# 4.9.23

Created: 2022-02-23 22:41:24 +0000 UTC

Image Digest: `sha256:1c13f0926c37c122eb5c86afd754c007f38977c8fc32d7da090490f556945afd`

Promoted from registry.ci.openshift.org/ocp/release:4.9.0-0.nightly-2022-02-23-090657


## Changes from 4.9.0

### Components

* Kubernetes upgraded from 1.22.1 to 1.22.3
* Red Hat Enterprise Linux CoreOS upgraded from 49.84.202110081407-0 to 49.84.202202230006-0


### Rebuilt images without code change

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [18d82a6d](https://github.com/openshift/cloud-provider-aws/commit/18d82a6d75252dcaed8356777e4883d8a2c9732a) `sha256:92164fcf86ec4e09d7054ad19ade984074228023d9d4ec0c61d41df17c176025`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [26f1b6f4](https://github.com/openshift/aws-ebs-csi-driver/commit/26f1b6f4471d0127fa1ed3129d412e22ab788086) `sha256:6af40f9916998ef217e7ffa4fcc021d8f1b8075e509cdbbf63c605b0cf40864d`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [e8e2cb36](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/e8e2cb3682ba7c4796cb2cd7235cb0284548a55a) `sha256:8dd696c9b347246805c439c8ddbaff245671e4c1ce59fb64d454d80b9fb75816`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [c02678d8](https://github.com/openshift/cloud-provider-azure/commit/c02678d890edd540de604d297d363883cc65ce68) `sha256:2983c754e5e7bd459cdd9a28a8bbdcf23b9fabe7cd43251cb10027c5af87e15c`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [c02678d8](https://github.com/openshift/cloud-provider-azure/commit/c02678d890edd540de604d297d363883cc65ce68) `sha256:a6340338239d754cfed012bfe21b648bc9d21dd6f475ea861a7ed9d926084a04`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [ade73731](https://github.com/openshift/azure-disk-csi-driver/commit/ade737312a66074a55c8a216af3c1bfac23337fb) `sha256:d5506ea5aef60e29bcdfdb642077537858de8b3e78ff82536d648af3ba197b43`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [1c81cab6](https://github.com/openshift/cluster-api-provider-baremetal/commit/1c81cab6cc3a166f9b42ffc59c0870c92739229e) `sha256:8f779c2203f6371ad622b36df75c6546e2156e4e007d9f2ef37c088d701c29ed`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [68fe93aa](https://github.com/openshift/kubernetes-autoscaler/commit/68fe93aa45e3080828c71c0d6e6e5da0384db012) `sha256:45bff3d6f0ff53703585fbb179d0fafe88f5594df373a6c70cd498f815c7a7e6`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [7e074a7d](https://github.com/openshift/cluster-bootstrap/commit/7e074a7d562882d1aeeef071a428d6d4b94cf2d2) `sha256:e56a595a00183c678790e434438745e6d950b431029c578a2743b432e0637fa8`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [c750d4b4](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/c750d4b49aa1b1d4d24a6b7d0e5a6f14808f102e) `sha256:65f88e8a7f4c35b130a305588c86528e21493120c0f5fbae6dbf33626909a3c3`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [3015cb84](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/3015cb846aba96102c625f9a694f2dfccb85eb27) `sha256:80adb76f7af54717cbf7da95fd6a0e756d34c491511f3fe2df94937345e44d48`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [8fbffaf2](https://github.com/openshift/cluster-policy-controller/commit/8fbffaf2b3c7f30145b316c7e34da54747b3e634) `sha256:5b10720e57da99d2b55eff7b5f0b4491da94558b05c7283ed323c102ec38b3be`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [2e76e02c](https://github.com/openshift/cluster-storage-operator/commit/2e76e02cb8479784a582e57a587be8fd5d75cae2) `sha256:83ba62c1bb2ce1904a96c299d7a82b8b1f907579d3a13506bfab6b3bc4047791`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [3e200433](https://github.com/openshift/cluster-update-keys/commit/3e20043304c204cc82935b5c510654702db8f8dd) `sha256:21a9606192611c527032f5dc0c1eeeaafa91727fab1ed8c1c03b22c4c60bc5ba`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [b84b5bf9](https://github.com/openshift/configmap-reload/commit/b84b5bf9c3b84e65ebead7e9e35ddf6454bb33ce) `sha256:ffffcdb4b2ddc0b711149fa8430a2469f8f8ce2f818d62d3152dc9a0641a116a`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [44a49134](https://github.com/openshift/containernetworking-plugins/commit/44a49134de5e4d4cc136cc0862d35f226d61d3be) `sha256:387e6bd4339c11e7ef3fad607a5395a0c257bb51f2acc275ee87532d240520ec`
* [coredns](https://github.com/openshift/coredns) git [3cb11c07](https://github.com/openshift/coredns/commit/3cb11c075c7689a2178a03a5d22c5adff3efbd4d) `sha256:e5a5e9fcecf851335751553b74d7f67f0e5a276354580678ab84c6a8653f76a9`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [ddbc0e4f](https://github.com/openshift/cloud-provider-openstack/commit/ddbc0e4f24a6a5f9bb0f75d15a95fd778ee587e5) `sha256:1789d37fafb7c22bfe7cd234c161623d950795465cc8c5c7856abf026272a747`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [fd2d838d](https://github.com/openshift/csi-driver-manila-operator/commit/fd2d838d18b74baefa5a20398cf54826c0a803f9) `sha256:e66e6e64d6d270c6e594fdd35165424b6a271d116f43bb046131cd16c4cd00ff`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [0e0c1739](https://github.com/openshift/csi-driver-nfs/commit/0e0c1739332fee06dfc982b1b05d06005a3ddbee) `sha256:f1bc616d93d6b9ec548654618e8d00fe4c2c0ab8187ed95ece0a4471428f9760`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [0a1737c4](https://github.com/openshift/csi-external-attacher/commit/0a1737c455fe68bdf0480de79e0aa8585e6dc503) `sha256:9ffed943cdc9597803faedfac8891b963e08ec86f4cb21a59ae7c37adc5ce349`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [7736e729](https://github.com/openshift/csi-external-provisioner/commit/7736e7293ea4cdba858f70fa1d59894dde6bd2bb) `sha256:ea0797b04595d1bf46ca5d3b205cead25c70e8c252e844551944079000a3fbe1`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [dad46d03](https://github.com/openshift/csi-external-resizer/commit/dad46d03bda869cf9b8ccff0087fb827906bc288) `sha256:49ed3001a156015c3acbe5ef058f9acbb471b456535e7d56f6baec742527de74`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [52ab8938](https://github.com/openshift/csi-external-snapshotter/commit/52ab8938fe0a1ea3cb666ebd0c6f7b46db5cb0de) `sha256:3ce747b7e19c5d0fa095fdeb29db3c9133575d24d941bad8ef6e71130c3f3883`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [c13c3a5f](https://github.com/openshift/csi-livenessprobe/commit/c13c3a5f6292e10522700b0f911acebeea3c6f8c) `sha256:7c9816e9265dcc83af534a61175814e174ec10c1b411e71baf5d379ceeca1ecd`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [3e02b07e](https://github.com/openshift/csi-node-driver-registrar/commit/3e02b07e70fe306e841b563d3ca8edb0def5fe7f) `sha256:4ca6d4d2f88eb0435084e1e0703330181e69e9c5c205ce21071d30fce864efde`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [52ab8938](https://github.com/openshift/csi-external-snapshotter/commit/52ab8938fe0a1ea3cb666ebd0c6f7b46db5cb0de) `sha256:4ffdcf4d84d1cccc635364d0fb128e6c673c20b3a211a5a9119abb69bb8875ae`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [52ab8938](https://github.com/openshift/csi-external-snapshotter/commit/52ab8938fe0a1ea3cb666ebd0c6f7b46db5cb0de) `sha256:def413b14f2dcdf09447ae316239607e80753b8c9b392c48e8c93c3e47d747b6`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [099b7569](https://github.com/openshift/egress-router-cni/commit/099b75697f58443e87d3d88e9d6f5c426475ccea) `sha256:0e4ef22d135826b18ef4d8f40fd07ba11902d6424b4f1f9e8bde5cda2ff0a953`
* [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [d92b0884](https://github.com/openshift/cluster-api-provider-gcp/commit/d92b08844a2b0ae31e3a78a5548baab7c9d39478) `sha256:f7f9435abbe146ec18ed055d9e7c44b95e61e5a5505cb3a28a88e3062454978d`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [48d49f7f](https://github.com/openshift/gcp-pd-csi-driver/commit/48d49f7f9ef96a7a42a789e3304ead53f266f475) `sha256:dcaf55e89e2682eaae55fbce2ecac428e016e52656bd14ca8a89921b777abeb0`
* [grafana](https://github.com/openshift/grafana) git [6130ba8b](https://github.com/openshift/grafana/commit/6130ba8b4c4b66e7779bec26c74b1fefbb2e21ab) `sha256:dcf9cfdbb65784b4f579b681fdbfde5d80eaf8f84938e5afbb0339cb735b48bb`
* [haproxy-router](https://github.com/openshift/router) git [2d1e1f4b](https://github.com/openshift/router/commit/2d1e1f4bd413dd283c92638e23fae940ef4c1e54) `sha256:6a4bb123a5ec84e77cc498db6740325fd72c4e2b4b26e3ea5026f677c56211b5`
* [ironic-inspector](https://github.com/openshift/ironic-inspector-image) git [9474b758](https://github.com/openshift/ironic-inspector-image/commit/9474b75871108ba4b4855c9b46e3b1ce4aae1342) `sha256:650779b0788eafb2c5641ec840c9093cac710b335c0d635a28518a0e7ff0b4d6`
* [ironic-ipa-downloader](https://github.com/openshift/ironic-ipa-downloader) git [6e9af39e](https://github.com/openshift/ironic-ipa-downloader/commit/6e9af39e14d7f531a5c0f0b025bc31c4c4392732) `sha256:f9932df698f441f15f6b16af02ab8ffb608d0acb62530df0dc9878bbe7fb60f4`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [d13dccb8](https://github.com/openshift/ironic-static-ip-manager/commit/d13dccb8d419159efdd7a63428f7820e346b0395) `sha256:3fcf05e7ffb75560b95a150426ff5751de1ce06df7203982fdf9f015acddaf9c`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [adfdd41d](https://github.com/openshift/k8s-prometheus-adapter/commit/adfdd41d3fba23d38645c1c655687c28e27979df) `sha256:1db62bcf9b5210d5df97707573d30253156dc035ac9879280e90908ee6f9638d`
* [keepalived-ipfailover](https://github.com/openshift/images) git [f93eca83](https://github.com/openshift/images/commit/f93eca83376b6aaf681755c568b6e0393f569c04) `sha256:4bed16bdbd838f380e6c5553f6eca9cd34e7f965fe07f8518759ed7675c87017`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [58e09297](https://github.com/openshift/kube-rbac-proxy/commit/58e09297223ca912cba8b369bfad150b0fc04a9f) `sha256:7e4bf78e5f476adbeaa68d4df835ee810569b1b0818952f7ac8d25f164f19e29`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [6e41dbd4](https://github.com/openshift/kube-state-metrics/commit/6e41dbd42c8f38d6960f5e837d9e64fbd5e8d3ef) `sha256:f17aa987a4578af06f558a6172e714bac20cfaaceeb850bb88afde5c077a5434`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [901a6d22](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/901a6d221d1cf79b4b6ba859bb43521e0ee635b3) `sha256:355c439416e02e466b38a973fb8042f5a2765db624bde9eebb7fe71fa6699a91`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [59ae2edf](https://github.com/openshift/cluster-api-provider-libvirt/commit/59ae2edf88755f915b7d76d78a8934ee17487ad6) `sha256:2fe9c7002560488540d34a6fb086d3f45c914bfe7c08fe7aba72bfdede362288`
* machine-os-content `sha256:ae92a919cb6da4d1a5d832f8bc486ae92e55bf3814ebab94bf4baa4c4bcde85d`
* [mdns-publisher](https://github.com/openshift/mdns-publisher) git [266597b3](https://github.com/openshift/mdns-publisher/commit/266597b3c75fcbaf6441ef4acd1f235f74a0f305) `sha256:fc1e027efddf7429ea2244f78a13e18249eadf3dfbaaea2d97ed01d87ef5e6c9`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [3c28a57a](https://github.com/openshift/multus-admission-controller/commit/3c28a57a831d11380e612a616820bf8a42261d9d) `sha256:85c8a8cbbd7e2c83c95f4002832a56da84894a2713805cebf379b29ddd3a1073`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [fd12fede](https://github.com/openshift/multus-networkpolicy/commit/fd12fedeb9e05637279386aa2aacd443ac1c0da7) `sha256:211ae2803fe35739208d41e69075e2698abf48ec860769647487eb8a6d502960`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [707dd380](https://github.com/openshift/route-override-cni/commit/707dd38046554810f601f2fae4a69bc4b907d7d3) `sha256:3097a036b12d902b864573886d6353e4234a25d24288c52bc7e28f15d8960705`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [9fd61030](https://github.com/openshift/network-metrics-daemon/commit/9fd6103057d648a153cba0b8f06db92eff6d62f9) `sha256:7590119ec6f3018f4c66f5edb0f2ed05f78b69321d1fb3bbcf85843b9cade633`
* [network-tools](https://github.com/openshift/network-tools) git [ed0b846c](https://github.com/openshift/network-tools/commit/ed0b846c056056848f0ab7741bd3f1254e1862d6) `sha256:957a1e03022763253ef997eca1d0b99b8493e08d9809fb686621a51e9ce4455f`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [9ea1ebc8](https://github.com/openshift/oauth-proxy/commit/9ea1ebc89f721d3cd929f58c7ab9ed4273d3c493) `sha256:8e77bd9d4e81b4031620f32f0b5774aad843ee77fca56b555ca0a71f9ff64cd5`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [689af8b8](https://github.com/openshift/openshift-state-metrics/commit/689af8b8dcb57484dc0c6428a3e8c9d73ef294a2) `sha256:2cf3193b634943a8e231d0261231e50e08abae9bbfc01b5e35fd0302e2a32f9c`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [ddbc0e4f](https://github.com/openshift/cloud-provider-openstack/commit/ddbc0e4f24a6a5f9bb0f75d15a95fd778ee587e5) `sha256:7a5aa75f6b10bba940a64aec362207864fc88d337e5479fb2ae3c2035c7eee87`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [ddbc0e4f](https://github.com/openshift/cloud-provider-openstack/commit/ddbc0e4f24a6a5f9bb0f75d15a95fd778ee587e5) `sha256:320a9cf64add6133ba0cf9424f636f3d511609f504bf2f8ed43096322565cfb0`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [a7442bb1](https://github.com/openshift/cluster-api-provider-openstack/commit/a7442bb18bce01a0eb0ffe99d550aa7ba584ea25) `sha256:df8b968602985abee1eb94110e7053d3e75250798f0a56c10f905b35793f7220`
* [prometheus](https://github.com/openshift/prometheus) git [3197fa71](https://github.com/openshift/prometheus/commit/3197fa71f6b01d2acd8c354056b015d1c0a06f7d) `sha256:32e1131db64c410e62102c3c45913719ef68120f8035e466ede4dc216f091300`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [579e3c68](https://github.com/openshift/prometheus-alertmanager/commit/579e3c6879bad1ac3a1c4f7146b21f907980dafd) `sha256:abe7c5c09c132a5054b239dfb0529cede413a053982daca04d75f575407fb8e5`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [1ab97f35](https://github.com/openshift/node_exporter/commit/1ab97f35f07cf1ed02a2b4ea3f3c3c9d09bf94b5) `sha256:31525f31f467aca17f33178d2711bb56a569c436c74206fdc50727e8dc6a1595`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [ab44f586](https://github.com/openshift/service-ca-operator/commit/ab44f586318864ed385dff5a59ea72b486afbe35) `sha256:7300c66f414fb0393d66e45129033c6b0b5e3e48d7c43f1ed8127f18a82c19c2`
* [telemeter](https://github.com/openshift/telemeter) git [03842e05](https://github.com/openshift/telemeter/commit/03842e05c3530786315e436522471667af86627e) `sha256:5addfc6909d3c950c175f3cc4dfaa73f68e144503bb4184009f209d4d16be224`
* [thanos](https://github.com/openshift/thanos) git [e0fa82ca](https://github.com/openshift/thanos/commit/e0fa82ca4384de82827f6fbb39789451b9243b5f) `sha256:09308500f7a200709f97f66fcfefb58510664d25dfd0036220e412e694231b1e`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [4ece3d1b](https://github.com/openshift/vmware-vsphere-csi-driver/commit/4ece3d1b07cc0e25abe028c7190ae9ad70cb87ee) `sha256:3ca5ff3324f5cdd63df654774d32a5904cb749da144bc4d0a2d7f4f849f59a99`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [4ece3d1b](https://github.com/openshift/vmware-vsphere-csi-driver/commit/4ece3d1b07cc0e25abe028c7190ae9ad70cb87ee) `sha256:34c6dc8661e9cee59325668d1be198e2d8dc639b502221a47c09b90bcb53cc35`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/8226e86fa06e84e9959ce0297569dfd8ce80c302)

* [Bug 2029993](https://bugzilla.redhat.com/show_bug.cgi?id=2029993): Prevent Machine from being considered provisioned until it exists in AWS [#431](https://github.com/openshift/cluster-api-provider-aws/pull/431)
* [Bug 2015605](https://bugzilla.redhat.com/show_bug.cgi?id=2015605): do not requeue if the machine has been updated [#425](https://github.com/openshift/cluster-api-provider-aws/pull/425)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/f5013d0471e536fa4c4f1871bbe92931aed04b42...8226e86fa06e84e9959ce0297569dfd8ce80c302)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/37a13282bc56887e72d463c24168df59d5971b2f)

* [Bug 2026379](https://bugzilla.redhat.com/show_bug.cgi?id=2026379): update go.mod for go1.16 [#147](https://github.com/openshift/aws-pod-identity-webhook/pull/147)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/175f98f8b3167349e96a6793f13d1c46a07f7582...37a13282bc56887e72d463c24168df59d5971b2f)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/15e474ce3bce9ce219fdd85ceb42620c18d9f817)

* [Bug 2029571](https://bugzilla.redhat.com/show_bug.cgi?id=2029571): Add custom CA bundle support [#39](https://github.com/openshift/azure-disk-csi-driver-operator/pull/39)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/60fd0edd976ccfe9ff5180b7ecf7f5201f62b000...15e474ce3bce9ce219fdd85ceb42620c18d9f817)


### [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/3bf2b7ff289814b198feb0a56cb85967db18e9dc)

* [Bug 2047845](https://bugzilla.redhat.com/show_bug.cgi?id=2047845): Requeue create on invalid credentials errors [#249](https://github.com/openshift/cluster-api-provider-azure/pull/249)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/c689e78f705206f94f4187c86db8356b0118d12c...3bf2b7ff289814b198feb0a56cb85967db18e9dc)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/4391c015d1d5350049be247e591b4a34e0d3061f)

* [Bug 2052307](https://bugzilla.redhat.com/show_bug.cgi?id=2052307): aws: Filter out local zones when generating a default list of zones [#5627](https://github.com/openshift/installer/pull/5627)
* [Bug 2042443](https://bugzilla.redhat.com/show_bug.cgi?id=2042443): openstack/Dockerfile: add make and gettext [#5549](https://github.com/openshift/installer/pull/5549)
* [Bug 2038429](https://bugzilla.redhat.com/show_bug.cgi?id=2038429): Azure: Update Default Instance Types [#5520](https://github.com/openshift/installer/pull/5520)
* [Bug 2043590](https://bugzilla.redhat.com/show_bug.cgi?id=2043590): vendor: bump aws terraform provider to v3.1.0-openshift-2 [#5559](https://github.com/openshift/installer/pull/5559)
* [Bug 2031606](https://bugzilla.redhat.com/show_bug.cgi?id=2031606): aws: get ips for all control plane instances for bootstrap gather [#5474](https://github.com/openshift/installer/pull/5474)
* [Bug 2022172](https://bugzilla.redhat.com/show_bug.cgi?id=2022172): Relax vcenter hostname check [#5372](https://github.com/openshift/installer/pull/5372)
* [Bug 2029409](https://bugzilla.redhat.com/show_bug.cgi?id=2029409): Update defaultReleaseImageOriginal to 4.9 [#5450](https://github.com/openshift/installer/pull/5450)
* [Bug 2028611](https://bugzilla.redhat.com/show_bug.cgi?id=2028611): vendor: update terraform-provider-google for rate limit fix [#5445](https://github.com/openshift/installer/pull/5445)
* [Bug 2027329](https://bugzilla.redhat.com/show_bug.cgi?id=2027329): Handle unset default machine pool [#5424](https://github.com/openshift/installer/pull/5424)
* [Bug 2022616](https://bugzilla.redhat.com/show_bug.cgi?id=2022616): Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal [#5380](https://github.com/openshift/installer/pull/5380)
* [Bug 2017985](https://bugzilla.redhat.com/show_bug.cgi?id=2017985): Set AWS Bootstrap Type == Master [#5337](https://github.com/openshift/installer/pull/5337)
* [Bug 2016267](https://bugzilla.redhat.com/show_bug.cgi?id=2016267): Add ingress rules to master SG for compact clusters [#5320](https://github.com/openshift/installer/pull/5320)
* [Bug 2004052](https://bugzilla.redhat.com/show_bug.cgi?id=2004052): OpenStack: Fix links in SR-IOV workers doc [#5212](https://github.com/openshift/installer/pull/5212)
* [Bug 2009787](https://bugzilla.redhat.com/show_bug.cgi?id=2009787): Fix RAM validation for openstack flavors [#5262](https://github.com/openshift/installer/pull/5262)
* [Bug 2004569](https://bugzilla.redhat.com/show_bug.cgi?id=2004569): Fix router clean up upon cluster destroy [#5220](https://github.com/openshift/installer/pull/5220)
* [Bug 2015811](https://bugzilla.redhat.com/show_bug.cgi?id=2015811): bump oVirt terraform provider version which fix "Disk is locked" bug [#5315](https://github.com/openshift/installer/pull/5315)
* [Full changelog](https://github.com/openshift/installer/compare/6e5b992ba719dd4ea2d0c2a8b08ecad45179e553...4391c015d1d5350049be247e591b4a34e0d3061f)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/6e62a5464298ea49a2681f946d09adc863a6a3f8)

* [Bug 2009849](https://bugzilla.redhat.com/show_bug.cgi?id=2009849): Avoid logging BMC password when creds change [#183](https://github.com/openshift/baremetal-operator/pull/183)
* [Bug 2009850](https://bugzilla.redhat.com/show_bug.cgi?id=2009850): Fix fallback for ironic drivers that don't support soft power off [#184](https://github.com/openshift/baremetal-operator/pull/184)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/cf45440bbe2cfc2dcc66dbb9ac51d3c23f5ceeee...6e62a5464298ea49a2681f946d09adc863a6a3f8)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/5113d1ba4f4673fe5d5cdc415b6238d350fc31ab)

* [Bug 2043650](https://bugzilla.redhat.com/show_bug.cgi?id=2043650): Avoid dynamically allocated port range for haproxy [#167](https://github.com/openshift/baremetal-runtimecfg/pull/167)
* [Bug 2049903](https://bugzilla.redhat.com/show_bug.cgi?id=2049903): Add delay after sending bootstrap stop and start messages [#169](https://github.com/openshift/baremetal-runtimecfg/pull/169)
* [Bug 2025691](https://bugzilla.redhat.com/show_bug.cgi?id=2025691): retrieve only single type  addresses for Keepalived ingress [#160](https://github.com/openshift/baremetal-runtimecfg/pull/160)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/066cf9fd92c2ddcb47894d87ef6bef52b7fef292...5113d1ba4f4673fe5d5cdc415b6238d350fc31ab)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/5035cc32ec97e671c86ab4ec744f20208c48a85d)

* [Bug 2053149](https://bugzilla.redhat.com/show_bug.cgi?id=2053149): Fix catalog mirror from files [#1064](https://github.com/openshift/oc/pull/1064)
* [Bug 2053222](https://bugzilla.redhat.com/show_bug.cgi?id=2053222): Fix mirroring images that have dots in their namespace [#1068](https://github.com/openshift/oc/pull/1068)
* [Bug 2039761](https://bugzilla.redhat.com/show_bug.cgi?id=2039761): Remove `git://` from new-app tests [#1022](https://github.com/openshift/oc/pull/1022)
* [Bug 2038930](https://bugzilla.redhat.com/show_bug.cgi?id=2038930): properly handle --dry-run=server [#1016](https://github.com/openshift/oc/pull/1016)
* [Full changelog](https://github.com/openshift/oc/compare/96e95cef877ba04872b88e4e2597eabb0174d182...5035cc32ec97e671c86ab4ec744f20208c48a85d)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d642d1125fa4f68415ad7562aab2efa8015cc251)

* [Bug 2024751](https://bugzilla.redhat.com/show_bug.cgi?id=2024751): pod-identity-webhook starts without tls [#423](https://github.com/openshift/cloud-credential-operator/pull/423)
* [Bug 2015977](https://bugzilla.redhat.com/show_bug.cgi?id=2015977): Stop putting CCO in degraded state when stale credentials are found [#404](https://github.com/openshift/cloud-credential-operator/pull/404)
* [Bug 1992563](https://bugzilla.redhat.com/show_bug.cgi?id=1992563): update alerts with summary and descriptions [#397](https://github.com/openshift/cloud-credential-operator/pull/397)
* [Bug 2024751](https://bugzilla.redhat.com/show_bug.cgi?id=2024751): pod-identity-webhook starts without tls [#424](https://github.com/openshift/cloud-credential-operator/pull/424)
* [Bug 2015989](https://bugzilla.redhat.com/show_bug.cgi?id=2015989): Check for aws status in infra platform status field before client setup [#405](https://github.com/openshift/cloud-credential-operator/pull/405)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0d83e9b1045b9d864892a8f5fd975711b0a810b8...d642d1125fa4f68415ad7562aab2efa8015cc251)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/1d05f80998b72d059f07612530e25396b7e74446)

* [Bug 2039417](https://bugzilla.redhat.com/show_bug.cgi?id=2039417): remove degraded condition 4.9 [#542](https://github.com/openshift/cluster-authentication-operator/pull/542)
* [Bug 2037274](https://bugzilla.redhat.com/show_bug.cgi?id=2037274): starter.go: add invalidCertsController [#535](https://github.com/openshift/cluster-authentication-operator/pull/535)
* golang 1.16 bump: Updating ose-cluster-authentication-operator images to be consistent with ART [#526](https://github.com/openshift/cluster-authentication-operator/pull/526)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/b6c02e670147f001adf9c59ed0e0d4fee38214f5...1d05f80998b72d059f07612530e25396b7e74446)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/bc20153a145fa8a2ee56c65d43186fc02df216d3)

* [Bug 2025582](https://bugzilla.redhat.com/show_bug.cgi?id=2025582): Change ClusterAutoscalerUnschedulablePods severity to info [#230](https://github.com/openshift/cluster-autoscaler-operator/pull/230)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/4a6915434916fce27514541bf762bd7ea15a959c...bc20153a145fa8a2ee56c65d43186fc02df216d3)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fb8cc3fbf9067755191bced5aa9f16c7458a92b4)

* [Bug 2053581](https://bugzilla.redhat.com/show_bug.cgi?id=2053581): Calculating network stack only on supported Platforms [#244](https://github.com/openshift/cluster-baremetal-operator/pull/244)
* [Bug 2012684](https://bugzilla.redhat.com/show_bug.cgi?id=2012684): add a new field "ProvisioningMacAddresses" to the provisioning CRD [#207](https://github.com/openshift/cluster-baremetal-operator/pull/207)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/fc2865abc482503d04aff6f322cfbf776d2715a9...fb8cc3fbf9067755191bced5aa9f16c7458a92b4)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/1826b16051e893576a123e2528013e722f68ab4e)

* [Bug 2034504](https://bugzilla.redhat.com/show_bug.cgi?id=2034504): Ensure old deployment is deleted before new deployment creation [#162](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/162)
* [Bug 2015503](https://bugzilla.redhat.com/show_bug.cgi?id=2015503): User CA bundle sync controller [#138](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/138)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/2b9246cdcb8873e92d9d7913608bed501d900cc9...1826b16051e893576a123e2528013e722f68ab4e)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/184a51396e5927200ae3e00a5819b44c02e2fa7c)

* [Bug 2015306](https://bugzilla.redhat.com/show_bug.cgi?id=2015306): bump api [#224](https://github.com/openshift/cluster-config-operator/pull/224)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/f901f5bd6a9152145da27bc493477b224cdd5c47...184a51396e5927200ae3e00a5819b44c02e2fa7c)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/eedd0dc7f53166dcb69e218fa92d66693d021225)

* [Bug 2002621](https://bugzilla.redhat.com/show_bug.cgi?id=2002621): serviceChanged: Fix internalTrafficPolicy [#295](https://github.com/openshift/cluster-dns-operator/pull/295)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/083d37c46a91d14762ad80c0ee8b6db40a3eb4bf...eedd0dc7f53166dcb69e218fa92d66693d021225)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/19c4e72ede71df4b58c6165b1e2be45cc949090a)

* [Bug 2008175](https://bugzilla.redhat.com/show_bug.cgi?id=2008175): pkg/operator/metriccontroller: Fix query [#686](https://github.com/openshift/cluster-etcd-operator/pull/686)
* [Bug 2009890](https://bugzilla.redhat.com/show_bug.cgi?id=2009890): pkg/operator/upgradebackupcontroller: fix backup dir name in status condition [#683](https://github.com/openshift/cluster-etcd-operator/pull/683)
* [Bug 2007454](https://bugzilla.redhat.com/show_bug.cgi?id=2007454): pkg/cmd/render: disallow placeholder IPs [#667](https://github.com/openshift/cluster-etcd-operator/pull/667)
* [Bug 2003540](https://bugzilla.redhat.com/show_bug.cgi?id=2003540): bump library-go [#663](https://github.com/openshift/cluster-etcd-operator/pull/663)
* [Bug 2009016](https://bugzilla.redhat.com/show_bug.cgi?id=2009016): Suppress noisy logs and improve client errors [#679](https://github.com/openshift/cluster-etcd-operator/pull/679)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/a6820f39dd0f74f6989366b9f0c9faa65896859d...19c4e72ede71df4b58c6165b1e2be45cc949090a)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/d886c13c0895747362a8d1eb4c2a57835ab413f4)

* [Bug 2023219](https://bugzilla.redhat.com/show_bug.cgi?id=2023219): Wait until cluster operators recover before proceeding [#731](https://github.com/openshift/cluster-image-registry-operator/pull/731)
* [Bug 2005049](https://bugzilla.redhat.com/show_bug.cgi?id=2005049): Avoid disruptions [#719](https://github.com/openshift/cluster-image-registry-operator/pull/719)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/48485bb2206c8829b7b07904e3585816ed39485f...d886c13c0895747362a8d1eb4c2a57835ab413f4)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/07c25a64d3834e46d5affa6e1ec49ea24cf8f1cc)

* [Bug 2014938](https://bugzilla.redhat.com/show_bug.cgi?id=2014938): Use fake dns provider with external cp topology only in IBM Cloud case [#666](https://github.com/openshift/cluster-ingress-operator/pull/666)
* [Bug 2014711](https://bugzilla.redhat.com/show_bug.cgi?id=2014711): Fix for Azure dns privateZone degrade e2e test [#673](https://github.com/openshift/cluster-ingress-operator/pull/673)
* [Bug 2015829](https://bugzilla.redhat.com/show_bug.cgi?id=2015829): Change default balancing algorithm to "leastconn" [#667](https://github.com/openshift/cluster-ingress-operator/pull/667)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/9aa4433d80ff891862dc6f16ea0d9f7c2387509a...07c25a64d3834e46d5affa6e1ec49ea24cf8f1cc)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a895470a0ba53486b6379af960501f5a85436b98)

* [Bug 2044622](https://bugzilla.redhat.com/show_bug.cgi?id=2044622): staticpod pruner: check if the cert directory exists to avoid panic [#1297](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1297)
* [Bug 2037274](https://bugzilla.redhat.com/show_bug.cgi?id=2037274): starter: include metrics controller [#1274](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1274)
* [Bug 2029504](https://bugzilla.redhat.com/show_bug.cgi?id=2029504): encryption-controller: sync secrets conditionally [#1268](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1268)
* [Bug 2014615](https://bugzilla.redhat.com/show_bug.cgi?id=2014615): Exempt metrics scrapes from APF. [#1244](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1244)
* [Bug 2012346](https://bugzilla.redhat.com/show_bug.cgi?id=2012346): prometheus-k8s-0 cpu usage keeps increasing for the first 3 days [#1242](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1242)
* [Bug 2003540](https://bugzilla.redhat.com/show_bug.cgi?id=2003540): bump library-go [#1232](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1232)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/ea2ec3bb5a8a36b98c987901a12822c34451354f...a895470a0ba53486b6379af960501f5a85436b98)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/78b8e48b3f4ed09037d71ea7a94582d1b2123fbd)

* [Bug 2049907](https://bugzilla.redhat.com/show_bug.cgi?id=2049907): allow cluster-policy-controller to fallback to default cert [#600](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/600)
* [Bug 2044622](https://bugzilla.redhat.com/show_bug.cgi?id=2044622): Sync with the latest 4.9 library-go [#593](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/593)
* Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART [#537](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/537)
* [Bug 2003540](https://bugzilla.redhat.com/show_bug.cgi?id=2003540): bump library-go [#564](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/564)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/7766edfd7e8f86e1ce7b301184b7aa7249465b2f...78b8e48b3f4ed09037d71ea7a94582d1b2123fbd)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5694bdd97a73c70711b354e83499f6e60b45ddbd)

* [Bug 2044622](https://bugzilla.redhat.com/show_bug.cgi?id=2044622): Sync with the latest 4.9 library-go [#405](https://github.com/openshift/cluster-kube-scheduler-operator/pull/405)
* [Bug 2037665](https://bugzilla.redhat.com/show_bug.cgi?id=2037665): Check policy name field independently of the configmap change [#403](https://github.com/openshift/cluster-kube-scheduler-operator/pull/403)
* [Bug 2037665](https://bugzilla.redhat.com/show_bug.cgi?id=2037665): Remove policy upgradeable when policy field cleared [#402](https://github.com/openshift/cluster-kube-scheduler-operator/pull/402)
* [Bug 2037665](https://bugzilla.redhat.com/show_bug.cgi?id=2037665): Set upgradeable=false if using Policy field [#400](https://github.com/openshift/cluster-kube-scheduler-operator/pull/400)
* [Bug 2003540](https://bugzilla.redhat.com/show_bug.cgi?id=2003540): bump library-go [#370](https://github.com/openshift/cluster-kube-scheduler-operator/pull/370)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/c90e03f00cebb5c3bd8c7c8c541f2b688a996f01...5694bdd97a73c70711b354e83499f6e60b45ddbd)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/7245b0f0b365f26b210a2f5c23256abb756a2f07)

* [Bug 2022528](https://bugzilla.redhat.com/show_bug.cgi?id=2022528): Extensive number of requests from storage version operator in cluster [#77](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/77)
* [Bug 2016176](https://bugzilla.redhat.com/show_bug.cgi?id=2016176): kube-storage-version-migrator constantly reporting type "Upgradeable" status Unknown [#72](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/72)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/c45ac14912dd1e5c85cadeff8ac6c5fd1d1b0562...7245b0f0b365f26b210a2f5c23256abb756a2f07)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/993ec9fe8eae4f07eb01a42ebecf606ba0ad3f97)

* [Bug 2031061](https://bugzilla.redhat.com/show_bug.cgi?id=2031061): Replace certificates with generated certificates [#147](https://github.com/openshift/cluster-machine-approver/pull/147)
* [Bug 2024216](https://bugzilla.redhat.com/show_bug.cgi?id=2024216): Allow fallback to serving cert renewal accounting for egress IPs on SDN [#141](https://github.com/openshift/cluster-machine-approver/pull/141)
* [Bug 2019754](https://bugzilla.redhat.com/show_bug.cgi?id=2019754): Ensure pending CSR count is valid post approval [#139](https://github.com/openshift/cluster-machine-approver/pull/139)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/093c444752693993386cad486650e313dbf65b58...993ec9fe8eae4f07eb01a42ebecf606ba0ad3f97)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/f48b8d2ec84e06861009002fc413a256e769b4e0)

* [Bug 2038406](https://bugzilla.redhat.com/show_bug.cgi?id=2038406): Add custom profile metric for Node Tuning Operator to telemetry [#1535](https://github.com/openshift/cluster-monitoring-operator/pull/1535)
* [Bug 2021097](https://bugzilla.redhat.com/show_bug.cgi?id=2021097): Set Upgradeable: false when HA workloads are incorrectly spread [#1472](https://github.com/openshift/cluster-monitoring-operator/pull/1472)
* [Bug 2018455](https://bugzilla.redhat.com/show_bug.cgi?id=2018455): Keep container_fs_usage_bytes metric [#1461](https://github.com/openshift/cluster-monitoring-operator/pull/1461)
* [Bug 2015571](https://bugzilla.redhat.com/show_bug.cgi?id=2015571): [4.9] add kube_persistentvolumeclaim_labels and kube_persistentvolume_labels [#1457](https://github.com/openshift/cluster-monitoring-operator/pull/1457)
* [Bug 2013617](https://bugzilla.redhat.com/show_bug.cgi?id=2013617): Update KubePodCrashLooping alert [#1448](https://github.com/openshift/cluster-monitoring-operator/pull/1448)
* [Bug 2013148](https://bugzilla.redhat.com/show_bug.cgi?id=2013148): jsonnet: Drop unnecessary kube-state-metrics alerts [#1435](https://github.com/openshift/cluster-monitoring-operator/pull/1435)
* [Bug 2011359](https://bugzilla.redhat.com/show_bug.cgi?id=2011359): Backport Application Services metric to 4.9 release [#1420](https://github.com/openshift/cluster-monitoring-operator/pull/1420)
* [Bug 2011798](https://bugzilla.redhat.com/show_bug.cgi?id=2011798): Prometheus when installed on the cluster shouldn't have failing rules evaluation [#1418](https://github.com/openshift/cluster-monitoring-operator/pull/1418)
* [Bug 2008120](https://bugzilla.redhat.com/show_bug.cgi?id=2008120): Adjust dropped cAdvisor metrics [#1404](https://github.com/openshift/cluster-monitoring-operator/pull/1404)
* [Bug 2012029](https://bugzilla.redhat.com/show_bug.cgi?id=2012029): Allow namespace label in metric allow list [#1422](https://github.com/openshift/cluster-monitoring-operator/pull/1422)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/79cdf6865f159afbd89b7be60a8bbcf5f24cb938...f48b8d2ec84e06861009002fc413a256e769b4e0)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/4d936557039b55dc4930c89328f1d598cfdc9cf2)

* [Bug 2040530](https://bugzilla.redhat.com/show_bug.cgi?id=2040530): ovn: try to gracefully terminate ovn-northd and ovsdb [#1279](https://github.com/openshift/cluster-network-operator/pull/1279)
* [Bug 2046476](https://bugzilla.redhat.com/show_bug.cgi?id=2046476): sbdb and nbdb containers leave pid around if they restarted or crashed [#1291](https://github.com/openshift/cluster-network-operator/pull/1291)
* [Bug 2038252](https://bugzilla.redhat.com/show_bug.cgi?id=2038252): Backport 4.9  OVN drop icmp frag from other nodes on Azure cluster [#1273](https://github.com/openshift/cluster-network-operator/pull/1273)
* [Bug 2034351](https://bugzilla.redhat.com/show_bug.cgi?id=2034351): Whereabouts IP Reconciliaton [backport 4.9] [#1264](https://github.com/openshift/cluster-network-operator/pull/1264)
* [Bug 2023423](https://bugzilla.redhat.com/show_bug.cgi?id=2023423): Add ip6tables NOTRACK rules for udp/6081 [#1229](https://github.com/openshift/cluster-network-operator/pull/1229)
* [Bug 2037499](https://bugzilla.redhat.com/show_bug.cgi?id=2037499): Bump openshift/build-machinery-go [#1270](https://github.com/openshift/cluster-network-operator/pull/1270)
* [Bug 2028961](https://bugzilla.redhat.com/show_bug.cgi?id=2028961): [release-4.9] Set upgrade strategy on kube-proxy [#1239](https://github.com/openshift/cluster-network-operator/pull/1239)
* [Bug 2014021](https://bugzilla.redhat.com/show_bug.cgi?id=2014021): Use proxy to connect to OSP cloud [#1201](https://github.com/openshift/cluster-network-operator/pull/1201)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8437b077d5700f3b4f484f34717c939faf90c5e2...4d936557039b55dc4930c89328f1d598cfdc9cf2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ce0b3ae329cb8fb2c270de2a6a0adc393d2a5c3b)

* [Bug 2017066](https://bugzilla.redhat.com/show_bug.cgi?id=2017066): openshift profile: fix malformed patch [#284](https://github.com/openshift/cluster-node-tuning-operator/pull/284)
* [Bug 2013653](https://bugzilla.redhat.com/show_bug.cgi?id=2013653): TuneD: workaround for high CPU utilization of [scheduler] plug-in. [#279](https://github.com/openshift/cluster-node-tuning-operator/pull/279)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/92843817d51e7d0ab25862cb4180f79a821f68b2...ce0b3ae329cb8fb2c270de2a6a0adc393d2a5c3b)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/d293c3129c92d4ddb469bd1368c09be221af411c)

* [Bug 2047331](https://bugzilla.redhat.com/show_bug.cgi?id=2047331): global pull secret not working in OCP4.7.4+ for additio… [#491](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/491)
* [Bug 2029504](https://bugzilla.redhat.com/show_bug.cgi?id=2029504): encryption-controller: sync secrets conditionally [#487](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/487)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/4cc29cff25abd99f618d7f893f5190ff44f7f901...d293c3129c92d4ddb469bd1368c09be221af411c)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/9b0a9d769ef38f9f56a8b1a7900e458b526523a8)

* [Bug 2010136](https://bugzilla.redhat.com/show_bug.cgi?id=2010136): Including Template in must-gather related objects. [#401](https://github.com/openshift/cluster-samples-operator/pull/401)
* [Bug 2009722](https://bugzilla.redhat.com/show_bug.cgi?id=2009722): acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings [#400](https://github.com/openshift/cluster-samples-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/49a97d32181155a70013c4b239643d66cb47f85c...9b0a9d769ef38f9f56a8b1a7900e458b526523a8)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f2551e5d22e4b5623a47f94555226ffa3d750e9d)

* [Bug 2038275](https://bugzilla.redhat.com/show_bug.cgi?id=2038275): *: Use --v=2 logging to drop client-side throttling noise [#723](https://github.com/openshift/cluster-version-operator/pull/723)
* [Bug 2028602](https://bugzilla.redhat.com/show_bug.cgi?id=2028602): lib/resourcemerge/apps: Default Deployment replicas to one [#702](https://github.com/openshift/cluster-version-operator/pull/702)
* [Bug 2024588](https://bugzilla.redhat.com/show_bug.cgi?id=2024588): Changing the ClusterNotUpgradeable alert to info [#693](https://github.com/openshift/cluster-version-operator/pull/693)
* [Bug 2022570](https://bugzilla.redhat.com/show_bug.cgi?id=2022570): cvo: Compare manifest group in getOverrideForManifest [#690](https://github.com/openshift/cluster-version-operator/pull/690)
* [Bug 2015024](https://bugzilla.redhat.com/show_bug.cgi?id=2015024): lib/resourcemerge/imagestream.go: Copy all data for new tag reference [#678](https://github.com/openshift/cluster-version-operator/pull/678)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/1f15159db6928ce89ab7192a4c2f26d1dabc833c...f2551e5d22e4b5623a47f94555226ffa3d750e9d)


### [console](https://github.com/openshift/console/tree/8d748bdaad11f780126fac24b5a8d13a17f7f6f1)

* [Bug 2055100](https://bugzilla.redhat.com/show_bug.cgi?id=2055100): Revert "Add Dev Preview tag for IBM FlashSystem" [#11068](https://github.com/openshift/console/pull/11068)
* [Bug 2054608](https://bugzilla.redhat.com/show_bug.cgi?id=2054608): omit rolebindings with no subjects [#11055](https://github.com/openshift/console/pull/11055)
* [Bug 2056826](https://bugzilla.redhat.com/show_bug.cgi?id=2056826): Revert "Merge pull request #10316 from dtaylor113/e2e-tests-replace-codeready-operator" [#11087](https://github.com/openshift/console/pull/11087)
* [Bug 2052553](https://bugzilla.redhat.com/show_bug.cgi?id=2052553): Add 'Unavailable' status for cluster operator [#10125](https://github.com/openshift/console/pull/10125)
* [Bug 2050271](https://bugzilla.redhat.com/show_bug.cgi?id=2050271): show latest pipelinerun on the top of the list [#11019](https://github.com/openshift/console/pull/11019)
* [Bug 2033274](https://bugzilla.redhat.com/show_bug.cgi?id=2033274): Fix tektonhub task upgrading issue [#10678](https://github.com/openshift/console/pull/10678)
* [Bug 2051523](https://bugzilla.redhat.com/show_bug.cgi?id=2051523): change the Image Vulnerabilities tab to be project and not cluster scoped [#10159](https://github.com/openshift/console/pull/10159)
* [Bug 2053496](https://bugzilla.redhat.com/show_bug.cgi?id=2053496): Monitoring: use namespace to detect the activePerspective instead of useActivePerspective hook [#11042](https://github.com/openshift/console/pull/11042)
* [Bug 2052850](https://bugzilla.redhat.com/show_bug.cgi?id=2052850): Refreshing console from toaster taking to Install Operator [#11025](https://github.com/openshift/console/pull/11025)
* [Bug 2047350](https://bugzilla.redhat.com/show_bug.cgi?id=2047350): Fix TypeError when application has HelmRelease [#10990](https://github.com/openshift/console/pull/10990)
* [Bug 2026553](https://bugzilla.redhat.com/show_bug.cgi?id=2026553): Dispatch name filter value to redux [#10553](https://github.com/openshift/console/pull/10553)
* [Bug 2022158](https://bugzilla.redhat.com/show_bug.cgi?id=2022158): omit extension when code ref resolution fails [#10435](https://github.com/openshift/console/pull/10435)
* [Bug 2023339](https://bugzilla.redhat.com/show_bug.cgi?id=2023339): fix broken Argo CD link image [#10461](https://github.com/openshift/console/pull/10461)
* [Bug 2026414](https://bugzilla.redhat.com/show_bug.cgi?id=2026414): use prometheus tenancy URL to load data in devconsole observe dashboard [#10961](https://github.com/openshift/console/pull/10961)
* [Bug 2041434](https://bugzilla.redhat.com/show_bug.cgi?id=2041434): Monitoring: show a error message if wrong dashboard name is passed to the URL [#10857](https://github.com/openshift/console/pull/10857)
* [Bug 2047633](https://bugzilla.redhat.com/show_bug.cgi?id=2047633): Fix that export download model wasn't shown when primer export finished [#10965](https://github.com/openshift/console/pull/10965)
* [Bug 2040296](https://bugzilla.redhat.com/show_bug.cgi?id=2040296): Enable error stack trace messages to scroll [#10072](https://github.com/openshift/console/pull/10072)
* [Bug 2042041](https://bugzilla.redhat.com/show_bug.cgi?id=2042041): Console 2969: Changes to the project selector to allow system namespaces that are Favorited to be included in the Favorited list even when the option to Show default projects is unselected. [#10886](https://github.com/openshift/console/pull/10886)
* [Bug 2030128](https://bugzilla.redhat.com/show_bug.cgi?id=2030128): Fix pipeline builder edge spacing to avoid improper edge shapes [#10629](https://github.com/openshift/console/pull/10629)
* [Bug 2044292](https://bugzilla.redhat.com/show_bug.cgi?id=2044292): Filter superseded helm secrets and fix firehose to support partial metadata [#10915](https://github.com/openshift/console/pull/10915)
* [release 4.9] Bug 2042683: Check rbac before polling for rules silences [#10888](https://github.com/openshift/console/pull/10888)
* [Bug 2044287](https://bugzilla.redhat.com/show_bug.cgi?id=2044287): Add support for fetching partial metadata and fix helm list page crash [#10914](https://github.com/openshift/console/pull/10914)
* [Bug 2044259](https://bugzilla.redhat.com/show_bug.cgi?id=2044259): Topology performance: Do not fetch HPA for each Deployment (Pod Ring) [#10913](https://github.com/openshift/console/pull/10913)
* [Bug 2042456](https://bugzilla.redhat.com/show_bug.cgi?id=2042456): Check if name label exists before comparing [#10882](https://github.com/openshift/console/pull/10882)
* [Bug 2036340](https://bugzilla.redhat.com/show_bug.cgi?id=2036340): Fix secure route pre-filled issue in edit flow [#10759](https://github.com/openshift/console/pull/10759)
* [Bug 2027804](https://bugzilla.redhat.com/show_bug.cgi?id=2027804): use namespace instead of useActivePerspective hooks to get the variables in Observe dashboard [#10586](https://github.com/openshift/console/pull/10586)
* [Bug 2027269](https://bugzilla.redhat.com/show_bug.cgi?id=2027269): Add subject name selector field to SinkBinding form [#10568](https://github.com/openshift/console/pull/10568)
* [Bug 2027268](https://bugzilla.redhat.com/show_bug.cgi?id=2027268): Optimize name validation regex for forms [#10567](https://github.com/openshift/console/pull/10567)
* [Bug 2019884](https://bugzilla.redhat.com/show_bug.cgi?id=2019884): adds feature flag for all extension for knative plugin [#10393](https://github.com/openshift/console/pull/10393)
* [Bug 2038607](https://bugzilla.redhat.com/show_bug.cgi?id=2038607): Fix that user settings ConfigMap is also created for users with restricted access [#10799](https://github.com/openshift/console/pull/10799)
* [Bug 2036115](https://bugzilla.redhat.com/show_bug.cgi?id=2036115): add support for new labels for serverless function [#10755](https://github.com/openshift/console/pull/10755)
* [Bug 2013253](https://bugzilla.redhat.com/show_bug.cgi?id=2013253): Fix to let the user create the application even if dockerfile is not detected [#10216](https://github.com/openshift/console/pull/10216)
* [Bug 2036859](https://bugzilla.redhat.com/show_bug.cgi?id=2036859): Shift invalid devfile alert down [#10766](https://github.com/openshift/console/pull/10766)
* [Bug 2034183](https://bugzilla.redhat.com/show_bug.cgi?id=2034183): Open export details page from the resource link on the topology sidepanel [#10694](https://github.com/openshift/console/pull/10694)
* [Bug 2033265](https://bugzilla.redhat.com/show_bug.cgi?id=2033265): Fix an error to show Knative Services and Revisions also if the Service has no owner revision [#10677](https://github.com/openshift/console/pull/10677)
* [Bug 2029861](https://bugzilla.redhat.com/show_bug.cgi?id=2029861): backport the change from #10394 to release 4.9 [#10620](https://github.com/openshift/console/pull/10620)
* [Bug 2029370](https://bugzilla.redhat.com/show_bug.cgi?id=2029370): Trim the strings before localCompare [#10611](https://github.com/openshift/console/pull/10611)
* [Bug 2025799](https://bugzilla.redhat.com/show_bug.cgi?id=2025799): Remove Tech preview badge for the triggers component for triggers GA … [#10535](https://github.com/openshift/console/pull/10535)
* [Bug 2044089](https://bugzilla.redhat.com/show_bug.cgi?id=2044089): Update CRW operator name to fix failing e2e tests [#10910](https://github.com/openshift/console/pull/10910)
* [Bug 2040365](https://bugzilla.redhat.com/show_bug.cgi?id=2040365): Check if 'auths' key when switching between create image secret subforms [#10838](https://github.com/openshift/console/pull/10838)
* [Bug 2034636](https://bugzilla.redhat.com/show_bug.cgi?id=2034636): - RoleBindings tab doesn't show correct rolebindings [#10711](https://github.com/openshift/console/pull/10711)
* [Bug 2037619](https://bugzilla.redhat.com/show_bug.cgi?id=2037619): Could not filter out machine by using node name on machines page (temp fix) [#10807](https://github.com/openshift/console/pull/10807)
* [Bug 2040291](https://bugzilla.redhat.com/show_bug.cgi?id=2040291): Prevent null references and "ResizeObserver loop limit exceeded" errors in IFrameMarkdownView [#10116](https://github.com/openshift/console/pull/10116)
* [Bug 2034829](https://bugzilla.redhat.com/show_bug.cgi?id=2034829): cant delete VM with un-owned pvc attached [#10719](https://github.com/openshift/console/pull/10719)
* [Bug 2028286](https://bugzilla.redhat.com/show_bug.cgi?id=2028286): Fix blank page error for Installed Operators [#10596](https://github.com/openshift/console/pull/10596)
* [Bug 2029378](https://bugzilla.redhat.com/show_bug.cgi?id=2029378): Fix NodePort RDP bug [#10612](https://github.com/openshift/console/pull/10612)
* [Bug 2026243](https://bugzilla.redhat.com/show_bug.cgi?id=2026243): Fixes add capacity for MCG standalone [#10544](https://github.com/openshift/console/pull/10544)
* [Bug 2025937](https://bugzilla.redhat.com/show_bug.cgi?id=2025937): KMS resources not getting created for IBM FlashSystem storage [#10540](https://github.com/openshift/console/pull/10540)
* [Bug 2029297](https://bugzilla.redhat.com/show_bug.cgi?id=2029297): Fix troubleshoot link for MON_DISK_LOW [#10609](https://github.com/openshift/console/pull/10609)
* [Bug 2026618](https://bugzilla.redhat.com/show_bug.cgi?id=2026618): Add Dev Preview tag for IBM FlashSystem [#10555](https://github.com/openshift/console/pull/10555)
* [Bug 2026219](https://bugzilla.redhat.com/show_bug.cgi?id=2026219): Fix Noobaa resources broken details pages [#10543](https://github.com/openshift/console/pull/10543)
* [Bug 2028535](https://bugzilla.redhat.com/show_bug.cgi?id=2028535): Backing Store YAML tab on click displays a blank screen on UI [#10603](https://github.com/openshift/console/pull/10603)
* [Bug 2022446](https://bugzilla.redhat.com/show_bug.cgi?id=2022446): Fix issue with standalone dashboards (4.9 backport) [#10441](https://github.com/openshift/console/pull/10441)
* [Bug 2022303](https://bugzilla.redhat.com/show_bug.cgi?id=2022303): Fix creation of ibm storage system at backing storage step [#10438](https://github.com/openshift/console/pull/10438)
* [Bug 2022462](https://bugzilla.redhat.com/show_bug.cgi?id=2022462): Set large width for modals with modal-lg class [#10442](https://github.com/openshift/console/pull/10442)
* [Bug 2020000](https://bugzilla.redhat.com/show_bug.cgi?id=2020000): Fix resource metrics 403 errors for project admin users [#10396](https://github.com/openshift/console/pull/10396)
* [Bug 2021527](https://bugzilla.redhat.com/show_bug.cgi?id=2021527): Fix ClusterOperators link [#10417](https://github.com/openshift/console/pull/10417)
* [Bug 2023285](https://bugzilla.redhat.com/show_bug.cgi?id=2023285): #cloud-config is now added to yaml [#10459](https://github.com/openshift/console/pull/10459)
* [Bug 2016602](https://bugzilla.redhat.com/show_bug.cgi?id=2016602): ODF tab is missing if user clicks on 'Refresh web console' [#10295](https://github.com/openshift/console/pull/10295)
* [Bug 2017722](https://bugzilla.redhat.com/show_bug.cgi?id=2017722): Fix creation for BackingStore, BucketClass and NamespaceStore [#10340](https://github.com/openshift/console/pull/10340)
* [Bug 2016939](https://bugzilla.redhat.com/show_bug.cgi?id=2016939): Block MCG deploymeny when no storage class found [#10304](https://github.com/openshift/console/pull/10304)
* [Bug 2017717](https://bugzilla.redhat.com/show_bug.cgi?id=2017717): Use conditions for status in Storage System list page [#10339](https://github.com/openshift/console/pull/10339)
* [Bug 2018637](https://bugzilla.redhat.com/show_bug.cgi?id=2018637): Pass pod toolbar filters to `useListPageFilter` [#10366](https://github.com/openshift/console/pull/10366)
* [Bug 2019494](https://bugzilla.redhat.com/show_bug.cgi?id=2019494): Delete ssh service when vm is deleted [#10385](https://github.com/openshift/console/pull/10385)
* [Bug 2019736](https://bugzilla.redhat.com/show_bug.cgi?id=2019736): PVC is deleted along with VM even with "Delete Disks" unchecked [#10391](https://github.com/openshift/console/pull/10391)
* [Bug 2010677](https://bugzilla.redhat.com/show_bug.cgi?id=2010677): Update PatternFly/react-console [#10258](https://github.com/openshift/console/pull/10258)
* [Bug 2015134](https://bugzilla.redhat.com/show_bug.cgi?id=2015134): Reveal the switch status of the button "Show default project" in code [#10252](https://github.com/openshift/console/pull/10252)
* [Bug 2014303](https://bugzilla.redhat.com/show_bug.cgi?id=2014303): Fix wrong in-cluster hostname on the Service details page [#10246](https://github.com/openshift/console/pull/10246)
* [Bug 2013105](https://bugzilla.redhat.com/show_bug.cgi?id=2013105): fixes imagestream from reference for alias to existing IS [#10212](https://github.com/openshift/console/pull/10212)
* (4.9 Backport) Bug 2008142: Allow web terminal to be installed in any namespace [#10135](https://github.com/openshift/console/pull/10135)
* [Bug 2017484](https://bugzilla.redhat.com/show_bug.cgi?id=2017484): Check for resource in ServiceBinding spec's service reference [#10327](https://github.com/openshift/console/pull/10327)
* [Bug 2002905](https://bugzilla.redhat.com/show_bug.cgi?id=2002905): Fix list page route for build configs [#10043](https://github.com/openshift/console/pull/10043)
* [Bug 1989798](https://bugzilla.redhat.com/show_bug.cgi?id=1989798): Fix state bug to eliminate duplicates in dragged files [#10131](https://github.com/openshift/console/pull/10131)
* [Bug 2002006](https://bugzilla.redhat.com/show_bug.cgi?id=2002006): Allow side nav borders to extend to left and right edges of yaml sidebar [#10011](https://github.com/openshift/console/pull/10011)
* [Bug 2014145](https://bugzilla.redhat.com/show_bug.cgi?id=2014145): Failed to load RoleBindings list that will lead to ‘Role name’ is not able to be selected on Create RoleBinding page as well [#10241](https://github.com/openshift/console/pull/10241)
* [Bug 2011705](https://bugzilla.redhat.com/show_bug.cgi?id=2011705): fix dev-catalog stuck in loading state [#10198](https://github.com/openshift/console/pull/10198)
* [Bug 2004075](https://bugzilla.redhat.com/show_bug.cgi?id=2004075): Fix to show image-tag selector in s2i form and re-validate git url on git-type change [#10067](https://github.com/openshift/console/pull/10067)
* [Bug 2010160](https://bugzilla.redhat.com/show_bug.cgi?id=2010160): Clicking on the perspective switcher shows a white page with loader [#10169](https://github.com/openshift/console/pull/10169)
* [Bug 2002856](https://bugzilla.redhat.com/show_bug.cgi?id=2002856): Dont validate the install operator form when submitted [#10041](https://github.com/openshift/console/pull/10041)
* [Bug 2002600](https://bugzilla.redhat.com/show_bug.cgi?id=2002600): Enable add capacity if osd size is not matching [#10032](https://github.com/openshift/console/pull/10032)
* [Bug 2008456](https://bugzilla.redhat.com/show_bug.cgi?id=2008456): Fix to fetch ocs csv in external mode [#10144](https://github.com/openshift/console/pull/10144)
* [Bug 2003870](https://bugzilla.redhat.com/show_bug.cgi?id=2003870): Fix state of volume mode dropdown [#10062](https://github.com/openshift/console/pull/10062)
* [Bug 2004567](https://bugzilla.redhat.com/show_bug.cgi?id=2004567): Fix basic spring boot sample form crash [#10076](https://github.com/openshift/console/pull/10076)
* [Bug 2014095](https://bugzilla.redhat.com/show_bug.cgi?id=2014095): Monitoring: Fix error message when Silences fail to load [#10240](https://github.com/openshift/console/pull/10240)
* [Bug 2013132](https://bugzilla.redhat.com/show_bug.cgi?id=2013132): Overview tab is missing under Storage after successful deployment on UI [#10214](https://github.com/openshift/console/pull/10214)
* [Bug 2008499](https://bugzilla.redhat.com/show_bug.cgi?id=2008499): Add monitoring and nodes label for external storage platforms [#10146](https://github.com/openshift/console/pull/10146)
* [Bug 2015558](https://bugzilla.redhat.com/show_bug.cgi?id=2015558): Fix failing OLM test scenario [#10267](https://github.com/openshift/console/pull/10267)
* [Bug 2014048](https://bugzilla.redhat.com/show_bug.cgi?id=2014048): Console update toast notification can appear multiple times [#10239](https://github.com/openshift/console/pull/10239)
* [Bug 2002697](https://bugzilla.redhat.com/show_bug.cgi?id=2002697): Fix disks undefined on create local volume set step [#10037](https://github.com/openshift/console/pull/10037)
* [Bug 2012825](https://bugzilla.redhat.com/show_bug.cgi?id=2012825): update the BindableService CRD changes to align with BindableKinds [#10206](https://github.com/openshift/console/pull/10206)
* [Bug 2010308](https://bugzilla.redhat.com/show_bug.cgi?id=2010308): Fix create broker button in Add broker page [#10172](https://github.com/openshift/console/pull/10172)
* [Bug 2004241](https://bugzilla.redhat.com/show_bug.cgi?id=2004241): Storage class name not passed in CR [#10069](https://github.com/openshift/console/pull/10069)
* [Bug 2002696](https://bugzilla.redhat.com/show_bug.cgi?id=2002696): Fix links and texts for Storage link provided in Overview page. [#10050](https://github.com/openshift/console/pull/10050)
* [Bug 2013088](https://bugzilla.redhat.com/show_bug.cgi?id=2013088): node page fail [#10210](https://github.com/openshift/console/pull/10210)
* [Full changelog](https://github.com/openshift/console/compare/8c077e4181604af58f7bb9d6db54d6ea312deb39...8d748bdaad11f780126fac24b5a8d13a17f7f6f1)


### [console-operator](https://github.com/openshift/console-operator/tree/fdcb82f487fb8655edcaee77cef63c492e72e0b1)

* [Bug 2039681](https://bugzilla.redhat.com/show_bug.cgi?id=2039681): Fix setting of custom cert for default route [#624](https://github.com/openshift/console-operator/pull/624)
* [Bug 2040275](https://bugzilla.redhat.com/show_bug.cgi?id=2040275): Bump build-machinery-go for console-operator to pickup change in yaml-patch repository [#626](https://github.com/openshift/console-operator/pull/626)
* [Bug 2008142](https://bugzilla.redhat.com/show_bug.cgi?id=2008142): Change web terminal subscription permissions from get to list [#596](https://github.com/openshift/console-operator/pull/596)
* [Bug 2016028](https://bugzilla.redhat.com/show_bug.cgi?id=2016028): Correction/Changes in Quick Start Guides for ODF [#609](https://github.com/openshift/console-operator/pull/609)
* [Bug 2010681](https://bugzilla.redhat.com/show_bug.cgi?id=2010681): Resync all controllers periodically [#600](https://github.com/openshift/console-operator/pull/600)
* [Bug 2002878](https://bugzilla.redhat.com/show_bug.cgi?id=2002878): Remove SimpleHTTP 'server' response header value [#587](https://github.com/openshift/console-operator/pull/587)
* [Full changelog](https://github.com/openshift/console-operator/compare/b8058325fabe6c1dea79e5465f6e68c45309fed9...fdcb82f487fb8655edcaee77cef63c492e72e0b1)


### [docker-builder](https://github.com/openshift/builder/tree/7e2e890d8b8bba58982171ff063d96e304a30fc5)

* [Bug 2042444](https://bugzilla.redhat.com/show_bug.cgi?id=2042444): getAssembleUser(): strip the group part out before checking the UID [#280](https://github.com/openshift/builder/pull/280)
* [Bug 2037776](https://bugzilla.redhat.com/show_bug.cgi?id=2037776): Update containers/storage to address incorrect overlay options being set on rhel7 nodes [#279](https://github.com/openshift/builder/pull/279)
* [Bug 2022866](https://bugzilla.redhat.com/show_bug.cgi?id=2022866): bump github.com/containers/buildah to v1.22.3 [#272](https://github.com/openshift/builder/pull/272)
* [Full changelog](https://github.com/openshift/builder/compare/50d5b91b77c33d9f62f06cf44d4ea6a41a65f3a5...7e2e890d8b8bba58982171ff063d96e304a30fc5)


### [docker-registry](https://github.com/openshift/image-registry/tree/ab2eaa5beccda244dd7b36701b04f6cea889159d)

* [Bug 2053222](https://bugzilla.redhat.com/show_bug.cgi?id=2053222): Fix pull-through for images that have dots in their namespace [#309](https://github.com/openshift/image-registry/pull/309)
* [Bug 2042677](https://bugzilla.redhat.com/show_bug.cgi?id=2042677): Fix auth for docker.io images [#305](https://github.com/openshift/image-registry/pull/305)
* [Bug 2029987](https://bugzilla.redhat.com/show_bug.cgi?id=2029987): Try another registry if blob is not found [#303](https://github.com/openshift/image-registry/pull/303)
* [Full changelog](https://github.com/openshift/image-registry/compare/50d54ae38c2618501ec2c5e0897731d1a916db10...ab2eaa5beccda244dd7b36701b04f6cea889159d)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/51a2f1efedf655d2454efba18c68262532792b14)

* [Bug 2031854](https://bugzilla.redhat.com/show_bug.cgi?id=2031854): Add e2e test to 4.9 branch [#71](https://github.com/openshift/driver-toolkit/pull/71)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/25c351345f6e06130dfd97d79fc417f9bbc7ebbe...51a2f1efedf655d2454efba18c68262532792b14)


### [etcd](https://github.com/openshift/etcd/tree/f99cada055fe83dc3cefb546dea95547d7da727d)

* [Bug 2016174](https://bugzilla.redhat.com/show_bug.cgi?id=2016174): UPSTREAM: <carry>: server: Fix for v3.5 Ensure that cluster members stored in v2store and backend are in sync [#99](https://github.com/openshift/etcd/pull/99)
* [Full changelog](https://github.com/openshift/etcd/compare/5c1feaf09d5f9cf036b931f0349d4e892883898e...f99cada055fe83dc3cefb546dea95547d7da727d)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/d8a891de5ae9cf552d7d012ebe61c2abd395386e)

* [Bug 2038191](https://bugzilla.redhat.com/show_bug.cgi?id=2038191): Add custom CA bundle support [#42](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/42)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/b1a29eace7c208d7c4a839fd2b23d749cff94a42...d8a891de5ae9cf552d7d012ebe61c2abd395386e)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/b93fd35dd030519c24dd02f8bc2a7f873d2928cd)

* [Bug 2043807](https://bugzilla.redhat.com/show_bug.cgi?id=2043807): UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API [#1134](https://github.com/openshift/kubernetes/pull/1134)
* [Bug 2043807](https://bugzilla.redhat.com/show_bug.cgi?id=2043807): add deprecated parser build flag [#1166](https://github.com/openshift/kubernetes/pull/1166)
* [Bug 2045972](https://bugzilla.redhat.com/show_bug.cgi?id=2045972): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1144](https://github.com/openshift/kubernetes/pull/1144)
* [Bug 2039373](https://bugzilla.redhat.com/show_bug.cgi?id=2039373): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1107](https://github.com/openshift/kubernetes/pull/1107)
* [Bug 2044438](https://bugzilla.redhat.com/show_bug.cgi?id=2044438): UPSTREAM: 107637: backport inotify fix to 4.9 [#1138](https://github.com/openshift/kubernetes/pull/1138)
* [Bug 2040338](https://bugzilla.redhat.com/show_bug.cgi?id=2040338): UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources [#1125](https://github.com/openshift/kubernetes/pull/1125)
* [Bug 2030697](https://bugzilla.redhat.com/show_bug.cgi?id=2030697): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1088](https://github.com/openshift/kubernetes/pull/1088)
* [Bug 2023452](https://bugzilla.redhat.com/show_bug.cgi?id=2023452): UPSTREAM: 106382: defer close the rotated log open [#1057](https://github.com/openshift/kubernetes/pull/1057)
* [Bug 2024967](https://bugzilla.redhat.com/show_bug.cgi?id=2024967): Fix subpath unmount error [#1066](https://github.com/openshift/kubernetes/pull/1066)
* [Bug 2021995](https://bugzilla.redhat.com/show_bug.cgi?id=2021995): Read k8s version from hyperkube Dockerfile [#1044](https://github.com/openshift/kubernetes/pull/1044)
* [Bug 2022740](https://bugzilla.redhat.com/show_bug.cgi?id=2022740): UPSTREAM: 106259: Don't guess SELinux support on error [#1053](https://github.com/openshift/kubernetes/pull/1053)
* [Bug 2022281](https://bugzilla.redhat.com/show_bug.cgi?id=2022281): Rebase v1.22.3 [#1048](https://github.com/openshift/kubernetes/pull/1048)
* [Bug 2023866](https://bugzilla.redhat.com/show_bug.cgi?id=2023866): Fix patch 104847 [#1061](https://github.com/openshift/kubernetes/pull/1061)
* [Bug 2018442](https://bugzilla.redhat.com/show_bug.cgi?id=2018442): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1033](https://github.com/openshift/kubernetes/pull/1033)
* [Bug 2008827](https://bugzilla.redhat.com/show_bug.cgi?id=2008827): Rebase v1.22.2 [#985](https://github.com/openshift/kubernetes/pull/985)
* [Bug 2018516](https://bugzilla.redhat.com/show_bug.cgi?id=2018516): 4.9: bump(github.com/openshift/*): make go.{mod,sum} point to 1.22.1 [#1030](https://github.com/openshift/kubernetes/pull/1030)
* [Bug 2006717](https://bugzilla.redhat.com/show_bug.cgi?id=2006717): etcd-client starts retrying transient errors from the etcd cluster [#974](https://github.com/openshift/kubernetes/pull/974)
* [Bug 2010225](https://bugzilla.redhat.com/show_bug.cgi?id=2010225): UPSTREAM: 104865: e2e iperf2 change threshold to 10MBps = 80 Mbps [#986](https://github.com/openshift/kubernetes/pull/986)
* [Full changelog](https://github.com/openshift/kubernetes/compare/894a78b5538c3e96d7bdfabfa8b41430cbd6811e...b93fd35dd030519c24dd02f8bc2a7f873d2928cd)


### [insights-operator](https://github.com/openshift/insights-operator/tree/3f1401abeef427842a435eb1776cb97efa81dc34)

* [Bug 2033540](https://bugzilla.redhat.com/show_bug.cgi?id=2033540): Gather all CostManagementMericsConfig definitions. (#525) (#568) [#525](https://github.com/openshift/insights-operator/pull/525)
* [Bug 2027637](https://bugzilla.redhat.com/show_bug.cgi?id=2027637): gather webhook configurations (#508) (#559) [#508](https://github.com/openshift/insights-operator/pull/508)
* [Bug 2026644](https://bugzilla.redhat.com/show_bug.cgi?id=2026644): Gather all the container logs from relate namespaces of degraded clusteroperator (#553) [#553](https://github.com/openshift/insights-operator/pull/553)
* [Bug 2017773](https://bugzilla.redhat.com/show_bug.cgi?id=2017773): Anonymize identity provider attributes in the (#520) (#527) [#520](https://github.com/openshift/insights-operator/pull/520)
* [Bug 2017759](https://bugzilla.redhat.com/show_bug.cgi?id=2017759): Anonymize the ImageRegistry storage information also in (#507) (#526) [#507](https://github.com/openshift/insights-operator/pull/507)
* [Bug 2005338](https://bugzilla.redhat.com/show_bug.cgi?id=2005338): OCM controller - change type of the secret (#500) (#506) [#500](https://github.com/openshift/insights-operator/pull/500)
* [Bug 2001823](https://bugzilla.redhat.com/show_bug.cgi?id=2001823): Fix the error logic in the OCM controller & degrade only in HTTP error (#494) (#503) [#494](https://github.com/openshift/insights-operator/pull/494)
* [Bug 2003893](https://bugzilla.redhat.com/show_bug.cgi?id=2003893): ApiRequestCount conditional gathering (#492) (#496) [#492](https://github.com/openshift/insights-operator/pull/492)
* obfuscation ovn clusters bug (#522) [#522](https://github.com/openshift/insights-operator/pull/522)
* [Full changelog](https://github.com/openshift/insights-operator/compare/51e4523defb54635bc2334e8ee682a41aee9e7a0...3f1401abeef427842a435eb1776cb97efa81dc34)


### [ironic](https://github.com/openshift/ironic-image/tree/e188116f03e222fd24d941983430f6225fa252d2)

* [Bug 2023748](https://bugzilla.redhat.com/show_bug.cgi?id=2023748): Compare IPs using the short form of IPv6 address [#232](https://github.com/openshift/ironic-image/pull/232)
* [Bug 2025754](https://bugzilla.redhat.com/show_bug.cgi?id=2025754): Enable vMedia provisioning of SuperMicro X11/X12 [#238](https://github.com/openshift/ironic-image/pull/238)
* [Bug 2017412](https://bugzilla.redhat.com/show_bug.cgi?id=2017412): [4.9] fix Image provisioning fails with file name too long [#228](https://github.com/openshift/ironic-image/pull/228)
* [Bug 2012798](https://bugzilla.redhat.com/show_bug.cgi?id=2012798): Ironic resumes clean before raid configuration job is actually completed [#221](https://github.com/openshift/ironic-image/pull/221)
* [Full changelog](https://github.com/openshift/ironic-image/compare/ab287f6e040efecff3c02fd34f77064b402458a7...e188116f03e222fd24d941983430f6225fa252d2)


### [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image/tree/8e2d1db6f2c66128c3b5682e60cdaaee786d992f)

* Updating ironic-hardware-inventory-recorder-image images to be consistent with ART [#506](https://github.com/openshift/ironic-hardware-inventory-recorder-image/pull/506)
* [Full changelog](https://github.com/openshift/ironic-hardware-inventory-recorder-image/compare/1d3d07b5726012d748217d4ab5661b2c028a14cc...8e2d1db6f2c66128c3b5682e60cdaaee786d992f)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/90b57223200ffcf5ad31b41700815779fc81afac)

* [Bug 2020546](https://bugzilla.redhat.com/show_bug.cgi?id=2020546): Clear proxy env variables if go would have [#68](https://github.com/openshift/ironic-rhcos-downloader/pull/68)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/a367c213dd385b35ebaada46d788616706f3db56...90b57223200ffcf5ad31b41700815779fc81afac)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/af84740506fd4da40978e931a634b8871ad125c4)

* [Bug 2052063](https://bugzilla.redhat.com/show_bug.cgi?id=2052063): bump openshift-sync to 1.0.53 [#1385](https://github.com/openshift/jenkins/pull/1385)
* [Bug 2044941](https://bugzilla.redhat.com/show_bug.cgi?id=2044941): Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 [#1369](https://github.com/openshift/jenkins/pull/1369)
* [Bug 2038961](https://bugzilla.redhat.com/show_bug.cgi?id=2038961): bump sync plugin to 1.0.52 [#1363](https://github.com/openshift/jenkins/pull/1363)
* [Bug 2037346](https://bugzilla.redhat.com/show_bug.cgi?id=2037346): Update openshift-sync-plugin to 1.0.51 and various dependant plugins [#1359](https://github.com/openshift/jenkins/pull/1359)
* [Bug 2020615](https://bugzilla.redhat.com/show_bug.cgi?id=2020615): Update Jenkins and plugins per 2021-11 advisory [#1346](https://github.com/openshift/jenkins/pull/1346)
* [Full changelog](https://github.com/openshift/jenkins/compare/aa28a4bee155430bf547e721c97f91872570edeb...af84740506fd4da40978e931a634b8871ad125c4)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/ecd60f937c2ad1526888917378023fc06818b012)

* [Bug 2026302](https://bugzilla.redhat.com/show_bug.cgi?id=2026302): [EgressIP] move `ct(commit)` action from OVS group to flow [#375](https://github.com/openshift/sdn/pull/375)
* [Bug 2006290](https://bugzilla.redhat.com/show_bug.cgi?id=2006290): Fix up event recorder usage (again) [#357](https://github.com/openshift/sdn/pull/357)
* [Bug 2013707](https://bugzilla.redhat.com/show_bug.cgi?id=2013707): Remove locking from EgressIPTracker.Ping [#360](https://github.com/openshift/sdn/pull/360)
* [Full changelog](https://github.com/openshift/sdn/compare/9647cb01e4aeb5b82d4d8ec124ade067883e5be7...ecd60f937c2ad1526888917378023fc06818b012)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/1e8c94f80e26b69968a3d8ea918a387451e9db2b)

* [Bug 2022684](https://bugzilla.redhat.com/show_bug.cgi?id=2022684): Improve retrieval of Trunks info [#599](https://github.com/openshift/kuryr-kubernetes/pull/599)
* [Bug 2023383](https://bugzilla.redhat.com/show_bug.cgi?id=2023383): Do not start kuryr-daemon when worker_num <= 1 [#602](https://github.com/openshift/kuryr-kubernetes/pull/602)
* [Bug 2018129](https://bugzilla.redhat.com/show_bug.cgi?id=2018129): Ensure KLB is updated [#585](https://github.com/openshift/kuryr-kubernetes/pull/585)
* [Bug 2023731](https://bugzilla.redhat.com/show_bug.cgi?id=2023731): Ensure DOWN subports are cleaned up [#604](https://github.com/openshift/kuryr-kubernetes/pull/604)
* [Bug 2018148](https://bugzilla.redhat.com/show_bug.cgi?id=2018148): Update TOX_CONSTRAINTS_FILE for stable/xena [#586](https://github.com/openshift/kuryr-kubernetes/pull/586)
* [Bug 2013017](https://bugzilla.redhat.com/show_bug.cgi?id=2013017): Include port fix [#578](https://github.com/openshift/kuryr-kubernetes/pull/578)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/e66f2119bbbe0c7a57cc95491a7433489dad1dcb...1e8c94f80e26b69968a3d8ea918a387451e9db2b)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/383c9b959b69044ec533118cf5d41f17101137f1)

* [Bug 2025697](https://bugzilla.redhat.com/show_bug.cgi?id=2025697): [release-4.9]: Bump CAPZ API [#965](https://github.com/openshift/machine-api-operator/pull/965)
* [Bug 2022813](https://bugzilla.redhat.com/show_bug.cgi?id=2022813): GCP credentials reporting networksecurity.googleapis.com API disabled [#952](https://github.com/openshift/machine-api-operator/pull/952)
* [Bug 2005242](https://bugzilla.redhat.com/show_bug.cgi?id=2005242): MaxUnhealthy should not be a string type [#919](https://github.com/openshift/machine-api-operator/pull/919)
* [Bug 2004953](https://bugzilla.redhat.com/show_bug.cgi?id=2004953): Fix user-agent in vCenter sessions list [#918](https://github.com/openshift/machine-api-operator/pull/918)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/38efcc611bdf4bb66e54dc9942b388aa03a150d0...383c9b959b69044ec533118cf5d41f17101137f1)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b64dc344aa5a202080189abe7b1ec92bac286c06)

* [Bug 2050911](https://bugzilla.redhat.com/show_bug.cgi?id=2050911): tighten operator availability conditions [#2946](https://github.com/openshift/machine-config-operator/pull/2946)
* [Bug 2032985](https://bugzilla.redhat.com/show_bug.cgi?id=2032985): fixes 1 to 1 containerruntime config mapping [#2876](https://github.com/openshift/machine-config-operator/pull/2876)
* [Bug 2043650](https://bugzilla.redhat.com/show_bug.cgi?id=2043650): Avoid dynamically allocated port range for haproxy [#2923](https://github.com/openshift/machine-config-operator/pull/2923)
* [Bug 2044503](https://bugzilla.redhat.com/show_bug.cgi?id=2044503): ovs-configuration: use lower than NM default ethernet route metric [#2928](https://github.com/openshift/machine-config-operator/pull/2928)
* [Bug 2027926](https://bugzilla.redhat.com/show_bug.cgi?id=2027926): storage.conf: remove obsolete option override_kernel_check [#2848](https://github.com/openshift/machine-config-operator/pull/2848)
* [Bug 2026275](https://bugzilla.redhat.com/show_bug.cgi?id=2026275): daemon: make cordon/uncordon more robust [#2839](https://github.com/openshift/machine-config-operator/pull/2839)
* [Bug 2022641](https://bugzilla.redhat.com/show_bug.cgi?id=2022641): [release-4.9] Send WARN message to stderr [#2785](https://github.com/openshift/machine-config-operator/pull/2785)
* [Bug 2008210](https://bugzilla.redhat.com/show_bug.cgi?id=2008210): configure-ovs: Persist addr-gen-mode for ipv6 connections [#2775](https://github.com/openshift/machine-config-operator/pull/2775)
* [Bug 2013164](https://bugzilla.redhat.com/show_bug.cgi?id=2013164): [IPI ON-PREM] move Keepalived default ingress script to separate file [#2798](https://github.com/openshift/machine-config-operator/pull/2798)
* [Bug 2009210](https://bugzilla.redhat.com/show_bug.cgi?id=2009210): [on-prem] Set coredns bufsize to 512 [#2784](https://github.com/openshift/machine-config-operator/pull/2784)
* [Bug 2011307](https://bugzilla.redhat.com/show_bug.cgi?id=2011307): Periodically send gratuitous ARPs [#2794](https://github.com/openshift/machine-config-operator/pull/2794)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d2d236b1952843821602ec36cd5817e72fd0a407...b64dc344aa5a202080189abe7b1ec92bac286c06)


### [multus-cni](https://github.com/openshift/multus-cni/tree/c2499377b6fb43320618025876eb5b9751006222)

* [Bug 2017881](https://bugzilla.redhat.com/show_bug.cgi?id=2017881): add handling of pod UIDs passed from runtime [#111](https://github.com/openshift/multus-cni/pull/111)
* [Full changelog](https://github.com/openshift/multus-cni/compare/5e081d5de3ba3bbb48d0904eabce050f636140e4...c2499377b6fb43320618025876eb5b9751006222)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/43552df5f301618a1857c9a1c2b51cbb7188ad38)

* [Bug 2028964](https://bugzilla.redhat.com/show_bug.cgi?id=2028964): Whereabouts should reconcile IP addresses [backport 4.9] [#77](https://github.com/openshift/whereabouts-cni/pull/77)
* Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#71](https://github.com/openshift/whereabouts-cni/pull/71)
* [Bug 2009493](https://bugzilla.redhat.com/show_bug.cgi?id=2009493): Release on cancel 4.9 [#69](https://github.com/openshift/whereabouts-cni/pull/69)
* Updating ose-multus-whereabouts-ipam-cni-alt images to be consistent with ART [#64](https://github.com/openshift/whereabouts-cni/pull/64)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/d291d96116456c61103fb3d8bef9601e8106b25c...43552df5f301618a1857c9a1c2b51cbb7188ad38)


### [must-gather](https://github.com/openshift/must-gather/tree/b181f1fee8d5e4e73eb99b211321a52daf4d9702)

* [Bug 2052929](https://bugzilla.redhat.com/show_bug.cgi?id=2052929): Fix ovn-nbctl commands for ipv6 [#284](https://github.com/openshift/must-gather/pull/284)
* [Full changelog](https://github.com/openshift/must-gather/compare/d4b3f385ec4ee197057e18fb43fbb9a3e2b0e7f8...b181f1fee8d5e4e73eb99b211321a52daf4d9702)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/8b203f97716abbc416e4d5ca610d2f54d73cbfda)

* [Bug 2043807](https://bugzilla.redhat.com/show_bug.cgi?id=2043807): add deprecated parser build flag [#72](https://github.com/openshift/oauth-apiserver/pull/72)
* Updating ose-oauth-apiserver images to be consistent with ART [#56](https://github.com/openshift/oauth-apiserver/pull/56)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/6e0f92194d5a25728c826fefb2d99c5e88ebb5e5...8b203f97716abbc416e4d5ca610d2f54d73cbfda)


### [oauth-server](https://github.com/openshift/oauth-server/tree/1ee9925b84316939493a788a75ab16ddf1e301e0)

* [Bug 2037274](https://bugzilla.redhat.com/show_bug.cgi?id=2037274): pkg/*: introduce x509_missing_san_total metric [#95](https://github.com/openshift/oauth-server/pull/95)
* Updating oauth-server images to be consistent with ART [#85](https://github.com/openshift/oauth-server/pull/85)
* [Full changelog](https://github.com/openshift/oauth-server/compare/a51e18174ac32f0e44dfa8946e812d25ff38a101...1ee9925b84316939493a788a75ab16ddf1e301e0)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/fe6dc774e02036d39f3028d08e7bd95739f16f4f)

* [Bug 2053222](https://bugzilla.redhat.com/show_bug.cgi?id=2053222): Fix importing images that have dots in their namespace [#282](https://github.com/openshift/openshift-apiserver/pull/282)
* [Bug 2043807](https://bugzilla.redhat.com/show_bug.cgi?id=2043807): add deprecated parser build flag [#277](https://github.com/openshift/openshift-apiserver/pull/277)
* [Bug 2040240](https://bugzilla.redhat.com/show_bug.cgi?id=2040240): Make OriginImageMutators aware of origin objects [#269](https://github.com/openshift/openshift-apiserver/pull/269)
* [Bug 2018442](https://bugzilla.redhat.com/show_bug.cgi?id=2018442): Image policy should mutate DeploymentConfigs [#255](https://github.com/openshift/openshift-apiserver/pull/255)
* [Bug 2006791](https://bugzilla.redhat.com/show_bug.cgi?id=2006791): prevent high frequency logging for aborting build generation from image change trigger based build requests using the deprecated build config spec last image change trigger ID field [#247](https://github.com/openshift/openshift-apiserver/pull/247)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/272f9950c3609d189b69588e13a028911d0cd0c8...fe6dc774e02036d39f3028d08e7bd95739f16f4f)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/79857a326b7f77c589c6fd1d428a72c0f8faeffc)

* [Bug 2006791](https://bugzilla.redhat.com/show_bug.cgi?id=2006791): BC ICT still must check spec last triggered image ID in case BC was last processed when cluster was pre 4.8 [#203](https://github.com/openshift/openshift-controller-manager/pull/203)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/eda2db6d29e44b3833c6436631b3bc378b93eb92...79857a326b7f77c589c6fd1d428a72c0f8faeffc)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/56efc78519686ebd218c085ea51b39e4f1266a22)

* [Bug 2037080](https://bugzilla.redhat.com/show_bug.cgi?id=2037080): relax health probes against Cinder API [#64](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/64)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/6f3466826a02e6a35aa33ff906f01497505f512d...56efc78519686ebd218c085ea51b39e4f1266a22)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/3cd421db3994df59900656f8d0a3071743484456)

* [Bug 2000379](https://bugzilla.redhat.com/show_bug.cgi?id=2000379): fix: ensure operator images are included in rendered bundles related images [#180](https://github.com/openshift/operator-framework-olm/pull/180)
* [Bug 2024048](https://bugzilla.redhat.com/show_bug.cgi?id=2024048): Remove outdated subscription update logic to improve resolution delay [#215](https://github.com/openshift/operator-framework-olm/pull/215)
* [Bug 2017434](https://bugzilla.redhat.com/show_bug.cgi?id=2017434): Use arguments to configure pprof-secret [#212](https://github.com/openshift/operator-framework-olm/pull/212)
* [Bug 2015799](https://bugzilla.redhat.com/show_bug.cgi?id=2015799): Introduce GRPC_PROXY EnvVar Support (#2364) [#207](https://github.com/openshift/operator-framework-olm/pull/207)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/32eb2591437e394bdc58a58371c5cd1e6fe5e63f...3cd421db3994df59900656f8d0a3071743484456)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/859472720018b297885fdd4d8f61ae3fcb1c42aa)

* [Bug 2023550](https://bugzilla.redhat.com/show_bug.cgi?id=2023550): Revert "Start without defaults on ARM" [#431](https://github.com/operator-framework/operator-marketplace/pull/431)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/cfc16ec90b08c2ac3ab7d9c1b41917ac9572709f...859472720018b297885fdd4d8f61ae3fcb1c42aa)


### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/fe2a7fdff88fda45076e73891f4b0c1a4395a54b)

* [Bug 2014845](https://bugzilla.redhat.com/show_bug.cgi?id=2014845): Fix storage domain search string [#91](https://github.com/openshift/ovirt-csi-driver/pull/91)
* Updating ose-ovirt-csi-driver images to be consistent with ART [#79](https://github.com/openshift/ovirt-csi-driver/pull/79)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/22a3b888fb2a13e45ca24a6c86a3c2ee644c40af...fe2a7fdff88fda45076e73891f4b0c1a4395a54b)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/9302429d26b03225c302a22a9a8d218a05a89bc9)

* [Bug 2017245](https://bugzilla.redhat.com/show_bug.cgi?id=2017245): Rearrange static files to prevent creation errors [#74](https://github.com/openshift/ovirt-csi-driver-operator/pull/74)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/7fe7f8e1bd4846c837b14fb79ab4840daf0f48ed...9302429d26b03225c302a22a9a8d218a05a89bc9)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/15a6add2ff5b1858f5d1bc3944a352dcf0ee010f)

* [Bug 2028509](https://bugzilla.redhat.com/show_bug.cgi?id=2028509): detach non-bootable disks before removing the VM [#124](https://github.com/openshift/cluster-api-provider-ovirt/pull/124)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/2262c7c6cece3a7989c9c586ad0fbf68885739f7...15a6add2ff5b1858f5d1bc3944a352dcf0ee010f)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/daa079863a9faaf4f5d792db53336ed6581f84fd)

* [Bug 2040594](https://bugzilla.redhat.com/show_bug.cgi?id=2040594): Create iptables NAT rules also for loadbalancer services [#905](https://github.com/openshift/ovn-kubernetes/pull/905)
* [Bug 2014003](https://bugzilla.redhat.com/show_bug.cgi?id=2014003): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#952](https://github.com/openshift/ovn-kubernetes/pull/952)
* [Bug 2054139](https://bugzilla.redhat.com/show_bug.cgi?id=2054139): Don't return err when annotation cannot be unmarshalled [#954](https://github.com/openshift/ovn-kubernetes/pull/954)
* [Bug 1996751](https://bugzilla.redhat.com/show_bug.cgi?id=1996751): Bump OVN to 21.12 [#959](https://github.com/openshift/ovn-kubernetes/pull/959)
* [Bug 2028812](https://bugzilla.redhat.com/show_bug.cgi?id=2028812): Modification of ClusterIPs shall trigger svc update [#872](https://github.com/openshift/ovn-kubernetes/pull/872)
* [Bug 2042494](https://bugzilla.redhat.com/show_bug.cgi?id=2042494): [4.9] Set the OVS port as transient [#914](https://github.com/openshift/ovn-kubernetes/pull/914)
* [Bug 2022049](https://bugzilla.redhat.com/show_bug.cgi?id=2022049): EgressGW: only return unique elements from getRouteInfosForGateway() [#826](https://github.com/openshift/ovn-kubernetes/pull/826)
* [Bug 2034669](https://bugzilla.redhat.com/show_bug.cgi?id=2034669): Fix node connectivity to service backed by egress IP pods [#886](https://github.com/openshift/ovn-kubernetes/pull/886)
* [Bug 2036977](https://bugzilla.redhat.com/show_bug.cgi?id=2036977): Fixes for shared to local gateway migration [#892](https://github.com/openshift/ovn-kubernetes/pull/892)
* [Bug 2034668](https://bugzilla.redhat.com/show_bug.cgi?id=2034668): Fix pod handlers and pod IP parsing for egress IP [#884](https://github.com/openshift/ovn-kubernetes/pull/884)
* [Bug 2035336](https://bugzilla.redhat.com/show_bug.cgi?id=2035336): [4.9-backport] Fix Netpol retry mechanisms [#893](https://github.com/openshift/ovn-kubernetes/pull/893)
* [Bug 2033672](https://bugzilla.redhat.com/show_bug.cgi?id=2033672): Multiple exgw - Use --may-exist on hybrid policy and correct hybrid policy cleanup [#877](https://github.com/openshift/ovn-kubernetes/pull/877)
* [Bug 2027864](https://bugzilla.redhat.com/show_bug.cgi?id=2027864): [4.9z] Fixes race between node handler and pod sync [#857](https://github.com/openshift/ovn-kubernetes/pull/857)
* [Bug 2027983](https://bugzilla.redhat.com/show_bug.cgi?id=2027983): [4.9.z] Make config parsing more resilient for unknown fields [#860](https://github.com/openshift/ovn-kubernetes/pull/860)
* [Bug 2027485](https://bugzilla.redhat.com/show_bug.cgi?id=2027485): [4.9z] addressManager should not call sync() from ErrorCallback [#852](https://github.com/openshift/ovn-kubernetes/pull/852)
* [Bug 2022042](https://bugzilla.redhat.com/show_bug.cgi?id=2022042): [4.9z] Avoid stale annotations by re-subscribing to netlink [#828](https://github.com/openshift/ovn-kubernetes/pull/828)
* [Bug 2018398](https://bugzilla.redhat.com/show_bug.cgi?id=2018398): [4.9z] findLegacyLBs to also include idling LBs [#837](https://github.com/openshift/ovn-kubernetes/pull/837)
* [Bug 2016945](https://bugzilla.redhat.com/show_bug.cgi?id=2016945): Update iface-id-ver for existing ports [#805](https://github.com/openshift/ovn-kubernetes/pull/805)
* [Bug 1997072](https://bugzilla.redhat.com/show_bug.cgi?id=1997072): [4.9] phase 2 scale improvements [#778](https://github.com/openshift/ovn-kubernetes/pull/778)
* [Bug 2009515](https://bugzilla.redhat.com/show_bug.cgi?id=2009515): [4.9] ovs: bump to 2.16.0-15.el8fdp [#776](https://github.com/openshift/ovn-kubernetes/pull/776)
* [Bug 2009857](https://bugzilla.redhat.com/show_bug.cgi?id=2009857): filter out KubeAPIAuth when logging CNI requests [#777](https://github.com/openshift/ovn-kubernetes/pull/777)
* [Bug 2012025](https://bugzilla.redhat.com/show_bug.cgi?id=2012025): bump OVN to ovn21.09-21.09.0-20.el8fdp [#788](https://github.com/openshift/ovn-kubernetes/pull/788)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/100ec238a99bfb76e497a509085d2ac89c98a177...daa079863a9faaf4f5d792db53336ed6581f84fd)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/9f870bfaceeffb88a662b2e2e384e34dd9721853)

* Updating prom-label-proxy images to be consistent with ART [#337](https://github.com/openshift/prom-label-proxy/pull/337)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/4d11d13201d83bef23dbb7ef5f3eaf4346df01a5...9f870bfaceeffb88a662b2e2e384e34dd9721853)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/086933562820c31dd37399589c136364ec842950)

* BUG 2041459: alertmanager: only load cfg when writing cfg [#148](https://github.com/openshift/prometheus-operator/pull/148)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/ce7d979635b9d1210db48d54485bc924aed37cdb...086933562820c31dd37399589c136364ec842950)


### [tests](https://github.com/openshift/origin/tree/932d5024f9f9c2fb32ad8ac417df03286cb23ce7)

* [Bug 2041358](https://bugzilla.redhat.com/show_bug.cgi?id=2041358): images: port image signature workflow test to OCP4/UBI8 [#26751](https://github.com/openshift/origin/pull/26751)
* [Bug 2008181](https://bugzilla.redhat.com/show_bug.cgi?id=2008181): [release-4.9]: sync with openshift/kubernetes@release-4.9 [#26697](https://github.com/openshift/origin/pull/26697)
* [Bug 2026802](https://bugzilla.redhat.com/show_bug.cgi?id=2026802): copy api-request upperbound for cluster-monitoring-operator [#26736](https://github.com/openshift/origin/pull/26736)
* [Bug 2033341](https://bugzilla.redhat.com/show_bug.cgi?id=2033341): tests: skip some tests for proxy [#26705](https://github.com/openshift/origin/pull/26705)
* [Bug 2033341](https://bugzilla.redhat.com/show_bug.cgi?id=2033341): [release-4.9] test: skip tests that won't work behind a proxy automatically [#26664](https://github.com/openshift/origin/pull/26664)
* [Bug 2027796](https://bugzilla.redhat.com/show_bug.cgi?id=2027796): [release-4.9] Specify default namespace when getting API endpoint #26644 [#26644](https://github.com/openshift/origin/pull/26644)
* [Bug 2027929](https://bugzilla.redhat.com/show_bug.cgi?id=2027929): test/e2e/upgrade/adminack: Poll gates for duration of update [#26656](https://github.com/openshift/origin/pull/26656)
* [Bug 2024433](https://bugzilla.redhat.com/show_bug.cgi?id=2024433): CustomNoUpgrade should not fire no-upgrade failures [#26615](https://github.com/openshift/origin/pull/26615)
* [Bug 2024773](https://bugzilla.redhat.com/show_bug.cgi?id=2024773): Skipping Django Test until bug is fixed [#26622](https://github.com/openshift/origin/pull/26622)
* [Bug 2022866](https://bugzilla.redhat.com/show_bug.cgi?id=2022866): tests/extended/builds handle new step logging [#26606](https://github.com/openshift/origin/pull/26606)
* [Bug 2024659](https://bugzilla.redhat.com/show_bug.cgi?id=2024659): Switch the cluster-role-reapers test to Serial [#26618](https://github.com/openshift/origin/pull/26618)
* [Bug 2024656](https://bugzilla.redhat.com/show_bug.cgi?id=2024656): Create new-project without updating kubeconfig [#26619](https://github.com/openshift/origin/pull/26619)
* [Bug 2025722](https://bugzilla.redhat.com/show_bug.cgi?id=2025722): test/e2e/upgrade: Bump durationToSoftFailure by 15m for minor updates [#26634](https://github.com/openshift/origin/pull/26634)
* [Bug 2025088](https://bugzilla.redhat.com/show_bug.cgi?id=2025088): Add admin ack Upgradeable condition gate test [#26629](https://github.com/openshift/origin/pull/26629)
* [Bug 2018442](https://bugzilla.redhat.com/show_bug.cgi?id=2018442): Add more tests for image policy [#26567](https://github.com/openshift/origin/pull/26567)
* [Bug 2010225](https://bugzilla.redhat.com/show_bug.cgi?id=2010225): vendor: e2e iperf2 change threshold to 10MBps = 80 Mbps [#26526](https://github.com/openshift/origin/pull/26526)
* [Bug 2019518](https://bugzilla.redhat.com/show_bug.cgi?id=2019518): Skip test 'clone repository using git:// protocol should clone using git:// if no proxy is configured' [#26561](https://github.com/openshift/origin/pull/26561)
* [Full changelog](https://github.com/openshift/origin/compare/6105395c9ad99bfa5c9459f7d46ad9515a1229bc...932d5024f9f9c2fb32ad8ac417df03286cb23ce7)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/9f56afd3450b385ef300d9783f028179161efe32)

* [Bug 2018496](https://bugzilla.redhat.com/show_bug.cgi?id=2018496): Close connection to vCenter API [#50](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/50)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/09517b50973f19d8f3d4fb19e84fe04674717c9b...9f56afd3450b385ef300d9783f028179161efe32)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/de8606f73f0cb88c8acd81326674a549722abfca)

* [Bug 2033733](https://bugzilla.redhat.com/show_bug.cgi?id=2033733): Deferred logout after checks are run [#67](https://github.com/openshift/vsphere-problem-detector/pull/67)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/646689c310206d7ef15e7f3530d312a28a0d3b66...de8606f73f0cb88c8acd81326674a549722abfca)