# 4.8.53

Created: 2022-11-09 09:22:57 +0000 UTC

Image Digest: `sha256:ac2bbfa7036c64bbdb44f9a74df3dbafcff1b851d812bf2a48c4fabcac3c7a53`

Promoted from registry.ci.openshift.org/ocp/release:4.8.0-0.nightly-2022-11-08-061626


## Changes from 4.8.33

### Components

* Kubernetes upgraded from 1.21.6 to 1.21.11
* Red Hat Enterprise Linux CoreOS upgraded from 48.84.202202142303-0 to 48.84.202211030947-0


### Rebuilt images without code change

* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [d1fe616c](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/d1fe616c0da0edddb7019a64b0ad1136b36a5f26) `sha256:e4500efff35733c60983fe95418a244f8a35122decbdfd7374da17147b4cbf8b`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [58ef8af8](https://github.com/openshift/aws-pod-identity-webhook/commit/58ef8af861317beceac26691d5c452af45ca0e4a) `sha256:fc4ec47f894409dce8c61473c6408c5012c5abb302fb711ef8e2858f79e38fd0`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [2d461b39](https://github.com/openshift/azure-disk-csi-driver/commit/2d461b39bacc76f0b879f943015df4d2191f72f4) `sha256:c78dbe0731a5ab3fabdd7340730829a7682b0cf2691ebc480b36b9dc296bcded`
* [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [d3a3c298](https://github.com/openshift/azure-disk-csi-driver-operator/commit/d3a3c298c91371ccd37896857f623f4494dd78a6) `sha256:fd4aadb2b847a41f950c4422b87b0c5fd33c6a3d500392a8b7be87ae902eedf1`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [7bbde4cc](https://github.com/openshift/kubernetes-autoscaler/commit/7bbde4cc4ddb1d0030f23b789b4bbf48ab3ef79d) `sha256:4ac7ea1f93dc0650c8b6df9602db0dc6d70db8065e7d7ccf113f086093e7bacb`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [917d395f](https://github.com/openshift/cluster-autoscaler-operator/commit/917d395f0483ba1b0f516283d9247c585039347a) `sha256:9f9ac257ad5b7a564f9f17eb698ba3b621e963e55b76c68fc93309ee229989e5`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [1af395b7](https://github.com/openshift/cluster-bootstrap/commit/1af395b7881d951a824858f5d393357609bddbf0) `sha256:d7837dddaa07b09579a7b9b678891f5172f34ffe1a417a90aa7e6c1217f81392`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [07b3f810](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/07b3f81036401073d68eb1ef152b96ab5e5a2fc6) `sha256:1c35fe21f15ab7b127605fe4b1935f98188a77a7f375c303b162f1836fc7591c`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [fdb2ebec](https://github.com/openshift/cluster-dns-operator/commit/fdb2ebecdeb992444964f84fd0b5c17f37d80536) `sha256:23a0cc7140d5d2605ccabe5adea839d1e0bf17410ffa800f12f79227609b7179`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [7fa48ebf](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/7fa48ebf34e8c810ce8cbe8b62a4e10a7326856c) `sha256:f5d8a040f711995c1d951872df4267fe592f395af664c5fe638ec023407f0f65`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [50c639cc](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/50c639cc7e318c1dab38a2869b928cf703a38515) `sha256:b64ba947a285582cb4d4e71a2826027f28d1ae0ca5ef9524671184c10e814b7e`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [f0a396ee](https://github.com/openshift/cluster-machine-approver/commit/f0a396eee469a3ace9e473c0476a29d8983671eb) `sha256:012a4593411fa80e9c5e0c0eff7337d715993ecd5912db441bd591be29d2853b`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [286c1577](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/286c157755c8120ce969c7c15f969737b46b1a0a) `sha256:8e994c499ec99f196ad38ab7d56862f7258eed25cfc9b01ceedb121bd19946cb`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [ec46ea5c](https://github.com/openshift/cluster-policy-controller/commit/ec46ea5ce3735fcb3d10290834f9ae5fb31148f0) `sha256:9f18876f9ed494e2214db3914e50c3f81d8a4246e691cc002f2f4bcff51e057c`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [31fb491f](https://github.com/openshift/cluster-samples-operator/commit/31fb491fc14faed6ebbe41a526764947069ff0a2) `sha256:62d98dc718089fea29866cd7893de11d24f8b9fbc67662ff736042fbed9b3591`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [87835b73](https://github.com/openshift/cluster-update-keys/commit/87835b737f0a90a6259150746114f251241bf52e) `sha256:c2ff6d312d500f96c0ccf046a8fa678158d9bb96ad927bb9e7d12cdf0bbfc792`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [0d221296](https://github.com/openshift/configmap-reload/commit/0d221296e3918abc3c1367a1e7c220baf000965a) `sha256:246599a77d03e8316be68e5c990ea5fc6e3a50bf5e81f5f86e74d5acd9781d1f`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [71a8b346](https://github.com/openshift/containernetworking-plugins/commit/71a8b3469df865daf68cb893bfe313328d4be992) `sha256:3ff5408ef42ee51912545e8be2267cbb7c46e26f71d44a801021a2d9a31d4f22`
* [coredns](https://github.com/openshift/coredns) git [642b46ef](https://github.com/openshift/coredns/commit/642b46ef468d132d26c3f84a8bcb4b542d8df1e6) `sha256:0bc95c9a9d52eb870744539490ece8394a1fb8e07bf775f393921c03f3470956`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [3579eadc](https://github.com/openshift/cloud-provider-openstack/commit/3579eadc9b0e195a4bb80d9a43a33a250c4a8dd6) `sha256:2b2177d54861e1a83c8876eabf580f3e543c4e3cb529e2206d78096785ac5d20`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [f6ffb0d7](https://github.com/openshift/csi-driver-manila-operator/commit/f6ffb0d7c2935db9d349f8dc1c51d9ea1b0df5ce) `sha256:cef5e4fd0ac807a9d21f5f437a6e4c49963f11e6b2742e67139ef916c96b1ea5`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [583088ef](https://github.com/openshift/csi-driver-nfs/commit/583088efa37346e23ed056b57ea24e61b0e5b9d8) `sha256:4d10b026f5e9ba02bea3d9c9440f46d3fb2326c4ac197ebd81c823d8f5b1cbf4`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [596da63e](https://github.com/openshift/csi-external-attacher/commit/596da63ecf2886a9bce19c08ad1120e123b498af) `sha256:c2b5bfa40183cfee4e31560774d0cbf6ee81adb37bb43427745efc885ce919ec`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [3ea7e68a](https://github.com/openshift/csi-external-provisioner/commit/3ea7e68a518870d63c7da9485f8a69fa1555b452) `sha256:f4cdde1d86820d39af7e11e2e90f4d44a1794d833f04bb83797c8faedb2d09ee`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [b5dd2b39](https://github.com/openshift/csi-external-resizer/commit/b5dd2b39e9dfb83addd0c07654c3b9119e24cb36) `sha256:3d5254433e5a02aa08f7f6f62305d3d850ab25bbbe3239bce1313a136303ac29`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:098d836773421d7a11a7e3d05c83120bdb8e0997c8f49c18a6bb68165e84cc54`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [a29b1153](https://github.com/openshift/csi-livenessprobe/commit/a29b1153451d6ffa6fbcb1dacbe25639c2523488) `sha256:bc2a0568245a51266356536a883e29a4f2f8808482bc6b4305a1c5db93f6b46f`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [0519730f](https://github.com/openshift/csi-node-driver-registrar/commit/0519730f75f89c11f1ee07c7f81b0bcae1ddf705) `sha256:beec661b3cb4f96ecf13862cc993c8050e9e4e7f1e3951b86657d732050e85ae`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:b123bacfc36d50fb489daf96faf2041f8c09a16cb713fb0fa555e0f52077999c`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [1e2cca95](https://github.com/openshift/csi-external-snapshotter/commit/1e2cca95999057e16fcfee07e8068f7a77f2e164) `sha256:25f83697f03fb31fa5059a057447eb84999bc7ef1f6ebe53b66878aa9b645832`
* [docker-registry](https://github.com/openshift/image-registry) git [bc68848b](https://github.com/openshift/image-registry/commit/bc68848bf1e6fe91378510a0b0ef30cfcb6ec39e) `sha256:90ab00db68cafb58e94e63e3180ea6b588f598a94402fbd9538649176bcc5402`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [076a9209](https://github.com/openshift/driver-toolkit/commit/076a9209048c7d478f59084409c2dca5e3a6f2d8) `sha256:9aba112bc134798a09438981a07ea17033ae5c3ea661384f6a1f099e3280ff16`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [016bea1a](https://github.com/openshift/egress-router-cni/commit/016bea1a6f5ec53aab8e936f4120c32a05322027) `sha256:965f09d124c2a714e8e9f10620bf7d01097d03f9a3df246b5c04236c51464bc4`
* [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [34db56eb](https://github.com/openshift/cluster-api-provider-gcp/commit/34db56ebf7a8a46828f5830d42b26f9d2bdd0db1) `sha256:35ce2b149ef8216af39aa5d7ac387471654943b65ddbab56e079add8bdba32a6`
* [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [35ebe860](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/35ebe86003c339821d3a36186a66f8ef86049932) `sha256:0a57cc4071e1bd16611ffaa03454a168386dc18b0f05d6f0daa5300aa79c290b`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [b3ecae8d](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/b3ecae8d1c6cd84a8784cf3dd17532797af7b724) `sha256:27a1dc7894b83e3d755c08bf9f05d21b1be530360201ddfffc630569b0c918ef`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [08761ed5](https://github.com/openshift/ironic-inspector-image/commit/08761ed526b7817de7c92e0d621698404fca7a05) `sha256:e086ebdcfd6496549424d85d5016f91f68f39e65d026aa4954a874b7979b3535`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [dceaf133](https://github.com/openshift/ironic-rhcos-downloader/commit/dceaf1333634a4aea3f211849e81a6247160122b) `sha256:65bda2e4445633acadb4494f24e68a9d58fa6152d8ad0b35f5937894912bcfef`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [d2e40e34](https://github.com/openshift/ironic-static-ip-manager/commit/d2e40e34f8284d0ac7c4e9133b537baeac07b408) `sha256:898ffd4129aaa65b6ce2d727221a06c1768beb017eaf7945bfe6f2e8ae971661`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [bfffea3b](https://github.com/openshift/k8s-prometheus-adapter/commit/bfffea3bf70fc5203814886f6483a569f2f22c87) `sha256:53a079b7305eb1d854bf408cd15349a0f0ca20dfc499e41a182f6fefd16c0814`
* [keepalived-ipfailover](https://github.com/openshift/images) git [ad38e116](https://github.com/openshift/images/commit/ad38e116f3533e0e78621a2887d8b70cde7cba31) `sha256:9b6774e15990c3ffa61724c4f0c4a0dc573367a70d53ecd64d8bed74e1b08720`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [813c3da7](https://github.com/openshift/kube-rbac-proxy/commit/813c3da7222a4ccc95ef3827cd54b0ce93a8cbe5) `sha256:701f7139a68824adf445b2bc123e28dbf5981324ac159133a9c75d74f9e02d08`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [94716629](https://github.com/openshift/kube-state-metrics/commit/947166293195d115500d4479c0c40c8c01a25ad0) `sha256:ea44e40d70d99e355379415386cf6bbf15d1b381402f83fb69c03ff9e4e41116`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [ddd2c3ad](https://github.com/openshift/kuryr-kubernetes/commit/ddd2c3adeac4d31711a7949c347f444ee4fdce6d) `sha256:8e24bc76ea9ae5fe55dd0baf1445fa1ef337f09eb2a8831e082636b3f7694937`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [ddd2c3ad](https://github.com/openshift/kuryr-kubernetes/commit/ddd2c3adeac4d31711a7949c347f444ee4fdce6d) `sha256:1e46fab52cda468d6f4220caa45d87da27e2ed7f25ac5191b32db8ff37e12a8a`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [9542e5ac](https://github.com/openshift/cluster-api-provider-libvirt/commit/9542e5ac08b7731a37d20c881695aab904201c22) `sha256:a28c7d9e89041f89dfd643532d0b7a1618d6aab2823945e0d9ca42a7d9a109b2`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [edc3e864](https://github.com/openshift/machine-api-operator/commit/edc3e864006486a7a85e2e5e4297e307339e9f0e) `sha256:9bd8ec0207f3d68ff5ee7802ca52d62dec0cdf33adfb6396cb56bd304a607009`
* machine-os-content `sha256:34669a57488b9f00441d86e640c3cd50d633360cdcb4424e82a217dea667c0a5`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [1c707a28](https://github.com/openshift/mdns-publisher/commit/1c707a28e88b42780fb37fad4532be7220acd1c5) `sha256:0b6dddaf0bef970c5172980da825aeae91e661241cd4ea14c19fc0396c78e2bb`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [64645feb](https://github.com/openshift/multus-admission-controller/commit/64645febe4129a794b1291d0a375a7b2bb7fba39) `sha256:8d1e073204ebe8e174dddd73505d75ef49018cbd97326a790cc72ecbd9b82aa9`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [187ad91f](https://github.com/openshift/multus-networkpolicy/commit/187ad91f119ff6b73610922012e7af4e704c5e93) `sha256:14bc06e604423863314824cd7657f3a27d0a12a1fe0056b21d6d22a2f32f476f`
* [network-tools](https://github.com/openshift/network-tools) git [5ac3739e](https://github.com/openshift/network-tools/commit/5ac3739e4382eb10cdd9209c8947096997fe38a2) `sha256:c750285329a579bcfdc938fde37687e10b3be5985dd5a1aa82977a0402b18505`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [3fc0d89b](https://github.com/openshift/oauth-proxy/commit/3fc0d89b2607808927f5b48168342f5dc3a1a271) `sha256:f3294083d3379b09e902a29e70ddb28ded2566208c0cbbd3f9f62cd48f77f44a`
* [oauth-server](https://github.com/openshift/oauth-server) git [374e2ee3](https://github.com/openshift/oauth-server/commit/374e2ee38a1910c6d56172e9d4ec1828c4dea1be) `sha256:65bd5f1ff75392fbce96ba3db803ad6af71322f102b906205a3d83d97a28d5d6`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [69a83a3f](https://github.com/openshift/openshift-controller-manager/commit/69a83a3f3c290519692a66fd5ffe89586eb1b4b9) `sha256:df28c49e1cbbb58b130e545cd9e31a40166f97dfd58e7065549a9781ad81d248`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [10142914](https://github.com/openshift/openshift-state-metrics/commit/101429149266e2c86a41b82baf47a033c9a93b02) `sha256:09488d0f324a3a13dbd38a5015b2bc171c3a85333d6ca45c238c75fd43e03c03`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [3579eadc](https://github.com/openshift/cloud-provider-openstack/commit/3579eadc9b0e195a4bb80d9a43a33a250c4a8dd6) `sha256:f96ff99bc8a93498d660de462208a4825ec2a78fa9bf72931d3a47404bc2735c`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [d431a72b](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/d431a72bce1aa5ce8d1e5cf7ba810ccaabacb5bb) `sha256:2a1790a56ab61aebcddfbbd2bd13472f2f65f56a3d60741f8b61a8054cd17d65`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [3f3d7d1f](https://github.com/operator-framework/operator-marketplace/commit/3f3d7d1f9e914aff08d2ca2b5663358c8b611656) `sha256:a4199050d1e2f19682bcfee60d7412889f0de2f4d42b792f45b33963eff95765`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [c57863f2](https://github.com/openshift/ovirt-csi-driver/commit/c57863f25ec68b34f3928e02b9b750cfcef3c99c) `sha256:ed425159e8b38f0aaae75657f5a15a3382b6210e936211a178a8bcd66fd9d28d`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [368223b8](https://github.com/openshift/cluster-api-provider-ovirt/commit/368223b8507596055a33b731a7942aab82f59ce0) `sha256:b1353a9807a3fd122c0ca8af55fed4e5d9cb3b2af1d8c9af1ea0db0bd2680e50`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [2faeb405](https://github.com/openshift/prom-label-proxy/commit/2faeb4050010914d6b55da38bffb44b95702e052) `sha256:534de3f8fd891334a84ed508fd73f516dce6fac914b5b59ae552b7a1e7bd29ea`
* [prometheus](https://github.com/openshift/prometheus) git [f3beb880](https://github.com/openshift/prometheus/commit/f3beb880dbde817bf5ed2befc1880445884e4be0) `sha256:8a18e7438779244761d726727a18f271ad0120be7e9e1b5570b4d36a05cd4532`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [7b5ac874](https://github.com/openshift/prometheus-alertmanager/commit/7b5ac8741d87542c43d002aef3b881d7f8065133) `sha256:f7eeb90d99ecdb7470ef5db953ace91f47482bd661bcb25c096fbafd856e6479`
* [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [8f4efab9](https://github.com/openshift/prometheus-operator/commit/8f4efab9e7fa34f79a5900d95113f62908889168) `sha256:4aa086b509c8efa64963fe907dff01ac4e428d1170e0cfb2d878dc9ce439b1ac`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [9ad2cf90](https://github.com/openshift/node_exporter/commit/9ad2cf906b9c0c44110401f121dc5cf7d657acca) `sha256:1619c5e4bf16703da35e539aff69b7da977f63fa7ff3bd5a4162fc7af32366e3`
* [prometheus-operator](https://github.com/openshift/prometheus-operator) git [8f4efab9](https://github.com/openshift/prometheus-operator/commit/8f4efab9e7fa34f79a5900d95113f62908889168) `sha256:3c5fc62c3a1825cc061bc46fa06886caaa185731e03c8b2ed42e0bcdd22dc18f`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [b66c4506](https://github.com/openshift/service-ca-operator/commit/b66c45062dd1c4fc4ce7de2f587647522af60e11) `sha256:4f81624462b1e38caf037beea08f1f36611f4740e35e31a5acd0520a0364e382`
* [telemeter](https://github.com/openshift/telemeter) git [eabad556](https://github.com/openshift/telemeter/commit/eabad556e8759422b85b2f27248c52626245f1ba) `sha256:3ddcf21a4f353e47824acb4afbf2ce618f763f646300103983c23a763c0aeab6`
* [thanos](https://github.com/openshift/thanos) git [f7c1227d](https://github.com/openshift/thanos/commit/f7c1227d2009f439d4200e305246659ebea299f8) `sha256:089fa4ca5f6f52b1d5414786611efc132b0a315db5dab121488d63d6564660a0`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:6cf5d5985b615d150b82f526b3fb02cd278710c5dfa9670d83f2e6ba1f1c2afc`
* [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [18cd9873](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/18cd9873078206f26d25ecf18893ba0864c0cf62) `sha256:c6fdc1ea133eed95dc26111abc3f2fdde98796750d44748137acea13364f5208`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [dd5345eb](https://github.com/openshift/vmware-vsphere-csi-driver/commit/dd5345eb7ed3c68eff6619ca434b5e83083f5bc9) `sha256:0ab269bccc033c2f4bb78dec874173f1e7efeda292ed1930bb0f97954afbe096`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [9ff99650](https://github.com/openshift/vsphere-problem-detector/commit/9ff996502f4cb87c89985cdaff346754d645b988) `sha256:392b9a7351f54a49d06011af73e9ed486509bec54d4baf47930616818754286c`


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/f052c89e99c63497b15e5bd38e2a5a71036fdefa)

* [Bug 2106910](https://bugzilla.redhat.com/show_bug.cgi?id=2106910): Rebase to v1.4.0 [#205](https://github.com/openshift/aws-ebs-csi-driver/pull/205)
* Release v1.4.0 [#1089](https://github.com/openshift/aws-ebs-csi-driver/pull/1089)
* Release v1.3.1 [#1084](https://github.com/openshift/aws-ebs-csi-driver/pull/1084)
* Reorder isMounted for readability [#1087](https://github.com/openshift/aws-ebs-csi-driver/pull/1087)
* deploy: Fix csi-resizer tag and bump to v1.1.0 [#1085](https://github.com/openshift/aws-ebs-csi-driver/pull/1085)
* Search for nvme device path even if non-nvme exists [#1082](https://github.com/openshift/aws-ebs-csi-driver/pull/1082)
* Fix windows NodePublish failing because mount target doesn't exist [#1081](https://github.com/openshift/aws-ebs-csi-driver/pull/1081)
* deploy: Add resizer and snapshotter images to kustomization [#1080](https://github.com/openshift/aws-ebs-csi-driver/pull/1080)
* Move mocks to parent package to avoid import cycle [#1078](https://github.com/openshift/aws-ebs-csi-driver/pull/1078)
* Refactor pkg/cloud/metadata.go into pkg/cloud/metadata_*.go files [#1074](https://github.com/openshift/aws-ebs-csi-driver/pull/1074)
* Update windows example for image release [#1070](https://github.com/openshift/aws-ebs-csi-driver/pull/1070)
* Allow default fstype to be overriden via values.yaml [#1069](https://github.com/openshift/aws-ebs-csi-driver/pull/1069)
* merge 1.3.0 release and post-release commits into master [#1068](https://github.com/openshift/aws-ebs-csi-driver/pull/1068)
* Bump csi-proxy from RC v1.0.0 to GA v1.0.1 [#1018](https://github.com/openshift/aws-ebs-csi-driver/pull/1018)
* Support image.pullPolicy for csi-resizer image [#1045](https://github.com/openshift/aws-ebs-csi-driver/pull/1045)
* Recognize instance-type node label when EC2 metadata isn't available [#1060](https://github.com/openshift/aws-ebs-csi-driver/pull/1060)
* Fix spacing in RELEASE.md [#1035](https://github.com/openshift/aws-ebs-csi-driver/pull/1035)
* merge patch commits back to master [#1058](https://github.com/openshift/aws-ebs-csi-driver/pull/1058)
* Fix windows build IsCorruptedMnt not implemented [#1047](https://github.com/openshift/aws-ebs-csi-driver/pull/1047)
* hash volume name to get client token [#1041](https://github.com/openshift/aws-ebs-csi-driver/pull/1041)
* Include ClusterRole and ClusterRoleBinding for csi-node [#1021](https://github.com/openshift/aws-ebs-csi-driver/pull/1021)
* Node Publish Mount Idempotent [#1019](https://github.com/openshift/aws-ebs-csi-driver/pull/1019)
* Fix gcr prow builld failing because docker missing --os-version [#1020](https://github.com/openshift/aws-ebs-csi-driver/pull/1020)
* Add controller strategy [#1008](https://github.com/openshift/aws-ebs-csi-driver/pull/1008)
* Update helm chart alongside kustomize, after images have been pushed, for consistency [#1015](https://github.com/openshift/aws-ebs-csi-driver/pull/1015)
* Fix gcr prow build failing because of IMAGE variable collision [#1017](https://github.com/openshift/aws-ebs-csi-driver/pull/1017)
* Fix github build failing because of wrong docker hub registry name [#1016](https://github.com/openshift/aws-ebs-csi-driver/pull/1016)
* Build and push multi-arch/os (amazon and windows, no debian) image manifest via Make rules [#957](https://github.com/openshift/aws-ebs-csi-driver/pull/957)
* Node update strategy & auto driver image tag [#988](https://github.com/openshift/aws-ebs-csi-driver/pull/988)
* Update kustomize templates only after verifying images are available in registries [#995](https://github.com/openshift/aws-ebs-csi-driver/pull/995)
* Release v1.2.0 [#1005](https://github.com/openshift/aws-ebs-csi-driver/pull/1005)
* release v1.2.0 - part 2 [#1004](https://github.com/openshift/aws-ebs-csi-driver/pull/1004)
* release v1.2.0 - part 1 [#999](https://github.com/openshift/aws-ebs-csi-driver/pull/999)
* add ecr images to readme [#998](https://github.com/openshift/aws-ebs-csi-driver/pull/998)
* utilize latest go sdk to ensure createVolume idempotency [#982](https://github.com/openshift/aws-ebs-csi-driver/pull/982)
* Release 1.1.3 [#992](https://github.com/openshift/aws-ebs-csi-driver/pull/992)
* Update base images: yum update al2, bump debian tag [#986](https://github.com/openshift/aws-ebs-csi-driver/pull/986)
* Increased the helm chart version [#980](https://github.com/openshift/aws-ebs-csi-driver/pull/980)
* Updated default setting of windows daemon set [#978](https://github.com/openshift/aws-ebs-csi-driver/pull/978)
* Updated README.md and changed the version in snapshot example [#976](https://github.com/openshift/aws-ebs-csi-driver/pull/976)
* Add how to consume new hack/e2e scripts in other repos (efs/fsx) [#972](https://github.com/openshift/aws-ebs-csi-driver/pull/972)
* Update to csi-proxy v1 APIs [#966](https://github.com/openshift/aws-ebs-csi-driver/pull/966)
* Several breaking changes to the helm chart [#965](https://github.com/openshift/aws-ebs-csi-driver/pull/965)
* Feature/allow add debug args [#970](https://github.com/openshift/aws-ebs-csi-driver/pull/970)
* Nit: Fix typo in the CHANGELOG [#971](https://github.com/openshift/aws-ebs-csi-driver/pull/971)
* Install snapshot controller independently of helm for e2e tests [#968](https://github.com/openshift/aws-ebs-csi-driver/pull/968)
* Release v1.1.1 and chart v1.2.4 [#959](https://github.com/openshift/aws-ebs-csi-driver/pull/959)
* Download fixed version of eksctl to avoid bugs [#967](https://github.com/openshift/aws-ebs-csi-driver/pull/967)
* csi-snapshotter in ebs-csi-controller now checks for enableVolumeSnapshot before including it in containers [#960](https://github.com/openshift/aws-ebs-csi-driver/pull/960)
* Stop pushing latest tag and remove all references to it [#949](https://github.com/openshift/aws-ebs-csi-driver/pull/949)
* Add migration upgrade/downgrade test [#927](https://github.com/openshift/aws-ebs-csi-driver/pull/927)
* Clarify that using instance profile for permission requires instance metadata access on [#952](https://github.com/openshift/aws-ebs-csi-driver/pull/952)
* Adding CRDs VolumeSnapshotClass, VolumeSnapshotContent, VolumeSnapshot for snapshot.storage.k8s.io/v1 [#938](https://github.com/openshift/aws-ebs-csi-driver/pull/938)
* Revert "Fix kustomize RBAC bindings to have namespace kube-system" [#947](https://github.com/openshift/aws-ebs-csi-driver/pull/947)
* Implement Windows NodePublish/Unpublish [#823](https://github.com/openshift/aws-ebs-csi-driver/pull/823)
* Update example policy, use it in tests, and document it [#940](https://github.com/openshift/aws-ebs-csi-driver/pull/940)
* Default controller.extra-create-metadata true so that volumes get created with pvc/pv tags [#941](https://github.com/openshift/aws-ebs-csi-driver/pull/941)
* Grant EKSCTL_ADMIN_ROLE admin access to eksctl clusters [#933](https://github.com/openshift/aws-ebs-csi-driver/pull/933)
* Add KubernetesCluster tag to provisioned volumes when cluster-id set [#932](https://github.com/openshift/aws-ebs-csi-driver/pull/932)
* Default extra-create-metadata true so that volumes get created with pvc/pv tags [#937](https://github.com/openshift/aws-ebs-csi-driver/pull/937)
* Add test-e2e-external-eks make rule that tests EKS with pod instance metadata disabled. Remove hostNetwork from DaemonSet [#907](https://github.com/openshift/aws-ebs-csi-driver/pull/907)
* Disable uuid checks on XFS [#913](https://github.com/openshift/aws-ebs-csi-driver/pull/913)
* Update driver capabilities [#922](https://github.com/openshift/aws-ebs-csi-driver/pull/922)
* helm chart configurable log verbosity [#908](https://github.com/openshift/aws-ebs-csi-driver/pull/908)
* update inFlight cache to avoid race condition on volume operation [#924](https://github.com/openshift/aws-ebs-csi-driver/pull/924)
* Fix podLabels case in Helm chart [#925](https://github.com/openshift/aws-ebs-csi-driver/pull/925)
* merge v1.1.0 release commits back to master [#921](https://github.com/openshift/aws-ebs-csi-driver/pull/921)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/8c036e44147d9e4546c726b934dedda3940790af...f052c89e99c63497b15e5bd38e2a5a71036fdefa)


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/0fae08ce8e72d491cc429f171421c140e8a324ac)

* [OCPBUGS-2861](https://issues.redhat.com/browse/OCPBUGS-2861): Release-4.8 Fix go list for go1.18 [#450](https://github.com/openshift/cluster-api-provider-aws/pull/450)
* [OCPBUGS-895](https://issues.redhat.com/browse/OCPBUGS-895): Fix panic when accessing nil machine annotations map [#447](https://github.com/openshift/cluster-api-provider-aws/pull/447)
* [Bug 2066675](https://bugzilla.redhat.com/show_bug.cgi?id=2066675): Ensure IOPS setting is honoured on all supported block device types [#437](https://github.com/openshift/cluster-api-provider-aws/pull/437)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/cfd8736ecc3de3039931f60dad60307a4d491252...0fae08ce8e72d491cc429f171421c140e8a324ac)


### [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/f5498617c0f4c2afc44d73f1d6af358a5cb2653c)

* [OCPBUGS-2754](https://issues.redhat.com/browse/OCPBUGS-2754): Fix go list for go1.18 [#265](https://github.com/openshift/cluster-api-provider-azure/pull/265)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/ad5852b1255c2ecd3c5e385fee4a5e56b8ed8b22...f5498617c0f4c2afc44d73f1d6af358a5cb2653c)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/d568517875a516614660fda5ee29dcb035beb959)

* [OCPBUGS-1057](https://issues.redhat.com/browse/OCPBUGS-1057): Download yq in upi installer containers [#6322](https://github.com/openshift/installer/pull/6322)
* [OCPBUGS-448](https://issues.redhat.com/browse/OCPBUGS-448): Allow setting bootstrap kubelet ip [#6253](https://github.com/openshift/installer/pull/6253)
* [Bug 2098252](https://bugzilla.redhat.com/show_bug.cgi?id=2098252): locations fix [#6222](https://github.com/openshift/installer/pull/6222)
* [Bug 2025901](https://bugzilla.redhat.com/show_bug.cgi?id=2025901): Improve host role management during assets creation [#5409](https://github.com/openshift/installer/pull/5409)
* [Bug 2098252](https://bugzilla.redhat.com/show_bug.cgi?id=2098252): bump RHCOS 4.8 bootimage metadata [#6192](https://github.com/openshift/installer/pull/6192)
* [Bug 2108581](https://bugzilla.redhat.com/show_bug.cgi?id=2108581): [release-4.8] RHCOS: move to rhcos.mirror.openshift.com [#6137](https://github.com/openshift/installer/pull/6137)
* [Bug 2100304](https://bugzilla.redhat.com/show_bug.cgi?id=2100304): Collect whole journal and netstat data [#6040](https://github.com/openshift/installer/pull/6040)
* [Bug 2098162](https://bugzilla.redhat.com/show_bug.cgi?id=2098162): Bootstrap timeout [#6026](https://github.com/openshift/installer/pull/6026)
* [Bug 2006965](https://bugzilla.redhat.com/show_bug.cgi?id=2006965): bump RHCOS 4.8 boot images [#5987](https://github.com/openshift/installer/pull/5987)
* [Bug 2069166](https://bugzilla.redhat.com/show_bug.cgi?id=2069166): stop considering Mint mode as supported on Azure (#5699) [#5753](https://github.com/openshift/installer/pull/5753)
* [Full changelog](https://github.com/openshift/installer/compare/aaa978bb5d76472df23f6e90293e68aaa43a8457...d568517875a516614660fda5ee29dcb035beb959)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/2dabef7e3dc39d29016b656b81d23d5a00e141ca)

* [Bug 2100982](https://bugzilla.redhat.com/show_bug.cgi?id=2100982): Uplift BMO to remove go-getter dependency [#177](https://github.com/openshift/cluster-api-provider-baremetal/pull/177)
* [OCPBUGS-2347](https://issues.redhat.com/browse/OCPBUGS-2347): Keep dockerfiles consistent [#178](https://github.com/openshift/cluster-api-provider-baremetal/pull/178)
* Update OWNERS [#181](https://github.com/openshift/cluster-api-provider-baremetal/pull/181)
* Updating baremetal-machine-controller builder & base images to be consistent with ART [#147](https://github.com/openshift/cluster-api-provider-baremetal/pull/147)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/a60d493e45aa9d3c0391297fd77cb168092fed35...2dabef7e3dc39d29016b656b81d23d5a00e141ca)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/5492cf52309927ed6015340887b15ff10025d371)

* [Bug 2100994](https://bugzilla.redhat.com/show_bug.cgi?id=2100994): Uplift kustomize to remove go-getter dependency [#236](https://github.com/openshift/baremetal-operator/pull/236)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/02a2d3cf8747de12f8f845575a11b7dd4519046d...5492cf52309927ed6015340887b15ff10025d371)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/c50d793ca33bd7d476b2b770d4f5d317b79b865b)

* [Bug 2109329](https://bugzilla.redhat.com/show_bug.cgi?id=2109329): Avoid kubernetes node port range [#187](https://github.com/openshift/baremetal-runtimecfg/pull/187)
* [Bug 2059584](https://bugzilla.redhat.com/show_bug.cgi?id=2059584): Ignore VIPs in node-ip show [#172](https://github.com/openshift/baremetal-runtimecfg/pull/172)
* [Bug 2053720](https://bugzilla.redhat.com/show_bug.cgi?id=2053720): Avoid dynamically allocated port range for haproxy [#171](https://github.com/openshift/baremetal-runtimecfg/pull/171)
* [Bug 2050288](https://bugzilla.redhat.com/show_bug.cgi?id=2050288): Add delay after sending bootstrap stop and start messages [#170](https://github.com/openshift/baremetal-runtimecfg/pull/170)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/ae824ab2973b62f03d423ccab100533c7c8ad948...c50d793ca33bd7d476b2b770d4f5d317b79b865b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/3de49cf4459e63ca26ce3adb86a9f56ad2325272)

* [Bug 2092264](https://bugzilla.redhat.com/show_bug.cgi?id=2092264): [inspect] Add namespace-scoped networking resources to inspect [#1158](https://github.com/openshift/oc/pull/1158)
* [Bug 2052980](https://bugzilla.redhat.com/show_bug.cgi?id=2052980): bump(k8s.io/*) v0.21.9 [#1061](https://github.com/openshift/oc/pull/1061)
* [Bug 2066760](https://bugzilla.redhat.com/show_bug.cgi?id=2066760): Add TMOUT env to debug node pod [#1095](https://github.com/openshift/oc/pull/1095)
* [Full changelog](https://github.com/openshift/oc/compare/2b2aa2bcc876dd826635c7524882cc392b931892...3de49cf4459e63ca26ce3adb86a9f56ad2325272)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a29b63fea17f8fea0b03a271fad02a97519da364)

* Update OWNERS to reflect reality [#499](https://github.com/openshift/cloud-credential-operator/pull/499)
* [Bug 2058270](https://bugzilla.redhat.com/show_bug.cgi?id=2058270): Remove Azure mint mode support as Active Directory Graph API will be sunset [#454](https://github.com/openshift/cloud-credential-operator/pull/454)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/eb682c49d885fdb109f5867b8e09535f76ce89aa...a29b63fea17f8fea0b03a271fad02a97519da364)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a180c2ab5c9b09746e984f4f6459b4e8cc06de82)

* [Bug 2062591](https://bugzilla.redhat.com/show_bug.cgi?id=2062591): e2e: Pin Keycloack to the legacy variant [#557](https://github.com/openshift/cluster-authentication-operator/pull/557)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/560ac283add7d24c07db1582db4c2ac7d80aaeba...a180c2ab5c9b09746e984f4f6459b4e8cc06de82)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/117d47a29e9700088d81a3379a72a7d6d68668d1)

* [Bug 2101000](https://bugzilla.redhat.com/show_bug.cgi?id=2101000): Uplift kustomize to remove go-getter dependency [#294](https://github.com/openshift/cluster-baremetal-operator/pull/294)
* [OCPBUGS-1519](https://issues.redhat.com/browse/OCPBUGS-1519): [release-4.8] Fix a few papercuts [#293](https://github.com/openshift/cluster-baremetal-operator/pull/293)
* Update with current OWNERS [#297](https://github.com/openshift/cluster-baremetal-operator/pull/297)
* [Bug 2091748](https://bugzilla.redhat.com/show_bug.cgi?id=2091748): Fix interpretation of Deployment Status Conditions [#269](https://github.com/openshift/cluster-baremetal-operator/pull/269)
* [Bug 2055279](https://bugzilla.redhat.com/show_bug.cgi?id=2055279): Calculating network stack only on supported Platforms [#248](https://github.com/openshift/cluster-baremetal-operator/pull/248)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/1146017627352b72e0f2399f9f7e3423f0327eb2...117d47a29e9700088d81a3379a72a7d6d68668d1)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/f32c07121bab6b6d37dee7bddd75ec9ae3973dc6)

* [Bug 2081457](https://bugzilla.redhat.com/show_bug.cgi?id=2081457): bump API to fix ComponentRoutes TLD validation [#255](https://github.com/openshift/cluster-config-operator/pull/255)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/c1022410bf9a000e84d9764f8e8a5cfa35cfa452...f32c07121bab6b6d37dee7bddd75ec9ae3973dc6)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/642f3ebfa6f2edfa8bd62e257b052c26c1273100)

* [OCPBUGS-2577](https://issues.redhat.com/browse/OCPBUGS-2577): fix cert rotation on IP changes [#949](https://github.com/openshift/cluster-etcd-operator/pull/949)
* [Bug 2111446](https://bugzilla.redhat.com/show_bug.cgi?id=2111446): Add etcd pod liveness and readiness probes [#902](https://github.com/openshift/cluster-etcd-operator/pull/902)
* [OCPBUGS-1230](https://issues.redhat.com/browse/OCPBUGS-1230): ensure healthy quorum before config update [#930](https://github.com/openshift/cluster-etcd-operator/pull/930)
* [OCPBUGS-1307](https://issues.redhat.com/browse/OCPBUGS-1307): backport owners [#928](https://github.com/openshift/cluster-etcd-operator/pull/928)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/35672edef2c867e135b0e9378a00764b363d8ba5...642f3ebfa6f2edfa8bd62e257b052c26c1273100)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/4aa1e6f3e0321df1109672d2d105de5a8b913cb5)

* [Bug 2074053](https://bugzilla.redhat.com/show_bug.cgi?id=2074053): Deployment annotations, runtimeClassName override and fs policy change [#767](https://github.com/openshift/cluster-image-registry-operator/pull/767)
* [Bug 2067107](https://bugzilla.redhat.com/show_bug.cgi?id=2067107): Retry on pruner failures [#761](https://github.com/openshift/cluster-image-registry-operator/pull/761)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/499e84e43d1b100b5704b30a1b24a1017c9f38b2...4aa1e6f3e0321df1109672d2d105de5a8b913cb5)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/7163d38a50c505c1289bccf72d62b02e17d25c47)

* [Bug 2084337](https://bugzilla.redhat.com/show_bug.cgi?id=2084337): Fix enabling PROXY protocol on an upgraded cluster [#758](https://github.com/openshift/cluster-ingress-operator/pull/758)
* [Bug 2066302](https://bugzilla.redhat.com/show_bug.cgi?id=2066302): Disable keepalive for canary probe [#726](https://github.com/openshift/cluster-ingress-operator/pull/726)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/cb614126da5151f1a115152ae1fc3ef70ee93ca1...7163d38a50c505c1289bccf72d62b02e17d25c47)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/25c54939bdd02bc8e68f1329fa3ebe16904b3282)

* [Bug 2026089](https://bugzilla.redhat.com/show_bug.cgi?id=2026089): library-go bump [#1320](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1320)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/cddab90b7699ceb50032e22b4b3cff5803dd1466...25c54939bdd02bc8e68f1329fa3ebe16904b3282)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/1b3b34440de93395c46c7a6526be9870e8914ce8)

* [Bug 2026110](https://bugzilla.redhat.com/show_bug.cgi?id=2026110): Disable balancedAllocation and add weight for HighNodeUtilization profile [#380](https://github.com/openshift/cluster-kube-scheduler-operator/pull/380)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/3c47d6f73c7e81dee830fb92629bd56a41375196...1b3b34440de93395c46c7a6526be9870e8914ce8)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/2c4ac8dbd9316343d2101dbdabc6b6742ee41274)

* [OCPBUGS-1098](https://issues.redhat.com/browse/OCPBUGS-1098): Give precedence to CMO config map proxy config [#1765](https://github.com/openshift/cluster-monitoring-operator/pull/1765)
* [OCPBUGS-644](https://issues.redhat.com/browse/OCPBUGS-644): grafana: bump to 7.5.11 [#1754](https://github.com/openshift/cluster-monitoring-operator/pull/1754)
* [Bug 2030698](https://bugzilla.redhat.com/show_bug.cgi?id=2030698): KubePodCrashLooping may fire when pod is not in CrashLoopBackOff [#1619](https://github.com/openshift/cluster-monitoring-operator/pull/1619)
* [Bug 2039538](https://bugzilla.redhat.com/show_bug.cgi?id=2039538): Add custom profile metric for Node Tuning Operator to telemetry [#1565](https://github.com/openshift/cluster-monitoring-operator/pull/1565)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e9cb2177162129c836ac37d8c9c090237b993fe7...2c4ac8dbd9316343d2101dbdabc6b6742ee41274)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/fb157736c52ce0bb281e49fa52be2dd50abed3ac)

* Bug OCPBUGS-472: Kuryr: Bump timeoutSeconds for livenessProbe [#1572](https://github.com/openshift/cluster-network-operator/pull/1572)
* [Bug 2092264](https://bugzilla.redhat.com/show_bug.cgi?id=2092264): Cleanup CNO relatedObjects [#1469](https://github.com/openshift/cluster-network-operator/pull/1469)
* [Bug 2084366](https://bugzilla.redhat.com/show_bug.cgi?id=2084366): ovn: try to gracefully terminate ovn-northd [#1438](https://github.com/openshift/cluster-network-operator/pull/1438)
* [Bug 2090000](https://bugzilla.redhat.com/show_bug.cgi?id=2090000): Reserve port TCP/9104 for cluster-network-operator [#1457](https://github.com/openshift/cluster-network-operator/pull/1457)
* Adds dougbtv to owners [release-4.8] [#1403](https://github.com/openshift/cluster-network-operator/pull/1403)
* [Bug 2058674](https://bugzilla.redhat.com/show_bug.cgi?id=2058674): ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.8] [#1324](https://github.com/openshift/cluster-network-operator/pull/1324)
* [Bug 2038295](https://bugzilla.redhat.com/show_bug.cgi?id=2038295): Backport 4.8 OVN drop icmp frag from other nodes on Azure cluster [#1274](https://github.com/openshift/cluster-network-operator/pull/1274)
* [Bug 2068895](https://bugzilla.redhat.com/show_bug.cgi?id=2068895): Do not apply OVN-Kubernetes PodDisruptionBudget on single-node clusters [#1351](https://github.com/openshift/cluster-network-operator/pull/1351)
* [release 4.8] Updates owners [#1334](https://github.com/openshift/cluster-network-operator/pull/1334)
* [Bug 2054642](https://bugzilla.redhat.com/show_bug.cgi?id=2054642): sbdb and nbdb containers leave pid around if they restarted or crashed [#1310](https://github.com/openshift/cluster-network-operator/pull/1310)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/684c69e8565351761dba24a959a6a1fd19895278...fb157736c52ce0bb281e49fa52be2dd50abed3ac)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/9e185d59cfbb4dd083c0ae3c82014aea110697b3)

* Ignore Profile updates triggered by old operands (#364) [#364](https://github.com/openshift/cluster-node-tuning-operator/pull/364)
* Run go mod vendor to update vendor/modules.txt (#319) [#319](https://github.com/openshift/cluster-node-tuning-operator/pull/319)
* Add nto_custom_profile:count metric via PrometheusRule (#292) (#311) [#292](https://github.com/openshift/cluster-node-tuning-operator/pull/292)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/d2897872e01d938d3d2e6f17507b2acbd3a86902...9e185d59cfbb4dd083c0ae3c82014aea110697b3)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/7f0e9b6659949421100469e3af399888cca7042e)

* [Bug 2052097](https://bugzilla.redhat.com/show_bug.cgi?id=2052097): global pull secret not working in OCP4.7.4+ for additio… [#493](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/493)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/837db83388c0aeafac0068d5f3a0d5adbbefbbb3...7f0e9b6659949421100469e3af399888cca7042e)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/2c97085fae78fba46c2808bf03a0128180f2c1e4)

* [Bug 2103447](https://bugzilla.redhat.com/show_bug.cgi?id=2103447): Add missing ibm cloud annotations to prometheus rbac [#295](https://github.com/openshift/cluster-storage-operator/pull/295)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/54f1a906734849db6daf4951346816f005803d66...2c97085fae78fba46c2808bf03a0128180f2c1e4)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/c3bd0d0d0b1837f1b8893ce24971b943c7fbeb18)

* [Bug 2109962](https://bugzilla.redhat.com/show_bug.cgi?id=2109962): pkg/cvo: retain initial completed update history entry [#803](https://github.com/openshift/cluster-version-operator/pull/803)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/4b28e9e5d342f14fd599174c2dc2083e5ccdf3b4...c3bd0d0d0b1837f1b8893ce24971b943c7fbeb18)


### [console](https://github.com/openshift/console/tree/e18c26bf18f96d87e880c160c4f954eb82f4d1e1)

* [OCPBUGS-2591](https://issues.redhat.com/browse/OCPBUGS-2591): fetch shared resource imagestreams based on labels instance or name [#12190](https://github.com/openshift/console/pull/12190)
* [Bug 2077100](https://bugzilla.redhat.com/show_bug.cgi?id=2077100): Fix Web Terminal availability check to verify operator is installed [#11371](https://github.com/openshift/console/pull/11371)
* [OCPBUGS-2773](https://issues.redhat.com/browse/OCPBUGS-2773): updates test id for 3scale [#12203](https://github.com/openshift/console/pull/12203)
* [OCPBUGS-1977](https://issues.redhat.com/browse/OCPBUGS-1977): Helm readme bugfix [#12132](https://github.com/openshift/console/pull/12132)
* [OCPBUGS-1314](https://issues.redhat.com/browse/OCPBUGS-1314): use the correct Alertmanager tenancy proxy [#12036](https://github.com/openshift/console/pull/12036)
* [OCPBUGS-1455](https://issues.redhat.com/browse/OCPBUGS-1455): show Limit exceeded state for large number of nodes in topology [#12060](https://github.com/openshift/console/pull/12060)
* [Bug 2112999](https://bugzilla.redhat.com/show_bug.cgi?id=2112999): Replace sum_irate with sum_rate for Deployments CPU graph [#11917](https://github.com/openshift/console/pull/11917)
* [OCPBUGS-604](https://issues.redhat.com/browse/OCPBUGS-604): Backport CI test fix to previous releases [#11990](https://github.com/openshift/console/pull/11990)
* [Bug 2088756](https://bugzilla.redhat.com/show_bug.cgi?id=2088756): Improve Firehose cache, so that it does not return unexpected data also if isList differs on two concurrent calls [#11539](https://github.com/openshift/console/pull/11539)
* [Bug 2092767](https://bugzilla.redhat.com/show_bug.cgi?id=2092767): Set dashboards timeout based on selected timespan [#11628](https://github.com/openshift/console/pull/11628)
* [Bug 2089725](https://bugzilla.redhat.com/show_bug.cgi?id=2089725): Eliminate use of lookaside cache and move to Cachito [#11573](https://github.com/openshift/console/pull/11573)
* [Bug 2079436](https://bugzilla.redhat.com/show_bug.cgi?id=2079436): Pipeline metrics: use prometheus-tenancy API to get data [#11409](https://github.com/openshift/console/pull/11409)
* [Bug 2066365](https://bugzilla.redhat.com/show_bug.cgi?id=2066365): (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls [#11271](https://github.com/openshift/console/pull/11271)
* [Bug 2060450](https://bugzilla.redhat.com/show_bug.cgi?id=2060450): Fix that the preferred namespace was not selected when it contains just numbers [#11134](https://github.com/openshift/console/pull/11134)
* [Bug 2055132](https://bugzilla.redhat.com/show_bug.cgi?id=2055132): Fix TypeError when application has HelmRelease [#11069](https://github.com/openshift/console/pull/11069)
* [Bug 2060616](https://bugzilla.redhat.com/show_bug.cgi?id=2060616): Add error boundary in edit-flows [#11137](https://github.com/openshift/console/pull/11137)
* [Bug 2061266](https://bugzilla.redhat.com/show_bug.cgi?id=2061266): Update e2e test to use 3scale operator to increase test stability [#11141](https://github.com/openshift/console/pull/11141)
* [Full changelog](https://github.com/openshift/console/compare/954f718120d46ff6369da7645e45efbc9883120f...e18c26bf18f96d87e880c160c4f954eb82f4d1e1)


### [console-operator](https://github.com/openshift/console-operator/tree/2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6)

* [Bug 2071200](https://bugzilla.redhat.com/show_bug.cgi?id=2071200): Fix setting of custom cert for default route [#643](https://github.com/openshift/console-operator/pull/643)
* [Full changelog](https://github.com/openshift/console-operator/compare/494fd48fcd048ccc53d21ea8d1db1b5579c3266e...2bee8bd9b1c9ad46015f4e0ff13b6b5ce09fd2b6)


### [docker-builder](https://github.com/openshift/builder/tree/dc2c0061e5db06d96bac966bdfe2603fe7bbfa06)

* [Bug 2053122](https://bugzilla.redhat.com/show_bug.cgi?id=2053122): [release-4.8] getAssembleUser(): strip the group part out before checking the UID [#289](https://github.com/openshift/builder/pull/289)
* Update OWNERS file [#290](https://github.com/openshift/builder/pull/290)
* [Full changelog](https://github.com/openshift/builder/compare/b59f2b3a9f1571b78f8337211b80a49a6da91269...dc2c0061e5db06d96bac966bdfe2603fe7bbfa06)


### [etcd](https://github.com/openshift/etcd/tree/fb7a80809bde854e6eb56c4b43bc0369fcbacf00)

* [OCPBUGS-1023](https://issues.redhat.com/browse/OCPBUGS-1023): Rebase openshift/etcd 4.8 onto 3.4.21 [#150](https://github.com/openshift/etcd/pull/150)
* Update OWNERS [#125](https://github.com/openshift/etcd/pull/125)
* Fix the flaky test TestV3AuthRestartMember [#14442](https://github.com/openshift/etcd/pull/14442)
* server,test: refresh cache on each NewAuthStore [#14410](https://github.com/openshift/etcd/pull/14410)
* etcdctl: fix move-leader for multiple endpoints [#14441](https://github.com/openshift/etcd/pull/14441)
* testing: fix TestOpenWithMaxIndex cleanup [#14439](https://github.com/openshift/etcd/pull/14439)
* fix the potential data loss for clusters with only one member [#14423](https://github.com/openshift/etcd/pull/14423)
* etcdserver: nil-logger issue fix for version 3.4 [#14420](https://github.com/openshift/etcd/pull/14420)
* Do not get previous K/V for create event [#14290](https://github.com/openshift/etcd/pull/14290)
* clientv3/balancer: fixed flaky TestRoundRobinBalancedResolvableFailoverFromServerFail [#14274](https://github.com/openshift/etcd/pull/14274)
* clientv3/mvcc: fixed DATA RACE [#14279](https://github.com/openshift/etcd/pull/14279)
* etcdserver: resend ReadIndex request on empty apply request [#14269](https://github.com/openshift/etcd/pull/14269)
* Checkpoints fix 3.4 [#14253](https://github.com/openshift/etcd/pull/14253)
* raft: postpone MsgReadIndex until first commit in the term [#14258](https://github.com/openshift/etcd/pull/14258)
* Backport: non mutating requests pass through quotaKVServer when NOSPACE [#14254](https://github.com/openshift/etcd/pull/14254)
* etcdserver,pkg: remove temp files in snap dir when etcdserver starting [#14246](https://github.com/openshift/etcd/pull/14246)
* Support configuring MaxConcurrentStreams for http2 [#14251](https://github.com/openshift/etcd/pull/14251)
* etcdserver: add more detailed traces on linearized reading [#14240](https://github.com/openshift/etcd/pull/14240)
* server/auth: protect rangePermCache with a RW lock [#14230](https://github.com/openshift/etcd/pull/14230)
* clientv3: fix isOptsWithFromKey/isOptsWithPrefix [#14241](https://github.com/openshift/etcd/pull/14241)
* backport 3.5: #13676 load all leases from backend [#14239](https://github.com/openshift/etcd/pull/14239)
* clientv3: filter learners members during autosync [#14236](https://github.com/openshift/etcd/pull/14236)
* Support linearizable renew lease for 3.4 [#14177](https://github.com/openshift/etcd/pull/14177)
* Fix pipeline failure for release test [#14210](https://github.com/openshift/etcd/pull/14210)
* clientv3/balance: fixed flaky balancer tests [#14204](https://github.com/openshift/etcd/pull/14204)
* Update release scripts for release-3.4 [#14205](https://github.com/openshift/etcd/pull/14205)
* set RACE as true for linux-amd64-unit and linux-amd64-grpcproxy [#14200](https://github.com/openshift/etcd/pull/14200)
* Bump gopkg.in/yaml.v2 v2.2.2 -> v2.4.0 due to: CVE-2019-11254 [#14192](https://github.com/openshift/etcd/pull/14192)
* [backport 3.4] Update golang.org/x/crypto to latest [#14179](https://github.com/openshift/etcd/pull/14179)
* Fix pipeline failures in 3.4 [#14183](https://github.com/openshift/etcd/pull/14183)
* Skip WatchRequestProgress test in grpc-proxy mode. [#14151](https://github.com/openshift/etcd/pull/14151)
* Fix deadlock in 'go test -tags cluster_proxy -v ./integration/... ./client' [#14170](https://github.com/openshift/etcd/pull/14170)
* [backport 3.4] clientv3/integration: Reduce flakines of TestGetTokenWithoutAuth [#14168](https://github.com/openshift/etcd/pull/14168)
* Backport two lease related bug fixes to 3.4 [#14150](https://github.com/openshift/etcd/pull/14150)
* Fix all the pipeline failues for release 3.4 [#14136](https://github.com/openshift/etcd/pull/14136)
* tests: fixing dependencies that brake tests in go.1.15.15 [#14075](https://github.com/openshift/etcd/pull/14075)
* [backport 3.4]: server/auth: enable tokenProvider if recoved store enables auth [#13206](https://github.com/openshift/etcd/pull/13206)
* Backport PR 13308 to release 3.4 [#13999](https://github.com/openshift/etcd/pull/13999)
* mvcc/backend: restore original bolt db options after defrag [#13713](https://github.com/openshift/etcd/pull/13713)
* backport 3.4 from #13467 exclude the same alarm type activated by multiple peers [#13475](https://github.com/openshift/etcd/pull/13475)
* storage/backend: Add a gauge to indicate if defrag is active (backport) [#13397](https://github.com/openshift/etcd/pull/13397)
* Dockerfile: bump debian bullseye-20210927 [#13385](https://github.com/openshift/etcd/pull/13385)
* Replace github.com/dgrijalva/jwt-go with github.com/golang-jwt/jwt [#13378](https://github.com/openshift/etcd/pull/13378)
* : ClientV3: Ordering: Fix TestEndpointSwitchResolvesViolation test [#13139](https://github.com/openshift/etcd/pull/13139)
* vendor: track vendor/modules.txt [#13137](https://github.com/openshift/etcd/pull/13137)
* Migrate PR testing from travis to GitHub actions [#13135](https://github.com/openshift/etcd/pull/13135)
* [backport 3.4]  fix check datascale command for https endpoints [#13101](https://github.com/openshift/etcd/pull/13101)
* [backport 3.4] embed: unlimit the recv msg size of grpc-gateway [#13100](https://github.com/openshift/etcd/pull/13100)
* Backport-3.4 exclude alarms from health check conditionally [#12917](https://github.com/openshift/etcd/pull/12917)
* etcdserver/mvcc: update trace.Step condition [#12902](https://github.com/openshift/etcd/pull/12902)
* Backport-3.4 etcdserver/util.go: reduce memory when logging range requests [#12888](https://github.com/openshift/etcd/pull/12888)
* .travis,Makefile,functional: Bump go 1.12 version to v1.12.17 [#12882](https://github.com/openshift/etcd/pull/12882)
* : .travis.yml: Test with go v1.15.11 [#12849](https://github.com/openshift/etcd/pull/12849)
* : Pin go version in go.mod to 1.12 [#12839](https://github.com/openshift/etcd/pull/12839)
* etcdserver: fix incorrect metrics generated when clients cancel watches [#12803](https://github.com/openshift/etcd/pull/12803)
* etcdserver: Fix PeerURL validation [#12815](https://github.com/openshift/etcd/pull/12815)
* integration: relax leader timeout from 3s to 4s [#12816](https://github.com/openshift/etcd/pull/12816)
* When using --unsafe-no-fsync still write out the data [#12751](https://github.com/openshift/etcd/pull/12751)
* Manual cherry pick of #12448 on release 3.4 [#12740](https://github.com/openshift/etcd/pull/12740)
* etcdserver/api/etcdhttp: log successful etcd server side health check in debug level [#12679](https://github.com/openshift/etcd/pull/12679)
* etcdserver: Fix 64 KB websocket notification message limit [#12402](https://github.com/openshift/etcd/pull/12402)
* vendor: bump gorilla/websocket [#12645](https://github.com/openshift/etcd/pull/12645)
* [3.4 backport] pkg/fileutil: fix F_OFD_ constants [#12551](https://github.com/openshift/etcd/pull/12551)
* [Full changelog](https://github.com/openshift/etcd/compare/aefa6bf59b381938b50ab9ba4a7add9b4a767e27...fb7a80809bde854e6eb56c4b43bc0369fcbacf00)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c)

* [Bug 2052955](https://bugzilla.redhat.com/show_bug.cgi?id=2052955): Disable uuid checks on XFS [#23](https://github.com/openshift/gcp-pd-csi-driver/pull/23)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/0b618896c6b7c977f96d133060c54ed1b6c87540...3978a2100d6ff938db2a0cf8d962ce9dce0c6e4c)


### [grafana](https://github.com/openshift/grafana/tree/f98b47f33d7113c4f88d55640eac4ef2dcc1e68a)

* [OCPBUGS-644](https://issues.redhat.com/browse/OCPBUGS-644): bump Grafana to 7.5.11 [#89](https://github.com/openshift/grafana/pull/89)
* [Full changelog](https://github.com/openshift/grafana/compare/b987e4b1e20b6cf814bbc408dd2a740aed92e410...f98b47f33d7113c4f88d55640eac4ef2dcc1e68a)


### [haproxy-router](https://github.com/openshift/router/tree/d0d63803fbefba67f09df0edb271199623659ca8)

* [Bug 2076380](https://bugzilla.redhat.com/show_bug.cgi?id=2076380): generateRouteHostRegexp: Escape blanks [#2](https://github.com/openshift/router/pull/2)
* [Full changelog](https://github.com/openshift/router/compare/9c9f9f422fd55b6535bd2a669a88657f97569c4d...d0d63803fbefba67f09df0edb271199623659ca8)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/5cc9227e4695d1cca2a838420cc69f2d6db25eca)

* [OCPBUGS-1461](https://issues.redhat.com/browse/OCPBUGS-1461): UPSTREAM: 109103: cpu/memory manager containerMap memory leak [#1371](https://github.com/openshift/kubernetes/pull/1371)
* [Bug 2083557](https://bugzilla.redhat.com/show_bug.cgi?id=2083557): UPSTREAM: 109935: fix: exclude non-ready nodes and deleted nodes from azure load balancers [#1257](https://github.com/openshift/kubernetes/pull/1257)
* [Bug 2105664](https://bugzilla.redhat.com/show_bug.cgi?id=2105664): UPSTREAM: <carry>: update list of deprecated apis [#1317](https://github.com/openshift/kubernetes/pull/1317)
* [release 4.8] Bug Bug 2106970: UPSTREAM: <carry>: use correct base image for testing [#1323](https://github.com/openshift/kubernetes/pull/1323)
* [Bug 2077004](https://bugzilla.redhat.com/show_bug.cgi?id=2077004): Rebase 1.21.11 [#1246](https://github.com/openshift/kubernetes/pull/1246)
* Update Go to 1.16.15 [#108565](https://github.com/openshift/kubernetes/pull/108565)
* bump konnectivity-client@v0.0.30 [#108440](https://github.com/openshift/kubernetes/pull/108440)
* Automated cherry pick of #107997: cronjob_controllerv2: do not filter jobs to be reconciled by [#108304](https://github.com/openshift/kubernetes/pull/108304)
* Automated cherry pick of #107121: fix regression introduced by PR 100320 [#108467](https://github.com/openshift/kubernetes/pull/108467)
* Automated cherry pick of #106164: fix: remove outdated ipv4 route when the corresponding node [#108275](https://github.com/openshift/kubernetes/pull/108275)
* Automated cherry pick of #108410: fix dryrun when ca file exists [#108472](https://github.com/openshift/kubernetes/pull/108472)
* Automated cherry pick of #108002: kubeadm: fix the bug that 'kubeadm init --dry-run [#108117](https://github.com/openshift/kubernetes/pull/108117)
* backports k/utils bump (PR#107637) to 1.21 [#108335](https://github.com/openshift/kubernetes/pull/108335)
* Automated cherry pick of #108198: Updating EndpointSlice strategy to retain node name in [#108203](https://github.com/openshift/kubernetes/pull/108203)
* Automated cherry pick of #108138: Revert v1beta1 PodDisruptionBudget select patchStrategy [#108142](https://github.com/openshift/kubernetes/pull/108142)
* Automated cherry pick of #106581: Enabling kube-proxy metrics on windows kernel mode [#107610](https://github.com/openshift/kubernetes/pull/107610)
* Automated cherry pick of #107789: Mark device as uncertain if unmount device succeeds [#108012](https://github.com/openshift/kubernetes/pull/108012)
* Update Go to 1.16.14 [#108102](https://github.com/openshift/kubernetes/pull/108102)
* Automated cherry pick of #107406: fix: delete non existing disk issue [#107578](https://github.com/openshift/kubernetes/pull/107578)
* Automated cherry pick of #107575: fix: azurefile volumeid conflict in csi migration [#107852](https://github.com/openshift/kubernetes/pull/107852)
* Automated cherry pick of #99398: Fix DaemonSet status update retry [#107639](https://github.com/openshift/kubernetes/pull/107639)
* Automated cherry pick of #106280: Set max results if its not set [#107653](https://github.com/openshift/kubernetes/pull/107653)
* Automated cherry pick of #107312: Execute sync before taking the snapshot [#107807](https://github.com/openshift/kubernetes/pull/107807)
* Automated cherry pick of #107427: removed unnecessary log line [#107486](https://github.com/openshift/kubernetes/pull/107486)
* update to Go 1.16.13 [#107615](https://github.com/openshift/kubernetes/pull/107615)
* Automated cherry pick of #107565: upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 [#107569](https://github.com/openshift/kubernetes/pull/107569)
* Cherry pick #106045 to 1.21: Fix concurrent map writes error in kube-apiserver [#106337](https://github.com/openshift/kubernetes/pull/106337)
* Automated cherry pick of #104991: Fix workqueue memory leak [#106583](https://github.com/openshift/kubernetes/pull/106583)
* Automated cherry pick of #105777: fix: do not delete the lb that does not exist [#106068](https://github.com/openshift/kubernetes/pull/106068)
* vendor: bump cAdvisor to v0.39.3 [#107356](https://github.com/openshift/kubernetes/pull/107356)
* Automated cherry pick of #105253: fix: leave the probe path empty for TCP probes [#106064](https://github.com/openshift/kubernetes/pull/106064)
* Automated cherry pick of #105839: fix: remove VMSS and VMSS instances from SLB backend pool [#106075](https://github.com/openshift/kubernetes/pull/106075)
* Automated cherry pick of #107452: Fix header mutation race in timeout filter [#107460](https://github.com/openshift/kubernetes/pull/107460)
* Automated cherry pick of #102122: Don't set sysctl net.ipv4.vs.conn_reuse_mode for kernels [#107438](https://github.com/openshift/kubernetes/pull/107438)
* Automated cherry pick of #107200: flake fix: remove the error handler for cronjob integration [#107359](https://github.com/openshift/kubernetes/pull/107359)
* Automated cherry pick of #100567: Mark volume mount as uncertain in case of volume expansion [#107110](https://github.com/openshift/kubernetes/pull/107110)
* Automated cherry pick of #100183: Mark volume as uncertain after Unmount* fails [#107014](https://github.com/openshift/kubernetes/pull/107014)
* Automated cherry pick of #103385: Ensure proper resource creation [#103404](https://github.com/openshift/kubernetes/pull/103404)
* Automated cherry pick of #107327: kubeadm: remove the restriction that the ca.crt can only [#107366](https://github.com/openshift/kubernetes/pull/107366)
* Automated cherry pick of #107337: Fix the leak of vSphere client sessions [#107351](https://github.com/openshift/kubernetes/pull/107351)
* Automated cherry pick of #107311: client-go: Clear the ResourceVersionMatch on paged list calls [#107336](https://github.com/openshift/kubernetes/pull/107336)
* Automated cherry pick of #106936: Skip creating HNS loadbalancer with empty endpoints [#106970](https://github.com/openshift/kubernetes/pull/106970)
* Automated cherry pick of #106906: mount-utils: Detect potential stale file handle [#107040](https://github.com/openshift/kubernetes/pull/107040)
* Cherry pick of anp 0.0.27 for v1.21 [#107188](https://github.com/openshift/kubernetes/pull/107188)
* Automated cherry pick of #107221: fix nil pointer in create secret commands [#107345](https://github.com/openshift/kubernetes/pull/107345)
* Automated cherry pick of #107091: Improving performance of EndpointSlice controller metrics [#107169](https://github.com/openshift/kubernetes/pull/107169)
* Automated cherry pick of #104799: fix the error when cleaning up jobs for cronjob [#107128](https://github.com/openshift/kubernetes/pull/107128)
* [Bug 2063953](https://bugzilla.redhat.com/show_bug.cgi?id=2063953): UPSTREAM: <carry>: use hardcoded rest mapper from library-go [#1245](https://github.com/openshift/kubernetes/pull/1245)
* [Bug 2075043](https://bugzilla.redhat.com/show_bug.cgi?id=2075043): golang toolchain unsupported parsers tag [#1240](https://github.com/openshift/kubernetes/pull/1240)
* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#1173](https://github.com/openshift/kubernetes/pull/1173)
* [Bug 2060494](https://bugzilla.redhat.com/show_bug.cgi?id=2060494): Backports inotify leak fix into kubelet [#1203](https://github.com/openshift/kubernetes/pull/1203)
* [Bug 2024642](https://bugzilla.redhat.com/show_bug.cgi?id=2024642): Rebase v1.21.8 [#1102](https://github.com/openshift/kubernetes/pull/1102)
* Update to go1.16.12 [#106983](https://github.com/openshift/kubernetes/pull/106983)
* dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 [#106961](https://github.com/openshift/kubernetes/pull/106961)
* Update to go1.16.11 [#106839](https://github.com/openshift/kubernetes/pull/106839)
* Automated cherry pick of #106891: kubeadm: validate local etcd certficates during [#106924](https://github.com/openshift/kubernetes/pull/106924)
* Automated cherry pick of #106854: kubeadm: avoid requiring a CA key during kubeconfig [#106929](https://github.com/openshift/kubernetes/pull/106929)
* Automated cherry pick of #105666: fix: skip instance not found when decoupling vmss from lb [#105835](https://github.com/openshift/kubernetes/pull/105835)
* Automated cherry pick of #105612: Remove Error Message Check Dynamic PV Tests [#106357](https://github.com/openshift/kubernetes/pull/106357)
* Automated cherry pick of #96115: Get inodes and disk usage via pure go [#104021](https://github.com/openshift/kubernetes/pull/104021)
* Automated cherry pick of #102882: devicemanager: checkpoint: support pre-1.20 data [#106254](https://github.com/openshift/kubernetes/pull/106254)
* Automated cherry pick of #103154: Update mounter interface in volume manager [#106553](https://github.com/openshift/kubernetes/pull/106553)
* Automated cherry pick of #104287: Reduce calls to docker from dockershim for stats [#106502](https://github.com/openshift/kubernetes/pull/106502)
* Automated cherry pick of #106102: Ensure deletion of pods in queues and cache [#106685](https://github.com/openshift/kubernetes/pull/106685)
* Automated cherry pick of #106412: kube-scheduler: Increase the duration to expire an assumed [#106632](https://github.com/openshift/kubernetes/pull/106632)
* Automated cherry pick of #106526: Ignore 'wait: no child processes' error when calling [#106527](https://github.com/openshift/kubernetes/pull/106527)
* Automated cherry pick of #105046: Skip check for all topology labels when using system default [#106605](https://github.com/openshift/kubernetes/pull/106605)
* Automated cherry pick of #105065: parameter 'disabled-metrics' is invalid [#106391](https://github.com/openshift/kubernetes/pull/106391)
* Automated cherry pick of #106317 upstream release 1.21 - Fixed nil pointer dereference [#106354](https://github.com/openshift/kubernetes/pull/106354)
* Automated cherry pick of #106382: defer close the rotated log open [#106384](https://github.com/openshift/kubernetes/pull/106384)
* Automated cherry pick of #104526: Fix issue in node status updating VolumeAttached list [#106053](https://github.com/openshift/kubernetes/pull/106053)
* remove listx from OWNERS_ALIASES [#104261](https://github.com/openshift/kubernetes/pull/104261)
* Automated cherry pick of #105512: Add check for subpaths [#106351](https://github.com/openshift/kubernetes/pull/106351)
* Manual cherry pick of kube-openapi changes for release-1.21 [#106255](https://github.com/openshift/kubernetes/pull/106255)
* Update to go1.16.10 [#106224](https://github.com/openshift/kubernetes/pull/106224)
* Automated cherry pick of #105934: Don't guess SELinux support on error [#106260](https://github.com/openshift/kubernetes/pull/106260)
* Automated cherry pick of #102059: Bump k8s.io/utils [#102656](https://github.com/openshift/kubernetes/pull/102656)
* Automated cherry pick of #94165: Use separate pathSpec for local and remote to properly handle [#106236](https://github.com/openshift/kubernetes/pull/106236)
* Cherry-pick of #101708: Fix log spam for du failure on pod etc-hosts metrics [#105887](https://github.com/openshift/kubernetes/pull/105887)
* Update debian, debian-iptables, setcap images to pick up CVEs fixes [#106147](https://github.com/openshift/kubernetes/pull/106147)
* Automated cherry pick of #105946: Remove nodes with Cluster Autoscaler taint from LB backends. [#106096](https://github.com/openshift/kubernetes/pull/106096)
* Automated cherry pick of #105997: Fixing how EndpointSlice Mirroring handles Service selector [#106135](https://github.com/openshift/kubernetes/pull/106135)
* Automated cherry pick of #105673: support more than 100 disk mounts on Windows [#105693](https://github.com/openshift/kubernetes/pull/105693)
* Automated cherry pick of #105755: Support cgroupv2 in node problem detector test [#105991](https://github.com/openshift/kubernetes/pull/105991)
* Cherry pick of #104551: Run storage hostpath e2e test client pod as privileged [#105787](https://github.com/openshift/kubernetes/pull/105787)
* Automated cherry pick of #105734: Fix race condition in logging when request times out [#106113](https://github.com/openshift/kubernetes/pull/106113)
* [Full changelog](https://github.com/openshift/kubernetes/compare/4b61f949b4b18ed98ddebbfa9558ce43310fa881...5cc9227e4695d1cca2a838420cc69f2d6db25eca)


### [insights-operator](https://github.com/openshift/insights-operator/tree/53425de1f7fbd79fd785f4260f40def8a6eec7b9)

* TBD: Gather status of the cephclusters.ceph.rook.io resources (#659) (#665) (#668) [#659](https://github.com/openshift/insights-operator/pull/659)
* [Bug 2077765](https://bugzilla.redhat.com/show_bug.cgi?id=2077765): Gather namespace names with overlapping UIDs (#605) (#611) (#612) [#605](https://github.com/openshift/insights-operator/pull/605)
* [Full changelog](https://github.com/openshift/insights-operator/compare/3de99ef0e611338141d23de2adffa7875c0e6f27...53425de1f7fbd79fd785f4260f40def8a6eec7b9)


### [ironic](https://github.com/openshift/ironic-image/tree/4ed2e4b56c1eb82573b859b0499bb5141113bad0)

* [OCP 4.8] Update OWNERS [#279](https://github.com/openshift/ironic-image/pull/279)
* [Bug 2088196](https://bugzilla.redhat.com/show_bug.cgi?id=2088196): Backport weak eTag handling fix to OpenShift 4.8 [#276](https://github.com/openshift/ironic-image/pull/276)
* [Bug 2048672](https://bugzilla.redhat.com/show_bug.cgi?id=2048672): Enable vMedia provisioning of Nokia servers [#275](https://github.com/openshift/ironic-image/pull/275)
* [Full changelog](https://github.com/openshift/ironic-image/compare/fa8525ea51101fb69b8766d927a5123986a74725...4ed2e4b56c1eb82573b859b0499bb5141113bad0)


### [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader/tree/aa13ca35ba38f2ceadb5e98ddc9e8ad0b875bb96)

* [Bug 2100787](https://bugzilla.redhat.com/show_bug.cgi?id=2100787): Include Fix discovering WWN/serial for devicemapper devices [#94](https://github.com/openshift/ironic-ipa-downloader/pull/94)
* [Bug 2070519](https://bugzilla.redhat.com/show_bug.cgi?id=2070519): Multipath fix for passive paths [#91](https://github.com/openshift/ironic-ipa-downloader/pull/91)
* [OCP 4.8] Update OWNERS [#90](https://github.com/openshift/ironic-ipa-downloader/pull/90)
* [Full changelog](https://github.com/openshift/ironic-ipa-downloader/compare/ba8783261ea8f21afdcd46eb8a86986597c38c75...aa13ca35ba38f2ceadb5e98ddc9e8ad0b875bb96)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/ca99ee68dfcf41ff07be2b298483f006994795c1)

* [Bug 2076251](https://bugzilla.redhat.com/show_bug.cgi?id=2076251): Mitigate multiple CVEs [#1435](https://github.com/openshift/jenkins/pull/1435)
* [Bug 2078477](https://bugzilla.redhat.com/show_bug.cgi?id=2078477): set necessary JVM args to allow jenkins JVM to come up on a FIPS node [#1439](https://github.com/openshift/jenkins/pull/1439)
* [Bug 2058750](https://bugzilla.redhat.com/show_bug.cgi?id=2058750): [release-4.8] 2022-02-15 Security Advisory [#1408](https://github.com/openshift/jenkins/pull/1408)
* [Bug 2055911](https://bugzilla.redhat.com/show_bug.cgi?id=2055911): bump openshift-sync to 1.0.53 [#1392](https://github.com/openshift/jenkins/pull/1392)
* [Full changelog](https://github.com/openshift/jenkins/compare/db0e6728a1c29b976de6cf3852cd8cb46fdd3756...ca99ee68dfcf41ff07be2b298483f006994795c1)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/e008bf99ceabce30eb28bb0b0db7c31bb40da4c0)

* [OCPBUGS-2205](https://issues.redhat.com/browse/OCPBUGS-2205): Fix DNS endpoint hack to prefer local instead of forcing it [#469](https://github.com/openshift/sdn/pull/469)
* [Bug 2063971](https://bugzilla.redhat.com/show_bug.cgi?id=2063971): delete stale UDP conntrack entries for loadbalancer IPs [#414](https://github.com/openshift/sdn/pull/414)
* [Bug 2092166](https://bugzilla.redhat.com/show_bug.cgi?id=2092166): Masquerade in cluster traffic that is marked for egress IP [#435](https://github.com/openshift/sdn/pull/435)
* [Full changelog](https://github.com/openshift/sdn/compare/e709078839d1f216ac1de476c1a26de50b07ed04...e008bf99ceabce30eb28bb0b0db7c31bb40da4c0)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/38e0105c9fc5367a2e0bd22446b10a1f65fcb416)

* Updating ose-kube-storage-version-migrator images to be consistent with ART [#174](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/174)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/901a6d221d1cf79b4b6ba859bb43521e0ee635b3...38e0105c9fc5367a2e0bd22446b10a1f65fcb416)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/d78f3bf23498ce7119fc712f124136a7482fa773)

* [Bug 2089971](https://bugzilla.redhat.com/show_bug.cgi?id=2089971): lib/resourcemerge: handle container env var deletions [#3161](https://github.com/openshift/machine-config-operator/pull/3161)
* [Bug 2109329](https://bugzilla.redhat.com/show_bug.cgi?id=2109329): Avoid kubernetes node port range [#3316](https://github.com/openshift/machine-config-operator/pull/3316)
* [Bug 2094765](https://bugzilla.redhat.com/show_bug.cgi?id=2094765): configure-ovs: avoid restarting NetworkManager [#3180](https://github.com/openshift/machine-config-operator/pull/3180)
* [Bug 2108699](https://bugzilla.redhat.com/show_bug.cgi?id=2108699): storage.conf: remove obsolete option override_kernel_check [#3259](https://github.com/openshift/machine-config-operator/pull/3259)
* [Bug 2098274](https://bugzilla.redhat.com/show_bug.cgi?id=2098274): Add KUBELET_NODEIP_HINT to nodeip-configuration [#3192](https://github.com/openshift/machine-config-operator/pull/3192)
* [Bug 2078799](https://bugzilla.redhat.com/show_bug.cgi?id=2078799): configure-ovs: move dhcp config from br-ex to ovs-if-br-ex [#3117](https://github.com/openshift/machine-config-operator/pull/3117)
* [Bug 2057544](https://bugzilla.redhat.com/show_bug.cgi?id=2057544): daemon: Explicitly start rpm-ostreed, restart if we detect active txn [#2967](https://github.com/openshift/machine-config-operator/pull/2967)
* [Bug 2062655](https://bugzilla.redhat.com/show_bug.cgi?id=2062655): Fix bad cherry-pick at 9f7a7eb96 [#3065](https://github.com/openshift/machine-config-operator/pull/3065)
* [Bug 2062655](https://bugzilla.redhat.com/show_bug.cgi?id=2062655): Improvements for configure-ovs script [#3004](https://github.com/openshift/machine-config-operator/pull/3004)
* [Bug 2025396](https://bugzilla.redhat.com/show_bug.cgi?id=2025396): annotate rendered config with OCP version [#2972](https://github.com/openshift/machine-config-operator/pull/2972)
* [Bug 2059330](https://bugzilla.redhat.com/show_bug.cgi?id=2059330): ovs-configuration: use lower than NM default ethernet route metric [#2974](https://github.com/openshift/machine-config-operator/pull/2974)
* [Bug 2058789](https://bugzilla.redhat.com/show_bug.cgi?id=2058789): Prepend to search domains instead of replacing [#2970](https://github.com/openshift/machine-config-operator/pull/2970)
* [Bug 2028854](https://bugzilla.redhat.com/show_bug.cgi?id=2028854): Backport of SystemMemoryExceedsReservation alert rule [#2956](https://github.com/openshift/machine-config-operator/pull/2956)
* [Bug 2032996](https://bugzilla.redhat.com/show_bug.cgi?id=2032996): fixes 1 to 1 containerruntime config mapping [#2877](https://github.com/openshift/machine-config-operator/pull/2877)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/727730fd5f9eb6c7c73829b6cf306823779648f6...d78f3bf23498ce7119fc712f124136a7482fa773)


### [multus-cni](https://github.com/openshift/multus-cni/tree/73d0cfedfff518269f7184615e120afc1406a466)

* Updating multus-cni builder & base images to be consistent with ART [#95](https://github.com/openshift/multus-cni/pull/95)
* [Full changelog](https://github.com/openshift/multus-cni/compare/0c972341809c1e40f9ea6e1545774d9e1f580455...73d0cfedfff518269f7184615e120afc1406a466)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/64807ab77cf97eb69d4202f25840e921290b3e12)

* Updating ose-multus-route-override-cni builder & base images to be consistent with ART [#12](https://github.com/openshift/route-override-cni/pull/12)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/1662c3ec79b880fce5cd9c4e64f5ba0d4daffc00...64807ab77cf97eb69d4202f25840e921290b3e12)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/90e1e394907abea5a97a7cd68d5a91afe87a8913)

* [Bug 2064860](https://bugzilla.redhat.com/show_bug.cgi?id=2064860): Sync context improvements [backport 4.8] [#90](https://github.com/openshift/whereabouts-cni/pull/90)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/d743a20fc84059e96b5f88ec4ce00073d0564fd1...90e1e394907abea5a97a7cd68d5a91afe87a8913)


### [must-gather](https://github.com/openshift/must-gather/tree/7e55480fddf089ec9707f02f6644be9f1200b2a2)

* [Bug 2092264](https://bugzilla.redhat.com/show_bug.cgi?id=2092264): Add networking resources [#309](https://github.com/openshift/must-gather/pull/309)
* [Bug 2057345](https://bugzilla.redhat.com/show_bug.cgi?id=2057345): Fix ovn-nbctl commands for ipv6 [#287](https://github.com/openshift/must-gather/pull/287)
* [Full changelog](https://github.com/openshift/must-gather/compare/515e0502a886f0d7e7e0125792251d5872cc503b...7e55480fddf089ec9707f02f6644be9f1200b2a2)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/c8812eeb9aa3b535a843407704478454a0ab8c7d)

* Added METRIC_TEST_IMAGE var (#57) [#57](https://github.com/openshift/network-metrics-daemon/pull/57)
* Fix field selector (#52) [#52](https://github.com/openshift/network-metrics-daemon/pull/52)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/f02c63ae9475d2e51ee1b94b8e341ac8f9d590b7...c8812eeb9aa3b535a843407704478454a0ab8c7d)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/961db5cc19f78cb73c628c5219a0c5a6dbde7a3e)

* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#74](https://github.com/openshift/oauth-apiserver/pull/74)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/09435a5dd505b3b90eb7ce355ab41c8e4c1a349c...961db5cc19f78cb73c628c5219a0c5a6dbde7a3e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/c23251132914110cc8deed896c415192c02259bb)

* Add coreydaley as reviewer/approver for pkg/build [#300](https://github.com/openshift/openshift-apiserver/pull/300)
* [Bug 2043808](https://bugzilla.redhat.com/show_bug.cgi?id=2043808): IPs with leading zeros are still valid in the apiserver [#280](https://github.com/openshift/openshift-apiserver/pull/280)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/7395e7783120f75f51a0a0b323b70670fba9beef...c23251132914110cc8deed896c415192c02259bb)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/77840b9a431880b15ee05d4a3f327b7ff2a682e8)

* [Bug 2064634](https://bugzilla.redhat.com/show_bug.cgi?id=2064634): Ensure subnets belong to the queried network [#223](https://github.com/openshift/cluster-api-provider-openstack/pull/223)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/eb8656e9dfb4e6945ba8a7776433bc19e9397ba8...77840b9a431880b15ee05d4a3f327b7ff2a682e8)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/9e9736d6b162b877da9de3b760b06eeeb52ccd18)

* [Bug 2074680](https://bugzilla.redhat.com/show_bug.cgi?id=2074680): Emit CSV metric on startup [#288](https://github.com/openshift/operator-framework-olm/pull/288)
* [Bug 2073963](https://bugzilla.redhat.com/show_bug.cgi?id=2073963): Fix a bug in deletion of webhook service for replacement [#281](https://github.com/openshift/operator-framework-olm/pull/281)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b3aabf273e0ac0bd6e84d257332e2eac08f5e6cf...9e9736d6b162b877da9de3b760b06eeeb52ccd18)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/3bab77baee7a006b7a96bea737828979d77cda9d)

* [Bug 2062745](https://bugzilla.redhat.com/show_bug.cgi?id=2062745): Increase timeouts for CSI driver [#90](https://github.com/openshift/ovirt-csi-driver-operator/pull/90)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/7b6cd3d847c807663f63a6f293748c682c2cad2a...3bab77baee7a006b7a96bea737828979d77cda9d)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/345e744a691a7ba8fc5043d3a0005e06e9746a89)

* [Bug 2097018](https://bugzilla.redhat.com/show_bug.cgi?id=2097018): Duplicated IPs can be assigned to multiple Pods [#1137](https://github.com/openshift/ovn-kubernetes/pull/1137)
* [Bug 2111557](https://bugzilla.redhat.com/show_bug.cgi?id=2111557): Remove conntrack entries after rules [#1221](https://github.com/openshift/ovn-kubernetes/pull/1221)
* [Bug 2115039](https://bugzilla.redhat.com/show_bug.cgi?id=2115039): [release-4.8] OCP CARRY: Add the rules to EXTERNALIPs only for SGW mode [#1234](https://github.com/openshift/ovn-kubernetes/pull/1234)
* [Bug 2105655](https://bugzilla.redhat.com/show_bug.cgi?id=2105655): egressIP: node retrieval failure is not respected, causes panic [#1187](https://github.com/openshift/ovn-kubernetes/pull/1187)
* [Bug 2107645](https://bugzilla.redhat.com/show_bug.cgi?id=2107645): Set the OVS port as transient [#1197](https://github.com/openshift/ovn-kubernetes/pull/1197)
* [Bug 2105272](https://bugzilla.redhat.com/show_bug.cgi?id=2105272): EGW: Clean Stale Conntrack Entries [#1193](https://github.com/openshift/ovn-kubernetes/pull/1193)
* [Bug 2106089](https://bugzilla.redhat.com/show_bug.cgi?id=2106089): Fix panics in DestroyNetworkPolicy if policy is nil [#1184](https://github.com/openshift/ovn-kubernetes/pull/1184)
* [Bug 2084110](https://bugzilla.redhat.com/show_bug.cgi?id=2084110): EgressIP NATs are not being cleared correctly from the logical router [#1107](https://github.com/openshift/ovn-kubernetes/pull/1107)
* [Bug 2087227](https://bugzilla.redhat.com/show_bug.cgi?id=2087227): enable `exportloopref` linter and fix violations [#1097](https://github.com/openshift/ovn-kubernetes/pull/1097)
* [Bug 2070762](https://bugzilla.redhat.com/show_bug.cgi?id=2070762): [release-4.8] Multiple ExGW cache validation/improvements [#1019](https://github.com/openshift/ovn-kubernetes/pull/1019)
* [Bug 2077370](https://bugzilla.redhat.com/show_bug.cgi?id=2077370): [release-4.8] fix ipv6 network policy [#1047](https://github.com/openshift/ovn-kubernetes/pull/1047)
* [Bug 2062842](https://bugzilla.redhat.com/show_bug.cgi?id=2062842): [4.8z] After reboot egress node, lr-policy-list was not correct, some duplicate records or missed internal IPs [#1009](https://github.com/openshift/ovn-kubernetes/pull/1009)
* [Bug 2065303](https://bugzilla.redhat.com/show_bug.cgi?id=2065303): [CARRY][Downstream-only] Give warning when ipFamilyPolicy implicitly set [#998](https://github.com/openshift/ovn-kubernetes/pull/998)
* [Bug 2070521](https://bugzilla.redhat.com/show_bug.cgi?id=2070521): egressgw: fix deadlock due to behavior of RWLock [#1018](https://github.com/openshift/ovn-kubernetes/pull/1018)
* [Bug 2063836](https://bugzilla.redhat.com/show_bug.cgi?id=2063836): backport 2052975 to 4.8 [#997](https://github.com/openshift/ovn-kubernetes/pull/997)
* [Bug 2068509](https://bugzilla.redhat.com/show_bug.cgi?id=2068509): EgressGW: only return unique elements from getRouteInfosForGateway() [#1011](https://github.com/openshift/ovn-kubernetes/pull/1011)
* [Bug 2055379](https://bugzilla.redhat.com/show_bug.cgi?id=2055379): [release-4.8] fixing network policy [#4](https://github.com/openshift/ovn-kubernetes/pull/4)
* [Bug 2065311](https://bugzilla.redhat.com/show_bug.cgi?id=2065311): [release-4.8] Network Policy fixes [#999](https://github.com/openshift/ovn-kubernetes/pull/999)
* [Bug 2057557](https://bugzilla.redhat.com/show_bug.cgi?id=2057557): Create iptables NAT rules also for loadbalancer services [#967](https://github.com/openshift/ovn-kubernetes/pull/967)
* [Bug 2058679](https://bugzilla.redhat.com/show_bug.cgi?id=2058679): Bumps ovn2.13-20.12.0-195.el8fdp [#979](https://github.com/openshift/ovn-kubernetes/pull/979)
* [release 4.8] Update project owners [#992](https://github.com/openshift/ovn-kubernetes/pull/992)
* [Bug 2057931](https://bugzilla.redhat.com/show_bug.cgi?id=2057931): Fix podHandlerCache key [#969](https://github.com/openshift/ovn-kubernetes/pull/969)
* [Bug 2057152](https://bugzilla.redhat.com/show_bug.cgi?id=2057152): Fix egress IP allocator sync [#965](https://github.com/openshift/ovn-kubernetes/pull/965)
* [Bug 2053611](https://bugzilla.redhat.com/show_bug.cgi?id=2053611): Lock the reassignment procedure during node deletion to avoid races [#970](https://github.com/openshift/ovn-kubernetes/pull/970)
* [Bug 2054225](https://bugzilla.redhat.com/show_bug.cgi?id=2054225): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#957](https://github.com/openshift/ovn-kubernetes/pull/957)
* [Bug 2056975](https://bugzilla.redhat.com/show_bug.cgi?id=2056975): Don't return err when annotation cannot be unmarshalled [#963](https://github.com/openshift/ovn-kubernetes/pull/963)
* [Bug 2052966](https://bugzilla.redhat.com/show_bug.cgi?id=2052966): [release-4.8] bump ovn to 20.12.0-193 [#949](https://github.com/openshift/ovn-kubernetes/pull/949)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/ab65e3a11604fed790942b81311585cd980a0d3b...345e744a691a7ba8fc5043d3a0005e06e9746a89)


### [tests](https://github.com/openshift/origin/tree/2eb86450ff251951d9aabda446cb4fd19e9e3b62)

* [Bug 1999288](https://bugzilla.redhat.com/show_bug.cgi?id=1999288): [release-4.8]: bump openshift/kubernetes to the latest [#26886](https://github.com/openshift/origin/pull/26886)
* [Full changelog](https://github.com/openshift/origin/compare/45762324002ff285c47aa7705c94128254786de2...2eb86450ff251951d9aabda446cb4fd19e9e3b62)