# 4.14.0-ec.3

Created: 2023-07-06 21:32:15 +0000 UTC

Image Digest: `sha256:a204ba9e557087f5b8fb9960795037057a5fac2a558485cb1e1771506af9028d`

Promoted from registry.ci.openshift.org/ocp-arm64/release-arm64:4.14.0-0.nightly-arm64-2023-07-05-191024


## Changes from 4.14.0-ec.2

### Components

* Kubernetes upgraded from 1.27.2 to 1.27.3
* Red Hat Enterprise Linux CoreOS upgraded from 414.92.202306100411-0 to 414.92.202307050443-0


### New images

* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [e2e9f9f6](https://github.com/openshift/monitoring-plugin/commit/e2e9f9f6c5448e19fa24f1f6f28be58b651c4d21) `sha256:79efc11bee404a484e5c61fc8ee405556c45c44e4c50da8a876031e254199581`


### Rebuilt images without code change

* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [b49242a4](https://github.com/openshift/assisted-installer/commit/b49242a422797ad93b9f0c37f7b3c33061e961b1) `sha256:ae99d5c5d477258d8b3ec6f27e5bcea9b5d9c3bbce9280e577edc88b9c0ca845`
* [agent-installer-orchestrator](https://github.com/openshift/assisted-installer) git [b49242a4](https://github.com/openshift/assisted-installer/commit/b49242a422797ad93b9f0c37f7b3c33061e961b1) `sha256:494fa71b5a7ff0a3e1e76d3fb926dc2c134424ee20bff3ef628cc017b6a83e0c`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [61e198ca](https://github.com/openshift/apiserver-network-proxy/commit/61e198ca00b9426e2f7309cf2818ac74426486ff) `sha256:60d83faf51f45aafd4b894d22eb18981bf50214acfdb3fb66b23933b682a67c6`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [5290804b](https://github.com/openshift/cluster-api-provider-azure/commit/5290804b20b3398f27fab1cd9828a24c8f64320a) `sha256:06e23ba2551cf89069cccb881c7c2175bc19018f2c28d3dee75835485bf537ae`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [34226326](https://github.com/openshift/cluster-api-provider-baremetal/commit/34226326653bffc9e903e894e32057c97e082d80) `sha256:003fc105bf6e9bdf5c27456592387a37fd6cc3414035c008daab861ea2fe45a7`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [0af5be07](https://github.com/openshift/cluster-bootstrap/commit/0af5be0717c0a7bbd6cdaa1ce1284edf389359f0) `sha256:de071c2e71902ab6acaff6b1cfd1617852ec2962a0f81d332cf47057b03abc18`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [eaaf7260](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/eaaf7260464bd6cb6126dfd7259cb6217eb25340) `sha256:f92a0abebec59e7dec80d9082e0f97092290861e2a4e83959c13da8d77ea82f7`
* [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [bc348cef](https://github.com/openshift/platform-operators/commit/bc348cef1a5aa4d88fe705766af6c5f62c177c5e) `sha256:d44521f4c21e83e9e2fb1f1abcfbd84f0614925bc9d9cb66a987d68ba96671ca`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cc787e1b](https://github.com/openshift/cluster-policy-controller/commit/cc787e1b1e177696817b66689a03471914083a67) `sha256:3bfc38d6ab0e1b69246bf0740f860908bd9276f922e4ee4c1e39d77a0c45ffc1`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [5a373092](https://github.com/openshift/cluster-samples-operator/commit/5a373092fa3f3030b88431ecf397f1261c61a507) `sha256:b3911cdb4ae1a0315be5286d5cbb76f4bc666efd937863a278d9945bbdd644e9`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [9dd3eede](https://github.com/openshift/cluster-update-keys/commit/9dd3eedebc62725e806d7b52d640b70e61a96f98) `sha256:714a71e163180e1ee9c531229ef51131bc3147e859f594a9c30d1e66b154baef`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [716a0c33](https://github.com/openshift/configmap-reload/commit/716a0c33bb693127fba3b3512622710785a59e8e) `sha256:5a17596f819f2046da44c6daceb85be9019e87532ab48340b9f9a10f36b92128`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [6e00b54d](https://github.com/openshift/containernetworking-plugins/commit/6e00b54dea106c43baaecd0ade2fe905a7d65dd7) `sha256:dc76a6e9d6b96b4c8a92918c8c99a3eda3ddbcf81be9d489c7990f2834e3e7b2`
* [coredns](https://github.com/openshift/coredns) git [a2c62dd3](https://github.com/openshift/coredns/commit/a2c62dd3976b27d6a45e273532c63ba914700917) `sha256:47ef55da0c18b3063edae922ddb39c2d34375290f1542d41f58253f71d5e0bbd`
* [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [a37b3b3b](https://github.com/openshift/csi-driver-shared-resource/commit/a37b3b3bcbc822749854f580735f7e8ed8e5c4f6) `sha256:6f06b4e9b4ec62421ba8756eabcd1859a25cf26443cace56ae40efacfb4c9793`
* [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [a37b3b3b](https://github.com/openshift/csi-driver-shared-resource/commit/a37b3b3bcbc822749854f580735f7e8ed8e5c4f6) `sha256:c78162139b27cdcaf875972ff225be14bb7e307dcc75ebb1c981d19d78212210`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [cafed17b](https://github.com/openshift/driver-toolkit/commit/cafed17b0c2b4cf8d8310304888787ed7adf7474) `sha256:4254f2715da94f73e16a9dd6dd0d7f0c3dcb4c666966c577ccdf1c3368d20c9f`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [c6f8060e](https://github.com/openshift/egress-router-cni/commit/c6f8060e5d0dd36599572c5cbf7da1f3d756ec04) `sha256:048238613a57ca260b1d42213b59384374c0778bbc7bbe195c3e99ba800d7d7a`
* [etcd](https://github.com/openshift/etcd) git [53cdd6b0](https://github.com/openshift/etcd/commit/53cdd6b0519f0e57da9032b473465799bba4b1a0) `sha256:394290264721db7a703b483fcad7453caa1d38bc70ea4f85a431d5801e109473`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [320a40b6](https://github.com/openshift/machine-api-provider-gcp/commit/320a40b6927f090dd392e38307480d7b0a7f6fc2) `sha256:db1193b30edb2026733078cb1eab47018da92044364ce48d02daec1f186cdfd9`
* [haproxy-router](https://github.com/openshift/router) git [0cd9a58d](https://github.com/openshift/router/commit/0cd9a58dff77127562f7851ccfa5cda79b8cef48) `sha256:508b01522dcef574aa45a95ba291333132c1fa9dc4d4af3d20cbf9c90eb8bed6`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [c02fa80c](https://github.com/openshift/ironic-static-ip-manager/commit/c02fa80c7ed88d480d67a6c94be83811661f4631) `sha256:a614af5f7a8275cdc77396782b4dacb78dc29f7a172af948200630b64b1807c6`
* [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter) git [2f59cfdf](https://github.com/openshift/k8s-prometheus-adapter/commit/2f59cfdf94f6f284b0a77cf78af6cea849572fb2) `sha256:8ab114a45a2ff95d2edf063ead488970a8e02ad559238ff331bf4a109aed654a`
* [keepalived-ipfailover](https://github.com/openshift/images) git [babc8a25](https://github.com/openshift/images/commit/babc8a2583194e57b94210118336416a57dc93d8) `sha256:9c4c84f20066ebb2a64c7c27a115c2879b7ac0b9af5d9d490b4cccc749c5de92`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [aa20a48c](https://github.com/openshift/kube-state-metrics/commit/aa20a48cd389a5ab09b2a41a9bb4ce11832ceb68) `sha256:455ab67bbe3b130a5ce92be7eeb7d7ffe0fd23f0d6af5652dc521a097d4177cf`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [77c90ab8](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/77c90ab82b469f37e5eb804f0d1aae3e9d811a56) `sha256:1007654e345d4c52e73024e4aaf261c16a09ce945d557ed40c08abd52910be17`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [9ab93bad](https://github.com/openshift/cloud-provider-kubevirt/commit/9ab93bad0ca56f6cd01564888fb1e4ac1c17b434) `sha256:27e3d900ca3f94d723dafd3593d3cca987a5f33bb00e84c4337e6ccb2657dbaa`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [c2f9fbfa](https://github.com/openshift/cluster-api-provider-libvirt/commit/c2f9fbfaa20de4290400754049cd4c7c8e6866fd) `sha256:39ced0efa998342a198ff241c69c660c8130f1ddba62012827cf8cffb1cc9c6c`
* machine-os-content `sha256:126a3bfade54324bfcd11d04282c0fb863342bd1d785b07cc0894998cb85d939`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [1a9985bd](https://github.com/openshift/multus-admission-controller/commit/1a9985bd714c8a8be934082945ec76f083feeba4) `sha256:202adf7ce284df3b59412b942650d6be53ee160f13f91e1c148547f1a81c73aa`
* [multus-cni](https://github.com/openshift/multus-cni) git [56f2f0dc](https://github.com/openshift/multus-cni/commit/56f2f0dceca9a5de5896665d0a14b5e0cbed810c) `sha256:8c1b1b383c84ac7af5ce780a6ad922aead9e25f2b7eee887b86133505a3a93ae`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [cf5e9cf8](https://github.com/openshift/multus-networkpolicy/commit/cf5e9cf88fa4ee47ab3ee556fe00462590814aac) `sha256:981955be2b377e40e9f4f720af877fbe2beac0559b2d7b919e50a76faaf59776`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [67fc2ba6](https://github.com/openshift/route-override-cni/commit/67fc2ba6f2b8cd4739b143122852865ce6369835) `sha256:30db64a8d5c9cca3430cd151d8ddb3145d0a673e7168959dcdae92dc22e37371`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [6d2ed2b8](https://github.com/openshift/whereabouts-cni/commit/6d2ed2b853faf0efab68bb5ecedaa03552f3f47b) `sha256:e1d8040c426d5c82b6dd40a8a6360f4469908cd06427e0a2b2bba5e352f442e2`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [1d8c1b07](https://github.com/openshift/bond-cni/commit/1d8c1b078339d8a29f5917965047fbef83df008f) `sha256:8d1b974d4871a0162222d4ef977ec584d17395bc0fe13dc14df0516fe87b98d6`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [26574c6b](https://github.com/openshift/network-metrics-daemon/commit/26574c6b3b74010701a27382084a456c5dddbd02) `sha256:037bfabbbb3bf4790201d59323820dc56773f774643fe2723b291dc2e4ff9d2b`
* [network-tools](https://github.com/openshift/network-tools) git [d8b16716](https://github.com/openshift/network-tools/commit/d8b16716cb5eba85c165cc60226a5644d0c3590a) `sha256:77daf6bc16a16a053eb89c531422bac8e708862ae5cab0e06c45f4f31ec7b483`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [bb6c7025](https://github.com/openshift/oauth-proxy/commit/bb6c70257268d6dfaf47707a20aa6608d223d6dc) `sha256:7c90773446e18c3f8f09ca0508545f2cf7a3dcf6622c2925ef946af6183ada81`
* [oauth-server](https://github.com/openshift/oauth-server) git [a06e5302](https://github.com/openshift/oauth-server/commit/a06e5302aa7cfc99bd3ab003e3790c36873a181c) `sha256:0e3f3b5c1e92cfd12c46c5c76c87a1fbcb8819d8ce7af7d98f1f75b7a656953d`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [5843d45e](https://github.com/openshift/openshift-state-metrics/commit/5843d45e43d162e810a08c554d160166bc79b6d3) `sha256:1f3c4aa6b07c41ed016701fd796402ab81f525ab65f4302a0e320b46fc9a8ca0`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [f21b470f](https://github.com/openshift/ovirt-csi-driver/commit/f21b470f4927f97eca93a0a390cffccd7d724043) `sha256:370917906c64e2bd5435fa5fbf2c0ea0880e74a60d99ec292479c200a3d6cd2e`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [2fa33aa7](https://github.com/openshift/ovirt-csi-driver-operator/commit/2fa33aa7f05da8640a8695372364f2367febd12a) `sha256:1e520d16080077f456d7688156236573efb1a02bed3ad38e789271f95afa5b02`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [22d89b3f](https://github.com/openshift/cluster-api-provider-ovirt/commit/22d89b3fd9e2e395a62f71092487d26c8940052e) `sha256:0f35226d011fe6d772aa418e5bd9f8dabf108531a1fe5684e87512bd558e1b76`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [d6d234d6](https://github.com/openshift/prometheus-alertmanager/commit/d6d234d631ee023aca97ec47d83766ba5e230f3a) `sha256:da76b6e130ac2e8ae1ee676951b3b1f8de935fea3c9bd84b95165b0da723b047`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [3eb8ba7e](https://github.com/openshift/node_exporter/commit/3eb8ba7e9aecd7792e2b65b58fc1a246117b2bba) `sha256:3f81ff54d601eabe8603962f3af7a03e23beaa3b3662e155d9dfeb9dfd799cb2`
* rhel-coreos `sha256:e7cb991a382c55c1d2f5f9c8a9f4258408a14383de6152a2b2126397ca669aee`
* rhel-coreos-extensions `sha256:7d6049b7e0f4931629c30fc032b208fe896f729d4cb9818462e9ce2514c884c2`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [38d9ec83](https://github.com/openshift/route-controller-manager/commit/38d9ec83ce464e9198af05918ab03a7995a11866) `sha256:a61b739e8b48dace6051806ec627a653d01094e3cd426484fc428fb615fd7a0b`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [f0bd3130](https://github.com/openshift/service-ca-operator/commit/f0bd313003d3d79593b44936fb7cf0bab2a6daae) `sha256:a84564944e6dfaba3fb9edeb28ee8dc953f4005d558ff063c36dd8b2aa72ca46`
* [thanos](https://github.com/openshift/thanos) git [baf119a6](https://github.com/openshift/thanos/commit/baf119a6ad26c2b8aeb05b7d044567dc671065df) `sha256:775988ef709163714004123df116ad3c487ce752cd9d33aa47fc300fafd4ec8c`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/aa0fc8aa2b3354231670dce782023928f419b1a5)

* [MGMT-14374](https://issues.redhat.com/browse/MGMT-14374): update day2 master docs (#5335) [#5335](https://github.com/openshift/assisted-service/pull/5335)
* MGMT-14620 Only emit succesful host creation message for pre install hosts (#5296) [#5296](https://github.com/openshift/assisted-service/pull/5296)
* [MGMT-14704](https://issues.redhat.com/browse/MGMT-14704): Provide info on custom/vs non custom manifest in manifest endpoint. (#5278) [#5278](https://github.com/openshift/assisted-service/pull/5278)
* [MGMT-15114](https://issues.redhat.com/browse/MGMT-15114): remove event for cluster registration failed (#5330) [#5330](https://github.com/openshift/assisted-service/pull/5330)
* [MGMT-15126](https://issues.redhat.com/browse/MGMT-15126): Add missing incompatible features in some of the feature-support feature (#5327) [#5327](https://github.com/openshift/assisted-service/pull/5327)
* [MGMT-15107](https://issues.redhat.com/browse/MGMT-15107): Bump version for hacking LSO catalog (#5323) [#5323](https://github.com/openshift/assisted-service/pull/5323)
* Create an override annotation for the ironic agent image (#5310) [#5310](https://github.com/openshift/assisted-service/pull/5310)
* [OCPBUGS-13621](https://issues.redhat.com/browse/OCPBUGS-13621): Fix singular Ingress and API cluster VIPs removal (#5216) [#5216](https://github.com/openshift/assisted-service/pull/5216)
* Don't require key encipherment usage for approving CSRs (#5322) [#5322](https://github.com/openshift/assisted-service/pull/5322)
* [MGMT-13284](https://issues.redhat.com/browse/MGMT-13284): Check for BMH CRD before creating controller (#5284) [#5284](https://github.com/openshift/assisted-service/pull/5284)
* [MGMT-14937](https://issues.redhat.com/browse/MGMT-14937): Deprecate user_managed_networking attribute (#5317) [#5317](https://github.com/openshift/assisted-service/pull/5317)
* Bump OCP versions: 4.14 (#5320) [#5320](https://github.com/openshift/assisted-service/pull/5320)
* Bump OCP versions: 4.13, 4.10, 4.12 (#5316) [#5316](https://github.com/openshift/assisted-service/pull/5316)
* NO-ISSUE: parametrize template to enable switching secrets (#5313) [#5313](https://github.com/openshift/assisted-service/pull/5313)
* [MGMT-14240](https://issues.redhat.com/browse/MGMT-14240): Specify connect-timeout on curl (#5314) [#5314](https://github.com/openshift/assisted-service/pull/5314)
* [MGMT-15034](https://issues.redhat.com/browse/MGMT-15034): Fix patch of infrastructure CR with external platform (#5312) [#5312](https://github.com/openshift/assisted-service/pull/5312)
* [MGMT-14979](https://issues.redhat.com/browse/MGMT-14979): add sasl/scraml auth method for kafka notifications (#5299) [#5299](https://github.com/openshift/assisted-service/pull/5299)
* [MGMT-15025](https://issues.redhat.com/browse/MGMT-15025): Forbid register Z architecture cluster with OCI platform (#5309) [#5309](https://github.com/openshift/assisted-service/pull/5309)
* MGMT-15015 Provider IsHostSupported panic if platform is not found (#5306) [#5306](https://github.com/openshift/assisted-service/pull/5306)
* OCPBUGS-13738 enforce additional ntp sources added into chrony (#5295) [#5295](https://github.com/openshift/assisted-service/pull/5295)
* [MGMT-14992](https://issues.redhat.com/browse/MGMT-14992): Fix Minimal ISO set as default in s390x (#5302) [#5302](https://github.com/openshift/assisted-service/pull/5302)
* [MGMT-14631](https://issues.redhat.com/browse/MGMT-14631): Removing leftover of support for openshift 4.8 (#5301) [#5301](https://github.com/openshift/assisted-service/pull/5301)
* Bump OCP versions: 4.14, 4.11 (#5300) [#5300](https://github.com/openshift/assisted-service/pull/5300)
* [MGMT-14973](https://issues.redhat.com/browse/MGMT-14973): Fix misleading logs showing wrong platform and user_managed_networking combination (#5298) [#5298](https://github.com/openshift/assisted-service/pull/5298)
* [MGMT-14975](https://issues.redhat.com/browse/MGMT-14975): Update MCE operator installation to use stable-2.3 channel (#5297) [#5297](https://github.com/openshift/assisted-service/pull/5297)
* [MGMT-14769](https://issues.redhat.com/browse/MGMT-14769): Enable upgrade agent by default (#5276) [#5276](https://github.com/openshift/assisted-service/pull/5276)
* [MGMT-14165](https://issues.redhat.com/browse/MGMT-14165): AgentClusterInstall Webhooks improvements and fixes (#5275) [#5275](https://github.com/openshift/assisted-service/pull/5275)
* Bump OCP versions: 4.13, 4.12 (#5293) [#5293](https://github.com/openshift/assisted-service/pull/5293)
* [MGMT-14730](https://issues.redhat.com/browse/MGMT-14730): Validate that manifest file size does not exceed 1MB (#5281) [#5281](https://github.com/openshift/assisted-service/pull/5281)
* [MGMT-14883](https://issues.redhat.com/browse/MGMT-14883): Fix feature-support validation fail to validate openshift version (#5290) [#5290](https://github.com/openshift/assisted-service/pull/5290)
* [Full changelog](https://github.com/openshift/assisted-service/compare/e977c8802a637b64054d2aab6ff6758335c147da...aa0fc8aa2b3354231670dce782023928f419b1a5)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/9c61dba67392a85f36bb052f3b3e530bc26c4979)

* NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.15.0 to 2.16.0 (#564) [#564](https://github.com/openshift/assisted-installer-agent/pull/564)
* [AGENT-594](https://issues.redhat.com/browse/AGENT-594): remove agent based installer code (#563) [#563](https://github.com/openshift/assisted-installer-agent/pull/563)
* NO-ISSUE: Bump golang.org/x/sync from 0.2.0 to 0.3.0 (#561) [#561](https://github.com/openshift/assisted-installer-agent/pull/561)
* [MGMT-14540](https://issues.redhat.com/browse/MGMT-14540): Mark Appliance disk(s) with a partition name prefix 'agent' as eligible (#554) [#554](https://github.com/openshift/assisted-installer-agent/pull/554)
* [OCPBUGS-14848](https://issues.redhat.com/browse/OCPBUGS-14848): Filter out hidden devices (#558) [#558](https://github.com/openshift/assisted-installer-agent/pull/558)
* NO-ISSUE: Bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#555) [#555](https://github.com/openshift/assisted-installer-agent/pull/555)
* NO-ISSUE: Bump github.com/go-openapi/swag from 0.22.3 to 0.22.4 (#556) [#556](https://github.com/openshift/assisted-installer-agent/pull/556)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/4cacf2c1d7a99435e9ec5ea192171ed1642f208c...9c61dba67392a85f36bb052f3b3e530bc26c4979)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/a71eea0f0d00f6becd114a6f799e79d43eb28d2a)

* [OCPBUGS-14573](https://issues.redhat.com/browse/OCPBUGS-14573): Adjust flex layout [#25](https://github.com/openshift/agent-installer-utils/pull/25)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/c76385414587f21eebc9c59dae38571bc28c61f2...a71eea0f0d00f6becd114a6f799e79d43eb28d2a)


### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kuryr-cni, kuryr-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/e8b13aaf3b13581e62526d51f6f958b8fec93196)

* UPSTREAM: <drop>: update openshift/api,openshift/apiserver-library-go [#1621](https://github.com/openshift/kubernetes/pull/1621)
* UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kube… [#1616](https://github.com/openshift/kubernetes/pull/1616)
* Update to Kubernetes 1.27.3 [#1609](https://github.com/openshift/kubernetes/pull/1609)
* UPSTREAM: <carry>: STOR-1270: Admission plugin to deny deletion of storages.operator.openshift.io [#1550](https://github.com/openshift/kubernetes/pull/1550)
* [OCPBUGS-7181](https://issues.redhat.com/browse/OCPBUGS-7181): UPSTREAM: <drop>: bump apiserver-library-go [#1605](https://github.com/openshift/kubernetes/pull/1605)
* [Full changelog](https://github.com/openshift/kubernetes/compare/55f2dbe862f9797f524432795c67a775a63025d4...e8b13aaf3b13581e62526d51f6f958b8fec93196)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/208ad0047c92e4df1710494769717411bd3fc8e3)

* [OCPBUGS-14696](https://issues.redhat.com/browse/OCPBUGS-14696): Merge https://github.com/kubernetes/cloud-provider-aws:master (cab0100) into master [#45](https://github.com/openshift/cloud-provider-aws/pull/45)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/dca6ce20da41803f2853779a7bcc5df8d7460984...208ad0047c92e4df1710494769717411bd3fc8e3)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/f74799bab73a3fc89a82c2d185d1305f0e609b28)

* [OCPBUGS-14969](https://issues.redhat.com/browse/OCPBUGS-14969): Pass right SGs for IsExternallyManaged on creation [#467](https://github.com/openshift/cluster-api-provider-aws/pull/467)
* [OCPCLOUD-2121](https://issues.redhat.com/browse/OCPCLOUD-2121): Add openshift/e2e-tests for CAPI E2E testing [#465](https://github.com/openshift/cluster-api-provider-aws/pull/465)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/3df144350c091e07e9c9c7b395642535fa236779...f74799bab73a3fc89a82c2d185d1305f0e609b28)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/fdd8ff81507b581b93fc1ec8131ae135dc50a4a1)

* [STOR-1167](https://issues.redhat.com/browse/STOR-1167): Rebase to v1.18.0 for OCP 4.14 [#222](https://github.com/openshift/aws-ebs-csi-driver/pull/222)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/693018cc34e44e6481a1f621bd4894830271bcb0...fdd8ff81507b581b93fc1ec8131ae135dc50a4a1)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/865135bc7ff7827924648e32db83caeb97bbe8ce)

* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump efs-ebs-driver-operator library-go [#247](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/247)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#222](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/222)
* Bump Kubernetes libs to v0.27.1 [#243](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/243)
* [STOR-1167](https://issues.redhat.com/browse/STOR-1167): Enable extra-create-metadata to tag snapshots [#223](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/223)
* [STOR-1300](https://issues.redhat.com/browse/STOR-1300): Restart controller Pods if metrics-serving-cert changed [#216](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/216)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/5756b4d6bb5bedd5a5dc8841cd82445d351aa0a1...865135bc7ff7827924648e32db83caeb97bbe8ce)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/5c32de6bfd2ef6dff34009811f99fa3f8c17254e)

* [OCPCLOUD-2113](https://issues.redhat.com/browse/OCPCLOUD-2113): Add support for PlacementGroupName in instances [#77](https://github.com/openshift/machine-api-provider-aws/pull/77)
* Fixes for the labels capacity annotation [#76](https://github.com/openshift/machine-api-provider-aws/pull/76)
* [MIXEDARCH-256](https://issues.redhat.com/browse/MIXEDARCH-256): Handle the kubernetes.io/architecture label based on the AWS instance type [#71](https://github.com/openshift/machine-api-provider-aws/pull/71)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/e9544e67d3441490e6496580008f6fdc4fadcf8c...5c32de6bfd2ef6dff34009811f99fa3f8c17254e)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/ed5ae281ece6092735140617c486e5822ce5b7b6)

* Bump to go 1.20 in go.mod [#163](https://github.com/openshift/aws-pod-identity-webhook/pull/163)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/79b3460446e2f54668c4ad7dc2ce80a64a87708e...ed5ae281ece6092735140617c486e5822ce5b7b6)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/ae12e9ab2ee7624f5367366167b67f3d90d3e232)

* [OCPBUGS-14368](https://issues.redhat.com/browse/OCPBUGS-14368): Do not detach masters from LB when unready [#76](https://github.com/openshift/cloud-provider-azure/pull/76)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/ce02abccfeed9124c24eee5e53330afc1c6216c4...ae12e9ab2ee7624f5367366167b67f3d90d3e232)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/7d033aa3c19b121d0c712b39a3aea3c4258adf54)

* [STOR-1164](https://issues.redhat.com/browse/STOR-1164): Rebase to v1.28.0 for OCP 4.14 [#43](https://github.com/openshift/azure-disk-csi-driver/pull/43)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/e8ebff5f1b4d80e04af80f32327479a68e9dce0d...7d033aa3c19b121d0c712b39a3aea3c4258adf54)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/4827bf1e81bfa4c219288438dbeb65a274490fbb)

* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump azure-disk-csi-driver-operator library-go [#85](https://github.com/openshift/azure-disk-csi-driver-operator/pull/85)
* [CCO-324](https://issues.redhat.com/browse/CCO-324): Unrevert "CCO-324: add support for workload identity" [#83](https://github.com/openshift/azure-disk-csi-driver-operator/pull/83)
* Revert "CCO-324: add support for workload identity" [#82](https://github.com/openshift/azure-disk-csi-driver-operator/pull/82)
* [CCO-324](https://issues.redhat.com/browse/CCO-324): add support for workload identity [#78](https://github.com/openshift/azure-disk-csi-driver-operator/pull/78)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#81](https://github.com/openshift/azure-disk-csi-driver-operator/pull/81)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/1a478f019771930f7e2cb0238725618402fb16e1...4827bf1e81bfa4c219288438dbeb65a274490fbb)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/70ae495d3578db6fa3cbddba4a072c0374b1292c)

* [STOR-1160](https://issues.redhat.com/browse/STOR-1160): Rebase to v1.28.0 for OCP 4.14 [#29](https://github.com/openshift/azure-file-csi-driver/pull/29)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/932471949818b269c73f262d576a539da868196d...70ae495d3578db6fa3cbddba4a072c0374b1292c)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/bd6d4e40c06bb1200088fd7f69e13723bc4773ce)

* [CCO-325](https://issues.redhat.com/browse/CCO-325): Unrevert "CCO-325: add support for workload identity" [#62](https://github.com/openshift/azure-file-csi-driver-operator/pull/62)
* [STOR-989](https://issues.redhat.com/browse/STOR-989): Remove SC and manifest  file for NFS backend [#58](https://github.com/openshift/azure-file-csi-driver-operator/pull/58)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump azure-file-csi-driver-operator library-go [#61](https://github.com/openshift/azure-file-csi-driver-operator/pull/61)
* Revert "CCO-325: add support for workload identity" [#59](https://github.com/openshift/azure-file-csi-driver-operator/pull/59)
* [CCO-325](https://issues.redhat.com/browse/CCO-325): add support for workload identity [#54](https://github.com/openshift/azure-file-csi-driver-operator/pull/54)
* [CCO-325](https://issues.redhat.com/browse/CCO-325): Mount serviceaccount token into csi-driver container [#53](https://github.com/openshift/azure-file-csi-driver-operator/pull/53)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#57](https://github.com/openshift/azure-file-csi-driver-operator/pull/57)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/0867286c194fee1ce630ebed7a0d390058eb2aa8...bd6d4e40c06bb1200088fd7f69e13723bc4773ce)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/97ea1221e4ca999a161ddee4d1e075880fcbad67)

* Set upstream labels and fix capability for the arch-aware scale from 0 in Azure [#66](https://github.com/openshift/machine-api-provider-azure/pull/66)
* [CCO-346](https://issues.redhat.com/browse/CCO-346): Add support for Azure workload identity tokens [#55](https://github.com/openshift/machine-api-provider-azure/pull/55)
* [MIXEDARCH-257](https://issues.redhat.com/browse/MIXEDARCH-257): Handle the kubernetes.io/architecture label based on the Azure VM Size [#65](https://github.com/openshift/machine-api-provider-azure/pull/65)
* [OCPBUGS-10762](https://issues.redhat.com/browse/OCPBUGS-10762): Machine should be Failed if Machine has a Failed state on Azure [#56](https://github.com/openshift/machine-api-provider-azure/pull/56)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/83b07d554246a0aafe6ccb76e61d0f1d99cbfca9...97ea1221e4ca999a161ddee4d1e075880fcbad67)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/698b036ec81548e7f3fe8c97be72cb95f55e4346)

* [OCPBUGS-14932](https://issues.redhat.com/browse/OCPBUGS-14932): Update azure cli to 2.40.0+ [#7216](https://github.com/openshift/installer/pull/7216)
* PowerVS Add support for Capped processors [#7286](https://github.com/openshift/installer/pull/7286)
* [CORS-2645](https://issues.redhat.com/browse/CORS-2645): AWS Cross-Account Private Hosted Zone: Add Further Validations [#7253](https://github.com/openshift/installer/pull/7253)
* [AGENT-624](https://issues.redhat.com/browse/AGENT-624): Allow override of networkType [#7223](https://github.com/openshift/installer/pull/7223)
* Update hack/go-test.sh to golang 1.20 [#7270](https://github.com/openshift/installer/pull/7270)
* [AGENT-627](https://issues.redhat.com/browse/AGENT-627): Decompress kernel on ARM [#7276](https://github.com/openshift/installer/pull/7276)
* OWNERS_ALIASES: offboard ashcrow and bgilbert from CoreOS [#7275](https://github.com/openshift/installer/pull/7275)
* AGENT-558 Generate unconfigured agent ignition [#7186](https://github.com/openshift/installer/pull/7186)
* OWNERS: merge agent/installer [#7278](https://github.com/openshift/installer/pull/7278)
* [OSASINFRA-3182](https://issues.redhat.com/browse/OSASINFRA-3182): openstack: remove portTargets [#7239](https://github.com/openshift/installer/pull/7239)
* [AGENT-498](https://issues.redhat.com/browse/AGENT-498): Get iPXE script template kernel parameters from ISO [#7150](https://github.com/openshift/installer/pull/7150)
* [OCPBUGS-15238](https://issues.redhat.com/browse/OCPBUGS-15238): GCP: ic: improve project validation [#7267](https://github.com/openshift/installer/pull/7267)
* Default dataStore is returned the name instead the inventoryPath [#7261](https://github.com/openshift/installer/pull/7261)
* Use the correct image name for agent-tui extraction [#7266](https://github.com/openshift/installer/pull/7266)
* [OCPBUGS-13636](https://issues.redhat.com/browse/OCPBUGS-13636): new Aws secret regions support [#6184](https://github.com/openshift/installer/pull/6184)
* [CORS-2372](https://issues.redhat.com/browse/CORS-2372): Azure: auth Installer with Managed Identity from VM [#7108](https://github.com/openshift/installer/pull/7108)
* [OCPBUGS-11796](https://issues.redhat.com/browse/OCPBUGS-11796): azure: skip NSG creation when BYO vnet [#7094](https://github.com/openshift/installer/pull/7094)
* [OCPBUGS-9435](https://issues.redhat.com/browse/OCPBUGS-9435): terraform: aws: secret regions now support ALIAS record [#7184](https://github.com/openshift/installer/pull/7184)
* [SPLAT-1094](https://issues.redhat.com/browse/SPLAT-1094): warn users about deprecation of Alibaba Cloud [#7257](https://github.com/openshift/installer/pull/7257)
* [OCPBUGS-14869](https://issues.redhat.com/browse/OCPBUGS-14869): Add timezone info in installer logs [#7243](https://github.com/openshift/installer/pull/7243)
* [CORS-2656](https://issues.redhat.com/browse/CORS-2656): Remove context from cluster uninstaller struct [#7169](https://github.com/openshift/installer/pull/7169)
* openstack: document external LB [#6920](https://github.com/openshift/installer/pull/6920)
* bootkube: Drop cruft in MCO bootstrap [#7244](https://github.com/openshift/installer/pull/7244)
* Update OWNERS_ALIASES [#7203](https://github.com/openshift/installer/pull/7203)
* Agent: run shellcheck on start-cluster-installation.sh [#7062](https://github.com/openshift/installer/pull/7062)
* [OSASINFRA-2168](https://issues.redhat.com/browse/OSASINFRA-2168): Docs: update OpenStack requirements [#7015](https://github.com/openshift/installer/pull/7015)
* [OCPBUGS-15095](https://issues.redhat.com/browse/OCPBUGS-15095): Add kubevirt digest-ref in RHCOS boot images [#7254](https://github.com/openshift/installer/pull/7254)
* [AGENT-563](https://issues.redhat.com/browse/AGENT-563): Create configuration image [#7157](https://github.com/openshift/installer/pull/7157)
* [AGENT-510](https://issues.redhat.com/browse/AGENT-510): Support interactive network console when pxe booting [#7185](https://github.com/openshift/installer/pull/7185)
* Allow CustomNoUpgrade features via install-config [#7246](https://github.com/openshift/installer/pull/7246)
* [MULTIARCH-3664](https://issues.redhat.com/browse/MULTIARCH-3664): enable multipath for powervs [#7222](https://github.com/openshift/installer/pull/7222)
* [OCPBUGS-13960](https://issues.redhat.com/browse/OCPBUGS-13960): update RHCOS 4.14 bootimage metadata to 414.92.202306141028-0 [#7247](https://github.com/openshift/installer/pull/7247)
* [CFE-829](https://issues.redhat.com/browse/CFE-829): Remove Azure Tags TechPreview only indicators and checks [#7187](https://github.com/openshift/installer/pull/7187)
* [CORS-2631](https://issues.redhat.com/browse/CORS-2631): Add additional security group ids in AWS [#7151](https://github.com/openshift/installer/pull/7151)
* [AGENT-596](https://issues.redhat.com/browse/AGENT-596): use agent-installer-utils for agent-tui extraction [#7212](https://github.com/openshift/installer/pull/7212)
* [AGENT-491](https://issues.redhat.com/browse/AGENT-491): Support pxe base url [#6723](https://github.com/openshift/installer/pull/6723)
* [OCPBUGS-14917](https://issues.redhat.com/browse/OCPBUGS-14917): PowerVS: Cleanup service instances for destroy cluster [#7173](https://github.com/openshift/installer/pull/7173)
* OpenStack: add support to multiple subnets in the bootstrap [#7111](https://github.com/openshift/installer/pull/7111)
* Add ControlPlaneMachineSet for Nutanix [#7119](https://github.com/openshift/installer/pull/7119)
* [OPNET-298](https://issues.redhat.com/browse/OPNET-298): Allow primary-v6 dual-stack on vSphere [#7124](https://github.com/openshift/installer/pull/7124)
* [CORS-2613](https://issues.redhat.com/browse/CORS-2613): AWS: Cross-account Shared VPC Support [#7225](https://github.com/openshift/installer/pull/7225)
* OpenStack: support user provided dual-stack api and ingress Port [#7133](https://github.com/openshift/installer/pull/7133)
* OpenStack: configure IPv6 address in the bootstrap node [#7128](https://github.com/openshift/installer/pull/7128)
* [SPLAT-995](https://issues.redhat.com/browse/SPLAT-995): vSphere Add new template field [#6995](https://github.com/openshift/installer/pull/6995)
* [Full changelog](https://github.com/openshift/installer/compare/49c544bbb9d0d0130210db43a061f1c45e3c88e8...698b036ec81548e7f3fe8c97be72cb95f55e4346)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/7338252ff8205ef1a930286b8d5a6d56f5679a59)

* Merge upstream [#288](https://github.com/openshift/baremetal-operator/pull/288)
* Merge upstream [#286](https://github.com/openshift/baremetal-operator/pull/286)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/8dde0991ffdd42005b70b24eb578f9eaf11d642b...7338252ff8205ef1a930286b8d5a6d56f5679a59)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/b3f3077072df5897a84c6ca2ae6b7d118dd35bf7)

* Remove old scripts [#251](https://github.com/openshift/baremetal-runtimecfg/pull/251)
* [OCPBUGS-14403](https://issues.redhat.com/browse/OCPBUGS-14403): Use machine-config state instead of comparing roles [#257](https://github.com/openshift/baremetal-runtimecfg/pull/257)
* [OCPBUGS-14936](https://issues.redhat.com/browse/OCPBUGS-14936): node: remove duplicate [#260](https://github.com/openshift/baremetal-runtimecfg/pull/260)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4ee88a5f054f86662c756da0193b14b3b72e42e0...b3f3077072df5897a84c6ca2ae6b7d118dd35bf7)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/2fd11272ef77febe027e597c8a65ee186c47b304)

* [WRKLDS-700](https://issues.redhat.com/browse/WRKLDS-700): bump(k8s) to v1.27.2 [#1420](https://github.com/openshift/oc/pull/1420)
* [OCPBUGS-15012](https://issues.redhat.com/browse/OCPBUGS-15012): oc image extract: idms-file flag map to IDMSFile field [#1464](https://github.com/openshift/oc/pull/1464)
* Correct incorrect command in observe command [#1419](https://github.com/openshift/oc/pull/1419)
* Clarify the use of the filter without keep-manifest-list [#1414](https://github.com/openshift/oc/pull/1414)
* [OCPBUGS-10612](https://issues.redhat.com/browse/OCPBUGS-10612): make registry auth prefence default to podman config locations [#1376](https://github.com/openshift/oc/pull/1376)
* handle the error case of node retrieval while waiting for reboot [#1482](https://github.com/openshift/oc/pull/1482)
* Fix the output of error prompt [#1433](https://github.com/openshift/oc/pull/1433)
* pkg/cli/admin/upgrade: Surface Recommended=Unknown more prominently [#1442](https://github.com/openshift/oc/pull/1442)
* pkg/cli/admin/upgrade: Add post-period to space to some error messages [#1330](https://github.com/openshift/oc/pull/1330)
* Wait for reboot [#1473](https://github.com/openshift/oc/pull/1473)
* tweak output format [#1471](https://github.com/openshift/oc/pull/1471)
* [OCPNODE-1580](https://issues.redhat.com/browse/OCPNODE-1580): Add --print-mirror-instructions to oc adm release mirror to allow idms instructions [#1341](https://github.com/openshift/oc/pull/1341)
* add reboot-nodes [#1468](https://github.com/openshift/oc/pull/1468)
* Trust check [#1469](https://github.com/openshift/oc/pull/1469)
* fix directories for consistency [#1467](https://github.com/openshift/oc/pull/1467)
* ocpcertificates: add ability to rotate MCS CA/cert [#1450](https://github.com/openshift/oc/pull/1450)
* [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc image extract: Introduce IDMS as alternative source [#1426](https://github.com/openshift/oc/pull/1426)
* pernodepod: percent works like this [#1463](https://github.com/openshift/oc/pull/1463)
* ocpcertificates: don't make assumptions on resources not to bring pip… [#1462](https://github.com/openshift/oc/pull/1462)
* allow running a command while the kubelet is off [#1459](https://github.com/openshift/oc/pull/1459)
* add command to create new bootstrap kubeconfig for kubelet [#1458](https://github.com/openshift/oc/pull/1458)
* ocpcertificates: fix handling resources by names explicitly + other cosmetic fixes [#1460](https://github.com/openshift/oc/pull/1460)
* tweaks needed for wait [#1455](https://github.com/openshift/oc/pull/1455)
* Add a command to remove older trust [#1447](https://github.com/openshift/oc/pull/1447)
* create command to create new adminkubeconfig [#1452](https://github.com/openshift/oc/pull/1452)
* add a command to copy content to every node [#1454](https://github.com/openshift/oc/pull/1454)
* Minor updates to CLI help text [#1453](https://github.com/openshift/oc/pull/1453)
* add command for regenerating OCP leaf certs [#1443](https://github.com/openshift/oc/pull/1443)
* add a new command to wait for all clusteroperators to go stable [#1444](https://github.com/openshift/oc/pull/1444)
* [Full changelog](https://github.com/openshift/oc/compare/4e136762ec0ea7216f04665eb983ca30633b1f9f...2fd11272ef77febe027e597c8a65ee186c47b304)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0c629a5d0fcd1065ad6bda6a8d03976090178af4)

* CCO-366 Add ability to detect AWS STS and behave accordingly [#542](https://github.com/openshift/cloud-credential-operator/pull/542)
* Implement ccoctl command to create infrastructure required for Azure workload identity [#523](https://github.com/openshift/cloud-credential-operator/pull/523)
* [PORTENABLE-526](https://issues.redhat.com/browse/PORTENABLE-526): operator: use a partial metadata watch for Namespaces [#546](https://github.com/openshift/cloud-credential-operator/pull/546)
* manager: filter the cache of configmaps [#544](https://github.com/openshift/cloud-credential-operator/pull/544)
* Bump to go 1.20 in go.mod [#536](https://github.com/openshift/cloud-credential-operator/pull/536)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/38e7f96bf73036924abcb1352222c17704e4b2e0...0c629a5d0fcd1065ad6bda6a8d03976090178af4)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/dce5b06a7a3291674a96439b35fda9c96f61369e)

* [CCO-356](https://issues.redhat.com/browse/CCO-356): Add support for Azure workload identity tokens [#102](https://github.com/openshift/cloud-network-config-controller/pull/102)
* [SDN-3902](https://issues.redhat.com/browse/SDN-3902): Maintenance [#111](https://github.com/openshift/cloud-network-config-controller/pull/111)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8084268618615cc8066a3842d9fd9fe356f7418b...dce5b06a7a3291674a96439b35fda9c96f61369e)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/39a1e263fbcdc329790c9161e6bf40067190b507)

* [AUTH-356](https://issues.redhat.com/browse/AUTH-356): Add openshift-cli-client OAuth Client [#606](https://github.com/openshift/cluster-authentication-operator/pull/606)
* Correctly link oauth apiserver ServiceMonitor with its Service [#616](https://github.com/openshift/cluster-authentication-operator/pull/616)
* [OCPBUGS-2765](https://issues.redhat.com/browse/OCPBUGS-2765): Library go bump [#613](https://github.com/openshift/cluster-authentication-operator/pull/613)
* [OCPBUGS-14010](https://issues.redhat.com/browse/OCPBUGS-14010): increase timeout for probes [#612](https://github.com/openshift/cluster-authentication-operator/pull/612)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/1b2c022034879e09e324bbdc50b84b78ce8de4ee...39a1e263fbcdc329790c9161e6bf40067190b507)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/970eb9f35fb1ad49e6cdb761643728e477e7750a)

* Updating vertical-pod-autoscaler images to be consistent with ART [#253](https://github.com/openshift/kubernetes-autoscaler/pull/253)
* OCPCLOUD-2060 Merge https://github.com/kubernetes/autoscaler:master (d3ec0c4) into master [#256](https://github.com/openshift/kubernetes-autoscaler/pull/256)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4e7d1eccf895b1af1cd6d79691c6772e602a97af...970eb9f35fb1ad49e6cdb761643728e477e7750a)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/8234904054f193e0a62e0c0231b4d1aaf3ade660)

* CNF-5642 make operator optional [#269](https://github.com/openshift/cluster-autoscaler-operator/pull/269)
* [OCPCLOUD-2061](https://issues.redhat.com/browse/OCPCLOUD-2061): Rebase dependencies to k8s 1.27 [#274](https://github.com/openshift/cluster-autoscaler-operator/pull/274)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/f7f168cc5145da8b8c781122a39582e1a2ad39ce...8234904054f193e0a62e0c0231b4d1aaf3ade660)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/c52ad7420eb77390ac9a4d7bbf53030a5ef04941)

* [OCPBUGS-15155](https://issues.redhat.com/browse/OCPBUGS-15155): Limit role binding to openshift-machine-api namespace [#345](https://github.com/openshift/cluster-baremetal-operator/pull/345)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/b5d4be66e885678c7082b37035170f8e785ec67b...c52ad7420eb77390ac9a4d7bbf53030a5ef04941)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/f4dcfa5814458069881e1f6689a711de72fa2c70)

* Make openshift/e2e-tests.sh executable [#178](https://github.com/openshift/cluster-api/pull/178)
* [OCPCLOUD-2121](https://issues.redhat.com/browse/OCPCLOUD-2121): Add openshift/e2e-tests for CAPI E2E testing [#177](https://github.com/openshift/cluster-api/pull/177)
* [Full changelog](https://github.com/openshift/cluster-api/compare/f42917da9efcfcbe70d0eb5afa3baf304a53af45...f4dcfa5814458069881e1f6689a711de72fa2c70)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/1ce5e87339458fa239c5522e4697f93efcd11e57)

* [SPLAT-1084](https://issues.redhat.com/browse/SPLAT-1084): Remove IPAM CRD installation filter [#117](https://github.com/openshift/cluster-capi-operator/pull/117)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/20c3f2098955b38a0543bec8b369aadca0475ea9...1ce5e87339458fa239c5522e4697f93efcd11e57)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/785ce6738296d66dcf452078337b1c800f0a7fde)

* [CCO-324](https://issues.redhat.com/browse/CCO-324), [CCO-325](https://issues.redhat.com/browse/CCO-325): add support for workload identity [#245](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/245)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Re-vendor api and library-go for external platform support [#253](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/253)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/9f8abb9828e88a5af4b5f42f469e927e1dbe8f0d...785ce6738296d66dcf452078337b1c800f0a7fde)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/2618cffdf0dd7bf958daecd8dc779e626c4c6485)

* Enable feature gate for externalCertificate on Route API [#326](https://github.com/openshift/cluster-config-operator/pull/326)
* stomp the latencysensitive featureset for equivalent default [#324](https://github.com/openshift/cluster-config-operator/pull/324)
* [WRKLDS-757](https://issues.redhat.com/browse/WRKLDS-757): Sync with openshift/api to drop MatchLabelKeysInPodTopologySpread from TechPreviewNoUpgrade [#322](https://github.com/openshift/cluster-config-operator/pull/322)
* [SPLAT-1099](https://issues.redhat.com/browse/SPLAT-1099): bump openshift/api for vSphere static IP feature gate and platform spec [#323](https://github.com/openshift/cluster-config-operator/pull/323)
* remove dead flag for file [#309](https://github.com/openshift/cluster-config-operator/pull/309)
* Changes to move to api@2d36f53 [#321](https://github.com/openshift/cluster-config-operator/pull/321)
* [OCPBUGS-12767](https://issues.redhat.com/browse/OCPBUGS-12767): Add CustomNoUpgrade CRD versions to payload [#320](https://github.com/openshift/cluster-config-operator/pull/320)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Re-vendor api to support external platform [#306](https://github.com/openshift/cluster-config-operator/pull/306)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/297b4724681230fbd3e25feecca224c0566e4f9c...2618cffdf0dd7bf958daecd8dc779e626c4c6485)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/74ceaced4ce9b799ed9a32107ec93c8d718ec6d9)

* [OSASINFRA-3133](https://issues.redhat.com/browse/OSASINFRA-3133): OpenStack support [#195](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/195)
* [OCPBUGS-15338](https://issues.redhat.com/browse/OCPBUGS-15338): Fix flaking machine mapping testing [#220](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/220)
* add capability annotation [#205](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/205)
* [OCPBUGS-15308](https://issues.redhat.com/browse/OCPBUGS-15308): Fix lint issue [#221](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/221)
* docs: Off-by-one error [#201](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/201)
* [OCPCLOUD-2016](https://issues.redhat.com/browse/OCPCLOUD-2016): Surface cpms vs machine diff [#180](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/180)
* [OCPBUGS-13205](https://issues.redhat.com/browse/OCPBUGS-13205): Check for unknown fields in the provider spec [#214](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/214)
* Add Nutanix support for CPMSO [#200](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/200)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/cc291dc58617f227407e86452d7162bb6b3406ea...74ceaced4ce9b799ed9a32107ec93c8d718ec6d9)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/47be7b57fbc7eecdd91bc3960f6bc4d7d0304133)

* [OCPBUGS-14395](https://issues.redhat.com/browse/OCPBUGS-14395): Set controller-runtime logger to a null logger [#369](https://github.com/openshift/cluster-dns-operator/pull/369)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/5c85a318807b790705c16816f5022d0cc31148ba...47be7b57fbc7eecdd91bc3960f6bc4d7d0304133)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/c7cc2709d2d5b81f55a72a8ddd839ef0115eac96)

* [OCPBUGS-15256](https://issues.redhat.com/browse/OCPBUGS-15256): Sync openshift/api to reduce installerpod configmap based file permissions to 0600 [#1065](https://github.com/openshift/cluster-etcd-operator/pull/1065)
* Limit etcdDatabaseHighFragmentationRatio to 100MB+ [#1063](https://github.com/openshift/cluster-etcd-operator/pull/1063)
* manifests: bump loglevel of operator to normal [#1060](https://github.com/openshift/cluster-etcd-operator/pull/1060)
* Remove unused cli docker image [#1053](https://github.com/openshift/cluster-etcd-operator/pull/1053)
* [OCPBUGS-14255](https://issues.redhat.com/browse/OCPBUGS-14255): Add Controller health to CEO liveness probe [#1049](https://github.com/openshift/cluster-etcd-operator/pull/1049)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/d7d5425f8ed55721bb57adf1867dd2e31989c19c...c7cc2709d2d5b81f55a72a8ddd839ef0115eac96)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/f81d540aba0f0486f8c4d13f3034c3c5303c319f)

* .github/dependabot.yml: group certain dependencies [#865](https://github.com/openshift/cluster-image-registry-operator/pull/865)
* [IR-389](https://issues.redhat.com/browse/IR-389): bump aws-sdk-go [#860](https://github.com/openshift/cluster-image-registry-operator/pull/860)
* .github: configure dependabot [#861](https://github.com/openshift/cluster-image-registry-operator/pull/861)
* [IR-369](https://issues.redhat.com/browse/IR-369), [IR-370](https://issues.redhat.com/browse/IR-370): support Azure workload identity [#857](https://github.com/openshift/cluster-image-registry-operator/pull/857)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/57078a82ec5e0ad75fc54f1a4e28cecf6906f465...f81d540aba0f0486f8c4d13f3034c3c5303c319f)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/4c92a6d1ee80b6b120dd750855a40145a530153c)

* [OCPBUGS-15100](https://issues.redhat.com/browse/OCPBUGS-15100): Fix previous attempt of adding a missing trailing dot to hostname [#956](https://github.com/openshift/cluster-ingress-operator/pull/956)
* [OCPBUGS-14396](https://issues.redhat.com/browse/OCPBUGS-14396): Set controller-runtime logger to a null logger for E2E [#946](https://github.com/openshift/cluster-ingress-operator/pull/946)
* [OCPBUGS-14998](https://issues.redhat.com/browse/OCPBUGS-14998): Only use RoleARN for Route53 API [#951](https://github.com/openshift/cluster-ingress-operator/pull/951)
* [OCPBUGS-15100](https://issues.redhat.com/browse/OCPBUGS-15100): Create valid DNS names for Gateway API on GCP [#949](https://github.com/openshift/cluster-ingress-operator/pull/949)
* [OCPBUGS-13106](https://issues.redhat.com/browse/OCPBUGS-13106): Add ingress controller status logging on waitForIngressControllerCondition [#924](https://github.com/openshift/cluster-ingress-operator/pull/924)
* [OCPBUGS-13190](https://issues.redhat.com/browse/OCPBUGS-13190): Avoid spurious updates for internalTrafficPolicy [#927](https://github.com/openshift/cluster-ingress-operator/pull/927)
* [OCPBUGS-13810](https://issues.redhat.com/browse/OCPBUGS-13810): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#944](https://github.com/openshift/cluster-ingress-operator/pull/944)
* [NE-1294](https://issues.redhat.com/browse/NE-1294): Add support for AWS shared VPC in another account [#928](https://github.com/openshift/cluster-ingress-operator/pull/928)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/e068d04e01cca70be8efb0a595188835525b4792...4c92a6d1ee80b6b120dd750855a40145a530153c)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/8b642494e3bffc365cb24383b416dc0f530547d9)

* [OCPBUGS-13946](https://issues.redhat.com/browse/OCPBUGS-13946): do not use one second timeout when asserting a webhook connection [#1510](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1510)
* [OCPBUGS-14008](https://issues.redhat.com/browse/OCPBUGS-14008): Enable "send-retry-after-while-not-ready-once" on SNO [#1500](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1500)
* update probes for best practices and consistency [#1516](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1516)
* api_performance_dashboard: show apiserver_longrunning_requests metric [#1518](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1518)
* allow greater timeout for etcd health check [#1517](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1517)
* api_performance_dashboard: show apiserver_request_total instead of apiserver_dropped_requests [#1520](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1520)
* [OCPBUGS-8404](https://issues.redhat.com/browse/OCPBUGS-8404): pkg/operator/configobserver: check that the serving certificate refer… [#1482](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1482)
* [OCPBUGS-3986](https://issues.redhat.com/browse/OCPBUGS-3986): dashboard: use recording rules for most metrics [#1484](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1484)
* [OCPBUGS-14940](https://issues.redhat.com/browse/OCPBUGS-14940): api_performance_dashboard: show apiserver_longrunning_requests metric [#1511](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1511)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/a1de1b1cc85ce2d41e918d14534e5187b981819b...8b642494e3bffc365cb24383b416dc0f530547d9)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/f5cfff988db4dc22898f58484141720d2dd93a2c)

* [OCPBUGS-12581](https://issues.redhat.com/browse/OCPBUGS-12581), [OCPBUGS-13093](https://issues.redhat.com/browse/OCPBUGS-13093): Merge https://github.com/kubernetes-sigs/cluster-api-operator:v0.2.0 (d807992) into main [#17](https://github.com/openshift/cluster-api-operator/pull/17)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/3ffba2304d16acb2c7215199e8ab31e355b0fa5a...f5cfff988db4dc22898f58484141720d2dd93a2c)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/5f49f59c88c963d97dd90643e7c9fb7ef1820d0c)

* [OCPBUGS-15256](https://issues.redhat.com/browse/OCPBUGS-15256): Sync openshift/api to reduce installerpod configmap based file permissions to 0600 [#740](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/740)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Re-vendor api and library-go for external platform support [#736](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/736)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/1e15498f434994aa6676c146638b886e08c93aa5...5f49f59c88c963d97dd90643e7c9fb7ef1820d0c)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/db92b6d9fcf410aa24efc4a70c4114925bb7b797)

* [OCPBUGS-14052](https://issues.redhat.com/browse/OCPBUGS-14052): KubeSchedulerDown: set runbook_url annotation [#489](https://github.com/openshift/cluster-kube-scheduler-operator/pull/489)
* [OCPBUGS-15256](https://issues.redhat.com/browse/OCPBUGS-15256): Sync openshift/api to reduce installerpod configmap based file permissions to 0600 [#488](https://github.com/openshift/cluster-kube-scheduler-operator/pull/488)
* remove loglevel in deploy [#487](https://github.com/openshift/cluster-kube-scheduler-operator/pull/487)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/f42458c923d20576d88decb5495888c410ac6051...db92b6d9fcf410aa24efc4a70c4114925bb7b797)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/918904f60934511cd84be9eeccb0e3a237ed9363)

* Fix operator doc in README [#90](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/90)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/dbe2395070ae37dcb826fb5f3179eb4cb6df560b...918904f60934511cd84be9eeccb0e3a237ed9363)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/2183a4dff69f6208e5b171d832fc8b3d09177043)

* [OCPCLOUD-2044](https://issues.redhat.com/browse/OCPCLOUD-2044): Update to Kubernetes 1.27 deps [#195](https://github.com/openshift/cluster-machine-approver/pull/195)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/0be95abfa236f1d8868b36ca997ee827db111ab5...2183a4dff69f6208e5b171d832fc8b3d09177043)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0e8c0d93a678f1539b92dac81d53f31289ead29e)

* [MON-3222](https://issues.redhat.com/browse/MON-3222): Make netdev/netclass interfaces configurable [#1963](https://github.com/openshift/cluster-monitoring-operator/pull/1963)
* e2e-tests: ensure pod assertions find at least one pod [#2028](https://github.com/openshift/cluster-monitoring-operator/pull/2028)
* test/e2e/framework: remove unused function [#2020](https://github.com/openshift/cluster-monitoring-operator/pull/2020)
* [OCPBUGS-15440](https://issues.redhat.com/browse/OCPBUGS-15440): fix CMO to apply console-plugin pod.spec config [#2018](https://github.com/openshift/cluster-monitoring-operator/pull/2018)
* chore: update dependencies [#2013](https://github.com/openshift/cluster-monitoring-operator/pull/2013)
* [OCPBUGS-14922](https://issues.redhat.com/browse/OCPBUGS-14922): skip console-plugin installation if console CO is absent [#2011](https://github.com/openshift/cluster-monitoring-operator/pull/2011)
* [OCPBUGS-12714](https://issues.redhat.com/browse/OCPBUGS-12714): turn on netlink mode of netclass collector for node exporter [#2015](https://github.com/openshift/cluster-monitoring-operator/pull/2015)
* [MON-3249](https://issues.redhat.com/browse/MON-3249): Update telemeter-client to allow TLS through rbac proxy [#2005](https://github.com/openshift/cluster-monitoring-operator/pull/2005)
* Synchronize versions of the downstream components [#2024](https://github.com/openshift/cluster-monitoring-operator/pull/2024)
* [OCPBUGS-13153](https://issues.redhat.com/browse/OCPBUGS-13153): Limit the value of GOMAXPROCS on node-exporter. [#1996](https://github.com/openshift/cluster-monitoring-operator/pull/1996)
* hack/local-cmo: show the correct logged-in user [#2019](https://github.com/openshift/cluster-monitoring-operator/pull/2019)
* [MON-3253](https://issues.redhat.com/browse/MON-3253): refactor local-cmo.sh to use CMO SA by default [#2010](https://github.com/openshift/cluster-monitoring-operator/pull/2010)
* test/e2e: validate CMO and UWM configs [#2006](https://github.com/openshift/cluster-monitoring-operator/pull/2006)
* pkg/operator: reduce duplication in CSR controllers [#2007](https://github.com/openshift/cluster-monitoring-operator/pull/2007)
* Synchronize versions of the downstream components [#2009](https://github.com/openshift/cluster-monitoring-operator/pull/2009)
* [OCPBUGS-15210](https://issues.redhat.com/browse/OCPBUGS-15210): manifest: rename TP roleBinding to cluster-monitoring-operator-alert-… [#2008](https://github.com/openshift/cluster-monitoring-operator/pull/2008)
* [MON-3127](https://issues.redhat.com/browse/MON-3127): add nodeExporter.collectors.ksmd settings. [#1931](https://github.com/openshift/cluster-monitoring-operator/pull/1931)
* Synchronize versions of the downstream components [#2004](https://github.com/openshift/cluster-monitoring-operator/pull/2004)
* [MON-3229](https://issues.redhat.com/browse/MON-3229): Remove the dependency on the apiserver auth [#1904](https://github.com/openshift/cluster-monitoring-operator/pull/1904)
* Synchronize versions of the downstream components [#2003](https://github.com/openshift/cluster-monitoring-operator/pull/2003)
* Fix link metrics [#1999](https://github.com/openshift/cluster-monitoring-operator/pull/1999)
* [OCPBUGS-11958](https://issues.redhat.com/browse/OCPBUGS-11958): Add the trusted CA bundle in UWM Prometheus pods [#1970](https://github.com/openshift/cluster-monitoring-operator/pull/1970)
* [OCPBUGS-14123](https://issues.redhat.com/browse/OCPBUGS-14123): make TestBodySizeLimit less flaky [#1991](https://github.com/openshift/cluster-monitoring-operator/pull/1991)
* Update OWNERS list [#1951](https://github.com/openshift/cluster-monitoring-operator/pull/1951)
* [MON-3113](https://issues.redhat.com/browse/MON-3113): add nodeExporter.collectors.mountstats settings. [#1936](https://github.com/openshift/cluster-monitoring-operator/pull/1936)
* [OCPBUGS-12903](https://issues.redhat.com/browse/OCPBUGS-12903): Fix console metrics doc typo [#1997](https://github.com/openshift/cluster-monitoring-operator/pull/1997)
* [OCPBUGS-14816](https://issues.redhat.com/browse/OCPBUGS-14816): Add misspell target in Makefile [#1994](https://github.com/openshift/cluster-monitoring-operator/pull/1994)
* [OCPBUGS-14887](https://issues.redhat.com/browse/OCPBUGS-14887): [bot] Synchronize versions of the downstream components [#1995](https://github.com/openshift/cluster-monitoring-operator/pull/1995)
* [MON-2967](https://issues.redhat.com/browse/MON-2967): CMO deploys monitoring console-plugin [#1890](https://github.com/openshift/cluster-monitoring-operator/pull/1890)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/076da3ba2d27edb00765cff6a51b0b7a2785ce03...0e8c0d93a678f1539b92dac81d53f31289ead29e)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/64ab110f331b37f862eefe9d3b99c61445b87890)

* [OCPBUGS-15282](https://issues.redhat.com/browse/OCPBUGS-15282): Add release version annotation to whereabouts-reconciler [#1851](https://github.com/openshift/cluster-network-operator/pull/1851)
* [CCO-356](https://issues.redhat.com/browse/CCO-356): Add Infrastructures permission to CNCC cluster role [#1843](https://github.com/openshift/cluster-network-operator/pull/1843)
* Add multi-networkpolicies support for OVN [#1796](https://github.com/openshift/cluster-network-operator/pull/1796)
* Add support for AdminPolicyBasedExternalRoute CRD and controller's RBAC [#1765](https://github.com/openshift/cluster-network-operator/pull/1765)
* [OCPBUGS-15138](https://issues.redhat.com/browse/OCPBUGS-15138): Add kubernetes.io/os nodeSelector to wherebouts reconciler DS [#1841](https://github.com/openshift/cluster-network-operator/pull/1841)
* [OCPBUGS-14988](https://issues.redhat.com/browse/OCPBUGS-14988), [SDN-3901](https://issues.redhat.com/browse/SDN-3901): Rebase to kube 1.27 [#1826](https://github.com/openshift/cluster-network-operator/pull/1826)
* [CCO-358](https://issues.redhat.com/browse/CCO-358): Manifest changes necessary to support Azure Workload Identity [#1755](https://github.com/openshift/cluster-network-operator/pull/1755)
* [OCPBUGS-14714](https://issues.redhat.com/browse/OCPBUGS-14714): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1835](https://github.com/openshift/cluster-network-operator/pull/1835)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6cf62caf70d0a5905511b1f85e204bad7e57903c...64ab110f331b37f862eefe9d3b99c61445b87890)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/287fdce04769dc2c7891305021f1b97e09eff67b)

* e2e: overhaul Performance-Addon-Operator tests (#590) [#590](https://github.com/openshift/cluster-node-tuning-operator/pull/590)
* e2e: latency testing: increase the expected threshold (#706) [#706](https://github.com/openshift/cluster-node-tuning-operator/pull/706)
* e2e: perf-prof: disable truncating gomega output (#702) [#702](https://github.com/openshift/cluster-node-tuning-operator/pull/702)
* Configure OVS for dynamic cpu pinning (#559) [#559](https://github.com/openshift/cluster-node-tuning-operator/pull/559)
* [OCPVE-382](https://issues.redhat.com/browse/OCPVE-382): fix: add default state for crio config (#700) [#700](https://github.com/openshift/cluster-node-tuning-operator/pull/700)
* e2e: devmgr: fine tune kubelet restart test (#701) [#701](https://github.com/openshift/cluster-node-tuning-operator/pull/701)
* e2e: RPS: fix expected cpu set (#703) [#703](https://github.com/openshift/cluster-node-tuning-operator/pull/703)
* Switch to rslave/HostToContainer volume mount propagation (#692) [#692](https://github.com/openshift/cluster-node-tuning-operator/pull/692)
* Do not rollback settings on TuneD exit (#699) [#699](https://github.com/openshift/cluster-node-tuning-operator/pull/699)
* e2e: reboot: add kubelet restart test (#697) [#697](https://github.com/openshift/cluster-node-tuning-operator/pull/697)
* remove conditional skip (#690) [#690](https://github.com/openshift/cluster-node-tuning-operator/pull/690)
* e2e: memorymanager fix: check the hugepage size condition (#693) [#693](https://github.com/openshift/cluster-node-tuning-operator/pull/693)
* Use RHEL9 as a base (#665) [#665](https://github.com/openshift/cluster-node-tuning-operator/pull/665)
* Expose TuneD socket to host. (#651) [#651](https://github.com/openshift/cluster-node-tuning-operator/pull/651)
* E2E: Use appropriate device path for rpsmask test (#691) [#691](https://github.com/openshift/cluster-node-tuning-operator/pull/691)
* chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml` (#628) [#628](https://github.com/openshift/cluster-node-tuning-operator/pull/628)
* test: perfprof: devices: fix default test image (#672) [#672](https://github.com/openshift/cluster-node-tuning-operator/pull/672)
* e2e: verify latency tests run with LATENCY_TEST_DELAY>120 (#662) [#662](https://github.com/openshift/cluster-node-tuning-operator/pull/662)
* E2E: Add memory manager sanity test case (#573) [#573](https://github.com/openshift/cluster-node-tuning-operator/pull/573)
* modify owners (#634) [#634](https://github.com/openshift/cluster-node-tuning-operator/pull/634)
* Add minLength restriction to Tuned CR (#689) [#689](https://github.com/openshift/cluster-node-tuning-operator/pull/689)
* [OCPBUGS-14934](https://issues.redhat.com/browse/OCPBUGS-14934): consistent use of ginkgo flags in Makefile (#682) [#682](https://github.com/openshift/cluster-node-tuning-operator/pull/682)
* [OCPBUGS-14622](https://issues.redhat.com/browse/OCPBUGS-14622): Do not fail creating cgroups if they exist already (#683) [#683](https://github.com/openshift/cluster-node-tuning-operator/pull/683)
* [OCPBUGS-14193](https://issues.redhat.com/browse/OCPBUGS-14193): pao e2e: Split e2e PAO update lane to more lanes (#631) [#631](https://github.com/openshift/cluster-node-tuning-operator/pull/631)
* [OCPBUGS-4194](https://issues.redhat.com/browse/OCPBUGS-4194): rps: use default rps mask kernel API (#650) [#650](https://github.com/openshift/cluster-node-tuning-operator/pull/650)
* [OCPBUGS-14756](https://issues.redhat.com/browse/OCPBUGS-14756): [test] [e2e] Check ci lanes are executing the right test suites (#679) [#679](https://github.com/openshift/cluster-node-tuning-operator/pull/679)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3d5cdf5a6796bc917cb3777d3ac189c1d8f10816...287fdce04769dc2c7891305021f1b97e09eff67b)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/5e3596a63b1bd061d2647fc6d75a975f1d738589)

* allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd [#540](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/540)
* Add AES-GCM encryption tests [#539](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/539)
* [OCPBUGS-14010](https://issues.redhat.com/browse/OCPBUGS-14010): increase timeout for probes [#536](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/536)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/a606683653adfb6fae143344999e6c4165feadc2...5e3596a63b1bd061d2647fc6d75a975f1d738589)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/bab7be17127e3e8a661991d78aecd7d5a0542cec)

* [OCPBUGS-13926](https://issues.redhat.com/browse/OCPBUGS-13926): change the operator log level to default normal in the deployment [#289](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/289)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/005db16dd2e3847c0dc76d1a91314c51a55f99b4...bab7be17127e3e8a661991d78aecd7d5a0542cec)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/ab03ebedd1b43342bf3ddd53cb113cf654f14d6d)

* [OCPBUGS-13696](https://issues.redhat.com/browse/OCPBUGS-13696): Warn about CBT enabled VMs via vsphere-problem-detector [#371](https://github.com/openshift/cluster-storage-operator/pull/371)
* [OCPBUGS-14053](https://issues.redhat.com/browse/OCPBUGS-14053): decrease severity for MultipleDefaultStorageClasses alert [#382](https://github.com/openshift/cluster-storage-operator/pull/382)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Publish ClusterRoles for csi driver sidecars [#379](https://github.com/openshift/cluster-storage-operator/pull/379)
* [STOR-1167](https://issues.redhat.com/browse/STOR-1167): Add permissions needed by fast snapshots to AWS CSI driver [#369](https://github.com/openshift/cluster-storage-operator/pull/369)
* [CCO-319](https://issues.redhat.com/browse/CCO-319): Add serviceAccountNames to azure-disk and azure-file credentials [#364](https://github.com/openshift/cluster-storage-operator/pull/364)
* [OCPBUGS-13187](https://issues.redhat.com/browse/OCPBUGS-13187): Make vsphere-problem-detector alerts configurable [#380](https://github.com/openshift/cluster-storage-operator/pull/380)
* [CCO-324](https://issues.redhat.com/browse/CCO-324), [CCO-325](https://issues.redhat.com/browse/CCO-325): pass version to azure operators [#372](https://github.com/openshift/cluster-storage-operator/pull/372)
* [OCPBUGS-13914](https://issues.redhat.com/browse/OCPBUGS-13914): allow removal of vsphereStorageDriver field in 4.14 [#378](https://github.com/openshift/cluster-storage-operator/pull/378)
* [STOR-1334](https://issues.redhat.com/browse/STOR-1334): update storage operator to read featuregates from API [#376](https://github.com/openshift/cluster-storage-operator/pull/376)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/86fc510add285e0fc8257efcf70065f5d692ca0b...ab03ebedd1b43342bf3ddd53cb113cf654f14d6d)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/216683cfc09eebefd87bed66849d52b6a357c5ab)

* Dockerfile: bump to 1.19 and use public UBI pullspec [#944](https://github.com/openshift/cluster-version-operator/pull/944)
* pkg/payload: De-noise 'excluding ...' logs [#945](https://github.com/openshift/cluster-version-operator/pull/945)
* bump api version to add new capability [#941](https://github.com/openshift/cluster-version-operator/pull/941)
* pkg/cvo/metrics: Doc from_version semantics for cluster_version{type="completed"} [#929](https://github.com/openshift/cluster-version-operator/pull/929)
* Code cleanups for golangci-lint failures [#942](https://github.com/openshift/cluster-version-operator/pull/942)
* [OTA-559](https://issues.redhat.com/browse/OTA-559): Migrate to (*Manifest).Include(..., overrides) [#934](https://github.com/openshift/cluster-version-operator/pull/934)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/f74d114b1b2843f045fdcdc63ca63fa4cf07da75...216683cfc09eebefd87bed66849d52b6a357c5ab)


### [console](https://github.com/openshift/console/tree/3c155ac66e52e664eb49513bda842258e722ea7f)

* [OCPBUGS-15427](https://issues.redhat.com/browse/OCPBUGS-15427): Remove access review check for PipelineResource from Pipeline section [#12964](https://github.com/openshift/console/pull/12964)
* [ODC-7325](https://issues.redhat.com/browse/ODC-7325): Improve BuildConfig and Shipwright Build list pages [#12910](https://github.com/openshift/console/pull/12910)
* [ODC-7340](https://issues.redhat.com/browse/ODC-7340): Remove Shipwright Tech Preview badges [#12960](https://github.com/openshift/console/pull/12960)
* [OCPBUGS-14548](https://issues.redhat.com/browse/OCPBUGS-14548): update pipelines doc links [#12890](https://github.com/openshift/console/pull/12890)
* [OCPBUGS-15572](https://issues.redhat.com/browse/OCPBUGS-15572): Fix bug where the install operator update approval radio button does … [#12959](https://github.com/openshift/console/pull/12959)
* [OCPBUGS-14959](https://issues.redhat.com/browse/OCPBUGS-14959): Error for DuplicateClusterRoleBinding and Edit ClusterRoleBinding subject in RHOCP4 Web Console [#12939](https://github.com/openshift/console/pull/12939)
* [OCPBUGS-14665](https://issues.redhat.com/browse/OCPBUGS-14665), [OCPBUGS-14874](https://issues.redhat.com/browse/OCPBUGS-14874), [OCPBUGS-14875](https://issues.redhat.com/browse/OCPBUGS-14875): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12929](https://github.com/openshift/console/pull/12929)
* [OU-198](https://issues.redhat.com/browse/OU-198): Revert "Disable broken monitoring-tests" [#12943](https://github.com/openshift/console/pull/12943)
* [ODC-7337](https://issues.redhat.com/browse/ODC-7337): Skip wait for authentication operator to start progressing when the secret already exists [#12884](https://github.com/openshift/console/pull/12884)
* [OCPBUGS-497](https://issues.redhat.com/browse/OCPBUGS-497): frontend: fix kube-apiserver availability query [#12928](https://github.com/openshift/console/pull/12928)
* [OCPBUGS-15060](https://issues.redhat.com/browse/OCPBUGS-15060): "Duplicate RoleBinding" leads to "Unsupported value" error [#12921](https://github.com/openshift/console/pull/12921)
* [OCPBUGS-7794](https://issues.redhat.com/browse/OCPBUGS-7794): Image pull secret creation form doesn't re-enable Create button once it is disabled [#12609](https://github.com/openshift/console/pull/12609)
* [CONSOLE-3616](https://issues.redhat.com/browse/CONSOLE-3616): Revert multicluster server flags [#12782](https://github.com/openshift/console/pull/12782)
* [OCPBUGS-15299](https://issues.redhat.com/browse/OCPBUGS-15299): Create Serverless Function Form is Broken [#12926](https://github.com/openshift/console/pull/12926)
* [OCPBUGS-13120](https://issues.redhat.com/browse/OCPBUGS-13120): Serverless functions UI warning is misleading [#12923](https://github.com/openshift/console/pull/12923)
* [ODC-7329](https://issues.redhat.com/browse/ODC-7329): Subsequent PipelineRuns take initial PipelineRun name into account [#12913](https://github.com/openshift/console/pull/12913)
* [CONSOLE-3612](https://issues.redhat.com/browse/CONSOLE-3612): User is warned when cluster is in STS mode [#12777](https://github.com/openshift/console/pull/12777)
* [ODC-7322](https://issues.redhat.com/browse/ODC-7322): Implement a proxy to hit the Artifacthub.io API end point [#12905](https://github.com/openshift/console/pull/12905)
* [MGMT-15023](https://issues.redhat.com/browse/MGMT-15023): Add help text to vCenter cluster field [#12912](https://github.com/openshift/console/pull/12912)
* [OCPBUGS-11464](https://issues.redhat.com/browse/OCPBUGS-11464): Availability requirement update is initially disabled … [#12918](https://github.com/openshift/console/pull/12918)
* [OCPBUGS-15135](https://issues.redhat.com/browse/OCPBUGS-15135): Make knative routes copyable similar to openshift routes [#12908](https://github.com/openshift/console/pull/12908)
* [OCPBUGS-14909](https://issues.redhat.com/browse/OCPBUGS-14909): Disabling web-terminal tests in CI [#12892](https://github.com/openshift/console/pull/12892)
* [OCPBUGS-14015](https://issues.redhat.com/browse/OCPBUGS-14015): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12914](https://github.com/openshift/console/pull/12914)
* [CONSOLE-3372](https://issues.redhat.com/browse/CONSOLE-3372), [OCPBUGS-13648](https://issues.redhat.com/browse/OCPBUGS-13648), [OCPBUGS-13833](https://issues.redhat.com/browse/OCPBUGS-13833): Console supports installing non-latest Operator versions [#12743](https://github.com/openshift/console/pull/12743)
* [OCPBUGS-7036](https://issues.redhat.com/browse/OCPBUGS-7036): Add Git Repository (PAC) doesn't setup GitLab and Bitbucket configuration correct [#12593](https://github.com/openshift/console/pull/12593)
* chore(i18n): update translations: Completed-7034-OCP 4.13/Master Branch UI Localization- Sprint 231 [#12695](https://github.com/openshift/console/pull/12695)
* [OCPBUGS-14354](https://issues.redhat.com/browse/OCPBUGS-14354): e2e: Enable Pipeline tests [#12911](https://github.com/openshift/console/pull/12911)
* [OCPBUGS-14915](https://issues.redhat.com/browse/OCPBUGS-14915): Remove entries from the menu that are now added by `monitoring-plugin` [#12893](https://github.com/openshift/console/pull/12893)
* [ODC-7316](https://issues.redhat.com/browse/ODC-7316): Add discoverability of the IDE extensions from Create Serverless form [#12846](https://github.com/openshift/console/pull/12846)
* [OCPBUGS-14419](https://issues.redhat.com/browse/OCPBUGS-14419): Remove tech preview badge from Pipeline repository pages [#12888](https://github.com/openshift/console/pull/12888)
* [ODC-7326](https://issues.redhat.com/browse/ODC-7326): Align Build, BuildRun and PipelineRun details page [#12898](https://github.com/openshift/console/pull/12898)
* [OCPBUGS-14836](https://issues.redhat.com/browse/OCPBUGS-14836): Updated BuildConfig and Shipwright Build lists shows runs from another namespace [#12896](https://github.com/openshift/console/pull/12896)
* [OCPBUGS-14890](https://issues.redhat.com/browse/OCPBUGS-14890): Missing 'View details' link for several servicemonitors.spec.endpoints fields in YAML sidebar [#12895](https://github.com/openshift/console/pull/12895)
* [OCPBUGS-14002](https://issues.redhat.com/browse/OCPBUGS-14002): Correct the alignment of yaml toolbar links [#12894](https://github.com/openshift/console/pull/12894)
* [OCPBUGS-14660](https://issues.redhat.com/browse/OCPBUGS-14660): Helm Repository "Edit" button results in 404 [#12891](https://github.com/openshift/console/pull/12891)
* [OCPBUGS-14716](https://issues.redhat.com/browse/OCPBUGS-14716): add ROSA branding option [#12889](https://github.com/openshift/console/pull/12889)
* [OCPBUGS-13208](https://issues.redhat.com/browse/OCPBUGS-13208): Fix PVC metrics query [#12867](https://github.com/openshift/console/pull/12867)
* [OCPBUGS-12897](https://issues.redhat.com/browse/OCPBUGS-12897): Knative Route Details Page should show the URL of the route as it is shown in the Openshift Routes Details page [#12853](https://github.com/openshift/console/pull/12853)
* [OCPBUGS-8682](https://issues.redhat.com/browse/OCPBUGS-8682): Fix empty create dropdown on provided APIs page [#12819](https://github.com/openshift/console/pull/12819)
* [OCPBUGS-9214](https://issues.redhat.com/browse/OCPBUGS-9214): Create button is disabled in Git Import form when git repo url has hyphens in owner part of the url [#12652](https://github.com/openshift/console/pull/12652)
* [OCPBUGS-4496](https://issues.redhat.com/browse/OCPBUGS-4496): Fix Samples/Snippets tab [#12642](https://github.com/openshift/console/pull/12642)
* [OCPBUGS-7361](https://issues.redhat.com/browse/OCPBUGS-7361): support JSON schema 06 in the helm install/upgrade form [#12644](https://github.com/openshift/console/pull/12644)
* [OU-138](https://issues.redhat.com/browse/OU-138): Move QueryBrowser component to dynamic SDK [#12841](https://github.com/openshift/console/pull/12841)
* [OCPBUGS-9063](https://issues.redhat.com/browse/OCPBUGS-9063): Remove frontend validation from legacy operand form gen… [#12788](https://github.com/openshift/console/pull/12788)
* [ODC-7275](https://issues.redhat.com/browse/ODC-7275): Implement invoke serverless functions [#12755](https://github.com/openshift/console/pull/12755)
* [OCPBUGS-14964](https://issues.redhat.com/browse/OCPBUGS-14964): Disable broken monitoring-tests [#12902](https://github.com/openshift/console/pull/12902)
* [OCPBUGS-11219](https://issues.redhat.com/browse/OCPBUGS-11219): Include print styles to allow printout of full screen and ... [#12849](https://github.com/openshift/console/pull/12849)
* [ODC-7306](https://issues.redhat.com/browse/ODC-7306): Show the latest Build status in the Build list view [#12809](https://github.com/openshift/console/pull/12809)
* [Full changelog](https://github.com/openshift/console/compare/ff52970d36927562ff6f3b7a420b03951549f4df...3c155ac66e52e664eb49513bda842258e722ea7f)


### [console-operator](https://github.com/openshift/console-operator/tree/7865924e59e861be67045685e4799d7503eb452d)

* [ODC-7339](https://issues.redhat.com/browse/ODC-7339): Follow up ticket for ODC-7292 [#773](https://github.com/openshift/console-operator/pull/773)
* [OCPBUGS-15499](https://issues.redhat.com/browse/OCPBUGS-15499): Remove managed cluster logic from the operator's controller [#774](https://github.com/openshift/console-operator/pull/774)
* [ODC-7292](https://issues.redhat.com/browse/ODC-7292): Add new quickstart for installing Cryostat [#770](https://github.com/openshift/console-operator/pull/770)
* [ODC-7312](https://issues.redhat.com/browse/ODC-7312): Add OpenShift Quickstart for JBoss EAP 7 [#760](https://github.com/openshift/console-operator/pull/760)
* [ODC-7262](https://issues.redhat.com/browse/ODC-7262): Add QuickStart approvers and reviewers [#772](https://github.com/openshift/console-operator/pull/772)
* [CONSOLE-3278](https://issues.redhat.com/browse/CONSOLE-3278): Add client certificate and key to service monitor [#668](https://github.com/openshift/console-operator/pull/668)
* [Full changelog](https://github.com/openshift/console-operator/compare/a340bb9f4bda9714e92560a2df17257bc6616526...7865924e59e861be67045685e4799d7503eb452d)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/42bb09828abeacfbaacbf588b86412ba0ac13f59)

* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump csi-driver-shared-resource-operator library-go [#80](https://github.com/openshift/csi-driver-shared-resource-operator/pull/80)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/dda56a84d99af31a616563c21e10dc392cb82394...42bb09828abeacfbaacbf588b86412ba0ac13f59)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/a8645eba126ccd41300fbf629db352085e2a02c4)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-attacher` to v4.3.0 for OCP 4.14 [#54](https://github.com/openshift/csi-external-attacher/pull/54)
* [OCPBUGS-14815](https://issues.redhat.com/browse/OCPBUGS-14815): Chore: Update OWNERS and OWNERS_ALIASES [#55](https://github.com/openshift/csi-external-attacher/pull/55)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/405d34ff604dd66fea743c003571b4515af78abc...a8645eba126ccd41300fbf629db352085e2a02c4)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/3832852db71c55877fcf98f380bf376678359e8c)

* [OCPBUGS-14811](https://issues.redhat.com/browse/OCPBUGS-14811): Chore: Update OWNERS and OWNERS_ALIASES [#66](https://github.com/openshift/csi-external-provisioner/pull/66)
* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-provisioner` to v3.5.0 for OCP 4.14 [#65](https://github.com/openshift/csi-external-provisioner/pull/65)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/482598b15a0557525eef0427ec32673f6808ff71...3832852db71c55877fcf98f380bf376678359e8c)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/9a76f330d7a03cfce9dbbb71f25febe3efc9271b)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-resizer` to v1.8.0 for OCP 4.14 [#141](https://github.com/openshift/csi-external-resizer/pull/141)
* [OCPBUGS-14812](https://issues.redhat.com/browse/OCPBUGS-14812): Chore: Update OWNERS and OWNERS_ALIASES [#142](https://github.com/openshift/csi-external-resizer/pull/142)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/ee117b60d87545dd01fcdd8fbec45ed939fc26f0...9a76f330d7a03cfce9dbbb71f25febe3efc9271b)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/712bf7c316adfa0a3c8afc56d1db23abfadad58e)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `external-snapshotter` to v6.2.2 for OCP 4.14 [#101](https://github.com/openshift/csi-external-snapshotter/pull/101)
* [OCPBUGS-14813](https://issues.redhat.com/browse/OCPBUGS-14813): Chore: Update OWNERS and OWNERS_ALIASES [#102](https://github.com/openshift/csi-external-snapshotter/pull/102)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/dbaa923f1833272b2ba65350f1f9de8883654162...712bf7c316adfa0a3c8afc56d1db23abfadad58e)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/957e1d03570e07fb0825813ab7b751bc8543ebc2)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `livenessprobe` to v2.10.0 for OCP 4.14 [#44](https://github.com/openshift/csi-livenessprobe/pull/44)
* [OCPBUGS-14810](https://issues.redhat.com/browse/OCPBUGS-14810): Chore: Update OWNERS and OWNERS_ALIASES [#45](https://github.com/openshift/csi-livenessprobe/pull/45)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/07a3e99878d10db2a3c186fbdb87bbb8350aa87b...957e1d03570e07fb0825813ab7b751bc8543ebc2)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/f8635f761f8f59b76c1056034fc5addb29071cfe)

* [STOR-1169](https://issues.redhat.com/browse/STOR-1169): Rebase `node-driver-registrar` to v2.8.0 for OCP 4.14 [#46](https://github.com/openshift/csi-node-driver-registrar/pull/46)
* [OCPBUGS-14814](https://issues.redhat.com/browse/OCPBUGS-14814): Chore: Update OWNERS and OWNERS_ALIASES [#47](https://github.com/openshift/csi-node-driver-registrar/pull/47)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/30ffd909cd041a5535b0419960596f6342c78994...f8635f761f8f59b76c1056034fc5addb29071cfe)


### [docker-builder](https://github.com/openshift/builder/tree/fe78ee67aa2e0ef4e519d18e30378e078131ae46)

* [OCPBUGS-15497](https://issues.redhat.com/browse/OCPBUGS-15497): Add the git-lfs package [#350](https://github.com/openshift/builder/pull/350)
* [Full changelog](https://github.com/openshift/builder/compare/4cdf1f13fae3da33ad573bc32f325388ef469d77...fe78ee67aa2e0ef4e519d18e30378e078131ae46)


### [docker-registry](https://github.com/openshift/image-registry/tree/03416247c98e4a88fbe747192652f03096487c35)

* [IR-371](https://issues.redhat.com/browse/IR-371): Bump docker distribution (again) [#372](https://github.com/openshift/image-registry/pull/372)
* [TRT-1092](https://issues.redhat.com/browse/TRT-1092): Revert "Merge pull request #370 from flavianmissi/bump-docker-distrib… [#371](https://github.com/openshift/image-registry/pull/371)
* [IR-371](https://issues.redhat.com/browse/IR-371): upgrade docker distribution [#370](https://github.com/openshift/image-registry/pull/370)
* [Full changelog](https://github.com/openshift/image-registry/compare/92c7270360c6a963629777b1a2d72aa9e9070364...03416247c98e4a88fbe747192652f03096487c35)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/130acc6c1a8e406f0b6217e345c6d0c878304c4d)

* Updating ose-gcp-cloud-controller-manager images to be consistent with ART [#33](https://github.com/openshift/cloud-provider-gcp/pull/33)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/b07869955392abd0f4c1c2bb7b5b0ac546429dc2...130acc6c1a8e406f0b6217e345c6d0c878304c4d)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/8a34806e4157be30c03966b9aca3a50a82a9d591)

* Add openshift/e2e-tests for CAPI E2E testing [#197](https://github.com/openshift/cluster-api-provider-gcp/pull/197)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/9453790e38f84de2235a0c72694fdc3377273a44...8a34806e4157be30c03966b9aca3a50a82a9d591)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/c9454844d395b77cc6f254f2c006d1340aa4f09b)

* [STOR-1163](https://issues.redhat.com/browse/STOR-1163): Rebase to upstream v1.10.1 [#37](https://github.com/openshift/gcp-pd-csi-driver/pull/37)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/9f6c301304a4ae724e899ed9aa133e28ac55e6d6...c9454844d395b77cc6f254f2c006d1340aa4f09b)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/f8444bb890cebea92e1eecdbc065eb41e5263809)

* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump gcp-pd-csi-driver-operator library-go [#72](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/72)
* [STOR-1301](https://issues.redhat.com/browse/STOR-1301): Restart controller Pods if metrics-serving-cert changed [#68](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/68)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#70](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/70)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/58fa1bc2d997dd541519d3561eeda8fa62d1b55a...f8444bb890cebea92e1eecdbc065eb41e5263809)


### [hypershift](https://github.com/openshift/hypershift/tree/7927cea3e62ba303195f1173d96aaac8bdb217af)

* [HOSTEDCP-1061](https://issues.redhat.com/browse/HOSTEDCP-1061): Implement dedicated request serving nodes for HostedClusters [#2722](https://github.com/openshift/hypershift/pull/2722)
* [OCPBUGS-15769](https://issues.redhat.com/browse/OCPBUGS-15769): Set --balance-similar-node-groups for autoscaler [#2769](https://github.com/openshift/hypershift/pull/2769)
* Leader election config update. [#2282](https://github.com/openshift/hypershift/pull/2282)
* [OCPBUGS-15723](https://issues.redhat.com/browse/OCPBUGS-15723): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2766](https://github.com/openshift/hypershift/pull/2766)
* Fix KAS HealthCheck for non DNS-Based ingress points in LB service [#2765](https://github.com/openshift/hypershift/pull/2765)
* Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible [#2741](https://github.com/openshift/hypershift/pull/2741)
* Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /hack/tools [#2740](https://github.com/openshift/hypershift/pull/2740)
* Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 in /hack/tools [#2737](https://github.com/openshift/hypershift/pull/2737)
* OCPBUGS-12208 ensureExists pullSecret resource reconciliation strategy [#2732](https://github.com/openshift/hypershift/pull/2732)
* Bump github.com/coreos/ignition/v2 from 2.10.1 to 2.14.0 [#2739](https://github.com/openshift/hypershift/pull/2739)
* Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible in /hack/tools [#2738](https://github.com/openshift/hypershift/pull/2738)
* Remove hardcoded AWS CI References [#2742](https://github.com/openshift/hypershift/pull/2742)
* [TRT-1118](https://issues.redhat.com/browse/TRT-1118): Remove DisableStrictZoneCheck from AWS CCM config [#2757](https://github.com/openshift/hypershift/pull/2757)
* Update RHTAP references [#2750](https://github.com/openshift/hypershift/pull/2750)
* add OWNERS for new ci-tooling area label [#2743](https://github.com/openshift/hypershift/pull/2743)
* Add production cli (hcp) to dockerfile [#2747](https://github.com/openshift/hypershift/pull/2747)
* feat: Enable priority class override [#2661](https://github.com/openshift/hypershift/pull/2661)
* test/e2e: retry configmap create in etcd chaos tests [#2746](https://github.com/openshift/hypershift/pull/2746)
* [OCPBUGS-14578](https://issues.redhat.com/browse/OCPBUGS-14578): Set allocate-node-cidrs to false in the cluster-kube-controller-manager [#2731](https://github.com/openshift/hypershift/pull/2731)
* Revert "HOSTEDCP-1016: Validate publishing strategies" [#2733](https://github.com/openshift/hypershift/pull/2733)
* [HOSTEDCP-1027](https://issues.redhat.com/browse/HOSTEDCP-1027): Add Create kubeconfig for HCP CLI [#2719](https://github.com/openshift/hypershift/pull/2719)
* [HOSTEDCP-1016](https://issues.redhat.com/browse/HOSTEDCP-1016): Validate publishing strategies [#2651](https://github.com/openshift/hypershift/pull/2651)
* KubeVirt Platform documentation for Advanced Storage Configurations and External Infrastructure [#2712](https://github.com/openshift/hypershift/pull/2712)
* Follow up to PR comments on #2642 [#2690](https://github.com/openshift/hypershift/pull/2690)
* [HOSTEDCP-1067](https://issues.redhat.com/browse/HOSTEDCP-1067): Add dependabot dependency management [#2708](https://github.com/openshift/hypershift/pull/2708)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2726](https://github.com/openshift/hypershift/pull/2726)
* Revert "HOSTEDCP-967: [Re-revert] Disable v1alpha1 and conversion webhook by default" [#2705](https://github.com/openshift/hypershift/pull/2705)
* Remove --service-publishing-strategy from production cli [#2721](https://github.com/openshift/hypershift/pull/2721)
* [HOSTEDCP-1024](https://issues.redhat.com/browse/HOSTEDCP-1024): Add Create NodePool for KubeVirt for HCP CLI [#2718](https://github.com/openshift/hypershift/pull/2718)
* [HOSTEDCP-1032](https://issues.redhat.com/browse/HOSTEDCP-1032): e2e: ensure default PSA policy is not privileged [#2714](https://github.com/openshift/hypershift/pull/2714)
* [HOSTEDCP-1031](https://issues.redhat.com/browse/HOSTEDCP-1031): Add Destroy Cluster Cmd for KubeVirt for HCP CLI [#2673](https://github.com/openshift/hypershift/pull/2673)
* Expose annotation to allow release image overrides [#2595](https://github.com/openshift/hypershift/pull/2595)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): add ignition-server proxy [#2668](https://github.com/openshift/hypershift/pull/2668)
* [OCPBUGS-14637](https://issues.redhat.com/browse/OCPBUGS-14637): Check OwningIngressController also in Labels [#2706](https://github.com/openshift/hypershift/pull/2706)
* [HOSTEDCP-1020](https://issues.redhat.com/browse/HOSTEDCP-1020): Add Create Cluster for KubeVirt for HCP CLI [#2672](https://github.com/openshift/hypershift/pull/2672)
* properly handle user CA bundle not existing [#2703](https://github.com/openshift/hypershift/pull/2703)
* [OCPBUGS-15168](https://issues.redhat.com/browse/OCPBUGS-15168): fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2699](https://github.com/openshift/hypershift/pull/2699)
* [OCPBUGS-14859](https://issues.redhat.com/browse/OCPBUGS-14859): Skip AWS resource deletion for 'Unknown' OIDC state [#2691](https://github.com/openshift/hypershift/pull/2691)
* Whitelist access from virt-launchers to NodeIP if NodePort ServicePublishingStrategy is used [#2688](https://github.com/openshift/hypershift/pull/2688)
* [OCPBUGS-13829](https://issues.redhat.com/browse/OCPBUGS-13829): cpo: oauth: honor AccessTokenInactivityTimeout [#2693](https://github.com/openshift/hypershift/pull/2693)
* Update NodePool docs to include data propagation [#2687](https://github.com/openshift/hypershift/pull/2687)
* [HOSTEDCP-1008](https://issues.redhat.com/browse/HOSTEDCP-1008): Add NodePoolTransitionSeconds metric [#2631](https://github.com/openshift/hypershift/pull/2631)
* [HOSTEDCP-967](https://issues.redhat.com/browse/HOSTEDCP-967): [Re-revert] Disable v1alpha1 and conversion webhook by default [#2685](https://github.com/openshift/hypershift/pull/2685)
* Make NodePool arch input immutable [#2689](https://github.com/openshift/hypershift/pull/2689)
* Update autocaler RBAC to accomodate machinepools support added upstream [#2663](https://github.com/openshift/hypershift/pull/2663)
* Enforce Immutability of some KubeVirt Platform Values [#2654](https://github.com/openshift/hypershift/pull/2654)
* [CNV-24818](https://issues.redhat.com/browse/CNV-24818): Add fsGroup support to kubevirt-csi-driver [#2563](https://github.com/openshift/hypershift/pull/2563)
* Let payload provider render feature gate yaml [#2664](https://github.com/openshift/hypershift/pull/2664)
* [OCPBUGS-14633](https://issues.redhat.com/browse/OCPBUGS-14633): Check for OPENSHIFT_IMG_OVERRIDES before using [#2660](https://github.com/openshift/hypershift/pull/2660)
* [HOSTEDCP-965](https://issues.redhat.com/browse/HOSTEDCP-965): Add impersonate feature to the CLI and document HC dump procedure [#2653](https://github.com/openshift/hypershift/pull/2653)
* [OCPBUGS-11882](https://issues.redhat.com/browse/OCPBUGS-11882): Annotate HCP pods with the safe-to-evict-local-volume CA annotation [#2647](https://github.com/openshift/hypershift/pull/2647)
* [Full changelog](https://github.com/openshift/hypershift/compare/b98cb4a246e8bdabfbc7154cae20b0f16cda8260...7927cea3e62ba303195f1173d96aaac8bdb217af)


### [insights-operator](https://github.com/openshift/insights-operator/tree/0f38b400d41a059084f6711233a2395c80ab8d26)

* [OCPBUGS-13915](https://issues.redhat.com/browse/OCPBUGS-13915): create Prometheus rules programmatically according the config option (#807) [#807](https://github.com/openshift/insights-operator/pull/807)
* chore: renaming gather files (#768) [#768](https://github.com/openshift/insights-operator/pull/768)
* Implement periodic gathering as a job in tech preview & latest fix (#799) [#799](https://github.com/openshift/insights-operator/pull/799)
* chore: adds codecov (#778) [#778](https://github.com/openshift/insights-operator/pull/778)
* Revert "OCPBUGS-10691: feat(clusterconfig): adds virtual machine instances gather (#742)" (#797) [#742](https://github.com/openshift/insights-operator/pull/742)
* Revert "Implement periodic gathering as a job in tech preview (#787)" (#798) [#787](https://github.com/openshift/insights-operator/pull/787)
* Implement periodic gathering as a job in tech preview (#787) [#787](https://github.com/openshift/insights-operator/pull/787)
* [OCPBUGS-14937](https://issues.redhat.com/browse/OCPBUGS-14937): fix the config serialization & add test (#794) [#794](https://github.com/openshift/insights-operator/pull/794)
* [OCPBUGS-14771](https://issues.redhat.com/browse/OCPBUGS-14771): run an extra config informer in the tech preview (#792) [#792](https://github.com/openshift/insights-operator/pull/792)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2715343553e719a5efd5275bf99b76806398e6ad...0f38b400d41a059084f6711233a2395c80ab8d26)


### [ironic](https://github.com/openshift/ironic-image/tree/aeec08352a1aa68f9a56fad29b2f66f6124cb276)

* [OCPBUGS-14785](https://issues.redhat.com/browse/OCPBUGS-14785): Update ironic container dependencies [#382](https://github.com/openshift/ironic-image/pull/382)
* [Full changelog](https://github.com/openshift/ironic-image/compare/0c9f0d33639e70acf12208c017d67e35b000a4c3...aeec08352a1aa68f9a56fad29b2f66f6124cb276)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/7c520d9426f573b602b5929c2da5a47c91ffd1db)

* [OCPBUGS-14906](https://issues.redhat.com/browse/OCPBUGS-14906): Update ipa for OCP 4.14 [#77](https://github.com/openshift/ironic-agent-image/pull/77)
* "Bug OCPBUGS-15447: Switch to udevadm command install instead of package" [#80](https://github.com/openshift/ironic-agent-image/pull/80)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/a59c45d207dc9b4139ed18739dcd47242f7766d0...7c520d9426f573b602b5929c2da5a47c91ffd1db)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/7b56c30661e39b212fc632e8e184c70b14dcf3a2)

* Binary should be compiled on rhel9 [#89](https://github.com/openshift/ironic-rhcos-downloader/pull/89)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/0f4cb48fc8a9ea7dc9493ebc44585c811137f1c4...7b56c30661e39b212fc632e8e184c70b14dcf3a2)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/700317d9cfbf87e926a4b089b6e7c2dbd0658320)

* [SDN-3900](https://issues.redhat.com/browse/SDN-3900): rebase to 1.27.1 [#555](https://github.com/openshift/sdn/pull/555)
* [Full changelog](https://github.com/openshift/sdn/compare/320dd3685ac194769e7e5a1ae7da71786b7dd080...700317d9cfbf87e926a4b089b6e7c2dbd0658320)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/86f31e2de5221ed4acd6509fa7a010a286089f1f)

* [AUTH-362](https://issues.redhat.com/browse/AUTH-362): v0.14.2 downstream [#70](https://github.com/openshift/kube-rbac-proxy/pull/70)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/27c255551673ba529ac6c9419abe13451afa3e4d...86f31e2de5221ed4acd6509fa7a010a286089f1f)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/1255735fc177ba34546e755f632e585d76f86e06)

* Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART [#20](https://github.com/openshift/kubevirt-csi-driver/pull/20)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/a2e0955173da77f0faae00ca1d224726542dce48...1255735fc177ba34546e755f632e585d76f86e06)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/8f0f041578ba0e4d10fb7b3813c81b52bbec681b)

* Bump openshift/api package [#1150](https://github.com/openshift/machine-api-operator/pull/1150)
* add capability annotation [#1119](https://github.com/openshift/machine-api-operator/pull/1119)
* MachineAPIOperatorMetricsCollectionFailing to warning [#1149](https://github.com/openshift/machine-api-operator/pull/1149)
* [CCO-321](https://issues.redhat.com/browse/CCO-321): Add support for feature-gating specific providers [#1140](https://github.com/openshift/machine-api-operator/pull/1140)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/931f6f67c1c72597fc56104cd45a71c11f19293d...8f0f041578ba0e4d10fb7b3813c81b52bbec681b)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/5ddeae5b35bb70320ba9946ed102ca3c114215c6)

* [OCPBUGS-10115](https://issues.redhat.com/browse/OCPBUGS-10115): update image to use golang-1.20 [#3766](https://github.com/openshift/machine-config-operator/pull/3766)
* [OCPBUGS-15728](https://issues.redhat.com/browse/OCPBUGS-15728): Fix machine config drifts when deploying with platform external [#3773](https://github.com/openshift/machine-config-operator/pull/3773)
* faq: Talk about "no enabled repositories" [#3772](https://github.com/openshift/machine-config-operator/pull/3772)
* [OCPBUGS-14185](https://issues.redhat.com/browse/OCPBUGS-14185): change the message annotation to description [#3721](https://github.com/openshift/machine-config-operator/pull/3721)
* [OKD-174](https://issues.redhat.com/browse/OKD-174): Dockerfile: OKD: Reenable extensions image on SCOS [#3741](https://github.com/openshift/machine-config-operator/pull/3741)
* [OCPBUGS-15575](https://issues.redhat.com/browse/OCPBUGS-15575): Dockerfile: pin to nmstate-2.2.9 [#3769](https://github.com/openshift/machine-config-operator/pull/3769)
* [OCPBUGS-10924](https://issues.redhat.com/browse/OCPBUGS-10924): Switch default SA to machine-config-operator [#3740](https://github.com/openshift/machine-config-operator/pull/3740)
* trivial: Fix namespace for kube api server operator [#3762](https://github.com/openshift/machine-config-operator/pull/3762)
* OCPBUGS-8403 Deleting SSH keys / password hashes should not degrade MachineConfigPool / node [#3606](https://github.com/openshift/machine-config-operator/pull/3606)
* OWNERS: Update onwer list [#3761](https://github.com/openshift/machine-config-operator/pull/3761)
* [OCPBUGS-4820](https://issues.redhat.com/browse/OCPBUGS-4820): Controller version mismatch causing degradation during upgrades [#3738](https://github.com/openshift/machine-config-operator/pull/3738)
* [MCO-640](https://issues.redhat.com/browse/MCO-640): Move all log functions to klog [#3734](https://github.com/openshift/machine-config-operator/pull/3734)
* [OCPBUGS-14399](https://issues.redhat.com/browse/OCPBUGS-14399): Minor fix to support `protectKernelDefaults` field in Kubelet Config [#3736](https://github.com/openshift/machine-config-operator/pull/3736)
* [MCO-595](https://issues.redhat.com/browse/MCO-595): Remove MCO's pending config workflow [#3700](https://github.com/openshift/machine-config-operator/pull/3700)
* [OCPCLOUD-2010](https://issues.redhat.com/browse/OCPCLOUD-2010): Re-vendor api and library-go for external platform support [#3745](https://github.com/openshift/machine-config-operator/pull/3745)
* bootstrap: Clarify that "root ca" is really "MCS CA" [#3728](https://github.com/openshift/machine-config-operator/pull/3728)
* add ipsec extension [#3726](https://github.com/openshift/machine-config-operator/pull/3726)
* OpenStack: configure ipv6 addresses [#3705](https://github.com/openshift/machine-config-operator/pull/3705)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6511a6d5b008459e9d7126bdd154c06eddb3d8aa...5ddeae5b35bb70320ba9946ed102ca3c114215c6)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/9e81deaba4758953a43000bbca6403caa8824caa)

* [OCPBUGS-9072](https://issues.redhat.com/browse/OCPBUGS-9072): Pass BareMetalHost name to IPA [#87](https://github.com/openshift/image-customization-controller/pull/87)
* [OCPBUGS-15349](https://issues.redhat.com/browse/OCPBUGS-15349): Uplift assisted-image-service to remove gin-gonic dependency [#91](https://github.com/openshift/image-customization-controller/pull/91)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/78f24febe2597221fe36af0682b4c93b3101892a...9e81deaba4758953a43000bbca6403caa8824caa)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/c68330793434f77ff9baa721fcc77473e5528184)

* Fix condition check for logging [#29](https://github.com/openshift/machine-os-images/pull/29)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/74958dc60aba29d6b9471283f1a9e4c1676979aa...c68330793434f77ff9baa721fcc77473e5528184)


### [must-gather](https://github.com/openshift/must-gather/tree/e50e276362b92e6a355b16ba29d1344508438ecb)

* Create a generic "get_operator_ns" util function [#368](https://github.com/openshift/must-gather/pull/368)
* Assert that only one subscription exists [#367](https://github.com/openshift/must-gather/pull/367)
* [MCO-608](https://issues.redhat.com/browse/MCO-608): Gather MCO's on-disk configs from degraded nodes [#361](https://github.com/openshift/must-gather/pull/361)
* Gather ostree related bits [#353](https://github.com/openshift/must-gather/pull/353)
* [OCPBUGS-14984](https://issues.redhat.com/browse/OCPBUGS-14984): Collect Mellanox firmware information [#365](https://github.com/openshift/must-gather/pull/365)
* [Full changelog](https://github.com/openshift/must-gather/compare/77921f0da31d7cb0a895cce3616b2f1513a31465...e50e276362b92e6a355b16ba29d1344508438ecb)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/a18cb3e10639b5789f7c291707064743feb105e2)

* bump k8s to 1.27.3 [#89](https://github.com/openshift/oauth-apiserver/pull/89)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/41c2dfea104b3c686a00b068654843b48b4db53f...a18cb3e10639b5789f7c291707064743feb105e2)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/3166b6419091ee26f14317c9e519d833fc73348b)

* Enable mirroring of the multi release image (#657) [#657](https://github.com/openshift/oc-mirror/pull/657)
* revendor to the latest oc (#656) [#656](https://github.com/openshift/oc-mirror/pull/656)
* Replacing the hard coded path with graphDataMountPath (#585) [#585](https://github.com/openshift/oc-mirror/pull/585)
* [CFE-859](https://issues.redhat.com/browse/CFE-859): Removing flag use-oci-feature starting release-4.14 (#622) [#622](https://github.com/openshift/oc-mirror/pull/622)
* [CFE-783](https://issues.redhat.com/browse/CFE-783): A variety of changes needed for correct operation with multi architecture catalogs (#611) [#611](https://github.com/openshift/oc-mirror/pull/611)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/063e0bbb222b37ac8183ef9dfbdb32f6541092a0...3166b6419091ee26f14317c9e519d833fc73348b)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/08a80150a76e43b87e97aa63bc973c582ca5ca0c)

* UPSTREAM: <carry>: Setup downstream owners and aliases [#25](https://github.com/openshift/operator-framework-rukpak/pull/25)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/243eee7c90a759cdac424780944ee6ff1f95be68...08a80150a76e43b87e97aa63bc973c582ca5ca0c)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/115e0f979d7d5ca12972e35c07e4e4fea1e48132)

* wire openapi v3 aggregation controller [#379](https://github.com/openshift/openshift-apiserver/pull/379)
* [OCPBUGS-11393](https://issues.redhat.com/browse/OCPBUGS-11393): Bump openshift/api [#368](https://github.com/openshift/openshift-apiserver/pull/368)
* [API-1586](https://issues.redhat.com/browse/API-1586): Bump k8s 1.27.2 [#371](https://github.com/openshift/openshift-apiserver/pull/371)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/aac3dd5bf0547e928103a0f718ca104b1bb13930...115e0f979d7d5ca12972e35c07e4e4fea1e48132)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/2caaf6b26c07395566c38e01d6154debb9117ecc)

* update runtime-utils for idms migrations [#243](https://github.com/openshift/openshift-controller-manager/pull/243)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/41104bfd3c2a492e4e20516fd7065b9c86e2ad7e...2caaf6b26c07395566c38e01d6154debb9117ecc)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/f815aa1d760f10653707cc3a04f588481f1a9ff9)

* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump cinder-csi-driver-operator library-go [#116](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/116)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#115](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/115)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/acfbdc0f548fb6fdb6fafa28b9383d6a71eff855...f815aa1d760f10653707cc3a04f588481f1a9ff9)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/5bf24027fb9d0be544f5ad40d29e625fd9c59fc0)

* go.mod: Upgrade Gophercloud to v1.5.0 [#73](https://github.com/openshift/machine-api-provider-openstack/pull/73)
* [OSASINFRA-3063](https://issues.redhat.com/browse/OSASINFRA-3063): Bump CAPO to v0.7.2 [#72](https://github.com/openshift/machine-api-provider-openstack/pull/72)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/0d681c618fdb86bcabb3460cfa829bba8eba2e60...5bf24027fb9d0be544f5ad40d29e625fd9c59fc0)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/ece7973a48027a23ecff449777512c8af23be216)

* [OCPBUGS-13526](https://issues.redhat.com/browse/OCPBUGS-13526): fix dynamic conversion webhook [#490](https://github.com/openshift/operator-framework-olm/pull/490)
* [OPRUN-2995](https://issues.redhat.com/browse/OPRUN-2995): Remove dependency on cluster policy controller in favor of hardcoding [#498](https://github.com/openshift/operator-framework-olm/pull/498)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/a73360f7414ba54792c6023e65fa0ee045966daf...ece7973a48027a23ecff449777512c8af23be216)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/06e150e361b587296c0fbadd92ab218fe6058fdd)

* [OCPBUGS-13910](https://issues.redhat.com/browse/OCPBUGS-13910): update community-operator-index to 4.14 tag [#524](https://github.com/operator-framework/operator-marketplace/pull/524)
* Update owners [#517](https://github.com/operator-framework/operator-marketplace/pull/517)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/113e4d9ad64b87b4764fc1833b7ebb3aa3f24526...06e150e361b587296c0fbadd92ab218fe6058fdd)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/ac45301151d508b088c6f9321a9731ed550abcdf)

* [OCPBUGS-15127](https://issues.redhat.com/browse/OCPBUGS-15127): Dockerfile: bump to ovn 23.03.0-69 (for LB templates) and ovs 3.1.0-32 (upgrade perf) [#1710](https://github.com/openshift/ovn-kubernetes/pull/1710)
* [OCPBUGS-15523](https://issues.redhat.com/browse/OCPBUGS-15523): [DownstreamMerge] 6-27-23 [#1726](https://github.com/openshift/ovn-kubernetes/pull/1726)
* [OCPBUGS-15227](https://issues.redhat.com/browse/OCPBUGS-15227): [DownstreamMerge] 6-21-23 [#1718](https://github.com/openshift/ovn-kubernetes/pull/1718)
* [OCPBUGS-15226](https://issues.redhat.com/browse/OCPBUGS-15226): EgressIP: do not patch the status if the object no longer exists [#1717](https://github.com/openshift/ovn-kubernetes/pull/1717)
* 6-18-2023 [#1714](https://github.com/openshift/ovn-kubernetes/pull/1714)
* [OCPBUGS-14769](https://issues.redhat.com/browse/OCPBUGS-14769), [SDN-3885](https://issues.redhat.com/browse/SDN-3885): Downstream Merge 13th June 2023 [#1707](https://github.com/openshift/ovn-kubernetes/pull/1707)
* [OCPBUGS-10592](https://issues.redhat.com/browse/OCPBUGS-10592), [OCPBUGS-10841](https://issues.redhat.com/browse/OCPBUGS-10841), [OCPBUGS-11180](https://issues.redhat.com/browse/OCPBUGS-11180), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-1715](https://issues.redhat.com/browse/OCPBUGS-1715), [OCPBUGS-4370](https://issues.redhat.com/browse/OCPBUGS-4370), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3733](https://issues.redhat.com/browse/SDN-3733), [SDN-3838](https://issues.redhat.com/browse/SDN-3838), [SDN-3840](https://issues.redhat.com/browse/SDN-3840): Downstream Merge 6th June 2023 [#1697](https://github.com/openshift/ovn-kubernetes/pull/1697)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/8f60d8256d695de33219c36fc3b83a924264eddf...ac45301151d508b088c6f9321a9731ed550abcdf)


### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/af40ed09f69fab6c4bf054436f537a3e569d5f02)

* Bump openshift/prom-label-proxy to v0.7.0 [#356](https://github.com/openshift/prom-label-proxy/pull/356)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/944632a052b1deaaaf8deb0d4ef971e86648fe31...af40ed09f69fab6c4bf054436f537a3e569d5f02)


### [prometheus](https://github.com/openshift/prometheus/tree/6b7a128733d24f28ef1ba7dd2ba2ad42353d4395)

* Bump openshift/prometheus to v2.45.0 [#166](https://github.com/openshift/prometheus/pull/166)
* Bump openshift/prometheus to v2.44.0 [#164](https://github.com/openshift/prometheus/pull/164)
* Dockerfile.ocp: update note about UI assets after switching to embed [#165](https://github.com/openshift/prometheus/pull/165)
* [Full changelog](https://github.com/openshift/prometheus/compare/52854f8fc77e8d2bf00d97fa140dbd469adab16e...6b7a128733d24f28ef1ba7dd2ba2ad42353d4395)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/74215947fe97fc4f288937b597642ee058ed74de)

* [OCPBUGS-14466](https://issues.redhat.com/browse/OCPBUGS-14466): bump openshift/prometheus-operator to v0.66.0 [#236](https://github.com/openshift/prometheus-operator/pull/236)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/5ec52fda2be10fb6a64319f3d2254d58aa6b06e5...74215947fe97fc4f288937b597642ee058ed74de)


### [telemeter](https://github.com/openshift/telemeter/tree/76213272326b432a504dd59db593b94890541342)

* : fix mtls secret generation [#473](https://github.com/openshift/telemeter/pull/473)
* Revert wrong cert name change of #455 [#472](https://github.com/openshift/telemeter/pull/472)
* : add secret for external mtls connection [#470](https://github.com/openshift/telemeter/pull/470)
* [MON-3230](https://issues.redhat.com/browse/MON-3230): Add TLS auth to telemeter-client [#455](https://github.com/openshift/telemeter/pull/455)
* jsonnet: Add config to support rhelemeter [#468](https://github.com/openshift/telemeter/pull/468)
* Improve debug roundtripper logs [#467](https://github.com/openshift/telemeter/pull/467)
* Fix integration test documentation [#461](https://github.com/openshift/telemeter/pull/461)
* Fix path benchmark [#466](https://github.com/openshift/telemeter/pull/466)
* Add RHEL POC server [#465](https://github.com/openshift/telemeter/pull/465)
* [Full changelog](https://github.com/openshift/telemeter/compare/97a39657f66b7009910bbe6fc3d53e3270669fe2...76213272326b432a504dd59db593b94890541342)


### [tests](https://github.com/openshift/origin/tree/cd0837b55683d82308dc6445d2b5785830a16414)

* temporarily disable oc explain tests until openapi/v3 is working properly [#28022](https://github.com/openshift/origin/pull/28022)
* [USHIFT-647](https://issues.redhat.com/browse/USHIFT-647): skip non-existing resources from security.openshift.io [#27897](https://github.com/openshift/origin/pull/27897)
* trt-1117: Test for update lease errors [#28020](https://github.com/openshift/origin/pull/28020)
* print out deployment for incorrectly scheduled pods [#28011](https://github.com/openshift/origin/pull/28011)
* [OCPBUGS-14425](https://issues.redhat.com/browse/OCPBUGS-14425): Skip CCM upgradable condition on AlibabaCloud [#27967](https://github.com/openshift/origin/pull/27967)
* Update "verify that nodes have no unexpected reboots" test [#28016](https://github.com/openshift/origin/pull/28016)
* allow cluster-config-operator to manage featuregate upgrade block [#28009](https://github.com/openshift/origin/pull/28009)
* add a networking alert for OVNKubernetesResourceRetryFailure [#28008](https://github.com/openshift/origin/pull/28008)
* add debugging info for cluster not ready to upgrade [#28007](https://github.com/openshift/origin/pull/28007)
* [OCPVE-378](https://issues.redhat.com/browse/OCPVE-378): feat: remove skip, allow check on all platforms regardless [#27911](https://github.com/openshift/origin/pull/27911)
* Report external binary usage [#28000](https://github.com/openshift/origin/pull/28000)
* Changing the severity of "missing runbook_url annotation for critical alerts" test case from flaky to failure [#27987](https://github.com/openshift/origin/pull/27987)
* disruption refinement for availability, not latency. [#28003](https://github.com/openshift/origin/pull/28003)
* [TRT-1097](https://issues.redhat.com/browse/TRT-1097): add KubeMemoryOvercommit to specific test so that the general test doesn't fail [#28002](https://github.com/openshift/origin/pull/28002)
* [OCPBUGS-11652](https://issues.redhat.com/browse/OCPBUGS-11652): Enable oc adm node-logs [#27992](https://github.com/openshift/origin/pull/27992)
* skip reboot test when machineconfigs not in target cluster [#27999](https://github.com/openshift/origin/pull/27999)
* [OCPBUGS-15291](https://issues.redhat.com/browse/OCPBUGS-15291): [sig-cli] oc idle: get a dc name through labels instead of parsing oc create output [#27998](https://github.com/openshift/origin/pull/27998)
* Automated - Update synthetic test data [#27995](https://github.com/openshift/origin/pull/27995)
* Flake ci-cluster-network-liveness and new backend disruption failures to avoid payload rejections [#27990](https://github.com/openshift/origin/pull/27990)
* verifies number of node reboots even for HA [#27994](https://github.com/openshift/origin/pull/27994)
* [OCPBUGS-13379](https://issues.redhat.com/browse/OCPBUGS-13379): machines: add a test which verifies number of node reboots [#27993](https://github.com/openshift/origin/pull/27993)
* strip operator framework from resource watch and fix bugs [#27972](https://github.com/openshift/origin/pull/27972)
* Fix panic in loki upload [#27991](https://github.com/openshift/origin/pull/27991)
* Replace dashes in locator keys for upload to loki, add namespace label when possible [#27983](https://github.com/openshift/origin/pull/27983)
* Automated - Update synthetic test data [#27982](https://github.com/openshift/origin/pull/27982)
* Update kubevirt LB connectivity tests to work with AWS ELB [#27978](https://github.com/openshift/origin/pull/27978)
* [Full changelog](https://github.com/openshift/origin/compare/6459b1e026cf4ea1f17dec1986f83c961b9e92da...cd0837b55683d82308dc6445d2b5785830a16414)