# 4.17.0-okd-scos.0
Created: 2024-12-04 01:53:43 +0000 UTC
Image Digest: `sha256:a5d3ee9c486adc73a61339b755760537c92821dd202359176235437cd9b4a95b`
Promoted from registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2024-12-03-010653
## Changes from 4.16.0-okd-scos.1
### Components
* Kubectl upgraded from 1.29.7 to 1.30.5
* Kubernetes upgraded from 1.29.10 to 1.30.6
* Kubernetes Tests upgraded from 1.29.0 to 1.30.0
* CentOS Stream CoreOS upgraded from 416.9.202411211032-0 to 417.9.202412022032-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| ClusterAPIInstallAzure
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) |
| ImagePolicy
(0 tests)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed) |
| ServiceAccountTokenNodeBindingValidation
(0 tests)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed) |
| ServiceAccountTokenPodNodeInfo
(0 tests)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed)| Unconditional
(Changed) |
| ChunkSizeMiB
(5 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ClusterAPIInstallGCP
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ClusterAPIInstallPowerVS
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| GCPLabelsTags
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ManagedBootImages
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| NodeDisruptionPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ValidatingAdmissionPolicy
(0 tests)| Enabled
(Changed)| Enabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| AWSEFSDriverVolumeMetrics
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| IngressControllerLBSubnetsAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MultiArchInstallAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MultiArchInstallGCP
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| SetEIPForNLBIngressController
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| AdditionalRoutingCapabilities
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| BootcNodeManagement
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ClusterMonitoringConfig
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MachineAPIMigration
(0 tests)| | | | | | |
| ManagedBootImagesAWS
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MultiArchInstallAzure
(0 tests)| | | | | | |
| NetworkSegmentation
(28 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| OVNObservability
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PersistentIPsForVirtualization
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| ProcMountType
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| RouteAdvertisements
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| UserNamespacesSupport
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### New images
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [9e6d2bd4](https://github.com/openshift/cluster-api-provider-metal3/commit/9e6d2bd4f848a0137040e618c2df4eecce4caed7) `sha256:9d469e55610e80ebc043ae26140207ebe4bab1df01e9ba0abc364265b2085727`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [08579e9f](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/08579e9f60ab7f5f6c57f7e507c66a7ff0cc6d62) `sha256:c745d30328955c16c034204d44b6bb25585cdde54072d65a7ee8be0123d8afb9`
* [metallb-frr](https://github.com/openshift/frr) git [377d02f9](https://github.com/openshift/frr/commit/377d02f94181d26dac3ab2e2067ced9fe8d73763) `sha256:974675734bfc43fb64ff0fa84618d65f41cb7d2d9df95470e4c57b4fc0599b21`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [fa9e6b01](https://github.com/openshift/networking-console-plugin/commit/fa9e6b018d0e72e4243194a0b5b6c88d5090bcf2) `sha256:7ab622102f2e357c3c8fdc09ed03141ab00f6d0f65cc126b0eebe71bf7b9ff7b`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [649dfc4d](https://github.com/openshift/operator-framework-olm/commit/649dfc4dc0a7fca1c25c7678665a55ad8ce53040) `sha256:266779630d0bfa6d9f0f91e024e7061d4f0d26fc19186de23140a8fae8eb045d`
### Removed images
* alibaba-cloud-controller-manager
* alibaba-machine-controllers
* k8s-prometheus-adapter
* olm-rukpak
* sdn
### Rebuilt images without code change
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:d4719053e26f1c4c1e38546fb345826f68de653956c7819ebe221569d83e4562`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [30f80124](https://github.com/openshift/oauth-proxy/commit/30f8012482023689655252dc2af2f17fe6a09253) `sha256:417c348f629928e143430f4598e6cf985e102f11febd77e29422ff43a9f68fa4`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:603fe5da67f29d5e4e49f358eb9f2327a48d80456979006ec6ec0eb0948b1bbf`
* [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [abb91c84](https://github.com/openshift/cluster-api-provider-ovirt/commit/abb91c84083dd139780921673da64fa5cd13bccb) `sha256:b20e2d4b93a30924e5d6fe295016ca660edd6130b60a9d5231d827ebaa994062`
* stream-coreos `sha256:1ddb74181a918712054aad400c0a83b69cafc948ccbf77116782b4b82d3bcbca`
* stream-coreos-extensions `sha256:59554702486959fa5d66d73b254c00e2370ce5ea115f4a72b2019457356589b5`
### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/b2babb90b439acef3b05ccd8400b49b7ef9ecada)
* [OCPBUGS-42525](https://issues.redhat.com/browse/OCPBUGS-42525): Disable pprof for agent-based installer (#6897) [#6897](https://github.com/openshift/assisted-service/pull/6897)
* [OCPBUGS-43020](https://issues.redhat.com/browse/OCPBUGS-43020): Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6892) [#6892](https://github.com/openshift/assisted-service/pull/6892)
* Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.17 (#6709) [#6709](https://github.com/openshift/assisted-service/pull/6709)
* [OCPBUGS-42569](https://issues.redhat.com/browse/OCPBUGS-42569): Libraries bump to mitigate CVE-2024-27289 (#6832) [#6832](https://github.com/openshift/assisted-service/pull/6832)
* [MGMT-17805](https://issues.redhat.com/browse/MGMT-17805): Fix MCO reboot error for s390x (#6727) [#6727](https://github.com/openshift/assisted-service/pull/6727)
* [OCPBUGS-36577](https://issues.redhat.com/browse/OCPBUGS-36577): Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#6750) [#6750](https://github.com/openshift/assisted-service/pull/6750)
* [MGMT-18575](https://issues.redhat.com/browse/MGMT-18575), [MGMT-18694](https://issues.redhat.com/browse/MGMT-18694), [OCPBUGS-41820](https://issues.redhat.com/browse/OCPBUGS-41820): Don't require mapping for names matching physical interfaces (#6745) [#6745](https://github.com/openshift/assisted-service/pull/6745)
* [OCPBUGS-27238](https://issues.redhat.com/browse/OCPBUGS-27238): Use both the OCP cluster trusted certs and user certs (#6649) [#6649](https://github.com/openshift/assisted-service/pull/6649)
* [MGMT-18560](https://issues.redhat.com/browse/MGMT-18560): Fix AutomatedCleaningMode behavior (#6662) [#6662](https://github.com/openshift/assisted-service/pull/6662)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.15 (#6663) [#6663](https://github.com/openshift/assisted-service/pull/6663)
* NO-ISSUE: Fix debug image by adding required packages (#6659) [#6659](https://github.com/openshift/assisted-service/pull/6659)
* [MGMT-17560](https://issues.redhat.com/browse/MGMT-17560): Append kargs for iSCSI boot (#6602) [#6602](https://github.com/openshift/assisted-service/pull/6602)
* NO-ISSUE: [master] Bump OCP versions: 4.16 (#6658) [#6658](https://github.com/openshift/assisted-service/pull/6658)
* NO-ISSUE: Add missing kube api flag on kube api subsystem test (#6655) [#6655](https://github.com/openshift/assisted-service/pull/6655)
* NO-ISSUE: Print subsystem environment variables before test (#6654) [#6654](https://github.com/openshift/assisted-service/pull/6654)
* [MGMT-17560](https://issues.redhat.com/browse/MGMT-17560): validation to support iSCSI boot volume (#6434) [#6434](https://github.com/openshift/assisted-service/pull/6434)
* [MGMT-18313](https://issues.redhat.com/browse/MGMT-18313): Replace golang base image as it is based on Centos Linux 7 (#6637) [#6637](https://github.com/openshift/assisted-service/pull/6637)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.13 (#6644) [#6644](https://github.com/openshift/assisted-service/pull/6644)
* [MGMT-18231](https://issues.redhat.com/browse/MGMT-18231): Block iSCSI as an installation disk when its holder is multipath (#6612) [#6612](https://github.com/openshift/assisted-service/pull/6612)
* [MGMT-18505](https://issues.redhat.com/browse/MGMT-18505): Fix installation from a 4.17 hub with converged flow (#6639) [#6639](https://github.com/openshift/assisted-service/pull/6639)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.15, 4.12 (#6638) [#6638](https://github.com/openshift/assisted-service/pull/6638)
* [AGENT-930](https://issues.redhat.com/browse/AGENT-930): For the agent installer, parse the expiration time from the token and verify if the token is valid. (#6605) [#6605](https://github.com/openshift/assisted-service/pull/6605)
* NO-ISSUE: Use skipepr to build images as debug image requires nmstate packages for building (#6629) [#6629](https://github.com/openshift/assisted-service/pull/6629)
* [MGMT-16242](https://issues.redhat.com/browse/MGMT-16242): Suggest OCP images based on availability for architecture (#6262) [#6262](https://github.com/openshift/assisted-service/pull/6262)
* NO-ISSUE: [master] Bump OCP versions: 4.16 (#6621) [#6621](https://github.com/openshift/assisted-service/pull/6621)
* [MGMT-18451](https://issues.redhat.com/browse/MGMT-18451): Enable debugging assisted-service on kind (#6613) [#6613](https://github.com/openshift/assisted-service/pull/6613)
* Revert "MGMT-18127: User name and password in a proxy url should be url encod…" (#6619) [#6619](https://github.com/openshift/assisted-service/pull/6619)
* NO-ISSUE: Tidy golang dependencies before vendoring in base image (#6599) [#6599](https://github.com/openshift/assisted-service/pull/6599)
* NO-ISSUE: [master] Bump OCP versions: 4.17 (#6611) [#6611](https://github.com/openshift/assisted-service/pull/6611)
* [MGMT-18446](https://issues.redhat.com/browse/MGMT-18446): Correct hostname max length validation (#6604) [#6604](https://github.com/openshift/assisted-service/pull/6604)
* [MGMT-18448](https://issues.redhat.com/browse/MGMT-18448): Allow local cluster import to be disabled. (#6606) [#6606](https://github.com/openshift/assisted-service/pull/6606)
* [MGMT-17773](https://issues.redhat.com/browse/MGMT-17773): Enforce go modules tidy (#6600) [#6600](https://github.com/openshift/assisted-service/pull/6600)
* NO-ISSUE: [master] Bump OCP versions: 4.15 (#6598) [#6598](https://github.com/openshift/assisted-service/pull/6598)
* Add -L option to curl command to follow redirects (#6594) [#6594](https://github.com/openshift/assisted-service/pull/6594)
* NO-ISSUE: Adjust permissions on /data directory (#6587) [#6587](https://github.com/openshift/assisted-service/pull/6587)
* Revert "Add certs to ingress when deploying in non-OCP clusters (#6564)" (#6590) [#6564](https://github.com/openshift/assisted-service/pull/6564)
* Fix OKD podman deploy (#6588) [#6588](https://github.com/openshift/assisted-service/pull/6588)
* [MGMT-18411](https://issues.redhat.com/browse/MGMT-18411): Add NTP sources to discovery environment (#6591) [#6591](https://github.com/openshift/assisted-service/pull/6591)
* NO-ISSUE: Fix python client generation (#6593) [#6593](https://github.com/openshift/assisted-service/pull/6593)
* fix: dev-requirements.txt to reduce vulnerabilities (#6576) [#6576](https://github.com/openshift/assisted-service/pull/6576)
* [MGMT-18155](https://issues.redhat.com/browse/MGMT-18155): handle state of day2 node in Done stage (#6570) [#6570](https://github.com/openshift/assisted-service/pull/6570)
* Remove unused extracter struct (#6586) [#6586](https://github.com/openshift/assisted-service/pull/6586)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.13 (#6584) [#6584](https://github.com/openshift/assisted-service/pull/6584)
* [KONFLUX-1611](https://issues.redhat.com/browse/KONFLUX-1611): Add labels, licenses & user to Dockerfile (#6484) [#6484](https://github.com/openshift/assisted-service/pull/6484)
* Refactor package in generator_test.go to use _test suffix for implementing black-box testing methodology (#6578) [#6578](https://github.com/openshift/assisted-service/pull/6578)
* Add certs to ingress when deploying in non-OCP clusters (#6564) [#6564](https://github.com/openshift/assisted-service/pull/6564)
* [MGMT-18333](https://issues.redhat.com/browse/MGMT-18333): Remove the python client from the image (#6579) [#6579](https://github.com/openshift/assisted-service/pull/6579)
* NO-ISSUE: Exclude vendor directory from snyk code analysis (#6572) [#6572](https://github.com/openshift/assisted-service/pull/6572)
* ('#6552'): Update registry.svc.ci.openshift.org to registry.ci.openshift.org (#6553) [#6553](https://github.com/openshift/assisted-service/pull/6553)
* NO-ISSUE: Fix subsystem tests in the CI - Wiremock stubs script is failing to reach wiremock from time to time (#6569) [#6569](https://github.com/openshift/assisted-service/pull/6569)
* NO-ISSUE: [master] Bump OCP versions: 4.14 (#6568) [#6568](https://github.com/openshift/assisted-service/pull/6568)
* [MGMT-18171](https://issues.redhat.com/browse/MGMT-18171): Make manifest metadata storage more transactional in nature (#6457) [#6457](https://github.com/openshift/assisted-service/pull/6457)
* fix: dev-requirements.txt to reduce vulnerabilities (#6551) [#6551](https://github.com/openshift/assisted-service/pull/6551)
* NI-ISSUE: Fix skipper configuration (#6560) [#6560](https://github.com/openshift/assisted-service/pull/6560)
* [MGMT-17478](https://issues.redhat.com/browse/MGMT-17478): Use ICC config secret for converged flow info when available (#6533) [#6533](https://github.com/openshift/assisted-service/pull/6533)
* Fix kind deploy (#6561) [#6561](https://github.com/openshift/assisted-service/pull/6561)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.15 (#6558) [#6558](https://github.com/openshift/assisted-service/pull/6558)
* [MGMT-18160](https://issues.redhat.com/browse/MGMT-18160): Use cert-manager to handle tls certs for webhooks (#6546) [#6546](https://github.com/openshift/assisted-service/pull/6546)
* [MGMT-17893](https://issues.redhat.com/browse/MGMT-17893): Don't destroy cluster on detach (#6532) [#6532](https://github.com/openshift/assisted-service/pull/6532)
* NO-ISSUE: Add renovate config to limit number of PR (#6536) [#6536](https://github.com/openshift/assisted-service/pull/6536)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16 (#6547) [#6547](https://github.com/openshift/assisted-service/pull/6547)
* NO-ISSUE: Mount emptyDir for data in image service (#6544) [#6544](https://github.com/openshift/assisted-service/pull/6544)
* [MGMT-18131](https://issues.redhat.com/browse/MGMT-18131): Make application work on non-OCP kubernetes (#6446) [#6446](https://github.com/openshift/assisted-service/pull/6446)
* NO-ISSUE: [master] Bump OCP versions: 4.15 (#6511) [#6511](https://github.com/openshift/assisted-service/pull/6511)
* [MGMT-18286](https://issues.redhat.com/browse/MGMT-18286): Internal Documentation for using and testing multipath (#6505) [#6505](https://github.com/openshift/assisted-service/pull/6505)
* [MGMT-18269](https://issues.redhat.com/browse/MGMT-18269): Reset finalizing stage in DB while resetting cluster (#6499) [#6499](https://github.com/openshift/assisted-service/pull/6499)
* [MGMT-8356](https://issues.redhat.com/browse/MGMT-8356): Fix postgres deployment script in 'kind' target to set static nodePort correctly, Remove static nodePorts for deployment targets other then 'kind' (#6504) [#6504](https://github.com/openshift/assisted-service/pull/6504)
* NO-ISSUE: Add 4.17 OS/OCP images (#6503) [#6503](https://github.com/openshift/assisted-service/pull/6503)
* [OCPBUGS-35932](https://issues.redhat.com/browse/OCPBUGS-35932): Allow auth in docker credentials to be empty (#6465) [#6465](https://github.com/openshift/assisted-service/pull/6465)
* NO-ISSUE: Retrieve 'subsystem-clean' target as it is used by the QE (#6494) [#6494](https://github.com/openshift/assisted-service/pull/6494)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.12, 4.15 (#6502) [#6502](https://github.com/openshift/assisted-service/pull/6502)
* [MGMT-18073](https://issues.redhat.com/browse/MGMT-18073): update OCP 4.16 GA version, add 4.17 beta versions (#6501) [#6501](https://github.com/openshift/assisted-service/pull/6501)
* NO-ISSUE: Increase Konflux git clone depth (#6495) [#6495](https://github.com/openshift/assisted-service/pull/6495)
* Allow agent-installer-client to use a secure port when adding a new node in day2 (#6464) [#6464](https://github.com/openshift/assisted-service/pull/6464)
* Update quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.1 Docker digest to 8838d3e (#6479) [#6479](https://github.com/openshift/assisted-service/pull/6479)
* Update quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4 Docker digest to d70d970 (#6478) [#6478](https://github.com/openshift/assisted-service/pull/6478)
* Update quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.1 Docker digest to 46fcff2 (#6477) [#6477](https://github.com/openshift/assisted-service/pull/6477)
* Update quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.1 Docker digest to f38e274 (#6474) [#6474](https://github.com/openshift/assisted-service/pull/6474)
* Update quay.io/konflux-ci/tekton-catalog/task-buildah:0.1 Docker digest to cdcb8b8 (#6473) [#6473](https://github.com/openshift/assisted-service/pull/6473)
* Update quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check:0.1 Docker digest to a74dae0 (#6481) [#6481](https://github.com/openshift/assisted-service/pull/6481)
* Update quay.io/konflux-ci/tekton-catalog/task-git-clone:0.1 Docker digest to 9ea6101 (#6480) [#6480](https://github.com/openshift/assisted-service/pull/6480)
* [MGMT-16102](https://issues.redhat.com/browse/MGMT-16102): Generated code returns inconsistent error codes (#6433) [#6433](https://github.com/openshift/assisted-service/pull/6433)
* [MGMT-18127](https://issues.redhat.com/browse/MGMT-18127): User name and password in a proxy url should be url encoded (#6467) [#6467](https://github.com/openshift/assisted-service/pull/6467)
* NO-ISSUE: Red Hat Konflux update assisted-service-saas-main (#6471) [#6471](https://github.com/openshift/assisted-service/pull/6471)
* NO-ISSUE: Add missing 'make' command (#6466) [#6466](https://github.com/openshift/assisted-service/pull/6466)
* NO-ISSUE: Add pastequo as approver (#6460) [#6460](https://github.com/openshift/assisted-service/pull/6460)
* Red Hat Konflux purge assisted-service-q2vh (#6453) [#6453](https://github.com/openshift/assisted-service/pull/6453)
* fix: dev-requirements.txt to reduce vulnerabilities (#6445) [#6445](https://github.com/openshift/assisted-service/pull/6445)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.15, 4.13 (#6449) [#6449](https://github.com/openshift/assisted-service/pull/6449)
* NO-ISSUE: Create 'build' dir if missing (#6448) [#6448](https://github.com/openshift/assisted-service/pull/6448)
* [MGMT-18029](https://issues.redhat.com/browse/MGMT-18029): Enhancement for manifest storage improvement (#6431) [#6431](https://github.com/openshift/assisted-service/pull/6431)
* [MGMT-8356](https://issues.redhat.com/browse/MGMT-8356): Deploy assisted-service and its components to kind cluster (#6385) [#6385](https://github.com/openshift/assisted-service/pull/6385)
* [MGMT-18067](https://issues.redhat.com/browse/MGMT-18067): Update operator bundle channel to 2.12 (#6440) [#6440](https://github.com/openshift/assisted-service/pull/6440)
* NO-ISSUE: Add omer-vishlitzky to OWNERS_ALIASES file (#6432) [#6432](https://github.com/openshift/assisted-service/pull/6432)
* NO-ISSUE: [master] Bump OCP versions: 4.16 (#6442) [#6442](https://github.com/openshift/assisted-service/pull/6442)
* NO-ISSUE: Refactor uploader pkg (#6435) [#6435](https://github.com/openshift/assisted-service/pull/6435)
* NO-ISSUE: Push cluster_installation_failed event each time the state machine go to failed state (#6439) [#6439](https://github.com/openshift/assisted-service/pull/6439)
* [MGMT-18092](https://issues.redhat.com/browse/MGMT-18092): infraenv cannot be created while deploying vlan spokes with previous configuration (#6420) [#6420](https://github.com/openshift/assisted-service/pull/6420)
* [MGMT-18130](https://issues.redhat.com/browse/MGMT-18130): Allow infra-operator to start in non OCP kubernetes clusters (#6427) [#6427](https://github.com/openshift/assisted-service/pull/6427)
* fix: dev-requirements.txt to reduce vulnerabilities (#6438) [#6438](https://github.com/openshift/assisted-service/pull/6438)
* NO-ISSUE: [master] Bump OCP versions: 4.12, 4.14, 4.15 (#6428) [#6428](https://github.com/openshift/assisted-service/pull/6428)
* Differentiate between monitoring failures and component issues (#6437) [#6437](https://github.com/openshift/assisted-service/pull/6437)
* [MGMT-17708](https://issues.redhat.com/browse/MGMT-17708): Adjust the logs to show values when registering the cluster (#6429) [#6429](https://github.com/openshift/assisted-service/pull/6429)
* Add Linoy Hadad to OWNER_ALIASES file (#6430) [#6430](https://github.com/openshift/assisted-service/pull/6430)
* [MGMT-18041](https://issues.redhat.com/browse/MGMT-18041): Expose helper to parse uploaded events (on-prem) (#6415) [#6415](https://github.com/openshift/assisted-service/pull/6415)
* [MGMT-18096](https://issues.redhat.com/browse/MGMT-18096): Make sure correct cluster name and base domain is set by local cluster import controller (#6419) [#6419](https://github.com/openshift/assisted-service/pull/6419)
* NO-ISSUE: Remove double 'required: false' in openshift template (#6423) [#6423](https://github.com/openshift/assisted-service/pull/6423)
* NO-ISSUE: [master] Bump OCP versions: 4.16 (#6421) [#6421](https://github.com/openshift/assisted-service/pull/6421)
* [MGMT-17300](https://issues.redhat.com/browse/MGMT-17300): adding has partition field for disks (#6383) [#6383](https://github.com/openshift/assisted-service/pull/6383)
* [MGMT-18086](https://issues.redhat.com/browse/MGMT-18086): Clean subsystem tests resources correctly (#6418) [#6418](https://github.com/openshift/assisted-service/pull/6418)
* [MGMT-18059](https://issues.redhat.com/browse/MGMT-18059): Mark OCI as supported integration (#6403) [#6403](https://github.com/openshift/assisted-service/pull/6403)
* NO-ISSUE: [master] Bump OCP versions: 4.15, 4.14, 4.12, 4.16, 4.13 (#6409) [#6409](https://github.com/openshift/assisted-service/pull/6409)
* [MGMT-17802](https://issues.redhat.com/browse/MGMT-17802): Ensure that manifest patches may be placed in either `manifests` or `openshift` (#6411) [#6411](https://github.com/openshift/assisted-service/pull/6411)
* [MGMT-17794](https://issues.redhat.com/browse/MGMT-17794): Make sure that uploaded manifest files have valid filename before extensions (#6410) [#6410](https://github.com/openshift/assisted-service/pull/6410)
* NO-ISSUE: Adding verification if file exist before sourcing it in force (#6407) [#6407](https://github.com/openshift/assisted-service/pull/6407)
* [AGENT-869](https://issues.redhat.com/browse/AGENT-869): Implement a new auth type for ABI (#6174) [#6174](https://github.com/openshift/assisted-service/pull/6174)
* [MGMT-17984](https://issues.redhat.com/browse/MGMT-17984): [soft timeout] operators timeout after 10 hours without events (#6382) [#6382](https://github.com/openshift/assisted-service/pull/6382)
* [MGMT-18046](https://issues.redhat.com/browse/MGMT-18046): Create an infraenv for the local cluster during import (#6401) [#6401](https://github.com/openshift/assisted-service/pull/6401)
* NO-ISSUE: Fix Failed to download metadata for dnf repositories in centos8 by using archived centos8 repositories (#6397) [#6397](https://github.com/openshift/assisted-service/pull/6397)
* Use the static installer for 4.16 nightlies when not FIPS-enabled (#6386) [#6386](https://github.com/openshift/assisted-service/pull/6386)
* [MGMT-17353](https://issues.redhat.com/browse/MGMT-17353): Debug pod left in ImagePullBackOff after install in disconnected environment (#6333) [#6333](https://github.com/openshift/assisted-service/pull/6333)
* [MGMT-17901](https://issues.redhat.com/browse/MGMT-17901): Add the exteranl registry to the list of ignored registires for pull secret validation instead of the mirror one (#6377) [#6377](https://github.com/openshift/assisted-service/pull/6377)
* [MGMT-17353](https://issues.redhat.com/browse/MGMT-17353): Debug pod left in ImagePullBackOff after install in disconnected environment (#6332) [#6332](https://github.com/openshift/assisted-service/pull/6332)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.15, 4.13, 4.16 (#6378) [#6378](https://github.com/openshift/assisted-service/pull/6378)
* Use the EL8 assisted-service image when requested by annotation (#6349) [#6349](https://github.com/openshift/assisted-service/pull/6349)
* [MGMT-17763](https://issues.redhat.com/browse/MGMT-17763): Setting Machine network CIDR is forbidden" error is only present on cluster updates (#6359) [#6359](https://github.com/openshift/assisted-service/pull/6359)
* [MGMT-17901](https://issues.redhat.com/browse/MGMT-17901): Add mirror registries to the list of ignored registires for pull secret validation (#6371) [#6371](https://github.com/openshift/assisted-service/pull/6371)
* [MGMT-9589](https://issues.redhat.com/browse/MGMT-9589): Distribute sdist package to PyPI in addition to wheel one (#6294) [#6294](https://github.com/openshift/assisted-service/pull/6294)
* [MGMT-17848](https://issues.redhat.com/browse/MGMT-17848): Assisted service should not format multipath devices (#6360) [#6360](https://github.com/openshift/assisted-service/pull/6360)
* Deprecate and disable support for OCM offline token (#6307) [#6307](https://github.com/openshift/assisted-service/pull/6307)
* NO-ISSUE: wait for lso to be installed (#6374) [#6374](https://github.com/openshift/assisted-service/pull/6374)
* [MGMT-17849](https://issues.redhat.com/browse/MGMT-17849): escape '%' in agent.service proxy urls (#6356) [#6356](https://github.com/openshift/assisted-service/pull/6356)
* [MGMT-17700](https://issues.redhat.com/browse/MGMT-17700): Assign none platform node-ips based on connected addresses and etcd restrictions (#6257) [#6257](https://github.com/openshift/assisted-service/pull/6257)
* [MGMT-17823](https://issues.redhat.com/browse/MGMT-17823): Cleanup the install manifest generator (#6361) [#6361](https://github.com/openshift/assisted-service/pull/6361)
* [MGMT-17896](https://issues.redhat.com/browse/MGMT-17896): Add separate Dockerfile for assisted-service with an el8 base (#6347) [#6347](https://github.com/openshift/assisted-service/pull/6347)
* fix: deploy/olm-catalog/requirements.txt to reduce vulnerabilities (#6346) [#6346](https://github.com/openshift/assisted-service/pull/6346)
* [OCPBUGS-31727](https://issues.redhat.com/browse/OCPBUGS-31727): Invalid Pull-Secret when using password which contains a colon character (#6258) [#6258](https://github.com/openshift/assisted-service/pull/6258)
* fix: dev-requirements.txt to reduce vulnerabilities (#6348) [#6348](https://github.com/openshift/assisted-service/pull/6348)
* [MGMT-17618](https://issues.redhat.com/browse/MGMT-17618): NMStateConfig interfaces presence should be validated (#6305) [#6305](https://github.com/openshift/assisted-service/pull/6305)
* [MGMT-17850](https://issues.redhat.com/browse/MGMT-17850): Bump k8s.io modules to v0.29 (#6345) [#6345](https://github.com/openshift/assisted-service/pull/6345)
* NO-ISSUE: Add 4.16 rhcos images (#6326) [#6326](https://github.com/openshift/assisted-service/pull/6326)
* [MGMT-17770](https://issues.redhat.com/browse/MGMT-17770): Split ignition handling file (#6283) [#6283](https://github.com/openshift/assisted-service/pull/6283)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.12, 4.15 (#6358) [#6358](https://github.com/openshift/assisted-service/pull/6358)
* [MGMT-17811](https://issues.redhat.com/browse/MGMT-17811): Do not create local cluster namespace (#6314) [#6314](https://github.com/openshift/assisted-service/pull/6314)
* [OCPBUGS-34181](https://issues.redhat.com/browse/OCPBUGS-34181): Don't use the statically linked installer if FIPS is enabled (#6355) [#6355](https://github.com/openshift/assisted-service/pull/6355)
* [MGMT-17866](https://issues.redhat.com/browse/MGMT-17866): Assisted service change for F5 DNS load balancer (#6339) [#6339](https://github.com/openshift/assisted-service/pull/6339)
* [Full changelog](https://github.com/openshift/assisted-service/compare/7ae324d5a15d0bc1abd0cae5a577db6adf38218a...b2babb90b439acef3b05ccd8400b49b7ef9ecada)
### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/9614e8b4cd8393727d3fc12ff9df9e647c6f694b)
* [OCPBUGS-38466](https://issues.redhat.com/browse/OCPBUGS-38466): Allow controller to continue when assisted-service (#918) [#918](https://github.com/openshift/assisted-installer/pull/918)
* [OCPBUGS-43023](https://issues.redhat.com/browse/OCPBUGS-43023): Pick up latest CVE changes by bumping service (#919) [#919](https://github.com/openshift/assisted-installer/pull/919)
* [OCPBUGS-42156](https://issues.redhat.com/browse/OCPBUGS-42156): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#904) [#904](https://github.com/openshift/assisted-installer/pull/904)
* [OCPBUGS-31570](https://issues.redhat.com/browse/OCPBUGS-31570): Bump to latest preinstall utils for disk cleanup fixes (#886) [#886](https://github.com/openshift/assisted-installer/pull/886)
* NO-ISSUE: fixing ARM images builds (#885) [#885](https://github.com/openshift/assisted-installer/pull/885)
* [OCPBUGS-36779](https://issues.redhat.com/browse/OCPBUGS-36779): Reload host inventory on conflict (#877) [#877](https://github.com/openshift/assisted-installer/pull/877)
* [MGMT-18332](https://issues.redhat.com/browse/MGMT-18332): Use centos stream 9 as the base image for test container (#876) [#876](https://github.com/openshift/assisted-installer/pull/876)
* NO-ISSUE: Replace base golang image in the build Dockerfile as it is based on centos7 and it is EOL, which results in yum can't reach its repositories (#862) [#862](https://github.com/openshift/assisted-installer/pull/862)
* [MGMT-17353](https://issues.redhat.com/browse/MGMT-17353): Debug pod left in ImagePullBackOff after install in disconnected environment (#852) [#852](https://github.com/openshift/assisted-installer/pull/852)
* [MGMT-17353](https://issues.redhat.com/browse/MGMT-17353): Debug pod left in ImagePullBackOff after install in disconnected environment (#817) [#817](https://github.com/openshift/assisted-installer/pull/817)
* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#839) [#839](https://github.com/openshift/assisted-installer/pull/839)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/a2c99fcceba9c4ef05e9000956c6c21da9dcf234...9614e8b4cd8393727d3fc12ff9df9e647c6f694b)
### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/29149b7793e1f15dcb0e39a54e79fddcac744ff8)
* [OCPBUGS-43024](https://issues.redhat.com/browse/OCPBUGS-43024): Pick up latest CVE changes by bumping service (#805) [#805](https://github.com/openshift/assisted-installer-agent/pull/805)
* [OCPBUGS-42157](https://issues.redhat.com/browse/OCPBUGS-42157): Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#783) [#783](https://github.com/openshift/assisted-installer-agent/pull/783)
* NO-ISSUE: Bump the go-dependencies group with 3 updates (#763) [#763](https://github.com/openshift/assisted-installer-agent/pull/763)
* [MGMT-17560](https://issues.redhat.com/browse/MGMT-17560): Report iSCSI host IP address in inventory (#727) [#727](https://github.com/openshift/assisted-installer-agent/pull/727)
* NO-ISSUE: fix for ARM and multi images (#754) [#754](https://github.com/openshift/assisted-installer-agent/pull/754)
* NO-ISSUE: Bump golang.org/x/sys in the go-dependencies group (#751) [#751](https://github.com/openshift/assisted-installer-agent/pull/751)
* NO-ISSUE: Use centos stream 9 as the base image for test container (#750) [#750](https://github.com/openshift/assisted-installer-agent/pull/750)
* NO-ISSUE: Migrate build image to use registry.access.redhat.com/ubi9/go-toolset:1.20 (#735) [#735](https://github.com/openshift/assisted-installer-agent/pull/735)
* [MGMT-17867](https://issues.redhat.com/browse/MGMT-17867): fix multipath inventory to include wwn (#733) [#733](https://github.com/openshift/assisted-installer-agent/pull/733)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#726) [#726](https://github.com/openshift/assisted-installer-agent/pull/726)
* NO-ISSUE: Bump the go-dependencies group with 2 updates (#720) [#720](https://github.com/openshift/assisted-installer-agent/pull/720)
* [MGMT-17353](https://issues.redhat.com/browse/MGMT-17353): Debug pod left in ImagePullBackOff after install in disconnected environment (#719) [#719](https://github.com/openshift/assisted-installer-agent/pull/719)
* NO-ISSUE: Bump github.com/hashicorp/go-version (#715) [#715](https://github.com/openshift/assisted-installer-agent/pull/715)
* [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#716) [#716](https://github.com/openshift/assisted-installer-agent/pull/716)
* [MGMT-17869](https://issues.redhat.com/browse/MGMT-17869): Agent changes for F5 DNS load balancer (#712) [#712](https://github.com/openshift/assisted-installer-agent/pull/712)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/b121e87848721deee183a0d7bcc04bd5010eca38...29149b7793e1f15dcb0e39a54e79fddcac744ff8)
### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/3b99303bc6d1c85465139f1e1c4847c038e4dc8f)
* [OCPBUGS-34187](https://issues.redhat.com/browse/OCPBUGS-34187): Updating ose-agent-installer-utils-container image to be consistent with ART for 4.17 [#35](https://github.com/openshift/agent-installer-utils/pull/35)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/6e6bb40d95bd966eb6b152e66c5b91794806c4bc...3b99303bc6d1c85465139f1e1c4847c038e4dc8f)
### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/cd4264165057a0098c5d6e0b4e8727b4232cc3ce)
* [OCPBUGS-37052](https://issues.redhat.com/browse/OCPBUGS-37052): Revert "Agent: Respect HTTPS_PROXY env vars for proxied connections" [#57](https://github.com/openshift/apiserver-network-proxy/pull/57)
* [OCPBUGS-34199](https://issues.redhat.com/browse/OCPBUGS-34199): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.17 [#54](https://github.com/openshift/apiserver-network-proxy/pull/54)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/ca81b6a32aff6ccb327f6889ec89c01afedd8efd...cd4264165057a0098c5d6e0b4e8727b4232cc3ce)
### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/8c77f418214630cb5f3e0b1cf68f3f3d881e5f0a)
* NO-JIRA: Update OWNERS [#91](https://github.com/openshift/cloud-provider-aws/pull/91)
* [OCPCLOUD-2608](https://issues.redhat.com/browse/OCPCLOUD-2608): Merge https://github.com/kubernetes/cloud-provider-aws:master (0445cf1) into master [#62](https://github.com/openshift/cloud-provider-aws/pull/62)
* [OCPBUGS-33979](https://issues.redhat.com/browse/OCPBUGS-33979): update for CVE-2023-45288 [release-4.17] [#87](https://github.com/openshift/cloud-provider-aws/pull/87)
* [OCPBUGS-31572](https://issues.redhat.com/browse/OCPBUGS-31572): Ensure that addresses are added in network device index order [#86](https://github.com/openshift/cloud-provider-aws/pull/86)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/a53e9def2e60eecd390575b59c85d54c5412ecd3...8c77f418214630cb5f3e0b1cf68f3f3d881e5f0a)
### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/1f1c59f0ffd0bda9101e74356142e62305259590)
* [OCPBUGS-43921](https://issues.redhat.com/browse/OCPBUGS-43921): OSD-25934: Only tag NetworkInterfaces in `RunInstances` if IAM Allows It [#528](https://github.com/openshift/cluster-api-provider-aws/pull/528)
* [OCPCLOUD-2679](https://issues.redhat.com/browse/OCPCLOUD-2679): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.6.1 (6db1244) into master [#519](https://github.com/openshift/cluster-api-provider-aws/pull/519)
* NO-JIRA: Update OWNERS [#517](https://github.com/openshift/cluster-api-provider-aws/pull/517)
* [OCPBUGS-34382](https://issues.redhat.com/browse/OCPBUGS-34382): Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.17 [#515](https://github.com/openshift/cluster-api-provider-aws/pull/515)
* [OCPCLOUD-2620](https://issues.redhat.com/browse/OCPCLOUD-2620): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.5.0 (fb221b1) into master [#512](https://github.com/openshift/cluster-api-provider-aws/pull/512)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/60d797bea7418e10ec26ae1ccef4e42249705b6c...1f1c59f0ffd0bda9101e74356142e62305259590)
### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/2bb5b316f5941788e398f22974f9c816dd37d428)
* [STOR-1598](https://issues.redhat.com/browse/STOR-1598): Rebase to v1.32.0 for OCP 4.17 [#272](https://github.com/openshift/aws-ebs-csi-driver/pull/272)
* [OCPBUGS-36943](https://issues.redhat.com/browse/OCPBUGS-36943): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.17 [#273](https://github.com/openshift/aws-ebs-csi-driver/pull/273)
* [OCPBUGS-34232](https://issues.redhat.com/browse/OCPBUGS-34232): Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.17 [#268](https://github.com/openshift/aws-ebs-csi-driver/pull/268)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/1d29a74ab7cde7424cac99261b90f23dc7a2fc21...2bb5b316f5941788e398f22974f9c816dd37d428)
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator](https://github.com/openshift/csi-operator/tree/d27753a267f723bab2ce7b28f5d164024f847feb)
* [OCPBUGS-42949](https://issues.redhat.com/browse/OCPBUGS-42949): add tag matching to Azure File storage class [#291](https://github.com/openshift/csi-operator/pull/291)
* [OCPBUGS-43789](https://issues.redhat.com/browse/OCPBUGS-43789): add ability to control kube rbac proxy container image… [#310](https://github.com/openshift/csi-operator/pull/310)
* [OCPBUGS-42997](https://issues.redhat.com/browse/OCPBUGS-42997): Correct aws efs csi driver config as removable [#296](https://github.com/openshift/csi-operator/pull/296)
* [OCPBUGS-38355](https://issues.redhat.com/browse/OCPBUGS-38355): Bump openshift/api to get EFS volume metrics [#274](https://github.com/openshift/csi-operator/pull/274)
* [OCPBUGS-38736](https://issues.redhat.com/browse/OCPBUGS-38736): Some CSI driver containers missing terminationMessagePolicy [#263](https://github.com/openshift/csi-operator/pull/263)
* [OCPBUGS-38815](https://issues.redhat.com/browse/OCPBUGS-38815): add init container in EFS CSI controller pod [#265](https://github.com/openshift/csi-operator/pull/265)
* [OCPBUGS-38355](https://issues.redhat.com/browse/OCPBUGS-38355): Volume Metrics for EFS CSI Driver [#257](https://github.com/openshift/csi-operator/pull/257)
* [STOR-1819](https://issues.redhat.com/browse/STOR-1819): Add manifest with OCP specific test config [#254](https://github.com/openshift/csi-operator/pull/254)
* NO-JIRA: use service account namespace placeholder for smb role bindings [#250](https://github.com/openshift/csi-operator/pull/250)
* [STOR-2002](https://issues.redhat.com/browse/STOR-2002): add Azure File snapshot support [#253](https://github.com/openshift/csi-operator/pull/253)
* [OCPBUGS-37488](https://issues.redhat.com/browse/OCPBUGS-37488): add init container in EBS CSI controller pod [#248](https://github.com/openshift/csi-operator/pull/248)
* [STOR-1856](https://issues.redhat.com/browse/STOR-1856): add STS hook for EFS credentials request controller [#251](https://github.com/openshift/csi-operator/pull/251)
* [STOR-1874](https://issues.redhat.com/browse/STOR-1874): Use real HyperShift API [#236](https://github.com/openshift/csi-operator/pull/236)
* [OCPBUGS-37274](https://issues.redhat.com/browse/OCPBUGS-37274): Add FIPS_ENABLED to env vars for aws-efs-csi-driver (2) [#249](https://github.com/openshift/csi-operator/pull/249)
* [STOR-1856](https://issues.redhat.com/browse/STOR-1856): remove aws efs operator legacy dir [#244](https://github.com/openshift/csi-operator/pull/244)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#240](https://github.com/openshift/csi-operator/pull/240)
* [STOR-1856](https://issues.redhat.com/browse/STOR-1856): STOR-1606: migrate legacy AWS EFS operator code to csi-operator [#237](https://github.com/openshift/csi-operator/pull/237)
* [OCPBUGS-36936](https://issues.redhat.com/browse/OCPBUGS-36936): Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 [#241](https://github.com/openshift/csi-operator/pull/241)
* [OCPBUGS-36948](https://issues.redhat.com/browse/OCPBUGS-36948): Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.17 [#243](https://github.com/openshift/csi-operator/pull/243)
* [OCPBUGS-36942](https://issues.redhat.com/browse/OCPBUGS-36942): Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.17 [#242](https://github.com/openshift/csi-operator/pull/242)
* [STOR-1606](https://issues.redhat.com/browse/STOR-1606): Bump OLM metadata to 4.17 [#239](https://github.com/openshift/csi-operator/pull/239)
* [OCPBUGS-34451](https://issues.redhat.com/browse/OCPBUGS-34451): Bump go version to be consistent with ART [#238](https://github.com/openshift/csi-operator/pull/238)
* [STOR-1290](https://issues.redhat.com/browse/STOR-1290): don't pass credentials via environment variables in AWS EBS [#202](https://github.com/openshift/csi-operator/pull/202)
* [STOR-1856](https://issues.redhat.com/browse/STOR-1856): migrate AWS EFS operator to csi-operator [#232](https://github.com/openshift/csi-operator/pull/232)
* NO-JIRA: keep smb test storageclass consistent with official doc [#234](https://github.com/openshift/csi-operator/pull/234)
* [OCPBUGS-34667](https://issues.redhat.com/browse/OCPBUGS-34667): Ensure Node Metric Service is created in the openshift-cluster-csi-drivers namespace for both OpenShift and Hypershift [#233](https://github.com/openshift/csi-operator/pull/233)
* [OCPBUGS-34189](https://issues.redhat.com/browse/OCPBUGS-34189): Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.17 [#227](https://github.com/openshift/csi-operator/pull/227)
* [OCPBUGS-32370](https://issues.redhat.com/browse/OCPBUGS-32370): Configure scraping of node metrics [#223](https://github.com/openshift/csi-operator/pull/223)
* [OCPBUGS-33776](https://issues.redhat.com/browse/OCPBUGS-33776): Adjust port for registrar sidecar in aws-ebs csi driver container [#225](https://github.com/openshift/csi-operator/pull/225)
* [Full changelog](https://github.com/openshift/csi-operator/compare/ff69cd0336ab92035d3d57af0ec71ff7b52f0f17...d27753a267f723bab2ce7b28f5d164024f847feb)
### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/9d4016701d355cd3a47f5ebe10f266d8971febc6)
* [OCPBUGS-34314](https://issues.redhat.com/browse/OCPBUGS-34314): Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.17 [#19](https://github.com/openshift/aws-encryption-provider/pull/19)
* hack: display diff on verify-mod-tidy failure [#25](https://github.com/openshift/aws-encryption-provider/pull/25)
* NO-JIRA: Bump to latest [#20](https://github.com/openshift/aws-encryption-provider/pull/20)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/c66065de639016b770f512e7cfcfcee9519fb89f...9d4016701d355cd3a47f5ebe10f266d8971febc6)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/451c30d9aff7ae7b22100ddd9f3fe5fcdaf01ae7)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Add feature gates flag [#108](https://github.com/openshift/machine-api-provider-aws/pull/108)
* [OCPBUGS-36469](https://issues.redhat.com/browse/OCPBUGS-36469): Update placementGroupPartition to honour it as a pointer [#107](https://github.com/openshift/machine-api-provider-aws/pull/107)
* [CFE-1064](https://issues.redhat.com/browse/CFE-1064): Add support for PlacementGroupPartition of placement group [#101](https://github.com/openshift/machine-api-provider-aws/pull/101)
* NO-JIRA: Update OWNERS [#105](https://github.com/openshift/machine-api-provider-aws/pull/105)
* [OCPCLOUD-2615](https://issues.redhat.com/browse/OCPCLOUD-2615): Update dependencies to K8s 1.30 [#104](https://github.com/openshift/machine-api-provider-aws/pull/104)
* [OCPBUGS-34255](https://issues.redhat.com/browse/OCPBUGS-34255): Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.17 [#103](https://github.com/openshift/machine-api-provider-aws/pull/103)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/61d60f6ca20443df434456c2f3eeba859634e6a2...451c30d9aff7ae7b22100ddd9f3fe5fcdaf01ae7)
### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/b6350f75a6e09d46815b7cd7e82e35f43dc05f37)
* [OCPBUGS-34147](https://issues.redhat.com/browse/OCPBUGS-34147): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.17 [#194](https://github.com/openshift/aws-pod-identity-webhook/pull/194)
* [OCPBUGS-34147](https://issues.redhat.com/browse/OCPBUGS-34147): Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.17 [#193](https://github.com/openshift/aws-pod-identity-webhook/pull/193)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/746491a64a4efc04132ceb641cee52c2ead3facd...b6350f75a6e09d46815b7cd7e82e35f43dc05f37)
### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/b9204e2197b922ecd080fcbe112b4a09e18344db)
* NO-JIRA: Update OWNERS [#123](https://github.com/openshift/cloud-provider-azure/pull/123)
* [OCPCLOUD-2607](https://issues.redhat.com/browse/OCPCLOUD-2607): Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (e6f5e9a) into master [#113](https://github.com/openshift/cloud-provider-azure/pull/113)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/0e9553295ecd02d6ef0aff19dfc1dfe680993112...b9204e2197b922ecd080fcbe112b4a09e18344db)
### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/d359bfe56764238e2881f0f003fd8206b2b40dec)
* [OCPCLOUD-2584](https://issues.redhat.com/browse/OCPCLOUD-2584): Add manifest generation [#300](https://github.com/openshift/cluster-api-provider-azure/pull/300)
* [OCPBUGS-34246](https://issues.redhat.com/browse/OCPBUGS-34246): Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.17 [#312](https://github.com/openshift/cluster-api-provider-azure/pull/312)
* [OCPBUGS-36026](https://issues.redhat.com/browse/OCPBUGS-36026): Update go-retryablehttp to v0.7.7 [#309](https://github.com/openshift/cluster-api-provider-azure/pull/309)
* NO-JIRA: Update OWNERS [#308](https://github.com/openshift/cluster-api-provider-azure/pull/308)
* [OCPCLOUD-1640](https://issues.redhat.com/browse/OCPCLOUD-1640): Add DisableExtensionOperations field [#301](https://github.com/openshift/cluster-api-provider-azure/pull/301)
* [OCPCLOUD-2621](https://issues.redhat.com/browse/OCPCLOUD-2621): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.15.0 (e1f1f75) into master [#305](https://github.com/openshift/cluster-api-provider-azure/pull/305)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/a81e3b31948468d76ac744bbbb74b0c423fc969e...d359bfe56764238e2881f0f003fd8206b2b40dec)
### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/a544f30bb48dbf6325efbb75e7114b9837c32505)
* [STOR-1601](https://issues.redhat.com/browse/STOR-1601): Rebase to upstream v1.29.7 for OCP 4.17 [#81](https://github.com/openshift/azure-disk-csi-driver/pull/81)
* [OCPBUGS-36939](https://issues.redhat.com/browse/OCPBUGS-36939): Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.17 [#83](https://github.com/openshift/azure-disk-csi-driver/pull/83)
* [OCPBUGS-34111](https://issues.redhat.com/browse/OCPBUGS-34111): Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.17 [#79](https://github.com/openshift/azure-disk-csi-driver/pull/79)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/6b55f6fb004454f743aa0f2e1d96010396be4c45...a544f30bb48dbf6325efbb75e7114b9837c32505)
### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/9f4c38c2bb28347ed5c4fd082666bfdea7382243)
* [OCPBUGS-38669](https://issues.redhat.com/browse/OCPBUGS-38669): bump mount-utils to treat ENODEV error as corrupted mount [#75](https://github.com/openshift/azure-file-csi-driver/pull/75)
* [STOR-2002](https://issues.redhat.com/browse/STOR-2002): UPSTREAM: 2040: fix snapshot size [#73](https://github.com/openshift/azure-file-csi-driver/pull/73)
* [STOR-1604](https://issues.redhat.com/browse/STOR-1604): Rebase v1.30.3 for OCP 4.17 [#70](https://github.com/openshift/azure-file-csi-driver/pull/70)
* [OCPBUGS-34464](https://issues.redhat.com/browse/OCPBUGS-34464): Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.17 [#72](https://github.com/openshift/azure-file-csi-driver/pull/72)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/7a36778add73d12eb08ff6be357d8d351af651a7...9f4c38c2bb28347ed5c4fd082666bfdea7382243)
### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/b7a46ac8f11afa837abb7c419c0e6bf191f34cc4)
* [OCPBUGS-34277](https://issues.redhat.com/browse/OCPBUGS-34277): Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.17 [#7](https://github.com/openshift/azure-kubernetes-kms/pull/7)
* [OCPBUGS-33805](https://issues.redhat.com/browse/OCPBUGS-33805): Use exec form entrypoint [#5](https://github.com/openshift/azure-kubernetes-kms/pull/5)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/47d243b5a993fd0817eecf89a6d7896a3c911ecb...b7a46ac8f11afa837abb7c419c0e6bf191f34cc4)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/d69a3e35d8cb0c9497eab723563f18d46f860bb8)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Adds --feature-gates CLI argument [#116](https://github.com/openshift/machine-api-provider-azure/pull/116)
* NO-JIRA: Update OWNERS [#114](https://github.com/openshift/machine-api-provider-azure/pull/114)
* [OCPCLOUD-2614](https://issues.redhat.com/browse/OCPCLOUD-2614): Update to K8s 1.30 [#113](https://github.com/openshift/machine-api-provider-azure/pull/113)
* [OCPBUGS-34184](https://issues.redhat.com/browse/OCPBUGS-34184): Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.17 [#108](https://github.com/openshift/machine-api-provider-azure/pull/108)
* [CFE-1050](https://issues.redhat.com/browse/CFE-1050): Add support of capacity reservation group in openshift/machine-api-provider-azure [#107](https://github.com/openshift/machine-api-provider-azure/pull/107)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/e4e11505b645e2af8eb28c5dc353c41a6740db00...d69a3e35d8cb0c9497eab723563f18d46f860bb8)
### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/898846e0d14cdbec68918dd4803f42e26f85f798)
* [OCPBUGS-34208](https://issues.redhat.com/browse/OCPBUGS-34208): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.17 [#22](https://github.com/openshift/azure-workload-identity/pull/22)
* [OCPBUGS-34208](https://issues.redhat.com/browse/OCPBUGS-34208): Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.17 [#21](https://github.com/openshift/azure-workload-identity/pull/21)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/4aca092a13f62e48c700a910e8f3f0f228a7d822...898846e0d14cdbec68918dd4803f42e26f85f798)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/e09aaf186494231de92bd80f02a43db764bd5e27)
* [OCPBUGS-43047](https://issues.redhat.com/browse/OCPBUGS-43047): fix slice init length [#9089](https://github.com/openshift/installer/pull/9089)
* [OCPBUGS-43800](https://issues.redhat.com/browse/OCPBUGS-43800): pkg/asset/installconfig/azure: send full certifcate chain [#9140](https://github.com/openshift/installer/pull/9140)
* [CORS-3753](https://issues.redhat.com/browse/CORS-3753): Allow mocking of the Azure client everywhere [#9219](https://github.com/openshift/installer/pull/9219)
* [OCPBUGS-44611](https://issues.redhat.com/browse/OCPBUGS-44611): [release-4.17] capi/aws: set Node Port Service CIDR override [#9209](https://github.com/openshift/installer/pull/9209)
* [OCPBUGS-44230](https://issues.redhat.com/browse/OCPBUGS-44230): Add C4A instance types [#9181](https://github.com/openshift/installer/pull/9181)
* [OCPBUGS-44231](https://issues.redhat.com/browse/OCPBUGS-44231): [release-4.17] capi/aws: bump provider for LB DNS lookup fix [#9179](https://github.com/openshift/installer/pull/9179)
* [OCPBUGS-44261](https://issues.redhat.com/browse/OCPBUGS-44261): Ensure rendezvousIP is checked against host IP [#9184](https://github.com/openshift/installer/pull/9184)
* [OCPBUGS-43972](https://issues.redhat.com/browse/OCPBUGS-43972): Cherrypick oci ccm fix to 4.17 [#9152](https://github.com/openshift/installer/pull/9152)
* [OCPBUGS-44247](https://issues.redhat.com/browse/OCPBUGS-44247): PowerVS: Update 4.17 CAPI ibmcloud to 9b077049 [#9182](https://github.com/openshift/installer/pull/9182)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up v4.17 capability sets [#9013](https://github.com/openshift/installer/pull/9013)
* [OCPBUGS-44226](https://issues.redhat.com/browse/OCPBUGS-44226): PowerVS: Fix MissingSecurityGroupRules [#9175](https://github.com/openshift/installer/pull/9175)
* [OCPBUGS-44227](https://issues.redhat.com/browse/OCPBUGS-44227): PowerVS: Fix destroy persistent TG [#9176](https://github.com/openshift/installer/pull/9176)
* [OCPBUGS-44228](https://issues.redhat.com/browse/OCPBUGS-44228): PowerVS: Change CAPI verbosity level [#9177](https://github.com/openshift/installer/pull/9177)
* [OCPBUGS-43846](https://issues.redhat.com/browse/OCPBUGS-43846): add chrony.conf file when additional NTP sources are configured [#9142](https://github.com/openshift/installer/pull/9142)
* [OCPBUGS-43735](https://issues.redhat.com/browse/OCPBUGS-43735): Add C4 instance validation [#9130](https://github.com/openshift/installer/pull/9130)
* [OCPBUGS-43897](https://issues.redhat.com/browse/OCPBUGS-43897): Revendor assisted service external platform oci [#9147](https://github.com/openshift/installer/pull/9147)
* [OCPBUGS-43786](https://issues.redhat.com/browse/OCPBUGS-43786): Limit GCP API firewall rule for internal clusters [#9138](https://github.com/openshift/installer/pull/9138)
* [OCPBUGS-43547](https://issues.redhat.com/browse/OCPBUGS-43547): Power VS: Fix incorrect error handling for AddSecurityGroupRule [#9112](https://github.com/openshift/installer/pull/9112)
* [OCPBUGS-43088](https://issues.redhat.com/browse/OCPBUGS-43088): GCP Validate Disk and Instance Type [#9091](https://github.com/openshift/installer/pull/9091)
* [OCPBUGS-43329](https://issues.redhat.com/browse/OCPBUGS-43329): IBMCloud: Handle pagination for subnets [#9096](https://github.com/openshift/installer/pull/9096)
* [OCPBUGS-42716](https://issues.redhat.com/browse/OCPBUGS-42716): Update RHCOS 4.17 bootimage metadata to 417.94.202410090854-0 [#9092](https://github.com/openshift/installer/pull/9092)
* [OCPBUGS-42806](https://issues.redhat.com/browse/OCPBUGS-42806): gather: simplify service regex for analyze [#9079](https://github.com/openshift/installer/pull/9079)
* [OCPBUGS-42996](https://issues.redhat.com/browse/OCPBUGS-42996): Power VS Ensure Metadata populated for CAPI/private cluster case on PowerVS [#9086](https://github.com/openshift/installer/pull/9086)
* [OCPBUGS-42115](https://issues.redhat.com/browse/OCPBUGS-42115): Add validation for gcp disk and instance types [#9023](https://github.com/openshift/installer/pull/9023)
* [OCPBUGS-42842](https://issues.redhat.com/browse/OCPBUGS-42842): add new tested azure instance types detected during QE 4.17 full function test [#9080](https://github.com/openshift/installer/pull/9080)
* [OCPBUGS-41812](https://issues.redhat.com/browse/OCPBUGS-41812): Validate MTU for custom network [#9084](https://github.com/openshift/installer/pull/9084)
* [OCPBUGS-42794](https://issues.redhat.com/browse/OCPBUGS-42794): PowerVS: Add support for persistent Transit Gateways [#9078](https://github.com/openshift/installer/pull/9078)
* [OCPBUGS-42699](https://issues.redhat.com/browse/OCPBUGS-42699): machines: don't sort mpool zones [#9065](https://github.com/openshift/installer/pull/9065)
* [OCPBUGS-42483](https://issues.redhat.com/browse/OCPBUGS-42483): PowerVS: update capi ibmcloud c6bcd313 for 4.17 [#9054](https://github.com/openshift/installer/pull/9054)
* [OCPBUGS-39414](https://issues.redhat.com/browse/OCPBUGS-39414): OpenStack: Install CI dependencies from rpm [#8994](https://github.com/openshift/installer/pull/8994)
* [OCPBUGS-42142](https://issues.redhat.com/browse/OCPBUGS-42142): Skip private managed zone creation for xpn installs [#9033](https://github.com/openshift/installer/pull/9033)
* [OCPBUGS-42183](https://issues.redhat.com/browse/OCPBUGS-42183): Add GCP N4 Machine Series to tested instances for OCP [#9041](https://github.com/openshift/installer/pull/9041)
* [OCPBUGS-42126](https://issues.redhat.com/browse/OCPBUGS-42126): add tested IBMCloud instance types in 4.17 test [#9030](https://github.com/openshift/installer/pull/9030)
* [OCPBUGS-42118](https://issues.redhat.com/browse/OCPBUGS-42118): Set default release image to 4.17 [#9026](https://github.com/openshift/installer/pull/9026)
* [OCPBUGS-42116](https://issues.redhat.com/browse/OCPBUGS-42116): Remove bindings for XPN installs [#9024](https://github.com/openshift/installer/pull/9024)
* [OCPBUGS-39409](https://issues.redhat.com/browse/OCPBUGS-39409): Fix IPv6 security group rule for schedulable master [#8970](https://github.com/openshift/installer/pull/8970)
* [OCPBUGS-41622](https://issues.redhat.com/browse/OCPBUGS-41622): update RHCOS 4.17 bootimage metadata to 417.94.202409120353-0 [#9019](https://github.com/openshift/installer/pull/9019)
* [OCPBUGS-42051](https://issues.redhat.com/browse/OCPBUGS-42051): Fix integration tests [#9018](https://github.com/openshift/installer/pull/9018)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure CAPI: Improve handling of security features configured on the MachinePools and OSDisk [#9007](https://github.com/openshift/installer/pull/9007)
* [OCPBUGS-39286](https://issues.redhat.com/browse/OCPBUGS-39286): Fix var_files syntax to work on older version of ansible [#8933](https://github.com/openshift/installer/pull/8933)
* [OCPBUGS-41896](https://issues.redhat.com/browse/OCPBUGS-41896): Add AWS c7g,m7g,r8g to tested instance types [#9005](https://github.com/openshift/installer/pull/9005)
* [OCPBUGS-41542](https://issues.redhat.com/browse/OCPBUGS-41542): Azure CAPI: Update publicAccess for Blob Containers [#9006](https://github.com/openshift/installer/pull/9006)
* [OCPBUGS-41702](https://issues.redhat.com/browse/OCPBUGS-41702): aws: bump capa to fix EIP leak on bootstrap when BYOIP [#8991](https://github.com/openshift/installer/pull/8991)
* [OCPBUGS-38933](https://issues.redhat.com/browse/OCPBUGS-38933): install-status reflects day 2 services [#8899](https://github.com/openshift/installer/pull/8899)
* [OCPBUGS-39239](https://issues.redhat.com/browse/OCPBUGS-39239), [OCPBUGS-39240](https://issues.redhat.com/browse/OCPBUGS-39240): vSphere - If template is defined skip downloading [#8926](https://github.com/openshift/installer/pull/8926)
* [OCPBUGS-41300](https://issues.redhat.com/browse/OCPBUGS-41300): Azure CAPI: Set SecurityType as a Feature while creating Gallery Image [#8990](https://github.com/openshift/installer/pull/8990)
* [OCPBUGS-41500](https://issues.redhat.com/browse/OCPBUGS-41500): Bump extract-machine-os timout to 20m [#8981](https://github.com/openshift/installer/pull/8981)
* [OCPBUGS-38963](https://issues.redhat.com/browse/OCPBUGS-38963): IngressController subnet selection in AWS [#8909](https://github.com/openshift/installer/pull/8909)
* [OCPBUGS-41542](https://issues.redhat.com/browse/OCPBUGS-41542): Azure CAPI: Fix storage account and vhd container public access [#8984](https://github.com/openshift/installer/pull/8984)
* [OCPBUGS-41539](https://issues.redhat.com/browse/OCPBUGS-41539): Pick the next available IP address for internal LB [#8980](https://github.com/openshift/installer/pull/8980)
* [OCPBUGS-38568](https://issues.redhat.com/browse/OCPBUGS-38568): Azure: Add master and worker VM IPs to both the backend pools API LoadBalancer [#8968](https://github.com/openshift/installer/pull/8968)
* [OCPBUGS-39545](https://issues.redhat.com/browse/OCPBUGS-39545), [OCPBUGS-39546](https://issues.redhat.com/browse/OCPBUGS-39546), [OCPBUGS-39547](https://issues.redhat.com/browse/OCPBUGS-39547): update vault version to 1.13.10 [#8954](https://github.com/openshift/installer/pull/8954)
* [OCPBUGS-38568](https://issues.redhat.com/browse/OCPBUGS-38568): Azure CAPI: Add check for APIServer OperatorPublishingStrategy [#8870](https://github.com/openshift/installer/pull/8870)
* [OCPBUGS-41283](https://issues.redhat.com/browse/OCPBUGS-41283): update RHCOS 4.17 bootimage metadata to 417.94.202408270355-0 [#8975](https://github.com/openshift/installer/pull/8975)
* [OCPBUGS-39495](https://issues.redhat.com/browse/OCPBUGS-39495): capi/aws/byo-vpc/multi-cidr: fix group rules [#8952](https://github.com/openshift/installer/pull/8952)
* [OCPBUGS-39433](https://issues.redhat.com/browse/OCPBUGS-39433): dropping this warning as the move from terraform is transparent to the end user [#8950](https://github.com/openshift/installer/pull/8950)
* [OCPBUGS-38752](https://issues.redhat.com/browse/OCPBUGS-38752): Remove firewall rules created by CAPG [#8948](https://github.com/openshift/installer/pull/8948)
* [OCPBUGS-38738](https://issues.redhat.com/browse/OCPBUGS-38738): pkg/infrastructure/azure: set correct cloud for BYO vnet [#8972](https://github.com/openshift/installer/pull/8972)
* [OCPBUGS-39308](https://issues.redhat.com/browse/OCPBUGS-39308): Fix to validation for GCP pre-created ServiceAccount [#8931](https://github.com/openshift/installer/pull/8931)
* [OCPBUGS-39467](https://issues.redhat.com/browse/OCPBUGS-39467): Enable TLS for virtual media in initial ironic deployment [#8947](https://github.com/openshift/installer/pull/8947)
* [OCPBUGS-39092](https://issues.redhat.com/browse/OCPBUGS-39092): Use infrastructure resource to retrieve platform type [#8914](https://github.com/openshift/installer/pull/8914)
* [OCPBUGS-38934](https://issues.redhat.com/browse/OCPBUGS-38934): failed to install Nutanix OCP 4.16 cluster with DHCP network [#8900](https://github.com/openshift/installer/pull/8900)
* [OCPBUGS-38841](https://issues.redhat.com/browse/OCPBUGS-38841): ic: validate release arch is compatible with cluster arch [#8895](https://github.com/openshift/installer/pull/8895)
* [OCPBUGS-38600](https://issues.redhat.com/browse/OCPBUGS-38600): GCP Global Address failed to destroy [#8884](https://github.com/openshift/installer/pull/8884)
* [OCPBUGS-38616](https://issues.redhat.com/browse/OCPBUGS-38616): incorrect folder gen, workaround govmomi vm folder path bug [#8867](https://github.com/openshift/installer/pull/8867)
* [OCPBUGS-39002](https://issues.redhat.com/browse/OCPBUGS-39002): Add new disk types GCP Control Plane nodes [#8903](https://github.com/openshift/installer/pull/8903)
* [OCPBUGS-38301](https://issues.redhat.com/browse/OCPBUGS-38301): upi/aws: update lambda runtime python version [#8896](https://github.com/openshift/installer/pull/8896)
* [OCPBUGS-38832](https://issues.redhat.com/browse/OCPBUGS-38832): aws: validate public-only subnets configs [#8893](https://github.com/openshift/installer/pull/8893)
* [OCPBUGS-38497](https://issues.redhat.com/browse/OCPBUGS-38497): vsphere, if secureboot is enabled, disable it in the template [#8841](https://github.com/openshift/installer/pull/8841)
* [OCPBUGS-38560](https://issues.redhat.com/browse/OCPBUGS-38560): import failure when esxi config is not the same in the cluster [#8857](https://github.com/openshift/installer/pull/8857)
* [OCPBUGS-38604](https://issues.redhat.com/browse/OCPBUGS-38604): Updated powercli configuration to allow multi vcenters [#8865](https://github.com/openshift/installer/pull/8865)
* [OCPBUGS-38738](https://issues.redhat.com/browse/OCPBUGS-38738): CAPZ USGovernmentCloud fixes [#8885](https://github.com/openshift/installer/pull/8885)
* [OCPBUGS-38534](https://issues.redhat.com/browse/OCPBUGS-38534): Resource deletion is holding up deletion process [#8849](https://github.com/openshift/installer/pull/8849)
* [OCPBUGS-38677](https://issues.redhat.com/browse/OCPBUGS-38677): upstream capv bug causes session timeout [#8874](https://github.com/openshift/installer/pull/8874)
* [OCPBUGS-38246](https://issues.redhat.com/browse/OCPBUGS-38246): Add roles needed for shared VPC [#8866](https://github.com/openshift/installer/pull/8866)
* [OCPBUGS-38692](https://issues.redhat.com/browse/OCPBUGS-38692): aws: add support for clusters with public-only subnets [#8878](https://github.com/openshift/installer/pull/8878)
* [OCPBUGS-38700](https://issues.redhat.com/browse/OCPBUGS-38700): pkg/infrastructure/azure: limit storage account to 24 characters or less [#8879](https://github.com/openshift/installer/pull/8879)
* [OCPBUGS-38602](https://issues.redhat.com/browse/OCPBUGS-38602): pkg/asset/machines: fix Azure zones [#8862](https://github.com/openshift/installer/pull/8862)
* [OCPBUGS-38730](https://issues.redhat.com/browse/OCPBUGS-38730): Fix typo [#8881](https://github.com/openshift/installer/pull/8881)
* [OCPBUGS-38488](https://issues.redhat.com/browse/OCPBUGS-38488): AGENT-938: Enhance console logging to display node ISO expiry date during addNodes workflow [#8839](https://github.com/openshift/installer/pull/8839)
* [OCPBUGS-38569](https://issues.redhat.com/browse/OCPBUGS-38569): only allow a single network in failure domain topology [#8859](https://github.com/openshift/installer/pull/8859)
* [OCPBUGS-38604](https://issues.redhat.com/browse/OCPBUGS-38604): Enhanced vSphere UPI scripts for multi vcenter support [#8863](https://github.com/openshift/installer/pull/8863)
* [OCPBUGS-38387](https://issues.redhat.com/browse/OCPBUGS-38387): aws: do not allow edge pools of different arch [#8828](https://github.com/openshift/installer/pull/8828)
* [OCPBUGS-38244](https://issues.redhat.com/browse/OCPBUGS-38244): Do not create firewall rules for xpn installs [#8847](https://github.com/openshift/installer/pull/8847)
* [OCPBUGS-38447](https://issues.redhat.com/browse/OCPBUGS-38447): [release-4.17] bump capa for instance register fix [#8836](https://github.com/openshift/installer/pull/8836)
* [OCPBUGS-38439](https://issues.redhat.com/browse/OCPBUGS-38439): PowerVS: Fix mad system pool [#8834](https://github.com/openshift/installer/pull/8834)
* [OCPBUGS-38393](https://issues.redhat.com/browse/OCPBUGS-38393): [release-4.17] CFE-920: Update GCP userLabels and userTags configs description [#8821](https://github.com/openshift/installer/pull/8821)
* [OCPBUGS-38356](https://issues.redhat.com/browse/OCPBUGS-38356): Update control plane tags to match CAPI networks [#8823](https://github.com/openshift/installer/pull/8823)
* [AGENT-944](https://issues.redhat.com/browse/AGENT-944): Enable assisted-service debug logging [#8816](https://github.com/openshift/installer/pull/8816)
* [OCPBUGS-37770](https://issues.redhat.com/browse/OCPBUGS-37770): data/bootstrap/files/usr/local/bin/bootkube: Pass CVO render --feature-gate-manifest-path [#8813](https://github.com/openshift/installer/pull/8813)
* [OCPBUGS-37821](https://issues.redhat.com/browse/OCPBUGS-37821): Remove timed context for gcp client [#8792](https://github.com/openshift/installer/pull/8792)
* [CORS-3575](https://issues.redhat.com/browse/CORS-3575): Azure: remove azure terraform code and resources [#8764](https://github.com/openshift/installer/pull/8764)
* [OCPBUGS-37540](https://issues.redhat.com/browse/OCPBUGS-37540): Gather Azure Logs through load balancer [#8812](https://github.com/openshift/installer/pull/8812)
* [AGENT-937](https://issues.redhat.com/browse/AGENT-937): Check Authentication Token for Node Boot-Up on day2 [#8802](https://github.com/openshift/installer/pull/8802)
* Revert "Revert #8221 "SPLAT-1553: Added multi vCenter support for capi installer."" [#8638](https://github.com/openshift/installer/pull/8638)
* [MULTIARCH-4770](https://issues.redhat.com/browse/MULTIARCH-4770): MULTIARCH-4776: bump o/api for MultiArchInstall FGs [#8808](https://github.com/openshift/installer/pull/8808)
* [MULTIARCH-4098](https://issues.redhat.com/browse/MULTIARCH-4098): Power VS: Make CAPI the default deployment method [#8814](https://github.com/openshift/installer/pull/8814)
* [CORS-3617](https://issues.redhat.com/browse/CORS-3617): Make Azure CAPI the default (& only) install option [#8809](https://github.com/openshift/installer/pull/8809)
* no-jira: PowerVS: Block disconnected deploys in 4.17 [#8798](https://github.com/openshift/installer/pull/8798)
* [CORS-3608](https://issues.redhat.com/browse/CORS-3608): aws: deprecate platform.aws.amiID field [#8755](https://github.com/openshift/installer/pull/8755)
* NO-ISSUE: Remove unnecessary code [#8805](https://github.com/openshift/installer/pull/8805)
* [AGENT-890](https://issues.redhat.com/browse/AGENT-890): Simplify Agent ISO kargs setting [#8513](https://github.com/openshift/installer/pull/8513)
* [CORS-3546](https://issues.redhat.com/browse/CORS-3546): Nutanix: add gpus and dataDisks support [#8765](https://github.com/openshift/installer/pull/8765)
* [OCPBUGS-38055](https://issues.redhat.com/browse/OCPBUGS-38055): fix/aws/edge: IAM profile must be same of workers [#8803](https://github.com/openshift/installer/pull/8803)
* [CORS-3594](https://issues.redhat.com/browse/CORS-3594): MOVE GCP CAPI to default feature set [#8723](https://github.com/openshift/installer/pull/8723)
* no-jira: doc: minor update to installation doc [#8795](https://github.com/openshift/installer/pull/8795)
* [AGENT-870](https://issues.redhat.com/browse/AGENT-870): Update AUTH_TYPE [#8108](https://github.com/openshift/installer/pull/8108)
* [OCPBUGS-37594](https://issues.redhat.com/browse/OCPBUGS-37594): pkg/infrastructure/azure: Set architecture when creating gallery image [#8800](https://github.com/openshift/installer/pull/8800)
* [CORS-3609](https://issues.redhat.com/browse/CORS-3609): aws: support existing IAM instance profiles [#8689](https://github.com/openshift/installer/pull/8689)
* [MULTIARCH-4828](https://issues.redhat.com/browse/MULTIARCH-4828): Pass ServiceEndpoints from install-config to CAPI for PowerVS [#8781](https://github.com/openshift/installer/pull/8781)
* [MGMT-18364](https://issues.redhat.com/browse/MGMT-18364): add image-based installation ISO integration tests [#8797](https://github.com/openshift/installer/pull/8797)
* [CORS-3565](https://issues.redhat.com/browse/CORS-3565): CAPZ private clusters [#8732](https://github.com/openshift/installer/pull/8732)
* [OCPBUGS-36361](https://issues.redhat.com/browse/OCPBUGS-36361): Azure: If credentialsMode is manual, pass the identity through [#8786](https://github.com/openshift/installer/pull/8786)
* [CORS-3299](https://issues.redhat.com/browse/CORS-3299): Azure: Use Customer Managed Key to enable Storage Account Encryption [#8736](https://github.com/openshift/installer/pull/8736)
* [MULTIARCH-4770](https://issues.redhat.com/browse/MULTIARCH-4770): bump o/api for MultiArchInstall TechPreview gates [#8791](https://github.com/openshift/installer/pull/8791)
* [OCPBUGS-34953](https://issues.redhat.com/browse/OCPBUGS-34953): fix bogus analyze message when gather fails [#8787](https://github.com/openshift/installer/pull/8787)
* [AGENT-928](https://issues.redhat.com/browse/AGENT-928): allow user to specify sshKey via config file [#8779](https://github.com/openshift/installer/pull/8779)
* [OCPBUGS-35262](https://issues.redhat.com/browse/OCPBUGS-35262): Upgrade to latest cluster-api-provider-gcp [#8780](https://github.com/openshift/installer/pull/8780)
* [AGENT-862](https://issues.redhat.com/browse/AGENT-862): Change day-2 monitor timeout back to 90 minutes [#8783](https://github.com/openshift/installer/pull/8783)
* [AGENT-919](https://issues.redhat.com/browse/AGENT-919): Authenticate day2 operations [#8717](https://github.com/openshift/installer/pull/8717)
* [OCPBUGS-35959](https://issues.redhat.com/browse/OCPBUGS-35959): azure: Fix Accelerated network enablement [#8667](https://github.com/openshift/installer/pull/8667)
* [CORS-3209](https://issues.redhat.com/browse/CORS-3209): Set UserTags on CAPG resources [#8691](https://github.com/openshift/installer/pull/8691)
* no-jira: bootstrap: add shellcheck directives to follow sourced files [#8741](https://github.com/openshift/installer/pull/8741)
* [CORS-3580](https://issues.redhat.com/browse/CORS-3580): Update GCP Disk Types [#8773](https://github.com/openshift/installer/pull/8773)
* no-jira: Azure: remove stale DNS migration images [#8775](https://github.com/openshift/installer/pull/8775)
* [OCPBUGS-37217](https://issues.redhat.com/browse/OCPBUGS-37217): CAPI GCP - retry SetIAMPolicy [#8763](https://github.com/openshift/installer/pull/8763)
* [OCPBUGS-37427](https://issues.redhat.com/browse/OCPBUGS-37427): bootstrap gather fails in vsphere, only ipv6 address used [#8759](https://github.com/openshift/installer/pull/8759)
* [OCPBUGS-37356](https://issues.redhat.com/browse/OCPBUGS-37356): vSphere validation fails if dc is in a folder [#8758](https://github.com/openshift/installer/pull/8758)
* [OCPBUGS-35366](https://issues.redhat.com/browse/OCPBUGS-35366): Update upi references to api-internal [#8582](https://github.com/openshift/installer/pull/8582)
* [AGENT-862](https://issues.redhat.com/browse/AGENT-862): Extend monitor-add-nodes to support multiple nodes [#8507](https://github.com/openshift/installer/pull/8507)
* [AGENT-854](https://issues.redhat.com/browse/AGENT-854): day2 add-nodes workflow validations [#8740](https://github.com/openshift/installer/pull/8740)
* [AGENT-900](https://issues.redhat.com/browse/AGENT-900): enable fips for add-nodes workflow [#8760](https://github.com/openshift/installer/pull/8760)
* [CORS-3568](https://issues.redhat.com/browse/CORS-3568): Support GCP pre-created Service Accounts for CAPG [#8750](https://github.com/openshift/installer/pull/8750)
* [OCPBUGS-36302](https://issues.redhat.com/browse/OCPBUGS-36302): pkg/asset/machines/azure: Don't set disk encryption set to nil [#8756](https://github.com/openshift/installer/pull/8756)
* [OCPBUGS-36780](https://issues.redhat.com/browse/OCPBUGS-36780): ic: fix typo in warning message [#8744](https://github.com/openshift/installer/pull/8744)
* [OCPBUGS-36913](https://issues.redhat.com/browse/OCPBUGS-36913): openstack: Fix security group tagging [#8757](https://github.com/openshift/installer/pull/8757)
* [OCPBUGS-36390](https://issues.redhat.com/browse/OCPBUGS-36390): aws: do not require create permissions when BYO IAM role [#8688](https://github.com/openshift/installer/pull/8688)
* [MULTIARCH-4814](https://issues.redhat.com/browse/MULTIARCH-4814): ic: add release arch validation for multi-arch clusters [#8761](https://github.com/openshift/installer/pull/8761)
* [AGENT-922](https://issues.redhat.com/browse/AGENT-922): Remove misleading inClusterConfig warning [#8715](https://github.com/openshift/installer/pull/8715)
* [OCPBUGS-36904](https://issues.redhat.com/browse/OCPBUGS-36904): aws: bump CAPA for subnet tagging fix [#8730](https://github.com/openshift/installer/pull/8730)
* no-jira: Replace Equal with ErrorContains for image-based nmstatectl unit tests [#8762](https://github.com/openshift/installer/pull/8762)
* [OCPBUGS-37226](https://issues.redhat.com/browse/OCPBUGS-37226): Persist image-based config manifests from state instead of template [#8752](https://github.com/openshift/installer/pull/8752)
* [MGMT-18364](https://issues.redhat.com/browse/MGMT-18364): Add image-based config ISO integration tests [#8737](https://github.com/openshift/installer/pull/8737)
* [OCPBUGS-36917](https://issues.redhat.com/browse/OCPBUGS-36917): openstack: Fix apiVIPs and ingressVIPs docs [#8728](https://github.com/openshift/installer/pull/8728)
* no-jira: docs/user/azure: fix byo vnet security groups [#8485](https://github.com/openshift/installer/pull/8485)
* [CORS-3607](https://issues.redhat.com/browse/CORS-3607): Azure CAPI Installs within Tech Preview featureset [#8754](https://github.com/openshift/installer/pull/8754)
* [MULTIARCH-4777](https://issues.redhat.com/browse/MULTIARCH-4777): gcp: support multi-arch nodes [#8701](https://github.com/openshift/installer/pull/8701)
* [OCPBUGS-35406](https://issues.redhat.com/browse/OCPBUGS-35406): Use service CIDRs to determine bootstrap kubelet IP family [#8681](https://github.com/openshift/installer/pull/8681)
* [AGENT-910](https://issues.redhat.com/browse/AGENT-910): node-joiner multi-arch support [#8644](https://github.com/openshift/installer/pull/8644)
* [METAL-1039](https://issues.redhat.com/browse/METAL-1039): Allow baremetal platform without MAPI [#8521](https://github.com/openshift/installer/pull/8521)
* [CORS-3569](https://issues.redhat.com/browse/CORS-3569): UDR for Capz [#8731](https://github.com/openshift/installer/pull/8731)
* [MULTIARCH-4569](https://issues.redhat.com/browse/MULTIARCH-4569): aws: support multi-arch nodes [#8698](https://github.com/openshift/installer/pull/8698)
* no-jira: Revert "Merge pull request #8714 from r4f4/bump-default-release-4.17" [#8753](https://github.com/openshift/installer/pull/8753)
* [OCPBUGS-37104](https://issues.redhat.com/browse/OCPBUGS-37104): openstack: Validate controlPlanePort has subnet [#8739](https://github.com/openshift/installer/pull/8739)
* [OCPBUGS-37164](https://issues.redhat.com/browse/OCPBUGS-37164): Handle empty config for image-based create image [#8745](https://github.com/openshift/installer/pull/8745)
* [OCPBUGS-37107](https://issues.redhat.com/browse/OCPBUGS-37107): Power VS: Disable SNAT when specifying imageContentSources [#8697](https://github.com/openshift/installer/pull/8697)
* [STOR-1353](https://issues.redhat.com/browse/STOR-1353): Attempt to cleanup GCP Filestore instances on destroy [#8699](https://github.com/openshift/installer/pull/8699)
* [CORS-3073](https://issues.redhat.com/browse/CORS-3073): azure: Allow for installs in existing vnets [#8662](https://github.com/openshift/installer/pull/8662)
* [MGMT-17842](https://issues.redhat.com/browse/MGMT-17842): Add image-based installer create config ISO [#8514](https://github.com/openshift/installer/pull/8514)
* [MGMT-17226](https://issues.redhat.com/browse/MGMT-17226): Add image-based installer create installation ISO [#8679](https://github.com/openshift/installer/pull/8679)
* [OCPBUGS-35440](https://issues.redhat.com/browse/OCPBUGS-35440): capi/aws: bump provider for ingress rules fix [#8596](https://github.com/openshift/installer/pull/8596)
* [OCPBUGS-34638](https://issues.redhat.com/browse/OCPBUGS-34638): destroy/gcp: set value for DiscardLocalSsd [#8649](https://github.com/openshift/installer/pull/8649)
* [CORS-3302](https://issues.redhat.com/browse/CORS-3302): port forward SSH to bootstrap host [#8669](https://github.com/openshift/installer/pull/8669)
* [OCPBUGS-36713](https://issues.redhat.com/browse/OCPBUGS-36713): CAPG use existing subnets and VPC [#8722](https://github.com/openshift/installer/pull/8722)
* [MGMT-17226](https://issues.redhat.com/browse/MGMT-17226): Add imagebased installer skeleton [#8709](https://github.com/openshift/installer/pull/8709)
* [CORS-3485](https://issues.redhat.com/browse/CORS-3485): Azure: modify control plane outbound LB into submission as an API LB [#8652](https://github.com/openshift/installer/pull/8652)
* [OCPBUGS-36378](https://issues.redhat.com/browse/OCPBUGS-36378): capi: start controllers after WaitGroup is created [#8693](https://github.com/openshift/installer/pull/8693)
* [CORS-2775](https://issues.redhat.com/browse/CORS-2775): cmd: destroy: remove deprecated github.com/pkg/errors [#8720](https://github.com/openshift/installer/pull/8720)
* [OCPBUGS-33973](https://issues.redhat.com/browse/OCPBUGS-33973): Openstack UPI - Reintroduce unique resource names. [#8477](https://github.com/openshift/installer/pull/8477)
* [MULTIARCH-4568](https://issues.redhat.com/browse/MULTIARCH-4568): Print release image arch and default arch when the payload is multi [#8515](https://github.com/openshift/installer/pull/8515)
* [CORS-3593](https://issues.redhat.com/browse/CORS-3593): go.mod: bump k8s dependencies [#8713](https://github.com/openshift/installer/pull/8713)
* [OCPBUGS-35262](https://issues.redhat.com/browse/OCPBUGS-35262): Skip firewall rule creation if permission is missing [#8706](https://github.com/openshift/installer/pull/8706)
* [OCPBUGS-36142](https://issues.redhat.com/browse/OCPBUGS-36142): azure: Fix HyperVGeneration for gen2 images. [#8666](https://github.com/openshift/installer/pull/8666)
* [OCPBUGS-35542](https://issues.redhat.com/browse/OCPBUGS-35542): Cleanup capi artifacts [#8599](https://github.com/openshift/installer/pull/8599)
* [CORS-3590](https://issues.redhat.com/browse/CORS-3590): releaseimage: update default version [#8714](https://github.com/openshift/installer/pull/8714)
* [AGENT-875](https://issues.redhat.com/browse/AGENT-875): Authenticate agents [#8395](https://github.com/openshift/installer/pull/8395)
* [OCPBUGS-34708](https://issues.redhat.com/browse/OCPBUGS-34708): CORS-3582: capi: remove unused feature gates [#8703](https://github.com/openshift/installer/pull/8703)
* [OCPBUGS-36660](https://issues.redhat.com/browse/OCPBUGS-36660): CORS-3591: 4.17 default channel incorrectly points to stable-4.16 [#8708](https://github.com/openshift/installer/pull/8708)
* [CORS-3296](https://issues.redhat.com/browse/CORS-3296): CAPG - configure Internal LoadBalancer in the provider [#8421](https://github.com/openshift/installer/pull/8421)
* [CORS-3547](https://issues.redhat.com/browse/CORS-3547): Upgrade cluster-api-provider-gcp to v1.7 [#8700](https://github.com/openshift/installer/pull/8700)
* [AGENT-876](https://issues.redhat.com/browse/AGENT-876): Authenticate systemd services and curl requests [#8393](https://github.com/openshift/installer/pull/8393)
* [SPLAT-1670](https://issues.redhat.com/browse/SPLAT-1670): install pwsh from ci mirrored image [#8643](https://github.com/openshift/installer/pull/8643)
* [OCPBUGS-36453](https://issues.redhat.com/browse/OCPBUGS-36453): PowerVS: add .ssh directory [#8686](https://github.com/openshift/installer/pull/8686)
* [OCPBUGS-35262](https://issues.redhat.com/browse/OCPBUGS-35262): Fix shared vpc issues with capg installs [#8583](https://github.com/openshift/installer/pull/8583)
* [AGENT-925](https://issues.redhat.com/browse/AGENT-925): retrieve ignition endpoint to add a new node [#8650](https://github.com/openshift/installer/pull/8650)
* [OCPBUGS-35752](https://issues.redhat.com/browse/OCPBUGS-35752): capi/aws: disable EKS controller in CAPA [#8628](https://github.com/openshift/installer/pull/8628)
* [OSASINFRA-3402](https://issues.redhat.com/browse/OSASINFRA-3402): Use Gophercloud v2.0.0 [#8685](https://github.com/openshift/installer/pull/8685)
* [AGENT-871](https://issues.redhat.com/browse/AGENT-871): Authenticate wait for [#8270](https://github.com/openshift/installer/pull/8270)
* [OCPBUGS-36318](https://issues.redhat.com/browse/OCPBUGS-36318): update RHCOS 4.17 bootimage metadata to 417.94.202407010929-0 [#8690](https://github.com/openshift/installer/pull/8690)
* [OCPBUGS-36316](https://issues.redhat.com/browse/OCPBUGS-36316): Power VS: Allow pending network for internal publishing strategy [#8677](https://github.com/openshift/installer/pull/8677)
* [OCPBUGS-36242](https://issues.redhat.com/browse/OCPBUGS-36242): vSphere - If the folder pre-exists do not tag [#8671](https://github.com/openshift/installer/pull/8671)
* [OSASINFRA-3510](https://issues.redhat.com/browse/OSASINFRA-3510): Change 'Generate' to accept a context [#8562](https://github.com/openshift/installer/pull/8562)
* [OCPBUGS-36284](https://issues.redhat.com/browse/OCPBUGS-36284): Remove etcd store when provisioning fails [#8673](https://github.com/openshift/installer/pull/8673)
* [OCPBUGS-36092](https://issues.redhat.com/browse/OCPBUGS-36092): bump go-retryablehttp for CVE fix [#8653](https://github.com/openshift/installer/pull/8653)
* no-jira: Update documentation on libvirt installs for devs [#8675](https://github.com/openshift/installer/pull/8675)
* [OCPBUGS-36176](https://issues.redhat.com/browse/OCPBUGS-36176): PowerVS: Add ibmcloud plugins [#8661](https://github.com/openshift/installer/pull/8661)
* [OCPBUGS-35382](https://issues.redhat.com/browse/OCPBUGS-35382): CAPG marketplace image use for control plane nodes [#8665](https://github.com/openshift/installer/pull/8665)
* [OCPBUGS-35852](https://issues.redhat.com/browse/OCPBUGS-35852): capi: shutdown local controlplane as the last step [#8639](https://github.com/openshift/installer/pull/8639)
* [OCPBUGS-35188](https://issues.redhat.com/browse/OCPBUGS-35188): aws: remove terraform configs [#8557](https://github.com/openshift/installer/pull/8557)
* [CORS-3435](https://issues.redhat.com/browse/CORS-3435): Create user assigned identity for Azure VM's [#8645](https://github.com/openshift/installer/pull/8645)
* [MULTIARCH-4515](https://issues.redhat.com/browse/MULTIARCH-4515): Add new files for agent-based installer (LPAR support for s390x) [#8536](https://github.com/openshift/installer/pull/8536)
* [OCPBUGS-35420](https://issues.redhat.com/browse/OCPBUGS-35420): OSASINFRA-1962: openstack: Validate additionalNetworkIDs and additionalSecurityGroupIDs [#8592](https://github.com/openshift/installer/pull/8592)
* [CORS-3483](https://issues.redhat.com/browse/CORS-3483): Update CAPI and CAPZ versions to set Machine DisableExtensionOperations [#8627](https://github.com/openshift/installer/pull/8627)
* [OCPBUGS-34978](https://issues.redhat.com/browse/OCPBUGS-34978): Power VS: Ensure that VPC has prerequesite resources for private [#8532](https://github.com/openshift/installer/pull/8532)
* [OCPBUGS-35547](https://issues.redhat.com/browse/OCPBUGS-35547): Configured logger for controller-runtime [#8641](https://github.com/openshift/installer/pull/8641)
* [OSASINFRA-3465](https://issues.redhat.com/browse/OSASINFRA-3465): openstack: Update Gophercloud to v2 [#8493](https://github.com/openshift/installer/pull/8493)
* [CORS-3562](https://issues.redhat.com/browse/CORS-3562): azure: Setting experimental MachinePool featuregate to false [#8637](https://github.com/openshift/installer/pull/8637)
* [CORS-3434](https://issues.redhat.com/browse/CORS-3434): azure: Skip image upload if env var is set [#8283](https://github.com/openshift/installer/pull/8283)
* [OCPBUGS-14963](https://issues.redhat.com/browse/OCPBUGS-14963): IBMCloud: Ignore failed VPC regions [#8556](https://github.com/openshift/installer/pull/8556)
* [OCPBUGS-33735](https://issues.redhat.com/browse/OCPBUGS-33735): Remove GCP bootstrap ssh firewall rule [#8523](https://github.com/openshift/installer/pull/8523)
* [OCPBUGS-31275](https://issues.redhat.com/browse/OCPBUGS-31275): gcp: Validate install-config examples [#8198](https://github.com/openshift/installer/pull/8198)
* no-jira: images: upi-installer image cleanup [#8216](https://github.com/openshift/installer/pull/8216)
* [OCPBUGS-33702](https://issues.redhat.com/browse/OCPBUGS-33702): baremetal: bootstrap: bind icc to localhost [#8445](https://github.com/openshift/installer/pull/8445)
* Revert #8221 "SPLAT-1553: Added multi vCenter support for capi installer." [#8630](https://github.com/openshift/installer/pull/8630)
* [OCPBUGS-35426](https://issues.redhat.com/browse/OCPBUGS-35426): Update cluster-api-provider-openstack to v0.10.3 [#8625](https://github.com/openshift/installer/pull/8625)
* [OCPBUGS-35523](https://issues.redhat.com/browse/OCPBUGS-35523): remove terraform libvirt from the installer [#8610](https://github.com/openshift/installer/pull/8610)
* [OCPBUGS-30025](https://issues.redhat.com/browse/OCPBUGS-30025): fix: changed validation for olm and marketplace [#8609](https://github.com/openshift/installer/pull/8609)
* [OCPBUGS-35430](https://issues.redhat.com/browse/OCPBUGS-35430): Support CAPI provider custom timeouts [#8568](https://github.com/openshift/installer/pull/8568)
* [OCPBUGS-35533](https://issues.redhat.com/browse/OCPBUGS-35533): Fix ethertype for masters service router SG creation [#8615](https://github.com/openshift/installer/pull/8615)
* [CORS-3265](https://issues.redhat.com/browse/CORS-3265): capz: Add Accelerated Networking [#8418](https://github.com/openshift/installer/pull/8418)
* [OCPBUGS-35494](https://issues.redhat.com/browse/OCPBUGS-35494): capi/aws: allow 6443 for private cluster NLB [#8620](https://github.com/openshift/installer/pull/8620)
* [OCPBUGS-35530](https://issues.redhat.com/browse/OCPBUGS-35530): capi/aws: retry SSH ingress rule removal [#8616](https://github.com/openshift/installer/pull/8616)
* [OCPBUGS-35400](https://issues.redhat.com/browse/OCPBUGS-35400): For GCP, only configure kmsKeyServiceAccount if set [#8597](https://github.com/openshift/installer/pull/8597)
* [SPLAT-1553](https://issues.redhat.com/browse/SPLAT-1553): Added multi vCenter support for capi installer. [#8221](https://github.com/openshift/installer/pull/8221)
* [OCPBUGS-34037](https://issues.redhat.com/browse/OCPBUGS-34037): bump github.com/container/images for CVE fix [#8564](https://github.com/openshift/installer/pull/8564)
* [OCPBUGS-35511](https://issues.redhat.com/browse/OCPBUGS-35511): capi aws: append random string in caller ref [#8593](https://github.com/openshift/installer/pull/8593)
* [SPLAT-1437](https://issues.redhat.com/browse/SPLAT-1437): CAPI/AWS/BYOIP: supporting Public IPv4 Pool [#8175](https://github.com/openshift/installer/pull/8175)
* [OCPBUGS-35467](https://issues.redhat.com/browse/OCPBUGS-35467): capi/aws: disable CAPA's TagUnmanagedNetworkResources feature gate [#8602](https://github.com/openshift/installer/pull/8602)
* [OCPBUGS-33745](https://issues.redhat.com/browse/OCPBUGS-33745): save etcd data to its own directory [#8424](https://github.com/openshift/installer/pull/8424)
* NO-JIRA: Remove dulek from openstack-{approvers,reviewers} [#8413](https://github.com/openshift/installer/pull/8413)
* [OCPBUGS-34819](https://issues.redhat.com/browse/OCPBUGS-34819): capi/aws: bump provider for fixes [#8545](https://github.com/openshift/installer/pull/8545)
* [OCPBUGS-34618](https://issues.redhat.com/browse/OCPBUGS-34618): vsphere - allow network selection on cluster name [#8505](https://github.com/openshift/installer/pull/8505)
* [OCPBUGS-35037](https://issues.redhat.com/browse/OCPBUGS-35037): aws: delete ignition bucket on bootstrap destroy [#8584](https://github.com/openshift/installer/pull/8584)
* [OCPBUGS-35293](https://issues.redhat.com/browse/OCPBUGS-35293): Add ELB V2 permission to set security groups on API server load balancer [#8572](https://github.com/openshift/installer/pull/8572)
* [OCPBUGS-34712](https://issues.redhat.com/browse/OCPBUGS-34712): add tested instance type for IBMCloud [#8549](https://github.com/openshift/installer/pull/8549)
* [OCPBUGS-35315](https://issues.redhat.com/browse/OCPBUGS-35315): capi: use polling instead of exponential backoff [#8522](https://github.com/openshift/installer/pull/8522)
* [OCPBUGS-35197](https://issues.redhat.com/browse/OCPBUGS-35197): capi/aws: do not set proxy for masters [#8570](https://github.com/openshift/installer/pull/8570)
* [OCPBUGS-34005](https://issues.redhat.com/browse/OCPBUGS-34005): openstack: Attach a bootstrap FIP to the cluster network port [#8578](https://github.com/openshift/installer/pull/8578)
* [OCPBUGS-35309](https://issues.redhat.com/browse/OCPBUGS-35309): Add S3 permission to allow attaching S3 bucket policy [#8573](https://github.com/openshift/installer/pull/8573)
* [OCPBUGS-33661](https://issues.redhat.com/browse/OCPBUGS-33661): capi/aws: rename `preserveBootstrapIgnition` [#8460](https://github.com/openshift/installer/pull/8460)
* [OCPBUGS-35180](https://issues.redhat.com/browse/OCPBUGS-35180): Prevent multiple invocations on CAPI [#8565](https://github.com/openshift/installer/pull/8565)
* [OCPBUGS-33681](https://issues.redhat.com/browse/OCPBUGS-33681): Cleanup bootstrap resources for capg install [#8489](https://github.com/openshift/installer/pull/8489)
* [OCPBUGS-34713](https://issues.redhat.com/browse/OCPBUGS-34713): AWS remove extra tags from awsmachines for security groups and subnets [#8567](https://github.com/openshift/installer/pull/8567)
* [OCPBUGS-35041](https://issues.redhat.com/browse/OCPBUGS-35041): capi: do not override KUBECONFIG [#8542](https://github.com/openshift/installer/pull/8542)
* [OCPBUGS-34325](https://issues.redhat.com/browse/OCPBUGS-34325): Updating ose-baremetal-installer-container image to be consistent with ART for 4.17 [#8559](https://github.com/openshift/installer/pull/8559)
* [OCPBUGS-35182](https://issues.redhat.com/browse/OCPBUGS-35182): write etcd and kube-apiserver logs [#8441](https://github.com/openshift/installer/pull/8441)
* [OCPBUGS-34456](https://issues.redhat.com/browse/OCPBUGS-34456): bump envtest binaries version [#8471](https://github.com/openshift/installer/pull/8471)
* no-jira: hack: bump golangci-lint version [#8535](https://github.com/openshift/installer/pull/8535)
* [OCPBUGS-34416](https://issues.redhat.com/browse/OCPBUGS-34416): Validate OnHostMaintenance and ConfidentialCompute [#8541](https://github.com/openshift/installer/pull/8541)
* [OCPBUGS-35039](https://issues.redhat.com/browse/OCPBUGS-35039): PowerVS: Destroy DHCP in ERROR state [#8544](https://github.com/openshift/installer/pull/8544)
* [OCPBUGS-34082](https://issues.redhat.com/browse/OCPBUGS-34082): baremetal: check if HardwareDetails is nil [#8443](https://github.com/openshift/installer/pull/8443)
* [OCPBUGS-34368](https://issues.redhat.com/browse/OCPBUGS-34368): OCPBUGS-34325: OCPBUGS-34311: OCPBUGS-34221: Bump golang 1.22 [#8473](https://github.com/openshift/installer/pull/8473)
* [OCPBUGS-34295](https://issues.redhat.com/browse/OCPBUGS-34295): wait for ip addresses to be present on machines [#8450](https://github.com/openshift/installer/pull/8450)
* [OCPBUGS-35099](https://issues.redhat.com/browse/OCPBUGS-35099): OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas [#8370](https://github.com/openshift/installer/pull/8370)
* [OCPBUGS-35038](https://issues.redhat.com/browse/OCPBUGS-35038): capi/aws: add BootstrapDestroyer guard [#8543](https://github.com/openshift/installer/pull/8543)
* [OCPBUGS-34915](https://issues.redhat.com/browse/OCPBUGS-34915): Add network tags to capg control plane machines [#8531](https://github.com/openshift/installer/pull/8531)
* [OCPBUGS-35020](https://issues.redhat.com/browse/OCPBUGS-35020): capi/aws: don't use S3 stub for masters [#8538](https://github.com/openshift/installer/pull/8538)
* [OCPBUGS-33662](https://issues.redhat.com/browse/OCPBUGS-33662): aws: don't always require s3:Delete* permissions [#8410](https://github.com/openshift/installer/pull/8410)
* [OCPBUGS-34969](https://issues.redhat.com/browse/OCPBUGS-34969): Power VS: Add ports needed for private clusters to security group [#8530](https://github.com/openshift/installer/pull/8530)
* [OCPBUGS-34900](https://issues.redhat.com/browse/OCPBUGS-34900): Increase timeout for bootstrap complete [#8534](https://github.com/openshift/installer/pull/8534)
* no-jira: Minor updates to fix linting issues. [#8529](https://github.com/openshift/installer/pull/8529)
* [OCPBUGS-34869](https://issues.redhat.com/browse/OCPBUGS-34869): PowerVS: fix AddIPToLoadBalancerPool [#8508](https://github.com/openshift/installer/pull/8508)
* [MULTIARCH-4640](https://issues.redhat.com/browse/MULTIARCH-4640): Add 4 new regions for PowerVS [#8484](https://github.com/openshift/installer/pull/8484)
* [OCPBUGS-34493](https://issues.redhat.com/browse/OCPBUGS-34493): baremetal: Don't always enable provisioning-interface.service [#8491](https://github.com/openshift/installer/pull/8491)
* No-jira: Revert "Cleanup GCP Filestore instances on destroy" [#8527](https://github.com/openshift/installer/pull/8527)
* [OCPBUGS-33793](https://issues.redhat.com/browse/OCPBUGS-33793): Make Ingress capability required for all baselines [#8525](https://github.com/openshift/installer/pull/8525)
* [OCPBUGS-34692](https://issues.redhat.com/browse/OCPBUGS-34692): update RHCOS 4.17 bootimage metadata to 417.94.202405291927-0 [#8516](https://github.com/openshift/installer/pull/8516)
* [OCPBUGS-33789](https://issues.redhat.com/browse/OCPBUGS-33789): [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled [#8468](https://github.com/openshift/installer/pull/8468)
* [STOR-1353](https://issues.redhat.com/browse/STOR-1353): Cleanup GCP Filestore instances on destroy [#7251](https://github.com/openshift/installer/pull/7251)
* [OSASINFRA-3456](https://issues.redhat.com/browse/OSASINFRA-3456): OpenStack: do not use trunk for the Machines by default [#8497](https://github.com/openshift/installer/pull/8497)
* [OCPBUGS-33508](https://issues.redhat.com/browse/OCPBUGS-33508): capi/aws: fix setting custom AMI [#8466](https://github.com/openshift/installer/pull/8466)
* [OCPBUGS-33793](https://issues.redhat.com/browse/OCPBUGS-33793): Make Ingress capability required for standalone OpenShift [#8502](https://github.com/openshift/installer/pull/8502)
* [CORS-3523](https://issues.redhat.com/browse/CORS-3523), [CORS-3524](https://issues.redhat.com/browse/CORS-3524): aws: terraform: add spot instance support for masters [#8349](https://github.com/openshift/installer/pull/8349)
* [OCPBUGS-33410](https://issues.redhat.com/browse/OCPBUGS-33410): attach tag to folder,fix folder destroy [#8373](https://github.com/openshift/installer/pull/8373)
* [OCPQE-22479](https://issues.redhat.com/browse/OCPQE-22479): add machine series 'A3' and 'C3D' to 'Tested instance types for GCP' [#8504](https://github.com/openshift/installer/pull/8504)
* [OCPBUGS-33840](https://issues.redhat.com/browse/OCPBUGS-33840): Warn before trimming cluster name [#8367](https://github.com/openshift/installer/pull/8367)
* [OCPBUGS-33234](https://issues.redhat.com/browse/OCPBUGS-33234): azure: bump profile used for network [#8351](https://github.com/openshift/installer/pull/8351)
* [OCPBUGS-33925](https://issues.redhat.com/browse/OCPBUGS-33925): tfvars: change asset's name [#8464](https://github.com/openshift/installer/pull/8464)
* [OCPBUGS-33561](https://issues.redhat.com/browse/OCPBUGS-33561), [OCPBUGS-33615](https://issues.redhat.com/browse/OCPBUGS-33615): capv - missing cores/socket,disk type [#8446](https://github.com/openshift/installer/pull/8446)
* no-jira: Removing unused users from owners aliases [#8498](https://github.com/openshift/installer/pull/8498)
* [OCPBUGS-30860](https://issues.redhat.com/browse/OCPBUGS-30860): Use infrastructure API to detect cluster topology [#8429](https://github.com/openshift/installer/pull/8429)
* [MGMT-17468](https://issues.redhat.com/browse/MGMT-17468): Detect Release Image Arch in a Disconnected Env. [#8378](https://github.com/openshift/installer/pull/8378)
* [MULTIARCH-4076](https://issues.redhat.com/browse/MULTIARCH-4076): PowerVS: Default region bug fix [#7862](https://github.com/openshift/installer/pull/7862)
* [OCPBUGS-34243](https://issues.redhat.com/browse/OCPBUGS-34243): unique AWS HostedZone Caller Ref [#8453](https://github.com/openshift/installer/pull/8453)
* [OCPBUGS-30516](https://issues.redhat.com/browse/OCPBUGS-30516): bump golang-protobuf for CVE fix [#8379](https://github.com/openshift/installer/pull/8379)
* no-jira: images: delete Dockerfile.upi.ci.rhel8 [#8377](https://github.com/openshift/installer/pull/8377)
* [OCPBUGS-33570](https://issues.redhat.com/browse/OCPBUGS-33570): Nutanix IPI install with capi failed to set bootType [#8454](https://github.com/openshift/installer/pull/8454)
* [OCPBUGS-34389](https://issues.redhat.com/browse/OCPBUGS-34389): aws/cluster: restrict SSH on private clusters [#8462](https://github.com/openshift/installer/pull/8462)
* [OCPBUGS-34368](https://issues.redhat.com/browse/OCPBUGS-34368): Updating ose-installer-artifacts-container image to be consistent with ART for 4.17 [#8459](https://github.com/openshift/installer/pull/8459)
* [OCPBUGS-34354](https://issues.redhat.com/browse/OCPBUGS-34354): PowerVS: update capi ibmcloud to release 0 8 0 [#8458](https://github.com/openshift/installer/pull/8458)
* [OCPBUGS-33926](https://issues.redhat.com/browse/OCPBUGS-33926): capi/aws: don't modify BYO role's policy [#8457](https://github.com/openshift/installer/pull/8457)
* [OCPBUGS-33912](https://issues.redhat.com/browse/OCPBUGS-33912): PowerVS: Use random subnet [#8420](https://github.com/openshift/installer/pull/8420)
* [OCPBUGS-34221](https://issues.redhat.com/browse/OCPBUGS-34221): Updating ose-installer-altinfra-container image to be consistent with ART for 4.17 [#8449](https://github.com/openshift/installer/pull/8449)
* [OCPBUGS-34311](https://issues.redhat.com/browse/OCPBUGS-34311): Updating ose-installer-container image to be consistent with ART for 4.17 [#8455](https://github.com/openshift/installer/pull/8455)
* [OCPBUGS-34040](https://issues.redhat.com/browse/OCPBUGS-34040): Add --dir /tmp to node-joiner-monitor.sh [#8444](https://github.com/openshift/installer/pull/8444)
* [OCPBUGS-30860](https://issues.redhat.com/browse/OCPBUGS-30860): bootstrap: hit readyz when checking LB status [#8400](https://github.com/openshift/installer/pull/8400)
* [OCPBUGS-33877](https://issues.redhat.com/browse/OCPBUGS-33877): bump aws bootstrap destroy timeout [#8427](https://github.com/openshift/installer/pull/8427)
* [OCPBUGS-33995](https://issues.redhat.com/browse/OCPBUGS-33995): PowerVS: Also fill out PlatformSpec for custom endpoints [#8439](https://github.com/openshift/installer/pull/8439)
* [TRT-1674](https://issues.redhat.com/browse/TRT-1674): 4.17 capi revert 1 [#8433](https://github.com/openshift/installer/pull/8433)
* [OCPBUGS-33493](https://issues.redhat.com/browse/OCPBUGS-33493): Enable leader election for baremetal operator [#8391](https://github.com/openshift/installer/pull/8391)
* [OCPBUGS-33890](https://issues.redhat.com/browse/OCPBUGS-33890): SPLAT-1469: Remove vsphere terraform [#8254](https://github.com/openshift/installer/pull/8254)
* [CORS-2840](https://issues.redhat.com/browse/CORS-2840): promote capi-installers to default feature set [#8416](https://github.com/openshift/installer/pull/8416)
* [Full changelog](https://github.com/openshift/installer/compare/dc63e8f7a7d8bdd9816c20c484a0af8ed28473a0...e09aaf186494231de92bd80f02a43db764bd5e27)
### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/2549061c570a7ff152c66322978bb142647b8b4e)
* [OCPBUGS-34210](https://issues.redhat.com/browse/OCPBUGS-34210): Updating baremetal-machine-controller-container image to be consistent with ART for 4.17 [#219](https://github.com/openshift/cluster-api-provider-baremetal/pull/219)
* [OCPBUGS-34210](https://issues.redhat.com/browse/OCPBUGS-34210): Updating baremetal-machine-controller-container image to be consistent with ART for 4.17 [#217](https://github.com/openshift/cluster-api-provider-baremetal/pull/217)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/11ba601fbca58557176fcc67ffe8d7d64b697a4a...2549061c570a7ff152c66322978bb142647b8b4e)
### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/94748225f29f3a7ef7dfe5844219c3856a421903)
* [OCPBUGS-39489](https://issues.redhat.com/browse/OCPBUGS-39489): Disallow fetching secrets from namespaces different from the host's one [#377](https://github.com/openshift/baremetal-operator/pull/377)
* [OCPBUGS-38937](https://issues.redhat.com/browse/OCPBUGS-38937): [OCP] Ability to disable agent power off after deployment [#371](https://github.com/openshift/baremetal-operator/pull/371)
* [OCPBUGS-36425](https://issues.redhat.com/browse/OCPBUGS-36425): Sync jul 30 [#367](https://github.com/openshift/baremetal-operator/pull/367)
* NO-ISSUE: Bmo sync jul9 [#364](https://github.com/openshift/baremetal-operator/pull/364)
* [OCPBUGS-35559](https://issues.redhat.com/browse/OCPBUGS-35559): Bmo sync jul5 [#362](https://github.com/openshift/baremetal-operator/pull/362)
* [OCPBUGS-29687](https://issues.redhat.com/browse/OCPBUGS-29687): Merge upstream [#360](https://github.com/openshift/baremetal-operator/pull/360)
* [OCPBUGS-34318](https://issues.redhat.com/browse/OCPBUGS-34318): Updating ose-baremetal-operator-container image to be consistent with ART for 4.17 [#357](https://github.com/openshift/baremetal-operator/pull/357)
* [OCPBUGS-34318](https://issues.redhat.com/browse/OCPBUGS-34318): Updating ose-baremetal-operator-container image to be consistent with ART for 4.17 [#356](https://github.com/openshift/baremetal-operator/pull/356)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/ae55a7053373827ad4b1aff6dceae5f077ce90e5...94748225f29f3a7ef7dfe5844219c3856a421903)
### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/e1f3e0d105247d8a53fafe53de33a4ce92b88c41)
* [OCPBUGS-38423](https://issues.redhat.com/browse/OCPBUGS-38423): Distinguish NotExist from nil for keepalived sentinel file errors. [#329](https://github.com/openshift/baremetal-runtimecfg/pull/329)
* [OCPBUGS-38562](https://issues.redhat.com/browse/OCPBUGS-38562): Handle errors in iptables healthcheck [#330](https://github.com/openshift/baremetal-runtimecfg/pull/330)
* [OCPBUGS-32348](https://issues.redhat.com/browse/OCPBUGS-32348): Change mechanism of debug flag [#309](https://github.com/openshift/baremetal-runtimecfg/pull/309)
* [OCPBUGS-32141](https://issues.redhat.com/browse/OCPBUGS-32141): Fix handling of ELB Node IP detection [#316](https://github.com/openshift/baremetal-runtimecfg/pull/316)
* [OCPBUGS-34706](https://issues.redhat.com/browse/OCPBUGS-34706): Add support for OVN HostCidrs annotation [#317](https://github.com/openshift/baremetal-runtimecfg/pull/317)
* [OCPBUGS-34136](https://issues.redhat.com/browse/OCPBUGS-34136): Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.17 [#314](https://github.com/openshift/baremetal-runtimecfg/pull/314)
* [OCPBUGS-32141](https://issues.redhat.com/browse/OCPBUGS-32141): Handle scenario when VIP does not belong to L2 [#313](https://github.com/openshift/baremetal-runtimecfg/pull/313)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/f55a330f8139ef660b3f60b735ef77538f7b9cbe...e1f3e0d105247d8a53fafe53de33a4ce92b88c41)
### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/dde885f94df59c4816acc36814ffec3b55d4a1ca)
* [OCPBUGS-43696](https://issues.redhat.com/browse/OCPBUGS-43696): Bump k8s dependencies to 1.30.5 [#1902](https://github.com/openshift/oc/pull/1902)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability set [#1876](https://github.com/openshift/oc/pull/1876)
* [OCPBUGS-42176](https://issues.redhat.com/browse/OCPBUGS-42176): Fix copy artifacts for all CPU architectures [#1880](https://github.com/openshift/oc/pull/1880)
* [OCPBUGS-42721](https://issues.redhat.com/browse/OCPBUGS-42721): Update push targets of digest with new appended tags [#1892](https://github.com/openshift/oc/pull/1892)
* [OCPBUGS-42580](https://issues.redhat.com/browse/OCPBUGS-42580): fix outputname flag for node-image create command [#1888](https://github.com/openshift/oc/pull/1888)
* [OCPBUGS-42164](https://issues.redhat.com/browse/OCPBUGS-42164): Check cast result in adm prune deployments to prevent panic [#1879](https://github.com/openshift/oc/pull/1879)
* [OCPBUGS-39090](https://issues.redhat.com/browse/OCPBUGS-39090): use proxy settings when required [#1860](https://github.com/openshift/oc/pull/1860)
* make the idle command's scale update unconditional [#1856](https://github.com/openshift/oc/pull/1856)
* [OCPBUGS-38720](https://issues.redhat.com/browse/OCPBUGS-38720): Add examples for some oc adm policy commands [#1850](https://github.com/openshift/oc/pull/1850)
* [WRKLDS-1318](https://issues.redhat.com/browse/WRKLDS-1318): flags for single node interface [#1841](https://github.com/openshift/oc/pull/1841)
* [OTA-1309](https://issues.redhat.com/browse/OTA-1309): upgrade-status: test a compact cluster and a single-node cluster [#1829](https://github.com/openshift/oc/pull/1829)
* [WRKLDS-1429](https://issues.redhat.com/browse/WRKLDS-1429): Adds a guardrail for node-image commands which is supported only for Openshift version 4.17+ [#1837](https://github.com/openshift/oc/pull/1837)
* [OTA-1153](https://issues.redhat.com/browse/OTA-1153): upgrade-status: communicate control plane completion clearly [#1831](https://github.com/openshift/oc/pull/1831)
* NO-JIRA: upgrade-status: fix HasOSImage function [#1834](https://github.com/openshift/oc/pull/1834)
* [WRKLDS-1316](https://issues.redhat.com/browse/WRKLDS-1316): Retry and do not fail when logs cannot be updated [#1836](https://github.com/openshift/oc/pull/1836)
* NO-JIRA: upgrade-status: fix a typo in README [#1830](https://github.com/openshift/oc/pull/1830)
* [WRKLDS-1316](https://issues.redhat.com/browse/WRKLDS-1316): Remove clusterversions from certificates api group [#1835](https://github.com/openshift/oc/pull/1835)
* [AGENT-854](https://issues.redhat.com/browse/AGENT-854): add the required role to support platform type validation [#1832](https://github.com/openshift/oc/pull/1832)
* [WRKLDS-1316](https://issues.redhat.com/browse/WRKLDS-1316): oc adm node-image monitor command [#1823](https://github.com/openshift/oc/pull/1823)
* [OTA-1291](https://issues.redhat.com/browse/OTA-1291): upgrade status: removes custom nodes from the worker pool (2) [#1825](https://github.com/openshift/oc/pull/1825)
* NO-JIRA: Minor wording tweaks for CLI help [#1826](https://github.com/openshift/oc/pull/1826)
* [OCPBUGS-37345](https://issues.redhat.com/browse/OCPBUGS-37345): Revert "OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command" [#1827](https://github.com/openshift/oc/pull/1827)
* [OTA-1291](https://issues.redhat.com/browse/OTA-1291): upgrade status: removes custom nodes from the worker pool [#1822](https://github.com/openshift/oc/pull/1822)
* : MULTIARCH-4568: Inject ReleaseArch into openshift-install [#1792](https://github.com/openshift/oc/pull/1792)
* [OCPBUGS-35994](https://issues.redhat.com/browse/OCPBUGS-35994): pkg/cli/admin/upgrade/rollback: Drop this command [#1806](https://github.com/openshift/oc/pull/1806)
* no-jira: Extend the kube version check for images/tools/Dockerfile [#1813](https://github.com/openshift/oc/pull/1813)
* [OCPBUGS-36525](https://issues.redhat.com/browse/OCPBUGS-36525): Bump k8s to 1.30.2 [#1812](https://github.com/openshift/oc/pull/1812)
* [WRKLDS-1310](https://issues.redhat.com/browse/WRKLDS-1310): pkg/cli/admin/mustgather: GA since and since-time flags [#1811](https://github.com/openshift/oc/pull/1811)
* [OCPBUGS-36183](https://issues.redhat.com/browse/OCPBUGS-36183): pkg/cli/admin/prune/renderedmachineconfigs: 'Error dry-run deleting' [#1807](https://github.com/openshift/oc/pull/1807)
* [OCPBUGS-33897](https://issues.redhat.com/browse/OCPBUGS-33897): `upgrade status`: control plane completion estimate [#1742](https://github.com/openshift/oc/pull/1742)
* [OCPBUGS-31848](https://issues.redhat.com/browse/OCPBUGS-31848): don't manually delete must-gather's cluster role binding [#1790](https://github.com/openshift/oc/pull/1790)
* [OCPBUGS-34877](https://issues.redhat.com/browse/OCPBUGS-34877): Ignore pruning when deployment points to replicationcontroller [#1797](https://github.com/openshift/oc/pull/1797)
* NO-JIRA: pkg/helpers: remove legacy pkg [#1791](https://github.com/openshift/oc/pull/1791)
* [WRKLDS-1292](https://issues.redhat.com/browse/WRKLDS-1292): oc k8s 1.30 bump [#1789](https://github.com/openshift/oc/pull/1789)
* NO-JIRA: Update comment about using OpenFileSequential [#1793](https://github.com/openshift/oc/pull/1793)
* [OCPBUGS-33896](https://issues.redhat.com/browse/OCPBUGS-33896): `upgrade status`: polish alert insights [#1787](https://github.com/openshift/oc/pull/1787)
* [OCPBUGS-32108](https://issues.redhat.com/browse/OCPBUGS-32108): stop loading legacy schemes on global scheme [#1775](https://github.com/openshift/oc/pull/1775)
* [OCPBUGS-33896](https://issues.redhat.com/browse/OCPBUGS-33896): `status/inspect-alerts`: handle non-200 by Thanos [#1782](https://github.com/openshift/oc/pull/1782)
* [OCPBUGS-34465](https://issues.redhat.com/browse/OCPBUGS-34465): Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.17 [#1785](https://github.com/openshift/oc/pull/1785)
* [OCPBUGS-33903](https://issues.redhat.com/browse/OCPBUGS-33903): Simplify output when not updating [#1774](https://github.com/openshift/oc/pull/1774)
* [OCPBUGS-34207](https://issues.redhat.com/browse/OCPBUGS-34207): Updating ose-tools-container image to be consistent with ART for 4.17 [#1780](https://github.com/openshift/oc/pull/1780)
* [OCPBUGS-34154](https://issues.redhat.com/browse/OCPBUGS-34154): Updating openshift-enterprise-cli-container image to be consistent with ART for 4.17 [#1779](https://github.com/openshift/oc/pull/1779)
* [OCPBUGS-33762](https://issues.redhat.com/browse/OCPBUGS-33762): Hardcode resource groups/kinds for now [#1773](https://github.com/openshift/oc/pull/1773)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc annotation to privileged for node debug pods [#1763](https://github.com/openshift/oc/pull/1763)
* [OCPBUGS-33905](https://issues.redhat.com/browse/OCPBUGS-33905): pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK [#1764](https://github.com/openshift/oc/pull/1764)
* [OCPBUGS-33651](https://issues.redhat.com/browse/OCPBUGS-33651): Add s390x based oc into extraction target [#1766](https://github.com/openshift/oc/pull/1766)
* [OCPBUGS-33896](https://issues.redhat.com/browse/OCPBUGS-33896): add alert data to upgrade health in oc adm upgrade status [#1740](https://github.com/openshift/oc/pull/1740)
* [Full changelog](https://github.com/openshift/oc/compare/cf533b548154f7f2e828a44864477bbbb881692d...dde885f94df59c4816acc36814ffec3b55d4a1ca)
### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a836d6794373f8c2f69cef842e5a9f3d92556abe)
* [OCPBUGS-44123](https://issues.redhat.com/browse/OCPBUGS-44123): Add GCP pod identity webhook [#776](https://github.com/openshift/cloud-credential-operator/pull/776)
* [OCPBUGS-43644](https://issues.redhat.com/browse/OCPBUGS-43644): Only attempt timed token credentials on supported platforms. [#773](https://github.com/openshift/cloud-credential-operator/pull/773)
* [OCPBUGS-43335](https://issues.redhat.com/browse/OCPBUGS-43335): Update github.com/sirupsen/logrus v1.9.3 [#766](https://github.com/openshift/cloud-credential-operator/pull/766)
* [OCPBUGS-41233](https://issues.redhat.com/browse/OCPBUGS-41233): List secrets in batches to avoid api timeout [#756](https://github.com/openshift/cloud-credential-operator/pull/756)
* [OCPBUGS-38952](https://issues.redhat.com/browse/OCPBUGS-38952): Follow-up bug fixes for CCO-572 [#751](https://github.com/openshift/cloud-credential-operator/pull/751)
* [OCPBUGS-38375](https://issues.redhat.com/browse/OCPBUGS-38375): update google.golang.org/grpc v1.65.0 [#747](https://github.com/openshift/cloud-credential-operator/pull/747)
* [SPLAT-1718](https://issues.redhat.com/browse/SPLAT-1718): Remove alibaba [#737](https://github.com/openshift/cloud-credential-operator/pull/737)
* [CCO-572](https://issues.redhat.com/browse/CCO-572): STS OLM for GCP (WIF) [#708](https://github.com/openshift/cloud-credential-operator/pull/708)
* [CCO-580](https://issues.redhat.com/browse/CCO-580): Upgrade to Kubernetes 1.30 [#725](https://github.com/openshift/cloud-credential-operator/pull/725)
* [OCPBUGS-37334](https://issues.redhat.com/browse/OCPBUGS-37334): SNYK ignore go-client misreporting [#734](https://github.com/openshift/cloud-credential-operator/pull/734)
* [OCPBUGS-35016](https://issues.redhat.com/browse/OCPBUGS-35016): Update to azidentity v1.7.0 [#716](https://github.com/openshift/cloud-credential-operator/pull/716)
* [OCPBUGS-34347](https://issues.redhat.com/browse/OCPBUGS-34347): Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.17 [#719](https://github.com/openshift/cloud-credential-operator/pull/719)
* [OCPBUGS-36032](https://issues.redhat.com/browse/OCPBUGS-36032): IBM/go-sdk-core update to v5.6.3 [#715](https://github.com/openshift/cloud-credential-operator/pull/715)
* [OCPBUGS-36140](https://issues.redhat.com/browse/OCPBUGS-36140): GCP passthrough permissions check to ignore problematic permissions. [#712](https://github.com/openshift/cloud-credential-operator/pull/712)
* NO-JIRA: Fix Makefile for developer install [#711](https://github.com/openshift/cloud-credential-operator/pull/711)
* [OCPBUGS-33566](https://issues.redhat.com/browse/OCPBUGS-33566): AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN [#703](https://github.com/openshift/cloud-credential-operator/pull/703)
* [OCPBUGS-33621](https://issues.redhat.com/browse/OCPBUGS-33621): docs: Azure WI migration to extract only the credentialRequests needed by the cluster. [#702](https://github.com/openshift/cloud-credential-operator/pull/702)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/4672a9ad086ebcd75ee1ab0fb20af922e26f7029...a836d6794373f8c2f69cef842e5a9f3d92556abe)
### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/779b346c8bccdb8590e403661ca57cc6ac544eb9)
* [SDN-4773](https://issues.redhat.com/browse/SDN-4773): Add support for Azure Managed Service Identity authentication [#151](https://github.com/openshift/cloud-network-config-controller/pull/151)
* NO-JIRA:Update linter file [#146](https://github.com/openshift/cloud-network-config-controller/pull/146)
* [SDN-4924](https://issues.redhat.com/browse/SDN-4924): Rebase 1.30 [#150](https://github.com/openshift/cloud-network-config-controller/pull/150)
* [OCPBUGS-34302](https://issues.redhat.com/browse/OCPBUGS-34302): Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.17 [#148](https://github.com/openshift/cloud-network-config-controller/pull/148)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/8ceee78810756afaa2efb75f60bef0358502834f...779b346c8bccdb8590e403661ca57cc6ac544eb9)
### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/246d3726b1c541ef2bbe6def95783bee60b12a58)
* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#724](https://github.com/openshift/cluster-authentication-operator/pull/724)
* [OCPBUGS-42784](https://issues.redhat.com/browse/OCPBUGS-42784): manifests should not use APIs that are removed in upcoming releases [#712](https://github.com/openshift/cluster-authentication-operator/pull/712)
* [OCPBUGS-42545](https://issues.redhat.com/browse/OCPBUGS-42545): when no type is specified, don't make illegal condition [#703](https://github.com/openshift/cluster-authentication-operator/pull/703)
* [OCPBUGS-39021](https://issues.redhat.com/browse/OCPBUGS-39021): increase oauth-apiserver failureThreshold [#693](https://github.com/openshift/cluster-authentication-operator/pull/693)
* [OCPBUGS-35828](https://issues.redhat.com/browse/OCPBUGS-35828): controller: set ownership annotation for webhook-auth secret [#678](https://github.com/openshift/cluster-authentication-operator/pull/678)
* NO-JIRA: endpoint test: use httpbin [#680](https://github.com/openshift/cluster-authentication-operator/pull/680)
* NO-JIRA: Several fixes for Keycloack IDP test [#679](https://github.com/openshift/cluster-authentication-operator/pull/679)
* NO-JIRA: OWNERS: add ibihim, liouk, rm old [#677](https://github.com/openshift/cluster-authentication-operator/pull/677)
* [OCPBUGS-33654](https://issues.redhat.com/browse/OCPBUGS-33654): update OpenShift favicon to new brand standard [#674](https://github.com/openshift/cluster-authentication-operator/pull/674)
* [OCPBUGS-33654](https://issues.redhat.com/browse/OCPBUGS-33654): update OpenShift favicon to new brand standard [#670](https://github.com/openshift/cluster-authentication-operator/pull/670)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/4782c451e1aab859b7db09aee01af10c1ebf428c...246d3726b1c541ef2bbe6def95783bee60b12a58)
### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/db8cb6812faa09b840d67d16a55277c2f4835ba3)
* [OCPBUGS-45147](https://issues.redhat.com/browse/OCPBUGS-45147): [release-4.17] VPA: Update OWNERS file [#324](https://github.com/openshift/kubernetes-autoscaler/pull/324)
* [OCPBUGS-37498](https://issues.redhat.com/browse/OCPBUGS-37498): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.17 [#311](https://github.com/openshift/kubernetes-autoscaler/pull/311)
* [PODAUTO-202](https://issues.redhat.com/browse/PODAUTO-202): Update VPA ocp/builder Dockerfile images to openshift/release images [#310](https://github.com/openshift/kubernetes-autoscaler/pull/310)
* [PODAUTO-199](https://issues.redhat.com/browse/PODAUTO-199): Upstream rebase to VPA 1.1.2 [#309](https://github.com/openshift/kubernetes-autoscaler/pull/309)
* [OCPBUGS-34242](https://issues.redhat.com/browse/OCPBUGS-34242): Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.17 [#304](https://github.com/openshift/kubernetes-autoscaler/pull/304)
* NO-JIRA: Update OWNERS [#307](https://github.com/openshift/kubernetes-autoscaler/pull/307)
* [OCPCLOUD-2616](https://issues.redhat.com/browse/OCPCLOUD-2616): rebase on upstream 1.30.1 release [#306](https://github.com/openshift/kubernetes-autoscaler/pull/306)
* [OCPBUGS-34428](https://issues.redhat.com/browse/OCPBUGS-34428): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.17 [#305](https://github.com/openshift/kubernetes-autoscaler/pull/305)
* [OCPBUGS-33904](https://issues.redhat.com/browse/OCPBUGS-33904): Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.17 [#302](https://github.com/openshift/kubernetes-autoscaler/pull/302)
* [OCPBUGS-33592](https://issues.redhat.com/browse/OCPBUGS-33592): fix: scale up broken for providers not implementing NodeGroup.GetOptions() [#300](https://github.com/openshift/kubernetes-autoscaler/pull/300)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/eecb123a3b02358046a2c2ce52adfc548a5caa17...db8cb6812faa09b840d67d16a55277c2f4835ba3)
### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/99b23ded9fb70aa29622d0f6c4254e54c51d2813)
* NO-JIRA: Update OWNERS [#329](https://github.com/openshift/cluster-autoscaler-operator/pull/329)
* [OCPBUGS-35952](https://issues.redhat.com/browse/OCPBUGS-35952): add aws zone-id to ignore labels [#328](https://github.com/openshift/cluster-autoscaler-operator/pull/328)
* [OCPCLOUD-2617](https://issues.redhat.com/browse/OCPCLOUD-2617): Bump k8s to 1.30 [#327](https://github.com/openshift/cluster-autoscaler-operator/pull/327)
* [OCPBUGS-34151](https://issues.redhat.com/browse/OCPBUGS-34151): Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.17 [#323](https://github.com/openshift/cluster-autoscaler-operator/pull/323)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/40cadf8a4729ca808a3413e9b8593ab7aab0bed7...99b23ded9fb70aa29622d0f6c4254e54c51d2813)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/2cc85adaec732c9408ca9d6b37b6b9faabe1d30a)
* [OCPBUGS-41926](https://issues.redhat.com/browse/OCPBUGS-41926): SCC-pinning for metal3-baremetal-operator [#444](https://github.com/openshift/cluster-baremetal-operator/pull/444)
* [OCPBUGS-29660](https://issues.redhat.com/browse/OCPBUGS-29660): Ignore provisioning ip config if disabled [#429](https://github.com/openshift/cluster-baremetal-operator/pull/429)
* [METAL-1040](https://issues.redhat.com/browse/METAL-1040): Allow CBO to run without MAPI [#423](https://github.com/openshift/cluster-baremetal-operator/pull/423)
* [METAL-503](https://issues.redhat.com/browse/METAL-503): Remove ironic-inspector [#430](https://github.com/openshift/cluster-baremetal-operator/pull/430)
* [OCPBUGS-29687](https://issues.redhat.com/browse/OCPBUGS-29687): Move Secrets from environment variables to VolumeMounts in metal3-httpd container [#408](https://github.com/openshift/cluster-baremetal-operator/pull/408)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#407](https://github.com/openshift/cluster-baremetal-operator/pull/407)
* [OCPBUGS-29687](https://issues.redhat.com/browse/OCPBUGS-29687): Move pull secret from env var to VolumeMount in metal3-image-customization container [#428](https://github.com/openshift/cluster-baremetal-operator/pull/428)
* [OCPBUGS-35211](https://issues.redhat.com/browse/OCPBUGS-35211): Add capability to metal3-ramdisk-logs container [#424](https://github.com/openshift/cluster-baremetal-operator/pull/424)
* [OCPBUGS-34649](https://issues.redhat.com/browse/OCPBUGS-34649): provisioning: add ownership for tls secret [#422](https://github.com/openshift/cluster-baremetal-operator/pull/422)
* [OCPBUGS-34119](https://issues.redhat.com/browse/OCPBUGS-34119): Upgrade controller-tools and library-go [#421](https://github.com/openshift/cluster-baremetal-operator/pull/421)
* [OCPBUGS-34119](https://issues.redhat.com/browse/OCPBUGS-34119): Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.17 [#419](https://github.com/openshift/cluster-baremetal-operator/pull/419)
* [OCPBUGS-32304](https://issues.redhat.com/browse/OCPBUGS-32304): Run metal3 containers as specific users and groups [#417](https://github.com/openshift/cluster-baremetal-operator/pull/417)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/03738f2d941b836800926fc701202b8d4b9d0605...2cc85adaec732c9408ca9d6b37b6b9faabe1d30a)
### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/95dd9129fa44410a0103fe087d13e27dddecab19)
* [OCPBUGS-34034](https://issues.redhat.com/browse/OCPBUGS-34034): Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.17 [#108](https://github.com/openshift/cluster-bootstrap/pull/108)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/27bfb59fd0ff399224ee673869b8875ef10f1962...95dd9129fa44410a0103fe087d13e27dddecab19)
### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/77ef4fc55392dd02232da73cc06a504659d08b48)
* NO-JIRA: Update OWNERS [#211](https://github.com/openshift/cluster-api/pull/211)
* [OCPCLOUD-2625](https://issues.redhat.com/browse/OCPCLOUD-2625): Merge https://github.com/kubernetes-sigs/cluster-api:v1.7.2 (a5898a2) into master [#210](https://github.com/openshift/cluster-api/pull/210)
* [OCPBUGS-34133](https://issues.redhat.com/browse/OCPBUGS-34133): Updating ose-cluster-api-container image to be consistent with ART for 4.17 [#208](https://github.com/openshift/cluster-api/pull/208)
* [Full changelog](https://github.com/openshift/cluster-api/compare/5830a10a2f545dc25ff4ca4c4efd9005088676aa...77ef4fc55392dd02232da73cc06a504659d08b48)
### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/f4bca806981f51160b5e5d69aa87d6e3cee15dac)
* [OCPBUGS-41576](https://issues.redhat.com/browse/OCPBUGS-41576): Use CAPO v0.10 and API v1beta1 [#205](https://github.com/openshift/cluster-capi-operator/pull/205)
* [OCPBUGS-39309](https://issues.redhat.com/browse/OCPBUGS-39309): manifests-gen: fix: readd missing metadata [#198](https://github.com/openshift/cluster-capi-operator/pull/198)
* [OCPBUGS-37718](https://issues.redhat.com/browse/OCPBUGS-37718): fix: align openstack e2e branch [#191](https://github.com/openshift/cluster-capi-operator/pull/191)
* [OCPBUGS-36296](https://issues.redhat.com/browse/OCPBUGS-36296): fix: sort CredentialsRequest manifests after namespace [#183](https://github.com/openshift/cluster-capi-operator/pull/183)
* [OCPCLOUD-2638](https://issues.redhat.com/browse/OCPCLOUD-2638): Add stricter linting configuration [#186](https://github.com/openshift/cluster-capi-operator/pull/186)
* [OCPCLOUD-2204](https://issues.redhat.com/browse/OCPCLOUD-2204), [OCPCLOUD-2205](https://issues.redhat.com/browse/OCPCLOUD-2205), [OCPCLOUD-2206](https://issues.redhat.com/browse/OCPCLOUD-2206), [OCPCLOUD-2207](https://issues.redhat.com/browse/OCPCLOUD-2207): Add InfraCluster controller + AWSCluster implementation [#169](https://github.com/openshift/cluster-capi-operator/pull/169)
* [OCPCLOUD-2584](https://issues.redhat.com/browse/OCPCLOUD-2584): Implement compression of components in configMap [#170](https://github.com/openshift/cluster-capi-operator/pull/170)
* NO-JIRA: Update OWNERS [#179](https://github.com/openshift/cluster-capi-operator/pull/179)
* [OCPCLOUD-2619](https://issues.redhat.com/browse/OCPCLOUD-2619): Bump CAPI 1.7 and k8s 1.29 [#176](https://github.com/openshift/cluster-capi-operator/pull/176)
* [OCPBUGS-34085](https://issues.redhat.com/browse/OCPBUGS-34085): Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.17 [#174](https://github.com/openshift/cluster-capi-operator/pull/174)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3a2f98fba9180a470d224aa662bb7df5ee5127bf...f4bca806981f51160b5e5d69aa87d6e3cee15dac)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/32fd83999e7eae9941abe7da915bacae1d50e49c)
* [OCPBUGS-43389](https://issues.redhat.com/browse/OCPBUGS-43389): update goimports targets [#371](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/371)
* [OCPBUGS-41941](https://issues.redhat.com/browse/OCPBUGS-41941): IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address [#365](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/365)
* [SPLAT-1720](https://issues.redhat.com/browse/SPLAT-1720): Remove Alibaba [#324](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/324)
* [OCPBUGS-35798](https://issues.redhat.com/browse/OCPBUGS-35798): PowerVS: Remove bind address [#355](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/355)
* NO-JIRA: Update OWNERS [#357](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/357)
* [OCPCLOUD-2609](https://issues.redhat.com/browse/OCPCLOUD-2609): rebase for kubernetes 1.30 [#356](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/356)
* NO-JIRA: openstack: Remove dulek from OWNERS [#345](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/345)
* [OCPBUGS-34144](https://issues.redhat.com/browse/OCPBUGS-34144): Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.17 [#346](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/346)
* [OCPBUGS-34938](https://issues.redhat.com/browse/OCPBUGS-34938): Refactor resourceapply tests [#352](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/352)
* [OCPBUGS-34689](https://issues.redhat.com/browse/OCPBUGS-34689): Nutanix CCM pods Cipher Suites vulnerability issue [#348](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/348)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1c26756f0b4ff5537e32db18d5fb16555f5bd58f...32fd83999e7eae9941abe7da915bacae1d50e49c)
### [cluster-config-api](https://github.com/openshift/api/tree/0a88001628266522c84e6c6c25ed5a44aced6d8b)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): config/v1/types_cluster_version: Add v4.17 capability set [#2023](https://github.com/openshift/api/pull/2023)
* [OCPBUGS-34333](https://issues.redhat.com/browse/OCPBUGS-34333): Updating ose-cluster-config-api-container image to be consistent with ART for 4.17 [#1903](https://github.com/openshift/api/pull/1903)
* features: disable PSA [#2018](https://github.com/openshift/api/pull/2018)
* [OCPBUGS-38355](https://issues.redhat.com/browse/OCPBUGS-38355): Promote AWSEFSDriverVolumeMetrics to GA [#2020](https://github.com/openshift/api/pull/2020)
* [OCPBUGS-39300](https://issues.redhat.com/browse/OCPBUGS-39300): clean up openshift-sdn references in the API [4.17] [#2008](https://github.com/openshift/api/pull/2008)
* [OCPBUGS-38958](https://issues.redhat.com/browse/OCPBUGS-38958): [4.17] add UserNamespacesSupport/ProcMountType to tech preview features [#2011](https://github.com/openshift/api/pull/2011)
* [OCPBUGS-38605](https://issues.redhat.com/browse/OCPBUGS-38605): remove duplicate featuregate 'ExternalRouteCertificate' [#2004](https://github.com/openshift/api/pull/2004)
* [CFE-921](https://issues.redhat.com/browse/CFE-921): Enable GCPLabelsTags featureGate by default for GA [#1971](https://github.com/openshift/api/pull/1971)
* [MULTIARCH-4776](https://issues.redhat.com/browse/MULTIARCH-4776): MULTIARCH-4770: installer: promote MultiArchInstall FGs [#1991](https://github.com/openshift/api/pull/1991)
* Power VS: Move Power VS to CAPI by default [#1979](https://github.com/openshift/api/pull/1979)
* [CORS-3617](https://issues.redhat.com/browse/CORS-3617): Promote Azure CAPI as the default Install method [#1987](https://github.com/openshift/api/pull/1987)
* [STOR-1422](https://issues.redhat.com/browse/STOR-1422): Add field for enabling EFS volume metrics [#1853](https://github.com/openshift/api/pull/1853)
* [SDN-5086](https://issues.redhat.com/browse/SDN-5086): Add API and feature gates for OVN-K BGP support [#1944](https://github.com/openshift/api/pull/1944)
* [NE-1794](https://issues.redhat.com/browse/NE-1794): Promote `eipAllocations` API in GA [#1989](https://github.com/openshift/api/pull/1989)
* [SDN-5186](https://issues.redhat.com/browse/SDN-5186): Add OVNObservability feature gate as Tech Preview. [#1986](https://github.com/openshift/api/pull/1986)
* [AUTH-527](https://issues.redhat.com/browse/AUTH-527): security/v1 - add constant for enforcing psa annotation [#1980](https://github.com/openshift/api/pull/1980)
* [IR-471](https://issues.redhat.com/browse/IR-471): Removing featuregate for chunkSizeMiB config [#1948](https://github.com/openshift/api/pull/1948)
* Run update-payload-crds after update-codegen-crds [#1974](https://github.com/openshift/api/pull/1974)
* [CORS-3594](https://issues.redhat.com/browse/CORS-3594): Setting CAPG as the default infra provider [#1958](https://github.com/openshift/api/pull/1958)
* [NE-1774](https://issues.redhat.com/browse/NE-1774): Promote `IngressControllerLBSubnetsAWS` to GA [#1966](https://github.com/openshift/api/pull/1966)
* [OCPBUGS-35906](https://issues.redhat.com/browse/OCPBUGS-35906): a rule to check if the featureSet is one of the known set of features [#1952](https://github.com/openshift/api/pull/1952)
* featuregate promotion: use latest release instead of hard coding [#1984](https://github.com/openshift/api/pull/1984)
* Add MCP and Config Version columns to MCN output [#1972](https://github.com/openshift/api/pull/1972)
* [MCO-1065](https://issues.redhat.com/browse/MCO-1065): MCO-1171: Promoting ManagedBootImages and NodeDisruptionPolicy to default featureset [#1975](https://github.com/openshift/api/pull/1975)
* [MULTIARCH-4770](https://issues.redhat.com/browse/MULTIARCH-4770): features: move MultiArchInstall[AWS|GCP] to TechPreview [#1973](https://github.com/openshift/api/pull/1973)
* Nutanix mapi: gpus and dataDisks support [#1935](https://github.com/openshift/api/pull/1935)
* [CONSOLE-4161](https://issues.redhat.com/browse/CONSOLE-4161): Add support for lightspeed button integration [#1956](https://github.com/openshift/api/pull/1956)
* [NE-1516](https://issues.redhat.com/browse/NE-1516): Add configuration for AWS Elastic IPs (EIPs) via Ingress Controller CR. [#1826](https://github.com/openshift/api/pull/1826)
* Added Feature Gate for Bootc Update Path [#1969](https://github.com/openshift/api/pull/1969)
* [CORS-3607](https://issues.redhat.com/browse/CORS-3607): Add Azure CAPI installer to tech preview feature set [#1967](https://github.com/openshift/api/pull/1967)
* [OCPNODE-2436](https://issues.redhat.com/browse/OCPNODE-2436): SigstoreImageVerification featuregate marker for the ClusterImagePolicy and ImagePolicy [#1964](https://github.com/openshift/api/pull/1964)
* Feature gate sippy queries to use variant registry [#1909](https://github.com/openshift/api/pull/1909)
* [NE-1530](https://issues.redhat.com/browse/NE-1530): Fix empty subnet list CEL validation [#1961](https://github.com/openshift/api/pull/1961)
* [OCPBUGS-36523](https://issues.redhat.com/browse/OCPBUGS-36523): Rename Dockerfile [#1949](https://github.com/openshift/api/pull/1949)
* [NE-1530](https://issues.redhat.com/browse/NE-1530): IngressController LB Subnet Selection in AWS [#1841](https://github.com/openshift/api/pull/1841)
* [MCO-1215](https://issues.redhat.com/browse/MCO-1215): add ManagedBootImagesAWS to Feature Gate [#1945](https://github.com/openshift/api/pull/1945)
* [OCPBUGS-36469](https://issues.redhat.com/browse/OCPBUGS-36469): Update placementGroupPartition to pointer [#1953](https://github.com/openshift/api/pull/1953)
* [OCPNODE-2358](https://issues.redhat.com/browse/OCPNODE-2358): Update (cluster)imagepolicy doc no restriction on release repo scopes [#1927](https://github.com/openshift/api/pull/1927)
* [OCPBUGS-36213](https://issues.redhat.com/browse/OCPBUGS-36213): Remove the conversion webhook reference from the ConsolePlugin CRD spec [#1946](https://github.com/openshift/api/pull/1946)
* features: add multi-arch feature gate per platform [#1947](https://github.com/openshift/api/pull/1947)
* [MON-3546](https://issues.redhat.com/browse/MON-3546): Add ClusterMonitoringCRD feature gate [#1930](https://github.com/openshift/api/pull/1930)
* [SDN-4934](https://issues.redhat.com/browse/SDN-4934): Add NetworkSegmentation Feature Gate [#1941](https://github.com/openshift/api/pull/1941)
* [OCPBUGS-34906](https://issues.redhat.com/browse/OCPBUGS-34906): Fix IngressController missing listTypes [#1917](https://github.com/openshift/api/pull/1917)
* METAL-1038 Remove baremetal dependency on MachineAPI capability [#1916](https://github.com/openshift/api/pull/1916)
* NO-JIRA: remove beta enabled features from feature gates [#1934](https://github.com/openshift/api/pull/1934)
* [OCPBUGS-34907](https://issues.redhat.com/browse/OCPBUGS-34907): prevent removing featureSet entirely [#1932](https://github.com/openshift/api/pull/1932)
* [CFE-1063](https://issues.redhat.com/browse/CFE-1063): Add PlacementGroupPartition in AWSMachineProviderConfig [#1897](https://github.com/openshift/api/pull/1897)
* Update published Kubebuilder tools [#1924](https://github.com/openshift/api/pull/1924)
* [OCPBUGS-34974](https://issues.redhat.com/browse/OCPBUGS-34974): IBMCloud: Add IBM Cloud Services [#1919](https://github.com/openshift/api/pull/1919)
* [CNV-41151](https://issues.redhat.com/browse/CNV-41151): ipam, virt: add persistent ips feature gate [#1913](https://github.com/openshift/api/pull/1913)
* Adds conditions to MachineSet [#1907](https://github.com/openshift/api/pull/1907)
* Feature gates for platforms, architecture, and installs [#1895](https://github.com/openshift/api/pull/1895)
* [API-1783](https://issues.redhat.com/browse/API-1783): Bump 1.30.1 [#1906](https://github.com/openshift/api/pull/1906)
* [OCPBUGS-33787](https://issues.redhat.com/browse/OCPBUGS-33787): add console and download URLs to console operator config [#1887](https://github.com/openshift/api/pull/1887)
* [OCPCLOUD-2563](https://issues.redhat.com/browse/OCPCLOUD-2563): Add Machine/MachineSet API for MAPI to CAPI migration [#1818](https://github.com/openshift/api/pull/1818)
* [OCPBUGS-33882](https://issues.redhat.com/browse/OCPBUGS-33882): Streamline bootstrap crds [#1899](https://github.com/openshift/api/pull/1899)
* [STOR-1839](https://issues.redhat.com/browse/STOR-1839): promote VSphereDriverConfiguration feature to Accessible-by-default [#1902](https://github.com/openshift/api/pull/1902)
* [API-1783](https://issues.redhat.com/browse/API-1783): bump(k8s): update k8s to v1.30 [#1813](https://github.com/openshift/api/pull/1813)
* [CFE-1047](https://issues.redhat.com/browse/CFE-1047): Add the field "CapacityReservationGroupID" to "AzureMachineProviderSpec" in openshift/api [#1866](https://github.com/openshift/api/pull/1866)
* remove console v1alpha1 which was present since 4.12 [#1856](https://github.com/openshift/api/pull/1856)
* [ETCD-488](https://issues.redhat.com/browse/ETCD-488): Move etcd hardware speed feature to GA [#1844](https://github.com/openshift/api/pull/1844)
* [API-1783](https://issues.redhat.com/browse/API-1783): Promote ValidatingAdmissionPolicy to GA [#1888](https://github.com/openshift/api/pull/1888)
* NO-JIRA: Enable the ibm-cloud-managed cluster profile on network.operator CRD [#1896](https://github.com/openshift/api/pull/1896)
* [Full changelog](https://github.com/openshift/api/compare/b7d0481c9094172326bc9462c4f85b8f3ff0d761...0a88001628266522c84e6c6c25ed5a44aced6d8b)
### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/3f8ae3460b0c9b08f9ea2745dd3911b19017f6f6)
* [CFE-921](https://issues.redhat.com/browse/CFE-921): Update openshift/api package to latest version [#423](https://github.com/openshift/cluster-config-operator/pull/423)
* [OCPBUGS-34178](https://issues.redhat.com/browse/OCPBUGS-34178): Updating ose-cluster-config-operator-container image to be consistent with ART for 4.17 [#419](https://github.com/openshift/cluster-config-operator/pull/419)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/441d29c92b1759d1780a525112e764280b78b0d6...3f8ae3460b0c9b08f9ea2745dd3911b19017f6f6)
### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/f7e01c2f91628b25d1578c0a752f9b55c4233625)
* [OCPBUGS-44047](https://issues.redhat.com/browse/OCPBUGS-44047): relax validation on delete and if failureDomains not configured [#330](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/330)
* [OCPBUGS-38643](https://issues.redhat.com/browse/OCPBUGS-38643): Add 1 minute stabilisation for clusteroperators after rollout [#321](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/321)
* [OCPBUGS-36469](https://issues.redhat.com/browse/OCPBUGS-36469): Bump openshift/api [#315](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/315)
* [CFE-1087](https://issues.redhat.com/browse/CFE-1087): API Bump for capacity Reservation [#313](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/313)
* NO-JIRA: Update OWNERS [#311](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/311)
* NO-JIRA: CPMS Cluster Operator should set related objects [#310](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/310)
* [OCPBUGS-35416](https://issues.redhat.com/browse/OCPBUGS-35416): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#305](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/305)
* [OCPBUGS-35069](https://issues.redhat.com/browse/OCPBUGS-35069): Improved debugging of API listing errors [#297](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/297)
* [OCPBUGS-20061](https://issues.redhat.com/browse/OCPBUGS-20061): Add unreadyNodeGracePeriod for allowing brief node hiccups [#294](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/294)
* [OCPCLOUD-2600](https://issues.redhat.com/browse/OCPCLOUD-2600): Bump deps to k8s v1.30, go 1.22 [#295](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/295)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/14571e8a2c4e9bf52d7cc94da87959a56dc2a44c...f7e01c2f91628b25d1578c0a752f9b55c4233625)
### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/ffba005bf839897b173cb76d0bb561dcf9c7215c)
* [CNV-43972](https://issues.redhat.com/browse/CNV-43972): HCP custom tolerations integration [#214](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/214)
* [STOR-1593](https://issues.redhat.com/browse/STOR-1593): Update api extensions to upstream [#215](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/215)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#213](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/213)
* [OCPBUGS-36528](https://issues.redhat.com/browse/OCPBUGS-36528): Rename Dockerfile [#212](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/212)
* [OCPBUGS-34449](https://issues.redhat.com/browse/OCPBUGS-34449): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.17 [#210](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/210)
* [OCPBUGS-34174](https://issues.redhat.com/browse/OCPBUGS-34174): Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.17 [#209](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/209)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/439826e1a723c094717877db0f2ca1848d0fb10a...ffba005bf839897b173cb76d0bb561dcf9c7215c)
### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/54eea5bb02911cdf0c7fb6dbb80366eb5a923ea7)
* [OCPBUGS-33750](https://issues.redhat.com/browse/OCPBUGS-33750): Bump version of DNSNameResolver controller [#415](https://github.com/openshift/cluster-dns-operator/pull/415)
* [OCPBUGS-34229](https://issues.redhat.com/browse/OCPBUGS-34229): Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.17 [#414](https://github.com/openshift/cluster-dns-operator/pull/414)
* [OCPBUGS-34229](https://issues.redhat.com/browse/OCPBUGS-34229): Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.17 [#413](https://github.com/openshift/cluster-dns-operator/pull/413)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/8ddf28f959955e2b1b319856c0d47ae6729bcc31...54eea5bb02911cdf0c7fb6dbb80366eb5a923ea7)
### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/975fc013a240a003f23e51b9dcd9bfcdb112e801)
* [OCPBUGS-38574](https://issues.redhat.com/browse/OCPBUGS-38574): use pooled client for etcd single member health checks [#1327](https://github.com/openshift/cluster-etcd-operator/pull/1327)
* [OCPBUGS-38454](https://issues.redhat.com/browse/OCPBUGS-38454): prefer env var over hardcoding ciphers [#1316](https://github.com/openshift/cluster-etcd-operator/pull/1316)
* NO-JIRA: degrade targetconfigcontroller on quorum loss [#1309](https://github.com/openshift/cluster-etcd-operator/pull/1309)
* [OCPBUGS-36462](https://issues.redhat.com/browse/OCPBUGS-36462): ensure ordering in member health checks [#1308](https://github.com/openshift/cluster-etcd-operator/pull/1308)
* NO-JIRA: only update envvar listeners on real changes [#1300](https://github.com/openshift/cluster-etcd-operator/pull/1300)
* [ETCD-636](https://issues.redhat.com/browse/ETCD-636): expose PruneOpts [#1297](https://github.com/openshift/cluster-etcd-operator/pull/1297)
* [ETCD-493](https://issues.redhat.com/browse/ETCD-493): Reflect etcd grafana dashboard mixin from upstream [#1291](https://github.com/openshift/cluster-etcd-operator/pull/1291)
* [ETCD-604](https://issues.redhat.com/browse/ETCD-604): Prune revisioned resources [#1292](https://github.com/openshift/cluster-etcd-operator/pull/1292)
* [OCPBUGS-36621](https://issues.redhat.com/browse/OCPBUGS-36621): Force sync on missing etcd-all-bundles configmap [#1296](https://github.com/openshift/cluster-etcd-operator/pull/1296)
* Revert "OCPBUGS-36621: add etcd-all-bundles to cvo create-only" [#1295](https://github.com/openshift/cluster-etcd-operator/pull/1295)
* [ETCD-574](https://issues.redhat.com/browse/ETCD-574): Update TLS artifact descriptions according to registry requ… [#1294](https://github.com/openshift/cluster-etcd-operator/pull/1294)
* [OCPBUGS-36621](https://issues.redhat.com/browse/OCPBUGS-36621): add etcd-all-bundles to cvo create-only [#1293](https://github.com/openshift/cluster-etcd-operator/pull/1293)
* NO-JIRA: only read signer/bundles on forced leaf generation [#1288](https://github.com/openshift/cluster-etcd-operator/pull/1288)
* [OCPBUGS-36301](https://issues.redhat.com/browse/OCPBUGS-36301): parallelize member health checks [#1286](https://github.com/openshift/cluster-etcd-operator/pull/1286)
* [OCPBUGS-36407](https://issues.redhat.com/browse/OCPBUGS-36407): Rename Dockerfile.rhel7 to Dockerfile.ocp [#1289](https://github.com/openshift/cluster-etcd-operator/pull/1289)
* NO-JIRA: cert rotation same assertions [#1285](https://github.com/openshift/cluster-etcd-operator/pull/1285)
* NO-JIRA: fix false positive bootstrap in cert signer controller [#1283](https://github.com/openshift/cluster-etcd-operator/pull/1283)
* NO-JIRA: update library-go [#1281](https://github.com/openshift/cluster-etcd-operator/pull/1281)
* [ETCD-607](https://issues.redhat.com/browse/ETCD-607): gate leaf cert generation (with bundle revision) [#1275](https://github.com/openshift/cluster-etcd-operator/pull/1275)
* NO-JIRA: Update etcd-tls-assets.md [#1195](https://github.com/openshift/cluster-etcd-operator/pull/1195)
* [ETCD-606](https://issues.redhat.com/browse/ETCD-606): Batch bundle revision rollout [#1271](https://github.com/openshift/cluster-etcd-operator/pull/1271)
* NO-JIRA: update library go [#1274](https://github.com/openshift/cluster-etcd-operator/pull/1274)
* [ETCD-620](https://issues.redhat.com/browse/ETCD-620): Update api vendor libraries to get GA'ed tuning profiles [#1264](https://github.com/openshift/cluster-etcd-operator/pull/1264)
* [TRT-1687](https://issues.redhat.com/browse/TRT-1687): Revert #1268 "ETCD-606: Batch bundle revision rollout" [#1270](https://github.com/openshift/cluster-etcd-operator/pull/1270)
* [ETCD-603](https://issues.redhat.com/browse/ETCD-603): add revision helpers [#1267](https://github.com/openshift/cluster-etcd-operator/pull/1267)
* [OCPBUGS-34376](https://issues.redhat.com/browse/OCPBUGS-34376): Updating cluster-etcd-operator-container image to be consistent with ART for 4.17 [#1263](https://github.com/openshift/cluster-etcd-operator/pull/1263)
* NO-JIRA:check the cluster is healthy or not after getting env var, to ensure it is safe to rollout [#1262](https://github.com/openshift/cluster-etcd-operator/pull/1262)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3f2ce4889c255391323d8bdf07dece99e87dbccd...975fc013a240a003f23e51b9dcd9bfcdb112e801)
### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/46b5602933182b749b36727d97f1ee9f9d9ee15e)
* [OCPBUGS-43564](https://issues.redhat.com/browse/OCPBUGS-43564): fix proxy config and leader election test flakes [#1144](https://github.com/openshift/cluster-image-registry-operator/pull/1144)
* [OCPBUGS-43350](https://issues.redhat.com/browse/OCPBUGS-43350): pkg/storage/azure: also check for auth failure error code on deletion [#1139](https://github.com/openshift/cluster-image-registry-operator/pull/1139)
* [OCPBUGS-42812](https://issues.redhat.com/browse/OCPBUGS-42812): azureclient: stop validating credentials when creating the client [#1130](https://github.com/openshift/cluster-image-registry-operator/pull/1130)
* [OCPBUGS-42394](https://issues.redhat.com/browse/OCPBUGS-42394): pkg/storage/azure: use cluster-api tag key to discover vnet [#1125](https://github.com/openshift/cluster-image-registry-operator/pull/1125)
* [OCPBUGS-42362](https://issues.redhat.com/browse/OCPBUGS-42362): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#1124](https://github.com/openshift/cluster-image-registry-operator/pull/1124)
* [OCPBUGS-38538](https://issues.redhat.com/browse/OCPBUGS-38538): Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth [#1103](https://github.com/openshift/cluster-image-registry-operator/pull/1103)
* [OCPBUGS-38885](https://issues.redhat.com/browse/OCPBUGS-38885): pkg/resource: invoke update-ca-trust extract with --output [#1097](https://github.com/openshift/cluster-image-registry-operator/pull/1097)
* [IR-467](https://issues.redhat.com/browse/IR-467), [OCPBUGS-38379](https://issues.redhat.com/browse/OCPBUGS-38379): Enable MSI override for ARO HCP [#1088](https://github.com/openshift/cluster-image-registry-operator/pull/1088)
* [SPLAT-1721](https://issues.redhat.com/browse/SPLAT-1721): Remove alibaba [#1077](https://github.com/openshift/cluster-image-registry-operator/pull/1077)
* [IR-471](https://issues.redhat.com/browse/IR-471): Removing featuregate for chunkSizeMiB config [#1073](https://github.com/openshift/cluster-image-registry-operator/pull/1073)
* Revert "IR-467: Enable Azure MSI authentication" [#1079](https://github.com/openshift/cluster-image-registry-operator/pull/1079)
* [IR-467](https://issues.redhat.com/browse/IR-467): Enable Azure MSI authentication [#1020](https://github.com/openshift/cluster-image-registry-operator/pull/1020)
* [OCPBUGS-37207](https://issues.redhat.com/browse/OCPBUGS-37207): Power VS: Check endpoints against lower case strings [#1076](https://github.com/openshift/cluster-image-registry-operator/pull/1076)
* [IR-471](https://issues.redhat.com/browse/IR-471): Adding additional validation [#1074](https://github.com/openshift/cluster-image-registry-operator/pull/1074)
* [OCPBUGS-36038](https://issues.redhat.com/browse/OCPBUGS-36038): go.*,vendor: bump go-retryablehttp [#1063](https://github.com/openshift/cluster-image-registry-operator/pull/1063)
* [IR-477](https://issues.redhat.com/browse/IR-477): pkg/operator: deactivate azure path fix job [#1061](https://github.com/openshift/cluster-image-registry-operator/pull/1061)
* [IR-471](https://issues.redhat.com/browse/IR-471): Exposing chunksize variable to utilize docker registry config [#1060](https://github.com/openshift/cluster-image-registry-operator/pull/1060)
* [OCPBUGS-34107](https://issues.redhat.com/browse/OCPBUGS-34107): Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 [#1045](https://github.com/openshift/cluster-image-registry-operator/pull/1045)
* [OCPBUGS-34399](https://issues.redhat.com/browse/OCPBUGS-34399): Update rbac for featuregate [#1056](https://github.com/openshift/cluster-image-registry-operator/pull/1056)
* [OCPBUGS-33453](https://issues.redhat.com/browse/OCPBUGS-33453): add SAR capability to image-registry [#1046](https://github.com/openshift/cluster-image-registry-operator/pull/1046)
* [CFE-962](https://issues.redhat.com/browse/CFE-962): Refactor code to mock GCP tag service for UTs [#1027](https://github.com/openshift/cluster-image-registry-operator/pull/1027)
* [OCPBUGS-34399](https://issues.redhat.com/browse/OCPBUGS-34399): Revert "Merge pull request #1026 from deepsm007/expose-chunksize" [#1052](https://github.com/openshift/cluster-image-registry-operator/pull/1052)
* [OCPBUGS-34399](https://issues.redhat.com/browse/OCPBUGS-34399): Exposing chunksize variable to utilize docker registry config [#1026](https://github.com/openshift/cluster-image-registry-operator/pull/1026)
* [OCPBUGS-34107](https://issues.redhat.com/browse/OCPBUGS-34107): Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 [#1040](https://github.com/openshift/cluster-image-registry-operator/pull/1040)
* [OCPBUGS-32710](https://issues.redhat.com/browse/OCPBUGS-32710): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1028](https://github.com/openshift/cluster-image-registry-operator/pull/1028)
* [OCPBUGS-33149](https://issues.redhat.com/browse/OCPBUGS-33149): azure-path-fix: get client secret from k8s secret [#1029](https://github.com/openshift/cluster-image-registry-operator/pull/1029)
* [OCPBUGS-33868](https://issues.redhat.com/browse/OCPBUGS-33868): Bump openshift api, client-go & library-go [#1036](https://github.com/openshift/cluster-image-registry-operator/pull/1036)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/00111bc2e57dfd2c3c1d1da39a2a5ed36de9d068...46b5602933182b749b36727d97f1ee9f9d9ee15e)
### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/cb5306d7f68ba35b9a065d65f46c69a836556cb2)
* [OCPBUGS-39220](https://issues.redhat.com/browse/OCPBUGS-39220): Ingress operator status not degraded when canary route fails [#1136](https://github.com/openshift/cluster-ingress-operator/pull/1136)
* [OCPBUGS-38646](https://issues.redhat.com/browse/OCPBUGS-38646): Clear LB Status Parameters on LB Type Change [#1131](https://github.com/openshift/cluster-ingress-operator/pull/1131)
* [OCPBUGS-38540](https://issues.redhat.com/browse/OCPBUGS-38540): Resolve DNS Resolution CI Flakes in Subnets and EIP E2E [#1129](https://github.com/openshift/cluster-ingress-operator/pull/1129)
* [OCPBUGS-38079](https://issues.redhat.com/browse/OCPBUGS-38079): Bump controller-runtime to v0.18.4 [#1122](https://github.com/openshift/cluster-ingress-operator/pull/1122)
* [NE-1798](https://issues.redhat.com/browse/NE-1798): API bump for promotion of eipAllocation from feature gates to GA. [#1118](https://github.com/openshift/cluster-ingress-operator/pull/1118)
* [NE-1688](https://issues.redhat.com/browse/NE-1688): Enable Azure MSI authentication for ARO HCP [#1119](https://github.com/openshift/cluster-ingress-operator/pull/1119)
* [NE-1674](https://issues.redhat.com/browse/NE-1674): Add LB EIP Allocation for AWS [#1109](https://github.com/openshift/cluster-ingress-operator/pull/1109)
* [NE-1531](https://issues.redhat.com/browse/NE-1531): Fix Initialization of NLB Status Parameters [#1114](https://github.com/openshift/cluster-ingress-operator/pull/1114)
* [NE-1531](https://issues.redhat.com/browse/NE-1531): AWS Subnet Selection [#1046](https://github.com/openshift/cluster-ingress-operator/pull/1046)
* [NE-1273](https://issues.redhat.com/browse/NE-1273): Add a watch to the ingress operator so it will recreate the gwapi crds [#1106](https://github.com/openshift/cluster-ingress-operator/pull/1106)
* [OCPBUGS-37627](https://issues.redhat.com/browse/OCPBUGS-37627): Fix getRouteHost error handling [#1110](https://github.com/openshift/cluster-ingress-operator/pull/1110)
* [NE-1208](https://issues.redhat.com/browse/NE-1208): Gateway API E2E Testing [#1023](https://github.com/openshift/cluster-ingress-operator/pull/1023)
* [OCPBUGS-31664](https://issues.redhat.com/browse/OCPBUGS-31664): Fix SyncLoadBalancerFailed status message of IngressController [#1102](https://github.com/openshift/cluster-ingress-operator/pull/1102)
* [OCPBUGS-36465](https://issues.redhat.com/browse/OCPBUGS-36465): Delete and recreate canary route to clear spec.host [#1095](https://github.com/openshift/cluster-ingress-operator/pull/1095)
* [OCPBUGS-34413](https://issues.redhat.com/browse/OCPBUGS-34413): Refine logging for accurate infra CR status updates [#1103](https://github.com/openshift/cluster-ingress-operator/pull/1103)
* [OCPBUGS-35342](https://issues.redhat.com/browse/OCPBUGS-35342): Add e2e test for connect timeout [#1084](https://github.com/openshift/cluster-ingress-operator/pull/1084)
* NO-JIRA: Add grzpiotrowski to OWNERS [#1090](https://github.com/openshift/cluster-ingress-operator/pull/1090)
* NO-JIRA: addowner-Thealisyed [#1091](https://github.com/openshift/cluster-ingress-operator/pull/1091)
* [OCPBUGS-35356](https://issues.redhat.com/browse/OCPBUGS-35356): Retry IngressController updates in router status E2E [#1085](https://github.com/openshift/cluster-ingress-operator/pull/1085)
* [OCPBUGS-9037](https://issues.redhat.com/browse/OCPBUGS-9037): Change Canary to use passthrough route [#978](https://github.com/openshift/cluster-ingress-operator/pull/978)
* [OCPBUGS-35368](https://issues.redhat.com/browse/OCPBUGS-35368): Add Regexp Anchor to TestAll [#1087](https://github.com/openshift/cluster-ingress-operator/pull/1087)
* [OCPBUGS-23221](https://issues.redhat.com/browse/OCPBUGS-23221): internalServiceChanged: Fix target port logic [#1052](https://github.com/openshift/cluster-ingress-operator/pull/1052)
* [OCPBUGS-34262](https://issues.redhat.com/browse/OCPBUGS-34262): Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.17 [#1067](https://github.com/openshift/cluster-ingress-operator/pull/1067)
* [NE-1400](https://issues.redhat.com/browse/NE-1400): Bump to OSSM 2.5 and Gateway API v0.6.2 CRDs [#1018](https://github.com/openshift/cluster-ingress-operator/pull/1018)
* [OCPBUGS-33792](https://issues.redhat.com/browse/OCPBUGS-33792): Bump openshift/library-go to resolve NewPrometheusClient E2E failures [#1054](https://github.com/openshift/cluster-ingress-operator/pull/1054)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/57f9674e75908ca11b24792fb9f077233cd7bcf1...cb5306d7f68ba35b9a065d65f46c69a836556cb2)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/aa95a2b0ecfe4892d6a936bb2da58412edce0fe0)
* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#1758](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1758)
* [OCPBUGS-34310](https://issues.redhat.com/browse/OCPBUGS-34310): Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.17 [#1738](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1738)
* [OCPBUGS-41874](https://issues.redhat.com/browse/OCPBUGS-41874): increase kube-apiserver failureThreshold [#1733](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1733)
* [OCPBUGS-34679](https://issues.redhat.com/browse/OCPBUGS-34679): revert dev cert rotation 4.17 [#1729](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1729)
* [OCPBUGS-34942](https://issues.redhat.com/browse/OCPBUGS-34942): Update APIRemovedInNextReleaseInUse for kube 1.30 / ocp 4.17 [#1698](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1698)
* NO-JIRA: nodekubeconfigcontroller: set ownership component for node kubeconfigs [#1704](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1704)
* [AUTH-521](https://issues.redhat.com/browse/AUTH-521): add disabled syncer as reason to CFE for PSA [#1686](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1686)
* NO-JIRA: update library-go [#1703](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1703)
* [OCPEDGE-1102](https://issues.redhat.com/browse/OCPEDGE-1102): Revert high cpu usage alert description [#1680](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1680)
* [OCPEDGE-902](https://issues.redhat.com/browse/OCPEDGE-902): add SNO control plane high cpu usage alert [#1676](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1676)
* [OCPBUGS-34782](https://issues.redhat.com/browse/OCPBUGS-34782): manifests: add ownership annotation for kubelet-bootstrap-kubeconfig [#1694](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1694)
* [OCPBUGS-34544](https://issues.redhat.com/browse/OCPBUGS-34544): Disable PersistentVolumeLabel admission plugin [#1693](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1693)
* [OCPBUGS-34800](https://issues.redhat.com/browse/OCPBUGS-34800): Update APIRemovedInNextReleaseInUse for kube 1.30 / ocp 4.17 [#1697](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1697)
* [OCPBUGS-33963](https://issues.redhat.com/browse/OCPBUGS-33963): Create one-shot migrations for the flowcontrol group. [#1689](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1689)
* [API-1783](https://issues.redhat.com/browse/API-1783): bump(k8s): update k8s version to v1.30.0 [#1666](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1666)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/de2f2ac2fc9a811bd2b1db4f912c5a0092bfc3d0...aa95a2b0ecfe4892d6a936bb2da58412edce0fe0)
### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/aed5f6c74a0e174901709f18eecad6573cd80784)
* [OCPBUGS-42612](https://issues.redhat.com/browse/OCPBUGS-42612): Sync Release 4.17 with UPSTREAM [#48](https://github.com/openshift/cluster-api-operator/pull/48)
* UPSTREAM: <carry>: OCPBUGS-30487: Bump google.golang.org/protobuf [#39](https://github.com/openshift/cluster-api-operator/pull/39)
* NO-JIRA: Update OWNERS [#40](https://github.com/openshift/cluster-api-operator/pull/40)
* [OCPBUGS-34084](https://issues.redhat.com/browse/OCPBUGS-34084): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.17 [#38](https://github.com/openshift/cluster-api-operator/pull/38)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/95ceaa9e2e1fea94e82e078a77633c8cd105a3c7...aed5f6c74a0e174901709f18eecad6573cd80784)
### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0a9ed573e35751455bfb24842fd2de0b05379ed0)
* NO-JIRA: update library-go [#814](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/814)
* [OCPBUGS-34859](https://issues.redhat.com/browse/OCPBUGS-34859): manifests: set owning-component for csr-signer-signer [#812](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/812)
* [OCPBUGS-34281](https://issues.redhat.com/browse/OCPBUGS-34281): Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.17 [#813](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/813)
* [API-1783](https://issues.redhat.com/browse/API-1783): bump(k8s): bump k8s version to v1.30.0 [#803](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/803)
* [OCPCLOUD-2513](https://issues.redhat.com/browse/OCPCLOUD-2513): Remove cloud-provider, cloud-config, and cloud-volume-plugin flags [#806](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/806)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/0338b3be6912024d03def2c26f0fa10218fc2c25...0a9ed573e35751455bfb24842fd2de0b05379ed0)
### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/796d029c836e76e9312aefabf72fdde028a286b3)
* NO-JIRA: update library-go [#544](https://github.com/openshift/cluster-kube-scheduler-operator/pull/544)
* [OCPBUGS-34367](https://issues.redhat.com/browse/OCPBUGS-34367): Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.17 [#543](https://github.com/openshift/cluster-kube-scheduler-operator/pull/543)
* [API-1783](https://issues.redhat.com/browse/API-1783): bump(k8s): bump k8s version to v1.30.0 [#540](https://github.com/openshift/cluster-kube-scheduler-operator/pull/540)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/630f63bc7a30d2662bbb5115233144079de6eef6...796d029c836e76e9312aefabf72fdde028a286b3)
### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/a0d27f3f04cb61084fef767c2df5bcc7b3db2d27)
* NO-JIRA: bump(*) [#113](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/113)
* [OCPBUGS-34306](https://issues.redhat.com/browse/OCPBUGS-34306): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 [#110](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/110)
* [OCPBUGS-34306](https://issues.redhat.com/browse/OCPBUGS-34306): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 [#109](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/109)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e825811333c05b705c35d2e9a9a62e55e9ab0935...a0d27f3f04cb61084fef767c2df5bcc7b3db2d27)
### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/32c847111e45313f34d615196d00aeeffd50a281)
* [OCPBUGS-43312](https://issues.redhat.com/browse/OCPBUGS-43312): Client internal DNS checks should be case insensitive [#242](https://github.com/openshift/cluster-machine-approver/pull/242)
* NO-JIRA: Update OWNERS [#236](https://github.com/openshift/cluster-machine-approver/pull/236)
* [OCPCLOUD-2602](https://issues.redhat.com/browse/OCPCLOUD-2602): Update dependencies to Kube 1.30 [#235](https://github.com/openshift/cluster-machine-approver/pull/235)
* [OCPBUGS-34138](https://issues.redhat.com/browse/OCPBUGS-34138): Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.17 [#232](https://github.com/openshift/cluster-machine-approver/pull/232)
* [OCPBUGS-33644](https://issues.redhat.com/browse/OCPBUGS-33644): check for machine crd before listing machines [#231](https://github.com/openshift/cluster-machine-approver/pull/231)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/7fbf7f22ad6779c17414fc3072e2ea70cc2625c5...32c847111e45313f34d615196d00aeeffd50a281)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/15bded36cc8392cd88e28634b8b63dd83934867c)
* [OCPBUGS-44003](https://issues.redhat.com/browse/OCPBUGS-44003): fix(monitoring-plugin): disable emitting nginx version on error pages [#2511](https://github.com/openshift/cluster-monitoring-operator/pull/2511)
* [OCPBUGS-43690](https://issues.redhat.com/browse/OCPBUGS-43690): chore: introduce a config parsing check via a strict unmarshaller for… [#2494](https://github.com/openshift/cluster-monitoring-operator/pull/2494)
* [OCPBUGS-43788](https://issues.redhat.com/browse/OCPBUGS-43788): Add runbook url for TelemeterClientFailures [#2507](https://github.com/openshift/cluster-monitoring-operator/pull/2507)
* [OCPBUGS-43545](https://issues.redhat.com/browse/OCPBUGS-43545): Fix api doc on Thanos Ruler default retention [#2501](https://github.com/openshift/cluster-monitoring-operator/pull/2501)
* [OCPBUGS-41341](https://issues.redhat.com/browse/OCPBUGS-41341): disable user-defined monitoring per object [#2458](https://github.com/openshift/cluster-monitoring-operator/pull/2458)
* [OCPBUGS-41908](https://issues.redhat.com/browse/OCPBUGS-41908): filter alerts sent to Telemeter [#2470](https://github.com/openshift/cluster-monitoring-operator/pull/2470)
* [OCPBUGS-41580](https://issues.redhat.com/browse/OCPBUGS-41580): Configure graceful shutdown for metrics-server (4.17 backport) [#2463](https://github.com/openshift/cluster-monitoring-operator/pull/2463)
* [OCPBUGS-39029](https://issues.redhat.com/browse/OCPBUGS-39029): Backport #2441 for 4.17 [#2445](https://github.com/openshift/cluster-monitoring-operator/pull/2445)
* [MON-3972](https://issues.redhat.com/browse/MON-3972): [bot] Synchronize versions of the downstream components [#2434](https://github.com/openshift/cluster-monitoring-operator/pull/2434)
* [OCPBUGS-17506](https://issues.redhat.com/browse/OCPBUGS-17506): Make error messages clearer on poll timeouts [#2417](https://github.com/openshift/cluster-monitoring-operator/pull/2417)
* [MON-3964](https://issues.redhat.com/browse/MON-3964): set scrape timestamp tolerance for user workload monitoring [#2429](https://github.com/openshift/cluster-monitoring-operator/pull/2429)
* [MON-3961](https://issues.redhat.com/browse/MON-3961): inject proxy env variables in Alertmanager [#2424](https://github.com/openshift/cluster-monitoring-operator/pull/2424)
* [MON-3949](https://issues.redhat.com/browse/MON-3949): [bot] Synchronize versions of the downstream components [#2419](https://github.com/openshift/cluster-monitoring-operator/pull/2419)
* [MON-3900](https://issues.redhat.com/browse/MON-3900): follow-up: clean up operator logic and some tests now that metrics-server is the default Metrics API backend [#2425](https://github.com/openshift/cluster-monitoring-operator/pull/2425)
* [OCPBUGS-37686](https://issues.redhat.com/browse/OCPBUGS-37686): fix documentation typos [#2427](https://github.com/openshift/cluster-monitoring-operator/pull/2427)
* NO-JIRA: fix: fix a small typo [#2426](https://github.com/openshift/cluster-monitoring-operator/pull/2426)
* [MON-3921](https://issues.redhat.com/browse/MON-3921): Revert "Revert "Merge pull request #2392 from machine424/f-… [#2403](https://github.com/openshift/cluster-monitoring-operator/pull/2403)
* [MON-3959](https://issues.redhat.com/browse/MON-3959): Skip TestTLSSecurityProfileConfiguration as disruptive [#2423](https://github.com/openshift/cluster-monitoring-operator/pull/2423)
* [MON-3900](https://issues.redhat.com/browse/MON-3900): Remove prometheus-adapter code [#2409](https://github.com/openshift/cluster-monitoring-operator/pull/2409)
* [MON-3947](https://issues.redhat.com/browse/MON-3947): [bot] Synchronize versions of the downstream components [#2418](https://github.com/openshift/cluster-monitoring-operator/pull/2418)
* [MON-3947](https://issues.redhat.com/browse/MON-3947): [bot] Synchronize versions of the downstream components [#2414](https://github.com/openshift/cluster-monitoring-operator/pull/2414)
* [MON-3947](https://issues.redhat.com/browse/MON-3947): Bump prometheus-operator to 0.75.1 [#2416](https://github.com/openshift/cluster-monitoring-operator/pull/2416)
* [MON-2065](https://issues.redhat.com/browse/MON-2065): jsonnet: exclude `kubernetes-storage` rules [#2377](https://github.com/openshift/cluster-monitoring-operator/pull/2377)
* [OCPBUGS-36495](https://issues.redhat.com/browse/OCPBUGS-36495): Add deprecated config runbook [#2410](https://github.com/openshift/cluster-monitoring-operator/pull/2410)
* [OCPBUGS-31250](https://issues.redhat.com/browse/OCPBUGS-31250): Exclude windows nodes from kubelet servicemonitor [#2368](https://github.com/openshift/cluster-monitoring-operator/pull/2368)
* [OCPBUGS-36406](https://issues.redhat.com/browse/OCPBUGS-36406): add runbook_url annotations [#2401](https://github.com/openshift/cluster-monitoring-operator/pull/2401)
* [MON-3914](https://issues.redhat.com/browse/MON-3914): add a regression test for gogc based on the go_gc_gogc_percent metric [#2393](https://github.com/openshift/cluster-monitoring-operator/pull/2393)
* [MON-3914](https://issues.redhat.com/browse/MON-3914): [bot] Synchronize versions of the downstream components [#2394](https://github.com/openshift/cluster-monitoring-operator/pull/2394)
* [OCPBUGS-36299](https://issues.redhat.com/browse/OCPBUGS-36299): Revert #2392 "MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber…" [#2398](https://github.com/openshift/cluster-monitoring-operator/pull/2398)
* [MON-3800](https://issues.redhat.com/browse/MON-3800): jsonnet: update prometheus dep to fetch the PrometheusKuber… [#2392](https://github.com/openshift/cluster-monitoring-operator/pull/2392)
* [OCPBUGS-35480](https://issues.redhat.com/browse/OCPBUGS-35480): Add deprecation for prometheus adapter [#2381](https://github.com/openshift/cluster-monitoring-operator/pull/2381)
* [MON-3915](https://issues.redhat.com/browse/MON-3915): chore: bump Go dependencies [#2387](https://github.com/openshift/cluster-monitoring-operator/pull/2387)
* [MON-3914](https://issues.redhat.com/browse/MON-3914): adjust Prometheus GOGC based on infra topology [#2390](https://github.com/openshift/cluster-monitoring-operator/pull/2390)
* [OCPBUGS-32696](https://issues.redhat.com/browse/OCPBUGS-32696): opt-out of multi-cluster Prometheus dashboard [#2351](https://github.com/openshift/cluster-monitoring-operator/pull/2351)
* [OCPBUGS-35397](https://issues.redhat.com/browse/OCPBUGS-35397): attach runbook to the PrometheusDuplicateTimestamps alert [#2365](https://github.com/openshift/cluster-monitoring-operator/pull/2365)
* [MON-3905](https://issues.redhat.com/browse/MON-3905): [bot] Synchronize versions of the downstream components [#2382](https://github.com/openshift/cluster-monitoring-operator/pull/2382)
* [MON-3894](https://issues.redhat.com/browse/MON-3894): revert(monitoring-plugin): undo nginx caching tweaks as the issue was… [#2380](https://github.com/openshift/cluster-monitoring-operator/pull/2380)
* [MON-3795](https://issues.redhat.com/browse/MON-3795), [SDN-3817](https://issues.redhat.com/browse/SDN-3817): Expose OVNKubernetes:AdminNetworkPolicy Metrics via telemetry [#2297](https://github.com/openshift/cluster-monitoring-operator/pull/2297)
* [MON-3897](https://issues.redhat.com/browse/MON-3897): [bot] Synchronize versions of the downstream components [#2378](https://github.com/openshift/cluster-monitoring-operator/pull/2378)
* [OBSDOCS-883](https://issues.redhat.com/browse/OBSDOCS-883): change docs to correct retention time uwm prometheus [#2277](https://github.com/openshift/cluster-monitoring-operator/pull/2277)
* [MON-3884](https://issues.redhat.com/browse/MON-3884): Send metric acm_managed_cluster_worker_cores via Telemetry [#2367](https://github.com/openshift/cluster-monitoring-operator/pull/2367)
* [MON-3887](https://issues.redhat.com/browse/MON-3887), [MON-3889](https://issues.redhat.com/browse/MON-3889): [bot] Synchronize versions of the downstream components [#2376](https://github.com/openshift/cluster-monitoring-operator/pull/2376)
* [MON-3888](https://issues.redhat.com/browse/MON-3888): bump go tools 1.22 [#2375](https://github.com/openshift/cluster-monitoring-operator/pull/2375)
* [MON-3882](https://issues.redhat.com/browse/MON-3882): [bot] Synchronize versions of the downstream components [#2371](https://github.com/openshift/cluster-monitoring-operator/pull/2371)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up injection of CA bundle for user Alertmanager [#2361](https://github.com/openshift/cluster-monitoring-operator/pull/2361)
* [OCPBUGS-33645](https://issues.redhat.com/browse/OCPBUGS-33645): inject trusted CA bundle into UWM Alertmanager [#2349](https://github.com/openshift/cluster-monitoring-operator/pull/2349)
* [OCPBUGS-34437](https://issues.redhat.com/browse/OCPBUGS-34437): Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 [#2372](https://github.com/openshift/cluster-monitoring-operator/pull/2372)
* [MON-3881](https://issues.redhat.com/browse/MON-3881): chore: remove hack/ocp-images.sh [#2366](https://github.com/openshift/cluster-monitoring-operator/pull/2366)
* [MON-3801](https://issues.redhat.com/browse/MON-3801): clean-up unused OAuth proxy references [#2359](https://github.com/openshift/cluster-monitoring-operator/pull/2359)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up injection of CA bundle for user Prometheus [#2362](https://github.com/openshift/cluster-monitoring-operator/pull/2362)
* [MON-3874](https://issues.redhat.com/browse/MON-3874): chore: poll immediately in the e2e tests [#2356](https://github.com/openshift/cluster-monitoring-operator/pull/2356)
* [MON-3701](https://issues.redhat.com/browse/MON-3701): clean-up tests [#2360](https://github.com/openshift/cluster-monitoring-operator/pull/2360)
* [OCPBUGS-33955](https://issues.redhat.com/browse/OCPBUGS-33955): remove deprecated logtostderr argument [#2355](https://github.com/openshift/cluster-monitoring-operator/pull/2355)
* [OCPBUGS-33686](https://issues.redhat.com/browse/OCPBUGS-33686): [bot] Synchronize versions of the downstream components [#2363](https://github.com/openshift/cluster-monitoring-operator/pull/2363)
* [OCPBUGS-23000](https://issues.redhat.com/browse/OCPBUGS-23000): node-exporter: Prevent cluster-autoscaler from evicting [#2346](https://github.com/openshift/cluster-monitoring-operator/pull/2346)
* [MON-3763](https://issues.redhat.com/browse/MON-3763): Add cnv_abnormal [#2291](https://github.com/openshift/cluster-monitoring-operator/pull/2291)
* [OCPBUGS-34080](https://issues.redhat.com/browse/OCPBUGS-34080): Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 [#2358](https://github.com/openshift/cluster-monitoring-operator/pull/2358)
* : NO-JIRA: Fix formatting in the resources documentation [#2353](https://github.com/openshift/cluster-monitoring-operator/pull/2353)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/c2c204a1244adc54d7b31ec35766b82bf6db413d...15bded36cc8392cd88e28634b8b63dd83934867c)
### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/7768811ef167eb33a0eaafc5c3eb30fdd02470fd)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): OVN-Kubernetes node RBAC tightening [#2568](https://github.com/openshift/cluster-network-operator/pull/2568)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-5297](https://issues.redhat.com/browse/SDN-5297), [SDN-5472](https://issues.redhat.com/browse/SDN-5472): bindata, ovn-k: Add ClusterUserDefinedNetwork CRD and RBAC [#2566](https://github.com/openshift/cluster-network-operator/pull/2566)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): ovn-k, udn: Update UserDefinedNetwork CRD [#2551](https://github.com/openshift/cluster-network-operator/pull/2551)
* [OCPBUGS-44807](https://issues.redhat.com/browse/OCPBUGS-44807), [SDN-4930](https://issues.redhat.com/browse/SDN-4930), [SDN-5297](https://issues.redhat.com/browse/SDN-5297): Adds UDN list/watch to ovnknode rbac [#2540](https://github.com/openshift/cluster-network-operator/pull/2540)
* [OCPBUGS-44779](https://issues.redhat.com/browse/OCPBUGS-44779), [SDN-5436](https://issues.redhat.com/browse/SDN-5436): Provide support for user owned IPsec machine configs [#2564](https://github.com/openshift/cluster-network-operator/pull/2564)
* [OCPBUGS-44330](https://issues.redhat.com/browse/OCPBUGS-44330): Add controlplane cli image envar for use with hypershift [#2542](https://github.com/openshift/cluster-network-operator/pull/2542)
* [OCPBUGS-43343](https://issues.redhat.com/browse/OCPBUGS-43343): OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration [#2536](https://github.com/openshift/cluster-network-operator/pull/2536)
* [OCPBUGS-43317](https://issues.redhat.com/browse/OCPBUGS-43317): Use CNIConfDir for mounting directory to ovn-ipsec-host pod [#2533](https://github.com/openshift/cluster-network-operator/pull/2533)
* [OCPBUGS-39300](https://issues.redhat.com/browse/OCPBUGS-39300): rebase openshift/api for openshift-sdn removal [4.17] [#2477](https://github.com/openshift/cluster-network-operator/pull/2477)
* [OCPBUGS-39121](https://issues.redhat.com/browse/OCPBUGS-39121): Live migration: report network overlap via live_migration_blocked metric [#2483](https://github.com/openshift/cluster-network-operator/pull/2483)
* [OCPBUGS-42260](https://issues.redhat.com/browse/OCPBUGS-42260): Configure narrowing=yes for IPsec connections [#2510](https://github.com/openshift/cluster-network-operator/pull/2510)
* [OCPBUGS-41674](https://issues.redhat.com/browse/OCPBUGS-41674): Add configurable subnets while running hybrid-overlay-node binary [#2497](https://github.com/openshift/cluster-network-operator/pull/2497)
* [OCPBUGS-41591](https://issues.redhat.com/browse/OCPBUGS-41591): Set required-scc for openshift workloads [#2490](https://github.com/openshift/cluster-network-operator/pull/2490)
* [OCPBUGS-39313](https://issues.redhat.com/browse/OCPBUGS-39313): HyperShift: do not use antiaffinity on single replica control planes [#2486](https://github.com/openshift/cluster-network-operator/pull/2486)
* [OCPBUGS-39387](https://issues.redhat.com/browse/OCPBUGS-39387): add required-scc annotation to console-plugin deployment [#2487](https://github.com/openshift/cluster-network-operator/pull/2487)
* [OCPBUGS-39425](https://issues.redhat.com/browse/OCPBUGS-39425): Preload networking plugin locales [#2489](https://github.com/openshift/cluster-network-operator/pull/2489)
* [OCPBUGS-38932](https://issues.redhat.com/browse/OCPBUGS-38932): Deploy networking-console-plugin by CNO [#2478](https://github.com/openshift/cluster-network-operator/pull/2478)
* [OCPBUGS-38932](https://issues.redhat.com/browse/OCPBUGS-38932): Add networking-console-plugin image to release payload [#2474](https://github.com/openshift/cluster-network-operator/pull/2474)
* [OCPBUGS-38654](https://issues.redhat.com/browse/OCPBUGS-38654): [release-4.17] Verify that the codegen changes were commited [#2475](https://github.com/openshift/cluster-network-operator/pull/2475)
* [OCPBUGS-38364](https://issues.redhat.com/browse/OCPBUGS-38364): OVN-K, UDN CRD: Add missing permissions to control-plane [#2472](https://github.com/openshift/cluster-network-operator/pull/2472)
* [OCPBUGS-38176](https://issues.redhat.com/browse/OCPBUGS-38176): multus, Add openshift-cnv to globalNamespace [#2466](https://github.com/openshift/cluster-network-operator/pull/2466)
* [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Change the masquerade subnet default value for new clusters [#2460](https://github.com/openshift/cluster-network-operator/pull/2460)
* [SDN-5072](https://issues.redhat.com/browse/SDN-5072): Deploy FRR-K8s [#2450](https://github.com/openshift/cluster-network-operator/pull/2450)
* [SDN-5144](https://issues.redhat.com/browse/SDN-5144): Add UserDefinedNetwork CRD and RBAC [#2464](https://github.com/openshift/cluster-network-operator/pull/2464)
* [SDN-4773](https://issues.redhat.com/browse/SDN-4773): Add Azure MSI Env Var for ARO HCP [#2465](https://github.com/openshift/cluster-network-operator/pull/2465)
* NO-JIRA: more openshift-sdn cleanup [#2455](https://github.com/openshift/cluster-network-operator/pull/2455)
* [SDN-5070](https://issues.redhat.com/browse/SDN-5070): Allow day 2 customization of masquerade subnet [#2421](https://github.com/openshift/cluster-network-operator/pull/2421)
* [OCPBUGS-37786](https://issues.redhat.com/browse/OCPBUGS-37786): Add proxy env vars to onvkube-node [#2453](https://github.com/openshift/cluster-network-operator/pull/2453)
* [OCPBUGS-37713](https://issues.redhat.com/browse/OCPBUGS-37713): Handle random crictl errors in iptables-alerter [#2451](https://github.com/openshift/cluster-network-operator/pull/2451)
* [CNV-43973](https://issues.redhat.com/browse/CNV-43973): HCP custom tolerations integration [#2441](https://github.com/openshift/cluster-network-operator/pull/2441)
* [SDN-4919](https://issues.redhat.com/browse/SDN-4919): OVN-Kubernetes UDN: EndpointSlice mirror controller RBAC permissions [#2448](https://github.com/openshift/cluster-network-operator/pull/2448)
* [SDN-4934](https://issues.redhat.com/browse/SDN-4934): Enable TechPreview FeatureGate for NetworkSegmentation [#2433](https://github.com/openshift/cluster-network-operator/pull/2433)
* [OCPBUGS-33758](https://issues.redhat.com/browse/OCPBUGS-33758): Fix IC distributed control plane alerts [#2406](https://github.com/openshift/cluster-network-operator/pull/2406)
* [SDN-5029](https://issues.redhat.com/browse/SDN-5029): ipam, virt: enable the persistent ips feature [#2431](https://github.com/openshift/cluster-network-operator/pull/2431)
* [SDN-4916](https://issues.redhat.com/browse/SDN-4916): Bump to k8s v1.30 latest [#2429](https://github.com/openshift/cluster-network-operator/pull/2429)
* [OCPBUGS-30950](https://issues.redhat.com/browse/OCPBUGS-30950): Set mount propagation to HostToContainer for /var/lib/kubelet [#2368](https://github.com/openshift/cluster-network-operator/pull/2368)
* [SDN-4934](https://issues.redhat.com/browse/SDN-4934): Network Segmentation Feature Gate Vendoring from API [#2428](https://github.com/openshift/cluster-network-operator/pull/2428)
* [OCPBUGS-23758](https://issues.redhat.com/browse/OCPBUGS-23758): Set global IP forwarding sysctl parameters while starting ovnkube-node [#2385](https://github.com/openshift/cluster-network-operator/pull/2385)
* [OCPBUGS-29648](https://issues.redhat.com/browse/OCPBUGS-29648): update whereabouts crd [#2414](https://github.com/openshift/cluster-network-operator/pull/2414)
* [OCPBUGS-31878](https://issues.redhat.com/browse/OCPBUGS-31878): Propogate hypershift control plane priority class override to multus and preserve container resource requests [#2335](https://github.com/openshift/cluster-network-operator/pull/2335)
* [OCPBUGS-35316](https://issues.redhat.com/browse/OCPBUGS-35316): Create the configmap mtu if not found [#2410](https://github.com/openshift/cluster-network-operator/pull/2410)
* [OCPBUGS-34313](https://issues.redhat.com/browse/OCPBUGS-34313): Updating cluster-network-operator-container image to be consistent with ART for 4.17 [#2381](https://github.com/openshift/cluster-network-operator/pull/2381)
* [OCPBUGS-30948](https://issues.redhat.com/browse/OCPBUGS-30948): Use applyconfigurations for updating network.oprerator status [#2333](https://github.com/openshift/cluster-network-operator/pull/2333)
* [SDN-5029](https://issues.redhat.com/browse/SDN-5029): linter: removed deprecated linters [#2408](https://github.com/openshift/cluster-network-operator/pull/2408)
* [OCPBUGS-23000](https://issues.redhat.com/browse/OCPBUGS-23000): Adds cluster-autoscaler annotation to prevent eviction [#2369](https://github.com/openshift/cluster-network-operator/pull/2369)
* [OCPBUGS-33497](https://issues.redhat.com/browse/OCPBUGS-33497): Limit iptables-alerter's cpu [#2401](https://github.com/openshift/cluster-network-operator/pull/2401)
* [SDN-4896](https://issues.redhat.com/browse/SDN-4896): Drop openshift-sdn support [#2384](https://github.com/openshift/cluster-network-operator/pull/2384)
* [NP-976](https://issues.redhat.com/browse/NP-976), [OCPBUGS-34658](https://issues.redhat.com/browse/OCPBUGS-34658): Live migration: add metrics to observe CNI live migration [#2388](https://github.com/openshift/cluster-network-operator/pull/2388)
* [OCPBUGS-34858](https://issues.redhat.com/browse/OCPBUGS-34858), [OCPBUGS-34916](https://issues.redhat.com/browse/OCPBUGS-34916): Validate live migration before setting the progressing condition [#2399](https://github.com/openshift/cluster-network-operator/pull/2399)
* [OCPBUGS-34524](https://issues.redhat.com/browse/OCPBUGS-34524): Fix DNSResolver feature gate enablement [#2387](https://github.com/openshift/cluster-network-operator/pull/2387)
* [MON-3795](https://issues.redhat.com/browse/MON-3795), [SDN-3817](https://issues.redhat.com/browse/SDN-3817): Add ANP metric rule expressions for telemetry exposure [#2347](https://github.com/openshift/cluster-network-operator/pull/2347)
* [OCPBUGS-33497](https://issues.redhat.com/browse/OCPBUGS-33497): Handle pod exiting race conditions in iptables-alerter [#2377](https://github.com/openshift/cluster-network-operator/pull/2377)
* [OCPBUGS-31876](https://issues.redhat.com/browse/OCPBUGS-31876): Enable UDP aggregation on s390x [#2331](https://github.com/openshift/cluster-network-operator/pull/2331)
* [OCPBUGS-34359](https://issues.redhat.com/browse/OCPBUGS-34359): Ensure that the node-identity webhook address contains colons for IPv6 [#2382](https://github.com/openshift/cluster-network-operator/pull/2382)
* [NP-975](https://issues.redhat.com/browse/NP-975): Align new node subnet allocation between OVN-K and SDN during live migration [#2367](https://github.com/openshift/cluster-network-operator/pull/2367)
* [OCPBUGS-32991](https://issues.redhat.com/browse/OCPBUGS-32991): Add conditions for ignored-namespaces [#2358](https://github.com/openshift/cluster-network-operator/pull/2358)
* [NP-974](https://issues.redhat.com/browse/NP-974): Validation for live migration from OpenShiftSDN to OVNKubernetes [#2344](https://github.com/openshift/cluster-network-operator/pull/2344)
* [OCPBUGS-33728](https://issues.redhat.com/browse/OCPBUGS-33728): Add custom masquerade subnet against right key at ovnkube-config CM [#2371](https://github.com/openshift/cluster-network-operator/pull/2371)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/179c38004739adde111d2fabf08bc94b0c663d9b...7768811ef167eb33a0eaafc5c3eb30fdd02470fd)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/222249d39165d5ed01702e70f2e32e61483ee2ae)
* e2e: wait for node inspector deletion (#1205) [#1205](https://github.com/openshift/cluster-node-tuning-operator/pull/1205)
* Fixing empty tuned submodule when using Dockerfile (#1211) [#1211](https://github.com/openshift/cluster-node-tuning-operator/pull/1211)
* E2E: fix modify node selector to use lowercase (#1186) [#1186](https://github.com/openshift/cluster-node-tuning-operator/pull/1186)
* [OCPBUGS-38900](https://issues.redhat.com/browse/OCPBUGS-38900): Drop sched_migration_cost_ns setting (#1201) [#1201](https://github.com/openshift/cluster-node-tuning-operator/pull/1201)
* Make ocp-tuned-one-shot.service restart on-failure (#1187) [#1187](https://github.com/openshift/cluster-node-tuning-operator/pull/1187)
* Fix context deadlines in ExecCommandOnPod() (#1189) [#1189](https://github.com/openshift/cluster-node-tuning-operator/pull/1189)
* [OCPBUGS-43566](https://issues.redhat.com/browse/OCPBUGS-43566): CI: unblock (#1188) [#1188](https://github.com/openshift/cluster-node-tuning-operator/pull/1188)
* E2E: wait for ovs services affinity to reset after deployment deletion (#1160) [#1160](https://github.com/openshift/cluster-node-tuning-operator/pull/1160)
* [OCPBUGS-38721](https://issues.redhat.com/browse/OCPBUGS-38721): tuned: distinguish deferred updates (#1149) [#1149](https://github.com/openshift/cluster-node-tuning-operator/pull/1149)
* [OCPBUGS-39005](https://issues.redhat.com/browse/OCPBUGS-39005): Add cluster-wide proxy env file (#1145) [#1145](https://github.com/openshift/cluster-node-tuning-operator/pull/1145)
* OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1147) [#1147](https://github.com/openshift/cluster-node-tuning-operator/pull/1147)
* [OCPBUGS-39321](https://issues.redhat.com/browse/OCPBUGS-39321): E2E: Remove checking of reserved cpus in irqbalance file (#1148) [#1148](https://github.com/openshift/cluster-node-tuning-operator/pull/1148)
* E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1146) [#1146](https://github.com/openshift/cluster-node-tuning-operator/pull/1146)
* [CNF-13391](https://issues.redhat.com/browse/CNF-13391): ppc: adjust for Hypershift (#1124) [#1124](https://github.com/openshift/cluster-node-tuning-operator/pull/1124)
* [OCPBUGS-37865](https://issues.redhat.com/browse/OCPBUGS-37865): E2E: Verify ovs threadpool inherits parent cpu affinity (#1123) [#1123](https://github.com/openshift/cluster-node-tuning-operator/pull/1123)
* e2e:document: how to run locally on HCP platform (#1122) [#1122](https://github.com/openshift/cluster-node-tuning-operator/pull/1122)
* NO-JIRA:e2e:hypershift: remove/rename deprecated env variables (#1121) [#1121](https://github.com/openshift/cluster-node-tuning-operator/pull/1121)
* controller: predicate for containerruntimeconfig (#1108) [#1108](https://github.com/openshift/cluster-node-tuning-operator/pull/1108)
* [CNF-12711](https://issues.redhat.com/browse/CNF-12711): hypershift: enable feature gate support (#1115) [#1115](https://github.com/openshift/cluster-node-tuning-operator/pull/1115)
* NO-JIRA: Project cleanups (#1120) [#1120](https://github.com/openshift/cluster-node-tuning-operator/pull/1120)
* [CNF-12680](https://issues.redhat.com/browse/CNF-12680): CNF-13488: Add performance profile status for hypershift support (#1089) [#1089](https://github.com/openshift/cluster-node-tuning-operator/pull/1089)
* [OCPBUGS-28647](https://issues.redhat.com/browse/OCPBUGS-28647): deferred updates: cleanups (#1119) [#1119](https://github.com/openshift/cluster-node-tuning-operator/pull/1119)
* Fix the destination of asset's copy (#1112) [#1112](https://github.com/openshift/cluster-node-tuning-operator/pull/1112)
* [OCPBUGS-28647](https://issues.redhat.com/browse/OCPBUGS-28647): tuned: operand: add support for deferred updates (#1019) [#1019](https://github.com/openshift/cluster-node-tuning-operator/pull/1019)
* makefile: ensure bindata (#1116) [#1116](https://github.com/openshift/cluster-node-tuning-operator/pull/1116)
* e2e: performance: skip test on env with insufficient cpus (#1111) [#1111](https://github.com/openshift/cluster-node-tuning-operator/pull/1111)
* e2e: performance: verify tuned one-shot service vs kubelet (#1106) [#1106](https://github.com/openshift/cluster-node-tuning-operator/pull/1106)
* [CNF-7123](https://issues.redhat.com/browse/CNF-7123): Enable and adjust 1_performance suite on Hypershift (#1084) [#1084](https://github.com/openshift/cluster-node-tuning-operator/pull/1084)
* NO-JIRA: Rename and reorganize hypershift labels (#1090) [#1090](https://github.com/openshift/cluster-node-tuning-operator/pull/1090)
* E2E: Add ginkgo labels to respective test suites (#1097) [#1097](https://github.com/openshift/cluster-node-tuning-operator/pull/1097)
* NO-JIRA: hypershift: implements missing client calls needed for e2e tests (#1107) [#1107](https://github.com/openshift/cluster-node-tuning-operator/pull/1107)
* [CNF-13530](https://issues.redhat.com/browse/CNF-13530): hypershift: support `containerruntimeconfig` (#1100) [#1100](https://github.com/openshift/cluster-node-tuning-operator/pull/1100)
* [CNF-13394](https://issues.redhat.com/browse/CNF-13394): Changed node inspector to have lazy initialization (#1093) [#1093](https://github.com/openshift/cluster-node-tuning-operator/pull/1093)
* NO-JIRA: hypershift:unitests: adjust controller unit-tests (#1105) [#1105](https://github.com/openshift/cluster-node-tuning-operator/pull/1105)
* Fix requested profile doesn't exist (#1104) [#1104](https://github.com/openshift/cluster-node-tuning-operator/pull/1104)
* NO-JIRA:pao:hypershift: fix client implementation (#1094) [#1094](https://github.com/openshift/cluster-node-tuning-operator/pull/1094)
* hypershift: check updatingConfig condition to be false instead of missing (#1096) [#1096](https://github.com/openshift/cluster-node-tuning-operator/pull/1096)
* e2e:run-test.sh: match ginkgo CLI to ginkgo package (#1092) [#1092](https://github.com/openshift/cluster-node-tuning-operator/pull/1092)
* e2e:performance: decode to valid kubeletconfig object (#1091) [#1091](https://github.com/openshift/cluster-node-tuning-operator/pull/1091)
* [OCPBUGS-34972](https://issues.redhat.com/browse/OCPBUGS-34972): perfprof: bump verbosiness of logs (#1075) [#1075](https://github.com/openshift/cluster-node-tuning-operator/pull/1075)
* e2e:label: platform labels (#1076) [#1076](https://github.com/openshift/cluster-node-tuning-operator/pull/1076)
* NO-JIRA: remove 4.13->4.14 compatibility code (#1079) [#1079](https://github.com/openshift/cluster-node-tuning-operator/pull/1079)
* Dockerfile:bump go-builder to 1.22 (#1078) [#1078](https://github.com/openshift/cluster-node-tuning-operator/pull/1078)
* [CNF-11559](https://issues.redhat.com/browse/CNF-11559): [Part 3/3] Hypershift PAO adoption (#1057) [#1057](https://github.com/openshift/cluster-node-tuning-operator/pull/1057)
* e2e: Added mixed cpus negative tests (#1026) [#1026](https://github.com/openshift/cluster-node-tuning-operator/pull/1026)
* [OCPBUGS-28647](https://issues.redhat.com/browse/OCPBUGS-28647): tuned: operand: deferred updates prepare: cleanups from #1019 (#1073) [#1073](https://github.com/openshift/cluster-node-tuning-operator/pull/1073)
* Add tier0 and tier1 tags to non reboot test cases (#1064) [#1064](https://github.com/openshift/cluster-node-tuning-operator/pull/1064)
* Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1068) [#1068](https://github.com/openshift/cluster-node-tuning-operator/pull/1068)
* [CNF-11815](https://issues.redhat.com/browse/CNF-11815): e2e: Added node inspector for inspecting nodes configuration (#1008) [#1008](https://github.com/openshift/cluster-node-tuning-operator/pull/1008)
* e2e: latency: Add negative tests (#1071) [#1071](https://github.com/openshift/cluster-node-tuning-operator/pull/1071)
* e2e: Added hwlatdetect default window size (#926) [#926](https://github.com/openshift/cluster-node-tuning-operator/pull/926)
* E2E: Fetch pod node instead of relying on first worker-cnf node (#1070) [#1070](https://github.com/openshift/cluster-node-tuning-operator/pull/1070)
* Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1063) [#1063](https://github.com/openshift/cluster-node-tuning-operator/pull/1063)
* [OCPBUGS-33682](https://issues.redhat.com/browse/OCPBUGS-33682): right-hand-side profile_dirs take precedence (#1061) [#1061](https://github.com/openshift/cluster-node-tuning-operator/pull/1061)
* No-Jira: E2E: Extend mixed cpus tests to test cpu load balancing annotation (#1028) [#1028](https://github.com/openshift/cluster-node-tuning-operator/pull/1028)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/57a714574b7b33f2f649ad5f62a61b7e97224fb7...222249d39165d5ed01702e70f2e32e61483ee2ae)
### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/e31b7775ef903ff0c35f95656af27afa2dddd3e4)
* [OCPBUGS-37544](https://issues.redhat.com/browse/OCPBUGS-37544): add version flag [#62](https://github.com/openshift/cluster-olm-operator/pull/62)
* [OPRUN-3403](https://issues.redhat.com/browse/OPRUN-3403): Remove Rukpak references from code [#63](https://github.com/openshift/cluster-olm-operator/pull/63)
* [OPRUN-3405](https://issues.redhat.com/browse/OPRUN-3405): Stop building rukpak [#60](https://github.com/openshift/cluster-olm-operator/pull/60)
* [OPRUN-3437](https://issues.redhat.com/browse/OPRUN-3437): update configmap permissions [#59](https://github.com/openshift/cluster-olm-operator/pull/59)
* [OCPBUGS-36686](https://issues.redhat.com/browse/OCPBUGS-36686): Re-enable cluster-olm-operator [#58](https://github.com/openshift/cluster-olm-operator/pull/58)
* [OCPBUGS-34126](https://issues.redhat.com/browse/OCPBUGS-34126): Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.17 [#55](https://github.com/openshift/cluster-olm-operator/pull/55)
* [OCPBUGS-36684](https://issues.redhat.com/browse/OCPBUGS-36684): Disable cluster-olm-operator [#56](https://github.com/openshift/cluster-olm-operator/pull/56)
* NO-ISSUE: Update owners [#57](https://github.com/openshift/cluster-olm-operator/pull/57)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/27bf70ddf9421637e1da18b249785b2cca177272...e31b7775ef903ff0c35f95656af27afa2dddd3e4)
### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e)
* [OCPBUGS-43657](https://issues.redhat.com/browse/OCPBUGS-43657): audit: do not log requests to /livez [#599](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/599)
* [OCPBUGS-41850](https://issues.redhat.com/browse/OCPBUGS-41850): increase openshift-apiserver failureThreshold [#589](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/589)
* [OCPBUGS-34349](https://issues.redhat.com/browse/OCPBUGS-34349): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 [#580](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/580)
* [OCPBUGS-34349](https://issues.redhat.com/browse/OCPBUGS-34349): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 [#579](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/579)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/d26f3002e10be6f206f69a829d1511130e8188d9...2b2ba3bef92814ebc92b80be797cfc7d9d3b8c9e)
### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/2b962c71d5b3ac179898dc1ece6a98de0b33cd70)
* no-jira: OWNERS: remove former employees [#354](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/354)
* [OCPBUGS-35801](https://issues.redhat.com/browse/OCPBUGS-35801): nil pointer reference in ocm-operator [#355](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/355)
* [WRKLDS-1327](https://issues.redhat.com/browse/WRKLDS-1327): Replace wildcards by explicit list of verbs [#353](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/353)
* [WRKLDS-1292](https://issues.redhat.com/browse/WRKLDS-1292): Bump k8s dependencies to 1.30.1 [#352](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/352)
* [OCPBUGS-34395](https://issues.redhat.com/browse/OCPBUGS-34395): Move `cluster` Build CR to runlevel 10 to match CRD [#351](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/351)
* [OCPBUGS-34077](https://issues.redhat.com/browse/OCPBUGS-34077): Always Disable Default Rolebindings Controller [#346](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/346)
* [OCPBUGS-34054](https://issues.redhat.com/browse/OCPBUGS-34054): lots of churn during image registry managed/removed transition [#347](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/347)
* [OCPBUILD-9](https://issues.redhat.com/browse/OCPBUILD-9): Adds capabilities for builder & deployer rolebindings controller [#335](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/335)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/2280f54414cf403aed0a02b3fdb86ee6bf672410...2b962c71d5b3ac179898dc1ece6a98de0b33cd70)
### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/7209e90d4205dc16bf0c83fb556c3d955d942d6b)
* [OCPBUGS-41849](https://issues.redhat.com/browse/OCPBUGS-41849): pkg/psalabelsyncer: switch to PSA version 'latest' [#154](https://github.com/openshift/cluster-policy-controller/pull/154)
* [WRKLDS-1292](https://issues.redhat.com/browse/WRKLDS-1292): bump(k8s.io)=1.30.1 [#151](https://github.com/openshift/cluster-policy-controller/pull/151)
* [OCPBUGS-34304](https://issues.redhat.com/browse/OCPBUGS-34304): Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.17 [#150](https://github.com/openshift/cluster-policy-controller/pull/150)
* [OCPBUGS-34304](https://issues.redhat.com/browse/OCPBUGS-34304): Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.17 [#149](https://github.com/openshift/cluster-policy-controller/pull/149)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/eaea543f4c845a7b65705f12e162cc121bb12f88...7209e90d4205dc16bf0c83fb556c3d955d942d6b)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/3a44b4db39d3ffc8cb2736985e2fa8edeb7868fd)
* [OCPBUGS-39120](https://issues.redhat.com/browse/OCPBUGS-39120): Sync the non-OKD assets from master to release-4.17 [#577](https://github.com/openshift/cluster-samples-operator/pull/577)
* [OKD-225](https://issues.redhat.com/browse/OKD-225): remove only the EOL CentOS 7 images [#575](https://github.com/openshift/cluster-samples-operator/pull/575)
* [OCPBUGS-39071](https://issues.redhat.com/browse/OCPBUGS-39071): Fix library-sync.sh to handle renames in unsupported samples [#565](https://github.com/openshift/cluster-samples-operator/pull/565)
* [OCPBUGS-38927](https://issues.redhat.com/browse/OCPBUGS-38927): Update Go version, API version and vendored libs to the same versions as in the openshift/api. [#564](https://github.com/openshift/cluster-samples-operator/pull/564)
* [OCPBUGS-33899](https://issues.redhat.com/browse/OCPBUGS-33899): Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.17 [#547](https://github.com/openshift/cluster-samples-operator/pull/547)
* [OCPBUGS-38471](https://issues.redhat.com/browse/OCPBUGS-38471): Only pick up the changes from the supported imagestreams and templates in library-sync.sh. [#560](https://github.com/openshift/cluster-samples-operator/pull/560)
* [KUBESAW-162](https://issues.redhat.com/browse/KUBESAW-162): add mfrancisc and metlos as owners [#549](https://github.com/openshift/cluster-samples-operator/pull/549)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/6541dd7e1fdb3d40896956a56f1dc800fae5d8b8...3a44b4db39d3ffc8cb2736985e2fa8edeb7868fd)
### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/bb40448723a3906ab80250e4601d431b66499f50)
* [OCPBUGS-43794](https://issues.redhat.com/browse/OCPBUGS-43794): add ability to control kube rbac proxy container image on controlplane [#529](https://github.com/openshift/cluster-storage-operator/pull/529)
* [OCPBUGS-43112](https://issues.redhat.com/browse/OCPBUGS-43112): assets: shared-resource: hypershift: add pull-secret to operator SA [#520](https://github.com/openshift/cluster-storage-operator/pull/520)
* [OCPBUGS-38355](https://issues.redhat.com/browse/OCPBUGS-38355): Bump openshift/api to get EFS volume metrics [#501](https://github.com/openshift/cluster-storage-operator/pull/501)
* [OCPBUGS-38760](https://issues.redhat.com/browse/OCPBUGS-38760): include azure perms for route table [#503](https://github.com/openshift/cluster-storage-operator/pull/503)
* [OCPBUGS-39365](https://issues.redhat.com/browse/OCPBUGS-39365): Use restricted-v2 SCC and remove runAsUser in Hypershift [#498](https://github.com/openshift/cluster-storage-operator/pull/498)
* [STOR-1422](https://issues.redhat.com/browse/STOR-1422): Bump(openshift/api): to get EFS volume metrics [#496](https://github.com/openshift/cluster-storage-operator/pull/496)
* [CFE-879](https://issues.redhat.com/browse/CFE-879): Add TagUser role to creadentials request of GCP PD operator [#490](https://github.com/openshift/cluster-storage-operator/pull/490)
* [OCPBUGS-37488](https://issues.redhat.com/browse/OCPBUGS-37488): Pass TOOLS_IMAGE env var to AWS EBS CSI Driver operator [#494](https://github.com/openshift/cluster-storage-operator/pull/494)
* [CNV-44992](https://issues.redhat.com/browse/CNV-44992): HCP custom tolerations integration [#493](https://github.com/openshift/cluster-storage-operator/pull/493)
* [OCPBUGS-37633](https://issues.redhat.com/browse/OCPBUGS-37633): Add permissions for vsphere_problem_detector to access clustercsidrivers [#495](https://github.com/openshift/cluster-storage-operator/pull/495)
* [STOR-1767](https://issues.redhat.com/browse/STOR-1767): Disable vsphere-problem-detector alerts if ManagementState==Removed [#487](https://github.com/openshift/cluster-storage-operator/pull/487)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#486](https://github.com/openshift/cluster-storage-operator/pull/486)
* [MON-2065](https://issues.redhat.com/browse/MON-2065): manifests: add k8s storage rules [#477](https://github.com/openshift/cluster-storage-operator/pull/477)
* [OCPBUGS-36169](https://issues.redhat.com/browse/OCPBUGS-36169): deactivate MultipleDefaultStorageClasses alert immediately after being fixed [#483](https://github.com/openshift/cluster-storage-operator/pull/483)
* [STOR-1767](https://issues.redhat.com/browse/STOR-1767): add env var OPERATOR_NAME to vsphere csi operator deployment [#485](https://github.com/openshift/cluster-storage-operator/pull/485)
* [STOR-1593](https://issues.redhat.com/browse/STOR-1593): add patch role to PVs for provisioner [#482](https://github.com/openshift/cluster-storage-operator/pull/482)
* [OCPBUGS-34590](https://issues.redhat.com/browse/OCPBUGS-34590): revert vsphere problem detector controller name change [#479](https://github.com/openshift/cluster-storage-operator/pull/479)
* [OCPBUGS-34291](https://issues.redhat.com/browse/OCPBUGS-34291): Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.17 [#476](https://github.com/openshift/cluster-storage-operator/pull/476)
* [STOR-1839](https://issues.redhat.com/browse/STOR-1839): VSphereDriverConfiguration feature Accessible-by-default [#478](https://github.com/openshift/cluster-storage-operator/pull/478)
* [STOR-1839](https://issues.redhat.com/browse/STOR-1839): VSphereDriverConfiguration feature Accessible-by-default [#475](https://github.com/openshift/cluster-storage-operator/pull/475)
* [OCPBUGS-34291](https://issues.redhat.com/browse/OCPBUGS-34291): Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.17 [#474](https://github.com/openshift/cluster-storage-operator/pull/474)
* [SPLAT-1555](https://issues.redhat.com/browse/SPLAT-1555): Added featuregate for vSphere Multi vCenter. [#465](https://github.com/openshift/cluster-storage-operator/pull/465)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/761b62fa95c15dd7fcae6df1dda5876e50a10f2d...bb40448723a3906ab80250e4601d431b66499f50)
### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/2ce31fc513224e76ac5924addc6207c205d95742)
* Revert "OCPBUGS-38257: Revert #58 "OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest"" [#61](https://github.com/openshift/cluster-update-keys/pull/61)
* [OCPBUGS-37770](https://issues.redhat.com/browse/OCPBUGS-37770): Revert #58 "OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest" [#59](https://github.com/openshift/cluster-update-keys/pull/59)
* [OTA-1304](https://issues.redhat.com/browse/OTA-1304): manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest [#58](https://github.com/openshift/cluster-update-keys/pull/58)
* [OCPBUGS-35528](https://issues.redhat.com/browse/OCPBUGS-35528): keys: Update Red Hat keys to use SHA256 signatures [#57](https://github.com/openshift/cluster-update-keys/pull/57)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/e8478585cca88314094112aa5933e5281f4707ea...2ce31fc513224e76ac5924addc6207c205d95742)
### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8c3b8082fe109c24c23894635428549cab5be26c)
* [OCPBUGS-43586](https://issues.redhat.com/browse/OCPBUGS-43586): Upgradeable=False should not block a 4.(y+1).z to 4.(y+1).z' retarget [#1095](https://github.com/openshift/cluster-version-operator/pull/1095)
* [OCPBUGS-41642](https://issues.redhat.com/browse/OCPBUGS-41642): vendor: Update openshift/api to pick up the v4.17 capability sets [#1087](https://github.com/openshift/cluster-version-operator/pull/1087)
* [OCPBUGS-37770](https://issues.redhat.com/browse/OCPBUGS-37770): cmd/render: Add --feature-gate-manifest-path option [#1078](https://github.com/openshift/cluster-version-operator/pull/1078)
* [OCPBUGS-37770](https://issues.redhat.com/browse/OCPBUGS-37770): pkg/payload/render: Include release image (Cluster)ImagePolicy [#1076](https://github.com/openshift/cluster-version-operator/pull/1076)
* [OCPBUGS-37345](https://issues.redhat.com/browse/OCPBUGS-37345): Revert "OCPBUGS-35994: Revert "OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream"" [#1072](https://github.com/openshift/cluster-version-operator/pull/1072)
* no-jira: TestCVO: set known caps from configv1.KnownClusterVersionCapabilities [#1075](https://github.com/openshift/cluster-version-operator/pull/1075)
* no-jira: TestSetCapabilities: use KnownClusterVersionCapabilities for known keys instead of picking DefaultCapabilitySet [#1073](https://github.com/openshift/cluster-version-operator/pull/1073)
* [OCPBUGS-32678](https://issues.redhat.com/browse/OCPBUGS-32678): Fix a panic caused by a data race [#1070](https://github.com/openshift/cluster-version-operator/pull/1070)
* [OCPBUGS-33983](https://issues.redhat.com/browse/OCPBUGS-33983): vendor: Update openshift/api to pick up zz_generated.crd-manifests [#1045](https://github.com/openshift/cluster-version-operator/pull/1045)
* [OCPBUGS-35994](https://issues.redhat.com/browse/OCPBUGS-35994): Revert "OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream" [#1061](https://github.com/openshift/cluster-version-operator/pull/1061)
* Revert "METAL-1053, OCPBUGS-33983: Remove baremetal dependency on MachineAPI capability" [#1063](https://github.com/openshift/cluster-version-operator/pull/1063)
* [METAL-1053](https://issues.redhat.com/browse/METAL-1053): Remove baremetal dependency on MachineAPI capability [#1051](https://github.com/openshift/cluster-version-operator/pull/1051)
* NO-JIRA: Update OWNERS [#1058](https://github.com/openshift/cluster-version-operator/pull/1058)
* [OCPBUGS-35464](https://issues.redhat.com/browse/OCPBUGS-35464): Updating cluster-version-operator-container image to be consistent with ART for 4.17 [#1056](https://github.com/openshift/cluster-version-operator/pull/1056)
* Revert "OCPBUGS-34287: Updating cluster-version-operator-container image to be consistent with ART for 4.17" [#1055](https://github.com/openshift/cluster-version-operator/pull/1055)
* NO-JIRA: typo change previousily to previously [#1054](https://github.com/openshift/cluster-version-operator/pull/1054)
* [OCPBUGS-34287](https://issues.redhat.com/browse/OCPBUGS-34287): Updating cluster-version-operator-container image to be consistent with ART for 4.17 [#1047](https://github.com/openshift/cluster-version-operator/pull/1047)
* [OCPBUGS-35236](https://issues.redhat.com/browse/OCPBUGS-35236): Revert: Add support for Custom Certificate Authorities for custom signature stores" [#1052](https://github.com/openshift/cluster-version-operator/pull/1052)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/15c87e7e6d56f89fcc2453012e09283e965e71af...8c3b8082fe109c24c23894635428549cab5be26c)
### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/b877222b8c5527450447079e33d86dd9fe288e54)
* [OCPBUGS-34355](https://issues.redhat.com/browse/OCPBUGS-34355): Updating configmap-reload-container image to be consistent with ART for 4.17 [#62](https://github.com/openshift/configmap-reload/pull/62)
* [OCPBUGS-34355](https://issues.redhat.com/browse/OCPBUGS-34355): Updating configmap-reload-container image to be consistent with ART for 4.17 [#61](https://github.com/openshift/configmap-reload/pull/61)
* [Full changelog](https://github.com/openshift/configmap-reload/compare/dc91ddc4ad8139c9c0bccaba22b65b0bf364d81e...b877222b8c5527450447079e33d86dd9fe288e54)
### [console](https://github.com/openshift/console/tree/34d0673518e9f3c7117fc9ba64d7bd326b0a3d1a)
* [OCPBUGS-43441](https://issues.redhat.com/browse/OCPBUGS-43441): fix table combination [#14546](https://github.com/openshift/console/pull/14546)
* [OCPBUGS-44169](https://issues.redhat.com/browse/OCPBUGS-44169): use TaskRuns results.tekton.dev/record annotation to get the logs [#14538](https://github.com/openshift/console/pull/14538)
* [OCPBUGS-44873](https://issues.redhat.com/browse/OCPBUGS-44873): Unable to remove finally tasks in pipeline builder mode [#14527](https://github.com/openshift/console/pull/14527)
* [OCPBUGS-42791](https://issues.redhat.com/browse/OCPBUGS-42791): Add missing pipelines plugin name to known plugins [#14377](https://github.com/openshift/console/pull/14377)
* [OCPBUGS-44699](https://issues.redhat.com/browse/OCPBUGS-44699): Add multiline support to template instantiation [#14508](https://github.com/openshift/console/pull/14508)
* [OCPBUGS-44183](https://issues.redhat.com/browse/OCPBUGS-44183): Remove ClusterTask dependency in console from Pipelines 1.17 [#14512](https://github.com/openshift/console/pull/14512)
* [OCPBUGS-44764](https://issues.redhat.com/browse/OCPBUGS-44764): Add IBM Block Storage CSI driver support for RWX [#14517](https://github.com/openshift/console/pull/14517)
* [OCPBUGS-43795](https://issues.redhat.com/browse/OCPBUGS-43795): While upgrading the cluster from UI observed `Warning alert:Admission Webhook Warning` [#14433](https://github.com/openshift/console/pull/14433)
* [OCPBUGS-44722](https://issues.redhat.com/browse/OCPBUGS-44722): include external labels so silenced alerts not displayed in notifications [#14511](https://github.com/openshift/console/pull/14511)
* [OCPBUGS-44358](https://issues.redhat.com/browse/OCPBUGS-44358): BuildConfig form breaks on manually enter the Git URL [#14478](https://github.com/openshift/console/pull/14478)
* [OCPBUGS-43073](https://issues.redhat.com/browse/OCPBUGS-43073): Telemetry userPreference results in empty nodes output to the DOM [#14392](https://github.com/openshift/console/pull/14392)
* [OCPBUGS-44587](https://issues.redhat.com/browse/OCPBUGS-44587): Start last run do not work in buildConfig details page [#14499](https://github.com/openshift/console/pull/14499)
* [OCPBUGS-44586](https://issues.redhat.com/browse/OCPBUGS-44586): Collapse/Expand Feature Added, Removal Option Removed in Version 4.16 [#14498](https://github.com/openshift/console/pull/14498)
* [OCPBUGS-44450](https://issues.redhat.com/browse/OCPBUGS-44450): Don't request user settings configmap if no user has been loaded. [#14482](https://github.com/openshift/console/pull/14482)
* [OCPBUGS-44479](https://issues.redhat.com/browse/OCPBUGS-44479): conditionally display MachineConfig details page Confi… [#14488](https://github.com/openshift/console/pull/14488)
* [OCPBUGS-43878](https://issues.redhat.com/browse/OCPBUGS-43878): Add flag to hide the pipelines-plugin pipeline builder extensions [#14457](https://github.com/openshift/console/pull/14457)
* [OCPBUGS-42824](https://issues.redhat.com/browse/OCPBUGS-42824): remove axios as it is no longer in use [#14381](https://github.com/openshift/console/pull/14381)
* [OCPBUGS-42955](https://issues.redhat.com/browse/OCPBUGS-42955): Enabling topology e2e tests on CI [#14402](https://github.com/openshift/console/pull/14402)
* [OCPBUGS-43009](https://issues.redhat.com/browse/OCPBUGS-43009): Project is "Undefined" on "VolumeSnapshot" create page [#14389](https://github.com/openshift/console/pull/14389)
* [OCPBUGS-42607](https://issues.redhat.com/browse/OCPBUGS-42607): add role exclusion to avoid unexpected triggering the namespace menu [#14351](https://github.com/openshift/console/pull/14351)
* [OCPBUGS-42606](https://issues.redhat.com/browse/OCPBUGS-42606): make createdBy mandatory and auto fill with the current user [#14352](https://github.com/openshift/console/pull/14352)
* [OCPBUGS-42585](https://issues.redhat.com/browse/OCPBUGS-42585): Red Hat Camel K Operator installation via cli [#14346](https://github.com/openshift/console/pull/14346)
* [OCPBUGS-42299](https://issues.redhat.com/browse/OCPBUGS-42299): Increase login flow state paramater length/entropy [#14318](https://github.com/openshift/console/pull/14318)
* [OCPBUGS-42391](https://issues.redhat.com/browse/OCPBUGS-42391): change "Partial cluster update" to "Control plane onl… [#14323](https://github.com/openshift/console/pull/14323)
* [OCPBUGS-42380](https://issues.redhat.com/browse/OCPBUGS-42380): Allow operators to enable monitoring by default [#14316](https://github.com/openshift/console/pull/14316)
* [OCPBUGS-42060](https://issues.redhat.com/browse/OCPBUGS-42060): Console crashes when ssh is selected in add secret for starting a pipeline run [#14301](https://github.com/openshift/console/pull/14301)
* [OCPBUGS-42223](https://issues.redhat.com/browse/OCPBUGS-42223): restore Spotlight removal on next click [#14314](https://github.com/openshift/console/pull/14314)
* [OCPBUGS-39181](https://issues.redhat.com/browse/OCPBUGS-39181): add Create button to Console plugins tab [#14220](https://github.com/openshift/console/pull/14220)
* [OCPBUGS-39091](https://issues.redhat.com/browse/OCPBUGS-39091): update Events ChipGroup to use integrated close [#14211](https://github.com/openshift/console/pull/14211)
* [OCPBUGS-38563](https://issues.redhat.com/browse/OCPBUGS-38563): do not directly mutate links in useMemo [#14159](https://github.com/openshift/console/pull/14159)
* [OCPBUGS-41685](https://issues.redhat.com/browse/OCPBUGS-41685): Topology screen crashes when completed pod is selected [#14276](https://github.com/openshift/console/pull/14276)
* [OCPBUGS-41482](https://issues.redhat.com/browse/OCPBUGS-41482): Unit Tests for the new Ask Lightspeed Button [#14249](https://github.com/openshift/console/pull/14249)
* [OCPBUGS-39601](https://issues.redhat.com/browse/OCPBUGS-39601): Console user settings resources misses ownerRef, removing a user results in remaining data [#14240](https://github.com/openshift/console/pull/14240)
* [OCPBUGS-41893](https://issues.redhat.com/browse/OCPBUGS-41893): Disable Extension Catalog tech preview nav item [#14289](https://github.com/openshift/console/pull/14289)
* [OCPBUGS-39110](https://issues.redhat.com/browse/OCPBUGS-39110): List of default Camel K event sources disappears when adding a custom event source [#14214](https://github.com/openshift/console/pull/14214)
* [OCPBUGS-41684](https://issues.redhat.com/browse/OCPBUGS-41684): Fix access mode selection menu issue [#14277](https://github.com/openshift/console/pull/14277)
* [OCPBUGS-41350](https://issues.redhat.com/browse/OCPBUGS-41350): Update Lightspeed logo to new standards [#14245](https://github.com/openshift/console/pull/14245)
* [OCPBUGS-41480](https://issues.redhat.com/browse/OCPBUGS-41480): improve layout and findability of Hide Lightspeed pref… [#14248](https://github.com/openshift/console/pull/14248)
* [OCPBUGS-39453](https://issues.redhat.com/browse/OCPBUGS-39453): Use vCenterCluster value from CM as primary resource [#14235](https://github.com/openshift/console/pull/14235)
* [OCPBUGS-39109](https://issues.redhat.com/browse/OCPBUGS-39109): Need to allow blank for Project/namespace when setting SA Subject in 'Project access tab' [#14213](https://github.com/openshift/console/pull/14213)
* [OCPBUGS-38903](https://issues.redhat.com/browse/OCPBUGS-38903): Networking section depends on networking-console-plugin [#14185](https://github.com/openshift/console/pull/14185)
* [OCPBUGS-38300](https://issues.redhat.com/browse/OCPBUGS-38300): Add telemetry to Lightspeed console capability [#14129](https://github.com/openshift/console/pull/14129)
* [OCPBUGS-38591](https://issues.redhat.com/browse/OCPBUGS-38591): Add support for GCP Workload Identity / Federated identity operator installs [#14160](https://github.com/openshift/console/pull/14160)
* [OCPBUGS-38427](https://issues.redhat.com/browse/OCPBUGS-38427): fix bug where cluster version text appears black in da… [#14145](https://github.com/openshift/console/pull/14145)
* [OCPBUGS-38615](https://issues.redhat.com/browse/OCPBUGS-38615): improve Lightspeed popup contents and navigation [#14163](https://github.com/openshift/console/pull/14163)
* [OCPBUGS-38395](https://issues.redhat.com/browse/OCPBUGS-38395): A value submitted in From view is wrapped with single quotation after switching to Yaml view. [#14141](https://github.com/openshift/console/pull/14141)
* [OCPBUGS-38394](https://issues.redhat.com/browse/OCPBUGS-38394): Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart [#14140](https://github.com/openshift/console/pull/14140)
* [OCPBUGS-38691](https://issues.redhat.com/browse/OCPBUGS-38691): Modifying helm e2e test to fix CI issue [#14169](https://github.com/openshift/console/pull/14169)
* [OCPBUGS-38412](https://issues.redhat.com/browse/OCPBUGS-38412): Values entered into the Instantiate Template form are automatically cleared [#14143](https://github.com/openshift/console/pull/14143)
* [OCPBUGS-38644](https://issues.redhat.com/browse/OCPBUGS-38644): Add the signals correlation to the app launcher [#14161](https://github.com/openshift/console/pull/14161)
* [OCPBUGS-38462](https://issues.redhat.com/browse/OCPBUGS-38462): 2 Metrics tab in 4.17 developer console [#14149](https://github.com/openshift/console/pull/14149)
* [OCPBUGS-38389](https://issues.redhat.com/browse/OCPBUGS-38389): correct casing in "Lightspeed" [#14139](https://github.com/openshift/console/pull/14139)
* [OCPBUGS-38240](https://issues.redhat.com/browse/OCPBUGS-38240): Disable "Helm release status verification: HR-01-TC04" test due to CI outage [#14126](https://github.com/openshift/console/pull/14126)
* [OCPBUGS-38036](https://issues.redhat.com/browse/OCPBUGS-38036): Properly chain trap commands [#14111](https://github.com/openshift/console/pull/14111)
* [CONSOLE-4104](https://issues.redhat.com/browse/CONSOLE-4104): Implement basic OLM V1 catalog view with filtering [#14056](https://github.com/openshift/console/pull/14056)
* [CONSOLE-3970](https://issues.redhat.com/browse/CONSOLE-3970): add Lightspeed button [#14030](https://github.com/openshift/console/pull/14030)
* [OCPBUGS-37426](https://issues.redhat.com/browse/OCPBUGS-37426): No documentation covering how to translate plugin messages [#14081](https://github.com/openshift/console/pull/14081)
* NO-JIRA: Update Console plugin SDK package changelogs post publish [#14104](https://github.com/openshift/console/pull/14104)
* [ODC-7632](https://issues.redhat.com/browse/ODC-7632): Combine Shipwright model pages [#14029](https://github.com/openshift/console/pull/14029)
* [ODC-7626](https://issues.redhat.com/browse/ODC-7626): Web Terminal Operator installation via cli [#14009](https://github.com/openshift/console/pull/14009)
* [ODC-7648](https://issues.redhat.com/browse/ODC-7648): Open Lightspeed Chat Interface by clicking a button on the YAML Editor component [#14087](https://github.com/openshift/console/pull/14087)
* [OCPBUGS-30889](https://issues.redhat.com/browse/OCPBUGS-30889): No access to list pipelines.tekton.dev prevents from using Delete application form [#13942](https://github.com/openshift/console/pull/13942)
* [OCPBUGS-36872](https://issues.redhat.com/browse/OCPBUGS-36872): Add base path to locale init [#14046](https://github.com/openshift/console/pull/14046)
* [OCPBUGS-37802](https://issues.redhat.com/browse/OCPBUGS-37802): Build option is selected as Shipwright on edit if created the deployment using BuildConfig [#14101](https://github.com/openshift/console/pull/14101)
* [OCPBUGS-36619](https://issues.redhat.com/browse/OCPBUGS-36619): Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated [#14034](https://github.com/openshift/console/pull/14034)
* [ODC-7634](https://issues.redhat.com/browse/ODC-7634): Test all current workflows, write Integration tests [#14075](https://github.com/openshift/console/pull/14075)
* [OCPBUGS-36816](https://issues.redhat.com/browse/OCPBUGS-36816): Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts [#14080](https://github.com/openshift/console/pull/14080)
* [CNV-41506](https://issues.redhat.com/browse/CNV-41506), [OCPBUGS-37403](https://issues.redhat.com/browse/OCPBUGS-37403): Localnet NAD incorrectly displayed [#13948](https://github.com/openshift/console/pull/13948)
* [ODC-7640](https://issues.redhat.com/browse/ODC-7640): Remove Alerting Details Page from Console [#14072](https://github.com/openshift/console/pull/14072)
* [CONSOLE-4098](https://issues.redhat.com/browse/CONSOLE-4098): Show deprecated operators in OperatorHub (Post-installation screens) [#14048](https://github.com/openshift/console/pull/14048)
* [OCPBUGS-35301](https://issues.redhat.com/browse/OCPBUGS-35301): add missing translation in TriggerBindingSection [#14062](https://github.com/openshift/console/pull/14062)
* [OCPBUGS-23332](https://issues.redhat.com/browse/OCPBUGS-23332): Fix utilization card limits/total display [#14053](https://github.com/openshift/console/pull/14053)
* [CNV-35124](https://issues.redhat.com/browse/CNV-35124), [OCPBUGS-37401](https://issues.redhat.com/browse/OCPBUGS-37401): OVN Kubernetes multi-homing [#14044](https://github.com/openshift/console/pull/14044)
* [ODC-7621](https://issues.redhat.com/browse/ODC-7621), [ODC-7633](https://issues.redhat.com/browse/ODC-7633): Add Shipwright as Build Options in Add & Edit Forms [#14016](https://github.com/openshift/console/pull/14016)
* [CONSOLE-4171](https://issues.redhat.com/browse/CONSOLE-4171): i18n upload/download routine task - sprint 256 [#14054](https://github.com/openshift/console/pull/14054)
* Add dynamic plugin SDK package changelogs & update plugin docs [#14012](https://github.com/openshift/console/pull/14012)
* [OCPBUGS-37054](https://issues.redhat.com/browse/OCPBUGS-37054): hide 'View all steps in documentation' for ROSA and OSD [#14061](https://github.com/openshift/console/pull/14061)
* [OCPBUGS-33801](https://issues.redhat.com/browse/OCPBUGS-33801): Manually create an API token for a ServiceAccount [#14038](https://github.com/openshift/console/pull/14038)
* [ODC-7639](https://issues.redhat.com/browse/ODC-7639): Remove alerts list from dev console codebase [#14014](https://github.com/openshift/console/pull/14014)
* [ODC-7624](https://issues.redhat.com/browse/ODC-7624), [ODC-7628](https://issues.redhat.com/browse/ODC-7628): shipwright test improvement [#13990](https://github.com/openshift/console/pull/13990)
* [OCPBUGS-34387](https://issues.redhat.com/browse/OCPBUGS-34387): maintain session across tabs [#14041](https://github.com/openshift/console/pull/14041)
* [OCPBUGS-34901](https://issues.redhat.com/browse/OCPBUGS-34901): ensure correct API version for OperandDetails [#14036](https://github.com/openshift/console/pull/14036)
* [OCPBUGS-36801](https://issues.redhat.com/browse/OCPBUGS-36801): disable serverless tests till further investigation [#14042](https://github.com/openshift/console/pull/14042)
* [ODC-7620](https://issues.redhat.com/browse/ODC-7620): Modal submit button: show loading state [#14007](https://github.com/openshift/console/pull/14007)
* [OCPBUGS-35940](https://issues.redhat.com/browse/OCPBUGS-35940): Create RoleBinding will trigger Admission Webhook Warning [#14021](https://github.com/openshift/console/pull/14021)
* [OCPBUGS-34956](https://issues.redhat.com/browse/OCPBUGS-34956): increase namespace deletion timeout for k-native e2e tests [#14039](https://github.com/openshift/console/pull/14039)
* [CONSOLE-4060](https://issues.redhat.com/browse/CONSOLE-4060): Show deprecated operators in OperatorHub (Pre-installation screens) [#13961](https://github.com/openshift/console/pull/13961)
* [OCPBUGS-34956](https://issues.redhat.com/browse/OCPBUGS-34956): disable failing knative e2e test [#14019](https://github.com/openshift/console/pull/14019)
* [OCPBUGS-35926](https://issues.redhat.com/browse/OCPBUGS-35926): Add debounce to PAC auto selecton in git import flow [#14011](https://github.com/openshift/console/pull/14011)
* [OCPBUGS-30841](https://issues.redhat.com/browse/OCPBUGS-30841): Redirects to new PipelineRun logs URL from old PipelineRun logs URL [#14032](https://github.com/openshift/console/pull/14032)
* [OCPBUGS-36260](https://issues.redhat.com/browse/OCPBUGS-36260): Tooltip on Pipeline when expression is not shows [#14023](https://github.com/openshift/console/pull/14023)
* [OCPBUGS-31047](https://issues.redhat.com/browse/OCPBUGS-31047): Reordered dependancy warning to fix the lint error [#13993](https://github.com/openshift/console/pull/13993)
* [ODC-7612](https://issues.redhat.com/browse/ODC-7612): Serverless Operator installation via CLI [#13949](https://github.com/openshift/console/pull/13949)
* [OCPBUGS-36339](https://issues.redhat.com/browse/OCPBUGS-36339): Fix "Auto deploy when new image is available" becomes unchecked when editing a deployment from web console [#14024](https://github.com/openshift/console/pull/14024)
* [CONSOLE-4140](https://issues.redhat.com/browse/CONSOLE-4140): display URI decoded configuration files on MachineConfi… [#14015](https://github.com/openshift/console/pull/14015)
* [OCPBUGS-36424](https://issues.redhat.com/browse/OCPBUGS-36424): DeploymentConfigs deprecation info alert should not present on the Edit deployment page [#14025](https://github.com/openshift/console/pull/14025)
* [OCPBUGS-31685](https://issues.redhat.com/browse/OCPBUGS-31685): Revert - terminal: use username if uid is not present [#13719](https://github.com/openshift/console/pull/13719)
* [OCPBUGS-35284](https://issues.redhat.com/browse/OCPBUGS-35284): fix BMH restart annotation [#13995](https://github.com/openshift/console/pull/13995)
* [CONSOLE-4134](https://issues.redhat.com/browse/CONSOLE-4134): i18n upload/download routine task sprint - 255 [#13991](https://github.com/openshift/console/pull/13991)
* [OCPBUGS-35879](https://issues.redhat.com/browse/OCPBUGS-35879): Fix TypeError: Cannot read properties of null (reading 'metadata') in Topology view [#14017](https://github.com/openshift/console/pull/14017)
* [CONSOLE-3792](https://issues.redhat.com/browse/CONSOLE-3792): Add extension point to enable customized create project modal for dynamic plugins [#13825](https://github.com/openshift/console/pull/13825)
* [OCPBUGS-33490](https://issues.redhat.com/browse/OCPBUGS-33490): Update Docs links for "Learn More" in Display Warning Policy Notification [#14002](https://github.com/openshift/console/pull/14002)
* [ODC-7581](https://issues.redhat.com/browse/ODC-7581): Gitea support when using Import from Git in Developer Console [#13928](https://github.com/openshift/console/pull/13928)
* [OCPBUGS-35928](https://issues.redhat.com/browse/OCPBUGS-35928): Improve control over PatternFly shared modules used in Console plugins [#13992](https://github.com/openshift/console/pull/13992)
* [OCPBUGS-35999](https://issues.redhat.com/browse/OCPBUGS-35999): Remove duplicate code in storage module [#14004](https://github.com/openshift/console/pull/14004)
* [OCPBUGS-35996](https://issues.redhat.com/browse/OCPBUGS-35996): remove orphaned i18n files [#14001](https://github.com/openshift/console/pull/14001)
* [ODC-7627](https://issues.redhat.com/browse/ODC-7627): Move test-cypress script into a frontend sub-folder to make it easier to approve changes [#13937](https://github.com/openshift/console/pull/13937)
* [OCPBUGS-35908](https://issues.redhat.com/browse/OCPBUGS-35908): fix flaking crd-extension tests [#14000](https://github.com/openshift/console/pull/14000)
* [ODC-7613](https://issues.redhat.com/browse/ODC-7613): Update the UI for selecting the Git Provider in the Import form [#13936](https://github.com/openshift/console/pull/13936)
* [CONSOLE-3824](https://issues.redhat.com/browse/CONSOLE-3824): Remove kubevirt-plugin code [#13769](https://github.com/openshift/console/pull/13769)
* [ODC-7585](https://issues.redhat.com/browse/ODC-7585): Pipeline operator installation via CLI [#13909](https://github.com/openshift/console/pull/13909)
* [OCPBUGS-33136](https://issues.redhat.com/browse/OCPBUGS-33136): Fix invalid node filesystem query [#13924](https://github.com/openshift/console/pull/13924)
* [OCPBUGS-34316](https://issues.redhat.com/browse/OCPBUGS-34316): Manually Approve client CSR displays an unknown warning message [#13939](https://github.com/openshift/console/pull/13939)
* [RHSTOR-5836](https://issues.redhat.com/browse/RHSTOR-5836): add info for ODF use-case (LSO LocalVolumeSet "Create" page) [#13965](https://github.com/openshift/console/pull/13965)
* [OCPBUGS-34937](https://issues.redhat.com/browse/OCPBUGS-34937): Violation warning is not displayed for `minAvailable` in PDB Create/Edit form [#13935](https://github.com/openshift/console/pull/13935)
* [OCPBUGS-32550](https://issues.redhat.com/browse/OCPBUGS-32550): Fix placement of icons on WebKit [#13987](https://github.com/openshift/console/pull/13987)
* [ODC-7614](https://issues.redhat.com/browse/ODC-7614): Port exposed in Dockerfile not observed in the Ports Dropdown in Git Import Form [#13953](https://github.com/openshift/console/pull/13953)
* [OCPBUGS-35418](https://issues.redhat.com/browse/OCPBUGS-35418): Error with html escaping for Route helptext [#13980](https://github.com/openshift/console/pull/13980)
* [OCPBUGS-35497](https://issues.redhat.com/browse/OCPBUGS-35497): Update Go prereq in README.md [#13979](https://github.com/openshift/console/pull/13979)
* [OCPBUGS-34986](https://issues.redhat.com/browse/OCPBUGS-34986): remove duplicate OAuth config [#13957](https://github.com/openshift/console/pull/13957)
* [ODC-7596](https://issues.redhat.com/browse/ODC-7596): Show Pod Disruption warning message in Topology page [#13921](https://github.com/openshift/console/pull/13921)
* [OCPBUGS-35492](https://issues.redhat.com/browse/OCPBUGS-35492): add info on obtaining first preferred language [#13976](https://github.com/openshift/console/pull/13976)
* [OCPBUGS-34516](https://issues.redhat.com/browse/OCPBUGS-34516): Improve catalog grid icon display and scaling [#13901](https://github.com/openshift/console/pull/13901)
* [CONSOLE-4115](https://issues.redhat.com/browse/CONSOLE-4115): Add OLM v1 package [#13960](https://github.com/openshift/console/pull/13960)
* [OCPBUGS-25929](https://issues.redhat.com/browse/OCPBUGS-25929): Fix: Quick Start "next" button requires double click to move to next step [#13934](https://github.com/openshift/console/pull/13934)
* [OCPBUGS-22853](https://issues.redhat.com/browse/OCPBUGS-22853): Keep useUserSettings hook in the internal api [#13967](https://github.com/openshift/console/pull/13967)
* [OCPBUGS-29804](https://issues.redhat.com/browse/OCPBUGS-29804): Fix crash if helm chart metadata is nil [#13963](https://github.com/openshift/console/pull/13963)
* [OCPBUGS-30218](https://issues.redhat.com/browse/OCPBUGS-30218): fix pseudolocalization [#13964](https://github.com/openshift/console/pull/13964)
* [OCPBUGS-35376](https://issues.redhat.com/browse/OCPBUGS-35376): sessions: fix sessions pruning [#13903](https://github.com/openshift/console/pull/13903)
* [OCPBUGS-35287](https://issues.redhat.com/browse/OCPBUGS-35287): Alphabetize icons, alias httpd to apache [#13958](https://github.com/openshift/console/pull/13958)
* [OCPBUGS-29499](https://issues.redhat.com/browse/OCPBUGS-29499), [OCPBUGS-29804](https://issues.redhat.com/browse/OCPBUGS-29804): bump helm to 3.14.4 [#13816](https://github.com/openshift/console/pull/13816)
* (chore) Update tectonic builder image to use golang-1.22 [#13932](https://github.com/openshift/console/pull/13932)
* [OCPBUGS-29744](https://issues.redhat.com/browse/OCPBUGS-29744): Removed nested label component [#13946](https://github.com/openshift/console/pull/13946)
* [OCPBUGS-34752](https://issues.redhat.com/browse/OCPBUGS-34752): Forward selected key prop in IconDropdown component [#13919](https://github.com/openshift/console/pull/13919)
* [OCPBUGS-34683](https://issues.redhat.com/browse/OCPBUGS-34683): Ensure requiredVersion is set for Console provided shared modules [#13893](https://github.com/openshift/console/pull/13893)
* [OCPBUGS-33756](https://issues.redhat.com/browse/OCPBUGS-33756): Display of "Auth Token GCP" filter in OperatorHub should be conditioned [#13867](https://github.com/openshift/console/pull/13867)
* [OCPBUGS-35080](https://issues.redhat.com/browse/OCPBUGS-35080): replace global refresh sync lock in OIDC provider with per-refresh-token one [#13655](https://github.com/openshift/console/pull/13655)
* NO-JIRA: Remove Edge from devconsole_pr.md [#13943](https://github.com/openshift/console/pull/13943)
* NO-JIRA: docs: update dead links in `docs/helm` [#13904](https://github.com/openshift/console/pull/13904)
* [OCPBUGS-35031](https://issues.redhat.com/browse/OCPBUGS-35031): restore missing CloseButton styles [#13941](https://github.com/openshift/console/pull/13941)
* [OCPBUGS-34862](https://issues.redhat.com/browse/OCPBUGS-34862): Fix Inconsistent Capitalization of "Import from Git" [#13925](https://github.com/openshift/console/pull/13925)
* [OCPBUGS-34684](https://issues.redhat.com/browse/OCPBUGS-34684): i18n upload/download routine task - Sprint 254 [#13910](https://github.com/openshift/console/pull/13910)
* [OCPBUGS-29777](https://issues.redhat.com/browse/OCPBUGS-29777): RWOP accessMode is not available on OpenShift console UI [#13829](https://github.com/openshift/console/pull/13829)
* [OCPBUGS-34656](https://issues.redhat.com/browse/OCPBUGS-34656), [OCPBUGS-34791](https://issues.redhat.com/browse/OCPBUGS-34791), [OCPBUGS-34828](https://issues.redhat.com/browse/OCPBUGS-34828): disabling add-flow A-04-TC01 test and knative tests due to flakes [#13931](https://github.com/openshift/console/pull/13931)
* [OCPBUGS-34958](https://issues.redhat.com/browse/OCPBUGS-34958): Replace Red Hat catalog source with Community [#13938](https://github.com/openshift/console/pull/13938)
* [OCPBUGS-33539](https://issues.redhat.com/browse/OCPBUGS-33539): Add default sorting column for VirtualizedTable component of dynamic plugin sdk [#13916](https://github.com/openshift/console/pull/13916)
* [OCPBUGS-34533](https://issues.redhat.com/browse/OCPBUGS-34533): Fix updating the "Until" field on the Silence > Edit page [#13926](https://github.com/openshift/console/pull/13926)
* [CONSOLE-3662](https://issues.redhat.com/browse/CONSOLE-3662), [CONSOLE-4097](https://issues.redhat.com/browse/CONSOLE-4097), [OCPBUGS-34538](https://issues.redhat.com/browse/OCPBUGS-34538): Update plugin docs regarding Console 4.16 shared module changes [#13900](https://github.com/openshift/console/pull/13900)
* NO-JIRA: revert "Add username/uid label and annotation for the user setting ConfigMap, Role and RoleBinding" [#13917](https://github.com/openshift/console/pull/13917)
* [OCPBUGS-33747](https://issues.redhat.com/browse/OCPBUGS-33747): console always query 'openshift' CSVs when listing namespaced operator details [#13912](https://github.com/openshift/console/pull/13912)
* [OCPBUGS-33733](https://issues.redhat.com/browse/OCPBUGS-33733): The s2i build strategy is not assumed for Serverless Functions [#13889](https://github.com/openshift/console/pull/13889)
* [OCPBUGS-19855](https://issues.redhat.com/browse/OCPBUGS-19855): Validate watchK8sObject query must have name and namespace for namespaced resources [#13876](https://github.com/openshift/console/pull/13876)
* [OCPBUGS-29215](https://issues.redhat.com/browse/OCPBUGS-29215): Update console cookies to use SameSite strict mode. [#13878](https://github.com/openshift/console/pull/13878)
* [OCPBUGS-33631](https://issues.redhat.com/browse/OCPBUGS-33631): show "Debug container" link for pods with status.phase… [#13850](https://github.com/openshift/console/pull/13850)
* [OCPBUGS-32698](https://issues.redhat.com/browse/OCPBUGS-32698): Remove TELEMETRY_DISABLED check from console telemetry… [#13808](https://github.com/openshift/console/pull/13808)
* [OCPBUGS-34170](https://issues.redhat.com/browse/OCPBUGS-34170): Updating openshift-enterprise-console-container image to be consistent with ART for 4.17 [#13896](https://github.com/openshift/console/pull/13896)
* [OCPBUGS-32321](https://issues.redhat.com/browse/OCPBUGS-32321): Add username/uid label and annotation for the user setting ConfigMap, Role and RoleBinding [#13798](https://github.com/openshift/console/pull/13798)
* [OCPBUGS-34222](https://issues.redhat.com/browse/OCPBUGS-34222): Fix for cypress local auth issue [#13895](https://github.com/openshift/console/pull/13895)
* [OCPBUGS-32950](https://issues.redhat.com/browse/OCPBUGS-32950): Restore user toggle when authentification is disabled [#13797](https://github.com/openshift/console/pull/13797)
* [OCPBUGS-34052](https://issues.redhat.com/browse/OCPBUGS-34052): Include English Translations text for Supported Languages in User Preference Dropdown [#13877](https://github.com/openshift/console/pull/13877)
* [OCPBUGS-34200](https://issues.redhat.com/browse/OCPBUGS-34200): fix bug where textarea is not resizable [#13892](https://github.com/openshift/console/pull/13892)
* [CONSOLE-4085](https://issues.redhat.com/browse/CONSOLE-4085): Updated oc client link in readme [#13888](https://github.com/openshift/console/pull/13888)
* [OCPBUGS-34170](https://issues.redhat.com/browse/OCPBUGS-34170): Updating openshift-enterprise-console-container image to be consistent with ART for 4.17 [#13886](https://github.com/openshift/console/pull/13886)
* [ODC-7432](https://issues.redhat.com/browse/ODC-7432): Remove pf classnames from gitops integration test [#13845](https://github.com/openshift/console/pull/13845)
* [HELM-532](https://issues.redhat.com/browse/HELM-532): Sort on basis of Chart Version [#13846](https://github.com/openshift/console/pull/13846)
* [OCPBUGS-32632](https://issues.redhat.com/browse/OCPBUGS-32632): Improve Pipeline list page performance [#13842](https://github.com/openshift/console/pull/13842)
* [OCPBUGS-33090](https://issues.redhat.com/browse/OCPBUGS-33090): UI inconsistency in topology when application grouping is collapsed [#13858](https://github.com/openshift/console/pull/13858)
* [OCPBUGS-32476](https://issues.redhat.com/browse/OCPBUGS-32476): Import from Git allow users to import an app with Build option Pipeline also when no Pipeline is available [#13853](https://github.com/openshift/console/pull/13853)
* [OCPBUGS-33383](https://issues.redhat.com/browse/OCPBUGS-33383): Fix Admission webhook warning for Route and BuildConfig creation via import flow [#13828](https://github.com/openshift/console/pull/13828)
* [OCPBUGS-32405](https://issues.redhat.com/browse/OCPBUGS-32405): Create Serverless form does not create BuildConfig [#13775](https://github.com/openshift/console/pull/13775)
* NO-ISSUE: metal3: update OWNERS [#13635](https://github.com/openshift/console/pull/13635)
* [OCPBUGS-29510](https://issues.redhat.com/browse/OCPBUGS-29510): Fix console crash-loop with OIDC auth config [#13713](https://github.com/openshift/console/pull/13713)
* [OCPBUGS-33717](https://issues.redhat.com/browse/OCPBUGS-33717): Use bridge instead of cnv-bridge [#13854](https://github.com/openshift/console/pull/13854)
* [OCPBUGS-33636](https://issues.redhat.com/browse/OCPBUGS-33636): Updating the secrets using Form editor displays an unknown warning message [#13852](https://github.com/openshift/console/pull/13852)
* [OCPBUGS-33587](https://issues.redhat.com/browse/OCPBUGS-33587): Fix password set to Secret created through Start Pipeline form [#13844](https://github.com/openshift/console/pull/13844)
* [OCPBUGS-33869](https://issues.redhat.com/browse/OCPBUGS-33869): i18n - Download and merge French and Spanish languages translations in the OCP Console [#13861](https://github.com/openshift/console/pull/13861)
* [CONSOLE-4058](https://issues.redhat.com/browse/CONSOLE-4058): add user-impersonation to QuickStartGettingStartedCard,… [#13862](https://github.com/openshift/console/pull/13862)
* [Full changelog](https://github.com/openshift/console/compare/4c4ea0402f8eacecfe7da1ec75de22e89a715efc...34d0673518e9f3c7117fc9ba64d7bd326b0a3d1a)
### [console-operator](https://github.com/openshift/console-operator/tree/f41009e8511cf5a042ca81d18e44137b7d11ba05)
* [OCPBUGS-38728](https://issues.redhat.com/browse/OCPBUGS-38728): Get externalOrganizationID instead of the organizationID [#926](https://github.com/openshift/console-operator/pull/926)
* [OCPBUGS-36213](https://issues.redhat.com/browse/OCPBUGS-36213): Vendor proper commit [#928](https://github.com/openshift/console-operator/pull/928)
* [CONSOLE-4163](https://issues.redhat.com/browse/CONSOLE-4163): Add RBAC for console to GET PackageManifests [#921](https://github.com/openshift/console-operator/pull/921)
* [CONSOLE-4161](https://issues.redhat.com/browse/CONSOLE-4161): Add Capabilities to config builder [#920](https://github.com/openshift/console-operator/pull/920)
* [OCPBUGS-35941](https://issues.redhat.com/browse/OCPBUGS-35941): Bump documentationBaseURL to 4.17 [#912](https://github.com/openshift/console-operator/pull/912)
* [OCPBUGS-36213](https://issues.redhat.com/browse/OCPBUGS-36213): Bump openshift/api to pick up removal of conversion webhook server reference [#919](https://github.com/openshift/console-operator/pull/919)
* [OCPBUGS-33715](https://issues.redhat.com/browse/OCPBUGS-33715): Add logging for determining the ORG_ID source [#918](https://github.com/openshift/console-operator/pull/918)
* [OCPBUGS-33715](https://issues.redhat.com/browse/OCPBUGS-33715): Cache organization ID when the ID changes [#913](https://github.com/openshift/console-operator/pull/913)
* [TRT-1733](https://issues.redhat.com/browse/TRT-1733): Revert #914 "OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed" [#915](https://github.com/openshift/console-operator/pull/915)
* [OCPBUGS-29547](https://issues.redhat.com/browse/OCPBUGS-29547): Apply hypershift cluster-profile for ibm-cloud-managed [#914](https://github.com/openshift/console-operator/pull/914)
* [OCPBUGS-33787](https://issues.redhat.com/browse/OCPBUGS-33787): Add cluster wide trusted CA bundle to operator [#911](https://github.com/openshift/console-operator/pull/911)
* [OCPBUGS-33787](https://issues.redhat.com/browse/OCPBUGS-33787): Tolerate the absence of ingress capability on HyperShift clusters [#886](https://github.com/openshift/console-operator/pull/886)
* [OCPBUGS-33787](https://issues.redhat.com/browse/OCPBUGS-33787): deps: bump openshift/api [#907](https://github.com/openshift/console-operator/pull/907)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#871](https://github.com/openshift/console-operator/pull/871)
* [OCPBUGS-34364](https://issues.redhat.com/browse/OCPBUGS-34364): Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.17 [#906](https://github.com/openshift/console-operator/pull/906)
* [OCPBUGS-31777](https://issues.redhat.com/browse/OCPBUGS-31777): Updates message verbs to use %q where appropriate. [#902](https://github.com/openshift/console-operator/pull/902)
* [OCPBUGS-33715](https://issues.redhat.com/browse/OCPBUGS-33715): Cache organization ID [#904](https://github.com/openshift/console-operator/pull/904)
* [Full changelog](https://github.com/openshift/console-operator/compare/92447df597eeca8a92bb9019e854619e19736638...f41009e8511cf5a042ca81d18e44137b7d11ba05)
### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/24a653296bab25b772cf6a573cc26f6f884be4ae)
* [NP-1042](https://issues.redhat.com/browse/NP-1042): Update owners [#164](https://github.com/openshift/containernetworking-plugins/pull/164)
* [OKD-218](https://issues.redhat.com/browse/OKD-218): install util-linux [#165](https://github.com/openshift/containernetworking-plugins/pull/165)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/73b4123cc75abd22af8dc3b429836be2bea45fd5...24a653296bab25b772cf6a573cc26f6f884be4ae)
### [coredns](https://github.com/openshift/coredns/tree/d3b441c150ccbcc0d9ebf03b8c39a730b830ddb1)
* [NE-1721](https://issues.redhat.com/browse/NE-1721): Merge 1.11.3 [#118](https://github.com/openshift/coredns/pull/118)
* [OCPBUGS-33750](https://issues.redhat.com/browse/OCPBUGS-33750): UPSTREAM: <carry>: openshift: Bump the version of ocp_dnsnameresolver external plugin [#122](https://github.com/openshift/coredns/pull/122)
* [OCPBUGS-34619](https://issues.redhat.com/browse/OCPBUGS-34619): UPSTREAM: 6692: openshift: Fix OCPBUGS-34619 [#121](https://github.com/openshift/coredns/pull/121)
* [OCPBUGS-34169](https://issues.redhat.com/browse/OCPBUGS-34169): Updating coredns-container image to be consistent with ART for 4.17 [#120](https://github.com/openshift/coredns/pull/120)
* [OCPBUGS-34169](https://issues.redhat.com/browse/OCPBUGS-34169): Updating coredns-container image to be consistent with ART for 4.17 [#119](https://github.com/openshift/coredns/pull/119)
* [Full changelog](https://github.com/openshift/coredns/compare/1e417656c1c72d3410b31ee08caf25bcdf8836e3...d3b441c150ccbcc0d9ebf03b8c39a730b830ddb1)
### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/f5b13c522e62538892fa90e1e5ddc89fc31dc538)
* [OCPBUGS-43427](https://issues.redhat.com/browse/OCPBUGS-43427): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.30 into release-4.17 [#302](https://github.com/openshift/cloud-provider-openstack/pull/302)
* [OCPBUGS-34113](https://issues.redhat.com/browse/OCPBUGS-34113): Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.17 [#292](https://github.com/openshift/cloud-provider-openstack/pull/292)
* [OCPBUGS-34113](https://issues.redhat.com/browse/OCPBUGS-34113), [OCPBUGS-34137](https://issues.redhat.com/browse/OCPBUGS-34137), [OCPBUGS-34460](https://issues.redhat.com/browse/OCPBUGS-34460), [OCPBUGS-35462](https://issues.redhat.com/browse/OCPBUGS-35462): sync upstream on release-1.30/go1.22 [#287](https://github.com/openshift/cloud-provider-openstack/pull/287)
* NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into master [#284](https://github.com/openshift/cloud-provider-openstack/pull/284)
* NO-JIRA: Remove dulek from shiftstack-team [#279](https://github.com/openshift/cloud-provider-openstack/pull/279)
* [OCPBUGS-34113](https://issues.redhat.com/browse/OCPBUGS-34113): Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.17 [#280](https://github.com/openshift/cloud-provider-openstack/pull/280)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/b7e9010d795f78f39bf12433599658bbbdd9560e...f5b13c522e62538892fa90e1e5ddc89fc31dc538)
### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8)
* [OCPBUGS-38457](https://issues.redhat.com/browse/OCPBUGS-38457): Add missing healthchecks [#240](https://github.com/openshift/csi-driver-manila-operator/pull/240)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#234](https://github.com/openshift/csi-driver-manila-operator/pull/234)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#233](https://github.com/openshift/csi-driver-manila-operator/pull/233)
* [OCPBUGS-34090](https://issues.redhat.com/browse/OCPBUGS-34090): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.17 [#232](https://github.com/openshift/csi-driver-manila-operator/pull/232)
* [OCPBUGS-34090](https://issues.redhat.com/browse/OCPBUGS-34090): Updating csi-driver-manila-operator-container image to be consistent with ART for 4.17 [#231](https://github.com/openshift/csi-driver-manila-operator/pull/231)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/c25d1ff2677a882504b18220dcbbe153781f3883...efc99a2a5e72ec3d3ecd1792fdd9225e74ac6ea8)
### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/6a72c2541e6bc85bba0c1a7ed379dcb9fa53dfb7)
* [OCPBUGS-34363](https://issues.redhat.com/browse/OCPBUGS-34363): Updating csi-driver-nfs-container image to be consistent with ART for 4.17 [#144](https://github.com/openshift/csi-driver-nfs/pull/144)
* NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master [#140](https://github.com/openshift/csi-driver-nfs/pull/140)
* [OCPBUGS-34363](https://issues.redhat.com/browse/OCPBUGS-34363): Updating csi-driver-nfs-container image to be consistent with ART for 4.17 [#142](https://github.com/openshift/csi-driver-nfs/pull/142)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/406cec72a10684a7545a976a8c31e60712bcc5b2...6a72c2541e6bc85bba0c1a7ed379dcb9fa53dfb7)
### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/027a8c4e106d7c02e1688c38015b8fd2bd94a304)
* [OCPBUGS-34217](https://issues.redhat.com/browse/OCPBUGS-34217): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.17 [#188](https://github.com/openshift/csi-driver-shared-resource/pull/188)
* [OCPBUGS-44510](https://issues.redhat.com/browse/OCPBUGS-44510): Updating ose-csi-driver-shared-resource-webhook-container image to be consistent with ART for 4.17 [#233](https://github.com/openshift/csi-driver-shared-resource/pull/233)
* Updating Readme to add a new Clusterrole [#190](https://github.com/openshift/csi-driver-shared-resource/pull/190)
* NO-JIRA: Clarify Personas for Sharing [#185](https://github.com/openshift/csi-driver-shared-resource/pull/185)
* [OCPBUGS-34472](https://issues.redhat.com/browse/OCPBUGS-34472): Updating ose-csi-driver-shared-resource-mustgather-container image to be consistent with ART for 4.17 [#189](https://github.com/openshift/csi-driver-shared-resource/pull/189)
* [OCPBUGS-34217](https://issues.redhat.com/browse/OCPBUGS-34217): Updating ose-csi-driver-shared-resource-container image to be consistent with ART for 4.17 [#187](https://github.com/openshift/csi-driver-shared-resource/pull/187)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/bc125def6a15a71b2ef8c59e9c1284e471e7d905...027a8c4e106d7c02e1688c38015b8fd2bd94a304)
### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/c095a1f2bbd0c365b74e548498d13f8463c69eb2)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#114](https://github.com/openshift/csi-driver-shared-resource-operator/pull/114)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/1e1194bc659a5c8cfbbfeedd9d9c15540ecda0d7...c095a1f2bbd0c365b74e548498d13f8463c69eb2)
### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/32715bc6b06077e6b300d68ba0c3ed895bdaa961)
* [OCPBUGS-34440](https://issues.redhat.com/browse/OCPBUGS-34440): Updating csi-attacher-container image to be consistent with ART for 4.17 [#75](https://github.com/openshift/csi-external-attacher/pull/75)
* [OCPBUGS-34098](https://issues.redhat.com/browse/OCPBUGS-34098): Updating csi-attacher-container image to be consistent with ART for 4.17 [#74](https://github.com/openshift/csi-external-attacher/pull/74)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/7da80aab15cabd182ee35742443c0b836de4e180...32715bc6b06077e6b300d68ba0c3ed895bdaa961)
### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/fe460e56e19dd3cc5497fd068083da9850fc1996)
* [STOR-1593](https://issues.redhat.com/browse/STOR-1593): Rebase to upstream v5.0.2 for 4.17 [#104](https://github.com/openshift/csi-external-provisioner/pull/104)
* [OCPBUGS-34458](https://issues.redhat.com/browse/OCPBUGS-34458): Updating csi-provisioner-container image to be consistent with ART for 4.17 [#103](https://github.com/openshift/csi-external-provisioner/pull/103)
* [OCPBUGS-37455](https://issues.redhat.com/browse/OCPBUGS-37455): Revert 5.0.1 rebase [#102](https://github.com/openshift/csi-external-provisioner/pull/102)
* [STOR-1593](https://issues.redhat.com/browse/STOR-1593): Rebase to upstream v5.0.1 for 4.17 [#98](https://github.com/openshift/csi-external-provisioner/pull/98)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/9e8af011e0a0aea96066821b57c42bdaccf24a42...fe460e56e19dd3cc5497fd068083da9850fc1996)
### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/ab87a93853882d6ede0a8fe0a61469cd4fa61a62)
* [STOR-1593](https://issues.redhat.com/browse/STOR-1593): Rebase to upstream v1.11.1 for 4.17 [#164](https://github.com/openshift/csi-external-resizer/pull/164)
* [OCPBUGS-34356](https://issues.redhat.com/browse/OCPBUGS-34356): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.17 [#163](https://github.com/openshift/csi-external-resizer/pull/163)
* [OCPBUGS-34356](https://issues.redhat.com/browse/OCPBUGS-34356): Updating ose-csi-external-resizer-container image to be consistent with ART for 4.17 [#162](https://github.com/openshift/csi-external-resizer/pull/162)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/bdf5bfb4da07be6a85ae5253218f29fb8af51adf...ab87a93853882d6ede0a8fe0a61469cd4fa61a62)
### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/aa558ca4bc55238e1909119f94eaf33872a76dec)
* [STOR-1593](https://issues.redhat.com/browse/STOR-1593): Rebase external-snapshotter to v8.0.1 for OCP 4.17 [#156](https://github.com/openshift/csi-external-snapshotter/pull/156)
* [OCPBUGS-34257](https://issues.redhat.com/browse/OCPBUGS-34257): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.17 [#158](https://github.com/openshift/csi-external-snapshotter/pull/158)
* [OCPBUGS-34292](https://issues.redhat.com/browse/OCPBUGS-34292): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.17 [#159](https://github.com/openshift/csi-external-snapshotter/pull/159)
* [OCPBUGS-34435](https://issues.redhat.com/browse/OCPBUGS-34435): Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.17 [#157](https://github.com/openshift/csi-external-snapshotter/pull/157)
* [OCPBUGS-34292](https://issues.redhat.com/browse/OCPBUGS-34292): Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.17 [#152](https://github.com/openshift/csi-external-snapshotter/pull/152)
* [OCPBUGS-34257](https://issues.redhat.com/browse/OCPBUGS-34257): Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.17 [#151](https://github.com/openshift/csi-external-snapshotter/pull/151)
* [OCPBUGS-34061](https://issues.redhat.com/browse/OCPBUGS-34061): Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.17 [#150](https://github.com/openshift/csi-external-snapshotter/pull/150)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/5315d37a1e5415e8b6870f23e50238681979cc28...aa558ca4bc55238e1909119f94eaf33872a76dec)
### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/a890abd302dce28e4a70b4c274a0152fba846e55)
* [OCPBUGS-34275](https://issues.redhat.com/browse/OCPBUGS-34275): Updating csi-livenessprobe-container image to be consistent with ART for 4.17 [#66](https://github.com/openshift/csi-livenessprobe/pull/66)
* [OCPBUGS-34275](https://issues.redhat.com/browse/OCPBUGS-34275): Updating csi-livenessprobe-container image to be consistent with ART for 4.17 [#65](https://github.com/openshift/csi-livenessprobe/pull/65)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/f5e3ff5532d58af34b5b407be2cac6934c1ff223...a890abd302dce28e4a70b4c274a0152fba846e55)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/436a1f334dd75ae75206f52223b7933f7ff5036f)
* [OCPBUGS-34361](https://issues.redhat.com/browse/OCPBUGS-34361): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.17 [#74](https://github.com/openshift/csi-node-driver-registrar/pull/74)
* [OCPBUGS-34361](https://issues.redhat.com/browse/OCPBUGS-34361): Updating csi-node-driver-registrar-container image to be consistent with ART for 4.17 [#73](https://github.com/openshift/csi-node-driver-registrar/pull/73)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/8930c368500a5d1f15c3e1a5906397e206879de0...436a1f334dd75ae75206f52223b7933f7ff5036f)
### [docker-builder](https://github.com/openshift/builder/tree/5dec103fe7e811afc7d6886db94c6ffdbfa77c56)
* [OCPBUGS-33215](https://issues.redhat.com/browse/OCPBUGS-33215): Bumps openshift/api & related dependencies [#394](https://github.com/openshift/builder/pull/394)
* [OCPBUGS-25495](https://issues.redhat.com/browse/OCPBUGS-25495): Upgrade s2i and buildah [#392](https://github.com/openshift/builder/pull/392)
* [Full changelog](https://github.com/openshift/builder/compare/5e57cc83b011f98b9cd10b9f97e9d5ae6e5ee6be...5dec103fe7e811afc7d6886db94c6ffdbfa77c56)
### [docker-registry](https://github.com/openshift/image-registry/tree/ef9fa95763754c05beb32e1ddca406de67ae4bd6)
* [OCPBUGS-39040](https://issues.redhat.com/browse/OCPBUGS-39040): pull upstream distribution changes to use a consistent multipart chunk size [#409](https://github.com/openshift/image-registry/pull/409)
* [OCPBUGS-36521](https://issues.redhat.com/browse/OCPBUGS-36521): Rename Dockerfile [#407](https://github.com/openshift/image-registry/pull/407)
* [OCPBUGS-35335](https://issues.redhat.com/browse/OCPBUGS-35335): use SelfAccessReview to obtain user info [#404](https://github.com/openshift/image-registry/pull/404)
* [OCPBUGS-34442](https://issues.redhat.com/browse/OCPBUGS-34442): Updating openshift-enterprise-registry-container image to be consistent with ART for 4.17 [#401](https://github.com/openshift/image-registry/pull/401)
* [OCPBUGS-33453](https://issues.redhat.com/browse/OCPBUGS-33453): Use SAR instead of SSAR [#402](https://github.com/openshift/image-registry/pull/402)
* [OCPBUGS-34115](https://issues.redhat.com/browse/OCPBUGS-34115): Updating openshift-enterprise-registry-container image to be consistent with ART for 4.17 [#399](https://github.com/openshift/image-registry/pull/399)
* [Full changelog](https://github.com/openshift/image-registry/compare/e4d56625da1bde6f51fb84f05efe02df92b6f120...ef9fa95763754c05beb32e1ddca406de67ae4bd6)
### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/859518f6952407a56ddf7d0562c98fe27e9e0efe)
* Adding the `+` char to the RT kernel version. (#154) [#154](https://github.com/openshift/driver-toolkit/pull/154)
* Updating driver-toolkit-container image to be consistent with ART for 4.17 (#153) [#153](https://github.com/openshift/driver-toolkit/pull/153)
* ART bash parser is failing on [[...]] syntax (#151) [#151](https://github.com/openshift/driver-toolkit/pull/151)
* Patch manifests to require stream-coreos instead of rhel-coreos in the OKD/SCOS case (#149) [#149](https://github.com/openshift/driver-toolkit/pull/149)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/1d5732f0209bb7d98661a53c66c5ac265272dce6...859518f6952407a56ddf7d0562c98fe27e9e0efe)
### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/3193a756d60e14f7139992e2e42b7036955652e7)
* [OCPBUGS-37730](https://issues.redhat.com/browse/OCPBUGS-37730): Build rhel8 binary from rhel8 golang builder [#88](https://github.com/openshift/egress-router-cni/pull/88)
* [OCPBUGS-35526](https://issues.redhat.com/browse/OCPBUGS-35526): update to go 1.22 and k8s.io mods to v0.30 [#84](https://github.com/openshift/egress-router-cni/pull/84)
* [OKD-217](https://issues.redhat.com/browse/OKD-217): install util-linux [#82](https://github.com/openshift/egress-router-cni/pull/82)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/7089efe6100c1f52f28adccf1dccc722b8dcacdc...3193a756d60e14f7139992e2e42b7036955652e7)
### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/c82057da87388662904654d4f01acd06595ee22d)
* [OCPBUGS-42680](https://issues.redhat.com/browse/OCPBUGS-42680): Rebase etcd 3.5.16 openshift 4.17 [#291](https://github.com/openshift/etcd/pull/291)
* NO-JIRA: use golang 1.22 image [#286](https://github.com/openshift/etcd/pull/286)
* [OCPBUGS-34653](https://issues.redhat.com/browse/OCPBUGS-34653): Rebase etcd 3.5.14 openshift 4.17 [#273](https://github.com/openshift/etcd/pull/273)
* [Full changelog](https://github.com/openshift/etcd/compare/16202ec4ecea353650b3681979ba73c5d8664d8c...c82057da87388662904654d4f01acd06595ee22d)
### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/8ce997d7b2fc615ce23788512246fb9955c7c711)
* [OCPBUGS-35256](https://issues.redhat.com/browse/OCPBUGS-35256): Allow bootstrap node in existing instance groups [#66](https://github.com/openshift/cloud-provider-gcp/pull/66)
* NO-JIRA: Update OWNERS [#65](https://github.com/openshift/cloud-provider-gcp/pull/65)
* [OCPCLOUD-2606](https://issues.redhat.com/browse/OCPCLOUD-2606): Merge https://github.com/kubernetes/cloud-provider-gcp:master (856e124) into master [#57](https://github.com/openshift/cloud-provider-gcp/pull/57)
* [OCPBUGS-30505](https://issues.redhat.com/browse/OCPBUGS-30505): Bump protobuf to v1.34.1 [#62](https://github.com/openshift/cloud-provider-gcp/pull/62)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/26b43dfc7ddce718014b8991db10cbff30b7b117...8ce997d7b2fc615ce23788512246fb9955c7c711)
### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/9c561f2dfeff6ca44a6c23ae8acbce4a465b380f)
* NO-JIRA: Update OWNERS [#229](https://github.com/openshift/cluster-api-provider-gcp/pull/229)
* [OCPCLOUD-2622](https://issues.redhat.com/browse/OCPCLOUD-2622): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.7.0 (93bb59d) into master [#228](https://github.com/openshift/cluster-api-provider-gcp/pull/228)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/02432df87df9a731c8d630311854fbd515602e91...9c561f2dfeff6ca44a6c23ae8acbce4a465b380f)
### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/0d6fbdb09401bcdf1a6da8dc07842732bc8e95ff)
* [OCPBUGS-43738](https://issues.redhat.com/browse/OCPBUGS-43738): Add c4a instance as arm type [#95](https://github.com/openshift/machine-api-provider-gcp/pull/95)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Bump o/api and MAO packages [#87](https://github.com/openshift/machine-api-provider-gcp/pull/87)
* NO-JIRA: Update OWNERS [#85](https://github.com/openshift/machine-api-provider-gcp/pull/85)
* [OCPCLOUD-2613](https://issues.redhat.com/browse/OCPCLOUD-2613): Bump k8s to 1.30 [#84](https://github.com/openshift/machine-api-provider-gcp/pull/84)
* [OCPBUGS-34381](https://issues.redhat.com/browse/OCPBUGS-34381): Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.17 [#83](https://github.com/openshift/machine-api-provider-gcp/pull/83)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/e72657c0d2713842f701f1d43c777d6ec6880cb9...0d6fbdb09401bcdf1a6da8dc07842732bc8e95ff)
### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/c770b41229e39d8859fc11ec709ab57a0e0ad06a)
* [STOR-1602](https://issues.redhat.com/browse/STOR-1602): Rebase to upstream v1.14.1 for OCP 4.17 [#68](https://github.com/openshift/gcp-pd-csi-driver/pull/68)
* [OCPBUGS-34245](https://issues.redhat.com/browse/OCPBUGS-34245): Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.17 [#69](https://github.com/openshift/gcp-pd-csi-driver/pull/69)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/5ed71c64ce9c1879f0d2a17976387f1b0292796d...c770b41229e39d8859fc11ec709ab57a0e0ad06a)
### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/c23b064fe303ec760c0de6204577d10ef0b0f63d)
* [CFE-879](https://issues.redhat.com/browse/CFE-879): Add resourceTags in Infrastructure to driver args list [#120](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/120)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#124](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/124)
* [OCPBUGS-34439](https://issues.redhat.com/browse/OCPBUGS-34439): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.17 [#123](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/123)
* [OCPBUGS-34097](https://issues.redhat.com/browse/OCPBUGS-34097): Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.17 [#121](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/121)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/799327f7c45b362beadc39e85b9e773cab3654c5...c23b064fe303ec760c0de6204577d10ef0b0f63d)
### [haproxy-router](https://github.com/openshift/router/tree/a33f2b6ad04f8c39b95c1839340f0e38b5c0662a)
* [OCPBUGS-38101](https://issues.redhat.com/browse/OCPBUGS-38101): Bump k8s.io/* packages to v0.30.3 [#615](https://github.com/openshift/router/pull/615)
* [OCPBUGS-34351](https://issues.redhat.com/browse/OCPBUGS-34351): Updating ose-haproxy-router-base-container image to be consistent with ART for 4.17 [#602](https://github.com/openshift/router/pull/602)
* [OCPBUGS-34471](https://issues.redhat.com/browse/OCPBUGS-34471): Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.17 [#604](https://github.com/openshift/router/pull/604)
* [Full changelog](https://github.com/openshift/router/compare/4d9b8c4afa6cd89b41f4bd5e7c09ccddd8679bc6...a33f2b6ad04f8c39b95c1839340f0e38b5c0662a)
### [hyperkube, installer-kube-apiserver-artifacts, pod](https://github.com/openshift/kubernetes/tree/5a24e858060a609366c5ff1402ec1424e9f7e403)
* [OCPBUGS-44512](https://issues.redhat.com/browse/OCPBUGS-44512): Bump k8s api to 1.30.6 [#2134](https://github.com/openshift/kubernetes/pull/2134)
* [OCPBUGS-42427](https://issues.redhat.com/browse/OCPBUGS-42427): UPSTREAM: 125398: Fix issue with scheduler failing on hostname mismatch [#2097](https://github.com/openshift/kubernetes/pull/2097)
* [OCPBUGS-42640](https://issues.redhat.com/browse/OCPBUGS-42640): Unrevert Bump k8s api to 1.30.5" [#2107](https://github.com/openshift/kubernetes/pull/2107)
* [OCPBUGS-42640](https://issues.redhat.com/browse/OCPBUGS-42640): Revert #2089 "OCPBUGS-42167: Bump k8s api to 1.30.5" [#2100](https://github.com/openshift/kubernetes/pull/2100)
* [OCPBUGS-42167](https://issues.redhat.com/browse/OCPBUGS-42167): Bump k8s api to 1.30.5 [#2089](https://github.com/openshift/kubernetes/pull/2089)
* [OCPBUGS-42019](https://issues.redhat.com/browse/OCPBUGS-42019): UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) [#2087](https://github.com/openshift/kubernetes/pull/2087)
* [OCPBUGS-41638](https://issues.redhat.com/browse/OCPBUGS-41638): UPSTREAM: <carry>: bump cadvisor version to fix missing network stats [#2081](https://github.com/openshift/kubernetes/pull/2081)
* [OCPBUGS-39014](https://issues.redhat.com/browse/OCPBUGS-39014): Bump 1.30.4 [#2062](https://github.com/openshift/kubernetes/pull/2062)
* [OCPBUGS-38363](https://issues.redhat.com/browse/OCPBUGS-38363): UPSTREAM: 126470: Move APIServingWithRoutine to alpha and disabled by default [#2053](https://github.com/openshift/kubernetes/pull/2053)
* NO-JIRA: update downstream owners [#2048](https://github.com/openshift/kubernetes/pull/2048)
* [OCPBUGS-37620](https://issues.redhat.com/browse/OCPBUGS-37620): Bump 1.30.3 [#2038](https://github.com/openshift/kubernetes/pull/2038)
* NO-JIRA: UPSTREAM: 126213: add test about container metrics from cadvisor [#2040](https://github.com/openshift/kubernetes/pull/2040)
* [OCPBUGS-37281](https://issues.redhat.com/browse/OCPBUGS-37281): UPSTREAM: 126104: Add funcs in pkg/filesystem/util to set file permissions on Windows and update container log dir perms [#2034](https://github.com/openshift/kubernetes/pull/2034)
* [OCPEDGE-1181](https://issues.redhat.com/browse/OCPEDGE-1181): UPSTREAM: <carry>: update test annotations for sno [#2033](https://github.com/openshift/kubernetes/pull/2033)
* NO-JIRA: add tool to validate test packages imported [#2024](https://github.com/openshift/kubernetes/pull/2024)
* [OCPBUGS-36742](https://issues.redhat.com/browse/OCPBUGS-36742): UPSTREAM: <carry>: sync imports [#2017](https://github.com/openshift/kubernetes/pull/2017)
* [OCPBUGS-37111](https://issues.redhat.com/browse/OCPBUGS-37111): UPSTREAM: 125404: Fix that PodIP field is temporarily removed for a terminal pod [#2025](https://github.com/openshift/kubernetes/pull/2025)
* NO-JIRA: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) [#2023](https://github.com/openshift/kubernetes/pull/2023)
* [MULTIARCH-4229](https://issues.redhat.com/browse/MULTIARCH-4229): UPSTREAM:<carry>:bump cadvisor for 3516 upstream patches [#2012](https://github.com/openshift/kubernetes/pull/2012)
* [OCPBUGS-36743](https://issues.redhat.com/browse/OCPBUGS-36743): UPSTREAM: <carry>: inject k8s version from hyperkube Dockerfile [#2018](https://github.com/openshift/kubernetes/pull/2018)
* [OCPBUGS-34294](https://issues.redhat.com/browse/OCPBUGS-34294): OCPBUGS-34309: UPSTREAM: <carry>: update base image [#1998](https://github.com/openshift/kubernetes/pull/1998)
* [API-1783](https://issues.redhat.com/browse/API-1783): Bump 1.30.2 [#1996](https://github.com/openshift/kubernetes/pull/1996)
* [OCPBUGS-14613](https://issues.redhat.com/browse/OCPBUGS-14613): drop carry "don't fail integration due to too many goroutines" [#1995](https://github.com/openshift/kubernetes/pull/1995)
* [OCPBUGS-34544](https://issues.redhat.com/browse/OCPBUGS-34544): UPSTREAM: <carry>: Disable PersistentVolumeLabel by default [#1991](https://github.com/openshift/kubernetes/pull/1991)
* [OCPBUGS-34050](https://issues.redhat.com/browse/OCPBUGS-34050): Backport 125337 [#1987](https://github.com/openshift/kubernetes/pull/1987)
* [OCPBUGS-34544](https://issues.redhat.com/browse/OCPBUGS-34544): UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel [#1986](https://github.com/openshift/kubernetes/pull/1986)
* [OCPBUGS-34593](https://issues.redhat.com/browse/OCPBUGS-34593): UPSTREAM: 124933: [Scheduler] Use allNodes when calculating nextStartNodeIndex [#1983](https://github.com/openshift/kubernetes/pull/1983)
* [API-1783](https://issues.redhat.com/browse/API-1783): UPSTREAM: <carry>: skip PodLifecycleSleepAction test [#1982](https://github.com/openshift/kubernetes/pull/1982)
* [API-1783](https://issues.redhat.com/browse/API-1783): UPSTREAM: <carry>: skip storage tests [#1981](https://github.com/openshift/kubernetes/pull/1981)
* [OCPBUGS-25331](https://issues.redhat.com/browse/OCPBUGS-25331): UPSTREAM: <carry>: extend termination events [#1827](https://github.com/openshift/kubernetes/pull/1827)
* [API-1783](https://issues.redhat.com/browse/API-1783): Bump 1.30.1 [#1979](https://github.com/openshift/kubernetes/pull/1979)
* [API-1783](https://issues.redhat.com/browse/API-1783): Rebase 1.30.0 [#1953](https://github.com/openshift/kubernetes/pull/1953)
* [Full changelog](https://github.com/openshift/kubernetes/compare/67d33871ba24f0e8c4d2d201a4c4decaabfa1eca...5a24e858060a609366c5ff1402ec1424e9f7e403)
### [hypershift](https://github.com/openshift/hypershift/tree/4430d04b2bca1f8cf2ddd0a5ed5b4dc7cd42c639)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5183](https://github.com/openshift/hypershift/pull/5183)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5154](https://github.com/openshift/hypershift/pull/5154)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5144](https://github.com/openshift/hypershift/pull/5144)
* [OCPBUGS-44184](https://issues.redhat.com/browse/OCPBUGS-44184): dont use registryOverrides on kube rbac proxy image be… [#5033](https://github.com/openshift/hypershift/pull/5033)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5113](https://github.com/openshift/hypershift/pull/5113)
* [OCPBUGS-43929](https://issues.redhat.com/browse/OCPBUGS-43929): Return the right tagReference on Catalogs ImageStream [#4993](https://github.com/openshift/hypershift/pull/4993)
* [OCPBUGS-44276](https://issues.redhat.com/browse/OCPBUGS-44276): Configure OAuth https proxy to dial cloud endpoints directly [#5070](https://github.com/openshift/hypershift/pull/5070)
* [OCPBUGS-44268](https://issues.redhat.com/browse/OCPBUGS-44268): Fix order rendering HCP objects [#5064](https://github.com/openshift/hypershift/pull/5064)
* NO-JIRA: Update Konflux references (release-4.17) [#5098](https://github.com/openshift/hypershift/pull/5098)
* chore(deps): update konflux references (release-4.17) [#5075](https://github.com/openshift/hypershift/pull/5075)
* [HOSTEDCP-2046](https://issues.redhat.com/browse/HOSTEDCP-2046): CPO 4.17 tekton builds [#5006](https://github.com/openshift/hypershift/pull/5006)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#5053](https://github.com/openshift/hypershift/pull/5053)
* NO-JIRA: Update Konflux references to fedcfe0 (release-4.17) [#5041](https://github.com/openshift/hypershift/pull/5041)
* chore(deps): update konflux references (release-4.17) [#5023](https://github.com/openshift/hypershift/pull/5023)
* chore(deps): update konflux references to f53fe54 (release-4.17) [#5018](https://github.com/openshift/hypershift/pull/5018)
* NO-JIRA: Update Konflux references (release-4.17) [#5009](https://github.com/openshift/hypershift/pull/5009)
* [OCPBUGS-42879](https://issues.redhat.com/browse/OCPBUGS-42879): Add network policies for konnectivity server and ignition server proxy [#4865](https://github.com/openshift/hypershift/pull/4865)
* NO-JIRA: bump catalog operators version [#4992](https://github.com/openshift/hypershift/pull/4992)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4972](https://github.com/openshift/hypershift/pull/4972)
* [OCPBUGS-43746](https://issues.redhat.com/browse/OCPBUGS-43746): add ValidIDPConfiguration condition to report IDP config issues [#4969](https://github.com/openshift/hypershift/pull/4969)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4958](https://github.com/openshift/hypershift/pull/4958)
* [OCPBUGS-43464](https://issues.redhat.com/browse/OCPBUGS-43464): Pass feature flags to clusterpolicy controller [#4928](https://github.com/openshift/hypershift/pull/4928)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4931](https://github.com/openshift/hypershift/pull/4931)
* [OCPBUGS-42704](https://issues.redhat.com/browse/OCPBUGS-42704): Run 2 replicas of active/passive HA components [#4843](https://github.com/openshift/hypershift/pull/4843)
* [OCPBUGS-43316](https://issues.redhat.com/browse/OCPBUGS-43316): Enforce privileged PSA by default [#4834](https://github.com/openshift/hypershift/pull/4834)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4921](https://github.com/openshift/hypershift/pull/4921)
* [OCPBUGS-43374](https://issues.redhat.com/browse/OCPBUGS-43374): [release-4.17] (manual backport) openstack/e2e: re-work nodepool tests [#4914](https://github.com/openshift/hypershift/pull/4914)
* NO-JIRA: chore(deps): update konflux references to 674e70f (release-4.17) [#4907](https://github.com/openshift/hypershift/pull/4907)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4895](https://github.com/openshift/hypershift/pull/4895)
* [OCPBUGS-43051](https://issues.redhat.com/browse/OCPBUGS-43051): Use guest DNS resolution in Konnectivity HTTPS proxy by default [#4885](https://github.com/openshift/hypershift/pull/4885)
* [HOSTEDCP-2020](https://issues.redhat.com/browse/HOSTEDCP-2020): [release-4.17] Add support for SharedVPC [#4873](https://github.com/openshift/hypershift/pull/4873)
* [HOSTEDCP-2023](https://issues.redhat.com/browse/HOSTEDCP-2023): [release-4.17] Split worker and vpc endpoint security groups [#4882](https://github.com/openshift/hypershift/pull/4882)
* [OCPBUGS-42974](https://issues.redhat.com/browse/OCPBUGS-42974): [release-4.17] Do not send traffic to local audit-webhook through konnectivity [#4869](https://github.com/openshift/hypershift/pull/4869)
* NO-JIRA: Remove EnsurePSANotPrivileged check [#4855](https://github.com/openshift/hypershift/pull/4855)
* [OCPBUGS-42714](https://issues.redhat.com/browse/OCPBUGS-42714): label routes only when HCP router used [#4845](https://github.com/openshift/hypershift/pull/4845)
* NO-JIRA: chore(deps): update konflux references to 37b9187 (release-4.17) [#4854](https://github.com/openshift/hypershift/pull/4854)
* [OCPBUGS-42390](https://issues.redhat.com/browse/OCPBUGS-42390): Add Annotation to skip deleting hcp namespace [#4792](https://github.com/openshift/hypershift/pull/4792)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4812](https://github.com/openshift/hypershift/pull/4812)
* NO-JIRA: e2e: openstack: fix nil deref in route53 teardown [#4810](https://github.com/openshift/hypershift/pull/4810)
* [OCPBUGS-42261](https://issues.redhat.com/browse/OCPBUGS-42261): Conditionally manage kubeconfig secrets for DNS and Ingress operators [#4764](https://github.com/openshift/hypershift/pull/4764)
* [OCPBUGS-42098](https://issues.redhat.com/browse/OCPBUGS-42098): Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca [#4736](https://github.com/openshift/hypershift/pull/4736)
* chore(deps): update konflux references to 5ac9b24 (release-4.17) [#4780](https://github.com/openshift/hypershift/pull/4780)
* [OCPBUGS-41552](https://issues.redhat.com/browse/OCPBUGS-41552): Let payload generation pick the release for the NodePool [#4691](https://github.com/openshift/hypershift/pull/4691)
* chore(deps): update konflux references to 2c3426a (release-4.17) [#4774](https://github.com/openshift/hypershift/pull/4774)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4761](https://github.com/openshift/hypershift/pull/4761)
* NO-JIRA: Security fixes for openshift-ci-security job [#4748](https://github.com/openshift/hypershift/pull/4748)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4726](https://github.com/openshift/hypershift/pull/4726)
* [HOSTEDCP-1953](https://issues.redhat.com/browse/HOSTEDCP-1953): bump CCO version [#4694](https://github.com/openshift/hypershift/pull/4694)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4682](https://github.com/openshift/hypershift/pull/4682)
* [OCPBUGS-41371](https://issues.redhat.com/browse/OCPBUGS-41371): CPO oauth idp converter: resolve names before dialing [#4681](https://github.com/openshift/hypershift/pull/4681)
* [OCPBUGS-38637](https://issues.redhat.com/browse/OCPBUGS-38637): Use http dialer when dialing through proxy [#4680](https://github.com/openshift/hypershift/pull/4680)
* [OSASINFRA-3572](https://issues.redhat.com/browse/OSASINFRA-3572), [OSASINFRA-3573](https://issues.redhat.com/browse/OSASINFRA-3573): OpenStack backports for ingress [#4644](https://github.com/openshift/hypershift/pull/4644)
* [OCPBUGS-39365](https://issues.redhat.com/browse/OCPBUGS-39365): Update CSO deployment file [#4655](https://github.com/openshift/hypershift/pull/4655)
* [OCPBUGS-39452](https://issues.redhat.com/browse/OCPBUGS-39452): Fix multi-arch validation by prioritizing ReleaseImage check [#4665](https://github.com/openshift/hypershift/pull/4665)
* [OCPBUGS-39419](https://issues.redhat.com/browse/OCPBUGS-39419): handle version skewed NodePools that do not have rhel9 binaries [#4662](https://github.com/openshift/hypershift/pull/4662)
* [OCPBUGS-39371](https://issues.redhat.com/browse/OCPBUGS-39371): Fixed NodePool version validation [#4657](https://github.com/openshift/hypershift/pull/4657)
* [OCPBUGS-39234](https://issues.redhat.com/browse/OCPBUGS-39234): Set Image as mutable and trigger upgrades on Azure NodePool spec changes [#4640](https://github.com/openshift/hypershift/pull/4640)
* [HOSTEDCP-1938](https://issues.redhat.com/browse/HOSTEDCP-1938): Remove saas template in 4.17 [#4645](https://github.com/openshift/hypershift/pull/4645)
* [OCPBUGS-39225](https://issues.redhat.com/browse/OCPBUGS-39225): copy image-registry AdditionalTrustedCA configmap into HC openshift-config [#4637](https://github.com/openshift/hypershift/pull/4637)
* [OCPBUGS-39159](https://issues.redhat.com/browse/OCPBUGS-39159): regroup KAS certs into public and private certs [#4634](https://github.com/openshift/hypershift/pull/4634)
* [OCPBUGS-39102](https://issues.redhat.com/browse/OCPBUGS-39102): Add networking-console-plugin image to CNO as an env var [#4592](https://github.com/openshift/hypershift/pull/4592)
* NO-JIRA: chore(deps): update konflux references (release-4.17) [#4601](https://github.com/openshift/hypershift/pull/4601)
* [OCPBUGS-38967](https://issues.redhat.com/browse/OCPBUGS-38967): [release-4.17] Remove go workspaces [#4620](https://github.com/openshift/hypershift/pull/4620)
* [OCPBUGS-38941](https://issues.redhat.com/browse/OCPBUGS-38941): copy oapi ca-trust recursively when building trust anchor [#4614](https://github.com/openshift/hypershift/pull/4614)
* [HOSTEDCP-1861](https://issues.redhat.com/browse/HOSTEDCP-1861): cpo: separate KAS cert into internal and external [#4595](https://github.com/openshift/hypershift/pull/4595)
* [OCPBUGS-38833](https://issues.redhat.com/browse/OCPBUGS-38833): [Azure] Use infraID from infra-json if provided [#4590](https://github.com/openshift/hypershift/pull/4590)
* NO-JIRA: Fix KubeVirtNodesLiveMigratable condition for NodePools with 0 replicas [#4588](https://github.com/openshift/hypershift/pull/4588)
* [HOSTEDCP-1764](https://issues.redhat.com/browse/HOSTEDCP-1764): retrieve registryOverrides when ImageStream is not ava… [#4540](https://github.com/openshift/hypershift/pull/4540)
* NO-JIRA: Update quay.io/openshift/origin-base Docker tag to v4.16 (release-4.17) [#4573](https://github.com/openshift/hypershift/pull/4573)
* NO-JIRA: Update golang Docker tag to v1.23 (release-4.17) [#4571](https://github.com/openshift/hypershift/pull/4571)
* NO-JIRA: Update Konflux references (release-4.17) [#4570](https://github.com/openshift/hypershift/pull/4570)
* [OCPBUGS-38410](https://issues.redhat.com/browse/OCPBUGS-38410): bump CPO base image to use 4.17:base-rhel9 [#4544](https://github.com/openshift/hypershift/pull/4544)
* [OCPBUGS-38637](https://issues.redhat.com/browse/OCPBUGS-38637): HTTPS proxy: do not proxy communication to cloud providers [#4577](https://github.com/openshift/hypershift/pull/4577)
* [HOSTEDCP-1609](https://issues.redhat.com/browse/HOSTEDCP-1609): Support configuring Azure diagnostics via CLI flags [#4555](https://github.com/openshift/hypershift/pull/4555)
* [OCPBUGS-38438](https://issues.redhat.com/browse/OCPBUGS-38438): release-4.17 should not build main HO [#4550](https://github.com/openshift/hypershift/pull/4550)
* [CNV-42532](https://issues.redhat.com/browse/CNV-42532): KubeVirt: add label to DataVolume [#4509](https://github.com/openshift/hypershift/pull/4509)
* [OCPBUGS-38183](https://issues.redhat.com/browse/OCPBUGS-38183): make use of azure-disk-driver-control-plane-image [#4514](https://github.com/openshift/hypershift/pull/4514)
* [OSASINFRA-3546](https://issues.redhat.com/browse/OSASINFRA-3546): docs/openstack: fix typo [#4510](https://github.com/openshift/hypershift/pull/4510)
* [OCPBUGS-25937](https://issues.redhat.com/browse/OCPBUGS-25937): Support KMS v2 on AWS [#4502](https://github.com/openshift/hypershift/pull/4502)
* [OSASINFRA-3555](https://issues.redhat.com/browse/OSASINFRA-3555): openstack: e2e adjustments [#4492](https://github.com/openshift/hypershift/pull/4492)
* [HOSTEDCP-1776](https://issues.redhat.com/browse/HOSTEDCP-1776): Set KCM node monitor grace period [#4404](https://github.com/openshift/hypershift/pull/4404)
* [HOSTEDCP-1853](https://issues.redhat.com/browse/HOSTEDCP-1853): Add Arm NodePool Support Through Azure Marketplace [#4455](https://github.com/openshift/hypershift/pull/4455)
* [OCPBUGS-38041](https://issues.redhat.com/browse/OCPBUGS-38041): test: e2e: handle 409 conflict in EnsureHostedClusterImmutability [#4493](https://github.com/openshift/hypershift/pull/4493)
* [HOSTEDCP-1850](https://issues.redhat.com/browse/HOSTEDCP-1850): Allow setting Kube APIServer maximum requests in flight [#4488](https://github.com/openshift/hypershift/pull/4488)
* [OSASINFRA-3550](https://issues.redhat.com/browse/OSASINFRA-3550): openstack: ingress API & octavia ingress provider [#4474](https://github.com/openshift/hypershift/pull/4474)
* [OCPBUGS-37488](https://issues.redhat.com/browse/OCPBUGS-37488): CSO: add environment variable for tools image [#4483](https://github.com/openshift/hypershift/pull/4483)
* NO-JIRA: Update Konflux 4.17 and perform migration [#4486](https://github.com/openshift/hypershift/pull/4486)
* NO-JIRA: Update Konflux and perform migration [#4485](https://github.com/openshift/hypershift/pull/4485)
* [OSASINFRA-3554](https://issues.redhat.com/browse/OSASINFRA-3554): OpenStack: Use external network ID in favor of Name [#4477](https://github.com/openshift/hypershift/pull/4477)
* [OCPBUGS-37934](https://issues.redhat.com/browse/OCPBUGS-37934): Reverting ETCD cluster rebuild [#4475](https://github.com/openshift/hypershift/pull/4475)
* [OCPBUGS-37052](https://issues.redhat.com/browse/OCPBUGS-37052): Use konnectivity HTTP proxy for ingress controller [#4456](https://github.com/openshift/hypershift/pull/4456)
* [HOSTEDCP-1669](https://issues.redhat.com/browse/HOSTEDCP-1669): Add first azure services validation [#4466](https://github.com/openshift/hypershift/pull/4466)
* NO-JIRA: Remove non relevant OVNSbDb service type declarations [#4465](https://github.com/openshift/hypershift/pull/4465)
* [HOSTEDCP-1565](https://issues.redhat.com/browse/HOSTEDCP-1565): add VPC Endpoint Service proxy support [#4470](https://github.com/openshift/hypershift/pull/4470)
* [OCPBUGS-37832](https://issues.redhat.com/browse/OCPBUGS-37832): set proxy envvars on aws and azure CCMs [#4468](https://github.com/openshift/hypershift/pull/4468)
* [HOSTEDCP-1851](https://issues.redhat.com/browse/HOSTEDCP-1851): Use a multi-arch haproxy image for shared ingress [#4454](https://github.com/openshift/hypershift/pull/4454)
* [HOSTEDCP-1669](https://issues.redhat.com/browse/HOSTEDCP-1669): Make hostedcluster.spec.services immutable for non IBM platforms [#4449](https://github.com/openshift/hypershift/pull/4449)
* NO-JIRA: Ensure VolumeSnapshots are deleted during cloud resource cleanup [#4306](https://github.com/openshift/hypershift/pull/4306)
* [OCPBUGS-37753](https://issues.redhat.com/browse/OCPBUGS-37753): Let the CPO oidc check resolve through data plane [#4273](https://github.com/openshift/hypershift/pull/4273)
* NO-JIRA: Update IBM go sdk [#4435](https://github.com/openshift/hypershift/pull/4435)
* NO-JIRA: Flaky cert validation test [#4448](https://github.com/openshift/hypershift/pull/4448)
* [CNF-12681](https://issues.redhat.com/browse/CNF-12681): Added support for performance profile status [#4020](https://github.com/openshift/hypershift/pull/4020)
* [HOSTEDCP-1778](https://issues.redhat.com/browse/HOSTEDCP-1778): Default multi-arch flag to true and default release stream for HCP CLI [#4447](https://github.com/openshift/hypershift/pull/4447)
* [OCPBUGS-36932](https://issues.redhat.com/browse/OCPBUGS-36932): Add HTTP konnectivity proxy to OAuth server [#4381](https://github.com/openshift/hypershift/pull/4381)
* [OSASINFRA-3550](https://issues.redhat.com/browse/OSASINFRA-3550): docs/openstack: adds content for Ingress with MetalLB [#4439](https://github.com/openshift/hypershift/pull/4439)
* [OCPBUGS-37703](https://issues.redhat.com/browse/OCPBUGS-37703): fix release stream flag/rhcos image for create cluste… [#4445](https://github.com/openshift/hypershift/pull/4445)
* [CNV-32074](https://issues.redhat.com/browse/CNV-32074): Add Kubevirt live-migratable condition for HC and NP [#4361](https://github.com/openshift/hypershift/pull/4361)
* [OCPBUGS-37698](https://issues.redhat.com/browse/OCPBUGS-37698): mce-2.7 enablement for main [#4442](https://github.com/openshift/hypershift/pull/4442)
* [OCPBUGS-36689](https://issues.redhat.com/browse/OCPBUGS-36689): Omit the unused 0000_50_olm_06-psm-operator.service.ya… [#4348](https://github.com/openshift/hypershift/pull/4348)
* [OSASINFRA-3546](https://issues.redhat.com/browse/OSASINFRA-3546): openstack: document how to create a cluster [#4414](https://github.com/openshift/hypershift/pull/4414)
* NO-JIRA: chore(deps): update konflux references (main) [#4426](https://github.com/openshift/hypershift/pull/4426)
* [HOSTEDCP-1798](https://issues.redhat.com/browse/HOSTEDCP-1798): Update AWS multi-arch docs to include migration [#4421](https://github.com/openshift/hypershift/pull/4421)
* [OCPBUGS-37625](https://issues.redhat.com/browse/OCPBUGS-37625): DedicatedRequestServing scheduler: make taken labels list consistent [#4425](https://github.com/openshift/hypershift/pull/4425)
* [OCPBUGS-37486](https://issues.redhat.com/browse/OCPBUGS-37486): Set right endpointSlice port [#4422](https://github.com/openshift/hypershift/pull/4422)
* [OCPBUGS-24400](https://issues.redhat.com/browse/OCPBUGS-24400): Only recreate etcd if hasn't ever been ready [#4419](https://github.com/openshift/hypershift/pull/4419)
* [OSASINFRA-3319](https://issues.redhat.com/browse/OSASINFRA-3319): implements required OpenStack credentials [#4410](https://github.com/openshift/hypershift/pull/4410)
* [HOSTEDCP-1791](https://issues.redhat.com/browse/HOSTEDCP-1791): dont render any secrets in manifest file [#4420](https://github.com/openshift/hypershift/pull/4420)
* [HOSTEDCP-1798](https://issues.redhat.com/browse/HOSTEDCP-1798): Refactor multi-arch validation algorithm [#4405](https://github.com/openshift/hypershift/pull/4405)
* [OSASINFRA-3538](https://issues.redhat.com/browse/OSASINFRA-3538): openstack: small fixes for CLI [#4415](https://github.com/openshift/hypershift/pull/4415)
* [OCPBUGS-34820](https://issues.redhat.com/browse/OCPBUGS-34820): Keep in sync the HC and HCP ICS field [#4412](https://github.com/openshift/hypershift/pull/4412)
* [HOSTEDCP-1813](https://issues.redhat.com/browse/HOSTEDCP-1813): Moves MachineIdentity from the HostedCluster API to the NodePool API [#4408](https://github.com/openshift/hypershift/pull/4408)
* [HOSTEDCP-1791](https://issues.redhat.com/browse/HOSTEDCP-1791): dont render cloud-credentials secret [#4406](https://github.com/openshift/hypershift/pull/4406)
* [OSASINFRA-3312](https://issues.redhat.com/browse/OSASINFRA-3312): Implements OpenStack Node pools [#4409](https://github.com/openshift/hypershift/pull/4409)
* [OSASINFRA-3539](https://issues.redhat.com/browse/OSASINFRA-3539): Add ipam to cluster-api assets [#4399](https://github.com/openshift/hypershift/pull/4399)
* [OSASINFRA-3538](https://issues.redhat.com/browse/OSASINFRA-3538): openstack: cluster CLI [#4396](https://github.com/openshift/hypershift/pull/4396)
* [HOSTEDCP-1838](https://issues.redhat.com/browse/HOSTEDCP-1838): Migrate buildah config in tekton files for migration from 0.1 to 0.2 [#4403](https://github.com/openshift/hypershift/pull/4403)
* [HOSTEDCP-1836](https://issues.redhat.com/browse/HOSTEDCP-1836): Fix Snyk vulnerability with python deps [#4394](https://github.com/openshift/hypershift/pull/4394)
* [OCPBUGS-36897](https://issues.redhat.com/browse/OCPBUGS-36897): fix(api): Nodepool CEL validation fix [#4378](https://github.com/openshift/hypershift/pull/4378)
* [OSASINFRA-3311](https://issues.redhat.com/browse/OSASINFRA-3311): openstack: CAPO provider deployment [#4373](https://github.com/openshift/hypershift/pull/4373)
* [OCPBUGS-37222](https://issues.redhat.com/browse/OCPBUGS-37222): extract rhel9 MCO binaries for rhel8 based MCO images [#4382](https://github.com/openshift/hypershift/pull/4382)
* [HOSTEDCP-1834](https://issues.redhat.com/browse/HOSTEDCP-1834): Fix Dependabot Issue By Updating Azure RHCOS Image Copy Process [#4379](https://github.com/openshift/hypershift/pull/4379)
* [OCPBUGS-37102](https://issues.redhat.com/browse/OCPBUGS-37102): Separate ibmcloud kms encryption configuration types [#4372](https://github.com/openshift/hypershift/pull/4372)
* NO-JIRA: Fix OADP backup objects [#4376](https://github.com/openshift/hypershift/pull/4376)
* [HOSTEDCP-1832](https://issues.redhat.com/browse/HOSTEDCP-1832): Document konnectivity in HyperShift [#4374](https://github.com/openshift/hypershift/pull/4374)
* [CNV-39630](https://issues.redhat.com/browse/CNV-39630): Add ability to set tolerations on the HostedCluster [#4339](https://github.com/openshift/hypershift/pull/4339)
* [OSASINFRA-3525](https://issues.redhat.com/browse/OSASINFRA-3525): Initial PR to start supporting OpenStack platform [#4350](https://github.com/openshift/hypershift/pull/4350)
* [CNF-11845](https://issues.redhat.com/browse/CNF-11845): nodepoolcontroller: mirror containerruntimeconfig to HCP NS [#4150](https://github.com/openshift/hypershift/pull/4150)
* [HOSTEDCP-1795](https://issues.redhat.com/browse/HOSTEDCP-1795), [HOSTEDCP-1796](https://issues.redhat.com/browse/HOSTEDCP-1796): Customize the self-generated cert validity and rotation [#4335](https://github.com/openshift/hypershift/pull/4335)
* [OCPBUGS-34816](https://issues.redhat.com/browse/OCPBUGS-34816): Fix the resource from is checking the MHC platform [#4365](https://github.com/openshift/hypershift/pull/4365)
* [HOSTEDCP-1820](https://issues.redhat.com/browse/HOSTEDCP-1820): Add snyk helper scripts to contrib [#4359](https://github.com/openshift/hypershift/pull/4359)
* NO-JIRA: Update Konflux references [#4362](https://github.com/openshift/hypershift/pull/4362)
* [OCPBUGS-35899](https://issues.redhat.com/browse/OCPBUGS-35899): Doubled machineHealthCheck timeout on Agent and None [#4345](https://github.com/openshift/hypershift/pull/4345)
* [OCPBUGS-24400](https://issues.redhat.com/browse/OCPBUGS-24400): Recreate the ETCD statefulSet on HostedCluster deployment when stays failing [#4354](https://github.com/openshift/hypershift/pull/4354)
* [OCPBUGS-35905](https://issues.redhat.com/browse/OCPBUGS-35905): E2E test to verify openshift-apiserver TLS certificates [#4322](https://github.com/openshift/hypershift/pull/4322)
* [OSASINFRA-3310](https://issues.redhat.com/browse/OSASINFRA-3310): Adds cluster-api-provider-openstack assets [#4355](https://github.com/openshift/hypershift/pull/4355)
* [HOSTEDCP-1734](https://issues.redhat.com/browse/HOSTEDCP-1734), [HOSTEDCP-1737](https://issues.redhat.com/browse/HOSTEDCP-1737): use proxy-protocol-v2 for shared ingress [#4330](https://github.com/openshift/hypershift/pull/4330)
* NO-JIRA: Let cmd unit tests run without a running Kubernetes cluster [#4310](https://github.com/openshift/hypershift/pull/4310)
* NO-JIRA: Default azure to run as managed-service=aro [#4316](https://github.com/openshift/hypershift/pull/4316)
* [OCPBUGS-34865](https://issues.redhat.com/browse/OCPBUGS-34865): Fix name resolution for HTTPS konnectivity proxy [#4351](https://github.com/openshift/hypershift/pull/4351)
* NO-JIRA: add ignition payload inspect docs [#4346](https://github.com/openshift/hypershift/pull/4346)
* [OCPBUGS-33934](https://issues.redhat.com/browse/OCPBUGS-33934): Add newline after TLS certs referenced by image.config [#4343](https://github.com/openshift/hypershift/pull/4343)
* NO-JIRA: Update catalog annotation based on an OCP version [#4344](https://github.com/openshift/hypershift/pull/4344)
* [HOSTEDCP-1818](https://issues.redhat.com/browse/HOSTEDCP-1818): fix(build): update to the fixed clamav image [#4342](https://github.com/openshift/hypershift/pull/4342)
* [OCPBUGS-36681](https://issues.redhat.com/browse/OCPBUGS-36681): Set Azure VM identity if user assigned identity set [#4332](https://github.com/openshift/hypershift/pull/4332)
* [HOSTEDCP-1716](https://issues.redhat.com/browse/HOSTEDCP-1716): When running the HO locally it should no required a running pod [#4268](https://github.com/openshift/hypershift/pull/4268)
* [CNF-12951](https://issues.redhat.com/browse/CNF-12951): hypershift:performanceprofile: associate profile name with user input [#4108](https://github.com/openshift/hypershift/pull/4108)
* NO-JIRA: Add net policy to allow ingress from sharedingress namespace [#4336](https://github.com/openshift/hypershift/pull/4336)
* [OCPBUGS-34865](https://issues.redhat.com/browse/OCPBUGS-34865): Add HTTP(s) konnectivity proxy for openshift-apiserver [#4218](https://github.com/openshift/hypershift/pull/4218)
* [OCPBUGS-34820](https://issues.redhat.com/browse/OCPBUGS-34820): Delete IDMS in dataplane once HCP ICS field is removed [#4333](https://github.com/openshift/hypershift/pull/4333)
* NO-JIRA: KubeVirtJsonPatchTest: fix vmi slice assignment [#4319](https://github.com/openshift/hypershift/pull/4319)
* NO-JIRA: Update ci image of capk to 4.17 [#4183](https://github.com/openshift/hypershift/pull/4183)
* NO-JIRA: Dump capz azure resources [#4329](https://github.com/openshift/hypershift/pull/4329)
* NO-JIRA: Remove Steve Kuznetsov from approvers/owners [#4334](https://github.com/openshift/hypershift/pull/4334)
* NO-JIRA: Update Konflux references [#4324](https://github.com/openshift/hypershift/pull/4324)
* NO-JIRA: Update AKS contrib docs [#4314](https://github.com/openshift/hypershift/pull/4314)
* [HOSTEDCP-1808](https://issues.redhat.com/browse/HOSTEDCP-1808): Update Mkdocs, dependencies and dockerfile [#4323](https://github.com/openshift/hypershift/pull/4323)
* NO-JIRA: Dump sharedingress manifest [#4321](https://github.com/openshift/hypershift/pull/4321)
* NO-JIRA: Enhance aks docs [#4311](https://github.com/openshift/hypershift/pull/4311)
* NO-JIRA: e2e tests: skip checking ValidKubeVirtInfraNetworkMTU if no workers [#4313](https://github.com/openshift/hypershift/pull/4313)
* Revert "HOSTEDCP-1778: Enable MultiArch flag by default" [#4312](https://github.com/openshift/hypershift/pull/4312)
* NO-JIRA: skip validate metrics on azure e2e [#4305](https://github.com/openshift/hypershift/pull/4305)
* NO-JIRA: skip multiarch test before HC creation [#4292](https://github.com/openshift/hypershift/pull/4292)
* [OCPBUGS-30986](https://issues.redhat.com/browse/OCPBUGS-30986): remove weak ciphers from security profile [#4294](https://github.com/openshift/hypershift/pull/4294)
* NO-JIRA: Add release notes to commit and print proper output when release errors [#4304](https://github.com/openshift/hypershift/pull/4304)
* [HOSTEDCP-1778](https://issues.redhat.com/browse/HOSTEDCP-1778): Enable MultiArch flag by default [#4272](https://github.com/openshift/hypershift/pull/4272)
* [CNV-39589](https://issues.redhat.com/browse/CNV-39589): [Kubevirt] Add support for passing GPU devices to NodePools [#4101](https://github.com/openshift/hypershift/pull/4101)
* NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 - abandoned [#4300](https://github.com/openshift/hypershift/pull/4300)
* NO-JIRA: chore(deps): update konflux references [#4297](https://github.com/openshift/hypershift/pull/4297)
* [OCPBUGS-23922](https://issues.redhat.com/browse/OCPBUGS-23922): hcco: reconcile apiserver config into hosted cluster [#4278](https://github.com/openshift/hypershift/pull/4278)
* [OCPBUGS-36230](https://issues.redhat.com/browse/OCPBUGS-36230): Use a reconciled proxy config when generating nodepool userdata [#4277](https://github.com/openshift/hypershift/pull/4277)
* [OCPBUGS-35521](https://issues.redhat.com/browse/OCPBUGS-35521): Move infra-volumesnapshot-class-mapping to core binding [#4290](https://github.com/openshift/hypershift/pull/4290)
* [OCPBUGS-33060](https://issues.redhat.com/browse/OCPBUGS-33060): enable audit log for oauth-openshift [#3994](https://github.com/openshift/hypershift/pull/3994)
* NO-JIRA: test/e2e: remove api budget checks [#4286](https://github.com/openshift/hypershift/pull/4286)
* NO-JIRA: fixup azure aks docs [#4293](https://github.com/openshift/hypershift/pull/4293)
* NO-JIRA: Update HC on AKS doc for new flags for infra [#4274](https://github.com/openshift/hypershift/pull/4274)
* [HOSTEDCP-1342](https://issues.redhat.com/browse/HOSTEDCP-1342): Add new metrics to check CA bundle validity and expiry [OSD-15414] [#3442](https://github.com/openshift/hypershift/pull/3442)
* NO-JIRA: cmd/cluster/kubevirt: add a test from dvossel [#4220](https://github.com/openshift/hypershift/pull/4220)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709), [HOSTEDCP-1777](https://issues.redhat.com/browse/HOSTEDCP-1777): test/e2e: complete move to eventually blocks [#4263](https://github.com/openshift/hypershift/pull/4263)
* [OCPBUGS-36188](https://issues.redhat.com/browse/OCPBUGS-36188): kubevirt-csi-driver: Pass infra kubeconfig in case of external infra [#4271](https://github.com/openshift/hypershift/pull/4271)
* [OCPBUGS-31840](https://issues.redhat.com/browse/OCPBUGS-31840): Make guest cluster components use the correct KAS port [#3849](https://github.com/openshift/hypershift/pull/3849)
* [HOSTEDCP-1447](https://issues.redhat.com/browse/HOSTEDCP-1447): test/e2e: tar.gz hosted cluster content [#4256](https://github.com/openshift/hypershift/pull/4256)
* Update Konflux references [#4258](https://github.com/openshift/hypershift/pull/4258)
* [OCPBUGS-35979](https://issues.redhat.com/browse/OCPBUGS-35979): Keep old user data for aws < 4.16 [#4269](https://github.com/openshift/hypershift/pull/4269)
* NO-JIRA: Fix the getting started page by adding export to BUCKET_NAME [#4207](https://github.com/openshift/hypershift/pull/4207)
* [HOSTEDCP-1221](https://issues.redhat.com/browse/HOSTEDCP-1221): add heterogenous NP e2e [#4005](https://github.com/openshift/hypershift/pull/4005)
* [OCPBUGS-35874](https://issues.redhat.com/browse/OCPBUGS-35874): check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route [#4254](https://github.com/openshift/hypershift/pull/4254)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): test/e2e: actually wait for guest cluster client [#4262](https://github.com/openshift/hypershift/pull/4262)
* NO-JIRA: OWNERS: add stevekuznetsov [#4255](https://github.com/openshift/hypershift/pull/4255)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): test/e2e: use the eventually abstraction in chaos test [#4247](https://github.com/openshift/hypershift/pull/4247)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): test/e2e: updates to the eventually construct [#4253](https://github.com/openshift/hypershift/pull/4253)
* [HOSTEDCP-1684](https://issues.redhat.com/browse/HOSTEDCP-1684): remove CLI requirement for RG flag when NSG ID is supp… [#4232](https://github.com/openshift/hypershift/pull/4232)
* [CNV-30445](https://issues.redhat.com/browse/CNV-30445): KubeVirt: Enable multiqueue by default [#4221](https://github.com/openshift/hypershift/pull/4221)
* NO-JIRA: chore(deps): update konflux references [#4249](https://github.com/openshift/hypershift/pull/4249)
* [HOSTEDCP-1729](https://issues.redhat.com/browse/HOSTEDCP-1729): Support for on-demand global routing when creating transit gateway [#4081](https://github.com/openshift/hypershift/pull/4081)
* NO-JIRA: test/e2e: reduce logging for ssh and oc adm inspect [#4242](https://github.com/openshift/hypershift/pull/4242)
* NO-JIRA: test/e2e: reduce logging on guest cluster infra cleanup [#4239](https://github.com/openshift/hypershift/pull/4239)
* NO-JIRA: remove CI_TESTS_RUNS from e2e script as we now directly pass… [#4226](https://github.com/openshift/hypershift/pull/4226)
* [OCPBUGS-35450](https://issues.redhat.com/browse/OCPBUGS-35450): Remove KMS V1 provider support for IBM Cloud [#4215](https://github.com/openshift/hypershift/pull/4215)
* NO-JIRA: chore(deps): update konflux references to ff44cf3 [#4244](https://github.com/openshift/hypershift/pull/4244)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): test/e2e: add a harness for asynchronous assertions [#4206](https://github.com/openshift/hypershift/pull/4206)
* NO-JIRA: test: e2e: bump CPO mutate budget [#4237](https://github.com/openshift/hypershift/pull/4237)
* [OCPBUGS-34544](https://issues.redhat.com/browse/OCPBUGS-34544): Disable PersistentVolumeLabel admission plugin [#4107](https://github.com/openshift/hypershift/pull/4107)
* NO-JIRA: Shared ingress tests [#4229](https://github.com/openshift/hypershift/pull/4229)
* NO-JIRA: Bump golang.org/x/net from 0.20.0 to 0.23.0 in /contrib/aws-tag-lb-service-webhook [#3914](https://github.com/openshift/hypershift/pull/3914)
* NO-JIRA: chore(deps): update konflux references to 2be7c9c (main) [#4222](https://github.com/openshift/hypershift/pull/4222)
* NO-JIRA: Revert "kubevirt, e2e: Skip advanced multinet for CI" [#4203](https://github.com/openshift/hypershift/pull/4203)
* [OCPBUGS-35513](https://issues.redhat.com/browse/OCPBUGS-35513): cluster/core: fix nodepool naming [#4219](https://github.com/openshift/hypershift/pull/4219)
* [OCPBUGS-33428](https://issues.redhat.com/browse/OCPBUGS-33428): Complete KAS migration to none endpoint reconciler type [#4133](https://github.com/openshift/hypershift/pull/4133)
* [CNV-42626](https://issues.redhat.com/browse/CNV-42626): Transition kubevirt vms to use topology spread constraints [#4145](https://github.com/openshift/hypershift/pull/4145)
* NO-JIRA: Fix tests to avoid race conditions [#4214](https://github.com/openshift/hypershift/pull/4214)
* [HOSTEDCP-1542](https://issues.redhat.com/browse/HOSTEDCP-1542): cmd: use validated and completed opts pattern [#4212](https://github.com/openshift/hypershift/pull/4212)
* NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform [#4184](https://github.com/openshift/hypershift/pull/4184)
* NO-JIRA: Added markdown for storage table support [#4213](https://github.com/openshift/hypershift/pull/4213)
* [HOSTEDCP-1542](https://issues.redhat.com/browse/HOSTEDCP-1542): Fixed infra-id not being defaulted first [#4210](https://github.com/openshift/hypershift/pull/4210)
* [HOSTEDCP-1721](https://issues.redhat.com/browse/HOSTEDCP-1721): Enable shared ingress for Azure [#4188](https://github.com/openshift/hypershift/pull/4188)
* [HOSTEDCP-1542](https://issues.redhat.com/browse/HOSTEDCP-1542): cmd/cluster: refactor to remove example fixtures [#4018](https://github.com/openshift/hypershift/pull/4018)
* [HOSTEDCP-1402](https://issues.redhat.com/browse/HOSTEDCP-1402): cmd/infra/aws/destroy: allow using component credentials [#3975](https://github.com/openshift/hypershift/pull/3975)
* [HOSTEDCP-1446](https://issues.redhat.com/browse/HOSTEDCP-1446): hack: remove old arguments and scripts [#4186](https://github.com/openshift/hypershift/pull/4186)
* [OCPBUGS-34650](https://issues.redhat.com/browse/OCPBUGS-34650): Allow specifying the volume detach timeout for machines via NodePools [#4136](https://github.com/openshift/hypershift/pull/4136)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): test/e2e: misc context fixes: [#4172](https://github.com/openshift/hypershift/pull/4172)
* [IR-471](https://issues.redhat.com/browse/IR-471): registry operator: Add missing env var, wait for rbac [#4123](https://github.com/openshift/hypershift/pull/4123)
* [HOSTEDCP-1514](https://issues.redhat.com/browse/HOSTEDCP-1514): support Azure diagnostics on NodePools [#3970](https://github.com/openshift/hypershift/pull/3970)
* [OCPBUGS-34807](https://issues.redhat.com/browse/OCPBUGS-34807): Fixed ValidReleaseInfo condition [#4129](https://github.com/openshift/hypershift/pull/4129)
* [OCPBUGS-33951](https://issues.redhat.com/browse/OCPBUGS-33951): Documentation for disconnected MGMT Cluster [#4182](https://github.com/openshift/hypershift/pull/4182)
* kubevirt, e2e: Skip advanced multinet for CI [#4187](https://github.com/openshift/hypershift/pull/4187)
* [OCPBUGS-35205](https://issues.redhat.com/browse/OCPBUGS-35205): Add hypershift-cluster-version-operator image to release providers [#4138](https://github.com/openshift/hypershift/pull/4138)
* chore(deps): update konflux references [#4165](https://github.com/openshift/hypershift/pull/4165)
* [HOSTEDCP-1446](https://issues.redhat.com/browse/HOSTEDCP-1446): hack: make the e2e script generic [#4176](https://github.com/openshift/hypershift/pull/4176)
* NO-JIRA: Delete references to the openshift-sdn image in CNO [#4164](https://github.com/openshift/hypershift/pull/4164)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): test/e2e: always bound assertions in time [#4170](https://github.com/openshift/hypershift/pull/4170)
* [HOSTEDCP-1712](https://issues.redhat.com/browse/HOSTEDCP-1712): Initialize infra id for e2e-azure tests [#4163](https://github.com/openshift/hypershift/pull/4163)
* [OCPBUGS-34274](https://issues.redhat.com/browse/OCPBUGS-34274): Generate default worker security group rules based on machineCIDR [#4085](https://github.com/openshift/hypershift/pull/4085)
* NO-JIRA: test/e2e: remove dead code [#4171](https://github.com/openshift/hypershift/pull/4171)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): hack/test: remove timeouts [#4169](https://github.com/openshift/hypershift/pull/4169)
* [OCPBUGS-34987](https://issues.redhat.com/browse/OCPBUGS-34987): Add missing Tag permissions to cli role [#4166](https://github.com/openshift/hypershift/pull/4166)
* [HOSTEDCP-1553](https://issues.redhat.com/browse/HOSTEDCP-1553): Add annotation to customize log verbosity of kube-apiserver [#4026](https://github.com/openshift/hypershift/pull/4026)
* [HOSTEDCP-1689](https://issues.redhat.com/browse/HOSTEDCP-1689): add PodMonitor for external-dns [#4147](https://github.com/openshift/hypershift/pull/4147)
* [OCPBUGS-33953](https://issues.redhat.com/browse/OCPBUGS-33953): Document how ICSP/IDMS work in HCP [#4098](https://github.com/openshift/hypershift/pull/4098)
* [OCPBUGS-33952](https://issues.redhat.com/browse/OCPBUGS-33952): Documented HCP service exposure [#4086](https://github.com/openshift/hypershift/pull/4086)
* NO-JIRA: Dependabot updates [#4152](https://github.com/openshift/hypershift/pull/4152)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): test/e2e: constrain actions to context, timeout [#4142](https://github.com/openshift/hypershift/pull/4142)
* [HOSTEDCP-1709](https://issues.redhat.com/browse/HOSTEDCP-1709): e2e/util: improve logging during node readiness poll [#4153](https://github.com/openshift/hypershift/pull/4153)
* [OCPBUGS-34607](https://issues.redhat.com/browse/OCPBUGS-34607): Disable machine pool feature gate [#4109](https://github.com/openshift/hypershift/pull/4109)
* [HOSTEDCP-1694](https://issues.redhat.com/browse/HOSTEDCP-1694): Automate HO Deployment Tag & Commit Updates for ROSA HCP [#4102](https://github.com/openshift/hypershift/pull/4102)
* [OCPBUGS-32467](https://issues.redhat.com/browse/OCPBUGS-32467): nodepool_controller: add a reconciler for cleanup [#3969](https://github.com/openshift/hypershift/pull/3969)
* [OCPBUGS-34699](https://issues.redhat.com/browse/OCPBUGS-34699): Allow access to root-ca configmap in cluster-network-operator role [#4122](https://github.com/openshift/hypershift/pull/4122)
* [HOSTEDCP-1542](https://issues.redhat.com/browse/HOSTEDCP-1542): cmd: add an option to render into a file, use it in e2e [#4036](https://github.com/openshift/hypershift/pull/4036)
* [OCPBUGS-33724](https://issues.redhat.com/browse/OCPBUGS-33724): Fixes update issue with KubeVirt platform [#4039](https://github.com/openshift/hypershift/pull/4039)
* [HOSTEDCP-1564](https://issues.redhat.com/browse/HOSTEDCP-1564): Ensure VNET, NSG, & Managed RG locations match [#4071](https://github.com/openshift/hypershift/pull/4071)
* [HOSTEDCP-1687](https://issues.redhat.com/browse/HOSTEDCP-1687): Allow arm64 baremetal nodes to a nodepool in a multi-arch cluster [#4060](https://github.com/openshift/hypershift/pull/4060)
* NO-JIRA: test/e2e: don't validate metrics after failure [#4143](https://github.com/openshift/hypershift/pull/4143)
* [OCPBUGS-32186](https://issues.redhat.com/browse/OCPBUGS-32186): cmd: report server version, supported OCP [#3987](https://github.com/openshift/hypershift/pull/3987)
* NO-JIRA: Add link to agent heterogeneous nodepools doc [#4135](https://github.com/openshift/hypershift/pull/4135)
* [OCPBUGS-34734](https://issues.redhat.com/browse/OCPBUGS-34734): Fix disconnected metadata inspection for nodepool [#4130](https://github.com/openshift/hypershift/pull/4130)
* [HOSTEDCP-1697](https://issues.redhat.com/browse/HOSTEDCP-1697): Allow overriding hosted cluster size label [#4121](https://github.com/openshift/hypershift/pull/4121)
* [OCPBUGS-18711](https://issues.redhat.com/browse/OCPBUGS-18711): add AWS STS URL to OIDC provider audiences [#4094](https://github.com/openshift/hypershift/pull/4094)
* [HOSTEDCP-1558](https://issues.redhat.com/browse/HOSTEDCP-1558): use openshift/api instead of thirdparty for machineconfig [#3983](https://github.com/openshift/hypershift/pull/3983)
* [OCPBUGS-34741](https://issues.redhat.com/browse/OCPBUGS-34741): Fix fleet manager pair label check [#4132](https://github.com/openshift/hypershift/pull/4132)
* [HOSTEDCP-1683](https://issues.redhat.com/browse/HOSTEDCP-1683): Use go workspaces [#3980](https://github.com/openshift/hypershift/pull/3980)
* [OCPBUGS-31568](https://issues.redhat.com/browse/OCPBUGS-31568): Prevent hypershift install render --template and --outputs from being used together [#3824](https://github.com/openshift/hypershift/pull/3824)
* NO-JIRA: chore(deps): update rhtap references [#4118](https://github.com/openshift/hypershift/pull/4118)
* NO-JIRA: Update RHTAP references [#4113](https://github.com/openshift/hypershift/pull/4113)
* [HOSTEDCP-1688](https://issues.redhat.com/browse/HOSTEDCP-1688): Use operator namespace for openshift-config-managed-trusted-ca-bundle [#4088](https://github.com/openshift/hypershift/pull/4088)
* [HOSTEDCP-1570](https://issues.redhat.com/browse/HOSTEDCP-1570): remove liveness and readiness probes using metrics endpoint [#4001](https://github.com/openshift/hypershift/pull/4001)
* [OCPBUGS-33987](https://issues.redhat.com/browse/OCPBUGS-33987): Use configmaps to track hosted cluster pair labels and set controller concurrency [#4103](https://github.com/openshift/hypershift/pull/4103)
* [MULTIARCH-4668](https://issues.redhat.com/browse/MULTIARCH-4668): Add how to doc for heterogeneous node pools on Agent platform [#3991](https://github.com/openshift/hypershift/pull/3991)
* [OCPBUGS-34540](https://issues.redhat.com/browse/OCPBUGS-34540): Fix RegistryMirrorProvider modifying the cached image directly [#4100](https://github.com/openshift/hypershift/pull/4100)
* [TRT-1685](https://issues.redhat.com/browse/TRT-1685): bump openshift/api [#4095](https://github.com/openshift/hypershift/pull/4095)
* [OCPBUGS-33428](https://issues.redhat.com/browse/OCPBUGS-33428): Reconcile KAS endpoints and endpoint slice [#3942](https://github.com/openshift/hypershift/pull/3942)
* [OCPBUGS-33181](https://issues.redhat.com/browse/OCPBUGS-33181): Fixed audit-logs sigterm failing to terminate gracefully [#3972](https://github.com/openshift/hypershift/pull/3972)
* [OCPBUGS-31446](https://issues.redhat.com/browse/OCPBUGS-31446): Add TrustedBundles to OAS container [#4031](https://github.com/openshift/hypershift/pull/4031)
* NO-JIRA: Align kv min version to the default min version (now that default is >= 4.14 [#4083](https://github.com/openshift/hypershift/pull/4083)
* [OCPBUGS-30986](https://issues.redhat.com/browse/OCPBUGS-30986): remove weak cipher [#3855](https://github.com/openshift/hypershift/pull/3855)
* [OCPBUGS-34071](https://issues.redhat.com/browse/OCPBUGS-34071): Do not scale down legacy nodes [#4076](https://github.com/openshift/hypershift/pull/4076)
* NO-JIRA: test: relax mgmt KAS egress check [#4082](https://github.com/openshift/hypershift/pull/4082)
* [HOSTEDCP-1681](https://issues.redhat.com/browse/HOSTEDCP-1681): Skip konflux when not necessary [#4080](https://github.com/openshift/hypershift/pull/4080)
* [OCPBUGS-33977](https://issues.redhat.com/browse/OCPBUGS-33977): Allow specifying machine health check timeout in cluster sizing config [#4075](https://github.com/openshift/hypershift/pull/4075)
* [OCPBUGS-34095](https://issues.redhat.com/browse/OCPBUGS-34095): Sync the autoscaler periodically [#4074](https://github.com/openshift/hypershift/pull/4074)
* [OCPBUGS-25758](https://issues.redhat.com/browse/OCPBUGS-25758): fix router on 4.14 y-stream upgrade [#4033](https://github.com/openshift/hypershift/pull/4033)
* NO-JIRA: Reinstate wrongly removed fields from cert rotation objects [#4070](https://github.com/openshift/hypershift/pull/4070)
* [OCPBUGS-34019](https://issues.redhat.com/browse/OCPBUGS-34019): Make active & backup Azure KMS containers use different --metrics-addr [#4066](https://github.com/openshift/hypershift/pull/4066)
* [OCPBUGS-33742](https://issues.redhat.com/browse/OCPBUGS-33742): setting higher priority class for external-dns pods [#4050](https://github.com/openshift/hypershift/pull/4050)
* [OCPBUGS-32257](https://issues.redhat.com/browse/OCPBUGS-32257): Fix userReleaseProvider not using icsp/idms from mgmt cluster [#4043](https://github.com/openshift/hypershift/pull/4043)
* [CNF-12792](https://issues.redhat.com/browse/CNF-12792): nto: add configmaps/finalizers under operator `Role` [#3992](https://github.com/openshift/hypershift/pull/3992)
* [CNV-40881](https://issues.redhat.com/browse/CNV-40881): kubevirt, e2e, add test for advanced multinet [#3902](https://github.com/openshift/hypershift/pull/3902)
* [OCPBUGS-33377](https://issues.redhat.com/browse/OCPBUGS-33377): Modify token secret MCS hash in place [#4057](https://github.com/openshift/hypershift/pull/4057)
* chore(deps): update rhtap references [#4063](https://github.com/openshift/hypershift/pull/4063)
* [HOSTEDCP-1556](https://issues.redhat.com/browse/HOSTEDCP-1556): Support Priority based expander for cluster-autoscaler [#4029](https://github.com/openshift/hypershift/pull/4029)
* NO-JIRA: Bump library-go dependency and bump `LatestSupportedVersion` to 4.17.0 [#4044](https://github.com/openshift/hypershift/pull/4044)
* [OCPBUGS-33726](https://issues.redhat.com/browse/OCPBUGS-33726): Remove service-ca annotation from azure csi & file controller metrics services [#4035](https://github.com/openshift/hypershift/pull/4035)
* [OCPBUGS-33802](https://issues.redhat.com/browse/OCPBUGS-33802): don't delay new cluster creation [#4045](https://github.com/openshift/hypershift/pull/4045)
* [TRT-1672](https://issues.redhat.com/browse/TRT-1672): e2e: proceed with teardown even if dump fails [#4051](https://github.com/openshift/hypershift/pull/4051)
* [OCPBUGS-33659](https://issues.redhat.com/browse/OCPBUGS-33659): Improve resliency of size tagging when hostedcluster KAS down [#4034](https://github.com/openshift/hypershift/pull/4034)
* [Full changelog](https://github.com/openshift/hypershift/compare/6e9d513bdec97f2ea34eb41d3fda2e76c2b77e8a...4430d04b2bca1f8cf2ddd0a5ed5b4dc7cd42c639)
### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/ad8f7eb0ffba27fa8db8ad3692f530728312ad06)
* NO-JIRA: Update OWNERS [#72](https://github.com/openshift/cloud-provider-ibm/pull/72)
* [OCPCLOUD-2604](https://issues.redhat.com/browse/OCPCLOUD-2604): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.30 (b05e0d9) into master [#68](https://github.com/openshift/cloud-provider-ibm/pull/68)
* [OCPBUGS-34186](https://issues.redhat.com/browse/OCPBUGS-34186): Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.17 [#70](https://github.com/openshift/cloud-provider-ibm/pull/70)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/f961f16d17dcd6f7e43fd7fed967ce3b06ec9494...ad8f7eb0ffba27fa8db8ad3692f530728312ad06)
### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/3a3a62f7a200d2042cb64757f2d60faed20b6218)
* [STOR-1589](https://issues.redhat.com/browse/STOR-1589): Rebase to upstream 5.2.8 for OCP 4.17 [#70](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/70)
* [OCPBUGS-34162](https://issues.redhat.com/browse/OCPBUGS-34162): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.17 [#68](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/68)
* [OCPBUGS-36074](https://issues.redhat.com/browse/OCPBUGS-36074): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#69](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/69)
* [OCPBUGS-34162](https://issues.redhat.com/browse/OCPBUGS-34162): Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.17 [#67](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/67)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/957197389ec49234c3883bbb730bb630b459e24f...3a3a62f7a200d2042cb64757f2d60faed20b6218)
### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/8443d86bf284684b7849fa76d40795d141ef86d2)
* [OCPBUGS-42277](https://issues.redhat.com/browse/OCPBUGS-42277): Reorder static resources to create RBAC first [#128](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/128)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#125](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/125)
* [OCPBUGS-36074](https://issues.redhat.com/browse/OCPBUGS-36074): CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 [#119](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/119)
* [OCPBUGS-34453](https://issues.redhat.com/browse/OCPBUGS-34453): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.17 [#118](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/118)
* [OCPBUGS-34224](https://issues.redhat.com/browse/OCPBUGS-34224): Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.17 [#117](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/117)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/5d5d8010a59916cc264d0ab14962be85a35b7228...8443d86bf284684b7849fa76d40795d141ef86d2)
### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/213d34ddedaebc23bd409ff904ecaf9eaa62c517)
* [OCPBUGS-44880](https://issues.redhat.com/browse/OCPBUGS-44880): Fetch service instance id from spec of IBMPowerVSCluster object while setting provider id [#94](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/94)
* [OCPBUGS-37369](https://issues.redhat.com/browse/OCPBUGS-37369): UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.17 [#86](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/86)
* NO-JIRA: Update OWNERS [#83](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/83)
* [OCPCLOUD-2624](https://issues.redhat.com/browse/OCPCLOUD-2624): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.8.0 (8cd12b5) into main [#82](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/82)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/7d4f93efe65a7c070ded6b889b61ae3d51e259fb...213d34ddedaebc23bd409ff904ecaf9eaa62c517)
### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/238348d2d06feb540a360aeba81416c1134f86e9)
* [OCPBUGS-37379](https://issues.redhat.com/browse/OCPBUGS-37379): Bump dependency for CVE [#49](https://github.com/openshift/machine-api-provider-ibmcloud/pull/49)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Adds --feature-gates CLI argument [#43](https://github.com/openshift/machine-api-provider-ibmcloud/pull/43)
* [OCPBUGS-36185](https://issues.redhat.com/browse/OCPBUGS-36185): IBMCloud: Handle pagination for subnets [#41](https://github.com/openshift/machine-api-provider-ibmcloud/pull/41)
* NO-JIRA: Update OWNERS [#40](https://github.com/openshift/machine-api-provider-ibmcloud/pull/40)
* [OCPCLOUD-2612](https://issues.redhat.com/browse/OCPCLOUD-2612): Update kube deps to 1.30 [#38](https://github.com/openshift/machine-api-provider-ibmcloud/pull/38)
* [OCPBUGS-34341](https://issues.redhat.com/browse/OCPBUGS-34341): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.17 [#37](https://github.com/openshift/machine-api-provider-ibmcloud/pull/37)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/46c3c741fd44c1160a1f17d360723dc734d64648...238348d2d06feb540a360aeba81416c1134f86e9)
### [insights-operator](https://github.com/openshift/insights-operator/tree/714aeb53392b66b4346edbee4b9b7f8c8836b419)
* gather selected clusterroles (#1021) [#1021](https://github.com/openshift/insights-operator/pull/1021)
* [OCPBUGS-43790](https://issues.redhat.com/browse/OCPBUGS-43790): update the filtering of the container logs (#1019) [#1019](https://github.com/openshift/insights-operator/pull/1019)
* [OCPBUGS-43277](https://issues.redhat.com/browse/OCPBUGS-43277): do not propagate the remote configuration status as an (#1011) [#1011](https://github.com/openshift/insights-operator/pull/1011)
* Added new translation for architectures (#1005) [#1005](https://github.com/openshift/insights-operator/pull/1005)
* [OCPBUGS-42357](https://issues.redhat.com/browse/OCPBUGS-42357): set the RemoteConfigurationAvailable and RemoteConfigu… (#1001) [#1001](https://github.com/openshift/insights-operator/pull/1001)
* [OCPBUGS-41833](https://issues.redhat.com/browse/OCPBUGS-41833): populate the endpoint parameter when there's an error (#998) [#998](https://github.com/openshift/insights-operator/pull/998)
* [OCPBUGS-39393](https://issues.redhat.com/browse/OCPBUGS-39393): collect some nmstate customresources (#986) (#989) [#986](https://github.com/openshift/insights-operator/pull/986)
* [OCPBUGS-32233](https://issues.redhat.com/browse/OCPBUGS-32233): Not able to enable repositories during entitled build in OCP Cluster on IBM-Z (#991) [#991](https://github.com/openshift/insights-operator/pull/991)
* [OSPRH-5904](https://issues.redhat.com/browse/OSPRH-5904): Integration of the OpenStack CRs into the insights-operator (#951) [#951](https://github.com/openshift/insights-operator/pull/951)
* limit the time for the new rapid container logs & update the endpoint (#964) [#964](https://github.com/openshift/insights-operator/pull/964)
* remove firing alerts from the config/metrics file (#954) [#954](https://github.com/openshift/insights-operator/pull/954)
* fix the configmapobserver notifications (#968) [#968](https://github.com/openshift/insights-operator/pull/968)
* update OWNERS file...again (#966) [#966](https://github.com/openshift/insights-operator/pull/966)
* Add haproxy metric (#963) [#963](https://github.com/openshift/insights-operator/pull/963)
* always store remote configuration and metrics in the archive (#959) [#959](https://github.com/openshift/insights-operator/pull/959)
* introduce JSON schema & validation for rapid container logs (#953) [#953](https://github.com/openshift/insights-operator/pull/953)
* remove SDN related gatherers (#955) [#955](https://github.com/openshift/insights-operator/pull/955)
* [OCPBUGS-35882](https://issues.redhat.com/browse/OCPBUGS-35882): properly encode the URL for the advisor links (#952) [#952](https://github.com/openshift/insights-operator/pull/952)
* [CCXDEV-12582](https://issues.redhat.com/browse/CCXDEV-12582): rapid recommendations with new status condition (#944) [#944](https://github.com/openshift/insights-operator/pull/944)
* [OCPBUGS-35727](https://issues.redhat.com/browse/OCPBUGS-35727): Ingress controller related certificates' validate dates gathering (#945) [#945](https://github.com/openshift/insights-operator/pull/945)
* [OCPBUGS-33082](https://issues.redhat.com/browse/OCPBUGS-33082): Add new use cases for networking obfuscation (#947) [#947](https://github.com/openshift/insights-operator/pull/947)
* gather aggregated numbers of Pods and Netnamespaces with SDN annotations (#942) [#942](https://github.com/openshift/insights-operator/pull/942)
* update OWNERS list (#943) [#943](https://github.com/openshift/insights-operator/pull/943)
* [OCPBUGS-34784](https://issues.redhat.com/browse/OCPBUGS-34784): Collect aggregated Prometheus Alertmanager instances (#941) [#941](https://github.com/openshift/insights-operator/pull/941)
* Updating ose-insights-operator-container image to be consistent with ART for 4.17 (#940) [#940](https://github.com/openshift/insights-operator/pull/940)
* [OCPBUGS-33082](https://issues.redhat.com/browse/OCPBUGS-33082): Add new use cases that requires anonymization (#936) [#936](https://github.com/openshift/insights-operator/pull/936)
* Updating ose-insights-operator-container image to be consistent with ART for 4.17 (#939) [#939](https://github.com/openshift/insights-operator/pull/939)
* [Full changelog](https://github.com/openshift/insights-operator/compare/faf70d79e50b62a3e5014c2081ee5203957c0d20...714aeb53392b66b4346edbee4b9b7f8c8836b419)
### [ironic](https://github.com/openshift/ironic-image/tree/073486f10e7f657b5082a1b1d06196a19c8f69be)
* [OCPBUGS-43955](https://issues.redhat.com/browse/OCPBUGS-43955), [OCPBUGS-43963](https://issues.redhat.com/browse/OCPBUGS-43963): Bump python-waitress [4.17] [#603](https://github.com/openshift/ironic-image/pull/603)
* [OCPBUGS-42692](https://issues.redhat.com/browse/OCPBUGS-42692): Include fixes for CVE-2024-5569 [#590](https://github.com/openshift/ironic-image/pull/590)
* [OCPBUGS-42509](https://issues.redhat.com/browse/OCPBUGS-42509): Include fix for CVE-2024-47211 [#593](https://github.com/openshift/ironic-image/pull/593)
* [OCPBUGS-41783](https://issues.redhat.com/browse/OCPBUGS-41783): Set node "alive" when inspection finished [#578](https://github.com/openshift/ironic-image/pull/578)
* [OCPBUGS-39380](https://issues.redhat.com/browse/OCPBUGS-39380): Include fixes for CVE-2024-44082 into 4.17 [#576](https://github.com/openshift/ironic-image/pull/576)
* [OCPBUGS-37365](https://issues.redhat.com/browse/OCPBUGS-37365): Update log statement to avoid logging entire node object [#573](https://github.com/openshift/ironic-image/pull/573)
* [OCPBUGS-38511](https://issues.redhat.com/browse/OCPBUGS-38511): set min version for python3-webob [#552](https://github.com/openshift/ironic-image/pull/552)
* [OCPBUGS-38784](https://issues.redhat.com/browse/OCPBUGS-38784): Update sushy to include Huwaei Fix ( Duplicate PR ) [#572](https://github.com/openshift/ironic-image/pull/572)
* [OCPBUGS-39013](https://issues.redhat.com/browse/OCPBUGS-39013): Bump ironic-lib to fix utf8 decoding issue [#568](https://github.com/openshift/ironic-image/pull/568)
* NO-ISSUE: fix scos and fcos dockerfiles to remove ironic-inspector [#567](https://github.com/openshift/ironic-image/pull/567)
* [OCPBUGS-38465](https://issues.redhat.com/browse/OCPBUGS-38465): update sushy to pick up the RAID fix [#545](https://github.com/openshift/ironic-image/pull/545)
* [OCPBUGS-38481](https://issues.redhat.com/browse/OCPBUGS-38481): Update root image [#546](https://github.com/openshift/ironic-image/pull/546)
* [OCPBUGS-37402](https://issues.redhat.com/browse/OCPBUGS-37402): bump werkzeug [#533](https://github.com/openshift/ironic-image/pull/533)
* [METAL-1094](https://issues.redhat.com/browse/METAL-1094): Sync with upstream metal3-io/ironic-image [#532](https://github.com/openshift/ironic-image/pull/532)
* [OCPBUGS-37084](https://issues.redhat.com/browse/OCPBUGS-37084): Update ironic projects to latest available [#522](https://github.com/openshift/ironic-image/pull/522)
* [METAL-1070](https://issues.redhat.com/browse/METAL-1070): Align ironic dependencies with latest upper constraints [#520](https://github.com/openshift/ironic-image/pull/520)
* [OCPBUGS-33335](https://issues.redhat.com/browse/OCPBUGS-33335): Update Python Jinja2 [#519](https://github.com/openshift/ironic-image/pull/519)
* [METAL-1049](https://issues.redhat.com/browse/METAL-1049): Download and install sources from local dir [#494](https://github.com/openshift/ironic-image/pull/494)
* [OCPBUGS-32261](https://issues.redhat.com/browse/OCPBUGS-32261): Update ironic-inspector to fix the memory leak [#516](https://github.com/openshift/ironic-image/pull/516)
* NO-ISSUE: Bump ironic projects versions [#514](https://github.com/openshift/ironic-image/pull/514)
* [OCPBUGS-29687](https://issues.redhat.com/browse/OCPBUGS-29687): Read ironic and inspector htpasswds from files [#513](https://github.com/openshift/ironic-image/pull/513)
* Bug OCPBUGS-34534: Disable installation of .pyc files through pip [#508](https://github.com/openshift/ironic-image/pull/508)
* [METAL-882](https://issues.redhat.com/browse/METAL-882): Update dependency versions for OCP 4.17 [#505](https://github.com/openshift/ironic-image/pull/505)
* [OCPBUGS-33902](https://issues.redhat.com/browse/OCPBUGS-33902): Updating ironic-container image to be consistent with ART for 4.17 [#501](https://github.com/openshift/ironic-image/pull/501)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d56a7dc8465a36357ba4ede63eabc9897a06a657...073486f10e7f657b5082a1b1d06196a19c8f69be)
### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/f5f742d8df2b1879a565809632ce2b43b965b4d4)
* [OCPBUGS-39013](https://issues.redhat.com/browse/OCPBUGS-39013): Bump ironic-lib to fix utf8 decoding issue [#155](https://github.com/openshift/ironic-agent-image/pull/155)
* [OCPBUGS-39380](https://issues.redhat.com/browse/OCPBUGS-39380): Include fixes for CVE-2024-44082 into 4.17 [#160](https://github.com/openshift/ironic-agent-image/pull/160)
* [OCPBUGS-38511](https://issues.redhat.com/browse/OCPBUGS-38511): set webob and bump werkzeug [#148](https://github.com/openshift/ironic-agent-image/pull/148)
* [OCPBUGS-38481](https://issues.redhat.com/browse/OCPBUGS-38481): Update root image [#145](https://github.com/openshift/ironic-agent-image/pull/145)
* [METAL-1049](https://issues.redhat.com/browse/METAL-1049): Download and install sources from local dir [#142](https://github.com/openshift/ironic-agent-image/pull/142)
* [OCPBUGS-37086](https://issues.redhat.com/browse/OCPBUGS-37086): Update ironic projects to latest available [#141](https://github.com/openshift/ironic-agent-image/pull/141)
* [METAL-1070](https://issues.redhat.com/browse/METAL-1070): Align ironic dependencies with latest upper constraints [#140](https://github.com/openshift/ironic-agent-image/pull/140)
* [OCPBUGS-35968](https://issues.redhat.com/browse/OCPBUGS-35968): Disable installation of .pyc files through pip [#139](https://github.com/openshift/ironic-agent-image/pull/139)
* NO-ISSUE: Bump ironic projects versions [#137](https://github.com/openshift/ironic-agent-image/pull/137)
* NO-ISSUE: Replace README with an explanation how this agent works [#138](https://github.com/openshift/ironic-agent-image/pull/138)
* [OCPBUGS-33888](https://issues.redhat.com/browse/OCPBUGS-33888): Updating ironic-agent-container image to be consistent with ART for 4.17 [#134](https://github.com/openshift/ironic-agent-image/pull/134)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/3c5298e05497b59a876c73c51359f49f3cc2cb99...f5f742d8df2b1879a565809632ce2b43b965b4d4)
### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/b698ea3e0818bfcb8c27c4964bcaaaeee5f49818)
* [OCPBUGS-33892](https://issues.redhat.com/browse/OCPBUGS-33892): Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.17 [#98](https://github.com/openshift/ironic-rhcos-downloader/pull/98)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/93b8b5fa33950cadd2310278b7c762ebe0057418...b698ea3e0818bfcb8c27c4964bcaaaeee5f49818)
### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/55485785a549461a04a0404762fd03445682cf50)
* [OCPBUGS-38282](https://issues.redhat.com/browse/OCPBUGS-38282): Updating ironic-static-ip-manager-container image to be consistent with ART for 4.18 [#44](https://github.com/openshift/ironic-static-ip-manager/pull/44)
* [OCPBUGS-33907](https://issues.redhat.com/browse/OCPBUGS-33907): Updating ironic-static-ip-manager-container image to be consistent with ART for 4.17 [#43](https://github.com/openshift/ironic-static-ip-manager/pull/43)
* [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/e78e4c3e6db1805816308197eb9002dfbca27560...55485785a549461a04a0404762fd03445682cf50)
### [keepalived-ipfailover](https://github.com/openshift/images/tree/e3879e9e36d64c6be08b621a50ad5d3ee343dc3e)
* [OCPBUGS-34348](https://issues.redhat.com/browse/OCPBUGS-34348): Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.17 [#186](https://github.com/openshift/images/pull/186)
* [OKD-219](https://issues.redhat.com/browse/OKD-219): add util-linux to base image [#187](https://github.com/openshift/images/pull/187)
* [OCPBUGS-34152](https://issues.redhat.com/browse/OCPBUGS-34152): Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.17 [#184](https://github.com/openshift/images/pull/184)
* [OCPBUGS-34338](https://issues.redhat.com/browse/OCPBUGS-34338): Updating ose-egress-http-proxy-container image to be consistent with ART for 4.17 [#185](https://github.com/openshift/images/pull/185)
* [OCPBUGS-34103](https://issues.redhat.com/browse/OCPBUGS-34103): Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.17 [#183](https://github.com/openshift/images/pull/183)
* [OCPBUGS-33909](https://issues.redhat.com/browse/OCPBUGS-33909): Updating openshift-enterprise-base-container image to be consistent with ART for 4.17 [#182](https://github.com/openshift/images/pull/182)
* [OCPBUGS-33908](https://issues.redhat.com/browse/OCPBUGS-33908): Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.17 [#181](https://github.com/openshift/images/pull/181)
* [Full changelog](https://github.com/openshift/images/compare/b58673a314f0e8253fabadada2ee1a9e5b11c5cf...e3879e9e36d64c6be08b621a50ad5d3ee343dc3e)
### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c)
* [OCPBUGS-41580](https://issues.redhat.com/browse/OCPBUGS-41580): Wire server run options to flags. [#35](https://github.com/openshift/kubernetes-metrics-server/pull/35)
* [OCPBUGS-34258](https://issues.redhat.com/browse/OCPBUGS-34258): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.17 [#29](https://github.com/openshift/kubernetes-metrics-server/pull/29)
* [OCPBUGS-34258](https://issues.redhat.com/browse/OCPBUGS-34258): Updating ose-kube-metrics-server-container image to be consistent with ART for 4.17 [#28](https://github.com/openshift/kubernetes-metrics-server/pull/28)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/8c2920c24c3705e43cefd6c6e65409b7da341ddc...28b10b8fcc2d21fb323e79afeb46301d0c3c6e9c)
### [kube-proxy](https://github.com/openshift/sdn/tree/dee082def2014ab85a0e5ff9a056d3fe2461eab7)
* [OCPBUGS-43807](https://issues.redhat.com/browse/OCPBUGS-43807): Revendor to a patched k/k with our prefer-local-DNS hack [#640](https://github.com/openshift/sdn/pull/640)
* [SDN-4925](https://issues.redhat.com/browse/SDN-4925): Revendor k/k to upstream 1.30.3 (for kube-proxy) [#630](https://github.com/openshift/sdn/pull/630)
* [OCPBUGS-34279](https://issues.redhat.com/browse/OCPBUGS-34279): ART sync and golang 1.22 update [#629](https://github.com/openshift/sdn/pull/629)
* [OCPBUGS-34279](https://issues.redhat.com/browse/OCPBUGS-34279): Updating kube-proxy-container image to be consistent with ART for 4.17 [#623](https://github.com/openshift/sdn/pull/623)
* [OCPBUGS-26084](https://issues.redhat.com/browse/OCPBUGS-26084): Fix scan issue [#622](https://github.com/openshift/sdn/pull/622)
* [Full changelog](https://github.com/openshift/sdn/compare/c4dd04f7cece66d0a237f06cac9253d4e70103a7...dee082def2014ab85a0e5ff9a056d3fe2461eab7)
### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/7718265cc7640f6fa0d75eee366e424911d6f00f)
* [OCPBUGS-42697](https://issues.redhat.com/browse/OCPBUGS-42697): protobuf bump [4.17] [#112](https://github.com/openshift/kube-rbac-proxy/pull/112)
* [OCPBUGS-34057](https://issues.redhat.com/browse/OCPBUGS-34057): Updating kube-rbac-proxy-container image to be consistent with ART for 4.17 [#99](https://github.com/openshift/kube-rbac-proxy/pull/99)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/c38f4734c6b6931c75d46674122fb4b838b6e64b...7718265cc7640f6fa0d75eee366e424911d6f00f)
### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/462e63f6223817d3610f030f6166a790d793c572)
* [OCPBUGS-33620](https://issues.redhat.com/browse/OCPBUGS-33620): [bot] Bump openshift/kube-state-metrics to v2.13.0 [#115](https://github.com/openshift/kube-state-metrics/pull/115)
* [OCPBUGS-34202](https://issues.redhat.com/browse/OCPBUGS-34202): Updating kube-state-metrics-container image to be consistent with ART for 4.17 [#113](https://github.com/openshift/kube-state-metrics/pull/113)
* [OCPBUGS-34202](https://issues.redhat.com/browse/OCPBUGS-34202): Updating kube-state-metrics-container image to be consistent with ART for 4.17 [#112](https://github.com/openshift/kube-state-metrics/pull/112)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/9b67b8d1adbd63e27b622b3d050e0673766a6f2d...462e63f6223817d3610f030f6166a790d793c572)
### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/34fafc04e5f2872e282617da31175a7e091ffdb2)
* [OCPBUGS-34066](https://issues.redhat.com/browse/OCPBUGS-34066): Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.17 [#205](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/205)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/969a60e9e2466c44f5b3ffd43fe3ecab11bf1e51...34fafc04e5f2872e282617da31175a7e091ffdb2)
### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b)
* [OCPBUGS-34157](https://issues.redhat.com/browse/OCPBUGS-34157): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.17 [#43](https://github.com/openshift/cloud-provider-kubevirt/pull/43)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/3db76104a38bd9160ca24e2ed4a33649843f210a...3f4542ecd17fb0e47da4c6d9bceb076b98fb314b)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/02f9a9211a89784aad3272ffe93aa305a00be736)
* [CNV-45886](https://issues.redhat.com/browse/CNV-45886): Add csi-clone support to kubevirt-csi (#118) [#45](https://github.com/openshift/kubevirt-csi-driver/pull/45)
* [CNV-44899](https://issues.redhat.com/browse/CNV-44899): Sync upstream 2024-07-22 [#44](https://github.com/openshift/kubevirt-csi-driver/pull/44)
* [OCPBUGS-35093](https://issues.redhat.com/browse/OCPBUGS-35093): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.17 [#43](https://github.com/openshift/kubevirt-csi-driver/pull/43)
* [OCPBUGS-34058](https://issues.redhat.com/browse/OCPBUGS-34058): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.17 [#41](https://github.com/openshift/kubevirt-csi-driver/pull/41)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/0693093f773c5046e231f174e7930315feabd996...02f9a9211a89784aad3272ffe93aa305a00be736)
### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/139064c02af33d94baa669cce30967bfea534d13)
* [OCPBUGS-42414](https://issues.redhat.com/browse/OCPBUGS-42414): Ensure deletion annotation takes priority and oldestPolicy can distinguish longer ages [#1293](https://github.com/openshift/machine-api-operator/pull/1293)
* [OCPBUGS-38868](https://issues.redhat.com/browse/OCPBUGS-38868): Updates message verbs to use %q where appropriate [#1278](https://github.com/openshift/machine-api-operator/pull/1278)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Machineset feature gating [#1273](https://github.com/openshift/machine-api-operator/pull/1273)
* [OCPBUGS-37154](https://issues.redhat.com/browse/OCPBUGS-37154): Added Permisions for Azure Capacity Reservation [#1272](https://github.com/openshift/machine-api-operator/pull/1272)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Updates vsphere feature gates [#1269](https://github.com/openshift/machine-api-operator/pull/1269)
* [CORS-3546](https://issues.redhat.com/browse/CORS-3546): Nutanix: add gpus and dataDisks support [#1266](https://github.com/openshift/machine-api-operator/pull/1266)
* [CORS-3580](https://issues.redhat.com/browse/CORS-3580): Add the hyperdisk-balanced disk type [#1268](https://github.com/openshift/machine-api-operator/pull/1268)
* [OCPBUGS-36469](https://issues.redhat.com/browse/OCPBUGS-36469): Update validation for placementGroupPartition to honour it as pointer [#1267](https://github.com/openshift/machine-api-operator/pull/1267)
* [CFE-1065](https://issues.redhat.com/browse/CFE-1065): Add range validation for placementGroupPartition [#1265](https://github.com/openshift/machine-api-operator/pull/1265)
* [CFE-1065](https://issues.redhat.com/browse/CFE-1065): Add support for PlacementGroupPartition of placement group [#1242](https://github.com/openshift/machine-api-operator/pull/1242)
* NO-JIRA: Update OWNERS [#1264](https://github.com/openshift/machine-api-operator/pull/1264)
* [OCPBUGS-1735](https://issues.redhat.com/browse/OCPBUGS-1735): Vsphere: Handle cloned instance with lost taskID [#1223](https://github.com/openshift/machine-api-operator/pull/1223)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Bump openshift/api [#1256](https://github.com/openshift/machine-api-operator/pull/1256)
* [OCPCLOUD-2610](https://issues.redhat.com/browse/OCPCLOUD-2610): Update to Kube 1.30 deps [#1255](https://github.com/openshift/machine-api-operator/pull/1255)
* [SPLAT-1638](https://issues.redhat.com/browse/SPLAT-1638): Added multi vCenter support [#1241](https://github.com/openshift/machine-api-operator/pull/1241)
* [CFE-1051](https://issues.redhat.com/browse/CFE-1051): Adding validation for Azure capacityReservationGroupID [#1250](https://github.com/openshift/machine-api-operator/pull/1250)
* [OCPBUGS-34450](https://issues.redhat.com/browse/OCPBUGS-34450): Updating ose-machine-api-operator-container image to be consistent with ART for 4.17 [#1251](https://github.com/openshift/machine-api-operator/pull/1251)
* [SPLAT-1415](https://issues.redhat.com/browse/SPLAT-1415): Remove Alibaba [#1200](https://github.com/openshift/machine-api-operator/pull/1200)
* https://issues.redhat.com/browse/OCPBUGS-34391: Revert #1234 "CFE-1051: Add the webhook validation for \"CapacityReservationGroupID\" to \"AzureMachineProviderSpec\" in openshift/machine-api-operator" [#1246](https://github.com/openshift/machine-api-operator/pull/1246)
* [CFE-1051](https://issues.redhat.com/browse/CFE-1051): Add the webhook validation for "CapacityReservationGroupID" to "AzureMachineProviderSpec" in openshift/machine-api-operator [#1234](https://github.com/openshift/machine-api-operator/pull/1234)
* [OCPBUGS-34182](https://issues.redhat.com/browse/OCPBUGS-34182): Updating ose-machine-api-operator-container image to be consistent with ART for 4.17 [#1244](https://github.com/openshift/machine-api-operator/pull/1244)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/0967219612b43f35342c162f5b92733f946bd9be...139064c02af33d94baa669cce30967bfea534d13)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/911e8829ee867544a650b61751c66f571396bd5c)
* [OCPBUGS-39223](https://issues.redhat.com/browse/OCPBUGS-39223): Do not enable on-prem-resolv-prepender.path for UPI [#4572](https://github.com/openshift/machine-config-operator/pull/4572)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): Revert "controller: default to runc when upgrading clusters from 4.17 to 4.18" [#4716](https://github.com/openshift/machine-config-operator/pull/4716)
* [OCPBUGS-38292](https://issues.redhat.com/browse/OCPBUGS-38292): controller: default to runc when upgrading clusters from 4.17 to 4.18 [#4635](https://github.com/openshift/machine-config-operator/pull/4635)
* [OCPBUGS-44561](https://issues.redhat.com/browse/OCPBUGS-44561): Disable tx chksum for driver IDPF on GCP C3/C4 [#4701](https://github.com/openshift/machine-config-operator/pull/4701)
* [MCO-1343](https://issues.redhat.com/browse/MCO-1343): Backport Telemetry to 4.17 [#4650](https://github.com/openshift/machine-config-operator/pull/4650)
* [OCPBUGS-43917](https://issues.redhat.com/browse/OCPBUGS-43917): Disable ESP offload for OVS attached interfaces [#4667](https://github.com/openshift/machine-config-operator/pull/4667)
* [OCPBUGS-43719](https://issues.redhat.com/browse/OCPBUGS-43719): Soften haproxy timeout for kubeapi probe [#4657](https://github.com/openshift/machine-config-operator/pull/4657)
* [OCPBUGS-42577](https://issues.redhat.com/browse/OCPBUGS-42577): openstack: fix non-old systemd compatible unit [#4620](https://github.com/openshift/machine-config-operator/pull/4620)
* [OCPBUGS-42108](https://issues.redhat.com/browse/OCPBUGS-42108): Do not use 'restart' for 'oneshot' service [#4615](https://github.com/openshift/machine-config-operator/pull/4615)
* [OCPBUGS-42979](https://issues.redhat.com/browse/OCPBUGS-42979): Regenerate the rendered MC in use when deleted [#4634](https://github.com/openshift/machine-config-operator/pull/4634)
* [OCPBUGS-42677](https://issues.redhat.com/browse/OCPBUGS-42677): The MCO does not properly degrade when pools are failing to render a new config [#4623](https://github.com/openshift/machine-config-operator/pull/4623)
* [OCPBUGS-42081](https://issues.redhat.com/browse/OCPBUGS-42081): Check for kernel arg diff in updateOnClusterBuild [#4595](https://github.com/openshift/machine-config-operator/pull/4595)
* [OCPBUGS-41255](https://issues.redhat.com/browse/OCPBUGS-41255): Set ESP offloads off in bonds if slaves don't support them [#4598](https://github.com/openshift/machine-config-operator/pull/4598)
* [OCPBUGS-42256](https://issues.redhat.com/browse/OCPBUGS-42256): Panic seen in CI job for MCC pod [#4603](https://github.com/openshift/machine-config-operator/pull/4603)
* [OCPBUGS-42200](https://issues.redhat.com/browse/OCPBUGS-42200): MCPs report wrong number of nodes when we move nodes from one custom MCP to another custom MCP [#4602](https://github.com/openshift/machine-config-operator/pull/4602)
* [OCPBUGS-41357](https://issues.redhat.com/browse/OCPBUGS-41357): Enable the use of Linux Bridge as the ovs default port connection [#4567](https://github.com/openshift/machine-config-operator/pull/4567)
* [OCPBUGS-41686](https://issues.redhat.com/browse/OCPBUGS-41686): MCPs with RHEL nodes are degraded when a userCA bundle is added to the cluster [#4580](https://github.com/openshift/machine-config-operator/pull/4580)
* [OCPBUGS-41802](https://issues.redhat.com/browse/OCPBUGS-41802): When newly built images rolled out, the update progress is not displaying correctly (went 0 --> 3) [#4583](https://github.com/openshift/machine-config-operator/pull/4583)
* [OCPBUGS-41688](https://issues.redhat.com/browse/OCPBUGS-41688): Add alert for users of deprecating the Image Registry workaround [#4581](https://github.com/openshift/machine-config-operator/pull/4581)
* [OCPBUGS-41312](https://issues.redhat.com/browse/OCPBUGS-41312): CVE-2024-3727 ose-machine-config-operator-container: containers/image: digest type does not guarantee valid type [#4564](https://github.com/openshift/machine-config-operator/pull/4564)
* [OCPBUGS-38868](https://issues.redhat.com/browse/OCPBUGS-38868): Updates message verbs to use %q where appropriate [#4547](https://github.com/openshift/machine-config-operator/pull/4547)
* [OCPBUGS-38770](https://issues.redhat.com/browse/OCPBUGS-38770): SCC-pinning for openshift workloads [#4542](https://github.com/openshift/machine-config-operator/pull/4542)
* [OCPBUGS-38846](https://issues.redhat.com/browse/OCPBUGS-38846): Machine-config daemon ListPools panic during tech-preview CI runs [#4546](https://github.com/openshift/machine-config-operator/pull/4546)
* [OCPBUGS-38415](https://issues.redhat.com/browse/OCPBUGS-38415): Give keepalived-monitor necessary capabilities [#4532](https://github.com/openshift/machine-config-operator/pull/4532)
* [OCPNODE-2482](https://issues.redhat.com/browse/OCPNODE-2482): Enable CRI-O internal repair feature as the default [#4535](https://github.com/openshift/machine-config-operator/pull/4535)
* [OCPBUGS-38374](https://issues.redhat.com/browse/OCPBUGS-38374): Revert "MCD-pull: run after network-online.target in Azure" [#4529](https://github.com/openshift/machine-config-operator/pull/4529)
* [OCPBUGS-38321](https://issues.redhat.com/browse/OCPBUGS-38321): Revert "templates/master/cri-o: make crun as the default container runtime" [#4524](https://github.com/openshift/machine-config-operator/pull/4524)
* [OCPNODE-2357](https://issues.redhat.com/browse/OCPNODE-2357): templates/master/cri-o: make crun as the default container runtime [#4518](https://github.com/openshift/machine-config-operator/pull/4518)
* NO-JIRA: crio: set min memory for crun [#4516](https://github.com/openshift/machine-config-operator/pull/4516)
* [OCPBUGS-35800](https://issues.redhat.com/browse/OCPBUGS-35800): kubelet config controller does not always propogate tlsSecurityProfile [#4512](https://github.com/openshift/machine-config-operator/pull/4512)
* [OCPBUGS-31298](https://issues.redhat.com/browse/OCPBUGS-31298): Prevent no-operation patches from overloading the kube-api server with unnecessary calls [#4511](https://github.com/openshift/machine-config-operator/pull/4511)
* [MCO-703](https://issues.redhat.com/browse/MCO-703): Lifecycle Buildah with MCO [#4471](https://github.com/openshift/machine-config-operator/pull/4471)
* [MCO-1214](https://issues.redhat.com/browse/MCO-1214): Enabled boot images updates for AWS [#4492](https://github.com/openshift/machine-config-operator/pull/4492)
* NO-ISSUE: Move ManagedBootImages and NodeDisruptionPolicy to default e2e suite [#4513](https://github.com/openshift/machine-config-operator/pull/4513)
* NO-JIRA: Fix HasOSImage function [#4510](https://github.com/openshift/machine-config-operator/pull/4510)
* NO-ISSUE: Remove openshift/api pin [#4508](https://github.com/openshift/machine-config-operator/pull/4508)
* [MCO-1065](https://issues.redhat.com/browse/MCO-1065): MCO-1171: API bump for ManagedBootImages and NodeDisruptionPolicy GA [#4496](https://github.com/openshift/machine-config-operator/pull/4496)
* [OCPBUGS-33784](https://issues.redhat.com/browse/OCPBUGS-33784): Guard MachineOSBuild informers with feature gates [#4497](https://github.com/openshift/machine-config-operator/pull/4497)
* [MCO-1230](https://issues.redhat.com/browse/MCO-1230): Retry build and push operations multiple times [#4469](https://github.com/openshift/machine-config-operator/pull/4469)
* [OCPBUGS-30955](https://issues.redhat.com/browse/OCPBUGS-30955): On-Prem resolv prepender to watch for NM changes [#4488](https://github.com/openshift/machine-config-operator/pull/4488)
* [MCO-1191](https://issues.redhat.com/browse/MCO-1191), [MCO-1194](https://issues.redhat.com/browse/MCO-1194): Experiment with creating internal go bindings for bootc , Incorporate support for bootc commands to Machine Config Daemon [#4465](https://github.com/openshift/machine-config-operator/pull/4465)
* [OCPBUGS-36289](https://issues.redhat.com/browse/OCPBUGS-36289): e2e test should wait for MCD pod to be running [#4444](https://github.com/openshift/machine-config-operator/pull/4444)
* NO-ISSUE: OWNERS: keep up-to-date with active maintainers [#4493](https://github.com/openshift/machine-config-operator/pull/4493)
* [MCO-1202](https://issues.redhat.com/browse/MCO-1202): MCO-1203: MCO-1204: MCO-1205: MCO-1213: Implementing tlsSecurityProfile for MCO [#4435](https://github.com/openshift/machine-config-operator/pull/4435)
* [SPLAT-1381](https://issues.redhat.com/browse/SPLAT-1381): Remove Alibaba [#4112](https://github.com/openshift/machine-config-operator/pull/4112)
* NO-ISSUE: API bump to fetch BootcNodeManagement FG [#4487](https://github.com/openshift/machine-config-operator/pull/4487)
* [OCPBUGS-36175](https://issues.redhat.com/browse/OCPBUGS-36175): Remove privileged flag from on-prem containers [#4443](https://github.com/openshift/machine-config-operator/pull/4443)
* [OCPNODE-2438](https://issues.redhat.com/browse/OCPNODE-2438): bump API and update CRD manifests [#4480](https://github.com/openshift/machine-config-operator/pull/4480)
* [OCPBUGS-37271](https://issues.redhat.com/browse/OCPBUGS-37271): kubelet: boot without PSI for performance concerns [#4470](https://github.com/openshift/machine-config-operator/pull/4470)
* [MCO-1125](https://issues.redhat.com/browse/MCO-1125): OCPBUGS-35277: Allow paths to be defined for non-disruptive updates [#4472](https://github.com/openshift/machine-config-operator/pull/4472)
* [OCPBUGS-19537](https://issues.redhat.com/browse/OCPBUGS-19537): OCB should fail if node is not coreos based [#4442](https://github.com/openshift/machine-config-operator/pull/4442)
* [MCO-1227](https://issues.redhat.com/browse/MCO-1227): Run boot image controller only when required [#4477](https://github.com/openshift/machine-config-operator/pull/4477)
* [OCPBUGS-33397](https://issues.redhat.com/browse/OCPBUGS-33397): Openshift uncordoned compute-node that was intentionally cordoned [#4475](https://github.com/openshift/machine-config-operator/pull/4475)
* [OCPBUGS-33134](https://issues.redhat.com/browse/OCPBUGS-33134): Nodes are drained twice when an OCB image is applied [#4467](https://github.com/openshift/machine-config-operator/pull/4467)
* [OCPBUGS-36654](https://issues.redhat.com/browse/OCPBUGS-36654): Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events [#4460](https://github.com/openshift/machine-config-operator/pull/4460)
* [OPNET-465](https://issues.redhat.com/browse/OPNET-465): Refactor LB and DNS manifest list for vSphere [#4167](https://github.com/openshift/machine-config-operator/pull/4167)
* [MCO-1103](https://issues.redhat.com/browse/MCO-1103): Restore setup-envtest used in the verify test [#4458](https://github.com/openshift/machine-config-operator/pull/4458)
* [MCO-1144](https://issues.redhat.com/browse/MCO-1144): Implement progressing/error boot images conditions on the MachineConfiguration object [#4390](https://github.com/openshift/machine-config-operator/pull/4390)
* NO-ISSUE: Revert "disable mglru service" [#4468](https://github.com/openshift/machine-config-operator/pull/4468)
* [OCPBUGS-36344](https://issues.redhat.com/browse/OCPBUGS-36344): Add CIP relevant mirrors to sigstore attachement cfg [#4449](https://github.com/openshift/machine-config-operator/pull/4449)
* [OCPBUGS-35436](https://issues.redhat.com/browse/OCPBUGS-35436): Remove disable-mglru.service [#4466](https://github.com/openshift/machine-config-operator/pull/4466)
* [OCPBUGS-36711](https://issues.redhat.com/browse/OCPBUGS-36711): templates: run disable-mglru conditionally [#4459](https://github.com/openshift/machine-config-operator/pull/4459)
* [OCPBUGS-35300](https://issues.redhat.com/browse/OCPBUGS-35300): MCD-pull: run after network-online.target in Azure [#4423](https://github.com/openshift/machine-config-operator/pull/4423)
* [OCPBUGS-30603](https://issues.redhat.com/browse/OCPBUGS-30603): Bootstrap e2e test featuregate setup does not match the actual code [#4439](https://github.com/openshift/machine-config-operator/pull/4439)
* [MCO-1147](https://issues.redhat.com/browse/MCO-1147), [OCPBUGS-34225](https://issues.redhat.com/browse/OCPBUGS-34225): Pick up openshift/kubernetes 1.30 rebase updates, Dockerfile Update [#4399](https://github.com/openshift/machine-config-operator/pull/4399)
* [OCPNODE-2226](https://issues.redhat.com/browse/OCPNODE-2226): Introduce versioning in auto-node-sizing feature [#4363](https://github.com/openshift/machine-config-operator/pull/4363)
* [OCPBUGS-21628](https://issues.redhat.com/browse/OCPBUGS-21628), [OCPBUGS-28974](https://issues.redhat.com/browse/OCPBUGS-28974): daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages [#4429](https://github.com/openshift/machine-config-operator/pull/4429)
* [OCPBUGS-33694](https://issues.redhat.com/browse/OCPBUGS-33694): daemon/update: disable systemd unit before overwriting [#4421](https://github.com/openshift/machine-config-operator/pull/4421)
* [OCPBUGS-36178](https://issues.redhat.com/browse/OCPBUGS-36178): remove unnecessary e2e test TestControllerConfigStuff [#4434](https://github.com/openshift/machine-config-operator/pull/4434)
* [OCPBUGS-33913](https://issues.redhat.com/browse/OCPBUGS-33913), [OCPBUGS-34261](https://issues.redhat.com/browse/OCPBUGS-34261): CurrentImagePullSecret should be consumed by the MCD [#4395](https://github.com/openshift/machine-config-operator/pull/4395)
* [OCPBUGS-35971](https://issues.redhat.com/browse/OCPBUGS-35971): disable mglru kernel feature [#4425](https://github.com/openshift/machine-config-operator/pull/4425)
* NO-JIRA: format policy.json [#4412](https://github.com/openshift/machine-config-operator/pull/4412)
* [OCPBUGS-32348](https://issues.redhat.com/browse/OCPBUGS-32348): Make logging configurable for on-prem components [#4344](https://github.com/openshift/machine-config-operator/pull/4344)
* [OCPBUGS-31710](https://issues.redhat.com/browse/OCPBUGS-31710): Unify machineconfig file format for kubeletconfig to use YAML encoding instead of JSON encoding [#4350](https://github.com/openshift/machine-config-operator/pull/4350)
* [OCPBUGS-35519](https://issues.redhat.com/browse/OCPBUGS-35519): Revert "Azure: add Azure specific dnsmasq ordering" [#4411](https://github.com/openshift/machine-config-operator/pull/4411)
* [OCPBUGS-33331](https://issues.redhat.com/browse/OCPBUGS-33331): Fix reference to $host_file [#4353](https://github.com/openshift/machine-config-operator/pull/4353)
* [OCPBUGS-34050](https://issues.redhat.com/browse/OCPBUGS-34050): Default ipv4 NODE_IP to 0.0.0.0 [#4388](https://github.com/openshift/machine-config-operator/pull/4388)
* [OCPBUGS-35300](https://issues.redhat.com/browse/OCPBUGS-35300): Azure: add Azure specific dnsmasq ordering [#4404](https://github.com/openshift/machine-config-operator/pull/4404)
* [OCPNODE-2216](https://issues.redhat.com/browse/OCPNODE-2216): crio: migrate metrics port to localhost only [4.17] [#4292](https://github.com/openshift/machine-config-operator/pull/4292)
* [OCPNODE-2336](https://issues.redhat.com/browse/OCPNODE-2336): Drop ClusterImagePolicy validation on scope conflicts with release-image repo [#4401](https://github.com/openshift/machine-config-operator/pull/4401)
* [OCPBUGS-33671](https://issues.redhat.com/browse/OCPBUGS-33671), [OCPBUGS-34079](https://issues.redhat.com/browse/OCPBUGS-34079): fix secret canonicalization [#4366](https://github.com/openshift/machine-config-operator/pull/4366)
* [OCPBUGS-33129](https://issues.redhat.com/browse/OCPBUGS-33129): Panic when we remove an OCB infra MCP and we try to create new ones with different names [#4396](https://github.com/openshift/machine-config-operator/pull/4396)
* [MCO-1152](https://issues.redhat.com/browse/MCO-1152): MCO-1146: Add e2e tests for NodeDisruptionPolicy [#4365](https://github.com/openshift/machine-config-operator/pull/4365)
* [OCPBUGS-34959](https://issues.redhat.com/browse/OCPBUGS-34959): ensure event handlers are registered after queue is configured [#4359](https://github.com/openshift/machine-config-operator/pull/4359)
* [OCPBUGS-29820](https://issues.redhat.com/browse/OCPBUGS-29820): kubelet.service: wait for chronyd [#4381](https://github.com/openshift/machine-config-operator/pull/4381)
* [OCPBUGS-33248](https://issues.redhat.com/browse/OCPBUGS-33248): daemon: upgrade os image from local container storage if it exists [#4347](https://github.com/openshift/machine-config-operator/pull/4347)
* [OCPBUGS-28653](https://issues.redhat.com/browse/OCPBUGS-28653): userCA and cloudCA certfiicates are not removed from nodes and ignition config [#4378](https://github.com/openshift/machine-config-operator/pull/4378)
* [OCPBUGS-32367](https://issues.redhat.com/browse/OCPBUGS-32367): The MCD can override a restart crio action with a reload crio action [#4376](https://github.com/openshift/machine-config-operator/pull/4376)
* [OCPBUGS-31312](https://issues.redhat.com/browse/OCPBUGS-31312): machine-config-controller not logging enough details to triage the malformed certificate issue. [#4379](https://github.com/openshift/machine-config-operator/pull/4379)
* [OCPBUGS-32242](https://issues.redhat.com/browse/OCPBUGS-32242): The MCO makes a lot of API requests for ClusterOperator objects [#4321](https://github.com/openshift/machine-config-operator/pull/4321)
* [OCPBUGS-30343](https://issues.redhat.com/browse/OCPBUGS-30343): Scope each MCN object to only be accessible from its associated MCD [#4346](https://github.com/openshift/machine-config-operator/pull/4346)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#4219](https://github.com/openshift/machine-config-operator/pull/4219)
* NO-ISSUE: Update baremetal owner aliases [#4354](https://github.com/openshift/machine-config-operator/pull/4354)
* [SPLAT-1554](https://issues.redhat.com/browse/SPLAT-1554): Added featuregate for multi vCenter support. [#4298](https://github.com/openshift/machine-config-operator/pull/4298)
* [OCPBUGS-33803](https://issues.redhat.com/browse/OCPBUGS-33803): machine-os-puller SA refreshes every hour, causing machine config regeneration [#4370](https://github.com/openshift/machine-config-operator/pull/4370)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4bb3364914c4dbcdfcc08b0914f402cdd38f014f...911e8829ee867544a650b61751c66f571396bd5c)
### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/74bee37482b0e9d581c2e12c8040195169e49032)
* [OCPBUGS-34358](https://issues.redhat.com/browse/OCPBUGS-34358): Updating ose-image-customization-controller-container image to be consistent with ART for 4.17 [#127](https://github.com/openshift/image-customization-controller/pull/127)
* [OCPBUGS-34358](https://issues.redhat.com/browse/OCPBUGS-34358): Updating ose-image-customization-controller-container image to be consistent with ART for 4.17 [#126](https://github.com/openshift/image-customization-controller/pull/126)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/394809633b6b2e33ea1af444f7237f066bf0abb1...74bee37482b0e9d581c2e12c8040195169e49032)
### [machine-os-images](https://github.com/openshift/machine-os-images/tree/9e76dac7c015538cea342bb0d4b226a9ffe58754)
* [OCPBUGS-34177](https://issues.redhat.com/browse/OCPBUGS-34177): Updating ose-machine-os-images-container image to be consistent with ART for 4.17 [#38](https://github.com/openshift/machine-os-images/pull/38)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/3cc97098ecb9870dcb571f1ed1e26e2f70ce9f8c...9e76dac7c015538cea342bb0d4b226a9ffe58754)
### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/ad057d32fa7e2cf4033f535dc9d68c0a2c49f004)
* [OCPBUGS-44394](https://issues.redhat.com/browse/OCPBUGS-44394): remove unused package and upgrade vulnerable dependency [#271](https://github.com/openshift/monitoring-plugin/pull/271)
* [OCPBUGS-43238](https://issues.redhat.com/browse/OCPBUGS-43238): upgrade dynamic plugin sdk to remove vulnerable dependencies 4.17 [#216](https://github.com/openshift/monitoring-plugin/pull/216)
* [OCPBUGS-42408](https://issues.redhat.com/browse/OCPBUGS-42408): fix path-to-regexp dependency [#196](https://github.com/openshift/monitoring-plugin/pull/196)
* NO-JIRA: Update query-browser to not use setState [#166](https://github.com/openshift/monitoring-plugin/pull/166)
* NO-JIRA: upgrade to go 1.22 fixing the z version [#163](https://github.com/openshift/monitoring-plugin/pull/163)
* NO-JIRA: downgrade to go 1.21 to be able to use cachito [#161](https://github.com/openshift/monitoring-plugin/pull/161)
* NO-JIRA: add FIPS compliant flags and env vars [#159](https://github.com/openshift/monitoring-plugin/pull/159)
* NO-JIRA: fix cachito web folder [#152](https://github.com/openshift/monitoring-plugin/pull/152)
* NO-JIRA: Use DNF and go based image in Dockerfile [#155](https://github.com/openshift/monitoring-plugin/pull/155)
* NO-JIRA: fix command chain for art image [#150](https://github.com/openshift/monitoring-plugin/pull/150)
* NO-JIRA: fix cachito pem file location [#147](https://github.com/openshift/monitoring-plugin/pull/147)
* NO-JIRA: fix cachito target folder [#145](https://github.com/openshift/monitoring-plugin/pull/145)
* NO-JIRA: Fix art image cachito path for yarn lock [#143](https://github.com/openshift/monitoring-plugin/pull/143)
* [OU-436](https://issues.redhat.com/browse/OU-436): Add Golang backend [#128](https://github.com/openshift/monitoring-plugin/pull/128)
* [OU-258](https://issues.redhat.com/browse/OU-258): Dev console: Use Metrics page from monitoring-plugin [#138](https://github.com/openshift/monitoring-plugin/pull/138)
* [OCPBUGS-37291](https://issues.redhat.com/browse/OCPBUGS-37291): check undefined function before calling [#137](https://github.com/openshift/monitoring-plugin/pull/137)
* NO-JIRA: Fix docker local and log query browser error [#135](https://github.com/openshift/monitoring-plugin/pull/135)
* [OU-248](https://issues.redhat.com/browse/OU-248): Add Alerts Detail Page [#131](https://github.com/openshift/monitoring-plugin/pull/131)
* [OU-238](https://issues.redhat.com/browse/OU-238): Export CSV [#127](https://github.com/openshift/monitoring-plugin/pull/127)
* [OCPBUGS-36970](https://issues.redhat.com/browse/OCPBUGS-36970): Use the non-tenancy URL in the Admin perspective [#134](https://github.com/openshift/monitoring-plugin/pull/134)
* [OU-251](https://issues.redhat.com/browse/OU-251): Prevent rule labels from being added to alert labels for dev console [#132](https://github.com/openshift/monitoring-plugin/pull/132)
* [OU-439](https://issues.redhat.com/browse/OU-439): Add the predefined queries list to the admin metrics [#129](https://github.com/openshift/monitoring-plugin/pull/129)
* [OU-251](https://issues.redhat.com/browse/OU-251): Migrate Developer Perspective Alert List to Monitoring Plugin [#125](https://github.com/openshift/monitoring-plugin/pull/125)
* [OKD-210](https://issues.redhat.com/browse/OKD-210): Use rhel9 base image in Dockerfile [#121](https://github.com/openshift/monitoring-plugin/pull/121)
* [OCPBUGS-34312](https://issues.redhat.com/browse/OCPBUGS-34312): Updating monitoring-plugin-container image to be consistent with ART for 4.17 [#120](https://github.com/openshift/monitoring-plugin/pull/120)
* [OCPBUGS-34312](https://issues.redhat.com/browse/OCPBUGS-34312): Updating monitoring-plugin-container image to be consistent with ART for 4.17 [#119](https://github.com/openshift/monitoring-plugin/pull/119)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/442ccd10ad05a04f510932082cd5a791d66a997e...ad057d32fa7e2cf4033f535dc9d68c0a2c49f004)
### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/076f0caa98ca33b0eb4d3cdb0f984de03e8bd6b7)
* [OCPBUGS-34283](https://issues.redhat.com/browse/OCPBUGS-34283): Updating ose-multus-admission-controller-container image to be consistent with ART for 4.17 [#85](https://github.com/openshift/multus-admission-controller/pull/85)
* [NP-1046](https://issues.redhat.com/browse/NP-1046): Update owners [#86](https://github.com/openshift/multus-admission-controller/pull/86)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/88c596ed782cf6c3f94efa286b3568d12acde436...076f0caa98ca33b0eb4d3cdb0f984de03e8bd6b7)
### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/b8d8d5c0128743d5d3c188ad37004c0a4bc00337)
* [OCPBUGS-41817](https://issues.redhat.com/browse/OCPBUGS-41817): always attempt a live pod get on miss to confirm its really not there [#248](https://github.com/openshift/multus-cni/pull/248)
* [OCPBUGS-37991](https://issues.redhat.com/browse/OCPBUGS-37991): Downstream sync to address multiple interface returns in network-status annotation [#245](https://github.com/openshift/multus-cni/pull/245)
* [OKD-218](https://issues.redhat.com/browse/OKD-218): install util-linux [#241](https://github.com/openshift/multus-cni/pull/241)
* [OCPBUGS-34911](https://issues.redhat.com/browse/OCPBUGS-34911): Update owners file [#237](https://github.com/openshift/multus-cni/pull/237)
* [OCPBUGS-33559](https://issues.redhat.com/browse/OCPBUGS-33559): Thick plugin should not wait for API readiness on CNI DEL [#233](https://github.com/openshift/multus-cni/pull/233)
* [Full changelog](https://github.com/openshift/multus-cni/compare/c4aa21b9bfed4ebafc2e67ca1474e245b67b5f9f...b8d8d5c0128743d5d3c188ad37004c0a4bc00337)
### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/7d01ea1c54c4eeace626f05a9dcc94230b3a9ec8)
* Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.17 (#55) [#55](https://github.com/openshift/multus-networkpolicy/pull/55)
* Update owners (#56) [#56](https://github.com/openshift/multus-networkpolicy/pull/56)
* Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.17 (#54) [#54](https://github.com/openshift/multus-networkpolicy/pull/54)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/f988f894ded7e6645a1b3cc0d6090601809d4e7c...7d01ea1c54c4eeace626f05a9dcc94230b3a9ec8)
### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/391c1b0361e17c5718508810f0bdb6ff66ae6e81)
* [NP-1041](https://issues.redhat.com/browse/NP-1041): Update owners [#57](https://github.com/openshift/route-override-cni/pull/57)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/73594f7759e76600c95601138ab5be4969978f63...391c1b0361e17c5718508810f0bdb6ff66ae6e81)
### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/c359161c2d1c43ffa61774ce22d3ff6c936829fa)
* [NP-1057](https://issues.redhat.com/browse/NP-1057): Ds merge 08/02/2024 [#307](https://github.com/openshift/whereabouts-cni/pull/307)
* [OCPBUGS-33941](https://issues.redhat.com/browse/OCPBUGS-33941): upstream sync 23072024 [#303](https://github.com/openshift/whereabouts-cni/pull/303)
* [NP-1045](https://issues.redhat.com/browse/NP-1045): Update owners [#285](https://github.com/openshift/whereabouts-cni/pull/285)
* [OCPBUGS-29648](https://issues.redhat.com/browse/OCPBUGS-29648): upstream sync 13062024 [#290](https://github.com/openshift/whereabouts-cni/pull/290)
* [OCPBUGS-24663](https://issues.redhat.com/browse/OCPBUGS-24663): upstream sync 2024/05/23 [#284](https://github.com/openshift/whereabouts-cni/pull/284)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/dab1dd29b18521916c18a278faa734f038eccdf1...c359161c2d1c43ffa61774ce22d3ff6c936829fa)
### [must-gather](https://github.com/openshift/must-gather/tree/d785c127c87271f3f3823d5000e6e4352ac9b88f)
* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): Removes reference to gather_multus_logs in 4.17 [#459](https://github.com/openshift/must-gather/pull/459)
* [OCPBUGS-42964](https://issues.redhat.com/browse/OCPBUGS-42964): Collect etcd object count [#453](https://github.com/openshift/must-gather/pull/453)
* [OCPBUGS-42958](https://issues.redhat.com/browse/OCPBUGS-42958): Gather OSUS data [#443](https://github.com/openshift/must-gather/pull/443)
* [OCPBUGS-42835](https://issues.redhat.com/browse/OCPBUGS-42835): [Release-4.17] Network logs collection: skip unready nodes [#445](https://github.com/openshift/must-gather/pull/445)
* [CNF-13837](https://issues.redhat.com/browse/CNF-13837): gather_ppc: fallback option when NTO image not found [#436](https://github.com/openshift/must-gather/pull/436)
* [MON-3108](https://issues.redhat.com/browse/MON-3108): Add gather_metrics for Prometheus fetching [#434](https://github.com/openshift/must-gather/pull/434)
* [OCPBUGS-33959](https://issues.redhat.com/browse/OCPBUGS-33959), [SDN-5066](https://issues.redhat.com/browse/SDN-5066): Remove needless multus log collection [#431](https://github.com/openshift/must-gather/pull/431)
* NO-JIRA: Update dockerfile rename changes [#433](https://github.com/openshift/must-gather/pull/433)
* NO-JIRA: Rename Dockerfile [#432](https://github.com/openshift/must-gather/pull/432)
* NO-JIRA: Correct typo. [#414](https://github.com/openshift/must-gather/pull/414)
* NO-JIRA: Adding the missing clusterresourcequota and Flowcontrol resources [#408](https://github.com/openshift/must-gather/pull/408)
* [OCPBUGS-34360](https://issues.redhat.com/browse/OCPBUGS-34360): Run ppc node collection in parallel [#424](https://github.com/openshift/must-gather/pull/424)
* [OCPBUGS-31037](https://issues.redhat.com/browse/OCPBUGS-31037): Collect PerformanceProfile Data From all Nodes [#410](https://github.com/openshift/must-gather/pull/410)
* [OCPBUGS-33959](https://issues.redhat.com/browse/OCPBUGS-33959): Network logs collection: skip unready nodes [#425](https://github.com/openshift/must-gather/pull/425)
* [OCPBUGS-34467](https://issues.redhat.com/browse/OCPBUGS-34467): Updating ose-must-gather-container image to be consistent with ART for 4.17 [#423](https://github.com/openshift/must-gather/pull/423)
* [Full changelog](https://github.com/openshift/must-gather/compare/a30f939e9fec211253eaf1c91d4b5c7401f300a4...d785c127c87271f3f3823d5000e6e4352ac9b88f)
### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/8630f336431ccca04de465f991dbdf3ab736913b)
* [OCPBUGS-34286](https://issues.redhat.com/browse/OCPBUGS-34286): Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.17 [#64](https://github.com/openshift/bond-cni/pull/64)
* [Full changelog](https://github.com/openshift/bond-cni/compare/bb911451158fc06f193917863778434944e88ae1...8630f336431ccca04de465f991dbdf3ab736913b)
### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/ddb486ae8c68d228a1421c779ec8fe35fc436ccb)
* Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.17 (#93) [#93](https://github.com/openshift/network-metrics-daemon/pull/93)
* swtich golint install method (#103) [#103](https://github.com/openshift/network-metrics-daemon/pull/103)
* Correct spelling (#97) [#97](https://github.com/openshift/network-metrics-daemon/pull/97)
* Update owners (#94) [#94](https://github.com/openshift/network-metrics-daemon/pull/94)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/48059263880572c52fb8b21f1441370100dc167a...ddb486ae8c68d228a1421c779ec8fe35fc436ccb)
### [network-tools](https://github.com/openshift/network-tools/tree/8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1)
* NO-JIRA: Add real total line to the bug ranking [#131](https://github.com/openshift/network-tools/pull/131)
* NO-JIRA: Px score for bugs [#128](https://github.com/openshift/network-tools/pull/128)
* [OCPBUGS-34469](https://issues.redhat.com/browse/OCPBUGS-34469): Updating ose-network-tools-container image to be consistent with ART for 4.17 [#129](https://github.com/openshift/network-tools/pull/129)
* NO-JIRA:In recently assigned bugs, exclude bugs we don't count as such [#127](https://github.com/openshift/network-tools/pull/127)
* [Full changelog](https://github.com/openshift/network-tools/compare/39eca100c0978fb59234e21bf549b130914616ac...8e170b4f41c9e80f0f8dd42d6cf6c169872b15d1)
### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/c9f6cd1fa4cff30c060d8927c16fabafb645a4e9)
* NO-JIRA: Update OWNERS [#34](https://github.com/openshift/cloud-provider-nutanix/pull/34)
* [OCPCLOUD-2603](https://issues.redhat.com/browse/OCPCLOUD-2603): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (ab0df3a) into main [#31](https://github.com/openshift/cloud-provider-nutanix/pull/31)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/28bf5963c7f82ae8d966a69562a19f038d819950...c9f6cd1fa4cff30c060d8927c16fabafb645a4e9)
### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/68aa2bbf47a02361b89cdd71ea18968a78cbd0c0)
* [CORS-3546](https://issues.redhat.com/browse/CORS-3546): Nutanix: support for gpus and dataDisks [#77](https://github.com/openshift/machine-api-provider-nutanix/pull/77)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Adds --feature-gates CLI argument [#78](https://github.com/openshift/machine-api-provider-nutanix/pull/78)
* [OCPCLOUD-2611](https://issues.redhat.com/browse/OCPCLOUD-2611): Update to Kube 1.30 [#75](https://github.com/openshift/machine-api-provider-nutanix/pull/75)
* [OCPBUGS-34230](https://issues.redhat.com/browse/OCPBUGS-34230): Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.17 [#74](https://github.com/openshift/machine-api-provider-nutanix/pull/74)
* NO-JIRA: Update OWNERS [#76](https://github.com/openshift/machine-api-provider-nutanix/pull/76)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/f053e5a0ee58d20066efff8db01578785ea83dad...68aa2bbf47a02361b89cdd71ea18968a78cbd0c0)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e37ccb455e1b48d1af032315987baf1e93b4084f)
* [OCPBUGS-34446](https://issues.redhat.com/browse/OCPBUGS-34446): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.17 [#116](https://github.com/openshift/oauth-apiserver/pull/116)
* [OCPBUGS-34140](https://issues.redhat.com/browse/OCPBUGS-34140): Updating ose-oauth-apiserver-container image to be consistent with ART for 4.17 [#115](https://github.com/openshift/oauth-apiserver/pull/115)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/fa1f097c2800b06b3b56537651294d023762a4eb...e37ccb455e1b48d1af032315987baf1e93b4084f)
### [oauth-server](https://github.com/openshift/oauth-server/tree/5a70bcef9c5a913bda3ac9fbb5a27cb43d27a7db)
* [OCPBUGS-44118](https://issues.redhat.com/browse/OCPBUGS-44118): escape spaces in oauth callback path [#167](https://github.com/openshift/oauth-server/pull/167)
* [OCPBUGS-43587](https://issues.redhat.com/browse/OCPBUGS-43587): Fix login path for go1.22 mux pattern matching [#162](https://github.com/openshift/oauth-server/pull/162)
* [OCPBUGS-34248](https://issues.redhat.com/browse/OCPBUGS-34248): Updating oauth-server-container image to be consistent with ART for 4.17 [#149](https://github.com/openshift/oauth-server/pull/149)
* [OCPBUGS-33695](https://issues.redhat.com/browse/OCPBUGS-33695): p/o/handlers - fix nil-pointer, if ResStatus is nil [#150](https://github.com/openshift/oauth-server/pull/150)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3739138c8ebbeb73f6e89f61591dd16a3ece32e3...5a70bcef9c5a913bda3ac9fbb5a27cb43d27a7db)
### [oc-mirror](https://github.com/openshift/oc-mirror/tree/07714b7c836ec3ad1b776f25b44c3b2c2f083aa2)
* [OCPBUGS-37867](https://issues.redhat.com/browse/OCPBUGS-37867): Use tag only when image by tag and digest (#911) (#932) [#911](https://github.com/openshift/oc-mirror/pull/911)
* [OCPBUGS-41503](https://issues.redhat.com/browse/OCPBUGS-41503): [release-4.17] oc-mirror throws error when performing delete operation with --generate (#922) [#922](https://github.com/openshift/oc-mirror/pull/922)
* [OCPBUGS-41168](https://issues.redhat.com/browse/OCPBUGS-41168): [release-4.17] Should not panic when specifying wrong loglevel for oc-mirror (#918) [#918](https://github.com/openshift/oc-mirror/pull/918)
* [OCPBUGS-37950](https://issues.redhat.com/browse/OCPBUGS-37950): Bug fix when kubevirt image not found (#914) [#914](https://github.com/openshift/oc-mirror/pull/914)
* [OCPBUGS-38469](https://issues.redhat.com/browse/OCPBUGS-38469): unable to build graph image in enclave environment (#912) [#912](https://github.com/openshift/oc-mirror/pull/912)
* [OCPBUGS-38396](https://issues.redhat.com/browse/OCPBUGS-38396): use platform.release when set (#910) [#910](https://github.com/openshift/oc-mirror/pull/910)
* [OCPBUGS-37667](https://issues.redhat.com/browse/OCPBUGS-37667): Rebuild catalogs -- without cache generation (#899) [#899](https://github.com/openshift/oc-mirror/pull/899)
* [CLID-179](https://issues.redhat.com/browse/CLID-179): Include the HyperShift KubeVirt CoreOS container (#900) [#900](https://github.com/openshift/oc-mirror/pull/900)
* removes duplicated operator related images (#903) [#903](https://github.com/openshift/oc-mirror/pull/903)
* [CLID-133](https://issues.redhat.com/browse/CLID-133): feat: introduces priority on mirroring and show which operator failed during mirroring (#895) [#895](https://github.com/openshift/oc-mirror/pull/895)
* [OCPBUGS-36410](https://issues.redhat.com/browse/OCPBUGS-36410): fix: creates tags for release images (#898) [#898](https://github.com/openshift/oc-mirror/pull/898)
* [CLID-136](https://issues.redhat.com/browse/CLID-136): Skip deletion of operator catalog image in delete feature (#894) [#894](https://github.com/openshift/oc-mirror/pull/894)
* [OCPBUGS-37055](https://issues.redhat.com/browse/OCPBUGS-37055): Use proxy for HTTP request release signatures (#891) [#891](https://github.com/openshift/oc-mirror/pull/891)
* [OCPBUGS-36548](https://issues.redhat.com/browse/OCPBUGS-36548): Skip catalogs that are non existing (#888) [#888](https://github.com/openshift/oc-mirror/pull/888)
* [OCPBUGS-36445](https://issues.redhat.com/browse/OCPBUGS-36445): Fix to ensure invalid catalogs are skipped (#885) [#885](https://github.com/openshift/oc-mirror/pull/885)
* CLID-99 consolidates the release collector for delete feature (#883) [#883](https://github.com/openshift/oc-mirror/pull/883)
* This is a combination of 6 commits. (#880) [#880](https://github.com/openshift/oc-mirror/pull/880)
* [OCPBUGS-362214](https://issues.redhat.com/browse/OCPBUGS-362214): Fix V2 DiskToMirror should not require internet access (#882) [#882](https://github.com/openshift/oc-mirror/pull/882)
* Update enclave documentation : OSUS (#878) [#878](https://github.com/openshift/oc-mirror/pull/878)
* [OCPBUGS-34020](https://issues.redhat.com/browse/OCPBUGS-34020): Implement fail safe / fail fast in workers (#865) [#865](https://github.com/openshift/oc-mirror/pull/865)
* [CLID-135](https://issues.redhat.com/browse/CLID-135): Show warning in console when EUS and version conditions are used (#874) [#874](https://github.com/openshift/oc-mirror/pull/874)
* [OCPBUGS-35279](https://issues.redhat.com/browse/OCPBUGS-35279): Fix spelling error in delete console message (#877) [#877](https://github.com/openshift/oc-mirror/pull/877)
* Updating oc-mirror-plugin-container image to be consistent with ART for 4.17 (#872) [#872](https://github.com/openshift/oc-mirror/pull/872)
* [OCPBUGS-33775](https://issues.redhat.com/browse/OCPBUGS-33775): Do not generate idms & itms if nothing has been mirrored (#869) [#869](https://github.com/openshift/oc-mirror/pull/869)
* [OCPBUGS-33121](https://issues.redhat.com/browse/OCPBUGS-33121): Fix problems with versions and verbose flags (#867) [#867](https://github.com/openshift/oc-mirror/pull/867)
* [CLID-122](https://issues.redhat.com/browse/CLID-122): upgrades distribution/distribution for a released version (#864) [#864](https://github.com/openshift/oc-mirror/pull/864)
* [OCPBUGS-34211](https://issues.redhat.com/browse/OCPBUGS-34211): docker.io registry/2 is pulled with a platform argument (#859) [#859](https://github.com/openshift/oc-mirror/pull/859)
* [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#862) [#862](https://github.com/openshift/oc-mirror/pull/862)
* [OCPBUGS-33580](https://issues.redhat.com/browse/OCPBUGS-33580): Fix shortestPath returning 3 times the same imageSet (#856) [#856](https://github.com/openshift/oc-mirror/pull/856)
* [OCPBUGS-31858](https://issues.redhat.com/browse/OCPBUGS-31858): Activate flags for timeout, retry and maxParallelDownload (#858) [#858](https://github.com/openshift/oc-mirror/pull/858)
* [OCPBUGS-33081](https://issues.redhat.com/browse/OCPBUGS-33081): Skip images that don't follow standards, semver and naming (#855) [#855](https://github.com/openshift/oc-mirror/pull/855)
* [OCPBUGS-31343](https://issues.redhat.com/browse/OCPBUGS-31343): Display warning if package not found (#857) [#857](https://github.com/openshift/oc-mirror/pull/857)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/819f0115e4be3f55ed7d4edae1c38035811771ae...07714b7c836ec3ad1b776f25b44c3b2c2f083aa2)
### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/c4497d0954b9967ba206515308275ae6f1d962e8)
* NO-ISSUE: Synchronize From Upstream Repositories [#59](https://github.com/openshift/operator-framework-catalogd/pull/59)
* NO-ISSUE: Synchronize From Upstream Repositories [#57](https://github.com/openshift/operator-framework-catalogd/pull/57)
* NO-ISSUE: Synchronize From Upstream Repositories [#53](https://github.com/openshift/operator-framework-catalogd/pull/53)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/79975a511e1d31a09ef9b3b9e01262c8c69ff633...c4497d0954b9967ba206515308275ae6f1d962e8)
### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/182f23beb158cdeb3a87a40c5f5472e4c3f94381)
* NO-ISSUE: Synchronize From Upstream Repositories [#125](https://github.com/openshift/operator-framework-operator-controller/pull/125)
* NO-ISSUE: Synchronize From Upstream Repositories [#124](https://github.com/openshift/operator-framework-operator-controller/pull/124)
* NO-ISSUE: Synchronize From Upstream Repositories [#123](https://github.com/openshift/operator-framework-operator-controller/pull/123)
* NO-ISSUE: Synchronize From Upstream Repositories [#121](https://github.com/openshift/operator-framework-operator-controller/pull/121)
* NO-ISSUE: Synchronize From Upstream Repositories [#119](https://github.com/openshift/operator-framework-operator-controller/pull/119)
* NO-ISSUE: Synchronize From Upstream Repositories [#118](https://github.com/openshift/operator-framework-operator-controller/pull/118)
* NO-ISSUE: Synchronize From Upstream Repositories [#117](https://github.com/openshift/operator-framework-operator-controller/pull/117)
* NO-ISSUE: Synchronize From Upstream Repositories [#115](https://github.com/openshift/operator-framework-operator-controller/pull/115)
* [OCPBUGS-36471](https://issues.redhat.com/browse/OCPBUGS-36471): Synchronize From Upstream Repositories [#114](https://github.com/openshift/operator-framework-operator-controller/pull/114)
* NO-ISSUE: Synchronize From Upstream Repositories [#111](https://github.com/openshift/operator-framework-operator-controller/pull/111)
* NO-ISSUE: Synchronize From Upstream Repositories [#110](https://github.com/openshift/operator-framework-operator-controller/pull/110)
* NO-ISSUE: Synchronize From Upstream Repositories [#109](https://github.com/openshift/operator-framework-operator-controller/pull/109)
* NO-ISSUE: Synchronize From Upstream Repositories [#108](https://github.com/openshift/operator-framework-operator-controller/pull/108)
* NO-ISSUE: Synchronize From Upstream Repositories [#107](https://github.com/openshift/operator-framework-operator-controller/pull/107)
* NO-ISSUE: Synchronize From Upstream Repositories [#106](https://github.com/openshift/operator-framework-operator-controller/pull/106)
* NO-ISSUE: Synchronize From Upstream Repositories [#104](https://github.com/openshift/operator-framework-operator-controller/pull/104)
* NO-ISSUE: Synchronize From Upstream Repositories [#103](https://github.com/openshift/operator-framework-operator-controller/pull/103)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/80b8649cf7a57098d03eff0d155531cf63728f41...182f23beb158cdeb3a87a40c5f5472e4c3f94381)
### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/cd1a4bc86137d83c2243c76b069a8ce6785a1658)
* [OCPBUGS-42232](https://issues.redhat.com/browse/OCPBUGS-42232): fail image import when both image and error are nil [#450](https://github.com/openshift/openshift-apiserver/pull/450)
* [OCPBUGS-34375](https://issues.redhat.com/browse/OCPBUGS-34375): Updating ose-openshift-apiserver-container image to be consistent with ART for 4.17 [#437](https://github.com/openshift/openshift-apiserver/pull/437)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/f09402cfac07d6e5040ac8b6f068703eba3c700f...cd1a4bc86137d83c2243c76b069a8ce6785a1658)
### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/f299e54abad2f06a51f95bf40b611a5f1519b31e)
* [OCPBUGS-44093](https://issues.redhat.com/browse/OCPBUGS-44093): user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies [#350](https://github.com/openshift/openshift-controller-manager/pull/350)
* NO-JIRA: cleanup root and app OWNERS [#346](https://github.com/openshift/openshift-controller-manager/pull/346)
* [OCPBUGS-42362](https://issues.redhat.com/browse/OCPBUGS-42362): Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) [#339](https://github.com/openshift/openshift-controller-manager/pull/339)
* [OCPBUGS-39167](https://issues.redhat.com/browse/OCPBUGS-39167): replaces deprecated square/go-jose wtih go-jose/go-jose [#328](https://github.com/openshift/openshift-controller-manager/pull/328)
* [OCPBUGS-35731](https://issues.redhat.com/browse/OCPBUGS-35731): Race condition when deleting ServiceAccount [#318](https://github.com/openshift/openshift-controller-manager/pull/318)
* Revert Revert OCPBUGS-36833: 4.16 "Bad" reconciliation loops can cause unbounded dockercfg secret creation [#322](https://github.com/openshift/openshift-controller-manager/pull/322)
* NO-JIRA: Revert "OCPBUGS-36833: 4.16 "Bad" reconciliation loops can cause unbounded dockercfg secret creation" [#321](https://github.com/openshift/openshift-controller-manager/pull/321)
* [OCPBUGS-36833](https://issues.redhat.com/browse/OCPBUGS-36833): 4.16 "Bad" reconciliation loops can cause unbounded dockercfg secret creation [#319](https://github.com/openshift/openshift-controller-manager/pull/319)
* [OCPBUGS-32873](https://issues.redhat.com/browse/OCPBUGS-32873): Replace deprecated gopkg.in/square/go-jose.v2 [#315](https://github.com/openshift/openshift-controller-manager/pull/315)
* [OCPBUGS-12699](https://issues.redhat.com/browse/OCPBUGS-12699): Whitelists lower-case proxy envs to pod proxydefaults [#310](https://github.com/openshift/openshift-controller-manager/pull/310)
* [WRKLDS-1292](https://issues.redhat.com/browse/WRKLDS-1292): Bump k8s dependencies to 1.30.1 [#313](https://github.com/openshift/openshift-controller-manager/pull/313)
* [OCPBUGS-33815](https://issues.redhat.com/browse/OCPBUGS-33815): openshift-controller-manager overwriting/undoing changes to ServiceAccount imagePullSecrets [#306](https://github.com/openshift/openshift-controller-manager/pull/306)
* [OCPBUGS-33834](https://issues.redhat.com/browse/OCPBUGS-33834): filter delete events [#307](https://github.com/openshift/openshift-controller-manager/pull/307)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/05ca43957983cd8ea5a5890c5271d7cb228ecdd0...f299e54abad2f06a51f95bf40b611a5f1519b31e)
### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/1e963eb5839e2408734e37765d4d6b8fc48b343d)
* [OCPBUGS-34298](https://issues.redhat.com/browse/OCPBUGS-34298): Updating openshift-state-metrics-container image to be consistent with ART for 4.17 [#117](https://github.com/openshift/openshift-state-metrics/pull/117)
* [OCPBUGS-34298](https://issues.redhat.com/browse/OCPBUGS-34298): Updating openshift-state-metrics-container image to be consistent with ART for 4.17 [#116](https://github.com/openshift/openshift-state-metrics/pull/116)
* [MON-3878](https://issues.redhat.com/browse/MON-3878): Remove deprectated logtostderr [#114](https://github.com/openshift/openshift-state-metrics/pull/114)
* [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/59b8a0ffc0a472e819e0c30911201c34c85a4684...1e963eb5839e2408734e37765d4d6b8fc48b343d)
### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/f89b6dbc9464e13f432a96ab42bdbb38bdd587d2)
* NO-JIRA: Add more docs for configuration options [#167](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/167)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#176](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/176)
* [OCPBUGS-30949](https://issues.redhat.com/browse/OCPBUGS-30949): Add config map hooks [#168](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/168)
* [OCPBUGS-34870](https://issues.redhat.com/browse/OCPBUGS-34870): Correct out-of-bounds check [#170](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/170)
* [OCPBUGS-34276](https://issues.redhat.com/browse/OCPBUGS-34276): Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.17 [#169](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/169)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/85b52097dda6b8a5f64ceb662d477a9ae28c4ca7...f89b6dbc9464e13f432a96ab42bdbb38bdd587d2)
### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/23512b675c57095bc03ac0da8cad39561d6aef9b)
* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#342](https://github.com/openshift/cluster-api-provider-openstack/pull/342)
* [OCPBUGS-44959](https://issues.redhat.com/browse/OCPBUGS-44959): Makefile changes for merge-bot [#340](https://github.com/openshift/cluster-api-provider-openstack/pull/340)
* [OCPBUGS-44455](https://issues.redhat.com/browse/OCPBUGS-44455): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#329](https://github.com/openshift/cluster-api-provider-openstack/pull/329)
* [OCPBUGS-43584](https://issues.redhat.com/browse/OCPBUGS-43584): Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into release-4.17 [#323](https://github.com/openshift/cluster-api-provider-openstack/pull/323)
* [OCPBUGS-34072](https://issues.redhat.com/browse/OCPBUGS-34072): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.17 [#317](https://github.com/openshift/cluster-api-provider-openstack/pull/317)
* Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into main [#316](https://github.com/openshift/cluster-api-provider-openstack/pull/316)
* Remove dulek from shiftstack-team [#313](https://github.com/openshift/cluster-api-provider-openstack/pull/313)
* NO-JIRA: Bump to latest CAPO v0.10 [#314](https://github.com/openshift/cluster-api-provider-openstack/pull/314)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/10aa50e3b19a233c77f18fe6aa616e03874fa511...23512b675c57095bc03ac0da8cad39561d6aef9b)
### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/0fd117814e75f1f1af84b74ced11cd5183faa3f4)
* [OCPCLOUD-2565](https://issues.redhat.com/browse/OCPCLOUD-2565): Adds --feature-gates CLI argument [#122](https://github.com/openshift/machine-api-provider-openstack/pull/122)
* NO-JIRA: Update shiftstack-team in OWNERS_ALIASES [#118](https://github.com/openshift/machine-api-provider-openstack/pull/118)
* [OCPBUGS-34329](https://issues.redhat.com/browse/OCPBUGS-34329): Update to Go v1.22, and OCP v4.17 and Kubernetes v1.30 [#117](https://github.com/openshift/machine-api-provider-openstack/pull/117)
* NO-JIRA: Remove a stray comment [#113](https://github.com/openshift/machine-api-provider-openstack/pull/113)
* [OCPBUGS-33954](https://issues.redhat.com/browse/OCPBUGS-33954): Failure to get bootstrap is non-fatal [#112](https://github.com/openshift/machine-api-provider-openstack/pull/112)
* [OCPBUGS-33806](https://issues.redhat.com/browse/OCPBUGS-33806): Fix panic deleting Machine in ERROR state [#111](https://github.com/openshift/machine-api-provider-openstack/pull/111)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/5ada1cbab3a9354488b1e74e85c36285302c3382...0fd117814e75f1f1af84b74ced11cd5183faa3f4)
### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/649dfc4dc0a7fca1c25c7678665a55ad8ce53040)
* [OCPBUGS-44760](https://issues.redhat.com/browse/OCPBUGS-44760): fix: call TokenRequest API when service account token secret is missing [#898](https://github.com/openshift/operator-framework-olm/pull/898)
* [OCPBUGS-43965](https://issues.redhat.com/browse/OCPBUGS-43965): Return an error when the IP status cannot be updated [#885](https://github.com/openshift/operator-framework-olm/pull/885)
* [OCPBUGS-41549](https://issues.redhat.com/browse/OCPBUGS-41549): [4.17] adds paginating lister for evaluating CRs' upgrade fitness versus new CRDs. [#860](https://github.com/openshift/operator-framework-olm/pull/860)
* [OCPBUGS-41498](https://issues.redhat.com/browse/OCPBUGS-41498): [release-4.17] Fix e2e flake: upgrade CRD with deprecated version [#858](https://github.com/openshift/operator-framework-olm/pull/858)
* [OCPBUGS-39574](https://issues.redhat.com/browse/OCPBUGS-39574): (fix) registry pods do not come up again after node failure (#3366) [#855](https://github.com/openshift/operator-framework-olm/pull/855)
* [OCPBUGS-39458](https://issues.redhat.com/browse/OCPBUGS-39458): add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata (#1384) [#851](https://github.com/openshift/operator-framework-olm/pull/851)
* NO-ISSUE: Synchronize From Upstream Repositories [#835](https://github.com/openshift/operator-framework-olm/pull/835)
* NO-ISSUE: Synchronize From Upstream Repositories [#834](https://github.com/openshift/operator-framework-olm/pull/834)
* NO-ISSUE: Update junit report file name to show spec results on Test Grid [#832](https://github.com/openshift/operator-framework-olm/pull/832)
* [OCPBUGS-36500](https://issues.redhat.com/browse/OCPBUGS-36500): remove cvo hypershift profile annotation from psm-operator manifests [#831](https://github.com/openshift/operator-framework-olm/pull/831)
* NO-ISSUE: Synchronize From Upstream Repositories [#830](https://github.com/openshift/operator-framework-olm/pull/830)
* NO-ISSUE: Synchronize From Upstream Repositories [#827](https://github.com/openshift/operator-framework-olm/pull/827)
* NO-ISSUE: Synchronize From Upstream Repositories [#825](https://github.com/openshift/operator-framework-olm/pull/825)
* NO-ISSUE: Synchronize From Upstream Repositories [#820](https://github.com/openshift/operator-framework-olm/pull/820)
* NO-ISSUE: Synchronize From Upstream Repositories [#816](https://github.com/openshift/operator-framework-olm/pull/816)
* [OCPBUGS-35970](https://issues.redhat.com/browse/OCPBUGS-35970): add io.openshift.release.operator label to image [#812](https://github.com/openshift/operator-framework-olm/pull/812)
* NO-ISSUE: Synchronize From Upstream Repositories [#815](https://github.com/openshift/operator-framework-olm/pull/815)
* NO-ISSUE: add output-dir to E2E_GINKGO_OPTS [#813](https://github.com/openshift/operator-framework-olm/pull/813)
* [OCPBUGS-35970](https://issues.redhat.com/browse/OCPBUGS-35970): don't erase the filesystem from the base tools image [#804](https://github.com/openshift/operator-framework-olm/pull/804)
* NO-ISSUE: Manual Sync 0702 [#808](https://github.com/openshift/operator-framework-olm/pull/808)
* [OCPBUGS-35970](https://issues.redhat.com/browse/OCPBUGS-35970): switch base image [#802](https://github.com/openshift/operator-framework-olm/pull/802)
* NO-ISSUE: Synchronize From Upstream Repositories [#801](https://github.com/openshift/operator-framework-olm/pull/801)
* NO-ISSUE: Synchronize From Upstream Repositories [#797](https://github.com/openshift/operator-framework-olm/pull/797)
* NO-ISSUE: Manual Sync [#796](https://github.com/openshift/operator-framework-olm/pull/796)
* [OPRUN-3221](https://issues.redhat.com/browse/OPRUN-3221): 🌱 fix xplat compile for of-tools image; hide utest files from git; use rhel8 art builder image [#770](https://github.com/openshift/operator-framework-olm/pull/770)
* NO-ISSUE: Synchronize From Upstream Repositories [#790](https://github.com/openshift/operator-framework-olm/pull/790)
* NO-ISSUE: Synchronize From Upstream Repositories [#783](https://github.com/openshift/operator-framework-olm/pull/783)
* NO-ISSUE: Synchronize From Upstream Repositories [#778](https://github.com/openshift/operator-framework-olm/pull/778)
* NO-ISSUE: Synchronize From Upstream Repositories [#763](https://github.com/openshift/operator-framework-olm/pull/763)
* NO-ISSUE: (Manual) Synchronize From Upstream Repositories [#758](https://github.com/openshift/operator-framework-olm/pull/758)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d718c4c564975f3d4fac468987c4424691201790...649dfc4dc0a7fca1c25c7678665a55ad8ce53040)
### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/51f871a51fdfec73932100e13201301ddeb35fa1)
* [OCPBUGS-39297](https://issues.redhat.com/browse/OCPBUGS-39297): Replace 4.16 image references with 4.17 [#573](https://github.com/operator-framework/operator-marketplace/pull/573)
* NO-ISSUE: Add client certificate and key to service monitor [#482](https://github.com/operator-framework/operator-marketplace/pull/482)
* [OCPBUGS-34244](https://issues.redhat.com/browse/OCPBUGS-34244): Updating marketplace-operator-container image to be consistent with ART for 4.17 [#568](https://github.com/operator-framework/operator-marketplace/pull/568)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/7db179fb05ea5bd33c9ea0a55e13adeeaf0529a2...51f871a51fdfec73932100e13201301ddeb35fa1)
### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/0feae256abcc9b86c0276eaf2fc233cf899fb0ae)
* [OCPBUGS-34075](https://issues.redhat.com/browse/OCPBUGS-34075): Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.17 [#134](https://github.com/openshift/ovirt-csi-driver-operator/pull/134)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/ac852f3eb077c877e998fee0359534349d07c604...0feae256abcc9b86c0276eaf2fc233cf899fb0ae)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/f1fed30814655ebf01015570e6f806d1250e4b8f)
* [OCPBUGS-43454](https://issues.redhat.com/browse/OCPBUGS-43454): Ignore cluster manager topology not managed errors for localnet with no subnets [#2362](https://github.com/openshift/ovn-kubernetes/pull/2362)
* [OCPBUGS-44303](https://issues.redhat.com/browse/OCPBUGS-44303): Add hybird overlay pod IPs to the namespace address_set [#2340](https://github.com/openshift/ovn-kubernetes/pull/2340)
* [OCPBUGS-42931](https://issues.redhat.com/browse/OCPBUGS-42931): Add static route to the hairpin masquerade IPs to pod [#2315](https://github.com/openshift/ovn-kubernetes/pull/2315)
* [OCPBUGS-39200](https://issues.redhat.com/browse/OCPBUGS-39200): Dockerfile: Bump OVS to 3.4.0-1 [#2287](https://github.com/openshift/ovn-kubernetes/pull/2287)
* [OCPBUGS-42940](https://issues.redhat.com/browse/OCPBUGS-42940): Fix egress gateway pod cleanup for remote zone pods. [#2316](https://github.com/openshift/ovn-kubernetes/pull/2316)
* [OCPBUGS-39406](https://issues.redhat.com/browse/OCPBUGS-39406), [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Downstream Merge 28th August [#2283](https://github.com/openshift/ovn-kubernetes/pull/2283)
* [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Downstream Merge August 22nd [#2277](https://github.com/openshift/ovn-kubernetes/pull/2277)
* [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Downstream Merge 20th August [#2274](https://github.com/openshift/ovn-kubernetes/pull/2274)
* [OCPBUGS-38267](https://issues.redhat.com/browse/OCPBUGS-38267), [OCPBUGS-38653](https://issues.redhat.com/browse/OCPBUGS-38653), [OCPBUGS-38693](https://issues.redhat.com/browse/OCPBUGS-38693): Downstream Merge 14th August 2024 [#2265](https://github.com/openshift/ovn-kubernetes/pull/2265)
* [OCPBUGS-37541](https://issues.redhat.com/browse/OCPBUGS-37541): Fix per-pod MCS/metadata blocking [#2240](https://github.com/openshift/ovn-kubernetes/pull/2240)
* [OCPBUGS-36614](https://issues.redhat.com/browse/OCPBUGS-36614), [OCPBUGS-36865](https://issues.redhat.com/browse/OCPBUGS-36865), [SDN-4919](https://issues.redhat.com/browse/SDN-4919): [DownstreamMerge] 29 July 2024 [#2241](https://github.com/openshift/ovn-kubernetes/pull/2241)
* [OCPBUGS-37709](https://issues.redhat.com/browse/OCPBUGS-37709): Revert #2233 DownStream Merge: 24th July 2024 [#2243](https://github.com/openshift/ovn-kubernetes/pull/2243)
* [OCPBUGS-36865](https://issues.redhat.com/browse/OCPBUGS-36865), [SDN-4919](https://issues.redhat.com/browse/SDN-4919): DownStream Merge: 24th July 2024 [#2233](https://github.com/openshift/ovn-kubernetes/pull/2233)
* [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Downstream Merge July 10th [#2223](https://github.com/openshift/ovn-kubernetes/pull/2223)
* [OCPBUGS-33758](https://issues.redhat.com/browse/OCPBUGS-33758), [OCPBUGS-33758](https://issues.redhat.com/browse/OCPBUGS-33758), [OCPBUGS-35347](https://issues.redhat.com/browse/OCPBUGS-35347), [OCPBUGS-35367](https://issues.redhat.com/browse/OCPBUGS-35367), [SDN-4919](https://issues.redhat.com/browse/SDN-4919), [SDN-5011](https://issues.redhat.com/browse/SDN-5011): Downstream Merge: July 2nd [#2217](https://github.com/openshift/ovn-kubernetes/pull/2217)
* [OCPBUGS-34463](https://issues.redhat.com/browse/OCPBUGS-34463): Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.17 [#2186](https://github.com/openshift/ovn-kubernetes/pull/2186)
* [OCPBUGS-34778](https://issues.redhat.com/browse/OCPBUGS-34778): bump OVN to fix multicast bug [#2210](https://github.com/openshift/ovn-kubernetes/pull/2210)
* [OCPBUGS-34462](https://issues.redhat.com/browse/OCPBUGS-34462): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.17 [#2191](https://github.com/openshift/ovn-kubernetes/pull/2191)
* [OCPBUGS-33005](https://issues.redhat.com/browse/OCPBUGS-33005): Downstream Merge June 17th [#2206](https://github.com/openshift/ovn-kubernetes/pull/2206)
* [SDN-4157](https://issues.redhat.com/browse/SDN-4157): Downstream Merge June 7th 2024 [#2201](https://github.com/openshift/ovn-kubernetes/pull/2201)
* [OCPBUGS-34109](https://issues.redhat.com/browse/OCPBUGS-34109): Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.17 [#2176](https://github.com/openshift/ovn-kubernetes/pull/2176)
* [OCPBUGS-34331](https://issues.redhat.com/browse/OCPBUGS-34331): [DownstreamMerge] 23 May 2024 [#2180](https://github.com/openshift/ovn-kubernetes/pull/2180)
* [OKD-40](https://issues.redhat.com/browse/OKD-40): Add ovnver_okd and ovsver_okd to Dockerfile.base [#2161](https://github.com/openshift/ovn-kubernetes/pull/2161)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/cb50d1472dc0bd6ff8d96aa3dd9b68897be85479...f1fed30814655ebf01015570e6f806d1250e4b8f)
### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/aaa6afa9c4cc5b283f2d0f09f78610857e067c7e)
* [MULTIARCH-4809](https://issues.redhat.com/browse/MULTIARCH-4809): Rebase with upstream: go modules updates and code changes. [#86](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/86)
* [OCPBUGS-35349](https://issues.redhat.com/browse/OCPBUGS-35349): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.17 [#84](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/84)
* [OCPBUGS-34123](https://issues.redhat.com/browse/OCPBUGS-34123): Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.17 [#83](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/26162badb8422f36d9b52fac8467d48bf6078f5a...aaa6afa9c4cc5b283f2d0f09f78610857e067c7e)
### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/f6f037c556d7fb8155c83e20e951944aecd102c6)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#73](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/73)
* [OCPBUGS-36229](https://issues.redhat.com/browse/OCPBUGS-36229): Fix CVE-2023-45288 and CVE-2024-24786 [#69](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/69)
* [OCPBUGS-35871](https://issues.redhat.com/browse/OCPBUGS-35871): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.17 [#72](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/72)
* [OCPBUGS-34219](https://issues.redhat.com/browse/OCPBUGS-34219): Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.17 [#71](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/71)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/9c5dd8d17f57b1c7ffd5464a191c6ee5a7646525...f6f037c556d7fb8155c83e20e951944aecd102c6)
### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/bd3d72e5095c950964f64871253e4da4ad2acbe7)
* No-Jira: Manual rebase of upstream release 1.30 on 22-Jul-2024 [#72](https://github.com/openshift/cloud-provider-powervs/pull/72)
* No-Jira: Add multiarch reviewers and approvers to OWNER file [#70](https://github.com/openshift/cloud-provider-powervs/pull/70)
* No-Jira: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.29 (6c2ab88) into main [#69](https://github.com/openshift/cloud-provider-powervs/pull/69)
* [OCPBUGS-34864](https://issues.redhat.com/browse/OCPBUGS-34864): Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.29 (5a0fb34) into main [#41](https://github.com/openshift/cloud-provider-powervs/pull/41)
* [OCPBUGS-34372](https://issues.redhat.com/browse/OCPBUGS-34372): Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.17 [#68](https://github.com/openshift/cloud-provider-powervs/pull/68)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/20e6dc70d665e5d085df17d757a07e17c0e18fe0...bd3d72e5095c950964f64871253e4da4ad2acbe7)
### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/fe7a877c750d1f67c6cbe9c0ea03d864d3c06cea)
* [OCPBUGS-37688](https://issues.redhat.com/browse/OCPBUGS-37688): Update go.mod to fix CVE [#81](https://github.com/openshift/machine-api-provider-powervs/pull/81)
* [OCPBUGS-34379](https://issues.redhat.com/browse/OCPBUGS-34379): Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.17 [#78](https://github.com/openshift/machine-api-provider-powervs/pull/78)
* [OCPBUGS-33995](https://issues.redhat.com/browse/OCPBUGS-33995): Add more custom endpoints [#76](https://github.com/openshift/machine-api-provider-powervs/pull/76)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/60ebedf061fe1bb5279650fd637108b13b92d95f...fe7a877c750d1f67c6cbe9c0ea03d864d3c06cea)
### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/d80e904430effd51a5f00bf6345a2108b33bc15e)
* [MON-3972](https://issues.redhat.com/browse/MON-3972): [bot] Bump openshift/prom-label-proxy to v0.11.0 [#375](https://github.com/openshift/prom-label-proxy/pull/375)
* [MON-3905](https://issues.redhat.com/browse/MON-3905): [bot] Bump openshift/prom-label-proxy to v0.10.0 [#373](https://github.com/openshift/prom-label-proxy/pull/373)
* [MON-3897](https://issues.redhat.com/browse/MON-3897): [bot] Bump openshift/prom-label-proxy to v0.9.0 [#372](https://github.com/openshift/prom-label-proxy/pull/372)
* [OCPBUGS-34362](https://issues.redhat.com/browse/OCPBUGS-34362): Updating prom-label-proxy-container image to be consistent with ART for 4.17 [#371](https://github.com/openshift/prom-label-proxy/pull/371)
* [OCPBUGS-34362](https://issues.redhat.com/browse/OCPBUGS-34362): Updating prom-label-proxy-container image to be consistent with ART for 4.17 [#370](https://github.com/openshift/prom-label-proxy/pull/370)
* [Full changelog](https://github.com/openshift/prom-label-proxy/compare/5e14722ecfb3323ce2eb9c75a6bd9c5274b06040...d80e904430effd51a5f00bf6345a2108b33bc15e)
### [prometheus](https://github.com/openshift/prometheus/tree/e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8)
* [OCPBUGS-43667](https://issues.redhat.com/browse/OCPBUGS-43667): fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers' DeleteFunc [#230](https://github.com/openshift/prometheus/pull/230)
* [OCPBUGS-38690](https://issues.redhat.com/browse/OCPBUGS-38690): Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. [#221](https://github.com/openshift/prometheus/pull/221)
* [MON-3914](https://issues.redhat.com/browse/MON-3914): [bot] Bump openshift/prometheus to v2.53.1 [#215](https://github.com/openshift/prometheus/pull/215)
* [OCPBUGS-37370](https://issues.redhat.com/browse/OCPBUGS-37370): backport of upstream fix [#216](https://github.com/openshift/prometheus/pull/216)
* [OCPBUGS-37244](https://issues.redhat.com/browse/OCPBUGS-37244): [bot] Bump openshift/prometheus to v2.53.1 [#211](https://github.com/openshift/prometheus/pull/211)
* [OCPBUGS-35483](https://issues.redhat.com/browse/OCPBUGS-35483): cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. [#213](https://github.com/openshift/prometheus/pull/213)
* [OCPBUGS-36768](https://issues.redhat.com/browse/OCPBUGS-36768): cherry-pick upstream remote-write fix [#210](https://github.com/openshift/prometheus/pull/210)
* [MON-3914](https://issues.redhat.com/browse/MON-3914): [bot] Bump openshift/prometheus to v2.53.0 [#208](https://github.com/openshift/prometheus/pull/208)
* [MON-3914](https://issues.redhat.com/browse/MON-3914): [bot] Bump openshift/prometheus to v2.53.0 [#206](https://github.com/openshift/prometheus/pull/206)
* [OCPBUGS-34264](https://issues.redhat.com/browse/OCPBUGS-34264): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.17 [#205](https://github.com/openshift/prometheus/pull/205)
* [Full changelog](https://github.com/openshift/prometheus/compare/c5c08df947236f3917abf14de481eb2f99fb07de...e2fb74187b1858a31e3bf75cc5ab02c75ad8abe8)
### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/d7c1a7c6ac4b5482174797649834a47fc39d2575)
* [OCPBUGS-34297](https://issues.redhat.com/browse/OCPBUGS-34297): Updating golang-github-prometheus-alertmanager-contain… [#93](https://github.com/openshift/prometheus-alertmanager/pull/93)
* [OCPBUGS-33686](https://issues.redhat.com/browse/OCPBUGS-33686): [bot] Bump openshift/prometheus-alertmanager to v0.27.0 [#90](https://github.com/openshift/prometheus-alertmanager/pull/90)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/e9aea929f309f412678fdf1064e1f74db3ba08b4...d7c1a7c6ac4b5482174797649834a47fc39d2575)
### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/16f1cb003f65bf11b2a0a9a9ff9f9450eb7f249c)
* [OCPBUGS-38398](https://issues.redhat.com/browse/OCPBUGS-38398): feat: sync proxy settings in Alertmanager configuration [#296](https://github.com/openshift/prometheus-operator/pull/296)
* [MON-3947](https://issues.redhat.com/browse/MON-3947): Bump openshift/prometheus-operator to v0.75.2 [#294](https://github.com/openshift/prometheus-operator/pull/294)
* [MON-3889](https://issues.redhat.com/browse/MON-3889): [bot] Bump openshift/prometheus-operator to v0.74.0 [#287](https://github.com/openshift/prometheus-operator/pull/287)
* [OCPBUGS-34153](https://issues.redhat.com/browse/OCPBUGS-34153), [OCPBUGS-34308](https://issues.redhat.com/browse/OCPBUGS-34308), [OCPBUGS-34459](https://issues.redhat.com/browse/OCPBUGS-34459): Updating prometheus-operator-container image to be consistent with ART for 4.17 [#293](https://github.com/openshift/prometheus-operator/pull/293)
* [OCPBUGS-34308](https://issues.redhat.com/browse/OCPBUGS-34308): Updating prometheus-config-reloader-container image to be consistent with ART for 4.17 [#289](https://github.com/openshift/prometheus-operator/pull/289)
* [OCPBUGS-34153](https://issues.redhat.com/browse/OCPBUGS-34153): Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.17 [#288](https://github.com/openshift/prometheus-operator/pull/288)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/c7262a43c0ddf2adc6be3863ac9a5056cb89c177...16f1cb003f65bf11b2a0a9a9ff9f9450eb7f249c)
### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/d88fd69b579485146a584e8640c82a09daed2d5e)
* [MON-3949](https://issues.redhat.com/browse/MON-3949): [bot] Bump openshift/node_exporter to v1.8.2 [#149](https://github.com/openshift/node_exporter/pull/149)
* [OCPBUGS-34124](https://issues.redhat.com/browse/OCPBUGS-34124): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.17 [#148](https://github.com/openshift/node_exporter/pull/148)
* [MON-3882](https://issues.redhat.com/browse/MON-3882): [bot] Bump openshift/node_exporter to v1.8.1 [#146](https://github.com/openshift/node_exporter/pull/146)
* [OCPBUGS-34124](https://issues.redhat.com/browse/OCPBUGS-34124): Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.17 [#147](https://github.com/openshift/node_exporter/pull/147)
* [Full changelog](https://github.com/openshift/node_exporter/compare/29ba26d1bc31e5ff6b398f20dbdd72b4ca3ba897...d88fd69b579485146a584e8640c82a09daed2d5e)
### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/a47f6be3676d3eabb864ca339584fe857e1076c5)
* [WRKLDS-1292](https://issues.redhat.com/browse/WRKLDS-1292): bump(k8s.io)=1.30.1 [#44](https://github.com/openshift/route-controller-manager/pull/44)
* [OCPBUGS-34146](https://issues.redhat.com/browse/OCPBUGS-34146): Updating ose-route-controller-manager-container image to be consistent with ART for 4.17 [#43](https://github.com/openshift/route-controller-manager/pull/43)
* [OCPBUGS-34146](https://issues.redhat.com/browse/OCPBUGS-34146): Updating ose-route-controller-manager-container image to be consistent with ART for 4.17 [#42](https://github.com/openshift/route-controller-manager/pull/42)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/3112b458983c6fca6f77d5a945fb0026186dace6...a47f6be3676d3eabb864ca339584fe857e1076c5)
### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/1f7d6472fea332fc307d9c8911f8c3cf57347755)
* NO-JIRA: fix outdated doc links [#241](https://github.com/openshift/service-ca-operator/pull/241)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/538c7b98a689e573b61e1abb1cb649da470c5fac...1f7d6472fea332fc307d9c8911f8c3cf57347755)
### [telemeter](https://github.com/openshift/telemeter/tree/e2b25245eb81ba6bc3821574f889678ceae1b16a)
* [OCPBUGS-33285](https://issues.redhat.com/browse/OCPBUGS-33285): Add `metricsclient_http_requests_total` metric [#500](https://github.com/openshift/telemeter/pull/500)
* [MON-3890](https://issues.redhat.com/browse/MON-3890): add recording rule acm_capacity_effective_cpu_cores [#534](https://github.com/openshift/telemeter/pull/534)
* [OCPBUGS-34833](https://issues.redhat.com/browse/OCPBUGS-34833): fix issuer check during JWT authentication [#536](https://github.com/openshift/telemeter/pull/536)
* [OCPBUGS-34431](https://issues.redhat.com/browse/OCPBUGS-34431): Updating telemeter-container image to be consistent with ART for 4.17 [#533](https://github.com/openshift/telemeter/pull/533)
* [OCPBUGS-34039](https://issues.redhat.com/browse/OCPBUGS-34039): Updating telemeter-container image to be consistent with ART for 4.17 [#532](https://github.com/openshift/telemeter/pull/532)
* [Full changelog](https://github.com/openshift/telemeter/compare/c1ecd1050c8f4ddb3380cf1bfb7230ae2e35052a...e2b25245eb81ba6bc3821574f889678ceae1b16a)
### [tests](https://github.com/openshift/origin/tree/38cdceafc39431ab1546976a79704290a5cc5d0f)
* [OCPBUGS-44190](https://issues.redhat.com/browse/OCPBUGS-44190): Fix UnexpectedNodeNotReady and UnexpectedNodeUnreachable [#29306](https://github.com/openshift/origin/pull/29306)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Don't modify pod routes in tests [#29250](https://github.com/openshift/origin/pull/29250)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): Set startup probe for UDN tests [#29244](https://github.com/openshift/origin/pull/29244)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): UserDefinedPrimaryNetworks: curl the KAPI IP through eth0 [#29241](https://github.com/openshift/origin/pull/29241)
* [OCPBUGS-44795](https://issues.redhat.com/browse/OCPBUGS-44795): fix: adding oslat updates and outputting test results to the artifacts [#29193](https://github.com/openshift/origin/pull/29193)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576), [SDN-4930](https://issues.redhat.com/browse/SDN-4930): network_segmentation: allow multiple UDN status conditions [#29259](https://github.com/openshift/origin/pull/29259)
* [OCPBUGS-44494](https://issues.redhat.com/browse/OCPBUGS-44494): removing rteval from the realtime test suite [#29194](https://github.com/openshift/origin/pull/29194)
* [OCPBUGS-44496](https://issues.redhat.com/browse/OCPBUGS-44496): fix: adding in a SNO time override for AWS Metal [#29192](https://github.com/openshift/origin/pull/29192)
* [OCPBUGS-44062](https://issues.redhat.com/browse/OCPBUGS-44062): Adjust createDNSPod() to support hypershift dual-stack test [#29254](https://github.com/openshift/origin/pull/29254)
* [OCPBUGS-44045](https://issues.redhat.com/browse/OCPBUGS-44045): Ignore infra nodes on tap cni tests [#29251](https://github.com/openshift/origin/pull/29251)
* [OCPBUGS-43569](https://issues.redhat.com/browse/OCPBUGS-43569): feat: update to use pullspec image [#29207](https://github.com/openshift/origin/pull/29207)
* [OCPBUGS-43576](https://issues.redhat.com/browse/OCPBUGS-43576): Porting testing for netConfig and UDN and CIDR overlapping tests from upstream [#29181](https://github.com/openshift/origin/pull/29181)
* [OCPBUGS-39606](https://issues.redhat.com/browse/OCPBUGS-39606): Add image registry capability check [#29174](https://github.com/openshift/origin/pull/29174)
* [OCPBUGS-42814](https://issues.redhat.com/browse/OCPBUGS-42814): ruby:3.0-ubi8 => ruby:3.1-ubi8 [#29162](https://github.com/openshift/origin/pull/29162)
* [OCPBUGS-42336](https://issues.redhat.com/browse/OCPBUGS-42336): Fix image ecosystem tests 4.17 [#29126](https://github.com/openshift/origin/pull/29126)
* [OCPBUGS-41817](https://issues.redhat.com/browse/OCPBUGS-41817): Update the NotFound case for CNI plugin to reflect changes [#29091](https://github.com/openshift/origin/pull/29091)
* [OCPBUGS-39134](https://issues.redhat.com/browse/OCPBUGS-39134): Bump timeout for the pod-network-service endpoints check [#29051](https://github.com/openshift/origin/pull/29051)
* [OCPBUGS-38674](https://issues.redhat.com/browse/OCPBUGS-38674): add unexpected ready for monitor tests [#29021](https://github.com/openshift/origin/pull/29021)
* [OCPBUGS-39254](https://issues.redhat.com/browse/OCPBUGS-39254): Change Operator Installed for Smoke Test [#29055](https://github.com/openshift/origin/pull/29055)
* [OCPBUGS-39031](https://issues.redhat.com/browse/OCPBUGS-39031): kube-apiserver rollout: wait for stability before exiting [#29047](https://github.com/openshift/origin/pull/29047)
* [OCPBUGS-38446](https://issues.redhat.com/browse/OCPBUGS-38446): NetworkSegmentation tests: fix the IPv6 node IP detection [#29005](https://github.com/openshift/origin/pull/29005)
* NO-JIRA: create a test that repeatedly rolls out the kube-apiserver and uses m… [#28986](https://github.com/openshift/origin/pull/28986)
* NO-JIRA: drop ocp-storage exceptions for termination policy [#28793](https://github.com/openshift/origin/pull/28793)
* [STOR-1819](https://issues.redhat.com/browse/STOR-1819): Add OpenShift specific CSI certification test [#28967](https://github.com/openshift/origin/pull/28967)
* [TRT-1723](https://issues.redhat.com/browse/TRT-1723): riskanalysis: pass along errors from API request [#28984](https://github.com/openshift/origin/pull/28984)
* [SDN-4919](https://issues.redhat.com/browse/SDN-4919): NetworkSegmentation: Add tests for EndpointSlices mirror controller [#28945](https://github.com/openshift/origin/pull/28945)
* [OCPEDGE-1033](https://issues.redhat.com/browse/OCPEDGE-1033): fix: making oslat test more dynamic to handle different cpu sets [#28980](https://github.com/openshift/origin/pull/28980)
* [OCPEDGE-1182](https://issues.redhat.com/browse/OCPEDGE-1182): fix: remove un-needed test [#28979](https://github.com/openshift/origin/pull/28979)
* [TRT-1688](https://issues.redhat.com/browse/TRT-1688): Revert "allow etcd log test to flake under vsphere" [#28978](https://github.com/openshift/origin/pull/28978)
* [OCPBUGS-37837](https://issues.redhat.com/browse/OCPBUGS-37837): vertical scaling test should not rely on CPMS replicas [#28969](https://github.com/openshift/origin/pull/28969)
* [OCPBUGS-37986](https://issues.redhat.com/browse/OCPBUGS-37986): Revert #28944 " Reapply \"Merge pull request #28277 from vrutkovs/in-cluster-fixes-v3\ [#28977](https://github.com/openshift/origin/pull/28977)
* [IR-471](https://issues.redhat.com/browse/IR-471): Skipping chunksizemib tests [#28975](https://github.com/openshift/origin/pull/28975)
* [OCPBUGS-37245](https://issues.redhat.com/browse/OCPBUGS-37245): Ignore pod sandbox adds expected to fail [#28973](https://github.com/openshift/origin/pull/28973)
* [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): Reapply "Merge pull request #28277 from vrutkovs/in-cluster-fixes-v3" [#28944](https://github.com/openshift/origin/pull/28944)
* NO-JIRA: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] [#28968](https://github.com/openshift/origin/pull/28968)
* NO-JIRA: riskanalysis: improve request retries [#28961](https://github.com/openshift/origin/pull/28961)
* [SDN-4919](https://issues.redhat.com/browse/SDN-4919): Skip network segmentation tests [#28964](https://github.com/openshift/origin/pull/28964)
* NO-ISSUE: Automated - Update synthetic test data [#28954](https://github.com/openshift/origin/pull/28954)
* [OCPBUGS-37675](https://issues.redhat.com/browse/OCPBUGS-37675): Add a version command to openshift-tests [#28960](https://github.com/openshift/origin/pull/28960)
* NO-ISSUE: Use external binary name on retry [#28955](https://github.com/openshift/origin/pull/28955)
* [OCPBUGS-35880](https://issues.redhat.com/browse/OCPBUGS-35880): fix pod not returning success on 'Managed cluster should verify that nodes have no unexpected reboots' [#28953](https://github.com/openshift/origin/pull/28953)
* [OCPEDGE-1181](https://issues.redhat.com/browse/OCPEDGE-1181): bump(ocp/k8s): updating to pull in annotation fix for SNO conformance test [#28948](https://github.com/openshift/origin/pull/28948)
* [IR-471](https://issues.redhat.com/browse/IR-471): Updating the test with skipper function [#28947](https://github.com/openshift/origin/pull/28947)
* no-jira: e2e: mark tests as [apigroup:apps.openshift.io] dependent [#28951](https://github.com/openshift/origin/pull/28951)
* NO-JIRA: Revert "pathologicalevents: Ignore leaky RecreatingTerminatedPod" [#28950](https://github.com/openshift/origin/pull/28950)
* [SDN-5133](https://issues.redhat.com/browse/SDN-5133): Add udn test framework [#28933](https://github.com/openshift/origin/pull/28933)
* NO-ISSUE: Automated - Update synthetic test data [#28914](https://github.com/openshift/origin/pull/28914)
* [OCPBUGS-37436](https://issues.redhat.com/browse/OCPBUGS-37436): increase telemetry series permitted avg threshold [#28943](https://github.com/openshift/origin/pull/28943)
* [TRT-1702](https://issues.redhat.com/browse/TRT-1702): record risk analysis results in BQ [#28926](https://github.com/openshift/origin/pull/28926)
* [OCPBUGS-37411](https://issues.redhat.com/browse/OCPBUGS-37411): Revert #28277 "OCPBUGS-18865: add monitortest: in-cluster disruption monitors" [#28942](https://github.com/openshift/origin/pull/28942)
* no-jira: e2e: check for deployer RB only when DeploymentConfig is enabled [#28941](https://github.com/openshift/origin/pull/28941)
* no-jira: e2e: check for deployer SA only when DeploymentConfig is enabled [#28939](https://github.com/openshift/origin/pull/28939)
* [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): add monitortest: in-cluster disruption monitors [#28277](https://github.com/openshift/origin/pull/28277)
* [OCPBUGS-36742](https://issues.redhat.com/browse/OCPBUGS-36742): Sync imports [#28929](https://github.com/openshift/origin/pull/28929)
* [OCPEDGE-1125](https://issues.redhat.com/browse/OCPEDGE-1125): upkeep: add better logging for crio failures [#28852](https://github.com/openshift/origin/pull/28852)
* NO-JIRA: egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra [#28916](https://github.com/openshift/origin/pull/28916)
* [IR-471](https://issues.redhat.com/browse/IR-471): Add test for ChunkSizeMiB configuration for Registry [#28932](https://github.com/openshift/origin/pull/28932)
* [STOR-1961](https://issues.redhat.com/browse/STOR-1961): Fix vSphereDriverConfiguration tests [#28936](https://github.com/openshift/origin/pull/28936)
* NO-JIRA: Fail on APIs removed in the next release [#28240](https://github.com/openshift/origin/pull/28240)
* [OCPBUGS-36672](https://issues.redhat.com/browse/OCPBUGS-36672): Shorten stabilization time for etcd profiles test [#28930](https://github.com/openshift/origin/pull/28930)
* [API-1802](https://issues.redhat.com/browse/API-1802): watchevents: add cert rotation events [#28639](https://github.com/openshift/origin/pull/28639)
* [OCPBUGS-34902](https://issues.redhat.com/browse/OCPBUGS-34902): Revert "NO-JIRA: test: skip crio test for rt runs" [#28918](https://github.com/openshift/origin/pull/28918)
* [OCPBUGS-36403](https://issues.redhat.com/browse/OCPBUGS-36403): test/extended/util/openshift/clusterversionoperator/adminack: No nested framework.Fail [#28917](https://github.com/openshift/origin/pull/28917)
* NO-JIRA: Always try to pull the the in-cluster test binary [#28900](https://github.com/openshift/origin/pull/28900)
* NO-JIRA: fix: update skip logic for watchdog [#28920](https://github.com/openshift/origin/pull/28920)
* [ETCD-611](https://issues.redhat.com/browse/ETCD-611): update cert rotation tests [#28890](https://github.com/openshift/origin/pull/28890)
* Use ephemeral cluster docker config.json for test binary extraction [#28873](https://github.com/openshift/origin/pull/28873)
* [OCPBUGS-36263](https://issues.redhat.com/browse/OCPBUGS-36263): Expand allowance for kubelet metrics api endpoint outages during node upgrades [#28911](https://github.com/openshift/origin/pull/28911)
* [USHIFT-3455](https://issues.redhat.com/browse/USHIFT-3455): Skip legacy-etcd monitor tests in microshift [#28874](https://github.com/openshift/origin/pull/28874)
* [OCPEDGE-800](https://issues.redhat.com/browse/OCPEDGE-800): feat: add SNO upgrade consideration during pathological errors [#28903](https://github.com/openshift/origin/pull/28903)
* [OCPBUGS-34475](https://issues.redhat.com/browse/OCPBUGS-34475): remove unused in-cluster monitoring code [#28908](https://github.com/openshift/origin/pull/28908)
* [OCPBUGS-36187](https://issues.redhat.com/browse/OCPBUGS-36187): Revert #28515 Re-enable test/extended/router/http2 tests on AWS" [#28905](https://github.com/openshift/origin/pull/28905)
* [OCPBUGS-33486](https://issues.redhat.com/browse/OCPBUGS-33486): Removes dependency on samples operator images [#28840](https://github.com/openshift/origin/pull/28840)
* [OCPBUGS-26601](https://issues.redhat.com/browse/OCPBUGS-26601): Re-enable test/extended/router/http2 tests on AWS [#28515](https://github.com/openshift/origin/pull/28515)
* NO-ISSUE: Automated - Update synthetic test data [#28897](https://github.com/openshift/origin/pull/28897)
* [TRT-1718](https://issues.redhat.com/browse/TRT-1718): Add new intervals for kubelet metrics endpoints down [#28896](https://github.com/openshift/origin/pull/28896)
* NO-JIRA: Add display flag to the primary EtcdLeadership intervals [#28861](https://github.com/openshift/origin/pull/28861)
* [OCPEDGE-1157](https://issues.redhat.com/browse/OCPEDGE-1157): fix: resolve serial operator availability [#28893](https://github.com/openshift/origin/pull/28893)
* [OCPBUGS-35535](https://issues.redhat.com/browse/OCPBUGS-35535): add Proxy config [#28880](https://github.com/openshift/origin/pull/28880)
* Revert "TRT-1691: Revert #28735 "TRT-1576: Fail if operator has Available=False unless in upgrade window"" [#28851](https://github.com/openshift/origin/pull/28851)
* [USHIFT-3455](https://issues.redhat.com/browse/USHIFT-3455): Add apigroup to skip a FeatureGate test in MicroShift [#28875](https://github.com/openshift/origin/pull/28875)
* NO-ISSUE: fix the node reboot test to actually run [#28884](https://github.com/openshift/origin/pull/28884)
* [ETCD-578](https://issues.redhat.com/browse/ETCD-578): Fix etcd profiles e2e test to check returned status for upd… [#28836](https://github.com/openshift/origin/pull/28836)
* NO-JIRA: use lib-go version of the markdown interface [#28707](https://github.com/openshift/origin/pull/28707)
* [ETCD-606](https://issues.redhat.com/browse/ETCD-606): Open up the RequiredInstallerResourcesMissing test to more resources. [#28866](https://github.com/openshift/origin/pull/28866)
* [OCPBUGS-34448](https://issues.redhat.com/browse/OCPBUGS-34448): monitortestframework: unsupported monitors should warn, not error [#28865](https://github.com/openshift/origin/pull/28865)
* [OCPBUGS-34468](https://issues.redhat.com/browse/OCPBUGS-34468): art consistency openshift 4.17 openshift enterprise tests custom [#28876](https://github.com/openshift/origin/pull/28876)
* trt-1689: Filter must-gather and truncate system node users [#28856](https://github.com/openshift/origin/pull/28856)
* [API-1783](https://issues.redhat.com/browse/API-1783): bump(k8s.io/kubernetes) [#28869](https://github.com/openshift/origin/pull/28869)
* NO-ISSUE: Automated - Update synthetic test data [#28867](https://github.com/openshift/origin/pull/28867)
* [API-1783](https://issues.redhat.com/browse/API-1783): Rebase 1.30 [#28829](https://github.com/openshift/origin/pull/28829)
* [OCPBUGS-33497](https://issues.redhat.com/browse/OCPBUGS-33497): Add a "limit" exception for iptables-alerter [#28858](https://github.com/openshift/origin/pull/28858)
* [TRT-1688](https://issues.redhat.com/browse/TRT-1688): allow test to flake under vsphere [#28855](https://github.com/openshift/origin/pull/28855)
* NO-JIRA: test: skip crio test for rt runs [#28854](https://github.com/openshift/origin/pull/28854)
* [API-1783](https://issues.redhat.com/browse/API-1783): Conditionally skip tests to help with k8s 1.30 [#28850](https://github.com/openshift/origin/pull/28850)
* [STOR-1839](https://issues.redhat.com/browse/STOR-1839): correct feature gate annotation for vsphere snapshot test [#28846](https://github.com/openshift/origin/pull/28846)
* [OCPBUGS-34666](https://issues.redhat.com/browse/OCPBUGS-34666): Update etcd test data for 1.30 release [#28843](https://github.com/openshift/origin/pull/28843)
* [TRT-1691](https://issues.redhat.com/browse/TRT-1691): Revert #28735 "TRT-1576: Fail if operator has Available=False unless in upgrade window" [#28847](https://github.com/openshift/origin/pull/28847)
* [TRT-1576](https://issues.redhat.com/browse/TRT-1576): Fail if operator has Available=False unless in upgrade window [#28735](https://github.com/openshift/origin/pull/28735)
* [TRT-1218](https://issues.redhat.com/browse/TRT-1218): Add the display flag for interval Sources that should have them [#28816](https://github.com/openshift/origin/pull/28816)
* [TRT-1686](https://issues.redhat.com/browse/TRT-1686): Reduce logging of podspec in the PodsStreamer [#28833](https://github.com/openshift/origin/pull/28833)
* [OCPBUGS-34403](https://issues.redhat.com/browse/OCPBUGS-34403): Only look for thanos connections to platform monitoring stack [#28825](https://github.com/openshift/origin/pull/28825)
* NO-ISSUE: Automated - Update synthetic test data [#28811](https://github.com/openshift/origin/pull/28811)
* [OCPBUGS-34346](https://issues.redhat.com/browse/OCPBUGS-34346): Regenerate TLS info [#28657](https://github.com/openshift/origin/pull/28657)
* [API-1783](https://issues.redhat.com/browse/API-1783): Conditionally skip tests to help with k8s 1.30 [#28832](https://github.com/openshift/origin/pull/28832)
* [ETCD-565](https://issues.redhat.com/browse/ETCD-565): add manual etcd signer cert rotation e2e test [#28684](https://github.com/openshift/origin/pull/28684)
* [TRT-1653](https://issues.redhat.com/browse/TRT-1653): Fix regexes for now quoted podUID in system journal log parsing [#28804](https://github.com/openshift/origin/pull/28804)
* [ETCD-578](https://issues.redhat.com/browse/ETCD-578): remove Tech Preview check from etcd profiles e2e test [#28817](https://github.com/openshift/origin/pull/28817)
* [OCPBUGS-33944](https://issues.redhat.com/browse/OCPBUGS-33944): Fix regex parser for censoring private key [#28813](https://github.com/openshift/origin/pull/28813)
* NO-JIRA: fix: update test to use IsSingleNode func [#28801](https://github.com/openshift/origin/pull/28801)
* NO-JIRA: Drop Cluster Infra related exceptions from termination message policy tests [#28798](https://github.com/openshift/origin/pull/28798)
* [API-1783](https://issues.redhat.com/browse/API-1783): Conditionally skip tests to help with k8s 1.30 [#28814](https://github.com/openshift/origin/pull/28814)
* [CFE-853](https://issues.redhat.com/browse/CFE-853): e2e test case for DNSNameResolver and EgressFirewall integration [#28683](https://github.com/openshift/origin/pull/28683)
* NO-JIRA: quota.sh: 4.16 no longer creates legacy API tokens [#28808](https://github.com/openshift/origin/pull/28808)
* [Full changelog](https://github.com/openshift/origin/compare/c740dbdf225dfeef7fa9470ae61da2507302116c...38cdceafc39431ab1546976a79704290a5cc5d0f)
### [thanos](https://github.com/openshift/thanos/tree/5b567365230115e5c242dd719110bac52fc2a4ef)
* [OCPBUGS-34088](https://issues.redhat.com/browse/OCPBUGS-34088): Updating ose-thanos-container image to be consistent with ART for 4.17 [#148](https://github.com/openshift/thanos/pull/148)
* [MON-3887](https://issues.redhat.com/browse/MON-3887): [bot] Bump openshift/thanos to v0.35.1 [#147](https://github.com/openshift/thanos/pull/147)
* [Full changelog](https://github.com/openshift/thanos/compare/85eee25c36702ec14b86dc3157856d2aa2634642...5b567365230115e5c242dd719110bac52fc2a4ef)
### [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere/tree/07abced061d16b906b19d1eb49f9bea5c2c77662)
* [OCPBUGS-37661](https://issues.redhat.com/browse/OCPBUGS-37661): Bump otelgrpc to v0.53.0 [#74](https://github.com/openshift/cloud-provider-vsphere/pull/74)
* NO-JIRA: Update OWNERS [#69](https://github.com/openshift/cloud-provider-vsphere/pull/69)
* [OCPBUGS-34626](https://issues.redhat.com/browse/OCPBUGS-34626), [OCPCLOUD-2605](https://issues.redhat.com/browse/OCPCLOUD-2605): Merge https://github.com/kubernetes/cloud-provider-vsphere:master (b087162) into master [#62](https://github.com/openshift/cloud-provider-vsphere/pull/62)
* [Full changelog](https://github.com/openshift/cloud-provider-vsphere/compare/44ea2b5825a5e200e12cb36f901393e97cbbf243...07abced061d16b906b19d1eb49f9bea5c2c77662)
### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/1661cc3f7997902caf0ea71fbef9ea394f3b14ef)
* NO-JIRA: Update OWNERS [#47](https://github.com/openshift/cluster-api-provider-vsphere/pull/47)
* [OCPBUGS-34179](https://issues.redhat.com/browse/OCPBUGS-34179), [OCPCLOUD-2623](https://issues.redhat.com/browse/OCPCLOUD-2623): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.10.0 (41eeb09) into master [#44](https://github.com/openshift/cluster-api-provider-vsphere/pull/44)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/be22f10a56a18cd94406eea442e0113d866618ea...1661cc3f7997902caf0ea71fbef9ea394f3b14ef)
### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/039ee3684d5addee3ff8436b19462def77bd5804)
* [OCPBUGS-43705](https://issues.redhat.com/browse/OCPBUGS-43705): redact sensitive information when logging VCenter config [#133](https://github.com/openshift/vmware-vsphere-csi-driver/pull/133)
* [OCPBUGS-34114](https://issues.redhat.com/browse/OCPBUGS-34114): Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.17 [#125](https://github.com/openshift/vmware-vsphere-csi-driver/pull/125)
* [OCPBUGS-34099](https://issues.redhat.com/browse/OCPBUGS-34099): Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.17 [#124](https://github.com/openshift/vmware-vsphere-csi-driver/pull/124)
* [STOR-1600](https://issues.redhat.com/browse/STOR-1600): Rebase against v3.2.0 [#122](https://github.com/openshift/vmware-vsphere-csi-driver/pull/122)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/03b7e8ebf2c6347b40a340d892e1a66d47806300...039ee3684d5addee3ff8436b19462def77bd5804)
### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/c9ad7eca24e515bc6555b65ffd172ebc2702c5ff)
* [OCPBUGS-43778](https://issues.redhat.com/browse/OCPBUGS-43778): Fix panic on nil infrastructure Spec.PlatformSpec.VSphere [#264](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/264)
* [OCPBUGS-42327](https://issues.redhat.com/browse/OCPBUGS-42327): Fix the config loading warning [#259](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/259)
* [OCPBUGS-42007](https://issues.redhat.com/browse/OCPBUGS-42007): Remove conditions and controllers [#254](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/254)
* [OCPBUGS-42006](https://issues.redhat.com/browse/OCPBUGS-42006): Add check for vCenter version [#253](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/253)
* [OCPBUGS-42008](https://issues.redhat.com/browse/OCPBUGS-42008): Implement minor quality of life improvements. [#255](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/255)
* [OCPBUGS-38442](https://issues.redhat.com/browse/OCPBUGS-38442): Restart CSI driver controller pod on config change [#247](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/247)
* [OCPBUGS-37772](https://issues.redhat.com/browse/OCPBUGS-37772): Disable CSI migration in multi-vCenter cluster [#243](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/243)
* [SPLAT-1637](https://issues.redhat.com/browse/SPLAT-1637): Initial changes for multi vcenter support. [#228](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/228)
* [STOR-1593](https://issues.redhat.com/browse/STOR-1593): Disable toplogy feature explicitly [#241](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/241)
* [STOR-1949](https://issues.redhat.com/browse/STOR-1949): Add cns migration [#242](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/242)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#236](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/236)
* [STOR-1767](https://issues.redhat.com/browse/STOR-1767): Delete resources if spec.ManagementState is equal to Removed for removable CSI drivers [#233](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/233)
* [OCPBUGS-37201](https://issues.redhat.com/browse/OCPBUGS-37201): Make sure credentials are wrapped in double quotes [#239](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/239)
* [OCPBUGS-37201](https://issues.redhat.com/browse/OCPBUGS-37201): Ignore comment symbols when reading the ini file [#238](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/238)
* [STOR-1290](https://issues.redhat.com/browse/STOR-1290): don't pass credentials via environment variables in vSphere [#227](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/227)
* [OCPBUGS-34234](https://issues.redhat.com/browse/OCPBUGS-34234): Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.17 [#232](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/232)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/483de9c59f1646f239c7039bcc0fa5fa0e44e7b4...c9ad7eca24e515bc6555b65ffd172ebc2702c5ff)
### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/cd0df71f2ec22d84676f40b042d4603e9c94c360)
* [SPLAT-1658](https://issues.redhat.com/browse/SPLAT-1658): Add multi vCenter support [#158](https://github.com/openshift/vsphere-problem-detector/pull/158)
* [STOR-1767](https://issues.redhat.com/browse/STOR-1767): Silence vsphere-problem-detector if State is Removed [#169](https://github.com/openshift/vsphere-problem-detector/pull/169)
* [STOR-1767](https://issues.redhat.com/browse/STOR-1767): Make checks less frequent if State is Removed in ClusterCSIDriver [#166](https://github.com/openshift/vsphere-problem-detector/pull/166)
* [STOR-1596](https://issues.redhat.com/browse/STOR-1596): Bump all deps for 4.17 [#163](https://github.com/openshift/vsphere-problem-detector/pull/163)
* [OCPBUGS-34563](https://issues.redhat.com/browse/OCPBUGS-34563): Drop event when CheckDefaultDatastore fails [#165](https://github.com/openshift/vsphere-problem-detector/pull/165)
* [OCPBUGS-34176](https://issues.redhat.com/browse/OCPBUGS-34176): Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.17 [#164](https://github.com/openshift/vsphere-problem-detector/pull/164)
* [OCPBUGS-35215](https://issues.redhat.com/browse/OCPBUGS-35215): Fix missing failure-domains [#159](https://github.com/openshift/vsphere-problem-detector/pull/159)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/3683c120278fb79a30340f66d22948aaddf3c16a...cd0df71f2ec22d84676f40b042d4603e9c94c360)