# 4.12.0-0.okd-2023-03-18-084815

Created: 2023-03-18 11:16:01 +0000 UTC

Image Digest: `sha256:7153ed89133eeaca94b5fda702c5709b9ad199ce4ff9ad1a0f01678d6ecc720f`

Promoted from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-03-18-084815


## Changes from 4.12.0-0.okd-2023-03-05-022504

### Components

* Kubernetes upgraded from 1.25.4 to 1.25.7
* Fedora CoreOS upgraded from 37.20230205.3 to 37.20230218.3


### Rebuilt images without code change

* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [cfb76acd](https://github.com/openshift/machine-api-provider-azure/commit/cfb76acd1429fa8be4925cf15789f1dc62252d7f) `sha256:fd114ce5547460ee4c7d587317661a7c69e545cefe2a060f6ba50d94e36cfb74`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [3bfe36aa](https://github.com/openshift/cluster-capi-operator/commit/3bfe36aa9d1abbdfb11facf86a7ec6510abc390a) `sha256:2c9c2d17ac800ba92f769c1be1023ac7077ffef254f46560cf99dfb9927b9500`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [e9a895af](https://github.com/openshift/cluster-image-registry-operator/commit/e9a895af74906435bea0bb230773a3bc1898abc6) `sha256:063055f9086236c87964aaa01fb76ddccfe9780a9578da2719269de4c2c18dab`
* [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [5a154c3d](https://github.com/openshift/cluster-monitoring-operator/commit/5a154c3dd01544adc280691be54fec94a5dc8d67) `sha256:666912a6e244cb78fcd4c3f5ca7650f57dc0c03d75096329173fdbbe8e4e05a7`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [b29bac7a](https://github.com/openshift/cluster-storage-operator/commit/b29bac7a510082ffd99534ba84bcd035079741ba) `sha256:55b9f549a0b635e92e7fce3f5bd7585cf1b6e95f94d06a83d76f843f7a29a888`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [ada83dc6](https://github.com/openshift/machine-api-provider-gcp/commit/ada83dc67fc2efad2cc73f89ca3b33fd289e50ba) `sha256:a098684f8165249bb7898d67483adb91a0305b5b06a11b5e51ec7ae1fd1dc5e1`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [92b9be25](https://github.com/openshift/kuryr-kubernetes/commit/92b9be25999aee9c3b225606510c56fd14378bdf) `sha256:5cda4cd8c1e6bab1fab6ed319b6206d2d6e3d4d2e2054acb4b944446d6049a13`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [92b9be25](https://github.com/openshift/kuryr-kubernetes/commit/92b9be25999aee9c3b225606510c56fd14378bdf) `sha256:4bbd64a481cd6105db3da0c255b4c6302a8ff01f2d2cb888cb6703144bb7dfdc`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/)

* [MGMT-22553](https://issues.redhat.com/browse/MGMT-22553): Partial cluster updates fail with false validation errors on dual-stack clusters [#8704](https://github.com/openshift/assisted-service/pull/8704)
* [MGMT-22297](https://issues.redhat.com/browse/MGMT-22297): fallback path for add-ntp-sources.sh [#8742](https://github.com/openshift/assisted-service/pull/8742)
* NO-ISSUE: Update CONTRIBUTING.md [#8745](https://github.com/openshift/assisted-service/pull/8745)
* [MGMT-22189](https://issues.redhat.com/browse/MGMT-22189): Order dual-stack networks when fetching from DB [#8488](https://github.com/openshift/assisted-service/pull/8488)
* [MGMT-22656](https://issues.redhat.com/browse/MGMT-22656): Remove serviceMesh & kserve from DataScienceCluster spec [#8741](https://github.com/openshift/assisted-service/pull/8741)
* NO-ISSUE: Add cpe label [#8739](https://github.com/openshift/assisted-service/pull/8739)
* NO-ISSUE: bumping go version on branch master to v1.25 to solve CVE-2025-58183 [#8708](https://github.com/openshift/assisted-service/pull/8708)
* [AGENT-1407](https://issues.redhat.com/browse/AGENT-1407): add support for InternalReleaseImage related resources [#8600](https://github.com/openshift/assisted-service/pull/8600)
* NO-ISSUE: [master] Bump OCP versions: 4.21 [#8733](https://github.com/openshift/assisted-service/pull/8733)
* [MGMT-16090](https://issues.redhat.com/browse/MGMT-16090): upgrade assisted-service postgresql from 12 to 13 [#8602](https://github.com/openshift/assisted-service/pull/8602)
* [MGMT-20499](https://issues.redhat.com/browse/MGMT-20499): Always generate iSCSI NIC reapply manifest for day2 host support [#8705](https://github.com/openshift/assisted-service/pull/8705)
* NO-ISSUE: [master] Bump OCP versions: 4.17 [#8725](https://github.com/openshift/assisted-service/pull/8725)
* [MGMT-22278](https://issues.redhat.com/browse/MGMT-22278): Skip deleting spoke resources for an uninstalled agent [#8608](https://github.com/openshift/assisted-service/pull/8608)
* [MGMT-22186](https://issues.redhat.com/browse/MGMT-22186): Add kata runtime class to Assisted installer [#8140](https://github.com/openshift/assisted-service/pull/8140)
* [ACM-27859](https://issues.redhat.com/browse/ACM-27859): Allow PreprovisioningImage finalizer to be removed once BMH finishes deprovisioning [#8604](https://github.com/openshift/assisted-service/pull/8604)
* [MGMT-20323](https://issues.redhat.com/browse/MGMT-20323): Prefer bootable disks for installation [#8701](https://github.com/openshift/assisted-service/pull/8701)
* NO-ISSUE: add to owners_aliases [#8703](https://github.com/openshift/assisted-service/pull/8703)
* [MGMT-22545](https://issues.redhat.com/browse/MGMT-22545): Fix YAML marshaling for Kubernetes types in disconnected ignition [#8619](https://github.com/openshift/assisted-service/pull/8619)
* [OCPBUGS-68355](https://issues.redhat.com/browse/OCPBUGS-68355): Fix Day-2 CSR approval race condition [#8622](https://github.com/openshift/assisted-service/pull/8622)
* [MGMT-22423](https://issues.redhat.com/browse/MGMT-22423): Fix race condition in ensureOwnerRef causing spec.installed to remain false [#8621](https://github.com/openshift/assisted-service/pull/8621)
* [ACM-27290](https://issues.redhat.com/browse/ACM-27290): Fix policy.json not generated for InfraEnv mirror registry config [#8609](https://github.com/openshift/assisted-service/pull/8609)
* [ACM-27906](https://issues.redhat.com/browse/ACM-27906): Fix container-image-availability check to use mirrored registries in disconnected environments [#8611](https://github.com/openshift/assisted-service/pull/8611)
* NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20 [#8612](https://github.com/openshift/assisted-service/pull/8612)
* [MGMT-22458](https://issues.redhat.com/browse/MGMT-22458): CVE-2025-65637 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate to fix CVE-2025-65637 through introducers update (models module) [#8596](https://github.com/openshift/assisted-service/pull/8596)
* NO-ISSUE: Fix golangci-lint branch [#8572](https://github.com/openshift/assisted-service/pull/8572)
* [MGMT-22159](https://issues.redhat.com/browse/MGMT-22159): Add NFD operator to the list of OSC operator dependencies [#8292](https://github.com/openshift/assisted-service/pull/8292)
* [MGMT-22320](https://issues.redhat.com/browse/MGMT-22320): Expose GPU data in Agent CR inventory [#8495](https://github.com/openshift/assisted-service/pull/8495)
* NO-ISSUE: Fix list bundle validation to check for feature incompatibilities [#8571](https://github.com/openshift/assisted-service/pull/8571)
* [MGMT-22273](https://issues.redhat.com/browse/MGMT-22273): reduce log amount [#8565](https://github.com/openshift/assisted-service/pull/8565)
* [MGMT-22396](https://issues.redhat.com/browse/MGMT-22396): CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion [#8555](https://github.com/openshift/assisted-service/pull/8555)
* [MGMT-18971](https://issues.redhat.com/browse/MGMT-18971): Backup and restore for BMH [#8563](https://github.com/openshift/assisted-service/pull/8563)
* NO-ISSUE: Add documentation for creating RHCOS template and configuring MachineSets on vSphere clusters [#8441](https://github.com/openshift/assisted-service/pull/8441)
* [MGMT-22278](https://issues.redhat.com/browse/MGMT-22278): Allow Agent deletion when InfraEnv is deleted [#8416](https://github.com/openshift/assisted-service/pull/8416)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.18, 4.19 [#8564](https://github.com/openshift/assisted-service/pull/8564)
* [OCPBUGS-66947](https://issues.redhat.com/browse/OCPBUGS-66947): Fix OLM manifest configMap metadata names [#8496](https://github.com/openshift/assisted-service/pull/8496)
* [OCPBUGS-61237](https://issues.redhat.com/browse/OCPBUGS-61237): Prevent race in agent-installer kubeconfig generation [#8440](https://github.com/openshift/assisted-service/pull/8440)
* [OCPBUGS-66374](https://issues.redhat.com/browse/OCPBUGS-66374): Compare usable memory fairly in validations [#8476](https://github.com/openshift/assisted-service/pull/8476)
* [MGMT-21809](https://issues.redhat.com/browse/MGMT-21809): Limit TNF Clusters' platform to either baremetal or none [#8390](https://github.com/openshift/assisted-service/pull/8390)
* [MGMT-22181](https://issues.redhat.com/browse/MGMT-22181): [4.18] ODF compact mode with 5 masters fails [#8471](https://github.com/openshift/assisted-service/pull/8471)
* NO-ISSUE: [master] Bump OCP versions: 4.13 [#8491](https://github.com/openshift/assisted-service/pull/8491)
* [MGMT-22103](https://issues.redhat.com/browse/MGMT-22103): Add EVENT_RATE_LIMITS configuration support [#8466](https://github.com/openshift/assisted-service/pull/8466)
* [MGMT-22297](https://issues.redhat.com/browse/MGMT-22297): synch NTP in discovery [#8478](https://github.com/openshift/assisted-service/pull/8478)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.16, 4.17, 4.19, 4.12 [#8477](https://github.com/openshift/assisted-service/pull/8477)
* [MGMT-22078](https://issues.redhat.com/browse/MGMT-22078): Add readOnlyRootFilesystem to assisted-service template [#8229](https://github.com/openshift/assisted-service/pull/8229)
* NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 [#8464](https://github.com/openshift/assisted-service/pull/8464)
* [AGENT-1216](https://issues.redhat.com/browse/AGENT-1216): HostStage for 'Copying registry data to disk' [#8423](https://github.com/openshift/assisted-service/pull/8423)
* [MGMT-22280](https://issues.redhat.com/browse/MGMT-22280): remove loki dependency from logging op [#8458](https://github.com/openshift/assisted-service/pull/8458)
* NO-ISSUE: [master] Bump OCP versions: 4.18 [#8456](https://github.com/openshift/assisted-service/pull/8456)
* NO-ISSUE: [master] Bump OCP versions: 4.20 [#8454](https://github.com/openshift/assisted-service/pull/8454)
* [MGMT-22280](https://issues.redhat.com/browse/MGMT-22280): new logging operators (loki, logging) [#8445](https://github.com/openshift/assisted-service/pull/8445)
* NO-ISSUE: Update go.mod Hive dependency to 715614a9f379395dbb5b5091276ec59cacfd0599 [#8450](https://github.com/openshift/assisted-service/pull/8450)
* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19 [#8442](https://github.com/openshift/assisted-service/pull/8442)
* [MGMT-22193](https://issues.redhat.com/browse/MGMT-22193): Fix dual-stack BMH NIC creation to support multiple NICs per interface [#8426](https://github.com/openshift/assisted-service/pull/8426)
* [MGMT-22292](https://issues.redhat.com/browse/MGMT-22292): Add `url` label [#8425](https://github.com/openshift/assisted-service/pull/8425)
* [MGMT-22244](https://issues.redhat.com/browse/MGMT-22244): add AgentServiceConfig ctrl watch for mirror regsitry configmap changes [#8391](https://github.com/openshift/assisted-service/pull/8391)
* [MGMT-22246](https://issues.redhat.com/browse/MGMT-22246): Allow late binding for arbiter hosts [#8395](https://github.com/openshift/assisted-service/pull/8395)
* [MGMT-22263](https://issues.redhat.com/browse/MGMT-22263): Fix Image service health check timeout too short for onprem deployments [#8405](https://github.com/openshift/assisted-service/pull/8405)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.21, 4.19 [#8404](https://github.com/openshift/assisted-service/pull/8404)
* [MGMT-21691](https://issues.redhat.com/browse/MGMT-21691): Reorder networks and VIPs after each DB fetch before install-config generation [#8400](https://github.com/openshift/assisted-service/pull/8400)
* [ACM-26371](https://issues.redhat.com/browse/ACM-26371): Update go.mod Hive dependency [#8392](https://github.com/openshift/assisted-service/pull/8392)
* [OCPBUGS-56913](https://issues.redhat.com/browse/OCPBUGS-56913): Retry incomplete cluster registration in ABI [#8241](https://github.com/openshift/assisted-service/pull/8241)
* NO-ISSUE: [master] Bump OCP versions: 4.20 [#8398](https://github.com/openshift/assisted-service/pull/8398)
* [MGMT-21982](https://issues.redhat.com/browse/MGMT-21982): Remove --interactive  flag from the unconfigured ignition [#8389](https://github.com/openshift/assisted-service/pull/8389)
* NO-JIRA: Add project documentation to CLAUDE.md [#8209](https://github.com/openshift/assisted-service/pull/8209)
* [MGMT-22154](https://issues.redhat.com/browse/MGMT-22154): return bad request when cluster or host are missing in v2uploadLogs [#8356](https://github.com/openshift/assisted-service/pull/8356)
* NO-JIRA: Fix database initialization in unit tests [#8353](https://github.com/openshift/assisted-service/pull/8353)
* NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18 [#8387](https://github.com/openshift/assisted-service/pull/8387)
* [ACM-25423](https://issues.redhat.com/browse/ACM-25423): CVE-2024-45339 Bump github.com/golang/glog to v1.2.4 using replace directive (api module) [#8372](https://github.com/openshift/assisted-service/pull/8372)
* NO-ISSUE: Remove unused ISO_CACHE_DIR variable [#8361](https://github.com/openshift/assisted-service/pull/8361)
* [MGMT-22154](https://issues.redhat.com/browse/MGMT-22154): enable 400 status code in V2UploadLogs endpoint [#8355](https://github.com/openshift/assisted-service/pull/8355)
* [MGMT-22081](https://issues.redhat.com/browse/MGMT-22081): Add proxy, NTP, network config, and rendezvous IP to OVE [#8144](https://github.com/openshift/assisted-service/pull/8144)
* NO-ISSUE: [master] Bump OCP versions: 4.16 [#8354](https://github.com/openshift/assisted-service/pull/8354)
* [MGMT-19212](https://issues.redhat.com/browse/MGMT-19212): Update PreprovisioningImage status when InfraEnv not found [#8264](https://github.com/openshift/assisted-service/pull/8264)
* [MGMT-21604](https://issues.redhat.com/browse/MGMT-21604): Remove OCP 4.15 support from assisted-service [#8248](https://github.com/openshift/assisted-service/pull/8248)
* [MGMT-22184](https://issues.redhat.com/browse/MGMT-22184): Sanitize HTTP request logging to exclude authorization headers [#8293](https://github.com/openshift/assisted-service/pull/8293)
* NO-ISSUE: [master] Bump OCP versions: 4.20 [#8288](https://github.com/openshift/assisted-service/pull/8288)
* [MGMT-22052](https://issues.redhat.com/browse/MGMT-22052): Allow single API and Ingress VIPs in dual-stack with IPv6 primary [#8250](https://github.com/openshift/assisted-service/pull/8250)
* [MGMT-22153](https://issues.redhat.com/browse/MGMT-22153): increase log capacity from 100MB to 250MB [#8260](https://github.com/openshift/assisted-service/pull/8260)
* NO-ISSUE: [master] Bump OCP versions: 4.15 [#8267](https://github.com/openshift/assisted-service/pull/8267)
* [MGMT-22127](https://issues.redhat.com/browse/MGMT-22127): Stop non-existing InfraEnv reconcile [#8252](https://github.com/openshift/assisted-service/pull/8252)
* [MGMT-9154](https://issues.redhat.com/browse/MGMT-9154): agent auto approval [#8234](https://github.com/openshift/assisted-service/pull/8234)
* [MGMT-22053](https://issues.redhat.com/browse/MGMT-22053): Add Feature Support for Dual-Stack Primary IPv6 [#8258](https://github.com/openshift/assisted-service/pull/8258)
* NO-ISSUE: Add maorfr to OWNERS_ALIASES file [#8262](https://github.com/openshift/assisted-service/pull/8262)
* [AGENT-1248](https://issues.redhat.com/browse/AGENT-1248): Create configmap containing operator manifests [#7818](https://github.com/openshift/assisted-service/pull/7818)
* [ACM-2554](https://issues.redhat.com/browse/ACM-2554): inject imagePullSecrets when available under k8s-mode [#8196](https://github.com/openshift/assisted-service/pull/8196)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.19, 4.17 [#8249](https://github.com/openshift/assisted-service/pull/8249)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18 [#8247](https://github.com/openshift/assisted-service/pull/8247)
* [MGMT-22042](https://issues.redhat.com/browse/MGMT-22042): add cve-automation github app to owners_aliases [#8243](https://github.com/openshift/assisted-service/pull/8243)
* [MGMT-22066](https://issues.redhat.com/browse/MGMT-22066): Enable TNA clusters support by default [#8242](https://github.com/openshift/assisted-service/pull/8242)
* [MGMT-21904](https://issues.redhat.com/browse/MGMT-21904): Improve Duplicate certificate Detection used by the infrastructure operator [#8233](https://github.com/openshift/assisted-service/pull/8233)
* [ACM-25980](https://issues.redhat.com/browse/ACM-25980): Introduce PreprovisioningImage finalizer [#8221](https://github.com/openshift/assisted-service/pull/8221)
* [MGMT-21848](https://issues.redhat.com/browse/MGMT-21848): Allow matching host's disk using byPath [#8113](https://github.com/openshift/assisted-service/pull/8113)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14, 4.16, 4.18 [#8219](https://github.com/openshift/assisted-service/pull/8219)
* [MGMT-21230](https://issues.redhat.com/browse/MGMT-21230): Use XTS for disk encryption [#8115](https://github.com/openshift/assisted-service/pull/8115)
* [MGMT-21870](https://issues.redhat.com/browse/MGMT-21870): Add new parameters for bundle routes [#8101](https://github.com/openshift/assisted-service/pull/8101)
* [MGMT-22038](https://issues.redhat.com/browse/MGMT-22038): Only check TNF version for day-1 bound hosts [#8213](https://github.com/openshift/assisted-service/pull/8213)
* [MGMT-22025](https://issues.redhat.com/browse/MGMT-22025): Filter out irrelevant RHCOS images in operator deployment scripts [#8194](https://github.com/openshift/assisted-service/pull/8194)
* [MGMT-20681](https://issues.redhat.com/browse/MGMT-20681): Improve discovery ISO password change script [#7683](https://github.com/openshift/assisted-service/pull/7683)
* [MGMT-21624](https://issues.redhat.com/browse/MGMT-21624): Fix dual-stack primary IPv6 migrations and update [#8145](https://github.com/openshift/assisted-service/pull/8145)
* NO-ISSUE: [master] Bump OCP versions: 4.13, 4.17, 4.21, 4.19 [#8156](https://github.com/openshift/assisted-service/pull/8156)
* [MGMT-21958](https://issues.redhat.com/browse/MGMT-21958): Prepare 4.20 stable versions assisted-service upstream [#8142](https://github.com/openshift/assisted-service/pull/8142)
* NO-ISSUE: Update konflux pipelines to use a remote pipeline [#8143](https://github.com/openshift/assisted-service/pull/8143)
* NO-ISSUE: adds example Agent resource to docs [#8120](https://github.com/openshift/assisted-service/pull/8120)
* NO-ISSUE: migrate renovate config [#8060](https://github.com/openshift/assisted-service/pull/8060)
* [MGMT-21135](https://issues.redhat.com/browse/MGMT-21135): Unexpected Additional Subnet Appears in Machine Network Selection [#7953](https://github.com/openshift/assisted-service/pull/7953)
* [MGMT-21810](https://issues.redhat.com/browse/MGMT-21810): Support TNF cluster installation using kube-api [#8085](https://github.com/openshift/assisted-service/pull/8085)
* [MGMT-21759](https://issues.redhat.com/browse/MGMT-21759): Update Assisted Service webhook away from deprecated webhook.Validator API [#8135](https://github.com/openshift/assisted-service/pull/8135)
* [MGMT-21859](https://issues.redhat.com/browse/MGMT-21859): Move osc operators to supported [#8056](https://github.com/openshift/assisted-service/pull/8056)
* [MGMT-19836](https://issues.redhat.com/browse/MGMT-19836): Add ClusterID field on HostRoleUpdatedEvent [#8111](https://github.com/openshift/assisted-service/pull/8111)
* [MGMT-21624](https://issues.redhat.com/browse/MGMT-21624): Add Dual-Stack with primary IPv6 support in Assisted [#8026](https://github.com/openshift/assisted-service/pull/8026)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 [#8134](https://github.com/openshift/assisted-service/pull/8134)
* [AGENT-1303](https://issues.redhat.com/browse/AGENT-1303): Allow InfraEnv registration to use late binding [#8059](https://github.com/openshift/assisted-service/pull/8059)
* NO-ISSUE: Update Konflux references [#8128](https://github.com/openshift/assisted-service/pull/8128)
* NO-ISSUE: bump ocp dockerfile base image to 4.21 [#8110](https://github.com/openshift/assisted-service/pull/8110)
* [MGMT-20588](https://issues.redhat.com/browse/MGMT-20588): Align kube descheduler activation CR with OVE needs [#7960](https://github.com/openshift/assisted-service/pull/7960)
* NO-ISSUE: Update Konflux references [#8050](https://github.com/openshift/assisted-service/pull/8050)
* [ACM-25137](https://issues.redhat.com/browse/ACM-25137): Remove the SERVICE_EL8_IMAGE env vars [#8108](https://github.com/openshift/assisted-service/pull/8108)
* [MGMT-21725](https://issues.redhat.com/browse/MGMT-21725): Update Renovate for legacy EL8 Dockerfiles [#8090](https://github.com/openshift/assisted-service/pull/8090)
* [OCPBUGS-62580](https://issues.redhat.com/browse/OCPBUGS-62580): Fix edge jobs to be consistent with ART for 4.21 [#8104](https://github.com/openshift/assisted-service/pull/8104)
* NO-ISSUE: [master] Bump OCP versions: 4.19 [#8095](https://github.com/openshift/assisted-service/pull/8095)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 [#8089](https://github.com/openshift/assisted-service/pull/8089)
* NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 [#8084](https://github.com/openshift/assisted-service/pull/8084)
* [MGMT-20192](https://issues.redhat.com/browse/MGMT-20192): add possibility to disable image service [#7955](https://github.com/openshift/assisted-service/pull/7955)
* [MGMT-20464](https://issues.redhat.com/browse/MGMT-20464): Fix NFD detection of NVIDIA GPUs [#7696](https://github.com/openshift/assisted-service/pull/7696)
* [MGMT-20324](https://issues.redhat.com/browse/MGMT-20324): Fix day2 add hosts with P/Z CPU architectures [#7527](https://github.com/openshift/assisted-service/pull/7527)
* [MGMT-20207](https://issues.redhat.com/browse/MGMT-20207): avoid adding system CA bundle to AdditionalTrustBundle [#7448](https://github.com/openshift/assisted-service/pull/7448)
* [MGMT-20009](https://issues.redhat.com/browse/MGMT-20009): Change OCP 4.19 to the default version [#7506](https://github.com/openshift/assisted-service/pull/7506)
* NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator [#7491](https://github.com/openshift/assisted-service/pull/7491)
* NO-ISSUE: fixing late binding [#7070](https://github.com/openshift/assisted-service/pull/7070)
* And 1650 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-service/compare/b03e2db9f58b8bc2fdcb339659b47973688436e3...)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/)

* [MGMT-22653](https://issues.redhat.com/browse/MGMT-22653): bump the required minimal go version to 1.24 [#1459](https://github.com/openshift/assisted-installer/pull/1459)
* NO-ISSUE: Add cpe label [#1457](https://github.com/openshift/assisted-installer/pull/1457)
* [MGMT-22131](https://issues.redhat.com/browse/MGMT-22131): transitioning red hat operator base image to ubi minimal [#1444](https://github.com/openshift/assisted-installer/pull/1444)
* [ACM-25812](https://issues.redhat.com/browse/ACM-25812): bumping go version on branch master [#1446](https://github.com/openshift/assisted-installer/pull/1446)
* [AGENT-1216](https://issues.redhat.com/browse/AGENT-1216): support new HostStage (HostStageCopyingRegistryDataToDisk) [#1384](https://github.com/openshift/assisted-installer/pull/1384)
* [AGENT-1216](https://issues.redhat.com/browse/AGENT-1216): copy registry data to disk in ABI/Appliance flow [#1359](https://github.com/openshift/assisted-installer/pull/1359)
* [MGMT-22292](https://issues.redhat.com/browse/MGMT-22292): Add `url` label [#1375](https://github.com/openshift/assisted-installer/pull/1375)
* [AGENT-1072](https://issues.redhat.com/browse/AGENT-1072): Apply operator manifests from ConfigMap for agent-installer [#1175](https://github.com/openshift/assisted-installer/pull/1175)
* [MGMT-22042](https://issues.redhat.com/browse/MGMT-22042): add cve-automation github app to owners_aliases [#1328](https://github.com/openshift/assisted-installer/pull/1328)
* [MGMT-20756](https://issues.redhat.com/browse/MGMT-20756): assisted installer naive string concatenation for partiti… [#1308](https://github.com/openshift/assisted-installer/pull/1308)
* NO-ISSUE: Update konflux pipelines to use a remote pipeline [#1301](https://github.com/openshift/assisted-installer/pull/1301)
* NO-ISSUE: Update Konflux references [#1299](https://github.com/openshift/assisted-installer/pull/1299)
* [MGMT-21724](https://issues.redhat.com/browse/MGMT-21724): Update Renovate for legacy EL8 Dockerfiles [#1289](https://github.com/openshift/assisted-installer/pull/1289)
* [OCPBUGS-62361](https://issues.redhat.com/browse/OCPBUGS-62361): Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 [#1276](https://github.com/openshift/assisted-installer/pull/1276)
* [OCPBUGS-62398](https://issues.redhat.com/browse/OCPBUGS-62398): Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 [#1277](https://github.com/openshift/assisted-installer/pull/1277)
* NO-ISSUE: Update Konflux references [#1283](https://github.com/openshift/assisted-installer/pull/1283)
* NO-ISSUE: Update Konflux references [#1265](https://github.com/openshift/assisted-installer/pull/1265)
* And 239 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/0f14c3d16cb089b55ca3658038e83bc0bcd01f47...)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/)

* NO-JIRA: Update OWNERS [#56](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/56)
* NO-JIRA: Update OWNERS [#53](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/53)
* [OCPBUGS-23004](https://issues.redhat.com/browse/OCPBUGS-23004): Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master [#37](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/37)
* [OCPBUGS-25563](https://issues.redhat.com/browse/OCPBUGS-25563): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#44](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/44)
* [OCPBUGS-25632](https://issues.redhat.com/browse/OCPBUGS-25632): Add Snyk file to exclude vendor directory on scan [#47](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/47)
* [OCPBUGS-25457](https://issues.redhat.com/browse/OCPBUGS-25457): Bump golang.org/x/net to v0.19.0 [#42](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/42)
* [OCPBUGS-24926](https://issues.redhat.com/browse/OCPBUGS-24926): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#40](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/40)
* [OCPBUGS-24111](https://issues.redhat.com/browse/OCPBUGS-24111): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#39](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/39)
* Update OWNERS [#36](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/36)
* Rebase onto latest upstream version [#35](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/35)
* [OCPBUGS-10120](https://issues.redhat.com/browse/OCPBUGS-10120): Updating ose-alibaba-cloud-controller-manager images to be consistent with ART [#30](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/30)
* Update OWNERS [#29](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/29)
* Update OWNERS [#27](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/27)
* Updating ose-alibaba-cloud-controller-manager images to be consistent with ART [#26](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/26)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/1959de0e3f2c3457c32fd2f545fe5ca65f12cd6c...)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/4688870d3a709eea34fe2bb5d1c62dea2cfd7e91)

* [OCPBUGS-10439](https://issues.redhat.com/browse/OCPBUGS-10439): Sort userTags in Machine and Machineset manifests [#6984](https://github.com/openshift/installer/pull/6984)
* [OCPBUGS-7469](https://issues.redhat.com/browse/OCPBUGS-7469): [release-4.12] GCP XPN Featuregates [#6851](https://github.com/openshift/installer/pull/6851)
* [OCPBUGS-7063](https://issues.redhat.com/browse/OCPBUGS-7063): vSphere - Remove regexs in terraform ova import [#6868](https://github.com/openshift/installer/pull/6868)
* [OCPBUGS-8658](https://issues.redhat.com/browse/OCPBUGS-8658): Pass Capabilites from install-config to cluster [#6947](https://github.com/openshift/installer/pull/6947)
* [Full changelog](https://github.com/openshift/installer/compare/7c2530226516a12c37f10bc14e070f66c0f27930...4688870d3a709eea34fe2bb5d1c62dea2cfd7e91)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/8164b8ba38c35d6c1a41efcc369f8963f612de6c)

* [OCPBUGS-7585](https://issues.redhat.com/browse/OCPBUGS-7585): also use BMH.ConsumerRef for linking to master Machines [#326](https://github.com/openshift/cluster-baremetal-operator/pull/326)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/047391f09c68b3bb259262012693913af50c13a6...8164b8ba38c35d6c1a41efcc369f8963f612de6c)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/efccbb31f95542615c9b7bea9cde36b416b17824)

* [OCPBUGS-7884](https://issues.redhat.com/browse/OCPBUGS-7884): Restart pods if related configuration was changed [#228](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/228)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/83768c8057de19a6da8f58edf6430884e3081050...efccbb31f95542615c9b7bea9cde36b416b17824)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2538b572330d394c71a077ab3d891ae66d82bd4e)

* [OCPBUGS-7830](https://issues.redhat.com/browse/OCPBUGS-7830): increase live/ready timeout and failure thresholds [#1011](https://github.com/openshift/cluster-etcd-operator/pull/1011)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/ef0d9068492c11fc1f944112b542383e4aa5e5fc...2538b572330d394c71a077ab3d891ae66d82bd4e)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/2076f3d0e4fea6fca54028ec7831407173ea81f5)

* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): enable pod security admission for techpreview [#1440](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1440)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e840002d36b0daeccfb040dabc1f37f309b7207b...2076f3d0e4fea6fca54028ec7831407173ea81f5)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b108134de5b1c7ef179fc523ffd62bc5898106a3)

* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): honor feature gates during bootstrapping [#695](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/695)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/73f7ea7014f57cc37d6f2c720d3bcc00c7d4718b...b108134de5b1c7ef179fc523ffd62bc5898106a3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/5ee19a7685b07a595ca62741fdf316d15117c9ef)

* [OCPBUGS-9927](https://issues.redhat.com/browse/OCPBUGS-9927): Enable configuration of node healthz server on ovnkube [#1731](https://github.com/openshift/cluster-network-operator/pull/1731)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6f5e144f260333ad0f70a88a55eab4fc81ecd7a2...5ee19a7685b07a595ca62741fdf316d15117c9ef)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f30edfbebea335f42c1c3e6b49fab06fa0ea028a)

* [OCPBUGS-8304](https://issues.redhat.com/browse/OCPBUGS-8304): Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 [#908](https://github.com/openshift/cluster-version-operator/pull/908)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b24d60e55576e1997d6d450ba9106a80983f1512...f30edfbebea335f42c1c3e6b49fab06fa0ea028a)


### [docker-registry](https://github.com/openshift/image-registry/tree/8e7cde5d6f78d83a5aebe664c93ae927e5cc83ab)

* [OCPBUGS-8491](https://issues.redhat.com/browse/OCPBUGS-8491): bump aws-sdk-go [#362](https://github.com/openshift/image-registry/pull/362)
* [Full changelog](https://github.com/openshift/image-registry/compare/3bf8e25d5694f7a4dbbe7620a1cc2e26d611cf60...8e7cde5d6f78d83a5aebe664c93ae927e5cc83ab)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/33af6aa19cab187fd99d832a20f31a572f57a09f)

* Dockerfile: symlink netcat to nc [#565](https://github.com/openshift/okd-machine-os/pull/565)
* Bump fedora-coreos-config to latest stable [#560](https://github.com/openshift/okd-machine-os/pull/560)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/90105e92d0bb80d642334d9212e77608a03bc2d0...33af6aa19cab187fd99d832a20f31a572f57a09f)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/eab9cc98fe4c002916621ace6cdd623afa519203)

* [OCPBUGS-8705](https://issues.redhat.com/browse/OCPBUGS-8705): Fix mounted volume expansion tests [#1503](https://github.com/openshift/kubernetes/pull/1503)
* [OCPBUGS-7078](https://issues.redhat.com/browse/OCPBUGS-7078): Bump to k8s 1.25.7 [#1496](https://github.com/openshift/kubernetes/pull/1496)
* [Full changelog](https://github.com/openshift/kubernetes/compare/18eadcaadf0be77350013c8911ca953bc2ca3778...eab9cc98fe4c002916621ace6cdd623afa519203)


### [hypershift](https://github.com/openshift/hypershift/tree/84a0ee12e608b70b4dae884da098c056274b498a)

* Force controleplane upgrade always [#2289](https://github.com/openshift/hypershift/pull/2289)
* [OCPBUGS-8370](https://issues.redhat.com/browse/OCPBUGS-8370): Fix cleanup of volumes on cluster deletion [#2253](https://github.com/openshift/hypershift/pull/2253)
* [OCPBUGS-8241](https://issues.redhat.com/browse/OCPBUGS-8241): Add external DNS health condition / release-4.12 [#2206](https://github.com/openshift/hypershift/pull/2206)
* [HOSTEDCP-809](https://issues.redhat.com/browse/HOSTEDCP-809): Clone CA key/cert to TLS key/cert [#2263](https://github.com/openshift/hypershift/pull/2263)
* Add configuration for automatic labeling and label commands [#2255](https://github.com/openshift/hypershift/pull/2255)
* fix(cpo): Delete multus validatingwebhookconfiguration on CNO init [#2251](https://github.com/openshift/hypershift/pull/2251)
* feat(HCCO): Block DNS operator delete until Cluster Version updated [#2242](https://github.com/openshift/hypershift/pull/2242)
* kms addition for pod identity workflow [#2247](https://github.com/openshift/hypershift/pull/2247)
* Add e2e test for hosted cluster behind a proxy [#2199](https://github.com/openshift/hypershift/pull/2199)
* [Full changelog](https://github.com/openshift/hypershift/compare/3f23856e14b444cc67d116a5a97eb6f0e0591469...84a0ee12e608b70b4dae884da098c056274b498a)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/e0f7a3bc39c7941dfb8b03f4c111f98edbe4792f)

* [OCPBUGS-8451](https://issues.redhat.com/browse/OCPBUGS-8451): Rebase to v5.1.2 for OCP 4.12 [#32](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/32)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/2364e6a3835070cdcec29375aa0a3bf296720f64...e0f7a3bc39c7941dfb8b03f4c111f98edbe4792f)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/64b64f9bf0f8f0ab9c5ce98cb49ddacdf0d39ffc)

* [OCPBUGS-7474](https://issues.redhat.com/browse/OCPBUGS-7474): Initialize egress node monitoring struct with previous reachability status [#505](https://github.com/openshift/sdn/pull/505)
* [Full changelog](https://github.com/openshift/sdn/compare/e32a8fa9f58a7f38045af135b207fe6764616e24...64b64f9bf0f8f0ab9c5ce98cb49ddacdf0d39ffc)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/fb26570202ec71abef2c468d8d9d47c9abf84577)

* [OCPBUGS-7882](https://issues.redhat.com/browse/OCPBUGS-7882): Block machine deletion if extra disks are attached [#1120](https://github.com/openshift/machine-api-operator/pull/1120)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/52d4e1b4e709ef1a10b665de4c6d4b5feaf9a021...fb26570202ec71abef2c468d8d9d47c9abf84577)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/e7a5af3faec663f877cc39b582f7ad38120ebd1e)

* [OCPBUGS-10372](https://issues.redhat.com/browse/OCPBUGS-10372): Remove hard requirement for the afterburn from early-running aws-related services [#3613](https://github.com/openshift/machine-config-operator/pull/3613)
* [OCPBUGS-9993](https://issues.redhat.com/browse/OCPBUGS-9993): Revert "daemon: Temporarily copy auth file with more open perms on FCOS" [#3608](https://github.com/openshift/machine-config-operator/pull/3608)
* [OCPBUGS-7445](https://issues.redhat.com/browse/OCPBUGS-7445): configure-ovs: fix mtu-migration cleanup [#3555](https://github.com/openshift/machine-config-operator/pull/3555)
* [OCPBUGS-8261](https://issues.redhat.com/browse/OCPBUGS-8261): [release-4.12] backport cleanupDuplicateMC [#3578](https://github.com/openshift/machine-config-operator/pull/3578)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4099f3c4f4ea9df85a7516a6300a4c6e5504a5cd...e7a5af3faec663f877cc39b582f7ad38120ebd1e)


### [multus-cni](https://github.com/openshift/multus-cni/tree/4819cb9f3a20dacda6069fb9cab82fbe05821dde)

* [OCPBUGS-7792](https://issues.redhat.com/browse/OCPBUGS-7792): Multus sync v3.9.3 to OCP 4.12 [#145](https://github.com/openshift/multus-cni/pull/145)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b34bd0f5ddaf6563b824e849c3819c684e74e567...4819cb9f3a20dacda6069fb9cab82fbe05821dde)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/635ed5cc49f0d9668969a8a78bec91d426b4d26b)

* [OCPBUGS-8717](https://issues.redhat.com/browse/OCPBUGS-8717): Clear metadata.namespace on projects before write. [#358](https://github.com/openshift/openshift-apiserver/pull/358)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/30c5f26d173c7576d396b8d74707de03da266ce2...635ed5cc49f0d9668969a8a78bec91d426b4d26b)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/da42356e194579af8be4c7367ebf250d6e97d78c)

* [OCPBUGS-10318](https://issues.redhat.com/browse/OCPBUGS-10318): [release-4.12] node: add node healthz server for cloud load balancers [#1570](https://github.com/openshift/ovn-kubernetes/pull/1570)
* [OCPBUGS-7346](https://issues.redhat.com/browse/OCPBUGS-7346): [release-4.12] Fully remove dependency on default gateway for services [#1577](https://github.com/openshift/ovn-kubernetes/pull/1577)
* [OCPBUGS-6957](https://issues.redhat.com/browse/OCPBUGS-6957): [release-4.12] Ensure routes are not duplicated [#1503](https://github.com/openshift/ovn-kubernetes/pull/1503)
* [OCPBUGS-8501](https://issues.redhat.com/browse/OCPBUGS-8501), [OCPBUGS-8506](https://issues.redhat.com/browse/OCPBUGS-8506), [OCPBUGS-8508](https://issues.redhat.com/browse/OCPBUGS-8508): [release-4.12] Fix EFW's name truncation logic & make EFW ACLs unique using extIDs [#1559](https://github.com/openshift/ovn-kubernetes/pull/1559)
* [OCPBUGS-7223](https://issues.redhat.com/browse/OCPBUGS-7223): node: don't consider internal masquerade addresses as node IP addresses [#1528](https://github.com/openshift/ovn-kubernetes/pull/1528)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5f8cd83cb3efb1d167f0da085f880377958ea502...da42356e194579af8be4c7367ebf250d6e97d78c)


### [tests](https://github.com/openshift/origin/tree/157761f6c6ab4095b2819fb6caeca23351525849)

* [OCPBUGS-8705](https://issues.redhat.com/browse/OCPBUGS-8705): Bump(openshift/kubernetes): to get fix for resizing flake [#27794](https://github.com/openshift/origin/pull/27794)
* [Full changelog](https://github.com/openshift/origin/compare/76791c0fc048c6d29282748b1bc792fb606f309f...157761f6c6ab4095b2819fb6caeca23351525849)