# 4.14.0-0.okd-2023-11-12-042703

Created: 2023-11-12 07:58:37 +0000 UTC

Image Digest: `sha256:2242d1df4e4cbcc0cd27191ab9ad5f55ac4f0c60c3cda2a186181a2435e3bd00`

Promoted from registry.ci.openshift.org/origin/release:4.14.0-0.okd-2023-11-12-042703


## Changes from 4.14.0-0.okd-2023-10-28-073550

### Components

* Kubernetes 1.27.6
* Fedora CoreOS upgraded from 38.20231002.3 to 38.20231027.3


### Rebuilt images without code change

* [multus-cni](https://github.com/openshift/multus-cni) git [599223b8](https://github.com/openshift/multus-cni/commit/599223b858ca334e23eba3f12b4866e833807826) `sha256:3b4016c2feaddb883b851df19fbbc0bb7d3d00ea976152de32612b5ebac9dc91`
* [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [aa44c026](https://github.com/openshift/operator-framework-catalogd/commit/aa44c0262f1de5d888dc11abe6d730b0c84a8df3) `sha256:67308408fa9d18bc605be7cb6b58c3080a4ba828c8481f6571368b893d583363`
* [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [17343293](https://github.com/openshift/operator-framework-operator-controller/commit/17343293267cad10f074fbe155c7fa31ed6b9336) `sha256:b7cca14f5780432803ac68df060c80d04831f2abeccb39d6186779a1ad7bde90`
* [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [daa50736](https://github.com/openshift/operator-framework-rukpak/commit/daa50736076ed6c207c57ef29d94cde6c7cdbdbd) `sha256:e5163830173df7afb64b084cd3ecc486613f66450f5782f2711e2e2199c06766`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [7a232386](https://github.com/openshift/ovn-kubernetes/commit/7a232386623498f099ccdedfc58bc1c134c61ddd) `sha256:f8617174ea963f654f714939d14a5129f1abe4327b4de93161e8a8671f6abb28`
* [ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes) git [7a232386](https://github.com/openshift/ovn-kubernetes/commit/7a232386623498f099ccdedfc58bc1c134c61ddd) `sha256:95bff568d7f7f249a4b591c7b0f51ddfe3409dd7cee4d1f15931ba13969e6c2f`


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/8cc7a270f0b05bbb12bb9cb708a408b044d532a6)

* snyk: exclude vendor/ [#171](https://github.com/openshift/aws-pod-identity-webhook/pull/171)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/ed5ae281ece6092735140617c486e5822ce5b7b6...8cc7a270f0b05bbb12bb9cb708a408b044d532a6)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/cebc8ab0fd6f8b66197f5a4e058ea4913dbb587c)

* [OCPBUGS-21868](https://issues.redhat.com/browse/OCPBUGS-21868): vSphere,segfault on version check [#7605](https://github.com/openshift/installer/pull/7605)
* [OCPBUGS-22945](https://issues.redhat.com/browse/OCPBUGS-22945): Update gcloud version to 447.0.0 [#7681](https://github.com/openshift/installer/pull/7681)
* [OCPBUGS-22187](https://issues.redhat.com/browse/OCPBUGS-22187): azure: validation: validate defaultMachinePlatform [#7615](https://github.com/openshift/installer/pull/7615)
* [OCPBUGS-22758](https://issues.redhat.com/browse/OCPBUGS-22758): update RHCOS 4.14 bootimage metadata to 414.92.202310210434-0 [#7655](https://github.com/openshift/installer/pull/7655)
* [OCPBUGS-19922](https://issues.redhat.com/browse/OCPBUGS-19922): Release 4.14 skip agent tui on external oci platform [#7599](https://github.com/openshift/installer/pull/7599)
* [OCPBUGS-21653](https://issues.redhat.com/browse/OCPBUGS-21653): Rectify GCP label key validation check [#7606](https://github.com/openshift/installer/pull/7606)
* [Full changelog](https://github.com/openshift/installer/compare/03546e550ae68f6b36d78d78b539450e66b5f6c2...cebc8ab0fd6f8b66197f5a4e058ea4913dbb587c)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/9b1e0d27df3cf7b2ea878cd668ce709cc4e4c41a)

* [OCPBUGS-22702](https://issues.redhat.com/browse/OCPBUGS-22702): Reflect container's exit code for long running tasks not attached to terminal [#1592](https://github.com/openshift/oc/pull/1592)
* [OCPBUGS-20508](https://issues.redhat.com/browse/OCPBUGS-20508): regeneratemco: explicitly check for PlatformStatus field [#1573](https://github.com/openshift/oc/pull/1573)
* [Full changelog](https://github.com/openshift/oc/compare/0c63f9da2694c080257111616c60005f32a5bf47...9b1e0d27df3cf7b2ea878cd668ce709cc4e4c41a)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/e70c0de19da0f7db7a36b17ac8378c13d8146a70)

* NO-ISSUE: Removing andrew from OWNERS [#617](https://github.com/openshift/cloud-credential-operator/pull/617)
* snyk: exclude vendor/ [#615](https://github.com/openshift/cloud-credential-operator/pull/615)
* [OCPBUGS-22651](https://issues.redhat.com/browse/OCPBUGS-22651): explicitly set azure oidc bucket to allow public blob access [#612](https://github.com/openshift/cloud-credential-operator/pull/612)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/2c18aadc530c825a87b54ac8a762509a8d0d73f0...e70c0de19da0f7db7a36b17ac8378c13d8146a70)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/9ad3782e5e7c17c15f824572c7049a44e8f85700)

* [OCPBUGS-20705](https://issues.redhat.com/browse/OCPBUGS-20705): go.mod: bump golang.org/x/net to v0.17.0 [#637](https://github.com/openshift/cluster-authentication-operator/pull/637)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/bebf0fd3932be12594227b415fecd5d664611bc0...9ad3782e5e7c17c15f824572c7049a44e8f85700)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/582b74599d11324ff0927dcb6b2b5fee5f69c106)

* Jira OCPBUGS-22208: Trigger reconcile if Secret openshift-config/pull-secret changes [#376](https://github.com/openshift/cluster-baremetal-operator/pull/376)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/6d5d5187f1b469eee613cebc1be14c5fb985e2a8...582b74599d11324ff0927dcb6b2b5fee5f69c106)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/b4c4fb13a40c2c71b8f21fe379befad95e341a77)

* [OCPBUGS-22314](https://issues.redhat.com/browse/OCPBUGS-22314): fix: add missing azure identity diff [#136](https://github.com/openshift/cluster-capi-operator/pull/136)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/445968f3f0222b1d0679741898faa2e695543086...b4c4fb13a40c2c71b8f21fe379befad95e341a77)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/785ecefecd0ae3690d8b79ec916a4075ed3b382e)

* [OCPBUGS-20552](https://issues.redhat.com/browse/OCPBUGS-20552): apply necessary RBAC for the alibaba cloud controller manager [#289](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/289)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/6036333a63fbc93726ae704f1af359af49ab0987...785ecefecd0ae3690d8b79ec916a4075ed3b382e)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/d069e1477c7855035935a716100b3e8d4751d951)

* [OCPBUGS-21653](https://issues.redhat.com/browse/OCPBUGS-21653): Update openshift/api package to latest version [#371](https://github.com/openshift/cluster-config-operator/pull/371)
* : OCPBUGS-21286:  bump library-go to include switch to HTTP/1.1 [#369](https://github.com/openshift/cluster-config-operator/pull/369)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/fa99c083c1e6044855246c18042e6da2476964bb...d069e1477c7855035935a716100b3e8d4751d951)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/0455a742f260ad7d39f63890559efd4f63429165)

* [OCPBUGS-20566](https://issues.redhat.com/browse/OCPBUGS-20566): webhooks: set min version TLS 1.2 + exclude weak ciphersuites [#254](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/254)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/dc70181ee973124b2c3c6866a3c081fcd45d91a8...0455a742f260ad7d39f63890559efd4f63429165)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/6bc9eabed8465234b1566cf001b6215e267abff5)

* [OCPBUGS-22477](https://issues.redhat.com/browse/OCPBUGS-22477): Remove z-upgrades from UpgradeBackupController [#1140](https://github.com/openshift/cluster-etcd-operator/pull/1140)
* [OCPBUGS-21802](https://issues.redhat.com/browse/OCPBUGS-21802): remove revision stability check from bootstrap complet… [#1138](https://github.com/openshift/cluster-etcd-operator/pull/1138)
* [OCPBUGS-21175](https://issues.redhat.com/browse/OCPBUGS-21175): fixing CVE-2023-39325 by updating dependencies [#1142](https://github.com/openshift/cluster-etcd-operator/pull/1142)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/a30b074095df7195ed0126bcd212b74114a88ee9...6bc9eabed8465234b1566cf001b6215e267abff5)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/d27b918c32a5bcd04a2aba77c35b73b3f005b3e9)

* [OCPBUGS-22127](https://issues.redhat.com/browse/OCPBUGS-22127): increase storage account key cache expiration [#941](https://github.com/openshift/cluster-image-registry-operator/pull/941)
* [OCPBUGS-20710](https://issues.redhat.com/browse/OCPBUGS-20710): mitigate effects of rapid reset [#942](https://github.com/openshift/cluster-image-registry-operator/pull/942)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/b0ee859b641ff2b1d9896d0cd13743ee3335051a...d27b918c32a5bcd04a2aba77c35b73b3f005b3e9)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d52dbad1177fdb0d27077be5b6e8d9fe0d41b30e)

* : OCPBUGS-20898: bump library-go to include switch to HTTP/1.1 [#1569](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1569)
* [OCPBUGS-22718](https://issues.redhat.com/browse/OCPBUGS-22718): [release-4.14] OCPBUGS-20331: manifests: rename API performance dashboard [#1570](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1570)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/8b38d12efe5f4c4906473acbe53e36961e91490f...d52dbad1177fdb0d27077be5b6e8d9fe0d41b30e)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/9cd9922a42a64fe058718f10e3b4123b943bb55f)

* : OCPBUGS-21371: bump library-go to include switch to HTTP/1.1 [#96](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/96)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/332cb1cd0f9a00c03e3f9d400ae8483abd03036c...9cd9922a42a64fe058718f10e3b4123b943bb55f)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/926c90484d0062f77a51bac0174a759b2d1991f1)

* [OCPBUGS-21468](https://issues.redhat.com/browse/OCPBUGS-21468): Bump x/net package to v0.17.0 [#206](https://github.com/openshift/cluster-machine-approver/pull/206)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d364966705ccb291cc9e14a614c3a2f638128b81...926c90484d0062f77a51bac0174a759b2d1991f1)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/73745ed81d0fa079639d8febbf26deb0a27b50be)

* [OCPBUGS-22917](https://issues.redhat.com/browse/OCPBUGS-22917): jsonnet: pin commits [#2143](https://github.com/openshift/cluster-monitoring-operator/pull/2143)
* [OCPBUGS-22734](https://issues.redhat.com/browse/OCPBUGS-22734): [release-4.14] add RHACS telemetry metrics [#2137](https://github.com/openshift/cluster-monitoring-operator/pull/2137)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/88803c7f4d8dedb565b303d15e03d72f31412f5a...73745ed81d0fa079639d8febbf26deb0a27b50be)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/1504d2a16032cd3637f5c9a338f8f48a82614cca)

* [OCPBUGS-19897](https://issues.redhat.com/browse/OCPBUGS-19897): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#2043](https://github.com/openshift/cluster-network-operator/pull/2043)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5572bce9c04feaf970862db03fe4c4fe03b912b4...1504d2a16032cd3637f5c9a338f8f48a82614cca)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/9669c589ed742813a59b54028daae3972b51c6ee)

* Disable HTTP/2 for webhook and metrics servers (#841) [#841](https://github.com/openshift/cluster-node-tuning-operator/pull/841)
* Remove obsolete protocols and weak ciphers (#835) [#835](https://github.com/openshift/cluster-node-tuning-operator/pull/835)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a91f9945a89f6c5b68ee15618d20bc89e1c0caa6...9669c589ed742813a59b54028daae3972b51c6ee)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/8bd86026e9eaab600dafa3c89c102f1cf86677fe)

* : OCPBUGS-20724:  bump library-go to include switch to HTTP/1.1 [#554](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/554)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/00f7e4cc95063ba5aba1992568088d924cfbf516...8bd86026e9eaab600dafa3c89c102f1cf86677fe)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/2a48f5e228f27a26383f1a613fa328c1ffba7977)

* [OCPBUGS-20762](https://issues.redhat.com/browse/OCPBUGS-20762): [4.14] Bump http-related deps [#986](https://github.com/openshift/cluster-version-operator/pull/986)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/a091f80be76fbcb92fe49b2668c81fe6bf685c4e...2a48f5e228f27a26383f1a613fa328c1ffba7977)


### [console](https://github.com/openshift/console/tree/60b4100a67a915c3bb6345f14815354a17da938c)

* [OCPBUGS-22980](https://issues.redhat.com/browse/OCPBUGS-22980): remove expandable toggle for conditional update risk d… [#13308](https://github.com/openshift/console/pull/13308)
* [OCPBUGS-22374](https://issues.redhat.com/browse/OCPBUGS-22374): Telemetry- Current page was sometimes not tracked when reloading the current page [#13277](https://github.com/openshift/console/pull/13277)
* [OCPBUGS-22177](https://issues.redhat.com/browse/OCPBUGS-22177): Channel page shows "Required" message for the default name when navigate to create channel page [#13262](https://github.com/openshift/console/pull/13262)
* [OCPBUGS-19371](https://issues.redhat.com/browse/OCPBUGS-19371): Upgrade DomainMapping apiVersion to v1beta1 [#13165](https://github.com/openshift/console/pull/13165)
* [OCPBUGS-19416](https://issues.redhat.com/browse/OCPBUGS-19416): Correct logout process [#13173](https://github.com/openshift/console/pull/13173)
* [OCPBUGS-22285](https://issues.redhat.com/browse/OCPBUGS-22285): updating doc links for 4.14 GA [#13273](https://github.com/openshift/console/pull/13273)
* [OCPBUGS-19845](https://issues.redhat.com/browse/OCPBUGS-19845): mock apis for git repo in test serverless function tests [#13199](https://github.com/openshift/console/pull/13199)
* [OCPBUGS-22460](https://issues.redhat.com/browse/OCPBUGS-22460): Fix the forms when BC is not installed in the cluster [#13288](https://github.com/openshift/console/pull/13288)
* [OCPBUGS-21877](https://issues.redhat.com/browse/OCPBUGS-21877): add support for new features annotations while preserv… [#13258](https://github.com/openshift/console/pull/13258)
* [OCPBUGS-22377](https://issues.redhat.com/browse/OCPBUGS-22377): Fixed Edit Application form for Knative Services [#13279](https://github.com/openshift/console/pull/13279)
* [Full changelog](https://github.com/openshift/console/compare/c16ab01920d47d71a8853f70181ff5bb6cd1f374...60b4100a67a915c3bb6345f14815354a17da938c)


### [console-operator](https://github.com/openshift/console-operator/tree/966e915f8a4de635149c976689ed9cc967c7b814)

* [OCPBUGS-22274](https://issues.redhat.com/browse/OCPBUGS-22274): Disable HTTP/2 for webhook [#803](https://github.com/openshift/console-operator/pull/803)
* [OCPBUGS-20480](https://issues.redhat.com/browse/OCPBUGS-20480): Reset console operator's conditions [#797](https://github.com/openshift/console-operator/pull/797)
* [Full changelog](https://github.com/openshift/console-operator/compare/483bbcfcf019a58afb70ae1b021ba01e074b09e0...966e915f8a4de635149c976689ed9cc967c7b814)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/7295a5e0d5b273bd02a9cab8237928bf2957b383)

* [OCPBUGS-20374](https://issues.redhat.com/browse/OCPBUGS-20374): build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.14] [#129](https://github.com/openshift/containernetworking-plugins/pull/129)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/463386589579bd9e74578b3c0fb278840570cd0f...7295a5e0d5b273bd02a9cab8237928bf2957b383)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/3ffcdcf8b2519009797f871c9c33beae2d5328ed)

* [OCPBUGS-23111](https://issues.redhat.com/browse/OCPBUGS-23111): Should reference configmaps instead of secrets [#152](https://github.com/openshift/csi-driver-shared-resource/pull/152)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/740b4427f2c3d72f47c0cd7b9af6b9c51c009c31...3ffcdcf8b2519009797f871c9c33beae2d5328ed)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/a351354201f3ea7ef0bbf49ad0d57f34a40a8149)

* [OCPBUGS-23078](https://issues.redhat.com/browse/OCPBUGS-23078): CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 [#91](https://github.com/openshift/csi-driver-shared-resource-operator/pull/91)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/73ddf3e313dbcec4238657af9b4237b405b16c4a...a351354201f3ea7ef0bbf49ad0d57f34a40a8149)


### [docker-builder](https://github.com/openshift/builder/tree/720efaad602436b04becc332342aa8457a8059be)

* [OCPBUGS-23006](https://issues.redhat.com/browse/OCPBUGS-23006): Add -p flag to cp command to preserve timestamps [#370](https://github.com/openshift/builder/pull/370)
* [Full changelog](https://github.com/openshift/builder/compare/d58710291b41f833400c4fbc30b662072bfd575b...720efaad602436b04becc332342aa8457a8059be)


### [docker-registry](https://github.com/openshift/image-registry/tree/690b5a215111ec83d1368ce14d63152d917e0392)

* [OCPBUGS-22826](https://issues.redhat.com/browse/OCPBUGS-22826): Allow ICSP IDMS coexisting [#385](https://github.com/openshift/image-registry/pull/385)
* [Full changelog](https://github.com/openshift/image-registry/compare/5e7788a16fbbf051c16f28d590905a8f69cd29ac...690b5a215111ec83d1368ce14d63152d917e0392)


### [etcd](https://github.com/openshift/etcd/tree/ba21c5bca59afce3800577c1cbb073c5556ca990)

* [OCPBUGS-22727](https://issues.redhat.com/browse/OCPBUGS-22727): [4.14] Rebase openshift/etcd to 3.5.10 [#226](https://github.com/openshift/etcd/pull/226)
* [Full changelog](https://github.com/openshift/etcd/compare/497a17f227c4cacf2fc16626c38f57879ec648be...ba21c5bca59afce3800577c1cbb073c5556ca990)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/37685d1abeded43b591f400a8c06a96bc661a88c)

* Bump fedora-coreos to latest stable [#689](https://github.com/openshift/okd-machine-os/pull/689)
* Bump Fedora CoreOS to latest stable [#686](https://github.com/openshift/okd-machine-os/pull/686)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/1d6ba5a3682ae378f2c6feabc6121c8e12053f41...37685d1abeded43b591f400a8c06a96bc661a88c)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/d99fb31aa7280f6b5da00880a64b4774600817a2)

* [OCPBUGS-17290](https://issues.redhat.com/browse/OCPBUGS-17290), [OCPBUGS-21417](https://issues.redhat.com/browse/OCPBUGS-21417): Bump golang.org/x/net to v0.17.0 [#203](https://github.com/openshift/cluster-api-provider-gcp/pull/203)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/38e337585cf606957429f7043db1a57cda34fcec...d99fb31aa7280f6b5da00880a64b4774600817a2)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/b49f9d1356bca4e8dd206a3b019184beffd88153)

* [OCPBUGS-22861](https://issues.redhat.com/browse/OCPBUGS-22861): UPSTREAM: <carry>: support for both icsp and idms objects [#1780](https://github.com/openshift/kubernetes/pull/1780)
* [Full changelog](https://github.com/openshift/kubernetes/compare/f67aeb31c9b95fd8998de8b895ac91bfdf733b2e...b49f9d1356bca4e8dd206a3b019184beffd88153)


### [hypershift](https://github.com/openshift/hypershift/tree/b78dd45cac8a4b2434b52c4398f230e0d1c17ea3)

* [OCPBUGS-23142](https://issues.redhat.com/browse/OCPBUGS-23142): adding permission to CNO RBAC Calico path for network-node-identity deploy [#3182](https://github.com/openshift/hypershift/pull/3182)
* [OCPBUGS-22295](https://issues.redhat.com/browse/OCPBUGS-22295): Added brackets to the kubeconfig server address when IPv6 [#3117](https://github.com/openshift/hypershift/pull/3117)
* [OCPBUGS-22690](https://issues.redhat.com/browse/OCPBUGS-22690): Use the same etcd snapshot for all replicas during etcd restore [#3146](https://github.com/openshift/hypershift/pull/3146)
* [OCPBUGS-22959](https://issues.redhat.com/browse/OCPBUGS-22959): Update regex validation for nodepool.spec.taints.value [#3165](https://github.com/openshift/hypershift/pull/3165)
* [HOSTEDCP-1280](https://issues.redhat.com/browse/HOSTEDCP-1280): Adjustment cluster-cidr,service-cidr to support dualstack [#3162](https://github.com/openshift/hypershift/pull/3162)
* [OCPBUGS-22898](https://issues.redhat.com/browse/OCPBUGS-22898): Stop exposing kas on 6443 private route service load balancer [#3159](https://github.com/openshift/hypershift/pull/3159)
* [OCPBUGS-22898](https://issues.redhat.com/browse/OCPBUGS-22898): Stop defaulting aws private haproxy external port to 6443 [#3160](https://github.com/openshift/hypershift/pull/3160)
* [OCPBUGS-19897](https://issues.redhat.com/browse/OCPBUGS-19897): Add konnectivity-proxy container to CNO [#3058](https://github.com/openshift/hypershift/pull/3058)
* [OCPBUGS-22379](https://issues.redhat.com/browse/OCPBUGS-22379): Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller [#3131](https://github.com/openshift/hypershift/pull/3131)
* [Full changelog](https://github.com/openshift/hypershift/compare/34d364cd66a3a85d8fad01d5f6dad5c15de43436...b78dd45cac8a4b2434b52c4398f230e0d1c17ea3)


### [insights-operator](https://github.com/openshift/insights-operator/tree/e0f175b294d739df77074b97a98b9987023903fd)

* [OCPBUGS-21859](https://issues.redhat.com/browse/OCPBUGS-21859): remove username & password config options (#843) [#843](https://github.com/openshift/insights-operator/pull/843)
* [Full changelog](https://github.com/openshift/insights-operator/compare/e967e1db834b065ac8ec4449acf15afed750b6cf...e0f175b294d739df77074b97a98b9987023903fd)


### [ironic](https://github.com/openshift/ironic-image/tree/5ec3ad0af7e7d29c409a3b14b20117144a0725c2)

* [OCPBUGS-14926](https://issues.redhat.com/browse/OCPBUGS-14926): Handle Eject DVD 4.14 [#415](https://github.com/openshift/ironic-image/pull/415)
* [OCPBUGS-22253](https://issues.redhat.com/browse/OCPBUGS-22253): Use bash process substitution instead of pipe [#411](https://github.com/openshift/ironic-image/pull/411)
* [Full changelog](https://github.com/openshift/ironic-image/compare/5c6d6ee69ac7c37989ab891332ed2612217e753d...5ec3ad0af7e7d29c409a3b14b20117144a0725c2)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/801a912b3a60d7e840fb1ff38b5ca992f47327fd)

* [OCPBUGS-21473](https://issues.redhat.com/browse/OCPBUGS-21473): Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 [#89](https://github.com/openshift/k8s-prometheus-adapter/pull/89)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/428bb46ca455d22477df7fb62e7a63d2a48fcfbc...801a912b3a60d7e840fb1ff38b5ca992f47327fd)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/f57144e1ffc7904dd34722da07ccb471adaa8954)

* [OCPBUGS-22275](https://issues.redhat.com/browse/OCPBUGS-22275): support icsp and idms objects [#3995](https://github.com/openshift/machine-config-operator/pull/3995)
* [OCPBUGS-22391](https://issues.redhat.com/browse/OCPBUGS-22391): Require a hostname override for AWS [#4001](https://github.com/openshift/machine-config-operator/pull/4001)
* [OCPBUGS-20418](https://issues.redhat.com/browse/OCPBUGS-20418): Introduce kubelet-dependencies.target and firstboot-osupdate.target [#3967](https://github.com/openshift/machine-config-operator/pull/3967)
* [OCPBUGS-20051](https://issues.redhat.com/browse/OCPBUGS-20051): Support to append the duplicate kernel arguments to the rendered MC [#3957](https://github.com/openshift/machine-config-operator/pull/3957)
* [OCPBUGS-21065](https://issues.redhat.com/browse/OCPBUGS-21065): Update library-go and k8s dependencies to latest version [#3994](https://github.com/openshift/machine-config-operator/pull/3994)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5ac7b4ae0bca76358e4d40f546306775a8e0ea2c...f57144e1ffc7904dd34722da07ccb471adaa8954)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/5e74b0fa273076f4a73db00dd0081032f0325405)

* [OCPBUGS-21372](https://issues.redhat.com/browse/OCPBUGS-21372): Update go.mod for CVE-2023-39325 [Release-4.14] [#71](https://github.com/openshift/multus-admission-controller/pull/71)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/1a9985bd714c8a8be934082945ec76f083feeba4...5e74b0fa273076f4a73db00dd0081032f0325405)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/2440eebf5a922691e0dd483bbcddf00e9f63eb16)

* [OCPBUGS-21454](https://issues.redhat.com/browse/OCPBUGS-21454): Update go.mod for CVE-2023-39325 (#33) [#33](https://github.com/openshift/multus-networkpolicy/pull/33)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/0d76ba791dc3432c51c9a9fa6b95e41034af7988...2440eebf5a922691e0dd483bbcddf00e9f63eb16)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/64dbc3bf37824f0b32e73cdceabc497505876b24)

* Update the k8s dependencies to 1.27.7 (#82) [#82](https://github.com/openshift/network-metrics-daemon/pull/82)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5fd1f2dd60022b33fcd989ba80b8a23d19b890b0...64dbc3bf37824f0b32e73cdceabc497505876b24)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/d124cd5277ee9565f912aa6c0214e8d200f69cd6)

* [OCPBUGS-21472](https://issues.redhat.com/browse/OCPBUGS-21472): fix: CVE-2023-39325 (#711) [#711](https://github.com/openshift/oc-mirror/pull/711)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/68cf97ec715ad2d78fb2bac411a118709c191719...d124cd5277ee9565f912aa6c0214e8d200f69cd6)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/8e1cc19354fb9caa57a454f7fa3f883e73252083)

* [OCPBUGS-20150](https://issues.redhat.com/browse/OCPBUGS-20150): pkg/image: avoid unnecessary service lookups when registry is removed [#393](https://github.com/openshift/openshift-apiserver/pull/393)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/064c2d0ef0ecaeda2bcc4387eaaa7258cee5adcf...8e1cc19354fb9caa57a454f7fa3f883e73252083)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/48d154144cf2be7ef40d83e78dd2e724a0cf3fb2)

* [OCPBUGS-20400](https://issues.redhat.com/browse/OCPBUGS-20400): Add OLMConfig API to control package server sync interval [release-4.14] [#582](https://github.com/openshift/operator-framework-olm/pull/582)
* [OCPBUGS-19789](https://issues.redhat.com/browse/OCPBUGS-19789): Backport OCPBUGS-14698: Rename ClusterRoles created by OperatorGroups [release-4.14] [#566](https://github.com/openshift/operator-framework-olm/pull/566)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f515d1ce7c78cb9838bc065e66a229e0b4879d4b...48d154144cf2be7ef40d83e78dd2e724a0cf3fb2)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/73729eda632c401837124ffe7a2bf903e7421076)

* [OCPBUGS-20881](https://issues.redhat.com/browse/OCPBUGS-20881): fix: disable HTTP2 connections by default [#253](https://github.com/openshift/prometheus-operator/pull/253)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/3de5e6d28b10142179eda77d218fb5c3e9f04667...73729eda632c401837124ffe7a2bf903e7421076)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/3c3f82f7112ee4b5656e5c554f9887acdf881175)

* [OCPBUGS-21066](https://issues.redhat.com/browse/OCPBUGS-21066): go.mod: bump golang.org/x/net to v0.17.0 [#224](https://github.com/openshift/service-ca-operator/pull/224)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/030a429b314d772b7cc7a1dd9af2073988a5b0a5...3c3f82f7112ee4b5656e5c554f9887acdf881175)


### [tests](https://github.com/openshift/origin/tree/8f6b619704c00fcc6418e0934065d30d18d3396d)

* [OCPBUGS-23145](https://issues.redhat.com/browse/OCPBUGS-23145): Bump watch requests for cluster-baremetal-operator [#28385](https://github.com/openshift/origin/pull/28385)
* trt-1340: backport exact and disable monitor tests options to 4.14 [#28391](https://github.com/openshift/origin/pull/28391)
* [OCPBUGS-19923](https://issues.redhat.com/browse/OCPBUGS-19923): Updating parameters for build timing PushImage test [#28291](https://github.com/openshift/origin/pull/28291)
* [OCPBUGS-22411](https://issues.redhat.com/browse/OCPBUGS-22411): fix: increase upper bounds for samples operator [#28356](https://github.com/openshift/origin/pull/28356)
* [OCPBUGS-22720](https://issues.redhat.com/browse/OCPBUGS-22720): Use Centos 8 Stream mysql image in tests [#28365](https://github.com/openshift/origin/pull/28365)
* [Full changelog](https://github.com/openshift/origin/compare/ae357035e709be61c051b7b45e5a005e6599d66f...8f6b619704c00fcc6418e0934065d30d18d3396d)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/72e998c300e17a7ba81d4a5a7624d69b0a104603)

* [OCPBUGS-17312](https://issues.redhat.com/browse/OCPBUGS-17312), [OCPBUGS-21558](https://issues.redhat.com/browse/OCPBUGS-21558): [release-4.14] bump golang.org/x/net to v0.17.0 [#20](https://github.com/openshift/cluster-api-provider-vsphere/pull/20)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/9f1d564131eae50d9d490a4518a699b8786ad346...72e998c300e17a7ba81d4a5a7624d69b0a104603)