# 4.14.0-0.okd-2024-01-26-175629

Created: 2024-01-27 10:31:44 +0000 UTC

Image Digest: `sha256:ae4f6a8bc6c5b2c8de3d9833d5addc2a69cbc73c8cbed5d9474dccdd5e5a700b`

Promoted from registry.ci.openshift.org/origin/release:4.14.0-0.okd-2024-01-26-175629


## Changes from 4.14.0-0.okd-2024-01-06-084517

### Components

* Kubernetes upgraded from 1.27.9 to 1.27.10
* Fedora CoreOS 38.20231027.3


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f3a6b8042dd2605087c270826aee84dfef94eb8d)

* [MGMT-15796](https://issues.redhat.com/browse/MGMT-15796): set CloudControllerManager to External for OCI (#5877) [#5877](https://github.com/openshift/assisted-service/pull/5877)
* [Full changelog](https://github.com/openshift/assisted-service/compare/0634e0aaf3cd89258f47ef0f255a9ff5702963d3...f3a6b8042dd2605087c270826aee84dfef94eb8d)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/607e2dde6cde137b5c14d5f7687847f6df4cae94)

* [OCPBUGS-23826](https://issues.redhat.com/browse/OCPBUGS-23826): bump go.opentelemetry.io [#67](https://github.com/openshift/cloud-provider-aws/pull/67)
* [OCPBUGS-27759](https://issues.redhat.com/browse/OCPBUGS-27759): Adds ecr-credential-plugin .spec [#71](https://github.com/openshift/cloud-provider-aws/pull/71)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/0a4f2a0f91efcf89fb57e0905973dcdf6988af59...607e2dde6cde137b5c14d5f7687847f6df4cae94)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/43a15be6ce6a5154be812db3dd55e871b529eefb)

* [OCPBUGS-21093](https://issues.redhat.com/browse/OCPBUGS-21093): Upgrade golang/x/net for CVE-2023-39325 (4.14) [#14](https://github.com/openshift/azure-workload-identity/pull/14)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/a474b2b0bc88d30cb4661b49bc3f9adac620b773...43a15be6ce6a5154be812db3dd55e871b529eefb)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/03257a6ac04de61a06292b957bda68d5e0a7b824)

* [OCPBUGS-27241](https://issues.redhat.com/browse/OCPBUGS-27241): baremetal: correct external_http_url for v6-only BMCs [#7914](https://github.com/openshift/installer/pull/7914)
* [OCPBUGS-22315](https://issues.redhat.com/browse/OCPBUGS-22315): bootstrap: Enable gatewayd units only on RHCOS [#7628](https://github.com/openshift/installer/pull/7628)
* [OCPBUGS-23498](https://issues.redhat.com/browse/OCPBUGS-23498): update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 [#7919](https://github.com/openshift/installer/pull/7919)
* [OCPBUGS-20860](https://issues.redhat.com/browse/OCPBUGS-20860): Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 [#7887](https://github.com/openshift/installer/pull/7887)
* [OCPBUGS-22895](https://issues.redhat.com/browse/OCPBUGS-22895): Do not generate azure-cloud-provider in manual mode for aro builds [#7670](https://github.com/openshift/installer/pull/7670)
* [Full changelog](https://github.com/openshift/installer/compare/a3cbb199faaa440a9d7e130f35b6be83f912aef9...03257a6ac04de61a06292b957bda68d5e0a7b824)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/13046b3bc0fc92b92582e50de0b1df6a359450a7)

* [OCPBUGS-26928](https://issues.redhat.com/browse/OCPBUGS-26928): Add .snyk file to ignore vendor and test files [#294](https://github.com/openshift/baremetal-runtimecfg/pull/294)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4b7c64bd91deabdba2c87a22c70f87ab2f7c2e6f...13046b3bc0fc92b92582e50de0b1df6a359450a7)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/3350a1b63f1366768a7aced839b9c9b13c403da4)

* [OCPBUGS-27515](https://issues.redhat.com/browse/OCPBUGS-27515): Write manifests when AWS IAM roles already exist. [#659](https://github.com/openshift/cloud-credential-operator/pull/659)
* [OCPBUGS-26512](https://issues.redhat.com/browse/OCPBUGS-26512): Use live client for metrics [#647](https://github.com/openshift/cloud-credential-operator/pull/647)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/fba5608095b60438575339bd406c7a9ed40995ae...3350a1b63f1366768a7aced839b9c9b13c403da4)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/5d436c6bb9fc269651256efabca9f7df9fb8f325)

* [OCPBUGS-25749](https://issues.redhat.com/browse/OCPBUGS-25749): Add Snyk file to exclude vendor directory on scan [#308](https://github.com/openshift/cluster-autoscaler-operator/pull/308)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/01c3b09a0e7f59846e28639590be8f307f0dc1bd...5d436c6bb9fc269651256efabca9f7df9fb8f325)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/33a706e8a2430fa67f4472dbd0f61cea8de6bd6f)

* [OCPBUGS-26548](https://issues.redhat.com/browse/OCPBUGS-26548): Adds CloudConfigTransformer for Azure [#321](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/321)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/c10ac3773e44951bb3dbcf2b30c9b93818d78fd0...33a706e8a2430fa67f4472dbd0f61cea8de6bd6f)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/7c6fa3ee88c4370e4ea4ba07351a7331e938cb25)

* NO-JIRA: add inert featuregate files to allow diff against later releases [#398](https://github.com/openshift/cluster-config-operator/pull/398)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/d069e1477c7855035935a716100b3e8d4751d951...7c6fa3ee88c4370e4ea4ba07351a7331e938cb25)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/14563fc0c24afe7304f1385b8fadd5aad050836b)

* [OCPBUGS-23571](https://issues.redhat.com/browse/OCPBUGS-23571): Add annotation in the etcd-guard static pod for worklo… [#1162](https://github.com/openshift/cluster-etcd-operator/pull/1162)
* [OCPBUGS-26214](https://issues.redhat.com/browse/OCPBUGS-26214): fix device busy errors [#1176](https://github.com/openshift/cluster-etcd-operator/pull/1176)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/e29f97d93ca1c4fa423b871ad7f1b73bd64ed1d0...14563fc0c24afe7304f1385b8fadd5aad050836b)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/03242d287adbaf5798a611c319aa2ae813ac6d68)

* [OCPBUGS-27063](https://issues.redhat.com/browse/OCPBUGS-27063): bump(library-go)=release-4.14 [#787](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/787)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/bc9ef03545147204bf6692d02db8e167a023ff44...03242d287adbaf5798a611c319aa2ae813ac6d68)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4)

* [OCPBUGS-27022](https://issues.redhat.com/browse/OCPBUGS-27022): bump(library-go)=release-4.14 [#527](https://github.com/openshift/cluster-kube-scheduler-operator/pull/527)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/6e43991c07e36757a00c4ec26888e040917cf2df...33f630dc1f890ca59c5e57fb5b6cc24a3f22a1d4)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/024378ae9427ff8d9ce79ebd0af7e8ab24002ba1)

* [OCPBUGS-27418](https://issues.redhat.com/browse/OCPBUGS-27418): go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 [#2239](https://github.com/openshift/cluster-monitoring-operator/pull/2239)
* [OCPBUGS-25799](https://issues.redhat.com/browse/OCPBUGS-25799): Detect ipv4/ipv6 socket in pod ip for nginx conf [#2215](https://github.com/openshift/cluster-monitoring-operator/pull/2215)
* [OCPBUGS-25387](https://issues.redhat.com/browse/OCPBUGS-25387): Add RHACM telemetry metric for 4.14 [#2202](https://github.com/openshift/cluster-monitoring-operator/pull/2202)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/94ddd62daa1ed729055e97b76e07745aa02098fd...024378ae9427ff8d9ce79ebd0af7e8ab24002ba1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d4eeaeb5be0de538fcf8ccc915d4e21eaa73cbde)

* [OCPBUGS-27858](https://issues.redhat.com/browse/OCPBUGS-27858): [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet [#2219](https://github.com/openshift/cluster-network-operator/pull/2219)
* [OCPBUGS-27013](https://issues.redhat.com/browse/OCPBUGS-27013): HyperShift, network-node-identity: Check the deployment in the management cluster [#2195](https://github.com/openshift/cluster-network-operator/pull/2195)
* [OCPBUGS-24326](https://issues.redhat.com/browse/OCPBUGS-24326): adminpolicybasedexternalroutes CR accepts an invalid IP address [#2196](https://github.com/openshift/cluster-network-operator/pull/2196)
* [OCPBUGS-24037](https://issues.redhat.com/browse/OCPBUGS-24037): remove all managed fields used by old manager [#2112](https://github.com/openshift/cluster-network-operator/pull/2112)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/2d7ced4536c90a4c848ae9a67caf4c0766cfde78...d4eeaeb5be0de538fcf8ccc915d4e21eaa73cbde)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ffdfe67e4777f82688252181e6c92f07123fde82)

* rps: fail silently when rps application failed (#901) [#901](https://github.com/openshift/cluster-node-tuning-operator/pull/901)
* [OCPBUGS-25982](https://issues.redhat.com/browse/OCPBUGS-25982): E2E: Add tests for Dynamic ovs pinning (#904) (#913) [#904](https://github.com/openshift/cluster-node-tuning-operator/pull/904)
* [OCPBUGS-26003](https://issues.redhat.com/browse/OCPBUGS-26003): E2E: PPC Test cases (#905) [#905](https://github.com/openshift/cluster-node-tuning-operator/pull/905)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/c2dffde35f3d6de662ab0f7dfa9698affba286b2...ffdfe67e4777f82688252181e6c92f07123fde82)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/7f3f152e04ab8d7b19f84c20c9a25ce51f1078a5)

* [OCPBUGS-27822](https://issues.redhat.com/browse/OCPBUGS-27822): Revert "[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs" [#1028](https://github.com/openshift/cluster-version-operator/pull/1028)
* [OCPBUGS-27175](https://issues.redhat.com/browse/OCPBUGS-27175): clusterOperatorBuilder: Reconcile metadata on COs [#1021](https://github.com/openshift/cluster-version-operator/pull/1021)
* [OCPBUGS-27048](https://issues.redhat.com/browse/OCPBUGS-27048): pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream [#1018](https://github.com/openshift/cluster-version-operator/pull/1018)
* [OCPBUGS-26207](https://issues.redhat.com/browse/OCPBUGS-26207): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1016](https://github.com/openshift/cluster-version-operator/pull/1016)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/2a48f5e228f27a26383f1a613fa328c1ffba7977...7f3f152e04ab8d7b19f84c20c9a25ce51f1078a5)


### [console](https://github.com/openshift/console/tree/2c150d792356b50c22eb6bfbae93c14ff31b09bb)

* [OCPBUGS-27350](https://issues.redhat.com/browse/OCPBUGS-27350): Add Pipeline metrics tab using plugin [#13520](https://github.com/openshift/console/pull/13520)
* [OCPBUGS-26171](https://issues.redhat.com/browse/OCPBUGS-26171): Set unlimited line width in YAML editor [#13482](https://github.com/openshift/console/pull/13482)
* [OCPBUGS-24640](https://issues.redhat.com/browse/OCPBUGS-24640): Strip 'Server' header from proxy response [#13423](https://github.com/openshift/console/pull/13423)
* [OCPBUGS-25997](https://issues.redhat.com/browse/OCPBUGS-25997): change Alertmanager form to create using matchers inst… [#13478](https://github.com/openshift/console/pull/13478)
* [Full changelog](https://github.com/openshift/console/compare/52c0b1598989cea2264a4dda1372a91bcd6647ec...2c150d792356b50c22eb6bfbae93c14ff31b09bb)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/30de5c6487588d24349f4b300c5b96385b813085)

* [OCPBUGS-25069](https://issues.redhat.com/browse/OCPBUGS-25069), [OCPBUGS-26309](https://issues.redhat.com/browse/OCPBUGS-26309), [OCPBUGS-26323](https://issues.redhat.com/browse/OCPBUGS-26323): add snyk config file for SAST scan [#163](https://github.com/openshift/csi-driver-shared-resource/pull/163)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/3ffcdcf8b2519009797f871c9c33beae2d5328ed...30de5c6487588d24349f4b300c5b96385b813085)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/1864c668f19bf51e71631c7896e3ae3d783dd375)

* [OCPBUGS-26312](https://issues.redhat.com/browse/OCPBUGS-26312): add snyk config file for SAST scank [#97](https://github.com/openshift/csi-driver-shared-resource-operator/pull/97)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/a351354201f3ea7ef0bbf49ad0d57f34a40a8149...1864c668f19bf51e71631c7896e3ae3d783dd375)


### [etcd](https://github.com/openshift/etcd/tree/77303c479ae9cb45b5a1b481f54ec5b62d89246f)

* [OCPBUGS-24939](https://issues.redhat.com/browse/OCPBUGS-24939): Rebase etcd 3.5.11 openshift 4.14 [#235](https://github.com/openshift/etcd/pull/235)
* [Full changelog](https://github.com/openshift/etcd/compare/ba21c5bca59afce3800577c1cbb073c5556ca990...77303c479ae9cb45b5a1b481f54ec5b62d89246f)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/be95ff4a2d3b40b813e5e36da794f6959a8e4140)

* Bump fedora-coreos to latest stable [#726](https://github.com/openshift/okd-machine-os/pull/726)
* Bump fedora-coreos to latest stable [#721](https://github.com/openshift/okd-machine-os/pull/721)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/aa2b15a465b4a36e0b24902d8b373e39a8dda18d...be95ff4a2d3b40b813e5e36da794f6959a8e4140)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/28ed2d70d51caa9146362e3d268e24198731f6b7)

* [OCPBUGS-27369](https://issues.redhat.com/browse/OCPBUGS-27369): Update to kubernetes 1.27.10 [#1860](https://github.com/openshift/kubernetes/pull/1860)
* [OCPBUGS-25813](https://issues.redhat.com/browse/OCPBUGS-25813): Fix uncertain device in 4.14 [#1830](https://github.com/openshift/kubernetes/pull/1830)
* [Full changelog](https://github.com/openshift/kubernetes/compare/5c56cc35e3edc1f34290e7aaaec57e9c88c91859...28ed2d70d51caa9146362e3d268e24198731f6b7)


### [hypershift](https://github.com/openshift/hypershift/tree/ba909668522b5443054ecb06e1ba5d0cb321ec13)

* [OCPBUGS-24315](https://issues.redhat.com/browse/OCPBUGS-24315): Add prestop to konnectiviy server [#3268](https://github.com/openshift/hypershift/pull/3268)
* [OCPBUGS-24307](https://issues.redhat.com/browse/OCPBUGS-24307): Set shutdown-delay-duration to 15s [#3264](https://github.com/openshift/hypershift/pull/3264)
* [OCPBUGS-21795](https://issues.redhat.com/browse/OCPBUGS-21795): change trusted bundle volume mount for CPO [#3102](https://github.com/openshift/hypershift/pull/3102)
* [OCPBUGS-25217](https://issues.redhat.com/browse/OCPBUGS-25217): Konnectivity agent update strategy [#3308](https://github.com/openshift/hypershift/pull/3308)
* [OCPBUGS-26574](https://issues.redhat.com/browse/OCPBUGS-26574): Set new condition on SG deletion. [#3398](https://github.com/openshift/hypershift/pull/3398)
* Update RHTAP references (release-4.14) [#3402](https://github.com/openshift/hypershift/pull/3402)
* Update RHTAP references (release-4.14) [#3383](https://github.com/openshift/hypershift/pull/3383)
* [OCPBUGS-22360](https://issues.redhat.com/browse/OCPBUGS-22360): Validate accessTokenInactivityTimeout >= 300s [#3175](https://github.com/openshift/hypershift/pull/3175)
* [Full changelog](https://github.com/openshift/hypershift/compare/e2071ef95a7904b3a748cba28ddfd3583eb358c8...ba909668522b5443054ecb06e1ba5d0cb321ec13)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/446871ff7626c4199836929f5bc777aba2a5f001)

* [OCPBUGS-24665](https://issues.redhat.com/browse/OCPBUGS-24665): Add Snyk file to exclude vendor directory on scan [#65](https://github.com/openshift/cloud-provider-ibm/pull/65)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/d2c38ce33a2bc38e1d30313ca61954d09400b466...446871ff7626c4199836929f5bc777aba2a5f001)


### [ironic](https://github.com/openshift/ironic-image/tree/eac5388e228ba7ad8647ee450343267e69dfd140)

* [OCPBUGS-27193](https://issues.redhat.com/browse/OCPBUGS-27193): Fix Inspector iPXE config for IPv6 addresses [#448](https://github.com/openshift/ironic-image/pull/448)
* [Full changelog](https://github.com/openshift/ironic-image/compare/bd013d93f9e968f7893665644415c4e67b7a2a1a...eac5388e228ba7ad8647ee450343267e69dfd140)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a1855dc05639cce4529c4e0173aac0bac57bbc42)

* [OCPBUGS-24998](https://issues.redhat.com/browse/OCPBUGS-24998): Add Snyk file to exclude vendor directory on scan [#1191](https://github.com/openshift/machine-api-operator/pull/1191)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/2a4b57d1cc6ab5095d61feab9d144c652baab5b8...a1855dc05639cce4529c4e0173aac0bac57bbc42)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/02a6260d730bae5995e3bde6c6792a75db9ec025)

* [OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic [#4066](https://github.com/openshift/machine-config-operator/pull/4066)
* [OCPBUGS-27178](https://issues.redhat.com/browse/OCPBUGS-27178): use *resource.Quantity to not automatically set 0 [#4121](https://github.com/openshift/machine-config-operator/pull/4121)
* [OCPBUGS-23089](https://issues.redhat.com/browse/OCPBUGS-23089): Don't retry node-ip show in resolv-prepender [#4022](https://github.com/openshift/machine-config-operator/pull/4022)
* [OCPBUGS-27362](https://issues.redhat.com/browse/OCPBUGS-27362): Fix typo in AWS node env unit [#4131](https://github.com/openshift/machine-config-operator/pull/4131)
* [OCPBUGS-26500](https://issues.redhat.com/browse/OCPBUGS-26500): crio: drop automatic image cleanup on upgrades [#4105](https://github.com/openshift/machine-config-operator/pull/4105)
* [OCPBUGS-26559](https://issues.redhat.com/browse/OCPBUGS-26559): Azure Run ovs-configuration.service before dnsmasq.service [#4109](https://github.com/openshift/machine-config-operator/pull/4109)
* [OCPBUGS-26551](https://issues.redhat.com/browse/OCPBUGS-26551): kubelet: fix kubelet labels [#4107](https://github.com/openshift/machine-config-operator/pull/4107)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7649b9274cde2fb50a61a579e3891c8ead2d79c5...02a6260d730bae5995e3bde6c6792a75db9ec025)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/2a6627bafcbb00437ab97308fe1d7df9039104ad)

* [OCPBUGS-24576](https://issues.redhat.com/browse/OCPBUGS-24576): configurable ironic agent vlan creation [#111](https://github.com/openshift/image-customization-controller/pull/111)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/2dda87a2c51f00d65836ca12d3639f03e7531f7d...2a6627bafcbb00437ab97308fe1d7df9039104ad)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/13aebf7480b626f199cb5dbce3f37405dfd486e1)

* [OCPBUGS-27858](https://issues.redhat.com/browse/OCPBUGS-27858): Enable reconciler configuration 4.14 [#240](https://github.com/openshift/whereabouts-cni/pull/240)
* [OCPBUGS-26553](https://issues.redhat.com/browse/OCPBUGS-26553): Cherry pick fix assignment 4.14 [#230](https://github.com/openshift/whereabouts-cni/pull/230)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/2e723a7a0dbb0bc1d3b18d219d8ff7f366110f91...13aebf7480b626f199cb5dbce3f37405dfd486e1)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/f5914ef1398c9b66d0693f072ac1d2fb6d7ecddb)

* [OCPBUGS-27116](https://issues.redhat.com/browse/OCPBUGS-27116): UPSTREAM: <carry>: retry etcd Unavailable errors [#97](https://github.com/openshift/oauth-apiserver/pull/97)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/a18cb3e10639b5789f7c291707064743feb105e2...f5914ef1398c9b66d0693f072ac1d2fb6d7ecddb)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/7691686f8670c0d52ce9d903689f572f8dd2b8d0)

* [OCPBUGS-19429](https://issues.redhat.com/browse/OCPBUGS-19429): Fix cross EUS channel upgrade path calculation (#769) [#769](https://github.com/openshift/oc-mirror/pull/769)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/058c3324517b7a043a823e203bf6b282de5e3b8f...7691686f8670c0d52ce9d903689f572f8dd2b8d0)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/9e9b51d26b393cceb2d5c7c9d5b04a4f71fc8a19)

* [OCPBUGS-27104](https://issues.redhat.com/browse/OCPBUGS-27104): UPSTREAM: <carry>: retry etcd Unavailable errors [#412](https://github.com/openshift/openshift-apiserver/pull/412)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a9364565cd3471a9b718a3274b35970269d20e09...9e9b51d26b393cceb2d5c7c9d5b04a4f71fc8a19)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/6516b6e06e29971c2b876647ccfa0d9664ead7ba)

* [OCPBUGS-26460](https://issues.redhat.com/browse/OCPBUGS-26460), [OCPBUGS-26461](https://issues.redhat.com/browse/OCPBUGS-26461): [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 [#156](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/156)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/d5770c29b0dad798ab77f3a76f78a78dbc721934...6516b6e06e29971c2b876647ccfa0d9664ead7ba)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d8b6a26c1ecd1d97b69c4384dc8e1ebcf9c280b4)

* [OCPBUGS-27485](https://issues.redhat.com/browse/OCPBUGS-27485): [CARRY] SSC RBAC [#665](https://github.com/openshift/operator-framework-olm/pull/665)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f5327f08e8f332f036c4f46bc87e1195088717d6...d8b6a26c1ecd1d97b69c4384dc8e1ebcf9c280b4)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/b050c8f87b6414d2d75c594e7a08277e85375c78)

* [OCPBUGS-27243](https://issues.redhat.com/browse/OCPBUGS-27243): CARRY: Updates owners and adds Surya [#2019](https://github.com/openshift/ovn-kubernetes/pull/2019)
* [OCPBUGS-25081](https://issues.redhat.com/browse/OCPBUGS-25081): Update ACL syncer: make default deny acls filter more strict, [#1981](https://github.com/openshift/ovn-kubernetes/pull/1981)
* [OCPBUGS-26568](https://issues.redhat.com/browse/OCPBUGS-26568): Synchronize node primary address update [#2012](https://github.com/openshift/ovn-kubernetes/pull/2012)
* [OCPBUGS-24326](https://issues.redhat.com/browse/OCPBUGS-24326): APB External Route: Add IPv4 and IPv6 validation in CRD schema for static hop IP field [#1967](https://github.com/openshift/ovn-kubernetes/pull/1967)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/f27cd40338356e2e979e82b0151d0ed3246d36da...b050c8f87b6414d2d75c594e7a08277e85375c78)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c8e91dbbfc4bd7fbf87506de5d72ca8fbd11171c)

* [OCPBUGS-24224](https://issues.redhat.com/browse/OCPBUGS-24224): Explicitly degrade the cluster when conditions are not met [#194](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/194)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/cbfec1135914340ef16c7dd109ac9271a2e5d2ee...c8e91dbbfc4bd7fbf87506de5d72ca8fbd11171c)