# 4.11.0-0.okd-2023-01-14-152430

Created: 2023-01-15 10:06:34 +0000 UTC

Image Digest: `sha256:27c99f5b7734f773a7981b9e527417edcda0eee217117632198d64aa33e95c46`

Promoted from registry.ci.openshift.org/origin/release:4.11.0-0.okd-2023-01-14-152430


## Changes from 4.11.0-0.okd-2022-11-19-050030

### Components

* Kubernetes 1.24.6
* Fedora CoreOS upgraded from 411.36.4 to 411.36.5


### Rebuilt images without code change

* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [246ae15e](https://github.com/openshift/cloud-provider-openstack/commit/246ae15ed9faaffbc909271f5c119c5a25159425) `sha256:b17b97aeb7f240fe40e174c53da1d5a175b196806e5a5ab196d6b1f58a879a27`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [246ae15e](https://github.com/openshift/cloud-provider-openstack/commit/246ae15ed9faaffbc909271f5c119c5a25159425) `sha256:f0ac1f7e774af1aefd9c05e1e8db1e6dfd9f056d060a0e440a21e59e2bc33685`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [246ae15e](https://github.com/openshift/cloud-provider-openstack/commit/246ae15ed9faaffbc909271f5c119c5a25159425) `sha256:1aefc2d07a613087d258ee40970924b2cc0f3ef34347ea99062ff9090dfb92e0`
* [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [38f15dbc](https://github.com/openshift/cluster-api-provider-openstack/commit/38f15dbc704ea4ec65565194f27779177b4f1886) `sha256:45667e7332260d0f99a2eafaec2454cf10f7cd8b9d582d36d33d23299043eb34`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/bc51be826e96cae9e00d0fff0970fd273c078d9a)

* Updating ose-agent-installer-api-server images to be consistent with ART (#3980) [#3980](https://github.com/openshift/assisted-service/pull/3980)
* [MGMT-11799](https://issues.redhat.com/browse/MGMT-11799): change all 'go get' commands (#4887) [#4887](https://github.com/openshift/assisted-service/pull/4887)
* [Full changelog](https://github.com/openshift/assisted-service/compare/0f526475e7ec16c6586ee351c5216ef6ae225b1b...bc51be826e96cae9e00d0fff0970fd273c078d9a)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/6521f30171eef41729efd0907d15d6ae1665e7d3)

* Remove jira tickets prefix requirements (#596) [#596](https://github.com/openshift/assisted-installer/pull/596)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/9a6e300a4a7311feef98580d3ef07c4a314fca07...6521f30171eef41729efd0907d15d6ae1665e7d3)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/e74ffbf509d382c42891884b90a8a9fb82922f5e)

* Updating ose-agent-installer-node-agent images to be consistent with ART (#381) [#381](https://github.com/openshift/assisted-installer-agent/pull/381)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/b17b06bc7747db4869e53a0e785229278a81dd1e...e74ffbf509d382c42891884b90a8a9fb82922f5e)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/ba03552281a83293b5a1020012165db49a5b4fd2)

* [OCPBUGS-4185](https://issues.redhat.com/browse/OCPBUGS-4185): Fix nodeService.getVolumesLimit() adding more instance [#213](https://github.com/openshift/aws-ebs-csi-driver/pull/213)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/550e22cf414194c9be7345e9c9e478091fdb602d...ba03552281a83293b5a1020012165db49a5b4fd2)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/a796a77f62697f908fb8d6c354244f94b9c2ee03)

* Updating ose-machine-api-provider-aws images to be consistent with ART [#57](https://github.com/openshift/machine-api-provider-aws/pull/57)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/f6cf48823cee9ac0c2449abb31141c3033970ed5...a796a77f62697f908fb8d6c354244f94b9c2ee03)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/415f448b1570b7d15aebe60bae12052e06df59b4)

* [OCPBUGS-2123](https://issues.redhat.com/browse/OCPBUGS-2123): Fix availability sets unwanted creation for unknown vmSizes [#41](https://github.com/openshift/machine-api-provider-azure/pull/41)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/25eb7e1c09bf263fd10e538f9272add49be58772...415f448b1570b7d15aebe60bae12052e06df59b4)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/b1b244444835f9a3fd2c5e6717db9ba6d18607be)

* [OCPBUGS-5422](https://issues.redhat.com/browse/OCPBUGS-5422): Switch back to gp2 ebs volume type for bootstrap instance [#6743](https://github.com/openshift/installer/pull/6743)
* [OCPBUGS-4685](https://issues.redhat.com/browse/OCPBUGS-4685): out-of-bounds read in golang.org/x/text/language leads to DoS [#6685](https://github.com/openshift/installer/pull/6685)
* [OCPBUGS-3193](https://issues.redhat.com/browse/OCPBUGS-3193): [release-4.11] [AWS] Add AWS r6i into tested instance types table [#6350](https://github.com/openshift/installer/pull/6350)
* [OCPBUGS-3362](https://issues.redhat.com/browse/OCPBUGS-3362): bump RHCOS 4.11 bootimage metadata [#6720](https://github.com/openshift/installer/pull/6720)
* [OCPBUGS-4720](https://issues.redhat.com/browse/OCPBUGS-4720): GCP: Add me-west1 region [#6690](https://github.com/openshift/installer/pull/6690)
* [OCPBUGS-5078](https://issues.redhat.com/browse/OCPBUGS-5078): OpenStack: Force JSON content-type in Swift object listing [#6725](https://github.com/openshift/installer/pull/6725)
* [OCPBUGS-4405](https://issues.redhat.com/browse/OCPBUGS-4405): UPI: Azure: create HyperV2 rhcos image [#6681](https://github.com/openshift/installer/pull/6681)
* [OCPBUGS-4530](https://issues.redhat.com/browse/OCPBUGS-4530): Enable CVO unmanage overrides in bootstrap-in-place installations [#6668](https://github.com/openshift/installer/pull/6668)
* [OCPBUGS-4398](https://issues.redhat.com/browse/OCPBUGS-4398): update golang.org/x/crypto [#6652](https://github.com/openshift/installer/pull/6652)
* [OCPBUGS-3023](https://issues.redhat.com/browse/OCPBUGS-3023): GCP: Add missing regions [#6542](https://github.com/openshift/installer/pull/6542)
* [OCPBUGS-4325](https://issues.redhat.com/browse/OCPBUGS-4325): gcp: fail during validation if service usage is not enabled [#6647](https://github.com/openshift/installer/pull/6647)
* [OCPBUGS-4325](https://issues.redhat.com/browse/OCPBUGS-4325): Service Usage API is required, not optional [#6642](https://github.com/openshift/installer/pull/6642)
* [OCPBUGS-4081](https://issues.redhat.com/browse/OCPBUGS-4081): OpenStack: Force JSON content-type in Swift [#6625](https://github.com/openshift/installer/pull/6625)
* [Full changelog](https://github.com/openshift/installer/compare/0c4e73175c1aaa2140fb360ce8ff44a4b9dd669f...b1b244444835f9a3fd2c5e6717db9ba6d18607be)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1928ac4250660378a7d8c3430478dfe77977cb2a)

* Bug OCPBUGS-915: [inspect] Add EgressQoS to inspect [#1230](https://github.com/openshift/oc/pull/1230)
* [Full changelog](https://github.com/openshift/oc/compare/142cb4431e96f510b4ed4c61a13d68cb13a76c3c...1928ac4250660378a7d8c3430478dfe77977cb2a)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/5dd318b4fa16f138cdba8110234b3ac814edb7d4)

* Bug OCPBUGS-5359: Add ApplicationSecurityGroups to InterfaceIPConfiguration [#93](https://github.com/openshift/cloud-network-config-controller/pull/93)
* [OCPBUGS-3932](https://issues.redhat.com/browse/OCPBUGS-3932): Add assigned egress ips into capacity [#78](https://github.com/openshift/cloud-network-config-controller/pull/78)
* [OCPBUGS-4529](https://issues.redhat.com/browse/OCPBUGS-4529): Node controller: Skip uninitialized nodes [#85](https://github.com/openshift/cloud-network-config-controller/pull/85)
* [OCPBUGS-4528](https://issues.redhat.com/browse/OCPBUGS-4528): AWS: build temp credentials file from AWS key and secret [#84](https://github.com/openshift/cloud-network-config-controller/pull/84)
* [OCPBUGS-4167](https://issues.redhat.com/browse/OCPBUGS-4167): Run azure operations in sequence [#79](https://github.com/openshift/cloud-network-config-controller/pull/79)
* [OCPBUGS-4163](https://issues.redhat.com/browse/OCPBUGS-4163): AWS: Fix race in IP address assignment code [#83](https://github.com/openshift/cloud-network-config-controller/pull/83)
* Jira OCPBUGS-4179: Fix assign error display for cloudprivateipconfig [#75](https://github.com/openshift/cloud-network-config-controller/pull/75)
* [OCPBUGS-4233](https://issues.redhat.com/browse/OCPBUGS-4233): Updating ose-cloud-network-config-controller images to be consistent with ART [#81](https://github.com/openshift/cloud-network-config-controller/pull/81)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/9223d045440ada5dc7dc06ff1d6fa435cc3c7b6e...5dd318b4fa16f138cdba8110234b3ac814edb7d4)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/bf6c1c328ac39a367417e93c74fcbb3fe8628825)

* Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#221](https://github.com/openshift/kubernetes-autoscaler/pull/221)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/a25f930393e13789f5ada3933faf09377b53beb4...bf6c1c328ac39a367417e93c74fcbb3fe8628825)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/06b363fafd082397c9b6f4fc9e10c4573ba590d2)

* Updating ose-cluster-baremetal-operator images to be consistent with ART [#264](https://github.com/openshift/cluster-baremetal-operator/pull/264)
* [OCPBUGS-5075](https://issues.redhat.com/browse/OCPBUGS-5075): Do not fail the reconciler when no master Machines exist [#318](https://github.com/openshift/cluster-baremetal-operator/pull/318)
* [OCPBUGS-1762](https://issues.redhat.com/browse/OCPBUGS-1762): add a workaround for a NetworkManager issue [#298](https://github.com/openshift/cluster-baremetal-operator/pull/298)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/14fcc2e0ac60f71cb16026591cb5cf6b9e3fe1a3...06b363fafd082397c9b6f4fc9e10c4573ba590d2)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ac462432e3299341a4ce0806522e821b94efd520)

* [OCPBUGS-4785](https://issues.redhat.com/browse/OCPBUGS-4785): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#973](https://github.com/openshift/cluster-etcd-operator/pull/973)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/c831f3c2ee3ff0b1d43930d901708f373733a3a1...ac462432e3299341a4ce0806522e821b94efd520)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/f0ed74846785b1c0e6d98d58c245506ac18578d4)

* [OCPBUGS-3049](https://issues.redhat.com/browse/OCPBUGS-3049): Update CRLs when they expire [#853](https://github.com/openshift/cluster-ingress-operator/pull/853)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/13f1087adff68067c887f054cb45e182411e232a...f0ed74846785b1c0e6d98d58c245506ac18578d4)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/6626a79181b2466f3d923fc4101d17d30c7d0816)

* [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#1429](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1429)
* [OCPBUGS-4301](https://issues.redhat.com/browse/OCPBUGS-4301): bootstrap-kube-apiserver: specify resources.requests [#1412](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1412)
* [OCPBUGS-3290](https://issues.redhat.com/browse/OCPBUGS-3290): routes/status resources can leak sensitive data, exclude it from audit [#1422](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1422)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/f28fe4d8dc2cb1201657d9904b24db195cad9e35...6626a79181b2466f3d923fc4101d17d30c7d0816)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/21da027d835977c0216a9a7303a0b3851f46379a)

* Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#6](https://github.com/openshift/cluster-api-operator/pull/6)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/55efc390b9c04d602a7a51c23bf9ab426a7c5f13...21da027d835977c0216a9a7303a0b3851f46379a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/96f12680f9dd8fa0b704ecd7383ccb042d3ed6fd)

* [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#690](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/690)
* [OCPBUGS-4304](https://issues.redhat.com/browse/OCPBUGS-4304): resources.requests for operator pod [#667](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/667)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/74584b7e3c7fd13b71bcb93c517d070d54a29409...96f12680f9dd8fa0b704ecd7383ccb042d3ed6fd)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/55c3556f1a1f9c849a9e2a59f8457a69bb54d6d0)

* [OCPBUGS-4551](https://issues.redhat.com/browse/OCPBUGS-4551): guard controller: set an explicit hostname to avoid name collisions [#458](https://github.com/openshift/cluster-kube-scheduler-operator/pull/458)
* [OCPBUGS-4294](https://issues.redhat.com/browse/OCPBUGS-4294): bootstrap-kube-scheduler: specify resources.requests [#449](https://github.com/openshift/cluster-kube-scheduler-operator/pull/449)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/34132f9ae05773b9c5addc534f9ee5d088fb2638...55c3556f1a1f9c849a9e2a59f8457a69bb54d6d0)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/7ebe9421bfdf4a168d94230e108062c681cbba00)

* Bug OCPBUGS-879: [release-4.11] Add telemetry metrics for HyperShift [#1749](https://github.com/openshift/cluster-monitoring-operator/pull/1749)
* [OCPBUGS-4640](https://issues.redhat.com/browse/OCPBUGS-4640): Increase startupProbe for prometheus [#1845](https://github.com/openshift/cluster-monitoring-operator/pull/1845)
* [OCPBUGS-4030](https://issues.redhat.com/browse/OCPBUGS-4030): test: increase timeout when checking remote write metrics [#1821](https://github.com/openshift/cluster-monitoring-operator/pull/1821)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/58d1e5ad06f6a110437f7a19c2f6fa025175453c...7ebe9421bfdf4a168d94230e108062c681cbba00)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/317fcac5c060e01615b48b735c6b1b841c0ebaaf)

* [OCPBUGS-3971](https://issues.redhat.com/browse/OCPBUGS-3971): HyperShift: Do not accept empty infrastructure name [#1635](https://github.com/openshift/cluster-network-operator/pull/1635)
* [OCPBUGS-3490](https://issues.redhat.com/browse/OCPBUGS-3490): OVN-Kubernetes: Prefer oldest nodes [#1641](https://github.com/openshift/cluster-network-operator/pull/1641)
* [OCPBUGS-4137](https://issues.redhat.com/browse/OCPBUGS-4137): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1640](https://github.com/openshift/cluster-network-operator/pull/1640)
* Jira OCPBUGS-3852: IPsec: Fix broken counter++ expression [#1638](https://github.com/openshift/cluster-network-operator/pull/1638)
* Bug OCPBUGS-945: Add EgressQoS DstCIDR format validation [#1551](https://github.com/openshift/cluster-network-operator/pull/1551)
* [OCPBUGS-3911](https://issues.redhat.com/browse/OCPBUGS-3911): SDN: /var/run mount cleanup [#1631](https://github.com/openshift/cluster-network-operator/pull/1631)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/adf2253692d5dd8cc0f3bce8db6397105c08bbcb...317fcac5c060e01615b48b735c6b1b841c0ebaaf)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/83d123eebd8cce393eeb9fd7b7b52a37ba88b8d3)

* pao: latency-tests: read test log directly from pod (#531) [#531](https://github.com/openshift/cluster-node-tuning-operator/pull/531)
* E2E: Automate Offline CPUs feature (#523) [#523](https://github.com/openshift/cluster-node-tuning-operator/pull/523)
* [OCPBUGS-4216](https://issues.redhat.com/browse/OCPBUGS-4216): e2e: performance profile: add logs and minor fixes (#515) [#515](https://github.com/openshift/cluster-node-tuning-operator/pull/515)
* E2E fix: Make Nodeselector tests independent (#502) [#502](https://github.com/openshift/cluster-node-tuning-operator/pull/502)
* e2e: perfprof: remove broken test (#497) [#497](https://github.com/openshift/cluster-node-tuning-operator/pull/497)
* Add ktimer to PAO tuned profile (#510) [#510](https://github.com/openshift/cluster-node-tuning-operator/pull/510)
* set RPS for veth on host level only (#508) [#508](https://github.com/openshift/cluster-node-tuning-operator/pull/508)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ecd98ea994316fbe7a159dac13cdd836cb720931...83d123eebd8cce393eeb9fd7b7b52a37ba88b8d3)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/cb39fde1ff115ce4ef4b9adee8d1649ea8e6b248)

* [OCPBUGS-3290](https://issues.redhat.com/browse/OCPBUGS-3290): routes/status resources can leak sensitive data, exclude it from audit [#513](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/513)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/5ddbeef319c297618a94d97a79dcb0cc0a2ec497...cb39fde1ff115ce4ef4b9adee8d1649ea8e6b248)


### [console](https://github.com/openshift/console/tree/bb81604768f1c2a6964798a3df8fc385b259e014)

* [OCPBUGS-1727](https://issues.redhat.com/browse/OCPBUGS-1727): Allow regular users to access debug pods [#12100](https://github.com/openshift/console/pull/12100)
* [OCPBUGS-5258](https://issues.redhat.com/browse/OCPBUGS-5258): add support for version v1beta1 for knativeServing and knativeEventing [#12403](https://github.com/openshift/console/pull/12403)
* [OCPBUGS-5418](https://issues.redhat.com/browse/OCPBUGS-5418): Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) [#12413](https://github.com/openshift/console/pull/12413)
* [OCPBUGS-4786](https://issues.redhat.com/browse/OCPBUGS-4786): Fix for initial showing of topology contents [#12311](https://github.com/openshift/console/pull/12311)
* [OCPBUGS-5206](https://issues.redhat.com/browse/OCPBUGS-5206): Pan nodes into view if all nodes are not visible on load [#12398](https://github.com/openshift/console/pull/12398)
* [OCPBUGS-2443](https://issues.redhat.com/browse/OCPBUGS-2443): Monitoring: Fix help popovers [#12173](https://github.com/openshift/console/pull/12173)
* [Full changelog](https://github.com/openshift/console/compare/695cf01abe0c6935958ad1f1108eb8146316dc61...bb81604768f1c2a6964798a3df8fc385b259e014)


### [coredns](https://github.com/openshift/coredns/tree/227d72792347fcec2e2f1c14a44ea7eee4f97054)

* [OCPBUGS-2901](https://issues.redhat.com/browse/OCPBUGS-2901): Remove bufsize hardcoding to 2048 on cache upstream refreshes. [#79](https://github.com/openshift/coredns/pull/79)
* [Full changelog](https://github.com/openshift/coredns/compare/7fe212f3354bf70d16e7327029e4ad819e326cfd...227d72792347fcec2e2f1c14a44ea7eee4f97054)


### [etcd](https://github.com/openshift/etcd/tree/c50e9aadacd29bbc6308d8be43d346368506fa83)

* [OCPBUGS-3101](https://issues.redhat.com/browse/OCPBUGS-3101): Rebase openshift/etcd 4.11 onto v3.5.6 [#170](https://github.com/openshift/etcd/pull/170)
* [Full changelog](https://github.com/openshift/etcd/compare/53284bc6743964f36f869fa8db3b796f5c802137...c50e9aadacd29bbc6308d8be43d346368506fa83)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/9363d87de998726d9f8081463f8b2bd9267ad71d)

* [OCPBUGS-4579](https://issues.redhat.com/browse/OCPBUGS-4579): refactor restartPolicyToBool function [#30](https://github.com/openshift/machine-api-provider-gcp/pull/30)
* [OCPBUGS-4532](https://issues.redhat.com/browse/OCPBUGS-4532): Set sync period for Machine controller [#27](https://github.com/openshift/machine-api-provider-gcp/pull/27)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/17a3a9f5bc5344472e328db58338af34415ffd35...9363d87de998726d9f8081463f8b2bd9267ad71d)


### [hypershift](https://github.com/openshift/hypershift/tree/186a3909c1adfdad83edad4af7d1f1d984ab76dc)

* cherry-pick #2006 [#2028](https://github.com/openshift/hypershift/pull/2028)
* Bug HOSTEDCP-604: Don't store machine payload in token secret for replace node pools (#1873) [#1880](https://github.com/openshift/hypershift/pull/1880)
* [Full changelog](https://github.com/openshift/hypershift/compare/73cc743cb787747f75c80db2c287afc8b9d239ac...186a3909c1adfdad83edad4af7d1f1d984ab76dc)


### [ironic](https://github.com/openshift/ironic-image/tree/72ac16f370083b2b4e922c2e809c91a17ebfa703)

* Bug OCPBUGS-5404: Adding dosfstools and util-linux tools to ironic-image [#344](https://github.com/openshift/ironic-image/pull/344)
* [OCPBUGS-4908](https://issues.redhat.com/browse/OCPBUGS-4908): Update packages versions with latest available [#336](https://github.com/openshift/ironic-image/pull/336)
* [OCPBUGS-5145](https://issues.redhat.com/browse/OCPBUGS-5145): Configure Ironic iLO driver to use web server [#342](https://github.com/openshift/ironic-image/pull/342)
* [OCPBUGS-3674](https://issues.redhat.com/browse/OCPBUGS-3674): Don't save OS_ prefixed variables [#318](https://github.com/openshift/ironic-image/pull/318)
* Bug OCPBUGS-3478: Improve resiliency of eTag handling [#314](https://github.com/openshift/ironic-image/pull/314)
* [OCPBUGS-4410](https://issues.redhat.com/browse/OCPBUGS-4410): Remove RDO distribution configuration (finally fixes #46) [#328](https://github.com/openshift/ironic-image/pull/328)
* [Full changelog](https://github.com/openshift/ironic-image/compare/a10aee9869151b6f384d8d1ef319b2173195ef7f...72ac16f370083b2b4e922c2e809c91a17ebfa703)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/4636d193704b52c3e127c0ee856e66372e6d15c0)

* [OCPBUGS-5099](https://issues.redhat.com/browse/OCPBUGS-5099): make coreos-installer output available in the logs [#67](https://github.com/openshift/ironic-agent-image/pull/67)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/501911577eed7db671c45b2c8fdee43a392935ba...4636d193704b52c3e127c0ee856e66372e6d15c0)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/034e60ec00470f0d778ef1f6ebde47526cccb690)

* [OCPBUGS-998](https://issues.redhat.com/browse/OCPBUGS-998): [release-4.11] NetworkPolicy: Remove stale flows that may exist due to an upgrade [#488](https://github.com/openshift/sdn/pull/488)
* [OCPBUGS-2105](https://issues.redhat.com/browse/OCPBUGS-2105): fix network policy egress [#464](https://github.com/openshift/sdn/pull/464)
* Bug OCPBUGS-4386: Rebase against cherry-pick of kubernetes#107413 [#477](https://github.com/openshift/sdn/pull/477)
* [Full changelog](https://github.com/openshift/sdn/compare/11b690ca6db6df67800c05a4fd8df90c1b540177...034e60ec00470f0d778ef1f6ebde47526cccb690)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/8dc2dc0b897ff81a9dee8c1288c943dbb8ad5cce)

* [OCPBUGS-4087](https://issues.redhat.com/browse/OCPBUGS-4087): cherry-pick, do not expose ingress path metric when service is nil [#85](https://github.com/openshift/kube-state-metrics/pull/85)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/896d0003be0a7875110021b2e0fb71d476901eec...8dc2dc0b897ff81a9dee8c1288c943dbb8ad5cce)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/b36482885ba1304e122e7c01c26cd671dfdd0418)

* [OCPBUGS-4945](https://issues.redhat.com/browse/OCPBUGS-4945): Do not allow empty system reserved values [#3459](https://github.com/openshift/machine-config-operator/pull/3459)
* [OCPBUGS-4099](https://issues.redhat.com/browse/OCPBUGS-4099): daemon: gate done state on uncordon completion [#3434](https://github.com/openshift/machine-config-operator/pull/3434)
* [OCPBUGS-3882](https://issues.redhat.com/browse/OCPBUGS-3882): Sync controllerconfig anyway if daemon sync fails [#3421](https://github.com/openshift/machine-config-operator/pull/3421)
* [OCPBUGS-3807](https://issues.redhat.com/browse/OCPBUGS-3807): configure-ovs: auto-connect ovs-if-phys0 with br-ex [#3419](https://github.com/openshift/machine-config-operator/pull/3419)
* [OCPBUGS-3756](https://issues.redhat.com/browse/OCPBUGS-3756): daemon: Stop setting I/O scheduler to bfq [#3418](https://github.com/openshift/machine-config-operator/pull/3418)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/46327eb10a201b48be7fb3da96a2ffe322539af8...b36482885ba1304e122e7c01c26cd671dfdd0418)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/1c9e8a1efc92ad6457e00b0262adecd93ed3961c)

* [OCPBUGS-3687](https://issues.redhat.com/browse/OCPBUGS-3687): use host IPC for the agent container [#70](https://github.com/openshift/image-customization-controller/pull/70)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/9d0dcba72dc5027b4557220dc1ba4d1dc2bf926c...1c9e8a1efc92ad6457e00b0262adecd93ed3961c)


### [machine-os-content](https://github.com/openshift/okd-machine-os/tree/ee1e0fec4ab7c62d925a6ac4222db7bc3e0f826b)

* Bump fedora-coreos to latest stable [#509](https://github.com/openshift/okd-machine-os/pull/509)
* Bump OKD OS version [#494](https://github.com/openshift/okd-machine-os/pull/494)
* Bump fedora-coreos-config to latest stable [#487](https://github.com/openshift/okd-machine-os/pull/487)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/d8530796dde7aec9d815f47d71f45a5927583311...ee1e0fec4ab7c62d925a6ac4222db7bc3e0f826b)


### [must-gather](https://github.com/openshift/must-gather/tree/44f6adacb094952723f957d4d7d61043b6f2fe04)

* [OCPBUGS-4324](https://issues.redhat.com/browse/OCPBUGS-4324): backport PodNetworkConnectivityCheck gather script #334 [#338](https://github.com/openshift/must-gather/pull/338)
* [Full changelog](https://github.com/openshift/must-gather/compare/32bca4033d79326225d966d98641935927888428...44f6adacb094952723f957d4d7d61043b6f2fe04)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/df9f0367e66448b0e8736111e4d6c4f7d98eec4d)

* Bug OCPBUGS-4103: Add SecretHashAnnotation to node service [#99](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/99)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/ae4c45caf3f689d9797972ab133612e5cc030d90...df9f0367e66448b0e8736111e4d6c4f7d98eec4d)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cb6810ac51d29bfbab55da0fb8249affed0b4b3d)

* [OCPBUGS-4446](https://issues.redhat.com/browse/OCPBUGS-4446): fix service account token secret reference (#2862) [#416](https://github.com/openshift/operator-framework-olm/pull/416)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/60941887ec69e459e82398f5a523eac84b5b3996...cb6810ac51d29bfbab55da0fb8249affed0b4b3d)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/4b9339a108b626c7a595c0695036f7a09e89f3ec)

* [OCPBUGS-4761](https://issues.redhat.com/browse/OCPBUGS-4761): [4.11] Dockerfile: bump OVS to 2.17.0-62.el8fdp [#1438](https://github.com/openshift/ovn-kubernetes/pull/1438)
* [OCPBUGS-1720](https://issues.redhat.com/browse/OCPBUGS-1720): Backport changes to ovnkube-trace [#1436](https://github.com/openshift/ovn-kubernetes/pull/1436)
* [OCPBUGS-4829](https://issues.redhat.com/browse/OCPBUGS-4829): Set the node as reachable only when it is being added as an egressip node [#1445](https://github.com/openshift/ovn-kubernetes/pull/1445)
* [OCPBUGS-4655](https://issues.redhat.com/browse/OCPBUGS-4655): [release-4.11] Don't delete equivalent ACLs by predicate, since it will fail if [#1444](https://github.com/openshift/ovn-kubernetes/pull/1444)
* [OCPBUGS-4992](https://issues.redhat.com/browse/OCPBUGS-4992): [release-4.11] fixing hybrid subnet allocator [#1459](https://github.com/openshift/ovn-kubernetes/pull/1459)
* [OCPBUGS-4863](https://issues.redhat.com/browse/OCPBUGS-4863): [release-4.11] Fix address set cleanup: only delete address sets owned by given object [#1448](https://github.com/openshift/ovn-kubernetes/pull/1448)
* [OCPBUGS-4887](https://issues.redhat.com/browse/OCPBUGS-4887): [release-4.11] Fixes scenario where deleted + completed pods may leak [#1455](https://github.com/openshift/ovn-kubernetes/pull/1455)
* [OCPBUGS-4838](https://issues.redhat.com/browse/OCPBUGS-4838), [OCPBUGS-4860](https://issues.redhat.com/browse/OCPBUGS-4860): [release-4.11] Avoid duplicate transactions and minimize handlers with empty namespace selectors [#1447](https://github.com/openshift/ovn-kubernetes/pull/1447)
* [OCPBUGS-3614](https://issues.redhat.com/browse/OCPBUGS-3614): [4.11] CARRY: client: don't construct transaction log string when it's not needed [#1374](https://github.com/openshift/ovn-kubernetes/pull/1374)
* [OCPBUGS-3116](https://issues.redhat.com/browse/OCPBUGS-3116): append instead of overwrite logicalSwitch other-config [#1350](https://github.com/openshift/ovn-kubernetes/pull/1350)
* [OCPBUGS-4475](https://issues.redhat.com/browse/OCPBUGS-4475): Handle expired entry while handling dns update [#1417](https://github.com/openshift/ovn-kubernetes/pull/1417)
* [OCPBUGS-4564](https://issues.redhat.com/browse/OCPBUGS-4564): pods: deleteLogicalPort should not fail when node is gone [#1422](https://github.com/openshift/ovn-kubernetes/pull/1422)
* [OCPBUGS-4408](https://issues.redhat.com/browse/OCPBUGS-4408): Validate node subnet annotations against cluster networks [#1415](https://github.com/openshift/ovn-kubernetes/pull/1415)
* [OCPBUGS-4167](https://issues.redhat.com/browse/OCPBUGS-4167): EgressIP: Merge ops into pendingCloudPrivateIPConfigsOps on add [#1404](https://github.com/openshift/ovn-kubernetes/pull/1404)
* [OCPBUGS-3908](https://issues.redhat.com/browse/OCPBUGS-3908): [release-4.11] Support proper parsing of IPs with leading zeros [#1393](https://github.com/openshift/ovn-kubernetes/pull/1393)
* [OCPBUGS-2554](https://issues.redhat.com/browse/OCPBUGS-2554): Fix UpdateService healthport checks [#1389](https://github.com/openshift/ovn-kubernetes/pull/1389)
* Bug OCPBUGS-3077: [release-4.11] Fix netpol races [#1353](https://github.com/openshift/ovn-kubernetes/pull/1353)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/624238fc042e4adee9523a53979d44b1b676591a...4b9339a108b626c7a595c0695036f7a09e89f3ec)


### [tests](https://github.com/openshift/origin/tree/f61477ff79e35ffb263bc047bb70dc4e3c4611d2)

* [SPLAT-856](https://issues.redhat.com/browse/SPLAT-856): [release-4.11] include storage and must-gather tests in expectedTestCount [#27494](https://github.com/openshift/origin/pull/27494)
* [OCPBUGS-3819](https://issues.redhat.com/browse/OCPBUGS-3819): Add bond cni test [#27554](https://github.com/openshift/origin/pull/27554)
* [Full changelog](https://github.com/openshift/origin/compare/aa67fda60dcee9accf238b187d3e4676bb6795f4...f61477ff79e35ffb263bc047bb70dc4e3c4611d2)


### [thanos](https://github.com/openshift/thanos/tree/e447c3abaa67cd60721116ae9ccdcbb6e6c31906)

* Updating thanos images to be consistent with ART [#99](https://github.com/openshift/thanos/pull/99)
* [Full changelog](https://github.com/openshift/thanos/compare/f769b174108d65f161e0563b05d65607ded161ae...e447c3abaa67cd60721116ae9ccdcbb6e6c31906)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/8308ce4b593f63b913ea7fbe528539fd96c1ff44)

* [OCPBUGS-5472](https://issues.redhat.com/browse/OCPBUGS-5472): Fix sc creation on resync [#127](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/127)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/85df37ee6c1b4ef7ce13e864df44b7b32639a168...8308ce4b593f63b913ea7fbe528539fd96c1ff44)