshift-enterprise-console builder & base images to be consistent with ART [#8104](https://github.com/openshift/console/pull/8104)
* [Bug 1925017](https://bugzilla.redhat.com/show_bug.cgi?id=1925017): Remove trailing comma [#8079](https://github.com/openshift/console/pull/8079)
* Add storage.bind.immediate.requested annotation to golden image dvs [#8085](https://github.com/openshift/console/pull/8085)
* Interop UI - actions on helm release [#8091](https://github.com/openshift/console/pull/8091)
* Fix pipeline types [#8080](https://github.com/openshift/console/pull/8080)
* Update OWNERS components [#8073](https://github.com/openshift/console/pull/8073)
* [Bug 1924585](https://bugzilla.redhat.com/show_bug.cgi?id=1924585): Fix translation for edit annotation [#8075](https://github.com/openshift/console/pull/8075)
* [Full changelog](https://github.com/openshift/console/compare/3432f1cc6cb07a8f1210dc26ebe84efde3de752b...7ed376d82fd9b12796a0a8c32f6964517ec9ff8a)


### [console-operator](https://github.com/openshift/console-operator/tree/2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6)

* [Bug 2071200](https://bugzilla.redhat.com/show_bug.cgi?id=2071200): Fix setting of custom cert for default route [#643](https://github.com/openshift/console-operator/pull/643)
* [Bug 2008141](https://bugzilla.redhat.com/show_bug.cgi?id=2008141): Change web terminal subscription permissions from get to list [#595](https://github.com/openshift/console-operator/pull/595)
* [Bug 2041359](https://bugzilla.redhat.com/show_bug.cgi?id=2041359): Bump build-machinery-go for console-operator to pickup change in yaml-patch repository [#627](https://github.com/openshift/console-operator/pull/627)
* [Bug 2018391](https://bugzilla.redhat.com/show_bug.cgi?id=2018391): Remove SimpleHTTP 'server' response header value [#606](https://github.com/openshift/console-operator/pull/606)
* [Bug 1987315](https://bugzilla.redhat.com/show_bug.cgi?id=1987315): Bump openshift/api to add missing 'include.release.openshift.io/single-node-developer' annotation to the ConsolePlugin CRD [#591](https://github.com/openshift/console-operator/pull/591)
* [Bug 2003639](https://bugzilla.redhat.com/show_bug.cgi?id=2003639): Use kubernetes.io/hostname for workload anti-affi… …nity [#589](https://github.com/openshift/console-operator/pull/589)
* [Bug 2001268](https://bugzilla.redhat.com/show_bug.cgi?id=2001268): console-operator should report Available=true when at least available replica exists [#583](https://github.com/openshift/console-operator/pull/583)
* [Bug 1976349](https://bugzilla.redhat.com/show_bug.cgi?id=1976349): Add policy-group label to the openshift-console namespace manifest [#561](https://github.com/openshift/console-operator/pull/561)
* [Bug 1952405](https://bugzilla.redhat.com/show_bug.cgi?id=1952405): Console operator should report Available:False when it's route is not accessible [#552](https://github.com/openshift/console-operator/pull/552)
* Switching the URL of the default openshift helm repo. [#545](https://github.com/openshift/console-operator/pull/545)
* [Bug 1962698](https://bugzilla.redhat.com/show_bug.cgi?id=1962698): Console-operator can not create resource console-public configmap in the openshift-config-managed namespace [#548](https://github.com/openshift/console-operator/pull/548)
* [CONSOLE-2768](https://issues.redhat.com/browse/CONSOLE-2768): Update the console public configmap manifests to use bindata [#543](https://github.com/openshift/console-operator/pull/543)
* [Bug 1960324](https://bugzilla.redhat.com/show_bug.cgi?id=1960324): quickstarts: remove "spec.version" [#546](https://github.com/openshift/console-operator/pull/546)
* [Bug 1959696](https://bugzilla.redhat.com/show_bug.cgi?id=1959696): Add warning log message when custom domain is configured on console-operator config [#544](https://github.com/openshift/console-operator/pull/544)
* [Bug 1957198](https://bugzilla.redhat.com/show_bug.cgi?id=1957198): Remove misspelled console-operator condition [#541](https://github.com/openshift/console-operator/pull/541)
* [Bug 1954866](https://bugzilla.redhat.com/show_bug.cgi?id=1954866): Add necessary priority class to downloads [#542](https://github.com/openshift/console-operator/pull/542)
* [Bug 1948524](https://bugzilla.redhat.com/show_bug.cgi?id=1948524): Update operator's status with downloads deployment generation && pull route health check into a standalone controller [#531](https://github.com/openshift/console-operator/pull/531)
* [Bug 1956610](https://bugzilla.redhat.com/show_bug.cgi?id=1956610): Add missing cluster profile annotations to manage-helm-repos quickstart manifest [#539](https://github.com/openshift/console-operator/pull/539)
* Copy AddPage customization object [#527](https://github.com/openshift/console-operator/pull/527)
* [CONSOLE-2793](https://issues.redhat.com/browse/CONSOLE-2793): Implement console-operator changes to consume new CustomDomains API [#522](https://github.com/openshift/console-operator/pull/522)
* [Bug 1947794](https://bugzilla.redhat.com/show_bug.cgi?id=1947794): Pull HelmChartRepository CRD v1 [#535](https://github.com/openshift/console-operator/pull/535)
* Update README.md for MacOS [#536](https://github.com/openshift/console-operator/pull/536)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#532](https://github.com/openshift/console-operator/pull/532)
* Rename workload annotations [#530](https://github.com/openshift/console-operator/pull/530)
* update to non-deprecated NewCommand method [#534](https://github.com/openshift/console-operator/pull/534)
* [Bug 1948782](https://bugzilla.redhat.com/show_bug.cgi?id=1948782): remove stale annotation for single-node [#529](https://github.com/openshift/console-operator/pull/529)
* Export quickStarts data to console-config ConfigMap [#528](https://github.com/openshift/console-operator/pull/528)
* Add management workload annotations [#523](https://github.com/openshift/console-operator/pull/523)
* [Bug 1948524](https://bugzilla.redhat.com/show_bug.cgi?id=1948524): Remove ResyncEvery method from the operator sync loop [#525](https://github.com/openshift/console-operator/pull/525)
* [Bug 1947789](https://bugzilla.redhat.com/show_bug.cgi?id=1947789): Bump deps to pickup CRD apiVersion bump [#524](https://github.com/openshift/console-operator/pull/524)
* Export project access details to console-config ConfigMap [#514](https://github.com/openshift/console-operator/pull/514)
* IBM Cloud manifest profile patch [#520](https://github.com/openshift/console-operator/pull/520)
* [Bug 1945326](https://bugzilla.redhat.com/show_bug.cgi?id=1945326): Resync controllers every minute [#521](https://github.com/openshift/console-operator/pull/521)
* Bump openshift/api to get project access role cuztomization changes [#519](https://github.com/openshift/console-operator/pull/519)
* Add in get subscriptions to console service account [#513](https://github.com/openshift/console-operator/pull/513)
* Add e2e test to check correct deployment replicas, based on the Infrastructure config TopologyMode [#510](https://github.com/openshift/console-operator/pull/510)
* [CONSOLE-2792](https://issues.redhat.com/browse/CONSOLE-2792): Bump openshift/api dependecy in console-operator to get CustomDomain API for Ingress config [#517](https://github.com/openshift/console-operator/pull/517)
* Updating openshift-enterprise-console-operator builder & base images to be consistent with ART [#518](https://github.com/openshift/console-operator/pull/518)
* [Bug 1937627](https://bugzilla.redhat.com/show_bug.cgi?id=1937627): Bump DEFAULT_DOC_URL for 4.8 [#515](https://github.com/openshift/console-operator/pull/515)
* [Bug 1935541](https://bugzilla.redhat.com/show_bug.cgi?id=1935541): Check for error when generating default and user-defined config for the console-config configmap [#511](https://github.com/openshift/console-operator/pull/511)
* [CONSOLE-2526](https://issues.redhat.com/browse/CONSOLE-2526): Update console operator for single-node clusters [#508](https://github.com/openshift/console-operator/pull/508)
* [Bug 1931760](https://bugzilla.redhat.com/show_bug.cgi?id=1931760): Non-unified reference to OCS in quickstarts [#509](https://github.com/openshift/console-operator/pull/509)
* [CONSOLE-2366](https://issues.redhat.com/browse/CONSOLE-2366): Move the operator's controllers to lib-go controller factory [#500](https://github.com/openshift/console-operator/pull/500)
* [CONSOLE-2757](https://issues.redhat.com/browse/CONSOLE-2757): Bump github.com/openshift/api [#506](https://github.com/openshift/console-operator/pull/506)
* Updating openshift-enterprise-console-operator builder & base images to be consistent with ART [#505](https://github.com/openshift/console-operator/pull/505)
* Bump polling interval when checking for resource unavailability [#507](https://github.com/openshift/console-operator/pull/507)
* RetryOnConflict should be fetching latest version of console-operator config [#504](https://github.com/openshift/console-operator/pull/504)
* [Full changelog](https://github.com/openshift/console-operator/compare/44a0308f894abae02f066a40ba394c8aa7331424...2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/71a8b3469df865daf68cb893bfe313328d4be992)

* Updating ose-containernetworking-plugins builder & base images to be consistent with ART [#42](https://github.com/openshift/containernetworking-plugins/pull/42)
* [Bug 1926502](https://bugzilla.redhat.com/show_bug.cgi?id=1926502): vendor: bump libcni [#45](https://github.com/openshift/containernetworking-plugins/pull/45)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/fc27124d43b9dc995057b1f309d5f16e1b2ef151...71a8b3469df865daf68cb893bfe313328d4be992)


### [coredns](https://github.com/openshift/coredns/tree/642b46ef468d132d26c3f84a8bcb4b542d8df1e6)

* [Bug 1961201](https://bugzilla.redhat.com/show_bug.cgi?id=1961201): plugin/kubernetes: Treat Endpointslices with a nil ready condition as "ready" [#57](https://github.com/openshift/coredns/pull/57)
* [Bug 1947478](https://bugzilla.redhat.com/show_bug.cgi?id=1947478): Upstream cherry-picks and downstream dep bumps for kube 1.21 compatability [#56](https://github.com/openshift/coredns/pull/56)
* Updating coredns builder & base images to be consistent with ART [#55](https://github.com/openshift/coredns/pull/55)
* Upstream #4430: Corrected detection of K8s minor version [#54](https://github.com/openshift/coredns/pull/54)
* [NE-514](https://issues.redhat.com/browse/NE-514): Rebase to upstream v1.8.1 [#52](https://github.com/openshift/coredns/pull/52)
* Updating coredns builder & base images to be consistent with ART [#51](https://github.com/openshift/coredns/pull/51)
* Add rfredette to OWNERS [#48](https://github.com/openshift/coredns/pull/48)
* [Full changelog](https://github.com/openshift/coredns/compare/d4a3ba3f6e03426d2623da86635caba17c0c3926...642b46ef468d132d26c3f84a8bcb4b542d8df1e6)


### [csi-driver-manila, openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack/tree/3579eadc9b0e195a4bb80d9a43a33a250c4a8dd6)

* [Bug 1944655](https://bugzilla.redhat.com/show_bug.cgi?id=1944655): Ignore proxy connecting to CSI sockets [#53](https://github.com/openshift/cloud-provider-openstack/pull/53)
* [Bug 1952211](https://bugzilla.redhat.com/show_bug.cgi?id=1952211): Merge tag 'v1.21.0' into openshift-master [#52](https://github.com/openshift/cloud-provider-openstack/pull/52)
* [Bug 1919291](https://bugzilla.redhat.com/show_bug.cgi?id=1919291): UPSTREAM: 1434: [cinder-csi-plugin] Fix filesystem resize [#49](https://github.com/openshift/cloud-provider-openstack/pull/49)
* Updating ose-openstack-cinder-csi-driver builder & base images to be consistent with ART [#50](https://github.com/openshift/cloud-provider-openstack/pull/50)
* Updating csi-driver-manila builder & base images to be consistent with ART [#51](https://github.com/openshift/cloud-provider-openstack/pull/51)
* [Bug 1930220](https://bugzilla.redhat.com/show_bug.cgi?id=1930220): Add udev to the driver image [#45](https://github.com/openshift/cloud-provider-openstack/pull/45)
* Updating csi-driver-manila builder & base images to be consistent with ART [#44](https://github.com/openshift/cloud-provider-openstack/pull/44)
* Updating ose-openstack-cinder-csi-driver builder & base images to be consistent with ART [#43](https://github.com/openshift/cloud-provider-openstack/pull/43)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/d3f709218512df9f46e11c1d13347fc68774d72c...3579eadc9b0e195a4bb80d9a43a33a250c4a8dd6)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce)

* [Bug 2002554](https://bugzilla.redhat.com/show_bug.cgi?id=2002554): Do not degrade cluster on failure to reach Manila [#125](https://github.com/openshift/csi-driver-manila-operator/pull/125)
* [Bug 1987020](https://bugzilla.redhat.com/show_bug.cgi?id=1987020): Use cluster Proxy when available [#109](https://github.com/openshift/csi-driver-manila-operator/pull/109)
* [Bug 1988506](https://bugzilla.redhat.com/show_bug.cgi?id=1988506): Backport e2e testing [#111](https://github.com/openshift/csi-driver-manila-operator/pull/111)
* [Bug 1820238](https://bugzilla.redhat.com/show_bug.cgi?id=1820238): add cluster id to share metadata [#98](https://github.com/openshift/csi-driver-manila-operator/pull/98)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#97](https://github.com/openshift/csi-driver-manila-operator/pull/97)
* [Bug 1949357](https://bugzilla.redhat.com/show_bug.cgi?id=1949357): Fix namespace in metrics collection objects [#96](https://github.com/openshift/csi-driver-manila-operator/pull/96)
* Manila: Add metrics scraping [#95](https://github.com/openshift/csi-driver-manila-operator/pull/95)
* Updating csi-driver-manila-operator builder & base images to be consistent with ART [#94](https://github.com/openshift/csi-driver-manila-operator/pull/94)
* [Bug 1918564](https://bugzilla.redhat.com/show_bug.cgi?id=1918564): bump library-go [#93](https://github.com/openshift/csi-driver-manila-operator/pull/93)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#92](https://github.com/openshift/csi-driver-manila-operator/pull/92)
* Updating csi-driver-manila-operator builder & base images to be consistent with ART [#89](https://github.com/openshift/csi-driver-manila-operator/pull/89)
* Cleanup: Remove serviceName from controller manifest [#90](https://github.com/openshift/csi-driver-manila-operator/pull/90)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/b652a62f269127e6e9195383eab951d59c6d7a6d...f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/583088efa37346e23ed056b57ea24e61b0e5b9d8)

* Updating csi-driver-nfs builder & base images to be consistent with ART [#40](https://github.com/openshift/csi-driver-nfs/pull/40)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/9404d343c020fd1806691704f64d930c779ad639...583088efa37346e23ed056b57ea24e61b0e5b9d8)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/596da63ecf2886a9bce19c08ad1120e123b498af)

* [Bug 1924432](https://bugzilla.redhat.com/show_bug.cgi?id=1924432): Rebase v3.2.1 [#31](https://github.com/openshift/csi-external-attacher/pull/31)
* Create release-notes for v3.2.1 [#306](https://github.com/openshift/csi-external-attacher/pull/306)
* Cherry-pick: Panic fix: Handle DeletedFinalStateUnknown in VA deletion [#305](https://github.com/openshift/csi-external-attacher/pull/305)
* release-3.2: update release-tools [#303](https://github.com/openshift/csi-external-attacher/pull/303)
* Add changelog for v3.2.0 [#300](https://github.com/openshift/csi-external-attacher/pull/300)
* Rebase to 1.21.0 [#298](https://github.com/openshift/csi-external-attacher/pull/298)
* On missing driver, fall back to volattachment ID [#299](https://github.com/openshift/csi-external-attacher/pull/299)
* master: update release-tools [#297](https://github.com/openshift/csi-external-attacher/pull/297)
* master: update release-tools + dependencies [#295](https://github.com/openshift/csi-external-attacher/pull/295)
* Process PV finalizer for migrated PV when CSIMigration turned off [#294](https://github.com/openshift/csi-external-attacher/pull/294)
* bump csi translation lib version [#293](https://github.com/openshift/csi-external-attacher/pull/293)
* feat: Add migrated label to metrics [#292](https://github.com/openshift/csi-external-attacher/pull/292)
* master: update release-tools [#289](https://github.com/openshift/csi-external-attacher/pull/289)
* master: update release-tools [#288](https://github.com/openshift/csi-external-attacher/pull/288)
* Add configurable throughput parameters for clients to API server [#286](https://github.com/openshift/csi-external-attacher/pull/286)
* Updating csi-attacher builder & base images to be consistent with ART [#30](https://github.com/openshift/csi-external-attacher/pull/30)
* Updating csi-attacher builder & base images to be consistent with ART [#29](https://github.com/openshift/csi-external-attacher/pull/29)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/f152de8ab08d9a4f13c97941afa01ef343b92b68...596da63ecf2886a9bce19c08ad1120e123b498af)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/3ea7e68a518870d63c7da9485f8a69fa1555b452)

* [Bug 1956768](https://bugzilla.redhat.com/show_bug.cgi?id=1956768): UPSTREAM: 620: Fix migration metric registration [#41](https://github.com/openshift/csi-external-provisioner/pull/41)
* [Bug 1924439](https://bugzilla.redhat.com/show_bug.cgi?id=1924439): Rebase v2.2.0 [#39](https://github.com/openshift/csi-external-provisioner/pull/39)
* Update release notes for v2.2.0 [#614](https://github.com/openshift/csi-external-provisioner/pull/614)
* distributed provisioning: allowed topologies + immediate binding [#612](https://github.com/openshift/csi-external-provisioner/pull/612)
* Add changelog for v2.2.0 [#605](https://github.com/openshift/csi-external-provisioner/pull/605)
* capacity test: rebind loop variable to avoid race [#610](https://github.com/openshift/csi-external-provisioner/pull/610)
* capacity: run tests in parallel [#607](https://github.com/openshift/csi-external-provisioner/pull/607)
* build: update Kubernetes dependencies to 1.21.0 [#599](https://github.com/openshift/csi-external-provisioner/pull/599)
* Remove redundant log lines [#604](https://github.com/openshift/csi-external-provisioner/pull/604)
* storage capacity: refresh after volume changes [#586](https://github.com/openshift/csi-external-provisioner/pull/586)
* Add chrishenzie to reviewers [#598](https://github.com/openshift/csi-external-provisioner/pull/598)
* Sanitize secrets in the requests [#601](https://github.com/openshift/csi-external-provisioner/pull/601)
* remove duplicate informer.run() [#590](https://github.com/openshift/csi-external-provisioner/pull/590)
* storage capacity: maximum volume size [#584](https://github.com/openshift/csi-external-provisioner/pull/584)
* additional metrics [#579](https://github.com/openshift/csi-external-provisioner/pull/579)
* Update README.md where function name is incorrect [#575](https://github.com/openshift/csi-external-provisioner/pull/575)
* master: update release-tools [#594](https://github.com/openshift/csi-external-provisioner/pull/594)
* Add TranslateInTreeStorageClassToCSI in Delete [#567](https://github.com/openshift/csi-external-provisioner/pull/567)
* master: update release-tools + dependencies [#588](https://github.com/openshift/csi-external-provisioner/pull/588)
* doc: UML diagram for volume creation and deletion [#532](https://github.com/openshift/csi-external-provisioner/pull/532)
* Capacity informer race [#565](https://github.com/openshift/csi-external-provisioner/pull/565)
* Upgrade csi-translation-lib dependency [#566](https://github.com/openshift/csi-external-provisioner/pull/566)
* feat: Add migrated label to metrics [#560](https://github.com/openshift/csi-external-provisioner/pull/560)
* update sig-storage-lib-external-provisioner to v6.3.0 [#564](https://github.com/openshift/csi-external-provisioner/pull/564)
* master: update release-tools [#555](https://github.com/openshift/csi-external-provisioner/pull/555)
* master: update release-tools [#550](https://github.com/openshift/csi-external-provisioner/pull/550)
* Updating csi-provisioner builder & base images to be consistent with ART [#38](https://github.com/openshift/csi-external-provisioner/pull/38)
* Updating csi-provisioner builder & base images to be consistent with ART [#37](https://github.com/openshift/csi-external-provisioner/pull/37)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/a49415e114b90060c8cdbb88b1ca3f0a4c5d2ebc...3ea7e68a518870d63c7da9485f8a69fa1555b452)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/b5dd2b39e9dfb83addd0c07654c3b9119e24cb36)

* [Bug 1924503](https://bugzilla.redhat.com/show_bug.cgi?id=1924503): Rebase v1.2.0 [#120](https://github.com/openshift/csi-external-resizer/pull/120)
* Add changelog for release 1.2 [#148](https://github.com/openshift/csi-external-resizer/pull/148)
* fix: use pv annotation to trigger filesystem resize when necessary [#140](https://github.com/openshift/csi-external-resizer/pull/140)
* Remove travis links [#146](https://github.com/openshift/csi-external-resizer/pull/146)
* Rebase to 1.21.0 [#145](https://github.com/openshift/csi-external-resizer/pull/145)
* master: update release-tools [#144](https://github.com/openshift/csi-external-resizer/pull/144)
* master: update release-tools + dependencies [#141](https://github.com/openshift/csi-external-resizer/pull/141)
* Upgrade csi-translation-lib dependency [#139](https://github.com/openshift/csi-external-resizer/pull/139)
* feat: Add migrated label to metrics [#138](https://github.com/openshift/csi-external-resizer/pull/138)
* master: update release-tools [#136](https://github.com/openshift/csi-external-resizer/pull/136)
* master: update release-tools [#135](https://github.com/openshift/csi-external-resizer/pull/135)
* Correct container image for resizer [#104](https://github.com/openshift/csi-external-resizer/pull/104)
* Updating ose-csi-external-resizer builder & base images to be consistent with ART [#119](https://github.com/openshift/csi-external-resizer/pull/119)
* Updating ose-csi-external-resizer builder & base images to be consistent with ART [#118](https://github.com/openshift/csi-external-resizer/pull/118)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/f77279e9561a02c18676dbcafcbe6db7d0ebd077...b5dd2b39e9dfb83addd0c07654c3b9119e24cb36)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/1e2cca95999057e16fcfee07e8068f7a77f2e164)

* [Bug 1924504](https://bugzilla.redhat.com/show_bug.cgi?id=1924504): Rebase v4.1.0 [#50](https://github.com/openshift/csi-external-snapshotter/pull/50)
* Fix the compatibility table in README [#510](https://github.com/openshift/csi-external-snapshotter/pull/510)
* Add changelog for 4.1.0 [#509](https://github.com/openshift/csi-external-snapshotter/pull/509)
* Fix typo in CRD check [#507](https://github.com/openshift/csi-external-snapshotter/pull/507)
* Update reference implementation of the snapshot controller [#505](https://github.com/openshift/csi-external-snapshotter/pull/505)
* Make sure the v1 CRDs exist before starting the controller [#504](https://github.com/openshift/csi-external-snapshotter/pull/504)
* Change storage version from v1beta1 to v1 [#493](https://github.com/openshift/csi-external-snapshotter/pull/493)
* Correct snapshotContent error propagation [#502](https://github.com/openshift/csi-external-snapshotter/pull/502)
* Update to CSI spec 1.4 [#503](https://github.com/openshift/csi-external-snapshotter/pull/503)
* Update k8s dependency version to 1.21 [#500](https://github.com/openshift/csi-external-snapshotter/pull/500)
* Fix snapshotter metrics server to use http-endpoint when provided [#496](https://github.com/openshift/csi-external-snapshotter/pull/496)
* master: update release-tools [#486](https://github.com/openshift/csi-external-snapshotter/pull/486)
* master: update release-tools + dependencies [#483](https://github.com/openshift/csi-external-snapshotter/pull/483)
* Move snapshot validations to validation-webhook directory [#479](https://github.com/openshift/csi-external-snapshotter/pull/479)
* Retain CreateSnapshot error [#470](https://github.com/openshift/csi-external-snapshotter/pull/470)
* master: update release-tools [#468](https://github.com/openshift/csi-external-snapshotter/pull/468)
* Provide better defaults for external-snapshotter [#459](https://github.com/openshift/csi-external-snapshotter/pull/459)
* master: update release-tools [#464](https://github.com/openshift/csi-external-snapshotter/pull/464)
* UPSTREAM: 502: Bug 1949018: Correct snapshotContent error propagation [#48](https://github.com/openshift/csi-external-snapshotter/pull/48)
* Updating ose-csi-external-snapshotter builder & base images to be consistent with ART [#46](https://github.com/openshift/csi-external-snapshotter/pull/46)
* Updating ose-csi-snapshot-controller builder & base images to be consistent with ART [#45](https://github.com/openshift/csi-external-snapshotter/pull/45)
* Updating csi-snapshot-validation-webhook builder & base images to be consistent with ART [#47](https://github.com/openshift/csi-external-snapshotter/pull/47)
* Updating ose-csi-external-snapshotter builder & base images to be consistent with ART [#43](https://github.com/openshift/csi-external-snapshotter/pull/43)
* Updating csi-snapshot-validation-webhook builder & base images to be consistent with ART [#44](https://github.com/openshift/csi-external-snapshotter/pull/44)
* Updating ose-csi-snapshot-controller builder & base images to be consistent with ART [#42](https://github.com/openshift/csi-external-snapshotter/pull/42)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/26773735c1cbf09de9bf31cb3c640abdca04cd83...1e2cca95999057e16fcfee07e8068f7a77f2e164)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/a29b1153451d6ffa6fbcb1dacbe25639c2523488)

* Updating csi-livenessprobe builder & base images to be consistent with ART [#23](https://github.com/openshift/csi-livenessprobe/pull/23)
* Updating csi-livenessprobe builder & base images to be consistent with ART [#22](https://github.com/openshift/csi-livenessprobe/pull/22)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/3dad0280ea630cfcc87bcf02806c75b7a066d81e...a29b1153451d6ffa6fbcb1dacbe25639c2523488)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/0519730f75f89c11f1ee07c7f81b0bcae1ddf705)

* Updating csi-node-driver-registrar builder & base images to be consistent with ART [#28](https://github.com/openshift/csi-node-driver-registrar/pull/28)
* Updating csi-node-driver-registrar builder & base images to be consistent with ART [#27](https://github.com/openshift/csi-node-driver-registrar/pull/27)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/2a77963e5458da1bcde318b4609a6abefaf868d7...0519730f75f89c11f1ee07c7f81b0bcae1ddf705)


### [docker-builder](https://github.com/openshift/builder/tree/dc2c0061e5db06d96bac966bdfe2603fe7bbfa06)

* [Bug 2053122](https://bugzilla.redhat.com/show_bug.cgi?id=2053122): [release-4.8] getAssembleUser(): strip the group part out before checking the UID [#289](https://github.com/openshift/builder/pull/289)
* Update OWNERS file [#290](https://github.com/openshift/builder/pull/290)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): bump(s2i): revert incorrect ssh scp fix [#259](https://github.com/openshift/builder/pull/259)
* [Bug 1981939](https://bugzilla.redhat.com/show_bug.cgi?id=1981939): Updating openshift-enterprise-builder builder & base images to be consistent with ART [#230](https://github.com/openshift/builder/pull/230)
* [Bug 1925412](https://bugzilla.redhat.com/show_bug.cgi?id=1925412): update dependencies affected by CVE-2021-3121 [#244](https://github.com/openshift/builder/pull/244)
* [Bug 1951084](https://bugzilla.redhat.com/show_bug.cgi?id=1951084): remove mounts.conf again, but patch buildah change needed to make transient mounts work for us [#239](https://github.com/openshift/builder/pull/239)
* [Bug 1940479](https://bugzilla.redhat.com/show_bug.cgi?id=1940479): bump(containers/buildah) 1.20.0 [#243](https://github.com/openshift/builder/pull/243)
* [Bug 1947164](https://bugzilla.redhat.com/show_bug.cgi?id=1947164): Print "Successfully pushed" only if push succeeded [#232](https://github.com/openshift/builder/pull/232)
* [Bug 1940488](https://bugzilla.redhat.com/show_bug.cgi?id=1940488): move entitlement related secrets back to mounts.conf [#238](https://github.com/openshift/builder/pull/238)
* [Bug 1943614](https://bugzilla.redhat.com/show_bug.cgi?id=1943614): add explict exit log after buildah pull image; tweak existing start log priot to buildah pull image call [#236](https://github.com/openshift/builder/pull/236)
* [Bug 1943614](https://bugzilla.redhat.com/show_bug.cgi?id=1943614): add enter/exit logging around buildah pull image [#233](https://github.com/openshift/builder/pull/233)
* [Bug 1940488](https://bugzilla.redhat.com/show_bug.cgi?id=1940488): add etc-pki-entitlements from pod secrets if available to build container [#228](https://github.com/openshift/builder/pull/228)
* [Bug 1926021](https://bugzilla.redhat.com/show_bug.cgi?id=1926021): Update buildah to v1.19.8, containernetworking/cni to v0.8.1 [#229](https://github.com/openshift/builder/pull/229)
* Updating openshift-enterprise-builder builder & base images to be consistent with ART [#217](https://github.com/openshift/builder/pull/217)
* [Bug 1905095](https://bugzilla.redhat.com/show_bug.cgi?id=1905095): bump github.com/containers/image [#221](https://github.com/openshift/builder/pull/221)
* [Bug 1937535](https://bugzilla.redhat.com/show_bug.cgi?id=1937535): retry image pulls during builds [#222](https://github.com/openshift/builder/pull/222)
* [Bug 1895053](https://bugzilla.redhat.com/show_bug.cgi?id=1895053): Mount CA trust store in builds [#218](https://github.com/openshift/builder/pull/218)
* [Full changelog](https://github.com/openshift/builder/compare/5a46979e5e747b6df27a1b50ec0c922a172298f2...dc2c0061e5db06d96bac966bdfe2603fe7bbfa06)


### [docker-registry](https://github.com/openshift/image-registry/tree/bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e)

* [Bug 2042678](https://bugzilla.redhat.com/show_bug.cgi?id=2042678): Fix auth for docker.io images [#306](https://github.com/openshift/image-registry/pull/306)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix pull-through for images that have dots in their namespace [#310](https://github.com/openshift/image-registry/pull/310)
* [Bug 2012163](https://bugzilla.redhat.com/show_bug.cgi?id=2012163): Supporting mirror authentication during pull through [#297](https://github.com/openshift/image-registry/pull/297)
* Updating openshift-enterprise-registry builder & base images to be consistent with ART [#270](https://github.com/openshift/image-registry/pull/270)
* [Bug 1918376](https://bugzilla.redhat.com/show_bug.cgi?id=1918376): ICSP support during Image Registry pullthrough [#277](https://github.com/openshift/image-registry/pull/277)
* [Bug 1918376](https://bugzilla.redhat.com/show_bug.cgi?id=1918376): Bumping openshift/library-go [#278](https://github.com/openshift/image-registry/pull/278)
* [Bug 1924462](https://bugzilla.redhat.com/show_bug.cgi?id=1924462): Bump openshift/api [#276](https://github.com/openshift/image-registry/pull/276)
* [Bug 1952610](https://bugzilla.redhat.com/show_bug.cgi?id=1952610): Bump dependencies [#272](https://github.com/openshift/image-registry/pull/272)
* [Bug 1960619](https://bugzilla.redhat.com/show_bug.cgi?id=1960619): Use sha256 oauth tokens in tests [#274](https://github.com/openshift/image-registry/pull/274)
* Better log message when action is not allowed [#268](https://github.com/openshift/image-registry/pull/268)
* Updating openshift-enterprise-registry builder & base images to be consistent with ART [#264](https://github.com/openshift/image-registry/pull/264)
* [Bug 1924568](https://bugzilla.redhat.com/show_bug.cgi?id=1924568): Bumping docker distribution dependency [#265](https://github.com/openshift/image-registry/pull/265)
* [Full changelog](https://github.com/openshift/image-registry/compare/8b03485af777f8d718427393aa575bbaf6f21610...bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/076a9209048c7d478f59084409c2dca5e3a6f2d8)

* [Bug 2031938](https://bugzilla.redhat.com/show_bug.cgi?id=2031938): Add e2e test to 4.9 branch [#72](https://github.com/openshift/driver-toolkit/pull/72)
* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): Add imagestream for driver-toolkit [#65](https://github.com/openshift/driver-toolkit/pull/65)
* [Bug 1988478](https://bugzilla.redhat.com/show_bug.cgi?id=1988478): Use kernel config to determine GCC version [#55](https://github.com/openshift/driver-toolkit/pull/55)
* [Bug 1979984](https://bugzilla.redhat.com/show_bug.cgi?id=1979984): Remove curl of extract-vmlinux [#48](https://github.com/openshift/driver-toolkit/pull/48)
* [Bug 1977982](https://bugzilla.redhat.com/show_bug.cgi?id=1977982): /etc/driver-toolkit-release.json kernel version match rpm -q output [#45](https://github.com/openshift/driver-toolkit/pull/45)
* [release 4.8] Bug 1974447: Cherry pick gcc to release 4.8 [#38](https://github.com/openshift/driver-toolkit/pull/38)
* [Bug 1972662](https://bugzilla.redhat.com/show_bug.cgi?id=1972662): DPDK KNI modules need some additional tools [#28](https://github.com/openshift/driver-toolkit/pull/28)
* [Bug 1972676](https://bugzilla.redhat.com/show_bug.cgi?id=1972676): Requirements for authenticating kernel modules with X.509 keys [#37](https://github.com/openshift/driver-toolkit/pull/37)
* [Bug 1961656](https://bugzilla.redhat.com/show_bug.cgi?id=1961656): Update Dockerfile [#20](https://github.com/openshift/driver-toolkit/pull/20)
* [Bug 1959190](https://bugzilla.redhat.com/show_bug.cgi?id=1959190): Add LABEL io.openshift.release.operator=true for addition to payload [#17](https://github.com/openshift/driver-toolkit/pull/17)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/bcd11a1f0137bb10b1958f1e27e04a213aef96be...076a9209048c7d478f59084409c2dca5e3a6f2d8)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/016bea1a6f5ec53aab8e936f4120c32a05322027)

* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Update doc to reflect ip field is in CIDR format not just an IP [#48](https://github.com/openshift/egress-router-cni/pull/48)
* [Bug 1962740](https://bugzilla.redhat.com/show_bug.cgi?id=1962740): Add documentation related CNO controller [#42](https://github.com/openshift/egress-router-cni/pull/42)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Protocol needs to be lower case for iptables rules. [#46](https://github.com/openshift/egress-router-cni/pull/46)
* [Bug 1951158](https://bugzilla.redhat.com/show_bug.cgi?id=1951158): Fix non-proper convert to lowercase for protocol [#43](https://github.com/openshift/egress-router-cni/pull/43)
* Updating egress-router-cni builder & base images to be consistent with ART [#41](https://github.com/openshift/egress-router-cni/pull/41)
* Fix gofmt linting issues on macvlan_test [#40](https://github.com/openshift/egress-router-cni/pull/40)
* Include build-machinery-go tests [#39](https://github.com/openshift/egress-router-cni/pull/39)
* Enable unit testing [#37](https://github.com/openshift/egress-router-cni/pull/37)
* Remove valadas from owners [#38](https://github.com/openshift/egress-router-cni/pull/38)
* Update go.mod file [#36](https://github.com/openshift/egress-router-cni/pull/36)
* add unit tests for `fillNetConfDefaults()` in macvlan.go [#31](https://github.com/openshift/egress-router-cni/pull/31)
* Add developer documentation [#25](https://github.com/openshift/egress-router-cni/pull/25)
* [SDN-1569](https://issues.redhat.com/browse/SDN-1569): Add support for multiple destinations in redirect mode [#34](https://github.com/openshift/egress-router-cni/pull/34)
* Updating egress-router-cni builder & base images to be consistent with ART [#35](https://github.com/openshift/egress-router-cni/pull/35)
* Update README to current implementation [#29](https://github.com/openshift/egress-router-cni/pull/29)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/96ebd3782cbb63de098e75ebcedeac60546cfee3...016bea1a6f5ec53aab8e936f4120c32a05322027)


### [etcd](https://github.com/openshift/etcd/tree/aefa6bf59b381938b50ab9ba4a7add9b4a767e27)

* [Bug 1958913](https://bugzilla.redhat.com/show_bug.cgi?id=1958913): discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists [#81](https://github.com/openshift/etcd/pull/81)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): UPSTREAM: <carry>: etcdserver/api/etcdhttp: log successful etcd server side health check in debug level [#80](https://github.com/openshift/etcd/pull/80)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): UPSTREAM: <carry>: *: log server-side /health checks [#79](https://github.com/openshift/etcd/pull/79)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): UPSTREAM: <carry>: server: add support for log rotation (#12774) [#78](https://github.com/openshift/etcd/pull/78)
* UPSTREAM: <carry>: *: ensure zap logger is set before use [#75](https://github.com/openshift/etcd/pull/75)
* [ETCD-180](https://issues.redhat.com/browse/ETCD-180): Bug 1927942: UPSTREAM: <carry>: *: add support for socket options [#70](https://github.com/openshift/etcd/pull/70)
* [ETCD-178](https://issues.redhat.com/browse/ETCD-178): Bug 1931652: openshift-tools: fix on off flow and add unit tests [#73](https://github.com/openshift/etcd/pull/73)
* Updating ose-etcd builder & base images to be consistent with ART [#68](https://github.com/openshift/etcd/pull/68)
* [Bug 1870189](https://bugzilla.redhat.com/show_bug.cgi?id=1870189): Bump v3.4.14 [#65](https://github.com/openshift/etcd/pull/65)
* Automated cherry pick of #12264 [#12356](https://github.com/openshift/etcd/pull/12356)
* [Backport 3.4] etcdserver: add ConfChangeAddLearnerNode to the list of config changes [#12299](https://github.com/openshift/etcd/pull/12299)
* Automated cherry pick of #12271 on release 3.4 [#12280](https://github.com/openshift/etcd/pull/12280)
* Automated cherry pick of #12242 [#12250](https://github.com/openshift/etcd/pull/12250)
* Automated cherry pick of #12243 on release 3.4 [#12244](https://github.com/openshift/etcd/pull/12244)
* etcdserver: Avoid panics logging slow v2 requests in integration tests [#12239](https://github.com/openshift/etcd/pull/12239)
* *: add plog logging to the backport of PR12216 [#12226](https://github.com/openshift/etcd/pull/12226)
* Automated cherry pick of #11452 #12187 on release 3.4 [#12189](https://github.com/openshift/etcd/pull/12189)
* etcdserver: change protobuf field type from int to int64 (#12000) [#12106](https://github.com/openshift/etcd/pull/12106)
* Automated cherry pick of #12012 [#12127](https://github.com/openshift/etcd/pull/12127)
* Automated cherry pick of #12018 [#12112](https://github.com/openshift/etcd/pull/12112)
* Automated cherry pick of #11987 [#12076](https://github.com/openshift/etcd/pull/12076)
* Automated cherry pick of #11997 [#12089](https://github.com/openshift/etcd/pull/12089)
* Automated cherry pick of #12100 [#12101](https://github.com/openshift/etcd/pull/12101)
* Automated cherry pick of #12092 [#12103](https://github.com/openshift/etcd/pull/12103)
* Automated cherry pick of #12005 [#12074](https://github.com/openshift/etcd/pull/12074)
* Automated cherry pick of #11980 [#12077](https://github.com/openshift/etcd/pull/12077)
* Automated cherry pick of #11945 [#12081](https://github.com/openshift/etcd/pull/12081)
* Automated cherry pick of #11793 [#12048](https://github.com/openshift/etcd/pull/12048)
* Automated cherry pick of #11850 [#12055](https://github.com/openshift/etcd/pull/12055)
* Automated cherry pick of #11986 [#12064](https://github.com/openshift/etcd/pull/12064)
* Automated cherry pick of #12060 [#12070](https://github.com/openshift/etcd/pull/12070)
* Automated cherry pick of #12066 [#12072](https://github.com/openshift/etcd/pull/12072)
* Automated cherry pick of #11798 [#12034](https://github.com/openshift/etcd/pull/12034)
* Automated cherry pick of #11787 [#12035](https://github.com/openshift/etcd/pull/12035)
* Automated cherry pick of #11807 [#12037](https://github.com/openshift/etcd/pull/12037)
* Automated cherry pick of #11795 [#12041](https://github.com/openshift/etcd/pull/12041)
* Automated cherry pick of #11845 [#12039](https://github.com/openshift/etcd/pull/12039)
* Automated cherry pick of #11608 [#12038](https://github.com/openshift/etcd/pull/12038)
* Automated cherry pick of #11796 [#12040](https://github.com/openshift/etcd/pull/12040)
* Automated cherry pick of #11818 [#12042](https://github.com/openshift/etcd/pull/12042)
* Automated cherry pick of #11830 [#12043](https://github.com/openshift/etcd/pull/12043)
* Automated cherry pick of #11841 [#12044](https://github.com/openshift/etcd/pull/12044)
* Automated cherry pick of #11946 [#11977](https://github.com/openshift/etcd/pull/11977)
* [Full changelog](https://github.com/openshift/etcd/compare/c61e5afde9485fac9233c0db6ab950bfb511e1b5...aefa6bf59b381938b50ab9ba4a7add9b4a767e27)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/34db56ebf7a8a46828f5830d42b26f9d2bdd0db1)

* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#163](https://github.com/openshift/cluster-api-provider-gcp/pull/163)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#161](https://github.com/openshift/cluster-api-provider-gcp/pull/161)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update k8s dependencies to 1.21 [#159](https://github.com/openshift/cluster-api-provider-gcp/pull/159)
* [Bug 1918910](https://bugzilla.redhat.com/show_bug.cgi?id=1918910): Only log error on nonexistent instance type for scale from zero [#157](https://github.com/openshift/cluster-api-provider-gcp/pull/157)
* Updating ose-gcp-machine-controllers builder & base images to be consistent with ART [#156](https://github.com/openshift/cluster-api-provider-gcp/pull/156)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Ensure original conditions aren't mutated during reconcile [#155](https://github.com/openshift/cluster-api-provider-gcp/pull/155)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Add condition to show actuator exists condition on machine [#152](https://github.com/openshift/cluster-api-provider-gcp/pull/152)
* [Bug 1934021](https://bugzilla.redhat.com/show_bug.cgi?id=1934021): Ensure response body is closed when we are finished with the request [#150](https://github.com/openshift/cluster-api-provider-gcp/pull/150)
* Try to mark node for up to 30 seconds when termination notice observed [#145](https://github.com/openshift/cluster-api-provider-gcp/pull/145)
* Updating ose-gcp-machine-controllers builder & base images to be consistent with ART [#146](https://github.com/openshift/cluster-api-provider-gcp/pull/146)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/5f6589d4ef9496e63ebc072f4d863151bbeb4407...34db56ebf7a8a46828f5830d42b26f9d2bdd0db1)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c)

* [Bug 2052955](https://bugzilla.redhat.com/show_bug.cgi?id=2052955): Disable uuid checks on XFS [#23](https://github.com/openshift/gcp-pd-csi-driver/pull/23)
* Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#12](https://github.com/openshift/gcp-pd-csi-driver/pull/12)
* UPSTREAM: 693: Add CLI option to label the PD disks [#11](https://github.com/openshift/gcp-pd-csi-driver/pull/11)
* Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART [#9](https://github.com/openshift/gcp-pd-csi-driver/pull/9)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/0cb61d205d0f911fe8ca614094f0cd3f911d665c...3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/35ebe86003c339821d3a36186a66f8ef86049932)

* [Bug 1969538](https://bugzilla.redhat.com/show_bug.cgi?id=1969538): Include VolumeSnapshotClass by default [#25](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/25)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#23](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/23)
* [Bug 1951058](https://bugzilla.redhat.com/show_bug.cgi?id=1951058): Enable multipods capability in e2e tests [#22](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/22)
* GCP PD: Add metrics scraping [#21](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/21)
* Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART [#19](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/19)
* [Bug 1939865](https://bugzilla.redhat.com/show_bug.cgi?id=1939865): Add CSIDriver object [#17](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/17)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#15](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/15)
* Change the disk label name [#16](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/16)
* Add cluster ID as extra label for newly created PDs. [#14](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/14)
* Update images in README.md [#8](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/8)
* Cleanup: Remove serviceName from controller manifest [#13](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/13)
* Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART [#12](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/12)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/d40dd57595673e4737fa77e29a955f6beefac284...35ebe86003c339821d3a36186a66f8ef86049932)


### [grafana](https://github.com/openshift/grafana/tree/b987e4b1e20b6cf814bbc408dd2a740aed92e410)

* [Bug 1931277](https://bugzilla.redhat.com/show_bug.cgi?id=1931277): Bump v7.5.5 [#57](https://github.com/openshift/grafana/pull/57)
* Updating grafana builder & base images to be consistent with ART [#56](https://github.com/openshift/grafana/pull/56)
* Updating grafana builder & base images to be consistent with ART [#55](https://github.com/openshift/grafana/pull/55)
* [Full changelog](https://github.com/openshift/grafana/compare/b02c35dc2d01fce696a3edc28839a9f9fd0150a3...b987e4b1e20b6cf814bbc408dd2a740aed92e410)


### [haproxy-router](https://github.com/openshift/router/tree/9c9f9f422fd55b6535bd2a669a88657f97569c4d)

* [Bug 1990370](https://bugzilla.redhat.com/show_bug.cgi?id=1990370): haproxy-config.template: Fix power-of-two balancing [#324](https://github.com/openshift/router/pull/324)
* [Bug 1984565](https://bugzilla.redhat.com/show_bug.cgi?id=1984565): config template: accept IPv6 IPs for whitelisting [#321](https://github.com/openshift/router/pull/321)
* [Bug 1971730](https://bugzilla.redhat.com/show_bug.cgi?id=1971730): error pages - don't use bootstrap/normalize [#305](https://github.com/openshift/router/pull/305)
* [Bug 1964486](https://bugzilla.redhat.com/show_bug.cgi?id=1964486): template helper - generateHAProxyWhiteListFile, use right arg type [#295](https://github.com/openshift/router/pull/295)
* [Bug 1955822](https://bugzilla.redhat.com/show_bug.cgi?id=1955822): cmd: Add option to source stats auth from file [#291](https://github.com/openshift/router/pull/291)
* [Bug 1957584](https://bugzilla.redhat.com/show_bug.cgi?id=1957584): Revert 'Bug 1896977: Enhance host name validation in router' [#290](https://github.com/openshift/router/pull/290)
* [Bug 1961550](https://bugzilla.redhat.com/show_bug.cgi?id=1961550): Add a condition to check if the Endpoints ID is duplicated [#285](https://github.com/openshift/router/pull/285)
* [Bug 1947478](https://bugzilla.redhat.com/show_bug.cgi?id=1947478): Switch from discovery v1beta1 to discovery v1 [#282](https://github.com/openshift/router/pull/282)
* [Bug 1924461](https://bugzilla.redhat.com/show_bug.cgi?id=1924461): Deps: Bump for kube 1.21 [#278](https://github.com/openshift/router/pull/278)
* Add errorfile stanzas and dummy default html files to the router [#274](https://github.com/openshift/router/pull/274)
* haproxy-config.template: Use power-of-two balancing [#192](https://github.com/openshift/router/pull/192)
* haproxy-config.template: Re-indent. [#276](https://github.com/openshift/router/pull/276)
* Updating ose-haproxy-router-base builder & base images to be consistent with ART [#272](https://github.com/openshift/router/pull/272)
* [Bug 1925697](https://bugzilla.redhat.com/show_bug.cgi?id=1925697): Route admission should not use the override [#258](https://github.com/openshift/router/pull/258)
* [NE-417](https://issues.redhat.com/browse/NE-417): Allow configuring HAProxy header buffer sizes [#193](https://github.com/openshift/router/pull/193)
* [Bug 1937972](https://bugzilla.redhat.com/show_bug.cgi?id=1937972): router/template: Cache compiled regular expressions [#268](https://github.com/openshift/router/pull/268)
* [Bug 1909906](https://bugzilla.redhat.com/show_bug.cgi?id=1909906): Exit gracefully if metrics listener fails [#266](https://github.com/openshift/router/pull/266)
* [Bug 1903821](https://bugzilla.redhat.com/show_bug.cgi?id=1903821): contention: Contend over route ingress admission condition [#240](https://github.com/openshift/router/pull/240)
* template: Drop http-use-htx option [#261](https://github.com/openshift/router/pull/261)
* Switch to haproxy22 [#259](https://github.com/openshift/router/pull/259)
* Updating openshift-enterprise-haproxy-router builder & base images to be consistent with ART [#256](https://github.com/openshift/router/pull/256)
* Updating ose-haproxy-router-base builder & base images to be consistent with ART [#255](https://github.com/openshift/router/pull/255)
* [Bug 1801407](https://bugzilla.redhat.com/show_bug.cgi?id=1801407): Omit brackets around IPv4 addresses in v4v6 mode [#83](https://github.com/openshift/router/pull/83)
* Add rfredette to OWNERS [#237](https://github.com/openshift/router/pull/237)
* [Full changelog](https://github.com/openshift/router/compare/4ab216f0090a985f041cea3e411075a04e2ace0a...9c9f9f422fd55b6535bd2a669a88657f97569c4d)


### [hyperkube](https://github.com/openshift/kubernetes/tree/ee73ea2fb6899a78638a389cd5d860f163c590c8)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#1173](https://github.com/openshift/kubernetes/pull/1173)
* [Bug 2060494](https://bugzilla.redhat.com/show_bug.cgi?id=2060494): Backports inotify leak fix into kubelet [#1203](https://github.com/openshift/kubernetes/pull/1203)
* [Bug 2024642](https://bugzilla.redhat.com/show_bug.cgi?id=2024642): Rebase v1.21.8 [#1102](https://github.com/openshift/kubernetes/pull/1102)
* Update to go1.16.12 [#106983](https://github.com/openshift/kubernetes/pull/106983)
* dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 [#106961](https://github.com/openshift/kubernetes/pull/106961)
* Update to go1.16.11 [#106839](https://github.com/openshift/kubernetes/pull/106839)
* Automated cherry pick of #106891: kubeadm: validate local etcd certficates during [#106924](https://github.com/openshift/kubernetes/pull/106924)
* Automated cherry pick of #106854: kubeadm: avoid requiring a CA key during kubeconfig [#106929](https://github.com/openshift/kubernetes/pull/106929)
* Automated cherry pick of #105666: fix: skip instance not found when decoupling vmss from lb [#105835](https://github.com/openshift/kubernetes/pull/105835)
* Automated cherry pick of #105612: Remove Error Message Check Dynamic PV Tests [#106357](https://github.com/openshift/kubernetes/pull/106357)
* Automated cherry pick of #96115: Get inodes and disk usage via pure go [#104021](https://github.com/openshift/kubernetes/pull/104021)
* Automated cherry pick of #102882: devicemanager: checkpoint: support pre-1.20 data [#106254](https://github.com/openshift/kubernetes/pull/106254)
* Automated cherry pick of #103154: Update mounter interface in volume manager [#106553](https://github.com/openshift/kubernetes/pull/106553)
* Automated cherry pick of #104287: Reduce calls to docker from dockershim for stats [#106502](https://github.com/openshift/kubernetes/pull/106502)
* Automated cherry pick of #106102: Ensure deletion of pods in queues and cache [#106685](https://github.com/openshift/kubernetes/pull/106685)
* Automated cherry pick of #106412: kube-scheduler: Increase the duration to expire an assumed [#106632](https://github.com/openshift/kubernetes/pull/106632)
* Automated cherry pick of #106526: Ignore 'wait: no child processes' error when calling [#106527](https://github.com/openshift/kubernetes/pull/106527)
* Automated cherry pick of #105046: Skip check for all topology labels when using system default [#106605](https://github.com/openshift/kubernetes/pull/106605)
* Automated cherry pick of #105065: parameter 'disabled-metrics' is invalid [#106391](https://github.com/openshift/kubernetes/pull/106391)
* Automated cherry pick of #106317 upstream release 1.21 - Fixed nil pointer dereference [#106354](https://github.com/openshift/kubernetes/pull/106354)
* Automated cherry pick of #106382: defer close the rotated log open [#106384](https://github.com/openshift/kubernetes/pull/106384)
* Automated cherry pick of #104526: Fix issue in node status updating VolumeAttached list [#106053](https://github.com/openshift/kubernetes/pull/106053)
* remove listx from OWNERS_ALIASES [#104261](https://github.com/openshift/kubernetes/pull/104261)
* Automated cherry pick of #105512: Add check for subpaths [#106351](https://github.com/openshift/kubernetes/pull/106351)
* Manual cherry pick of kube-openapi changes for release-1.21 [#106255](https://github.com/openshift/kubernetes/pull/106255)
* Update to go1.16.10 [#106224](https://github.com/openshift/kubernetes/pull/106224)
* Automated cherry pick of #105934: Don't guess SELinux support on error [#106260](https://github.com/openshift/kubernetes/pull/106260)
* Automated cherry pick of #102059: Bump k8s.io/utils [#102656](https://github.com/openshift/kubernetes/pull/102656)
* Automated cherry pick of #94165: Use separate pathSpec for local and remote to properly handle [#106236](https://github.com/openshift/kubernetes/pull/106236)
* Cherry-pick of #101708: Fix log spam for du failure on pod etc-hosts metrics [#105887](https://github.com/openshift/kubernetes/pull/105887)
* Update debian, debian-iptables, setcap images to pick up CVEs fixes [#106147](https://github.com/openshift/kubernetes/pull/106147)
* Automated cherry pick of #105946: Remove nodes with Cluster Autoscaler taint from LB backends. [#106096](https://github.com/openshift/kubernetes/pull/106096)
* Automated cherry pick of #105997: Fixing how EndpointSlice Mirroring handles Service selector [#106135](https://github.com/openshift/kubernetes/pull/106135)
* Automated cherry pick of #105673: support more than 100 disk mounts on Windows [#105693](https://github.com/openshift/kubernetes/pull/105693)
* Automated cherry pick of #105755: Support cgroupv2 in node problem detector test [#105991](https://github.com/openshift/kubernetes/pull/105991)
* Cherry pick of #104551: Run storage hostpath e2e test client pod as privileged [#105787](https://github.com/openshift/kubernetes/pull/105787)
* Automated cherry pick of #105734: Fix race condition in logging when request times out [#106113](https://github.com/openshift/kubernetes/pull/106113)
* [Bug 2050131](https://bugzilla.redhat.com/show_bug.cgi?id=2050131): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1168](https://github.com/openshift/kubernetes/pull/1168)
* [Bug 2039377](https://bugzilla.redhat.com/show_bug.cgi?id=2039377): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1108](https://github.com/openshift/kubernetes/pull/1108)
* [Bug 2029466](https://bugzilla.redhat.com/show_bug.cgi?id=2029466): UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails [#1146](https://github.com/openshift/kubernetes/pull/1146)
* [Bug 2024995](https://bugzilla.redhat.com/show_bug.cgi?id=2024995): Fix subpath source check [#1067](https://github.com/openshift/kubernetes/pull/1067)
* [Bug 2032325](https://bugzilla.redhat.com/show_bug.cgi?id=2032325): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1092](https://github.com/openshift/kubernetes/pull/1092)
* [Bug 2022741](https://bugzilla.redhat.com/show_bug.cgi?id=2022741): UPSTREAM: 106260: Don't guess SELinux support on error [#1054](https://github.com/openshift/kubernetes/pull/1054)
* [Bug 2021997](https://bugzilla.redhat.com/show_bug.cgi?id=2021997): Read k8s version from hyperkube Dockerfile [#1045](https://github.com/openshift/kubernetes/pull/1045)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#559](https://github.com/openshift/kubernetes/pull/559)
* [Bug 2017027](https://bugzilla.redhat.com/show_bug.cgi?id=2017027): UPSTREAM: <drop>: bump apiserver-library-go [#1069](https://github.com/openshift/kubernetes/pull/1069)
* [Bug 2022265](https://bugzilla.redhat.com/show_bug.cgi?id=2022265): Rebase v1.21.6 [#1060](https://github.com/openshift/kubernetes/pull/1060)
* Automated cherry pick of #105509: [test]: Fix PreferNominatedNode test [#105665](https://github.com/openshift/kubernetes/pull/105665)
* Update to go1.16.9 [#105672](https://github.com/openshift/kubernetes/pull/105672)
* Automated cherry pick of #104985: Aggregator uses the regular transport even if the request [#105641](https://github.com/openshift/kubernetes/pull/105641)
* Automated cherry pick of #99748: check log directory for restartCount [#105614](https://github.com/openshift/kubernetes/pull/105614)
* Automated cherry pick of #104593: fix: ignore the case when updating tags [#104686](https://github.com/openshift/kubernetes/pull/104686)
* Automated cherry pick of #103371: tests: Wait for the network connectivity first [#105441](https://github.com/openshift/kubernetes/pull/105441)
* Automated cherry pick of #105185: Ignore VMs in vmss delete backend pools [#105402](https://github.com/openshift/kubernetes/pull/105402)
* Cherry pick of #105188 and #98350 to release 1.21 [#105365](https://github.com/openshift/kubernetes/pull/105365)
* Automated cherry pick of #102665: Add explicit capability for online volume expansion [#102740](https://github.com/openshift/kubernetes/pull/102740)
* Automated cherry pick of #104913: kube-controller-manager: properly check generic ephemeral [#105037](https://github.com/openshift/kubernetes/pull/105037)
* Automated cherry pick of #102409: Bump golang.org/x/text to v0.3.6 [#102601](https://github.com/openshift/kubernetes/pull/102601)
* Bump klog to v2.9.0 [#105407](https://github.com/openshift/kubernetes/pull/105407)
* Automated cherry pick of #105048: Remove a duplicate StorageClass creation call [#105354](https://github.com/openshift/kubernetes/pull/105354)
* Automated cherry pick of #105205: e2e scheduling priorities: do not reference control loop [#105278](https://github.com/openshift/kubernetes/pull/105278)
* Automated cherry pick of #102292: Local PV e2e: fix leaked local volumes [#103349](https://github.com/openshift/kubernetes/pull/103349)
* Automated cherry pick of #104467: fix 104329: check for headless before trying to release [#104973](https://github.com/openshift/kubernetes/pull/104973)
* Automated cherry pick of #104572: fix detach disk issue on deleting node [#104898](https://github.com/openshift/kubernetes/pull/104898)
* Automated cherry pick of #105388: Copy VolumeSnapshotContent annotations in snapshottable.go [#105497](https://github.com/openshift/kubernetes/pull/105497)
* Revert 102925: Fix Node Resources plugins score when there are pods with no requests [#105238](https://github.com/openshift/kubernetes/pull/105238)
* release 1.21: metrics grabbing [#104328](https://github.com/openshift/kubernetes/pull/104328)
* Automated cherry pick of #101047: Only use dualstack if the node and config supports it [#103783](https://github.com/openshift/kubernetes/pull/103783)
* Automated cherry pick of #104969: Propagate conversion errors [#104989](https://github.com/openshift/kubernetes/pull/104989)
* Automated cherry pick of #104634: storege e2etest: Delete restored PVC/Pod in snapshottable [#105153](https://github.com/openshift/kubernetes/pull/105153)
* v1.21: Fix test flake in old svc registry [#105110](https://github.com/openshift/kubernetes/pull/105110)
* Automated cherry pick of #100125: 'New' Event namespace validate failed [#105088](https://github.com/openshift/kubernetes/pull/105088)
* Automated cherry pick of #104833 (1.21): Refine locking in API Priority and Fairness config controller [#105050](https://github.com/openshift/kubernetes/pull/105050)
* Updating openshift-enterprise-pod images to be consistent with ART [#680](https://github.com/openshift/kubernetes/pull/680)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1050](https://github.com/openshift/kubernetes/pull/1050)
* [Bug 1994655](https://bugzilla.redhat.com/show_bug.cgi?id=1994655): openshift-apiserver should not set Available=False APIServicesAvailable on update [#955](https://github.com/openshift/kubernetes/pull/955)
* [Bug 2008403](https://bugzilla.redhat.com/show_bug.cgi?id=2008403): Rebase v1.21.5 [#981](https://github.com/openshift/kubernetes/pull/981)
* Update to go1.16.8 [#104906](https://github.com/openshift/kubernetes/pull/104906)
* Automated cherry pick of #104369: Fix storage class setup in regional_pd.go [#104537](https://github.com/openshift/kubernetes/pull/104537)
* Backport 104410 to release-1.21 [#104534](https://github.com/openshift/kubernetes/pull/104534)
* Automated cherry pick of #104314: legacy-cloud-providers: aws: Add support for consuming web [#104870](https://github.com/openshift/kubernetes/pull/104870)
* Automated cherry pick of #104845: e2e iperf2 change threshold to 10MBps = 80 Mbps [#104865](https://github.com/openshift/kubernetes/pull/104865)
* Automated cherry pick of #103532: Service: Fix semantics for Update wrt allocations [#104673](https://github.com/openshift/kubernetes/pull/104673)
* Automated cherry pick of #103050: Fix NodeAuthenticator tests in dual stack [#104840](https://github.com/openshift/kubernetes/pull/104840)
* Automated cherry pick of #100720: Fix buckets initialization [#104514](https://github.com/openshift/kubernetes/pull/104514)
* Automated cherry pick of #104384: fix: skip case sensitivity when checking Azure NSG rules [#104447](https://github.com/openshift/kubernetes/pull/104447)
* Automated cherry pick of #104279: Copy golang license to staging copies [#104311](https://github.com/openshift/kubernetes/pull/104311)
* Automated cherry pick of #104703: Fix the key missing issue for structured log [#104719](https://github.com/openshift/kubernetes/pull/104719)
* bump runc to 1.0.2 [#104530](https://github.com/openshift/kubernetes/pull/104530)
* Automated cherry pick of #104604: Don't prematurely close reflectors in case of slow [#104616](https://github.com/openshift/kubernetes/pull/104616)
* Automated cherry pick of #103958: Set idle and readheader timeouts [#103989](https://github.com/openshift/kubernetes/pull/103989)
* Automated cherry pick of #104009: delete stale UDP conntrack entries for loadbalancer IPs [#104151](https://github.com/openshift/kubernetes/pull/104151)
* Automated cherry pick of #104253: Pass additional flags to subpath mount to avoid flakes in [#104347](https://github.com/openshift/kubernetes/pull/104347)
* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#1005](https://github.com/openshift/kubernetes/pull/1005)
* [Bug 1995714](https://bugzilla.redhat.com/show_bug.cgi?id=1995714): UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case [#895](https://github.com/openshift/kubernetes/pull/895)
* [Bug 1994457](https://bugzilla.redhat.com/show_bug.cgi?id=1994457): Update to kubernetes 1.21.4 [#888](https://github.com/openshift/kubernetes/pull/888)
* Automated cherry pick of #102083: fix: delete non existing disk issue [#102163](https://github.com/openshift/kubernetes/pull/102163)
* Automated cherry pick of #104182: Avoid spurious calls to update/delete validation [#104208](https://github.com/openshift/kubernetes/pull/104208)
* Update to go1.16.7 [#104201](https://github.com/openshift/kubernetes/pull/104201)
* Automated cherry pick of #102576: kubelet: do not call RemoveAll on volumes directory for [#103826](https://github.com/openshift/kubernetes/pull/103826)
* Automated cherry pick of #103284: Fix the code is leaking the defaulting between unrelated pod [#103676](https://github.com/openshift/kubernetes/pull/103676)
* Automated cherry pick of #103160: Remove extra zone test [#103405](https://github.com/openshift/kubernetes/pull/103405)
* Automated cherry pick of #103019: Fix frameworkImpl.extenders being not set [#103031](https://github.com/openshift/kubernetes/pull/103031)
* Automated cherry pick of #101611: let objects without metadata pass through the managedFields [#101649](https://github.com/openshift/kubernetes/pull/101649)
* Automated cherry pick of #104135: Update configure-helper.sh [#104179](https://github.com/openshift/kubernetes/pull/104179)
* Automated cherry pick of #103794: feat: Provide IPv6 support for internal load balancer [#104028](https://github.com/openshift/kubernetes/pull/104028)
* Automated cherry pick of #104161 upstream release 1.21 [#104190](https://github.com/openshift/kubernetes/pull/104190)
* Automated cherry pick of #103997: Fix: ignore not a VMSS error for VMAS nodes in [#104029](https://github.com/openshift/kubernetes/pull/104029)
* Automated cherry pick of #103937: Fix disruptive subPath test failures [#104044](https://github.com/openshift/kubernetes/pull/104044)
* Automated cherry pick of #102539: Fix closing of decorated watcher channel on timeout [#102541](https://github.com/openshift/kubernetes/pull/102541)
* Automated cherry pick of #102928: Simplify use of the fake dynamic client [#103614](https://github.com/openshift/kubernetes/pull/103614)
* Automated cherry pick of #103895: Update to using apiserver-network-proxy v1.22 [#103931](https://github.com/openshift/kubernetes/pull/103931)
* Automated cherry pick of #100637: storage e2e: automate hostpath YAML updates, hostpath #102212: Update pd csi driver images to use v1 images (CSINode, [#103920](https://github.com/openshift/kubernetes/pull/103920)
* Automated cherry pick of #103831: disable aufs module [#103927](https://github.com/openshift/kubernetes/pull/103927)
* cherry-pick #100353: strip prefix 'v' in coredns version if exists [#102905](https://github.com/openshift/kubernetes/pull/102905)
* Automated cherry pick of #103823: Make CSR cleaner tolerate objects with invalid [#103948](https://github.com/openshift/kubernetes/pull/103948)
* Backport fix for flaky ESIPP test to 1.21 [#103492](https://github.com/openshift/kubernetes/pull/103492)
* Automated cherry pick of #103126 upstream release 1.21: Updated to use konnectivity client v0.0.21, and implemented placehold… [#103699](https://github.com/openshift/kubernetes/pull/103699)
* Cherry pick of #100110: Cherry pick #537 from cloud provider azure: Refresh VM cache when node is not found and #102935: fix: cleanup outdated routes [#102983](https://github.com/openshift/kubernetes/pull/102983)
* Cherry pick of #103470: fix: return empty VMAS name if using standalone VM [#103599](https://github.com/openshift/kubernetes/pull/103599)
* Automated cherry pick of #103733 upstream release 1.21 [#103734](https://github.com/openshift/kubernetes/pull/103734)
* Automated cherry pick of #101118 upstream release 1.21 [#103712](https://github.com/openshift/kubernetes/pull/103712)
* Automated cherry pick of #103235: Update debian-base image to buster-v1.8.0 [#103488](https://github.com/openshift/kubernetes/pull/103488)
* Update to go1.16.6 [#103670](https://github.com/openshift/kubernetes/pull/103670)
* Automated cherry pick of #103138: Loadbalancer IngressIP policy should be configured as non-DSR [#103140](https://github.com/openshift/kubernetes/pull/103140)
* Automated cherry pick of #103133 on 1.21: switch scheduler to generate the merge patch on pod status instead of the full pod [#103279](https://github.com/openshift/kubernetes/pull/103279)
* Automated cherry pick of #99680: fix error of setting  negative value for containerLogMaxSize [#102389](https://github.com/openshift/kubernetes/pull/102389)
* Manual cherry pick of #103318: Bump SMD to v4.1.2 to pick up #102749 fix [#103319](https://github.com/openshift/kubernetes/pull/103319)
* Cherry pick of #102516: serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match [#102548](https://github.com/openshift/kubernetes/pull/102548)
* Automated cherry pick of #102892: Do not throw error when we can't get canonical path [#102969](https://github.com/openshift/kubernetes/pull/102969)
* Automated cherry pick of #102925: Fix Node Resources plugins score when there are pods with no [#102994](https://github.com/openshift/kubernetes/pull/102994)
* Automated cherry pick of #102584: Fix race in attachdetach tests [#103051](https://github.com/openshift/kubernetes/pull/103051)
* Automated cherry pick of #102845: Remove error wrap from logs [#102852](https://github.com/openshift/kubernetes/pull/102852)
* Automated cherry pick of #101592: chunk target operatation for aws targetGroup [#101812](https://github.com/openshift/kubernetes/pull/101812)
* Automated cherry pick of #102673: feat: remove ephemeral-storage etcd requirement [#102705](https://github.com/openshift/kubernetes/pull/102705)
* Automated cherry pick of #102788: client-go: reduce log level of reflector again [#102800](https://github.com/openshift/kubernetes/pull/102800)
* Update to go1.16.5 [#102739](https://github.com/openshift/kubernetes/pull/102739)
* Automated cherry pick of #102683: endpointslicemirroring controller mirror address status [#102702](https://github.com/openshift/kubernetes/pull/102702)
* Automated cherry pick of #100948: Avoid caching the VMSS instances whose network profile is nil [#101825](https://github.com/openshift/kubernetes/pull/101825)
* Cherry pick of #101752: fix: not tagging static public IP [#101819](https://github.com/openshift/kubernetes/pull/101819)
* Automated cherry pick of #102498: sched: fix a bug that a preemptor pod exists as a phantom [#102667](https://github.com/openshift/kubernetes/pull/102667)
* Automated cherry pick of #102306: Return UnschedulableAndUnresolvable instead of Error when [#102514](https://github.com/openshift/kubernetes/pull/102514)
* (scheduler e2e) Create balanced pods in parallel [#102487](https://github.com/openshift/kubernetes/pull/102487)
* Automated cherry pick of #102005: Azure: avoid setting cached Sku when updating VMSS and VMSS [#102119](https://github.com/openshift/kubernetes/pull/102119)
* Automated cherry pick of #101443: Add missing clientset to EBS storage e2e test [#101956](https://github.com/openshift/kubernetes/pull/101956)
* Automated cherry pick of #101857: fixed wrong warning in kube-proxy regarding topology aware [#101939](https://github.com/openshift/kubernetes/pull/101939)
* Automated cherry pick of #101615: fix removing pods from podTopologyHints mapping [#101892](https://github.com/openshift/kubernetes/pull/101892)
* Cherry pick of #101595: Update cos-gpu-installer image [#101890](https://github.com/openshift/kubernetes/pull/101890)
* Cherry pick of #101739: fix: avoid nil-pointer panic when checking the frontend IP configuration [#101885](https://github.com/openshift/kubernetes/pull/101885)
* Automated cherry pick of #101652: Add jitter to lease controller [#101863](https://github.com/openshift/kubernetes/pull/101863)
* Automated cherry pick of #100326: Fix watchForLockfileContention memory leak [#101795](https://github.com/openshift/kubernetes/pull/101795)
* Automated cherry pick of #102176: Fix VolumeAttachment garbage collection for migrated PVs [#102456](https://github.com/openshift/kubernetes/pull/102456)
* Revert "Cleanup portforward streams after their usage" [1.21] [#102587](https://github.com/openshift/kubernetes/pull/102587)
* Automated cherry pick of #102502: use subpath for coredns only for default repository [#102506](https://github.com/openshift/kubernetes/pull/102506)
* Automated cherry pick of #102213: Upgrade konnectivity-client for GRPC connection fixes [#102273](https://github.com/openshift/kubernetes/pull/102273)
* Automated cherry pick of #102157: kubeadm: remove e2e test for ClusterStatus [#102358](https://github.com/openshift/kubernetes/pull/102358)
* Automated cherry pick of #102377: Update setcap to buster-v2.0.1 and add setcap to dependencies.yaml [#102379](https://github.com/openshift/kubernetes/pull/102379)
* Automated cherry pick of #102302: Update debian-iptables to buster-v1.6.1 [#102340](https://github.com/openshift/kubernetes/pull/102340)
* Automated cherry pick of #102027: Remove unnecessary quotes from get-kube scripts [#102042](https://github.com/openshift/kubernetes/pull/102042)
* Automated cherry pick of #102105: Respect annotation size limit for SSA last-applied. [#102184](https://github.com/openshift/kubernetes/pull/102184)
* Automated cherry pick of #102224: Fix expired unit test certs [#102225](https://github.com/openshift/kubernetes/pull/102225)
* Automated cherry pick of #102147: vendor: bump runc to rc95 [#102196](https://github.com/openshift/kubernetes/pull/102196)
* Automated cherry pick of #101358: Ref counting is only applicable to Remote endpoints [#102001](https://github.com/openshift/kubernetes/pull/102001)
* Automated cherry pick of #101737: Use CSI driver to determine unique name for migrated in-tree [#101805](https://github.com/openshift/kubernetes/pull/101805)
* Automated cherry pick of #101950: Make watch order conformance test reliable [#101980](https://github.com/openshift/kubernetes/pull/101980)
* [Bug 1993754](https://bugzilla.redhat.com/show_bug.cgi?id=1993754): UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… [#940](https://github.com/openshift/kubernetes/pull/940)
* [Bug 1998391](https://bugzilla.redhat.com/show_bug.cgi?id=1998391): UPSTREAM: 104530: [1.21] bump runc to 1.0.2 [#912](https://github.com/openshift/kubernetes/pull/912)
* [Bug 1957133](https://bugzilla.redhat.com/show_bug.cgi?id=1957133): do not throw error when we can't get canonical path [#854](https://github.com/openshift/kubernetes/pull/854)
* [Bug 1981770](https://bugzilla.redhat.com/show_bug.cgi?id=1981770): UPSTREAM: <drop>: bump(apiserver-library-go) [#864](https://github.com/openshift/kubernetes/pull/864)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure [#858](https://github.com/openshift/kubernetes/pull/858)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… [#856](https://github.com/openshift/kubernetes/pull/856)
* [Bug 1977351](https://bugzilla.redhat.com/show_bug.cgi?id=1977351): UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type [#833](https://github.com/openshift/kubernetes/pull/833)
* [Bug 1977924](https://bugzilla.redhat.com/show_bug.cgi?id=1977924): [release-4.8] Ensure scc compatibility with BoundServiceAccountTokenVolume [#842](https://github.com/openshift/kubernetes/pull/842)
* [Bug 1975938](https://bugzilla.redhat.com/show_bug.cgi?id=1975938): update Multi-AZ Cluster Volumes test name [#829](https://github.com/openshift/kubernetes/pull/829)
* [Bug 1973580](https://bugzilla.redhat.com/show_bug.cgi?id=1973580): only chown if non-windows machine with projected volumes [#815](https://github.com/openshift/kubernetes/pull/815)
* [Bug 1950993](https://bugzilla.redhat.com/show_bug.cgi?id=1950993): UPSTREAM: <drop>: bump cadvisor for 2868 upstream patch [#802](https://github.com/openshift/kubernetes/pull/802)
* BUG 1927359: Add support for gathering metrics from CSI block-mode volumes [#731](https://github.com/openshift/kubernetes/pull/731)
* [Bug 1954509](https://bugzilla.redhat.com/show_bug.cgi?id=1954509): UPSTREAM: multiple: Fix corruption of FibreChannel volumes [#788](https://github.com/openshift/kubernetes/pull/788)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): Re-enable BoundServiceAccountTokenVolume disabled by 1.21 rebase [#714](https://github.com/openshift/kubernetes/pull/714)
* [Bug 1950010](https://bugzilla.redhat.com/show_bug.cgi?id=1950010): UPSTREAM: <carry>: apirequestcount: smear out CR updates over interval [#798](https://github.com/openshift/kubernetes/pull/798)
* [Bug 1969626](https://bugzilla.redhat.com/show_bug.cgi?id=1969626): UPSTREAM: 102587: kubelet: Revert "Cleanup portforward streams after their usage" [#796](https://github.com/openshift/kubernetes/pull/796)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): kube-apiserver: add system_client=cluster-policy-controller to apiserver_request_total [#794](https://github.com/openshift/kubernetes/pull/794)
* [Bug 1965545](https://bugzilla.redhat.com/show_bug.cgi?id=1965545): vendor: bump runc to rc95 + "unit exists" fix [#790](https://github.com/openshift/kubernetes/pull/790)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 102606: Bring back "client-go: add retry logic for Watch and Stream" and fix test flake [#792](https://github.com/openshift/kubernetes/pull/792)
* [Bug 1967591](https://bugzilla.redhat.com/show_bug.cgi?id=1967591): UPSTREAM: <carry>: do not mutate pods when it has a container with both CPU request and limit [#785](https://github.com/openshift/kubernetes/pull/785)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total [#784](https://github.com/openshift/kubernetes/pull/784)
* UPSTREAM: <carry>: kubelet: add ehashman as reviewer [#583](https://github.com/openshift/kubernetes/pull/583)
* [Bug 1967745](https://bugzilla.redhat.com/show_bug.cgi?id=1967745): Add DNS custom resource admission [#681](https://github.com/openshift/kubernetes/pull/681)
* [Bug 1927397](https://bugzilla.redhat.com/show_bug.cgi?id=1927397): UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects [#736](https://github.com/openshift/kubernetes/pull/736)
* [Bug 1964492](https://bugzilla.redhat.com/show_bug.cgi?id=1964492): UPSTREAM: 102171: Implement support for watch initialization in P&F [#773](https://github.com/openshift/kubernetes/pull/773)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): UPSTREAM: 101950: Make watch order conformance test reliable [#786](https://github.com/openshift/kubernetes/pull/786)
* [Bug 1953127](https://bugzilla.redhat.com/show_bug.cgi?id=1953127): UPSTREAM: <drop>: work around broken NetPol DNS rules [#770](https://github.com/openshift/kubernetes/pull/770)
* [Bug 1958329](https://bugzilla.redhat.com/show_bug.cgi?id=1958329): UPSTREAM: 97428: add more context to log after a request times out [#737](https://github.com/openshift/kubernetes/pull/737)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 102107: client-go: add retry logic for Watch and Stream [#783](https://github.com/openshift/kubernetes/pull/783)
* [Bug 1961925](https://bugzilla.redhat.com/show_bug.cgi?id=1961925): UPSTREAM: <carry>: Does not prevent pod creation because of no nodes reason when it runs under the regular cluster [#756](https://github.com/openshift/kubernetes/pull/756)
* [Bug 1913974](https://bugzilla.redhat.com/show_bug.cgi?id=1913974): UPSTREAM: 102021: Update snapshotting tests to use volumeHandle for CSI volumes when waiting for NodeUnpublish [#769](https://github.com/openshift/kubernetes/pull/769)
* [Bug 1953102](https://bugzilla.redhat.com/show_bug.cgi?id=1953102): UPSTREAM: 102147: vendor: bump runc to rc95 [#761](https://github.com/openshift/kubernetes/pull/761)
* [Bug 1960205](https://bugzilla.redhat.com/show_bug.cgi?id=1960205): UPSTREAM: <carry>: verbosity of managed workloads logging [#771](https://github.com/openshift/kubernetes/pull/771)
* UPSTREAM: <carry>: update rebase doc [#768](https://github.com/openshift/kubernetes/pull/768)
* [Bug 1964197](https://bugzilla.redhat.com/show_bug.cgi?id=1964197): UPSTREAM: 102224: Fix expired unit test certs [#767](https://github.com/openshift/kubernetes/pull/767)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): Rebase 1.21.1 [#751](https://github.com/openshift/kubernetes/pull/751)
* Remove Limits from scheduling e2e balanced pod resources [#101338](https://github.com/openshift/kubernetes/pull/101338)
* Automated cherry pick of #99839: Cleanup portforward streams after their usage [#100951](https://github.com/openshift/kubernetes/pull/100951)
* Automated cherry pick of #99223: move filesystem resize code to kubernetes/mount-utils and add [#101253](https://github.com/openshift/kubernetes/pull/101253)
* Automated cherry pick of #101235: fix: azure file namespace issue in csi translation [#101353](https://github.com/openshift/kubernetes/pull/101353)
* Update to go1.16.4 [#101811](https://github.com/openshift/kubernetes/pull/101811)
* Automated cherry pick of #101012: Fix panic when killing container fails [#101251](https://github.com/openshift/kubernetes/pull/101251)
* Cherry pick of #100690: azure: fix node public IP not able to fetch issues from IMDS [#100943](https://github.com/openshift/kubernetes/pull/100943)
* Automated cherry pick of #101005: Set namespace when using kubectl create service [#101620](https://github.com/openshift/kubernetes/pull/101620)
* Automated cherry pick of #100731: Normalize share name to not include capital letters [#101549](https://github.com/openshift/kubernetes/pull/101549)
* Automated cherry pick of #101495: Fix cleanupMountpoint issue for Windows [#101540](https://github.com/openshift/kubernetes/pull/101540)
* Automated cherry pick of #101398: fix: set "host is down" as corrupted mount [#101518](https://github.com/openshift/kubernetes/pull/101518)
* Automated cherry pick of #100944: Ensure service deleted when the Azure resource group has been deleted [#101494](https://github.com/openshift/kubernetes/pull/101494)
* Cherry pick of #100694: Cherry pick #574 from Cloud Provider Azure: do not tag user created public IPs [#100693](https://github.com/openshift/kubernetes/pull/100693)
* Automated cherry pick of #101186: Fix RBAC of generic ephemeral volumes controller [#101310](https://github.com/openshift/kubernetes/pull/101310)
* Automated cherry pick of #101025: Fix EndpointSlice describe panic when an Endpoint doesn't [#101632](https://github.com/openshift/kubernetes/pull/101632)
* Automated cherry pick of #101347: Extend pod start timeout to 5min for storage subpath [#101544](https://github.com/openshift/kubernetes/pull/101544)
* cherry pick of #100913: no watch endpointslice in userpace mode [#101504](https://github.com/openshift/kubernetes/pull/101504)
* Cherrypick: Update tests to use agnhost 2.32 [#101725](https://github.com/openshift/kubernetes/pull/101725)
* Cherry-pick: Fix Job describe for completion mode [#101198](https://github.com/openshift/kubernetes/pull/101198)
* Automated cherry pick of #101380: fix TestMutatingWebhookResetsInvalidManagedFields flakes [#101424](https://github.com/openshift/kubernetes/pull/101424)
* Automated cherry pick of #101093: Fix `startupProbe` behaviour changed [#101223](https://github.com/openshift/kubernetes/pull/101223)
* Automated cherry pick of #99336: pkg/kubelet: improve the node informer sync check [#101346](https://github.com/openshift/kubernetes/pull/101346)
* Automated cherry pick of #100959: DelegatingAuthenticationOptions TokenReview request timeout [#101102](https://github.com/openshift/kubernetes/pull/101102)
* Automated cherry pick of #100804: add node handlers to the metaproxier [#101054](https://github.com/openshift/kubernetes/pull/101054)
* Automated cherry pick of #100728: Updating Topology Aware Hints to support "Auto" value for [#101053](https://github.com/openshift/kubernetes/pull/101053)
* Automated cherry pick of #100976: releng: Update debian-base and debian-iptables to buster-v1.6.0 to patch base image CVEs [#101438](https://github.com/openshift/kubernetes/pull/101438)
* Automated cherry pick of #101084: Updating EndpointSlice validation to match Endpoints [#101385](https://github.com/openshift/kubernetes/pull/101385)
* Automated cherry pick of #100200: respect ExecProbeTimeout and #101006: exec test should not run in Parallel [#101127](https://github.com/openshift/kubernetes/pull/101127)
* Automated cherry pick of #101306: Additional CVE-2021-3121 fix [#101325](https://github.com/openshift/kubernetes/pull/101325)
* Automated cherry pick of #100762: list pod list once to avoid timeout [#101031](https://github.com/openshift/kubernetes/pull/101031)
* Automated cherry pick of #100893: e2e test with hostNetwork pods can't run in parallel [#100908](https://github.com/openshift/kubernetes/pull/100908)
* Automated cherry pick of #101120: Upgrade kustomize-in-kubectl to v4.1.2 [#101177](https://github.com/openshift/kubernetes/pull/101177)
* Update to go1.16.3 [#101209](https://github.com/openshift/kubernetes/pull/101209)
* Automated cherry pick of #100678: apf: exempt probes /healthz /livez /readyz [#101111](https://github.com/openshift/kubernetes/pull/101111)
* Automated cherry pick of #100992: gce configure containerd default_runtime_name [#100998](https://github.com/openshift/kubernetes/pull/100998)
* Automated cherry pick of #100980: Update the containerd runtime binary path - gce [#100997](https://github.com/openshift/kubernetes/pull/100997)
* Automated cherry pick of #100550: Add new iptables rule for local-up-cluster.sh [#100814](https://github.com/openshift/kubernetes/pull/100814)
* Automated cherry pick of #100569: Set jwks uri in local-up-cluster.sh [#100812](https://github.com/openshift/kubernetes/pull/100812)
* Automated cherry pick of #99734: adds sysctls conformance tests [#100811](https://github.com/openshift/kubernetes/pull/100811)
* Automated cherry pick of #100785: align some of the pod start up times [#100810](https://github.com/openshift/kubernetes/pull/100810)
* Automated cherry pick of #100544: Set some kube-proxy parameters for local-up-cluster.sh [#100813](https://github.com/openshift/kubernetes/pull/100813)
* Automated cherry pick of #100759: increase timeout for pods to start [#100780](https://github.com/openshift/kubernetes/pull/100780)
* Automated cherry pick of #100606 #100660 upstream release 1.21 [#100718](https://github.com/openshift/kubernetes/pull/100718)
* Automated cherry pick of #100638: apf: fix data race in queueset [#100642](https://github.com/openshift/kubernetes/pull/100642)
* Automated cherry pick of #100687: Switch to newer agnhost image [#100696](https://github.com/openshift/kubernetes/pull/100696)
* Automated cherry pick of #100680: test/e2e: fix the OIDC discovery test with ECDSA service [#100685](https://github.com/openshift/kubernetes/pull/100685)
* [cherry-pick of 100632] bump the deprecated version to 1.22 [#100633](https://github.com/openshift/kubernetes/pull/100633)
* UPSTREAM: 102089: Bug 1961644: Add Node IP IPv6 formatting in NodeAuthenticator tests [#760](https://github.com/openshift/kubernetes/pull/760)
* [Bug 1963079](https://bugzilla.redhat.com/show_bug.cgi?id=1963079): KCM with preferred host support [#759](https://github.com/openshift/kubernetes/pull/759)
* [Bug 1952460](https://bugzilla.redhat.com/show_bug.cgi?id=1952460): UPSTREAM: 101488: e2e/network/firewall: don't assume nodes are exposed externally [#738](https://github.com/openshift/kubernetes/pull/738)
* UPSTREAM: 101213: Bug 1881662: fix change erro to info [#744](https://github.com/openshift/kubernetes/pull/744)
* [Bug 1932280](https://bugzilla.redhat.com/show_bug.cgi?id=1932280): UPSTREAM: 101116: vSphere: Return useful errors from parameter validation [#707](https://github.com/openshift/kubernetes/pull/707)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): Handle 429 errors from watch requests in reflector [#669](https://github.com/openshift/kubernetes/pull/669)
* [Bug 1945091](https://bugzilla.redhat.com/show_bug.cgi?id=1945091): Don't force-disable IPv6, dual-stack, and SCTP tests [#565](https://github.com/openshift/kubernetes/pull/565)
* [Bug 1960780](https://bugzilla.redhat.com/show_bug.cgi?id=1960780): UPSTREAM: <carry>: Use policyv1beta1 [#752](https://github.com/openshift/kubernetes/pull/752)
* UPSTREAM: 101067: Bug 1946459: fix nfs storage ipv6 add square brackets [#743](https://github.com/openshift/kubernetes/pull/743)
* [Bug 1884800](https://bugzilla.redhat.com/show_bug.cgi?id=1884800): Reduce names of vsphere volumes even further [#701](https://github.com/openshift/kubernetes/pull/701)
* [Bug 1959471](https://bugzilla.redhat.com/show_bug.cgi?id=1959471): Conformance tests (sysctls) may not be excluded [#741](https://github.com/openshift/kubernetes/pull/741)
* [Bug 1923847](https://bugzilla.redhat.com/show_bug.cgi?id=1923847): openshift-kube-apiserver: use github.com/openshift/apiserver-library-go/pkg/labelselector [#708](https://github.com/openshift/kubernetes/pull/708)
* [Bug 1949105](https://bugzilla.redhat.com/show_bug.cgi?id=1949105): Reenable NetworkPolicy test. [#734](https://github.com/openshift/kubernetes/pull/734)
* [Bug 1957502](https://bugzilla.redhat.com/show_bug.cgi?id=1957502): UPSTREAM: <carry>: correct apirequestcount lock [#735](https://github.com/openshift/kubernetes/pull/735)
* [Bug 1956895](https://bugzilla.redhat.com/show_bug.cgi?id=1956895): UPSTREAM: 101593: kubelet: change cgroup move message to log level 3 [#732](https://github.com/openshift/kubernetes/pull/732)
* [Bug 1956898](https://bugzilla.redhat.com/show_bug.cgi?id=1956898): UPSTREAM: 99748: kubelet: fix log files being overwritten on containe… [#733](https://github.com/openshift/kubernetes/pull/733)
* [Bug 1949612](https://bugzilla.redhat.com/show_bug.cgi?id=1949612): UPSTREAM: 101708: Fix log spam for du failure on pod etc-hosts metrics [#729](https://github.com/openshift/kubernetes/pull/729)
* [Bug 1954696](https://bugzilla.redhat.com/show_bug.cgi?id=1954696): UPSTREAM: <carry>: add apirequestcount useragent [#716](https://github.com/openshift/kubernetes/pull/716)
* [Bug 1952666](https://bugzilla.redhat.com/show_bug.cgi?id=1952666): UPSTREAM: <carry>: management workloads enhancement 741(uint64) [#706](https://github.com/openshift/kubernetes/pull/706)
* [Bug 1953555](https://bugzilla.redhat.com/show_bug.cgi?id=1953555): UPSTREAM: <carry>: Skip GlusterFS tests [#723](https://github.com/openshift/kubernetes/pull/723)
* [Bug 1954770](https://bugzilla.redhat.com/show_bug.cgi?id=1954770): UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set [#717](https://github.com/openshift/kubernetes/pull/717)
* UPSTREAM: 101280: Bug 1913974: Force NodeUnstageVolume to finish for all distros [#700](https://github.com/openshift/kubernetes/pull/700)
* [Bug 1952224](https://bugzilla.redhat.com/show_bug.cgi?id=1952224): kubelet: do not cleanup volumes if pod is being killed [#709](https://github.com/openshift/kubernetes/pull/709)
* [Bug 1954972](https://bugzilla.redhat.com/show_bug.cgi?id=1954972): openshift-kube-apiserver/admission: fix featuregates resource name [#719](https://github.com/openshift/kubernetes/pull/719)
* [Bug 1954634](https://bugzilla.redhat.com/show_bug.cgi?id=1954634): UPSTREAM: <carry>: honor max users [#689](https://github.com/openshift/kubernetes/pull/689)
* [Bug 1951585](https://bugzilla.redhat.com/show_bug.cgi?id=1951585): Addresses build error pause [#685](https://github.com/openshift/kubernetes/pull/685)
* [Bug 1954638](https://bugzilla.redhat.com/show_bug.cgi?id=1954638): UPSTREAM: <carry>: apirequest count with empty .status.removedInRelease [#715](https://github.com/openshift/kubernetes/pull/715)
* [Bug 1927263](https://bugzilla.redhat.com/show_bug.cgi?id=1927263): UPSTREAM: 99336: kubelet: improve the node informer sync check [#704](https://github.com/openshift/kubernetes/pull/704)
* [Bug 1953555](https://bugzilla.redhat.com/show_bug.cgi?id=1953555): UPSTREAM: <carry>: Skip GlusterFS tests [#647](https://github.com/openshift/kubernetes/pull/647)
* [Bug 1953127](https://bugzilla.redhat.com/show_bug.cgi?id=1953127): Re-enable [Feature:NetworkPolicy] tests which were wrongly disabled in rebase [#655](https://github.com/openshift/kubernetes/pull/655)
* UPSTREAM: <drop>: update openshift/api for old API removal [#702](https://github.com/openshift/kubernetes/pull/702)
* UPSTREAM: <carry>: Provide a new admission plugin to mutate management pods CPUs requests [#632](https://github.com/openshift/kubernetes/pull/632)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 100959: DelegatingAuthenticationOptions: TokenReview reques… [#654](https://github.com/openshift/kubernetes/pull/654)
* [Bug 1948953](https://bugzilla.redhat.com/show_bug.cgi?id=1948953): UPSTREAM: <carry>: Set informer for openstack [#662](https://github.com/openshift/kubernetes/pull/662)
* [Bug 1952333](https://bugzilla.redhat.com/show_bug.cgi?id=1952333): UPSTREAM: 101306: Additional CVE-2021-3121 fix [#699](https://github.com/openshift/kubernetes/pull/699)
* [Bug 1945104](https://bugzilla.redhat.com/show_bug.cgi?id=1945104): UPSTREAM: 101186: Fix RBAC of generic ephemeral volumes controller [#694](https://github.com/openshift/kubernetes/pull/694)
* [Bug 1944631](https://bugzilla.redhat.com/show_bug.cgi?id=1944631): openshift authenticator: don't allow old-style tokens [#667](https://github.com/openshift/kubernetes/pull/667)
* [Bug 1937299](https://bugzilla.redhat.com/show_bug.cgi?id=1937299): Fix mounting partitions on NVMe devices [#661](https://github.com/openshift/kubernetes/pull/661)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101287: Fail fast when image is specified w/o tag [#693](https://github.com/openshift/kubernetes/pull/693)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101337: Remove Limits from scheduling e2e balanced pod reso… [#696](https://github.com/openshift/kubernetes/pull/696)
* [Bug 1951558](https://bugzilla.redhat.com/show_bug.cgi?id=1951558): UPSTREAM: 101093: Fix startupProbe behaviour changed [#687](https://github.com/openshift/kubernetes/pull/687)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: keep apirequestcounts for non-persisted users between updates [#684](https://github.com/openshift/kubernetes/pull/684)
* [Bug 1951042](https://bugzilla.redhat.com/show_bug.cgi?id=1951042): fix crash when killing container fails
 [#682](https://github.com/openshift/kubernetes/pull/682)
* [Bug 1934400](https://bugzilla.redhat.com/show_bug.cgi?id=1934400): bump(apiserver-library-go): scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged [#673](https://github.com/openshift/kubernetes/pull/673)
* [Bug 1949661](https://bugzilla.redhat.com/show_bug.cgi?id=1949661): UPSTREAM: <carry>: management pinning annotations [#627](https://github.com/openshift/kubernetes/pull/627)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: DeprecatedAPIRequestHandler unit tests [#675](https://github.com/openshift/kubernetes/pull/675)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: DeprecatedAPIRequest Log [#663](https://github.com/openshift/kubernetes/pull/663)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101147: Limit image spec's hash length [#674](https://github.com/openshift/kubernetes/pull/674)
* [Bug 1949721](https://bugzilla.redhat.com/show_bug.cgi?id=1949721): UPSTREAM: 99237: Use the audit ID of a request for better correlation [#672](https://github.com/openshift/kubernetes/pull/672)
* [Bug 1934085](https://bugzilla.redhat.com/show_bug.cgi?id=1934085): UPSTREAM: 100128: [sig-scheduling] SchedulerPreemption|SchedulerPredicates|SchedulerPriorities: adjust some e2e tests to run in a single node cluster scenario [#665](https://github.com/openshift/kubernetes/pull/665)
* BUG 1948703: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz [#656](https://github.com/openshift/kubernetes/pull/656)
* UPSTREAM: <carry>: Add Dockerfile to build pause image [#633](https://github.com/openshift/kubernetes/pull/633)
* <carry>: enable CSI migration gates in Attach/Detach controller [#601](https://github.com/openshift/kubernetes/pull/601)
* UPSTREAM: <carry>: bump tag version [#652](https://github.com/openshift/kubernetes/pull/652)
* UPSTREAM: <carry>: Disable CSI migration on OpenStack Cinder [#651](https://github.com/openshift/kubernetes/pull/651)
* KS with preferred host support [#638](https://github.com/openshift/kubernetes/pull/638)
* Rebase 1.21.0 rc.0 [#641](https://github.com/openshift/kubernetes/pull/641)
* Revert "UPSTREAM: 97295: Fix staticcheck in test/integration/{examples,framework}" [#648](https://github.com/openshift/kubernetes/pull/648)
* UPSTREAM: 97295: Fix staticcheck in test/integration/{examples,framework} [#644](https://github.com/openshift/kubernetes/pull/644)
* UPSTREAM: <carry>: rate limit initial watch storm from kubelets on apiserver restart [#629](https://github.com/openshift/kubernetes/pull/629)
* [Bug 1941000](https://bugzilla.redhat.com/show_bug.cgi?id=1941000): get AZ of cinder volume from cinder and not from metadata [#634](https://github.com/openshift/kubernetes/pull/634)
* upstream: 99817: Fix zero-value custom resource validation with go1.16 [#637](https://github.com/openshift/kubernetes/pull/637)
* UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#616](https://github.com/openshift/kubernetes/pull/616)
* improves the apiserver graceful shutdown procedure [#606](https://github.com/openshift/kubernetes/pull/606)
* Ensure multi-az test is run in the serial job [#626](https://github.com/openshift/kubernetes/pull/626)
* UPSTREAM: 96856: e2e network policy enclose IPv6 destinations [#628](https://github.com/openshift/kubernetes/pull/628)
* UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods [#609](https://github.com/openshift/kubernetes/pull/609)
* UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping [#598](https://github.com/openshift/kubernetes/pull/598)
* UPSTREAM: 91295: kubectl explain: detect resource group in case there… [#608](https://github.com/openshift/kubernetes/pull/608)
* use hardcoded authorizer for metrics [#588](https://github.com/openshift/kubernetes/pull/588)
* UPSTREAM: 96984: APF e2e: wait for steady state before proceeding [#599](https://github.com/openshift/kubernetes/pull/599)
* [Bug 1932097](https://bugzilla.redhat.com/show_bug.cgi?id=1932097): UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown [#594](https://github.com/openshift/kubernetes/pull/594)
* [Bug 1885717](https://bugzilla.redhat.com/show_bug.cgi?id=1885717): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#593](https://github.com/openshift/kubernetes/pull/593)
* UPSTREAM: 99199: delay serving CRD creates for a few seconds for HA consistency [#587](https://github.com/openshift/kubernetes/pull/587)
* [Bug 1931103](https://bugzilla.redhat.com/show_bug.cgi?id=1931103): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#584](https://github.com/openshift/kubernetes/pull/584)
* [Bug 1916489](https://bugzilla.redhat.com/show_bug.cgi?id=1916489): (e2e/scheduler) Ensure minimum memory limit in createBalancedPodForNodes [#526](https://github.com/openshift/kubernetes/pull/526)
* [Bug 1908378](https://bugzilla.redhat.com/show_bug.cgi?id=1908378): kubelet: fix create sandbox delete pod race [#580](https://github.com/openshift/kubernetes/pull/580)
* UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#578](https://github.com/openshift/kubernetes/pull/578)
* add failure details for SCC not used [#573](https://github.com/openshift/kubernetes/pull/573)
* [Bug 1897918](https://bugzilla.redhat.com/show_bug.cgi?id=1897918): UPSTREAM: 93861: apiserver: add --permit-address-sharing flag to listen with SO_REUSEADDR [#309](https://github.com/openshift/kubernetes/pull/309)
* [Bug 1876918](https://bugzilla.redhat.com/show_bug.cgi?id=1876918): Move deferred taint cleanup call to ensure all are removed [#513](https://github.com/openshift/kubernetes/pull/513)
* [Bug 1927391](https://bugzilla.redhat.com/show_bug.cgi?id=1927391): UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady [#564](https://github.com/openshift/kubernetes/pull/564)
* [Bug 1926484](https://bugzilla.redhat.com/show_bug.cgi?id=1926484): UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#558](https://github.com/openshift/kubernetes/pull/558)
* [Bug 1926285](https://bugzilla.redhat.com/show_bug.cgi?id=1926285): UPSTREAM: <carry>: ignore not found errors in status messages [#557](https://github.com/openshift/kubernetes/pull/557)
* [Bug 1925493](https://bugzilla.redhat.com/show_bug.cgi?id=1925493): Enable snapshot tests [#555](https://github.com/openshift/kubernetes/pull/555)
* [Bug 1896558](https://bugzilla.redhat.com/show_bug.cgi?id=1896558): Balance nodes in scheduling e2e [#547](https://github.com/openshift/kubernetes/pull/547)
* Update the kubelet log pod status to level 6 as it is so big [#100573](https://github.com/openshift/kubernetes/pull/100573)
* Update image base to `gcr.io/distroless/base-debian10:latest` [#100566](https://github.com/openshift/kubernetes/pull/100566)
* Add KUBE_BUILD_CONFORMANCE on package-tarballs target [#100571](https://github.com/openshift/kubernetes/pull/100571)
* Fix deployment lifecycle test issue [#100191](https://github.com/openshift/kubernetes/pull/100191)
* add a verify equivilant to prometheus visibility rules [#100552](https://github.com/openshift/kubernetes/pull/100552)
* Revert #97417 "fix azure file secret not found issue" [#100563](https://github.com/openshift/kubernetes/pull/100563)
* job controller: don't mutate shared cache object [#100553](https://github.com/openshift/kubernetes/pull/100553)
* staging/publishing: add branch-specific smoke tests [#100554](https://github.com/openshift/kubernetes/pull/100554)
* Add e2e test to validate performance metrics of volume lifecycle operations [#94334](https://github.com/openshift/kubernetes/pull/94334)
* Fix check before deleting PV in Snapshot e2e test [#100549](https://github.com/openshift/kubernetes/pull/100549)
* storage e2e: verify CSIStorageCapacity publishing [#100537](https://github.com/openshift/kubernetes/pull/100537)
* fix a data race in volume reconciler ut #99815 [#100215](https://github.com/openshift/kubernetes/pull/100215)
* Remove SELinuxOptions double setup in pod spec [#100540](https://github.com/openshift/kubernetes/pull/100540)
* Fix the wrong judgment of oom_score_adj [#100519](https://github.com/openshift/kubernetes/pull/100519)
* Prevent nil-pointer exception when constructing PrinterFlags [#100502](https://github.com/openshift/kubernetes/pull/100502)
* test/utils/image: remove listx from OWNERS [#100464](https://github.com/openshift/kubernetes/pull/100464)
* add integration test for suspended jobs [#100295](https://github.com/openshift/kubernetes/pull/100295)
* Fixed kubectl describe ingress causing SEGFAULT if API Group is not specified [#100505](https://github.com/openshift/kubernetes/pull/100505)
* add normalize function to global FlagSet [#100171](https://github.com/openshift/kubernetes/pull/100171)
* kubelet_test: Deflake TestWatchFileChanged [#99926](https://github.com/openshift/kubernetes/pull/99926)
* Fix a panic in "e2e.test --help" [#100362](https://github.com/openshift/kubernetes/pull/100362)
* Mark v1beta1 EndpointSlice deprecated in favor of v1 [#100472](https://github.com/openshift/kubernetes/pull/100472)
* apf PostStartHook: handle error from PollImmediateUntil [#100254](https://github.com/openshift/kubernetes/pull/100254)
* Fix nil ptr dereference in log line [#100465](https://github.com/openshift/kubernetes/pull/100465)
* Ensure providerless kubelet does not pull cloud providers [#100438](https://github.com/openshift/kubernetes/pull/100438)
* Add Etcd compatibility test [#99873](https://github.com/openshift/kubernetes/pull/99873)
* Fix the containerd service check to register it [#100417](https://github.com/openshift/kubernetes/pull/100417)
* webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup [#95783](https://github.com/openshift/kubernetes/pull/95783)
* Tighten DS rollout catching function [#100345](https://github.com/openshift/kubernetes/pull/100345)
* Fix structured logs for  pkg/kubelet/network/dns/dns.go [#100393](https://github.com/openshift/kubernetes/pull/100393)
* Promote EndpointSlice API test to Conformance [#100418](https://github.com/openshift/kubernetes/pull/100418)
* Speed up PV provisioning for vsphere driver [#100054](https://github.com/openshift/kubernetes/pull/100054)
* test image: bump agnhost version to 2.30 [#100410](https://github.com/openshift/kubernetes/pull/100410)
* agnhost: increase dns timeout from 5 seconds to 20 seconds [#100359](https://github.com/openshift/kubernetes/pull/100359)
* Run GCE unit tests as non-root [#100368](https://github.com/openshift/kubernetes/pull/100368)
* Add ability to skip OpenAPI handler installation [#100341](https://github.com/openshift/kubernetes/pull/100341)
* Mark kubelet structured logs as migrated [#100320](https://github.com/openshift/kubernetes/pull/100320)
* Fix E2E node reboot test flake [#100300](https://github.com/openshift/kubernetes/pull/100300)
* update dual-stack test description to remove alpha [#100189](https://github.com/openshift/kubernetes/pull/100189)
* Update busybox that includes windows nltest [#100383](https://github.com/openshift/kubernetes/pull/100383)
* add verify-e2e-test-ownership.sh [#99698](https://github.com/openshift/kubernetes/pull/99698)
* Revert "Promote SizeMemoryBackedVolumeSizing to beta" [#100346](https://github.com/openshift/kubernetes/pull/100346)
* Snapshot e2e test: wait for the node to stop using a volume before taking a snapshot [#100057](https://github.com/openshift/kubernetes/pull/100057)
* Migrate pkg/kubelet/kubelet.go to structured logging [#99861](https://github.com/openshift/kubernetes/pull/99861)
* test images: Fixes Windows busybox image [#100337](https://github.com/openshift/kubernetes/pull/100337)
* Migrate pkg/kubelet/kuberuntime to structured logging [#99970](https://github.com/openshift/kubernetes/pull/99970)
* Structured Logging migration: modify volume and container part logs o… [#98850](https://github.com/openshift/kubernetes/pull/98850)
* Promote SizeMemoryBackedVolumes to beta [#100319](https://github.com/openshift/kubernetes/pull/100319)
* logcheck: pass all packages at once to logcheck [#100246](https://github.com/openshift/kubernetes/pull/100246)
* Migrating pkg/kubelet/winstats to structured logging [#99855](https://github.com/openshift/kubernetes/pull/99855)
* Convert cmd/kubelet/app/server.go to structured logging [#98334](https://github.com/openshift/kubernetes/pull/98334)
* Structured Logging migration: modify cri  part logs of kubelet. [#99006](https://github.com/openshift/kubernetes/pull/99006)
* test images: powershell-helper linux cache [#99866](https://github.com/openshift/kubernetes/pull/99866)
* Promote ServiceStatus lifecycle e2e test to Conformance  +4 endpoint coverage [#100290](https://github.com/openshift/kubernetes/pull/100290)
* Migrate pkg/kubelet/cm/cpumanage/{topology/togit pology.go, policy_none.go, cpu_assignment.go} to structured logging [#100163](https://github.com/openshift/kubernetes/pull/100163)
* Update containerd config for gce [#99971](https://github.com/openshift/kubernetes/pull/99971)
* Migrate pkg/kubelet/kubeletconfig to structured logging [#100265](https://github.com/openshift/kubernetes/pull/100265)
* Replicate update/patch operations from eviction test in conformance CRUD test [#100260](https://github.com/openshift/kubernetes/pull/100260)
* Kubelet migration to structured logs: cpumanager/{cpu_manager.go\fake_cpu_manager.go\policy_static.go) [#100176](https://github.com/openshift/kubernetes/pull/100176)
* Migrate pkg/kubelet/cm/cgroup_manager_linux.go to structured logging [#100081](https://github.com/openshift/kubernetes/pull/100081)
* Migrate remaining pkg/kubelet/cm/ top level files to structured logging [#100007](https://github.com/openshift/kubernetes/pull/100007)
* migrate kubelet/cm/container logs to structured logging [#100001](https://github.com/openshift/kubernetes/pull/100001)
* Migrate cmd/kubelet and pkg/kubelet/cadvisor , pkg/kubelet/cri/remote/util , pkg/kubelet/images to structured logging [#99994](https://github.com/openshift/kubernetes/pull/99994)
* Migrate pkg/kubelet/cm/memorymanager to structured logging [#99974](https://github.com/openshift/kubernetes/pull/99974)
* Migrate pkg/kubelet/cm/topologymanager to structure logging [#99969](https://github.com/openshift/kubernetes/pull/99969)
* agnhost: resolve service account issuer URL before invoking oidc.NewProvider [#99860](https://github.com/openshift/kubernetes/pull/99860)
* Migrate kubelet/preemption and kubelet/logs to structured logging [#99848](https://github.com/openshift/kubernetes/pull/99848)
* Migrate pkg/kubelet/prober to structured logging [#99830](https://github.com/openshift/kubernetes/pull/99830)
* Enable scheduler_perf to support scheduler config file [#99638](https://github.com/openshift/kubernetes/pull/99638)
* Migrate pkg/kubelet/cm/cpumanager/state to structured logging [#99563](https://github.com/openshift/kubernetes/pull/99563)
* Fix kubelet log format flag error [#99289](https://github.com/openshift/kubernetes/pull/99289)
* revert removal of gcr.io/gke-release from pr #100179 [#100303](https://github.com/openshift/kubernetes/pull/100303)
* Migrate remaining logs to structured logging [#100196](https://github.com/openshift/kubernetes/pull/100196)
* kubelet: Fix the bug of getting the number of windows cpu [#97378](https://github.com/openshift/kubernetes/pull/97378)
* Add more details to daemon set test [#100310](https://github.com/openshift/kubernetes/pull/100310)
* fix scheduler queue update logic [#98829](https://github.com/openshift/kubernetes/pull/98829)
* fix cluster util.sh unbound variable [#99990](https://github.com/openshift/kubernetes/pull/99990)
* Run pause image as non-root user and group [#97963](https://github.com/openshift/kubernetes/pull/97963)
* Fix structured logging for kuberuntime_manger.go [#99999](https://github.com/openshift/kubernetes/pull/99999)
* Refactor on windows e2e storage related tests [#99888](https://github.com/openshift/kubernetes/pull/99888)
* Fix incorrect authentication latency metric [#99944](https://github.com/openshift/kubernetes/pull/99944)
* Build conformance image when building via `cross` or `cross-in-a-container` [#100251](https://github.com/openshift/kubernetes/pull/100251)
* use Patch API to add namespace label [#100199](https://github.com/openshift/kubernetes/pull/100199)
* Migrate pkg/kubelet/config to structured logging [#100002](https://github.com/openshift/kubernetes/pull/100002)
* Migrate pkg/kubelet/cm/devicemanager to structured logging [#99976](https://github.com/openshift/kubernetes/pull/99976)
* Structured Logging migration: modify node and pod part logs of kubelet. [#98847](https://github.com/openshift/kubernetes/pull/98847)
* disable flaky TestClientReceivedGOAWAY test case [#100250](https://github.com/openshift/kubernetes/pull/100250)
* Only default Job fields when feature gates are enabled [#100188](https://github.com/openshift/kubernetes/pull/100188)
* Include nltest in the windows busybox image [#99670](https://github.com/openshift/kubernetes/pull/99670)
* test: remove gcr.io/gke-release since it is deprecated [#100179](https://github.com/openshift/kubernetes/pull/100179)
* kubeadm unit test initalize global variables [#100201](https://github.com/openshift/kubernetes/pull/100201)
* remove e2e volume registry as it is not used [#100121](https://github.com/openshift/kubernetes/pull/100121)
* Split upgrade tests into sig-owned directories [#100214](https://github.com/openshift/kubernetes/pull/100214)
* initialise capabilities unit test [#100203](https://github.com/openshift/kubernetes/pull/100203)
* Update list of migrated directories [#100204](https://github.com/openshift/kubernetes/pull/100204)
* Remove double-ownership of PV ResourceQuota tests [#100173](https://github.com/openshift/kubernetes/pull/100173)
* Upgrade klog to avoid panics crashing components [#100156](https://github.com/openshift/kubernetes/pull/100156)
* e2e/common/node: tag tests with MinimumKubeletVersion [#100050](https://github.com/openshift/kubernetes/pull/100050)
* Move GPU upgrade tests to node directory [#100172](https://github.com/openshift/kubernetes/pull/100172)
* sched: fix a bug that literal 'p99' is mapped to 95th-percentile [#100193](https://github.com/openshift/kubernetes/pull/100193)
* logcheck: check Windows files [#99996](https://github.com/openshift/kubernetes/pull/99996)
* Add Probe-level terminationGracePeriodSeconds [#99375](https://github.com/openshift/kubernetes/pull/99375)
* Write to unique file to avoid conflicts with other tests [#100154](https://github.com/openshift/kubernetes/pull/100154)
* Check Kubelet is running with correct Windows Permissions [#96616](https://github.com/openshift/kubernetes/pull/96616)
* Rolling back PR 100027 [#100107](https://github.com/openshift/kubernetes/pull/100107)
* Migrate `pkg/kubelet/lifecycle,oom` to structured logging [#99479](https://github.com/openshift/kubernetes/pull/99479)
* graduate CSIServiceAccountToken to beta [#99298](https://github.com/openshift/kubernetes/pull/99298)
* migrate file kubelet_node_status.go logs to structured logging and fix error description of reconcileHugePageResource log [#98154](https://github.com/openshift/kubernetes/pull/98154)
* rename apiserver_storage_object_counts to apiserver_storage_objects [#100082](https://github.com/openshift/kubernetes/pull/100082)
* Migrate pkg/kubelet/pluginmanager to structured logging [#99885](https://github.com/openshift/kubernetes/pull/99885)
* Rename job completion index annotation to not contain alpha [#100147](https://github.com/openshift/kubernetes/pull/100147)
* Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY [#99592](https://github.com/openshift/kubernetes/pull/99592)
* Further refactoring of upgrade tests and removal of etcd upgrade tests which isn't even run [#100137](https://github.com/openshift/kubernetes/pull/100137)
* sched: fix a bug that metrics of init or collected pods are re-collected [#99472](https://github.com/openshift/kubernetes/pull/99472)
* Add GLBC roles for IngressClass & GCPIngressParams [#99965](https://github.com/openshift/kubernetes/pull/99965)
* Introduce a churnOp to scheduler perf testing framework [#98900](https://github.com/openshift/kubernetes/pull/98900)
* e2e fix: loosen newTestResourceQuota to 10 configmaps [#100056](https://github.com/openshift/kubernetes/pull/100056)
* Split upgrade tests logic to generic and provider-specific [#100030](https://github.com/openshift/kubernetes/pull/100030)
* Add Extract support to client-go apply builders [#99759](https://github.com/openshift/kubernetes/pull/99759)
* Network Tests: bind host network udp listeners to hostIPs [#98884](https://github.com/openshift/kubernetes/pull/98884)
* Revert SSA GA [#100108](https://github.com/openshift/kubernetes/pull/100108)
* Updating EndpointSlice controllers to avoid duplicate creations [#100103](https://github.com/openshift/kubernetes/pull/100103)
* Remove retry in TestSubresourcePatch [#100099](https://github.com/openshift/kubernetes/pull/100099)
* Promote PDB CRUD e2e tests to conformance [#100092](https://github.com/openshift/kubernetes/pull/100092)
* delegated authn: allow client CA override based on non-empty opts [#100055](https://github.com/openshift/kubernetes/pull/100055)
* Ensure only one LoadBalancer rule is created when HA mode is enabled [#99825](https://github.com/openshift/kubernetes/pull/99825)
* Update to go1.16.1 [#100106](https://github.com/openshift/kubernetes/pull/100106)
* Fix staticcheck in test/integration/{garbagecollector,scheduler_perf} [#97779](https://github.com/openshift/kubernetes/pull/97779)
* Moving docker options to daemon.json [#95655](https://github.com/openshift/kubernetes/pull/95655)
* (integration) adjust the test's client-side detection of a successful timeout case to include the connection reset [#98797](https://github.com/openshift/kubernetes/pull/98797)
* Get filesystem stats for files on Windows [#99221](https://github.com/openshift/kubernetes/pull/99221)
* add ineligible_endpoints.yaml [#98677](https://github.com/openshift/kubernetes/pull/98677)
* support additional WHAT= when building release-images / quick-release… [#100046](https://github.com/openshift/kubernetes/pull/100046)
* Add Endpoint Slice API Test [#100045](https://github.com/openshift/kubernetes/pull/100045)
* For LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP [#99958](https://github.com/openshift/kubernetes/pull/99958)
* kubectl default container behavior [#99833](https://github.com/openshift/kubernetes/pull/99833)
* Server-Side Apply status wiping [#99661](https://github.com/openshift/kubernetes/pull/99661)
* Promote SSA to GA [#99652](https://github.com/openshift/kubernetes/pull/99652)
* (KEP-2436) implementation of leader migration for controller manager. [#96541](https://github.com/openshift/kubernetes/pull/96541)
* Revert : conformance: promote container exec probe timeout tests [#100036](https://github.com/openshift/kubernetes/pull/100036)
* move nodeaffinity helpers to component-helpers package (only impact s… [#100034](https://github.com/openshift/kubernetes/pull/100034)
* Add Windows Defender exclusion for unpigz.exe [#100029](https://github.com/openshift/kubernetes/pull/100029)
* fix flake integration test endpoint slice mirroring updates [#100027](https://github.com/openshift/kubernetes/pull/100027)
* add duration encoder to structured logger [#100013](https://github.com/openshift/kubernetes/pull/100013)
* generic ephemeral volume beta [#99643](https://github.com/openshift/kubernetes/pull/99643)
* Remove --ignore-errors flag deprecated warning message [#99396](https://github.com/openshift/kubernetes/pull/99396)
* postpone ExecProbeTimeout locking for at least 1 release based on use… [#100023](https://github.com/openshift/kubernetes/pull/100023)
* Add kubectl describe for policy/v1 PDB [#100014](https://github.com/openshift/kubernetes/pull/100014)
* Adding new EndpointsOverCapacity annotation for Endpoints controller [#99975](https://github.com/openshift/kubernetes/pull/99975)
* provide directly decodable versions for storageversion API [#99951](https://github.com/openshift/kubernetes/pull/99951)
* refine validation [#99946](https://github.com/openshift/kubernetes/pull/99946)
* Fix completed indexed job with repeated indexes [#99865](https://github.com/openshift/kubernetes/pull/99865)
* Make sure the GMSA output doesn't have failures when resolving the domain [#99862](https://github.com/openshift/kubernetes/pull/99862)
* Change KUBE_PARALLEL_BUILD_MEMORY to 20 GiB [#99773](https://github.com/openshift/kubernetes/pull/99773)
* Count pod overhead against an entity's ResourceQuota [#99600](https://github.com/openshift/kubernetes/pull/99600)
* feature: add CSIVolumeHealth feature and gate [#99284](https://github.com/openshift/kubernetes/pull/99284)
* Fixed set env did not support keys with dot in it [#98846](https://github.com/openshift/kubernetes/pull/98846)
* ServerSideApply E2E tests [#98034](https://github.com/openshift/kubernetes/pull/98034)
* don't delete pod from desiredStateOfWorld when pod's sandbox is running [#97659](https://github.com/openshift/kubernetes/pull/97659)
* Transfer ownership of logging analysis configuration to sig-security. [#97168](https://github.com/openshift/kubernetes/pull/97168)
* Promote PodDisruptionBudget e2e test to Conformance [#84740](https://github.com/openshift/kubernetes/pull/84740)
* podresources APIs: concrete resources apis: implement GetAllocatableResources [#95734](https://github.com/openshift/kubernetes/pull/95734)
* Scheduler/plugins/nodelabel fix no label preference [#99995](https://github.com/openshift/kubernetes/pull/99995)
* Refactor upgrade tests in preparation for explicit ownership [#99992](https://github.com/openshift/kubernetes/pull/99992)
* Fix batch/v1 CronJob support in create, describe and polymorphichelpers [#99991](https://github.com/openshift/kubernetes/pull/99991)
* vendor: cAdvisor v0.39.0 [#99875](https://github.com/openshift/kubernetes/pull/99875)
* metrics: etcd_object_counts->apiserver_storage_object_counts(stable) [#99785](https://github.com/openshift/kubernetes/pull/99785)
* Scheduler: make parallelism as part of schedulerOptions [#99644](https://github.com/openshift/kubernetes/pull/99644)
* Migrate cluster role aggregator to apply [#99462](https://github.com/openshift/kubernetes/pull/99462)
* fix: use pv annotation to trigger filesystem resize when necessary [#99326](https://github.com/openshift/kubernetes/pull/99326)
* Promote PodDisruptionBudget to policy/v1 [#99290](https://github.com/openshift/kubernetes/pull/99290)
* Pass cpuset.mems to the dockershim during container creation [#100006](https://github.com/openshift/kubernetes/pull/100006)
* Enable, rate limit, and test APF controller fights [#99935](https://github.com/openshift/kubernetes/pull/99935)
* Log invalid scheduler-policy input instead of panic [#99671](https://github.com/openshift/kubernetes/pull/99671)
* Adding support for Topology Aware Hints [#99522](https://github.com/openshift/kubernetes/pull/99522)
* Relax csiNodeIDMaxLength to longer limit [#98753](https://github.com/openshift/kubernetes/pull/98753)
* Fix case of Age column in kubectl describe node [#96963](https://github.com/openshift/kubernetes/pull/96963)
* remove unused third_party/intemp [#99980](https://github.com/openshift/kubernetes/pull/99980)
* Move test specific option setting to the test file [#99297](https://github.com/openshift/kubernetes/pull/99297)
* network: Self nominate cmluciano approver for sig-network [#98191](https://github.com/openshift/kubernetes/pull/98191)
* Refactor CSI migration plugin manager to get featureGates as a parameter [#99942](https://github.com/openshift/kubernetes/pull/99942)
* Move ownership of core events test to sig-instrumentation [#99495](https://github.com/openshift/kubernetes/pull/99495)
* fix json log format panic, change the flag name in flagIsSet [#99257](https://github.com/openshift/kubernetes/pull/99257)
* Make proxy Transport return metav1.Status error [#98841](https://github.com/openshift/kubernetes/pull/98841)
* enable goaway testcases [#98809](https://github.com/openshift/kubernetes/pull/98809)
* Migrate prober.probe logs to structured logging [#97093](https://github.com/openshift/kubernetes/pull/97093)
* Cleanup: Provides capacity for make slice [#98635](https://github.com/openshift/kubernetes/pull/98635)
* Capture logs from containerd-installation service [#99912](https://github.com/openshift/kubernetes/pull/99912)
* Add jingxu97 to volumemanager owner [#99620](https://github.com/openshift/kubernetes/pull/99620)
* kubelet: migrate pkg/kubelet/cloudresource to structured logging [#98999](https://github.com/openshift/kubernetes/pull/98999)
* Apply context to restclient and serviceaccount metrics [#98973](https://github.com/openshift/kubernetes/pull/98973)
* Move credential provider code to staging/ [#95775](https://github.com/openshift/kubernetes/pull/95775)
* Promote Endpoint Slice E2E Tests to Conformance [#99916](https://github.com/openshift/kubernetes/pull/99916)
* add if check for number of scheduled pods to be greater than 0 [#99844](https://github.com/openshift/kubernetes/pull/99844)
* dockershim: fix started and finished timestamp of the container status [#99585](https://github.com/openshift/kubernetes/pull/99585)
* Upgrade kustomize-in-kubectl to v4.0.5 [#98946](https://github.com/openshift/kubernetes/pull/98946)
* slice mirroring controller should mirror annotations (but endpoints.kubernetes.io/last-change-trigger-time annotation) and labels [#98116](https://github.com/openshift/kubernetes/pull/98116)
* Add v1 describers for EndpointSlice [#99962](https://github.com/openshift/kubernetes/pull/99962)
* switch most e2e tests to storage/v1 over v1beta1 [#99954](https://github.com/openshift/kubernetes/pull/99954)
* Promote ReplicaSet Replace and Patch Test +2 Endpoints [#99952](https://github.com/openshift/kubernetes/pull/99952)
* implement EnqueueExtensions interface in noderesources [#99922](https://github.com/openshift/kubernetes/pull/99922)
* Replace klog with with testing.T logging in pkg/kubelet tests [#99859](https://github.com/openshift/kubernetes/pull/99859)
* Stop using SIGDescribe for upgrade tests to reflect reality [#99857](https://github.com/openshift/kubernetes/pull/99857)
* Cleanup the remaining multi-owned sig-node tests [#99853](https://github.com/openshift/kubernetes/pull/99853)
* Cleanup test/e2e/upgrades directory [#99852](https://github.com/openshift/kubernetes/pull/99852)
* Migrate pkg/kubelet/status to structured logging [#99836](https://github.com/openshift/kubernetes/pull/99836)
* cleanup: wrap the apiserver identity validation [#99573](https://github.com/openshift/kubernetes/pull/99573)
* Migrate pkg/kubelet/token to structured logging [#99264](https://github.com/openshift/kubernetes/pull/99264)
* skip checking nodeport on external addrs in conformance tests [#98791](https://github.com/openshift/kubernetes/pull/98791)
* Enabling runtime config on E2E node tests [#99960](https://github.com/openshift/kubernetes/pull/99960)
* Adding dims as approver for test/ [#99941](https://github.com/openshift/kubernetes/pull/99941)
* Migrate pkg/kubelet/kuberuntime/kuberuntime_manager.go to structured logging [#99841](https://github.com/openshift/kubernetes/pull/99841)
* Migrate pkg/kubelet/server to structured logging [#99838](https://github.com/openshift/kubernetes/pull/99838)
* Migrate pkg/kubelet/util to structured logging [#99823](https://github.com/openshift/kubernetes/pull/99823)
* Refactor pods format to return ObjRef slice [#99799](https://github.com/openshift/kubernetes/pull/99799)
* Use the correct volum handle format for GCE regional PD. [#99169](https://github.com/openshift/kubernetes/pull/99169)
* batch API: add suspended job [#98727](https://github.com/openshift/kubernetes/pull/98727)
* CSIStorageCapacity beta API [#99641](https://github.com/openshift/kubernetes/pull/99641)
* Mark openstack/cinder csi migrations as GA [#98538](https://github.com/openshift/kubernetes/pull/98538)
* Add integration test for disabled ephemeral containers [#98067](https://github.com/openshift/kubernetes/pull/98067)
* Revert "Revert "fix a bug where only service with less than 100 ports can have GCE lo… [#99858](https://github.com/openshift/kubernetes/pull/99858)
* update cluster/dns/coredns to 1.8.0 as kubeadm [#99752](https://github.com/openshift/kubernetes/pull/99752)
* Move CRIContainerLogRotation to GA [#99651](https://github.com/openshift/kubernetes/pull/99651)
* Use %w instead of %v to format errors [#99389](https://github.com/openshift/kubernetes/pull/99389)
* promote apiserver_request_duration_seconds to STABLE [#99925](https://github.com/openshift/kubernetes/pull/99925)
* test: err more towards ignoring logs from terminated pods [#99204](https://github.com/openshift/kubernetes/pull/99204)
* fix race condition problem in streamwatcher [#98653](https://github.com/openshift/kubernetes/pull/98653)
* Service Internal Traffic Policy [#96600](https://github.com/openshift/kubernetes/pull/96600)
* update agnhost readme [#99939](https://github.com/openshift/kubernetes/pull/99939)
* Move VolumeBinding plugin args validation to apis/config/validation [#99835](https://github.com/openshift/kubernetes/pull/99835)
* remove more CRD v1beta1 client dependencies from test integration [#99800](https://github.com/openshift/kubernetes/pull/99800)
* promote AllowInsecureBackendProxy to stable [#99658](https://github.com/openshift/kubernetes/pull/99658)
* reduce configmap and secret watch of kubelet [#99393](https://github.com/openshift/kubernetes/pull/99393)
* Update controlplane to use EndpointSlice V1 API [#99879](https://github.com/openshift/kubernetes/pull/99879)
* Support specifying more than 5 ports in L4 ILB service [#99595](https://github.com/openshift/kubernetes/pull/99595)
* Deflake TestPrepareRun [#99908](https://github.com/openshift/kubernetes/pull/99908)
* Add discovery and flowcontrol compatibility API data [#99871](https://github.com/openshift/kubernetes/pull/99871)
* add operator for allocateMemory.available signal [#97493](https://github.com/openshift/kubernetes/pull/97493)
* cleanup more bazel references [#99923](https://github.com/openshift/kubernetes/pull/99923)
* Revert "Surface more information about plugin scores in scheduler" [#99914](https://github.com/openshift/kubernetes/pull/99914)
* PSP ephemeral volume validation [#98918](https://github.com/openshift/kubernetes/pull/98918)
* cleanup bazel build files in-tree with make clean [#99882](https://github.com/openshift/kubernetes/pull/99882)
* kubectl explain: detect resource group in case there are two or more groups discovered [#91295](https://github.com/openshift/kubernetes/pull/91295)
* kubeadm: add missing toleration for upgrade health check [#99904](https://github.com/openshift/kubernetes/pull/99904)
* update verify-shellcheck to v0.7.1, fix nits, multi-arch digest pinning, fix new lint errors [#99905](https://github.com/openshift/kubernetes/pull/99905)
* Add Apply to client-go's typed client [#99214](https://github.com/openshift/kubernetes/pull/99214)
* Reset managedFields corrupted by admission controllers [#98074](https://github.com/openshift/kubernetes/pull/98074)
* Graduate EndpointSlice Controllers to GA [#99870](https://github.com/openshift/kubernetes/pull/99870)
* Add test timeout to mutation detector test [#99907](https://github.com/openshift/kubernetes/pull/99907)
* fix gosimple lint check [#99890](https://github.com/openshift/kubernetes/pull/99890)
* image util unbound variable [#99889](https://github.com/openshift/kubernetes/pull/99889)
* Drop deprecated run flags and deprecate unused ones [#99732](https://github.com/openshift/kubernetes/pull/99732)
* Graduate EndpointSlice API to GA [#99662](https://github.com/openshift/kubernetes/pull/99662)
* Add namespace scoped ParametersReference to IngressClass [#99275](https://github.com/openshift/kubernetes/pull/99275)
* Promote cronjob e2es to conformance [#99851](https://github.com/openshift/kubernetes/pull/99851)
* fix wrong NumCPU in kube-proxy under static CPU policy [#99613](https://github.com/openshift/kubernetes/pull/99613)
* Update flaky volume toleration regex to include projected volumes [#99898](https://github.com/openshift/kubernetes/pull/99898)
* Add golang env setup to node e2e [#99874](https://github.com/openshift/kubernetes/pull/99874)
* Update kube-addon-manager to v9.1.4 [#99822](https://github.com/openshift/kubernetes/pull/99822)
* Merge tests for getPodsForJob [#99806](https://github.com/openshift/kubernetes/pull/99806)
* Simplify cronjob v2 controller tests [#99791](https://github.com/openshift/kubernetes/pull/99791)
* promote apiserver_request_total to STABLE status [#99788](https://github.com/openshift/kubernetes/pull/99788)
* Update gce Containerd initialization to handle the runtime existence case [#99742](https://github.com/openshift/kubernetes/pull/99742)
* Clean unused generators [#99733](https://github.com/openshift/kubernetes/pull/99733)
* Make runtime.NewFramework accept KubeSchedulerProfile [#99731](https://github.com/openshift/kubernetes/pull/99731)
* remove listx from OWNERS [#99718](https://github.com/openshift/kubernetes/pull/99718)
* Make all health checks probing consistent [#98376](https://github.com/openshift/kubernetes/pull/98376)
* e2e testing for hugepages downward api [#99612](https://github.com/openshift/kubernetes/pull/99612)
* Logarithmic timestamp comparison for downscaling [#99212](https://github.com/openshift/kubernetes/pull/99212)
* DaemonSet controller respects MaxSurge during update [#96441](https://github.com/openshift/kubernetes/pull/96441)
* Switch to batch/v1 in cronjob's e2es [#99197](https://github.com/openshift/kubernetes/pull/99197)
* Use protobuf for kubectl top [#96655](https://github.com/openshift/kubernetes/pull/96655)
* Add tool to check use of unstructured logs [#99090](https://github.com/openshift/kubernetes/pull/99090)
* Agnhost: make it possible to pass the addresses to listen on for udp [#98883](https://github.com/openshift/kubernetes/pull/98883)
* Add request value verification for hugepage [#98515](https://github.com/openshift/kubernetes/pull/98515)
* Optimization log: add containerName to log [#96973](https://github.com/openshift/kubernetes/pull/96973)
* Get Windows Process time correctly [#97491](https://github.com/openshift/kubernetes/pull/97491)
* Promote kubelet graceful node shutdown to beta [#99735](https://github.com/openshift/kubernetes/pull/99735)
* Prioritizing nodes based on volume capacity [#96347](https://github.com/openshift/kubernetes/pull/96347)
* migrate proxy/userspace/proxier.go logs to structured logging [#97837](https://github.com/openshift/kubernetes/pull/97837)
* Fix flake #99821: reduce fuzz runs 50 to 3 per apply config type [#99847](https://github.com/openshift/kubernetes/pull/99847)
* kubectl: exec and attach break scripting and should honor `--quiet` [#99004](https://github.com/openshift/kubernetes/pull/99004)
* Re-clarify NetworkPolicy policyTypes in docs [#97216](https://github.com/openshift/kubernetes/pull/97216)
* Tag storage windows tests with [Feature:Windows] instead of [sig-windows] [#99701](https://github.com/openshift/kubernetes/pull/99701)
* new kube-proxy iptables metric to expose then number of iptables rules [#99653](https://github.com/openshift/kubernetes/pull/99653)
* Switch cronjob controller to batch/v1 [#99423](https://github.com/openshift/kubernetes/pull/99423)
* Revert "fix a bug where only service with less than 100 ports can hav… [#99837](https://github.com/openshift/kubernetes/pull/99837)
* Fix zero-value custom resource validation with go1.16 [#99817](https://github.com/openshift/kubernetes/pull/99817)
* Windows: Fixes /etc/hosts file mounting support for containerd [#83730](https://github.com/openshift/kubernetes/pull/83730)
* Scheduler: remove direct dependency for k8s.io/kubernetes/pkg/util/node [#97818](https://github.com/openshift/kubernetes/pull/97818)
* Unify determination of whether a volume is ephemeral [#78648](https://github.com/openshift/kubernetes/pull/78648)
* fix staticcheck for k8s.io/apiserver/pkg/endpoints [#99525](https://github.com/openshift/kubernetes/pull/99525)
* remove duplicate default message for some flag [#99248](https://github.com/openshift/kubernetes/pull/99248)
* Add LoadBalancerClass field in service [#98277](https://github.com/openshift/kubernetes/pull/98277)
* Add conditions to PDB status [#98127](https://github.com/openshift/kubernetes/pull/98127)
* update node local dns to 1.17.0 for IPv6 support/hosts/trace plugins [#99749](https://github.com/openshift/kubernetes/pull/99749)
* fix a bug where only service with less than 100 ports can have GCE LB [#99743](https://github.com/openshift/kubernetes/pull/99743)
* tests: Uses newly promoted httpd and nginx images [#99703](https://github.com/openshift/kubernetes/pull/99703)
* Update Staging's README.md [#99456](https://github.com/openshift/kubernetes/pull/99456)
* fix kubectl patch command error message [#98749](https://github.com/openshift/kubernetes/pull/98749)
* banish .shellcheck_failures [#99816](https://github.com/openshift/kubernetes/pull/99816)
* disable colors in zeitgeist so as not to break shell2junit [#99810](https://github.com/openshift/kubernetes/pull/99810)
* Fix the image path of resource-consumer in README. [#99797](https://github.com/openshift/kubernetes/pull/99797)
* Fix or remove tests that don't work in race mode [#99782](https://github.com/openshift/kubernetes/pull/99782)
* Remove unused field in test/e2e/kubectl/kubectl.go [#99293](https://github.com/openshift/kubernetes/pull/99293)
* kubelet: Make the test fail if (*FakeRuntime).Assert fails [#98986](https://github.com/openshift/kubernetes/pull/98986)
* Condition is always 'false' because 'err' is always 'nil' in top_pod.go [#98590](https://github.com/openshift/kubernetes/pull/98590)
* Calico: set IP=autodetect so preempted nodes learn new IP [#97037](https://github.com/openshift/kubernetes/pull/97037)
* Fixes to node shutdown e2e test [#99805](https://github.com/openshift/kubernetes/pull/99805)
* Make podIPs order match node IP family preference [#97979](https://github.com/openshift/kubernetes/pull/97979)
* Test for removal of invalid and repeated indexes [#99789](https://github.com/openshift/kubernetes/pull/99789)
* Integration and e2e tests for Indexed job [#99737](https://github.com/openshift/kubernetes/pull/99737)
* : Remove the deprecated kube-dns as an option in kubeadm [#99646](https://github.com/openshift/kubernetes/pull/99646)
* Scheduler: remove outdated TODO in node_affinity.go [#99523](https://github.com/openshift/kubernetes/pull/99523)
* Apply Builders for client-go's typed client [#99012](https://github.com/openshift/kubernetes/pull/99012)
* Remove extensions v1beta1 from addon manager and kubectl prune [#98806](https://github.com/openshift/kubernetes/pull/98806)
* Fix cgroup handling for systemd with cgroup v2 [#98365](https://github.com/openshift/kubernetes/pull/98365)
* Write Service Status Life Cycle test - +4 endpoint coverage [#98018](https://github.com/openshift/kubernetes/pull/98018)
* Mark ingress neg test as flaky [#99798](https://github.com/openshift/kubernetes/pull/99798)
* Remove EndpointSliceNodeName feature gate logic [#99796](https://github.com/openshift/kubernetes/pull/99796)
* Increasing maximum number of ports allowed in EndpointSlice [#99795](https://github.com/openshift/kubernetes/pull/99795)
* Graduating WindowsEndpointSliceProxying feature gate to beta [#99794](https://github.com/openshift/kubernetes/pull/99794)
* Repair quotes for some Windows log messages [#99793](https://github.com/openshift/kubernetes/pull/99793)
* add myself to owners for etcd metrics [#99792](https://github.com/openshift/kubernetes/pull/99792)
* Updating EndpointSliceMirroring controller to wait for cache to be updated [#99756](https://github.com/openshift/kubernetes/pull/99756)
* Clean up OWNERS for pkg/probe [#99665](https://github.com/openshift/kubernetes/pull/99665)
* Surface more information about plugin scores in scheduler [#99411](https://github.com/openshift/kubernetes/pull/99411)
* Structured Logging migration: modify eviction  part logs of kubelet. [#99032](https://github.com/openshift/kubernetes/pull/99032)
* kubelet: migrate pkg/kubelet/certificate to structured logging [#98993](https://github.com/openshift/kubernetes/pull/98993)
* Switch add-on manager to use lease for leader election [#98968](https://github.com/openshift/kubernetes/pull/98968)
* Avoid sending events for every non-conformant pod in disruption controller [#98128](https://github.com/openshift/kubernetes/pull/98128)
* Avoid logging headers from kubelet configuration [#97000](https://github.com/openshift/kubernetes/pull/97000)
* Add unit tests for kubelet cadvisor_linux [#95661](https://github.com/openshift/kubernetes/pull/95661)
* Optimize and parallelize LoadBalancer Host update [#98774](https://github.com/openshift/kubernetes/pull/98774)
* Incrementing EndpointSlice generation when labels change [#99750](https://github.com/openshift/kubernetes/pull/99750)
* add descriptions to these event/types.go files [#99681](https://github.com/openshift/kubernetes/pull/99681)
* PVC protection controller: clarify pod shutdown [#99626](https://github.com/openshift/kubernetes/pull/99626)
* e2e node: fix hugepages test flakiness [#99584](https://github.com/openshift/kubernetes/pull/99584)
* kubeadm: set the kubelet cgroup driver to "systemd" during "init" [#99471](https://github.com/openshift/kubernetes/pull/99471)
* Generic ephemeral volume enablement [#99446](https://github.com/openshift/kubernetes/pull/99446)
* Fix typo in util.go [#99439](https://github.com/openshift/kubernetes/pull/99439)
* Fix staging/src/k8s.io/apiserver/pkg/server/filters flake test timeout [#99344](https://github.com/openshift/kubernetes/pull/99344)
* Add labels for SIG storage components [#98673](https://github.com/openshift/kubernetes/pull/98673)
* fix RemoveStatusCondition()  cap out of range [#99755](https://github.com/openshift/kubernetes/pull/99755)
* remove duplicate kubectl logs [#99633](https://github.com/openshift/kubernetes/pull/99633)
* Implements NamespaceSelector for pod affinity [#98446](https://github.com/openshift/kubernetes/pull/98446)
* Add warning if client/server version difference exceeds the supported skew [#98250](https://github.com/openshift/kubernetes/pull/98250)
* Cache the OpenAPI schema for kubectl server-side dry run [#98194](https://github.com/openshift/kubernetes/pull/98194)
* modify the TestController2_updateCronJob test method description [#99614](https://github.com/openshift/kubernetes/pull/99614)
* add test/conformance/gen-conformance-docs.sh [#99558](https://github.com/openshift/kubernetes/pull/99558)
* Use a versioner to convert an internal type into an external type for beta serving [#99362](https://github.com/openshift/kubernetes/pull/99362)
* clean usage of admissionregistration/v1beta1 from integration tests [#99736](https://github.com/openshift/kubernetes/pull/99736)
* Fix MakeRegexpArray handling empty strings [#99617](https://github.com/openshift/kubernetes/pull/99617)
* Store a cluster event to plugin map in SchedulerQueue [#98241](https://github.com/openshift/kubernetes/pull/98241)
* Support M1 MacBooks darwin/arm64 on the client-side [#97743](https://github.com/openshift/kubernetes/pull/97743)
* Graduate EndpointSliceNodeName feature gate to GA [#99746](https://github.com/openshift/kubernetes/pull/99746)
* Update client-go install instructions [#99741](https://github.com/openshift/kubernetes/pull/99741)
* Fix hack/update-vendor.sh to not warn on xargs [#99724](https://github.com/openshift/kubernetes/pull/99724)
* Remove KubeDescribe [#99700](https://github.com/openshift/kubernetes/pull/99700)
* volume binder: storage capacity enablement [#99632](https://github.com/openshift/kubernetes/pull/99632)
* hpa: Don't scale down if at least one metric was invalid [#99514](https://github.com/openshift/kubernetes/pull/99514)
* Enforce metric cardinality check to Gauge, Histogram and Summary metric [#99738](https://github.com/openshift/kubernetes/pull/99738)
* Promote Cinder topology labels to GA [#99719](https://github.com/openshift/kubernetes/pull/99719)
* Remove nested SIGDescribe calls [#99710](https://github.com/openshift/kubernetes/pull/99710)
* Make sig-storage be the owner of ubernetes_lite_volumes test [#99709](https://github.com/openshift/kubernetes/pull/99709)
* [cluster/gce] Target the correct project while adding kubeconfig metadata to the master [#99691](https://github.com/openshift/kubernetes/pull/99691)
* cleanup: disable dual stack for some manifest UT [#99687](https://github.com/openshift/kubernetes/pull/99687)
* Remove useless pluginConfigs in scheduling framework testing helpers [#99676](https://github.com/openshift/kubernetes/pull/99676)
* Add dougsland and rikatz as sig-cli reviewers [#99666](https://github.com/openshift/kubernetes/pull/99666)
* increase discovery burst for kube-controller-manager [#99660](https://github.com/openshift/kubernetes/pull/99660)
* remove csr v1beta1 usage in integration tests [#99657](https://github.com/openshift/kubernetes/pull/99657)
* Migrate pkg/kubelet/stats to structured logging [#99607](https://github.com/openshift/kubernetes/pull/99607)
* exec credential provider: add rest_client_exec_plugin_call_total metric [#98892](https://github.com/openshift/kubernetes/pull/98892)
* deprecate audit.k8s.io/v1[alpha|beta]1 versions [#98858](https://github.com/openshift/kubernetes/pull/98858)
* Implements CrossNamespacePodAffinity quota scope [#98582](https://github.com/openshift/kubernetes/pull/98582)
* kubeadm: exclude control plane nodes from external LBs [#98269](https://github.com/openshift/kubernetes/pull/98269)
* Migrate deployment controller log messages to structured logging [#97507](https://github.com/openshift/kubernetes/pull/97507)
* Cleanup test/e2e/common directory - part2 [#99684](https://github.com/openshift/kubernetes/pull/99684)
* Update go version check to 1.16+ [#99655](https://github.com/openshift/kubernetes/pull/99655)
* Fix issue in checking domain socket for plugin watcher [#99723](https://github.com/openshift/kubernetes/pull/99723)
* Indexed job implementation [#98812](https://github.com/openshift/kubernetes/pull/98812)
* Log detailed service information during GCE Windows node startup [#99659](https://github.com/openshift/kubernetes/pull/99659)
* exec credential provider: use stdin to detect user interaction [#99654](https://github.com/openshift/kubernetes/pull/99654)
* Improve warnings for default-container [#99649](https://github.com/openshift/kubernetes/pull/99649)
* Two small bugs in dual-stack init [#99555](https://github.com/openshift/kubernetes/pull/99555)
* Number of sockets is assumed to be same as NUMA nodes in kubelet [#99464](https://github.com/openshift/kubernetes/pull/99464)
* Clarify external CSR signerName field description [#99444](https://github.com/openshift/kubernetes/pull/99444)
* Update inline volume spec comments [#99414](https://github.com/openshift/kubernetes/pull/99414)
* cinder: Translate CSI topology affinity into in-tree labels [#99367](https://github.com/openshift/kubernetes/pull/99367)
* Adds ineffassign to GO linter script. [#99288](https://github.com/openshift/kubernetes/pull/99288)
* Kubectl command headers in requests: KEP 859 [#98952](https://github.com/openshift/kubernetes/pull/98952)
* networking nodeipam UT: set node poll interval to 1s in UT [#98756](https://github.com/openshift/kubernetes/pull/98756)
* sped up scheduler tests by using fake clock [#98595](https://github.com/openshift/kubernetes/pull/98595)
* Add Indexed completionMode to Job API [#98441](https://github.com/openshift/kubernetes/pull/98441)
* Fix flag passing in CCM [#98210](https://github.com/openshift/kubernetes/pull/98210)
* Nit: Remove unnecessary type conversion [#97881](https://github.com/openshift/kubernetes/pull/97881)
* e2e storage: embedded csi mock driver [#97069](https://github.com/openshift/kubernetes/pull/97069)
* stop using CRD v1beta1 in tests [#99101](https://github.com/openshift/kubernetes/pull/99101)
* hack/tools: Update zeitgeist to v0.2.0 to drop import cycle [#99679](https://github.com/openshift/kubernetes/pull/99679)
* Structured Logging migration: modify dockershim and network part logs of kubelet. [#98939](https://github.com/openshift/kubernetes/pull/98939)
* memory manager: specify the container cpuset.memory during the creation [#98924](https://github.com/openshift/kubernetes/pull/98924)
* delete the extra word [#98985](https://github.com/openshift/kubernetes/pull/98985)
* kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false [#98984](https://github.com/openshift/kubernetes/pull/98984)
* fix smb mount PermissionDenied issue on Windows [#99550](https://github.com/openshift/kubernetes/pull/99550)
* Metric cardinality enforcement [#99385](https://github.com/openshift/kubernetes/pull/99385)
* staging/publishing: add -mod=mod for smoke tests for go1.16 [#99674](https://github.com/openshift/kubernetes/pull/99674)
* Remove unused code in e2e/framework/framework.go [#99625](https://github.com/openshift/kubernetes/pull/99625)
* update kubectl cp flag description [#99581](https://github.com/openshift/kubernetes/pull/99581)
* update system-validators to v1.4.0 [#98977](https://github.com/openshift/kubernetes/pull/98977)
* Assign remaining test/e2e/common test to SIGs [#99492](https://github.com/openshift/kubernetes/pull/99492)
* Make parallel build memory threshold configurable [#96882](https://github.com/openshift/kubernetes/pull/96882)
* Promote DownwardAPIHugePages to beta [#99610](https://github.com/openshift/kubernetes/pull/99610)
* Migrate pkg/kubelet/metrics logs to structured logging. [#98627](https://github.com/openshift/kubernetes/pull/98627)
* pkg/kubelet/cri/remote: migrate to structured logs [#98589](https://github.com/openshift/kubernetes/pull/98589)
* Fix staticcheck failures for vendor/k8s.io/apiserver/pkg/registry/generic [#99526](https://github.com/openshift/kubernetes/pull/99526)
* Use Lstat in plugin watcher to avoid Windows problem [#99463](https://github.com/openshift/kubernetes/pull/99463)
* test images: Adds label to httpd-new image [#99631](https://github.com/openshift/kubernetes/pull/99631)
* Updating EndpointSlice controller to wait for cache to be updated [#99345](https://github.com/openshift/kubernetes/pull/99345)
* hack/verify-description.sh: correctly look for versioned API types [#99621](https://github.com/openshift/kubernetes/pull/99621)
* kubectl: print info for default container annotation usage [#99615](https://github.com/openshift/kubernetes/pull/99615)
* Deprecate cAdvisor json metrics collected by Kubelet [#99236](https://github.com/openshift/kubernetes/pull/99236)
* generic ephemeral volume: add metrics [#99115](https://github.com/openshift/kubernetes/pull/99115)
* Prefer v1 storage versions [#99103](https://github.com/openshift/kubernetes/pull/99103)
* test/e2e: Move tests into test/e2e/node package [#98983](https://github.com/openshift/kubernetes/pull/98983)
* Remove dependency of generators from create secret [#98614](https://github.com/openshift/kubernetes/pull/98614)
* exec credential provider: first integration test (static auth interaction) [#97775](https://github.com/openshift/kubernetes/pull/97775)
* kubeadm: a warning to user as ipv6 site-local is deprecated [#99574](https://github.com/openshift/kubernetes/pull/99574)
* cronjob: fix flaky unit test TestController2_updateCronJob [#99553](https://github.com/openshift/kubernetes/pull/99553)
* cronjob_controller: add metrics for job creation skew duration [#99341](https://github.com/openshift/kubernetes/pull/99341)
* Update to go1.16 [#98572](https://github.com/openshift/kubernetes/pull/98572)
* Prevent CGO and STATIC_OVERRIDES from trampling themselves if evaluated multiple times [#99521](https://github.com/openshift/kubernetes/pull/99521)
* Add btrfs support to the automatic volume resizer [#99361](https://github.com/openshift/kubernetes/pull/99361)
* kubelet: Imporve cmd comment for how kubelet works [#99084](https://github.com/openshift/kubernetes/pull/99084)
* Cleanup dependencies in changelog [#98347](https://github.com/openshift/kubernetes/pull/98347)
* Deleted a redundant line from #91275 [#99247](https://github.com/openshift/kubernetes/pull/99247)
* Update networking ingress types for Ingress Backend Service Port name [#97139](https://github.com/openshift/kubernetes/pull/97139)
* typo fixed for terminatation [#99447](https://github.com/openshift/kubernetes/pull/99447)
* Avoid creation of the same storageclass in e2e tests [#99346](https://github.com/openshift/kubernetes/pull/99346)
* update kubeadm upgrade description [#99586](https://github.com/openshift/kubernetes/pull/99586)
* Leader Migration (KEP-2477): options parsing [#99507](https://github.com/openshift/kubernetes/pull/99507)
* Implements pod deletion cost [#99163](https://github.com/openshift/kubernetes/pull/99163)
* test images: Generates new SHAs for mirrored images [#99609](https://github.com/openshift/kubernetes/pull/99609)
* Fix typo in comment for purgeInitContainers. [#99491](https://github.com/openshift/kubernetes/pull/99491)
* Scheduler: unroll PreemptHandle to Handle [#99498](https://github.com/openshift/kubernetes/pull/99498)
* Speed up pkg/controller/volume/scheduling unit tests [#98912](https://github.com/openshift/kubernetes/pull/98912)
* kubectl logs: don't check default container annotation if --all-containers is specified [#99569](https://github.com/openshift/kubernetes/pull/99569)
* Speed up pkg/volume/csi unit tests [#98762](https://github.com/openshift/kubernetes/pull/98762)
* Avoid kubelet warnings for imagePullSecret entries with empty names [#99590](https://github.com/openshift/kubernetes/pull/99590)
* Remove Bazel [#99561](https://github.com/openshift/kubernetes/pull/99561)
* Only CSI plugin can have a DataSource [#97086](https://github.com/openshift/kubernetes/pull/97086)
* Skip visiting empty secret and configmap names [#99538](https://github.com/openshift/kubernetes/pull/99538)
* .github: update enhancement issue template to point to KEPs [#98867](https://github.com/openshift/kubernetes/pull/98867)
* fix e2e test kube-proxy tcp_wait [#99564](https://github.com/openshift/kubernetes/pull/99564)
* Replace yml with yaml [#99433](https://github.com/openshift/kubernetes/pull/99433)
* Adding specific protocol network policy test [#99512](https://github.com/openshift/kubernetes/pull/99512)
* conformance.yaml: generate with make [#99549](https://github.com/openshift/kubernetes/pull/99549)
* Cleanup SIGDescribe in test/e2e/network [#99506](https://github.com/openshift/kubernetes/pull/99506)
* Replace top-level ginkgo.Describe with SIGDescribe [#99524](https://github.com/openshift/kubernetes/pull/99524)
* Fix static failures for vendor/k8s.io/apiserver/pkg/endpoints/handlers [#99520](https://github.com/openshift/kubernetes/pull/99520)
* Move node_recreate test to cloud/gcp directory [#99508](https://github.com/openshift/kubernetes/pull/99508)
* add Yuchen to reviewers [#99501](https://github.com/openshift/kubernetes/pull/99501)
* use random node to avoid node0 overloaded [#99390](https://github.com/openshift/kubernetes/pull/99390)
* don't default to building conformance image for fastbuilds (quick-rel… [#99386](https://github.com/openshift/kubernetes/pull/99386)
* test/integration: add integration tests for service.spec.allocateLoadBalancerNodePorts [#96610](https://github.com/openshift/kubernetes/pull/96610)
* reset token if got Unauthorized in KCM [#99324](https://github.com/openshift/kubernetes/pull/99324)
* Update CSI attacher to fetch VolumeAttachments from lister [#97834](https://github.com/openshift/kubernetes/pull/97834)
* Move GetPersistentVolumeClaimClass to component-helpers [#98433](https://github.com/openshift/kubernetes/pull/98433)
* Remove KubeDescribe from SIGDescribe calls [#99467](https://github.com/openshift/kubernetes/pull/99467)
* test: fix skipping of GenericEphemeralVolume volume type [#99445](https://github.com/openshift/kubernetes/pull/99445)
* Optimized function getProxyMode [#99387](https://github.com/openshift/kubernetes/pull/99387)
* nominate adtac to sig-scheduling reviewers [#99117](https://github.com/openshift/kubernetes/pull/99117)
* Remove duplicate package import in empty_dir_test.go [#98171](https://github.com/openshift/kubernetes/pull/98171)
* Cleanup old test targets [#99486](https://github.com/openshift/kubernetes/pull/99486)
* Switch gitVersion format to non-abbreviated hash [#99377](https://github.com/openshift/kubernetes/pull/99377)
* fix nil error e2e/network/kube_proxy.go [#99434](https://github.com/openshift/kubernetes/pull/99434)
* Fix --ignore-errors does not take effect if multiple logs are printed and unfollowed [#97686](https://github.com/openshift/kubernetes/pull/97686)
* Updating owners with sig-windows tech leads [#99477](https://github.com/openshift/kubernetes/pull/99477)
* kubeadm: promote DualStack feature gate to Beta [#99294](https://github.com/openshift/kubernetes/pull/99294)
* default container behavior with annotation `kubectl.kubernetes.io/default-container` [#97099](https://github.com/openshift/kubernetes/pull/97099)
* kubeadm: pass pod-infra-container-image for all CRs [#99476](https://github.com/openshift/kubernetes/pull/99476)
* kubectl proxy: override request host [#97385](https://github.com/openshift/kubernetes/pull/97385)
* Move common/volume.go test to the storage dir [#99469](https://github.com/openshift/kubernetes/pull/99469)
* Align ownership of secret and configmap tests to sig-node [#99460](https://github.com/openshift/kubernetes/pull/99460)
* AtMostEvery may result in less than expected times if overloaded [#99442](https://github.com/openshift/kubernetes/pull/99442)
* Split the setcap image from the base images, make them easier to override [#99415](https://github.com/openshift/kubernetes/pull/99415)
* Efficient watch resumption beta [#99021](https://github.com/openshift/kubernetes/pull/99021)
* deprecating in-tree vsphere volume diskformat parameters, vsphere less than 67u3, vm hardware less than 15 and multi vCenter support [#98546](https://github.com/openshift/kubernetes/pull/98546)
* fix the case of time drift and re-implement next schedule calculation [#97098](https://github.com/openshift/kubernetes/pull/97098)
* Revert "tests: Set a 5 minute timeout for kubectl cluster-info dump" [#99450](https://github.com/openshift/kubernetes/pull/99450)
* Scheduler: remove legacy TODO in framework.go [#99406](https://github.com/openshift/kubernetes/pull/99406)
* Write ReplicaSet Replace and Patch Test +2 Endpoints [#99380](https://github.com/openshift/kubernetes/pull/99380)
* parse pod's node affinity once in preFilter [#99213](https://github.com/openshift/kubernetes/pull/99213)
* Replace some nested KubeDescribe calls with ginkgo.Describe [#99458](https://github.com/openshift/kubernetes/pull/99458)
* Cleanup tests/e2e/common directory - part 1 [#99374](https://github.com/openshift/kubernetes/pull/99374)
* Stop probing a pod during graceful shutdown [#98571](https://github.com/openshift/kubernetes/pull/98571)
* csr signers: increase the number of workers [#99419](https://github.com/openshift/kubernetes/pull/99419)
* Remove deadcode [#99351](https://github.com/openshift/kubernetes/pull/99351)
* kubelet: Sync completed pods until their containers have been terminated [#98742](https://github.com/openshift/kubernetes/pull/98742)
* Remove unused func in kubernetes/pkg/kubelet/dockershim [#99355](https://github.com/openshift/kubernetes/pull/99355)
* Graduate sysctls to GA [#99158](https://github.com/openshift/kubernetes/pull/99158)
* Move GKE tests to cloud/gcp package [#99403](https://github.com/openshift/kubernetes/pull/99403)
* e2e: fix CPU manager methods to be more flexible to different CPU topology [#98373](https://github.com/openshift/kubernetes/pull/98373)
* e2e: move deleteState file to the AfterEach [#98342](https://github.com/openshift/kubernetes/pull/98342)
* Move TTLAfterFinished test to appropriate SIG [#99400](https://github.com/openshift/kubernetes/pull/99400)
* Scheduler: Use PodInfo instead of Pod for nominatedPods and QueuedPodInfo [#99085](https://github.com/openshift/kubernetes/pull/99085)
* Scheduler: remove pkg/apis/core/field_constants.go [#90105](https://github.com/openshift/kubernetes/pull/90105)
* test images: Fixes Windows nginx images entrypoints [#99395](https://github.com/openshift/kubernetes/pull/99395)
* attacher: organize unit tests into subtests [#99229](https://github.com/openshift/kubernetes/pull/99229)
* Support storage encryption for aggregation server [#99196](https://github.com/openshift/kubernetes/pull/99196)
* Use GA topology labels for EBS [#99130](https://github.com/openshift/kubernetes/pull/99130)
* conformance: promote container exec probe timeout tests [#97619](https://github.com/openshift/kubernetes/pull/97619)
* migrate "client-go retry-watcher watch" to structured logging [#99195](https://github.com/openshift/kubernetes/pull/99195)
* conditionally serve beta [#99011](https://github.com/openshift/kubernetes/pull/99011)
* Make the registry for the server-images templated in the Dockerfiles. [#99379](https://github.com/openshift/kubernetes/pull/99379)
* fix some hardcoding [#99233](https://github.com/openshift/kubernetes/pull/99233)
* Run kube-apiserver as non-root. [#96134](https://github.com/openshift/kubernetes/pull/96134)
* test/e2e: Move gke local ssd tests to e2e/storage and assign sig ownership [#99087](https://github.com/openshift/kubernetes/pull/99087)
* Add enj back as test approver [#99366](https://github.com/openshift/kubernetes/pull/99366)
* promote RootCAConfigMap e2e test to Conformance [#99316](https://github.com/openshift/kubernetes/pull/99316)
* Upgrading cAdvisor to 0.38.8 [#99315](https://github.com/openshift/kubernetes/pull/99315)
* e2e framework TestJig used for Service testing wasn't verifying UDP works [#99312](https://github.com/openshift/kubernetes/pull/99312)
* Promote Read, Replace and Patch ReplicaSetScale test to Conformance +3 endpoints [#99282](https://github.com/openshift/kubernetes/pull/99282)
* Promote Read, Replace and Patch DeploymentScale test to Conformance +3 endpoints [#99281](https://github.com/openshift/kubernetes/pull/99281)
* Fix usage of klog.InfoS [#99274](https://github.com/openshift/kubernetes/pull/99274)
* Promote RunAsGroup e2e test to Conformance [#98645](https://github.com/openshift/kubernetes/pull/98645)
* Mark remaining e2e_node tests with [sig-*] label [#99319](https://github.com/openshift/kubernetes/pull/99319)
* Add SIG Apps API reviewers and feature approvers [#99335](https://github.com/openshift/kubernetes/pull/99335)
* cronjob: Add CRUD tests for CronJob API verbs [#99314](https://github.com/openshift/kubernetes/pull/99314)
* Fix dependencycheck binary name [#99159](https://github.com/openshift/kubernetes/pull/99159)
* Allow uncertain mount tests to run parallely [#99174](https://github.com/openshift/kubernetes/pull/99174)
* kubeadm: include appovers under reviewers in OWNERS [#99313](https://github.com/openshift/kubernetes/pull/99313)
* images: Removes containers after they've run [#98799](https://github.com/openshift/kubernetes/pull/98799)
* move RootCAConfigMap to ga [#98033](https://github.com/openshift/kubernetes/pull/98033)
* Apply cap_net_bind_service to kube-apiserver binary. [#99145](https://github.com/openshift/kubernetes/pull/99145)
* migrate pkg/scheduler/framework/plugins/volume to structured logs [#98593](https://github.com/openshift/kubernetes/pull/98593)
* increase pod start timeout for storage tests [#99320](https://github.com/openshift/kubernetes/pull/99320)
* Add detailed logs and start log messages with upper case [#99246](https://github.com/openshift/kubernetes/pull/99246)
* Remove modprobe configs from configure-helper [#99216](https://github.com/openshift/kubernetes/pull/99216)
* delay serving CRD creates for a few seconds for HA consistency [#99199](https://github.com/openshift/kubernetes/pull/99199)
* Add kubectl-convert to client-binaries [#99155](https://github.com/openshift/kubernetes/pull/99155)
* Storage: move filesystem resize code to kubernetes/mount-utils [#99088](https://github.com/openshift/kubernetes/pull/99088)
* Check if resources implement scale in disruption controller [#98346](https://github.com/openshift/kubernetes/pull/98346)
* apf: set response headers for rejected requests [#99125](https://github.com/openshift/kubernetes/pull/99125)
* Partially revert "tests: Switch dockerhub registry images to promoted registry" [#99241](https://github.com/openshift/kubernetes/pull/99241)
* hack: Use zeitgeist instead of cmd/verifydependencies [#98845](https://github.com/openshift/kubernetes/pull/98845)
* remove secret-based sa token client builder [#99291](https://github.com/openshift/kubernetes/pull/99291)
* e2e test replace CreateSync in createPodOrFail [#99262](https://github.com/openshift/kubernetes/pull/99262)
* Delete duplicate logs for kubeadm upgrade versions [#99187](https://github.com/openshift/kubernetes/pull/99187)
* Add GracefulNodeShutdown e2e test [#98658](https://github.com/openshift/kubernetes/pull/98658)
* kubeadm: perform a host name check on init / join [#99194](https://github.com/openshift/kubernetes/pull/99194)
* Use golangci-lint to find unused/dead code (Experimental!) [#99120](https://github.com/openshift/kubernetes/pull/99120)
* Move pkg/kubelet/apis to k8s.io/kubelet/pkg/apis [#98931](https://github.com/openshift/kubernetes/pull/98931)
* allow explicit disabling of metrics as an escape hatch. [#99217](https://github.com/openshift/kubernetes/pull/99217)
* Differentiate build process for non-amd platforms [#82778](https://github.com/openshift/kubernetes/pull/82778)
* Clean up e2e stress test resources concurrently [#99244](https://github.com/openshift/kubernetes/pull/99244)
* fix TestPidListerFailure on cgroupsv2 [#98960](https://github.com/openshift/kubernetes/pull/98960)
* Scheduler: let default preemption returns status instead of err [#99119](https://github.com/openshift/kubernetes/pull/99119)
* Add arm64 support for GCE node configuration [#99242](https://github.com/openshift/kubernetes/pull/99242)
* Use ARG and --build-arg instead of sed for etcd image. [#99059](https://github.com/openshift/kubernetes/pull/99059)
* Promote RunAsGroup to GA [#94641](https://github.com/openshift/kubernetes/pull/94641)
* Cleanup: Remove CSIDriverRegistry, BlockVolume and CSIBlockVolume feature flags [#98021](https://github.com/openshift/kubernetes/pull/98021)
* add bash-completion for comma separated list on `kubectl get` [#98301](https://github.com/openshift/kubernetes/pull/98301)
* migrate to structured logging [#98875](https://github.com/openshift/kubernetes/pull/98875)
* (e2e/scheduler) Ensure minimum memory limit in createBalancedPodForNodes [#98073](https://github.com/openshift/kubernetes/pull/98073)
* Testing multiple pods using label selector [#97701](https://github.com/openshift/kubernetes/pull/97701)
* API Machinery: Add equal func for Requirement struct [#99083](https://github.com/openshift/kubernetes/pull/99083)
* add myself to approvers for apiserver metrics [#99215](https://github.com/openshift/kubernetes/pull/99215)
* Substituting bool maps with String sets [#99211](https://github.com/openshift/kubernetes/pull/99211)
* e2e services test pods should wait until they are ready [#99202](https://github.com/openshift/kubernetes/pull/99202)
* Migrate pkg/kubelet/nodestatus to structured logging [#99001](https://github.com/openshift/kubernetes/pull/99001)
* migrate scheduling_queue.go to structured logging [#98358](https://github.com/openshift/kubernetes/pull/98358)
* merge error check to validateEndpointsPorts [#99146](https://github.com/openshift/kubernetes/pull/99146)
* kubelet: fix create sandbox delete pod race [#98933](https://github.com/openshift/kubernetes/pull/98933)
* proxy/config tests: avoid multiple calls to done [#99102](https://github.com/openshift/kubernetes/pull/99102)
* Fix flaky test: CSI mock volume snapshot [#99167](https://github.com/openshift/kubernetes/pull/99167)
* kubectl: improve error message for client-side SMP for CRs [#99143](https://github.com/openshift/kubernetes/pull/99143)
* Add csi_operations_seconds metrics on kubelet [#98979](https://github.com/openshift/kubernetes/pull/98979)
* Allow ingress from pods on another namespace [#98389](https://github.com/openshift/kubernetes/pull/98389)
* request.go: correct subresource referencing [#99193](https://github.com/openshift/kubernetes/pull/99193)
* SCTPSupport beta since 1.19; VolumeSubpath GA since 1.10 [#99189](https://github.com/openshift/kubernetes/pull/99189)
* tests: Updates resource-consumer to 1.9 in tests [#99149](https://github.com/openshift/kubernetes/pull/99149)
* Return error when persister fails to modify config [#99111](https://github.com/openshift/kubernetes/pull/99111)
* tests: Set a 5 minute timeout for kubectl cluster-info dump [#99107](https://github.com/openshift/kubernetes/pull/99107)
* correct typo in kubectl plugin command [#99068](https://github.com/openshift/kubernetes/pull/99068)
* Use more real world examples in BenchmarkSerializeObject [#99192](https://github.com/openshift/kubernetes/pull/99192)
* Cherry pick #465 in cloud provider azure: Cleanup subnet in frontend IP configs [#98133](https://github.com/openshift/kubernetes/pull/98133)
* move BoundServiceAccountTokenVolume to beta [#95667](https://github.com/openshift/kubernetes/pull/95667)
* e2e conntrack invalid test should wait pod are running [#99201](https://github.com/openshift/kubernetes/pull/99201)
* Minor refactor of test/e2e/common names [#99016](https://github.com/openshift/kubernetes/pull/99016)
* migrate to use k8s.io/util/net/port in kube-proxy [#98130](https://github.com/openshift/kubernetes/pull/98130)
* Make kube-proxy check if IPv6 is really supported before assuming dual-stack [#99127](https://github.com/openshift/kubernetes/pull/99127)
* Fix tests using kubectl convert [#97644](https://github.com/openshift/kubernetes/pull/97644)
* e2e createSync() method wait for pod running and ready [#99147](https://github.com/openshift/kubernetes/pull/99147)
* storage CSI e2e: Move csi driver cleanup functions into a common one [#99175](https://github.com/openshift/kubernetes/pull/99175)
* Fix NPD test to run it in private and large clusters [#99027](https://github.com/openshift/kubernetes/pull/99027)
* Fix storage e2e snapshot test deletion order [#99161](https://github.com/openshift/kubernetes/pull/99161)
* Add GCE Kubernetes option to enable Windows DSR. [#98592](https://github.com/openshift/kubernetes/pull/98592)
* add metrics for rootcacertpublisher controller [#98731](https://github.com/openshift/kubernetes/pull/98731)
* Mark heapster as deprecated in IMPLEMENTATIONS.md [#98505](https://github.com/openshift/kubernetes/pull/98505)
* sched: create dataItemsDir during a performance test if not exist [#99160](https://github.com/openshift/kubernetes/pull/99160)
* fix the address of restful-CORS-filter.go and restful-basic-authentic… [#98823](https://github.com/openshift/kubernetes/pull/98823)
* Updates the Azure File minimum size for premium accounts [#99122](https://github.com/openshift/kubernetes/pull/99122)
* fix conflict hostPort e2e test [#99112](https://github.com/openshift/kubernetes/pull/99112)
* Revise wording for Secret stringData field [#99105](https://github.com/openshift/kubernetes/pull/99105)
* cleanup TestNormalizeClusterIPs [#99098](https://github.com/openshift/kubernetes/pull/99098)
* add more context to client-go request throttling message [#99079](https://github.com/openshift/kubernetes/pull/99079)
* Fix typo in client-go/rest/client.go [#99063](https://github.com/openshift/kubernetes/pull/99063)
* Add klueska as an approver in pkg/kubelet/OWNERS [#98932](https://github.com/openshift/kubernetes/pull/98932)
* Add BenchmarkSerializeObject* benchmarks [#99153](https://github.com/openshift/kubernetes/pull/99153)
* Add more sig-storage reviewers [#99140](https://github.com/openshift/kubernetes/pull/99140)
* Drop batch/v2alpha1 [#96987](https://github.com/openshift/kubernetes/pull/96987)
* Storage e2e: Remove pd csi driver installation in GKE [#98555](https://github.com/openshift/kubernetes/pull/98555)
* Fix the getCgroupSubsystemsV1() which uses only the latest record [#96594](https://github.com/openshift/kubernetes/pull/96594)
* Adding Ravi to Owners for sig-windows e2es [#99135](https://github.com/openshift/kubernetes/pull/99135)
* Migrate `pkg/kubelet/pod,pleg` to structured logging [#98990](https://github.com/openshift/kubernetes/pull/98990)
* Add migrated field to storage_operation_duration_seconds metric [#99050](https://github.com/openshift/kubernetes/pull/99050)
* test images: assign gcEtcdRegistry to the correct value [#99131](https://github.com/openshift/kubernetes/pull/99131)
* Update sigs.k8s.io/structured-merge-diff to v4.0.3 [#99014](https://github.com/openshift/kubernetes/pull/99014)
* Enable kubectl-get to strip managed fields [#96878](https://github.com/openshift/kubernetes/pull/96878)
* migrate kube canary chain as const [#99089](https://github.com/openshift/kubernetes/pull/99089)
* scheduler/framework/plugins: delete moved docs [#99118](https://github.com/openshift/kubernetes/pull/99118)
* Allow adding healthz and livez checks independent to each other [#99064](https://github.com/openshift/kubernetes/pull/99064)
* Update kube-addon-manager image to v9.1.2 [#98974](https://github.com/openshift/kubernetes/pull/98974)
* Mark commandline parameters related to dockershim as deprecated [#98730](https://github.com/openshift/kubernetes/pull/98730)
* added note on --etcd-servers-overrides [#90054](https://github.com/openshift/kubernetes/pull/90054)
* Automatically remove orphaned pod's dangling volumes [#95301](https://github.com/openshift/kubernetes/pull/95301)
* Clean up deprecated volume operation metrics [#99045](https://github.com/openshift/kubernetes/pull/99045)
* Update e2e test instructions in GCE Windows README [#98487](https://github.com/openshift/kubernetes/pull/98487)
* kubelet: Fix race when KillPod followed by IsPodPendingTermination [#98956](https://github.com/openshift/kubernetes/pull/98956)
* Add support to disable /debug/pprof and /debug/flags/v endpoint [#98458](https://github.com/openshift/kubernetes/pull/98458)
* correct typo in kubeadm init phase command [#99082](https://github.com/openshift/kubernetes/pull/99082)
* Scheduler: remove reflect.DeepEqual for defaultpreemption, helper, imagelocality package [#98949](https://github.com/openshift/kubernetes/pull/98949)
* Remove inactive members from OWNERS - Jan 2021 [#99110](https://github.com/openshift/kubernetes/pull/99110)
* Promote cronjob controller v2 to beta [#98878](https://github.com/openshift/kubernetes/pull/98878)
* test images: Fixes Windows httpd images [#99030](https://github.com/openshift/kubernetes/pull/99030)
* fix duplicate validation error for quota editing [#98201](https://github.com/openshift/kubernetes/pull/98201)
* test/* Remove inactive members from OWNERS [#99092](https://github.com/openshift/kubernetes/pull/99092)
* cmd/kubemark: Remove inactive members from OWNERS [#99078](https://github.com/openshift/kubernetes/pull/99078)
* cluster/* Remove inactive members from OWNERS [#99074](https://github.com/openshift/kubernetes/pull/99074)
* cluster/addons/dashboard: remove inactive members from OWNERS [#99071](https://github.com/openshift/kubernetes/pull/99071)
* Adding UDP network policies tests [#98636](https://github.com/openshift/kubernetes/pull/98636)
* Use ARG and --build-arg instead of sed for build-image. [#99067](https://github.com/openshift/kubernetes/pull/99067)
* Bump agnhost 2.28 [#99049](https://github.com/openshift/kubernetes/pull/99049)
* apiserver: add --permit-address-sharing flag to listen with SO_REUSEADDR [#93861](https://github.com/openshift/kubernetes/pull/93861)
* Use ARG instead of sed to set the base image for addon-manager. [#99024](https://github.com/openshift/kubernetes/pull/99024)
* JobDeletionDurationSeconds metric in TTLAfterFinished controller [#98676](https://github.com/openshift/kubernetes/pull/98676)
* Use ARG instead of sed in the conformance image. [#99022](https://github.com/openshift/kubernetes/pull/99022)
* Clean up Instrumentation reviewers [#99013](https://github.com/openshift/kubernetes/pull/99013)
* Update: StatefulSet Replica scaling to include Patch Scale +1 endpoint [#98126](https://github.com/openshift/kubernetes/pull/98126)
* Write Read, Replace and Patch ReplicaSetScale test +3 endpoints [#98987](https://github.com/openshift/kubernetes/pull/98987)
* shorten scheduling priorities taint key [#99020](https://github.com/openshift/kubernetes/pull/99020)
* Write Read, Replace and Patch DeploymentScale test +3 endpoints [#98988](https://github.com/openshift/kubernetes/pull/98988)
* Use on disk Dockerfile for server-images. [#99015](https://github.com/openshift/kubernetes/pull/99015)
* portably configure tempdir in configure-helper.sh [#99019](https://github.com/openshift/kubernetes/pull/99019)
* catching errors for 'kubeadm join' [#98980](https://github.com/openshift/kubernetes/pull/98980)
* Scheduler: remove outdated TODO in interpodaffinity [#98997](https://github.com/openshift/kubernetes/pull/98997)
* Enable kube-dns-autoscaler test in scale-correctness tests [#98996](https://github.com/openshift/kubernetes/pull/98996)
* upgrade IPv6DualStack feature to beta and turn on by default [#98969](https://github.com/openshift/kubernetes/pull/98969)
* networking/validation: add endport range validation [#98726](https://github.com/openshift/kubernetes/pull/98726)
* Fix MetricsGrabber test by skipping if the master node isn't registered [#98972](https://github.com/openshift/kubernetes/pull/98972)
* Update conformance metadata for relocated test [#98940](https://github.com/openshift/kubernetes/pull/98940)
* tests: Switch dockerhub registry images to promoted registry [#98964](https://github.com/openshift/kubernetes/pull/98964)
* CHANGELOG: remove release-note-none items [#98909](https://github.com/openshift/kubernetes/pull/98909)
* Promote ServiceAccountIssuerDiscovery test to conformance [#98586](https://github.com/openshift/kubernetes/pull/98586)
* Do not leak files on iptables unit tests [#98961](https://github.com/openshift/kubernetes/pull/98961)
* Remove CONTENT_TYPE in kubemark hollow template [#98911](https://github.com/openshift/kubernetes/pull/98911)
* kube-proxy has to clear NodePort stale UDP entries [#98305](https://github.com/openshift/kubernetes/pull/98305)
* Fix shellcheck failures in cluster/gce/gci/configure.sh [#90442](https://github.com/openshift/kubernetes/pull/90442)
* sched: remove Unknown queuing literal [#98899](https://github.com/openshift/kubernetes/pull/98899)
* Escape the special character in vsphere windows path [#98830](https://github.com/openshift/kubernetes/pull/98830)
* updated fluentd and all plugins [#98339](https://github.com/openshift/kubernetes/pull/98339)
* Prevent race condition with bytes buffer in vsphere unit tests [#98944](https://github.com/openshift/kubernetes/pull/98944)
* tests: Separate registry configuration for etcd image [#98926](https://github.com/openshift/kubernetes/pull/98926)
* Netpol E2E test should allow traffic to an application [#97616](https://github.com/openshift/kubernetes/pull/97616)
* Scheduler: change config.Plugins from pointers to objects [#98663](https://github.com/openshift/kubernetes/pull/98663)
* Fix ALPHA stability level reference link [#98641](https://github.com/openshift/kubernetes/pull/98641)
* Add integration test for parallel and non-parallel Job [#97984](https://github.com/openshift/kubernetes/pull/97984)
* Fix shellcheck warnings/errors in cluster/gce/util.sh [#90405](https://github.com/openshift/kubernetes/pull/90405)
* kubelet_test: fixes race in TestSyncPodsDeletesWhenSourcesAreReadyPerQOS [#98938](https://github.com/openshift/kubernetes/pull/98938)
* volume: Change owner of symlinks too [#94895](https://github.com/openshift/kubernetes/pull/94895)
* suggest homebrew when bash is too old on macOS [#98948](https://github.com/openshift/kubernetes/pull/98948)
* Use markdown headers instead of bold text for PR template [#96884](https://github.com/openshift/kubernetes/pull/96884)
* Add [sig-autoscaling] tag to remaining cluster autoscaler tests [#98951](https://github.com/openshift/kubernetes/pull/98951)
* Speed up pkg/controller/volume/persistentvolume unit tests [#98792](https://github.com/openshift/kubernetes/pull/98792)
* migrate proxy/winkernel/proxier.go logs to structured logging [#98001](https://github.com/openshift/kubernetes/pull/98001)
* check containerd as well as docker-containerd [#97888](https://github.com/openshift/kubernetes/pull/97888)
* pkg/kubelet/server: migrate to structured logs [#98643](https://github.com/openshift/kubernetes/pull/98643)
* Promote PodProxyWithPath & ServiceProxyWithPath test - + 12 endpoint coverage [#98897](https://github.com/openshift/kubernetes/pull/98897)
* add metrics to nodeSyncLoop in service controller [#98779](https://github.com/openshift/kubernetes/pull/98779)
* Apply request context to metrics in apiserver. [#98246](https://github.com/openshift/kubernetes/pull/98246)
* Fix shellcheck issues in cluster/gce/gci/master-helper.sh [#95865](https://github.com/openshift/kubernetes/pull/95865)
* Graduate TTLAfterFinished to beta [#98678](https://github.com/openshift/kubernetes/pull/98678)
* Warn instead of erroring if --gce-zone is not passed to e2e.test when --provider=aws [#98736](https://github.com/openshift/kubernetes/pull/98736)
* test images: Bump resource-consumer to 1.9 [#98917](https://github.com/openshift/kubernetes/pull/98917)
* Deny Ingress on other namespaces [#98390](https://github.com/openshift/kubernetes/pull/98390)
* UDP protocol on connect agnhost command [#98639](https://github.com/openshift/kubernetes/pull/98639)
* Ignore transient errors when gathering stats for Windows Containers in Dockershim [#98510](https://github.com/openshift/kubernetes/pull/98510)
* Change the upper limit of evictionthreshold from 10000% to 100% [#97321](https://github.com/openshift/kubernetes/pull/97321)
* Extract the const for ContainerStateReason [#96451](https://github.com/openshift/kubernetes/pull/96451)
* Simplify leader election code [#98889](https://github.com/openshift/kubernetes/pull/98889)
* organize apis unit tests into subtests [#98910](https://github.com/openshift/kubernetes/pull/98910)
* Fix typo in comment [#97513](https://github.com/openshift/kubernetes/pull/97513)
* Memory manager [#95479](https://github.com/openshift/kubernetes/pull/95479)
* fix staticcheck failures for test/e2e and test/integration [#95281](https://github.com/openshift/kubernetes/pull/95281)
* Fix some shellcheck warnings/errors in cluster/gce/util.sh [#94459](https://github.com/openshift/kubernetes/pull/94459)
* map delete key remove exists check [#90281](https://github.com/openshift/kubernetes/pull/90281)
* Mark vishh as emeritus sig-node approver [#98896](https://github.com/openshift/kubernetes/pull/98896)
* test images: Fixes Windows php source [#98831](https://github.com/openshift/kubernetes/pull/98831)
* test images: Retrigger some image jobs [#98887](https://github.com/openshift/kubernetes/pull/98887)
* avoid hardcoding amd64 specifics on cross compiling [#98861](https://github.com/openshift/kubernetes/pull/98861)
* Speed up pkg/volume/util/operationexecutor unit tests [#98760](https://github.com/openshift/kubernetes/pull/98760)
* kubeadm: update OWNERS for 1.21 [#98547](https://github.com/openshift/kubernetes/pull/98547)
* Fix some shellcheck warnings/errors in cluster/gce/util.sh [#94463](https://github.com/openshift/kubernetes/pull/94463)
* PD CSI e2e: disable resizer volume inuse error check [#98891](https://github.com/openshift/kubernetes/pull/98891)
* update pause image to 3.4.1 and also update the change log [#98205](https://github.com/openshift/kubernetes/pull/98205)
* Improve test coverage for service affinity [#98863](https://github.com/openshift/kubernetes/pull/98863)
* add e2e tests for create/delete volume snapshot with secrets [#95848](https://github.com/openshift/kubernetes/pull/95848)
* Wire up static-analysis so that it executes in the normal 'hack' flow [#98739](https://github.com/openshift/kubernetes/pull/98739)
* kubeadm: Fix placeholder in config print help text [#98839](https://github.com/openshift/kubernetes/pull/98839)
* test: bump CSI container versions for mock testing [#98770](https://github.com/openshift/kubernetes/pull/98770)
* kubeadm: flatten admin.conf for cluster-info generation [#98882](https://github.com/openshift/kubernetes/pull/98882)
* Fix golint errors in test/e2e/common [#97251](https://github.com/openshift/kubernetes/pull/97251)
* fix ignored podinfo parserr [#98802](https://github.com/openshift/kubernetes/pull/98802)
* Default DENY all egress from pods in the namespace [#97738](https://github.com/openshift/kubernetes/pull/97738)
* fix: remove duplicated code in image-util.sh due to merge conflict [#98818](https://github.com/openshift/kubernetes/pull/98818)
* Move deferred taint cleanup call to ensure all are removed [#97819](https://github.com/openshift/kubernetes/pull/97819)
* migrate pkg/controller/volume/pvc_protection_controller.go to structured logs [#98688](https://github.com/openshift/kubernetes/pull/98688)
* Update to go1.15.8 [#98834](https://github.com/openshift/kubernetes/pull/98834)
* kubeadm: get k8s CI version markers from k8s infra bucket [#98836](https://github.com/openshift/kubernetes/pull/98836)
* e2e/storage-csi: replace gcr.io/gke-release to the community registry k8s.gcr.io/sig-storage [#98805](https://github.com/openshift/kubernetes/pull/98805)
* kubeadm: improve error message about node subnet size validation [#98796](https://github.com/openshift/kubernetes/pull/98796)
* Speed up pkg/controller/endpointslice unit tests [#98793](https://github.com/openshift/kubernetes/pull/98793)
* Bump konnectivity-client to v0.0.15 [#98790](https://github.com/openshift/kubernetes/pull/98790)
* Tolerate disabled RBAC in ServiceAccountIssuerDiscovery test [#98813](https://github.com/openshift/kubernetes/pull/98813)
* dockershim hostport manager use HostIP [#98755](https://github.com/openshift/kubernetes/pull/98755)
* add test to ensure that user can clear alwaysallowpaths [#98724](https://github.com/openshift/kubernetes/pull/98724)
* run cronjob every 1minute in UT [#98691](https://github.com/openshift/kubernetes/pull/98691)
* test images: Adds Windows support for resource-consumer [#92719](https://github.com/openshift/kubernetes/pull/92719)
* test images: Adds Windows Container images support (part 3) [#77269](https://github.com/openshift/kubernetes/pull/77269)
* Balance nodes in scheduling e2e [#98699](https://github.com/openshift/kubernetes/pull/98699)
* [Bug 1920221](https://bugzilla.redhat.com/show_bug.cgi?id=1920221): Allow test invokers to skip test waits before and after [#98781](https://github.com/openshift/kubernetes/pull/98781)
* Use FQDN for SERVICEACCOUNT_ISSUER in tests [#98773](https://github.com/openshift/kubernetes/pull/98773)
* Fix unified flag in --logging-format description [#98524](https://github.com/openshift/kubernetes/pull/98524)
* fix VolumeMount permissions with subpaths only apply the right permsions to the last directory [#98717](https://github.com/openshift/kubernetes/pull/98717)
* Repeated err judgment in integration test [#98761](https://github.com/openshift/kubernetes/pull/98761)
* migrate scheduler/taint_manager.go structured logging [#98259](https://github.com/openshift/kubernetes/pull/98259)
* azure file migration go beta [#96293](https://github.com/openshift/kubernetes/pull/96293)
* test/e2e: Allow zones to be passed to e2e cloud provider [#98787](https://github.com/openshift/kubernetes/pull/98787)
* Dont remove volumes when saveVolumeData fails [#96021](https://github.com/openshift/kubernetes/pull/96021)
* Disable sample submission and MAPS Reporting from Windows Defender [#98705](https://github.com/openshift/kubernetes/pull/98705)
* Fixed typo in create_priorityclass [#98747](https://github.com/openshift/kubernetes/pull/98747)
* Make sync Job test tables more readable [#98489](https://github.com/openshift/kubernetes/pull/98489)
* Remove heapster flag in 'kubectl top' [#98464](https://github.com/openshift/kubernetes/pull/98464)
* kubelet: Pods created and rapidly terminated get stuck [#98424](https://github.com/openshift/kubernetes/pull/98424)
* Explicitly add iptables rule to allow healthcheck nodeport [#97824](https://github.com/openshift/kubernetes/pull/97824)
* 97657: Removed "FromPort" in netpol tests [#97863](https://github.com/openshift/kubernetes/pull/97863)
* fix staticcheck failures on vendor/k8s.io/apiserver/pkg/endpoints [#97224](https://github.com/openshift/kubernetes/pull/97224)
* Fix typo in API docs for sideEffects field on admission webhook resources [#96911](https://github.com/openshift/kubernetes/pull/96911)
* test images: Updates Image Builder process in the README [#97457](https://github.com/openshift/kubernetes/pull/97457)
* test images: Mirrors dockerhub images to staging [#95567](https://github.com/openshift/kubernetes/pull/95567)
* fix kube-scheduler cannot send event because the Note field is too large [#98715](https://github.com/openshift/kubernetes/pull/98715)
* scheduler_perf: remove implicit barrier at the end [#98721](https://github.com/openshift/kubernetes/pull/98721)
* Fix nil pointer dereference in disruption controller [#98750](https://github.com/openshift/kubernetes/pull/98750)
* Fix the error of kms_transformation_test about integration test [#98722](https://github.com/openshift/kubernetes/pull/98722)
* migrate default_preemption.go to structured logging [#98518](https://github.com/openshift/kubernetes/pull/98518)
* Add e2e test setup for windows vsphere driver [#98738](https://github.com/openshift/kubernetes/pull/98738)
* Update gce-pd volume topology label to GA [#98700](https://github.com/openshift/kubernetes/pull/98700)
* Update github.com/NYTimes/gziphandler [#98737](https://github.com/openshift/kubernetes/pull/98737)
* Scheduler: add StatusEqual func for Status comparer [#98481](https://github.com/openshift/kubernetes/pull/98481)
* kubectl wait ensures observedGeneration >= generation [#97408](https://github.com/openshift/kubernetes/pull/97408)
* Fix possible flake while testing service endpoints via proxy [#98345](https://github.com/openshift/kubernetes/pull/98345)
* Improve wording in kubeadm upgrade plan [#98728](https://github.com/openshift/kubernetes/pull/98728)
* storage version integration test: check the test server's health before running [#98706](https://github.com/openshift/kubernetes/pull/98706)
* Fix the kube-scheduler binary's description of the --config parameter… [#98254](https://github.com/openshift/kubernetes/pull/98254)
* Fix a bug that untolerated variable is used as tolerated [#98703](https://github.com/openshift/kubernetes/pull/98703)
* enable cross-compile CC config for non-amd64 [#98508](https://github.com/openshift/kubernetes/pull/98508)
* Isolate TestModifyContext from $KUBECONFIG [#98671](https://github.com/openshift/kubernetes/pull/98671)
* OWNERS: RelEng and CHANGELOG updates [#98701](https://github.com/openshift/kubernetes/pull/98701)
* Scheduler: organize scheduler unit tests into subtests [#98696](https://github.com/openshift/kubernetes/pull/98696)
* client-go: export NewDebuggingRoundTripper function and DebugLevel [#98324](https://github.com/openshift/kubernetes/pull/98324)
* Add ignore-errors flag for drain [#98203](https://github.com/openshift/kubernetes/pull/98203)
* Speed up CRD apply/openapi unit tests [#98694](https://github.com/openshift/kubernetes/pull/98694)
* Make image build logs verbose if necessary [#98568](https://github.com/openshift/kubernetes/pull/98568)
* Update delegated authorization options default to eliminate unnecessary SARs [#98325](https://github.com/openshift/kubernetes/pull/98325)
* flowcontrol: make TestConfigConsumer less time-consuming [#98693](https://github.com/openshift/kubernetes/pull/98693)
* Dual stack tests: cover hostnetwork endpoints on dual stack [#98690](https://github.com/openshift/kubernetes/pull/98690)
* Update gogo/protobuf to v1.3.2 [#98477](https://github.com/openshift/kubernetes/pull/98477)
* Preparation for Topology migration to GA for CSI migration [#97823](https://github.com/openshift/kubernetes/pull/97823)
* Remove deprecated DenyEscalatingExec / DenyExecOnPrivileged admission [#98669](https://github.com/openshift/kubernetes/pull/98669)
* kubeadm: introduce static defaults for unit tests [#98638](https://github.com/openshift/kubernetes/pull/98638)
* Add unit test for sample-and-watermark histograms [#97753](https://github.com/openshift/kubernetes/pull/97753)
* Cleanup: remove prometheus dependencies for scheduler [#98338](https://github.com/openshift/kubernetes/pull/98338)
* scheduler: Extend ExtenderFilterResult to include UnschedulableAndUnresolvable nodes [#92866](https://github.com/openshift/kubernetes/pull/92866)
* kubeadm: optimize tests in pki_helpers_tests.go [#98682](https://github.com/openshift/kubernetes/pull/98682)
* fix all keps links 404 for kep folder migration [#98049](https://github.com/openshift/kubernetes/pull/98049)
* Scheduler: organize framework unit tests in subtests [#98588](https://github.com/openshift/kubernetes/pull/98588)
* issues-98409 fix the address of restful-serve-static.go in the commen… [#98455](https://github.com/openshift/kubernetes/pull/98455)
* Expose node status so that external preemption plugins can use it [#98129](https://github.com/openshift/kubernetes/pull/98129)
* serializer: Recognizer interface should take a buffer [#98616](https://github.com/openshift/kubernetes/pull/98616)
* Move Taint/Toleration helpers to component-helpers repo [#98445](https://github.com/openshift/kubernetes/pull/98445)
* Install gotestsum if needed for junit results [#98668](https://github.com/openshift/kubernetes/pull/98668)
* lease manager limit max objects attached to a lease [#98257](https://github.com/openshift/kubernetes/pull/98257)
* Set DOCKER_CLI_EXPERIMENTAL=enabled for images using buildx [#98672](https://github.com/openshift/kubernetes/pull/98672)
* retry dry-run update on conflict [#98670](https://github.com/openshift/kubernetes/pull/98670)
* Graduate ServiceAccountIssuerDiscovery to GA [#98553](https://github.com/openshift/kubernetes/pull/98553)
* Use private key fixtures for kubeadm unit tests [#98664](https://github.com/openshift/kubernetes/pull/98664)
* Network tests: check for errors when dialing from node to services [#98655](https://github.com/openshift/kubernetes/pull/98655)
* Scheduler: remove duplicated error log in framework [#98625](https://github.com/openshift/kubernetes/pull/98625)
* Adding myself as an approver for EndpointSlice controller [#98650](https://github.com/openshift/kubernetes/pull/98650)
* add i18n.T in waitExample [#98503](https://github.com/openshift/kubernetes/pull/98503)
* migrate pkg/scheduler/internal/cache/debugger/comparer.go to structured logs [#98566](https://github.com/openshift/kubernetes/pull/98566)
* Update support resources in github issue template [#98528](https://github.com/openshift/kubernetes/pull/98528)
* Fix staticcheck in test/integration/{examples,framework} [#97295](https://github.com/openshift/kubernetes/pull/97295)
* hack/lib/version.sh: fix error log to stderr [#97999](https://github.com/openshift/kubernetes/pull/97999)
* Move ServiceAccountIssuerDiscovery test into main e2e suite [#98587](https://github.com/openshift/kubernetes/pull/98587)
* Remove WindowsGMSA and WindowsRunAsUserName feature gates [#96531](https://github.com/openshift/kubernetes/pull/96531)
* Add a hyperlink to issue 97685 [#98082](https://github.com/openshift/kubernetes/pull/98082)
* klog 2.5.0 + logr 0.4.0 update [#98488](https://github.com/openshift/kubernetes/pull/98488)
* improve hairpin warning message for network policy tests [#98584](https://github.com/openshift/kubernetes/pull/98584)
* Fix SSA for APIService [#98576](https://github.com/openshift/kubernetes/pull/98576)
* check externalNameService more time [#98521](https://github.com/openshift/kubernetes/pull/98521)
* Remove piosz and add ehashman for sig-inst [#98575](https://github.com/openshift/kubernetes/pull/98575)
* Switch to `docker buildx` for conformance image [#98569](https://github.com/openshift/kubernetes/pull/98569)
* Scheduler: move GetAvoidPodsFromNodeAnnotations to component-helpers [#98540](https://github.com/openshift/kubernetes/pull/98540)
* Disable in-tree plugin without enabling CSI migration [#98243](https://github.com/openshift/kubernetes/pull/98243)
* deflake ipv6 tcp close_wait [#98551](https://github.com/openshift/kubernetes/pull/98551)
* add unit test to simulate an enqueued request that times out [#97471](https://github.com/openshift/kubernetes/pull/97471)
* Move dependency docker/spdystream to moby/spdystream [#98565](https://github.com/openshift/kubernetes/pull/98565)
* Add alisondy to sig-contribex-approvers [#98514](https://github.com/openshift/kubernetes/pull/98514)
* move e2e hostport conflict test to sig-network [#98299](https://github.com/openshift/kubernetes/pull/98299)
* Fix translation of Cinder storage classess to CSI [#98311](https://github.com/openshift/kubernetes/pull/98311)
* optimize proxier duplicate localaddrset [#98083](https://github.com/openshift/kubernetes/pull/98083)
* Fix some shellcheck warnings/errors in cluster/gce/util.sh [#94456](https://github.com/openshift/kubernetes/pull/94456)
* Add timeout config for node_e2e tests [#83268](https://github.com/openshift/kubernetes/pull/83268)
* fix staticcheck:pkg/volume/testing [#96599](https://github.com/openshift/kubernetes/pull/96599)
* add check to gc_admission to allow super users to skip RESTMapping [#98147](https://github.com/openshift/kubernetes/pull/98147)
* Sync node status during kubelet node shutdown [#98005](https://github.com/openshift/kubernetes/pull/98005)
* Fix variable 'state' collides with imported package name [#97748](https://github.com/openshift/kubernetes/pull/97748)
* test images: use recently promoted images [#98320](https://github.com/openshift/kubernetes/pull/98320)
* kubelet: Fix NPE in ephemeral storage eviction [#98261](https://github.com/openshift/kubernetes/pull/98261)
* Remove garbage characters (^M) under test/* [#98245](https://github.com/openshift/kubernetes/pull/98245)
* Fix typo [#98156](https://github.com/openshift/kubernetes/pull/98156)
* Surface info of failed plugins during PerFilter and Filter [#98041](https://github.com/openshift/kubernetes/pull/98041)
* Add explanation for kubeClient != nil in NewMainKubelet [#97932](https://github.com/openshift/kubernetes/pull/97932)
* e2e: DNS autoscaler test was not counting nodes correctly [#97815](https://github.com/openshift/kubernetes/pull/97815)
* Change GetBootTime to work specificaly with FreeBSD [#97270](https://github.com/openshift/kubernetes/pull/97270)
* update metadata-concealment to 1.6 for removing legacy checking [#98336](https://github.com/openshift/kubernetes/pull/98336)
* use exist const to replace ipvs/proxier.go tcp,udp,sctp str [#98297](https://github.com/openshift/kubernetes/pull/98297)
* plumb context with request deadline [#96901](https://github.com/openshift/kubernetes/pull/96901)
* Remove golint based verifications [#98063](https://github.com/openshift/kubernetes/pull/98063)
* Add denyserviceexternalips admission (KEP 2200) [#97395](https://github.com/openshift/kubernetes/pull/97395)
* fix Geting -> Getting [#98421](https://github.com/openshift/kubernetes/pull/98421)
* change minimum bash version to 4.2 [#98420](https://github.com/openshift/kubernetes/pull/98420)
* Update owner aliases [#98530](https://github.com/openshift/kubernetes/pull/98530)
* dependencies: update CSI spec to v1.3.0 [#98527](https://github.com/openshift/kubernetes/pull/98527)
* Rolling back network policy tests [#98491](https://github.com/openshift/kubernetes/pull/98491)
* Use buildx in favor of `FROM --platform` syntax [#98529](https://github.com/openshift/kubernetes/pull/98529)
* Change log: fix broken page anchor url encodings [#98209](https://github.com/openshift/kubernetes/pull/98209)
* Scheduler: wrap all errors in pkg/scheduler [#98485](https://github.com/openshift/kubernetes/pull/98485)
* test images: Remove busybox-helper image [#97456](https://github.com/openshift/kubernetes/pull/97456)
* Bump debian-base to v1.4.0 and debian-iptables to v1.5.0 [#98526](https://github.com/openshift/kubernetes/pull/98526)
* Remove unbounded connection creation; also change worst case delay from 50s to 5s [#98496](https://github.com/openshift/kubernetes/pull/98496)
* Fix the bug that network proxy logging http-connect mode in all cases [#98456](https://github.com/openshift/kubernetes/pull/98456)
* Add pod information to the error logs [#98453](https://github.com/openshift/kubernetes/pull/98453)
* Cleanup: remove legacy prometheus visibility package_group [#98344](https://github.com/openshift/kubernetes/pull/98344)
* CHANGELOG-1.19.md: Fix Spelling error about [function] [#97628](https://github.com/openshift/kubernetes/pull/97628)
* Skip PD tests on 1 node cluster [#98187](https://github.com/openshift/kubernetes/pull/98187)
* fix all grammar and spelling issues in releases of 20210113 [#98047](https://github.com/openshift/kubernetes/pull/98047)
* Update to go1.15.7 [#98363](https://github.com/openshift/kubernetes/pull/98363)
* Deflake ingress e2e updates [#98430](https://github.com/openshift/kubernetes/pull/98430)
* staging/src/k8s.io/apiserver/pkg/admission: migrate to structured logs [#98138](https://github.com/openshift/kubernetes/pull/98138)
* Disallow local loopback for volume hosts [#97934](https://github.com/openshift/kubernetes/pull/97934)
* Add dims to test/utils/image/OWNERS [#98437](https://github.com/openshift/kubernetes/pull/98437)
* update debian-base to buster-v1.3.0 for CVEs [#98401](https://github.com/openshift/kubernetes/pull/98401)
* prefer nominated node - IMPL [#93179](https://github.com/openshift/kubernetes/pull/93179)
* Misspelling of the variable name [#98406](https://github.com/openshift/kubernetes/pull/98406)
* Resolve IP addresses of host-only in filtered dialer [#98436](https://github.com/openshift/kubernetes/pull/98436)
* run node bandwidth tests using iperf2 and collecting more detailed information [#94015](https://github.com/openshift/kubernetes/pull/94015)
* Bug Fix for process_start_time_metric initialization [#98391](https://github.com/openshift/kubernetes/pull/98391)
* test: Add comment for the redundant define name [#96328](https://github.com/openshift/kubernetes/pull/96328)
* Add ashnehete to CHANGELOG reviewers [#98426](https://github.com/openshift/kubernetes/pull/98426)
* Update godoc reference widget to pkg.go.dev [#98425](https://github.com/openshift/kubernetes/pull/98425)
* Fix loadbalancer e2e udp: Part 2 [#98405](https://github.com/openshift/kubernetes/pull/98405)
* Scheduler: wrap errors from DefaultPreemption and InterPodAffinity plugins [#98364](https://github.com/openshift/kubernetes/pull/98364)
* Increase timeout for pod lifecycle test to reach pod status=ready [#96691](https://github.com/openshift/kubernetes/pull/96691)
* Scheduler: wrap errors for framework/runtime [#98266](https://github.com/openshift/kubernetes/pull/98266)
* migrate generic_scheduler.go and types.go to structured logs [#98134](https://github.com/openshift/kubernetes/pull/98134)
* make podTopologyHints protected by lock [#95111](https://github.com/openshift/kubernetes/pull/95111)
* Lower timeout for leaderelection resourcelock [#98061](https://github.com/openshift/kubernetes/pull/98061)
* Lower timeout for leaderelection resourcelock [#98059](https://github.com/openshift/kubernetes/pull/98059)
* Removing network_policy.go test file [#98341](https://github.com/openshift/kubernetes/pull/98341)
* Fix typo for changelog-1.18 [#97943](https://github.com/openshift/kubernetes/pull/97943)
* Fix: kubelet return error when device plugin sets PreStartRequired true while creating pods with 0 resource [#96781](https://github.com/openshift/kubernetes/pull/96781)
* fix e2e loadbalancer test [#98387](https://github.com/openshift/kubernetes/pull/98387)
* combine storage latency and error metrics [#98332](https://github.com/openshift/kubernetes/pull/98332)
* Add cici37 to controller-manager OWNERS as reviewer. [#98240](https://github.com/openshift/kubernetes/pull/98240)
* cpu manager: specify the container CPU set during the creation [#98019](https://github.com/openshift/kubernetes/pull/98019)
* Fix typo in kubectl/.../attach_test.go [#96920](https://github.com/openshift/kubernetes/pull/96920)
* kubelet: improve error message about expired certificates [#98230](https://github.com/openshift/kubernetes/pull/98230)
* Make it possible to build with `make --warn-undefined-variables` [#98197](https://github.com/openshift/kubernetes/pull/98197)
* Update configure-helper.sh to early exit from start-kube-controller-m… [#98037](https://github.com/openshift/kubernetes/pull/98037)
* Less demanding test cases in TestUniformDistribution [#98355](https://github.com/openshift/kubernetes/pull/98355)
* remove e2e miekg/dns dependency [#97808](https://github.com/openshift/kubernetes/pull/97808)
* Fix staticcheck in staging/src/k8s.io/apiserver/pkg/authentication/request/x509 [#97882](https://github.com/openshift/kubernetes/pull/97882)
* finish removal of exportoptions [#98312](https://github.com/openshift/kubernetes/pull/98312)
* OWNERS: Update SIG Release aliases [#97700](https://github.com/openshift/kubernetes/pull/97700)
* storage: document csi.storage.k8s.io/ephemeral also for internal type [#92065](https://github.com/openshift/kubernetes/pull/92065)
* fix(*):inter pod affinity default min score is zero [#98096](https://github.com/openshift/kubernetes/pull/98096)
* e2e sig-network loadbalancer tests [#98333](https://github.com/openshift/kubernetes/pull/98333)
* Copying Netpol API tests from networkpolicy folder [#97898](https://github.com/openshift/kubernetes/pull/97898)
* Scheduler: update potentialVictims as framework.PodInfo type [#98340](https://github.com/openshift/kubernetes/pull/98340)
* Fix typo in device_plugin_test.go [#98337](https://github.com/openshift/kubernetes/pull/98337)
* fix error flag in changlog [#97258](https://github.com/openshift/kubernetes/pull/97258)
* Ensure bash version at least 5.x [#98309](https://github.com/openshift/kubernetes/pull/98309)
* update known issue status for 1.20 changelog [#97517](https://github.com/openshift/kubernetes/pull/97517)
* Adding dims to test/images OWNERS file [#98318](https://github.com/openshift/kubernetes/pull/98318)
* metadata concealment: remove the legacy endpoints from the check [#97789](https://github.com/openshift/kubernetes/pull/97789)
* Remove unused expectedRV in store_test TestGet [#98273](https://github.com/openshift/kubernetes/pull/98273)
* test images: Fixes apparmor-loader image [#98313](https://github.com/openshift/kubernetes/pull/98313)
* Optimize writeline and writeBytesLine in proxier.go [#98249](https://github.com/openshift/kubernetes/pull/98249)
* fix azure file migration issue [#97877](https://github.com/openshift/kubernetes/pull/97877)
* Fix GCE Windows Smoke Test and Support 2004 and 20H2. [#98286](https://github.com/openshift/kubernetes/pull/98286)
* GCE Windows: add 20H2; install docker when nodes are started [#98284](https://github.com/openshift/kubernetes/pull/98284)
* test images: Adds --progress=plain to docker buildx build [#98315](https://github.com/openshift/kubernetes/pull/98315)
* sched: avoid using shareable singleton instance [#98296](https://github.com/openshift/kubernetes/pull/98296)
* Fix repeatedly aquire the inhibit lock [#98088](https://github.com/openshift/kubernetes/pull/98088)
* Made some optimizations, including modifying variable names, omitting… [#97715](https://github.com/openshift/kubernetes/pull/97715)
* clean rs by revision instead of creation timestamp in deployment controller [#97407](https://github.com/openshift/kubernetes/pull/97407)
* test images: Fixes metadata-concealment image building [#98227](https://github.com/openshift/kubernetes/pull/98227)
* Improve the Windows GCE README [#98282](https://github.com/openshift/kubernetes/pull/98282)
* Drop runs-per-test for unit tests [#98272](https://github.com/openshift/kubernetes/pull/98272)
* add metrics for insecure backend proxy [#97814](https://github.com/openshift/kubernetes/pull/97814)
* test images: use promoted kitten 1.4 and nautilus 1.4 [#98271](https://github.com/openshift/kubernetes/pull/98271)
* test images: Prepend linux/ to peer-finder BASEIMAGEs [#98226](https://github.com/openshift/kubernetes/pull/98226)
* Passes a context to the drain helper object [#97078](https://github.com/openshift/kubernetes/pull/97078)
* cleanup: fix the format of kubectl proxy examples [#97688](https://github.com/openshift/kubernetes/pull/97688)
* Remove kubectl alpha debug command in 1.21 [#98111](https://github.com/openshift/kubernetes/pull/98111)
* Fix golint errors for k8s.io/cli-runtime/pkg/genericclioptions/ [#98003](https://github.com/openshift/kubernetes/pull/98003)
* fix vendor/k8s.io/cli-runtime/pkg/printers staticcheck [#97841](https://github.com/openshift/kubernetes/pull/97841)
* remove unused variable in e2e test[types.go] [#97556](https://github.com/openshift/kubernetes/pull/97556)
* SchedulerPriorities [Serial] Pod should avoid nodes that have avoidPod annotation: clean remaining pods [#94684](https://github.com/openshift/kubernetes/pull/94684)
* code cleanup for kubectl alpha -h [#97523](https://github.com/openshift/kubernetes/pull/97523)
* Comment default behaviour of kubectl drain.GracePeriodSeconds [#96812](https://github.com/openshift/kubernetes/pull/96812)
* test images: Fixes echoserver image for Windows [#98189](https://github.com/openshift/kubernetes/pull/98189)
* tests: Removes node created by test [#78862](https://github.com/openshift/kubernetes/pull/78862)
* staging/src/k8s.io/apiserver/pkg/audit/policy/reader.go: migrate logs to structured logging [#98252](https://github.com/openshift/kubernetes/pull/98252)
* Change log:Fix hyperlink errors about 87933 and limit-priority-class-consumption-by-default [#98212](https://github.com/openshift/kubernetes/pull/98212)
* Don't spawn a goroutine for every event recording [#95664](https://github.com/openshift/kubernetes/pull/95664)
* test images: Small changes to trigger image postsubmit jobs [#98228](https://github.com/openshift/kubernetes/pull/98228)
* migrate proxy/winuserspace/proxier.go logs to structured logging [#97941](https://github.com/openshift/kubernetes/pull/97941)
* test/e2e/framework: Log arguments at a higher level [#98237](https://github.com/openshift/kubernetes/pull/98237)
* Add jpbetz to controller-manager OWNERS as reviewer [#97923](https://github.com/openshift/kubernetes/pull/97923)
* remove experimental windows container hyper-v support with Docker [#97141](https://github.com/openshift/kubernetes/pull/97141)
* Write PodProxyWithPath & ServiceProxyWithPath test - + 12 endpoint coverage [#95503](https://github.com/openshift/kubernetes/pull/95503)
* Remove dependency of generators from create configmap [#97981](https://github.com/openshift/kubernetes/pull/97981)
* Scheduler: Update the PreFilterExtensions interface to use PodInfo [#97599](https://github.com/openshift/kubernetes/pull/97599)
* Fix kubelet from panic after getting the wrong signal [#98200](https://github.com/openshift/kubernetes/pull/98200)
* Add trace to SerializeObject [#97953](https://github.com/openshift/kubernetes/pull/97953)
* Increase coverage of Job validation [#97865](https://github.com/openshift/kubernetes/pull/97865)
* Test enabled and disabled gates for Job strategy [#97861](https://github.com/openshift/kubernetes/pull/97861)
* fix problem that NewReplicaSet shows <none> when describing deployments [#97752](https://github.com/openshift/kubernetes/pull/97752)
* Remove the dependency between create poddisruptionbudget and generators [#97429](https://github.com/openshift/kubernetes/pull/97429)
* Moving kubectl logs Long command into variable [#97895](https://github.com/openshift/kubernetes/pull/97895)
* Namespace has no effect when exposing deployment with --dry-run=client [#97492](https://github.com/openshift/kubernetes/pull/97492)
* Cleanup: Remove debug print [#98192](https://github.com/openshift/kubernetes/pull/98192)
* kubectl diff: update regex to allow equal sign [#98158](https://github.com/openshift/kubernetes/pull/98158)
* kubectl: run - remove unneeded vars [#98110](https://github.com/openshift/kubernetes/pull/98110)
* staging\src\k8s.io\apiserver\pkg\endpoints: migrate to structured logs [#98093](https://github.com/openshift/kubernetes/pull/98093)
* Print queue lengths on watch termination [#98208](https://github.com/openshift/kubernetes/pull/98208)
* Apply WithContext to metrics in apiserver admission webhook [#98196](https://github.com/openshift/kubernetes/pull/98196)
* Support IPv6 on the e2e test ""should resolve connection reset issue #74839 " [#95351](https://github.com/openshift/kubernetes/pull/95351)
* Attempt to deflake networking tests in large clusters [#98181](https://github.com/openshift/kubernetes/pull/98181)
* Drop liggitt from cli-maintainers alias [#98177](https://github.com/openshift/kubernetes/pull/98177)
* add myself as reviewer in pkg/controller/OWNERS [#98107](https://github.com/openshift/kubernetes/pull/98107)
* kubeadm should ignore cgroup driver check on Windows node [#97764](https://github.com/openshift/kubernetes/pull/97764)
* fix: volume stats disabled when value is negative.(Currently, 0 means defualt 1m) [#96675](https://github.com/openshift/kubernetes/pull/96675)
* Cherry pick 443 and 448 from cloud provider azure [#97635](https://github.com/openshift/kubernetes/pull/97635)
* add knabben to test/e2e/network/netpol/OWNERS [#98193](https://github.com/openshift/kubernetes/pull/98193)
* test images: Minor changes to trigger postsubmit image building jobs [#98190](https://github.com/openshift/kubernetes/pull/98190)
* fix typo and decs in apiserver_etcd_test.go [#98055](https://github.com/openshift/kubernetes/pull/98055)
* Cleanup GCI / COS README.md [#96823](https://github.com/openshift/kubernetes/pull/96823)
* fix invalid indentation [#97946](https://github.com/openshift/kubernetes/pull/97946)
* fix golint in volume fs [#97930](https://github.com/openshift/kubernetes/pull/97930)
* test images: bump BASEIMAGE of kitten and nautilus to agnhost 2.26 [#98188](https://github.com/openshift/kubernetes/pull/98188)
* Delete static pod gracefully and fix mirrorPodTerminationMap leak [#98103](https://github.com/openshift/kubernetes/pull/98103)
* Fix statefulset absent of kubectl autoscale bash completions [#97800](https://github.com/openshift/kubernetes/pull/97800)
* modify hostname of ErrReason [#97454](https://github.com/openshift/kubernetes/pull/97454)
* kubeadm: APIEndpointFromString verifies ip [#98136](https://github.com/openshift/kubernetes/pull/98136)
* [kubelet metrics] Readjust kubelet_containers_per_pod_count bucket [#98169](https://github.com/openshift/kubernetes/pull/98169)
* Change yaml.load() to safe_load() [#98160](https://github.com/openshift/kubernetes/pull/98160)
* kubelet logs print 'kubelet nodes sync' frequently [#98137](https://github.com/openshift/kubernetes/pull/98137)
* Pull hollow node images from real nodes [#97858](https://github.com/openshift/kubernetes/pull/97858)
* remove weird pause args from this networking.go, that break the perio… [#98124](https://github.com/openshift/kubernetes/pull/98124)
* Copying SCTP tests to Netpol e2e framework [#97897](https://github.com/openshift/kubernetes/pull/97897)
* fix klog.Info -> klog.Infof [#98095](https://github.com/openshift/kubernetes/pull/98095)
* Document our official blue color. [#98113](https://github.com/openshift/kubernetes/pull/98113)
* Scheduler: Add function AddPodInfo(*PodInfo) for NodeInfo struct [#97917](https://github.com/openshift/kubernetes/pull/97917)
* use klog.Info and klog.Warning when had no format [#96552](https://github.com/openshift/kubernetes/pull/96552)
* bump agnhost to 2.26 [#98101](https://github.com/openshift/kubernetes/pull/98101)
* Request: Add ehashman as sig-node-reviewer [#98036](https://github.com/openshift/kubernetes/pull/98036)
* Default cluster dns-domain to empty string in e2e_node suite [#98025](https://github.com/openshift/kubernetes/pull/98025)
* Fix the build/README.md documentation file on docker-machine remote [#97935](https://github.com/openshift/kubernetes/pull/97935)
* Fix typo in pkg/kubelet/.../helpers_test.go [#97589](https://github.com/openshift/kubernetes/pull/97589)
* Update defaulter gen to not use reflect [#96960](https://github.com/openshift/kubernetes/pull/96960)
* Finetune container-runtime-endpoint option help text [#96857](https://github.com/openshift/kubernetes/pull/96857)
* kubeadm: Update versions for 1.21 [#98008](https://github.com/openshift/kubernetes/pull/98008)
* replace bytes.Buffer with strings.Builder [#97552](https://github.com/openshift/kubernetes/pull/97552)
* fix privileged config of Pod Sandbox [#96877](https://github.com/openshift/kubernetes/pull/96877)
* directly query dns and resolve it in the e2es for windows [#97987](https://github.com/openshift/kubernetes/pull/97987)
* Build multiplatform images when issue `make release-images` [#97459](https://github.com/openshift/kubernetes/pull/97459)
* Add context to metric interface in component-base/mertic [#97173](https://github.com/openshift/kubernetes/pull/97173)
* cleanup unused type conversion [#97155](https://github.com/openshift/kubernetes/pull/97155)
* Show the details on the failure of preemption [#97184](https://github.com/openshift/kubernetes/pull/97184)
* Ensure invalid cluster-scoped children do not block cleanup of valid namespaced children [#98068](https://github.com/openshift/kubernetes/pull/98068)
* Fix golint issues in client/custom_metrics/scheme [#98017](https://github.com/openshift/kubernetes/pull/98017)
* Fix spelling typos: scheduable -> schedulable [#97880](https://github.com/openshift/kubernetes/pull/97880)
* Add missing word to ServiceSpec doc [#97896](https://github.com/openshift/kubernetes/pull/97896)
* migrate winkernel network type string "overlay" as const [#98043](https://github.com/openshift/kubernetes/pull/98043)
* make hostPort match test linuxonly [#97003](https://github.com/openshift/kubernetes/pull/97003)
* Repair pigz URL for Windows GCE nodes [#98081](https://github.com/openshift/kubernetes/pull/98081)
* Uses offset instead of line number in JSONSyntaxError [#97990](https://github.com/openshift/kubernetes/pull/97990)
* Modify LeaderElectionConfiguration .ResourceNamespace comment [#97361](https://github.com/openshift/kubernetes/pull/97361)
* Fix bug in Member Exists Join for Kubeadm etcd join [#97372](https://github.com/openshift/kubernetes/pull/97372)
* test/utils/image: Support a single repository [#93510](https://github.com/openshift/kubernetes/pull/93510)
* Mount /var/lib/kubelet/pki on tmpfs [#97868](https://github.com/openshift/kubernetes/pull/97868)
* Update Dockerfile_windows [#98065](https://github.com/openshift/kubernetes/pull/98065)
* vendor: update cAdvisor to v0.38.7 [#98042](https://github.com/openshift/kubernetes/pull/98042)
* Lower timeout for leaderelection resourcelock [#97958](https://github.com/openshift/kubernetes/pull/97958)
* kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images [#97087](https://github.com/openshift/kubernetes/pull/97087)
* Refactor: rewrite `Merge` method to address readability and efficiency [#97794](https://github.com/openshift/kubernetes/pull/97794)
* Update help document address [#96698](https://github.com/openshift/kubernetes/pull/96698)
* CHANGELOG:Fix notes of PR 97440 [#98056](https://github.com/openshift/kubernetes/pull/98056)
* remove the TokenRequest and TokenRequestProjection feature gates [#97148](https://github.com/openshift/kubernetes/pull/97148)
* [Leader election] Add documentation to function [#98058](https://github.com/openshift/kubernetes/pull/98058)
* update agnhost readme [#98054](https://github.com/openshift/kubernetes/pull/98054)
* Fix Spelling error about [errrors] [#97709](https://github.com/openshift/kubernetes/pull/97709)
* fix typo of [expect] in pkg/controller/../scheduler_binder.go [#97788](https://github.com/openshift/kubernetes/pull/97788)
* Bump NodeStatusReportFrequency default value to 5min in comment [#95135](https://github.com/openshift/kubernetes/pull/95135)
* Fix typo of invalide in validation_test.go] [#97875](https://github.com/openshift/kubernetes/pull/97875)
* feat: enable SPDY pings on connections [#97083](https://github.com/openshift/kubernetes/pull/97083)
* fix apf controller unit test [#98023](https://github.com/openshift/kubernetes/pull/98023)
* make labels.NewRequirement returns aggregated field.ErrorList [#97538](https://github.com/openshift/kubernetes/pull/97538)
* fix nodelifecyle controller not add NoExecute taint bug [#96876](https://github.com/openshift/kubernetes/pull/96876)
* Update cri-tools to v1.20.0 [#97967](https://github.com/openshift/kubernetes/pull/97967)
* e2e: split test into kubeup & generic tests [#97878](https://github.com/openshift/kubernetes/pull/97878)
* Fix non-amd64 conformance image builds [#97982](https://github.com/openshift/kubernetes/pull/97982)
* crd create event: skip storage teardown if the crd info doesn't change [#97470](https://github.com/openshift/kubernetes/pull/97470)
* proxy: Restructure config validation tests to check errors [#94902](https://github.com/openshift/kubernetes/pull/94902)
* Fix golint errors for kubectl/pkg/cmd/certificates/certificates.go [#97884](https://github.com/openshift/kubernetes/pull/97884)
* Disables APF if the aggregated apiserver cannot locate the core kube-apiserver [#97957](https://github.com/openshift/kubernetes/pull/97957)
* Add API testdata population instructions [#97971](https://github.com/openshift/kubernetes/pull/97971)
* Fix HSTS Missing From HTTPS Server(Nessus Scanner) [#96502](https://github.com/openshift/kubernetes/pull/96502)
* Fix generate-internal-groups.sh for bash < 5.x [#95360](https://github.com/openshift/kubernetes/pull/95360)
* Moving egress deny with DNS to a policy function [#97638](https://github.com/openshift/kubernetes/pull/97638)
* Add a log in verifyDevicePath [#68022](https://github.com/openshift/kubernetes/pull/68022)
* test images: Print docker version and docker buildx version [#97976](https://github.com/openshift/kubernetes/pull/97976)
* fix:replace cfssl resources and upgrade them to 1.5.0 [#97947](https://github.com/openshift/kubernetes/pull/97947)
* pause image: Fixes clean make action [#97853](https://github.com/openshift/kubernetes/pull/97853)
* set GOOS=linux for the staticcheck tool [#97959](https://github.com/openshift/kubernetes/pull/97959)
* Revert "Merge pull request #92817 from kmala/kubelet" [#97980](https://github.com/openshift/kubernetes/pull/97980)
* GracefulNodeShutdown  configuration  remove executable permission bits [#97950](https://github.com/openshift/kubernetes/pull/97950)
* Fix openapi model generation for apply when x-int-or-string is set [#97172](https://github.com/openshift/kubernetes/pull/97172)
* [k8s.io/apimachinery/pkg/test]: cleanup commented code [#97891](https://github.com/openshift/kubernetes/pull/97891)
* Update hybrid_network.go [#97209](https://github.com/openshift/kubernetes/pull/97209)
* kubelet waits for node lister to sync at least once [#94087](https://github.com/openshift/kubernetes/pull/94087)
* pause: encode Windows OS version in image tag instead of repository [#97782](https://github.com/openshift/kubernetes/pull/97782)
* remove unused constant of kubeletPort in e2e test [#97653](https://github.com/openshift/kubernetes/pull/97653)
* Ensuring default DNS cluster-domain of Kubelet is cluster.local [#96315](https://github.com/openshift/kubernetes/pull/96315)
* Fix kubectl-convert import known versions [#97754](https://github.com/openshift/kubernetes/pull/97754)
* fix static check for vendor/k8s.io/apiserver/pkg/storage/etcd3/ [#97786](https://github.com/openshift/kubernetes/pull/97786)
* Fixes nil panic for nil delegated auth options [#97954](https://github.com/openshift/kubernetes/pull/97954)
* kubeadm: trim leading "v" when running CoreDNS migration preflight [#97919](https://github.com/openshift/kubernetes/pull/97919)
* changeLog-Fixtypo [#97911](https://github.com/openshift/kubernetes/pull/97911)
* CHANGELOG: fix hyperlink failure for author [#96972](https://github.com/openshift/kubernetes/pull/96972)
* Fix typo of changelog-1.20 [#97913](https://github.com/openshift/kubernetes/pull/97913)
* fix unit test "TestSPDYExecutorStream" flaking problem [#97909](https://github.com/openshift/kubernetes/pull/97909)
* Optimize log output for job controller [#97113](https://github.com/openshift/kubernetes/pull/97113)
* Use volumeHandle as PV name when translating EBS inline volume [#96821](https://github.com/openshift/kubernetes/pull/96821)
* fix: Azure/OIDC auth panics when no AuthProviderConfigPersister is nil [#97095](https://github.com/openshift/kubernetes/pull/97095)
* APF: make command-line args validation error more descriptive [#96722](https://github.com/openshift/kubernetes/pull/96722)
* kube-proxy: track serving/terminating conditions in endpoints cache [#96371](https://github.com/openshift/kubernetes/pull/96371)
* Do not set sysctlRouteLocalnet (CVE-2020-8558) [#92938](https://github.com/openshift/kubernetes/pull/92938)
* Update gluster client, configure with filtered dialer [#97922](https://github.com/openshift/kubernetes/pull/97922)
* migrate proxy.UpdateServiceMap to  be a method of ServiceMap [#97899](https://github.com/openshift/kubernetes/pull/97899)
* CHANGELOG: fix punctuation error [#96941](https://github.com/openshift/kubernetes/pull/96941)
* Optimized some non-standard variable names [#97477](https://github.com/openshift/kubernetes/pull/97477)
* Add 1.20 API testdata [#97761](https://github.com/openshift/kubernetes/pull/97761)
* Fix stale object causing a panic on DELETE event [#97255](https://github.com/openshift/kubernetes/pull/97255)
* test images: Adds BASEIMAGE for windows/amd64/2004 and windows/amd64/20H2 [#97046](https://github.com/openshift/kubernetes/pull/97046)
* APF e2e test: wait for steady state before proceeding [#96984](https://github.com/openshift/kubernetes/pull/96984)
* Track opened connections with a single tracker per authenticator [#97857](https://github.com/openshift/kubernetes/pull/97857)
* Improve logging in cacheWatcher [#97843](https://github.com/openshift/kubernetes/pull/97843)
* cleanup: add -q as shorthand for --quiet [#97626](https://github.com/openshift/kubernetes/pull/97626)
* add more usage info for kubectl wait option --for [#97564](https://github.com/openshift/kubernetes/pull/97564)
* apiserver add lease object count metric [#97480](https://github.com/openshift/kubernetes/pull/97480)
* add rbac rule for storage version garbage collector [#97293](https://github.com/openshift/kubernetes/pull/97293)
* Set a static Retry-After when evicting a pod is not allowed. [#90299](https://github.com/openshift/kubernetes/pull/90299)
* Update github.com/miekg/dns to pick up fix for CVE-2019-19794. [#97405](https://github.com/openshift/kubernetes/pull/97405)
* CHANGELOG: fix symbols lost, formatter error [#97008](https://github.com/openshift/kubernetes/pull/97008)
* CHANGELOG: Fix typo for release-note in 1.20 [#97416](https://github.com/openshift/kubernetes/pull/97416)
* Change log:Fix Spelling error about [occuring] [#97711](https://github.com/openshift/kubernetes/pull/97711)
* CHANGELOG: add a hyperlink to issue 86282 [#97518](https://github.com/openshift/kubernetes/pull/97518)
* remove generator dependency in create service account [#96492](https://github.com/openshift/kubernetes/pull/96492)
* apiserver: print unknown responsewriter error strings, not only %#+v [#96887](https://github.com/openshift/kubernetes/pull/96887)
* Fix typo of BoostrapToken in kubeadmin-type.go] [#97873](https://github.com/openshift/kubernetes/pull/97873)
* e2e: recognize multi-node control planes [#97879](https://github.com/openshift/kubernetes/pull/97879)
* Add BeginCreate and BeginUpdate REST hooks [#96393](https://github.com/openshift/kubernetes/pull/96393)
* cleanup: legacy 'ENV name value' syntax deprecated(Docker 20.10) [#97177](https://github.com/openshift/kubernetes/pull/97177)
* Fix node selector hostmaps [#97816](https://github.com/openshift/kubernetes/pull/97816)
* move all variables in sampleAndWaterMarkHistograms::innerSet [#97860](https://github.com/openshift/kubernetes/pull/97860)
* CHANGELOG-1.20: fix anchor point err [#97494](https://github.com/openshift/kubernetes/pull/97494)
* e2e test regression image multiarch [#96792](https://github.com/openshift/kubernetes/pull/96792)
* Configure --tls-cipher-suites on kube-apiserver [#97742](https://github.com/openshift/kubernetes/pull/97742)
* Reduce number of  buckets for etcd_request_duration_seconds metric [#96754](https://github.com/openshift/kubernetes/pull/96754)
* prevent panic on webhook authenticator and authorizer timeout before response [#97820](https://github.com/openshift/kubernetes/pull/97820)
* Fix node port tests windows nodeSelector metadata [#97809](https://github.com/openshift/kubernetes/pull/97809)
* build: Update bazel to 3.4.1 and k/repo-infra to v0.2.0 [#96011](https://github.com/openshift/kubernetes/pull/96011)
* p&f e2e: the test should log expected and actual response header in case it fails. [#96966](https://github.com/openshift/kubernetes/pull/96966)
* Add 'apiserver_terminated_watchers_total' [#97845](https://github.com/openshift/kubernetes/pull/97845)
* don´t panic on e2e ESIPP tests [#97844](https://github.com/openshift/kubernetes/pull/97844)
* Revert "dump conntrack table on e2e conntrack failures" [#97839](https://github.com/openshift/kubernetes/pull/97839)
* oidc authenticator: attempt to immediately initialize verifier [#97693](https://github.com/openshift/kubernetes/pull/97693)
* fix staticcheck error in vendor/k8s.io/apiserver/pkg/server/storage [#96657](https://github.com/openshift/kubernetes/pull/96657)
* set numberOfWorkers for netpol suite to the ideal value (3) that is n… [#97702](https://github.com/openshift/kubernetes/pull/97702)
* proxy/ipvs: return non-nil error when there is no matched IPVS servic… [#97716](https://github.com/openshift/kubernetes/pull/97716)
* adding windows os selector to the dnsPolicy tests [#97804](https://github.com/openshift/kubernetes/pull/97804)
* migrate proxy/iptables/proxier.go logs to structured logging [#97678](https://github.com/openshift/kubernetes/pull/97678)
* Add NewProxyHandler func [#97675](https://github.com/openshift/kubernetes/pull/97675)
* ApiServer: Add benchmark for ensureRBACPolicy [#97652](https://github.com/openshift/kubernetes/pull/97652)
* CHANGELOG: fix typo [#97446](https://github.com/openshift/kubernetes/pull/97446)
* fix slice controller logging for services ipfamily [#97721](https://github.com/openshift/kubernetes/pull/97721)
* Relax apf_controller's reaction to certain errors [#97370](https://github.com/openshift/kubernetes/pull/97370)
* bugfix: nodeport quota check failure result into failing to create a clusterip service [#97451](https://github.com/openshift/kubernetes/pull/97451)
* fix typo of [expect] in pkg/kubelet/../policy_static_test.go [#97787](https://github.com/openshift/kubernetes/pull/97787)
* Promote Immutable Secrets/ConfigMaps to Stable [#97615](https://github.com/openshift/kubernetes/pull/97615)
* Update: Write Read Status, Patch & List APIService test +3 endpoints [#97327](https://github.com/openshift/kubernetes/pull/97327)
* CSI attacher test cleanup [#97499](https://github.com/openshift/kubernetes/pull/97499)
* Add e2e networkPolicy test to validate egress deny precedence over ingress allow [#97524](https://github.com/openshift/kubernetes/pull/97524)
* Default deny egress with pod label selector [#97736](https://github.com/openshift/kubernetes/pull/97736)
* fix typo in dns.go [#97314](https://github.com/openshift/kubernetes/pull/97314)
* cleanup: change klog.Fatalf to fmt.Errorf for `kubectl auth reconcile` [#97645](https://github.com/openshift/kubernetes/pull/97645)
* 97425: improve netpol comments [#97571](https://github.com/openshift/kubernetes/pull/97571)
* The code in TestNonePolicyName does not need to wrap, so fix it. [#97749](https://github.com/openshift/kubernetes/pull/97749)
* add OWNERS file to kubernetes/test/e2e/network/netpol [#97526](https://github.com/openshift/kubernetes/pull/97526)
* Remove docker remote / docker-machine from build scripts [#97618](https://github.com/openshift/kubernetes/pull/97618)
* Release reserved GCE IP address after ensure completes, irrespective of outcome. [#97740](https://github.com/openshift/kubernetes/pull/97740)
* code cleanup for kubectl port-forward [#97532](https://github.com/openshift/kubernetes/pull/97532)
* fix vendor/k8s.io/apimachinery/pkg/runtime staticcheck [#94396](https://github.com/openshift/kubernetes/pull/94396)
* Fix BoundObjectRef APIVersion proto name [#97379](https://github.com/openshift/kubernetes/pull/97379)
* chore(gce): pass auth flags to KCM and KS [#96550](https://github.com/openshift/kubernetes/pull/96550)
* Fix loopback device lookup [#96889](https://github.com/openshift/kubernetes/pull/96889)
* Fix test failures [#96866](https://github.com/openshift/kubernetes/pull/96866)
* Fix Spelling error about [formatted] for statefulset.go [#97629](https://github.com/openshift/kubernetes/pull/97629)
* Bug fix [#97621](https://github.com/openshift/kubernetes/pull/97621)
* Fix on comments [#97540](https://github.com/openshift/kubernetes/pull/97540)
* Fix golint issues in pkg/kubelet/types [#97374](https://github.com/openshift/kubernetes/pull/97374)
* Fixes the unit tests to be more tolerant with error messages [#96906](https://github.com/openshift/kubernetes/pull/96906)
* Cleanup: fix typos in scheduler interpodaffinity package [#97591](https://github.com/openshift/kubernetes/pull/97591)
* Cleanup: fix typos in garbagecollector_test.go [#97572](https://github.com/openshift/kubernetes/pull/97572)
* remove input parameter that is invalid before [#96806](https://github.com/openshift/kubernetes/pull/96806)
* Up and down scale stabilize with envelope. [#97348](https://github.com/openshift/kubernetes/pull/97348)
* kubeadm: avoid detection of the container runtime for commands that do not need it [#97625](https://github.com/openshift/kubernetes/pull/97625)
* Use autogenerated Job conversion functions [#97617](https://github.com/openshift/kubernetes/pull/97617)
* Fix typo in pkg/volume/rbd/rbd_test.go [#97587](https://github.com/openshift/kubernetes/pull/97587)
* remove LegacyNodeRoleBehavior and mv ServiceNodeExclusion to GA [#97543](https://github.com/openshift/kubernetes/pull/97543)
* Remove duplicate nodeSelector for kube-dns [#97536](https://github.com/openshift/kubernetes/pull/97536)
* Fix bug in CPUManager with race on container map access [#97427](https://github.com/openshift/kubernetes/pull/97427)
* [flaky test] fix devicemanager TestDevicePluginReRegistrationProbeMode failed [#97193](https://github.com/openshift/kubernetes/pull/97193)
* Scheduler: Move PodPassesFiltersOnNode out of core to avoid plugin dependency [#96929](https://github.com/openshift/kubernetes/pull/96929)
* Remove CSINodeInfo feature gate [#96561](https://github.com/openshift/kubernetes/pull/96561)
* Optimize some irregular variable names [#96854](https://github.com/openshift/kubernetes/pull/96854)
* Migrate scheduler.go, factory.go to structured logging [#97509](https://github.com/openshift/kubernetes/pull/97509)
* Fix golint issues in api/admission and api/admissionregistration [#97466](https://github.com/openshift/kubernetes/pull/97466)
* fix kubectl label error when local=true is set. [#97440](https://github.com/openshift/kubernetes/pull/97440)
* refactor(kubeadm): remove the "alpha certs" command [#97706](https://github.com/openshift/kubernetes/pull/97706)
* : CoreDNS preflight: Parse correct version syntax [#97620](https://github.com/openshift/kubernetes/pull/97620)
* Fix staticcheck in staging/src/k8s.io/apiserver/pkg/admission/initializer [#97656](https://github.com/openshift/kubernetes/pull/97656)
* kubeadm: improve the error messages when validating discovery CA hash [#97290](https://github.com/openshift/kubernetes/pull/97290)
* Ensure reproducible builds when build through docker [#97699](https://github.com/openshift/kubernetes/pull/97699)
* Cleanup several GA feature flags which should be removed in 1.21 [#97306](https://github.com/openshift/kubernetes/pull/97306)
* fix incorrect dev name in log when finding link by name returns error [#97677](https://github.com/openshift/kubernetes/pull/97677)
* Remove duplicate nodeSelector for kube-dns in kube-dns.yaml.base [#97666](https://github.com/openshift/kubernetes/pull/97666)
* add node selector info in ErrReasonPod [#97521](https://github.com/openshift/kubernetes/pull/97521)
* Remove AttachVolumeLimit feature gate [#96539](https://github.com/openshift/kubernetes/pull/96539)
* Add a hyperlink to issue 95156 [#97496](https://github.com/openshift/kubernetes/pull/97496)
* fix: Fix ListByResourceGroup in azure diskClient mock [#97307](https://github.com/openshift/kubernetes/pull/97307)
* Update nvidia-gpu-device-plugin addon image path [#96276](https://github.com/openshift/kubernetes/pull/96276)
* remove --cleanup-ipvs flag of kube-proxy [#97336](https://github.com/openshift/kubernetes/pull/97336)
* Fix Spelling error  about [workflow] for kubeadm [#97631](https://github.com/openshift/kubernetes/pull/97631)
* Adding casey (sig-net chair) to approvers list for test/e2e/network [#97469](https://github.com/openshift/kubernetes/pull/97469)
* Fix typo in staging/src/.../wait_test.go [#97590](https://github.com/openshift/kubernetes/pull/97590)
* [pkg/cluster/ports/ports]: fix minor syntax [#97570](https://github.com/openshift/kubernetes/pull/97570)
* Fix missing cadvisor machine metrics [#97006](https://github.com/openshift/kubernetes/pull/97006)
* refactor(kubeadm): remove deprecated command "alpha selfhosting pivot" [#97627](https://github.com/openshift/kubernetes/pull/97627)
* fix typo of command “kubectl completion -h” [#97433](https://github.com/openshift/kubernetes/pull/97433)
* use Lstat instead of Stat for unix socket on windows [#97576](https://github.com/openshift/kubernetes/pull/97576)
* feat(kubeadm): graduate command "kubeconfig user" [#97583](https://github.com/openshift/kubernetes/pull/97583)
* fix log format optimization [#96606](https://github.com/openshift/kubernetes/pull/96606)
* : Bump CoreDNS version to 1.8.0 [#96429](https://github.com/openshift/kubernetes/pull/96429)
* vendor: update system-validators to v1.3.0 [#96378](https://github.com/openshift/kubernetes/pull/96378)
* Update DeltaFIFO documentation and group Delta definitions to the top of the file [#97326](https://github.com/openshift/kubernetes/pull/97326)
* leader migration configuration: parsing & validation. [#96226](https://github.com/openshift/kubernetes/pull/96226)
* Fix incorrect literal quotes in logdump path [#97447](https://github.com/openshift/kubernetes/pull/97447)
* kubeadm: support certificate chain validation [#97266](https://github.com/openshift/kubernetes/pull/97266)
* remove unused funcs for kubeadm tests [#97452](https://github.com/openshift/kubernetes/pull/97452)
* configure docker on containerd nodes so it wouldn't reserver 172.17 s… [#97376](https://github.com/openshift/kubernetes/pull/97376)
* Fix Makefile cut-paste comment errors [#97482](https://github.com/openshift/kubernetes/pull/97482)
* Skip multi az PD storage test if no extra zone detected [#97432](https://github.com/openshift/kubernetes/pull/97432)
* Port deviceManager to windows container manager to enable GPU access [#93285](https://github.com/openshift/kubernetes/pull/93285)
* kubeadm: clean redundant whitespace for join command template [#97413](https://github.com/openshift/kubernetes/pull/97413)
* new NetworkPolicy Validation suite [#91592](https://github.com/openshift/kubernetes/pull/91592)
* fix bugs when copying deployment annotations to replicaSet if value is empty [#94858](https://github.com/openshift/kubernetes/pull/94858)
* Migrate pkg/scheduler logs to structured logging [#97349](https://github.com/openshift/kubernetes/pull/97349)
* clean up executing request on panic [#97206](https://github.com/openshift/kubernetes/pull/97206)
* test images: Adds 20H2 to the windows_os_versions [#97421](https://github.com/openshift/kubernetes/pull/97421)
* Refresh Timestamp when pod is not present in the three sub-queues [#97302](https://github.com/openshift/kubernetes/pull/97302)
* fix: azure file latency issue for metadata-heavy workloads [#97082](https://github.com/openshift/kubernetes/pull/97082)
* Unify variable naming between GuaranteedUpdate and Delete in storage [#97418](https://github.com/openshift/kubernetes/pull/97418)
* Delete unused interface [#92335](https://github.com/openshift/kubernetes/pull/92335)
* test images: Allows sample-apiserver to be built without a TTY [#97422](https://github.com/openshift/kubernetes/pull/97422)
* 32bit > 4GB integer overflow edge case fix [#97403](https://github.com/openshift/kubernetes/pull/97403)
* Requesting reviewers status for SergeyKanzhelev [#97329](https://github.com/openshift/kubernetes/pull/97329)
* fix Azure file share not deleted issue when the namespace is deleted [#97417](https://github.com/openshift/kubernetes/pull/97417)
* Updates deps in order to remove rsc.io/sampler [#97337](https://github.com/openshift/kubernetes/pull/97337)
* Fix nil VMSS name when setting service to auto mode [#97366](https://github.com/openshift/kubernetes/pull/97366)
* Add KEDA to the External Metrics API implementations [#96056](https://github.com/openshift/kubernetes/pull/96056)
* Use force umount for nfs volumes [#96844](https://github.com/openshift/kubernetes/pull/96844)
* Fix the deadlock in priority and fairness config controller [#97323](https://github.com/openshift/kubernetes/pull/97323)
* pause image: Adds 20H2 Windows OS Version base image [#97322](https://github.com/openshift/kubernetes/pull/97322)
* deprecate PSP in 1.21, but leave removal at 1.25 [#97171](https://github.com/openshift/kubernetes/pull/97171)
* Split the test VolumeHosts type into one per interface [#97354](https://github.com/openshift/kubernetes/pull/97354)
* cleanup unused constants for removed deprecated flags [#97340](https://github.com/openshift/kubernetes/pull/97340)
* fix typo err for disk to pid [#97359](https://github.com/openshift/kubernetes/pull/97359)
* bump agnhost base image [#96918](https://github.com/openshift/kubernetes/pull/96918)
* Try to avoid etcd.Get as part of Delete operation [#89828](https://github.com/openshift/kubernetes/pull/89828)
* fix sctp hostPort test [#97371](https://github.com/openshift/kubernetes/pull/97371)
* api: Allow MaxSurge to be set on DaemonSets during update [#96375](https://github.com/openshift/kubernetes/pull/96375)
* Define TestableConfig in k/apiserver/pkg/util/flowcontrol [#97353](https://github.com/openshift/kubernetes/pull/97353)
* Bump github.com/Azure/go-autorest/autorest to v0.11.12 [#97033](https://github.com/openshift/kubernetes/pull/97033)
* add unit test for helper.go [#96353](https://github.com/openshift/kubernetes/pull/96353)
* Bump agnhost and nonewprivs versions [#97346](https://github.com/openshift/kubernetes/pull/97346)
* Don't start goroutine for noMetrics [#94813](https://github.com/openshift/kubernetes/pull/94813)
* Fix  dangling volumes from nodes not tracked by attach detach controller [#96689](https://github.com/openshift/kubernetes/pull/96689)
* Recover CSI volumes from dangling attachments [#96617](https://github.com/openshift/kubernetes/pull/96617)
* Fix golint issues in pkg/credentialprovider/plugin [#97167](https://github.com/openshift/kubernetes/pull/97167)
* Remove the 'DisabledForLargeClusters' tags from non-session-affinity LB network tests [#97345](https://github.com/openshift/kubernetes/pull/97345)
* Update autoscaling e2e test after an event message was changed [#97344](https://github.com/openshift/kubernetes/pull/97344)
* Fix HPA bug about unintentional scale out during updating deployment when using PodMetric. [#89465](https://github.com/openshift/kubernetes/pull/89465)
* cleanup: remove dup key VolumeStatsUsedBytesKey in test [#97151](https://github.com/openshift/kubernetes/pull/97151)
* test images: Adds Windows 2004 and 20H2 base images for busybox [#97324](https://github.com/openshift/kubernetes/pull/97324)
* fix index test: multi index check for empty list [#96883](https://github.com/openshift/kubernetes/pull/96883)
* Fix typo in e2e test log [#97311](https://github.com/openshift/kubernetes/pull/97311)
* Update cloud-controller-manager samples to read --cloud-config flag [#97274](https://github.com/openshift/kubernetes/pull/97274)
* Fix openapi generator for alpha features [#97276](https://github.com/openshift/kubernetes/pull/97276)
* Add performance benchmark for the preemption with volume [#96834](https://github.com/openshift/kubernetes/pull/96834)
* Make log-dump's deprecation note up-to-date [#97315](https://github.com/openshift/kubernetes/pull/97315)
* remove unused funcs for e2e predicates [#97229](https://github.com/openshift/kubernetes/pull/97229)
* Fix e2e endpoint slice flake test [#95019](https://github.com/openshift/kubernetes/pull/95019)
* cleanup constants for scheduler metrics [#97221](https://github.com/openshift/kubernetes/pull/97221)
* CHANGELOG: fix hyperlink failure for issue [#96948](https://github.com/openshift/kubernetes/pull/96948)
* Skip unsupported tests for disruptive testsuite [#97291](https://github.com/openshift/kubernetes/pull/97291)
* Update Error logging for Pod+PodStatus resource lifecycle test [#97137](https://github.com/openshift/kubernetes/pull/97137)
* Add sig-storage leads as feature-approvers [#96420](https://github.com/openshift/kubernetes/pull/96420)
* fix kubemark e2e script [#81209](https://github.com/openshift/kubernetes/pull/81209)
* Add more logging for "Mount cannot be satisfied for container" error [#97259](https://github.com/openshift/kubernetes/pull/97259)
* test images: Adds 20H2 image to windows-servercore-cache [#97247](https://github.com/openshift/kubernetes/pull/97247)
* remove suffixes from generated StorageClasses and VolumeSnapshotClass [#97183](https://github.com/openshift/kubernetes/pull/97183)
* storage-version: update conditions [#96825](https://github.com/openshift/kubernetes/pull/96825)
* Revert "use uncommon ports for e2e network test" [#97282](https://github.com/openshift/kubernetes/pull/97282)
* Measure/compute used ephemeral storage in stats provider, not eviction manager [#97042](https://github.com/openshift/kubernetes/pull/97042)
* Remove the deprecated metrics from scheduler [#96447](https://github.com/openshift/kubernetes/pull/96447)
* etcd version for 1.19 is 3.4.13 for cve fixes [#97244](https://github.com/openshift/kubernetes/pull/97244)
* bind-address flag usage [#97245](https://github.com/openshift/kubernetes/pull/97245)
* Revert "Use host IP instead of localhost for control plane component … [#97253](https://github.com/openshift/kubernetes/pull/97253)
* Make sure the volume name is not empty when the PVC is bound [#97228](https://github.com/openshift/kubernetes/pull/97228)
* Create OWNERS for most of the API Priority and Fairness impl [#97254](https://github.com/openshift/kubernetes/pull/97254)
* Fix typo for ServiceAccount [#96985](https://github.com/openshift/kubernetes/pull/96985)
* test images: Adds -p yes when calling register.sh [#96462](https://github.com/openshift/kubernetes/pull/96462)
* Install pigz for GCE Windows Nodes. [#96470](https://github.com/openshift/kubernetes/pull/96470)
* Storage testsuite refactor & cleanup [#96573](https://github.com/openshift/kubernetes/pull/96573)
* add initial translation for pt_BR for kubectl [#61595](https://github.com/openshift/kubernetes/pull/61595)
* Use non privileged ports in scheduling conformance test [#97235](https://github.com/openshift/kubernetes/pull/97235)
* Use etcdctl endpoint health as a etcd's livenessProbe [#97034](https://github.com/openshift/kubernetes/pull/97034)
* Prevent data race in volume plugin manager [#96826](https://github.com/openshift/kubernetes/pull/96826)
* CHANGELOG: list should be one item [#97063](https://github.com/openshift/kubernetes/pull/97063)
* Remove stale analytics links from docs [#96679](https://github.com/openshift/kubernetes/pull/96679)
* Add damemi to sig-scheduling-maintainers [#97199](https://github.com/openshift/kubernetes/pull/97199)
* Fix typos and add comments in functions for `kubectl create` subcommands [#96995](https://github.com/openshift/kubernetes/pull/96995)
* Revert "Cleanup: remove sanity check for CVE-2019-11253" [#97215](https://github.com/openshift/kubernetes/pull/97215)
* vendor: update cAdvisor to v0.38.6 [#97174](https://github.com/openshift/kubernetes/pull/97174)
* Fix missing type error in Get-RemoteFile by loading System.Net.Http assembly. [#97211](https://github.com/openshift/kubernetes/pull/97211)
* Update config for go-flow-levee analysis [#96997](https://github.com/openshift/kubernetes/pull/96997)
* Client library cleanups [#92138](https://github.com/openshift/kubernetes/pull/92138)
* Improve error message on "CLOSE_WAIT" test failure [#97201](https://github.com/openshift/kubernetes/pull/97201)
* Return field.Errors from node affinity parsing [#96522](https://github.com/openshift/kubernetes/pull/96522)
* Remove master-log-dump.sh [#96611](https://github.com/openshift/kubernetes/pull/96611)
* fix  remotecommand stream blocked forever problems. [#96837](https://github.com/openshift/kubernetes/pull/96837)
* Fix the wrong link to server-side-apply conflicts [#97084](https://github.com/openshift/kubernetes/pull/97084)
* Fix the error links [#96947](https://github.com/openshift/kubernetes/pull/96947)
* Add AcceleratorStats to cri_stats_provider [#96873](https://github.com/openshift/kubernetes/pull/96873)
* e2e/node: add exec probe timeout tests to NodeConformance [#96694](https://github.com/openshift/kubernetes/pull/96694)
* cleanup unused code for kubeapiserver [#97065](https://github.com/openshift/kubernetes/pull/97065)
* e2e network policy enclose IPv6 destinations [#96856](https://github.com/openshift/kubernetes/pull/96856)
* Use field.Error(s) in scheduler plugin args validation [#96745](https://github.com/openshift/kubernetes/pull/96745)
* improve watchCache metric [#96904](https://github.com/openshift/kubernetes/pull/96904)
* ipset: Address a TODO, add test for netmask [#95701](https://github.com/openshift/kubernetes/pull/95701)
* Upgrade to nodecache 1.16.0 image [#97132](https://github.com/openshift/kubernetes/pull/97132)
* Revert "iAdd host IP to etcd listen client URLs." [#97127](https://github.com/openshift/kubernetes/pull/97127)
* Cleanup: remove sanity check for CVE-2019-11253 [#97124](https://github.com/openshift/kubernetes/pull/97124)
* Add SIG Security to OWNERS_ALIASES [#97115](https://github.com/openshift/kubernetes/pull/97115)
* Delete deprecated mixed procotol annotation [#97096](https://github.com/openshift/kubernetes/pull/97096)
* Add constraint selector to pod template [#97068](https://github.com/openshift/kubernetes/pull/97068)
* kubelet: reduce no-op status manager msg log level [#97056](https://github.com/openshift/kubernetes/pull/97056)
* Update OWNERS for k8s.io/legacy-cloud-providers [#97044](https://github.com/openshift/kubernetes/pull/97044)
* cloud-controller-manager: routes controller should not depend on --allocate-node-cidrs [#97029](https://github.com/openshift/kubernetes/pull/97029)
* hoist error message change in token registry to noderestriction [#97020](https://github.com/openshift/kubernetes/pull/97020)
* Fix FibreChannel volume plugin corrupting filesystem on detach [#97013](https://github.com/openshift/kubernetes/pull/97013)
* Bump Cluster Autoscaler to v1.20.0 [#97011](https://github.com/openshift/kubernetes/pull/97011)
* apiserver add --lease-reuse-duration-seconds to config lease reuse duration [#97009](https://github.com/openshift/kubernetes/pull/97009)
* Copy the same storageclass instead of constructing one in external test [#97001](https://github.com/openshift/kubernetes/pull/97001)
* Add jeremyje to cluster/gce/OWNERS [#96994](https://github.com/openshift/kubernetes/pull/96994)
* add comment to describe why we set the UID in the response headers [#96989](https://github.com/openshift/kubernetes/pull/96989)
* [flaky test] fix race in TestVersion in pkg/kubelet/cri/remote [#96978](https://github.com/openshift/kubernetes/pull/96978)
* Fix typo in conntrack.go [#96975](https://github.com/openshift/kubernetes/pull/96975)
* minor fix on comments [#96974](https://github.com/openshift/kubernetes/pull/96974)
* Bump kubectl in addon manager to 1.19 [#96969](https://github.com/openshift/kubernetes/pull/96969)
* kubelet: remove periodic messages from log-level 2 [#96958](https://github.com/openshift/kubernetes/pull/96958)
* Apiservier staticchecks tests [#96954](https://github.com/openshift/kubernetes/pull/96954)
* Define const for metric name [#96946](https://github.com/openshift/kubernetes/pull/96946)
* Update the help text for kubelet's enable-cadvisor-json-endpoints flag to explicitly mention that it has no effect on the /stats/summary endpoint. [#96928](https://github.com/openshift/kubernetes/pull/96928)
* local-up-cluster kubelet option opening readonly port [#96903](https://github.com/openshift/kubernetes/pull/96903)
* Remove external driver duplicated misleading SupportedSizeRange [#96875](https://github.com/openshift/kubernetes/pull/96875)
* Move IPv6DualStack to k8s.io/controller-manager [#96872](https://github.com/openshift/kubernetes/pull/96872)
* fix kube-dns federations check in kubeadm upgrade dns check preflight [#96860](https://github.com/openshift/kubernetes/pull/96860)
* Remove unnecessary snapshot ability check for external driver [#96843](https://github.com/openshift/kubernetes/pull/96843)
* Update configure-helper.sh to early exit from start-kube-scheduler if… [#96839](https://github.com/openshift/kubernetes/pull/96839)
* CHANGELOG: Fix typo for release-note in 1.20 [#96835](https://github.com/openshift/kubernetes/pull/96835)
* Fix duplicate chains in iptables-restore input [#96830](https://github.com/openshift/kubernetes/pull/96830)
* Code optimization for add additional information to log trace in api server [#96802](https://github.com/openshift/kubernetes/pull/96802)
* Fixed a bug where initialPopulationCount should be based on the key length not list size in DeltaFIFO#Replace() [#96797](https://github.com/openshift/kubernetes/pull/96797)
* resume CloudControllerManagerPort to hardcode in port.go [#96776](https://github.com/openshift/kubernetes/pull/96776)
* clarify the logic of noderesources comparison [#96774](https://github.com/openshift/kubernetes/pull/96774)
* cli-runtime: expose option to set discovery burst [#96763](https://github.com/openshift/kubernetes/pull/96763)
* kubectl/pkg/cmd tests: set explicit namespace [#96761](https://github.com/openshift/kubernetes/pull/96761)
* Lower the frequency of volume plugin deprecation warning [#96751](https://github.com/openshift/kubernetes/pull/96751)
* core/v1: deprecate Service topologyKeys [#96736](https://github.com/openshift/kubernetes/pull/96736)
* Fail instead of panic when HNS network cannot be created in test. [#96728](https://github.com/openshift/kubernetes/pull/96728)
* fix typos in type functionShapePoint [#96713](https://github.com/openshift/kubernetes/pull/96713)
* test_context.go: add "windows" to the list of options for "--node-os-distro" [#96687](https://github.com/openshift/kubernetes/pull/96687)
* APF defaults.go: use already defined catch-all name constant [#96683](https://github.com/openshift/kubernetes/pull/96683)
* Using UpperCamelCase event reason - DeletingNode, instead of verbose msg [#96680](https://github.com/openshift/kubernetes/pull/96680)
* Fix Cinder volume detection on OpenStack Train [#96673](https://github.com/openshift/kubernetes/pull/96673)
* ignore update pod without new image in alwayspullimages admission controller [#96668](https://github.com/openshift/kubernetes/pull/96668)
* Remove the typo in the logs while configuring firewall for node e2e [#96666](https://github.com/openshift/kubernetes/pull/96666)
* Significantly improve download artifact latencies on GCE Windows node boot. [#96661](https://github.com/openshift/kubernetes/pull/96661)
* fix staticchekc failer in apiserver/pkg/endpoints/request [#96660](https://github.com/openshift/kubernetes/pull/96660)
* Create PVC first if it's referenced by PV [#96659](https://github.com/openshift/kubernetes/pull/96659)
* Remove unused argument from generateEvent [#96643](https://github.com/openshift/kubernetes/pull/96643)
* Fix link to CRI-O sock path [#96638](https://github.com/openshift/kubernetes/pull/96638)
* Update comment to not indicate check is run for docker daemon [#96637](https://github.com/openshift/kubernetes/pull/96637)
* fix staticcheck: vendor/k8s.io/apiserver/pkg/server/{options,storage} [#96632](https://github.com/openshift/kubernetes/pull/96632)
* If the file already exists we need to grant group read permissions ex… [#96622](https://github.com/openshift/kubernetes/pull/96622)
* sig-cli: add Eddie Zaneski as a co-chair [#96607](https://github.com/openshift/kubernetes/pull/96607)
* fix typo and format for klog [#96593](https://github.com/openshift/kubernetes/pull/96593)
* don't add pod to podQueue when the NodeName of pod is not empty [#96582](https://github.com/openshift/kubernetes/pull/96582)
* Fix typo unmount for klog [#96581](https://github.com/openshift/kubernetes/pull/96581)
* kubelet: do not rerun init containers if any main containers have status [#96572](https://github.com/openshift/kubernetes/pull/96572)
* test/integration/etcd: Use the busybox shim image constant [#96571](https://github.com/openshift/kubernetes/pull/96571)
* Check Backend service by name instead of path in GCE LB code. [#96491](https://github.com/openshift/kubernetes/pull/96491)
* Kube-proxy cleanup: Changing FilterIncorrectIP/CIDR functions to MapIPsToIPFamily that returns a map [#96488](https://github.com/openshift/kubernetes/pull/96488)
* Add GinkgoRecover to a local storage go routine [#96467](https://github.com/openshift/kubernetes/pull/96467)
* fix staticcheck:vendor/k8s.io/kubectl/pkg/cmd/scale [#96402](https://github.com/openshift/kubernetes/pull/96402)
* Convert users of old failure-domain labels to new [#96311](https://github.com/openshift/kubernetes/pull/96311)
* kube-proxy treat ExternalIPs as ClusterIPs [#96296](https://github.com/openshift/kubernetes/pull/96296)
* scheduler: parse Pod's Node affinity once in PreScore phase [#96223](https://github.com/openshift/kubernetes/pull/96223)
* node: e2e: bring up/down SRIOV DP just once [#96219](https://github.com/openshift/kubernetes/pull/96219)
* Add custom timeouts in E2E tests [#96042](https://github.com/openshift/kubernetes/pull/96042)
* autodetect global addresses on loopback interfaces [#95790](https://github.com/openshift/kubernetes/pull/95790)
* CAP_NET_RAW should be NET_RAW [#95613](https://github.com/openshift/kubernetes/pull/95613)
* Fix panic when kubelet register if a node object already exists with no Status.Capacity or Status.Allocatable [#95269](https://github.com/openshift/kubernetes/pull/95269)
* SIG Docs chair transition [#95102](https://github.com/openshift/kubernetes/pull/95102)
* Added unit tests for ReadLogs [#95099](https://github.com/openshift/kubernetes/pull/95099)
* Fixes Attach Detach Controller reconciler race reading ActualStateOfWorld and operation pending states [#94599](https://github.com/openshift/kubernetes/pull/94599)
* [Flaky Test] Add limited lines to log when having tail option [#93920](https://github.com/openshift/kubernetes/pull/93920)
* Fix ResourceQuota comments [#93549](https://github.com/openshift/kubernetes/pull/93549)
* Remove resync period for disruption controller [#92827](https://github.com/openshift/kubernetes/pull/92827)
* Fix typo in apiserver config.file file [#92342](https://github.com/openshift/kubernetes/pull/92342)
* kube-proxy-test: fix goroutine leak [#91450](https://github.com/openshift/kubernetes/pull/91450)
* Added 'No resources found' message to logs command [#89688](https://github.com/openshift/kubernetes/pull/89688)
* Remove feature gate for ILB Custom Subnet. [#88771](https://github.com/openshift/kubernetes/pull/88771)
* 1.20 Major Themes Changelog Restructure [#97134](https://github.com/openshift/kubernetes/pull/97134)
* Tweak up flaking end-to-end tests of API Priority and Fairness [#96874](https://github.com/openshift/kubernetes/pull/96874)
* APF e2e: disable drown-out tests temporarily [#97074](https://github.com/openshift/kubernetes/pull/97074)
* Increase preemption timeout from 1 minute to 2 minutes [#96990](https://github.com/openshift/kubernetes/pull/96990)
* : Fix CoreDNS migration logic [#97016](https://github.com/openshift/kubernetes/pull/97016)
* staging/publishing: fix rules for 1.20 [#97004](https://github.com/openshift/kubernetes/pull/97004)
* staging/publishing: add release-1.20 rules [#96993](https://github.com/openshift/kubernetes/pull/96993)
* kubelet: ensure static pod UIDs are unique [#87461](https://github.com/openshift/kubernetes/pull/87461)
* [Full changelog](https://github.com/openshift/kubernetes/compare/bbbc0799c02950831c42c7a2ab0a04594b854d4a...ee73ea2fb6899a78638a389cd5d860f163c590c8)


### [insights-operator](https://github.com/openshift/insights-operator/tree/3de99ef0e611338141d23de2adffa7875c0e6f27)

* Add a workload fingerprint gatherer [#315](https://github.com/openshift/insights-operator/pull/315)
* Recorder refactoring that improves maintainability [#337](https://github.com/openshift/insights-operator/pull/337)
* Fixes changelog script code styling [#341](https://github.com/openshift/insights-operator/pull/341)
* Improve code removing some codesmells [#303](https://github.com/openshift/insights-operator/pull/303)
* Introduce parallelism to unit tests [#306](https://github.com/openshift/insights-operator/pull/306)
* Some charms to Makefile [#305](https://github.com/openshift/insights-operator/pull/305)
* [Bug 1923895](https://bugzilla.redhat.com/show_bug.cgi?id=1923895): Auto changelog [#318](https://github.com/openshift/insights-operator/pull/318)
* Disable instead of Degrade in case of gather fails [#336](https://github.com/openshift/insights-operator/pull/336)
* Do not create the metrics file in case of any error [#334](https://github.com/openshift/insights-operator/pull/334)
* Updating ose-insights-operator builder & base images to be consistent with ART [#333](https://github.com/openshift/insights-operator/pull/333)
* [Bug 1926082](https://bugzilla.redhat.com/show_bug.cgi?id=1926082): Relax the recent log gatherers to avoid degrading during… [#332](https://github.com/openshift/insights-operator/pull/332)
* [Full changelog](https://github.com/openshift/insights-operator/compare/19b13a7cf1bd5f38a4f1bc4f257ff7fd70803093...3de99ef0e611338141d23de2adffa7875c0e6f27)


### [ironic](https://github.com/openshift/ironic-image/tree/fa8525ea51101fb69b8766d927a5123986a74725)

* [Bug 2023765](https://bugzilla.redhat.com/show_bug.cgi?id=2023765): Compare IPs using the short form of IPv6 address [#233](https://github.com/openshift/ironic-image/pull/233)
* [Bug 2017413](https://bugzilla.redhat.com/show_bug.cgi?id=2017413): [4.8] fix Image provisioning fails with file name too long [#229](https://github.com/openshift/ironic-image/pull/229)
* [Bug 2025755](https://bugzilla.redhat.com/show_bug.cgi?id=2025755): Enable vMedia provisioning of SuperMicro X11/X12 [#237](https://github.com/openshift/ironic-image/pull/237)
* [Bug 2003035](https://bugzilla.redhat.com/show_bug.cgi?id=2003035): Sync sushy to include the latest bugfixes for 4.8 [#214](https://github.com/openshift/ironic-image/pull/214)
* [Bug 1991979](https://bugzilla.redhat.com/show_bug.cgi?id=1991979): [4.8] Sync image with ironic [#206](https://github.com/openshift/ironic-image/pull/206)
* [Bug 1975137](https://bugzilla.redhat.com/show_bug.cgi?id=1975137): [4.8] Sync image with the latest ironic code [#187](https://github.com/openshift/ironic-image/pull/187)
* [Bug 1972213](https://bugzilla.redhat.com/show_bug.cgi?id=1972213): Update python-ironic-lib [#183](https://github.com/openshift/ironic-image/pull/183)
* [Bug 1897415](https://bugzilla.redhat.com/show_bug.cgi?id=1897415): Add cipher_suite_versions config [#177](https://github.com/openshift/ironic-image/pull/177)
* [Bug 1969212](https://bugzilla.redhat.com/show_bug.cgi?id=1969212): remove irmc from enabled_bios_interfaces [#178](https://github.com/openshift/ironic-image/pull/178)
* [Bug 1961717](https://bugzilla.redhat.com/show_bug.cgi?id=1961717): Update remaining out of date deps to Wallaby versions [#175](https://github.com/openshift/ironic-image/pull/175)
* [Bug 1962905](https://bugzilla.redhat.com/show_bug.cgi?id=1962905): Revert "Disable caching live boot iso by default" [#172](https://github.com/openshift/ironic-image/pull/172)
* [Bug 1963068](https://bugzilla.redhat.com/show_bug.cgi?id=1963068): Remove ironic entrypoint [#160](https://github.com/openshift/ironic-image/pull/160)
* [Bug 1961717](https://bugzilla.redhat.com/show_bug.cgi?id=1961717): Update dependencies to Wallaby versions [#170](https://github.com/openshift/ironic-image/pull/170)
* [Bug 1958802](https://bugzilla.redhat.com/show_bug.cgi?id=1958802): Include fix for CVE-2021-21419 [#168](https://github.com/openshift/ironic-image/pull/168)
* [Bug 1953979](https://bugzilla.redhat.com/show_bug.cgi?id=1953979): Disable caching live boot iso by default [#169](https://github.com/openshift/ironic-image/pull/169)
* [Bug 1957976](https://bugzilla.redhat.com/show_bug.cgi?id=1957976): update ironic packages for deploy_steps timeout [#167](https://github.com/openshift/ironic-image/pull/167)
* [Bug 1953979](https://bugzilla.redhat.com/show_bug.cgi?id=1953979): Add parameter to set boot iso source [#164](https://github.com/openshift/ironic-image/pull/164)
* [Bug 1953795](https://bugzilla.redhat.com/show_bug.cgi?id=1953795): Set webserver_verify_ca to certificate path or false [#163](https://github.com/openshift/ironic-image/pull/163)
* [Bug 1953670](https://bugzilla.redhat.com/show_bug.cgi?id=1953670): Increase ESP size [#162](https://github.com/openshift/ironic-image/pull/162)
* [Bug 1948981](https://bugzilla.redhat.com/show_bug.cgi?id=1948981): Update packages to latest for 4.8 [#159](https://github.com/openshift/ironic-image/pull/159)
* Upgrade to latest ironic-lib version [#157](https://github.com/openshift/ironic-image/pull/157)
* Update packages to pick up latest changes [#156](https://github.com/openshift/ironic-image/pull/156)
* [Bug 1888712](https://bugzilla.redhat.com/show_bug.cgi?id=1888712): Support for including vlan interfaces in introspection r… [#154](https://github.com/openshift/ironic-image/pull/154)
* Start using current ironic versions [#150](https://github.com/openshift/ironic-image/pull/150)
* Image sync [#151](https://github.com/openshift/ironic-image/pull/151)
* Updating ironic builder & base images to be consistent with ART [#146](https://github.com/openshift/ironic-image/pull/146)
* Prevent content override of /bin/ when building with imagebuilder [#149](https://github.com/openshift/ironic-image/pull/149)
* Add Support for Fedora-based OKD [#123](https://github.com/openshift/ironic-image/pull/123)
* Take advantage of multi files COPY to simplify Dockerfile [#144](https://github.com/openshift/ironic-image/pull/144)
* Supply a default for COPY args [#147](https://github.com/openshift/ironic-image/pull/147)
* [Full changelog](https://github.com/openshift/ironic-image/compare/1a7f41bb1c2c04ccd06958669a24a08a0bf22258...fa8525ea51101fb69b8766d927a5123986a74725)


### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/b3ecae8d1c6cd84a8784cf3dd17532797af7b724)

* Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART [#504](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/504)
* [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/564aaca3b4bd95007472d3c3cd8d2d0748778ef4...b3ecae8d1c6cd84a8784cf3dd17532797af7b724)


### [ironic-inspector](https://github.com/openshift/ironic-inspector-image/tree/08761ed526b7817de7c92e0d621698404fca7a05)

* [Bug 2023765](https://bugzilla.redhat.com/show_bug.cgi?id=2023765): For inspector, compare IPs using the short form of IPv6 address [#71](https://github.com/openshift/ironic-inspector-image/pull/71)
* [Bug 1948981](https://bugzilla.redhat.com/show_bug.cgi?id=1948981): Update packages to latest for 4.8 [#64](https://github.com/openshift/ironic-inspector-image/pull/64)
* Upgrade to latest ironic-lib version [#63](https://github.com/openshift/ironic-inspector-image/pull/63)
* Update packages to pick up latest changes [#62](https://github.com/openshift/ironic-inspector-image/pull/62)
* Updating ironic-inspector builder & base images to be consistent with ART [#61](https://github.com/openshift/ironic-inspector-image/pull/61)
* Introduce separate ARG for extra packages list [#59](https://github.com/openshift/ironic-inspector-image/pull/59)
* [Full changelog](https://github.com/openshift/ironic-inspector-image/compare/b6cbf0338ba9f892735d09093ba4732ab3602b43...08761ed526b7817de7c92e0d621698404fca7a05)


### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/ba8783261ea8f21afdcd46eb8a86986597c38c75)

* [Bug 1972213](https://bugzilla.redhat.com/show_bug.cgi?id=1972213): Fix for UEFI bootloader entry [#74](https://github.com/openshift/ironic-ipa-downloader/pull/74)
* [Bug 1963204](https://bugzilla.redhat.com/show_bug.cgi?id=1963204): Update IPA ramdisk image for RHEL 8.4 [#70](https://github.com/openshift/ironic-ipa-downloader/pull/70)
* [Bug 1963204](https://bugzilla.redhat.com/show_bug.cgi?id=1963204): Update IPA ramdisk for RHEL 8.4 [#69](https://github.com/openshift/ironic-ipa-downloader/pull/69)
* [Bug 1955114](https://bugzilla.redhat.com/show_bug.cgi?id=1955114): Update to the latest ipa-ramdisk [#68](https://github.com/openshift/ironic-ipa-downloader/pull/68)
* [Bug 1948513](https://bugzilla.redhat.com/show_bug.cgi?id=1948513): Add support for no_proxy [#65](https://github.com/openshift/ironic-ipa-downloader/pull/65)
* Update ipa-ramdisk to latest for 4.8 [#66](https://github.com/openshift/ironic-ipa-downloader/pull/66)
* Upgrade to latest ipa-ramdisk [#64](https://github.com/openshift/ironic-ipa-downloader/pull/64)
* [Bug 1935419](https://bugzilla.redhat.com/show_bug.cgi?id=1935419): Fix failed to scale worker using virtualmedia on Dell R640 [#62](https://github.com/openshift/ironic-ipa-downloader/pull/62)
* Updating ironic-ipa-downloader builder & base images to be consistent with ART [#60](https://github.com/openshift/ironic-ipa-downloader/pull/60)
* [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/ed60b8e9f0b8c0da4046dd8ced85d287c3f4534e...ba8783261ea8f21afdcd46eb8a86986597c38c75)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/dceaf1333634a4aea3f211849e81a6247160122b)

* [Bug 2005805](https://bugzilla.redhat.com/show_bug.cgi?id=2005805): Clear proxy env variables if go would have [#72](https://github.com/openshift/ironic-rhcos-downloader/pull/72)
* [Bug 1973018](https://bugzilla.redhat.com/show_bug.cgi?id=1973018): Fix image incompatibility between 4.7 and 4.8 while upgrade [#51](https://github.com/openshift/ironic-rhcos-downloader/pull/51)
* [Bug 1946079](https://bugzilla.redhat.com/show_bug.cgi?id=1946079): Modify dhcp kernel args based on ipv4/ipv6 [#40](https://github.com/openshift/ironic-rhcos-downloader/pull/40)
* [Bug 1968754](https://bugzilla.redhat.com/show_bug.cgi?id=1968754): Unconditionally remove TMPDIR [#44](https://github.com/openshift/ironic-rhcos-downloader/pull/44)
* [Bug 1969969](https://bugzilla.redhat.com/show_bug.cgi?id=1969969): Use base image from new registry [#42](https://github.com/openshift/ironic-rhcos-downloader/pull/42)
* [Bug 1969969](https://bugzilla.redhat.com/show_bug.cgi?id=1969969): Use updated correct base image [#41](https://github.com/openshift/ironic-rhcos-downloader/pull/41)
* [Bug 1948513](https://bugzilla.redhat.com/show_bug.cgi?id=1948513): Add support for no_proxy [#39](https://github.com/openshift/ironic-rhcos-downloader/pull/39)
* [Bug 1906147](https://bugzilla.redhat.com/show_bug.cgi?id=1906147): Ensure curl uses the CA cert bundle instead of an insecure connection [#37](https://github.com/openshift/ironic-rhcos-downloader/pull/37)
* Remove hardcoded -openstack requirement in image name. [#26](https://github.com/openshift/ironic-rhcos-downloader/pull/26)
* Explicitly exit on retry failure [#33](https://github.com/openshift/ironic-rhcos-downloader/pull/33)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/870afcb36a7ee4a2bef59845981821453b4174dd...dceaf1333634a4aea3f211849e81a6247160122b)


### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/d2e40e34f8284d0ac7c4e9133b537baeac07b408)

* [Bug 1972128](https://bugzilla.redhat.com/show_bug.cgi?id=1972128): Updating ironic-static-ip-manager builder & base images to be consistent with ART [#18](https://github.com/openshift/ironic-static-ip-manager/pull/18)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/43d640a07582a5aaaa485ea85319bb0721dea251...d2e40e34f8284d0ac7c4e9133b537baeac07b408)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/a6b654ae3c3a2c449244716ac7809d8bcd5b536a)

* [Bug 2058750](https://bugzilla.redhat.com/show_bug.cgi?id=2058750): [release-4.8] 2022-02-15 Security Advisory [#1408](https://github.com/openshift/jenkins/pull/1408)
* [Bug 2055911](https://bugzilla.redhat.com/show_bug.cgi?id=2055911): bump openshift-sync to 1.0.53 [#1392](https://github.com/openshift/jenkins/pull/1392)
* [Bug 2044940](https://bugzilla.redhat.com/show_bug.cgi?id=2044940): Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 [#1370](https://github.com/openshift/jenkins/pull/1370)
* [Bug 2038960](https://bugzilla.redhat.com/show_bug.cgi?id=2038960): bump sync plugin to 1.0.52 [#1362](https://github.com/openshift/jenkins/pull/1362)
* [Bug 2037348](https://bugzilla.redhat.com/show_bug.cgi?id=2037348): Update openshift-sync-plugin to 1.0.51 and various dependant plugins [#1360](https://github.com/openshift/jenkins/pull/1360)
* [Bug 2020614](https://bugzilla.redhat.com/show_bug.cgi?id=2020614): Update Jenkins and plugins per 2021-11 advisory [#1347](https://github.com/openshift/jenkins/pull/1347)
* [Bug 2008114](https://bugzilla.redhat.com/show_bug.cgi?id=2008114): Upgrade Jenkins to 2.289.3 (and related fixes) [#1324](https://github.com/openshift/jenkins/pull/1324)
* [Bug 1972354](https://bugzilla.redhat.com/show_bug.cgi?id=1972354): Bump jenkins version 2.289.2 [#1282](https://github.com/openshift/jenkins/pull/1282)
* [release 4.8] Bug 1960019: Bump credentials plugin to 2.3.19 [#1271](https://github.com/openshift/jenkins/pull/1271)
* [Bug 1956220](https://bugzilla.redhat.com/show_bug.cgi?id=1956220): add proxy system properties as expected by kubernetes-client [#1263](https://github.com/openshift/jenkins/pull/1263)
* [Bug 1952563](https://bugzilla.redhat.com/show_bug.cgi?id=1952563): bump config-file-provider to 3.7.1 [#1264](https://github.com/openshift/jenkins/pull/1264)
* [Bug 1929052](https://bugzilla.redhat.com/show_bug.cgi?id=1929052): Add missing backslash to agent maven dockerfile [#1226](https://github.com/openshift/jenkins/pull/1226)
* [Bug 1940558](https://bugzilla.redhat.com/show_bug.cgi?id=1940558): Update Jenkins to 2.277.3 and disable startup wizard [#1258](https://github.com/openshift/jenkins/pull/1258)
* [Bug 1950175](https://bugzilla.redhat.com/show_bug.cgi?id=1950175): Build with Go 1.16 [#1246](https://github.com/openshift/jenkins/pull/1246)
* [Bug 1950384](https://bugzilla.redhat.com/show_bug.cgi?id=1950384): Revert "Update jenkins to 2.277.2" [#1257](https://github.com/openshift/jenkins/pull/1257)
* [Bug 1947358](https://bugzilla.redhat.com/show_bug.cgi?id=1947358): Update jenkins to 2.277.2 [#1249](https://github.com/openshift/jenkins/pull/1249)
* [Bug 1940558](https://bugzilla.redhat.com/show_bug.cgi?id=1940558): Update matrix-auth plugin to 2.6.6 [#1251](https://github.com/openshift/jenkins/pull/1251)
* Add another folder for agent-maven [#1239](https://github.com/openshift/jenkins/pull/1239)
* [Bug 1928845](https://bugzilla.redhat.com/show_bug.cgi?id=1928845): update openshift-sync plugin [#1227](https://github.com/openshift/jenkins/pull/1227)
* [Bug 1928658](https://bugzilla.redhat.com/show_bug.cgi?id=1928658): update kubernetes-client-api [#1225](https://github.com/openshift/jenkins/pull/1225)
* Updating ose-jenkins-agent-base builder & base images to be consistent with ART [#1215](https://github.com/openshift/jenkins/pull/1215)
* Updating ose-jenkins-agent-nodejs-12 builder & base images to be consistent with ART [#1218](https://github.com/openshift/jenkins/pull/1218)
* Updating ose-jenkins-agent-nodejs-10 builder & base images to be consistent with ART [#1219](https://github.com/openshift/jenkins/pull/1219)
* Updating ose-jenkins-agent-maven builder & base images to be consistent with ART [#1217](https://github.com/openshift/jenkins/pull/1217)
* Updating openshift-jenkins-2 builder & base images to be consistent with ART [#1216](https://github.com/openshift/jenkins/pull/1216)
* Upgrade Jenkins to 2.263.3 [#1207](https://github.com/openshift/jenkins/pull/1207)
* [Full changelog](https://github.com/openshift/jenkins/compare/02e81a5a9b02af6c72f6baab1ca6afb3775756dd...a6b654ae3c3a2c449244716ac7809d8bcd5b536a)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/bfffea3bf70fc5203814886f6483a569f2f22c87)

* [Bug 2002281](https://bugzilla.redhat.com/show_bug.cgi?id=2002281): 4.8: pkg/resourceprovider: guard from negative metrics [#55](https://github.com/openshift/k8s-prometheus-adapter/pull/55)
* [Bug 1920700](https://bugzilla.redhat.com/show_bug.cgi?id=1920700): Bump prometheus-adapter to v0.8.4 [#47](https://github.com/openshift/k8s-prometheus-adapter/pull/47)
* Add signal handler [#389](https://github.com/openshift/k8s-prometheus-adapter/pull/389)
* .travis.yml: remove verify job [#387](https://github.com/openshift/k8s-prometheus-adapter/pull/387)
* Makefile: include tests from cmd directory [#382](https://github.com/openshift/k8s-prometheus-adapter/pull/382)
* Fix documented metrics labels to work for k8s 1.16+ [#386](https://github.com/openshift/k8s-prometheus-adapter/pull/386)
* OWNERS: Remove myself from the OWNERS [#384](https://github.com/openshift/k8s-prometheus-adapter/pull/384)
* fix walkthrough example [#379](https://github.com/openshift/k8s-prometheus-adapter/pull/379)
* Add dgrisonnet to the OWNERS [#377](https://github.com/openshift/k8s-prometheus-adapter/pull/377)
* pkg/config: allow configuration to be read from json schema [#372](https://github.com/openshift/k8s-prometheus-adapter/pull/372)
* add TLS auth for accessing Prometheus [#354](https://github.com/openshift/k8s-prometheus-adapter/pull/354)
* Update Prometheus Operator Doc location [#319](https://github.com/openshift/k8s-prometheus-adapter/pull/319)
* *: move all imports to github.com/kubernetes-sigs/prometheus-adapter [#374](https://github.com/openshift/k8s-prometheus-adapter/pull/374)
* Updating ose-prometheus-adapter builder & base images to be consistent with ART [#46](https://github.com/openshift/k8s-prometheus-adapter/pull/46)
* [Bug 1914994](https://bugzilla.redhat.com/show_bug.cgi?id=1914994): Bump k8s-prometheus-adapter to v0.8.3 [#45](https://github.com/openshift/k8s-prometheus-adapter/pull/45)
* Fix authorizer webhook panic [#362](https://github.com/openshift/k8s-prometheus-adapter/pull/362)
* Add NOTICE to comply with the CNCF rules [#359](https://github.com/openshift/k8s-prometheus-adapter/pull/359)
* Populate metric selector for custom metrics [#348](https://github.com/openshift/k8s-prometheus-adapter/pull/348)
* Updating ose-prometheus-adapter builder & base images to be consistent with ART [#44](https://github.com/openshift/k8s-prometheus-adapter/pull/44)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/212d80b4bd35fc6f19ec9ec537d0261a2a300cfd...bfffea3bf70fc5203814886f6483a569f2f22c87)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/ad38e116f3533e0e78621a2887d8b70cde7cba31)

* [Bug 1960035](https://bugzilla.redhat.com/show_bug.cgi?id=1960035): Add iptables shims to ipfailover-keepalived image [#89](https://github.com/openshift/images/pull/89)
* pod: build with Go 1.16 [#87](https://github.com/openshift/images/pull/87)
* Use print() function in both Python 2 and Python 3 [#9](https://github.com/openshift/images/pull/9)
* Updating ose-egress-http-proxy builder & base images to be consistent with ART [#79](https://github.com/openshift/images/pull/79)
* Updating openshift-enterprise-egress-router builder & base images to be consistent with ART [#81](https://github.com/openshift/images/pull/81)
* Updating openshift-enterprise-pod builder & base images to be consistent with ART [#80](https://github.com/openshift/images/pull/80)
* Updating openshift-enterprise-egress-dns-proxy builder & base images to be consistent with ART [#83](https://github.com/openshift/images/pull/83)
* Updating openshift-enterprise-keepalived-ipfailover builder & base images to be consistent with ART [#82](https://github.com/openshift/images/pull/82)
* egress/dns-proxy: Switch to haproxy22 [#84](https://github.com/openshift/images/pull/84)
* Updating openshift-enterprise-base builder & base images to be consistent with ART [#77](https://github.com/openshift/images/pull/77)
* pod process container: drop unneeded log line [#65](https://github.com/openshift/images/pull/65)
* ipfailover: Add component to OWNERS [#62](https://github.com/openshift/images/pull/62)
* [Full changelog](https://github.com/openshift/images/compare/0e45f638fbf5fa9e9bdb507d81b2cb9f12fadbaf...ad38e116f3533e0e78621a2887d8b70cde7cba31)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/e709078839d1f216ac1de476c1a26de50b07ed04)

* Remove some binaries that accidentally got committed [#398](https://github.com/openshift/sdn/pull/398)
* [Bug 2027397](https://bugzilla.redhat.com/show_bug.cgi?id=2027397): [EgressIP] move ct(commit) action from OVS group to flow [#377](https://github.com/openshift/sdn/pull/377)
* [Bug 2014166](https://bugzilla.redhat.com/show_bug.cgi?id=2014166): Remove locking from EgressIPTracker.Ping [#362](https://github.com/openshift/sdn/pull/362)
* [Bug 2002290](https://bugzilla.redhat.com/show_bug.cgi?id=2002290): [4.8] proxy: don't re-check every userspace proxy rule on every change [#347](https://github.com/openshift/sdn/pull/347)
* [Bug 1987239](https://bugzilla.redhat.com/show_bug.cgi?id=1987239): when assigning and releasing egressIP try more than once before failing [#326](https://github.com/openshift/sdn/pull/326)
* [Bug 1999946](https://bugzilla.redhat.com/show_bug.cgi?id=1999946): improve SDN's OVS healthcheck and logging [#341](https://github.com/openshift/sdn/pull/341)
* [Bug 1995871](https://bugzilla.redhat.com/show_bug.cgi?id=1995871): Disable conntrack for vxlan traffic [#337](https://github.com/openshift/sdn/pull/337)
* Updating ose-sdn builder & base images to be consistent with ART [#255](https://github.com/openshift/sdn/pull/255)
* Updating kube-proxy builder & base images to be consistent with ART [#256](https://github.com/openshift/sdn/pull/256)
* [Bug 1972864](https://bugzilla.redhat.com/show_bug.cgi?id=1972864): [4.8] fix local-with-fallback [#322](https://github.com/openshift/sdn/pull/322)
* [Bug 1948436](https://bugzilla.redhat.com/show_bug.cgi?id=1948436): remove vxlan_monitor and OVS packet stat parsing [#311](https://github.com/openshift/sdn/pull/311)
* [Bug 1959711](https://bugzilla.redhat.com/show_bug.cgi?id=1959711): Reverse table order for egress IP and egress network policy set up [#299](https://github.com/openshift/sdn/pull/299)
* [Bug 1953257](https://bugzilla.redhat.com/show_bug.cgi?id=1953257): Fix invalid egress IP assignments in sdn-controller [#295](https://github.com/openshift/sdn/pull/295)
* [Bug 1960284](https://bugzilla.redhat.com/show_bug.cgi?id=1960284): Bump openshift/kubernetes for "local-with-fallback" [#310](https://github.com/openshift/sdn/pull/310)
* [Bug 1964625](https://bugzilla.redhat.com/show_bug.cgi?id=1964625): NETID duplicate check is only required in NetworkPolicy Mode [#307](https://github.com/openshift/sdn/pull/307)
* [Bug 1964059](https://bugzilla.redhat.com/show_bug.cgi?id=1964059): rebase to latest sdn-4.8-kubernetes-1.21.1 [#305](https://github.com/openshift/sdn/pull/305)
* [Bug 1928851](https://bugzilla.redhat.com/show_bug.cgi?id=1928851): prevent manually creating netns with existing NetID [#294](https://github.com/openshift/sdn/pull/294)
* [Bug 1879077](https://bugzilla.redhat.com/show_bug.cgi?id=1879077): ValidateMTU: check only the interface that holds the node ip [#289](https://github.com/openshift/sdn/pull/289)
* [Bug 1952079](https://bugzilla.redhat.com/show_bug.cgi?id=1952079): Revendor kubernetes to sdn-4.8-kubernetes-1.21.0-rc.0 [#267](https://github.com/openshift/sdn/pull/267)
* [Bug 1953530](https://bugzilla.redhat.com/show_bug.cgi?id=1953530): Fix flaky unit test `TestEgressCIDRAllocation` [#293](https://github.com/openshift/sdn/pull/293)
* [Bug 1948999](https://bugzilla.redhat.com/show_bug.cgi?id=1948999): Remove check enforcing single egress IP for automatic assignment [#287](https://github.com/openshift/sdn/pull/287)
* [Bug 1952079](https://bugzilla.redhat.com/show_bug.cgi?id=1952079): Don't require EndpointSlice to be disabled [#290](https://github.com/openshift/sdn/pull/290)
* egress IP traffic load-balancing [#277](https://github.com/openshift/sdn/pull/277)
* Add a unit test to ensure we don't change flows without changing ruleVersion [#276](https://github.com/openshift/sdn/pull/276)
* Fix multiple race conditions in networkpolicy_test.go [#282](https://github.com/openshift/sdn/pull/282)
* Add a networkpolicy test with empty namespaceSelector [#278](https://github.com/openshift/sdn/pull/278)
* [Bug 1926931](https://bugzilla.redhat.com/show_bug.cgi?id=1926931): Fix incorrect unmonitoring of egress nodes [#275](https://github.com/openshift/sdn/pull/275)
* Support allow-from-router feature using openshift-host-network namespace [#262](https://github.com/openshift/sdn/pull/262)
* [Bug 1933711](https://bugzilla.redhat.com/show_bug.cgi?id=1933711): EgressDNS: Keep short lived records at most 30s [#263](https://github.com/openshift/sdn/pull/263)
* [Bug 1910378](https://bugzilla.redhat.com/show_bug.cgi?id=1910378): networkpolicy: pass traffic through NAT to handle possible tuple collisions [#269](https://github.com/openshift/sdn/pull/269)
* [Bug 1924527](https://bugzilla.redhat.com/show_bug.cgi?id=1924527): CVE-2021-3121 gogo/protobuf lacks certain index validation [#260](https://github.com/openshift/sdn/pull/260)
* [Bug 1919737](https://bugzilla.redhat.com/show_bug.cgi?id=1919737): Prefer local endpoint for cluster DNS service [#254](https://github.com/openshift/sdn/pull/254)
* [Bug 1850060](https://bugzilla.redhat.com/show_bug.cgi?id=1850060): Make DNS queries for egress network policy async [#251](https://github.com/openshift/sdn/pull/251)
* Be less melodramatic when restarting due to OVS restart [#248](https://github.com/openshift/sdn/pull/248)
* [Full changelog](https://github.com/openshift/sdn/compare/a41bdcc3533c6eaf8f17e1e4bb52c1bde155f578...e709078839d1f216ac1de476c1a26de50b07ed04)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5)

* Bump v0.9.0 [#45](https://github.com/openshift/kube-rbac-proxy/pull/45)
* *: cut v0.9.0 release [#123](https://github.com/openshift/kube-rbac-proxy/pull/123)
* scripts/publish: fetch tags [#122](https://github.com/openshift/kube-rbac-proxy/pull/122)
* docker: build and publish multiarch images [#121](https://github.com/openshift/kube-rbac-proxy/pull/121)
* Support TLS v1.3 [#120](https://github.com/openshift/kube-rbac-proxy/pull/120)
* examples: fix rewrite example [#117](https://github.com/openshift/kube-rbac-proxy/pull/117)
* test/kubetest: add dumpLogs, increase job backoff, ensure kube-rbac-proxy deployment is gone [#118](https://github.com/openshift/kube-rbac-proxy/pull/118)
* feat: support client certificate authentication [#113](https://github.com/openshift/kube-rbac-proxy/pull/113)
* build.yml: wait until images are available [#112](https://github.com/openshift/kube-rbac-proxy/pull/112)
* Rewrite from header [#104](https://github.com/openshift/kube-rbac-proxy/pull/104)
* .github/workflows: fix image publication [#107](https://github.com/openshift/kube-rbac-proxy/pull/107)
* .github/workflows: fix typo in publish job [#106](https://github.com/openshift/kube-rbac-proxy/pull/106)
* Improve CI coverage and fix existing failures [#105](https://github.com/openshift/kube-rbac-proxy/pull/105)
* .github: update version of engineerd/setup-kind [#102](https://github.com/openshift/kube-rbac-proxy/pull/102)
* Fixing a small typo in examples/rewrites/README.md [#103](https://github.com/openshift/kube-rbac-proxy/pull/103)
* Cleanup and update versions used in CI [#100](https://github.com/openshift/kube-rbac-proxy/pull/100)
* GitHub Actions build file [#94](https://github.com/openshift/kube-rbac-proxy/pull/94)
* Updating kube-rbac-proxy builder & base images to be consistent with ART [#44](https://github.com/openshift/kube-rbac-proxy/pull/44)
* add hardcoded authorizer to approve /metrics for metrics scraper [#43](https://github.com/openshift/kube-rbac-proxy/pull/43)
* Updating kube-rbac-proxy builder & base images to be consistent with ART [#41](https://github.com/openshift/kube-rbac-proxy/pull/41)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/14c288e6d19578d96e502def75995b882f1c9b37...813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/947166293195d115500d4479c0c40c8c01a25ad0)

* [Bug 1950908](https://bugzilla.redhat.com/show_bug.cgi?id=1950908): Add wildcard option to labels-metric-allow-list [#51](https://github.com/openshift/kube-state-metrics/pull/51)
* [Bug 1924446](https://bugzilla.redhat.com/show_bug.cgi?id=1924446): Bump kube-state-metrics to v2.0.0 [#49](https://github.com/openshift/kube-state-metrics/pull/49)
* Cut v2.0.0 [#1449](https://github.com/openshift/kube-state-metrics/pull/1449)
* tests/e2e.sh: Fix image names [#1450](https://github.com/openshift/kube-state-metrics/pull/1450)
* Bump kube-state-metrics to be synced with release-2.0 branch [#48](https://github.com/openshift/kube-state-metrics/pull/48)
* Use latest golang version to build/update dependencies [#1440](https://github.com/openshift/kube-state-metrics/pull/1440)
* e2e.sh: Remove traces of quay.io [#1435](https://github.com/openshift/kube-state-metrics/pull/1435)
* .github/ci.yml: Update golangci-lint to 1.39.0 [#1436](https://github.com/openshift/kube-state-metrics/pull/1436)
* Cut 2.0.0 rc.1 [#1428](https://github.com/openshift/kube-state-metrics/pull/1428)
* Rename cli flag from label-metrics-allow-list to metric-labels-allowlist [#1424](https://github.com/openshift/kube-state-metrics/pull/1424)
* Remove extensions APIs that are deprecated [#1423](https://github.com/openshift/kube-state-metrics/pull/1423)
* Update go to 1.16, update dependencies, remove vendor directory [#1419](https://github.com/openshift/kube-state-metrics/pull/1419)
* Cut v2.0.0-rc.0 [#1406](https://github.com/openshift/kube-state-metrics/pull/1406)
* fix labels-metric-allow-list documentation [#1404](https://github.com/openshift/kube-state-metrics/pull/1404)
* Propagate resource version when sharded [#1402](https://github.com/openshift/kube-state-metrics/pull/1402)
* Bump go version in CI to 1.16+ [#1399](https://github.com/openshift/kube-state-metrics/pull/1399)
* internal/store/pod.go: Pre-allocate metric slices optimistically [#1400](https://github.com/openshift/kube-state-metrics/pull/1400)
* internal/store/pod.go: Only create last_terminated containers series if containers are terminated state [#1397](https://github.com/openshift/kube-state-metrics/pull/1397)
* internal/store/pod.go: Only create terminated_reason series if pods are in terminated state [#1381](https://github.com/openshift/kube-state-metrics/pull/1381)
* Fix gzip writer [#1372](https://github.com/openshift/kube-state-metrics/pull/1372)
* internal/store/pod.go: Only create waiting_reason series if pods are in waiting state [#1378](https://github.com/openshift/kube-state-metrics/pull/1378)
* Bump client-go and friends to v0.20 (kubernetes v1.20) [#1328](https://github.com/openshift/kube-state-metrics/pull/1328)
* Promote v2.0.0 to beta pre-release [#1322](https://github.com/openshift/kube-state-metrics/pull/1322)
* Change default image registry [#1312](https://github.com/openshift/kube-state-metrics/pull/1312)
* Cut 2.0.0-alpha.3 [#1307](https://github.com/openshift/kube-state-metrics/pull/1307)
* Adjust and refactor allowing labels to work for kubernetes labels metrics [#1301](https://github.com/openshift/kube-state-metrics/pull/1301)
* fix container resource limits metrics, which got dropped btwn 2.0.0-a… [#1293](https://github.com/openshift/kube-state-metrics/pull/1293)
* Merge master into release-2.0 branch [#1285](https://github.com/openshift/kube-state-metrics/pull/1285)
* Cut v2.0.0-alpha.2 [#1284](https://github.com/openshift/kube-state-metrics/pull/1284)
* .github/: Update issue templates [#1282](https://github.com/openshift/kube-state-metrics/pull/1282)
* pod: add gauge for runtimeclass handler [#1276](https://github.com/openshift/kube-state-metrics/pull/1276)
* Revert "Rework resource metrics" [#1278](https://github.com/openshift/kube-state-metrics/pull/1278)
* Remove ksonnet and move to absolute import paths [#1275](https://github.com/openshift/kube-state-metrics/pull/1275)
* Makefile: Set tag via cloudbuild [#1264](https://github.com/openshift/kube-state-metrics/pull/1264)
* fix namespace parameter in README.md #1267 [#1268](https://github.com/openshift/kube-state-metrics/pull/1268)
* feat(persistentvolume): claimRef info to labels [#1244](https://github.com/openshift/kube-state-metrics/pull/1244)
* Fix go version in go.mod [#1266](https://github.com/openshift/kube-state-metrics/pull/1266)
* fix html tag in service-metrics.md [#1265](https://github.com/openshift/kube-state-metrics/pull/1265)
* Migrate ingress and certificates away from deprecated APIs [#1260](https://github.com/openshift/kube-state-metrics/pull/1260)
* Update to golang-1.15.3 [#1261](https://github.com/openshift/kube-state-metrics/pull/1261)
* Makefile: Override Commit in cloudbuild [#1262](https://github.com/openshift/kube-state-metrics/pull/1262)
* Added the job failure reason in kube_job_status_failed metric [#1214](https://github.com/openshift/kube-state-metrics/pull/1214)
* fix typo in README.md [#1255](https://github.com/openshift/kube-state-metrics/pull/1255)
* Fix test due to map iteration [#1256](https://github.com/openshift/kube-state-metrics/pull/1256)
* Merge release-2.0 back to master [#1254](https://github.com/openshift/kube-state-metrics/pull/1254)
* Cut v2.0.0.-alpha.1 [#1253](https://github.com/openshift/kube-state-metrics/pull/1253)
* Bump klog to v2 and client-go to 1.19 [#1250](https://github.com/openshift/kube-state-metrics/pull/1250)
* add iscsi initiator name to persistentvolume_info [#1235](https://github.com/openshift/kube-state-metrics/pull/1235)
* Merge master into release-2.0 [#1248](https://github.com/openshift/kube-state-metrics/pull/1248)
* Update go module path to k8s.io/kube-state-metrics/v2 [#1238](https://github.com/openshift/kube-state-metrics/pull/1238)
* docs/pod-metrics.md: add missing condition label [#1236](https://github.com/openshift/kube-state-metrics/pull/1236)
* Fix misspelling of autoscaler in README.md [#1222](https://github.com/openshift/kube-state-metrics/pull/1222)
* e2e.sh: Update kind to 0.9.0 [#1234](https://github.com/openshift/kube-state-metrics/pull/1234)
* Added Namespace to Rolebinding Jsonnet [#1233](https://github.com/openshift/kube-state-metrics/pull/1233)
* Fix image names and clarify image promotion process [#1231](https://github.com/openshift/kube-state-metrics/pull/1231)
* Reference closure scoped family generator [#1240](https://github.com/openshift/kube-state-metrics/pull/1240)
* Cut v2.0.0.-alpha [#1224](https://github.com/openshift/kube-state-metrics/pull/1224)
* Use promauto to register metrics [#1223](https://github.com/openshift/kube-state-metrics/pull/1223)
* main.go: Add http request metric for kube-state-metrics main /metrics [#1218](https://github.com/openshift/kube-state-metrics/pull/1218)
* Fix test as sometimes metrics keys and values are generated in differ… [#1217](https://github.com/openshift/kube-state-metrics/pull/1217)
* apply boundaries to metrics and allow via flag what labels to include [#1125](https://github.com/openshift/kube-state-metrics/pull/1125)
* Label/Tags are shown in status tab [#1216](https://github.com/openshift/kube-state-metrics/pull/1216)
* add fc/iscsi/nfs identifier tags to persistentvolume_info [#1208](https://github.com/openshift/kube-state-metrics/pull/1208)
* rename gh action workflow and fix badge render [#1206](https://github.com/openshift/kube-state-metrics/pull/1206)
* use yaml config friendly names for gh action checks [#1205](https://github.com/openshift/kube-state-metrics/pull/1205)
* Fix generated alerts example [#1204](https://github.com/openshift/kube-state-metrics/pull/1204)
* Regenerate alerting rule examples [#1203](https://github.com/openshift/kube-state-metrics/pull/1203)
* jsonnet/mixin: adhere to monitoring mixins guidelines [#1202](https://github.com/openshift/kube-state-metrics/pull/1202)
* use github actions for CI checks [#1199](https://github.com/openshift/kube-state-metrics/pull/1199)
* Build with same golang version as defined in Makefile [#1201](https://github.com/openshift/kube-state-metrics/pull/1201)
* Add DeprecatedVersion to struct FamilyGenerator and func NewFamilyGenerator [#1160](https://github.com/openshift/kube-state-metrics/pull/1160)
* Use run groups [#1180](https://github.com/openshift/kube-state-metrics/pull/1180)
* Update docs to point to new gcr registry [#1175](https://github.com/openshift/kube-state-metrics/pull/1175)
* revise OWNERS list [#1196](https://github.com/openshift/kube-state-metrics/pull/1196)
* migrate to KIND for e2e testing [#1195](https://github.com/openshift/kube-state-metrics/pull/1195)
* Makefile: Enable experimental Docker CLI [#1193](https://github.com/openshift/kube-state-metrics/pull/1193)
* Makefile: Push a single multi-arch image [#1190](https://github.com/openshift/kube-state-metrics/pull/1190)
* fix typos [#1192](https://github.com/openshift/kube-state-metrics/pull/1192)
* 1109 update kubernetes dependencies [#1185](https://github.com/openshift/kube-state-metrics/pull/1185)
* Add repo SECURITY.md [#1186](https://github.com/openshift/kube-state-metrics/pull/1186)
* Makefile: Bump golangci-lint to 1.29.0 [#1188](https://github.com/openshift/kube-state-metrics/pull/1188)
* Adds new pod metric kube_pod_container_state_started [#1183](https://github.com/openshift/kube-state-metrics/pull/1183)
* Update DaemonSet updated_number_scheduled metric name to be consistent [#1181](https://github.com/openshift/kube-state-metrics/pull/1181)
* Add observedGeneration metric for DaemonSets [#1178](https://github.com/openshift/kube-state-metrics/pull/1178)
* Rework resource metrics [#1168](https://github.com/openshift/kube-state-metrics/pull/1168)
* Makefile: Set default registry name to gcr.io/k8s-staging-kube-state-… [#1174](https://github.com/openshift/kube-state-metrics/pull/1174)
* Dockerfile,Makefile: Fix building for k8s.gcr.io images [#1173](https://github.com/openshift/kube-state-metrics/pull/1173)
* add internal_ip to node_info [#1172](https://github.com/openshift/kube-state-metrics/pull/1172)
* Build binary fully in container build [#1171](https://github.com/openshift/kube-state-metrics/pull/1171)
* internal/store: convert k8s labels to snake case [#1165](https://github.com/openshift/kube-state-metrics/pull/1165)
* Avoid conflicts when mapping Kubernetes labels to Prometheus labels [#1156](https://github.com/openshift/kube-state-metrics/pull/1156)
* *: merge release-1.9.7 to master [#1152](https://github.com/openshift/kube-state-metrics/pull/1152)
* cloudbuild.yaml: Add builds for k8s.gcr.io [#1155](https://github.com/openshift/kube-state-metrics/pull/1155)
* invalid url [#1151](https://github.com/openshift/kube-state-metrics/pull/1151)
* add aws/gce volume id to kube_persistentvolume_info [#1146](https://github.com/openshift/kube-state-metrics/pull/1146)
* add UnexpectedAdmissionError to kube_pod_status_reason metric [#1145](https://github.com/openshift/kube-state-metrics/pull/1145)
* add caveat for enabling verticalpodautoscalers [#1149](https://github.com/openshift/kube-state-metrics/pull/1149)
* internal/store/mutatingwebhookconfiguration.go: Switch to v1 [#1144](https://github.com/openshift/kube-state-metrics/pull/1144)
* jsonnet/kube-state-metrics-mixin: add default KSM selector [#1143](https://github.com/openshift/kube-state-metrics/pull/1143)
* Fix VolumeAttachment API version mismatch: expected v1 but watching v1beta1 [#1136](https://github.com/openshift/kube-state-metrics/pull/1136)
* Update golang to version 1.14.2 [#1128](https://github.com/openshift/kube-state-metrics/pull/1128)
* Update golangci-lint to version v1.25.0 [#1129](https://github.com/openshift/kube-state-metrics/pull/1129)
* pod: Add init container requests [#1123](https://github.com/openshift/kube-state-metrics/pull/1123)
* Fix minikube profile in e2e tests [#1122](https://github.com/openshift/kube-state-metrics/pull/1122)
* fix e2e test run when the minikube_driver is not none [#1119](https://github.com/openshift/kube-state-metrics/pull/1119)
* bump kubernetes version in tests [#1120](https://github.com/openshift/kube-state-metrics/pull/1120)
* Fix `internal.Builder` to use `buildStoreFunc` in very buildXXXStore() method [#1121](https://github.com/openshift/kube-state-metrics/pull/1121)
* Fix various CI issues [#1117](https://github.com/openshift/kube-state-metrics/pull/1117)
* 1108 update golang version [#1116](https://github.com/openshift/kube-state-metrics/pull/1116)
* update prometheus dependency in kube-state-metrics [#1113](https://github.com/openshift/kube-state-metrics/pull/1113)
* Fix title in volumeattachment metrics documentation [#1112](https://github.com/openshift/kube-state-metrics/pull/1112)
* v2: Rename storage class labels reclaimPolicy to reclaim_policy and volumeBindingMode to volume_binding_mode [#1107](https://github.com/openshift/kube-state-metrics/pull/1107)
* fix typo in statefulset metrics documentation [#1106](https://github.com/openshift/kube-state-metrics/pull/1106)
* Fix typo in ingress-metric documentation [#1104](https://github.com/openshift/kube-state-metrics/pull/1104)
* add kube_pod_host_network [#1100](https://github.com/openshift/kube-state-metrics/pull/1100)
* Check errors in kube-state-metrics own metrics [#1094](https://github.com/openshift/kube-state-metrics/pull/1094)
* v2: Renamed --namespace flag to --namespaces [#1098](https://github.com/openshift/kube-state-metrics/pull/1098)
* Remove redundant bash test + upgrade Minikube [#1097](https://github.com/openshift/kube-state-metrics/pull/1097)
* Update README.md [#1092](https://github.com/openshift/kube-state-metrics/pull/1092)
* Check labels documentation [#1082](https://github.com/openshift/kube-state-metrics/pull/1082)
* Update README with a note about current cluster state [#1088](https://github.com/openshift/kube-state-metrics/pull/1088)
* Update README: revert to --resources and mention v2 [#1085](https://github.com/openshift/kube-state-metrics/pull/1085)
* Rename kube_pod_deleted to kube_pod_deletion_timestamp [#1079](https://github.com/openshift/kube-state-metrics/pull/1079)
* Fix maxUnavailable to round down instead up [#1076](https://github.com/openshift/kube-state-metrics/pull/1076)
* Update instructions for releasing images to k8s.gcr.io [#1077](https://github.com/openshift/kube-state-metrics/pull/1077)
* Remove deprecated (and removed) metric from doc [#1074](https://github.com/openshift/kube-state-metrics/pull/1074)
* Fix example PromQL queries related to Pod status [#1073](https://github.com/openshift/kube-state-metrics/pull/1073)
* *: Sync master with release-1.9 branch [#1070](https://github.com/openshift/kube-state-metrics/pull/1070)
* Fix e2e tests when minikube driver is not "none" [#1065](https://github.com/openshift/kube-state-metrics/pull/1065)
* Golangci linting configuration [#1064](https://github.com/openshift/kube-state-metrics/pull/1064)
* Add kube_replicationcontroller_owner [#1058](https://github.com/openshift/kube-state-metrics/pull/1058)
* Fix typos in Pod metrics documentation [#1062](https://github.com/openshift/kube-state-metrics/pull/1062)
* docs: --resources replaced with --collectors in the CLI [#1059](https://github.com/openshift/kube-state-metrics/pull/1059)
* remove kubctl logic in kube_pod_status_phase [#1050](https://github.com/openshift/kube-state-metrics/pull/1050)
* Fix golint issues reported by goreportcard #919 [#923](https://github.com/openshift/kube-state-metrics/pull/923)
* pod: add gauges for pod overhead [#1053](https://github.com/openshift/kube-state-metrics/pull/1053)
* v2: Rename collector to resource [#1006](https://github.com/openshift/kube-state-metrics/pull/1006)
* *: Remove non-identifying labels from pod metrics [#1009](https://github.com/openshift/kube-state-metrics/pull/1009)
* Version label should not contain any additional prefix [#1054](https://github.com/openshift/kube-state-metrics/pull/1054)
* Add "Terminating" status in kube_pod_status_phase metrics [#1013](https://github.com/openshift/kube-state-metrics/pull/1013)
* update telemetry port to 8081 [#1049](https://github.com/openshift/kube-state-metrics/pull/1049)
* v2: Remove deprecated metrics [#1004](https://github.com/openshift/kube-state-metrics/pull/1004)
* Merge v1.9.4 into master [#1048](https://github.com/openshift/kube-state-metrics/pull/1048)
* Rename black-/whitelist to allow/deny-list [#1045](https://github.com/openshift/kube-state-metrics/pull/1045)
* v2: Rename hpa metrics to use full horizontalpodautoscaler n… [#1003](https://github.com/openshift/kube-state-metrics/pull/1003)
* internal/store/builder.go: Fix K8s API version [#1040](https://github.com/openshift/kube-state-metrics/pull/1040)
* v2: change metrics port to 8080, telemetry port to 8081 [#1005](https://github.com/openshift/kube-state-metrics/pull/1005)
* Add lease collector [#1038](https://github.com/openshift/kube-state-metrics/pull/1038)
* Updating kube-state-metrics builder & base images to be consistent with ART [#46](https://github.com/openshift/kube-state-metrics/pull/46)
* Updating kube-state-metrics builder & base images to be consistent with ART [#44](https://github.com/openshift/kube-state-metrics/pull/44)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/04bff708e05190cbc18182a2dbb8a10930433c1d...947166293195d115500d4479c0c40c8c01a25ad0)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/901a6d221d1cf79b4b6ba859bb43521e0ee635b3)

* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): UPSTREAM: 93: Move metadata.name description into yaml-patch to move around inability of kubebuilder to express that [#177](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/177)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): Add doc.go [#176](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/176)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): bump(build-machinery-go) [#175](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/175)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): Rebase to upstream 82e8a25 [#173](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/173)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): ci-operator: switch to Golang 1.15 before 1.21.0 bump [#172](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/172)
* [Bug 1947801](https://bugzilla.redhat.com/show_bug.cgi?id=1947801): Pre-rebase: squash commits [#171](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/171)
* Updating ose-kube-storage-version-migrator builder & base images to be consistent with ART [#168](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/168)
* update usage of apiextension/v1beta1 to v1 [#89](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/89)
* bump to Kubernetes 1.20.0-beta.2 [#80](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/80)
* add healthz to migrator and trigger [#75](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/75)
* set default image build registry; update readme about the published images [#74](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/74)
* add release-staging and cloudbuild [#73](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/73)
* Add myself to SECURITY_CONTACTS [#66](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/66)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/329a4b06361cef8d70c8424d57466a6f5bcd4a59...901a6d221d1cf79b4b6ba859bb43521e0ee635b3)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/ddd2c3adeac4d31711a7949c347f444ee4fdce6d)

* [Bug 2037745](https://bugzilla.redhat.com/show_bug.cgi?id=2037745): Improve retrieval of Trunks info [#621](https://github.com/openshift/kuryr-kubernetes/pull/621)
* [Bug 2028307](https://bugzilla.redhat.com/show_bug.cgi?id=2028307): [4.8] Do not restart Kuryr-Controller when LB is stuck in PENDING_UPDATE state or Neutron port is DOWN [#607](https://github.com/openshift/kuryr-kubernetes/pull/607)
* [Bug 2028274](https://bugzilla.redhat.com/show_bug.cgi?id=2028274): Ensure DOWN subports are cleaned up [#606](https://github.com/openshift/kuryr-kubernetes/pull/606)
* [Bug 2022722](https://bugzilla.redhat.com/show_bug.cgi?id=2022722): Make completed Pods Ports reusable [#600](https://github.com/openshift/kuryr-kubernetes/pull/600)
* [Bug 2018232](https://bugzilla.redhat.com/show_bug.cgi?id=2018232): Update TOX_CONSTRAINTS_FILE for stable/xena [#587](https://github.com/openshift/kuryr-kubernetes/pull/587)
* [Bug 1995013](https://bugzilla.redhat.com/show_bug.cgi?id=1995013): Remove ep_slices from klb on endpoint delete event [#550](https://github.com/openshift/kuryr-kubernetes/pull/550)
* [Bug 1989550](https://bugzilla.redhat.com/show_bug.cgi?id=1989550): Increase keystoneauth's connection pool size [#546](https://github.com/openshift/kuryr-kubernetes/pull/546)
* [Bug 1969397](https://bugzilla.redhat.com/show_bug.cgi?id=1969397): Workaround OVN bug causing subports to be DOWN [#521](https://github.com/openshift/kuryr-kubernetes/pull/521)
* [Bug 1968436](https://bugzilla.redhat.com/show_bug.cgi?id=1968436): Fix Listener timeouts update [#520](https://github.com/openshift/kuryr-kubernetes/pull/520)
* [Bug 1933880](https://bugzilla.redhat.com/show_bug.cgi?id=1933880): Ignore 422 Unprocessable Entity on KLB patching [#517](https://github.com/openshift/kuryr-kubernetes/pull/517)
* [Bug 1957315](https://bugzilla.redhat.com/show_bug.cgi?id=1957315): Fix readiness quota check [#514](https://github.com/openshift/kuryr-kubernetes/pull/514)
* [Bug 1920532](https://bugzilla.redhat.com/show_bug.cgi?id=1920532): Fix NPs for OVN LBs with hairpin traffic [#510](https://github.com/openshift/kuryr-kubernetes/pull/510)
* [Bug 1949480](https://bugzilla.redhat.com/show_bug.cgi?id=1949480): Fix constant update of Listeners timeout [#503](https://github.com/openshift/kuryr-kubernetes/pull/503)
* [Bug 1933880](https://bugzilla.redhat.com/show_bug.cgi?id=1933880): Fixing bug, Kuryr-Controller crashes when it's missing the status [#499](https://github.com/openshift/kuryr-kubernetes/pull/499)
* [Bug 1921878](https://bugzilla.redhat.com/show_bug.cgi?id=1921878): Include service subnet to be open for namespaceSelector set to all. [#498](https://github.com/openshift/kuryr-kubernetes/pull/498)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#497](https://github.com/openshift/kuryr-kubernetes/pull/497)
* Handle default Kubernetes Service [#491](https://github.com/openshift/kuryr-kubernetes/pull/491)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#495](https://github.com/openshift/kuryr-kubernetes/pull/495)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#493](https://github.com/openshift/kuryr-kubernetes/pull/493)
* Update OWNERS [#494](https://github.com/openshift/kuryr-kubernetes/pull/494)
* [Bug 1936342](https://bugzilla.redhat.com/show_bug.cgi?id=1936342): kuryr-controller restarting after 3 days cluster running - pools without members [#492](https://github.com/openshift/kuryr-kubernetes/pull/492)
* Updating kuryr-cni builder & base images to be consistent with ART [#486](https://github.com/openshift/kuryr-kubernetes/pull/486)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#483](https://github.com/openshift/kuryr-kubernetes/pull/483)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#479](https://github.com/openshift/kuryr-kubernetes/pull/479)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#477](https://github.com/openshift/kuryr-kubernetes/pull/477)
* [Bug 1937459](https://bugzilla.redhat.com/show_bug.cgi?id=1937459): Fix Subnet retrival when creating Service without Selector [#476](https://github.com/openshift/kuryr-kubernetes/pull/476)
* Rebase from OpenStack master [#475](https://github.com/openshift/kuryr-kubernetes/pull/475)
* [Bug 1924075](https://bugzilla.redhat.com/show_bug.cgi?id=1924075): Skip pool pre population if no Status is present on CRD [#470](https://github.com/openshift/kuryr-kubernetes/pull/470)
* [Bug 1919398](https://bugzilla.redhat.com/show_bug.cgi?id=1919398): Do not default protocol to TCP for allow-all NPs [#461](https://github.com/openshift/kuryr-kubernetes/pull/461)
* [Bug 1921878](https://bugzilla.redhat.com/show_bug.cgi?id=1921878): Narrow connection to the cluster only on namespaceSelector [#459](https://github.com/openshift/kuryr-kubernetes/pull/459)
* [Bug 1927244](https://bugzilla.redhat.com/show_bug.cgi?id=1927244): OpenShift: Add configured subnets to the detected [#454](https://github.com/openshift/kuryr-kubernetes/pull/454)
* Removing the upgrade code from Kuryr-Kubernetes repo [#453](https://github.com/openshift/kuryr-kubernetes/pull/453)
* [Bug 1924075](https://bugzilla.redhat.com/show_bug.cgi?id=1924075): Fix port pools [#452](https://github.com/openshift/kuryr-kubernetes/pull/452)
* Rebase openshift/kuryr-kubernetes from https://opendev.org/openstack/kuryr-kubernetes [#448](https://github.com/openshift/kuryr-kubernetes/pull/448)
* Updating kuryr-cni builder & base images to be consistent with ART [#443](https://github.com/openshift/kuryr-kubernetes/pull/443)
* Updating kuryr-controller builder & base images to be consistent with ART [#442](https://github.com/openshift/kuryr-kubernetes/pull/442)
* [Bug 1924917](https://bugzilla.redhat.com/show_bug.cgi?id=1924917): Get trunks more diligently [#446](https://github.com/openshift/kuryr-kubernetes/pull/446)
* Rebase from OpenStack's master [#444](https://github.com/openshift/kuryr-kubernetes/pull/444)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/77a9d5eade31e0519d34ff9aa9cf86c1305e25b1...ddd2c3adeac4d31711a7949c347f444ee4fdce6d)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/9542e5ac08b7731a37d20c881695aab904201c22)

* Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART [#217](https://github.com/openshift/cluster-api-provider-libvirt/pull/217)
* [Bug 1936488](https://bugzilla.redhat.com/show_bug.cgi?id=1936488): Update MAO and set metrics on :8081 address [#218](https://github.com/openshift/cluster-api-provider-libvirt/pull/218)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/eb819cb931e86f66853ad24b919e251369ec83c1...9542e5ac08b7731a37d20c881695aab904201c22)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/edc3e864006486a7a85e2e5e4297e307339e9f0e)

* [Bug 2048496](https://bugzilla.redhat.com/show_bug.cgi?id=2048496): Fix user-agent in vCenter sessions list [#984](https://github.com/openshift/machine-api-operator/pull/984)
* [Bug 2027896](https://bugzilla.redhat.com/show_bug.cgi?id=2027896): [release-4.8] Add support for Azure Marketplace Images [#970](https://github.com/openshift/machine-api-operator/pull/970)
* [Bug 2026562](https://bugzilla.redhat.com/show_bug.cgi?id=2026562): MaxUnhealthy should not be a string type [#962](https://github.com/openshift/machine-api-operator/pull/962)
* [Bug 2022838](https://bugzilla.redhat.com/show_bug.cgi?id=2022838): GCP CI runs are complaining about APIs not being enabled [#953](https://github.com/openshift/machine-api-operator/pull/953)
* [Bug 1999585](https://bugzilla.redhat.com/show_bug.cgi?id=1999585): [release-4.8] add alert for machine with long deletion phase [#908](https://github.com/openshift/machine-api-operator/pull/908)
* [Bug 2000038](https://bugzilla.redhat.com/show_bug.cgi?id=2000038): Respect MaxUnhealthy limit for external remediation [#910](https://github.com/openshift/machine-api-operator/pull/910)
* [Bug 1993117](https://bugzilla.redhat.com/show_bug.cgi?id=1993117): Make sure nodes don't have attached volumes before vm deletion [#903](https://github.com/openshift/machine-api-operator/pull/903)
* [Bug 1977634](https://bugzilla.redhat.com/show_bug.cgi?id=1977634): Prevent machine from stucking in Deleting phase on vSphere if related node object not found [#896](https://github.com/openshift/machine-api-operator/pull/896)
* Updating ose-machine-api-operator builder & base images to be consistent with ART [#796](https://github.com/openshift/machine-api-operator/pull/796)
* [Bug 1973233](https://bugzilla.redhat.com/show_bug.cgi?id=1973233): [release-4.8] remove kubevirt images and references [#876](https://github.com/openshift/machine-api-operator/pull/876)
* [Bug 1967662](https://bugzilla.redhat.com/show_bug.cgi?id=1967662): change provider config to look at PlatformStatus.Type [#868](https://github.com/openshift/machine-api-operator/pull/868)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#866](https://github.com/openshift/machine-api-operator/pull/866)
* [Bug 1939054](https://bugzilla.redhat.com/show_bug.cgi?id=1939054): Disable startup timeout for Spot MHC [#830](https://github.com/openshift/machine-api-operator/pull/830)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): add constant variables back into machine v1beta1 [#862](https://github.com/openshift/machine-api-operator/pull/862)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): update AdmissionReviewVersions to v1 [#855](https://github.com/openshift/machine-api-operator/pull/855)
* [Bug 1918101](https://bugzilla.redhat.com/show_bug.cgi?id=1918101): Fix deleting for machine stucked in provisioning state on vSphere [#854](https://github.com/openshift/machine-api-operator/pull/854)
* [Bug 1955554](https://bugzilla.redhat.com/show_bug.cgi?id=1955554): Webhook filter should check for both mutating and validating webhooks [#860](https://github.com/openshift/machine-api-operator/pull/860)
* Add management workload annotations [#844](https://github.com/openshift/machine-api-operator/pull/844)
* [Bug 1925276](https://bugzilla.redhat.com/show_bug.cgi?id=1925276): Make sure phase is always set before creation [#857](https://github.com/openshift/machine-api-operator/pull/857)
* [Bug 1951029](https://bugzilla.redhat.com/show_bug.cgi?id=1951029): Drainer panics on missing context for node patch [#851](https://github.com/openshift/machine-api-operator/pull/851)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Ensure conditions are correctly copied before annotations are patched [#849](https://github.com/openshift/machine-api-operator/pull/849)
* [Bug 1880757](https://bugzilla.redhat.com/show_bug.cgi?id=1880757): Add missing permission for target group de-registration [#835](https://github.com/openshift/machine-api-operator/pull/835)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update dependencies to 1.21 [#848](https://github.com/openshift/machine-api-operator/pull/848)
* [Bug 1948471](https://bugzilla.redhat.com/show_bug.cgi?id=1948471): Add release inclusion annotations to external remediation cluster role [#847](https://github.com/openshift/machine-api-operator/pull/847)
* 4019 fencing  backport mhc external remediation template [#795](https://github.com/openshift/machine-api-operator/pull/795)
* Vsphere enable autoscaling from/to zero [#839](https://github.com/openshift/machine-api-operator/pull/839)
* Fix GCP default image name [#842](https://github.com/openshift/machine-api-operator/pull/842)
* Update hacking-guide.md with imagebuilder troubleshooting instructions [#822](https://github.com/openshift/machine-api-operator/pull/822)
* Update GCP default disk image to include ignition v3 [#833](https://github.com/openshift/machine-api-operator/pull/833)
* Don't mount service account token in termination daemonset [#836](https://github.com/openshift/machine-api-operator/pull/836)
* [Bug 1883993](https://bugzilla.redhat.com/show_bug.cgi?id=1883993): vSphere, detach virtual disks before virtual machine destroy if node not available [#815](https://github.com/openshift/machine-api-operator/pull/815)
* BUG 1932154: add warning for missing IAMInstanceProfile in AWS [#824](https://github.com/openshift/machine-api-operator/pull/824)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): Ensure original conditions aren't mutated during reconcile [#829](https://github.com/openshift/machine-api-operator/pull/829)
* Add service account names to credentials request manifest [#802](https://github.com/openshift/machine-api-operator/pull/802)
* [Bug 1938493](https://bugzilla.redhat.com/show_bug.cgi?id=1938493): Revert "Add resource limit to pods" [#827](https://github.com/openshift/machine-api-operator/pull/827)
* install/0000_90_machine-api-operator_04_alertrules: Drop MachineAPIOperatorDown [#826](https://github.com/openshift/machine-api-operator/pull/826)
* [Bug 1923823](https://bugzilla.redhat.com/show_bug.cgi?id=1923823): Improve TLS configuration for Kube RBAC Proxy [#823](https://github.com/openshift/machine-api-operator/pull/823)
* Add resource limit to pods [#825](https://github.com/openshift/machine-api-operator/pull/825)
* remove code [#791](https://github.com/openshift/machine-api-operator/pull/791)
* [Bug 1921892](https://bugzilla.redhat.com/show_bug.cgi?id=1921892): Ensure manager stops before ending the test [#809](https://github.com/openshift/machine-api-operator/pull/809)
* [Bug 1910318](https://bugzilla.redhat.com/show_bug.cgi?id=1910318): [OCPCLOUD-931] Add condition to show actuator exists output on machine status [#810](https://github.com/openshift/machine-api-operator/pull/810)
* [Bug 1934216](https://bugzilla.redhat.com/show_bug.cgi?id=1934216): reuse mgr client in webhooks [#817](https://github.com/openshift/machine-api-operator/pull/817)
* Ensure daemonset conforms to standards [#811](https://github.com/openshift/machine-api-operator/pull/811)
* : Aggregate operator errors before failing to sync [#691](https://github.com/openshift/machine-api-operator/pull/691)
* Enable Junit reports for CI unit tests runs [#806](https://github.com/openshift/machine-api-operator/pull/806)
* Update capz for disk encryption [#801](https://github.com/openshift/machine-api-operator/pull/801)
* Makefile fix [#799](https://github.com/openshift/machine-api-operator/pull/799)
* fix the link to capbm [#785](https://github.com/openshift/machine-api-operator/pull/785)
* Return a valid error message when multiple templates are found [#794](https://github.com/openshift/machine-api-operator/pull/794)
* Machine: Set ErrorReason when entering Failed phase [#701](https://github.com/openshift/machine-api-operator/pull/701)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/b37833e07e4ecb6bea8f0cfbfcc349116d5d3c23...edc3e864006486a7a85e2e5e4297e307339e9f0e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b8e1b11cc4e01d9ffe4e66a432c14d70e59838a6)

* [Bug 2062655](https://bugzilla.redhat.com/show_bug.cgi?id=2062655): Improvements for configure-ovs script [#3004](https://github.com/openshift/machine-config-operator/pull/3004)
* [Bug 2025396](https://bugzilla.redhat.com/show_bug.cgi?id=2025396): annotate rendered config with OCP version [#2972](https://github.com/openshift/machine-config-operator/pull/2972)
* [Bug 2059330](https://bugzilla.redhat.com/show_bug.cgi?id=2059330): ovs-configuration: use lower than NM default ethernet route metric [#2974](https://github.com/openshift/machine-config-operator/pull/2974)
* [Bug 2058789](https://bugzilla.redhat.com/show_bug.cgi?id=2058789): Prepend to search domains instead of replacing [#2970](https://github.com/openshift/machine-config-operator/pull/2970)
* [Bug 2028854](https://bugzilla.redhat.com/show_bug.cgi?id=2028854): Backport of SystemMemoryExceedsReservation alert rule [#2956](https://github.com/openshift/machine-config-operator/pull/2956)
* [Bug 2032996](https://bugzilla.redhat.com/show_bug.cgi?id=2032996): fixes 1 to 1 containerruntime config mapping [#2877](https://github.com/openshift/machine-config-operator/pull/2877)
* [Bug 2053720](https://bugzilla.redhat.com/show_bug.cgi?id=2053720): Avoid dynamically allocated port range for haproxy [#2951](https://github.com/openshift/machine-config-operator/pull/2951)
* [Bug 2028025](https://bugzilla.redhat.com/show_bug.cgi?id=2028025): [Release 4.8] daemon: make cordon/uncordon more robust and better logging [#2853](https://github.com/openshift/machine-config-operator/pull/2853)
* [Bug 2017493](https://bugzilla.redhat.com/show_bug.cgi?id=2017493): configure-ovs: Persist addr-gen-mode for ipv6 connections [#2810](https://github.com/openshift/machine-config-operator/pull/2810)
* [Bug 2021073](https://bugzilla.redhat.com/show_bug.cgi?id=2021073): [ipi onprem] cherry pick Keepalived default ingress scripts fixes [#2826](https://github.com/openshift/machine-config-operator/pull/2826)
* [Bug 2026085](https://bugzilla.redhat.com/show_bug.cgi?id=2026085): Send WARN message to stderr [#2836](https://github.com/openshift/machine-config-operator/pull/2836)
* [Bug 2024511](https://bugzilla.redhat.com/show_bug.cgi?id=2024511): [release-4.8] [on-prem] Manual backporting of keepalived arp retries [#2831](https://github.com/openshift/machine-config-operator/pull/2831)
* [Bug 2016275](https://bugzilla.redhat.com/show_bug.cgi?id=2016275): [on-prem] Set coredns bufsize to 512 [#2807](https://github.com/openshift/machine-config-operator/pull/2807)
* [Bug 2011083](https://bugzilla.redhat.com/show_bug.cgi?id=2011083): templates: Silence audit events from container infra by default [#2793](https://github.com/openshift/machine-config-operator/pull/2793)
* [Bug 1985736](https://bugzilla.redhat.com/show_bug.cgi?id=1985736): [ON-PREM] HAProxy - Verify that NM prepender script was applied using initcontainer [#2692](https://github.com/openshift/machine-config-operator/pull/2692)
* [Bug 2000958](https://bugzilla.redhat.com/show_bug.cgi?id=2000958): fixes 1 to 1 kubelet config mapping [#2753](https://github.com/openshift/machine-config-operator/pull/2753)
* [Bug 1999531](https://bugzilla.redhat.com/show_bug.cgi?id=1999531): Set timeoutSeconds for keepalived liveness probe [#2741](https://github.com/openshift/machine-config-operator/pull/2741)
* [Bug 2004122](https://bugzilla.redhat.com/show_bug.cgi?id=2004122): Set ovs syslog level to info [#2762](https://github.com/openshift/machine-config-operator/pull/2762)
* [Bug 1973873](https://bugzilla.redhat.com/show_bug.cgi?id=1973873): match tlsSecurityProfile  doc with kubelet.conf file [#2628](https://github.com/openshift/machine-config-operator/pull/2628)
* [Bug 2000500](https://bugzilla.redhat.com/show_bug.cgi?id=2000500): bump SystemMemoryExceedsReservation alert threshold to 95% [#2748](https://github.com/openshift/machine-config-operator/pull/2748)
* [Bug 1976110](https://bugzilla.redhat.com/show_bug.cgi?id=1976110): configure-ovs: fix nondeterministic master in slave profiles [#2644](https://github.com/openshift/machine-config-operator/pull/2644)
* [Bug 1985735](https://bugzilla.redhat.com/show_bug.cgi?id=1985735): [ON-PREM] HAProxy - enable listening sockets retrieval from old processes [#2691](https://github.com/openshift/machine-config-operator/pull/2691)
* [Bug 1998106](https://bugzilla.redhat.com/show_bug.cgi?id=1998106): vSpehere: disable vmxnet3 tx csum offload [#2736](https://github.com/openshift/machine-config-operator/pull/2736)
* [Bug 1995809](https://bugzilla.redhat.com/show_bug.cgi?id=1995809): crio: complete crio default config [#2724](https://github.com/openshift/machine-config-operator/pull/2724)
* [Bug 1993385](https://bugzilla.redhat.com/show_bug.cgi?id=1993385): crio: use conmon from path [#2714](https://github.com/openshift/machine-config-operator/pull/2714)
* [Bug 1975078](https://bugzilla.redhat.com/show_bug.cgi?id=1975078): Gracefully shutdown taking around 6-7 mins (libvirt provider) [#2636](https://github.com/openshift/machine-config-operator/pull/2636)
* Updating ose-machine-config-operator builder & base images to be consistent with ART [#2484](https://github.com/openshift/machine-config-operator/pull/2484)
* [Bug 1977426](https://bugzilla.redhat.com/show_bug.cgi?id=1977426): Fix team config JSON format for nmcli command [#2648](https://github.com/openshift/machine-config-operator/pull/2648)
* [Bug 1886572](https://bugzilla.redhat.com/show_bug.cgi?id=1886572): [on-prem] set keepalived ingress priority to variable [#2595](https://github.com/openshift/machine-config-operator/pull/2595)
* [Bug 1971080](https://bugzilla.redhat.com/show_bug.cgi?id=1971080): daemon/drain.go: bump initial drain sleeps down to 1min [#2611](https://github.com/openshift/machine-config-operator/pull/2611)
* [Bug 1958812](https://bugzilla.redhat.com/show_bug.cgi?id=1958812): daemon: Rework rpm-ostree synchronous invocation logging [#2587](https://github.com/openshift/machine-config-operator/pull/2587)
* [Bug 1943315](https://bugzilla.redhat.com/show_bug.cgi?id=1943315): daemon: make node drain logic smarter for ICSP changes [#2596](https://github.com/openshift/machine-config-operator/pull/2596)
* [Bug 1946584](https://bugzilla.redhat.com/show_bug.cgi?id=1946584): Check suffix annotation is a number [#2598](https://github.com/openshift/machine-config-operator/pull/2598)
* [Bug 1969681](https://bugzilla.redhat.com/show_bug.cgi?id=1969681): maxUnavailable of ds/machine-config-daemon isn't changed even after Bug 1899535 was fixed [#2601](https://github.com/openshift/machine-config-operator/pull/2601)
* [Bug 1817075](https://bugzilla.redhat.com/show_bug.cgi?id=1817075): Revert "operator/controller pods: faster leader elections" [#2604](https://github.com/openshift/machine-config-operator/pull/2604)
* [Bug 1817075](https://bugzilla.redhat.com/show_bug.cgi?id=1817075): operator/controller pods: faster leader elections [#2603](https://github.com/openshift/machine-config-operator/pull/2603)
* [Bug 1968019](https://bugzilla.redhat.com/show_bug.cgi?id=1968019): Bump drain timeout to 1h [#2597](https://github.com/openshift/machine-config-operator/pull/2597)
* [Bug 1916890](https://bugzilla.redhat.com/show_bug.cgi?id=1916890): Stop setting nopreempt on bootstrap keepalived.conf [#2586](https://github.com/openshift/machine-config-operator/pull/2586)
* [Bug 1966602](https://bugzilla.redhat.com/show_bug.cgi?id=1966602): Don't explicitly set the IPv6DualStack feature gate [#2580](https://github.com/openshift/machine-config-operator/pull/2580)
* [Bug 1927042](https://bugzilla.redhat.com/show_bug.cgi?id=1927042): [baremetal & friends] Don't write empty static pod manifests [#2413](https://github.com/openshift/machine-config-operator/pull/2413)
* [Bug 1921937](https://bugzilla.redhat.com/show_bug.cgi?id=1921937): crio: reject /etc/hostname mount if absent [#2575](https://github.com/openshift/machine-config-operator/pull/2575)
* [Bug 1960035](https://bugzilla.redhat.com/show_bug.cgi?id=1960035): Use host's iptables binary in keepalived container [#2579](https://github.com/openshift/machine-config-operator/pull/2579)
* [Bug 1928147](https://bugzilla.redhat.com/show_bug.cgi?id=1928147): Respect DHCP option 119 for on-prem [#2428](https://github.com/openshift/machine-config-operator/pull/2428)
* [Bug 1958812](https://bugzilla.redhat.com/show_bug.cgi?id=1958812): daemon: Display more non-JSON text from rpm-ostree status --json [#2588](https://github.com/openshift/machine-config-operator/pull/2588)
* [Bug 1958391](https://bugzilla.redhat.com/show_bug.cgi?id=1958391): configure kubelet with apiserver TLSSecurityProfile [#2573](https://github.com/openshift/machine-config-operator/pull/2573)
* [Bug 1955929](https://bugzilla.redhat.com/show_bug.cgi?id=1955929): operator/sync.go confirm renderedconfig osimageurl matches cvo [#2585](https://github.com/openshift/machine-config-operator/pull/2585)
* [Bug 1955517](https://bugzilla.redhat.com/show_bug.cgi?id=1955517): Add cleanUpDuplicatedMC [#2570](https://github.com/openshift/machine-config-operator/pull/2570)
* [Bug 1948137](https://bugzilla.redhat.com/show_bug.cgi?id=1948137): crio: enable internal_wipe option [#2574](https://github.com/openshift/machine-config-operator/pull/2574)
* [Bug 1958812](https://bugzilla.redhat.com/show_bug.cgi?id=1958812): daemon: Change runGetOut to not intermix stdout/stderr [#2583](https://github.com/openshift/machine-config-operator/pull/2583)
* [Bug 1957972](https://bugzilla.redhat.com/show_bug.cgi?id=1957972): Remove remnants of mdns functionality [#2571](https://github.com/openshift/machine-config-operator/pull/2571)
* [Bug 1943539](https://bugzilla.redhat.com/show_bug.cgi?id=1943539): templates: order service files that use podman around crio-wipe [#2551](https://github.com/openshift/machine-config-operator/pull/2551)
* [Bug 1917282](https://bugzilla.redhat.com/show_bug.cgi?id=1917282): Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 [#2442](https://github.com/openshift/machine-config-operator/pull/2442)
* [Bug 1947791](https://bugzilla.redhat.com/show_bug.cgi?id=1947791): Switch CRDs to v1 [#2572](https://github.com/openshift/machine-config-operator/pull/2572)
* [Bug 1947066](https://bugzilla.redhat.com/show_bug.cgi?id=1947066): Allow wildcard in noProxy field [#2565](https://github.com/openshift/machine-config-operator/pull/2565)
* [Bug 1957374](https://bugzilla.redhat.com/show_bug.cgi?id=1957374): install: Automatically fill in the pod for MCDDrainError [#2568](https://github.com/openshift/machine-config-operator/pull/2568)
* [Bug 1956372](https://bugzilla.redhat.com/show_bug.cgi?id=1956372): gcp-routes should wait until network is stopped [#2561](https://github.com/openshift/machine-config-operator/pull/2561)
* [Bug 1953846](https://bugzilla.redhat.com/show_bug.cgi?id=1953846): Subtract hugepages from memory capacity and allocatables [#2555](https://github.com/openshift/machine-config-operator/pull/2555)
* [Bug 1946506](https://bugzilla.redhat.com/show_bug.cgi?id=1946506): Add hosts template for monitor-based resolution [#2465](https://github.com/openshift/machine-config-operator/pull/2465)
* [Bug 1952358](https://bugzilla.redhat.com/show_bug.cgi?id=1952358): vsphere: platform none, vmxnet3v4 fix move to base [#2559](https://github.com/openshift/machine-config-operator/pull/2559)
* [Bug 1931505](https://bugzilla.redhat.com/show_bug.cgi?id=1931505): [On-prem] - fix vip filtering syntax for Keepalived remove-vips [#2548](https://github.com/openshift/machine-config-operator/pull/2548)
* [Bug 1934176](https://bugzilla.redhat.com/show_bug.cgi?id=1934176): ensure SSH key uniqueness [#2540](https://github.com/openshift/machine-config-operator/pull/2540)
* Rename workload annotations [#2538](https://github.com/openshift/machine-config-operator/pull/2538)
* [Bug 1949664](https://bugzilla.redhat.com/show_bug.cgi?id=1949664): [on-prem] Disable liveness probe until keepalived.conf exists [#2528](https://github.com/openshift/machine-config-operator/pull/2528)
* [Bug 1950974](https://bugzilla.redhat.com/show_bug.cgi?id=1950974): change system-connections-merged directory to systemConnectionsMerged [#2543](https://github.com/openshift/machine-config-operator/pull/2543)
* [Bug 1954554](https://bugzilla.redhat.com/show_bug.cgi?id=1954554): add e2e for auto node sizing [#2546](https://github.com/openshift/machine-config-operator/pull/2546)
* [Bug 1949967](https://bugzilla.redhat.com/show_bug.cgi?id=1949967): vendor: update kubernetes dependencies to 1.21 [#2530](https://github.com/openshift/machine-config-operator/pull/2530)
* [Bug 1950133](https://bugzilla.redhat.com/show_bug.cgi?id=1950133): Add cleanupStatus to keep three kubelet config conditions [#2535](https://github.com/openshift/machine-config-operator/pull/2535)
* [Bug 1952368](https://bugzilla.redhat.com/show_bug.cgi?id=1952368): daemon: return nil for unsupported operation on an OS [#2542](https://github.com/openshift/machine-config-operator/pull/2542)
* [Bug 1949818](https://bugzilla.redhat.com/show_bug.cgi?id=1949818): test/e2e: add e2e test for Single Node OpenShift [#2507](https://github.com/openshift/machine-config-operator/pull/2507)
* [Bug 1950112](https://bugzilla.redhat.com/show_bug.cgi?id=1950112): properly return error in failed podman cp [#2534](https://github.com/openshift/machine-config-operator/pull/2534)
* [Bug 1950543](https://bugzilla.redhat.com/show_bug.cgi?id=1950543): document non-HA behaviors [#2522](https://github.com/openshift/machine-config-operator/pull/2522)
* [Bug 1949347](https://bugzilla.redhat.com/show_bug.cgi?id=1949347): apiserver-watcher support for dual-stack [#2479](https://github.com/openshift/machine-config-operator/pull/2479)
* Add management workload annotations [#2515](https://github.com/openshift/machine-config-operator/pull/2515)
* [Bug 1948022](https://bugzilla.redhat.com/show_bug.cgi?id=1948022): Add on-prem namespaces to relatedObjects [#2460](https://github.com/openshift/machine-config-operator/pull/2460)
* [Bug 1937594](https://bugzilla.redhat.com/show_bug.cgi?id=1937594): Respect status.Migration in network.config when exsits [#2518](https://github.com/openshift/machine-config-operator/pull/2518)
* [Bug 1931505](https://bugzilla.redhat.com/show_bug.cgi?id=1931505): [on-prem] Cleanup keepalived vips before starting service [#2511](https://github.com/openshift/machine-config-operator/pull/2511)
* [Bug 1949387](https://bugzilla.redhat.com/show_bug.cgi?id=1949387): Fix the typo in reserved calculation in auto sizing script [#2527](https://github.com/openshift/machine-config-operator/pull/2527)
* [Bug 1934443](https://bugzilla.redhat.com/show_bug.cgi?id=1934443): Fix ovs-configure script to detect team interface [#2512](https://github.com/openshift/machine-config-operator/pull/2512)
* [Bug 1947684](https://bugzilla.redhat.com/show_bug.cgi?id=1947684): delay kubelet config readiness until after pools and controller config are ready [#2517](https://github.com/openshift/machine-config-operator/pull/2517)
* [Bug 1948431](https://bugzilla.redhat.com/show_bug.cgi?id=1948431): Bump openshift/api [#2521](https://github.com/openshift/machine-config-operator/pull/2521)
* [Bug 1899187](https://bugzilla.redhat.com/show_bug.cgi?id=1899187): run afterburn-hostname only when Network Manager is up [#2516](https://github.com/openshift/machine-config-operator/pull/2516)
* [Bug 1940207](https://bugzilla.redhat.com/show_bug.cgi?id=1940207): create the ovs-config-executed file to signal ovs is running on the host [#2506](https://github.com/openshift/machine-config-operator/pull/2506)
* [Bug 1943320](https://bugzilla.redhat.com/show_bug.cgi?id=1943320): configure-ovs doesn't handle bond interfaces correctly for OVNKubernetes [#2519](https://github.com/openshift/machine-config-operator/pull/2519)
* [Bug 1933772](https://bugzilla.redhat.com/show_bug.cgi?id=1933772): Revert rework of signal handling [#2500](https://github.com/openshift/machine-config-operator/pull/2500)
* operator: upgradeable false when pools are still updating [#2487](https://github.com/openshift/machine-config-operator/pull/2487)
* [Bug 1946513](https://bugzilla.redhat.com/show_bug.cgi?id=1946513): Fix Auto node sizing to honor user input [#2514](https://github.com/openshift/machine-config-operator/pull/2514)
* Add new extension for sandboxed-containers [#2456](https://github.com/openshift/machine-config-operator/pull/2456)
* [Bug 1944986](https://bugzilla.redhat.com/show_bug.cgi?id=1944986): Doc fix for ContainerRuntimeConfig CR [#2503](https://github.com/openshift/machine-config-operator/pull/2503)
* [Bug 1899057](https://bugzilla.redhat.com/show_bug.cgi?id=1899057): configure-ovs-network: fix spurious OVS warnings [#2496](https://github.com/openshift/machine-config-operator/pull/2496)
* [Bug 1945431](https://bugzilla.redhat.com/show_bug.cgi?id=1945431): alerts: SystemMemoryExceedsReservation triggers too quickly [#2508](https://github.com/openshift/machine-config-operator/pull/2508)
* [Bug 1939740](https://bugzilla.redhat.com/show_bug.cgi?id=1939740): Use new --prefer-ipv6 flag to "runtimecfg node-ip" as appropriate [#2478](https://github.com/openshift/machine-config-operator/pull/2478)
* vSphere: Update reviewers and approvers [#2505](https://github.com/openshift/machine-config-operator/pull/2505)
* [Bug 1943329](https://bugzilla.redhat.com/show_bug.cgi?id=1943329): add tlsSecurityProfile to KubeletConfig manifest [#2492](https://github.com/openshift/machine-config-operator/pull/2492)
* [Bug 1920670](https://bugzilla.redhat.com/show_bug.cgi?id=1920670): [Baremetal and friends] Properly handle SIGTERM - Keepalived container [#2367](https://github.com/openshift/machine-config-operator/pull/2367)
* [Bug 1940939](https://bugzilla.redhat.com/show_bug.cgi?id=1940939): Do "systemctl daemon-reload" after running "runtimecfg node-ip" [#2470](https://github.com/openshift/machine-config-operator/pull/2470)
* [Bug 1941936](https://bugzilla.redhat.com/show_bug.cgi?id=1941936): drop LogSizeMax and OverlaySize in ContainerRuntimeConfiguration when not used [#2494](https://github.com/openshift/machine-config-operator/pull/2494)
* [OCPNODE-367](https://issues.redhat.com/browse/OCPNODE-367): Auto node sizing for Openshift [#2466](https://github.com/openshift/machine-config-operator/pull/2466)
* [Bug 1935539](https://bugzilla.redhat.com/show_bug.cgi?id=1935539): vSphere: udp tnl workaround cannot use nmcli [#2482](https://github.com/openshift/machine-config-operator/pull/2482)
* [Bug 1925698](https://bugzilla.redhat.com/show_bug.cgi?id=1925698): not allow healthcheck traffic to loop through the node [#2477](https://github.com/openshift/machine-config-operator/pull/2477)
* [Bug 1943145](https://bugzilla.redhat.com/show_bug.cgi?id=1943145): Strengthen kubelet service dependency on crio service [#2491](https://github.com/openshift/machine-config-operator/pull/2491)
* [Bug 1940950](https://bugzilla.redhat.com/show_bug.cgi?id=1940950): Strengthen kubelet service dependency on crio service [#2489](https://github.com/openshift/machine-config-operator/pull/2489)
* Fixes: Bug 1942207: [vsphere] hostnames are changed when upgrading from 4.6 to 4.7.x causing upgrades to fail [#2486](https://github.com/openshift/machine-config-operator/pull/2486)
* [Bug 1938084](https://bugzilla.redhat.com/show_bug.cgi?id=1938084): configure-ovs.sh:incorrect setting of cloned-mac-address field [#2468](https://github.com/openshift/machine-config-operator/pull/2468)
* Update Update-SSHKeys.md [#2483](https://github.com/openshift/machine-config-operator/pull/2483)
* [Bug 1930636](https://bugzilla.redhat.com/show_bug.cgi?id=1930636): fix error print verb [#2485](https://github.com/openshift/machine-config-operator/pull/2485)
* Makefile: Bump test-e2e timeout to 90 minutes [#2474](https://github.com/openshift/machine-config-operator/pull/2474)
* [Bug 1935539](https://bugzilla.redhat.com/show_bug.cgi?id=1935539): vSphere: Disable tx udp_csum segmentation [#2472](https://github.com/openshift/machine-config-operator/pull/2472)
* [Bug 1825417](https://bugzilla.redhat.com/show_bug.cgi?id=1825417): Make getting the suffix of an MC more robust [#2458](https://github.com/openshift/machine-config-operator/pull/2458)
* [Bug 1939270](https://bugzilla.redhat.com/show_bug.cgi?id=1939270): pkg/operator/status: Use 'DegradedPool' reason for Upgradeable=False [#2463](https://github.com/openshift/machine-config-operator/pull/2463)
* Bump haproxy http-request timeout to 30 seconds [#1743](https://github.com/openshift/machine-config-operator/pull/1743)
* Skip drain on Single Node deployment [#2457](https://github.com/openshift/machine-config-operator/pull/2457)
* [Bug 1840881](https://bugzilla.redhat.com/show_bug.cgi?id=1840881): Make getting the suffix of a kubeletconfig MC more robust [#2459](https://github.com/openshift/machine-config-operator/pull/2459)
* [Bug 1902963](https://bugzilla.redhat.com/show_bug.cgi?id=1902963): templates: add After=ostree-finalize-staged.service to kubelet.service [#2414](https://github.com/openshift/machine-config-operator/pull/2414)
* [Bug 1934113](https://bugzilla.redhat.com/show_bug.cgi?id=1934113): Improve error handling for os updates [#2449](https://github.com/openshift/machine-config-operator/pull/2449)
* [Bug 1930636](https://bugzilla.redhat.com/show_bug.cgi?id=1930636): Fix overlaySize & pidslimit ctrcfg [#2448](https://github.com/openshift/machine-config-operator/pull/2448)
* [Bug 1933805](https://bugzilla.redhat.com/show_bug.cgi?id=1933805): Add node label to service monitor [#2446](https://github.com/openshift/machine-config-operator/pull/2446)
* [Bug 1931522](https://bugzilla.redhat.com/show_bug.cgi?id=1931522): OVS Config: fixes detecting bond NM files with static IP [#2424](https://github.com/openshift/machine-config-operator/pull/2424)
* [OCPNODE-464](https://issues.redhat.com/browse/OCPNODE-464): add tls security profile support [#2324](https://github.com/openshift/machine-config-operator/pull/2324)
* [Bug 1932105](https://bugzilla.redhat.com/show_bug.cgi?id=1932105): pkg/operator/sync: More logging for syncRequiredMachineConfigPools [#2444](https://github.com/openshift/machine-config-operator/pull/2444)
* [Bug 1932105](https://bugzilla.redhat.com/show_bug.cgi?id=1932105): operator/sync.go restore err when required pools not leveled [#2440](https://github.com/openshift/machine-config-operator/pull/2440)
* [Bug 1871770](https://bugzilla.redhat.com/show_bug.cgi?id=1871770): Remove extraneous whitespace from keepalived peer list [#2409](https://github.com/openshift/machine-config-operator/pull/2409)
* [Bug 1927731](https://bugzilla.redhat.com/show_bug.cgi?id=1927731): Revert "pkg/daemon: Add IgnitionVersion to Daemon" [#2431](https://github.com/openshift/machine-config-operator/pull/2431)
* [Bug 1896226](https://bugzilla.redhat.com/show_bug.cgi?id=1896226): Remove recycler pod templates [#2318](https://github.com/openshift/machine-config-operator/pull/2318)
* [Bug 1844990](https://bugzilla.redhat.com/show_bug.cgi?id=1844990): server/api: Disable unsafe ciphers for CVE-2016-2183 [#2420](https://github.com/openshift/machine-config-operator/pull/2420)
* [Bug 1930620](https://bugzilla.redhat.com/show_bug.cgi?id=1930620): support trace loglevel [#2429](https://github.com/openshift/machine-config-operator/pull/2429)
* OWNERS: Surrendering membership [#2432](https://github.com/openshift/machine-config-operator/pull/2432)
* [Bug 1922997](https://bugzilla.redhat.com/show_bug.cgi?id=1922997): Connect default NIC to cluster network [#2384](https://github.com/openshift/machine-config-operator/pull/2384)
* [Bug 1928473](https://bugzilla.redhat.com/show_bug.cgi?id=1928473): Apply system-connections-merged to all platforms [#2425](https://github.com/openshift/machine-config-operator/pull/2425)
* Add kubelet CA to no-reboot action list/Do not drain for non-reboot actions [#2398](https://github.com/openshift/machine-config-operator/pull/2398)
* controller: remove etcd quorum-guard check on master pool [#2416](https://github.com/openshift/machine-config-operator/pull/2416)
* daemon: safer signal handling for shutdown [#2395](https://github.com/openshift/machine-config-operator/pull/2395)
* pkg/daemon: Drop unnecessary select from runLoginMonitor [#2406](https://github.com/openshift/machine-config-operator/pull/2406)
* vendor: update openshift/api to bring in new field controlPlaneTopology [#2417](https://github.com/openshift/machine-config-operator/pull/2417)
* [Bug 1927366](https://bugzilla.redhat.com/show_bug.cgi?id=1927366): Fixes ovs-configuration with cloned connections [#2402](https://github.com/openshift/machine-config-operator/pull/2402)
* [Bug 1840881](https://bugzilla.redhat.com/show_bug.cgi?id=1840881): Fix 1:1 mapping for kubeletconfig:MC and some e2e test fixes [#2408](https://github.com/openshift/machine-config-operator/pull/2408)
* Dockerfile: update reference to builder to new CI location [#2400](https://github.com/openshift/machine-config-operator/pull/2400)
* [Bug 1920807](https://bugzilla.redhat.com/show_bug.cgi?id=1920807): [vsphere] set hostname with --static to provide consistent node name for CSR approval [#2380](https://github.com/openshift/machine-config-operator/pull/2380)
* Updating ose-machine-config-operator builder & base images to be consistent with ART [#2396](https://github.com/openshift/machine-config-operator/pull/2396)
* OWNERS: drop @runcom with gratitude [#2379](https://github.com/openshift/machine-config-operator/pull/2379)
* [Bug 1885186](https://bugzilla.redhat.com/show_bug.cgi?id=1885186): handle Passwd.Users removal more gracefully [#2389](https://github.com/openshift/machine-config-operator/pull/2389)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5dd1fe366bd0779b290360eb014df67ae1c950cc...b8e1b11cc4e01d9ffe4e66a432c14d70e59838a6)


### [mdns-publisher](https://github.com/openshift/mdns-publisher/tree/1c707a28e88b42780fb37fad4532be7220acd1c5)

* [Bug 1988145](https://bugzilla.redhat.com/show_bug.cgi?id=1988145): Update zeroconf vendoring [#35](https://github.com/openshift/mdns-publisher/pull/35)
* Updating ose-mdns-publisher builder & base images to be consistent with ART [#28](https://github.com/openshift/mdns-publisher/pull/28)
* [Bug 1915122](https://bugzilla.redhat.com/show_bug.cgi?id=1915122): Truncate long service names to 63 characters [#24](https://github.com/openshift/mdns-publisher/pull/24)
* Updating ose-mdns-publisher builder & base images to be consistent with ART [#25](https://github.com/openshift/mdns-publisher/pull/25)
* [Full changelog](https://github.com/openshift/mdns-publisher/compare/af3f360536eca53d47ada65c3ddc842888432198...1c707a28e88b42780fb37fad4532be7220acd1c5)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/64645febe4129a794b1291d0a375a7b2bb7fba39)

* Updating ose-multus-admission-controller builder & base images to be consistent with ART [#32](https://github.com/openshift/multus-admission-controller/pull/32)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/a7312f5e55e9f34cc8b20f6cbfe1af0f363ca1e6...64645febe4129a794b1291d0a375a7b2bb7fba39)


### [multus-cni](https://github.com/openshift/multus-cni/tree/0c972341809c1e40f9ea6e1545774d9e1f580455)

* [Bug 1972167](https://bugzilla.redhat.com/show_bug.cgi?id=1972167): Updates entrypoint to rebuild kubeconfig when service account token or ca changes [#108](https://github.com/openshift/multus-cni/pull/108)
* [Bug 1968625](https://bugzilla.redhat.com/show_bug.cgi?id=1968625): Use the default socket path in GetResourceClient when unspecified [#102](https://github.com/openshift/multus-cni/pull/102)
* [Bug 1927264](https://bugzilla.redhat.com/show_bug.cgi?id=1927264): Vendor bump for client-go fixes [#101](https://github.com/openshift/multus-cni/pull/101)
* Support the specific cni file name [#679](https://github.com/openshift/multus-cni/pull/679)
* Update vendor package [#672](https://github.com/openshift/multus-cni/pull/672)
* Update net-attach-def client library [#666](https://github.com/openshift/multus-cni/pull/666)
* update 30-multus.conf to 00-multus.conf [#661](https://github.com/openshift/multus-cni/pull/661)
* Add cluster network name in pod network annotation [#657](https://github.com/openshift/multus-cni/pull/657)
* Fix typo: s/Lauch/Launch [#658](https://github.com/openshift/multus-cni/pull/658)
* Add arm32v7 container image support [#651](https://github.com/openshift/multus-cni/pull/651)
* Skip to call device-info related function if not required [#644](https://github.com/openshift/multus-cni/pull/644)
* Change nil instead of error in case of no network annotation [#643](https://github.com/openshift/multus-cni/pull/643)
* Change libcni's cache directory from default for multus delegates [#638](https://github.com/openshift/multus-cni/pull/638)
* Return error on annotation parsing error [#636](https://github.com/openshift/multus-cni/pull/636)
* Delete main from pkg/multus because now it was moved to cmd/main.go [#634](https://github.com/openshift/multus-cni/pull/634)
* Fix/change org name [#629](https://github.com/openshift/multus-cni/pull/629)
* Change image url to ghcr.io [#627](https://github.com/openshift/multus-cni/pull/627)
* Change github action to use ghcr.io [#626](https://github.com/openshift/multus-cni/pull/626)
* Fix link to an example pod with SRIOV network [#625](https://github.com/openshift/multus-cni/pull/625)
* Bump libcni version [#624](https://github.com/openshift/multus-cni/pull/624)
* Conditional check for tty/non-tty in case of wait (i.e. read) [#617](https://github.com/openshift/multus-cni/pull/617)
* Update github actions CI pipeline including lint error fix [#613](https://github.com/openshift/multus-cni/pull/613)
* Bump protobuf to v1.3.2 [#606](https://github.com/openshift/multus-cni/pull/606)
* Add s390x support [#611](https://github.com/openshift/multus-cni/pull/611)
* conf: do not modify global runtimeconfig when merging [#607](https://github.com/openshift/multus-cni/pull/607)
* Add grace period to missing deployment template [#603](https://github.com/openshift/multus-cni/pull/603)
* Fix entrypoint fail to read capabilities in non chain plugin config [#595](https://github.com/openshift/multus-cni/pull/595)
* Allow the default-route to be empty [#553](https://github.com/openshift/multus-cni/pull/553)
* [Bug 1957856](https://bugzilla.redhat.com/show_bug.cgi?id=1957856): Update net-attach-def client library [#97](https://github.com/openshift/multus-cni/pull/97)
* Change nil instead of error in case of no network annotation [#96](https://github.com/openshift/multus-cni/pull/96)
* Updating multus-cni builder & base images to be consistent with ART [#93](https://github.com/openshift/multus-cni/pull/93)
* Sync with upstream for OCP 4.8 [#88](https://github.com/openshift/multus-cni/pull/88)
* Updating multus-cni builder & base images to be consistent with ART [#86](https://github.com/openshift/multus-cni/pull/86)
* [Full changelog](https://github.com/openshift/multus-cni/compare/5530094db7607fc9292e3b269fcf5a85b0dad3df...0c972341809c1e40f9ea6e1545774d9e1f580455)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/d743a20fc84059e96b5f88ec4ce00073d0564fd1)

* [Bug 2028966](https://bugzilla.redhat.com/show_bug.cgi?id=2028966): Whereabouts should reconcile IP addresses [backport 4.8] [#78](https://github.com/openshift/whereabouts-cni/pull/78)
* ip-reconciler: do not reconcile pods in Pending phase [#166](https://github.com/openshift/whereabouts-cni/pull/166)
* ip-reconciler: Add all non default interfaces to Pod IP list [#147](https://github.com/openshift/whereabouts-cni/pull/147)
* Add label app=whereabouts to ip-reconciler pod template [#150](https://github.com/openshift/whereabouts-cni/pull/150)
* Configurable sleep_for_race parameter [#161](https://github.com/openshift/whereabouts-cni/pull/161)
* e2e tests: fix currently broken setup on kind clusters [#156](https://github.com/openshift/whereabouts-cni/pull/156)
* ip-reconciler: remove kubeconfig from k8s client [#159](https://github.com/openshift/whereabouts-cni/pull/159)
* Fix reconciler spec [#158](https://github.com/openshift/whereabouts-cni/pull/158)
* Use k8snetworkplumbingwg repo instead of dougbtv in sources [#123](https://github.com/openshift/whereabouts-cni/pull/123)
* build, ip reconciler: have configurable logging [#155](https://github.com/openshift/whereabouts-cni/pull/155)
* build: enable e2e testing for podman [#154](https://github.com/openshift/whereabouts-cni/pull/154)
* Fix test to include error when IP pool total doesn't equal assigned WB pod IPs [#152](https://github.com/openshift/whereabouts-cni/pull/152)
* added sleep-for-race option for IPAM [#151](https://github.com/openshift/whereabouts-cni/pull/151)
* [Bug 2009497](https://bugzilla.redhat.com/show_bug.cgi?id=2009497): Release on cancel, sync for 4.8 [#70](https://github.com/openshift/whereabouts-cni/pull/70)
* Add E2E test cases and execute with GH workflow [#148](https://github.com/openshift/whereabouts-cni/pull/148)
* Add total Add/Del timeout [#142](https://github.com/openshift/whereabouts-cni/pull/142)
* Release lease lock when LE ends [#145](https://github.com/openshift/whereabouts-cni/pull/145)
* propagate context timeout error [#143](https://github.com/openshift/whereabouts-cni/pull/143)
* Upload whereabouts binary as release asset [#149](https://github.com/openshift/whereabouts-cni/pull/149)
* Add support for CNI version [#135](https://github.com/openshift/whereabouts-cni/pull/135)
* readme: fix yaml paths [#134](https://github.com/openshift/whereabouts-cni/pull/134)
* [Bug 1990113](https://bugzilla.redhat.com/show_bug.cgi?id=1990113): Syncs with upstream for leader election [backport 4.8] [#63](https://github.com/openshift/whereabouts-cni/pull/63)
* Bump k8s api version [#126](https://github.com/openshift/whereabouts-cni/pull/126)
* fix: Skip default network in ip reconciler [#128](https://github.com/openshift/whereabouts-cni/pull/128)
* IP ranges cleanup [#118](https://github.com/openshift/whereabouts-cni/pull/118)
* Cherry pick overlapping ranges to master [#120](https://github.com/openshift/whereabouts-cni/pull/120)
* build: vendor leader election dependencies [#124](https://github.com/openshift/whereabouts-cni/pull/124)
* Add leader election [#113](https://github.com/openshift/whereabouts-cni/pull/113)
* build: update openshift build image to golang 1.15 [#121](https://github.com/openshift/whereabouts-cni/pull/121)
* Updates image push on release to refer to correct dockerfile location [#122](https://github.com/openshift/whereabouts-cni/pull/122)
* ippools schema: add podref [#116](https://github.com/openshift/whereabouts-cni/pull/116)
* Remove bigint code to fix starts-with-zero-ipv6-problem [#89](https://github.com/openshift/whereabouts-cni/pull/89)
* Fix github actions [#93](https://github.com/openshift/whereabouts-cni/pull/93)
* Change CI pipeline from travis CI to github actions [#92](https://github.com/openshift/whereabouts-cni/pull/92)
* Adds a login so we can pull images from the registry [#91](https://github.com/openshift/whereabouts-cni/pull/91)
* README incorrectly stated Whereabouts requires three parameters [#90](https://github.com/openshift/whereabouts-cni/pull/90)
* updated readme with instructions on how to install using helm3 [#82](https://github.com/openshift/whereabouts-cni/pull/82)
* The first example can drop the optional parameters [#81](https://github.com/openshift/whereabouts-cni/pull/81)
* Logic for IPv6 assignment should not omit the broadcast addresses [#77](https://github.com/openshift/whereabouts-cni/pull/77)
* Reduces required parameters by introducing flatfile configuration by default [#69](https://github.com/openshift/whereabouts-cni/pull/69)
* Removes error when deallocating IP errors out, instead just warns. [#74](https://github.com/openshift/whereabouts-cni/pull/74)
* Includes fix for excluding IPv6 ranges as well as unit test [#73](https://github.com/openshift/whereabouts-cni/pull/73)
* Adds the missing error/log/warn methods to the install-cni.sh [#67](https://github.com/openshift/whereabouts-cni/pull/67)
* whereabouts.kubeconfig wrong in IPv6 only env [#47](https://github.com/openshift/whereabouts-cni/pull/47)
* Add a more meaningful error for invalid CIDR [#66](https://github.com/openshift/whereabouts-cni/pull/66)
* Fixing wrong DNS-1123 name for some IPv6 addresses [#61](https://github.com/openshift/whereabouts-cni/pull/61)
* Specifiy image repo URL explicitly [#56](https://github.com/openshift/whereabouts-cni/pull/56)
* Change error message [#54](https://github.com/openshift/whereabouts-cni/pull/54)
* Fix IP address type size to 16 bytes [#51](https://github.com/openshift/whereabouts-cni/pull/51)
* [Bug 1919048](https://bugzilla.redhat.com/show_bug.cgi?id=1919048): Fix for IPv6 when leading hextets equal zero [#48](https://github.com/openshift/whereabouts-cni/pull/48)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/dfe6b395b67c0cede73e6edf758976ae208b930c...d743a20fc84059e96b5f88ec4ce00073d0564fd1)


### [must-gather](https://github.com/openshift/must-gather/tree/5f81377b92c181e9f3d140fd1124310459cc704f)

* [Bug 2057345](https://bugzilla.redhat.com/show_bug.cgi?id=2057345): Fix ovn-nbctl commands for ipv6 [#287](https://github.com/openshift/must-gather/pull/287)
* Updating ose-must-gather builder & base images to be consistent with ART [#221](https://github.com/openshift/must-gather/pull/221)
* [Bug 1958405](https://bugzilla.redhat.com/show_bug.cgi?id=1958405): add etcd health logs to audit [#235](https://github.com/openshift/must-gather/pull/235)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#232](https://github.com/openshift/must-gather/pull/232)
* [Bug 1958094](https://bugzilla.redhat.com/show_bug.cgi?id=1958094): gather_audit_logs: ignore .lock file [#231](https://github.com/openshift/must-gather/pull/231)
* [Bug 1907353](https://bugzilla.redhat.com/show_bug.cgi?id=1907353): Add ovs related services to GENERAL_SERVICES [#225](https://github.com/openshift/must-gather/pull/225)
* Add multi-networkpolicy object in must-gather [#226](https://github.com/openshift/must-gather/pull/226)
* gather multi-networkpolicy logs [#224](https://github.com/openshift/must-gather/pull/224)
* [Bug 1916809](https://bugzilla.redhat.com/show_bug.cgi?id=1916809): extend must-gather network log to include nodes' ovs DB [#218](https://github.com/openshift/must-gather/pull/218)
* [Bug 1916392](https://bugzilla.redhat.com/show_bug.cgi?id=1916392): Gather API priority and fairness debug endpoints [#204](https://github.com/openshift/must-gather/pull/204)
* Updating ose-must-gather builder & base images to be consistent with ART [#210](https://github.com/openshift/must-gather/pull/210)
* Gather ethtool info from driver and offload [#207](https://github.com/openshift/must-gather/pull/207)
* collect alerts from the cluster [#205](https://github.com/openshift/must-gather/pull/205)
* [Full changelog](https://github.com/openshift/must-gather/compare/205d4e3cffb19bda7a658836c84587f2ac78d82c...5f81377b92c181e9f3d140fd1124310459cc704f)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/f02c63ae9475d2e51ee1b94b8e341ac8f9d590b7)

* Changed container repository from Docker to Quay (#36) [#36](https://github.com/openshift/network-metrics-daemon/pull/36)
* Updating ose-network-metrics-daemon builder & base images to be consistent with ART (#35) [#35](https://github.com/openshift/network-metrics-daemon/pull/35)
* deployments: Use 33% as the rollout maxUnavailable (#34) [#34](https://github.com/openshift/network-metrics-daemon/pull/34)
* Updating ose-network-metrics-daemon builder & base images to be consistent with ART (#33) [#33](https://github.com/openshift/network-metrics-daemon/pull/33)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/b1926150fd61d1f5137d18606661ff451f504a98...f02c63ae9475d2e51ee1b94b8e341ac8f9d590b7)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/961db5cc19f78cb73c628c5219a0c5a6dbde7a3e)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#74](https://github.com/openshift/oauth-apiserver/pull/74)
* [Bug 1958097](https://bugzilla.redhat.com/show_bug.cgi?id=1958097): tokenreviews: improve errors on old-format access tokens [#52](https://github.com/openshift/oauth-apiserver/pull/52)
* [Bug 1949419](https://bugzilla.redhat.com/show_bug.cgi?id=1949419): Fix [SHOULD NOT HAPPEN] server-side-apply error for TokenReviews [#53](https://github.com/openshift/oauth-apiserver/pull/53)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#51](https://github.com/openshift/oauth-apiserver/pull/51)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): bump to kube 1.21.0 [#50](https://github.com/openshift/oauth-apiserver/pull/50)
* forbid the old token format [#44](https://github.com/openshift/oauth-apiserver/pull/44)
* prints flags at startup [#48](https://github.com/openshift/oauth-apiserver/pull/48)
* loosen up username and identity name validation [#47](https://github.com/openshift/oauth-apiserver/pull/47)
* [Bug 1933599](https://bugzilla.redhat.com/show_bug.cgi?id=1933599): bump k8s.io/apiserver to 1.20.4 [#45](https://github.com/openshift/oauth-apiserver/pull/45)
* add a custom authorizer to ensure kube-apiserver can always access tokenreviews webhook [#41](https://github.com/openshift/oauth-apiserver/pull/41)
* Add token validation for OpenShift OAuth access tokens [#9](https://github.com/openshift/oauth-apiserver/pull/9)
* Updating ose-oauth-apiserver builder & base images to be consistent with ART [#39](https://github.com/openshift/oauth-apiserver/pull/39)
* completeConfig: remove storage, storageErr state from config [#40](https://github.com/openshift/oauth-apiserver/pull/40)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/69f527e90f599e0f509cfce73ba7b95656f03f7f...961db5cc19f78cb73c628c5219a0c5a6dbde7a3e)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/3fc0d89b2607808927f5b48168342f5dc3a1a271)

* [Bug 1874322](https://bugzilla.redhat.com/show_bug.cgi?id=1874322): add bcrypt as a supported hashing method for htpasswd passwords [#186](https://github.com/openshift/oauth-proxy/pull/186)
* Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART [#202](https://github.com/openshift/oauth-proxy/pull/202)
* [Bug 1958158](https://bugzilla.redhat.com/show_bug.cgi?id=1958158): providers/openshift: remove logging of authorizer decisions [#214](https://github.com/openshift/oauth-proxy/pull/214)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/fd4dfe78bcd8373c545284a671499681f824c645...3fc0d89b2607808927f5b48168342f5dc3a1a271)


### [oauth-server](https://github.com/openshift/oauth-server/tree/374e2ee38a1910c6d56172e9d4ec1828c4dea1be)

* [Bug 1970828](https://bugzilla.redhat.com/show_bug.cgi?id=1970828): fix projected service accounts as oauth-client [#80](https://github.com/openshift/oauth-server/pull/80)
* [Bug 1958080](https://bugzilla.redhat.com/show_bug.cgi?id=1958080): Add missing error page strings [#77](https://github.com/openshift/oauth-server/pull/77)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#76](https://github.com/openshift/oauth-server/pull/76)
* [Bug 1958080](https://bugzilla.redhat.com/show_bug.cgi?id=1958080): CONSOLE-2535: Internationalize login page [#71](https://github.com/openshift/oauth-server/pull/71)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): DelegatingAuthenticationOptions TokenReview request timeout [#75](https://github.com/openshift/oauth-server/pull/75)
* base64-encode usernames when they contain ':' or '/' [#72](https://github.com/openshift/oauth-server/pull/72)
* Remove the legacy Dockerfile [#73](https://github.com/openshift/oauth-server/pull/73)
* Updating oauth-server builder & base images to be consistent with ART [#70](https://github.com/openshift/oauth-server/pull/70)
* [Bug 1892642](https://bugzilla.redhat.com/show_bug.cgi?id=1892642): metrics: move unlabeled metrics to Counters, initialize all [#69](https://github.com/openshift/oauth-server/pull/69)
* [Full changelog](https://github.com/openshift/oauth-server/compare/61db550b94b09356eebabcffd39aea8d90eb6089...374e2ee38a1910c6d56172e9d4ec1828c4dea1be)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/43d6128c799a32b8a0f47c3ddb54155951a7f743)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#280](https://github.com/openshift/openshift-apiserver/pull/280)
* [Bug 2053223](https://bugzilla.redhat.com/show_bug.cgi?id=2053223): Fix importing images that have dots in their namespace [#283](https://github.com/openshift/openshift-apiserver/pull/283)
* [Bug 2042732](https://bugzilla.redhat.com/show_bug.cgi?id=2042732): Make OriginImageMutators aware of origin objects [#271](https://github.com/openshift/openshift-apiserver/pull/271)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs [#259](https://github.com/openshift/openshift-apiserver/pull/259)
* [Bug 1992639](https://bugzilla.redhat.com/show_bug.cgi?id=1992639): revert incorrect ssh scp fix [#241](https://github.com/openshift/openshift-apiserver/pull/241)
* [Bug 1972687](https://bugzilla.redhat.com/show_bug.cgi?id=1972687): openshift authorization proxy: escape header key values [#219](https://github.com/openshift/openshift-apiserver/pull/219)
* [Bug 1956826](https://bugzilla.redhat.com/show_bug.cgi?id=1956826): add restriction note to docker strategy build args [#213](https://github.com/openshift/openshift-apiserver/pull/213)
* [Bug 1940057](https://bugzilla.redhat.com/show_bug.cgi?id=1940057): Use listers to find pod info for build logs [#206](https://github.com/openshift/openshift-apiserver/pull/206)
* [Bug 1964888](https://bugzilla.redhat.com/show_bug.cgi?id=1964888): bump(k8s.io/apiserver) [#212](https://github.com/openshift/openshift-apiserver/pull/212)
* [Bug 1957584](https://bugzilla.redhat.com/show_bug.cgi?id=1957584): Revert 'Bug 1896977: Enhance API host name validation' [#210](https://github.com/openshift/openshift-apiserver/pull/210)
* [Bug 1957261](https://bugzilla.redhat.com/show_bug.cgi?id=1957261): BUILD-186 godoc cleanup [#207](https://github.com/openshift/openshift-apiserver/pull/207)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): bump to kube 1.21.0 and pick up the delegated AuthN fix [#202](https://github.com/openshift/openshift-apiserver/pull/202)
* [Bug 1923847](https://bugzilla.redhat.com/show_bug.cgi?id=1923847): Use github.com/openshift/apiserver-library-go/pkg/labelselector [#204](https://github.com/openshift/openshift-apiserver/pull/204)
* [Bug 1953563](https://bugzilla.redhat.com/show_bug.cgi?id=1953563): Add .ci-operator.yaml with build_root_image [#203](https://github.com/openshift/openshift-apiserver/pull/203)
* [BUILD-186](https://issues.redhat.com/browse/BUILD-186): build lastTriggeredID needs to be in status [#191](https://github.com/openshift/openshift-apiserver/pull/191)
* bump apiserver-lib-go for looser username validation [#195](https://github.com/openshift/openshift-apiserver/pull/195)
* sets shutdown-delay-duration from OpenShiftAPIServerConfig [#198](https://github.com/openshift/openshift-apiserver/pull/198)
* limit basic-user cluster role well-known access to oauth-authorization-server only [#192](https://github.com/openshift/openshift-apiserver/pull/192)
* [Bug 1895053](https://bugzilla.redhat.com/show_bug.cgi?id=1895053): Propagate new MountTrustedCA field [#185](https://github.com/openshift/openshift-apiserver/pull/185)
* [Bug 1933599](https://bugzilla.redhat.com/show_bug.cgi?id=1933599): bump k8s.io/apiserver to 1.20.4 [#190](https://github.com/openshift/openshift-apiserver/pull/190)
* Updating ose-openshift-apiserver builder & base images to be consistent with ART [#184](https://github.com/openshift/openshift-apiserver/pull/184)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/3c007ad1de009a255a56889761dc2ac440529ffc...43d6128c799a32b8a0f47c3ddb54155951a7f743)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/69a83a3f3c290519692a66fd5ffe89586eb1b4b9)

* [Bug 2006793](https://bugzilla.redhat.com/show_bug.cgi?id=2006793): BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 [#206](https://github.com/openshift/openshift-controller-manager/pull/206)
* [Bug 1954715](https://bugzilla.redhat.com/show_bug.cgi?id=1954715): Increase number of image-import controller workers [#178](https://github.com/openshift/openshift-controller-manager/pull/178)
* [Bug 1925409](https://bugzilla.redhat.com/show_bug.cgi?id=1925409): Rebase to k8s 1.21 [#184](https://github.com/openshift/openshift-controller-manager/pull/184)
* [Bug 1953798](https://bugzilla.redhat.com/show_bug.cgi?id=1953798): stop requeuing secret creation when namespaces are terminating [#179](https://github.com/openshift/openshift-controller-manager/pull/179)
* [Bug 1935165](https://bugzilla.redhat.com/show_bug.cgi?id=1935165): fixed LANG for the builder container [#176](https://github.com/openshift/openshift-controller-manager/pull/176)
* [BUILD-186](https://issues.redhat.com/browse/BUILD-186): build lastTriggeredID needs to be in status [#171](https://github.com/openshift/openshift-controller-manager/pull/171)
* [Bug 1947793](https://bugzilla.redhat.com/show_bug.cgi?id=1947793): Deprecated API in use [#175](https://github.com/openshift/openshift-controller-manager/pull/175)
* ingress: Migrate to networking.k8s.io/v1 [#172](https://github.com/openshift/openshift-controller-manager/pull/172)
* [Bug 1895053](https://bugzilla.redhat.com/show_bug.cgi?id=1895053): Instruct builds to optionally mount trusted CAs [#154](https://github.com/openshift/openshift-controller-manager/pull/154)
* Updating ose-openshift-controller-manager builder & base images to be consistent with ART [#174](https://github.com/openshift/openshift-controller-manager/pull/174)
* Updating ose-openshift-controller-manager builder & base images to be consistent with ART [#168](https://github.com/openshift/openshift-controller-manager/pull/168)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/c93745bf6898f41c6d10c66e7024238ddf20a86d...69a83a3f3c290519692a66fd5ffe89586eb1b4b9)


### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/101429149266e2c86a41b82baf47a033c9a93b02)

* Updating openshift-state-metrics builder & base images to be consistent with ART [#68](https://github.com/openshift/openshift-state-metrics/pull/68)
* Updating openshift-state-metrics builder & base images to be consistent with ART [#67](https://github.com/openshift/openshift-state-metrics/pull/67)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/40b0968ee1d488b791cdd6750fac6534abac122e...101429149266e2c86a41b82baf47a033c9a93b02)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb)

* [Bug 2049088](https://bugzilla.redhat.com/show_bug.cgi?id=2049088): Explicitly set default value for ReclaimPolicy [#71](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/71)
* [Bug 1960732](https://bugzilla.redhat.com/show_bug.cgi?id=1960732): delete manifests and update readme [#45](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/45)
* [Bug 1936871](https://bugzilla.redhat.com/show_bug.cgi?id=1936871): support clouds with multiple availability zones [#43](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/43)
* [Bug 1905849](https://bugzilla.redhat.com/show_bug.cgi?id=1905849): create default VolumeSnapshotClass [#40](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/40)
* [Bug 1952211](https://bugzilla.redhat.com/show_bug.cgi?id=1952211): Fix error when mounting /var/lib/kubelet/pods [#41](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/41)
* [Bug 1957149](https://bugzilla.redhat.com/show_bug.cgi?id=1957149): Revert "Bug 1905849: create default VolumeSnapshotClass" [#38](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/38)
* [Bug 1905849](https://bugzilla.redhat.com/show_bug.cgi?id=1905849): create default VolumeSnapshotClass [#36](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/36)
* [Bug 1954003](https://bugzilla.redhat.com/show_bug.cgi?id=1954003): Fix snapshotter metrics endpoint [#37](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/37)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#35](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/35)
* Cinder: Add metrics scraping [#34](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/34)
* [Bug 1909136](https://bugzilla.redhat.com/show_bug.cgi?id=1909136): Pass cluster ID to CSI driver [#33](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/33)
* Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART [#32](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/32)
* [Bug 1918562](https://bugzilla.redhat.com/show_bug.cgi?id=1918562): bump library-go [#30](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/30)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#28](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/28)
* Fix logLevel propagation to the operands [#27](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/27)
* Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART [#25](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/25)
* Cleanup: Remove serviceName from controller manifest [#26](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/26)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/f77ff88000592657b54ec5a3fe51c316aa57cce2...d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/77840b9a431880b15ee05d4a3f327b7ff2a682e8)

* [Bug 2064634](https://bugzilla.redhat.com/show_bug.cgi?id=2064634): Ensure subnets belong to the queried network [#223](https://github.com/openshift/cluster-api-provider-openstack/pull/223)
* [Bug 2000542](https://bugzilla.redhat.com/show_bug.cgi?id=2000542): Adds Proxy to provider client http transport [#199](https://github.com/openshift/cluster-api-provider-openstack/pull/199)
* [Bug 1985015](https://bugzilla.redhat.com/show_bug.cgi?id=1985015): Eliminate instanceCreate volume leak [#192](https://github.com/openshift/cluster-api-provider-openstack/pull/192)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#180](https://github.com/openshift/cluster-api-provider-openstack/pull/180)
* [Bug 1955969](https://bugzilla.redhat.com/show_bug.cgi?id=1955969): - Makes port names unique. [#181](https://github.com/openshift/cluster-api-provider-openstack/pull/181)
* [Bug 1948546](https://bugzilla.redhat.com/show_bug.cgi?id=1948546): Allow all networking interfaces to be defined as ports [#179](https://github.com/openshift/cluster-api-provider-openstack/pull/179)
* [Bug 1952179](https://bugzilla.redhat.com/show_bug.cgi?id=1952179): Port Allowed Address Pairs UI [#178](https://github.com/openshift/cluster-api-provider-openstack/pull/178)
* [Bug 1948546](https://bugzilla.redhat.com/show_bug.cgi?id=1948546): Port create bugs [#175](https://github.com/openshift/cluster-api-provider-openstack/pull/175)
* Ports NetworkID json typo [#174](https://github.com/openshift/cluster-api-provider-openstack/pull/174)
* Sriov Addons [#173](https://github.com/openshift/cluster-api-provider-openstack/pull/173)
* Updating ose-openstack-machine-controllers builder & base images to be consistent with ART [#172](https://github.com/openshift/cluster-api-provider-openstack/pull/172)
* [Bug 1747270](https://bugzilla.redhat.com/show_bug.cgi?id=1747270): InstanceService.GetInstanceList should not do substring search on name [#171](https://github.com/openshift/cluster-api-provider-openstack/pull/171)
* Adds vnictype to port creation [#169](https://github.com/openshift/cluster-api-provider-openstack/pull/169)
* Add availability zone option to root volume [#168](https://github.com/openshift/cluster-api-provider-openstack/pull/168)
* Tag Ports Created By CAPO Based on Network or Subnet Attached [#166](https://github.com/openshift/cluster-api-provider-openstack/pull/166)
* Remove pkg/errors dependency [#155](https://github.com/openshift/cluster-api-provider-openstack/pull/155)
* Updating ose-openstack-machine-controllers builder & base images to be consistent with ART [#162](https://github.com/openshift/cluster-api-provider-openstack/pull/162)
* images: Remove openssh from the RHEL variant [#145](https://github.com/openshift/cluster-api-provider-openstack/pull/145)
* hack: Add verify-vendor.sh [#144](https://github.com/openshift/cluster-api-provider-openstack/pull/144)
* Update BZ component [#160](https://github.com/openshift/cluster-api-provider-openstack/pull/160)
* use gophercloud/utils to list available AZs [#146](https://github.com/openshift/cluster-api-provider-openstack/pull/146)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/dcb7828fd3753b90a5f617349495e59eca0307d1...77840b9a431880b15ee05d4a3f327b7ff2a682e8)


### [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm/tree/b3aabf273e0ac0bd6e84d257332e2eac08f5e6cf)

* [Bug 2030489](https://bugzilla.redhat.com/show_bug.cgi?id=2030489): Remove oudated subscription update logic to improve resolution delay [#222](https://github.com/openshift/operator-framework-olm/pull/222)
* [Bug 1996162](https://bugzilla.redhat.com/show_bug.cgi?id=1996162): Check for pruned bundles on add in replaces mode [#165](https://github.com/openshift/operator-framework-olm/pull/165)
* [Bug 1986476](https://bugzilla.redhat.com/show_bug.cgi?id=1986476): resolver: remove legacy support for fallback parsing of CSVs [#140](https://github.com/openshift/operator-framework-olm/pull/140)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): clarify maxOpenShiftVersion upgrade error message [#173](https://github.com/openshift/operator-framework-olm/pull/173)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): Update kubebuilder installation in the build root dockerfile [#174](https://github.com/openshift/operator-framework-olm/pull/174)
* [Bug 1994110](https://bugzilla.redhat.com/show_bug.cgi?id=1994110): fix(openshift): drop z from next calculated y-stream [#167](https://github.com/openshift/operator-framework-olm/pull/167)
* [Bug 1989779](https://bugzilla.redhat.com/show_bug.cgi?id=1989779): installplans: retry crd updates on conflicts [#156](https://github.com/openshift/operator-framework-olm/pull/156)
* [Bug 1989711](https://bugzilla.redhat.com/show_bug.cgi?id=1989711): fix(openshift): block upgrades on invalid max properties (#2302) [#155](https://github.com/openshift/operator-framework-olm/pull/155)
* [Bug 1990650](https://bugzilla.redhat.com/show_bug.cgi?id=1990650): Add PriorityClass setting to registry pods for default CatalogSource (#2304) [#158](https://github.com/openshift/operator-framework-olm/pull/158)
* [Bug 1986023](https://bugzilla.redhat.com/show_bug.cgi?id=1986023): Translate legacy "bundle dependencies" to properties. [#134](https://github.com/openshift/operator-framework-olm/pull/134)
* [Bug 1979525](https://bugzilla.redhat.com/show_bug.cgi?id=1979525): OLM blocks minor OpenShift upgrades when incompatible optional operators are installed [#120](https://github.com/openshift/operator-framework-olm/pull/120)
* [Bug 1982294](https://bugzilla.redhat.com/show_bug.cgi?id=1982294): Fix for resolution error on channels with deprecated inner entries. [#118](https://github.com/openshift/operator-framework-olm/pull/118)
* [Bug 1982250](https://bugzilla.redhat.com/show_bug.cgi?id=1982250): (fix)InstallPlan: Do not tranisition IP to failed on OG/SA failure [#119](https://github.com/openshift/operator-framework-olm/pull/119)
* [Bug 1982252](https://bugzilla.redhat.com/show_bug.cgi?id=1982252): remove cleanup from startup [#117](https://github.com/openshift/operator-framework-olm/pull/117)
* [Bug 1977479](https://bugzilla.redhat.com/show_bug.cgi?id=1977479): fix configmap registry server liveness probe timeouts [#108](https://github.com/openshift/operator-framework-olm/pull/108)
* [Bug 1975432](https://bugzilla.redhat.com/show_bug.cgi?id=1975432): Resolve InstallPlanStepAppliedWithWarnings alert after some time. [#102](https://github.com/openshift/operator-framework-olm/pull/102)
* [Bug 1927340](https://bugzilla.redhat.com/show_bug.cgi?id=1927340): Add OperatorCondition status sync and update operator upgradeable check [#92](https://github.com/openshift/operator-framework-olm/pull/92)
* [Bug 1950047](https://bugzilla.redhat.com/show_bug.cgi?id=1950047): Fix Template Annotations on Webhooks/API Service CSVs [#90](https://github.com/openshift/operator-framework-olm/pull/90)
* [Bug 1958296](https://bugzilla.redhat.com/show_bug.cgi?id=1958296): Surface API server warnings when applying plan steps. [#85](https://github.com/openshift/operator-framework-olm/pull/85)
* [Bug 1968700](https://bugzilla.redhat.com/show_bug.cgi?id=1968700): Fix nil pointer dereference while reporting bundle unpack status. [#88](https://github.com/openshift/operator-framework-olm/pull/88)
* [Bug 1965334](https://bugzilla.redhat.com/show_bug.cgi?id=1965334): drop xattrs during unpack [#86](https://github.com/openshift/operator-framework-olm/pull/86)
* [Bug 1881522](https://bugzilla.redhat.com/show_bug.cgi?id=1881522): packageserver CSV: add missing properties [#84](https://github.com/openshift/operator-framework-olm/pull/84)
* [Bug 1945548](https://bugzilla.redhat.com/show_bug.cgi?id=1945548): Filter secret names for registry pod's sa [#83](https://github.com/openshift/operator-framework-olm/pull/83)
* [Bug 1961472](https://bugzilla.redhat.com/show_bug.cgi?id=1961472): Explicitly set `readOnlyRootFilesystem: false` on created registry pods. [#82](https://github.com/openshift/operator-framework-olm/pull/82)
* [Bug 1959158](https://bugzilla.redhat.com/show_bug.cgi?id=1959158): Make ClusterOperator Available condition sticky. [#81](https://github.com/openshift/operator-framework-olm/pull/81)
* [Bug 1961320](https://bugzilla.redhat.com/show_bug.cgi?id=1961320): feat(metrics): Emit metrics for CatalogSource state [#80](https://github.com/openshift/operator-framework-olm/pull/80)
* [Bug 1961314](https://bugzilla.redhat.com/show_bug.cgi?id=1961314): fix race in test with mockRepo/mockBlobStore [#79](https://github.com/openshift/operator-framework-olm/pull/79)
* [Bug 1951387](https://bugzilla.redhat.com/show_bug.cgi?id=1951387): Add after deprecation [#67](https://github.com/openshift/operator-framework-olm/pull/67)
* [Bug 1947946](https://bugzilla.redhat.com/show_bug.cgi?id=1947946): Annotate CRDs that are installed alongside CSVs. [#75](https://github.com/openshift/operator-framework-olm/pull/75)
* [Bug 1958285](https://bugzilla.redhat.com/show_bug.cgi?id=1958285): Simplify deployment status check to reduce flapping. [#76](https://github.com/openshift/operator-framework-olm/pull/76)
* [Bug 1921264](https://bugzilla.redhat.com/show_bug.cgi?id=1921264): Fail InstallPlan on bundle unpack timeout [#78](https://github.com/openshift/operator-framework-olm/pull/78)
* [Bug 1953977](https://bugzilla.redhat.com/show_bug.cgi?id=1953977): Add tolerant delegating auth config for PackageServer [#77](https://github.com/openshift/operator-framework-olm/pull/77)
* [Bug 1957127](https://bugzilla.redhat.com/show_bug.cgi?id=1957127): pin apiserver for DelegatingAuthenticationOptions TokenReview request timeout [#74](https://github.com/openshift/operator-framework-olm/pull/74)
* [Bug 1955761](https://bugzilla.redhat.com/show_bug.cgi?id=1955761): Set reason/message for Available condition in packageserver co [#72](https://github.com/openshift/operator-framework-olm/pull/72)
* [Bug 1956611](https://bugzilla.redhat.com/show_bug.cgi?id=1956611): Fix CR validation bug on go 1.16 [#70](https://github.com/openshift/operator-framework-olm/pull/70)
* [Bug 1957386](https://bugzilla.redhat.com/show_bug.cgi?id=1957386): Move config serve and validate to opm alpha [#71](https://github.com/openshift/operator-framework-olm/pull/71)
* [Bug 1945443](https://bugzilla.redhat.com/show_bug.cgi?id=1945443): Use DeploymentAvailable instead of custom test for CSV status. [#68](https://github.com/openshift/operator-framework-olm/pull/68)
* Rename workload annotations [#61](https://github.com/openshift/operator-framework-olm/pull/61)
* [Bug 1950025](https://bugzilla.redhat.com/show_bug.cgi?id=1950025): Bump the k8s.io dependencies to v1.20.6 [#56](https://github.com/openshift/operator-framework-olm/pull/56)
* [Bug 1952238](https://bugzilla.redhat.com/show_bug.cgi?id=1952238): Report catalog pod termination logs to catalog operator on exit [#65](https://github.com/openshift/operator-framework-olm/pull/65)
* [Bug 1934071](https://bugzilla.redhat.com/show_bug.cgi?id=1934071): fix(catalog): Reduce namespace resync in resolution failure [#62](https://github.com/openshift/operator-framework-olm/pull/62)
* Add verify target to Makefile. [#64](https://github.com/openshift/operator-framework-olm/pull/64)
* [Bug 1951652](https://bugzilla.redhat.com/show_bug.cgi?id=1951652): Retry failures when pulling images [#63](https://github.com/openshift/operator-framework-olm/pull/63)
* [Bug 1942522](https://bugzilla.redhat.com/show_bug.cgi?id=1942522): Fix resolution error if inner entry doesn't provide a required API. [#60](https://github.com/openshift/operator-framework-olm/pull/60)
* Add management workload annotations [#42](https://github.com/openshift/operator-framework-olm/pull/42)
* [Bug 1938492](https://bugzilla.redhat.com/show_bug.cgi?id=1938492): Add resource requests for bundle unpacker [#55](https://github.com/openshift/operator-framework-olm/pull/55)
* [Bug 1949294](https://bugzilla.redhat.com/show_bug.cgi?id=1949294): fix environment variable merging from subscription.config [#53](https://github.com/openshift/operator-framework-olm/pull/53)
* [Bug 1948725](https://bugzilla.redhat.com/show_bug.cgi?id=1948725): Add IBM managed cloud profile annotations to manifests [#50](https://github.com/openshift/operator-framework-olm/pull/50)
* [Bug 1934080](https://bugzilla.redhat.com/show_bug.cgi?id=1934080): Preserve existing ServiceAccount owner references during installs. [#41](https://github.com/openshift/operator-framework-olm/pull/41)
* [Bug 1948771](https://bugzilla.redhat.com/show_bug.cgi?id=1948771): Revert "set packageserver replicas to 1 for single node" [#51](https://github.com/openshift/operator-framework-olm/pull/51)
* staging/operator-registry: Pull in all non-opm-add declarative config updates [#47](https://github.com/openshift/operator-framework-olm/pull/47)
* Staged api to 01e8bf8b (v0.8.0) and olm to c480add3. [#49](https://github.com/openshift/operator-framework-olm/pull/49)
* staging/operator-registry: Pull in declarative config base packages + server command [#45](https://github.com/openshift/operator-framework-olm/pull/45)
* Update the staging/operator-lifecycle-manager tree [#46](https://github.com/openshift/operator-framework-olm/pull/46)
* [Bug 1946838](https://bugzilla.redhat.com/show_bug.cgi?id=1946838): Do not adopt copied CSVs [#44](https://github.com/openshift/operator-framework-olm/pull/44)
* [Bug 1913525](https://bugzilla.redhat.com/show_bug.cgi?id=1913525): Bump the k8s dependencies to v0.20.4 [#40](https://github.com/openshift/operator-framework-olm/pull/40)
* Upstream sync for operator-lifecycle-manager [#38](https://github.com/openshift/operator-framework-olm/pull/38)
* staging/olm: Re-generate test fake package(s) [#39](https://github.com/openshift/operator-framework-olm/pull/39)
* staging/olm: Re-generate test fake package(s) [#39](https://github.com/openshift/operator-framework-olm/pull/39)
* Upstream sync for operator-registry [#36](https://github.com/openshift/operator-framework-olm/pull/36)
* [Bug 1945584](https://bugzilla.redhat.com/show_bug.cgi?id=1945584): Remove overrides for GOOS and GOARCH in cpb Makefile recipe. [#35](https://github.com/openshift/operator-framework-olm/pull/35)
* Makefile: Use the full git commit hash when building binaries [#33](https://github.com/openshift/operator-framework-olm/pull/33)
* Remove the OLM_VERSION file and update the base.Dockerfile to use Go 1.16 [#32](https://github.com/openshift/operator-framework-olm/pull/32)
* Updating operator-lifecycle-manager builder & base images to be consistent with ART [#31](https://github.com/openshift/operator-framework-olm/pull/31)
* Updating operator-registry builder & base images to be consistent with ART [#30](https://github.com/openshift/operator-framework-olm/pull/30)
* Dockerfile,Makefile: Add opm binary and cross compilation target(s) [#29](https://github.com/openshift/operator-framework-olm/pull/29)
* add crd and manifest generation [#27](https://github.com/openshift/operator-framework-olm/pull/27)
* staging: Update OLM modules after recent changes [#26](https://github.com/openshift/operator-framework-olm/pull/26)
* Release 4.8 [#25](https://github.com/openshift/operator-framework-olm/pull/25)
* scripts: Update the unit.sh helper script and populate the nested staging directory [#21](https://github.com/openshift/operator-framework-olm/pull/21)
* Add additional make targets and update Dockerfile(s) [#20](https://github.com/openshift/operator-framework-olm/pull/20)
* Dockerfile: Update the Golang operator-registry base image tag [#19](https://github.com/openshift/operator-framework-olm/pull/19)
* Update repository layout [#18](https://github.com/openshift/operator-framework-olm/pull/18)
* Update helper scripts and root Makefile [#12](https://github.com/openshift/operator-framework-olm/pull/12)
* Update the CI registry in the registry Dockerfile and copy OLM_VERSION to root directory [#10](https://github.com/openshift/operator-framework-olm/pull/10)
* *.Dockerfile: Manually bump the image tags to 4.8 [#6](https://github.com/openshift/operator-framework-olm/pull/6)
* staging: Sync the vendor dependencies [#9](https://github.com/openshift/operator-framework-olm/pull/9)
* Add root .gitignore [#7](https://github.com/openshift/operator-framework-olm/pull/7)
* Add Ankita's initial commit + remove nested OWNERS files [#5](https://github.com/openshift/operator-framework-olm/pull/5)
* Create OWNERS [#1](https://github.com/openshift/operator-framework-olm/pull/1)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ebe84506ec094fc9ef505be8f5185e97d0c763ab...b3aabf273e0ac0bd6e84d257332e2eac08f5e6cf)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3f3d7d1f9e914aff08d2ca2b5663358c8b611656)

* [Bug 1998938](https://bugzilla.redhat.com/show_bug.cgi?id=1998938): Use client-go's leader election implementation [#421](https://github.com/operator-framework/operator-marketplace/pull/421)
* [Bug 1990650](https://bugzilla.redhat.com/show_bug.cgi?id=1990650): Add priorityclass annotation to default catalogsources [#418](https://github.com/operator-framework/operator-marketplace/pull/418)
* [Bug 1936585](https://bugzilla.redhat.com/show_bug.cgi?id=1936585): Add CVO specific annotations [#404](https://github.com/operator-framework/operator-marketplace/pull/404)
* [Bug 1936585](https://bugzilla.redhat.com/show_bug.cgi?id=1936585): Configure alerts for Non-Ready Default CatalogSources [#402](https://github.com/operator-framework/operator-marketplace/pull/402)
* [Bug 1950417](https://bugzilla.redhat.com/show_bug.cgi?id=1950417): Migrate to Go modules, bump k8s dependencies to v0.20.6 and sdk to v0.19.x [#391](https://github.com/operator-framework/operator-marketplace/pull/391)
* Rename workload annotations [#393](https://github.com/operator-framework/operator-marketplace/pull/393)
* [Bug 1946790](https://bugzilla.redhat.com/show_bug.cgi?id=1946790): Update clusteroperator status conditions on startup [#395](https://github.com/operator-framework/operator-marketplace/pull/395)
* [Bug 1950417](https://bugzilla.redhat.com/show_bug.cgi?id=1950417): Add the ability to override the operator-sdk binary in e2e tests [#394](https://github.com/operator-framework/operator-marketplace/pull/394)
* Update Dockerfile.okd [#392](https://github.com/operator-framework/operator-marketplace/pull/392)
* [Bug 1949277](https://bugzilla.redhat.com/show_bug.cgi?id=1949277): Add operator manifest specific to ibm-cloud-managed profile [#389](https://github.com/operator-framework/operator-marketplace/pull/389)
* [Bug 1947794](https://bugzilla.redhat.com/show_bug.cgi?id=1947794): Update openshift rolebindings to v1 [#390](https://github.com/operator-framework/operator-marketplace/pull/390)
* update defaults to 4.8 [#387](https://github.com/operator-framework/operator-marketplace/pull/387)
* Add management workload annotations [#388](https://github.com/operator-framework/operator-marketplace/pull/388)
* Build with Go 1.16 [#386](https://github.com/operator-framework/operator-marketplace/pull/386)
* Add ROKS profile annotation [#385](https://github.com/operator-framework/operator-marketplace/pull/385)
* Annotate manifests for single-node-developer cluster profile [#369](https://github.com/operator-framework/operator-marketplace/pull/369)
* [Bug 1927393](https://bugzilla.redhat.com/show_bug.cgi?id=1927393): update defaults to 4.7 [#380](https://github.com/operator-framework/operator-marketplace/pull/380)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/23f38d3c0385e3fef87848c3378cf6c0a4cbe4d7...3f3d7d1f9e914aff08d2ca2b5663358c8b611656)


### [operator-registry](https://github.com/openshift/operator-framework-olm/tree/b3aabf273e0ac0bd6e84d257332e2eac08f5e6cf)

* [Bug 2030489](https://bugzilla.redhat.com/show_bug.cgi?id=2030489): Remove oudated subscription update logic to improve resolution delay [#222](https://github.com/openshift/operator-framework-olm/pull/222)
* [Bug 1996162](https://bugzilla.redhat.com/show_bug.cgi?id=1996162): Check for pruned bundles on add in replaces mode [#165](https://github.com/openshift/operator-framework-olm/pull/165)
* [Bug 1986476](https://bugzilla.redhat.com/show_bug.cgi?id=1986476): resolver: remove legacy support for fallback parsing of CSVs [#140](https://github.com/openshift/operator-framework-olm/pull/140)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): clarify maxOpenShiftVersion upgrade error message [#173](https://github.com/openshift/operator-framework-olm/pull/173)
* [Bug 1994038](https://bugzilla.redhat.com/show_bug.cgi?id=1994038): Update kubebuilder installation in the build root dockerfile [#174](https://github.com/openshift/operator-framework-olm/pull/174)
* [Bug 1994110](https://bugzilla.redhat.com/show_bug.cgi?id=1994110): fix(openshift): drop z from next calculated y-stream [#167](https://github.com/openshift/operator-framework-olm/pull/167)
* [Bug 1989779](https://bugzilla.redhat.com/show_bug.cgi?id=1989779): installplans: retry crd updates on conflicts [#156](https://github.com/openshift/operator-framework-olm/pull/156)
* [Bug 1989711](https://bugzilla.redhat.com/show_bug.cgi?id=1989711): fix(openshift): block upgrades on invalid max properties (#2302) [#155](https://github.com/openshift/operator-framework-olm/pull/155)
* [Bug 1990650](https://bugzilla.redhat.com/show_bug.cgi?id=1990650): Add PriorityClass setting to registry pods for default CatalogSource (#2304) [#158](https://github.com/openshift/operator-framework-olm/pull/158)
* [Bug 1986023](https://bugzilla.redhat.com/show_bug.cgi?id=1986023): Translate legacy "bundle dependencies" to properties. [#134](https://github.com/openshift/operator-framework-olm/pull/134)
* [Bug 1979525](https://bugzilla.redhat.com/show_bug.cgi?id=1979525): OLM blocks minor OpenShift upgrades when incompatible optional operators are installed [#120](https://github.com/openshift/operator-framework-olm/pull/120)
* [Bug 1982294](https://bugzilla.redhat.com/show_bug.cgi?id=1982294): Fix for resolution error on channels with deprecated inner entries. [#118](https://github.com/openshift/operator-framework-olm/pull/118)
* [Bug 1982250](https://bugzilla.redhat.com/show_bug.cgi?id=1982250): (fix)InstallPlan: Do not tranisition IP to failed on OG/SA failure [#119](https://github.com/openshift/operator-framework-olm/pull/119)
* [Bug 1982252](https://bugzilla.redhat.com/show_bug.cgi?id=1982252): remove cleanup from startup [#117](https://github.com/openshift/operator-framework-olm/pull/117)
* [Bug 1977479](https://bugzilla.redhat.com/show_bug.cgi?id=1977479): fix configmap registry server liveness probe timeouts [#108](https://github.com/openshift/operator-framework-olm/pull/108)
* [Bug 1975432](https://bugzilla.redhat.com/show_bug.cgi?id=1975432): Resolve InstallPlanStepAppliedWithWarnings alert after some time. [#102](https://github.com/openshift/operator-framework-olm/pull/102)
* [Bug 1927340](https://bugzilla.redhat.com/show_bug.cgi?id=1927340): Add OperatorCondition status sync and update operator upgradeable check [#92](https://github.com/openshift/operator-framework-olm/pull/92)
* [Bug 1950047](https://bugzilla.redhat.com/show_bug.cgi?id=1950047): Fix Template Annotations on Webhooks/API Service CSVs [#90](https://github.com/openshift/operator-framework-olm/pull/90)
* [Bug 1958296](https://bugzilla.redhat.com/show_bug.cgi?id=1958296): Surface API server warnings when applying plan steps. [#85](https://github.com/openshift/operator-framework-olm/pull/85)
* [Bug 1968700](https://bugzilla.redhat.com/show_bug.cgi?id=1968700): Fix nil pointer dereference while reporting bundle unpack status. [#88](https://github.com/openshift/operator-framework-olm/pull/88)
* [Bug 1965334](https://bugzilla.redhat.com/show_bug.cgi?id=1965334): drop xattrs during unpack [#86](https://github.com/openshift/operator-framework-olm/pull/86)
* [Bug 1881522](https://bugzilla.redhat.com/show_bug.cgi?id=1881522): packageserver CSV: add missing properties [#84](https://github.com/openshift/operator-framework-olm/pull/84)
* [Bug 1945548](https://bugzilla.redhat.com/show_bug.cgi?id=1945548): Filter secret names for registry pod's sa [#83](https://github.com/openshift/operator-framework-olm/pull/83)
* [Bug 1961472](https://bugzilla.redhat.com/show_bug.cgi?id=1961472): Explicitly set `readOnlyRootFilesystem: false` on created registry pods. [#82](https://github.com/openshift/operator-framework-olm/pull/82)
* [Bug 1959158](https://bugzilla.redhat.com/show_bug.cgi?id=1959158): Make ClusterOperator Available condition sticky. [#81](https://github.com/openshift/operator-framework-olm/pull/81)
* [Bug 1961320](https://bugzilla.redhat.com/show_bug.cgi?id=1961320): feat(metrics): Emit metrics for CatalogSource state [#80](https://github.com/openshift/operator-framework-olm/pull/80)
* [Bug 1961314](https://bugzilla.redhat.com/show_bug.cgi?id=1961314): fix race in test with mockRepo/mockBlobStore [#79](https://github.com/openshift/operator-framework-olm/pull/79)
* [Bug 1951387](https://bugzilla.redhat.com/show_bug.cgi?id=1951387): Add after deprecation [#67](https://github.com/openshift/operator-framework-olm/pull/67)
* [Bug 1947946](https://bugzilla.redhat.com/show_bug.cgi?id=1947946): Annotate CRDs that are installed alongside CSVs. [#75](https://github.com/openshift/operator-framework-olm/pull/75)
* [Bug 1958285](https://bugzilla.redhat.com/show_bug.cgi?id=1958285): Simplify deployment status check to reduce flapping. [#76](https://github.com/openshift/operator-framework-olm/pull/76)
* [Bug 1921264](https://bugzilla.redhat.com/show_bug.cgi?id=1921264): Fail InstallPlan on bundle unpack timeout [#78](https://github.com/openshift/operator-framework-olm/pull/78)
* [Bug 1953977](https://bugzilla.redhat.com/show_bug.cgi?id=1953977): Add tolerant delegating auth config for PackageServer [#77](https://github.com/openshift/operator-framework-olm/pull/77)
* [Bug 1957127](https://bugzilla.redhat.com/show_bug.cgi?id=1957127): pin apiserver for DelegatingAuthenticationOptions TokenReview request timeout [#74](https://github.com/openshift/operator-framework-olm/pull/74)
* [Bug 1955761](https://bugzilla.redhat.com/show_bug.cgi?id=1955761): Set reason/message for Available condition in packageserver co [#72](https://github.com/openshift/operator-framework-olm/pull/72)
* [Bug 1956611](https://bugzilla.redhat.com/show_bug.cgi?id=1956611): Fix CR validation bug on go 1.16 [#70](https://github.com/openshift/operator-framework-olm/pull/70)
* [Bug 1957386](https://bugzilla.redhat.com/show_bug.cgi?id=1957386): Move config serve and validate to opm alpha [#71](https://github.com/openshift/operator-framework-olm/pull/71)
* [Bug 1945443](https://bugzilla.redhat.com/show_bug.cgi?id=1945443): Use DeploymentAvailable instead of custom test for CSV status. [#68](https://github.com/openshift/operator-framework-olm/pull/68)
* Rename workload annotations [#61](https://github.com/openshift/operator-framework-olm/pull/61)
* [Bug 1950025](https://bugzilla.redhat.com/show_bug.cgi?id=1950025): Bump the k8s.io dependencies to v1.20.6 [#56](https://github.com/openshift/operator-framework-olm/pull/56)
* [Bug 1952238](https://bugzilla.redhat.com/show_bug.cgi?id=1952238): Report catalog pod termination logs to catalog operator on exit [#65](https://github.com/openshift/operator-framework-olm/pull/65)
* [Bug 1934071](https://bugzilla.redhat.com/show_bug.cgi?id=1934071): fix(catalog): Reduce namespace resync in resolution failure [#62](https://github.com/openshift/operator-framework-olm/pull/62)
* Add verify target to Makefile. [#64](https://github.com/openshift/operator-framework-olm/pull/64)
* [Bug 1951652](https://bugzilla.redhat.com/show_bug.cgi?id=1951652): Retry failures when pulling images [#63](https://github.com/openshift/operator-framework-olm/pull/63)
* [Bug 1942522](https://bugzilla.redhat.com/show_bug.cgi?id=1942522): Fix resolution error if inner entry doesn't provide a required API. [#60](https://github.com/openshift/operator-framework-olm/pull/60)
* Add management workload annotations [#42](https://github.com/openshift/operator-framework-olm/pull/42)
* [Bug 1938492](https://bugzilla.redhat.com/show_bug.cgi?id=1938492): Add resource requests for bundle unpacker [#55](https://github.com/openshift/operator-framework-olm/pull/55)
* [Bug 1949294](https://bugzilla.redhat.com/show_bug.cgi?id=1949294): fix environment variable merging from subscription.config [#53](https://github.com/openshift/operator-framework-olm/pull/53)
* [Bug 1948725](https://bugzilla.redhat.com/show_bug.cgi?id=1948725): Add IBM managed cloud profile annotations to manifests [#50](https://github.com/openshift/operator-framework-olm/pull/50)
* [Bug 1934080](https://bugzilla.redhat.com/show_bug.cgi?id=1934080): Preserve existing ServiceAccount owner references during installs. [#41](https://github.com/openshift/operator-framework-olm/pull/41)
* [Bug 1948771](https://bugzilla.redhat.com/show_bug.cgi?id=1948771): Revert "set packageserver replicas to 1 for single node" [#51](https://github.com/openshift/operator-framework-olm/pull/51)
* staging/operator-registry: Pull in all non-opm-add declarative config updates [#47](https://github.com/openshift/operator-framework-olm/pull/47)
* Staged api to 01e8bf8b (v0.8.0) and olm to c480add3. [#49](https://github.com/openshift/operator-framework-olm/pull/49)
* staging/operator-registry: Pull in declarative config base packages + server command [#45](https://github.com/openshift/operator-framework-olm/pull/45)
* Update the staging/operator-lifecycle-manager tree [#46](https://github.com/openshift/operator-framework-olm/pull/46)
* [Bug 1946838](https://bugzilla.redhat.com/show_bug.cgi?id=1946838): Do not adopt copied CSVs [#44](https://github.com/openshift/operator-framework-olm/pull/44)
* [Bug 1913525](https://bugzilla.redhat.com/show_bug.cgi?id=1913525): Bump the k8s dependencies to v0.20.4 [#40](https://github.com/openshift/operator-framework-olm/pull/40)
* Upstream sync for operator-lifecycle-manager [#38](https://github.com/openshift/operator-framework-olm/pull/38)
* staging/olm: Re-generate test fake package(s) [#39](https://github.com/openshift/operator-framework-olm/pull/39)
* staging/olm: Re-generate test fake package(s) [#39](https://github.com/openshift/operator-framework-olm/pull/39)
* Upstream sync for operator-registry [#36](https://github.com/openshift/operator-framework-olm/pull/36)
* [Bug 1945584](https://bugzilla.redhat.com/show_bug.cgi?id=1945584): Remove overrides for GOOS and GOARCH in cpb Makefile recipe. [#35](https://github.com/openshift/operator-framework-olm/pull/35)
* Makefile: Use the full git commit hash when building binaries [#33](https://github.com/openshift/operator-framework-olm/pull/33)
* Remove the OLM_VERSION file and update the base.Dockerfile to use Go 1.16 [#32](https://github.com/openshift/operator-framework-olm/pull/32)
* Updating operator-lifecycle-manager builder & base images to be consistent with ART [#31](https://github.com/openshift/operator-framework-olm/pull/31)
* Updating operator-registry builder & base images to be consistent with ART [#30](https://github.com/openshift/operator-framework-olm/pull/30)
* Dockerfile,Makefile: Add opm binary and cross compilation target(s) [#29](https://github.com/openshift/operator-framework-olm/pull/29)
* add crd and manifest generation [#27](https://github.com/openshift/operator-framework-olm/pull/27)
* staging: Update OLM modules after recent changes [#26](https://github.com/openshift/operator-framework-olm/pull/26)
* Release 4.8 [#25](https://github.com/openshift/operator-framework-olm/pull/25)
* scripts: Update the unit.sh helper script and populate the nested staging directory [#21](https://github.com/openshift/operator-framework-olm/pull/21)
* Add additional make targets and update Dockerfile(s) [#20](https://github.com/openshift/operator-framework-olm/pull/20)
* Dockerfile: Update the Golang operator-registry base image tag [#19](https://github.com/openshift/operator-framework-olm/pull/19)
* Update repository layout [#18](https://github.com/openshift/operator-framework-olm/pull/18)
* Update helper scripts and root Makefile [#12](https://github.com/openshift/operator-framework-olm/pull/12)
* Update the CI registry in the registry Dockerfile and copy OLM_VERSION to root directory [#10](https://github.com/openshift/operator-framework-olm/pull/10)
* *.Dockerfile: Manually bump the image tags to 4.8 [#6](https://github.com/openshift/operator-framework-olm/pull/6)
* staging: Sync the vendor dependencies [#9](https://github.com/openshift/operator-framework-olm/pull/9)
* Add root .gitignore [#7](https://github.com/openshift/operator-framework-olm/pull/7)
* Add Ankita's initial commit + remove nested OWNERS files [#5](https://github.com/openshift/operator-framework-olm/pull/5)
* Create OWNERS [#1](https://github.com/openshift/operator-framework-olm/pull/1)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/06e950de5ebca66e493f6cd2414e73c8978090d3...b3aabf273e0ac0bd6e84d257332e2eac08f5e6cf)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/c57863f25ec68b34f3928e02b9b750cfcef3c99c)

* [Bug 2013945](https://bugzilla.redhat.com/show_bug.cgi?id=2013945): pvc stuck on pending status when using preallocated storage domain [#89](https://github.com/openshift/ovirt-csi-driver/pull/89)
* Updating ose-ovirt-csi-driver builder & base images to be consistent with ART [#75](https://github.com/openshift/ovirt-csi-driver/pull/75)
* Updating ose-ovirt-csi-driver builder & base images to be consistent with ART [#70](https://github.com/openshift/ovirt-csi-driver/pull/70)
* Update OWNERS and Registry ci [#73](https://github.com/openshift/ovirt-csi-driver/pull/73)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/72545e6381b3625bcb37e37c4c713862d04cb145...c57863f25ec68b34f3928e02b9b750cfcef3c99c)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/3bab77baee7a006b7a96bea737828979d77cda9d)

* [Bug 2062745](https://bugzilla.redhat.com/show_bug.cgi?id=2062745): Increase timeouts for CSI driver [#90](https://github.com/openshift/ovirt-csi-driver-operator/pull/90)
* [Bug 1940876](https://bugzilla.redhat.com/show_bug.cgi?id=1940876): add resources to csi-provisioner [#57](https://github.com/openshift/ovirt-csi-driver-operator/pull/57)
* [Bug 1947774](https://bugzilla.redhat.com/show_bug.cgi?id=1947774): fix imagePullPolicy to ifNotPresent [#54](https://github.com/openshift/ovirt-csi-driver-operator/pull/54)
* oVirt: Add metrics scraping [#53](https://github.com/openshift/ovirt-csi-driver-operator/pull/53)
* Updating ose-cluster-ovirt-csi-operator builder & base images to be consistent with ART [#52](https://github.com/openshift/ovirt-csi-driver-operator/pull/52)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Fix maxUnavailable value to 10% [#51](https://github.com/openshift/ovirt-csi-driver-operator/pull/51)
* [Bug 1933184](https://bugzilla.redhat.com/show_bug.cgi?id=1933184): Add maxUnavailable to DaemonSets [#50](https://github.com/openshift/ovirt-csi-driver-operator/pull/50)
* Run config informers when starting the operator [#48](https://github.com/openshift/ovirt-csi-driver-operator/pull/48)
* Cleanup: Remove serviceName from controller manifest [#46](https://github.com/openshift/ovirt-csi-driver-operator/pull/46)
* Updating ose-cluster-ovirt-csi-operator builder & base images to be consistent with ART [#45](https://github.com/openshift/ovirt-csi-driver-operator/pull/45)
* update manifests and README [#42](https://github.com/openshift/ovirt-csi-driver-operator/pull/42)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/5e51508c107a161416c0ffffdd17163f14136478...3bab77baee7a006b7a96bea737828979d77cda9d)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/368223b8507596055a33b731a7942aab82f59ce0)

* [Bug 2046356](https://bugzilla.redhat.com/show_bug.cgi?id=2046356): detach non-bootable disks before removing the VM [#127](https://github.com/openshift/cluster-api-provider-ovirt/pull/127)
* [Bug 1989676](https://bugzilla.redhat.com/show_bug.cgi?id=1989676): correct IPAddress detection for OVNKubernetes [#116](https://github.com/openshift/cluster-api-provider-ovirt/pull/116)
* [Bug 1987182](https://bugzilla.redhat.com/show_bug.cgi?id=1987182): allow auto pinning new names [#115](https://github.com/openshift/cluster-api-provider-ovirt/pull/115)
* [Bug 1948719](https://bugzilla.redhat.com/show_bug.cgi?id=1948719): update controller-runtime dependency [#106](https://github.com/openshift/cluster-api-provider-ovirt/pull/106)
* [Bug 1954177](https://bugzilla.redhat.com/show_bug.cgi?id=1954177): Update mao dependency for webhook v1 changes [#103](https://github.com/openshift/cluster-api-provider-ovirt/pull/103)
* move to go 1.16 [#104](https://github.com/openshift/cluster-api-provider-ovirt/pull/104)
* Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART [#101](https://github.com/openshift/cluster-api-provider-ovirt/pull/101)
* [Bug 1948963](https://bugzilla.redhat.com/show_bug.cgi?id=1948963): add support for hugepages [#102](https://github.com/openshift/cluster-api-provider-ovirt/pull/102)
* [Bug 1941334](https://bugzilla.redhat.com/show_bug.cgi?id=1941334): Add support for auto pinning policy [#100](https://github.com/openshift/cluster-api-provider-ovirt/pull/100)
* [Bug 1917485](https://bugzilla.redhat.com/show_bug.cgi?id=1917485): Add validations to machine object [#96](https://github.com/openshift/cluster-api-provider-ovirt/pull/96)
* [Bug 1937694](https://bugzilla.redhat.com/show_bug.cgi?id=1937694): providerIDController ignore nodes that have no machine [#95](https://github.com/openshift/cluster-api-provider-ovirt/pull/95)
* [Bug 1931215](https://bugzilla.redhat.com/show_bug.cgi?id=1931215): Add support for affinity group [#80](https://github.com/openshift/cluster-api-provider-ovirt/pull/80)
* [Bug 1920905](https://bugzilla.redhat.com/show_bug.cgi?id=1920905): extract node machine ipaddress from the engine instead using DNS . [#85](https://github.com/openshift/cluster-api-provider-ovirt/pull/85)
* credentials: handle error in the strconv.Parsebool [#94](https://github.com/openshift/cluster-api-provider-ovirt/pull/94)
* add custom capo readme [#88](https://github.com/openshift/cluster-api-provider-ovirt/pull/88)
* Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART [#91](https://github.com/openshift/cluster-api-provider-ovirt/pull/91)
* [Bug 1926346](https://bugzilla.redhat.com/show_bug.cgi?id=1926346): move to go 1.15 and registry.ci.openshift.org [#87](https://github.com/openshift/cluster-api-provider-ovirt/pull/87)
* Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART [#83](https://github.com/openshift/cluster-api-provider-ovirt/pull/83)
* [Bug 1926278](https://bugzilla.redhat.com/show_bug.cgi?id=1926278): Bump K8s dependencies to 1.20 [#86](https://github.com/openshift/cluster-api-provider-ovirt/pull/86)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/01b9bf8368a3da974bf1c9114c618a548d346acd...368223b8507596055a33b731a7942aab82f59ce0)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/266113868296fd11aefac3aabe2a72c76e380e62)

* [Bug 2062842](https://bugzilla.redhat.com/show_bug.cgi?id=2062842): [4.8z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs [#1009](https://github.com/openshift/ovn-kubernetes/pull/1009)
* [Bug 2065303](https://bugzilla.redhat.com/show_bug.cgi?id=2065303): [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set [#998](https://github.com/openshift/ovn-kubernetes/pull/998)
* [Bug 2070521](https://bugzilla.redhat.com/show_bug.cgi?id=2070521): egressgw: fix deadlock due to behavior of RWLock [#1018](https://github.com/openshift/ovn-kubernetes/pull/1018)
* [Bug 2063836](https://bugzilla.redhat.com/show_bug.cgi?id=2063836): backport 2052975 to 4.8 [#997](https://github.com/openshift/ovn-kubernetes/pull/997)
* [Bug 2068509](https://bugzilla.redhat.com/show_bug.cgi?id=2068509): EgressGW: only return unique elements from getRouteInfosForGateway() [#1011](https://github.com/openshift/ovn-kubernetes/pull/1011)
* [Bug 2055379](https://bugzilla.redhat.com/show_bug.cgi?id=2055379): [release-4.8] fixing network policy [#4](https://github.com/openshift/ovn-kubernetes/pull/4)
* [Bug 2065311](https://bugzilla.redhat.com/show_bug.cgi?id=2065311): [release-4.8] Network Policy fixes [#999](https://github.com/openshift/ovn-kubernetes/pull/999)
* [Bug 2057557](https://bugzilla.redhat.com/show_bug.cgi?id=2057557): Create iptables NAT rules also for loadbalancer services [#967](https://github.com/openshift/ovn-kubernetes/pull/967)
* [Bug 2058679](https://bugzilla.redhat.com/show_bug.cgi?id=2058679): Bumps ovn2.13-20.12.0-195.el8fdp [#979](https://github.com/openshift/ovn-kubernetes/pull/979)
* [release 4.8] Update project owners [#992](https://github.com/openshift/ovn-kubernetes/pull/992)
* [Bug 2057931](https://bugzilla.redhat.com/show_bug.cgi?id=2057931): Fix podHandlerCache key [#969](https://github.com/openshift/ovn-kubernetes/pull/969)
* [Bug 2057152](https://bugzilla.redhat.com/show_bug.cgi?id=2057152): Fix egress IP allocator sync [#965](https://github.com/openshift/ovn-kubernetes/pull/965)
* [Bug 2053611](https://bugzilla.redhat.com/show_bug.cgi?id=2053611): Lock the reassignment procedure during node deletion to avoid races [#970](https://github.com/openshift/ovn-kubernetes/pull/970)
* [Bug 2054225](https://bugzilla.redhat.com/show_bug.cgi?id=2054225): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#957](https://github.com/openshift/ovn-kubernetes/pull/957)
* [Bug 2056975](https://bugzilla.redhat.com/show_bug.cgi?id=2056975): Don't return err when annotation cannot be unmarshalled [#963](https://github.com/openshift/ovn-kubernetes/pull/963)
* [Bug 2052966](https://bugzilla.redhat.com/show_bug.cgi?id=2052966): [release-4.8] bump ovn to 20.12.0-193 [#949](https://github.com/openshift/ovn-kubernetes/pull/949)
* [Bug 2043757](https://bugzilla.redhat.com/show_bug.cgi?id=2043757): Fix node connectivity to service backed by egress IP pods [#922](https://github.com/openshift/ovn-kubernetes/pull/922)
* [Bug 2042516](https://bugzilla.redhat.com/show_bug.cgi?id=2042516): Fixes for shared to local gateway migration [#916](https://github.com/openshift/ovn-kubernetes/pull/916)
* [Bug 2037884](https://bugzilla.redhat.com/show_bug.cgi?id=2037884): [4.8-backport] Fix nepol statefulset 4.8 [#894](https://github.com/openshift/ovn-kubernetes/pull/894)
* [Bug 2041767](https://bugzilla.redhat.com/show_bug.cgi?id=2041767): Fix pod handlers and pod IP parsing for egress IP [#912](https://github.com/openshift/ovn-kubernetes/pull/912)
* [Bug 2039279](https://bugzilla.redhat.com/show_bug.cgi?id=2039279): filter out KubeAPIAuth when logging CNI requests [#897](https://github.com/openshift/ovn-kubernetes/pull/897)
* [Bug 2021221](https://bugzilla.redhat.com/show_bug.cgi?id=2021221): Add ovn-controller logical flow cache options [#890](https://github.com/openshift/ovn-kubernetes/pull/890)
* [Bug 2030465](https://bugzilla.redhat.com/show_bug.cgi?id=2030465): Make config parsing more resilient for unknown fields [#868](https://github.com/openshift/ovn-kubernetes/pull/868)
* [Bug 2027873](https://bugzilla.redhat.com/show_bug.cgi?id=2027873): [4.8z] Fixes race between node handler and pod sync [#858](https://github.com/openshift/ovn-kubernetes/pull/858)
* [Bug 2027487](https://bugzilla.redhat.com/show_bug.cgi?id=2027487): [4.8z] addressManager should not call sync() from ErrorCallback [#853](https://github.com/openshift/ovn-kubernetes/pull/853)
* [Bug 2022043](https://bugzilla.redhat.com/show_bug.cgi?id=2022043): [4.8z] Avoid stale annotations by re-subscribing to netlink [#829](https://github.com/openshift/ovn-kubernetes/pull/829)
* [Bug 2014332](https://bugzilla.redhat.com/show_bug.cgi?id=2014332): [4.8z] Scale fixes for pods/exgws [#798](https://github.com/openshift/ovn-kubernetes/pull/798)
* [Bug 2011391](https://bugzilla.redhat.com/show_bug.cgi?id=2011391): [4.8] bump OVN to 20.12.0-183.el8fdp [#783](https://github.com/openshift/ovn-kubernetes/pull/783)
* [Bug 1986708](https://bugzilla.redhat.com/show_bug.cgi?id=1986708): Add routes for pod: fail only after checking all the gw addresses / ips [#774](https://github.com/openshift/ovn-kubernetes/pull/774)
* [Bug 2005480](https://bugzilla.redhat.com/show_bug.cgi?id=2005480): [4.8z] Remove waiting for namespace and namespace lock contention [#760](https://github.com/openshift/ovn-kubernetes/pull/760)
* [release 4.8] Bug 1994624: Infer subnet for node /128 IPv6 addresses [#661](https://github.com/openshift/ovn-kubernetes/pull/661)
* [Bug 2004336](https://bugzilla.redhat.com/show_bug.cgi?id=2004336): Ensure host interfaces are deleted by CNI [#745](https://github.com/openshift/ovn-kubernetes/pull/745)
* [Bug 2005464](https://bugzilla.redhat.com/show_bug.cgi?id=2005464): [4.8z] Fixes skipping pods accidentally in retry [#758](https://github.com/openshift/ovn-kubernetes/pull/758)
* [Bug 2005357](https://bugzilla.redhat.com/show_bug.cgi?id=2005357): [4.8z] Fixes misuse of pod annotations during update event [#753](https://github.com/openshift/ovn-kubernetes/pull/753)
* [Bug 1996739](https://bugzilla.redhat.com/show_bug.cgi?id=1996739): Fix ensurePod to call addPodExternalGW only for annotation updates [#752](https://github.com/openshift/ovn-kubernetes/pull/752)
* [Bug 2004488](https://bugzilla.redhat.com/show_bug.cgi?id=2004488): panic after EgressFirewall deletion and DNS record expiration [#749](https://github.com/openshift/ovn-kubernetes/pull/749)
* [Bug 2004269](https://bugzilla.redhat.com/show_bug.cgi?id=2004269): Sync ECMP routes on startup and fixes stale ECMP routes [#743](https://github.com/openshift/ovn-kubernetes/pull/743)
* [Bug 1999638](https://bugzilla.redhat.com/show_bug.cgi?id=1999638): Fix duplicate incrementing of subnet allocation metric [#700](https://github.com/openshift/ovn-kubernetes/pull/700)
* [Bug 1996729](https://bugzilla.redhat.com/show_bug.cgi?id=1996729): NetworkPolicy: bulk-add pods to new policies (or on restart) [#678](https://github.com/openshift/ovn-kubernetes/pull/678)
* [Bug 2000214](https://bugzilla.redhat.com/show_bug.cgi?id=2000214): Fix GetPortAddresses for HBO [#711](https://github.com/openshift/ovn-kubernetes/pull/711)
* [Bug 2001641](https://bugzilla.redhat.com/show_bug.cgi?id=2001641): egressfirewall not set after upgrade [#722](https://github.com/openshift/ovn-kubernetes/pull/722)
* [Bug 1996201](https://bugzilla.redhat.com/show_bug.cgi?id=1996201): Fixes cases of timed out while waiting for OVS port binding [#686](https://github.com/openshift/ovn-kubernetes/pull/686)
* [Bug 2001542](https://bugzilla.redhat.com/show_bug.cgi?id=2001542): fix reserve joinSwitch LRP IPs [#720](https://github.com/openshift/ovn-kubernetes/pull/720)
* [Bug 2001363](https://bugzilla.redhat.com/show_bug.cgi?id=2001363): [4.8z] Ensure client handling of canceled/dropped OVSDB monitor [#718](https://github.com/openshift/ovn-kubernetes/pull/718)
* [Bug 1999895](https://bugzilla.redhat.com/show_bug.cgi?id=1999895): Revert "[release-4.8] fix reserve joinSwitch LRP IPs" [#706](https://github.com/openshift/ovn-kubernetes/pull/706)
* [Bug 1996965](https://bugzilla.redhat.com/show_bug.cgi?id=1996965): Add quotes around nexthop and dst-ip fields [#680](https://github.com/openshift/ovn-kubernetes/pull/680)
* [Bug 1994937](https://bugzilla.redhat.com/show_bug.cgi?id=1994937): Fix: sync egress IP for missed events on start-up [#665](https://github.com/openshift/ovn-kubernetes/pull/665)
* [Bug 1997049](https://bugzilla.redhat.com/show_bug.cgi?id=1997049): fix reserve joinSwitch LRP IPs [#681](https://github.com/openshift/ovn-kubernetes/pull/681)
* [Bug 1985957](https://bugzilla.redhat.com/show_bug.cgi?id=1985957): Backport ovnkube-trace requires ip package to be installed to 4.8 [#656](https://github.com/openshift/ovn-kubernetes/pull/656)
* [Bug 1988487](https://bugzilla.redhat.com/show_bug.cgi?id=1988487): Fix lgw eip 4.8 [#636](https://github.com/openshift/ovn-kubernetes/pull/636)
* [Bug 1976241](https://bugzilla.redhat.com/show_bug.cgi?id=1976241): Update existing policy ACLs on start [#635](https://github.com/openshift/ovn-kubernetes/pull/635)
* Updating ose-ovn-kubernetes builder & base images to be consistent with ART [#473](https://github.com/openshift/ovn-kubernetes/pull/473)
* [Bug 1985514](https://bugzilla.redhat.com/show_bug.cgi?id=1985514): Add v6 management interface address for host network policy [#624](https://github.com/openshift/ovn-kubernetes/pull/624)
* [Bug 1986573](https://bugzilla.redhat.com/show_bug.cgi?id=1986573): Declare a maximum line length for batching [#631](https://github.com/openshift/ovn-kubernetes/pull/631)
* [Bug 1976644](https://bugzilla.redhat.com/show_bug.cgi?id=1976644): Bump OVN to 20.12.0-140.el8fdp [#591](https://github.com/openshift/ovn-kubernetes/pull/591)
* [Bug 1961506](https://bugzilla.redhat.com/show_bug.cgi?id=1961506): Detect if OVS supports check pkt length [#584](https://github.com/openshift/ovn-kubernetes/pull/584)
* [Bug 1973672](https://bugzilla.redhat.com/show_bug.cgi?id=1973672): Fix compatibility of multiple ipBlock NetworkPolicies [#581](https://github.com/openshift/ovn-kubernetes/pull/581)
* [Bug 1956955](https://bugzilla.redhat.com/show_bug.cgi?id=1956955): Batching: Fixes finding maximum bash arguments [#567](https://github.com/openshift/ovn-kubernetes/pull/567)
* [Bug 1970068](https://bugzilla.redhat.com/show_bug.cgi?id=1970068): Fixes getNodeIPs assuming dualstack [#568](https://github.com/openshift/ovn-kubernetes/pull/568)
* [Bug 1958972](https://bugzilla.redhat.com/show_bug.cgi?id=1958972): Fixes adding nodes to use new Services controller [#554](https://github.com/openshift/ovn-kubernetes/pull/554)
* [Bug 1927047](https://bugzilla.redhat.com/show_bug.cgi?id=1927047): Handling packet sizes greater than pod MTU [#559](https://github.com/openshift/ovn-kubernetes/pull/559)
* [Bug 1955783](https://bugzilla.redhat.com/show_bug.cgi?id=1955783): Add Namespace and rule Number to ACL name [#532](https://github.com/openshift/ovn-kubernetes/pull/532)
* [Bug 1961852](https://bugzilla.redhat.com/show_bug.cgi?id=1961852): policy: reduce lock contention on policy object [#560](https://github.com/openshift/ovn-kubernetes/pull/560)
* [Bug 1960757](https://bugzilla.redhat.com/show_bug.cgi?id=1960757): CARRY: block MCS for shared-gateway mode. [#542](https://github.com/openshift/ovn-kubernetes/pull/542)
* [Bug 1954773](https://bugzilla.redhat.com/show_bug.cgi?id=1954773): adding cli flag for egressfirewall and removing CRD watcher [#541](https://github.com/openshift/ovn-kubernetes/pull/541)
* [Bug 1962392](https://bugzilla.redhat.com/show_bug.cgi?id=1962392): CARRY: fix missed learn for hybrid exgw [#551](https://github.com/openshift/ovn-kubernetes/pull/551)
* [Bug 1956955](https://bugzilla.redhat.com/show_bug.cgi?id=1956955): Reduces number of OVN operations in services #2201 [#545](https://github.com/openshift/ovn-kubernetes/pull/545)
* [Bug 1958958](https://bugzilla.redhat.com/show_bug.cgi?id=1958958): NewAddressSet: return nil in case of error [#540](https://github.com/openshift/ovn-kubernetes/pull/540)
* [Bug 1952819](https://bugzilla.redhat.com/show_bug.cgi?id=1952819): Bump the go-ovn version to f0122836cc35fcadf72de8698b26157c5a42a9f8 [#537](https://github.com/openshift/ovn-kubernetes/pull/537)
* [Bug 1953680](https://bugzilla.redhat.com/show_bug.cgi?id=1953680): policy: handle NetworkPolicies single "from" multiple "ipBlock" [#530](https://github.com/openshift/ovn-kubernetes/pull/530)
* [Bug 1952819](https://bugzilla.redhat.com/show_bug.cgi?id=1952819): handle nbdb deletes on reconnect / delete stale ports using goovn client [#528](https://github.com/openshift/ovn-kubernetes/pull/528)
* [Bug 1957039](https://bugzilla.redhat.com/show_bug.cgi?id=1957039): Fix pod -> svc -> host LGW flow [#531](https://github.com/openshift/ovn-kubernetes/pull/531)
* [Bug 1959058](https://bugzilla.redhat.com/show_bug.cgi?id=1959058): policy: release LSP lock before adding pods to default-deny portgroups. [#529](https://github.com/openshift/ovn-kubernetes/pull/529)
* [Bug 1949582](https://bugzilla.redhat.com/show_bug.cgi?id=1949582): CNI cmdCheck: treat ingress_policing_rate=0 as not found [#522](https://github.com/openshift/ovn-kubernetes/pull/522)
* [Bug 1950471](https://bugzilla.redhat.com/show_bug.cgi?id=1950471): Purge only the lprs with nexthops of the same family of new nexthop [#516](https://github.com/openshift/ovn-kubernetes/pull/516)
* [Bug 1952262](https://bugzilla.redhat.com/show_bug.cgi?id=1952262): Revert "removing the hybrid overlay externalGW code" [#511](https://github.com/openshift/ovn-kubernetes/pull/511)
* [Bug 1953169](https://bugzilla.redhat.com/show_bug.cgi?id=1953169): endpoint slice controller doesn't handle services target port correctly [#515](https://github.com/openshift/ovn-kubernetes/pull/515)
* [Bug 1944121](https://bugzilla.redhat.com/show_bug.cgi?id=1944121): master: Delay deleting Namespace's address set for 20 seconds [#499](https://github.com/openshift/ovn-kubernetes/pull/499)
* [Bug 1947917](https://bugzilla.redhat.com/show_bug.cgi?id=1947917): fix deadlock in EgressFirewall DNS code [#502](https://github.com/openshift/ovn-kubernetes/pull/502)
* [Bug 1950159](https://bugzilla.redhat.com/show_bug.cgi?id=1950159): Fix linter errors in OCP Hacks [#495](https://github.com/openshift/ovn-kubernetes/pull/495)
* [Bug 1947712](https://bugzilla.redhat.com/show_bug.cgi?id=1947712): pods: bind pod logical switch ports to the node's chassis with requested-chassis [#500](https://github.com/openshift/ovn-kubernetes/pull/500)
* [Bug 1945948](https://bugzilla.redhat.com/show_bug.cgi?id=1945948): Fixes local node IP reachability in shared gateway mode [#498](https://github.com/openshift/ovn-kubernetes/pull/498)
* [Bug 1930248](https://bugzilla.redhat.com/show_bug.cgi?id=1930248): Sync management port for an existing node [#497](https://github.com/openshift/ovn-kubernetes/pull/497)
* Sync management port correctly if it changes for an existing node [#2164](https://github.com/openshift/ovn-kubernetes/pull/2164)
* 4-9-21 merge [#496](https://github.com/openshift/ovn-kubernetes/pull/496)
* Set the default value of host network namespace to empty string [#2165](https://github.com/openshift/ovn-kubernetes/pull/2165)
* netpol: Changes to support network policy for host network traffic [#2093](https://github.com/openshift/ovn-kubernetes/pull/2093)
* Wait one second between checking the last event and generating a new one [#2161](https://github.com/openshift/ovn-kubernetes/pull/2161)
* ovnkube-trace support for IPv6 [#2111](https://github.com/openshift/ovn-kubernetes/pull/2111)
* Bypass conntrack for Geneve pod to pod traffic [#2160](https://github.com/openshift/ovn-kubernetes/pull/2160)
* Smart-NIC Support Phase1 [#2005](https://github.com/openshift/ovn-kubernetes/pull/2005)
* Bugfix/sync management port v2 [#2115](https://github.com/openshift/ovn-kubernetes/pull/2115)
* Unidling: make the wait shorter / check for longer time [#2155](https://github.com/openshift/ovn-kubernetes/pull/2155)
* Fix: egress IP route health check detection state on restart [#2153](https://github.com/openshift/ovn-kubernetes/pull/2153)
* Dockerfile: bump OVS to openvswitch2.15-2.15.0-9 [#492](https://github.com/openshift/ovn-kubernetes/pull/492)
* [Bug 1944180](https://bugzilla.redhat.com/show_bug.cgi?id=1944180): 3-30-21 merge [#480](https://github.com/openshift/ovn-kubernetes/pull/480)
* Ensure no SNAT on GR for DisableSNATMultipleGws [#2146](https://github.com/openshift/ovn-kubernetes/pull/2146)
* [Bug 1940233](https://bugzilla.redhat.com/show_bug.cgi?id=1940233): setting max offset for IPv6 CIR to prevent overflow [#2134](https://github.com/openshift/ovn-kubernetes/pull/2134)
* Use go-ovn bindings for port group commands [#2030](https://github.com/openshift/ovn-kubernetes/pull/2030)
* Makefile: Allow CTRL+C when running in container [#2135](https://github.com/openshift/ovn-kubernetes/pull/2135)
* services: don't assume Status.LoadBalancer.Ingress IPs are populated [#2145](https://github.com/openshift/ovn-kubernetes/pull/2145)
* Adding docutext and fixing usage of target [#2127](https://github.com/openshift/ovn-kubernetes/pull/2127)
* Adding openvswitch-test package so that ovs-tcpdump is available in all pods [#2142](https://github.com/openshift/ovn-kubernetes/pull/2142)
* Replace ACL reject rules with a reject=true loadbalancer for services without endpoints [#2124](https://github.com/openshift/ovn-kubernetes/pull/2124)
* master: cancel leader election on exit [#2140](https://github.com/openshift/ovn-kubernetes/pull/2140)
* Improvements to unit test scripts [#2137](https://github.com/openshift/ovn-kubernetes/pull/2137)
* FakeExec: don't panic when a cmd does not match [#2126](https://github.com/openshift/ovn-kubernetes/pull/2126)
* don't exit on config changes [#2133](https://github.com/openshift/ovn-kubernetes/pull/2133)
* Dockerfile: bump OVS to openvswitch2.15-2.15.0-2 [#461](https://github.com/openshift/ovn-kubernetes/pull/461)
* Add wait to iptables commands for OCP Hacks [#476](https://github.com/openshift/ovn-kubernetes/pull/476)
* 3-24-21 merge [#475](https://github.com/openshift/ovn-kubernetes/pull/475)
* cni: Use new port-up OVN notification mechanism (when possible). [#1996](https://github.com/openshift/ovn-kubernetes/pull/1996)
* Support go-ovn Logical Switch functions in mock infrastructure [#2070](https://github.com/openshift/ovn-kubernetes/pull/2070)
* Add NetFlow/SFlow/IPFIX support [#2082](https://github.com/openshift/ovn-kubernetes/pull/2082)
* kind: script restructuring [#2084](https://github.com/openshift/ovn-kubernetes/pull/2084)
* 3-22-21 merge [#472](https://github.com/openshift/ovn-kubernetes/pull/472)
* Re-work egress firewall to use ACLs + miscellaneous fixes [#1971](https://github.com/openshift/ovn-kubernetes/pull/1971)
* Change naming conventions for network policy ACL's [#2064](https://github.com/openshift/ovn-kubernetes/pull/2064)
* unidling controller must process cache events [#2122](https://github.com/openshift/ovn-kubernetes/pull/2122)
* modify CGO build flag for ovn-k8s-cni-overlay binary [#2112](https://github.com/openshift/ovn-kubernetes/pull/2112)
* More hybrid overlay fixes [#2121](https://github.com/openshift/ovn-kubernetes/pull/2121)
* Fixes Hybrid Overlay for services with hybrid endpoints [#2100](https://github.com/openshift/ovn-kubernetes/pull/2100)
* Fix dead link for k8s test binaries [#2113](https://github.com/openshift/ovn-kubernetes/pull/2113)
* Properly log when hybrid overlay errors out [#2110](https://github.com/openshift/ovn-kubernetes/pull/2110)
* Fixes adding duplicate ECMP routes [#2106](https://github.com/openshift/ovn-kubernetes/pull/2106)
* External gateway namespace tests: Cover BFD [#2091](https://github.com/openshift/ovn-kubernetes/pull/2091)
* BZ 1927845: Bump OVS version to 2.13.0-79.5.el8fdp [#434](https://github.com/openshift/ovn-kubernetes/pull/434)
* Remove valadas from owners [#469](https://github.com/openshift/ovn-kubernetes/pull/469)
* Bump OVN to ovn2.13-20.12.0-25.el8fdp [#470](https://github.com/openshift/ovn-kubernetes/pull/470)
* [Bug 1934643](https://bugzilla.redhat.com/show_bug.cgi?id=1934643): Downstream merge 3-10-21 [#458](https://github.com/openshift/ovn-kubernetes/pull/458)
* External gateway pod tests: Cover BFD [#2090](https://github.com/openshift/ovn-kubernetes/pull/2090)
* Update Network Policy Documentation [#1866](https://github.com/openshift/ovn-kubernetes/pull/1866)
* E2E: Expand the coverage of the gateway pod test [#2029](https://github.com/openshift/ovn-kubernetes/pull/2029)
* Enable support for BFD on external gateway routes [#2077](https://github.com/openshift/ovn-kubernetes/pull/2077)
* Downstream merge 3-4-21 [#440](https://github.com/openshift/ovn-kubernetes/pull/440)
* Fixes incorrect services in KIND CI and DGP MAC [#2092](https://github.com/openshift/ovn-kubernetes/pull/2092)
* RetryOnConflict() is meant for resource update and expects unchanged err [#2087](https://github.com/openshift/ovn-kubernetes/pull/2087)
* Fix multicast querier. [#2088](https://github.com/openshift/ovn-kubernetes/pull/2088)
* enable new endpoint slice controller (and fix service idling) [#2001](https://github.com/openshift/ovn-kubernetes/pull/2001)
* Refactor iptables rules for NodePort and ExternalIP services [#2002](https://github.com/openshift/ovn-kubernetes/pull/2002)
* Resync node management port on subnet change [#2083](https://github.com/openshift/ovn-kubernetes/pull/2083)
* don't compare endpoints on nodes [#2081](https://github.com/openshift/ovn-kubernetes/pull/2081)
* changed EventuallyExpectEmptyAddressSet() to do what it says [#2069](https://github.com/openshift/ovn-kubernetes/pull/2069)
* Remove focusing on table [#2080](https://github.com/openshift/ovn-kubernetes/pull/2080)
* master: enable logical datapath groups for OVN >= 20.12 [#2074](https://github.com/openshift/ovn-kubernetes/pull/2074)
* Bump OVN to latest from advisory [#2078](https://github.com/openshift/ovn-kubernetes/pull/2078)
* Fix ACL syntax for dual-stack [#2076](https://github.com/openshift/ovn-kubernetes/pull/2076)
* need changes to adapt to the new cluster/status output [#2073](https://github.com/openshift/ovn-kubernetes/pull/2073)
* E2E tests: extend the gw test to cover ipv6 / multiple protocols [#2014](https://github.com/openshift/ovn-kubernetes/pull/2014)
* OVN convert from single to dualstack [#2013](https://github.com/openshift/ovn-kubernetes/pull/2013)
* avoid updating address sets if the pod is not scheduled to a node yet [#2052](https://github.com/openshift/ovn-kubernetes/pull/2052)
* Change assignmentRetry for egress IP to a proper map + mutex [#2056](https://github.com/openshift/ovn-kubernetes/pull/2056)
* Temporarily downgrade OVN [#2065](https://github.com/openshift/ovn-kubernetes/pull/2065)
* Bump OVN to ovn2.13-20.12.0-24.el8fdp [#447](https://github.com/openshift/ovn-kubernetes/pull/447)
* Downstream merge 2-22-21 [#438](https://github.com/openshift/ovn-kubernetes/pull/438)
* Fix typo: delete -> update [#2063](https://github.com/openshift/ovn-kubernetes/pull/2063)
* use '-mod vendor' in all of the `go test` invocations [#2059](https://github.com/openshift/ovn-kubernetes/pull/2059)
* util goovn TLS connection need to use the latest rotated certificates [#2054](https://github.com/openshift/ovn-kubernetes/pull/2054)
* E2E tests: test ingress for externalip services [#1991](https://github.com/openshift/ovn-kubernetes/pull/1991)
* De-flake unit test [#2053](https://github.com/openshift/ovn-kubernetes/pull/2053)
* detect if the cluster has endpoint slices [#2049](https://github.com/openshift/ovn-kubernetes/pull/2049)
* remove ovnkube workaround for single-stack ipv4 [#2043](https://github.com/openshift/ovn-kubernetes/pull/2043)
* Enable DB memory trimming on compaction [#1920](https://github.com/openshift/ovn-kubernetes/pull/1920)
* E2E: Add a nodeport connectivity test [#1985](https://github.com/openshift/ovn-kubernetes/pull/1985)
* EgressIP: cleanup stale e2e test data + wait for setup [#2037](https://github.com/openshift/ovn-kubernetes/pull/2037)
* Fix reject acl for dualstack [#2047](https://github.com/openshift/ovn-kubernetes/pull/2047)
* Skip all sig-api-machinery tests [#2044](https://github.com/openshift/ovn-kubernetes/pull/2044)
* ovnkube-node Pod restart will break external nw connectivity for pods [#2039](https://github.com/openshift/ovn-kubernetes/pull/2039)
* Bump up the api version used by e2e tests to 0.20.0. [#1990](https://github.com/openshift/ovn-kubernetes/pull/1990)
* refactor ovn gateway package [#2036](https://github.com/openshift/ovn-kubernetes/pull/2036)
* Revert to fedora33 and skip disruptive tests [#2032](https://github.com/openshift/ovn-kubernetes/pull/2032)
* refactor: using goovn bindings for adding ACL in addAllowACLFromNode() [#1884](https://github.com/openshift/ovn-kubernetes/pull/1884)
* Skip AdmissionWebhook confformance tests [#2026](https://github.com/openshift/ovn-kubernetes/pull/2026)
* Fix CI stability [#2018](https://github.com/openshift/ovn-kubernetes/pull/2018)
* deflake e2e test for egressip [#2022](https://github.com/openshift/ovn-kubernetes/pull/2022)
* Add OVN logLevel parameters to `kind.sh` [#1982](https://github.com/openshift/ovn-kubernetes/pull/1982)
* bump kind to 0.10.0 [#1997](https://github.com/openshift/ovn-kubernetes/pull/1997)
* Move e2e_test.go to e2e.go [#1998](https://github.com/openshift/ovn-kubernetes/pull/1998)
* Set --num-nodes in e2e-kind.sh [#2004](https://github.com/openshift/ovn-kubernetes/pull/2004)
* Allow for linter to run with podman as a runtime [#1999](https://github.com/openshift/ovn-kubernetes/pull/1999)
* Swap ns and podName args in WaitForPodNotPending() [#1993](https://github.com/openshift/ovn-kubernetes/pull/1993)
* [fixes BZ #1916872] Handle Multus network-status annotations on pod update [#1970](https://github.com/openshift/ovn-kubernetes/pull/1970)
* switch to newer fedora:34 so to enable ovn 20.12 [#1956](https://github.com/openshift/ovn-kubernetes/pull/1956)
* images: ignore ovnkube-trace [#1980](https://github.com/openshift/ovn-kubernetes/pull/1980)
* Manage and update the gateway OpenFlow rules using flow cache [#1915](https://github.com/openshift/ovn-kubernetes/pull/1915)
* add option to enable empty events in KIND [#1966](https://github.com/openshift/ovn-kubernetes/pull/1966)
* Import ginkgo and gomega using pacagename on `pkg/util` and `pkg/ovn` [#1819](https://github.com/openshift/ovn-kubernetes/pull/1819)
* metrics: Add Workqueue Metrics [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942)
* unit test example with fake client-go [#1919](https://github.com/openshift/ovn-kubernetes/pull/1919)
* Fixes flakes in egress gw unit test [#1923](https://github.com/openshift/ovn-kubernetes/pull/1923)
* use kubernetes v1.20.0 in kind [#1955](https://github.com/openshift/ovn-kubernetes/pull/1955)
* fix service controller repair function race [#1945](https://github.com/openshift/ovn-kubernetes/pull/1945)
* Configure GARP for egress IP re-assignment [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939)
* refactor ovn events code [#1927](https://github.com/openshift/ovn-kubernetes/pull/1927)
* Check IP family for exgws [#1944](https://github.com/openshift/ovn-kubernetes/pull/1944)
* db: Handle pruning of unhealthy db files on disk [#1930](https://github.com/openshift/ovn-kubernetes/pull/1930)
* Add IPv6 multicast support. [#1705](https://github.com/openshift/ovn-kubernetes/pull/1705)
* Expose Ovn db metrics  for Prometheus [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882)
* [BZ #1903651] Add clusterIP to ingress policy AS for SNAT-ed hairpin Traffic [#1921](https://github.com/openshift/ovn-kubernetes/pull/1921)
* Fix egressFirewall segfault caused by restarting [#1936](https://github.com/openshift/ovn-kubernetes/pull/1936)
* fix for the linter [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935)
* moving the address_set to its own package [#1798](https://github.com/openshift/ovn-kubernetes/pull/1798)
* bump kubernetes to 1.20 [#1904](https://github.com/openshift/ovn-kubernetes/pull/1904)
* Adds OFPort to CNI OVS check [#1917](https://github.com/openshift/ovn-kubernetes/pull/1917)
* [Bug 1918442](https://bugzilla.redhat.com/show_bug.cgi?id=1918442): Fix idling and rejects for 4.7 [#433](https://github.com/openshift/ovn-kubernetes/pull/433)
* Create a podman image to use with CI so linter/utests can be run [#431](https://github.com/openshift/ovn-kubernetes/pull/431)
* Updating ose-ovn-kubernetes builder & base images to be consistent with ART [#432](https://github.com/openshift/ovn-kubernetes/pull/432)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/05985e3dfbd8b4e89661b7455c31579ed447f3cc...266113868296fd11aefac3aabe2a72c76e380e62)


### [pod](https://github.com/openshift/kubernetes/tree/ee73ea2fb6899a78638a389cd5d860f163c590c8)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#1173](https://github.com/openshift/kubernetes/pull/1173)
* [Bug 2060494](https://bugzilla.redhat.com/show_bug.cgi?id=2060494): Backports inotify leak fix into kubelet [#1203](https://github.com/openshift/kubernetes/pull/1203)
* [Bug 2024642](https://bugzilla.redhat.com/show_bug.cgi?id=2024642): Rebase v1.21.8 [#1102](https://github.com/openshift/kubernetes/pull/1102)
* Update to go1.16.12 [#106983](https://github.com/openshift/kubernetes/pull/106983)
* dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 [#106961](https://github.com/openshift/kubernetes/pull/106961)
* Update to go1.16.11 [#106839](https://github.com/openshift/kubernetes/pull/106839)
* Automated cherry pick of #106891: kubeadm: validate local etcd certficates during [#106924](https://github.com/openshift/kubernetes/pull/106924)
* Automated cherry pick of #106854: kubeadm: avoid requiring a CA key during kubeconfig [#106929](https://github.com/openshift/kubernetes/pull/106929)
* Automated cherry pick of #105666: fix: skip instance not found when decoupling vmss from lb [#105835](https://github.com/openshift/kubernetes/pull/105835)
* Automated cherry pick of #105612: Remove Error Message Check Dynamic PV Tests [#106357](https://github.com/openshift/kubernetes/pull/106357)
* Automated cherry pick of #96115: Get inodes and disk usage via pure go [#104021](https://github.com/openshift/kubernetes/pull/104021)
* Automated cherry pick of #102882: devicemanager: checkpoint: support pre-1.20 data [#106254](https://github.com/openshift/kubernetes/pull/106254)
* Automated cherry pick of #103154: Update mounter interface in volume manager [#106553](https://github.com/openshift/kubernetes/pull/106553)
* Automated cherry pick of #104287: Reduce calls to docker from dockershim for stats [#106502](https://github.com/openshift/kubernetes/pull/106502)
* Automated cherry pick of #106102: Ensure deletion of pods in queues and cache [#106685](https://github.com/openshift/kubernetes/pull/106685)
* Automated cherry pick of #106412: kube-scheduler: Increase the duration to expire an assumed [#106632](https://github.com/openshift/kubernetes/pull/106632)
* Automated cherry pick of #106526: Ignore 'wait: no child processes' error when calling [#106527](https://github.com/openshift/kubernetes/pull/106527)
* Automated cherry pick of #105046: Skip check for all topology labels when using system default [#106605](https://github.com/openshift/kubernetes/pull/106605)
* Automated cherry pick of #105065: parameter 'disabled-metrics' is invalid [#106391](https://github.com/openshift/kubernetes/pull/106391)
* Automated cherry pick of #106317 upstream release 1.21 - Fixed nil pointer dereference [#106354](https://github.com/openshift/kubernetes/pull/106354)
* Automated cherry pick of #106382: defer close the rotated log open [#106384](https://github.com/openshift/kubernetes/pull/106384)
* Automated cherry pick of #104526: Fix issue in node status updating VolumeAttached list [#106053](https://github.com/openshift/kubernetes/pull/106053)
* remove listx from OWNERS_ALIASES [#104261](https://github.com/openshift/kubernetes/pull/104261)
* Automated cherry pick of #105512: Add check for subpaths [#106351](https://github.com/openshift/kubernetes/pull/106351)
* Manual cherry pick of kube-openapi changes for release-1.21 [#106255](https://github.com/openshift/kubernetes/pull/106255)
* Update to go1.16.10 [#106224](https://github.com/openshift/kubernetes/pull/106224)
* Automated cherry pick of #105934: Don't guess SELinux support on error [#106260](https://github.com/openshift/kubernetes/pull/106260)
* Automated cherry pick of #102059: Bump k8s.io/utils [#102656](https://github.com/openshift/kubernetes/pull/102656)
* Automated cherry pick of #94165: Use separate pathSpec for local and remote to properly handle [#106236](https://github.com/openshift/kubernetes/pull/106236)
* Cherry-pick of #101708: Fix log spam for du failure on pod etc-hosts metrics [#105887](https://github.com/openshift/kubernetes/pull/105887)
* Update debian, debian-iptables, setcap images to pick up CVEs fixes [#106147](https://github.com/openshift/kubernetes/pull/106147)
* Automated cherry pick of #105946: Remove nodes with Cluster Autoscaler taint from LB backends. [#106096](https://github.com/openshift/kubernetes/pull/106096)
* Automated cherry pick of #105997: Fixing how EndpointSlice Mirroring handles Service selector [#106135](https://github.com/openshift/kubernetes/pull/106135)
* Automated cherry pick of #105673: support more than 100 disk mounts on Windows [#105693](https://github.com/openshift/kubernetes/pull/105693)
* Automated cherry pick of #105755: Support cgroupv2 in node problem detector test [#105991](https://github.com/openshift/kubernetes/pull/105991)
* Cherry pick of #104551: Run storage hostpath e2e test client pod as privileged [#105787](https://github.com/openshift/kubernetes/pull/105787)
* Automated cherry pick of #105734: Fix race condition in logging when request times out [#106113](https://github.com/openshift/kubernetes/pull/106113)
* [Bug 2050131](https://bugzilla.redhat.com/show_bug.cgi?id=2050131): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1168](https://github.com/openshift/kubernetes/pull/1168)
* [Bug 2039377](https://bugzilla.redhat.com/show_bug.cgi?id=2039377): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1108](https://github.com/openshift/kubernetes/pull/1108)
* [Bug 2029466](https://bugzilla.redhat.com/show_bug.cgi?id=2029466): UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails [#1146](https://github.com/openshift/kubernetes/pull/1146)
* [Bug 2024995](https://bugzilla.redhat.com/show_bug.cgi?id=2024995): Fix subpath source check [#1067](https://github.com/openshift/kubernetes/pull/1067)
* [Bug 2032325](https://bugzilla.redhat.com/show_bug.cgi?id=2032325): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1092](https://github.com/openshift/kubernetes/pull/1092)
* [Bug 2022741](https://bugzilla.redhat.com/show_bug.cgi?id=2022741): UPSTREAM: 106260: Don't guess SELinux support on error [#1054](https://github.com/openshift/kubernetes/pull/1054)
* [Bug 2021997](https://bugzilla.redhat.com/show_bug.cgi?id=2021997): Read k8s version from hyperkube Dockerfile [#1045](https://github.com/openshift/kubernetes/pull/1045)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#559](https://github.com/openshift/kubernetes/pull/559)
* [Bug 2017027](https://bugzilla.redhat.com/show_bug.cgi?id=2017027): UPSTREAM: <drop>: bump apiserver-library-go [#1069](https://github.com/openshift/kubernetes/pull/1069)
* [Bug 2022265](https://bugzilla.redhat.com/show_bug.cgi?id=2022265): Rebase v1.21.6 [#1060](https://github.com/openshift/kubernetes/pull/1060)
* Automated cherry pick of #105509: [test]: Fix PreferNominatedNode test [#105665](https://github.com/openshift/kubernetes/pull/105665)
* Update to go1.16.9 [#105672](https://github.com/openshift/kubernetes/pull/105672)
* Automated cherry pick of #104985: Aggregator uses the regular transport even if the request [#105641](https://github.com/openshift/kubernetes/pull/105641)
* Automated cherry pick of #99748: check log directory for restartCount [#105614](https://github.com/openshift/kubernetes/pull/105614)
* Automated cherry pick of #104593: fix: ignore the case when updating tags [#104686](https://github.com/openshift/kubernetes/pull/104686)
* Automated cherry pick of #103371: tests: Wait for the network connectivity first [#105441](https://github.com/openshift/kubernetes/pull/105441)
* Automated cherry pick of #105185: Ignore VMs in vmss delete backend pools [#105402](https://github.com/openshift/kubernetes/pull/105402)
* Cherry pick of #105188 and #98350 to release 1.21 [#105365](https://github.com/openshift/kubernetes/pull/105365)
* Automated cherry pick of #102665: Add explicit capability for online volume expansion [#102740](https://github.com/openshift/kubernetes/pull/102740)
* Automated cherry pick of #104913: kube-controller-manager: properly check generic ephemeral [#105037](https://github.com/openshift/kubernetes/pull/105037)
* Automated cherry pick of #102409: Bump golang.org/x/text to v0.3.6 [#102601](https://github.com/openshift/kubernetes/pull/102601)
* Bump klog to v2.9.0 [#105407](https://github.com/openshift/kubernetes/pull/105407)
* Automated cherry pick of #105048: Remove a duplicate StorageClass creation call [#105354](https://github.com/openshift/kubernetes/pull/105354)
* Automated cherry pick of #105205: e2e scheduling priorities: do not reference control loop [#105278](https://github.com/openshift/kubernetes/pull/105278)
* Automated cherry pick of #102292: Local PV e2e: fix leaked local volumes [#103349](https://github.com/openshift/kubernetes/pull/103349)
* Automated cherry pick of #104467: fix 104329: check for headless before trying to release [#104973](https://github.com/openshift/kubernetes/pull/104973)
* Automated cherry pick of #104572: fix detach disk issue on deleting node [#104898](https://github.com/openshift/kubernetes/pull/104898)
* Automated cherry pick of #105388: Copy VolumeSnapshotContent annotations in snapshottable.go [#105497](https://github.com/openshift/kubernetes/pull/105497)
* Revert 102925: Fix Node Resources plugins score when there are pods with no requests [#105238](https://github.com/openshift/kubernetes/pull/105238)
* release 1.21: metrics grabbing [#104328](https://github.com/openshift/kubernetes/pull/104328)
* Automated cherry pick of #101047: Only use dualstack if the node and config supports it [#103783](https://github.com/openshift/kubernetes/pull/103783)
* Automated cherry pick of #104969: Propagate conversion errors [#104989](https://github.com/openshift/kubernetes/pull/104989)
* Automated cherry pick of #104634: storege e2etest: Delete restored PVC/Pod in snapshottable [#105153](https://github.com/openshift/kubernetes/pull/105153)
* v1.21: Fix test flake in old svc registry [#105110](https://github.com/openshift/kubernetes/pull/105110)
* Automated cherry pick of #100125: 'New' Event namespace validate failed [#105088](https://github.com/openshift/kubernetes/pull/105088)
* Automated cherry pick of #104833 (1.21): Refine locking in API Priority and Fairness config controller [#105050](https://github.com/openshift/kubernetes/pull/105050)
* Updating openshift-enterprise-pod images to be consistent with ART [#680](https://github.com/openshift/kubernetes/pull/680)
* [Bug 2020644](https://bugzilla.redhat.com/show_bug.cgi?id=2020644): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1050](https://github.com/openshift/kubernetes/pull/1050)
* [Bug 1994655](https://bugzilla.redhat.com/show_bug.cgi?id=1994655): openshift-apiserver should not set Available=False APIServicesAvailable on update [#955](https://github.com/openshift/kubernetes/pull/955)
* [Bug 2008403](https://bugzilla.redhat.com/show_bug.cgi?id=2008403): Rebase v1.21.5 [#981](https://github.com/openshift/kubernetes/pull/981)
* Update to go1.16.8 [#104906](https://github.com/openshift/kubernetes/pull/104906)
* Automated cherry pick of #104369: Fix storage class setup in regional_pd.go [#104537](https://github.com/openshift/kubernetes/pull/104537)
* Backport 104410 to release-1.21 [#104534](https://github.com/openshift/kubernetes/pull/104534)
* Automated cherry pick of #104314: legacy-cloud-providers: aws: Add support for consuming web [#104870](https://github.com/openshift/kubernetes/pull/104870)
* Automated cherry pick of #104845: e2e iperf2 change threshold to 10MBps = 80 Mbps [#104865](https://github.com/openshift/kubernetes/pull/104865)
* Automated cherry pick of #103532: Service: Fix semantics for Update wrt allocations [#104673](https://github.com/openshift/kubernetes/pull/104673)
* Automated cherry pick of #103050: Fix NodeAuthenticator tests in dual stack [#104840](https://github.com/openshift/kubernetes/pull/104840)
* Automated cherry pick of #100720: Fix buckets initialization [#104514](https://github.com/openshift/kubernetes/pull/104514)
* Automated cherry pick of #104384: fix: skip case sensitivity when checking Azure NSG rules [#104447](https://github.com/openshift/kubernetes/pull/104447)
* Automated cherry pick of #104279: Copy golang license to staging copies [#104311](https://github.com/openshift/kubernetes/pull/104311)
* Automated cherry pick of #104703: Fix the key missing issue for structured log [#104719](https://github.com/openshift/kubernetes/pull/104719)
* bump runc to 1.0.2 [#104530](https://github.com/openshift/kubernetes/pull/104530)
* Automated cherry pick of #104604: Don't prematurely close reflectors in case of slow [#104616](https://github.com/openshift/kubernetes/pull/104616)
* Automated cherry pick of #103958: Set idle and readheader timeouts [#103989](https://github.com/openshift/kubernetes/pull/103989)
* Automated cherry pick of #104009: delete stale UDP conntrack entries for loadbalancer IPs [#104151](https://github.com/openshift/kubernetes/pull/104151)
* Automated cherry pick of #104253: Pass additional flags to subpath mount to avoid flakes in [#104347](https://github.com/openshift/kubernetes/pull/104347)
* [Bug 2011460](https://bugzilla.redhat.com/show_bug.cgi?id=2011460): UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#1005](https://github.com/openshift/kubernetes/pull/1005)
* [Bug 1995714](https://bugzilla.redhat.com/show_bug.cgi?id=1995714): UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case [#895](https://github.com/openshift/kubernetes/pull/895)
* [Bug 1994457](https://bugzilla.redhat.com/show_bug.cgi?id=1994457): Update to kubernetes 1.21.4 [#888](https://github.com/openshift/kubernetes/pull/888)
* Automated cherry pick of #102083: fix: delete non existing disk issue [#102163](https://github.com/openshift/kubernetes/pull/102163)
* Automated cherry pick of #104182: Avoid spurious calls to update/delete validation [#104208](https://github.com/openshift/kubernetes/pull/104208)
* Update to go1.16.7 [#104201](https://github.com/openshift/kubernetes/pull/104201)
* Automated cherry pick of #102576: kubelet: do not call RemoveAll on volumes directory for [#103826](https://github.com/openshift/kubernetes/pull/103826)
* Automated cherry pick of #103284: Fix the code is leaking the defaulting between unrelated pod [#103676](https://github.com/openshift/kubernetes/pull/103676)
* Automated cherry pick of #103160: Remove extra zone test [#103405](https://github.com/openshift/kubernetes/pull/103405)
* Automated cherry pick of #103019: Fix frameworkImpl.extenders being not set [#103031](https://github.com/openshift/kubernetes/pull/103031)
* Automated cherry pick of #101611: let objects without metadata pass through the managedFields [#101649](https://github.com/openshift/kubernetes/pull/101649)
* Automated cherry pick of #104135: Update configure-helper.sh [#104179](https://github.com/openshift/kubernetes/pull/104179)
* Automated cherry pick of #103794: feat: Provide IPv6 support for internal load balancer [#104028](https://github.com/openshift/kubernetes/pull/104028)
* Automated cherry pick of #104161 upstream release 1.21 [#104190](https://github.com/openshift/kubernetes/pull/104190)
* Automated cherry pick of #103997: Fix: ignore not a VMSS error for VMAS nodes in [#104029](https://github.com/openshift/kubernetes/pull/104029)
* Automated cherry pick of #103937: Fix disruptive subPath test failures [#104044](https://github.com/openshift/kubernetes/pull/104044)
* Automated cherry pick of #102539: Fix closing of decorated watcher channel on timeout [#102541](https://github.com/openshift/kubernetes/pull/102541)
* Automated cherry pick of #102928: Simplify use of the fake dynamic client [#103614](https://github.com/openshift/kubernetes/pull/103614)
* Automated cherry pick of #103895: Update to using apiserver-network-proxy v1.22 [#103931](https://github.com/openshift/kubernetes/pull/103931)
* Automated cherry pick of #100637: storage e2e: automate hostpath YAML updates, hostpath #102212: Update pd csi driver images to use v1 images (CSINode, [#103920](https://github.com/openshift/kubernetes/pull/103920)
* Automated cherry pick of #103831: disable aufs module [#103927](https://github.com/openshift/kubernetes/pull/103927)
* cherry-pick #100353: strip prefix 'v' in coredns version if exists [#102905](https://github.com/openshift/kubernetes/pull/102905)
* Automated cherry pick of #103823: Make CSR cleaner tolerate objects with invalid [#103948](https://github.com/openshift/kubernetes/pull/103948)
* Backport fix for flaky ESIPP test to 1.21 [#103492](https://github.com/openshift/kubernetes/pull/103492)
* Automated cherry pick of #103126 upstream release 1.21: Updated to use konnectivity client v0.0.21, and implemented placehold… [#103699](https://github.com/openshift/kubernetes/pull/103699)
* Cherry pick of #100110: Cherry pick #537 from cloud provider azure: Refresh VM cache when node is not found and #102935: fix: cleanup outdated routes [#102983](https://github.com/openshift/kubernetes/pull/102983)
* Cherry pick of #103470: fix: return empty VMAS name if using standalone VM [#103599](https://github.com/openshift/kubernetes/pull/103599)
* Automated cherry pick of #103733 upstream release 1.21 [#103734](https://github.com/openshift/kubernetes/pull/103734)
* Automated cherry pick of #101118 upstream release 1.21 [#103712](https://github.com/openshift/kubernetes/pull/103712)
* Automated cherry pick of #103235: Update debian-base image to buster-v1.8.0 [#103488](https://github.com/openshift/kubernetes/pull/103488)
* Update to go1.16.6 [#103670](https://github.com/openshift/kubernetes/pull/103670)
* Automated cherry pick of #103138: Loadbalancer IngressIP policy should be configured as non-DSR [#103140](https://github.com/openshift/kubernetes/pull/103140)
* Automated cherry pick of #103133 on 1.21: switch scheduler to generate the merge patch on pod status instead of the full pod [#103279](https://github.com/openshift/kubernetes/pull/103279)
* Automated cherry pick of #99680: fix error of setting  negative value for containerLogMaxSize [#102389](https://github.com/openshift/kubernetes/pull/102389)
* Manual cherry pick of #103318: Bump SMD to v4.1.2 to pick up #102749 fix [#103319](https://github.com/openshift/kubernetes/pull/103319)
* Cherry pick of #102516: serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match [#102548](https://github.com/openshift/kubernetes/pull/102548)
* Automated cherry pick of #102892: Do not throw error when we can't get canonical path [#102969](https://github.com/openshift/kubernetes/pull/102969)
* Automated cherry pick of #102925: Fix Node Resources plugins score when there are pods with no [#102994](https://github.com/openshift/kubernetes/pull/102994)
* Automated cherry pick of #102584: Fix race in attachdetach tests [#103051](https://github.com/openshift/kubernetes/pull/103051)
* Automated cherry pick of #102845: Remove error wrap from logs [#102852](https://github.com/openshift/kubernetes/pull/102852)
* Automated cherry pick of #101592: chunk target operatation for aws targetGroup [#101812](https://github.com/openshift/kubernetes/pull/101812)
* Automated cherry pick of #102673: feat: remove ephemeral-storage etcd requirement [#102705](https://github.com/openshift/kubernetes/pull/102705)
* Automated cherry pick of #102788: client-go: reduce log level of reflector again [#102800](https://github.com/openshift/kubernetes/pull/102800)
* Update to go1.16.5 [#102739](https://github.com/openshift/kubernetes/pull/102739)
* Automated cherry pick of #102683: endpointslicemirroring controller mirror address status [#102702](https://github.com/openshift/kubernetes/pull/102702)
* Automated cherry pick of #100948: Avoid caching the VMSS instances whose network profile is nil [#101825](https://github.com/openshift/kubernetes/pull/101825)
* Cherry pick of #101752: fix: not tagging static public IP [#101819](https://github.com/openshift/kubernetes/pull/101819)
* Automated cherry pick of #102498: sched: fix a bug that a preemptor pod exists as a phantom [#102667](https://github.com/openshift/kubernetes/pull/102667)
* Automated cherry pick of #102306: Return UnschedulableAndUnresolvable instead of Error when [#102514](https://github.com/openshift/kubernetes/pull/102514)
* (scheduler e2e) Create balanced pods in parallel [#102487](https://github.com/openshift/kubernetes/pull/102487)
* Automated cherry pick of #102005: Azure: avoid setting cached Sku when updating VMSS and VMSS [#102119](https://github.com/openshift/kubernetes/pull/102119)
* Automated cherry pick of #101443: Add missing clientset to EBS storage e2e test [#101956](https://github.com/openshift/kubernetes/pull/101956)
* Automated cherry pick of #101857: fixed wrong warning in kube-proxy regarding topology aware [#101939](https://github.com/openshift/kubernetes/pull/101939)
* Automated cherry pick of #101615: fix removing pods from podTopologyHints mapping [#101892](https://github.com/openshift/kubernetes/pull/101892)
* Cherry pick of #101595: Update cos-gpu-installer image [#101890](https://github.com/openshift/kubernetes/pull/101890)
* Cherry pick of #101739: fix: avoid nil-pointer panic when checking the frontend IP configuration [#101885](https://github.com/openshift/kubernetes/pull/101885)
* Automated cherry pick of #101652: Add jitter to lease controller [#101863](https://github.com/openshift/kubernetes/pull/101863)
* Automated cherry pick of #100326: Fix watchForLockfileContention memory leak [#101795](https://github.com/openshift/kubernetes/pull/101795)
* Automated cherry pick of #102176: Fix VolumeAttachment garbage collection for migrated PVs [#102456](https://github.com/openshift/kubernetes/pull/102456)
* Revert "Cleanup portforward streams after their usage" [1.21] [#102587](https://github.com/openshift/kubernetes/pull/102587)
* Automated cherry pick of #102502: use subpath for coredns only for default repository [#102506](https://github.com/openshift/kubernetes/pull/102506)
* Automated cherry pick of #102213: Upgrade konnectivity-client for GRPC connection fixes [#102273](https://github.com/openshift/kubernetes/pull/102273)
* Automated cherry pick of #102157: kubeadm: remove e2e test for ClusterStatus [#102358](https://github.com/openshift/kubernetes/pull/102358)
* Automated cherry pick of #102377: Update setcap to buster-v2.0.1 and add setcap to dependencies.yaml [#102379](https://github.com/openshift/kubernetes/pull/102379)
* Automated cherry pick of #102302: Update debian-iptables to buster-v1.6.1 [#102340](https://github.com/openshift/kubernetes/pull/102340)
* Automated cherry pick of #102027: Remove unnecessary quotes from get-kube scripts [#102042](https://github.com/openshift/kubernetes/pull/102042)
* Automated cherry pick of #102105: Respect annotation size limit for SSA last-applied. [#102184](https://github.com/openshift/kubernetes/pull/102184)
* Automated cherry pick of #102224: Fix expired unit test certs [#102225](https://github.com/openshift/kubernetes/pull/102225)
* Automated cherry pick of #102147: vendor: bump runc to rc95 [#102196](https://github.com/openshift/kubernetes/pull/102196)
* Automated cherry pick of #101358: Ref counting is only applicable to Remote endpoints [#102001](https://github.com/openshift/kubernetes/pull/102001)
* Automated cherry pick of #101737: Use CSI driver to determine unique name for migrated in-tree [#101805](https://github.com/openshift/kubernetes/pull/101805)
* Automated cherry pick of #101950: Make watch order conformance test reliable [#101980](https://github.com/openshift/kubernetes/pull/101980)
* [Bug 1993754](https://bugzilla.redhat.com/show_bug.cgi?id=1993754): UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… [#940](https://github.com/openshift/kubernetes/pull/940)
* [Bug 1998391](https://bugzilla.redhat.com/show_bug.cgi?id=1998391): UPSTREAM: 104530: [1.21] bump runc to 1.0.2 [#912](https://github.com/openshift/kubernetes/pull/912)
* [Bug 1957133](https://bugzilla.redhat.com/show_bug.cgi?id=1957133): do not throw error when we can't get canonical path [#854](https://github.com/openshift/kubernetes/pull/854)
* [Bug 1981770](https://bugzilla.redhat.com/show_bug.cgi?id=1981770): UPSTREAM: <drop>: bump(apiserver-library-go) [#864](https://github.com/openshift/kubernetes/pull/864)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure [#858](https://github.com/openshift/kubernetes/pull/858)
* [Bug 1981633](https://bugzilla.redhat.com/show_bug.cgi?id=1981633): UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… [#856](https://github.com/openshift/kubernetes/pull/856)
* [Bug 1977351](https://bugzilla.redhat.com/show_bug.cgi?id=1977351): UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type [#833](https://github.com/openshift/kubernetes/pull/833)
* [Bug 1977924](https://bugzilla.redhat.com/show_bug.cgi?id=1977924): [release-4.8] Ensure scc compatibility with BoundServiceAccountTokenVolume [#842](https://github.com/openshift/kubernetes/pull/842)
* [Bug 1975938](https://bugzilla.redhat.com/show_bug.cgi?id=1975938): update Multi-AZ Cluster Volumes test name [#829](https://github.com/openshift/kubernetes/pull/829)
* [Bug 1973580](https://bugzilla.redhat.com/show_bug.cgi?id=1973580): only chown if non-windows machine with projected volumes [#815](https://github.com/openshift/kubernetes/pull/815)
* [Bug 1950993](https://bugzilla.redhat.com/show_bug.cgi?id=1950993): UPSTREAM: <drop>: bump cadvisor for 2868 upstream patch [#802](https://github.com/openshift/kubernetes/pull/802)
* BUG 1927359: Add support for gathering metrics from CSI block-mode volumes [#731](https://github.com/openshift/kubernetes/pull/731)
* [Bug 1954509](https://bugzilla.redhat.com/show_bug.cgi?id=1954509): UPSTREAM: multiple: Fix corruption of FibreChannel volumes [#788](https://github.com/openshift/kubernetes/pull/788)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): Re-enable BoundServiceAccountTokenVolume disabled by 1.21 rebase [#714](https://github.com/openshift/kubernetes/pull/714)
* [Bug 1950010](https://bugzilla.redhat.com/show_bug.cgi?id=1950010): UPSTREAM: <carry>: apirequestcount: smear out CR updates over interval [#798](https://github.com/openshift/kubernetes/pull/798)
* [Bug 1969626](https://bugzilla.redhat.com/show_bug.cgi?id=1969626): UPSTREAM: 102587: kubelet: Revert "Cleanup portforward streams after their usage" [#796](https://github.com/openshift/kubernetes/pull/796)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): kube-apiserver: add system_client=cluster-policy-controller to apiserver_request_total [#794](https://github.com/openshift/kubernetes/pull/794)
* [Bug 1965545](https://bugzilla.redhat.com/show_bug.cgi?id=1965545): vendor: bump runc to rc95 + "unit exists" fix [#790](https://github.com/openshift/kubernetes/pull/790)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 102606: Bring back "client-go: add retry logic for Watch and Stream" and fix test flake [#792](https://github.com/openshift/kubernetes/pull/792)
* [Bug 1967591](https://bugzilla.redhat.com/show_bug.cgi?id=1967591): UPSTREAM: <carry>: do not mutate pods when it has a container with both CPU request and limit [#785](https://github.com/openshift/kubernetes/pull/785)
* [Bug 1966410](https://bugzilla.redhat.com/show_bug.cgi?id=1966410): UPSTREAM: <carry>: apiserver: add system_client=kube-{apiserver,cm,s} to apiserver_request_total [#784](https://github.com/openshift/kubernetes/pull/784)
* UPSTREAM: <carry>: kubelet: add ehashman as reviewer [#583](https://github.com/openshift/kubernetes/pull/583)
* [Bug 1967745](https://bugzilla.redhat.com/show_bug.cgi?id=1967745): Add DNS custom resource admission [#681](https://github.com/openshift/kubernetes/pull/681)
* [Bug 1927397](https://bugzilla.redhat.com/show_bug.cgi?id=1927397): UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects [#736](https://github.com/openshift/kubernetes/pull/736)
* [Bug 1964492](https://bugzilla.redhat.com/show_bug.cgi?id=1964492): UPSTREAM: 102171: Implement support for watch initialization in P&F [#773](https://github.com/openshift/kubernetes/pull/773)
* [Bug 1946479](https://bugzilla.redhat.com/show_bug.cgi?id=1946479): UPSTREAM: 101950: Make watch order conformance test reliable [#786](https://github.com/openshift/kubernetes/pull/786)
* [Bug 1953127](https://bugzilla.redhat.com/show_bug.cgi?id=1953127): UPSTREAM: <drop>: work around broken NetPol DNS rules [#770](https://github.com/openshift/kubernetes/pull/770)
* [Bug 1958329](https://bugzilla.redhat.com/show_bug.cgi?id=1958329): UPSTREAM: 97428: add more context to log after a request times out [#737](https://github.com/openshift/kubernetes/pull/737)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 102107: client-go: add retry logic for Watch and Stream [#783](https://github.com/openshift/kubernetes/pull/783)
* [Bug 1961925](https://bugzilla.redhat.com/show_bug.cgi?id=1961925): UPSTREAM: <carry>: Does not prevent pod creation because of no nodes reason when it runs under the regular cluster [#756](https://github.com/openshift/kubernetes/pull/756)
* [Bug 1913974](https://bugzilla.redhat.com/show_bug.cgi?id=1913974): UPSTREAM: 102021: Update snapshotting tests to use volumeHandle for CSI volumes when waiting for NodeUnpublish [#769](https://github.com/openshift/kubernetes/pull/769)
* [Bug 1953102](https://bugzilla.redhat.com/show_bug.cgi?id=1953102): UPSTREAM: 102147: vendor: bump runc to rc95 [#761](https://github.com/openshift/kubernetes/pull/761)
* [Bug 1960205](https://bugzilla.redhat.com/show_bug.cgi?id=1960205): UPSTREAM: <carry>: verbosity of managed workloads logging [#771](https://github.com/openshift/kubernetes/pull/771)
* UPSTREAM: <carry>: update rebase doc [#768](https://github.com/openshift/kubernetes/pull/768)
* [Bug 1964197](https://bugzilla.redhat.com/show_bug.cgi?id=1964197): UPSTREAM: 102224: Fix expired unit test certs [#767](https://github.com/openshift/kubernetes/pull/767)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): Rebase 1.21.1 [#751](https://github.com/openshift/kubernetes/pull/751)
* Remove Limits from scheduling e2e balanced pod resources [#101338](https://github.com/openshift/kubernetes/pull/101338)
* Automated cherry pick of #99839: Cleanup portforward streams after their usage [#100951](https://github.com/openshift/kubernetes/pull/100951)
* Automated cherry pick of #99223: move filesystem resize code to kubernetes/mount-utils and add [#101253](https://github.com/openshift/kubernetes/pull/101253)
* Automated cherry pick of #101235: fix: azure file namespace issue in csi translation [#101353](https://github.com/openshift/kubernetes/pull/101353)
* Update to go1.16.4 [#101811](https://github.com/openshift/kubernetes/pull/101811)
* Automated cherry pick of #101012: Fix panic when killing container fails [#101251](https://github.com/openshift/kubernetes/pull/101251)
* Cherry pick of #100690: azure: fix node public IP not able to fetch issues from IMDS [#100943](https://github.com/openshift/kubernetes/pull/100943)
* Automated cherry pick of #101005: Set namespace when using kubectl create service [#101620](https://github.com/openshift/kubernetes/pull/101620)
* Automated cherry pick of #100731: Normalize share name to not include capital letters [#101549](https://github.com/openshift/kubernetes/pull/101549)
* Automated cherry pick of #101495: Fix cleanupMountpoint issue for Windows [#101540](https://github.com/openshift/kubernetes/pull/101540)
* Automated cherry pick of #101398: fix: set "host is down" as corrupted mount [#101518](https://github.com/openshift/kubernetes/pull/101518)
* Automated cherry pick of #100944: Ensure service deleted when the Azure resource group has been deleted [#101494](https://github.com/openshift/kubernetes/pull/101494)
* Cherry pick of #100694: Cherry pick #574 from Cloud Provider Azure: do not tag user created public IPs [#100693](https://github.com/openshift/kubernetes/pull/100693)
* Automated cherry pick of #101186: Fix RBAC of generic ephemeral volumes controller [#101310](https://github.com/openshift/kubernetes/pull/101310)
* Automated cherry pick of #101025: Fix EndpointSlice describe panic when an Endpoint doesn't [#101632](https://github.com/openshift/kubernetes/pull/101632)
* Automated cherry pick of #101347: Extend pod start timeout to 5min for storage subpath [#101544](https://github.com/openshift/kubernetes/pull/101544)
* cherry pick of #100913: no watch endpointslice in userpace mode [#101504](https://github.com/openshift/kubernetes/pull/101504)
* Cherrypick: Update tests to use agnhost 2.32 [#101725](https://github.com/openshift/kubernetes/pull/101725)
* Cherry-pick: Fix Job describe for completion mode [#101198](https://github.com/openshift/kubernetes/pull/101198)
* Automated cherry pick of #101380: fix TestMutatingWebhookResetsInvalidManagedFields flakes [#101424](https://github.com/openshift/kubernetes/pull/101424)
* Automated cherry pick of #101093: Fix `startupProbe` behaviour changed [#101223](https://github.com/openshift/kubernetes/pull/101223)
* Automated cherry pick of #99336: pkg/kubelet: improve the node informer sync check [#101346](https://github.com/openshift/kubernetes/pull/101346)
* Automated cherry pick of #100959: DelegatingAuthenticationOptions TokenReview request timeout [#101102](https://github.com/openshift/kubernetes/pull/101102)
* Automated cherry pick of #100804: add node handlers to the metaproxier [#101054](https://github.com/openshift/kubernetes/pull/101054)
* Automated cherry pick of #100728: Updating Topology Aware Hints to support "Auto" value for [#101053](https://github.com/openshift/kubernetes/pull/101053)
* Automated cherry pick of #100976: releng: Update debian-base and debian-iptables to buster-v1.6.0 to patch base image CVEs [#101438](https://github.com/openshift/kubernetes/pull/101438)
* Automated cherry pick of #101084: Updating EndpointSlice validation to match Endpoints [#101385](https://github.com/openshift/kubernetes/pull/101385)
* Automated cherry pick of #100200: respect ExecProbeTimeout and #101006: exec test should not run in Parallel [#101127](https://github.com/openshift/kubernetes/pull/101127)
* Automated cherry pick of #101306: Additional CVE-2021-3121 fix [#101325](https://github.com/openshift/kubernetes/pull/101325)
* Automated cherry pick of #100762: list pod list once to avoid timeout [#101031](https://github.com/openshift/kubernetes/pull/101031)
* Automated cherry pick of #100893: e2e test with hostNetwork pods can't run in parallel [#100908](https://github.com/openshift/kubernetes/pull/100908)
* Automated cherry pick of #101120: Upgrade kustomize-in-kubectl to v4.1.2 [#101177](https://github.com/openshift/kubernetes/pull/101177)
* Update to go1.16.3 [#101209](https://github.com/openshift/kubernetes/pull/101209)
* Automated cherry pick of #100678: apf: exempt probes /healthz /livez /readyz [#101111](https://github.com/openshift/kubernetes/pull/101111)
* Automated cherry pick of #100992: gce configure containerd default_runtime_name [#100998](https://github.com/openshift/kubernetes/pull/100998)
* Automated cherry pick of #100980: Update the containerd runtime binary path - gce [#100997](https://github.com/openshift/kubernetes/pull/100997)
* Automated cherry pick of #100550: Add new iptables rule for local-up-cluster.sh [#100814](https://github.com/openshift/kubernetes/pull/100814)
* Automated cherry pick of #100569: Set jwks uri in local-up-cluster.sh [#100812](https://github.com/openshift/kubernetes/pull/100812)
* Automated cherry pick of #99734: adds sysctls conformance tests [#100811](https://github.com/openshift/kubernetes/pull/100811)
* Automated cherry pick of #100785: align some of the pod start up times [#100810](https://github.com/openshift/kubernetes/pull/100810)
* Automated cherry pick of #100544: Set some kube-proxy parameters for local-up-cluster.sh [#100813](https://github.com/openshift/kubernetes/pull/100813)
* Automated cherry pick of #100759: increase timeout for pods to start [#100780](https://github.com/openshift/kubernetes/pull/100780)
* Automated cherry pick of #100606 #100660 upstream release 1.21 [#100718](https://github.com/openshift/kubernetes/pull/100718)
* Automated cherry pick of #100638: apf: fix data race in queueset [#100642](https://github.com/openshift/kubernetes/pull/100642)
* Automated cherry pick of #100687: Switch to newer agnhost image [#100696](https://github.com/openshift/kubernetes/pull/100696)
* Automated cherry pick of #100680: test/e2e: fix the OIDC discovery test with ECDSA service [#100685](https://github.com/openshift/kubernetes/pull/100685)
* [cherry-pick of 100632] bump the deprecated version to 1.22 [#100633](https://github.com/openshift/kubernetes/pull/100633)
* UPSTREAM: 102089: Bug 1961644: Add Node IP IPv6 formatting in NodeAuthenticator tests [#760](https://github.com/openshift/kubernetes/pull/760)
* [Bug 1963079](https://bugzilla.redhat.com/show_bug.cgi?id=1963079): KCM with preferred host support [#759](https://github.com/openshift/kubernetes/pull/759)
* [Bug 1952460](https://bugzilla.redhat.com/show_bug.cgi?id=1952460): UPSTREAM: 101488: e2e/network/firewall: don't assume nodes are exposed externally [#738](https://github.com/openshift/kubernetes/pull/738)
* UPSTREAM: 101213: Bug 1881662: fix change erro to info [#744](https://github.com/openshift/kubernetes/pull/744)
* [Bug 1932280](https://bugzilla.redhat.com/show_bug.cgi?id=1932280): UPSTREAM: 101116: vSphere: Return useful errors from parameter validation [#707](https://github.com/openshift/kubernetes/pull/707)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): Handle 429 errors from watch requests in reflector [#669](https://github.com/openshift/kubernetes/pull/669)
* [Bug 1945091](https://bugzilla.redhat.com/show_bug.cgi?id=1945091): Don't force-disable IPv6, dual-stack, and SCTP tests [#565](https://github.com/openshift/kubernetes/pull/565)
* [Bug 1960780](https://bugzilla.redhat.com/show_bug.cgi?id=1960780): UPSTREAM: <carry>: Use policyv1beta1 [#752](https://github.com/openshift/kubernetes/pull/752)
* UPSTREAM: 101067: Bug 1946459: fix nfs storage ipv6 add square brackets [#743](https://github.com/openshift/kubernetes/pull/743)
* [Bug 1884800](https://bugzilla.redhat.com/show_bug.cgi?id=1884800): Reduce names of vsphere volumes even further [#701](https://github.com/openshift/kubernetes/pull/701)
* [Bug 1959471](https://bugzilla.redhat.com/show_bug.cgi?id=1959471): Conformance tests (sysctls) may not be excluded [#741](https://github.com/openshift/kubernetes/pull/741)
* [Bug 1923847](https://bugzilla.redhat.com/show_bug.cgi?id=1923847): openshift-kube-apiserver: use github.com/openshift/apiserver-library-go/pkg/labelselector [#708](https://github.com/openshift/kubernetes/pull/708)
* [Bug 1949105](https://bugzilla.redhat.com/show_bug.cgi?id=1949105): Reenable NetworkPolicy test. [#734](https://github.com/openshift/kubernetes/pull/734)
* [Bug 1957502](https://bugzilla.redhat.com/show_bug.cgi?id=1957502): UPSTREAM: <carry>: correct apirequestcount lock [#735](https://github.com/openshift/kubernetes/pull/735)
* [Bug 1956895](https://bugzilla.redhat.com/show_bug.cgi?id=1956895): UPSTREAM: 101593: kubelet: change cgroup move message to log level 3 [#732](https://github.com/openshift/kubernetes/pull/732)
* [Bug 1956898](https://bugzilla.redhat.com/show_bug.cgi?id=1956898): UPSTREAM: 99748: kubelet: fix log files being overwritten on containe… [#733](https://github.com/openshift/kubernetes/pull/733)
* [Bug 1949612](https://bugzilla.redhat.com/show_bug.cgi?id=1949612): UPSTREAM: 101708: Fix log spam for du failure on pod etc-hosts metrics [#729](https://github.com/openshift/kubernetes/pull/729)
* [Bug 1954696](https://bugzilla.redhat.com/show_bug.cgi?id=1954696): UPSTREAM: <carry>: add apirequestcount useragent [#716](https://github.com/openshift/kubernetes/pull/716)
* [Bug 1952666](https://bugzilla.redhat.com/show_bug.cgi?id=1952666): UPSTREAM: <carry>: management workloads enhancement 741(uint64) [#706](https://github.com/openshift/kubernetes/pull/706)
* [Bug 1953555](https://bugzilla.redhat.com/show_bug.cgi?id=1953555): UPSTREAM: <carry>: Skip GlusterFS tests [#723](https://github.com/openshift/kubernetes/pull/723)
* [Bug 1954770](https://bugzilla.redhat.com/show_bug.cgi?id=1954770): UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set [#717](https://github.com/openshift/kubernetes/pull/717)
* UPSTREAM: 101280: Bug 1913974: Force NodeUnstageVolume to finish for all distros [#700](https://github.com/openshift/kubernetes/pull/700)
* [Bug 1952224](https://bugzilla.redhat.com/show_bug.cgi?id=1952224): kubelet: do not cleanup volumes if pod is being killed [#709](https://github.com/openshift/kubernetes/pull/709)
* [Bug 1954972](https://bugzilla.redhat.com/show_bug.cgi?id=1954972): openshift-kube-apiserver/admission: fix featuregates resource name [#719](https://github.com/openshift/kubernetes/pull/719)
* [Bug 1954634](https://bugzilla.redhat.com/show_bug.cgi?id=1954634): UPSTREAM: <carry>: honor max users [#689](https://github.com/openshift/kubernetes/pull/689)
* [Bug 1951585](https://bugzilla.redhat.com/show_bug.cgi?id=1951585): Addresses build error pause [#685](https://github.com/openshift/kubernetes/pull/685)
* [Bug 1954638](https://bugzilla.redhat.com/show_bug.cgi?id=1954638): UPSTREAM: <carry>: apirequest count with empty .status.removedInRelease [#715](https://github.com/openshift/kubernetes/pull/715)
* [Bug 1927263](https://bugzilla.redhat.com/show_bug.cgi?id=1927263): UPSTREAM: 99336: kubelet: improve the node informer sync check [#704](https://github.com/openshift/kubernetes/pull/704)
* [Bug 1953555](https://bugzilla.redhat.com/show_bug.cgi?id=1953555): UPSTREAM: <carry>: Skip GlusterFS tests [#647](https://github.com/openshift/kubernetes/pull/647)
* [Bug 1953127](https://bugzilla.redhat.com/show_bug.cgi?id=1953127): Re-enable [Feature:NetworkPolicy] tests which were wrongly disabled in rebase [#655](https://github.com/openshift/kubernetes/pull/655)
* UPSTREAM: <drop>: update openshift/api for old API removal [#702](https://github.com/openshift/kubernetes/pull/702)
* UPSTREAM: <carry>: Provide a new admission plugin to mutate management pods CPUs requests [#632](https://github.com/openshift/kubernetes/pull/632)
* [Bug 1948311](https://bugzilla.redhat.com/show_bug.cgi?id=1948311): UPSTREAM: 100959: DelegatingAuthenticationOptions: TokenReview reques… [#654](https://github.com/openshift/kubernetes/pull/654)
* [Bug 1948953](https://bugzilla.redhat.com/show_bug.cgi?id=1948953): UPSTREAM: <carry>: Set informer for openstack [#662](https://github.com/openshift/kubernetes/pull/662)
* [Bug 1952333](https://bugzilla.redhat.com/show_bug.cgi?id=1952333): UPSTREAM: 101306: Additional CVE-2021-3121 fix [#699](https://github.com/openshift/kubernetes/pull/699)
* [Bug 1945104](https://bugzilla.redhat.com/show_bug.cgi?id=1945104): UPSTREAM: 101186: Fix RBAC of generic ephemeral volumes controller [#694](https://github.com/openshift/kubernetes/pull/694)
* [Bug 1944631](https://bugzilla.redhat.com/show_bug.cgi?id=1944631): openshift authenticator: don't allow old-style tokens [#667](https://github.com/openshift/kubernetes/pull/667)
* [Bug 1937299](https://bugzilla.redhat.com/show_bug.cgi?id=1937299): Fix mounting partitions on NVMe devices [#661](https://github.com/openshift/kubernetes/pull/661)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101287: Fail fast when image is specified w/o tag [#693](https://github.com/openshift/kubernetes/pull/693)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101337: Remove Limits from scheduling e2e balanced pod reso… [#696](https://github.com/openshift/kubernetes/pull/696)
* [Bug 1951558](https://bugzilla.redhat.com/show_bug.cgi?id=1951558): UPSTREAM: 101093: Fix startupProbe behaviour changed [#687](https://github.com/openshift/kubernetes/pull/687)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: keep apirequestcounts for non-persisted users between updates [#684](https://github.com/openshift/kubernetes/pull/684)
* [Bug 1951042](https://bugzilla.redhat.com/show_bug.cgi?id=1951042): fix crash when killing container fails
 [#682](https://github.com/openshift/kubernetes/pull/682)
* [Bug 1934400](https://bugzilla.redhat.com/show_bug.cgi?id=1934400): bump(apiserver-library-go): scc-admission: don't apply defaultAllowPrivilegeEscalation:false when container is privileged [#673](https://github.com/openshift/kubernetes/pull/673)
* [Bug 1949661](https://bugzilla.redhat.com/show_bug.cgi?id=1949661): UPSTREAM: <carry>: management pinning annotations [#627](https://github.com/openshift/kubernetes/pull/627)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: DeprecatedAPIRequestHandler unit tests [#675](https://github.com/openshift/kubernetes/pull/675)
* [Bug 1949306](https://bugzilla.redhat.com/show_bug.cgi?id=1949306): UPSTREAM: <carry>: DeprecatedAPIRequest Log [#663](https://github.com/openshift/kubernetes/pull/663)
* [Bug 1949050](https://bugzilla.redhat.com/show_bug.cgi?id=1949050): UPSTREAM: 101147: Limit image spec's hash length [#674](https://github.com/openshift/kubernetes/pull/674)
* [Bug 1949721](https://bugzilla.redhat.com/show_bug.cgi?id=1949721): UPSTREAM: 99237: Use the audit ID of a request for better correlation [#672](https://github.com/openshift/kubernetes/pull/672)
* [Bug 1934085](https://bugzilla.redhat.com/show_bug.cgi?id=1934085): UPSTREAM: 100128: [sig-scheduling] SchedulerPreemption|SchedulerPredicates|SchedulerPriorities: adjust some e2e tests to run in a single node cluster scenario [#665](https://github.com/openshift/kubernetes/pull/665)
* BUG 1948703: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz [#656](https://github.com/openshift/kubernetes/pull/656)
* UPSTREAM: <carry>: Add Dockerfile to build pause image [#633](https://github.com/openshift/kubernetes/pull/633)
* <carry>: enable CSI migration gates in Attach/Detach controller [#601](https://github.com/openshift/kubernetes/pull/601)
* UPSTREAM: <carry>: bump tag version [#652](https://github.com/openshift/kubernetes/pull/652)
* UPSTREAM: <carry>: Disable CSI migration on OpenStack Cinder [#651](https://github.com/openshift/kubernetes/pull/651)
* KS with preferred host support [#638](https://github.com/openshift/kubernetes/pull/638)
* Rebase 1.21.0 rc.0 [#641](https://github.com/openshift/kubernetes/pull/641)
* Revert "UPSTREAM: 97295: Fix staticcheck in test/integration/{examples,framework}" [#648](https://github.com/openshift/kubernetes/pull/648)
* UPSTREAM: 97295: Fix staticcheck in test/integration/{examples,framework} [#644](https://github.com/openshift/kubernetes/pull/644)
* UPSTREAM: <carry>: rate limit initial watch storm from kubelets on apiserver restart [#629](https://github.com/openshift/kubernetes/pull/629)
* [Bug 1941000](https://bugzilla.redhat.com/show_bug.cgi?id=1941000): get AZ of cinder volume from cinder and not from metadata [#634](https://github.com/openshift/kubernetes/pull/634)
* upstream: 99817: Fix zero-value custom resource validation with go1.16 [#637](https://github.com/openshift/kubernetes/pull/637)
* UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#616](https://github.com/openshift/kubernetes/pull/616)
* improves the apiserver graceful shutdown procedure [#606](https://github.com/openshift/kubernetes/pull/606)
* Ensure multi-az test is run in the serial job [#626](https://github.com/openshift/kubernetes/pull/626)
* UPSTREAM: 96856: e2e network policy enclose IPv6 destinations [#628](https://github.com/openshift/kubernetes/pull/628)
* UPSTREAM: <carry>: provide events, messages, and bodies for probe failures of important pods [#609](https://github.com/openshift/kubernetes/pull/609)
* UPSTREAM: <carry>: allow kubelet to self-authorize metrics scraping [#598](https://github.com/openshift/kubernetes/pull/598)
* UPSTREAM: 91295: kubectl explain: detect resource group in case there… [#608](https://github.com/openshift/kubernetes/pull/608)
* use hardcoded authorizer for metrics [#588](https://github.com/openshift/kubernetes/pull/588)
* UPSTREAM: 96984: APF e2e: wait for steady state before proceeding [#599](https://github.com/openshift/kubernetes/pull/599)
* [Bug 1932097](https://bugzilla.redhat.com/show_bug.cgi?id=1932097): UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown [#594](https://github.com/openshift/kubernetes/pull/594)
* [Bug 1885717](https://bugzilla.redhat.com/show_bug.cgi?id=1885717): UPSTREAM: 98742: Sync completed pods until their containers have been terminated [#593](https://github.com/openshift/kubernetes/pull/593)
* UPSTREAM: 99199: delay serving CRD creates for a few seconds for HA consistency [#587](https://github.com/openshift/kubernetes/pull/587)
* [Bug 1931103](https://bugzilla.redhat.com/show_bug.cgi?id=1931103): UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 [#584](https://github.com/openshift/kubernetes/pull/584)
* [Bug 1916489](https://bugzilla.redhat.com/show_bug.cgi?id=1916489): (e2e/scheduler) Ensure minimum memory limit in createBalancedPodForNodes [#526](https://github.com/openshift/kubernetes/pull/526)
* [Bug 1908378](https://bugzilla.redhat.com/show_bug.cgi?id=1908378): kubelet: fix create sandbox delete pod race [#580](https://github.com/openshift/kubernetes/pull/580)
* UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining [#578](https://github.com/openshift/kubernetes/pull/578)
* add failure details for SCC not used [#573](https://github.com/openshift/kubernetes/pull/573)
* [Bug 1897918](https://bugzilla.redhat.com/show_bug.cgi?id=1897918): UPSTREAM: 93861: apiserver: add --permit-address-sharing flag to listen with SO_REUSEADDR [#309](https://github.com/openshift/kubernetes/pull/309)
* [Bug 1876918](https://bugzilla.redhat.com/show_bug.cgi?id=1876918): Move deferred taint cleanup call to ensure all are removed [#513](https://github.com/openshift/kubernetes/pull/513)
* [Bug 1927391](https://bugzilla.redhat.com/show_bug.cgi?id=1927391): UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady [#564](https://github.com/openshift/kubernetes/pull/564)
* [Bug 1926484](https://bugzilla.redhat.com/show_bug.cgi?id=1926484): UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one [#558](https://github.com/openshift/kubernetes/pull/558)
* [Bug 1926285](https://bugzilla.redhat.com/show_bug.cgi?id=1926285): UPSTREAM: <carry>: ignore not found errors in status messages [#557](https://github.com/openshift/kubernetes/pull/557)
* [Bug 1925493](https://bugzilla.redhat.com/show_bug.cgi?id=1925493): Enable snapshot tests [#555](https://github.com/openshift/kubernetes/pull/555)
* [Bug 1896558](https://bugzilla.redhat.com/show_bug.cgi?id=1896558): Balance nodes in scheduling e2e [#547](https://github.com/openshift/kubernetes/pull/547)
* BUG 1924870: UPSTREAM: 96901: plumb context with request deadline [#549](https://github.com/openshift/kubernetes/pull/549)
* [Bug 1915085](https://bugzilla.redhat.com/show_bug.cgi?id=1915085): UPSTREAM: 98424: register all pending pod deletions and check for kill [#551](https://github.com/openshift/kubernetes/pull/551)
* Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART [#449](https://github.com/openshift/kubernetes/pull/449)
* [Bug 1894645](https://bugzilla.redhat.com/show_bug.cgi?id=1894645): UPSTREAM: 89885: SQUASH: Fix cinder crash [#510](https://github.com/openshift/kubernetes/pull/510)
* Revert OWNERS changes [#544](https://github.com/openshift/kubernetes/pull/544)
* [Bug 1917803](https://bugzilla.redhat.com/show_bug.cgi?id=1917803): UPSTREAM: 98187: Skip PD tests on 1 node cluster [#546](https://github.com/openshift/kubernetes/pull/546)
* [Bug 1896558](https://bugzilla.redhat.com/show_bug.cgi?id=1896558): Revert undesired multi az skip [#545](https://github.com/openshift/kubernetes/pull/545)
* [Bug 1920368](https://bugzilla.redhat.com/show_bug.cgi?id=1920368): UPSTREAM: 98019: specify the container CPU set during the creation [#541](https://github.com/openshift/kubernetes/pull/541)
* [Bug 1868645](https://bugzilla.redhat.com/show_bug.cgi?id=1868645): UPSTREAM: 94087: kubelet: node sync at least once [#522](https://github.com/openshift/kubernetes/pull/522)
* [Bug 1896558](https://bugzilla.redhat.com/show_bug.cgi?id=1896558): Skip multiaz e2e [#525](https://github.com/openshift/kubernetes/pull/525)
* Add DOWNSTREAM_OWNERS as preparation for https://github.com/kubernetes/test-infra/pull/20482 [#537](https://github.com/openshift/kubernetes/pull/537)
* [Bug 1870342](https://bugzilla.redhat.com/show_bug.cgi?id=1870342): UPSTREAM: 94684: e2e: Pod should avoid nodes that have avoidPod annotation: clean remaining pods [#534](https://github.com/openshift/kubernetes/pull/534)
* [Bug 1882750](https://bugzilla.redhat.com/show_bug.cgi?id=1882750): UPSTREAM: 98103: kubelet: Delete static pod gracefully and fix mirrorPodTerminationMap leak [#531](https://github.com/openshift/kubernetes/pull/531)
* [Bug 1899941](https://bugzilla.redhat.com/show_bug.cgi?id=1899941): Override termination grace period on annotation [#527](https://github.com/openshift/kubernetes/pull/527)
* [Bug 1915945](https://bugzilla.redhat.com/show_bug.cgi?id=1915945): UPSTREAM: 96990: Increase preemption timeout from 1 minute to 2 minutes [#530](https://github.com/openshift/kubernetes/pull/530)
* [Bug 1889420](https://bugzilla.redhat.com/show_bug.cgi?id=1889420): Add dangling volume check for vsphere [#445](https://github.com/openshift/kubernetes/pull/445)
* [Bug 1841119](https://bugzilla.redhat.com/show_bug.cgi?id=1841119): UPSTREAM: <carry>: kube-controller-manager: allow running bare kube-controller-manager [#415](https://github.com/openshift/kubernetes/pull/415)
* [Bug 1908880](https://bugzilla.redhat.com/show_bug.cgi?id=1908880): UPSTREAM: 97980: kubelet: revert checking sandbox deletion [#523](https://github.com/openshift/kubernetes/pull/523)
* [Bug 1915582](https://bugzilla.redhat.com/show_bug.cgi?id=1915582): UPSTREAM: 97860: move all variables in sampleAndWaterMarkHistograms::innerSet [#520](https://github.com/openshift/kubernetes/pull/520)
* [Bug 1903999](https://bugzilla.redhat.com/show_bug.cgi?id=1903999): Httplog response code is always zero [#494](https://github.com/openshift/kubernetes/pull/494)
* UPSTREAM: <carry>: (squash) Add detail to rebase doc [#487](https://github.com/openshift/kubernetes/pull/487)
* adds a unit test for checking if graceful shutdown of HTTP2 server works [#483](https://github.com/openshift/kubernetes/pull/483)
* [Bug 1877812](https://bugzilla.redhat.com/show_bug.cgi?id=1877812): UPSTREAM: 96889: Fix loopback device lookup [#512](https://github.com/openshift/kubernetes/pull/512)
* [Bug 1899760](https://bugzilla.redhat.com/show_bug.cgi?id=1899760): UPSTREAM: 96754: reduce buckets for etcd_request_duration_seconds [#515](https://github.com/openshift/kubernetes/pull/515)
* BUG 1913525: UPSTREAM: 97820: handle webhook authenticator and authorizer error [#516](https://github.com/openshift/kubernetes/pull/516)
* [Bug 1908407](https://bugzilla.redhat.com/show_bug.cgi?id=1908407): UPSTREAM: 95269: Fix panic when kubelet register if a node object already exists with no Status.Capacity or Status.Allocatable [#493](https://github.com/openshift/kubernetes/pull/493)
* [Bug 1895329](https://bugzilla.redhat.com/show_bug.cgi?id=1895329): UPSTREAM: 96751: Lower the frequency of volume plugin deprecation warning [#491](https://github.com/openshift/kubernetes/pull/491)
* [Bug 1912563](https://bugzilla.redhat.com/show_bug.cgi?id=1912563): UPSTREAM: 97206: clean up executing request on panic [#509](https://github.com/openshift/kubernetes/pull/509)
* [Bug 1912563](https://bugzilla.redhat.com/show_bug.cgi?id=1912563): UPSTREAM: 97323: fix the deadlock in priority and fairness config controller [#508](https://github.com/openshift/kubernetes/pull/508)
* [Bug 1913096](https://bugzilla.redhat.com/show_bug.cgi?id=1913096): UPSTREAM: 97006: kubelet: Fix cadvisor machine metrics [#507](https://github.com/openshift/kubernetes/pull/507)
* [Bug 1908389](https://bugzilla.redhat.com/show_bug.cgi?id=1908389): UPSTREAM: 97635: Cherry pick 443 and 448 from cloud provider azure [#500](https://github.com/openshift/kubernetes/pull/500)
* [Bug 1896244](https://bugzilla.redhat.com/show_bug.cgi?id=1896244): UPSTREAM: 96467: Add GinkgoRecover to a local storage go routine [#492](https://github.com/openshift/kubernetes/pull/492)
* [Bug 1903346](https://bugzilla.redhat.com/show_bug.cgi?id=1903346): UPSTREAM: 97013: Fix FibreChannel volume plugin corrupting filesystem on detach [#489](https://github.com/openshift/kubernetes/pull/489)
* add sjenning and mrunalp to approvers and reviewers [#505](https://github.com/openshift/kubernetes/pull/505)
* [Bug 1897603](https://bugzilla.redhat.com/show_bug.cgi?id=1897603): UPSTREAM: 96673: Fix Cinder volume detection on OpenStack Train [#490](https://github.com/openshift/kubernetes/pull/490)
* Fix vendoring of shared libraries missed by 1.20 rebase. [#488](https://github.com/openshift/kubernetes/pull/488)
* [Bug 1907373](https://bugzilla.redhat.com/show_bug.cgi?id=1907373): Rebase to kube v1.20.0 [#471](https://github.com/openshift/kubernetes/pull/471)
* APF e2e: disable drown-out tests temporarily [#97075](https://github.com/openshift/kubernetes/pull/97075)
* [Bug 1770017](https://bugzilla.redhat.com/show_bug.cgi?id=1770017): kubelet: do not rerun init containers if any main containers have status [#481](https://github.com/openshift/kubernetes/pull/481)
* [Bug 1903248](https://bugzilla.redhat.com/show_bug.cgi?id=1903248): UPSTREAM: 87461: kubelet: ensure pod UIDs are unique [#474](https://github.com/openshift/kubernetes/pull/474)
* [Bug 1873114](https://bugzilla.redhat.com/show_bug.cgi?id=1873114): Nodes goes into NotReady state (VMware) [#472](https://github.com/openshift/kubernetes/pull/472)
* UPSTREAM: 94693: test/e2e: Busybox image is not being templatized [#452](https://github.com/openshift/kubernetes/pull/452)
* [Bug 1884800](https://bugzilla.redhat.com/show_bug.cgi?id=1884800): Reduce volume name length for vsphere [#461](https://github.com/openshift/kubernetes/pull/461)
* [Bug 1893972](https://bugzilla.redhat.com/show_bug.cgi?id=1893972): UPSTREAM: 96144: Skip the sig-storage e2e test as early as possible [#451](https://github.com/openshift/kubernetes/pull/451)
* UPSTREAM: <carry>: Skip "subPath should be able to unmount" NFS test [#450](https://github.com/openshift/kubernetes/pull/450)
* [Bug 1897754](https://bugzilla.redhat.com/show_bug.cgi?id=1897754): HPA: Ignore deleted pods. [#462](https://github.com/openshift/kubernetes/pull/462)
* [Bug 1893776](https://bugzilla.redhat.com/show_bug.cgi?id=1893776): UPSTREAM: 96054: Allow debugging kubelet image pull times [#460](https://github.com/openshift/kubernetes/pull/460)
* [OCPCLOUD-914](https://issues.redhat.com/browse/OCPCLOUD-914): UPSTREAM: 94526: Add vCenter info metric [#447](https://github.com/openshift/kubernetes/pull/447)
* [Bug 1877681](https://bugzilla.redhat.com/show_bug.cgi?id=1877681): UPSTREAM: 95174: Don't add empty AZ labels to OpenStack pre-provisioned PVs [#440](https://github.com/openshift/kubernetes/pull/440)
* UPSTREAM: 96571: Use the busybox shim image constant [#455](https://github.com/openshift/kubernetes/pull/455)
* scc-admission: add audit annotations with reason [#444](https://github.com/openshift/kubernetes/pull/444)
* UPSTREAM 95002: no stack on panic timeout [#456](https://github.com/openshift/kubernetes/pull/456)
* Revert "UPSTREAM: revert: <drop>: don't use dynamic tokens for KCM" [#459](https://github.com/openshift/kubernetes/pull/459)
* UPSTREAM: revert: <drop>: don't use dynamic tokens for KCM [#448](https://github.com/openshift/kubernetes/pull/448)
* [Bug 1862643](https://bugzilla.redhat.com/show_bug.cgi?id=1862643): UPSTREAM: 96120: kubelet: Expose a simple Get-WinEvent shim on the kubelet logs endpoint [#383](https://github.com/openshift/kubernetes/pull/383)
* [Bug 1870337](https://bugzilla.redhat.com/show_bug.cgi?id=1870337): UPSTREAM: 96310: PV e2e: fix race in NFS recycling test [#441](https://github.com/openshift/kubernetes/pull/441)
* UPSTREAM: <carry>: stop overriding flags that are explicitly set [#439](https://github.com/openshift/kubernetes/pull/439)
* [Bug 1887278](https://bugzilla.redhat.com/show_bug.cgi?id=1887278): UPSTREAM: 95236: vsphere: improve logging message on node cache refresh event [#432](https://github.com/openshift/kubernetes/pull/432)
* Revert "UPSTREAM: 95252: Kube-proxy: Perf-fix: Shrink INPUT chain" [#434](https://github.com/openshift/kubernetes/pull/434)
* [Bug 1816812](https://bugzilla.redhat.com/show_bug.cgi?id=1816812): Allow test images to be in a single mirror [#291](https://github.com/openshift/kubernetes/pull/291)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Rebase to 1.19.2 [#361](https://github.com/openshift/kubernetes/pull/361)
* Automated cherry pick of #94580: Fix index out of range panic for kubectl alpha debug [#94724](https://github.com/openshift/kubernetes/pull/94724)
* Automated cherry pick of #93687: kubectl describe pod: use ReportingController as an event [#94680](https://github.com/openshift/kubernetes/pull/94680)
* Automated cherry pick of #94367: Update CNI plugins to v0.8.7 [#94677](https://github.com/openshift/kubernetes/pull/94677)
* Automated cherry pick of #94481 #94639 upstream release 1.19 [#94654](https://github.com/openshift/kubernetes/pull/94654)
* Automated cherry pick of #94629: Sort list of formats for --logging-format description to make [#94632](https://github.com/openshift/kubernetes/pull/94632)
* build: Fix go-runner arch in server images [#94613](https://github.com/openshift/kubernetes/pull/94613)
* Automated cherry pick of #94287: Update default etcd server to 3.4.13 [#94536](https://github.com/openshift/kubernetes/pull/94536)
* Automated cherry pick of #93909: Update snapshot controller to use k8s.gcr.io [#94502](https://github.com/openshift/kubernetes/pull/94502)
* Automated cherry pick of #92878: cleanup: print warning message only if the function does not finish within 30 seconds [#94405](https://github.com/openshift/kubernetes/pull/94405)
* Automated cherry pick of #94506: kubeadm: remove the CoreDNS check for supported image digests [#94507](https://github.com/openshift/kubernetes/pull/94507)
* Automated cherry pick of #94204: Add impersonated user to system:authenticated group [#94408](https://github.com/openshift/kubernetes/pull/94408)
* Automated cherry pick of #94421: kubeadm: Fix `upgrade plan` for air-gapped setups [#94422](https://github.com/openshift/kubernetes/pull/94422)
* Automated cherry pick of #93773: fix(kubelet): protect `containerCleanupInfos` from concurrent map writes [#94352](https://github.com/openshift/kubernetes/pull/94352)
* Automated cherry pick of #94306: fix(azure): check error returned by scaleSet.getVMSS [#94344](https://github.com/openshift/kubernetes/pull/94344)
* Automated cherry pick of #94294: Remove duplicate nodeSelector [#94342](https://github.com/openshift/kubernetes/pull/94342)
* Automated cherry pick of #94316: Fixed reflector not recovering from "Too large resource [#94431](https://github.com/openshift/kubernetes/pull/94431)
* Automated cherry pick of #94246: Fix issue on skipTest in storage suits [#94283](https://github.com/openshift/kubernetes/pull/94283)
* Automated cherry pick of #93646: let panics propagate up when processLoop panic [#94427](https://github.com/openshift/kubernetes/pull/94427)
* Add PR #89069 Action Required to 1.19 release notes [#94264](https://github.com/openshift/kubernetes/pull/94264)
* Automated cherry pick of #94398: kubeadm: make the scheduler and KCM connect to local endpoint [#94442](https://github.com/openshift/kubernetes/pull/94442)
* Automated cherry pick of #93515: Use NLB Subnet CIDRs instead of VPC CIDRs in [#94266](https://github.com/openshift/kubernetes/pull/94266)
* [Bug 1891459](https://bugzilla.redhat.com/show_bug.cgi?id=1891459): UPSTREAM: 95867: Log PodExec stdout + stderr [#427](https://github.com/openshift/kubernetes/pull/427)
* [Bug 1884041](https://bugzilla.redhat.com/show_bug.cgi?id=1884041): UPSTREAM: 95233: Add error text to kube-system wait error [#395](https://github.com/openshift/kubernetes/pull/395)
* [Bug 1879607](https://bugzilla.redhat.com/show_bug.cgi?id=1879607): UPSTREAM: 95252: Kube-proxy: Perf-fix: Shrink INPUT chain [#425](https://github.com/openshift/kubernetes/pull/425)
* UPSTREAM: 95495: remove secondary client retries in e2e tests [#405](https://github.com/openshift/kubernetes/pull/405)
* Add component to OWNERS [#422](https://github.com/openshift/kubernetes/pull/422)
* [Bug 1889891](https://bugzilla.redhat.com/show_bug.cgi?id=1889891): UPSTREAM: 94774: Fix misusage of RLock in timeCache lru.Cache.Get() [#418](https://github.com/openshift/kubernetes/pull/418)
* [Bug 1889786](https://bugzilla.redhat.com/show_bug.cgi?id=1889786): UPSTREAM: 94712: avoid potential secret leaking while reading .dockercfg [#417](https://github.com/openshift/kubernetes/pull/417)
* [Bug 1887026](https://bugzilla.redhat.com/show_bug.cgi?id=1887026): UPSTREAM: 95451: Fix fcpath [#413](https://github.com/openshift/kubernetes/pull/413)
* [Bug 1868527](https://bugzilla.redhat.com/show_bug.cgi?id=1868527): Fix vsphere disk detach failing [#408](https://github.com/openshift/kubernetes/pull/408)
* Fix networking-related test exclusions [#382](https://github.com/openshift/kubernetes/pull/382)
* [Bug 1888041](https://bugzilla.redhat.com/show_bug.cgi?id=1888041): UPSTREAM: 95561: kubelet container status calculation doesn't handle suddenly missing data properly [#411](https://github.com/openshift/kubernetes/pull/411)
* [Bug 1888663](https://bugzilla.redhat.com/show_bug.cgi?id=1888663): wait for oauth-apiserver accessibility [#403](https://github.com/openshift/kubernetes/pull/403)
* [Bug 1887292](https://bugzilla.redhat.com/show_bug.cgi?id=1887292): UPSTREAM: 95245: Mask Ceph RBD adminSecrets in logs when logLevel >= 4 [#406](https://github.com/openshift/kubernetes/pull/406)
* [Bug 1884035](https://bugzilla.redhat.com/show_bug.cgi?id=1884035): set lastterminationstate for container status even when CRI fails to return termination (or any) data [#393](https://github.com/openshift/kubernetes/pull/393)
* [Bug 1884697](https://bugzilla.redhat.com/show_bug.cgi?id=1884697): UPSTREAM: 95261: test: e2e: fix race in pods test [#385](https://github.com/openshift/kubernetes/pull/385)
* [Bug 1874583](https://bugzilla.redhat.com/show_bug.cgi?id=1874583): fix kube-apiserver termination event(s) validation failures [#336](https://github.com/openshift/kubernetes/pull/336)
* [Bug 1848358](https://bugzilla.redhat.com/show_bug.cgi?id=1848358): Show error in status if preserve unknown fields is true for nonstructural schemas [#355](https://github.com/openshift/kubernetes/pull/355)
* [Bug 1879057](https://bugzilla.redhat.com/show_bug.cgi?id=1879057): e2e: skip write/read cache when running Block-mode RWX PVC tests [#378](https://github.com/openshift/kubernetes/pull/378)
* [Bug 1882750](https://bugzilla.redhat.com/show_bug.cgi?id=1882750): UPSTREAM: <carry>: watch-termination: avoid false positives of NonGracefulTermination events [#379](https://github.com/openshift/kubernetes/pull/379)
* [Bug 1881144](https://bugzilla.redhat.com/show_bug.cgi?id=1881144): UPSTREAM: 95003: Fail a test on pre-provisioned Cinder volume deletion error [#380](https://github.com/openshift/kubernetes/pull/380)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Stop annotating origin tests with [Suite:openshift] [#377](https://github.com/openshift/kubernetes/pull/377)
* [Bug 1883196](https://bugzilla.redhat.com/show_bug.cgi?id=1883196): kube-apiserver: silence own loopback requests before /readyz success [#376](https://github.com/openshift/kubernetes/pull/376)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Update README.openshift to reflect transition to openshift/kubernetes [#366](https://github.com/openshift/kubernetes/pull/366)
* [Bug 1879837](https://bugzilla.redhat.com/show_bug.cgi?id=1879837): UPSTREAM: 94986: drop managed fields from audit entries [#375](https://github.com/openshift/kubernetes/pull/375)
* [Bug 1882446](https://bugzilla.redhat.com/show_bug.cgi?id=1882446): Fix pre-readyz request message without ?verbose [#374](https://github.com/openshift/kubernetes/pull/374)
* [Bug 1866836](https://bugzilla.redhat.com/show_bug.cgi?id=1866836): UPSTREAM: 95009: Remove ext2 + ext3 tests [#373](https://github.com/openshift/kubernetes/pull/373)
* [Bug 1881688](https://bugzilla.redhat.com/show_bug.cgi?id=1881688): UPSTREAM: 94984: check readyz before adding endpoint for kube-apiserver [#371](https://github.com/openshift/kubernetes/pull/371)
* [Bug 1881238](https://bugzilla.redhat.com/show_bug.cgi?id=1881238): UPSTREAM: 94903: Take into account latency incurred in server filters [#365](https://github.com/openshift/kubernetes/pull/365)
* [Bug 1881225](https://bugzilla.redhat.com/show_bug.cgi?id=1881225): UPSTREAM: <carry>: apiserver: create hasBeenReadyCh channel [#368](https://github.com/openshift/kubernetes/pull/368)
* [Bug 1877793](https://bugzilla.redhat.com/show_bug.cgi?id=1877793): Force releasing the lock on exit for KS [#367](https://github.com/openshift/kubernetes/pull/367)
* [Bug 1866814](https://bugzilla.redhat.com/show_bug.cgi?id=1866814): UPSTREAM: 94773: count of etcd object should be limited to the specified resource [#357](https://github.com/openshift/kubernetes/pull/357)
* [Bug 1880363](https://bugzilla.redhat.com/show_bug.cgi?id=1880363): UPSTREAM: 94888: apiextensions: prune array type without items in published OpenAPI [#362](https://github.com/openshift/kubernetes/pull/362)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Add rebase instructions [#360](https://github.com/openshift/kubernetes/pull/360)
* [Bug 1880941](https://bugzilla.redhat.com/show_bug.cgi?id=1880941): kube-apiserver: log non-probe requests before ready [#356](https://github.com/openshift/kubernetes/pull/356)
* [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Updating openshift-hack/images/hyperkube/Dockerfile.rhel baseimages to mach ocp-build-data config [#358](https://github.com/openshift/kubernetes/pull/358)
* [Bug 1874920](https://bugzilla.redhat.com/show_bug.cgi?id=1874920): Revert "bug 1874919: UPSTREAM: 94423: debugger scheduler plugin" [#345](https://github.com/openshift/kubernetes/pull/345)
* [Bug 1880279](https://bugzilla.redhat.com/show_bug.cgi?id=1880279): [e2e] scheduling: Pod should avoid nodes that have avoidPod annotation: fail when not all pods are properly deleted [#352](https://github.com/openshift/kubernetes/pull/352)
* [Bug 1878163](https://bugzilla.redhat.com/show_bug.cgi?id=1878163): Build with golang 1.15 [#348](https://github.com/openshift/kubernetes/pull/348)
* [Bug 1877791](https://bugzilla.redhat.com/show_bug.cgi?id=1877791): Release lock on KCM and KS termination [#350](https://github.com/openshift/kubernetes/pull/350)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Commit openapi definitions [#351](https://github.com/openshift/kubernetes/pull/351)
* [Bug 1877338](https://bugzilla.redhat.com/show_bug.cgi?id=1877338): UPSTREAM: 94653: Tolerate NotFound errors when deleting snapshots [#340](https://github.com/openshift/kubernetes/pull/340)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Enable k8s-e2e-gcp-serial [#337](https://github.com/openshift/kubernetes/pull/337)
* [Bug 1867929](https://bugzilla.redhat.com/show_bug.cgi?id=1867929): Reduce offline volume expansion flake [#347](https://github.com/openshift/kubernetes/pull/347)
* [Bug 1875194](https://bugzilla.redhat.com/show_bug.cgi?id=1875194): UPSTREAM: 94609: Use namespace flag passed to RunKubectl* methods [#334](https://github.com/openshift/kubernetes/pull/334)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Commit test/e2e/generated/bindata.go [#349](https://github.com/openshift/kubernetes/pull/349)
* [Bug 1874584](https://bugzilla.redhat.com/show_bug.cgi?id=1874584): UPSTREAM: <carry>: retry etcd errors [#327](https://github.com/openshift/kubernetes/pull/327)
* [Bug 1854434](https://bugzilla.redhat.com/show_bug.cgi?id=1854434): UPSTREAM: 94112: Remove canonicalization of endpoints by endpoints controller for better comparison [#318](https://github.com/openshift/kubernetes/pull/318)
* UPSTREAM: 89885: Bug 1850149: Include / prefix in the instance ID output [#343](https://github.com/openshift/kubernetes/pull/343)
* [Bug 1877001](https://bugzilla.redhat.com/show_bug.cgi?id=1877001): UPSTREAM: 92878: cleanup: print warning message only if the function does not finish within 30 seconds [#344](https://github.com/openshift/kubernetes/pull/344)
* [Bug 1873043](https://bugzilla.redhat.com/show_bug.cgi?id=1873043): Rebase 1.19.0 [#325](https://github.com/openshift/kubernetes/pull/325)
* [Bug 1875046](https://bugzilla.redhat.com/show_bug.cgi?id=1875046): Undiagnosed panic detected in pod: openshift-kube-apiserver_kube-apiserver: runtime.go:76: invalid memory address or nil pointer dereference [#338](https://github.com/openshift/kubernetes/pull/338)
* [Bug 1867103](https://bugzilla.redhat.com/show_bug.cgi?id=1867103): UPSTREAM: 93777: e2e storage: avoid flaky test failure when watch dies [#333](https://github.com/openshift/kubernetes/pull/333)
* [Bug 1821661](https://bugzilla.redhat.com/show_bug.cgi?id=1821661): UPSTREAM: 94614: e2e: fix deployment non-unique env vars to avoid SSA error [#335](https://github.com/openshift/kubernetes/pull/335)
* [Bug 1875841](https://bugzilla.redhat.com/show_bug.cgi?id=1875841): watch-termination: fix deletion race and write non-graceful message also to termination.log [#332](https://github.com/openshift/kubernetes/pull/332)
* BUG 1875041: UPSTREAM: 94134: Make similar buckets for api and etcd request duration histogram [#331](https://github.com/openshift/kubernetes/pull/331)
* [Bug 1872080](https://bugzilla.redhat.com/show_bug.cgi?id=1872080): Updating openshift-hack/images/hyperkube/Dockerfile.rhel baseimages to mach ocp-build-data config [#321](https://github.com/openshift/kubernetes/pull/321)
* [Bug 1874919](https://bugzilla.redhat.com/show_bug.cgi?id=1874919): UPSTREAM: 94423: debugger scheduler plugin [#330](https://github.com/openshift/kubernetes/pull/330)
* [Bug 1855500](https://bugzilla.redhat.com/show_bug.cgi?id=1855500): UPSTREAM: 94204: Add impersonated user to system:authenticated group [#323](https://github.com/openshift/kubernetes/pull/323)
* BUG 1863009: vSphere provision failure on ocp46 [#319](https://github.com/openshift/kubernetes/pull/319)
* BUG 1858871: UPSTREAM: 93478: kubelet: eviction: remove unexpected output from TestGetReclaimableThreshold [#295](https://github.com/openshift/kubernetes/pull/295)
* [Bug 1868750](https://bugzilla.redhat.com/show_bug.cgi?id=1868750): UPSTREAM: <drop>: don't use dynamic tokens for KCM [#320](https://github.com/openshift/kubernetes/pull/320)
* Misc post rebase cleanup [#298](https://github.com/openshift/kubernetes/pull/298)
* Enable gcp-e2e-kubernetes job [#304](https://github.com/openshift/kubernetes/pull/304)
* UPSTREAM: <carry>: only create valid LateConnections/GracefulTermination events [#308](https://github.com/openshift/kubernetes/pull/308)
* Switch to golang 1.14 [#297](https://github.com/openshift/kubernetes/pull/297)
* UPSTREAM: <carry>: add readyz check for openshift apiserver availability [#293](https://github.com/openshift/kubernetes/pull/293)
* oauth-token-authn: switch to sha256~ prefix [#305](https://github.com/openshift/kubernetes/pull/305)
* UPSTREAM: 93658: test/e2e: fail test rather than flooding logs if PVC watch is closed prematurely [#306](https://github.com/openshift/kubernetes/pull/306)
* [Bug 1861631](https://bugzilla.redhat.com/show_bug.cgi?id=1861631): UPSTREAM: 85983: fix metrics kubelet_running_pod_count [#303](https://github.com/openshift/kubernetes/pull/303)
* UPSTREAM: <carry>: Strip unnecessary security contexts on Windows [#301](https://github.com/openshift/kubernetes/pull/301)
* UPSTREAM: 93429: e2e: examples: fix test image reference [#299](https://github.com/openshift/kubernetes/pull/299)
* Add custom resource validation for network spec [#294](https://github.com/openshift/kubernetes/pull/294)
* Reapply: UPSTREAM: <carry>: oauth-authn: support sha256 prefixed tokens [#302](https://github.com/openshift/kubernetes/pull/302)
* UPSTREAM: 93508: add permissions required by endpoints controller for blockOwnerDeletion [#300](https://github.com/openshift/kubernetes/pull/300)
* Rebase 1.19.0-rc.2 [#166](https://github.com/openshift/kubernetes/pull/166)
* one time fixup to enable branch fast forward, see issue in sig-release #1154 [#93155](https://github.com/openshift/kubernetes/pull/93155)
* UPSTREAM: <carry>: Enable timeout validator to run in kube-apiserver [#263](https://github.com/openshift/kubernetes/pull/263)
* UPSTREAM: <carry>: oauth-authn: support sha256 prefixed tokens [#208](https://github.com/openshift/kubernetes/pull/208)
* Enable build and test for master [#164](https://github.com/openshift/kubernetes/pull/164)
* UPSTREAM: <carry>: apiserver: skip local IPs and probes for LateConnections – fix race [#25290](https://github.com/openshift/kubernetes/pull/25290)
* [Bug 1847043](https://bugzilla.redhat.com/show_bug.cgi?id=1847043): UPSTREAM: 89053: migration of re-usable package from pkg/kubelet/cm/cpumanager to pkg/kubelet/cm [#25111](https://github.com/openshift/kubernetes/pull/25111)
* wires the egress proxy to the kube-aggregator [#25258](https://github.com/openshift/kubernetes/pull/25258)
* IPFamily fixes from upstream [#24963](https://github.com/openshift/kubernetes/pull/24963)
* UPSTREAM: <carry>: eliminate unnecessary closure in openshift configu… [#24967](https://github.com/openshift/kubernetes/pull/24967)
* Pick scheduler v1beta1 componentconfig API [#25203](https://github.com/openshift/kubernetes/pull/25203)
* UPSTREAM: 92197: make log output of failed healthchecks more focused [#25132](https://github.com/openshift/kubernetes/pull/25132)
* [Bug 1843319](https://bugzilla.redhat.com/show_bug.cgi?id=1843319): Fix DS expectations on recreate [#25208](https://github.com/openshift/kubernetes/pull/25208)
* UPSTREAM: <carry>: apiserver: skip local IPs for LateConnections [#25199](https://github.com/openshift/kubernetes/pull/25199)
* [Bug 1839933](https://bugzilla.redhat.com/show_bug.cgi?id=1839933): UPSTREAM: 91307: CSI: Modify VolumeAttachment check to use Informer/Cache [#25109](https://github.com/openshift/kubernetes/pull/25109)
* UPSTREAM: 89164: Fix data race issue in unit test [#25205](https://github.com/openshift/kubernetes/pull/25205)
* [Bug 1806034](https://bugzilla.redhat.com/show_bug.cgi?id=1806034): UPSTREAM: 90638: Fix race in VSphere volume provisioning [#25047](https://github.com/openshift/kubernetes/pull/25047)
* only patch authenticators when there's no webhook authenticators [#25185](https://github.com/openshift/kubernetes/pull/25185)
* [Bug 1821280](https://bugzilla.redhat.com/show_bug.cgi?id=1821280): Unable to provision vSphere volume [#25166](https://github.com/openshift/kubernetes/pull/25166)
* [Bug 1814282](https://bugzilla.redhat.com/show_bug.cgi?id=1814282): Storage e2es leaving namespaces/pods around [#24981](https://github.com/openshift/kubernetes/pull/24981)
* [Bug 1842660](https://bugzilla.redhat.com/show_bug.cgi?id=1842660): 4.6: UPSTREAM: 91748: FieldManager: Reset if we receive nil or a list with one [#25153](https://github.com/openshift/kubernetes/pull/25153)
* [Bug 1848379](https://bugzilla.redhat.com/show_bug.cgi?id=1848379): UPSTREAM: 89937: portAllocator sync local data before allocate [#25150](https://github.com/openshift/kubernetes/pull/25150)
* [Bug 1849175](https://bugzilla.redhat.com/show_bug.cgi?id=1849175): UPSTREAM: 91569: kubelet: block non-forwarded packets from crossing the localhost boundary [#25141](https://github.com/openshift/kubernetes/pull/25141)
* [Bug 1847185](https://bugzilla.redhat.com/show_bug.cgi?id=1847185): fix: GetLabelsForVolume panic issue for azure disk PV [#25121](https://github.com/openshift/kubernetes/pull/25121)
* UPSTREAM: <carry>: apiserver: log new connections during termination [#25123](https://github.com/openshift/kubernetes/pull/25123)
* UPSTREAM: 91984: genericapiserver library must wait for server.Shutdown [#25108](https://github.com/openshift/kubernetes/pull/25108)
* kube-apiserver: drain HTTP/2 early during termination [#25106](https://github.com/openshift/kubernetes/pull/25106)
* UPSTREAM: 91816: GC doesn't have to create monitors in the constructor [#25024](https://github.com/openshift/kubernetes/pull/25024)
* [Bug 1838730](https://bugzilla.redhat.com/show_bug.cgi?id=1838730): UPSTREAM: 91642: Adjust Azure e2e binding mode [#25059](https://github.com/openshift/kubernetes/pull/25059)
* UPSTREAM: 89934: Simplify the unregistration of csiplugin [#24877](https://github.com/openshift/kubernetes/pull/24877)
* [Bug 1813894](https://bugzilla.redhat.com/show_bug.cgi?id=1813894): Disable the addition of service ca to token secrets [#24956](https://github.com/openshift/kubernetes/pull/24956)
* [Bug 1824423](https://bugzilla.redhat.com/show_bug.cgi?id=1824423): Revert "UPSTREAM: <drop>: Increate timeout in volume expansion test" [#25034](https://github.com/openshift/kubernetes/pull/25034)
* Bump to kube 1.18.3 [#25015](https://github.com/openshift/kubernetes/pull/25015)
* [Bug 1765301](https://bugzilla.redhat.com/show_bug.cgi?id=1765301): UPSTREAM: 89379: deflake grace period for pod deletion in node e2e [#25008](https://github.com/openshift/kubernetes/pull/25008)
* [Bug 1825915](https://bugzilla.redhat.com/show_bug.cgi?id=1825915): UPSTREAM: 90985: Set session scanning to manual to avoid discovering all iSCSI devices during login [#25007](https://github.com/openshift/kubernetes/pull/25007)
* [Bug 1827062](https://bugzilla.redhat.com/show_bug.cgi?id=1827062): UPSTREAM: 90608: Updates the fstype of Cinder volumes to be ext4 if nil [#24990](https://github.com/openshift/kubernetes/pull/24990)
* [Bug 1827071](https://bugzilla.redhat.com/show_bug.cgi?id=1827071): UPSTREAM: 90792: Send a nicer event when resizing attached Cinder volume [#24987](https://github.com/openshift/kubernetes/pull/24987)
* [Bug 1798282](https://bugzilla.redhat.com/show_bug.cgi?id=1798282): DROP: Avoid unnecessary calls to the cloud provider [#24532](https://github.com/openshift/kubernetes/pull/24532)
* [Bug 1832641](https://bugzilla.redhat.com/show_bug.cgi?id=1832641): UPSTREAM: 90823: Service load balancers should include unschedulable nodes [#24954](https://github.com/openshift/kubernetes/pull/24954)
* [Bug 1823406](https://bugzilla.redhat.com/show_bug.cgi?id=1823406): Upstream: 89160: Remove potentially unhealthy symlink only for dead containers [#24926](https://github.com/openshift/kubernetes/pull/24926)
* Bump to kubernetes v1.18.3 [#131](https://github.com/openshift/kubernetes/pull/131)
* base-images: Use debian-base:v2.1.0 and debian-iptables:v12.1.0 (includes CVE fixes) [#90863](https://github.com/openshift/kubernetes/pull/90863)
* Automated cherry pick of #91257: Use staging-csi to work around quay.io availability [#91272](https://github.com/openshift/kubernetes/pull/91272)
* Automated cherry pick of #91184: Azure: support non-VMSS instances removal [#91198](https://github.com/openshift/kubernetes/pull/91198)
* Automated cherry pick of #90645: kubeadm: fix flakes when performing etcd MemberAdd on slower [#91080](https://github.com/openshift/kubernetes/pull/91080)
* Automated cherry pick of #90989: count no nodes scheduling failure as unschedulable instead of [#91108](https://github.com/openshift/kubernetes/pull/91108)
* base-images: Update to kube-cross:v1.13.9-5 [#90964](https://github.com/openshift/kubernetes/pull/90964)
* Automated cherry pick of #90425: fix: ACR auth fails in private azure clouds [#90478](https://github.com/openshift/kubernetes/pull/90478)
* Automated cherry pick of #90749: fix: azure disk dangling attach issue [#90786](https://github.com/openshift/kubernetes/pull/90786)
* Automated cherry pick of #90162: Fix flaws in Azure CSI translation [#90324](https://github.com/openshift/kubernetes/pull/90324)
* Move ipvs lib to third_party/forked and fix address family bug present in old kernels [#90678](https://github.com/openshift/kubernetes/pull/90678)
* Automated cherry pick of #89222: bugfix: initcontainer wasn't considered when calculate [#90378](https://github.com/openshift/kubernetes/pull/90378)
* Automated cherry pick of #90373: kube-scheduler: compatibility with ServerSideApply [#90388](https://github.com/openshift/kubernetes/pull/90388)
* [1.18 cherrypick] Check Annotations map against nil for ConfigMapLock#Update() [#89909](https://github.com/openshift/kubernetes/pull/89909)
* Automated cherry pick of #90476: fix backoff manager timer initialization race [#90495](https://github.com/openshift/kubernetes/pull/90495)
* Manual cherry pick of #89833: preserve integers decoding raw JSON values [#90019](https://github.com/openshift/kubernetes/pull/90019)
* Automated cherry pick of #90468: Restore cache-control header filter [#90470](https://github.com/openshift/kubernetes/pull/90470)
* Automated cherry pick of #88006: Unregister csiplugin even if socket path is gone #89934: Simplify unregistration of csiplugin [#90125](https://github.com/openshift/kubernetes/pull/90125)
* Automated cherry pick of #90243: Revert "stop defaulting kubeconfig to http://localhost:8080" [#90244](https://github.com/openshift/kubernetes/pull/90244)
* Automated cherry pick of #90057: Fix Node initialization for GCP cloud provider [#90181](https://github.com/openshift/kubernetes/pull/90181)
* Automated cherry pick of #89188: Move PSP tests behind a feature tag [#90120](https://github.com/openshift/kubernetes/pull/90120)
* Automated cherry pick of #89589: Wait for APIServer 'ok' forever during CSINode [#89809](https://github.com/openshift/kubernetes/pull/89809)
* Automated cherry pick of #89963: Drop round-trip annotations in HPA conversion [#89965](https://github.com/openshift/kubernetes/pull/89965)
* Automated cherry pick of #89551 upstream release 1.18 [#90016](https://github.com/openshift/kubernetes/pull/90016)
* Automated cherry pick of #89902 upstream release 1.18 [#90048](https://github.com/openshift/kubernetes/pull/90048)
* Automated cherry pick of #89908: Skip updating cache on pod update if the node was deleted [#89959](https://github.com/openshift/kubernetes/pull/89959)
* Manual cherry pick of #89652: Fix client watch reestablishment handling of client-side timeouts [#89975](https://github.com/openshift/kubernetes/pull/89975)
* Automated cherry pick of #89970: Fix priorityClass typo, add numeric priority to static pods [#89971](https://github.com/openshift/kubernetes/pull/89971)
* Automated cherry pick of #89768: fix: update max azure disk max count [#89853](https://github.com/openshift/kubernetes/pull/89853)
* Automated cherry pick of #89741: Fix permissions for endpointslice controller [#89804](https://github.com/openshift/kubernetes/pull/89804)
* Automated cherry pick of #89722: Ensure Azure availability zone is always in lower cases [#89879](https://github.com/openshift/kubernetes/pull/89879)
* Automated cherry pick of #89664: Allow list-resources.sh to continue if a resource fails to [#89789](https://github.com/openshift/kubernetes/pull/89789)
* Automated cherry pick of #89848: Fixes problem where kubectl apply stops after first error [#89864](https://github.com/openshift/kubernetes/pull/89864)
* Automated cherry pick of #89706: fix a bug where spn: prefix is unexpectedly added to [#89783](https://github.com/openshift/kubernetes/pull/89783)
* Automated cherry pick of #89794: Clean up event messages for errors. [#89796](https://github.com/openshift/kubernetes/pull/89796)
* Automated cherry pick of #85027: Fix bug about unintentional scale out during updating [#89517](https://github.com/openshift/kubernetes/pull/89517)
* Automated cherry pick of #89795: Ensure diff doesn't persist patches [#89827](https://github.com/openshift/kubernetes/pull/89827)
* Automated cherry pick of #89540: fix cpu resource metric type by changing to counter [#89606](https://github.com/openshift/kubernetes/pull/89606)
* Automated cherry pick of #89604: fix concurreny issue in lb creation [#89605](https://github.com/openshift/kubernetes/pull/89605)
* Automated cherry pick of #89602: Kubeadm: fix Ready condition check [#89603](https://github.com/openshift/kubernetes/pull/89603)
* Automated cherry pick of #89227: Label Windows test as Serial. [#89376](https://github.com/openshift/kubernetes/pull/89376)
* Automated cherry pick of #89539: Fixes problem where kubectl apply stops after first error [#89607](https://github.com/openshift/kubernetes/pull/89607)
* Automated cherry pick of #89537: kubeadm: add missing RBAC for getting nodes on "upgrade [#89577](https://github.com/openshift/kubernetes/pull/89577)
* Automated cherry pick of #88348: Check that ImageInspect pointer is not nil [#89536](https://github.com/openshift/kubernetes/pull/89536)
* Update to Golang 1.13.9 [#89398](https://github.com/openshift/kubernetes/pull/89398)
* Automated cherry pick of #89444 upstream release 1.18 [#89449](https://github.com/openshift/kubernetes/pull/89449)
* Automated cherry pick of #89401: fix kubectl port-forward for services with explicit local [#89402](https://github.com/openshift/kubernetes/pull/89402)
* Automated cherry pick of #89337: Fix the VMSS name and resource group name when updating VMSS [#89355](https://github.com/openshift/kubernetes/pull/89355)
* Automated cherry pick of #89341: bump k8s.io utils [#89343](https://github.com/openshift/kubernetes/pull/89343)
* Automated cherry pick of #89232: Use discovery to test apply all status [#89333](https://github.com/openshift/kubernetes/pull/89333)
* Automated cherry pick of #89319: Update vendored MountSensitive code for Windows [#89331](https://github.com/openshift/kubernetes/pull/89331)
* Automated cherry pick of #88987: make filteredZones order predictable [#89238](https://github.com/openshift/kubernetes/pull/89238)
* Automated cherry pick of #89236: Restore orphaning check in gc test [#89237](https://github.com/openshift/kubernetes/pull/89237)
* changelog: add changelogs for all release back due branch FF merge issue [#89124](https://github.com/openshift/kubernetes/pull/89124)
* Cleanup CHANGELOG/README.md [#88334](https://github.com/openshift/kubernetes/pull/88334)
* Update the kubelet log pod status to level 6 as it is so big [#100573](https://github.com/openshift/kubernetes/pull/100573)
* Update image base to `gcr.io/distroless/base-debian10:latest` [#100566](https://github.com/openshift/kubernetes/pull/100566)
* Add KUBE_BUILD_CONFORMANCE on package-tarballs target [#100571](https://github.com/openshift/kubernetes/pull/100571)
* Fix deployment lifecycle test issue [#100191](https://github.com/openshift/kubernetes/pull/100191)
* add a verify equivilant to prometheus visibility rules [#100552](https://github.com/openshift/kubernetes/pull/100552)
* Revert #97417 "fix azure file secret not found issue" [#100563](https://github.com/openshift/kubernetes/pull/100563)
* job controller: don't mutate shared cache object [#100553](https://github.com/openshift/kubernetes/pull/100553)
* staging/publishing: add branch-specific smoke tests [#100554](https://github.com/openshift/kubernetes/pull/100554)
* Add e2e test to validate performance metrics of volume lifecycle operations [#94334](https://github.com/openshift/kubernetes/pull/94334)
* Fix check before deleting PV in Snapshot e2e test [#100549](https://github.com/openshift/kubernetes/pull/100549)
* storage e2e: verify CSIStorageCapacity publishing [#100537](https://github.com/openshift/kubernetes/pull/100537)
* fix a data race in volume reconciler ut #99815 [#100215](https://github.com/openshift/kubernetes/pull/100215)
* Remove SELinuxOptions double setup in pod spec [#100540](https://github.com/openshift/kubernetes/pull/100540)
* Fix the wrong judgment of oom_score_adj [#100519](https://github.com/openshift/kubernetes/pull/100519)
* Prevent nil-pointer exception when constructing PrinterFlags [#100502](https://github.com/openshift/kubernetes/pull/100502)
* test/utils/image: remove listx from OWNERS [#100464](https://github.com/openshift/kubernetes/pull/100464)
* add integration test for suspended jobs [#100295](https://github.com/openshift/kubernetes/pull/100295)
* Fixed kubectl describe ingress causing SEGFAULT if API Group is not specified [#100505](https://github.com/openshift/kubernetes/pull/100505)
* add normalize function to global FlagSet [#100171](https://github.com/openshift/kubernetes/pull/100171)
* kubelet_test: Deflake TestWatchFileChanged [#99926](https://github.com/openshift/kubernetes/pull/99926)
* Fix a panic in "e2e.test --help" [#100362](https://github.com/openshift/kubernetes/pull/100362)
* Mark v1beta1 EndpointSlice deprecated in favor of v1 [#100472](https://github.com/openshift/kubernetes/pull/100472)
* apf PostStartHook: handle error from PollImmediateUntil [#100254](https://github.com/openshift/kubernetes/pull/100254)
* Fix nil ptr dereference in log line [#100465](https://github.com/openshift/kubernetes/pull/100465)
* Ensure providerless kubelet does not pull cloud providers [#100438](https://github.com/openshift/kubernetes/pull/100438)
* Add Etcd compatibility test [#99873](https://github.com/openshift/kubernetes/pull/99873)
* Fix the containerd service check to register it [#100417](https://github.com/openshift/kubernetes/pull/100417)
* webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup [#95783](https://github.com/openshift/kubernetes/pull/95783)
* Tighten DS rollout catching function [#100345](https://github.com/openshift/kubernetes/pull/100345)
* Fix structured logs for  pkg/kubelet/network/dns/dns.go [#100393](https://github.com/openshift/kubernetes/pull/100393)
* Promote EndpointSlice API test to Conformance [#100418](https://github.com/openshift/kubernetes/pull/100418)
* Speed up PV provisioning for vsphere driver [#100054](https://github.com/openshift/kubernetes/pull/100054)
* test image: bump agnhost version to 2.30 [#100410](https://github.com/openshift/kubernetes/pull/100410)
* agnhost: increase dns timeout from 5 seconds to 20 seconds [#100359](https://github.com/openshift/kubernetes/pull/100359)
* Run GCE unit tests as non-root [#100368](https://github.com/openshift/kubernetes/pull/100368)
* Add ability to skip OpenAPI handler installation [#100341](https://github.com/openshift/kubernetes/pull/100341)
* Mark kubelet structured logs as migrated [#100320](https://github.com/openshift/kubernetes/pull/100320)
* Fix E2E node reboot test flake [#100300](https://github.com/openshift/kubernetes/pull/100300)
* update dual-stack test description to remove alpha [#100189](https://github.com/openshift/kubernetes/pull/100189)
* Update busybox that includes windows nltest [#100383](https://github.com/openshift/kubernetes/pull/100383)
* add verify-e2e-test-ownership.sh [#99698](https://github.com/openshift/kubernetes/pull/99698)
* Revert "Promote SizeMemoryBackedVolumeSizing to beta" [#100346](https://github.com/openshift/kubernetes/pull/100346)
* Snapshot e2e test: wait for the node to stop using a volume before taking a snapshot [#100057](https://github.com/openshift/kubernetes/pull/100057)
* Migrate pkg/kubelet/kubelet.go to structured logging [#99861](https://github.com/openshift/kubernetes/pull/99861)
* test images: Fixes Windows busybox image [#100337](https://github.com/openshift/kubernetes/pull/100337)
* Migrate pkg/kubelet/kuberuntime to structured logging [#99970](https://github.com/openshift/kubernetes/pull/99970)
* Structured Logging migration: modify volume and container part logs o… [#98850](https://github.com/openshift/kubernetes/pull/98850)
* Promote SizeMemoryBackedVolumes to beta [#100319](https://github.com/openshift/kubernetes/pull/100319)
* logcheck: pass all packages at once to logcheck [#100246](https://github.com/openshift/kubernetes/pull/100246)
* Migrating pkg/kubelet/winstats to structured logging [#99855](https://github.com/openshift/kubernetes/pull/99855)
* Convert cmd/kubelet/app/server.go to structured logging [#98334](https://github.com/openshift/kubernetes/pull/98334)
* Structured Logging migration: modify cri  part logs of kubelet. [#99006](https://github.com/openshift/kubernetes/pull/99006)
* test images: powershell-helper linux cache [#99866](https://github.com/openshift/kubernetes/pull/99866)
* Promote ServiceStatus lifecycle e2e test to Conformance  +4 endpoint coverage [#100290](https://github.com/openshift/kubernetes/pull/100290)
* Migrate pkg/kubelet/cm/cpumanage/{topology/togit pology.go, policy_none.go, cpu_assignment.go} to structured logging [#100163](https://github.com/openshift/kubernetes/pull/100163)
* Update containerd config for gce [#99971](https://github.com/openshift/kubernetes/pull/99971)
* Migrate pkg/kubelet/kubeletconfig to structured logging [#100265](https://github.com/openshift/kubernetes/pull/100265)
* Replicate update/patch operations from eviction test in conformance CRUD test [#100260](https://github.com/openshift/kubernetes/pull/100260)
* Kubelet migration to structured logs: cpumanager/{cpu_manager.go\fake_cpu_manager.go\policy_static.go) [#100176](https://github.com/openshift/kubernetes/pull/100176)
* Migrate pkg/kubelet/cm/cgroup_manager_linux.go to structured logging [#100081](https://github.com/openshift/kubernetes/pull/100081)
* Migrate remaining pkg/kubelet/cm/ top level files to structured logging [#100007](https://github.com/openshift/kubernetes/pull/100007)
* migrate kubelet/cm/container logs to structured logging [#100001](https://github.com/openshift/kubernetes/pull/100001)
* Migrate cmd/kubelet and pkg/kubelet/cadvisor , pkg/kubelet/cri/remote/util , pkg/kubelet/images to structured logging [#99994](https://github.com/openshift/kubernetes/pull/99994)
* Migrate pkg/kubelet/cm/memorymanager to structured logging [#99974](https://github.com/openshift/kubernetes/pull/99974)
* Migrate pkg/kubelet/cm/topologymanager to structure logging [#99969](https://github.com/openshift/kubernetes/pull/99969)
* agnhost: resolve service account issuer URL before invoking oidc.NewProvider [#99860](https://github.com/openshift/kubernetes/pull/99860)
* Migrate kubelet/preemption and kubelet/logs to structured logging [#99848](https://github.com/openshift/kubernetes/pull/99848)
* Migrate pkg/kubelet/prober to structured logging [#99830](https://github.com/openshift/kubernetes/pull/99830)
* Enable scheduler_perf to support scheduler config file [#99638](https://github.com/openshift/kubernetes/pull/99638)
* Migrate pkg/kubelet/cm/cpumanager/state to structured logging [#99563](https://github.com/openshift/kubernetes/pull/99563)
* Fix kubelet log format flag error [#99289](https://github.com/openshift/kubernetes/pull/99289)
* revert removal of gcr.io/gke-release from pr #100179 [#100303](https://github.com/openshift/kubernetes/pull/100303)
* Migrate remaining logs to structured logging [#100196](https://github.com/openshift/kubernetes/pull/100196)
* kubelet: Fix the bug of getting the number of windows cpu [#97378](https://github.com/openshift/kubernetes/pull/97378)
* Add more details to daemon set test [#100310](https://github.com/openshift/kubernetes/pull/100310)
* fix scheduler queue update logic [#98829](https://github.com/openshift/kubernetes/pull/98829)
* fix cluster util.sh unbound variable [#99990](https://github.com/openshift/kubernetes/pull/99990)
* Run pause image as non-root user and group [#97963](https://github.com/openshift/kubernetes/pull/97963)
* Fix structured logging for kuberuntime_manger.go [#99999](https://github.com/openshift/kubernetes/pull/99999)
* Refactor on windows e2e storage related tests [#99888](https://github.com/openshift/kubernetes/pull/99888)
* Fix incorrect authentication latency metric [#99944](https://github.com/openshift/kubernetes/pull/99944)
* Build conformance image when building via `cross` or `cross-in-a-container` [#100251](https://github.com/openshift/kubernetes/pull/100251)
* use Patch API to add namespace label [#100199](https://github.com/openshift/kubernetes/pull/100199)
* Migrate pkg/kubelet/config to structured logging [#100002](https://github.com/openshift/kubernetes/pull/100002)
* Migrate pkg/kubelet/cm/devicemanager to structured logging [#99976](https://github.com/openshift/kubernetes/pull/99976)
* Structured Logging migration: modify node and pod part logs of kubelet. [#98847](https://github.com/openshift/kubernetes/pull/98847)
* disable flaky TestClientReceivedGOAWAY test case [#100250](https://github.com/openshift/kubernetes/pull/100250)
* Only default Job fields when feature gates are enabled [#100188](https://github.com/openshift/kubernetes/pull/100188)
* Include nltest in the windows busybox image [#99670](https://github.com/openshift/kubernetes/pull/99670)
* test: remove gcr.io/gke-release since it is deprecated [#100179](https://github.com/openshift/kubernetes/pull/100179)
* kubeadm unit test initalize global variables [#100201](https://github.com/openshift/kubernetes/pull/100201)
* remove e2e volume registry as it is not used [#100121](https://github.com/openshift/kubernetes/pull/100121)
* Split upgrade tests into sig-owned directories [#100214](https://github.com/openshift/kubernetes/pull/100214)
* initialise capabilities unit test [#100203](https://github.com/openshift/kubernetes/pull/100203)
* Update list of migrated directories [#100204](https://github.com/openshift/kubernetes/pull/100204)
* Remove double-ownership of PV ResourceQuota tests [#100173](https://github.com/openshift/kubernetes/pull/100173)
* Upgrade klog to avoid panics crashing components [#100156](https://github.com/openshift/kubernetes/pull/100156)
* e2e/common/node: tag tests with MinimumKubeletVersion [#100050](https://github.com/openshift/kubernetes/pull/100050)
* Move GPU upgrade tests to node directory [#100172](https://github.com/openshift/kubernetes/pull/100172)
* sched: fix a bug that literal 'p99' is mapped to 95th-percentile [#100193](https://github.com/openshift/kubernetes/pull/100193)
* logcheck: check Windows files [#99996](https://github.com/openshift/kubernetes/pull/99996)
* Add Probe-level terminationGracePeriodSeconds [#99375](https://github.com/openshift/kubernetes/pull/99375)
* Write to unique file to avoid conflicts with other tests [#100154](https://github.com/openshift/kubernetes/pull/100154)
* Check Kubelet is running with correct Windows Permissions [#96616](https://github.com/openshift/kubernetes/pull/96616)
* Rolling back PR 100027 [#100107](https://github.com/openshift/kubernetes/pull/100107)
* Migrate `pkg/kubelet/lifecycle,oom` to structured logging [#99479](https://github.com/openshift/kubernetes/pull/99479)
* graduate CSIServiceAccountToken to beta [#99298](https://github.com/openshift/kubernetes/pull/99298)
* migrate file kubelet_node_status.go logs to structured logging and fix error description of reconcileHugePageResource log [#98154](https://github.com/openshift/kubernetes/pull/98154)
* rename apiserver_storage_object_counts to apiserver_storage_objects [#100082](https://github.com/openshift/kubernetes/pull/100082)
* Migrate pkg/kubelet/pluginmanager to structured logging [#99885](https://github.com/openshift/kubernetes/pull/99885)
* Rename job completion index annotation to not contain alpha [#100147](https://github.com/openshift/kubernetes/pull/100147)
* Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY [#99592](https://github.com/openshift/kubernetes/pull/99592)
* Further refactoring of upgrade tests and removal of etcd upgrade tests which isn't even run [#100137](https://github.com/openshift/kubernetes/pull/100137)
* sched: fix a bug that metrics of init or collected pods are re-collected [#99472](https://github.com/openshift/kubernetes/pull/99472)
* Add GLBC roles for IngressClass & GCPIngressParams [#99965](https://github.com/openshift/kubernetes/pull/99965)
* Introduce a churnOp to scheduler perf testing framework [#98900](https://github.com/openshift/kubernetes/pull/98900)
* e2e fix: loosen newTestResourceQuota to 10 configmaps [#100056](https://github.com/openshift/kubernetes/pull/100056)
* Split upgrade tests logic to generic and provider-specific [#100030](https://github.com/openshift/kubernetes/pull/100030)
* Add Extract support to client-go apply builders [#99759](https://github.com/openshift/kubernetes/pull/99759)
* Network Tests: bind host network udp listeners to hostIPs [#98884](https://github.com/openshift/kubernetes/pull/98884)
* Revert SSA GA [#100108](https://github.com/openshift/kubernetes/pull/100108)
* Updating EndpointSlice controllers to avoid duplicate creations [#100103](https://github.com/openshift/kubernetes/pull/100103)
* Remove retry in TestSubresourcePatch [#100099](https://github.com/openshift/kubernetes/pull/100099)
* Promote PDB CRUD e2e tests to conformance [#100092](https://github.com/openshift/kubernetes/pull/100092)
* delegated authn: allow client CA override based on non-empty opts [#100055](https://github.com/openshift/kubernetes/pull/100055)
* Ensure only one LoadBalancer rule is created when HA mode is enabled [#99825](https://github.com/openshift/kubernetes/pull/99825)
* Update to go1.16.1 [#100106](https://github.com/openshift/kubernetes/pull/100106)
* Fix staticcheck in test/integration/{garbagecollector,scheduler_perf} [#97779](https://github.com/openshift/kubernetes/pull/97779)
* Moving docker options to daemon.json [#95655](https://github.com/openshift/kubernetes/pull/95655)
* (integration) adjust the test's client-side detection of a successful timeout case to include the connection reset [#98797](https://github.com/openshift/kubernetes/pull/98797)
* Get filesystem stats for files on Windows [#99221](https://github.com/openshift/kubernetes/pull/99221)
* add ineligible_endpoints.yaml [#98677](https://github.com/openshift/kubernetes/pull/98677)
* support additional WHAT= when building release-images / quick-release… [#100046](https://github.com/openshift/kubernetes/pull/100046)
* Add Endpoint Slice API Test [#100045](https://github.com/openshift/kubernetes/pull/100045)
* For LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP [#99958](https://github.com/openshift/kubernetes/pull/99958)
* kubectl default container behavior [#99833](https://github.com/openshift/kubernetes/pull/99833)
* Server-Side Apply status wiping [#99661](https://github.com/openshift/kubernetes/pull/99661)
* Promote SSA to GA [#99652](https://github.com/openshift/kubernetes/pull/99652)
* (KEP-2436) implementation of leader migration for controller manager. [#96541](https://github.com/openshift/kubernetes/pull/96541)
* Revert : conformance: promote container exec probe timeout tests [#100036](https://github.com/openshift/kubernetes/pull/100036)
* move nodeaffinity helpers to component-helpers package (only impact s… [#100034](https://github.com/openshift/kubernetes/pull/100034)
* Add Windows Defender exclusion for unpigz.exe [#100029](https://github.com/openshift/kubernetes/pull/100029)
* fix flake integration test endpoint slice mirroring updates [#100027](https://github.com/openshift/kubernetes/pull/100027)
* add duration encoder to structured logger [#100013](https://github.com/openshift/kubernetes/pull/100013)
* generic ephemeral volume beta [#99643](https://github.com/openshift/kubernetes/pull/99643)
* Remove --ignore-errors flag deprecated warning message [#99396](https://github.com/openshift/kubernetes/pull/99396)
* postpone ExecProbeTimeout locking for at least 1 release based on use… [#100023](https://github.com/openshift/kubernetes/pull/100023)
* Add kubectl describe for policy/v1 PDB [#100014](https://github.com/openshift/kubernetes/pull/100014)
* Adding new EndpointsOverCapacity annotation for Endpoints controller [#99975](https://github.com/openshift/kubernetes/pull/99975)
* provide directly decodable versions for storageversion API [#99951](https://github.com/openshift/kubernetes/pull/99951)
* refine validation [#99946](https://github.com/openshift/kubernetes/pull/99946)
* Fix completed indexed job with repeated indexes [#99865](https://github.com/openshift/kubernetes/pull/99865)
* Make sure the GMSA output doesn't have failures when resolving the domain [#99862](https://github.com/openshift/kubernetes/pull/99862)
* Change KUBE_PARALLEL_BUILD_MEMORY to 20 GiB [#99773](https://github.com/openshift/kubernetes/pull/99773)
* Count pod overhead against an entity's ResourceQuota [#99600](https://github.com/openshift/kubernetes/pull/99600)
* feature: add CSIVolumeHealth feature and gate [#99284](https://github.com/openshift/kubernetes/pull/99284)
* Fixed set env did not support keys with dot in it [#98846](https://github.com/openshift/kubernetes/pull/98846)
* ServerSideApply E2E tests [#98034](https://github.com/openshift/kubernetes/pull/98034)
* don't delete pod from desiredStateOfWorld when pod's sandbox is running [#97659](https://github.com/openshift/kubernetes/pull/97659)
* Transfer ownership of logging analysis configuration to sig-security. [#97168](https://github.com/openshift/kubernetes/pull/97168)
* Promote PodDisruptionBudget e2e test to Conformance [#84740](https://github.com/openshift/kubernetes/pull/84740)
* podresources APIs: concrete resources apis: implement GetAllocatableResources [#95734](https://github.com/openshift/kubernetes/pull/95734)
* Scheduler/plugins/nodelabel fix no label preference [#99995](https://github.com/openshift/kubernetes/pull/99995)
* Refactor upgrade tests in preparation for explicit ownership [#99992](https://github.com/openshift/kubernetes/pull/99992)
* Fix batch/v1 CronJob support in create, describe and polymorphichelpers [#99991](https://github.com/openshift/kubernetes/pull/99991)
* vendor: cAdvisor v0.39.0 [#99875](https://github.com/openshift/kubernetes/pull/99875)
* metrics: etcd_object_counts->apiserver_storage_object_counts(stable) [#99785](https://github.com/openshift/kubernetes/pull/99785)
* Scheduler: make parallelism as part of schedulerOptions [#99644](https://github.com/openshift/kubernetes/pull/99644)
* Migrate cluster role aggregator to apply [#99462](https://github.com/openshift/kubernetes/pull/99462)
* fix: use pv annotation to trigger filesystem resize when necessary [#99326](https://github.com/openshift/kubernetes/pull/99326)
* Promote PodDisruptionBudget to policy/v1 [#99290](https://github.com/openshift/kubernetes/pull/99290)
* Pass cpuset.mems to the dockershim during container creation [#100006](https://github.com/openshift/kubernetes/pull/100006)
* Enable, rate limit, and test APF controller fights [#99935](https://github.com/openshift/kubernetes/pull/99935)
* Log invalid scheduler-policy input instead of panic [#99671](https://github.com/openshift/kubernetes/pull/99671)
* Adding support for Topology Aware Hints [#99522](https://github.com/openshift/kubernetes/pull/99522)
* Relax csiNodeIDMaxLength to longer limit [#98753](https://github.com/openshift/kubernetes/pull/98753)
* Fix case of Age column in kubectl describe node [#96963](https://github.com/openshift/kubernetes/pull/96963)
* remove unused third_party/intemp [#99980](https://github.com/openshift/kubernetes/pull/99980)
* Move test specific option setting to the test file [#99297](https://github.com/openshift/kubernetes/pull/99297)
* network: Self nominate cmluciano approver for sig-network [#98191](https://github.com/openshift/kubernetes/pull/98191)
* Refactor CSI migration plugin manager to get featureGates as a parameter [#99942](https://github.com/openshift/kubernetes/pull/99942)
* Move ownership of core events test to sig-instrumentation [#99495](https://github.com/openshift/kubernetes/pull/99495)
* fix json log format panic, change the flag name in flagIsSet [#99257](https://github.com/openshift/kubernetes/pull/99257)
* Make proxy Transport return metav1.Status error [#98841](https://github.com/openshift/kubernetes/pull/98841)
* enable goaway testcases [#98809](https://github.com/openshift/kubernetes/pull/98809)
* Migrate prober.probe logs to structured logging [#97093](https://github.com/openshift/kubernetes/pull/97093)
* Cleanup: Provides capacity for make slice [#98635](https://github.com/openshift/kubernetes/pull/98635)
* Capture logs from containerd-installation service [#99912](https://github.com/openshift/kubernetes/pull/99912)
* Add jingxu97 to volumemanager owner [#99620](https://github.com/openshift/kubernetes/pull/99620)
* kubelet: migrate pkg/kubelet/cloudresource to structured logging [#98999](https://github.com/openshift/kubernetes/pull/98999)
* Apply context to restclient and serviceaccount metrics [#98973](https://github.com/openshift/kubernetes/pull/98973)
* Move credential provider code to staging/ [#95775](https://github.com/openshift/kubernetes/pull/95775)
* Promote Endpoint Slice E2E Tests to Conformance [#99916](https://github.com/openshift/kubernetes/pull/99916)
* add if check for number of scheduled pods to be greater than 0 [#99844](https://github.com/openshift/kubernetes/pull/99844)
* dockershim: fix started and finished timestamp of the container status [#99585](https://github.com/openshift/kubernetes/pull/99585)
* Upgrade kustomize-in-kubectl to v4.0.5 [#98946](https://github.com/openshift/kubernetes/pull/98946)
* slice mirroring controller should mirror annotations (but endpoints.kubernetes.io/last-change-trigger-time annotation) and labels [#98116](https://github.com/openshift/kubernetes/pull/98116)
* Add v1 describers for EndpointSlice [#99962](https://github.com/openshift/kubernetes/pull/99962)
* switch most e2e tests to storage/v1 over v1beta1 [#99954](https://github.com/openshift/kubernetes/pull/99954)
* Promote ReplicaSet Replace and Patch Test +2 Endpoints [#99952](https://github.com/openshift/kubernetes/pull/99952)
* implement EnqueueExtensions interface in noderesources [#99922](https://github.com/openshift/kubernetes/pull/99922)
* Replace klog with with testing.T logging in pkg/kubelet tests [#99859](https://github.com/openshift/kubernetes/pull/99859)
* Stop using SIGDescribe for upgrade tests to reflect reality [#99857](https://github.com/openshift/kubernetes/pull/99857)
* Cleanup the remaining multi-owned sig-node tests [#99853](https://github.com/openshift/kubernetes/pull/99853)
* Cleanup test/e2e/upgrades directory [#99852](https://github.com/openshift/kubernetes/pull/99852)
* Migrate pkg/kubelet/status to structured logging [#99836](https://github.com/openshift/kubernetes/pull/99836)
* cleanup: wrap the apiserver identity validation [#99573](https://github.com/openshift/kubernetes/pull/99573)
* Migrate pkg/kubelet/token to structured logging [#99264](https://github.com/openshift/kubernetes/pull/99264)
* skip checking nodeport on external addrs in conformance tests [#98791](https://github.com/openshift/kubernetes/pull/98791)
* Enabling runtime config on E2E node tests [#99960](https://github.com/openshift/kubernetes/pull/99960)
* Adding dims as approver for test/ [#99941](https://github.com/openshift/kubernetes/pull/99941)
* Migrate pkg/kubelet/kuberuntime/kuberuntime_manager.go to structured logging [#99841](https://github.com/openshift/kubernetes/pull/99841)
* Migrate pkg/kubelet/server to structured logging [#99838](https://github.com/openshift/kubernetes/pull/99838)
* Migrate pkg/kubelet/util to structured logging [#99823](https://github.com/openshift/kubernetes/pull/99823)
* Refactor pods format to return ObjRef slice [#99799](https://github.com/openshift/kubernetes/pull/99799)
* Use the correct volum handle format for GCE regional PD. [#99169](https://github.com/openshift/kubernetes/pull/99169)
* batch API: add suspended job [#98727](https://github.com/openshift/kubernetes/pull/98727)
* CSIStorageCapacity beta API [#99641](https://github.com/openshift/kubernetes/pull/99641)
* Mark openstack/cinder csi migrations as GA [#98538](https://github.com/openshift/kubernetes/pull/98538)
* Add integration test for disabled ephemeral containers [#98067](https://github.com/openshift/kubernetes/pull/98067)
* Revert "Revert "fix a bug where only service with less than 100 ports can have GCE lo… [#99858](https://github.com/openshift/kubernetes/pull/99858)
* update cluster/dns/coredns to 1.8.0 as kubeadm [#99752](https://github.com/openshift/kubernetes/pull/99752)
* Move CRIContainerLogRotation to GA [#99651](https://github.com/openshift/kubernetes/pull/99651)
* Use %w instead of %v to format errors [#99389](https://github.com/openshift/kubernetes/pull/99389)
* promote apiserver_request_duration_seconds to STABLE [#99925](https://github.com/openshift/kubernetes/pull/99925)
* test: err more towards ignoring logs from terminated pods [#99204](https://github.com/openshift/kubernetes/pull/99204)
* fix race condition problem in streamwatcher [#98653](https://github.com/openshift/kubernetes/pull/98653)
* Service Internal Traffic Policy [#96600](https://github.com/openshift/kubernetes/pull/96600)
* update agnhost readme [#99939](https://github.com/openshift/kubernetes/pull/99939)
* Move VolumeBinding plugin args validation to apis/config/validation [#99835](https://github.com/openshift/kubernetes/pull/99835)
* remove more CRD v1beta1 client dependencies from test integration [#99800](https://github.com/openshift/kubernetes/pull/99800)
* promote AllowInsecureBackendProxy to stable [#99658](https://github.com/openshift/kubernetes/pull/99658)
* reduce configmap and secret watch of kubelet [#99393](https://github.com/openshift/kubernetes/pull/99393)
* Update controlplane to use EndpointSlice V1 API [#99879](https://github.com/openshift/kubernetes/pull/99879)
* Support specifying more than 5 ports in L4 ILB service [#99595](https://github.com/openshift/kubernetes/pull/99595)
* Deflake TestPrepareRun [#99908](https://github.com/openshift/kubernetes/pull/99908)
* Add discovery and flowcontrol compatibility API data [#99871](https://github.com/openshift/kubernetes/pull/99871)
* add operator for allocateMemory.available signal [#97493](https://github.com/openshift/kubernetes/pull/97493)
* cleanup more bazel references [#99923](https://github.com/openshift/kubernetes/pull/99923)
* Revert "Surface more information about plugin scores in scheduler" [#99914](https://github.com/openshift/kubernetes/pull/99914)
* PSP ephemeral volume validation [#98918](https://github.com/openshift/kubernetes/pull/98918)
* cleanup bazel build files in-tree with make clean [#99882](https://github.com/openshift/kubernetes/pull/99882)
* kubectl explain: detect resource group in case there are two or more groups discovered [#91295](https://github.com/openshift/kubernetes/pull/91295)
* kubeadm: add missing toleration for upgrade health check [#99904](https://github.com/openshift/kubernetes/pull/99904)
* update verify-shellcheck to v0.7.1, fix nits, multi-arch digest pinning, fix new lint errors [#99905](https://github.com/openshift/kubernetes/pull/99905)
* Add Apply to client-go's typed client [#99214](https://github.com/openshift/kubernetes/pull/99214)
* Reset managedFields corrupted by admission controllers [#98074](https://github.com/openshift/kubernetes/pull/98074)
* Graduate EndpointSlice Controllers to GA [#99870](https://github.com/openshift/kubernetes/pull/99870)
* Add test timeout to mutation detector test [#99907](https://github.com/openshift/kubernetes/pull/99907)
* fix gosimple lint check [#99890](https://github.com/openshift/kubernetes/pull/99890)
* image util unbound variable [#99889](https://github.com/openshift/kubernetes/pull/99889)
* Drop deprecated run flags and deprecate unused ones [#99732](https://github.com/openshift/kubernetes/pull/99732)
* Graduate EndpointSlice API to GA [#99662](https://github.com/openshift/kubernetes/pull/99662)
* Add namespace scoped ParametersReference to IngressClass [#99275](https://github.com/openshift/kubernetes/pull/99275)
* Promote cronjob e2es to conformance [#99851](https://github.com/openshift/kubernetes/pull/99851)
* fix wrong NumCPU in kube-proxy under static CPU policy [#99613](https://github.com/openshift/kubernetes/pull/99613)
* Update flaky volume toleration regex to include projected volumes [#99898](https://github.com/openshift/kubernetes/pull/99898)
* Add golang env setup to node e2e [#99874](https://github.com/openshift/kubernetes/pull/99874)
* Update kube-addon-manager to v9.1.4 [#99822](https://github.com/openshift/kubernetes/pull/99822)
* Merge tests for getPodsForJob [#99806](https://github.com/openshift/kubernetes/pull/99806)
* Simplify cronjob v2 controller tests [#99791](https://github.com/openshift/kubernetes/pull/99791)
* promote apiserver_request_total to STABLE status [#99788](https://github.com/openshift/kubernetes/pull/99788)
* Update gce Containerd initialization to handle the runtime existence case [#99742](https://github.com/openshift/kubernetes/pull/99742)
* Clean unused generators [#99733](https://github.com/openshift/kubernetes/pull/99733)
* Make runtime.NewFramework accept KubeSchedulerProfile [#99731](https://github.com/openshift/kubernetes/pull/99731)
* remove listx from OWNERS [#99718](https://github.com/openshift/kubernetes/pull/99718)
* Make all health checks probing consistent [#98376](https://github.com/openshift/kubernetes/pull/98376)
* e2e testing for hugepages downward api [#99612](https://github.com/openshift/kubernetes/pull/99612)
* Logarithmic timestamp comparison for downscaling [#99212](https://github.com/openshift/kubernetes/pull/99212)
* DaemonSet controller respects MaxSurge during update [#96441](https://github.com/openshift/kubernetes/pull/96441)
* Switch to batch/v1 in cronjob's e2es [#99197](https://github.com/openshift/kubernetes/pull/99197)
* Use protobuf for kubectl top [#96655](https://github.com/openshift/kubernetes/pull/96655)
* Add tool to check use of unstructured logs [#99090](https://github.com/openshift/kubernetes/pull/99090)
* Agnhost: make it possible to pass the addresses to listen on for udp [#98883](https://github.com/openshift/kubernetes/pull/98883)
* Add request value verification for hugepage [#98515](https://github.com/openshift/kubernetes/pull/98515)
* Optimization log: add containerName to log [#96973](https://github.com/openshift/kubernetes/pull/96973)
* Get Windows Process time correctly [#97491](https://github.com/openshift/kubernetes/pull/97491)
* Promote kubelet graceful node shutdown to beta [#99735](https://github.com/openshift/kubernetes/pull/99735)
* Prioritizing nodes based on volume capacity [#96347](https://github.com/openshift/kubernetes/pull/96347)
* migrate proxy/userspace/proxier.go logs to structured logging [#97837](https://github.com/openshift/kubernetes/pull/97837)
* Fix flake #99821: reduce fuzz runs 50 to 3 per apply config type [#99847](https://github.com/openshift/kubernetes/pull/99847)
* kubectl: exec and attach break scripting and should honor `--quiet` [#99004](https://github.com/openshift/kubernetes/pull/99004)
* Re-clarify NetworkPolicy policyTypes in docs [#97216](https://github.com/openshift/kubernetes/pull/97216)
* Tag storage windows tests with [Feature:Windows] instead of [sig-windows] [#99701](https://github.com/openshift/kubernetes/pull/99701)
* new kube-proxy iptables metric to expose then number of iptables rules [#99653](https://github.com/openshift/kubernetes/pull/99653)
* Switch cronjob controller to batch/v1 [#99423](https://github.com/openshift/kubernetes/pull/99423)
* Revert "fix a bug where only service with less than 100 ports can hav… [#99837](https://github.com/openshift/kubernetes/pull/99837)
* Fix zero-value custom resource validation with go1.16 [#99817](https://github.com/openshift/kubernetes/pull/99817)
* Windows: Fixes /etc/hosts file mounting support for containerd [#83730](https://github.com/openshift/kubernetes/pull/83730)
* Scheduler: remove direct dependency for k8s.io/kubernetes/pkg/util/node [#97818](https://github.com/openshift/kubernetes/pull/97818)
* Unify determination of whether a volume is ephemeral [#78648](https://github.com/openshift/kubernetes/pull/78648)
* fix staticcheck for k8s.io/apiserver/pkg/endpoints [#99525](https://github.com/openshift/kubernetes/pull/99525)
* remove duplicate default message for some flag [#99248](https://github.com/openshift/kubernetes/pull/99248)
* Add LoadBalancerClass field in service [#98277](https://github.com/openshift/kubernetes/pull/98277)
* Add conditions to PDB status [#98127](https://github.com/openshift/kubernetes/pull/98127)
* update node local dns to 1.17.0 for IPv6 support/hosts/trace plugins [#99749](https://github.com/openshift/kubernetes/pull/99749)
* fix a bug where only service with less than 100 ports can have GCE LB [#99743](https://github.com/openshift/kubernetes/pull/99743)
* tests: Uses newly promoted httpd and nginx images [#99703](https://github.com/openshift/kubernetes/pull/99703)
* Update Staging's README.md [#99456](https://github.com/openshift/kubernetes/pull/99456)
* fix kubectl patch command error message [#98749](https://github.com/openshift/kubernetes/pull/98749)
* banish .shellcheck_failures [#99816](https://github.com/openshift/kubernetes/pull/99816)
* disable colors in zeitgeist so as not to break shell2junit [#99810](https://github.com/openshift/kubernetes/pull/99810)
* Fix the image path of resource-consumer in README. [#99797](https://github.com/openshift/kubernetes/pull/99797)
* Fix or remove tests that don't work in race mode [#99782](https://github.com/openshift/kubernetes/pull/99782)
* Remove unused field in test/e2e/kubectl/kubectl.go [#99293](https://github.com/openshift/kubernetes/pull/99293)
* kubelet: Make the test fail if (*FakeRuntime).Assert fails [#98986](https://github.com/openshift/kubernetes/pull/98986)
* Condition is always 'false' because 'err' is always 'nil' in top_pod.go [#98590](https://github.com/openshift/kubernetes/pull/98590)
* Calico: set IP=autodetect so preempted nodes learn new IP [#97037](https://github.com/openshift/kubernetes/pull/97037)
* Fixes to node shutdown e2e test [#99805](https://github.com/openshift/kubernetes/pull/99805)
* Make podIPs order match node IP family preference [#97979](https://github.com/openshift/kubernetes/pull/97979)
* Test for removal of invalid and repeated indexes [#99789](https://github.com/openshift/kubernetes/pull/99789)
* Integration and e2e tests for Indexed job [#99737](https://github.com/openshift/kubernetes/pull/99737)
* : Remove the deprecated kube-dns as an option in kubeadm [#99646](https://github.com/openshift/kubernetes/pull/99646)
* Scheduler: remove outdated TODO in node_affinity.go [#99523](https://github.com/openshift/kubernetes/pull/99523)
* Apply Builders for client-go's typed client [#99012](https://github.com/openshift/kubernetes/pull/99012)
* Remove extensions v1beta1 from addon manager and kubectl prune [#98806](https://github.com/openshift/kubernetes/pull/98806)
* Fix cgroup handling for systemd with cgroup v2 [#98365](https://github.com/openshift/kubernetes/pull/98365)
* Write Service Status Life Cycle test - +4 endpoint coverage [#98018](https://github.com/openshift/kubernetes/pull/98018)
* Mark ingress neg test as flaky [#99798](https://github.com/openshift/kubernetes/pull/99798)
* Remove EndpointSliceNodeName feature gate logic [#99796](https://github.com/openshift/kubernetes/pull/99796)
* Increasing maximum number of ports allowed in EndpointSlice [#99795](https://github.com/openshift/kubernetes/pull/99795)
* Graduating WindowsEndpointSliceProxying feature gate to beta [#99794](https://github.com/openshift/kubernetes/pull/99794)
* Repair quotes for some Windows log messages [#99793](https://github.com/openshift/kubernetes/pull/99793)
* add myself to owners for etcd metrics [#99792](https://github.com/openshift/kubernetes/pull/99792)
* Updating EndpointSliceMirroring controller to wait for cache to be updated [#99756](https://github.com/openshift/kubernetes/pull/99756)
* Clean up OWNERS for pkg/probe [#99665](https://github.com/openshift/kubernetes/pull/99665)
* Surface more information about plugin scores in scheduler [#99411](https://github.com/openshift/kubernetes/pull/99411)
* Structured Logging migration: modify eviction  part logs of kubelet. [#99032](https://github.com/openshift/kubernetes/pull/99032)
* kubelet: migrate pkg/kubelet/certificate to structured logging [#98993](https://github.com/openshift/kubernetes/pull/98993)
* Switch add-on manager to use lease for leader election [#98968](https://github.com/openshift/kubernetes/pull/98968)
* Avoid sending events for every non-conformant pod in disruption controller [#98128](https://github.com/openshift/kubernetes/pull/98128)
* Avoid logging headers from kubelet configuration [#97000](https://github.com/openshift/kubernetes/pull/97000)
* Add unit tests for kubelet cadvisor_linux [#95661](https://github.com/openshift/kubernetes/pull/95661)
* Optimize and parallelize LoadBalancer Host update [#98774](https://github.com/openshift/kubernetes/pull/98774)
* Incrementing EndpointSlice generation when labels change [#99750](https://github.com/openshift/kubernetes/pull/99750)
* add descriptions to these event/types.go files [#99681](https://github.com/openshift/kubernetes/pull/99681)
* PVC protection controller: clarify pod shutdown [#99626](https://github.com/openshift/kubernetes/pull/99626)
* e2e node: fix hugepages test flakiness [#99584](https://github.com/openshift/kubernetes/pull/99584)
* kubeadm: set the kubelet cgroup driver to "systemd" during "init" [#99471](https://github.com/openshift/kubernetes/pull/99471)
* Generic ephemeral volume enablement [#99446](https://github.com/openshift/kubernetes/pull/99446)
* Fix typo in util.go [#99439](https://github.com/openshift/kubernetes/pull/99439)
* Fix staging/src/k8s.io/apiserver/pkg/server/filters flake test timeout [#99344](https://github.com/openshift/kubernetes/pull/99344)
* Add labels for SIG storage components [#98673](https://github.com/openshift/kubernetes/pull/98673)
* fix RemoveStatusCondition()  cap out of range [#99755](https://github.com/openshift/kubernetes/pull/99755)
* remove duplicate kubectl logs [#99633](https://github.com/openshift/kubernetes/pull/99633)
* Implements NamespaceSelector for pod affinity [#98446](https://github.com/openshift/kubernetes/pull/98446)
* Add warning if client/server version difference exceeds the supported skew [#98250](https://github.com/openshift/kubernetes/pull/98250)
* Cache the OpenAPI schema for kubectl server-side dry run [#98194](https://github.com/openshift/kubernetes/pull/98194)
* modify the TestController2_updateCronJob test method description [#99614](https://github.com/openshift/kubernetes/pull/99614)
* add test/conformance/gen-conformance-docs.sh [#99558](https://github.com/openshift/kubernetes/pull/99558)
* Use a versioner to convert an internal type into an external type for beta serving [#99362](https://github.com/openshift/kubernetes/pull/99362)
* clean usage of admissionregistration/v1beta1 from integration tests [#99736](https://github.com/openshift/kubernetes/pull/99736)
* Fix MakeRegexpArray handling empty strings [#99617](https://github.com/openshift/kubernetes/pull/99617)
* Store a cluster event to plugin map in SchedulerQueue [#98241](https://github.com/openshift/kubernetes/pull/98241)
* Support M1 MacBooks darwin/arm64 on the client-side [#97743](https://github.com/openshift/kubernetes/pull/97743)
* Graduate EndpointSliceNodeName feature gate to GA [#99746](https://github.com/openshift/kubernetes/pull/99746)
* Update client-go install instructions [#99741](https://github.com/openshift/kubernetes/pull/99741)
* Fix hack/update-vendor.sh to not warn on xargs [#99724](https://github.com/openshift/kubernetes/pull/99724)
* Remove KubeDescribe [#99700](https://github.com/openshift/kubernetes/pull/99700)
* volume binder: storage capacity enablement [#99632](https://github.com/openshift/kubernetes/pull/99632)
* hpa: Don't scale down if at least one metric was invalid [#99514](https://github.com/openshift/kubernetes/pull/99514)
* Enforce metric cardinality check to Gauge, Histogram and Summary metric [#99738](https://github.com/openshift/kubernetes/pull/99738)
* Promote Cinder topology labels to GA [#99719](https://github.com/openshift/kubernetes/pull/99719)
* Remove nested SIGDescribe calls [#99710](https://github.com/openshift/kubernetes/pull/99710)
* Make sig-storage be the owner of ubernetes_lite_volumes test [#99709](https://github.com/openshift/kubernetes/pull/99709)
* [cluster/gce] Target the correct project while adding kubeconfig metadata to the master [#99691](https://github.com/openshift/kubernetes/pull/99691)
* cleanup: disable dual stack for some manifest UT [#99687](https://github.com/openshift/kubernetes/pull/99687)
* Remove useless pluginConfigs in scheduling framework testing helpers [#99676](https://github.com/openshift/kubernetes/pull/99676)
* Add dougsland and rikatz as sig-cli reviewers [#99666](https://github.com/openshift/kubernetes/pull/99666)
* increase discovery burst for kube-controller-manager [#99660](https://github.com/openshift/kubernetes/pull/99660)
* remove csr v1beta1 usage in integration tests [#99657](https://github.com/openshift/kubernetes/pull/99657)
* Migrate pkg/kubelet/stats to structured logging [#99607](https://github.com/openshift/kubernetes/pull/99607)
* exec credential provider: add rest_client_exec_plugin_call_total metric [#98892](https://github.com/openshift/kubernetes/pull/98892)
* deprecate audit.k8s.io/v1[alpha|beta]1 versions [#98858](https://github.com/openshift/kubernetes/pull/98858)
* Implements CrossNamespacePodAffinity quota scope [#98582](https://github.com/openshift/kubernetes/pull/98582)
* kubeadm: exclude control plane nodes from external LBs [#98269](https://github.com/openshift/kubernetes/pull/98269)
* Migrate deployment controller log messages to structured logging [#97507](https://github.com/openshift/kubernetes/pull/97507)
* Cleanup test/e2e/common directory - part2 [#99684](https://github.com/openshift/kubernetes/pull/99684)
* Update go version check to 1.16+ [#99655](https://github.com/openshift/kubernetes/pull/99655)
* Fix issue in checking domain socket for plugin watcher [#99723](https://github.com/openshift/kubernetes/pull/99723)
* Indexed job implementation [#98812](https://github.com/openshift/kubernetes/pull/98812)
* Log detailed service information during GCE Windows node startup [#99659](https://github.com/openshift/kubernetes/pull/99659)
* exec credential provider: use stdin to detect user interaction [#99654](https://github.com/openshift/kubernetes/pull/99654)
* Improve warnings for default-container [#99649](https://github.com/openshift/kubernetes/pull/99649)
* Two small bugs in dual-stack init [#99555](https://github.com/openshift/kubernetes/pull/99555)
* Number of sockets is assumed to be same as NUMA nodes in kubelet [#99464](https://github.com/openshift/kubernetes/pull/99464)
* Clarify external CSR signerName field description [#99444](https://github.com/openshift/kubernetes/pull/99444)
* Update inline volume spec comments [#99414](https://github.com/openshift/kubernetes/pull/99414)
* cinder: Translate CSI topology affinity into in-tree labels [#99367](https://github.com/openshift/kubernetes/pull/99367)
* Adds ineffassign to GO linter script. [#99288](https://github.com/openshift/kubernetes/pull/99288)
* Kubectl command headers in requests: KEP 859 [#98952](https://github.com/openshift/kubernetes/pull/98952)
* networking nodeipam UT: set node poll interval to 1s in UT [#98756](https://github.com/openshift/kubernetes/pull/98756)
* sped up scheduler tests by using fake clock [#98595](https://github.com/openshift/kubernetes/pull/98595)
* Add Indexed completionMode to Job API [#98441](https://github.com/openshift/kubernetes/pull/98441)
* Fix flag passing in CCM [#98210](https://github.com/openshift/kubernetes/pull/98210)
* Nit: Remove unnecessary type conversion [#97881](https://github.com/openshift/kubernetes/pull/97881)
* e2e storage: embedded csi mock driver [#97069](https://github.com/openshift/kubernetes/pull/97069)
* stop using CRD v1beta1 in tests [#99101](https://github.com/openshift/kubernetes/pull/99101)
* hack/tools: Update zeitgeist to v0.2.0 to drop import cycle [#99679](https://github.com/openshift/kubernetes/pull/99679)
* Structured Logging migration: modify dockershim and network part logs of kubelet. [#98939](https://github.com/openshift/kubernetes/pull/98939)
* memory manager: specify the container cpuset.memory during the creation [#98924](https://github.com/openshift/kubernetes/pull/98924)
* delete the extra word [#98985](https://github.com/openshift/kubernetes/pull/98985)
* kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false [#98984](https://github.com/openshift/kubernetes/pull/98984)
* fix smb mount PermissionDenied issue on Windows [#99550](https://github.com/openshift/kubernetes/pull/99550)
* Metric cardinality enforcement [#99385](https://github.com/openshift/kubernetes/pull/99385)
* staging/publishing: add -mod=mod for smoke tests for go1.16 [#99674](https://github.com/openshift/kubernetes/pull/99674)
* Remove unused code in e2e/framework/framework.go [#99625](https://github.com/openshift/kubernetes/pull/99625)
* update kubectl cp flag description [#99581](https://github.com/openshift/kubernetes/pull/99581)
* update system-validators to v1.4.0 [#98977](https://github.com/openshift/kubernetes/pull/98977)
* Assign remaining test/e2e/common test to SIGs [#99492](https://github.com/openshift/kubernetes/pull/99492)
* Make parallel build memory threshold configurable [#96882](https://github.com/openshift/kubernetes/pull/96882)
* Promote DownwardAPIHugePages to beta [#99610](https://github.com/openshift/kubernetes/pull/99610)
* Migrate pkg/kubelet/metrics logs to structured logging. [#98627](https://github.com/openshift/kubernetes/pull/98627)
* pkg/kubelet/cri/remote: migrate to structured logs [#98589](https://github.com/openshift/kubernetes/pull/98589)
* Fix staticcheck failures for vendor/k8s.io/apiserver/pkg/registry/generic [#99526](https://github.com/openshift/kubernetes/pull/99526)
* Use Lstat in plugin watcher to avoid Windows problem [#99463](https://github.com/openshift/kubernetes/pull/99463)
* test images: Adds label to httpd-new image [#99631](https://github.com/openshift/kubernetes/pull/99631)
* Updating EndpointSlice controller to wait for cache to be updated [#99345](https://github.com/openshift/kubernetes/pull/99345)
* hack/verify-description.sh: correctly look for versioned API types [#99621](https://github.com/openshift/kubernetes/pull/99621)
* kubectl: print info for default container annotation usage [#99615](https://github.com/openshift/kubernetes/pull/99615)
* Deprecate cAdvisor json metrics collected by Kubelet [#99236](https://github.com/openshift/kubernetes/pull/99236)
* generic ephemeral volume: add metrics [#99115](https://github.com/openshift/kubernetes/pull/99115)
* Prefer v1 storage versions [#99103](https://github.com/openshift/kubernetes/pull/99103)
* test/e2e: Move tests into test/e2e/node package [#98983](https://github.com/openshift/kubernetes/pull/98983)
* Remove dependency of generators from create secret [#98614](https://github.com/openshift/kubernetes/pull/98614)
* exec credential provider: first integration test (static auth interaction) [#97775](https://github.com/openshift/kubernetes/pull/97775)
* kubeadm: a warning to user as ipv6 site-local is deprecated [#99574](https://github.com/openshift/kubernetes/pull/99574)
* cronjob: fix flaky unit test TestController2_updateCronJob [#99553](https://github.com/openshift/kubernetes/pull/99553)
* cronjob_controller: add metrics for job creation skew duration [#99341](https://github.com/openshift/kubernetes/pull/99341)
* Update to go1.16 [#98572](https://github.com/openshift/kubernetes/pull/98572)
* Prevent CGO and STATIC_OVERRIDES from trampling themselves if evaluated multiple times [#99521](https://github.com/openshift/kubernetes/pull/99521)
* Add btrfs support to the automatic volume resizer [#99361](https://github.com/openshift/kubernetes/pull/99361)
* kubelet: Imporve cmd comment for how kubelet works [#99084](https://github.com/openshift/kubernetes/pull/99084)
* Cleanup dependencies in changelog [#98347](https://github.com/openshift/kubernetes/pull/98347)
* Deleted a redundant line from #91275 [#99247](https://github.com/openshift/kubernetes/pull/99247)
* Update networking ingress types for Ingress Backend Service Port name [#97139](https://github.com/openshift/kubernetes/pull/97139)
* typo fixed for terminatation [#99447](https://github.com/openshift/kubernetes/pull/99447)
* Avoid creation of the same storageclass in e2e tests [#99346](https://github.com/openshift/kubernetes/pull/99346)
* update kubeadm upgrade description [#99586](https://github.com/openshift/kubernetes/pull/99586)
* Leader Migration (KEP-2477): options parsing [#99507](https://github.com/openshift/kubernetes/pull/99507)
* Implements pod deletion cost [#99163](https://github.com/openshift/kubernetes/pull/99163)
* test images: Generates new SHAs for mirrored images [#99609](https://github.com/openshift/kubernetes/pull/99609)
* Fix typo in comment for purgeInitContainers. [#99491](https://github.com/openshift/kubernetes/pull/99491)
* Scheduler: unroll PreemptHandle to Handle [#99498](https://github.com/openshift/kubernetes/pull/99498)
* Speed up pkg/controller/volume/scheduling unit tests [#98912](https://github.com/openshift/kubernetes/pull/98912)
* kubectl logs: don't check default container annotation if --all-containers is specified [#99569](https://github.com/openshift/kubernetes/pull/99569)
* Speed up pkg/volume/csi unit tests [#98762](https://github.com/openshift/kubernetes/pull/98762)
* Avoid kubelet warnings for imagePullSecret entries with empty names [#99590](https://github.com/openshift/kubernetes/pull/99590)
* Remove Bazel [#99561](https://github.com/openshift/kubernetes/pull/99561)
* Only CSI plugin can have a DataSource [#97086](https://github.com/openshift/kubernetes/pull/97086)
* Skip visiting empty secret and configmap names [#99538](https://github.com/openshift/kubernetes/pull/99538)
* .github: update enhancement issue template to point to KEPs [#98867](https://github.com/openshift/kubernetes/pull/98867)
* fix e2e test kube-proxy tcp_wait [#99564](https://github.com/openshift/kubernetes/pull/99564)
* Replace yml with yaml [#99433](https://github.com/openshift/kubernetes/pull/99433)
* Adding specific protocol network policy test [#99512](https://github.com/openshift/kubernetes/pull/99512)
* conformance.yaml: generate with make [#99549](https://github.com/openshift/kubernetes/pull/99549)
* Cleanup SIGDescribe in test/e2e/network [#99506](https://github.com/openshift/kubernetes/pull/99506)
* Replace top-level ginkgo.Describe with SIGDescribe [#99524](https://github.com/openshift/kubernetes/pull/99524)
* Fix static failures for vendor/k8s.io/apiserver/pkg/endpoints/handlers [#99520](https://github.com/openshift/kubernetes/pull/99520)
* Move node_recreate test to cloud/gcp directory [#99508](https://github.com/openshift/kubernetes/pull/99508)
* add Yuchen to reviewers [#99501](https://github.com/openshift/kubernetes/pull/99501)
* use random node to avoid node0 overloaded [#99390](https://github.com/openshift/kubernetes/pull/99390)
* don't default to building conformance image for fastbuilds (quick-rel… [#99386](https://github.com/openshift/kubernetes/pull/99386)
* test/integration: add integration tests for service.spec.allocateLoadBalancerNodePorts [#96610](https://github.com/openshift/kubernetes/pull/96610)
* reset token if got Unauthorized in KCM [#99324](https://github.com/openshift/kubernetes/pull/99324)
* Update CSI attacher to fetch VolumeAttachments from lister [#97834](https://github.com/openshift/kubernetes/pull/97834)
* Move GetPersistentVolumeClaimClass to component-helpers [#98433](https://github.com/openshift/kubernetes/pull/98433)
* Remove KubeDescribe from SIGDescribe calls [#99467](https://github.com/openshift/kubernetes/pull/99467)
* test: fix skipping of GenericEphemeralVolume volume type [#99445](https://github.com/openshift/kubernetes/pull/99445)
* Optimized function getProxyMode [#99387](https://github.com/openshift/kubernetes/pull/99387)
* nominate adtac to sig-scheduling reviewers [#99117](https://github.com/openshift/kubernetes/pull/99117)
* Remove duplicate package import in empty_dir_test.go [#98171](https://github.com/openshift/kubernetes/pull/98171)
* Cleanup old test targets [#99486](https://github.com/openshift/kubernetes/pull/99486)
* Switch gitVersion format to non-abbreviated hash [#99377](https://github.com/openshift/kubernetes/pull/99377)
* fix nil error e2e/network/kube_proxy.go [#99434](https://github.com/openshift/kubernetes/pull/99434)
* Fix --ignore-errors does not take effect if multiple logs are printed and unfollowed [#97686](https://github.com/openshift/kubernetes/pull/97686)
* Updating owners with sig-windows tech leads [#99477](https://github.com/openshift/kubernetes/pull/99477)
* kubeadm: promote DualStack feature gate to Beta [#99294](https://github.com/openshift/kubernetes/pull/99294)
* default container behavior with annotation `kubectl.kubernetes.io/default-container` [#97099](https://github.com/openshift/kubernetes/pull/97099)
* kubeadm: pass pod-infra-container-image for all CRs [#99476](https://github.com/openshift/kubernetes/pull/99476)
* kubectl proxy: override request host [#97385](https://github.com/openshift/kubernetes/pull/97385)
* Move common/volume.go test to the storage dir [#99469](https://github.com/openshift/kubernetes/pull/99469)
* Align ownership of secret and configmap tests to sig-node [#99460](https://github.com/openshift/kubernetes/pull/99460)
* AtMostEvery may result in less than expected times if overloaded [#99442](https://github.com/openshift/kubernetes/pull/99442)
* Split the setcap image from the base images, make them easier to override [#99415](https://github.com/openshift/kubernetes/pull/99415)
* Efficient watch resumption beta [#99021](https://github.com/openshift/kubernetes/pull/99021)
* deprecating in-tree vsphere volume diskformat parameters, vsphere less than 67u3, vm hardware less than 15 and multi vCenter support [#98546](https://github.com/openshift/kubernetes/pull/98546)
* fix the case of time drift and re-implement next schedule calculation [#97098](https://github.com/openshift/kubernetes/pull/97098)
* Revert "tests: Set a 5 minute timeout for kubectl cluster-info dump" [#99450](https://github.com/openshift/kubernetes/pull/99450)
* Scheduler: remove legacy TODO in framework.go [#99406](https://github.com/openshift/kubernetes/pull/99406)
* Write ReplicaSet Replace and Patch Test +2 Endpoints [#99380](https://github.com/openshift/kubernetes/pull/99380)
* parse pod's node affinity once in preFilter [#99213](https://github.com/openshift/kubernetes/pull/99213)
* Replace some nested KubeDescribe calls with ginkgo.Describe [#99458](https://github.com/openshift/kubernetes/pull/99458)
* Cleanup tests/e2e/common directory - part 1 [#99374](https://github.com/openshift/kubernetes/pull/99374)
* Stop probing a pod during graceful shutdown [#98571](https://github.com/openshift/kubernetes/pull/98571)
* csr signers: increase the number of workers [#99419](https://github.com/openshift/kubernetes/pull/99419)
* Remove deadcode [#99351](https://github.com/openshift/kubernetes/pull/99351)
* kubelet: Sync completed pods until their containers have been terminated [#98742](https://github.com/openshift/kubernetes/pull/98742)
* Remove unused func in kubernetes/pkg/kubelet/dockershim [#99355](https://github.com/openshift/kubernetes/pull/99355)
* Graduate sysctls to GA [#99158](https://github.com/openshift/kubernetes/pull/99158)
* Move GKE tests to cloud/gcp package [#99403](https://github.com/openshift/kubernetes/pull/99403)
* e2e: fix CPU manager methods to be more flexible to different CPU topology [#98373](https://github.com/openshift/kubernetes/pull/98373)
* e2e: move deleteState file to the AfterEach [#98342](https://github.com/openshift/kubernetes/pull/98342)
* Move TTLAfterFinished test to appropriate SIG [#99400](https://github.com/openshift/kubernetes/pull/99400)
* Scheduler: Use PodInfo instead of Pod for nominatedPods and QueuedPodInfo [#99085](https://github.com/openshift/kubernetes/pull/99085)
* Scheduler: remove pkg/apis/core/field_constants.go [#90105](https://github.com/openshift/kubernetes/pull/90105)
* test images: Fixes Windows nginx images entrypoints [#99395](https://github.com/openshift/kubernetes/pull/99395)
* attacher: organize unit tests into subtests [#99229](https://github.com/openshift/kubernetes/pull/99229)
* Support storage encryption for aggregation server [#99196](https://github.com/openshift/kubernetes/pull/99196)
* Use GA topology labels for EBS [#99130](https://github.com/openshift/kubernetes/pull/99130)
* conformance: promote container exec probe timeout tests [#97619](https://github.com/openshift/kubernetes/pull/97619)
* migrate "client-go retry-watcher watch" to structured logging [#99195](https://github.com/openshift/kubernetes/pull/99195)
* conditionally serve beta [#99011](https://github.com/openshift/kubernetes/pull/99011)
* Make the registry for the server-images templated in the Dockerfiles. [#99379](https://github.com/openshift/kubernetes/pull/99379)
* fix some hardcoding [#99233](https://github.com/openshift/kubernetes/pull/99233)
* Run kube-apiserver as non-root. [#96134](https://github.com/openshift/kubernetes/pull/96134)
* test/e2e: Move gke local ssd tests to e2e/storage and assign sig ownership [#99087](https://github.com/openshift/kubernetes/pull/99087)
* Add enj back as test approver [#99366](https://github.com/openshift/kubernetes/pull/99366)
* promote RootCAConfigMap e2e test to Conformance [#99316](https://github.com/openshift/kubernetes/pull/99316)
* Upgrading cAdvisor to 0.38.8 [#99315](https://github.com/openshift/kubernetes/pull/99315)
* e2e framework TestJig used for Service testing wasn't verifying UDP works [#99312](https://github.com/openshift/kubernetes/pull/99312)
* Promote Read, Replace and Patch ReplicaSetScale test to Conformance +3 endpoints [#99282](https://github.com/openshift/kubernetes/pull/99282)
* Promote Read, Replace and Patch DeploymentScale test to Conformance +3 endpoints [#99281](https://github.com/openshift/kubernetes/pull/99281)
* Fix usage of klog.InfoS [#99274](https://github.com/openshift/kubernetes/pull/99274)
* Promote RunAsGroup e2e test to Conformance [#98645](https://github.com/openshift/kubernetes/pull/98645)
* Mark remaining e2e_node tests with [sig-*] label [#99319](https://github.com/openshift/kubernetes/pull/99319)
* Add SIG Apps API reviewers and feature approvers [#99335](https://github.com/openshift/kubernetes/pull/99335)
* cronjob: Add CRUD tests for CronJob API verbs [#99314](https://github.com/openshift/kubernetes/pull/99314)
* Fix dependencycheck binary name [#99159](https://github.com/openshift/kubernetes/pull/99159)
* Allow uncertain mount tests to run parallely [#99174](https://github.com/openshift/kubernetes/pull/99174)
* kubeadm: include appovers under reviewers in OWNERS [#99313](https://github.com/openshift/kubernetes/pull/99313)
* images: Removes containers after they've run [#98799](https://github.com/openshift/kubernetes/pull/98799)
* move RootCAConfigMap to ga [#98033](https://github.com/openshift/kubernetes/pull/98033)
* Apply cap_net_bind_service to kube-apiserver binary. [#99145](https://github.com/openshift/kubernetes/pull/99145)
* migrate pkg/scheduler/framework/plugins/volume to structured logs [#98593](https://github.com/openshift/kubernetes/pull/98593)
* increase pod start timeout for storage tests [#99320](https://github.com/openshift/kubernetes/pull/99320)
* Add detailed logs and start log messages with upper case [#99246](https://github.com/openshift/kubernetes/pull/99246)
* Remove modprobe configs from configure-helper [#99216](https://github.com/openshift/kubernetes/pull/99216)
* delay serving CRD creates for a few seconds for HA consistency [#99199](https://github.com/openshift/kubernetes/pull/99199)
* Add kubectl-convert to client-binaries [#99155](https://github.com/openshift/kubernetes/pull/99155)
* Storage: move filesystem resize code to kubernetes/mount-utils [#99088](https://github.com/openshift/kubernetes/pull/99088)
* Check if resources implement scale in disruption controller [#98346](https://github.com/openshift/kubernetes/pull/98346)
* apf: set response headers for rejected requests [#99125](https://github.com/openshift/kubernetes/pull/99125)
* Partially revert "tests: Switch dockerhub registry images to promoted registry" [#99241](https://github.com/openshift/kubernetes/pull/99241)
* hack: Use zeitgeist instead of cmd/verifydependencies [#98845](https://github.com/openshift/kubernetes/pull/98845)
* remove secret-based sa token client builder [#99291](https://github.com/openshift/kubernetes/pull/99291)
* e2e test replace CreateSync in createPodOrFail [#99262](https://github.com/openshift/kubernetes/pull/99262)
* Delete duplicate logs for kubeadm upgrade versions [#99187](https://github.com/openshift/kubernetes/pull/99187)
* Add GracefulNodeShutdown e2e test [#98658](https://github.com/openshift/kubernetes/pull/98658)
* kubeadm: perform a host name check on init / join [#99194](https://github.com/openshift/kubernetes/pull/99194)
* Use golangci-lint to find unused/dead code (Experimental!) [#99120](https://github.com/openshift/kubernetes/pull/99120)
* Move pkg/kubelet/apis to k8s.io/kubelet/pkg/apis [#98931](https://github.com/openshift/kubernetes/pull/98931)
* allow explicit disabling of metrics as an escape hatch. [#99217](https://github.com/openshift/kubernetes/pull/99217)
* Differentiate build process for non-amd platforms [#82778](https://github.com/openshift/kubernetes/pull/82778)
* Clean up e2e stress test resources concurrently [#99244](https://github.com/openshift/kubernetes/pull/99244)
* fix TestPidListerFailure on cgroupsv2 [#98960](https://github.com/openshift/kubernetes/pull/98960)
* Scheduler: let default preemption returns status instead of err [#99119](https://github.com/openshift/kubernetes/pull/99119)
* Add arm64 support for GCE node configuration [#99242](https://github.com/openshift/kubernetes/pull/99242)
* Use ARG and --build-arg instead of sed for etcd image. [#99059](https://github.com/openshift/kubernetes/pull/99059)
* Promote RunAsGroup to GA [#94641](https://github.com/openshift/kubernetes/pull/94641)
* Cleanup: Remove CSIDriverRegistry, BlockVolume and CSIBlockVolume feature flags [#98021](https://github.com/openshift/kubernetes/pull/98021)
* add bash-completion for comma separated list on `kubectl get` [#98301](https://github.com/openshift/kubernetes/pull/98301)
* migrate to structured logging [#98875](https://github.com/openshift/kubernetes/pull/98875)
* (e2e/scheduler) Ensure minimum memory limit in createBalancedPodForNodes [#98073](https://github.com/openshift/kubernetes/pull/98073)
* Testing multiple pods using label selector [#97701](https://github.com/openshift/kubernetes/pull/97701)
* API Machinery: Add equal func for Requirement struct [#99083](https://github.com/openshift/kubernetes/pull/99083)
* add myself to approvers for apiserver metrics [#99215](https://github.com/openshift/kubernetes/pull/99215)
* Substituting bool maps with String sets [#99211](https://github.com/openshift/kubernetes/pull/99211)
* e2e services test pods should wait until they are ready [#99202](https://github.com/openshift/kubernetes/pull/99202)
* Migrate pkg/kubelet/nodestatus to structured logging [#99001](https://github.com/openshift/kubernetes/pull/99001)
* migrate scheduling_queue.go to structured logging [#98358](https://github.com/openshift/kubernetes/pull/98358)
* merge error check to validateEndpointsPorts [#99146](https://github.com/openshift/kubernetes/pull/99146)
* kubelet: fix create sandbox delete pod race [#98933](https://github.com/openshift/kubernetes/pull/98933)
* proxy/config tests: avoid multiple calls to done [#99102](https://github.com/openshift/kubernetes/pull/99102)
* Fix flaky test: CSI mock volume snapshot [#99167](https://github.com/openshift/kubernetes/pull/99167)
* kubectl: improve error message for client-side SMP for CRs [#99143](https://github.com/openshift/kubernetes/pull/99143)
* Add csi_operations_seconds metrics on kubelet [#98979](https://github.com/openshift/kubernetes/pull/98979)
* Allow ingress from pods on another namespace [#98389](https://github.com/openshift/kubernetes/pull/98389)
* request.go: correct subresource referencing [#99193](https://github.com/openshift/kubernetes/pull/99193)
* SCTPSupport beta since 1.19; VolumeSubpath GA since 1.10 [#99189](https://github.com/openshift/kubernetes/pull/99189)
* tests: Updates resource-consumer to 1.9 in tests [#99149](https://github.com/openshift/kubernetes/pull/99149)
* Return error when persister fails to modify config [#99111](https://github.com/openshift/kubernetes/pull/99111)
* tests: Set a 5 minute timeout for kubectl cluster-info dump [#99107](https://github.com/openshift/kubernetes/pull/99107)
* correct typo in kubectl plugin command [#99068](https://github.com/openshift/kubernetes/pull/99068)
* Use more real world examples in BenchmarkSerializeObject [#99192](https://github.com/openshift/kubernetes/pull/99192)
* Cherry pick #465 in cloud provider azure: Cleanup subnet in frontend IP configs [#98133](https://github.com/openshift/kubernetes/pull/98133)
* move BoundServiceAccountTokenVolume to beta [#95667](https://github.com/openshift/kubernetes/pull/95667)
* e2e conntrack invalid test should wait pod are running [#99201](https://github.com/openshift/kubernetes/pull/99201)
* Minor refactor of test/e2e/common names [#99016](https://github.com/openshift/kubernetes/pull/99016)
* migrate to use k8s.io/util/net/port in kube-proxy [#98130](https://github.com/openshift/kubernetes/pull/98130)
* Make kube-proxy check if IPv6 is really supported before assuming dual-stack [#99127](https://github.com/openshift/kubernetes/pull/99127)
* Fix tests using kubectl convert [#97644](https://github.com/openshift/kubernetes/pull/97644)
* e2e createSync() method wait for pod running and ready [#99147](https://github.com/openshift/kubernetes/pull/99147)
* storage CSI e2e: Move csi driver cleanup functions into a common one [#99175](https://github.com/openshift/kubernetes/pull/99175)
* Fix NPD test to run it in private and large clusters [#99027](https://github.com/openshift/kubernetes/pull/99027)
* Fix storage e2e snapshot test deletion order [#99161](https://github.com/openshift/kubernetes/pull/99161)
* Add GCE Kubernetes option to enable Windows DSR. [#98592](https://github.com/openshift/kubernetes/pull/98592)
* add metrics for rootcacertpublisher controller [#98731](https://github.com/openshift/kubernetes/pull/98731)
* Mark heapster as deprecated in IMPLEMENTATIONS.md [#98505](https://github.com/openshift/kubernetes/pull/98505)
* sched: create dataItemsDir during a performance test if not exist [#99160](https://github.com/openshift/kubernetes/pull/99160)
* fix the address of restful-CORS-filter.go and restful-basic-authentic… [#98823](https://github.com/openshift/kubernetes/pull/98823)
* Updates the Azure File minimum size for premium accounts [#99122](https://github.com/openshift/kubernetes/pull/99122)
* fix conflict hostPort e2e test [#99112](https://github.com/openshift/kubernetes/pull/99112)
* Revise wording for Secret stringData field [#99105](https://github.com/openshift/kubernetes/pull/99105)
* cleanup TestNormalizeClusterIPs [#99098](https://github.com/openshift/kubernetes/pull/99098)
* add more context to client-go request throttling message [#99079](https://github.com/openshift/kubernetes/pull/99079)
* Fix typo in client-go/rest/client.go [#99063](https://github.com/openshift/kubernetes/pull/99063)
* Add klueska as an approver in pkg/kubelet/OWNERS [#98932](https://github.com/openshift/kubernetes/pull/98932)
* Add BenchmarkSerializeObject* benchmarks [#99153](https://github.com/openshift/kubernetes/pull/99153)
* Add more sig-storage reviewers [#99140](https://github.com/openshift/kubernetes/pull/99140)
* Drop batch/v2alpha1 [#96987](https://github.com/openshift/kubernetes/pull/96987)
* Storage e2e: Remove pd csi driver installation in GKE [#98555](https://github.com/openshift/kubernetes/pull/98555)
* Fix the getCgroupSubsystemsV1() which uses only the latest record [#96594](https://github.com/openshift/kubernetes/pull/96594)
* Adding Ravi to Owners for sig-windows e2es [#99135](https://github.com/openshift/kubernetes/pull/99135)
* Migrate `pkg/kubelet/pod,pleg` to structured logging [#98990](https://github.com/openshift/kubernetes/pull/98990)
* Add migrated field to storage_operation_duration_seconds metric [#99050](https://github.com/openshift/kubernetes/pull/99050)
* test images: assign gcEtcdRegistry to the correct value [#99131](https://github.com/openshift/kubernetes/pull/99131)
* Update sigs.k8s.io/structured-merge-diff to v4.0.3 [#99014](https://github.com/openshift/kubernetes/pull/99014)
* Enable kubectl-get to strip managed fields [#96878](https://github.com/openshift/kubernetes/pull/96878)
* migrate kube canary chain as const [#99089](https://github.com/openshift/kubernetes/pull/99089)
* scheduler/framework/plugins: delete moved docs [#99118](https://github.com/openshift/kubernetes/pull/99118)
* Allow adding healthz and livez checks independent to each other [#99064](https://github.com/openshift/kubernetes/pull/99064)
* Update kube-addon-manager image to v9.1.2 [#98974](https://github.com/openshift/kubernetes/pull/98974)
* Mark commandline parameters related to dockershim as deprecated [#98730](https://github.com/openshift/kubernetes/pull/98730)
* added note on --etcd-servers-overrides [#90054](https://github.com/openshift/kubernetes/pull/90054)
* Automatically remove orphaned pod's dangling volumes [#95301](https://github.com/openshift/kubernetes/pull/95301)
* Clean up deprecated volume operation metrics [#99045](https://github.com/openshift/kubernetes/pull/99045)
* Update e2e test instructions in GCE Windows README [#98487](https://github.com/openshift/kubernetes/pull/98487)
* kubelet: Fix race when KillPod followed by IsPodPendingTermination [#98956](https://github.com/openshift/kubernetes/pull/98956)
* Add support to disable /debug/pprof and /debug/flags/v endpoint [#98458](https://github.com/openshift/kubernetes/pull/98458)
* correct typo in kubeadm init phase command [#99082](https://github.com/openshift/kubernetes/pull/99082)
* Scheduler: remove reflect.DeepEqual for defaultpreemption, helper, imagelocality package [#98949](https://github.com/openshift/kubernetes/pull/98949)
* Remove inactive members from OWNERS - Jan 2021 [#99110](https://github.com/openshift/kubernetes/pull/99110)
* Promote cronjob controller v2 to beta [#98878](https://github.com/openshift/kubernetes/pull/98878)
* test images: Fixes Windows httpd images [#99030](https://github.com/openshift/kubernetes/pull/99030)
* fix duplicate validation error for quota editing [#98201](https://github.com/openshift/kubernetes/pull/98201)
* test/* Remove inactive members from OWNERS [#99092](https://github.com/openshift/kubernetes/pull/99092)
* cmd/kubemark: Remove inactive members from OWNERS [#99078](https://github.com/openshift/kubernetes/pull/99078)
* cluster/* Remove inactive members from OWNERS [#99074](https://github.com/openshift/kubernetes/pull/99074)
* cluster/addons/dashboard: remove inactive members from OWNERS [#99071](https://github.com/openshift/kubernetes/pull/99071)
* Adding UDP network policies tests [#98636](https://github.com/openshift/kubernetes/pull/98636)
* Use ARG and --build-arg instead of sed for build-image. [#99067](https://github.com/openshift/kubernetes/pull/99067)
* Bump agnhost 2.28 [#99049](https://github.com/openshift/kubernetes/pull/99049)
* apiserver: add --permit-address-sharing flag to listen with SO_REUSEADDR [#93861](https://github.com/openshift/kubernetes/pull/93861)
* Use ARG instead of sed to set the base image for addon-manager. [#99024](https://github.com/openshift/kubernetes/pull/99024)
* JobDeletionDurationSeconds metric in TTLAfterFinished controller [#98676](https://github.com/openshift/kubernetes/pull/98676)
* Use ARG instead of sed in the conformance image. [#99022](https://github.com/openshift/kubernetes/pull/99022)
* Clean up Instrumentation reviewers [#99013](https://github.com/openshift/kubernetes/pull/99013)
* Update: StatefulSet Replica scaling to include Patch Scale +1 endpoint [#98126](https://github.com/openshift/kubernetes/pull/98126)
* Write Read, Replace and Patch ReplicaSetScale test +3 endpoints [#98987](https://github.com/openshift/kubernetes/pull/98987)
* shorten scheduling priorities taint key [#99020](https://github.com/openshift/kubernetes/pull/99020)
* Write Read, Replace and Patch DeploymentScale test +3 endpoints [#98988](https://github.com/openshift/kubernetes/pull/98988)
* Use on disk Dockerfile for server-images. [#99015](https://github.com/openshift/kubernetes/pull/99015)
* portably configure tempdir in configure-helper.sh [#99019](https://github.com/openshift/kubernetes/pull/99019)
* catching errors for 'kubeadm join' [#98980](https://github.com/openshift/kubernetes/pull/98980)
* Scheduler: remove outdated TODO in interpodaffinity [#98997](https://github.com/openshift/kubernetes/pull/98997)
* Enable kube-dns-autoscaler test in scale-correctness tests [#98996](https://github.com/openshift/kubernetes/pull/98996)
* upgrade IPv6DualStack feature to beta and turn on by default [#98969](https://github.com/openshift/kubernetes/pull/98969)
* networking/validation: add endport range validation [#98726](https://github.com/openshift/kubernetes/pull/98726)
* Fix MetricsGrabber test by skipping if the master node isn't registered [#98972](https://github.com/openshift/kubernetes/pull/98972)
* Update conformance metadata for relocated test [#98940](https://github.com/openshift/kubernetes/pull/98940)
* tests: Switch dockerhub registry images to promoted registry [#98964](https://github.com/openshift/kubernetes/pull/98964)
* CHANGELOG: remove release-note-none items [#98909](https://github.com/openshift/kubernetes/pull/98909)
* Promote ServiceAccountIssuerDiscovery test to conformance [#98586](https://github.com/openshift/kubernetes/pull/98586)
* Do not leak files on iptables unit tests [#98961](https://github.com/openshift/kubernetes/pull/98961)
* Remove CONTENT_TYPE in kubemark hollow template [#98911](https://github.com/openshift/kubernetes/pull/98911)
* kube-proxy has to clear NodePort stale UDP entries [#98305](https://github.com/openshift/kubernetes/pull/98305)
* Fix shellcheck failures in cluster/gce/gci/configure.sh [#90442](https://github.com/openshift/kubernetes/pull/90442)
* sched: remove Unknown queuing literal [#98899](https://github.com/openshift/kubernetes/pull/98899)
* Escape the special character in vsphere windows path [#98830](https://github.com/openshift/kubernetes/pull/98830)
* updated fluentd and all plugins [#98339](https://github.com/openshift/kubernetes/pull/98339)
* Prevent race condition with bytes buffer in vsphere unit tests [#98944](https://github.com/openshift/kubernetes/pull/98944)
* tests: Separate registry configuration for etcd image [#98926](https://github.com/openshift/kubernetes/pull/98926)
* Netpol E2E test should allow traffic to an application [#97616](https://github.com/openshift/kubernetes/pull/97616)
* Scheduler: change config.Plugins from pointers to objects [#98663](https://github.com/openshift/kubernetes/pull/98663)
* Fix ALPHA stability level reference link [#98641](https://github.com/openshift/kubernetes/pull/98641)
* Add integration test for parallel and non-parallel Job [#97984](https://github.com/openshift/kubernetes/pull/97984)
* Fix shellcheck warnings/errors in cluster/gce/util.sh [#90405](https://github.com/openshift/kubernetes/pull/90405)
* kubelet_test: fixes race in TestSyncPodsDeletesWhenSourcesAreReadyPerQOS [#98938](https://github.com/openshift/kubernetes/pull/98938)
* volume: Change owner of symlinks too [#94895](https://github.com/openshift/kubernetes/pull/94895)
* suggest homebrew when bash is too old on macOS [#98948](https://github.com/openshift/kubernetes/pull/98948)
* Use markdown headers instead of bold text for PR template [#96884](https://github.com/openshift/kubernetes/pull/96884)
* Add [sig-autoscaling] tag to remaining cluster autoscaler tests [#98951](https://github.com/openshift/kubernetes/pull/98951)
* Speed up pkg/controller/volume/persistentvolume unit tests [#98792](https://github.com/openshift/kubernetes/pull/98792)
* migrate proxy/winkernel/proxier.go logs to structured logging [#98001](https://github.com/openshift/kubernetes/pull/98001)
* check containerd as well as docker-containerd [#97888](https://github.com/openshift/kubernetes/pull/97888)
* pkg/kubelet/server: migrate to structured logs [#98643](https://github.com/openshift/kubernetes/pull/98643)
* Promote PodProxyWithPath & ServiceProxyWithPath test - + 12 endpoint coverage [#98897](https://github.com/openshift/kubernetes/pull/98897)
* add metrics to nodeSyncLoop in service controller [#98779](https://github.com/openshift/kubernetes/pull/98779)
* Apply request context to metrics in apiserver. [#98246](https://github.com/openshift/kubernetes/pull/98246)
* Fix shellcheck issues in cluster/gce/gci/master-helper.sh [#95865](https://github.com/openshift/kubernetes/pull/95865)
* Graduate TTLAfterFinished to beta [#98678](https://github.com/openshift/kubernetes/pull/98678)
* Warn instead of erroring if --gce-zone is not passed to e2e.test when --provider=aws [#98736](https://github.com/openshift/kubernetes/pull/98736)
* test images: Bump resource-consumer to 1.9 [#98917](https://github.com/openshift/kubernetes/pull/98917)
* Deny Ingress on other namespaces [#98390](https://github.com/openshift/kubernetes/pull/98390)
* UDP protocol on connect agnhost command [#98639](https://github.com/openshift/kubernetes/pull/98639)
* Ignore transient errors when gathering stats for Windows Containers in Dockershim [#98510](https://github.com/openshift/kubernetes/pull/98510)
* Change the upper limit of evictionthreshold from 10000% to 100% [#97321](https://github.com/openshift/kubernetes/pull/97321)
* Extract the const for ContainerStateReason [#96451](https://github.com/openshift/kubernetes/pull/96451)
* Simplify leader election code [#98889](https://github.com/openshift/kubernetes/pull/98889)
* organize apis unit tests into subtests [#98910](https://github.com/openshift/kubernetes/pull/98910)
* Fix typo in comment [#97513](https://github.com/openshift/kubernetes/pull/97513)
* Memory manager [#95479](https://github.com/openshift/kubernetes/pull/95479)
* fix staticcheck failures for test/e2e and test/integration [#95281](https://github.com/openshift/kubernetes/pull/95281)
* Fix some shellcheck warnings/errors in cluster/gce/util.sh [#94459](https://github.com/openshift/kubernetes/pull/94459)
* map delete key remove exists check [#90281](https://github.com/openshift/kubernetes/pull/90281)
* Mark vishh as emeritus sig-node approver [#98896](https://github.com/openshift/kubernetes/pull/98896)
* test images: Fixes Windows php source [#98831](https://github.com/openshift/kubernetes/pull/98831)
* test images: Retrigger some image jobs [#98887](https://github.com/openshift/kubernetes/pull/98887)
* avoid hardcoding amd64 specifics on cross compiling [#98861](https://github.com/openshift/kubernetes/pull/98861)
* Speed up pkg/volume/util/operationexecutor unit tests [#98760](https://github.com/openshift/kubernetes/pull/98760)
* kubeadm: update OWNERS for 1.21 [#98547](https://github.com/openshift/kubernetes/pull/98547)
* Fix some shellcheck warnings/errors in cluster/gce/util.sh [#94463](https://github.com/openshift/kubernetes/pull/94463)
* PD CSI e2e: disable resizer volume inuse error check [#98891](https://github.com/openshift/kubernetes/pull/98891)
* update pause image to 3.4.1 and also update the change log [#98205](https://github.com/openshift/kubernetes/pull/98205)
* Improve test coverage for service affinity [#98863](https://github.com/openshift/kubernetes/pull/98863)
* add e2e tests for create/delete volume snapshot with secrets [#95848](https://github.com/openshift/kubernetes/pull/95848)
* Wire up static-analysis so that it executes in the normal 'hack' flow [#98739](https://github.com/openshift/kubernetes/pull/98739)
* kubeadm: Fix placeholder in config print help text [#98839](https://github.com/openshift/kubernetes/pull/98839)
* test: bump CSI container versions for mock testing [#98770](https://github.com/openshift/kubernetes/pull/98770)
* kubeadm: flatten admin.conf for cluster-info generation [#98882](https://github.com/openshift/kubernetes/pull/98882)
* Fix golint errors in test/e2e/common [#97251](https://github.com/openshift/kubernetes/pull/97251)
* fix ignored podinfo parserr [#98802](https://github.com/openshift/kubernetes/pull/98802)
* Default DENY all egress from pods in the namespace [#97738](https://github.com/openshift/kubernetes/pull/97738)
* fix: remove duplicated code in image-util.sh due to merge conflict [#98818](https://github.com/openshift/kubernetes/pull/98818)
* Move deferred taint cleanup call to ensure all are removed [#97819](https://github.com/openshift/kubernetes/pull/97819)
* migrate pkg/controller/volume/pvc_protection_controller.go to structured logs [#98688](https://github.com/openshift/kubernetes/pull/98688)
* Update to go1.15.8 [#98834](https://github.com/openshift/kubernetes/pull/98834)
* kubeadm: get k8s CI version markers from k8s infra bucket [#98836](https://github.com/openshift/kubernetes/pull/98836)
* e2e/storage-csi: replace gcr.io/gke-release to the community registry k8s.gcr.io/sig-storage [#98805](https://github.com/openshift/kubernetes/pull/98805)
* kubeadm: improve error message about node subnet size validation [#98796](https://github.com/openshift/kubernetes/pull/98796)
* Speed up pkg/controller/endpointslice unit tests [#98793](https://github.com/openshift/kubernetes/pull/98793)
* Bump konnectivity-client to v0.0.15 [#98790](https://github.com/openshift/kubernetes/pull/98790)
* Tolerate disabled RBAC in ServiceAccountIssuerDiscovery test [#98813](https://github.com/openshift/kubernetes/pull/98813)
* dockershim hostport manager use HostIP [#98755](https://github.com/openshift/kubernetes/pull/98755)
* add test to ensure that user can clear alwaysallowpaths [#98724](https://github.com/openshift/kubernetes/pull/98724)
* run cronjob every 1minute in UT [#98691](https://github.com/openshift/kubernetes/pull/98691)
* test images: Adds Windows support for resource-consumer [#92719](https://github.com/openshift/kubernetes/pull/92719)
* test images: Adds Windows Container images support (part 3) [#77269](https://github.com/openshift/kubernetes/pull/77269)
* Balance nodes in scheduling e2e [#98699](https://github.com/openshift/kubernetes/pull/98699)
* [Bug 1920221](https://bugzilla.redhat.com/show_bug.cgi?id=1920221): Allow test invokers to skip test waits before and after [#98781](https://github.com/openshift/kubernetes/pull/98781)
* Use FQDN for SERVICEACCOUNT_ISSUER in tests [#98773](https://github.com/openshift/kubernetes/pull/98773)
* Fix unified flag in --logging-format description [#98524](https://github.com/openshift/kubernetes/pull/98524)
* fix VolumeMount permissions with subpaths only apply the right permsions to the last directory [#98717](https://github.com/openshift/kubernetes/pull/98717)
* Repeated err judgment in integration test [#98761](https://github.com/openshift/kubernetes/pull/98761)
* migrate scheduler/taint_manager.go structured logging [#98259](https://github.com/openshift/kubernetes/pull/98259)
* azure file migration go beta [#96293](https://github.com/openshift/kubernetes/pull/96293)
* test/e2e: Allow zones to be passed to e2e cloud provider [#98787](https://github.com/openshift/kubernetes/pull/98787)
* Dont remove volumes when saveVolumeData fails [#96021](https://github.com/openshift/kubernetes/pull/96021)
* Disable sample submission and MAPS Reporting from Windows Defender [#98705](https://github.com/openshift/kubernetes/pull/98705)
* Fixed typo in create_priorityclass [#98747](https://github.com/openshift/kubernetes/pull/98747)
* Make sync Job test tables more readable [#98489](https://github.com/openshift/kubernetes/pull/98489)
* Remove heapster flag in 'kubectl top' [#98464](https://github.com/openshift/kubernetes/pull/98464)
* kubelet: Pods created and rapidly terminated get stuck [#98424](https://github.com/openshift/kubernetes/pull/98424)
* Explicitly add iptables rule to allow healthcheck nodeport [#97824](https://github.com/openshift/kubernetes/pull/97824)
* 97657: Removed "FromPort" in netpol tests [#97863](https://github.com/openshift/kubernetes/pull/97863)
* fix staticcheck failures on vendor/k8s.io/apiserver/pkg/endpoints [#97224](https://github.com/openshift/kubernetes/pull/97224)
* Fix typo in API docs for sideEffects field on admission webhook resources [#96911](https://github.com/openshift/kubernetes/pull/96911)
* test images: Updates Image Builder process in the README [#97457](https://github.com/openshift/kubernetes/pull/97457)
* test images: Mirrors dockerhub images to staging [#95567](https://github.com/openshift/kubernetes/pull/95567)
* fix kube-scheduler cannot send event because the Note field is too large [#98715](https://github.com/openshift/kubernetes/pull/98715)
* scheduler_perf: remove implicit barrier at the end [#98721](https://github.com/openshift/kubernetes/pull/98721)
* Fix nil pointer dereference in disruption controller [#98750](https://github.com/openshift/kubernetes/pull/98750)
* Fix the error of kms_transformation_test about integration test [#98722](https://github.com/openshift/kubernetes/pull/98722)
* migrate default_preemption.go to structured logging [#98518](https://github.com/openshift/kubernetes/pull/98518)
* Add e2e test setup for windows vsphere driver [#98738](https://github.com/openshift/kubernetes/pull/98738)
* Update gce-pd volume topology label to GA [#98700](https://github.com/openshift/kubernetes/pull/98700)
* Update github.com/NYTimes/gziphandler [#98737](https://github.com/openshift/kubernetes/pull/98737)
* Scheduler: add StatusEqual func for Status comparer [#98481](https://github.com/openshift/kubernetes/pull/98481)
* kubectl wait ensures observedGeneration >= generation [#97408](https://github.com/openshift/kubernetes/pull/97408)
* Fix possible flake while testing service endpoints via proxy [#98345](https://github.com/openshift/kubernetes/pull/98345)
* Improve wording in kubeadm upgrade plan [#98728](https://github.com/openshift/kubernetes/pull/98728)
* storage version integration test: check the test server's health before running [#98706](https://github.com/openshift/kubernetes/pull/98706)
* Fix the kube-scheduler binary's description of the --config parameter… [#98254](https://github.com/openshift/kubernetes/pull/98254)
* Fix a bug that untolerated variable is used as tolerated [#98703](https://github.com/openshift/kubernetes/pull/98703)
* enable cross-compile CC config for non-amd64 [#98508](https://github.com/openshift/kubernetes/pull/98508)
* Isolate TestModifyContext from $KUBECONFIG [#98671](https://github.com/openshift/kubernetes/pull/98671)
* OWNERS: RelEng and CHANGELOG updates [#98701](https://github.com/openshift/kubernetes/pull/98701)
* Scheduler: organize scheduler unit tests into subtests [#98696](https://github.com/openshift/kubernetes/pull/98696)
* client-go: export NewDebuggingRoundTripper function and DebugLevel [#98324](https://github.com/openshift/kubernetes/pull/98324)
* Add ignore-errors flag for drain [#98203](https://github.com/openshift/kubernetes/pull/98203)
* Speed up CRD apply/openapi unit tests [#98694](https://github.com/openshift/kubernetes/pull/98694)
* Make image build logs verbose if necessary [#98568](https://github.com/openshift/kubernetes/pull/98568)
* Update delegated authorization options default to eliminate unnecessary SARs [#98325](https://github.com/openshift/kubernetes/pull/98325)
* flowcontrol: make TestConfigConsumer less time-consuming [#98693](https://github.com/openshift/kubernetes/pull/98693)
* Dual stack tests: cover hostnetwork endpoints on dual stack [#98690](https://github.com/openshift/kubernetes/pull/98690)
* Update gogo/protobuf to v1.3.2 [#98477](https://github.com/openshift/kubernetes/pull/98477)
* Preparation for Topology migration to GA for CSI migration [#97823](https://github.com/openshift/kubernetes/pull/97823)
* Remove deprecated DenyEscalatingExec / DenyExecOnPrivileged admission [#98669](https://github.com/openshift/kubernetes/pull/98669)
* kubeadm: introduce static defaults for unit tests [#98638](https://github.com/openshift/kubernetes/pull/98638)
* Add unit test for sample-and-watermark histograms [#97753](https://github.com/openshift/kubernetes/pull/97753)
* Cleanup: remove prometheus dependencies for scheduler [#98338](https://github.com/openshift/kubernetes/pull/98338)
* scheduler: Extend ExtenderFilterResult to include UnschedulableAndUnresolvable nodes [#92866](https://github.com/openshift/kubernetes/pull/92866)
* kubeadm: optimize tests in pki_helpers_tests.go [#98682](https://github.com/openshift/kubernetes/pull/98682)
* fix all keps links 404 for kep folder migration [#98049](https://github.com/openshift/kubernetes/pull/98049)
* Scheduler: organize framework unit tests in subtests [#98588](https://github.com/openshift/kubernetes/pull/98588)
* issues-98409 fix the address of restful-serve-static.go in the commen… [#98455](https://github.com/openshift/kubernetes/pull/98455)
* Expose node status so that external preemption plugins can use it [#98129](https://github.com/openshift/kubernetes/pull/98129)
* serializer: Recognizer interface should take a buffer [#98616](https://github.com/openshift/kubernetes/pull/98616)
* Move Taint/Toleration helpers to component-helpers repo [#98445](https://github.com/openshift/kubernetes/pull/98445)
* Install gotestsum if needed for junit results [#98668](https://github.com/openshift/kubernetes/pull/98668)
* lease manager limit max objects attached to a lease [#98257](https://github.com/openshift/kubernetes/pull/98257)
* Set DOCKER_CLI_EXPERIMENTAL=enabled for images using buildx [#98672](https://github.com/openshift/kubernetes/pull/98672)
* retry dry-run update on conflict [#98670](https://github.com/openshift/kubernetes/pull/98670)
* Graduate ServiceAccountIssuerDiscovery to GA [#98553](https://github.com/openshift/kubernetes/pull/98553)
* Use private key fixtures for kubeadm unit tests [#98664](https://github.com/openshift/kubernetes/pull/98664)
* Network tests: check for errors when dialing from node to services [#98655](https://github.com/openshift/kubernetes/pull/98655)
* Scheduler: remove duplicated error log in framework [#98625](https://github.com/openshift/kubernetes/pull/98625)
* Adding myself as an approver for EndpointSlice controller [#98650](https://github.com/openshift/kubernetes/pull/98650)
* add i18n.T in waitExample [#98503](https://github.com/openshift/kubernetes/pull/98503)
* migrate pkg/scheduler/internal/cache/debugger/comparer.go to structured logs [#98566](https://github.com/openshift/kubernetes/pull/98566)
* Update support resources in github issue template [#98528](https://github.com/openshift/kubernetes/pull/98528)
* Fix staticcheck in test/integration/{examples,framework} [#97295](https://github.com/openshift/kubernetes/pull/97295)
* hack/lib/version.sh: fix error log to stderr [#97999](https://github.com/openshift/kubernetes/pull/97999)
* Move ServiceAccountIssuerDiscovery test into main e2e suite [#98587](https://github.com/openshift/kubernetes/pull/98587)
* Remove WindowsGMSA and WindowsRunAsUserName feature gates [#96531](https://github.com/openshift/kubernetes/pull/96531)
* Add a hyperlink to issue 97685 [#98082](https://github.com/openshift/kubernetes/pull/98082)
* klog 2.5.0 + logr 0.4.0 update [#98488](https://github.com/openshift/kubernetes/pull/98488)
* improve hairpin warning message for network policy tests [#98584](https://github.com/openshift/kubernetes/pull/98584)
* Fix SSA for APIService [#98576](https://github.com/openshift/kubernetes/pull/98576)
* check externalNameService more time [#98521](https://github.com/openshift/kubernetes/pull/98521)
* Remove piosz and add ehashman for sig-inst [#98575](https://github.com/openshift/kubernetes/pull/98575)
* Switch to `docker buildx` for conformance image [#98569](https://github.com/openshift/kubernetes/pull/98569)
* Scheduler: move GetAvoidPodsFromNodeAnnotations to component-helpers [#98540](https://github.com/openshift/kubernetes/pull/98540)
* Disable in-tree plugin without enabling CSI migration [#98243](https://github.com/openshift/kubernetes/pull/98243)
* deflake ipv6 tcp close_wait [#98551](https://github.com/openshift/kubernetes/pull/98551)
* add unit test to simulate an enqueued request that times out [#97471](https://github.com/openshift/kubernetes/pull/97471)
* Move dependency docker/spdystream to moby/spdystream [#98565](https://github.com/openshift/kubernetes/pull/98565)
* Add alisondy to sig-contribex-approvers [#98514](https://github.com/openshift/kubernetes/pull/98514)
* move e2e hostport conflict test to sig-network [#98299](https://github.com/openshift/kubernetes/pull/98299)
* Fix translation of Cinder storage classess to CSI [#98311](https://github.com/openshift/kubernetes/pull/98311)
* optimize proxier duplicate localaddrset [#98083](https://github.com/openshift/kubernetes/pull/98083)
* Fix some shellcheck warnings/errors in cluster/gce/util.sh [#94456](https://github.com/openshift/kubernetes/pull/94456)
* Add timeout config for node_e2e tests [#83268](https://github.com/openshift/kubernetes/pull/83268)
* fix staticcheck:pkg/volume/testing [#96599](https://github.com/openshift/kubernetes/pull/96599)
* add check to gc_admission to allow super users to skip RESTMapping [#98147](https://github.com/openshift/kubernetes/pull/98147)
* Sync node status during kubelet node shutdown [#98005](https://github.com/openshift/kubernetes/pull/98005)
* Fix variable 'state' collides with imported package name [#97748](https://github.com/openshift/kubernetes/pull/97748)
* test images: use recently promoted images [#98320](https://github.com/openshift/kubernetes/pull/98320)
* kubelet: Fix NPE in ephemeral storage eviction [#98261](https://github.com/openshift/kubernetes/pull/98261)
* Remove garbage characters (^M) under test/* [#98245](https://github.com/openshift/kubernetes/pull/98245)
* Fix typo [#98156](https://github.com/openshift/kubernetes/pull/98156)
* Surface info of failed plugins during PerFilter and Filter [#98041](https://github.com/openshift/kubernetes/pull/98041)
* Add explanation for kubeClient != nil in NewMainKubelet [#97932](https://github.com/openshift/kubernetes/pull/97932)
* e2e: DNS autoscaler test was not counting nodes correctly [#97815](https://github.com/openshift/kubernetes/pull/97815)
* Change GetBootTime to work specificaly with FreeBSD [#97270](https://github.com/openshift/kubernetes/pull/97270)
* update metadata-concealment to 1.6 for removing legacy checking [#98336](https://github.com/openshift/kubernetes/pull/98336)
* use exist const to replace ipvs/proxier.go tcp,udp,sctp str [#98297](https://github.com/openshift/kubernetes/pull/98297)
* plumb context with request deadline [#96901](https://github.com/openshift/kubernetes/pull/96901)
* Remove golint based verifications [#98063](https://github.com/openshift/kubernetes/pull/98063)
* Add denyserviceexternalips admission (KEP 2200) [#97395](https://github.com/openshift/kubernetes/pull/97395)
* fix Geting -> Getting [#98421](https://github.com/openshift/kubernetes/pull/98421)
* change minimum bash version to 4.2 [#98420](https://github.com/openshift/kubernetes/pull/98420)
* Update owner aliases [#98530](https://github.com/openshift/kubernetes/pull/98530)
* dependencies: update CSI spec to v1.3.0 [#98527](https://github.com/openshift/kubernetes/pull/98527)
* Rolling back network policy tests [#98491](https://github.com/openshift/kubernetes/pull/98491)
* Use buildx in favor of `FROM --platform` syntax [#98529](https://github.com/openshift/kubernetes/pull/98529)
* Change log: fix broken page anchor url encodings [#98209](https://github.com/openshift/kubernetes/pull/98209)
* Scheduler: wrap all errors in pkg/scheduler [#98485](https://github.com/openshift/kubernetes/pull/98485)
* test images: Remove busybox-helper image [#97456](https://github.com/openshift/kubernetes/pull/97456)
* Bump debian-base to v1.4.0 and debian-iptables to v1.5.0 [#98526](https://github.com/openshift/kubernetes/pull/98526)
* Remove unbounded connection creation; also change worst case delay from 50s to 5s [#98496](https://github.com/openshift/kubernetes/pull/98496)
* Fix the bug that network proxy logging http-connect mode in all cases [#98456](https://github.com/openshift/kubernetes/pull/98456)
* Add pod information to the error logs [#98453](https://github.com/openshift/kubernetes/pull/98453)
* Cleanup: remove legacy prometheus visibility package_group [#98344](https://github.com/openshift/kubernetes/pull/98344)
* CHANGELOG-1.19.md: Fix Spelling error about [function] [#97628](https://github.com/openshift/kubernetes/pull/97628)
* Skip PD tests on 1 node cluster [#98187](https://github.com/openshift/kubernetes/pull/98187)
* fix all grammar and spelling issues in releases of 20210113 [#98047](https://github.com/openshift/kubernetes/pull/98047)
* Update to go1.15.7 [#98363](https://github.com/openshift/kubernetes/pull/98363)
* Deflake ingress e2e updates [#98430](https://github.com/openshift/kubernetes/pull/98430)
* staging/src/k8s.io/apiserver/pkg/admission: migrate to structured logs [#98138](https://github.com/openshift/kubernetes/pull/98138)
* Disallow local loopback for volume hosts [#97934](https://github.com/openshift/kubernetes/pull/97934)
* Add dims to test/utils/image/OWNERS [#98437](https://github.com/openshift/kubernetes/pull/98437)
* update debian-base to buster-v1.3.0 for CVEs [#98401](https://github.com/openshift/kubernetes/pull/98401)
* prefer nominated node - IMPL [#93179](https://github.com/openshift/kubernetes/pull/93179)
* Misspelling of the variable name [#98406](https://github.com/openshift/kubernetes/pull/98406)
* Resolve IP addresses of host-only in filtered dialer [#98436](https://github.com/openshift/kubernetes/pull/98436)
* run node bandwidth tests using iperf2 and collecting more detailed information [#94015](https://github.com/openshift/kubernetes/pull/94015)
* Bug Fix for process_start_time_metric initialization [#98391](https://githu