# 4.12.0-0.okd-2023-04-01-051724

Created: 2023-04-01 07:14:05 +0000 UTC

Image Digest: `sha256:a8272e9992eee6b9c9dfa1b44e7348e5f979c0de96ad60d6235477a1aa0d7897`

Promoted from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-04-01-051724


## Changes from 4.12.0-0.okd-2023-03-05-022504

### Components

* Kubernetes upgraded from 1.25.4 to 1.25.7
* Fedora CoreOS upgraded from 37.20230205.3 to 37.20230303.3


### Rebuilt images without code change

* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [cfb76acd](https://github.com/openshift/machine-api-provider-azure/commit/cfb76acd1429fa8be4925cf15789f1dc62252d7f) `sha256:fd114ce5547460ee4c7d587317661a7c69e545cefe2a060f6ba50d94e36cfb74`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [3bfe36aa](https://github.com/openshift/cluster-capi-operator/commit/3bfe36aa9d1abbdfb11facf86a7ec6510abc390a) `sha256:2c9c2d17ac800ba92f769c1be1023ac7077ffef254f46560cf99dfb9927b9500`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [e9a895af](https://github.com/openshift/cluster-image-registry-operator/commit/e9a895af74906435bea0bb230773a3bc1898abc6) `sha256:063055f9086236c87964aaa01fb76ddccfe9780a9578da2719269de4c2c18dab`
* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [845ae423](https://github.com/openshift/cluster-kube-scheduler-operator/commit/845ae423e831b1cacf0bcae5e6528f1d21b5ddf2) `sha256:c027525c7b208f5e6a253c6ee2328f175171f707d0e7a44d076262e98f170d41`
* [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator) git [87f8994b](https://github.com/openshift/cluster-monitoring-operator/commit/87f8994bfb151b74274363a3daacc5c2ae3880b7) `sha256:d155467d94977932854d6d8045f715653470d44e4316ef73cb0e70366d83b9cd`
* [console-operator](https://github.com/openshift/console-operator) git [bb87c592](https://github.com/openshift/console-operator/commit/bb87c5921246a64a59c1c09336c2ab0423330b4d) `sha256:b38efec351f79595f21f2dfeb448b9dc646d55f413f70f29841810cd59c3721c`
* [coredns](https://github.com/openshift/coredns) git [9aaa7e0a](https://github.com/openshift/coredns/commit/9aaa7e0a86b69bafb9f544a0e5cb1873535a8f6b) `sha256:07111ef8b11cab545d571ca3f416e35c860e25dcee4f7737729de8a80ec104c2`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [ada83dc6](https://github.com/openshift/machine-api-provider-gcp/commit/ada83dc67fc2efad2cc73f89ca3b33fd289e50ba) `sha256:a098684f8165249bb7898d67483adb91a0305b5b06a11b5e51ec7ae1fd1dc5e1`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [92b9be25](https://github.com/openshift/kuryr-kubernetes/commit/92b9be25999aee9c3b225606510c56fd14378bdf) `sha256:5cda4cd8c1e6bab1fab6ed319b6206d2d6e3d4d2e2054acb4b944446d6049a13`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [92b9be25](https://github.com/openshift/kuryr-kubernetes/commit/92b9be25999aee9c3b225606510c56fd14378bdf) `sha256:4bbd64a481cd6105db3da0c255b4c6302a8ff01f2d2cb888cb6703144bb7dfdc`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/)

* [MGMT-20464](https://issues.redhat.com/browse/MGMT-20464): Fix NFD detection of NVIDIA GPUs [#7696](https://github.com/openshift/assisted-service/pull/7696)
* [MGMT-20324](https://issues.redhat.com/browse/MGMT-20324): Fix day2 add hosts with P/Z CPU architectures [#7527](https://github.com/openshift/assisted-service/pull/7527)
* [MGMT-20207](https://issues.redhat.com/browse/MGMT-20207): avoid adding system CA bundle to AdditionalTrustBundle [#7448](https://github.com/openshift/assisted-service/pull/7448)
* [MGMT-20009](https://issues.redhat.com/browse/MGMT-20009): Change OCP 4.19 to the default version [#7506](https://github.com/openshift/assisted-service/pull/7506)
* NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator [#7491](https://github.com/openshift/assisted-service/pull/7491)
* NO-ISSUE: fixing late binding [#7070](https://github.com/openshift/assisted-service/pull/7070)
* [Full changelog](https://github.com/openshift/assisted-service/compare/b03e2db9f58b8bc2fdcb339659b47973688436e3...)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/bb9c2fee04cd5bd1736fb1590db728643ba27ea1)

* [OCPBUGS-7149](https://issues.redhat.com/browse/OCPBUGS-7149): IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) [#631](https://github.com/openshift/assisted-installer/pull/631)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/0f14c3d16cb089b55ca3658038e83bc0bcd01f47...bb9c2fee04cd5bd1736fb1590db728643ba27ea1)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/a7aa60002fc11c7320dd17c1681feb9956dd288f)

* [MGMT-13946](https://issues.redhat.com/browse/MGMT-13946): Ignore Proliant Gen 11 serial (#524) [#524](https://github.com/openshift/assisted-installer-agent/pull/524)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/d0c1b7dc02a288b7ed9a8a31ed4a04f6dbbda8ce...a7aa60002fc11c7320dd17c1681feb9956dd288f)


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/)

* NO-JIRA: Update OWNERS [#53](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/53)
* [OCPBUGS-23004](https://issues.redhat.com/browse/OCPBUGS-23004): Merge https://github.com/kubernetes/cloud-provider-alibaba-cloud:master (8244569) into master [#37](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/37)
* [OCPBUGS-25563](https://issues.redhat.com/browse/OCPBUGS-25563): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#44](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/44)
* [OCPBUGS-25632](https://issues.redhat.com/browse/OCPBUGS-25632): Add Snyk file to exclude vendor directory on scan [#47](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/47)
* [OCPBUGS-25457](https://issues.redhat.com/browse/OCPBUGS-25457): Bump golang.org/x/net to v0.19.0 [#42](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/42)
* [OCPBUGS-24926](https://issues.redhat.com/browse/OCPBUGS-24926): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#40](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/40)
* [OCPBUGS-24111](https://issues.redhat.com/browse/OCPBUGS-24111): Updating ose-alibaba-cloud-controller-manager-container image to be consistent with ART [#39](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/39)
* Update OWNERS [#36](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/36)
* Rebase onto latest upstream version [#35](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/35)
* [OCPBUGS-10120](https://issues.redhat.com/browse/OCPBUGS-10120): Updating ose-alibaba-cloud-controller-manager images to be consistent with ART [#30](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/30)
* Update OWNERS [#29](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/29)
* Update OWNERS [#27](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/27)
* Updating ose-alibaba-cloud-controller-manager images to be consistent with ART [#26](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/26)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/1959de0e3f2c3457c32fd2f545fe5ca65f12cd6c...)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/c4e4dc8621610a11795bc120956e89440f9fc477)

* [OCPBUGS-8384](https://issues.redhat.com/browse/OCPBUGS-8384): Specify filename for default registries.conf [#6941](https://github.com/openshift/installer/pull/6941)
* [OCPBUGS-10904](https://issues.redhat.com/browse/OCPBUGS-10904): IBMCloud: Fix SSH Private bootstrap [#7028](https://github.com/openshift/installer/pull/7028)
* [OCPBUGS-10905](https://issues.redhat.com/browse/OCPBUGS-10905): IBMCloud set dnsrecords offset [#7029](https://github.com/openshift/installer/pull/7029)
* [OCPBUGS-10740](https://issues.redhat.com/browse/OCPBUGS-10740): bump RHCOS 4.12 bootimage metadata [#7019](https://github.com/openshift/installer/pull/7019)
* [OCPBUGS-7481](https://issues.redhat.com/browse/OCPBUGS-7481): Fix file check for loading openshift manifests [#6907](https://github.com/openshift/installer/pull/6907)
* [OCPBUGS-10497](https://issues.redhat.com/browse/OCPBUGS-10497): [release-4.12] aws: bump aws-sdk-go version [#6985](https://github.com/openshift/installer/pull/6985)
* [OCPBUGS-10439](https://issues.redhat.com/browse/OCPBUGS-10439): Sort userTags in Machine and Machineset manifests [#6984](https://github.com/openshift/installer/pull/6984)
* [OCPBUGS-7469](https://issues.redhat.com/browse/OCPBUGS-7469): [release-4.12] GCP XPN Featuregates [#6851](https://github.com/openshift/installer/pull/6851)
* [OCPBUGS-7063](https://issues.redhat.com/browse/OCPBUGS-7063): vSphere - Remove regexs in terraform ova import [#6868](https://github.com/openshift/installer/pull/6868)
* [OCPBUGS-8658](https://issues.redhat.com/browse/OCPBUGS-8658): Pass Capabilites from install-config to cluster [#6947](https://github.com/openshift/installer/pull/6947)
* [Full changelog](https://github.com/openshift/installer/compare/7c2530226516a12c37f10bc14e070f66c0f27930...c4e4dc8621610a11795bc120956e89440f9fc477)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/5f47d131a86964aa53f3b6a46a1c49e44e2ac9c0)

* [OCPBUGS-9955](https://issues.redhat.com/browse/OCPBUGS-9955): allow namespace to continue with terminating when deprovisioning a bmh [#258](https://github.com/openshift/baremetal-operator/pull/258)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a5af4fc968cbfb7702c1422950c00168bd8d2564...5f47d131a86964aa53f3b6a46a1c49e44e2ac9c0)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/31aa3e89a926f81aa0af30320ffcb71acadf3015)

* [OCPBUGS-10774](https://issues.redhat.com/browse/OCPBUGS-10774): bump repo sclorg/s2i-ruby-container location for newapp test [#1382](https://github.com/openshift/oc/pull/1382)
* [Full changelog](https://github.com/openshift/oc/compare/846602e50eb29ecdc7441ebed2fc846048959eaa...31aa3e89a926f81aa0af30320ffcb71acadf3015)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/8164b8ba38c35d6c1a41efcc369f8963f612de6c)

* [OCPBUGS-7585](https://issues.redhat.com/browse/OCPBUGS-7585): also use BMH.ConsumerRef for linking to master Machines [#326](https://github.com/openshift/cluster-baremetal-operator/pull/326)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/047391f09c68b3bb259262012693913af50c13a6...8164b8ba38c35d6c1a41efcc369f8963f612de6c)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/efccbb31f95542615c9b7bea9cde36b416b17824)

* [OCPBUGS-7884](https://issues.redhat.com/browse/OCPBUGS-7884): Restart pods if related configuration was changed [#228](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/228)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/83768c8057de19a6da8f58edf6430884e3081050...efccbb31f95542615c9b7bea9cde36b416b17824)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2538b572330d394c71a077ab3d891ae66d82bd4e)

* [OCPBUGS-7830](https://issues.redhat.com/browse/OCPBUGS-7830): increase live/ready timeout and failure thresholds [#1011](https://github.com/openshift/cluster-etcd-operator/pull/1011)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/ef0d9068492c11fc1f944112b542383e4aa5e5fc...2538b572330d394c71a077ab3d891ae66d82bd4e)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/2076f3d0e4fea6fca54028ec7831407173ea81f5)

* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): enable pod security admission for techpreview [#1440](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1440)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e840002d36b0daeccfb040dabc1f37f309b7207b...2076f3d0e4fea6fca54028ec7831407173ea81f5)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/b108134de5b1c7ef179fc523ffd62bc5898106a3)

* [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): honor feature gates during bootstrapping [#695](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/695)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/73f7ea7014f57cc37d6f2c720d3bcc00c7d4718b...b108134de5b1c7ef179fc523ffd62bc5898106a3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6878a2cec16309dcd96aaf03ae0d7db8f37d3cde)

* [OCPBUGS-11059](https://issues.redhat.com/browse/OCPBUGS-11059): Fix info log formatting [#1659](https://github.com/openshift/cluster-network-operator/pull/1659)
* [OCPBUGS-10319](https://issues.redhat.com/browse/OCPBUGS-10319): HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO [#1738](https://github.com/openshift/cluster-network-operator/pull/1738)
* [OCPBUGS-8014](https://issues.redhat.com/browse/OCPBUGS-8014): add default noProxy config for Azure [#1722](https://github.com/openshift/cluster-network-operator/pull/1722)
* [OCPBUGS-9927](https://issues.redhat.com/browse/OCPBUGS-9927): Enable configuration of node healthz server on ovnkube [#1731](https://github.com/openshift/cluster-network-operator/pull/1731)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6f5e144f260333ad0f70a88a55eab4fc81ecd7a2...6878a2cec16309dcd96aaf03ae0d7db8f37d3cde)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/6a815f9b4bcb50e01c1bed2ec945553d7e033a3f)

* [OCPBUGS-10918](https://issues.redhat.com/browse/OCPBUGS-10918): update Jenkins to v4.12 [#492](https://github.com/openshift/cluster-samples-operator/pull/492)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/ab23d0e04237ffc8cf69cbf9b73f8bc2eee190bb...6a815f9b4bcb50e01c1bed2ec945553d7e033a3f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/2d374a11249588e92be7e46406240cf45b55e07a)

* [OCPBUGS-8374](https://issues.redhat.com/browse/OCPBUGS-8374): Add UID to CSO Pod to be able to run with custom SCCs [#347](https://github.com/openshift/cluster-storage-operator/pull/347)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/b29bac7a510082ffd99534ba84bcd035079741ba...2d374a11249588e92be7e46406240cf45b55e07a)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/a5c40317056e4419193f04962c9ca3273eb2408b)

* [OCPBUGS-10565](https://issues.redhat.com/browse/OCPBUGS-10565): RetrievePayload: Improve timeouts and cover behavior with tests [#914](https://github.com/openshift/cluster-version-operator/pull/914)
* [OCPBUGS-10514](https://issues.redhat.com/browse/OCPBUGS-10514): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#913](https://github.com/openshift/cluster-version-operator/pull/913)
* [OCPBUGS-8304](https://issues.redhat.com/browse/OCPBUGS-8304): Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 [#908](https://github.com/openshift/cluster-version-operator/pull/908)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/b24d60e55576e1997d6d450ba9106a80983f1512...a5c40317056e4419193f04962c9ca3273eb2408b)


### [console](https://github.com/openshift/console/tree/72e9e3df9cb8890d2800330d545df756f61f9597)

* [OCPBUGS-7333](https://issues.redhat.com/browse/OCPBUGS-7333): Add missing SDK extensions descriptions [#12556](https://github.com/openshift/console/pull/12556)
* [OCPBUGS-7951](https://issues.redhat.com/browse/OCPBUGS-7951): delete application should delete all part-of resources [#12604](https://github.com/openshift/console/pull/12604)
* [OCPBUGS-6036](https://issues.redhat.com/browse/OCPBUGS-6036): Project dropdown order is not as smart as project list page order [#12447](https://github.com/openshift/console/pull/12447)
* [OCPBUGS-7800](https://issues.redhat.com/browse/OCPBUGS-7800): add subject kind dropdown in the project access form [#12586](https://github.com/openshift/console/pull/12586)
* [OCPBUGS-8339](https://issues.redhat.com/browse/OCPBUGS-8339): disable operator-install-single-namespace.spec.ts until… [#12624](https://github.com/openshift/console/pull/12624)
* [Full changelog](https://github.com/openshift/console/compare/59931924fbaa391ee6d517b2f7574c69760d9f9d...72e9e3df9cb8890d2800330d545df756f61f9597)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/af25a1f4319ee69d0852f10ecbd330450609f514)

* [OCPBUGS-10556](https://issues.redhat.com/browse/OCPBUGS-10556): Bump go.mongodb.org/mongo-driver to v1.5.1 [#176](https://github.com/openshift/csi-driver-manila-operator/pull/176)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/2c0d3b1c56f485cf6f4ad2787753545975326e6d...af25a1f4319ee69d0852f10ecbd330450609f514)


### [docker-registry](https://github.com/openshift/image-registry/tree/95e39bf0e31a5af9ebcee698a69a4996a39e221a)

* [OCPBUGS-10496](https://issues.redhat.com/browse/OCPBUGS-10496): bump docker-distribution [#365](https://github.com/openshift/image-registry/pull/365)
* [OCPBUGS-8491](https://issues.redhat.com/browse/OCPBUGS-8491): bump aws-sdk-go [#362](https://github.com/openshift/image-registry/pull/362)
* [Full changelog](https://github.com/openshift/image-registry/compare/3bf8e25d5694f7a4dbbe7620a1cc2e26d611cf60...95e39bf0e31a5af9ebcee698a69a4996a39e221a)


### [etcd](https://github.com/openshift/etcd/tree/c1d76ffd4b4cf0a0d2a6056a505fbef0b187c027)

* Update owners [#185](https://github.com/openshift/etcd/pull/185)
* Updating ose-etcd images to be consistent with ART [#153](https://github.com/openshift/etcd/pull/153)
* [Full changelog](https://github.com/openshift/etcd/compare/978cfefd2f21c4ec1ac84ed95130cbff510fbe1b...c1d76ffd4b4cf0a0d2a6056a505fbef0b187c027)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/1de40e554a52787e52e4416fd423660b9d709980)

* Bump fedora-coreos to latest stable [#569](https://github.com/openshift/okd-machine-os/pull/569)
* Dockerfile: symlink netcat to nc [#565](https://github.com/openshift/okd-machine-os/pull/565)
* Bump fedora-coreos-config to latest stable [#560](https://github.com/openshift/okd-machine-os/pull/560)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/90105e92d0bb80d642334d9212e77608a03bc2d0...1de40e554a52787e52e4416fd423660b9d709980)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/eab9cc98fe4c002916621ace6cdd623afa519203)

* [OCPBUGS-8705](https://issues.redhat.com/browse/OCPBUGS-8705): Fix mounted volume expansion tests [#1503](https://github.com/openshift/kubernetes/pull/1503)
* [OCPBUGS-7078](https://issues.redhat.com/browse/OCPBUGS-7078): Bump to k8s 1.25.7 [#1496](https://github.com/openshift/kubernetes/pull/1496)
* [Full changelog](https://github.com/openshift/kubernetes/compare/18eadcaadf0be77350013c8911ca953bc2ca3778...eab9cc98fe4c002916621ace6cdd623afa519203)


### [hypershift](https://github.com/openshift/hypershift/tree/d7a9bda8bb954a91ab877e7edc6be31f9eeb351b)

* [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): Fix ValidAWSKMSConfig condition [#2362](https://github.com/openshift/hypershift/pull/2362)
* [OCPBUGS-11056](https://issues.redhat.com/browse/OCPBUGS-11056): fix external APIServer address selection based on endpointAccess [#2350](https://github.com/openshift/hypershift/pull/2350)
* OCPBUGS-10823 ensure well known public domains do not get proxied on image imports [#2351](https://github.com/openshift/hypershift/pull/2351)
* [SDA-8707](https://issues.redhat.com/browse/SDA-8707): No more specifying the scrape interval at servicemonitors & podmonitors level [#2356](https://github.com/openshift/hypershift/pull/2356)
* [HOSTEDCP-900](https://issues.redhat.com/browse/HOSTEDCP-900): Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field [#2285](https://github.com/openshift/hypershift/pull/2285)
* [OCPBUGS-10504](https://issues.redhat.com/browse/OCPBUGS-10504): Deletion of the VPCEnpoint on conflicting service names [#2310](https://github.com/openshift/hypershift/pull/2310)
* [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): [release-4.12] Validate etcd KMS config [#2273](https://github.com/openshift/hypershift/pull/2273)
* [HOSTEDCP-801](https://issues.redhat.com/browse/HOSTEDCP-801): [release-4.12] Expose external DNS for private cluster endpoints [#2314](https://github.com/openshift/hypershift/pull/2314)
* [HOSTEDCP-839](https://issues.redhat.com/browse/HOSTEDCP-839): Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver [#2297](https://github.com/openshift/hypershift/pull/2297)
* [OCPBUGS-10587](https://issues.redhat.com/browse/OCPBUGS-10587): Use appropriate serving certificate for OAuth [#2295](https://github.com/openshift/hypershift/pull/2295)
* [OSD-15099](https://issues.redhat.com/browse/OSD-15099): Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed [#2274](https://github.com/openshift/hypershift/pull/2274)
* Add PodMonitor for ingress-operator pods in HCP namespaces [#2275](https://github.com/openshift/hypershift/pull/2275)
* [OCPBUGS-8334](https://issues.redhat.com/browse/OCPBUGS-8334): [release-4.12] Update the pull secret source for ignition payload [#2268](https://github.com/openshift/hypershift/pull/2268)
* Force controleplane upgrade always [#2289](https://github.com/openshift/hypershift/pull/2289)
* [OCPBUGS-8370](https://issues.redhat.com/browse/OCPBUGS-8370): Fix cleanup of volumes on cluster deletion [#2253](https://github.com/openshift/hypershift/pull/2253)
* [OCPBUGS-8241](https://issues.redhat.com/browse/OCPBUGS-8241): Add external DNS health condition / release-4.12 [#2206](https://github.com/openshift/hypershift/pull/2206)
* [HOSTEDCP-809](https://issues.redhat.com/browse/HOSTEDCP-809): Clone CA key/cert to TLS key/cert [#2263](https://github.com/openshift/hypershift/pull/2263)
* Add configuration for automatic labeling and label commands [#2255](https://github.com/openshift/hypershift/pull/2255)
* fix(cpo): Delete multus validatingwebhookconfiguration on CNO init [#2251](https://github.com/openshift/hypershift/pull/2251)
* feat(HCCO): Block DNS operator delete until Cluster Version updated [#2242](https://github.com/openshift/hypershift/pull/2242)
* kms addition for pod identity workflow [#2247](https://github.com/openshift/hypershift/pull/2247)
* Add e2e test for hosted cluster behind a proxy [#2199](https://github.com/openshift/hypershift/pull/2199)
* [Full changelog](https://github.com/openshift/hypershift/compare/3f23856e14b444cc67d116a5a97eb6f0e0591469...d7a9bda8bb954a91ab877e7edc6be31f9eeb351b)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/e0f7a3bc39c7941dfb8b03f4c111f98edbe4792f)

* [OCPBUGS-8451](https://issues.redhat.com/browse/OCPBUGS-8451): Rebase to v5.1.2 for OCP 4.12 [#32](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/32)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/2364e6a3835070cdcec29375aa0a3bf296720f64...e0f7a3bc39c7941dfb8b03f4c111f98edbe4792f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/4429a619890f9852e902a337dd571fe8a41f9d20)

* [OCPBUGS-10531](https://issues.redhat.com/browse/OCPBUGS-10531): service_accounts.go Marshal fix (#754) [#754](https://github.com/openshift/insights-operator/pull/754)
* [Full changelog](https://github.com/openshift/insights-operator/compare/c57da131e725a9b08ea4e8e90e7c3b1696524b2a...4429a619890f9852e902a337dd571fe8a41f9d20)


### [ironic](https://github.com/openshift/ironic-image/tree/5da16428e35519afe7fd68111474cd579ac66392)

* [OCPBUGS-7566](https://issues.redhat.com/browse/OCPBUGS-7566): Bump werkzeug 4.12 [#352](https://github.com/openshift/ironic-image/pull/352)
* [Full changelog](https://github.com/openshift/ironic-image/compare/27695b69851b0687e17b4325e364792026282d9f...5da16428e35519afe7fd68111474cd579ac66392)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/fb8e06532ecff1b15d19b33e0783001e5488025d)

* [OCPBUGS-10805](https://issues.redhat.com/browse/OCPBUGS-10805): Fix race in Egress IP Tracker start [#521](https://github.com/openshift/sdn/pull/521)
* [OCPBUGS-7474](https://issues.redhat.com/browse/OCPBUGS-7474): Initialize egress node monitoring struct with previous reachability status [#505](https://github.com/openshift/sdn/pull/505)
* [Full changelog](https://github.com/openshift/sdn/compare/e32a8fa9f58a7f38045af135b207fe6764616e24...fb8e06532ecff1b15d19b33e0783001e5488025d)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/fb26570202ec71abef2c468d8d9d47c9abf84577)

* [OCPBUGS-7882](https://issues.redhat.com/browse/OCPBUGS-7882): Block machine deletion if extra disks are attached [#1120](https://github.com/openshift/machine-api-operator/pull/1120)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/52d4e1b4e709ef1a10b665de4c6d4b5feaf9a021...fb26570202ec71abef2c468d8d9d47c9abf84577)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/52fe26136643a946ff1dd1307012cbdef31ebf97)

* [OCPBUGS-7167](https://issues.redhat.com/browse/OCPBUGS-7167): Avoid 'too restrictive' SCC problems by being more explicit [#3542](https://github.com/openshift/machine-config-operator/pull/3542)
* [OCPBUGS-10505](https://issues.redhat.com/browse/OCPBUGS-10505): daemon: Drop duplicate `--authfile` used in `run` [#3617](https://github.com/openshift/machine-config-operator/pull/3617)
* [OCPBUGS-10372](https://issues.redhat.com/browse/OCPBUGS-10372): Remove hard requirement for the afterburn from early-running aws-related services [#3613](https://github.com/openshift/machine-config-operator/pull/3613)
* [OCPBUGS-9993](https://issues.redhat.com/browse/OCPBUGS-9993): Revert "daemon: Temporarily copy auth file with more open perms on FCOS" [#3608](https://github.com/openshift/machine-config-operator/pull/3608)
* [OCPBUGS-7445](https://issues.redhat.com/browse/OCPBUGS-7445): configure-ovs: fix mtu-migration cleanup [#3555](https://github.com/openshift/machine-config-operator/pull/3555)
* [OCPBUGS-8261](https://issues.redhat.com/browse/OCPBUGS-8261): [release-4.12] backport cleanupDuplicateMC [#3578](https://github.com/openshift/machine-config-operator/pull/3578)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/4099f3c4f4ea9df85a7516a6300a4c6e5504a5cd...52fe26136643a946ff1dd1307012cbdef31ebf97)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/5bd752a1dfe37d5894cd59b66aff6fe4a6a64cfc)

* Updating ose-multus-admission-controller images to be consistent with ART [#61](https://github.com/openshift/multus-admission-controller/pull/61)
* [OCPBUGS-10506](https://issues.redhat.com/browse/OCPBUGS-10506): Client golang [backport 4.12] [#59](https://github.com/openshift/multus-admission-controller/pull/59)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d9b6b11b817058b84056c93d5089f55ff815f271...5bd752a1dfe37d5894cd59b66aff6fe4a6a64cfc)


### [multus-cni](https://github.com/openshift/multus-cni/tree/d59f94da5e080177e3a3f8c98045fd03cd74ed8d)

* [OCPBUGS-10535](https://issues.redhat.com/browse/OCPBUGS-10535): Multus sync Mar-20-2023 to OCP 4.12 [#149](https://github.com/openshift/multus-cni/pull/149)
* [OCPBUGS-7792](https://issues.redhat.com/browse/OCPBUGS-7792): Multus sync v3.9.3 to OCP 4.12 [#145](https://github.com/openshift/multus-cni/pull/145)
* [Full changelog](https://github.com/openshift/multus-cni/compare/b34bd0f5ddaf6563b824e849c3819c684e74e567...d59f94da5e080177e3a3f8c98045fd03cd74ed8d)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/7635353ed12fdcb725855b1d4165cfec8dc10e16)

* [OCPBUGS-863](https://issues.redhat.com/browse/OCPBUGS-863): Add skip pruning flag and logic  (#591) [#591](https://github.com/openshift/oc-mirror/pull/591)
* Bugfix for destination registry nested paths length (#590) [#590](https://github.com/openshift/oc-mirror/pull/590)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/3d517407dcbc46ededd7323c7e8f6d6a45efc649...7635353ed12fdcb725855b1d4165cfec8dc10e16)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/635ed5cc49f0d9668969a8a78bec91d426b4d26b)

* [OCPBUGS-8717](https://issues.redhat.com/browse/OCPBUGS-8717): Clear metadata.namespace on projects before write. [#358](https://github.com/openshift/openshift-apiserver/pull/358)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/30c5f26d173c7576d396b8d74707de03da266ce2...635ed5cc49f0d9668969a8a78bec91d426b4d26b)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/c6d1737cc8b0cc3e27823691d5cc26b1478b9169)

* [OCPBUGS-10603](https://issues.redhat.com/browse/OCPBUGS-10603): machineset_controller: Stop caching clouds credentials [#65](https://github.com/openshift/machine-api-provider-openstack/pull/65)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/9176d8600a10d34527992d462f4006178d4bfcf7...c6d1737cc8b0cc3e27823691d5cc26b1478b9169)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/dd3cc9cbf5ccc16441f427b2d1386d6ca430f82f)

* [OCPBUGS-7650](https://issues.redhat.com/browse/OCPBUGS-7650): Catalog Pod Startup Probe Timeout [#450](https://github.com/openshift/operator-framework-olm/pull/450)
* Updating operator-registry images to be consistent with ART [#397](https://github.com/openshift/operator-framework-olm/pull/397)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/581908833514ca61153dfbe7b5d29be4fb8d8f8c...dd3cc9cbf5ccc16441f427b2d1386d6ca430f82f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/ffce71cb9cc045517288ed0f28a5d25c059d2438)

* [OCPBUGS-10947](https://issues.redhat.com/browse/OCPBUGS-10947): [release-4.12] Egress firewall fix retry [#1610](https://github.com/openshift/ovn-kubernetes/pull/1610)
* [OCPBUGS-10314](https://issues.redhat.com/browse/OCPBUGS-10314): [release-4.12] Handle Completed pods deletion [#1581](https://github.com/openshift/ovn-kubernetes/pull/1581)
* Updating ovn-kubernetes-microshift images to be consistent with ART [#1288](https://github.com/openshift/ovn-kubernetes/pull/1288)
* [OCPBUGS-10632](https://issues.redhat.com/browse/OCPBUGS-10632): Check the "Serving" field for endpoints [#1569](https://github.com/openshift/ovn-kubernetes/pull/1569)
* [OCPBUGS-6034](https://issues.redhat.com/browse/OCPBUGS-6034): Update egress node assignability on every egress node update [#1483](https://github.com/openshift/ovn-kubernetes/pull/1483)
* [OCPBUGS-7732](https://issues.redhat.com/browse/OCPBUGS-7732): Fix leak in service controller cache [#1545](https://github.com/openshift/ovn-kubernetes/pull/1545)
* [OCPBUGS-10490](https://issues.redhat.com/browse/OCPBUGS-10490): [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go [#1595](https://github.com/openshift/ovn-kubernetes/pull/1595)
* [OCPBUGS-10318](https://issues.redhat.com/browse/OCPBUGS-10318): [release-4.12] node: add node healthz server for cloud load balancers [#1570](https://github.com/openshift/ovn-kubernetes/pull/1570)
* [OCPBUGS-7346](https://issues.redhat.com/browse/OCPBUGS-7346): [release-4.12] Fully remove dependency on default gateway for services [#1577](https://github.com/openshift/ovn-kubernetes/pull/1577)
* [OCPBUGS-6957](https://issues.redhat.com/browse/OCPBUGS-6957): [release-4.12] Ensure routes are not duplicated [#1503](https://github.com/openshift/ovn-kubernetes/pull/1503)
* [OCPBUGS-8501](https://issues.redhat.com/browse/OCPBUGS-8501), [OCPBUGS-8506](https://issues.redhat.com/browse/OCPBUGS-8506), [OCPBUGS-8508](https://issues.redhat.com/browse/OCPBUGS-8508): [release-4.12] Fix EFW's name truncation logic & make EFW ACLs unique using extIDs [#1559](https://github.com/openshift/ovn-kubernetes/pull/1559)
* [OCPBUGS-7223](https://issues.redhat.com/browse/OCPBUGS-7223): node: don't consider internal masquerade addresses as node IP addresses [#1528](https://github.com/openshift/ovn-kubernetes/pull/1528)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5f8cd83cb3efb1d167f0da085f880377958ea502...ffce71cb9cc045517288ed0f28a5d25c059d2438)


### [tests](https://github.com/openshift/origin/tree/157761f6c6ab4095b2819fb6caeca23351525849)

* [OCPBUGS-8705](https://issues.redhat.com/browse/OCPBUGS-8705): Bump(openshift/kubernetes): to get fix for resizing flake [#27794](https://github.com/openshift/origin/pull/27794)
* [Full changelog](https://github.com/openshift/origin/compare/76791c0fc048c6d29282748b1bc792fb606f309f...157761f6c6ab4095b2819fb6caeca23351525849)