# 4.4.0-0.okd-2021-02-04-021128

Created: 2021-02-04 02:17:32 +0000 UTC

Image Digest: `sha256:2d8faa78897b129f043161e53d2a6556ef2ddb630fa654b9531f9ed22ec5517f`


## Changes from 4.4.0-0.okd-2020-05-23-055148

### Components

* Kubernetes 1.17.1
* Fedora CoreOS upgraded from 31.20200521.20 to 32.20200629.3


### Rebuilt images without code change

* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [04c97c30](https://github.com/openshift/cluster-bootstrap/commit/04c97c30e79430ad836fceff4c6f8c9429be6663) `sha256:da830c41537363aa2ab5ac94d64cc0efe6266061613346f989452f737b2fe9c9`
* [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator) git [39760557](https://github.com/openshift/cluster-ingress-operator/commit/3976055718cd505db8682088f7956df09df0cb0f) `sha256:cf82722fe7a502882c2ef623df3026ea1334e29424125c37a2bb45809bbe1087`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [2473a80c](https://github.com/openshift/cluster-node-tuning-operator/commit/2473a80ca8401732723206d4f6af71a5237c8ddc) `sha256:67d45846563d8769c4caa9c1305b3e2140d4c30ea49bddcf91d9d8d80fd2d5e9`
* [ironic-hardware-inventory-recorder](https://github.com/openshift/ironic-hardware-inventory-recorder-image) git [2424a571](https://github.com/openshift/ironic-hardware-inventory-recorder-image/commit/2424a5710060bd762a7ddc3f16b19f9cb48a9726) `sha256:de214111a27f65169cdbeb1e51e69138addedb4103fbb152de0ebbfe54bd0fd5`
* machine-os-content `sha256:c2f492de34f591def04b771770992e85c6687ebba32c4a159b82dbfbc37fc19c`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [f13d31a1](https://github.com/openshift/openshift-state-metrics/commit/f13d31a172aa3001b9ddb15b675048fe333d10ff) `sha256:70eb9eb0837f0601a9e2b7b8f009851b8e38a0006a52a04c45a5648729543d5a`


### [aws-machine-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/095be7eb88565b642f808694378744e62c0ef54a)

* add bugzilla component and subcomponent to OWNERS [#362](https://github.com/openshift/cluster-api-provider-aws/pull/362)
* [Bug 1810531](https://bugzilla.redhat.com/show_bug.cgi?id=1810531): Revendor MAO with timeout formatting fix [#333](https://github.com/openshift/cluster-api-provider-aws/pull/333)
* [Bug 1833359](https://bugzilla.redhat.com/show_bug.cgi?id=1833359): Custom dns name support [#326](https://github.com/openshift/cluster-api-provider-aws/pull/326)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/5fa82204468e71b44f65a5f24e2675dbfa0f5c29...095be7eb88565b642f808694378744e62c0ef54a)


### [azure-machine-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/38a5e94b6a7298080c87ff65ba312c9bd1a2aa4d)

* add bugzilla component and subcomponent to OWNERS [#176](https://github.com/openshift/cluster-api-provider-azure/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/25bb1938f3aab45f600c0c1b46af11d7a5ccd368...38a5e94b6a7298080c87ff65ba312c9bd1a2aa4d)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/83607e3f8139f19b2bc397ea969e46f9c0b11bf0)

* [Bug 1862898](https://bugzilla.redhat.com/show_bug.cgi?id=1862898): Move haproxy port to 9445 due to conflict with KCM [#88](https://github.com/openshift/baremetal-runtimecfg/pull/88)
* [Bug 1831008](https://bugzilla.redhat.com/show_bug.cgi?id=1831008): Move haproxy listening port due to conflict [#61](https://github.com/openshift/baremetal-runtimecfg/pull/61)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/164da389143cbf47bef4ecbf5de0d6b6028f5978...83607e3f8139f19b2bc397ea969e46f9c0b11bf0)


### [cli, cli-artifacts, deployer](https://github.com/openshift/oc/tree/6be950302d36d92a8a5a1e4bf2d4b8b9284696ea)

* [Bug 1884569](https://bugzilla.redhat.com/show_bug.cgi?id=1884569): Set appropriate owner references when creating a job from cronjob [#601](https://github.com/openshift/oc/pull/601)
* [Bug 1872520](https://bugzilla.redhat.com/show_bug.cgi?id=1872520): Allow prune to move on with Removed registry [#533](https://github.com/openshift/oc/pull/533)
* [Bug 1872520](https://bugzilla.redhat.com/show_bug.cgi?id=1872520): Replace bitbucket.org/ww/goautoneg with its mirror [#578](https://github.com/openshift/oc/pull/578)
* [Bug 1847323](https://bugzilla.redhat.com/show_bug.cgi?id=1847323): Place apache license in cli-artifacts [#472](https://github.com/openshift/oc/pull/472)
* [Bug 1808174](https://bugzilla.redhat.com/show_bug.cgi?id=1808174): bump(golang.org/x/crypto|net|sys) [#428](https://github.com/openshift/oc/pull/428)
* [Bug 1806780](https://bugzilla.redhat.com/show_bug.cgi?id=1806780): release: Mirroring from custom directory via oc adm release mirror fails [#446](https://github.com/openshift/oc/pull/446)
* [Bug 1837675](https://bugzilla.redhat.com/show_bug.cgi?id=1837675): Backport enhancements/oc/mirroring-release-signatures implementation [#426](https://github.com/openshift/oc/pull/426)
* [Bug 1835739](https://bugzilla.redhat.com/show_bug.cgi?id=1835739): Fix oc drain to ignore daemonsets and others [#420](https://github.com/openshift/oc/pull/420)
* [Full changelog](https://github.com/openshift/oc/compare/4a4cd759b616cdba344dd73386727c10d3d2dde1...6be950302d36d92a8a5a1e4bf2d4b8b9284696ea)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/bb9e6fb69f46e8678e6084d2b1fce40afc0c4bf1)

* [Bug 1808175](https://bugzilla.redhat.com/show_bug.cgi?id=1808175): CVE-2020-9283 ose-cloud-credential-operator-container: golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic [#194](https://github.com/openshift/cloud-credential-operator/pull/194)
* [Bug 1838810](https://bugzilla.redhat.com/show_bug.cgi?id=1838810): do not special-case handling read-only credentialsRequest [#191](https://github.com/openshift/cloud-credential-operator/pull/191)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/07e01d33e9009ebd692544655ebda77b85d19dc0...bb9e6fb69f46e8678e6084d2b1fce40afc0c4bf1)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/280ef6529afe9a05bbee0d0d07c5525afaabbc34)

* [Bug 1842442](https://bugzilla.redhat.com/show_bug.cgi?id=1842442): explicitly set oauth-server container's root file system to writable [#286](https://github.com/openshift/cluster-authentication-operator/pull/286)
* [Bug 1823622](https://bugzilla.redhat.com/show_bug.cgi?id=1823622): [release-4.4]  Fix ingress state condition flapping [#278](https://github.com/openshift/cluster-authentication-operator/pull/278)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/f499ad9ead6b63e0ca02918d0bd6a4dbd487ba73...280ef6529afe9a05bbee0d0d07c5525afaabbc34)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/2ec541e3e31778428a75e0fc16469ba22d94e4bd)

* BUG 1835160: Fallback to status if replicas nil in spec [#153](https://github.com/openshift/kubernetes-autoscaler/pull/153)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/6768c3c3d76d1def41eebeb3095a0ff5d99d7908...2ec541e3e31778428a75e0fc16469ba22d94e4bd)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/6fb7b73815e683d26e8801a9150a97c3feeac1c4)

* add bugzilla component to OWNERS [#174](https://github.com/openshift/cluster-autoscaler-operator/pull/174)
* [Bug 1806439](https://bugzilla.redhat.com/show_bug.cgi?id=1806439): Drop run-level [#137](https://github.com/openshift/cluster-autoscaler-operator/pull/137)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/8277beb9accd15c35ec8500ae224fe8751473753...6fb7b73815e683d26e8801a9150a97c3feeac1c4)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/b3a79202af78bd1cdeb153468d8175a63e850660)

* [Bug 1856763](https://bugzilla.redhat.com/show_bug.cgi?id=1856763): update golang version to be 1.13 [#142](https://github.com/openshift/cluster-config-operator/pull/142)
* [Bug 1825194](https://bugzilla.redhat.com/show_bug.cgi?id=1825194): oc explain still shows "The default is auth.openshift.io" [#131](https://github.com/openshift/cluster-config-operator/pull/131)
* [Bug 1847457](https://bugzilla.redhat.com/show_bug.cgi?id=1847457): Fix Dockerfiles [#138](https://github.com/openshift/cluster-config-operator/pull/138)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/3d7c9399de0ff9985aff669ebe3cdea9d1e73ce4...b3a79202af78bd1cdeb153468d8175a63e850660)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/7302adb93e33bbd589581eef4d821c493fb040a7)

* [Bug 1845623](https://bugzilla.redhat.com/show_bug.cgi?id=1845623): Add extra check for v1alpha CRD [#42](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/42)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/4492120dbebb8dd283f1ba9caec67f9f605cda1c...7302adb93e33bbd589581eef4d821c493fb040a7)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/122ed908cf182b95cb1a4e2a7c87d03854ba444d)

* [Bug 1847197](https://bugzilla.redhat.com/show_bug.cgi?id=1847197): Tolerate all taints [#179](https://github.com/openshift/cluster-dns-operator/pull/179)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/de1a3573c417ccbc00abbfa436ecd90bb1730bb6...122ed908cf182b95cb1a4e2a7c87d03854ba444d)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/833490a6797b1275503a961e0ffde9954126b233)

* [Bug 1906484](https://bugzilla.redhat.com/show_bug.cgi?id=1906484): Use socket readiness probe to avoid generating zombies [#511](https://github.com/openshift/cluster-etcd-operator/pull/511)
* [Bug 1897546](https://bugzilla.redhat.com/show_bug.cgi?id=1897546): DR: Make restore pod yaml specific to restoring node [#506](https://github.com/openshift/cluster-etcd-operator/pull/506)
* [Bug 1848516](https://bugzilla.redhat.com/show_bug.cgi?id=1848516): cluster-backup.sh: error if script dependencies are not met [#380](https://github.com/openshift/cluster-etcd-operator/pull/380)
* [Bug 1876484](https://bugzilla.redhat.com/show_bug.cgi?id=1876484): static-pod-installer: remove deadlock by recreating installers that disappear [#450](https://github.com/openshift/cluster-etcd-operator/pull/450)
* [Bug 1877965](https://bugzilla.redhat.com/show_bug.cgi?id=1877965): Use restore pod yaml from the backup when restoring [#443](https://github.com/openshift/cluster-etcd-operator/pull/443)
* [Bug 1869681](https://bugzilla.redhat.com/show_bug.cgi?id=1869681): handle IP migration when DNS fails on Azure IPI [#419](https://github.com/openshift/cluster-etcd-operator/pull/419)
* [Bug 1829645](https://bugzilla.redhat.com/show_bug.cgi?id=1829645): add relatedobjects for immediate creation by CVO [#315](https://github.com/openshift/cluster-etcd-operator/pull/315)
* [Bug 1846025](https://bugzilla.redhat.com/show_bug.cgi?id=1846025): Adding rollbackcopy subcommand [#379](https://github.com/openshift/cluster-etcd-operator/pull/379)
* [Bug 1840150](https://bugzilla.redhat.com/show_bug.cgi?id=1840150): operator: add fsync controller [#369](https://github.com/openshift/cluster-etcd-operator/pull/369)
* [Bug 1841162](https://bugzilla.redhat.com/show_bug.cgi?id=1841162): Fix openshift_etcd_operator_build_info metric [#365](https://github.com/openshift/cluster-etcd-operator/pull/365)
* [Bug 1837630](https://bugzilla.redhat.com/show_bug.cgi?id=1837630): pkg/operator/etcdcertsigner: sign etcd certs for 3 years [#358](https://github.com/openshift/cluster-etcd-operator/pull/358)
* [Bug 1836270](https://bugzilla.redhat.com/show_bug.cgi?id=1836270): Cluster restore should not stop network pods on bare-metal [#357](https://github.com/openshift/cluster-etcd-operator/pull/357)
* [Bug 1838781](https://bugzilla.redhat.com/show_bug.cgi?id=1838781): pkg/etcdcli: refactor health checks [#360](https://github.com/openshift/cluster-etcd-operator/pull/360)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/43912f4b09d7f0fab956e3c33bb186b2f172b5d0...833490a6797b1275503a961e0ffde9954126b233)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/230861f844044ad97ce5574fcba23aa33c15bac7)

* [Bug 1873534](https://bugzilla.redhat.com/show_bug.cgi?id=1873534): Using last finished job and disabling retries [#600](https://github.com/openshift/cluster-image-registry-operator/pull/600)
* [Bug 1832140](https://bugzilla.redhat.com/show_bug.cgi?id=1832140): Assure storage bucket names in lowercase [#540](https://github.com/openshift/cluster-image-registry-operator/pull/540)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/f7914ab28f292cfe2151ed18e10c61a2c2bf7850...230861f844044ad97ce5574fcba23aa33c15bac7)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e38ca0c3c57890d27d48f7cc6865d0052afcd515)

* [Bug 1876484](https://bugzilla.redhat.com/show_bug.cgi?id=1876484): static-pod-installer: remove deadlock by recreating inst… [#959](https://github.com/openshift/cluster-kube-apiserver-operator/pull/959)
* [Bug 1863076](https://bugzilla.redhat.com/show_bug.cgi?id=1863076): LatencySensitive feature gate allows upgrades [#923](https://github.com/openshift/cluster-kube-apiserver-operator/pull/923)
* [Bug 1851831](https://bugzilla.redhat.com/show_bug.cgi?id=1851831): static pod: don't wait for 6080 in apiserver container [#892](https://github.com/openshift/cluster-kube-apiserver-operator/pull/892)
* [Bug 1851066](https://bugzilla.redhat.com/show_bug.cgi?id=1851066): 4.4: use "ss" instead of "lsof" to check port; check on container start [#891](https://github.com/openshift/cluster-kube-apiserver-operator/pull/891)
* [Bug 1829580](https://bugzilla.redhat.com/show_bug.cgi?id=1829580): Add e2e test that ensures stale condition is removed [#845](https://github.com/openshift/cluster-kube-apiserver-operator/pull/845)
* [Bug 1829319](https://bugzilla.redhat.com/show_bug.cgi?id=1829319): add relatedobjects for immediate creation by CVO [#843](https://github.com/openshift/cluster-kube-apiserver-operator/pull/843)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/a2fdb3bffaad5887bd06cafc1d8f32ac226728e2...e38ca0c3c57890d27d48f7cc6865d0052afcd515)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/2436db06d5c3c854080f25fc1654c8e2594395f3)

* [Bug 1876484](https://bugzilla.redhat.com/show_bug.cgi?id=1876484): static-pod-installer: remove deadlock by recreating inst… [#457](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/457)
* [Bug 1851397](https://bugzilla.redhat.com/show_bug.cgi?id=1851397): Fix port check 4.4 [#423](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/423)
* [Bug 1816806](https://bugzilla.redhat.com/show_bug.cgi?id=1816806): Fix gce cloud provider permissions [#426](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/426)
* [Bug 1833128](https://bugzilla.redhat.com/show_bug.cgi?id=1833128): Updates Resource Graph to use default-ingress-cert CM [#409](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/409)
* [Bug 1829319](https://bugzilla.redhat.com/show_bug.cgi?id=1829319): add relatedobjects for immediate creation by CVO [#407](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/407)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/c34cdcb1ecee80f66ce44bb08261b039dd2ce510...2436db06d5c3c854080f25fc1654c8e2594395f3)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/60700572b7ae38d060915a2355df9dfecce46572)

* [Bug 1876484](https://bugzilla.redhat.com/show_bug.cgi?id=1876484): static-pod-installer: remove deadlock by recreating installers that disappear [#284](https://github.com/openshift/cluster-kube-scheduler-operator/pull/284)
* [Bug 1833122](https://bugzilla.redhat.com/show_bug.cgi?id=1833122): Have targetconfig controller use cm/default-ingress-cert [#247](https://github.com/openshift/cluster-kube-scheduler-operator/pull/247)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/02325ba19510230317d8355030d0c304a4f2a9cc...60700572b7ae38d060915a2355df9dfecce46572)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/5bd52b52867fcb88da521c099408568d5067fa0c)

* BUG 1854385: Update golang/crypto to bring CVE-2020-9283 [#76](https://github.com/openshift/cluster-machine-approver/pull/76)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/1bb09ce6d253e9127d7a1c69c0fdf9c29ea9d388...5bd52b52867fcb88da521c099408568d5067fa0c)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/571c003581b9e6bed1726310be35bd982b0dbfe5)

* BUG 1856767: manifests/telemetry: replace apiserver_request_count with apiserver_r… [#880](https://github.com/openshift/cluster-monitoring-operator/pull/880)
* [Bug 1857597](https://bugzilla.redhat.com/show_bug.cgi?id=1857597): Do not report 'all' in relatedObjects [#855](https://github.com/openshift/cluster-monitoring-operator/pull/855)
* [Bug 1845444](https://bugzilla.redhat.com/show_bug.cgi?id=1845444): KubeApiLatency alert firing even though not all conditions are matched [#809](https://github.com/openshift/cluster-monitoring-operator/pull/809)
* [Bug 1850615](https://bugzilla.redhat.com/show_bug.cgi?id=1850615): fix AlertmanagerConfigInconsistent alert [#824](https://github.com/openshift/cluster-monitoring-operator/pull/824)
* [Bug 1813221](https://bugzilla.redhat.com/show_bug.cgi?id=1813221): remove cpu limits for config reloader [#841](https://github.com/openshift/cluster-monitoring-operator/pull/841)
* [Bug 1851920](https://bugzilla.redhat.com/show_bug.cgi?id=1851920): Add namespace selector to CPUThrottlingHigh [#833](https://github.com/openshift/cluster-monitoring-operator/pull/833)
* [Bug 1813221](https://bugzilla.redhat.com/show_bug.cgi?id=1813221): jsonnet: add missing resource requests for alertmanager sidecar [#818](https://github.com/openshift/cluster-monitoring-operator/pull/818)
* [Bug 1834913](https://bugzilla.redhat.com/show_bug.cgi?id=1834913): bump kubernetes-monitoring/kubernetes-mixin [#787](https://github.com/openshift/cluster-monitoring-operator/pull/787)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/784585a66c36745fae6f46e33bed1ffed1e92384...571c003581b9e6bed1726310be35bd982b0dbfe5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/34e537d22819fb9522321e2955c3f235fcc363c6)

* [Bug 1833048](https://bugzilla.redhat.com/show_bug.cgi?id=1833048): For third party plugins enable testing of IPv6 single stack [#624](https://github.com/openshift/cluster-network-operator/pull/624)
* [Bug 1881430](https://bugzilla.redhat.com/show_bug.cgi?id=1881430): openshift-sdn: bump EgressNetworkPolicy maxItems to 1000 [#800](https://github.com/openshift/cluster-network-operator/pull/800)
* [Bug 1875438](https://bugzilla.redhat.com/show_bug.cgi?id=1875438): [release-4.4] OVN: Handle OVN db upgrades [#781](https://github.com/openshift/cluster-network-operator/pull/781)
* [Bug 1858217](https://bugzilla.redhat.com/show_bug.cgi?id=1858217): bump golang.org/x/text/encoding [#760](https://github.com/openshift/cluster-network-operator/pull/760)
* [Bug 1823709](https://bugzilla.redhat.com/show_bug.cgi?id=1823709): [backport 4.4] NetworkAttachmentDefinitions should have output for "oc explain" [#735](https://github.com/openshift/cluster-network-operator/pull/735)
* [Bug 1855895](https://bugzilla.redhat.com/show_bug.cgi?id=1855895): Add netns mount [#731](https://github.com/openshift/cluster-network-operator/pull/731)
* [Bug 1857742](https://bugzilla.redhat.com/show_bug.cgi?id=1857742): [release-4.4] Set timeoutSeconds to reflect expected timeout for OVS commands [#724](https://github.com/openshift/cluster-network-operator/pull/724)
* [Bug 1858183](https://bugzilla.redhat.com/show_bug.cgi?id=1858183): Block MCS and metadata for host-networking pods [#715](https://github.com/openshift/cluster-network-operator/pull/715)
* [Bug 1851903](https://bugzilla.redhat.com/show_bug.cgi?id=1851903): Kuryr: Mount /run/netns to ensure netns access [#684](https://github.com/openshift/cluster-network-operator/pull/684)
* [Bug 1851489](https://bugzilla.redhat.com/show_bug.cgi?id=1851489): The DHCP CNI daemonset should mount the netns paths [#681](https://github.com/openshift/cluster-network-operator/pull/681)
* [Bug 1847558](https://bugzilla.redhat.com/show_bug.cgi?id=1847558): Drop ovn-octavia provider limitation for multiprotocol listeners [#675](https://github.com/openshift/cluster-network-operator/pull/675)
* [Bug 1849540](https://bugzilla.redhat.com/show_bug.cgi?id=1849540): Split etcd sg rule ports range into different sg rules [#678](https://github.com/openshift/cluster-network-operator/pull/678)
* [Bug 1847675](https://bugzilla.redhat.com/show_bug.cgi?id=1847675): [4.4] mount /var/run/netns rslave in ovnkube [#669](https://github.com/openshift/cluster-network-operator/pull/669)
* [Bug 1844245](https://bugzilla.redhat.com/show_bug.cgi?id=1844245): bindata/network/ovn-kubernetes/ovnkube-: update resource requests [#662](https://github.com/openshift/cluster-network-operator/pull/662)
* [Bug 1832872](https://bugzilla.redhat.com/show_bug.cgi?id=1832872): Remove dead member from LB pool. [#629](https://github.com/openshift/cluster-network-operator/pull/629)
* [Bug 1841029](https://bugzilla.redhat.com/show_bug.cgi?id=1841029): Recreate DNS service upon Octavia upgrade [#653](https://github.com/openshift/cluster-network-operator/pull/653)
* [Bug 1844136](https://bugzilla.redhat.com/show_bug.cgi?id=1844136): Setting resource request for kube-proxy deployment [#659](https://github.com/openshift/cluster-network-operator/pull/659)
* [Bug 1841507](https://bugzilla.redhat.com/show_bug.cgi?id=1841507): Allow connection between authentication net namespaces [#657](https://github.com/openshift/cluster-network-operator/pull/657)
* [Bug 1834474](https://bugzilla.redhat.com/show_bug.cgi?id=1834474): ovnkube: set NB/SB database inactivity probes to 60 seconds [#636](https://github.com/openshift/cluster-network-operator/pull/636)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/65d880409bdb441c41d111a96ec8e6308a7a12d5...34e537d22819fb9522321e2955c3f235fcc363c6)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/2786635b626e559768a78ad0e75852478727342f)

* [Bug 1840857](https://bugzilla.redhat.com/show_bug.cgi?id=1840857): openshift-apiserver doesn't live reload extension-apiserver-authentication trust [#366](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/366)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/4ef3975f80bf14f6d389b9fbf89eb90e8408a5d6...2786635b626e559768a78ad0e75852478727342f)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/1131126f370d4f346a6848298a1aeb0bcf4f880a)

* [Bug 1861874](https://bugzilla.redhat.com/show_bug.cgi?id=1861874): account for nil DaemonSet returned from library-go [#166](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/166)
* [Bug 1852249](https://bugzilla.redhat.com/show_bug.cgi?id=1852249): ensure progressing is not set to false if version is missing [#160](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/160)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/7408e19d09e6660d0e50ed3ff2846359da9b05a3...1131126f370d4f346a6848298a1aeb0bcf4f880a)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/ac665bb594c3ac89c2cb622d20a5a3c4e5a11566)

* [Bug 1910096](https://bugzilla.redhat.com/show_bug.cgi?id=1910096): The quota controllers should resync on new resources and make progress [#52](https://github.com/openshift/cluster-policy-controller/pull/52)
* [Bug 1891532](https://bugzilla.redhat.com/show_bug.cgi?id=1891532): openshift-object-counts quota is not dynamically updating as the resource is deleted [#49](https://github.com/openshift/cluster-policy-controller/pull/49)
* [Bug 1858800](https://bugzilla.redhat.com/show_bug.cgi?id=1858800): add UID deallocation logic [#33](https://github.com/openshift/cluster-policy-controller/pull/33)
* [Bug 1856763](https://bugzilla.redhat.com/show_bug.cgi?id=1856763): update golang version to be 1.13 [#31](https://github.com/openshift/cluster-policy-controller/pull/31)
* [Bug 1829327](https://bugzilla.redhat.com/show_bug.cgi?id=1829327): use patch when updating namespace [#25](https://github.com/openshift/cluster-policy-controller/pull/25)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/f47f9ab73a492bf12a6f219df8724cd29b7c1fcc...ac665bb594c3ac89c2cb622d20a5a3c4e5a11566)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5691d87d99a8ac8852414654ce5b1b97aff6e67c)

* [Bug 1865889](https://bugzilla.redhat.com/show_bug.cgi?id=1865889): Fix Jenkins Monitored templates typo and other updates [#294](https://github.com/openshift/cluster-samples-operator/pull/294)
* [Bug 1871832](https://bugzilla.redhat.com/show_bug.cgi?id=1871832): initial create errors should map to SamplesExists instead of ImageChangesInProgress [#315](https://github.com/openshift/cluster-samples-operator/pull/315)
* [Bug 1792102](https://bugzilla.redhat.com/show_bug.cgi?id=1792102): Install imagestreams and templates on Power and Z [4.4] [#297](https://github.com/openshift/cluster-samples-operator/pull/297)
* [Bug 1835995](https://bugzilla.redhat.com/show_bug.cgi?id=1835995): ensure s390/ppc64le platforms bootstrap as removed following upgrade [#279](https://github.com/openshift/cluster-samples-operator/pull/279)
* [Bug 1842560](https://bugzilla.redhat.com/show_bug.cgi?id=1842560): improve reason text on degraded condition [#282](https://github.com/openshift/cluster-samples-operator/pull/282)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/2781a4399c5ce64c38846bc147950d151a6daefb...5691d87d99a8ac8852414654ce5b1b97aff6e67c)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/35e6ecab36657462f5ce990fc728ff00125b112c)

* [Bug 1879109](https://bugzilla.redhat.com/show_bug.cgi?id=1879109): Move notUpgradeable check later to prevent z-stream upgrade failures [#87](https://github.com/openshift/cluster-storage-operator/pull/87)
* [Bug 1858168](https://bugzilla.redhat.com/show_bug.cgi?id=1858168): Includes validation check for VolumeSnapshot v1alpha1 CRDs [#61](https://github.com/openshift/cluster-storage-operator/pull/61)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/a9548e6d0ac621a5c6e8e3544ca680280a1ca746...35e6ecab36657462f5ce990fc728ff00125b112c)


### [cluster-svcat-apiserver-operator](https://github.com/openshift/cluster-svcat-apiserver-operator/tree/aa7927fbfe8bf165c5b84167b7c3f5d9cb394e14)

* [Bug 1831019](https://bugzilla.redhat.com/show_bug.cgi?id=1831019): Upgradeable = False, link to OpenShift docs [#89](https://github.com/openshift/cluster-svcat-apiserver-operator/pull/89)
* [Full changelog](https://github.com/openshift/cluster-svcat-apiserver-operator/compare/5c54cf311967f9841475d74e9c3bcc50e3967fea...aa7927fbfe8bf165c5b84167b7c3f5d9cb394e14)


### [cluster-svcat-controller-manager-operator](https://github.com/openshift/cluster-svcat-controller-manager-operator/tree/333a3cbb2f658dc5cdc846d003649f8cbc3cde7b)

* [Bug 1831027](https://bugzilla.redhat.com/show_bug.cgi?id=1831027): Upgradeable = False, link to OpenShift docs [#77](https://github.com/openshift/cluster-svcat-controller-manager-operator/pull/77)
* [Full changelog](https://github.com/openshift/cluster-svcat-controller-manager-operator/compare/63550c24fb36234b9e33300cf960602dab37758e...333a3cbb2f658dc5cdc846d003649f8cbc3cde7b)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/9515b232c706cdd2a842a381bba5cbd6497aaf9c)

* [Bug 1841239](https://bugzilla.redhat.com/show_bug.cgi?id=1841239): Avoid pre-creating clusteroperators that should be excluded [#376](https://github.com/openshift/cluster-version-operator/pull/376)
* [Bug 1848783](https://bugzilla.redhat.com/show_bug.cgi?id=1848783): Expand supported set of probe field mutations [#390](https://github.com/openshift/cluster-version-operator/pull/390)
* [Bug 1843732](https://bugzilla.redhat.com/show_bug.cgi?id=1843732): pkg/cvo/sync_worker: Do not treat "All errors were context errors..." as success [#379](https://github.com/openshift/cluster-version-operator/pull/379)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/18b995d13d384b9e89255cc5fc89bb43a23a1093...9515b232c706cdd2a842a381bba5cbd6497aaf9c)


### [console](https://github.com/openshift/console/tree/4979dae76ebdac8414efff468bcb5fea52b5e85f)

* [Bug 1881058](https://bugzilla.redhat.com/show_bug.cgi?id=1881058): Use library-go crypto to setup default TLSConfig [#6830](https://github.com/openshift/console/pull/6830)
* [Bug 1880478](https://bugzilla.redhat.com/show_bug.cgi?id=1880478): Empty secret should be editable in generic secret form [#6680](https://github.com/openshift/console/pull/6680)
* [Bug 1881058](https://bugzilla.redhat.com/show_bug.cgi?id=1881058): Tighten cipher usage to library-go [#6694](https://github.com/openshift/console/pull/6694)
* [Bug 1875381](https://bugzilla.redhat.com/show_bug.cgi?id=1875381): Manual cherrypick fix log whitescreen (release-4.4) [#6513](https://github.com/openshift/console/pull/6513)
* [Bug 1868035](https://bugzilla.redhat.com/show_bug.cgi?id=1868035): fix bug where Routes created set route.spec.port.targetP… [#6288](https://github.com/openshift/console/pull/6288)
* [Bug 1824429](https://bugzilla.redhat.com/show_bug.cgi?id=1824429): Make Tag field optional for the ImageStreamImport validation schema [#5141](https://github.com/openshift/console/pull/5141)
* [Bug 1859834](https://bugzilla.redhat.com/show_bug.cgi?id=1859834): Fix crash (white screen) when cancel Pipeline Create with open sidebar [#6083](https://github.com/openshift/console/pull/6083)
* [Bug 1804866](https://bugzilla.redhat.com/show_bug.cgi?id=1804866): Dockerfile.product: Change node headers to v12 [#5979](https://github.com/openshift/console/pull/5979)
* [Bug 1822346](https://bugzilla.redhat.com/show_bug.cgi?id=1822346): Fix bug where pipelines doc link is incorrect [#4985](https://github.com/openshift/console/pull/4985)
* [Bug 1822437](https://bugzilla.redhat.com/show_bug.cgi?id=1822437): Fix instances / version issue with crd pages [#5552](https://github.com/openshift/console/pull/5552)
* [Bug 1837784](https://bugzilla.redhat.com/show_bug.cgi?id=1837784): Query Browser: Add text wrapping for table headers [#5498](https://github.com/openshift/console/pull/5498)
* [Bug 1834313](https://bugzilla.redhat.com/show_bug.cgi?id=1834313): autoselect query from metric dropdown [#5740](https://github.com/openshift/console/pull/5740)
* [Bug 1846305](https://bugzilla.redhat.com/show_bug.cgi?id=1846305): Topology fix for service binding requests with no backingServiceSelector [#5721](https://github.com/openshift/console/pull/5721)
* [Bug 1820059](https://bugzilla.redhat.com/show_bug.cgi?id=1820059): Last navigation item needs more bottom padding [#4906](https://github.com/openshift/console/pull/4906)
* [Bug 1847141](https://bugzilla.redhat.com/show_bug.cgi?id=1847141): Add 4.5 channels to Cluster Settings page [#5791](https://github.com/openshift/console/pull/5791)
* [Bug 1839019](https://bugzilla.redhat.com/show_bug.cgi?id=1839019): Fix edit and import flows deployment triggers [#5591](https://github.com/openshift/console/pull/5591)
* [Bug 1840398](https://bugzilla.redhat.com/show_bug.cgi?id=1840398): correctly link to OperatorGroup from CSV details [#5579](https://github.com/openshift/console/pull/5579)
* [Bug 1835939](https://bugzilla.redhat.com/show_bug.cgi?id=1835939): Operands related views are disappeared due to missing Operand's `displayName` field in the CSV [#5565](https://github.com/openshift/console/pull/5565)
* [Bug 1828955](https://bugzilla.redhat.com/show_bug.cgi?id=1828955): Pipelines TechPreview [#5550](https://github.com/openshift/console/pull/5550)
* [Bug 1829030](https://bugzilla.redhat.com/show_bug.cgi?id=1829030): Fix bug where masthead dropdown item spacing is inconsi… [#5219](https://github.com/openshift/console/pull/5219)
* [Bug 1827766](https://bugzilla.redhat.com/show_bug.cgi?id=1827766): Fix bug where K8sResourceLink lacks empty state [#5186](https://github.com/openshift/console/pull/5186)
* [Bug 1827306](https://bugzilla.redhat.com/show_bug.cgi?id=1827306): Remove `Edit ClusterServiceVersion` menu options from C… [#5173](https://github.com/openshift/console/pull/5173)
* [Bug 1824049](https://bugzilla.redhat.com/show_bug.cgi?id=1824049): Handle undefined MachineConfigPools status [#5102](https://github.com/openshift/console/pull/5102)
* [Bug 1829568](https://bugzilla.redhat.com/show_bug.cgi?id=1829568): Pipeline Builder treats task param default properly [#5545](https://github.com/openshift/console/pull/5545)
* [Bug 1836343](https://bugzilla.redhat.com/show_bug.cgi?id=1836343): match available queries on dashboards and metrics tabs [#5461](https://github.com/openshift/console/pull/5461)
* [Bug 1831821](https://bugzilla.redhat.com/show_bug.cgi?id=1831821): Don't set net-attach-def type at root [#5427](https://github.com/openshift/console/pull/5427)
* [Bug 1817394](https://bugzilla.redhat.com/show_bug.cgi?id=1817394): Windows CDs use VirtIO instead of sata [#5496](https://github.com/openshift/console/pull/5496)
* [Bug 1839115](https://bugzilla.redhat.com/show_bug.cgi?id=1839115): adds support for addition/updation of env variables and imagePullPolicy [#5541](https://github.com/openshift/console/pull/5541)
* [Bug 1841149](https://bugzilla.redhat.com/show_bug.cgi?id=1841149): Creating role and roleBinding when enabling monitoring for an operator [#5617](https://github.com/openshift/console/pull/5617)
* [Bug 1831808](https://bugzilla.redhat.com/show_bug.cgi?id=1831808): fix bug where operand list status does not show latest … [#5616](https://github.com/openshift/console/pull/5616)
* [Bug 1840812](https://bugzilla.redhat.com/show_bug.cgi?id=1840812): Handle resource names with special characters [#5605](https://github.com/openshift/console/pull/5605)
* [Bug 1836807](https://bugzilla.redhat.com/show_bug.cgi?id=1836807): updates apiGroup for Knative Eventing to latest supported [#5477](https://github.com/openshift/console/pull/5477)
* [Bug 1832976](https://bugzilla.redhat.com/show_bug.cgi?id=1832976): Fix channel issue by narrowing down requests and loading guard [#5339](https://github.com/openshift/console/pull/5339)
* [Bug 1824255](https://bugzilla.redhat.com/show_bug.cgi?id=1824255): Update "view more" apis link [#5320](https://github.com/openshift/console/pull/5320)
* [Bug 1838420](https://bugzilla.redhat.com/show_bug.cgi?id=1838420): Fix payload for PVCPool BackingStore Creation [#5673](https://github.com/openshift/console/pull/5673)
* [Bug 1840954](https://bugzilla.redhat.com/show_bug.cgi?id=1840954): Pipeline Builder supports invalid task refs [#5612](https://github.com/openshift/console/pull/5612)
* [Bug 1829063](https://bugzilla.redhat.com/show_bug.cgi?id=1829063): Don't blacklist SecurityContextConstraints on the search page [#5221](https://github.com/openshift/console/pull/5221)
* [Bug 1828253](https://bugzilla.redhat.com/show_bug.cgi?id=1828253): Add workload badge/name to monitoring dashboard when navigating to it from the Side Panel monitoring tab [#5195](https://github.com/openshift/console/pull/5195)
* [Bug 1840445](https://bugzilla.redhat.com/show_bug.cgi?id=1840445): Fix conditions table runtime error on operand details page [#5631](https://github.com/openshift/console/pull/5631)
* [Bug 1826503](https://bugzilla.redhat.com/show_bug.cgi?id=1826503): Requested tweaks to OperatorHub by UX [#5182](https://github.com/openshift/console/pull/5182)
* [Bug 1827197](https://bugzilla.redhat.com/show_bug.cgi?id=1827197): Add query parameter for selected container to pod logs [#5167](https://github.com/openshift/console/pull/5167)
* [Bug 1827746](https://bugzilla.redhat.com/show_bug.cgi?id=1827746): Register Subscription list page from plugin [#5162](https://github.com/openshift/console/pull/5162)
* [Bug 1825975](https://bugzilla.redhat.com/show_bug.cgi?id=1825975): Add deployment configs and stateful sets to project ove… [#5122](https://github.com/openshift/console/pull/5122)
* [Bug 1810364](https://bugzilla.redhat.com/show_bug.cgi?id=1810364): Monitoring Dashboards: Fix JS warning for empty table cells [#4679](https://github.com/openshift/console/pull/4679)
* [Bug 1838815](https://bugzilla.redhat.com/show_bug.cgi?id=1838815): Fix "SyntaxError: Unexpected identifier 'e'" in Safari (production build only) [#5528](https://github.com/openshift/console/pull/5528)
* [Bug 1840647](https://bugzilla.redhat.com/show_bug.cgi?id=1840647): do not display 'Catalog source was removed' for PackageServer [#5598](https://github.com/openshift/console/pull/5598)
* [Full changelog](https://github.com/openshift/console/compare/3d11322b7e93c40f329028a413b84e961c24381d...4979dae76ebdac8414efff468bcb5fea52b5e85f)


### [console-operator](https://github.com/openshift/console-operator/tree/df1bd0b6545e0f23e7965161d0a5480f99428bed)

* [Bug 1847323](https://bugzilla.redhat.com/show_bug.cgi?id=1847323): Publish license file [#443](https://github.com/openshift/console-operator/pull/443)
* [Bug 1847524](https://bugzilla.redhat.com/show_bug.cgi?id=1847524): "downloads" pod does not work on the node which is disabled IPv6 [#442](https://github.com/openshift/console-operator/pull/442)
* [Bug 1824935](https://bugzilla.redhat.com/show_bug.cgi?id=1824935): [release-4.4] Fix console oauthEndpointCAFile setting [#407](https://github.com/openshift/console-operator/pull/407)
* [Full changelog](https://github.com/openshift/console-operator/compare/fc91156c7639563246692f92e84b10cf738671c3...df1bd0b6545e0f23e7965161d0a5480f99428bed)


### [coredns](https://github.com/openshift/coredns/tree/38a1d511db1cf1c2181ee8b64971b91b3205fc83)

* [Bug 1869310](https://bugzilla.redhat.com/show_bug.cgi?id=1869310): Back port Handle endpoint tombstones (upstream #3887) [#39](https://github.com/openshift/coredns/pull/39)
* [Full changelog](https://github.com/openshift/coredns/compare/e4c9977928b7f36962351b387fafff474b238311...38a1d511db1cf1c2181ee8b64971b91b3205fc83)


### [docker-builder](https://github.com/openshift/builder/tree/cf542598347df645c0e07ac19f7fcc5afcb24a36)

* [Bug 1889954](https://bugzilla.redhat.com/show_bug.cgi?id=1889954): bump(*) to mitigate CVE-2020-8564 [#195](https://github.com/openshift/builder/pull/195)
* Force use of runc, since we know we're privileged, and customize our seccomp filter [#209](https://github.com/openshift/builder/pull/209)
* [Full changelog](https://github.com/openshift/builder/compare/bea4ef19e0408ec14ae7c16224213fc97ae0ddbc...cf542598347df645c0e07ac19f7fcc5afcb24a36)


### [docker-registry](https://github.com/openshift/image-registry/tree/af61c0dfdb169d9411fa06cac8d7f269da882adf)

* [Bug 1825313](https://bugzilla.redhat.com/show_bug.cgi?id=1825313): [release-4.4] Possible error loss in GCS driver [#239](https://github.com/openshift/image-registry/pull/239)
* [Full changelog](https://github.com/openshift/image-registry/compare/a795321efdc797f7b002d095c700e095b4cd9bb8...af61c0dfdb169d9411fa06cac8d7f269da882adf)


### [etcd](https://github.com/openshift/etcd/tree/e89414a9f51ca4fa915f1ca97027a7b04f9ef1e6)

* OWNERS: add component [#63](https://github.com/openshift/etcd/pull/63)
* [Bug 1815637](https://bugzilla.redhat.com/show_bug.cgi?id=1815637): bump etcd v3.3.22 [#47](https://github.com/openshift/etcd/pull/47)
* [Bug 1837152](https://bugzilla.redhat.com/show_bug.cgi?id=1837152): make evaluation of targetMember strict [#49](https://github.com/openshift/etcd/pull/49)
* [Full changelog](https://github.com/openshift/etcd/compare/9003f53409304807ddb2c24abc5c61703fdacb74...e89414a9f51ca4fa915f1ca97027a7b04f9ef1e6)


### [gcp-machine-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/d4e723cf869347eb4c4b104b29c591af12aebcd3)

* add bugzilla component and subcomponent to OWNERS [#129](https://github.com/openshift/cluster-api-provider-gcp/pull/129)
* [Bug 1733474](https://bugzilla.redhat.com/show_bug.cgi?id=1733474): Revendor MAO with timeout formatting fix [#109](https://github.com/openshift/cluster-api-provider-gcp/pull/109)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/a7c99236c613a53448f85f5fe1d5fe18a8bc9829...d4e723cf869347eb4c4b104b29c591af12aebcd3)


### [grafana](https://github.com/openshift/grafana/tree/3e04f7ddf83c96cbb7a7b376817940a2953e9bb0)

* [Bug 1847543](https://bugzilla.redhat.com/show_bug.cgi?id=1847543): only allow 32 hexadecimal digits for the avatar hash [#35](https://github.com/openshift/grafana/pull/35)
* [Full changelog](https://github.com/openshift/grafana/compare/fb91937f4739c7485c61b57f31a67ed836ac2cd2...3e04f7ddf83c96cbb7a7b376817940a2953e9bb0)


### [haproxy-router](https://github.com/openshift/router/tree/3345b5c4ea15b8e5e9ebba82450af9484d16196b)

* [Bug 1906471](https://bugzilla.redhat.com/show_bug.cgi?id=1906471): back port: Change router's internal endpoint.ID to prevent HAProxy server line collisions [#235](https://github.com/openshift/router/pull/235)
* [Bug 1886215](https://bugzilla.redhat.com/show_bug.cgi?id=1886215): haproxy-config.template: Turn off HTX [#202](https://github.com/openshift/router/pull/202)
* [Bug 1890536](https://bugzilla.redhat.com/show_bug.cgi?id=1890536): Fix decreasing counter metrics when reloading HAProxy [#206](https://github.com/openshift/router/pull/206)
* [Bug 1879122](https://bugzilla.redhat.com/show_bug.cgi?id=1879122): Backport haproxy 503 error page: replace all LF by CRLF to be fully RFC compliant [#185](https://github.com/openshift/router/pull/185)
* [Bug 1857022](https://bugzilla.redhat.com/show_bug.cgi?id=1857022): Sanitize TLS config that has key bundled with cert [#151](https://github.com/openshift/router/pull/151)
* [Bug 1868521](https://bugzilla.redhat.com/show_bug.cgi?id=1868521): Back port Remove initial haproxy template commitAndReload [#171](https://github.com/openshift/router/pull/171)
* Sync OWNERS with master branch [#163](https://github.com/openshift/router/pull/163)
* [Bug 1848687](https://bugzilla.redhat.com/show_bug.cgi?id=1848687): Ensure router metrics are accurate and increase coverage [#141](https://github.com/openshift/router/pull/141)
* [Bug 1854814](https://bugzilla.redhat.com/show_bug.cgi?id=1854814): Removes ALPN from haproxy backends [#144](https://github.com/openshift/router/pull/144)
* [Bug 1816544](https://bugzilla.redhat.com/show_bug.cgi?id=1816544): [4.4] Backport "remove proto-version header field" [#106](https://github.com/openshift/router/pull/106)
* [Full changelog](https://github.com/openshift/router/compare/9cbaab1168b42e686d345249ac8811373e257193...3345b5c4ea15b8e5e9ebba82450af9484d16196b)


### [hyperkube, tests](https://github.com/openshift/origin/tree/5ef953fe34b32c331f9fa96c6906e1abd5dcec0c)

* [Bug 1905891](https://bugzilla.redhat.com/show_bug.cgi?id=1905891): genericapiserver waits for server.Shutdown [#25293](https://github.com/openshift/origin/pull/25293)
* [Bug 1918974](https://bugzilla.redhat.com/show_bug.cgi?id=1918974): broaden acceptance of scl sample s2i image usage messages [#25817](https://github.com/openshift/origin/pull/25817)
* [Bug 1907939](https://bugzilla.redhat.com/show_bug.cgi?id=1907939): Nodes goes into NotReady state (VMware) [#25791](https://github.com/openshift/origin/pull/25791)
* [Bug 1852694](https://bugzilla.redhat.com/show_bug.cgi?id=1852694): CVE-2020-8559 compromised node could escalate to cluster level privileges [#25657](https://github.com/openshift/origin/pull/25657)
* [Bug 1895019](https://bugzilla.redhat.com/show_bug.cgi?id=1895019): Adjust wait duration for marketplace test [#25665](https://github.com/openshift/origin/pull/25665)
* [Bug 1878795](https://bugzilla.redhat.com/show_bug.cgi?id=1878795): UPSTREAM: 89160 Only Remove unhealthy symlink for dead containers [#25501](https://github.com/openshift/origin/pull/25501)
* [Bug 1888004](https://bugzilla.redhat.com/show_bug.cgi?id=1888004): [release-4.4] move image ecosystem e2e suite from centos to rhel; create rhel only jenkins e2e suite [#25392](https://github.com/openshift/origin/pull/25392)
* [Bug 1867803](https://bugzilla.redhat.com/show_bug.cgi?id=1867803): Make EBS AttachDisk idempotent [#25401](https://github.com/openshift/origin/pull/25401)
* [Bug 1882033](https://bugzilla.redhat.com/show_bug.cgi?id=1882033): UPSTREAM: 94112: Remove canonicalization of endpoints by endpoints controller for better comparison [#25543](https://github.com/openshift/origin/pull/25543)
* [Bug 1842653](https://bugzilla.redhat.com/show_bug.cgi?id=1842653): [4.4] All NetworkPolicy tests currently being skipped on openshift-sdn [#25197](https://github.com/openshift/origin/pull/25197)
* [Bug 1880123](https://bugzilla.redhat.com/show_bug.cgi?id=1880123): For clusters upgraded from 4.1, skip the anonymous browser access test [#25532](https://github.com/openshift/origin/pull/25532)
* [Bug 1858169](https://bugzilla.redhat.com/show_bug.cgi?id=1858169): OpenShift APIs become unavailable for more than 15 minutes [#25305](https://github.com/openshift/origin/pull/25305)
* [Bug 1849322](https://bugzilla.redhat.com/show_bug.cgi?id=1849322): UPSTREAM: 89937: portAllocator sync local data before allocate [#25175](https://github.com/openshift/origin/pull/25175)
* [Bug 1848437](https://bugzilla.redhat.com/show_bug.cgi?id=1848437): 4.4: UPSTREAM: 91748: FieldManager: Reset if we receive nil or a list with one [#25154](https://github.com/openshift/origin/pull/25154)
* [Bug 1857080](https://bugzilla.redhat.com/show_bug.cgi?id=1857080): Include pod /etc/hosts in ephemeral storage calculation for eviction [#25288](https://github.com/openshift/origin/pull/25288)
* [Bug 1855478](https://bugzilla.redhat.com/show_bug.cgi?id=1855478): UPSTREAM: 91648: Changes to ManagedFields is not mutation for GC [#25265](https://github.com/openshift/origin/pull/25265)
* [Bug 1862171](https://bugzilla.redhat.com/show_bug.cgi?id=1862171): Drop registry.fedoraproject.org/fedora:30 in favour of quay.io/fedora:32-x86_64 [#25348](https://github.com/openshift/origin/pull/25348)
* [Bug 1861850](https://bugzilla.redhat.com/show_bug.cgi?id=1861850): UPSTREAM: 90740: Update createBalancedPodForNodes function in scheduler e2e [#25343](https://github.com/openshift/origin/pull/25343)
* [Bug 1860830](https://bugzilla.redhat.com/show_bug.cgi?id=1860830): Ensure Azure availability zone is always in lower cases [#25326](https://github.com/openshift/origin/pull/25326)
* Fix commit checker [#25367](https://github.com/openshift/origin/pull/25367)
* [Bug 1852938](https://bugzilla.redhat.com/show_bug.cgi?id=1852938): Fix azure tests in unzoned environment [#25262](https://github.com/openshift/origin/pull/25262)
* [Bug 1854312](https://bugzilla.redhat.com/show_bug.cgi?id=1854312): 4.4: UPSTREAM: 92014: CSI: Modify VolumeAttachment check to use Informer/cache [#25251](https://github.com/openshift/origin/pull/25251)
* [Bug 1851407](https://bugzilla.redhat.com/show_bug.cgi?id=1851407): Fix DS expectations on recreate [#25210](https://github.com/openshift/origin/pull/25210)
* UPSTREAM: <carry>: Bug 1852565: change etcd health check timeout to 10s [#25222](https://github.com/openshift/origin/pull/25222)
* [Bug 1845780](https://bugzilla.redhat.com/show_bug.cgi?id=1845780): [release-4.4] kubelet: block non-forwarded packets from crossing the localhost boundary [#25143](https://github.com/openshift/origin/pull/25143)
* [Bug 1850719](https://bugzilla.redhat.com/show_bug.cgi?id=1850719): Measure container restarts over an interval instead of absolute [#25202](https://github.com/openshift/origin/pull/25202)
* [Bug 1828477](https://bugzilla.redhat.com/show_bug.cgi?id=1828477): Add CI test to check for critical alerts post upgrade [#25204](https://github.com/openshift/origin/pull/25204)
* [Bug 1851066](https://bugzilla.redhat.com/show_bug.cgi?id=1851066): images/hyperkube: install iproute [#25216](https://github.com/openshift/origin/pull/25216)
* [Bug 1851418](https://bugzilla.redhat.com/show_bug.cgi?id=1851418): remove problematic upstream client plugin test [#25212](https://github.com/openshift/origin/pull/25212)
* [Bug 1842629](https://bugzilla.redhat.com/show_bug.cgi?id=1842629): [release-4.4] openshift-tests: add run-resourcewatch command [#25042](https://github.com/openshift/origin/pull/25042)
* [Bug 1829327](https://bugzilla.redhat.com/show_bug.cgi?id=1829327): annotations exist, else forbidden: unable to validate [#25161](https://github.com/openshift/origin/pull/25161)
* [Bug 1848687](https://bugzilla.redhat.com/show_bug.cgi?id=1848687): Fix router metrics to be accurate in 4.4 [#25165](https://github.com/openshift/origin/pull/25165)
* [Bug 1843876](https://bugzilla.redhat.com/show_bug.cgi?id=1843876): UPSTREAM: 91008: Do not swallow NotFound error for DeletePod in dsc.manage [#25062](https://github.com/openshift/origin/pull/25062)
* [Bug 1847419](https://bugzilla.redhat.com/show_bug.cgi?id=1847419): [release-4.4] UPSTREAM: 92166: fix: GetLabelsForVolume panic issue for azure disk PV [#25159](https://github.com/openshift/origin/pull/25159)
* [Bug 1847551](https://bugzilla.redhat.com/show_bug.cgi?id=1847551): reenable jenkins e2e in e2e-gcp-builds [#25128](https://github.com/openshift/origin/pull/25128)
* [Bug 1844831](https://bugzilla.redhat.com/show_bug.cgi?id=1844831): oVirt, skip network service tests [#25072](https://github.com/openshift/origin/pull/25072)
* [Bug 1844102](https://bugzilla.redhat.com/show_bug.cgi?id=1844102): oVirt, add oVirt as a provide to openshift tests [#25066](https://github.com/openshift/origin/pull/25066)
* BUG 1824092: Managed cluster should grow and decrease when scaling different machineSets simultaneously (backport) [#24909](https://github.com/openshift/origin/pull/24909)
* [Bug 1822488](https://bugzilla.redhat.com/show_bug.cgi?id=1822488): UPSTREAM: 89794: Clean up event messages for errors [#25048](https://github.com/openshift/origin/pull/25048)
* [Bug 1820274](https://bugzilla.redhat.com/show_bug.cgi?id=1820274): e2e: Disable router header test on OVN [#24823](https://github.com/openshift/origin/pull/24823)
* [Bug 1814393](https://bugzilla.redhat.com/show_bug.cgi?id=1814393): UPSTREAM: 88141: Don't try to create VolumeSpec immediately after underlying PVC is being deleted [#24710](https://github.com/openshift/origin/pull/24710)
* [Bug 1841185](https://bugzilla.redhat.com/show_bug.cgi?id=1841185): more upstream to installed template switch in image-eco (django this time) [#25040](https://github.com/openshift/origin/pull/25040)
* [Full changelog](https://github.com/openshift/origin/compare/f63db30b26903e915dd519f1584c81345e3db1fe...5ef953fe34b32c331f9fa96c6906e1abd5dcec0c)


### [insights-operator](https://github.com/openshift/insights-operator/tree/24a17a69b2337a067c4ea30025b7f4c4a076577a)

* [Bug 1904413](https://bugzilla.redhat.com/show_bug.cgi?id=1904413): Fix hostsubnet gathering and add to sample archive [#283](https://github.com/openshift/insights-operator/pull/283)
* [Bug 1844419](https://bugzilla.redhat.com/show_bug.cgi?id=1844419): [release-4.4] GatherClusterOperators: store pod logs [#123](https://github.com/openshift/insights-operator/pull/123)
* [Bug 1885177](https://bugzilla.redhat.com/show_bug.cgi?id=1885177): Adds PodDisruptionBudgets gather. [#201](https://github.com/openshift/insights-operator/pull/201)
* [Bug 1880384](https://bugzilla.redhat.com/show_bug.cgi?id=1880384): - collect hostsubnet information [#181](https://github.com/openshift/insights-operator/pull/181)
* [Bug 1885191](https://bugzilla.redhat.com/show_bug.cgi?id=1885191): Gather MachineSet info [#202](https://github.com/openshift/insights-operator/pull/202)
* [Bug 1868165](https://bugzilla.redhat.com/show_bug.cgi?id=1868165): pkg/gather/clusterconfig/clusterconfig: include node information in every archive [#160](https://github.com/openshift/insights-operator/pull/160)
* [Bug 1883160](https://bugzilla.redhat.com/show_bug.cgi?id=1883160): Add new team members to OWNERS [#194](https://github.com/openshift/insights-operator/pull/194)
* [Bug 1869197](https://bugzilla.redhat.com/show_bug.cgi?id=1869197): Limit collection of ALERTS metric to 1000 lines (~500KiB) to avoid unbearably large archives [#162](https://github.com/openshift/insights-operator/pull/162)
* [Bug 1842489](https://bugzilla.redhat.com/show_bug.cgi?id=1842489): Don't delay first upload [#136](https://github.com/openshift/insights-operator/pull/136)
* [Bug 1870512](https://bugzilla.redhat.com/show_bug.cgi?id=1870512): Add @natiiix to OWNERS [#164](https://github.com/openshift/insights-operator/pull/164)
* [Bug 1840012](https://bugzilla.redhat.com/show_bug.cgi?id=1840012): [release-4.4] pkg: write files with extension [#116](https://github.com/openshift/insights-operator/pull/116)
* [Bug 1834677](https://bugzilla.redhat.com/show_bug.cgi?id=1834677): Gather image registry config (refresh) [#131](https://github.com/openshift/insights-operator/pull/131)
* [Full changelog](https://github.com/openshift/insights-operator/compare/930540be0b8ae69a9c398ce92c1198fc0f6be652...24a17a69b2337a067c4ea30025b7f4c4a076577a)


### [jenkins, jenkins-agent-maven, jenkins-agent-nodejs](https://github.com/openshift/jenkins/tree/6fb48f702d7ad41fdae1b69f94522e4103b5da07)

* [Bug 1896401](https://bugzilla.redhat.com/show_bug.cgi?id=1896401): various fixes [#1176](https://github.com/openshift/jenkins/pull/1176)
* [Bug 1875258](https://bugzilla.redhat.com/show_bug.cgi?id=1875258): 4.4 bump jenkins 2.235.5 [#1153](https://github.com/openshift/jenkins/pull/1153)
* [Bug 1858754](https://bugzilla.redhat.com/show_bug.cgi?id=1858754): Bump script-security plugin to 1.73 [#1108](https://github.com/openshift/jenkins/pull/1108)
* [Bug 1857558](https://bugzilla.redhat.com/show_bug.cgi?id=1857558): Bump matrix plugin [#1128](https://github.com/openshift/jenkins/pull/1128)
* [Bug 1857549](https://bugzilla.redhat.com/show_bug.cgi?id=1857549): bump jenkins to 2.235.2 [#1119](https://github.com/openshift/jenkins/pull/1119)
* [Bug 1847442](https://bugzilla.redhat.com/show_bug.cgi?id=1847442): Set OPENSHIFT_JENKINS_IMAGE_VERSION [#1082](https://github.com/openshift/jenkins/pull/1082)
* [Bug 1847424](https://bugzilla.redhat.com/show_bug.cgi?id=1847424): [release-4.4] Support Nodejs 12 Agent [#1076](https://github.com/openshift/jenkins/pull/1076)
* [Bug 1826174](https://bugzilla.redhat.com/show_bug.cgi?id=1826174): handle ingress certificate signed by custom ca [#1050](https://github.com/openshift/jenkins/pull/1050)
* [Bug 1828939](https://bugzilla.redhat.com/show_bug.cgi?id=1828939): set default java version to jdk 11 [#1053](https://github.com/openshift/jenkins/pull/1053)
* [Bug 1836914](https://bugzilla.redhat.com/show_bug.cgi?id=1836914): Fix kind in ServiceMonitor for persistent template [#1057](https://github.com/openshift/jenkins/pull/1057)
* [Bug 1843945](https://bugzilla.redhat.com/show_bug.cgi?id=1843945): bump jenkins to 2.222.1 and update plugins [#1068](https://github.com/openshift/jenkins/pull/1068)
* [Full changelog](https://github.com/openshift/jenkins/compare/a08ad146ce5ccd847e534f91e1b24a3134d2dac6...6fb48f702d7ad41fdae1b69f94522e4103b5da07)


### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/82608343ded469d4a26d5ff8fdacce972e852390)

* [Bug 1899649](https://bugzilla.redhat.com/show_bug.cgi?id=1899649): Populate both CPU and Memory resource container metrics if one is specified [#38](https://github.com/openshift/k8s-prometheus-adapter/pull/38)
* [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/8f2182e7a848b65e20b2b04d1ea0188274d4a9a6...82608343ded469d4a26d5ff8fdacce972e852390)


### [keepalived-ipfailover, pod](https://github.com/openshift/images/tree/2bae9c63fd34f3ddc24a3d8910f0bd2734530d50)

* [Bug 1900727](https://bugzilla.redhat.com/show_bug.cgi?id=1900727): Pod process container does not correctly reap zombie process with shareProcessNamespace: true [#60](https://github.com/openshift/images/pull/60)
* [Bug 1851397](https://bugzilla.redhat.com/show_bug.cgi?id=1851397): Add iproute package to get `ss` tool for port wait [#21](https://github.com/openshift/images/pull/21)
* [Full changelog](https://github.com/openshift/images/compare/6cdb5d360768d8f87a615286180e46784ae7d28f...2bae9c63fd34f3ddc24a3d8910f0bd2734530d50)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/765e00502e604240f49ff5ea653a4246cf28f3e6)

* [Bug 1907813](https://bugzilla.redhat.com/show_bug.cgi?id=1907813): fix pod creation deadlock [#234](https://github.com/openshift/sdn/pull/234)
* [Bug 1870304](https://bugzilla.redhat.com/show_bug.cgi?id=1870304): Port stuck open when ep deleted before svc in unidling mode [#174](https://github.com/openshift/sdn/pull/174)
* [Bug 1878787](https://bugzilla.redhat.com/show_bug.cgi?id=1878787): vxlan_monitor_test: fix flake [#197](https://github.com/openshift/sdn/pull/197)
* [Bug 1874799](https://bugzilla.redhat.com/show_bug.cgi?id=1874799): Add NodeInformer to EgressIP [#183](https://github.com/openshift/sdn/pull/183)
* [Bug 1853197](https://bugzilla.redhat.com/show_bug.cgi?id=1853197): [release-4.4] Backport OVS-retries [#155](https://github.com/openshift/sdn/pull/155)
* [Bug 1855119](https://bugzilla.redhat.com/show_bug.cgi?id=1855119): [release-4.4] Add support for --may-exist when adding the bridge in sdn [#166](https://github.com/openshift/sdn/pull/166)
* [Bug 1839107](https://bugzilla.redhat.com/show_bug.cgi?id=1839107): node/vnids: Correctly handle case where NetNamespace watch is far behind [#143](https://github.com/openshift/sdn/pull/143)
* [Bug 1840215](https://bugzilla.redhat.com/show_bug.cgi?id=1840215): Fix egressVXLANMonitor and egressIPTracker deadlock [#145](https://github.com/openshift/sdn/pull/145)
* [Full changelog](https://github.com/openshift/sdn/compare/f0ee614ede27ded52f65a7c75d0a370a950fded7...765e00502e604240f49ff5ea653a4246cf28f3e6)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/5c8ec13624509934bca9558de78f05ec566b2b0b)

* [Bug 1910221](https://bugzilla.redhat.com/show_bug.cgi?id=1910221): Correctly compare SG rules in NP code [#430](https://github.com/openshift/kuryr-kubernetes/pull/430)
* [Bug 1895332](https://bugzilla.redhat.com/show_bug.cgi?id=1895332): Fix duplicated sg rules on NP crd [#396](https://github.com/openshift/kuryr-kubernetes/pull/396)
* [Bug 1886707](https://bugzilla.redhat.com/show_bug.cgi?id=1886707): Cleanup ports belonging to deleted nodes [#368](https://github.com/openshift/kuryr-kubernetes/pull/368)
* [Bug 1868427](https://bugzilla.redhat.com/show_bug.cgi?id=1868427): Periodically fetch full list of watched resources [#318](https://github.com/openshift/kuryr-kubernetes/pull/318)
* [Bug 1847558](https://bugzilla.redhat.com/show_bug.cgi?id=1847558): Remove ovn-octavia provider tcp+udp limitation [#286](https://github.com/openshift/kuryr-kubernetes/pull/286)
* [Bug 1845921](https://bugzilla.redhat.com/show_bug.cgi?id=1845921): Get RPM and Kuryr version from git [#272](https://github.com/openshift/kuryr-kubernetes/pull/272)
* [Bug 1779163](https://bugzilla.redhat.com/show_bug.cgi?id=1779163): CNI: Don't wait for missing pods on DEL [#280](https://github.com/openshift/kuryr-kubernetes/pull/280)
* [Bug 1779163](https://bugzilla.redhat.com/show_bug.cgi?id=1779163): CNI: Confirm pods in cache before connecting [#246](https://github.com/openshift/kuryr-kubernetes/pull/246)
* [Bug 1847105](https://bugzilla.redhat.com/show_bug.cgi?id=1847105): Fix hacking min version to 3.0.1 [#284](https://github.com/openshift/kuryr-kubernetes/pull/284)
* [Bug 1844093](https://bugzilla.redhat.com/show_bug.cgi?id=1844093): Ensure security_groups on LBaaSLoadBalancer defaults to empty list [#265](https://github.com/openshift/kuryr-kubernetes/pull/265)
* [Bug 1844091](https://bugzilla.redhat.com/show_bug.cgi?id=1844091): Ensure provider information is used when finding lbs [#264](https://github.com/openshift/kuryr-kubernetes/pull/264)
* [Bug 1840611](https://bugzilla.redhat.com/show_bug.cgi?id=1840611): Ensure LB resources with ERROR status are deleted [#248](https://github.com/openshift/kuryr-kubernetes/pull/248)
* [Bug 1839023](https://bugzilla.redhat.com/show_bug.cgi?id=1839023): Skip LB sg update when no endpoint is found [#242](https://github.com/openshift/kuryr-kubernetes/pull/242)
* [Bug 1841493](https://bugzilla.redhat.com/show_bug.cgi?id=1841493): Remove lb sg creation when octavia provider is ovn-octavia [#250](https://github.com/openshift/kuryr-kubernetes/pull/250)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/b14361cca26846745aa6c9358879dc242c2aaf45...5c8ec13624509934bca9558de78f05ec566b2b0b)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/f510dcb30ddd4cc7fedd37e3e337018bf94ad8e0)

* BUG 1859306: fix memory leak that leads to unresponsive libvirt URI [#204](https://github.com/openshift/cluster-api-provider-libvirt/pull/204)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/bb1d324e2c75f23e9d326519ffaa5d24c104ef0f...f510dcb30ddd4cc7fedd37e3e337018bf94ad8e0)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/d414a0bbb8c6f617ab1d284d7719d5c4b7ab8be1)

* [Bug 1896725](https://bugzilla.redhat.com/show_bug.cgi?id=1896725): Drop cvo as a library in favour of library-go for applying resources [#748](https://github.com/openshift/machine-api-operator/pull/748)
* [Bug 1816606](https://bugzilla.redhat.com/show_bug.cgi?id=1816606): Allow Int in String within MHC MaxUnhealthy [#539](https://github.com/openshift/machine-api-operator/pull/539)
* [Bug 1829938](https://bugzilla.redhat.com/show_bug.cgi?id=1829938): Fix External DHCP range values for Baremetal configuration [#579](https://github.com/openshift/machine-api-operator/pull/579)
* [Bug 1833359](https://bugzilla.redhat.com/show_bug.cgi?id=1833359): Add ec2:DescribeDhcpOptions permission request [#583](https://github.com/openshift/machine-api-operator/pull/583)
* BUG 1806439: Remove explicit securityContext and add granular securitycontextconstraints "use" permissions in machine-api-controllers clusterRole [#511](https://github.com/openshift/machine-api-operator/pull/511)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a9955742a3cac1c0e88c44b622bdb1e4424bc39e...d414a0bbb8c6f617ab1d284d7719d5c4b7ab8be1)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/82b97e85b80fa343c429776c64669b99fec00386)

* [Bug 1856783](https://bugzilla.redhat.com/show_bug.cgi?id=1856783): [backport 4.4] Exclude network address [#19](https://github.com/openshift/whereabouts-cni/pull/19)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/bf517ccbadbe6e85be018dc710254a98ad0d77ff...82b97e85b80fa343c429776c64669b99fec00386)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/9ec5ef9c8d86951d32aad4d10ae1ac034d41e99a)

* [Bug 1882364](https://bugzilla.redhat.com/show_bug.cgi?id=1882364): Using manifest digest on manifest list import [#139](https://github.com/openshift/openshift-apiserver/pull/139)
* [Bug 1882364](https://bugzilla.redhat.com/show_bug.cgi?id=1882364): bump apiserver-library-go and library-go [#140](https://github.com/openshift/openshift-apiserver/pull/140)
* [Bug 1840857](https://bugzilla.redhat.com/show_bug.cgi?id=1840857): openshift-apiserver doesn't live reload extension-apiserver-authentication trust [#103](https://github.com/openshift/openshift-apiserver/pull/103)
* [Bug 1832762](https://bugzilla.redhat.com/show_bug.cgi?id=1832762): updates Dockerfile.rhel to golang 1.13 and ocp:4.4 [#104](https://github.com/openshift/openshift-apiserver/pull/104)
* [Bug 1829327](https://bugzilla.redhat.com/show_bug.cgi?id=1829327): allow patch for updating namespace [#100](https://github.com/openshift/openshift-apiserver/pull/100)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/c28dd306e7bb0b553b1e76429892990c0adbc665...9ec5ef9c8d86951d32aad4d10ae1ac034d41e99a)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/dc073d3aef43cfbaba179be54058cfe4f139dd88)

* remove use of BUILD_ISOLATION env var (no longer inspected in openshift/builder) [#164](https://github.com/openshift/openshift-controller-manager/pull/164)
* [Bug 1849174](https://bugzilla.redhat.com/show_bug.cgi?id=1849174): Allow image push after postCommit script completes [#121](https://github.com/openshift/openshift-controller-manager/pull/121)
* [Bug 1819770](https://bugzilla.redhat.com/show_bug.cgi?id=1819770): Bumping openshift/library-go [#88](https://github.com/openshift/openshift-controller-manager/pull/88)
* [Bug 1819770](https://bugzilla.redhat.com/show_bug.cgi?id=1819770): Removing yum commands from Dockerfile [#106](https://github.com/openshift/openshift-controller-manager/pull/106)
* [Bug 1832839](https://bugzilla.redhat.com/show_bug.cgi?id=1832839): more changes required for named workqueue metrics on pre 1.18 k8s base [#117](https://github.com/openshift/openshift-controller-manager/pull/117)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/aa5436c5733fe505f763afabc71eb37aa32a8d36...dc073d3aef43cfbaba179be54058cfe4f139dd88)


### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d698ac9bd7e39c0dd0bb00cb54bead7c8cc438b0)

* [Bug 1839012](https://bugzilla.redhat.com/show_bug.cgi?id=1839012): Allow to define primary ip address for machines [#110](https://github.com/openshift/cluster-api-provider-openstack/pull/110)
* [Bug 1832999](https://bugzilla.redhat.com/show_bug.cgi?id=1832999): Migrate to MAO [#98](https://github.com/openshift/cluster-api-provider-openstack/pull/98)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/2937f802e2ee0602ec293d4bacfac21725a021c9...d698ac9bd7e39c0dd0bb00cb54bead7c8cc438b0)


### [operator-lifecycle-manager](https://github.com/operator-framework/operator-lifecycle-manager/tree/8fb5f8c63a35b9f8ef1937a9dc7b616c400e3c07)

* [Bug 1870784](https://bugzilla.redhat.com/show_bug.cgi?id=1870784): Retry conflicting catalog source pod update after fetching latest pod spec [#1782](https://github.com/operator-framework/operator-lifecycle-manager/pull/1782)
* [Bug 1851095](https://bugzilla.redhat.com/show_bug.cgi?id=1851095): Delete subscription metric when an operator is uninstalled [#1746](https://github.com/operator-framework/operator-lifecycle-manager/pull/1746)
* [Bug 1869717](https://bugzilla.redhat.com/show_bug.cgi?id=1869717): fix(install): account for installplans when calculating generation [#1737](https://github.com/operator-framework/operator-lifecycle-manager/pull/1737)
* [Bug 1859755](https://bugzilla.redhat.com/show_bug.cgi?id=1859755): fix(installplans): GC older installplans [#1675](https://github.com/operator-framework/operator-lifecycle-manager/pull/1675)
* [Bug 1859594](https://bugzilla.redhat.com/show_bug.cgi?id=1859594): fix(resolver): Exclude all installed packages in dependency search [#1666](https://github.com/operator-framework/operator-lifecycle-manager/pull/1666)
* [Bug 1821274](https://bugzilla.redhat.com/show_bug.cgi?id=1821274): Add CSV Metadata to PackageManifests [#1552](https://github.com/operator-framework/operator-lifecycle-manager/pull/1552)
* [Bug 1827000](https://bugzilla.redhat.com/show_bug.cgi?id=1827000): Pod Config Deployment Hash Error [#1566](https://github.com/operator-framework/operator-lifecycle-manager/pull/1566)
* [Bug 1850112](https://bugzilla.redhat.com/show_bug.cgi?id=1850112): Resolve only default channels [#1590](https://github.com/operator-framework/operator-lifecycle-manager/pull/1590)
* [Bug 1850632](https://bugzilla.redhat.com/show_bug.cgi?id=1850632): don't store full manifests in installplan status (for bundle images) [#1595](https://github.com/operator-framework/operator-lifecycle-manager/pull/1595)
* [Bug 1843678](https://bugzilla.redhat.com/show_bug.cgi?id=1843678): Deleting a CSV removes related CSV metrics [#1568](https://github.com/operator-framework/operator-lifecycle-manager/pull/1568)
* [Bug 1841171](https://bugzilla.redhat.com/show_bug.cgi?id=1841171): Update PkgManifest upon catsrc update [#1556](https://github.com/operator-framework/operator-lifecycle-manager/pull/1556)
* [Bug 1840887](https://bugzilla.redhat.com/show_bug.cgi?id=1840887): fix(resolver): don't pick operator from same package when resolve requiredAPI [#1551](https://github.com/operator-framework/operator-lifecycle-manager/pull/1551)
* [Bug 1836905](https://bugzilla.redhat.com/show_bug.cgi?id=1836905): fix(queues): use a single gc queue [#1528](https://github.com/operator-framework/operator-lifecycle-manager/pull/1528)
* [Full changelog](https://github.com/operator-framework/operator-lifecycle-manager/compare/f8ef76c241abfeeb45fa680599b9c683ec3173cf...8fb5f8c63a35b9f8ef1937a9dc7b616c400e3c07)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/6ad0e2411bfe8273260c84a5348afad001045132)

* [Bug 1916952](https://bugzilla.redhat.com/show_bug.cgi?id=1916952): Do not report degraded when Marketplace exits gracefully [#377](https://github.com/operator-framework/operator-marketplace/pull/377)
* [Bug 1872880](https://bugzilla.redhat.com/show_bug.cgi?id=1872880): Correctly count  non-default Marketplace CRs [#326](https://github.com/operator-framework/operator-marketplace/pull/326)
* [Bug 1873012](https://bugzilla.redhat.com/show_bug.cgi?id=1873012): Increase registry delay for large payloads [#345](https://github.com/operator-framework/operator-marketplace/pull/345)
* [Bug 1849518](https://bugzilla.redhat.com/show_bug.cgi?id=1849518): [release-4.4] show the source commit id [#292](https://github.com/operator-framework/operator-marketplace/pull/292)
* [Bug 1827777](https://bugzilla.redhat.com/show_bug.cgi?id=1827777): Fix "DprecatedAPIsInUse" -> "DeprecatedAPIsInUse" typo [#305](https://github.com/operator-framework/operator-marketplace/pull/305)
* [Bug 1826372](https://bugzilla.redhat.com/show_bug.cgi?id=1826372): Tigger alert for invalid CSC [#303](https://github.com/operator-framework/operator-marketplace/pull/303)
* [Bug 1847740](https://bugzilla.redhat.com/show_bug.cgi?id=1847740): Ensure correct registry image [#315](https://github.com/operator-framework/operator-marketplace/pull/315)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/985aa35a24e38c70c9328461aab6957cde7caf4a...6ad0e2411bfe8273260c84a5348afad001045132)


### [operator-registry](https://github.com/operator-framework/operator-registry/tree/3069d8c8c3e91afbfcfece6452e44973dd01f117)

* [Bug 1846100](https://bugzilla.redhat.com/show_bug.cgi?id=1846100): fix(server): make a copy of the db before migrating it [#356](https://github.com/operator-framework/operator-registry/pull/356)
* [Full changelog](https://github.com/operator-framework/operator-registry/compare/3c11e08f5e2d54044f7b6843e9a033fa4ad17a6c...3069d8c8c3e91afbfcfece6452e44973dd01f117)


### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/201387b47794976a5ca7bdd2165a3d700b0a38a0)

* [Bug 1839738](https://bugzilla.redhat.com/show_bug.cgi?id=1839738): update machine only when needed [#50](https://github.com/openshift/cluster-api-provider-ovirt/pull/50)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/281b4db96607c474f73161c49aab80528f517c26...201387b47794976a5ca7bdd2165a3d700b0a38a0)


### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/13fb59a8f043d1018023cf1c08bb5fbad8b6ccbc)

* [Bug 1882066](https://bugzilla.redhat.com/show_bug.cgi?id=1882066): Pin 4.4 OVN to 20.06.2-4.el7fdp [#283](https://github.com/openshift/ovn-kubernetes/pull/283)
* [Bug 1870869](https://bugzilla.redhat.com/show_bug.cgi?id=1870869): Fix br-local duplicate MACs [#239](https://github.com/openshift/ovn-kubernetes/pull/239)
* [Bug 1858309](https://bugzilla.redhat.com/show_bug.cgi?id=1858309): Set MTU for br-ext hybrid overlay bridge [#208](https://github.com/openshift/ovn-kubernetes/pull/208)
* [Bug 1845706](https://bugzilla.redhat.com/show_bug.cgi?id=1845706): build: require openvswitch2.13 >= 2.13.0-29 or later [#184](https://github.com/openshift/ovn-kubernetes/pull/184)
* [Bug 1845724](https://bugzilla.redhat.com/show_bug.cgi?id=1845724): Backport deadlock fixes and dependent commits [#185](https://github.com/openshift/ovn-kubernetes/pull/185)
* [Bug 1838259](https://bugzilla.redhat.com/show_bug.cgi?id=1838259): scale: Enable parallel pod creation [#173](https://github.com/openshift/ovn-kubernetes/pull/173)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/92fd9abb6b5cc4867375b09caba014d6c4ac8329...13fb59a8f043d1018023cf1c08bb5fbad8b6ccbc)


### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/ad8c9daeaa6c6763f3af18e0c01cc6207680285e)

* [Bug 1813221](https://bugzilla.redhat.com/show_bug.cgi?id=1813221): pkg/alertmanager: mergepatch alertmanager containers [#74](https://github.com/openshift/prometheus-operator/pull/74)
* [Bug 1833427](https://bugzilla.redhat.com/show_bug.cgi?id=1833427): retain pvc metadata [#70](https://github.com/openshift/prometheus-operator/pull/70)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/b1a7175c21017d90c73d92ca8a95ab59254faf88...ad8c9daeaa6c6763f3af18e0c01cc6207680285e)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/259dff5c0270d889341c1b2ba68390c22d372bed)

* [Bug 1847961](https://bugzilla.redhat.com/show_bug.cgi?id=1847961): text_collectors: Don't detect AWS twice when virt-what is upgraded [#63](https://github.com/openshift/node_exporter/pull/63)
* [Full changelog](https://github.com/openshift/node_exporter/compare/a7d3a64d14034beeb202f73ed9d5698f3e8937a9...259dff5c0270d889341c1b2ba68390c22d372bed)