# 4.10.0-0.okd-2022-05-28-062148

Created: 2022-05-28 09:18:45 +0000 UTC

Image Digest: `sha256:6667275cbdb7fd9339f3eae015a29704b42b994bed40790a9b31a54834125152`

Promoted from registry.ci.openshift.org/origin/release:4.10.0-0.okd-2022-05-28-062148


## Changes from 4.10.0-0.okd-2022-05-07-021833

### Components

* Kubernetes 1.23.5
* Fedora CoreOS upgraded from 410.35.4 to 410.35.5


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/)

* [OCPBUGS-23004](https://issues.redhat.com/browse/OCPBUGS-23004): Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master [#37](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/37)
* [OCPBUGS-25563](https://issues.redhat.com/browse/OCPBUGS-25563): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#44](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/44)
* [OCPBUGS-25632](https://issues.redhat.com/browse/OCPBUGS-25632): Add Snyk file to exclude vendor directory on scan [#47](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/47)
* [OCPBUGS-25457](https://issues.redhat.com/browse/OCPBUGS-25457): Bump golang.org/x/net to v0.19.0 [#42](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/42)
* [OCPBUGS-24926](https://issues.redhat.com/browse/OCPBUGS-24926): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#40](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/40)
* [OCPBUGS-24111](https://issues.redhat.com/browse/OCPBUGS-24111): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#39](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/39)
* Update OWNERS [#36](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/36)
* Rebase onto latest upstream version [#35](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/35)
* [OCPBUGS-10120](https://issues.redhat.com/browse/OCPBUGS-10120): Updating ose-alibaba-cloud-controller-manager images to be consistent with ART [#30](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/30)
* Update OWNERS [#29](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/29)
* Update OWNERS [#27](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/27)
* Updating ose-alibaba-cloud-controller-manager images to be consistent with ART [#26](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/26)
* Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master into master [#21](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/21)
* Updating ose-alibaba-cloud-controller-manager images to be consistent with ART [#22](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/22)
* Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master into master [#20](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/20)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/db2d118ad70ff62a2111e83a8d14c5b32e176b38...)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/f0d6966321e3d416efec2ac7405494b057cb35f8)

* [Bug 2076671](https://bugzilla.redhat.com/show_bug.cgi?id=2076671): Auto increase volume size to 20 GiB in the default storage class [#28](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/28)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/9c440d2b64cd30d2e56f3d1ccee1147151540ccc...f0d6966321e3d416efec2ac7405494b057cb35f8)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/0d7fa879ec43b043900d557552246eb981f94fd9)

* [Bug 2083270](https://bugzilla.redhat.com/show_bug.cgi?id=2083270): Custom DHCP Option Set: empty domain-name is a valid custom domain [#37](https://github.com/openshift/machine-api-provider-aws/pull/37)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/192e5f9c1c89560ceec02ed9244388849f11ab97...0d7fa879ec43b043900d557552246eb981f94fd9)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/)

* [STOR-1713](https://issues.redhat.com/browse/STOR-1713): Mark the repository obsolete [#125](https://github.com/openshift/azure-disk-csi-driver-operator/pull/125)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#122](https://github.com/openshift/azure-disk-csi-driver-operator/pull/122)
* [STOR-1696](https://issues.redhat.com/browse/STOR-1696): Fix gofmt [#119](https://github.com/openshift/azure-disk-csi-driver-operator/pull/119)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#117](https://github.com/openshift/azure-disk-csi-driver-operator/pull/117)
* [OCPBUGS-25537](https://issues.redhat.com/browse/OCPBUGS-25537): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART [#118](https://github.com/openshift/azure-disk-csi-driver-operator/pull/118)
* [OCPBUGS-24226](https://issues.redhat.com/browse/OCPBUGS-24226): setting TLSSecurityProfile with no minTLSVersion crashes controller [#116](https://github.com/openshift/azure-disk-csi-driver-operator/pull/116)
* [OCPBUGS-24829](https://issues.redhat.com/browse/OCPBUGS-24829): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART [#112](https://github.com/openshift/azure-disk-csi-driver-operator/pull/112)
* [OCPBUGS-23832](https://issues.redhat.com/browse/OCPBUGS-23832): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#111](https://github.com/openshift/azure-disk-csi-driver-operator/pull/111)
* [OCPBUGS-23306](https://issues.redhat.com/browse/OCPBUGS-23306): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#113](https://github.com/openshift/azure-disk-csi-driver-operator/pull/113)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402), [STOR-1453](https://issues.redhat.com/browse/STOR-1453): update libraries and specify TLS_MIN_VERSION [#110](https://github.com/openshift/azure-disk-csi-driver-operator/pull/110)
* [OCPBUGS-22560](https://issues.redhat.com/browse/OCPBUGS-22560): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#107](https://github.com/openshift/azure-disk-csi-driver-operator/pull/107)
* [STOR-1276](https://issues.redhat.com/browse/STOR-1276): Enable support for mounting volumes with SELinux context [#93](https://github.com/openshift/azure-disk-csi-driver-operator/pull/93)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#106](https://github.com/openshift/azure-disk-csi-driver-operator/pull/106)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#100](https://github.com/openshift/azure-disk-csi-driver-operator/pull/100)
* update readme [#99](https://github.com/openshift/azure-disk-csi-driver-operator/pull/99)
* simplify workload identity feature enablement [#92](https://github.com/openshift/azure-disk-csi-driver-operator/pull/92)
* update readme [#94](https://github.com/openshift/azure-disk-csi-driver-operator/pull/94)
* [OCPBUGS-19172](https://issues.redhat.com/browse/OCPBUGS-19172): Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#98](https://github.com/openshift/azure-disk-csi-driver-operator/pull/98)
* [OCPBUGS-16654](https://issues.redhat.com/browse/OCPBUGS-16654): Revert revert "STOR-1065: Rework sidecar bindings to b… [#88](https://github.com/openshift/azure-disk-csi-driver-operator/pull/88)
* [OCPBUGS-16496](https://issues.redhat.com/browse/OCPBUGS-16496): Bump library-go to remove dependency on goproxy [#90](https://github.com/openshift/azure-disk-csi-driver-operator/pull/90)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#89](https://github.com/openshift/azure-disk-csi-driver-operator/pull/89)
* Revert "STOR-1065: Rework sidecar bindings to bind common ClusterRoles" [#87](https://github.com/openshift/azure-disk-csi-driver-operator/pull/87)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Rework sidecar bindings to bind common ClusterRoles [#84](https://github.com/openshift/azure-disk-csi-driver-operator/pull/84)
* [OCPBUGS-14824](https://issues.redhat.com/browse/OCPBUGS-14824): Bump azure-disk-csi-driver-operator library-go [#85](https://github.com/openshift/azure-disk-csi-driver-operator/pull/85)
* [CCO-324](https://issues.redhat.com/browse/CCO-324): Unrevert "CCO-324: add support for workload identity" [#83](https://github.com/openshift/azure-disk-csi-driver-operator/pull/83)
* Revert "CCO-324: add support for workload identity" [#82](https://github.com/openshift/azure-disk-csi-driver-operator/pull/82)
* [CCO-324](https://issues.redhat.com/browse/CCO-324): add support for workload identity [#78](https://github.com/openshift/azure-disk-csi-driver-operator/pull/78)
* [STOR-1168](https://issues.redhat.com/browse/STOR-1168): Bump common libraries [#81](https://github.com/openshift/azure-disk-csi-driver-operator/pull/81)
* [OCPBUGS-12559](https://issues.redhat.com/browse/OCPBUGS-12559): Bump golang.org/x/net@v0.9.0 [#80](https://github.com/openshift/azure-disk-csi-driver-operator/pull/80)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#79](https://github.com/openshift/azure-disk-csi-driver-operator/pull/79)
* [OCPBUGS-8683](https://issues.redhat.com/browse/OCPBUGS-8683): Add management workloads annotations [#74](https://github.com/openshift/azure-disk-csi-driver-operator/pull/74)
* [OCPBUGS-10842](https://issues.redhat.com/browse/OCPBUGS-10842): Reorder static resources to create RBAC first [#75](https://github.com/openshift/azure-disk-csi-driver-operator/pull/75)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#73](https://github.com/openshift/azure-disk-csi-driver-operator/pull/73)
* [STOR-873](https://issues.redhat.com/browse/STOR-873): Implement custom keys in Azure Disk CSI driver operator [#68](https://github.com/openshift/azure-disk-csi-driver-operator/pull/68)
* [OCPBUGS-7617](https://issues.redhat.com/browse/OCPBUGS-7617): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#69](https://github.com/openshift/azure-disk-csi-driver-operator/pull/69)
* [OCPBUGS-6658](https://issues.redhat.com/browse/OCPBUGS-6658): Disable managed identity authentication [#67](https://github.com/openshift/azure-disk-csi-driver-operator/pull/67)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#66](https://github.com/openshift/azure-disk-csi-driver-operator/pull/66)
* [STOR-947](https://issues.redhat.com/browse/STOR-947): support disabling default StorageClass via ClusterCSIDriver [#63](https://github.com/openshift/azure-disk-csi-driver-operator/pull/63)
* [STOR-1078](https://issues.redhat.com/browse/STOR-1078): Add hostPaths necessary for SELinux mounts [#64](https://github.com/openshift/azure-disk-csi-driver-operator/pull/64)
* [Bug 2106736](https://bugzilla.redhat.com/show_bug.cgi?id=2106736): Add multiplePVsSameID capability [#65](https://github.com/openshift/azure-disk-csi-driver-operator/pull/65)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#62](https://github.com/openshift/azure-disk-csi-driver-operator/pull/62)
* [OCPBUGS-4347](https://issues.redhat.com/browse/OCPBUGS-4347): set TLS cipher suites in Kube RBAC sidecars [#61](https://github.com/openshift/azure-disk-csi-driver-operator/pull/61)
* [OCPBUGS-3659](https://issues.redhat.com/browse/OCPBUGS-3659): Don't expose metrics port to whole network [#60](https://github.com/openshift/azure-disk-csi-driver-operator/pull/60)
* [OCPBUGS-1904](https://issues.redhat.com/browse/OCPBUGS-1904): Only deploy VolumeSnapshotClass when CRD exists [#56](https://github.com/openshift/azure-disk-csi-driver-operator/pull/56)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#55](https://github.com/openshift/azure-disk-csi-driver-operator/pull/55)
* [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#53](https://github.com/openshift/azure-disk-csi-driver-operator/pull/53)
* Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#51](https://github.com/openshift/azure-disk-csi-driver-operator/pull/51)
* [Bug 2095049](https://bugzilla.redhat.com/show_bug.cgi?id=2095049): Only use credentials that are provided by the azure-inject-credential… [#49](https://github.com/openshift/azure-disk-csi-driver-operator/pull/49)
* [Bug 2089973](https://bugzilla.redhat.com/show_bug.cgi?id=2089973): bump libs to k8s 1.24 for OCP 4.11 [#48](https://github.com/openshift/azure-disk-csi-driver-operator/pull/48)
* Mark CSI StorageClass as the default one [#47](https://github.com/openshift/azure-disk-csi-driver-operator/pull/47)
* [Bug 2062152](https://bugzilla.redhat.com/show_bug.cgi?id=2062152): Increase pod startup timeout in e2e tests [#45](https://github.com/openshift/azure-disk-csi-driver-operator/pull/45)
* [Bug 2073373](https://bugzilla.redhat.com/show_bug.cgi?id=2073373): Sync cmdline arguments with upstream [#46](https://github.com/openshift/azure-disk-csi-driver-operator/pull/46)
* Fix CSIDriver fsGroupPolicy [#44](https://github.com/openshift/azure-disk-csi-driver-operator/pull/44)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/3b25a5d7c612c4b0d9dfdf1fc44e4dc8483d7ae3...)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/25f497505abeaf6b8563bd97bb21037159cb61ad)

* [Bug 2077904](https://bugzilla.redhat.com/show_bug.cgi?id=2077904): Fix empty string usage in ValidateForProvisioning [#5835](https://github.com/openshift/installer/pull/5835)
* [Bug 2045771](https://bugzilla.redhat.com/show_bug.cgi?id=2045771): bump RHCOS 4.10 bootimage metadata [#5932](https://github.com/openshift/installer/pull/5932)
* [Bug 2083335](https://bugzilla.redhat.com/show_bug.cgi?id=2083335): Set rc-manager=unmanaged for on-prem bootstrap [#5876](https://github.com/openshift/installer/pull/5876)
* [Bug 2084547](https://bugzilla.redhat.com/show_bug.cgi?id=2084547): update azure arm templates to support customer provided vnet [#5892](https://github.com/openshift/installer/pull/5892)
* [Bug 2083327](https://bugzilla.redhat.com/show_bug.cgi?id=2083327): [release-4.10] Add 'ARG TAGS=""' line for each build step [#5874](https://github.com/openshift/installer/pull/5874)
* [Full changelog](https://github.com/openshift/installer/compare/0adfce2a1bfede7d74ac8930a5d56df1a406a533...25f497505abeaf6b8563bd97bb21037159cb61ad)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/878f5a8fe0d04ea70c5e5de11fa9cc7a49afb86e)

* [Bug 2087248](https://bugzilla.redhat.com/show_bug.cgi?id=2087248): Add the ReleaseAccepted condition to the oc adm upgrade command [#1147](https://github.com/openshift/oc/pull/1147)
* [Bug 2080151](https://bugzilla.redhat.com/show_bug.cgi?id=2080151): Remove network CRDs scheme registration [#1122](https://github.com/openshift/oc/pull/1122)
* [Bug 2084429](https://bugzilla.redhat.com/show_bug.cgi?id=2084429): Fix project command auto completion [#1131](https://github.com/openshift/oc/pull/1131)
* [Full changelog](https://github.com/openshift/oc/compare/04ad1b56880418de7bd6feb9ff37a8518fbc1a0e...878f5a8fe0d04ea70c5e5de11fa9cc7a49afb86e)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/7d5f84865b340ae9e4ff026727cc2960d9bde3d0)

* [Bug 2082312](https://bugzilla.redhat.com/show_bug.cgi?id=2082312): Adding Thomas to reviewers, adding Allen to approvers [#817](https://github.com/openshift/cluster-etcd-operator/pull/817)
* [Bug 2080554](https://bugzilla.redhat.com/show_bug.cgi?id=2080554): manually disable defrag [#809](https://github.com/openshift/cluster-etcd-operator/pull/809)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1977e0f0d2bfbf0a70e8f78392e76ff6e87d0b00...7d5f84865b340ae9e4ff026727cc2960d9bde3d0)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/def258f60da724f6cdd9a19f46e089ed34704238)

* [Bug 2084514](https://bugzilla.redhat.com/show_bug.cgi?id=2084514): Fix cloudfront middleware configuration [#780](https://github.com/openshift/cluster-image-registry-operator/pull/780)
* [Bug 2083559](https://bugzilla.redhat.com/show_bug.cgi?id=2083559): IBMCloud: Add admin permissions to CR [#778](https://github.com/openshift/cluster-image-registry-operator/pull/778)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/87e605ad80919d7091796a3d2ecc671dfb82931a...def258f60da724f6cdd9a19f46e089ed34704238)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a5febd0db51adf41a12d4e30a463f68428c51fb3)

* [Bug 2083460](https://bugzilla.redhat.com/show_bug.cgi?id=2083460): Set timeout across Grafana components [#1654](https://github.com/openshift/cluster-monitoring-operator/pull/1654)
* [Bug 2077722](https://bugzilla.redhat.com/show_bug.cgi?id=2077722): Adjust NodeFilesystemSpaceFillingUp thresholds according default kubelet GC behavior [#1665](https://github.com/openshift/cluster-monitoring-operator/pull/1665)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/190b2c0525202b31e2c0296b6e18b3e27ec809eb...a5febd0db51adf41a12d4e30a463f68428c51fb3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/f76262ceb3a37cf05801b960d8bc40746243d870)

* [Bug 2058508](https://bugzilla.redhat.com/show_bug.cgi?id=2058508): Add rolling update strategy for Kuryr-CNI. [#1321](https://github.com/openshift/cluster-network-operator/pull/1321)
* [Bug 2083593](https://bugzilla.redhat.com/show_bug.cgi?id=2083593): Add default-route field to egress-router k8s.v1.cni.cncf.io/networks [#1436](https://github.com/openshift/cluster-network-operator/pull/1436)
* [Bug 2079031](https://bugzilla.redhat.com/show_bug.cgi?id=2079031): Make the use of the ip-reconciler cronjob opt-in by detecting IPAM type usage [backport 4.10] [#1398](https://github.com/openshift/cluster-network-operator/pull/1398)
* [Bug 2081149](https://bugzilla.redhat.com/show_bug.cgi?id=2081149): Reserve port TCP/9104 for cluster-network-operator [#1418](https://github.com/openshift/cluster-network-operator/pull/1418)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/bf6e4bab52e409beae7f2f5fedc99a244605d7e7...f76262ceb3a37cf05801b960d8bc40746243d870)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/73f960989a07e5c4aed79ba1e9a86a09886eb271)

* Ignore Profile updates triggered by old operands (#357) [#357](https://github.com/openshift/cluster-node-tuning-operator/pull/357)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3c5760e9013f0f28c106d6a216ccedcc27393f4f...73f960989a07e5c4aed79ba1e9a86a09886eb271)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/)

* [STOR-1804](https://issues.redhat.com/browse/STOR-1804): update ClusterCSIDriver CRDs [#464](https://github.com/openshift/cluster-storage-operator/pull/464)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#459](https://github.com/openshift/cluster-storage-operator/pull/459)
* [OCPBUGS-28748](https://issues.redhat.com/browse/OCPBUGS-28748): log default storage class names when collector is triggered [#460](https://github.com/openshift/cluster-storage-operator/pull/460)
* [OCPBUGS-30498](https://issues.redhat.com/browse/OCPBUGS-30498): CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 [#463](https://github.com/openshift/cluster-storage-operator/pull/463)
* [STOR-1758](https://issues.redhat.com/browse/STOR-1758): Add azure file hypershift [#454](https://github.com/openshift/cluster-storage-operator/pull/454)
* [OCPBUGS-28879](https://issues.redhat.com/browse/OCPBUGS-28879): Fix problem-detector proxy setting [#457](https://github.com/openshift/cluster-storage-operator/pull/457)
* [OCPBUGS-29573](https://issues.redhat.com/browse/OCPBUGS-29573): Apply hypershift cluster-profile for ibm-cloud-managed [#458](https://github.com/openshift/cluster-storage-operator/pull/458)
* [OCPBUGS-28765](https://issues.redhat.com/browse/OCPBUGS-28765): Remove master node selector from azure-csi-driver-operator deployment [#448](https://github.com/openshift/cluster-storage-operator/pull/448)
* [OCPBUGS-29196](https://issues.redhat.com/browse/OCPBUGS-29196): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#455](https://github.com/openshift/cluster-storage-operator/pull/455)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump all deps [#447](https://github.com/openshift/cluster-storage-operator/pull/447)
* [STOR-1611](https://issues.redhat.com/browse/STOR-1611): remove ibm-vpc-node-label-updater [#445](https://github.com/openshift/cluster-storage-operator/pull/445)
* [OCPBUGS-27159](https://issues.redhat.com/browse/OCPBUGS-27159): Allow vSphere CSI driver to be disabled [#444](https://github.com/openshift/cluster-storage-operator/pull/444)
* [STOR-1289](https://issues.redhat.com/browse/STOR-1289): Move vSphere prometheus rules to CSO [#442](https://github.com/openshift/cluster-storage-operator/pull/442)
* [STOR-1354](https://issues.redhat.com/browse/STOR-1354): Remove Alibaba Disk CSI Driver [#440](https://github.com/openshift/cluster-storage-operator/pull/440)
* [STOR-1574](https://issues.redhat.com/browse/STOR-1574): Bump library-go [#443](https://github.com/openshift/cluster-storage-operator/pull/443)
* [STOR-1722](https://issues.redhat.com/browse/STOR-1722): Azure disk hypershift [#420](https://github.com/openshift/cluster-storage-operator/pull/420)
* [STOR-1714](https://issues.redhat.com/browse/STOR-1714): Release leadership on SIGTERM [#437](https://github.com/openshift/cluster-storage-operator/pull/437)
* [OCPBUGS-22994](https://issues.redhat.com/browse/OCPBUGS-22994): Add UsernameWithoutDomain as a reason for triggering VSphereOpenshitConnectionFailure alert [#430](https://github.com/openshift/cluster-storage-operator/pull/430)
* [OCPBUGS-22422](https://issues.redhat.com/browse/OCPBUGS-22422): Fix PodStartupStorageOperationsFailing alert [#436](https://github.com/openshift/cluster-storage-operator/pull/436)
* [STOR-1688](https://issues.redhat.com/browse/STOR-1688): Chore: add .snyk file to ignore false positives [#434](https://github.com/openshift/cluster-storage-operator/pull/434)
* [OCPBUGS-25564](https://issues.redhat.com/browse/OCPBUGS-25564): Updating ose-cluster-storage-operator-container image to be consistent with ART [#435](https://github.com/openshift/cluster-storage-operator/pull/435)
* [CCO-251](https://issues.redhat.com/browse/CCO-251): replace instanceAdmin role with specific compute permissions [#429](https://github.com/openshift/cluster-storage-operator/pull/429)
* [OCPBUGS-24927](https://issues.redhat.com/browse/OCPBUGS-24927): Updating ose-cluster-storage-operator-container image to be consistent with ART [#432](https://github.com/openshift/cluster-storage-operator/pull/432)
* [OCPBUGS-23852](https://issues.redhat.com/browse/OCPBUGS-23852): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#431](https://github.com/openshift/cluster-storage-operator/pull/431)
* [OCPVE-789](https://issues.redhat.com/browse/OCPVE-789): annotate credentials request manifests [#418](https://github.com/openshift/cluster-storage-operator/pull/418)
* [STOR-1277](https://issues.redhat.com/browse/STOR-1277): Add Prometheus rules for SELinux telemetry [#422](https://github.com/openshift/cluster-storage-operator/pull/422)
* [TRT-1376](https://issues.redhat.com/browse/TRT-1376): Revert #410 "CCO-251: use granular permissions for gcp credentails request" [#426](https://github.com/openshift/cluster-storage-operator/pull/426)
* [CCO-251](https://issues.redhat.com/browse/CCO-251): use granular permissions for gcp credentails request [#410](https://github.com/openshift/cluster-storage-operator/pull/410)
* [OCPBUGS-24112](https://issues.redhat.com/browse/OCPBUGS-24112): Updating ose-cluster-storage-operator-container image to be consistent with ART [#424](https://github.com/openshift/cluster-storage-operator/pull/424)
* [STOR-1487](https://issues.redhat.com/browse/STOR-1487): bump openshift/api to get IBMCloudCSIDriverConfigSpec [#423](https://github.com/openshift/cluster-storage-operator/pull/423)
* [OCPBUGS-24027](https://issues.redhat.com/browse/OCPBUGS-24027): forbidden access to resource on shared-resource-csi-driver-operator [#425](https://github.com/openshift/cluster-storage-operator/pull/425)
* [STOR-1402](https://issues.redhat.com/browse/STOR-1402): Chore: update libraries in all operators [4.15] [#421](https://github.com/openshift/cluster-storage-operator/pull/421)
* [OCPBUGS-23120](https://issues.redhat.com/browse/OCPBUGS-23120): [IBM ROKS] cluster-storage-operator does not set upgradeable=True [#417](https://github.com/openshift/cluster-storage-operator/pull/417)
* [STOR-1453](https://issues.redhat.com/browse/STOR-1453): Grant permissions to access `apiserver` to CSI driver operators [#415](https://github.com/openshift/cluster-storage-operator/pull/415)
* [OCPBUGS-22594](https://issues.redhat.com/browse/OCPBUGS-22594): CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 [#414](https://github.com/openshift/cluster-storage-operator/pull/414)
* [OCPBUGS-22357](https://issues.redhat.com/browse/OCPBUGS-22357): CVE-2023-44487: bump github.com/openshift/library-go to master [#411](https://github.com/openshift/cluster-storage-operator/pull/411)
* [OCPBUGS-21593](https://issues.redhat.com/browse/OCPBUGS-21593): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#404](https://github.com/openshift/cluster-storage-operator/pull/404)
* [OCPBUGS-13669](https://issues.redhat.com/browse/OCPBUGS-13669): skip Azure File installation on Azure StackHub [#395](https://github.com/openshift/cluster-storage-operator/pull/395)
* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Move KAS access label to right place [#403](https://github.com/openshift/cluster-storage-operator/pull/403)
* update readme [#400](https://github.com/openshift/cluster-storage-operator/pull/400)
* [OCPBUGS-19073](https://issues.redhat.com/browse/OCPBUGS-19073): Add KAS label to aws-ebs-operator [#399](https://github.com/openshift/cluster-storage-operator/pull/399)
* [OCPBUGS-19184](https://issues.redhat.com/browse/OCPBUGS-19184): Updating cluster-storage-operator images to be consistent with ART [#398](https://github.com/openshift/cluster-storage-operator/pull/398)
* [STOR-1446](https://issues.redhat.com/browse/STOR-1446): Restart `vsphere-problem-detector-operator` Pods if `serving-cert` changed [#394](https://github.com/openshift/cluster-storage-operator/pull/394)
* [STOR-1274](https://issues.redhat.com/browse/STOR-1274): use granular permissons for Azure credential requests [#388](https://github.com/openshift/cluster-storage-operator/pull/388)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): hypershift: pass through control plane images to AWS EBS CSI driver operator [#393](https://github.com/openshift/cluster-storage-operator/pull/393)
* [STOR-1432](https://issues.redhat.com/browse/STOR-1432): hypershift: add independent refs for AWS EBS driver controller images [#392](https://github.com/openshift/cluster-storage-operator/pull/392)
* [OCPBUGS-17356](https://issues.redhat.com/browse/OCPBUGS-17356): Fix PodStartupStorageOperationsFailing alert [#391](https://github.com/openshift/cluster-storage-operator/pull/391)
* Remove "get" verb from "events" resource of RBAC for provisioner sidecar [#390](https://github.com/openshift/cluster-storage-operator/pull/390)
* [OCPBUGS-11359](https://issues.redhat.com/browse/OCPBUGS-11359): Remove unused versions from status [#374](https://github.com/openshift/cluster-storage-operator/pull/374)
* [OCPBUGS-16783](https://issues.redhat.com/browse/OCPBUGS-16783): Chore: Update OWNERS [#389](https://github.com/openshift/cluster-storage-operator/pull/389)
* [OCPBUGS-16265](https://issues.redhat.com/browse/OCPBUGS-16265): Publish csi sidecar clusterroles earlier [#386](https://github.com/openshift/cluster-storage-operator/pull/386)
* [OCPBUGS-15940](https://issues.redhat.com/browse/OCPBUGS-15940): Revert revert of hypershift cleanup [#385](https://github.com/openshift/cluster-storage-operator/pull/385)
* Revert "STOR-1369: Start hypershift refactor" #384 [#384](https://github.com/openshift/cluster-storage-operator/pull/384)
* [STOR-1369](https://issues.redhat.com/browse/STOR-1369): Start hypershift refactor [#381](https://github.com/openshift/cluster-storage-operator/pull/381)
* [OCPBUGS-13696](https://issues.redhat.com/browse/OCPBUGS-13696): Warn about CBT enabled VMs via vsphere-problem-detector [#371](https://github.com/openshift/cluster-storage-operator/pull/371)
* [OCPBUGS-14053](https://issues.redhat.com/browse/OCPBUGS-14053): decrease severity for MultipleDefaultStorageClasses alert [#382](https://github.com/openshift/cluster-storage-operator/pull/382)
* [STOR-1065](https://issues.redhat.com/browse/STOR-1065): Publish ClusterRoles for csi driver sidecars [#379](https://github.com/openshift/cluster-storage-operator/pull/379)
* [STOR-1167](https://issues.redhat.com/browse/STOR-1167): Add permissions needed by fast snapshots to AWS CSI driver [#369](https://github.com/openshift/cluster-storage-operator/pull/369)
* [CCO-319](https://issues.redhat.com/browse/CCO-319): Add serviceAccountNames to azure-disk and azure-file credentials [#364](https://github.com/openshift/cluster-storage-operator/pull/364)
* [OCPBUGS-13187](https://issues.redhat.com/browse/OCPBUGS-13187): Make vsphere-problem-detector alerts configurable [#380](https://github.com/openshift/cluster-storage-operator/pull/380)
* [CCO-324](https://issues.redhat.com/browse/CCO-324), [CCO-325](https://issues.redhat.com/browse/CCO-325): pass version to azure operators [#372](https://github.com/openshift/cluster-storage-operator/pull/372)
* [OCPBUGS-13914](https://issues.redhat.com/browse/OCPBUGS-13914): allow removal of vsphereStorageDriver field in 4.14 [#378](https://github.com/openshift/cluster-storage-operator/pull/378)
* [STOR-1334](https://issues.redhat.com/browse/STOR-1334): update storage operator to read featuregates from API [#376](https://github.com/openshift/cluster-storage-operator/pull/376)
* Revert "update storage operator to read featuregates from API on standalone OCP" [#375](https://github.com/openshift/cluster-storage-operator/pull/375)
* [STOR-1334](https://issues.redhat.com/browse/STOR-1334): update storage operator to read featuregates from API on standalone OCP [#368](https://github.com/openshift/cluster-storage-operator/pull/368)
* [OCPBUGS-11617](https://issues.redhat.com/browse/OCPBUGS-11617): Bump github.com/prometheus-operator/prometheus-operator [#358](https://github.com/openshift/cluster-storage-operator/pull/358)
* Updating cluster-storage-operator images to be consistent with ART [#365](https://github.com/openshift/cluster-storage-operator/pull/365)
* [OCPBUGS-11729](https://issues.redhat.com/browse/OCPBUGS-11729): VSphereStorageDriver does not document the platform default [#360](https://github.com/openshift/cluster-storage-operator/pull/360)
* [OCPBUGS-11493](https://issues.redhat.com/browse/OCPBUGS-11493): vsphereStorageDriver validation is misleading [#357](https://github.com/openshift/cluster-storage-operator/pull/357)
* [OCPBUGS-8683](https://issues.redhat.com/browse/OCPBUGS-8683): Add management workloads annotations [#350](https://github.com/openshift/cluster-storage-operator/pull/350)
* [OCPBUGS-11112](https://issues.redhat.com/browse/OCPBUGS-11112): Add missing workload label to openshift-manila-csi-driver NS [#353](https://github.com/openshift/cluster-storage-operator/pull/353)
* [OCPBUGS-8691](https://issues.redhat.com/browse/OCPBUGS-8691): Hypershift: set control plane operand properties [#352](https://github.com/openshift/cluster-storage-operator/pull/352)
* Updating cluster-storage-operator images to be consistent with ART [#349](https://github.com/openshift/cluster-storage-operator/pull/349)
* [OCPBUGS-8328](https://issues.redhat.com/browse/OCPBUGS-8328): assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount [#346](https://github.com/openshift/cluster-storage-operator/pull/346)
* [BUILD-571](https://issues.redhat.com/browse/BUILD-571): enable shared resource operator to run in an hypershift guest cluster [#342](https://github.com/openshift/cluster-storage-operator/pull/342)
* [STOR-875](https://issues.redhat.com/browse/STOR-875): Implement custom keys in AWS EBS CSI driver operator [#338](https://github.com/openshift/cluster-storage-operator/pull/338)
* [OCPBUGS-5410](https://issues.redhat.com/browse/OCPBUGS-5410): add ReEncrypt KMS permissions [#345](https://github.com/openshift/cluster-storage-operator/pull/345)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): Revert "remove tech preview feature gate for shared resources" [#343](https://github.com/openshift/cluster-storage-operator/pull/343)
* [OCPBUGS-6992](https://issues.redhat.com/browse/OCPBUGS-6992): Add UID to CSO Pod to be able to run with custom SCCs [#344](https://github.com/openshift/cluster-storage-operator/pull/344)
* [MULTIARCH-3203](https://issues.redhat.com/browse/MULTIARCH-3203): Hypershift changes for CSO moved to CP on PowerVS CSI driver operator [#331](https://github.com/openshift/cluster-storage-operator/pull/331)
* [STOR-1123](https://issues.redhat.com/browse/STOR-1123): Add alert about topology misconfiguration [#334](https://github.com/openshift/cluster-storage-operator/pull/334)
* [STOR-1128](https://issues.redhat.com/browse/STOR-1128): Stop creating an in-tree SC for vSphere [#340](https://github.com/openshift/cluster-storage-operator/pull/340)
* [OCPBUGS-7483](https://issues.redhat.com/browse/OCPBUGS-7483): Revert "Merge pull request #332 from bertinatto/default-sc" [#339](https://github.com/openshift/cluster-storage-operator/pull/339)
* [STOR-1128](https://issues.redhat.com/browse/STOR-1128): Remove defaultstorageclass controller [#332](https://github.com/openshift/cluster-storage-operator/pull/332)
* [BUILD-407](https://issues.redhat.com/browse/BUILD-407): remove tech preview feature gate for shared resources [#335](https://github.com/openshift/cluster-storage-operator/pull/335)
* [OCPBUGS-7300](https://issues.redhat.com/browse/OCPBUGS-7300): hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment [#336](https://github.com/openshift/cluster-storage-operator/pull/336)
* [STOR-1019](https://issues.redhat.com/browse/STOR-1019): Bump to k8s 1.26 libs for OCP 4.13 [#333](https://github.com/openshift/cluster-storage-operator/pull/333)
* Updating cluster-storage-operator images to be consistent with ART [#330](https://github.com/openshift/cluster-storage-operator/pull/330)
* [OCPBUGS-4173](https://issues.redhat.com/browse/OCPBUGS-4173): Restart vsphere-problem-detector after credentials change [#328](https://github.com/openshift/cluster-storage-operator/pull/328)
* [OCPBUGS-4508](https://issues.redhat.com/browse/OCPBUGS-4508): User real node name in failing mount alerts [#329](https://github.com/openshift/cluster-storage-operator/pull/329)
* [Bug 2066664](https://bugzilla.redhat.com/show_bug.cgi?id=2066664): Remove wildcard use in rules for CSI operators and drivers [#270](https://github.com/openshift/cluster-storage-operator/pull/270)
* [STOR-1039](https://issues.redhat.com/browse/STOR-1039): Make changes into CSO for hypershift [#318](https://github.com/openshift/cluster-storage-operator/pull/318)
* [OCPBUGS-2880](https://issues.redhat.com/browse/OCPBUGS-2880): Fix panic on empty featureGate.spec.customNoUpgrade [#325](https://github.com/openshift/cluster-storage-operator/pull/325)
* [Bug 2093016](https://bugzilla.redhat.com/show_bug.cgi?id=2093016): Add alert about attach / mount failing [#324](https://github.com/openshift/cluster-storage-operator/pull/324)
* [OCPBUGS-1361](https://issues.redhat.com/browse/OCPBUGS-1361): Reword vSphere problem detector check alerts [#322](https://github.com/openshift/cluster-storage-operator/pull/322)
* Remove specific UID from cluster-storage-operator [#316](https://github.com/openshift/cluster-storage-operator/pull/316)
* [OCPBUGS-1904](https://issues.redhat.com/browse/OCPBUGS-1904): Allow CSI operator to get CRDs [#323](https://github.com/openshift/cluster-storage-operator/pull/323)
* add storage capability annotation [#303](https://github.com/openshift/cluster-storage-operator/pull/303)
* Bump go to 1.19 [#321](https://github.com/openshift/cluster-storage-operator/pull/321)
* [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#317](https://github.com/openshift/cluster-storage-operator/pull/317)
* [STOR-1050](https://issues.redhat.com/browse/STOR-1050): bump openshift/api to latest master [#319](https://github.com/openshift/cluster-storage-operator/pull/319)
* Remove in-tree AWS EBS and GCP PD storage classes [#312](https://github.com/openshift/cluster-storage-operator/pull/312)
* [TRT-534](https://issues.redhat.com/browse/TRT-534): Add client certificate and key to service monitor [#306](https://github.com/openshift/cluster-storage-operator/pull/306)
* [OCPBUGS-946](https://issues.redhat.com/browse/OCPBUGS-946): Resource csi.storage.k8s.io/csinodeinfos added to powervs-block-csi-d river-operator-clusterrole [#315](https://github.com/openshift/cluster-storage-operator/pull/315)
* Updating cluster-storage-operator images to be consistent with ART [#296](https://github.com/openshift/cluster-storage-operator/pull/296)
* [Bug 2112237](https://bugzilla.redhat.com/show_bug.cgi?id=2112237): correct sc error messages for ibm and alibaba platforms [#310](https://github.com/openshift/cluster-storage-operator/pull/310)
* Add PowerVS Block CSI Driver Operator [#304](https://github.com/openshift/cluster-storage-operator/pull/304)
* [Bug 2108054](https://bugzilla.redhat.com/show_bug.cgi?id=2108054): Allow Prometheus to scan openshift-cluster-csi-drivers namespace [#308](https://github.com/openshift/cluster-storage-operator/pull/308)
* [STOR-956](https://issues.redhat.com/browse/STOR-956): Bump(openshift/api): to get CSI changes [#307](https://github.com/openshift/cluster-storage-operator/pull/307)
* [Bug 2108054](https://bugzilla.redhat.com/show_bug.cgi?id=2108054): Add alert about unsupported CSI driver [#305](https://github.com/openshift/cluster-storage-operator/pull/305)
* [Bug 2107043](https://bugzilla.redhat.com/show_bug.cgi?id=2107043): HTTPS_PROXY ENV missing in some CSI driver operators [#301](https://github.com/openshift/cluster-storage-operator/pull/301)
* [Bug 2101645](https://bugzilla.redhat.com/show_bug.cgi?id=2101645): DefaultStorageClassController reports fake message on azure and openstack [#292](https://github.com/openshift/cluster-storage-operator/pull/292)
* [Bug 2077599](https://bugzilla.redhat.com/show_bug.cgi?id=2077599): Fix vCenter / ESXi version alerts [#290](https://github.com/openshift/cluster-storage-operator/pull/290)
* [Bug 2097400](https://bugzilla.redhat.com/show_bug.cgi?id=2097400): Allow Shared Resource Driver to operate validating webhook [#288](https://github.com/openshift/cluster-storage-operator/pull/288)
* [Bug 2077050](https://bugzilla.redhat.com/show_bug.cgi?id=2077050): Un-Revert "OCP should default to pd-ssd disk type on GCP" [#284](https://github.com/openshift/cluster-storage-operator/pull/284)
* [Bug 2081557](https://bugzilla.redhat.com/show_bug.cgi?id=2081557): Fix DefaultStorageClassController getting Available=False on error [#277](https://github.com/openshift/cluster-storage-operator/pull/277)
* [Bug 2088533](https://bugzilla.redhat.com/show_bug.cgi?id=2088533): remove unused '-v' for shared resource operator as part of klogv2/openshift api/ k8s bump [#287](https://github.com/openshift/cluster-storage-operator/pull/287)
* [Bug 2086231](https://bugzilla.redhat.com/show_bug.cgi?id=2086231): BUILD-405: Install the Shared Resource CSI Driver WebHook [#278](https://github.com/openshift/cluster-storage-operator/pull/278)
* Updating cluster-storage-operator images to be consistent with ART [#282](https://github.com/openshift/cluster-storage-operator/pull/282)
* [Bug 2077050](https://bugzilla.redhat.com/show_bug.cgi?id=2077050): Revert "OCP should default to pd-ssd disk type on GCP" [#283](https://github.com/openshift/cluster-storage-operator/pull/283)
* [Bug 2077599](https://bugzilla.redhat.com/show_bug.cgi?id=2077599): Alert on vCenter < 7.0.2 [#279](https://github.com/openshift/cluster-storage-operator/pull/279)
* [Bug 2077050](https://bugzilla.redhat.com/show_bug.cgi?id=2077050): OCP should default to pd-ssd disk type on GCP [#273](https://github.com/openshift/cluster-storage-operator/pull/273)
* [Bug 2079197](https://bugzilla.redhat.com/show_bug.cgi?id=2079197): alert when more than one default storage class is detected [#276](https://github.com/openshift/cluster-storage-operator/pull/276)
* manifests/deployment: comply to restricted pod security level [#274](https://github.com/openshift/cluster-storage-operator/pull/274)
* remove openstack in-tree storage class [#271](https://github.com/openshift/cluster-storage-operator/pull/271)
* remove azure in-tree storage class [#272](https://github.com/openshift/cluster-storage-operator/pull/272)
* Azure File CSI Driver Operator is GA in OCP 4.11 [#266](https://github.com/openshift/cluster-storage-operator/pull/266)
* Add missing ibm cloud annotations to prometheus rbac [#267](https://github.com/openshift/cluster-storage-operator/pull/267)
* no CredentialsRequests in ibm-cloud-managed [#253](https://github.com/openshift/cluster-storage-operator/pull/253)
* [Bug 2060509](https://bugzilla.redhat.com/show_bug.cgi?id=2060509): Incorrect installation of ibmcloud vpc csi driver in IBM… [#264](https://github.com/openshift/cluster-storage-operator/pull/264)
* [Bug 2049872](https://bugzilla.redhat.com/show_bug.cgi?id=2049872): cluster storage operator AWS credentialsrequest lacks KMS privileges [#263](https://github.com/openshift/cluster-storage-operator/pull/263)
* [Bug 2043132](https://bugzilla.redhat.com/show_bug.cgi?id=2043132): Add metrics for vsphere operator [#262](https://github.com/openshift/cluster-storage-operator/pull/262)
* [Bug 2050300](https://bugzilla.redhat.com/show_bug.cgi?id=2050300): Don't set generation in object comming from cache [#261](https://github.com/openshift/cluster-storage-operator/pull/261)
* Updating cluster-storage-operator images to be consistent with ART [#260](https://github.com/openshift/cluster-storage-operator/pull/260)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/3ca5aedc88a1bc528feba03b07d200267c100a0a...)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/684f6f42381cf6401dfb7e4f6f5f9fd0e441639b)

* Updating ose-cluster-update-keys images to be consistent with ART [#41](https://github.com/openshift/cluster-update-keys/pull/41)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/342eb8e2631f3218ea386479102784d5e288d868...684f6f42381cf6401dfb7e4f6f5f9fd0e441639b)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b3da2d3eba82adcd53198d662607f21641817c4a)

* [Bug 2083370](https://bugzilla.redhat.com/show_bug.cgi?id=2083370): Do not save desired update on load failures [#776](https://github.com/openshift/cluster-version-operator/pull/776)
* [Bug 2080058](https://bugzilla.redhat.com/show_bug.cgi?id=2080058): pkg/cvo/updatepayload: Prune previous payload downloads [#769](https://github.com/openshift/cluster-version-operator/pull/769)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/95f1d2cbe2925f9d326f35ceb7b0bfa4fe047840...b3da2d3eba82adcd53198d662607f21641817c4a)


### [console](https://github.com/openshift/console/tree/7419e0314f29133b331fc611a4bb1b0ca8ed1426)

* [Bug 2084430](https://bugzilla.redhat.com/show_bug.cgi?id=2084430): fixes apiversion for k8s svc and resource selection for sink for form yaml switcher [#11482](https://github.com/openshift/console/pull/11482)
* [Bug 2087065](https://bugzilla.redhat.com/show_bug.cgi?id=2087065): show Limit exceeded state for large number of nodes in topology [#11506](https://github.com/openshift/console/pull/11506)
* [Bug 2050273](https://bugzilla.redhat.com/show_bug.cgi?id=2050273): Update MON_DISK_LOW whitelisted alert documentation URL [#11411](https://github.com/openshift/console/pull/11411)
* [Bug 2089162](https://bugzilla.redhat.com/show_bug.cgi?id=2089162): Change learn more link in virtualization -> migration tool [#11541](https://github.com/openshift/console/pull/11541)
* [Bug 2089547](https://bugzilla.redhat.com/show_bug.cgi?id=2089547): Eliminate use of lookaside cache and move to Cachito [#11551](https://github.com/openshift/console/pull/11551)
* [Bug 2088430](https://bugzilla.redhat.com/show_bug.cgi?id=2088430): Set dashboards timeout based on selected timespan [#11532](https://github.com/openshift/console/pull/11532)
* [Bug 2084091](https://bugzilla.redhat.com/show_bug.cgi?id=2084091): MCG standalone deployment page goes blank when the KMS option is enabled [#11479](https://github.com/openshift/console/pull/11479)
* [Bug 2088247](https://bugzilla.redhat.com/show_bug.cgi?id=2088247): Different status shows on VM list page and details page [#11538](https://github.com/openshift/console/pull/11538)
* [Bug 2087041](https://bugzilla.redhat.com/show_bug.cgi?id=2087041): back port conditional updates [#11487](https://github.com/openshift/console/pull/11487)
* [Bug 2088281](https://bugzilla.redhat.com/show_bug.cgi?id=2088281): Attached disk keeps in loading status when add disk to a power off VM by non-privileged user [#11530](https://github.com/openshift/console/pull/11530)
* [Bug 2088246](https://bugzilla.redhat.com/show_bug.cgi?id=2088246): Overview page crash if no labels available [#11525](https://github.com/openshift/console/pull/11525)
* [Bug 2051433](https://bugzilla.redhat.com/show_bug.cgi?id=2051433): [release-4.10] Create HANA VM does not use values from customized HANA templates [#11011](https://github.com/openshift/console/pull/11011)
* [Bug 2088255](https://bugzilla.redhat.com/show_bug.cgi?id=2088255): Adding missing annotations to create VM from YAML [#11527](https://github.com/openshift/console/pull/11527)
* [Bug 2088019](https://bugzilla.redhat.com/show_bug.cgi?id=2088019): The default YAML on vm wizard is not latest [#11522](https://github.com/openshift/console/pull/11522)
* [Bug 2083729](https://bugzilla.redhat.com/show_bug.cgi?id=2083729): Fix Filter Dropdown State Management [#11471](https://github.com/openshift/console/pull/11471)
* [Bug 2084489](https://bugzilla.redhat.com/show_bug.cgi?id=2084489): Create VM from template that has sourceRef - will now reflect sourceRef at yaml [#11485](https://github.com/openshift/console/pull/11485)
* [Bug 2076989](https://bugzilla.redhat.com/show_bug.cgi?id=2076989): Fix ResourceQuota dashboard card and ACRQ donut label [#11367](https://github.com/openshift/console/pull/11367)
* [Bug 2083385](https://bugzilla.redhat.com/show_bug.cgi?id=2083385): fix bug where "Update blocked" label incorrectly displa… [#11466](https://github.com/openshift/console/pull/11466)
* [Bug 2076370](https://bugzilla.redhat.com/show_bug.cgi?id=2076370): fix CRD name filter [#11356](https://github.com/openshift/console/pull/11356)
* [Bug 2083551](https://bugzilla.redhat.com/show_bug.cgi?id=2083551): customize wizard is crashed [#11469](https://github.com/openshift/console/pull/11469)
* [Bug 2076275](https://bugzilla.redhat.com/show_bug.cgi?id=2076275): Update and scope our breadcrumb padding rule so it doesn't effect a pure implementation [#11365](https://github.com/openshift/console/pull/11365)
* [Bug 2076777](https://bugzilla.redhat.com/show_bug.cgi?id=2076777): add update mode to Update cluster [#11364](https://github.com/openshift/console/pull/11364)
* [Bug 2074163](https://bugzilla.redhat.com/show_bug.cgi?id=2074163): remove `.pf-c-button.pf-m-link` override [#11315](https://github.com/openshift/console/pull/11315)
* [Full changelog](https://github.com/openshift/console/compare/59a677724c96b60b0dde94019a199210391db747...7419e0314f29133b331fc611a4bb1b0ca8ed1426)


### [etcd](https://github.com/openshift/etcd/tree/7afa17cd7209a6ff16724a5a44bd2e05007e3171)

* Update OWNERS [#123](https://github.com/openshift/etcd/pull/123)
* [Full changelog](https://github.com/openshift/etcd/compare/bebd5a933f39495f781c3818e29f3ebe6d053878...7afa17cd7209a6ff16724a5a44bd2e05007e3171)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/3afdacbd0183254f82d302d4e8d14da3d311955f)

* [Bug 2067464](https://bugzilla.redhat.com/show_bug.cgi?id=2067464): Backport 107821 and 107831 [#1241](https://github.com/openshift/kubernetes/pull/1241)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b463d71c3d5ca378959e9daeb7e1cc9f9d742151...3afdacbd0183254f82d302d4e8d14da3d311955f)


### [hypershift](https://github.com/openshift/hypershift/tree/1db3a63c75e98bc95072cc99107a4b50bd7a7cb2)

* Fix(cpo): Propagate TLS security profile config to kube-controller-manager and kube-scheduler [#1416](https://github.com/openshift/hypershift/pull/1416)
* feat(cpo): adhere to upgrade order from kube version skew policy [#1410](https://github.com/openshift/hypershift/pull/1410)
* Set shutdown params to improve graceful shutdown [#1387](https://github.com/openshift/hypershift/pull/1387)
* fix(cpo): Scope down secrets access for olm collect profiles cj [#1378](https://github.com/openshift/hypershift/pull/1378)
* move to ga apis for all components now that management clusters at minimum release boundary [#1361](https://github.com/openshift/hypershift/pull/1361)
* configure cipher suites to prevent using medium strength ssl ciphers [#1359](https://github.com/openshift/hypershift/pull/1359)
* [Full changelog](https://github.com/openshift/hypershift/compare/0b12697f1e0333f99c62238db21c110a095fda0e...1db3a63c75e98bc95072cc99107a4b50bd7a7cb2)


### [insights-operator](https://github.com/openshift/insights-operator/tree/c860386ba27f5a7a7cb0a2a674ad0dfe87ee64ae)

* [Bug 2081844](https://bugzilla.redhat.com/show_bug.cgi?id=2081844): Fix the clusteroperator conditions values when IO is (#619) [#619](https://github.com/openshift/insights-operator/pull/619)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5a15ca6d8ffc5167468010971ac3f0bbf305894c...c860386ba27f5a7a7cb0a2a674ad0dfe87ee64ae)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/1170dff4ba9eead71d12d9de053f76e7bf9be2fe)

* [Bug 2053752](https://bugzilla.redhat.com/show_bug.cgi?id=2053752): import time [#49](https://github.com/openshift/ironic-agent-image/pull/49)
* [Bug 2053752](https://bugzilla.redhat.com/show_bug.cgi?id=2053752): Bump retries for UEFI boot configuration [#48](https://github.com/openshift/ironic-agent-image/pull/48)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/f2d7ff1817d3fff17f6b66c6757c3a40694ab9de...1170dff4ba9eead71d12d9de053f76e7bf9be2fe)


### [jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/c8d7a0e46ec04a5d5f64afcf4d43903fe69ff457)

* [Bug 2080204](https://bugzilla.redhat.com/show_bug.cgi?id=2080204): Correctly declare Jenkins URL with trailing slash [#1441](https://github.com/openshift/jenkins/pull/1441)
* [Full changelog](https://github.com/openshift/jenkins/compare/1ab318bffeee5f7b09d664460fee40cfe2f238eb...c8d7a0e46ec04a5d5f64afcf4d43903fe69ff457)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/08a8a1a5e774a500f144b4eb49ef2d32f87eb428)

* [Bug 2087763](https://bugzilla.redhat.com/show_bug.cgi?id=2087763): Probe failures and pod restarts during 4.7 to 4.8 upgrade [#431](https://github.com/openshift/sdn/pull/431)
* [Bug 2082451](https://bugzilla.redhat.com/show_bug.cgi?id=2082451): Masquerade in cluster traffic that is marked for egress IP [#430](https://github.com/openshift/sdn/pull/430)
* [Full changelog](https://github.com/openshift/sdn/compare/5593d549cad53d00c0f52ad8d8eb58d837b78605...08a8a1a5e774a500f144b4eb49ef2d32f87eb428)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/088ab061c537686f3e104ed0dd9f8794bb62f69c)

* [Bug 2085329](https://bugzilla.redhat.com/show_bug.cgi?id=2085329): Use v1 PodDisruptionBudget and CronJob resources [#72](https://github.com/openshift/kube-state-metrics/pull/72)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/6530ff5a6e35345e6aa8353c21d6fd5aa5873c12...088ab061c537686f3e104ed0dd9f8794bb62f69c)


### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/3e6786e8f86117475d98d4e19f9e035432ec4176)

* manifests/99-sca-disable.yaml: quote bool value [#369](https://github.com/openshift/okd-machine-os/pull/369)
* Unpin kernel [#364](https://github.com/openshift/okd-machine-os/pull/364)
* Bump FCOS to latest stable [#363](https://github.com/openshift/okd-machine-os/pull/363)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/6c9a6ad99c17c8e2091084df7ff1631fffb7a813...3e6786e8f86117475d98d4e19f9e035432ec4176)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/52118759e5c68733954f15d0cdc45c255752aa3c)

* [Bug 2090022](https://bugzilla.redhat.com/show_bug.cgi?id=2090022): Get rid of lookaside cache in OCP build [#17](https://github.com/openshift/machine-os-images/pull/17)
* Revert .ci-operator.yaml [#18](https://github.com/openshift/machine-os-images/pull/18)
* Updating ose-machine-os-images images to be consistent with ART [#9](https://github.com/openshift/machine-os-images/pull/9)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/918cb48ff7ff1dd864e6c4f8a9a12fb36b282242...52118759e5c68733954f15d0cdc45c255752aa3c)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/45712fe06896f0c282e749bd03cde2a110c7a5fb)

* Fix field selector (#50) [#50](https://github.com/openshift/network-metrics-daemon/pull/50)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/e5dda99bbfc8e1a1f12468f344939e5868bfffc7...45712fe06896f0c282e749bd03cde2a110c7a5fb)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1a99acbce6d3fe39fb755c762c362807c98bfc5d)

* [Bug 2080609](https://bugzilla.redhat.com/show_bug.cgi?id=2080609): Fix GRPC CheckRegistryServer function (#2756) [#298](https://github.com/openshift/operator-framework-olm/pull/298)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/1cb0c9a578ffcc6d471b483ab34b627430677f09...1a99acbce6d3fe39fb755c762c362807c98bfc5d)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/7bf36eea28fe66365d0dfdf8c39e3311ea14d19b)

* [Bug 2088627](https://bugzilla.redhat.com/show_bug.cgi?id=2088627): EgressIP NATs are not being cleared correctly from the logical router [#1098](https://github.com/openshift/ovn-kubernetes/pull/1098)
* [Bug 2087203](https://bugzilla.redhat.com/show_bug.cgi?id=2087203): enable `exportloopref` linter and fix violations [#1095](https://github.com/openshift/ovn-kubernetes/pull/1095)
* [Bug 2082467](https://bugzilla.redhat.com/show_bug.cgi?id=2082467): Fix cluster/status parsing for single-member db cluster (SNO) [#1082](https://github.com/openshift/ovn-kubernetes/pull/1082)
* [Bug 2083116](https://bugzilla.redhat.com/show_bug.cgi?id=2083116): delete SNAT2NIP if pod.node == egressNodeServingPod [#1084](https://github.com/openshift/ovn-kubernetes/pull/1084)
* [Bug 2080069](https://bugzilla.redhat.com/show_bug.cgi?id=2080069): Cleanup conntrack entries when services are deleted [#1061](https://github.com/openshift/ovn-kubernetes/pull/1061)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/bf6d8ae83cd819f2a49d2505636be51529f3aea3...7bf36eea28fe66365d0dfdf8c39e3311ea14d19b)


### [tests](https://github.com/openshift/origin/tree/4e11d238d9f989cb1008e5217824fd62f243eec0)

* [Bug 2080198](https://bugzilla.redhat.com/show_bug.cgi?id=2080198): skip tests for etcd leaders when etcd revisions change a lot [#27076](https://github.com/openshift/origin/pull/27076)
* [Full changelog](https://github.com/openshift/origin/compare/b0cd691ee09949c7b620c6d074676bc03b76eb6f...4e11d238d9f989cb1008e5217824fd62f243eec0)