diff --git a/authorization/v1/generated.proto b/authorization/v1/generated.proto
index 4be3f6c762e..774a96b8280 100644
--- a/authorization/v1/generated.proto
+++ b/authorization/v1/generated.proto
@@ -372,6 +372,7 @@ message RoleBindingList {
 // +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/470
 // +openshift:file-pattern=cvoRunLevel=0000_03,operatorName=config-operator,operatorOrdering=01
 // +openshift:compatibility-gen:level=1
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 message RoleBindingRestriction {
   // metadata is the standard object's metadata.
   // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
diff --git a/authorization/v1/types.go b/authorization/v1/types.go
index 11a71e65dd9..e26eaeb15c5 100644
--- a/authorization/v1/types.go
+++ b/authorization/v1/types.go
@@ -537,6 +537,7 @@ type ClusterRoleList struct {
 // +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/470
 // +openshift:file-pattern=cvoRunLevel=0000_03,operatorName=config-operator,operatorOrdering=01
 // +openshift:compatibility-gen:level=1
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type RoleBindingRestriction struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/authorization/v1/zz_generated.crd-manifests/0000_03_config-operator_01_rolebindingrestrictions.crd.yaml b/authorization/v1/zz_generated.crd-manifests/0000_03_config-operator_01_rolebindingrestrictions.crd.yaml
index ec31e04ba19..d1c738989ba 100644
--- a/authorization/v1/zz_generated.crd-manifests/0000_03_config-operator_01_rolebindingrestrictions.crd.yaml
+++ b/authorization/v1/zz_generated.crd-manifests/0000_03_config-operator_01_rolebindingrestrictions.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: rolebindingrestrictions.authorization.openshift.io
 spec:
   group: authorization.openshift.io
diff --git a/authorization/v1/zz_generated.featuregated-crd-manifests.yaml b/authorization/v1/zz_generated.featuregated-crd-manifests.yaml
index 4756252b9c1..c708c0fa021 100644
--- a/authorization/v1/zz_generated.featuregated-crd-manifests.yaml
+++ b/authorization/v1/zz_generated.featuregated-crd-manifests.yaml
@@ -1,5 +1,6 @@
 rolebindingrestrictions.authorization.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: rolebindingrestrictions.authorization.openshift.io
   Capability: ""
diff --git a/authorization/v1/zz_generated.featuregated-crd-manifests/rolebindingrestrictions.authorization.openshift.io/AAA_ungated.yaml b/authorization/v1/zz_generated.featuregated-crd-manifests/rolebindingrestrictions.authorization.openshift.io/AAA_ungated.yaml
index 08939be6b96..f9a5d301f4e 100644
--- a/authorization/v1/zz_generated.featuregated-crd-manifests/rolebindingrestrictions.authorization.openshift.io/AAA_ungated.yaml
+++ b/authorization/v1/zz_generated.featuregated-crd-manifests/rolebindingrestrictions.authorization.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: rolebindingrestrictions.authorization.openshift.io
 spec:
   group: authorization.openshift.io
diff --git a/config/v1/types_apiserver.go b/config/v1/types_apiserver.go
index bdae466892a..d815556d28c 100644
--- a/config/v1/types_apiserver.go
+++ b/config/v1/types_apiserver.go
@@ -19,6 +19,7 @@ import (
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=apiservers,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type APIServer struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_authentication.go b/config/v1/types_authentication.go
index b3dfa61b51b..f6f0c12a3be 100644
--- a/config/v1/types_authentication.go
+++ b/config/v1/types_authentication.go
@@ -17,6 +17,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=authentications,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Authentication struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_console.go b/config/v1/types_console.go
index 36b1696af98..e8f197b3447 100644
--- a/config/v1/types_console.go
+++ b/config/v1/types_console.go
@@ -19,6 +19,7 @@ import (
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=consoles,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Console struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_dns.go b/config/v1/types_dns.go
index 1875c9cddf2..5daa5d78d26 100644
--- a/config/v1/types_dns.go
+++ b/config/v1/types_dns.go
@@ -15,6 +15,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=dnses,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type DNS struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_feature.go b/config/v1/types_feature.go
index 1e031719615..2769ba35aaa 100644
--- a/config/v1/types_feature.go
+++ b/config/v1/types_feature.go
@@ -17,6 +17,7 @@ import (
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=featuregates,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type FeatureGate struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_image.go b/config/v1/types_image.go
index 74511f86402..a344086c07b 100644
--- a/config/v1/types_image.go
+++ b/config/v1/types_image.go
@@ -20,6 +20,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=images,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Image struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_image_content_policy.go b/config/v1/types_image_content_policy.go
index f2faf1996d0..74df4027f91 100644
--- a/config/v1/types_image_content_policy.go
+++ b/config/v1/types_image_content_policy.go
@@ -16,6 +16,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=imagecontentpolicies,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type ImageContentPolicy struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_image_digest_mirror_set.go b/config/v1/types_image_digest_mirror_set.go
index 8fa38f223b6..43d748c0c32 100644
--- a/config/v1/types_image_digest_mirror_set.go
+++ b/config/v1/types_image_digest_mirror_set.go
@@ -16,6 +16,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=imagedigestmirrorsets,scope=Cluster,shortName=idms
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type ImageDigestMirrorSet struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_image_tag_mirror_set.go b/config/v1/types_image_tag_mirror_set.go
index d9627b78cc0..ca8d35515e9 100644
--- a/config/v1/types_image_tag_mirror_set.go
+++ b/config/v1/types_image_tag_mirror_set.go
@@ -16,6 +16,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=imagetagmirrorsets,scope=Cluster,shortName=itms
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type ImageTagMirrorSet struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_infrastructure.go b/config/v1/types_infrastructure.go
index b0cba8ddf8a..8e50008eaa5 100644
--- a/config/v1/types_infrastructure.go
+++ b/config/v1/types_infrastructure.go
@@ -18,6 +18,7 @@ import (
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=infrastructures,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Infrastructure struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_ingress.go b/config/v1/types_ingress.go
index e58ad7f00b7..302913a16f9 100644
--- a/config/v1/types_ingress.go
+++ b/config/v1/types_ingress.go
@@ -18,6 +18,7 @@ import (
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=ingresses,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Ingress struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_network.go b/config/v1/types_network.go
index 6656849a7b6..211d5c0886d 100644
--- a/config/v1/types_network.go
+++ b/config/v1/types_network.go
@@ -18,6 +18,7 @@ import (
 // +openshift:file-pattern=cvoRunLevel=0000_10,operatorName=config-operator,operatorOrdering=01
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=networks,scope=Cluster
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Network struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_node.go b/config/v1/types_node.go
index 3dd31f39ad3..8bf099bd5c2 100644
--- a/config/v1/types_node.go
+++ b/config/v1/types_node.go
@@ -19,6 +19,7 @@ import (
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=nodes,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Node struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_oauth.go b/config/v1/types_oauth.go
index 6654479dc81..dce08a17f54 100644
--- a/config/v1/types_oauth.go
+++ b/config/v1/types_oauth.go
@@ -19,6 +19,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=oauths,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type OAuth struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_project.go b/config/v1/types_project.go
index 8d6d614b67c..78fd3f41a0d 100644
--- a/config/v1/types_project.go
+++ b/config/v1/types_project.go
@@ -15,6 +15,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=projects,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Project struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_proxy.go b/config/v1/types_proxy.go
index 851291bb05a..2dfc66b1cdc 100644
--- a/config/v1/types_proxy.go
+++ b/config/v1/types_proxy.go
@@ -17,6 +17,7 @@ import (
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=proxies,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Proxy struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/types_scheduling.go b/config/v1/types_scheduling.go
index 061c4a88353..2749f4f70d8 100644
--- a/config/v1/types_scheduling.go
+++ b/config/v1/types_scheduling.go
@@ -16,6 +16,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +kubebuilder:object:root=true
 // +kubebuilder:resource:path=schedulers,scope=Cluster
 // +kubebuilder:subresource:status
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type Scheduler struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/config/v1/zz_generated.crd-manifests/0000_03_config-operator_01_proxies.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_03_config-operator_01_proxies.crd.yaml
index 01b1a8afb3b..d2db3c826f1 100644
--- a/config/v1/zz_generated.crd-manifests/0000_03_config-operator_01_proxies.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_03_config-operator_01_proxies.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: proxies.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers.crd.yaml
index 0274bdeb219..bd09e38fcfe 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: apiservers.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Hypershift.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
index b602c498b34..1d3ed5bca04 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: authentications.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
index 796371ee567..e6268ff973d 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: CustomNoUpgrade
   name: authentications.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
index 8439a5120a0..72ccf31f6d2 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: Default
   name: authentications.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
index 028ae8f3f53..1bb1e92ddd9 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: DevPreviewNoUpgrade
   name: authentications.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
index 7911fefb761..c8711ecbaef 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: TechPreviewNoUpgrade
   name: authentications.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_consoles.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_consoles.crd.yaml
index 3de7a2b74b3..57c8ee341ea 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_consoles.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_consoles.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: consoles.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_dnses.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_dnses.crd.yaml
index af4adb51675..40432b110f0 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_dnses.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_dnses.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: dnses.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml
index c27cb73e2d3..8f876bd94cd 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: featuregates.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentpolicies.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
index 89879276ed0..d9c1fb40f75 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagecontentpolicies.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
index 440fe9fe9fc..984aa93786e 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagedigestmirrorsets.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images.crd.yaml
index 9433ebaefce..9c4ff628f79 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: images.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
index 6939801ebc4..6115cc0ee62 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagetagmirrorsets.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
index a21a3672c6f..3a8bbd1e793 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: CustomNoUpgrade
   name: infrastructures.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-Default.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-Default.crd.yaml
index d5ff23ffe14..3c113c3bf31 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-Default.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-Default.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: Default
   name: infrastructures.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
index 1171cbba062..56d1f2ad655 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: DevPreviewNoUpgrade
   name: infrastructures.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
index ad58dc2fea5..3f5da183f08 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: TechPreviewNoUpgrade
   name: infrastructures.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml
index 67c0eceabf8..8dca3ea3ff8 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: ingresses.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_networks.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_networks.crd.yaml
index 7b990192c6d..16ac576d292 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_networks.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_networks.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: networks.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes.crd.yaml
index 7eed6a0e750..6266442d5ad 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: nodes.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_oauths.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_oauths.crd.yaml
index 3069f0e5358..dcce4d3afcf 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_oauths.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_oauths.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: oauths.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_projects.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_projects.crd.yaml
index 9c522d3bacc..2698a1f4592 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_projects.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_projects.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: projects.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
index ae27b68f23e..75f82a92557 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: CustomNoUpgrade
   name: schedulers.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-Default.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-Default.crd.yaml
index a6c5d06d225..30967909abd 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-Default.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-Default.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: Default
   name: schedulers.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
index b18926fed65..ae306025666 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: DevPreviewNoUpgrade
   name: schedulers.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
index a781d93cae2..5aa43ed4190 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: TechPreviewNoUpgrade
   name: schedulers.config.openshift.io
 spec:
diff --git a/config/v1/zz_generated.featuregated-crd-manifests.yaml b/config/v1/zz_generated.featuregated-crd-manifests.yaml
index 59c4bbea6f8..ddc7594f75f 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests.yaml
@@ -1,5 +1,6 @@
 apiservers.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: apiservers.config.openshift.io
   Capability: ""
@@ -20,7 +21,8 @@ apiservers.config.openshift.io:
   Version: v1
 
 authentications.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: authentications.config.openshift.io
   Capability: ""
@@ -144,7 +146,8 @@ clusterversions.config.openshift.io:
   Version: v1
 
 consoles.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: consoles.config.openshift.io
   Capability: ""
@@ -165,7 +168,8 @@ consoles.config.openshift.io:
   Version: v1
 
 dnses.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: dnses.config.openshift.io
   Capability: ""
@@ -186,7 +190,8 @@ dnses.config.openshift.io:
   Version: v1
 
 featuregates.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: featuregates.config.openshift.io
   Capability: ""
@@ -207,7 +212,8 @@ featuregates.config.openshift.io:
   Version: v1
 
 images.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: images.config.openshift.io
   Capability: ""
@@ -228,7 +234,8 @@ images.config.openshift.io:
   Version: v1
 
 imagecontentpolicies.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/874
   CRDName: imagecontentpolicies.config.openshift.io
   Capability: ""
@@ -249,7 +256,8 @@ imagecontentpolicies.config.openshift.io:
   Version: v1
 
 imagedigestmirrorsets.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/1126
   CRDName: imagedigestmirrorsets.config.openshift.io
   Capability: ""
@@ -271,7 +279,8 @@ imagedigestmirrorsets.config.openshift.io:
   Version: v1
 
 imagetagmirrorsets.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/1126
   CRDName: imagetagmirrorsets.config.openshift.io
   Capability: ""
@@ -293,7 +302,8 @@ imagetagmirrorsets.config.openshift.io:
   Version: v1
 
 infrastructures.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: infrastructures.config.openshift.io
   Capability: ""
@@ -319,7 +329,8 @@ infrastructures.config.openshift.io:
   Version: v1
 
 ingresses.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: ingresses.config.openshift.io
   Capability: ""
@@ -340,7 +351,8 @@ ingresses.config.openshift.io:
   Version: v1
 
 networks.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: networks.config.openshift.io
   Capability: ""
@@ -363,7 +375,8 @@ networks.config.openshift.io:
   Version: v1
 
 nodes.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/1107
   CRDName: nodes.config.openshift.io
   Capability: ""
@@ -384,7 +397,8 @@ nodes.config.openshift.io:
   Version: v1
 
 oauths.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: oauths.config.openshift.io
   Capability: ""
@@ -426,7 +440,8 @@ operatorhubs.config.openshift.io:
   Version: v1
 
 projects.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: projects.config.openshift.io
   Capability: ""
@@ -447,7 +462,8 @@ projects.config.openshift.io:
   Version: v1
 
 proxies.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: proxies.config.openshift.io
   Capability: ""
@@ -468,7 +484,8 @@ proxies.config.openshift.io:
   Version: v1
 
 schedulers.config.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: schedulers.config.openshift.io
   Capability: ""
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/AAA_ungated.yaml
index 6f97240203e..61c4660a200 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: apiservers.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/authentications.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/authentications.config.openshift.io/AAA_ungated.yaml
index b49cbfa02be..cafba35a5ad 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/authentications.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/authentications.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: authentications.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/authentications.config.openshift.io/ExternalOIDC.yaml b/config/v1/zz_generated.featuregated-crd-manifests/authentications.config.openshift.io/ExternalOIDC.yaml
index 856d6ed5574..93400d1fcfd 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/authentications.config.openshift.io/ExternalOIDC.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/authentications.config.openshift.io/ExternalOIDC.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/ExternalOIDC: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: authentications.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/consoles.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/consoles.config.openshift.io/AAA_ungated.yaml
index 45892fca601..60b78689a27 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/consoles.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/consoles.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: consoles.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/dnses.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/dnses.config.openshift.io/AAA_ungated.yaml
index d5c75da5205..205c92f789c 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/dnses.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/dnses.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: dnses.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/featuregates.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/featuregates.config.openshift.io/AAA_ungated.yaml
index 4372d364f76..d2b3c4fdfc3 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/featuregates.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/featuregates.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: featuregates.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/imagecontentpolicies.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/imagecontentpolicies.config.openshift.io/AAA_ungated.yaml
index 1da3a1ced19..8c8588b6610 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/imagecontentpolicies.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/imagecontentpolicies.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagecontentpolicies.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/imagedigestmirrorsets.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/imagedigestmirrorsets.config.openshift.io/AAA_ungated.yaml
index 551e9852414..8065239145b 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/imagedigestmirrorsets.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/imagedigestmirrorsets.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagedigestmirrorsets.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/images.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/images.config.openshift.io/AAA_ungated.yaml
index 309171d5f50..f04ef15785d 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/images.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/images.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: images.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/imagetagmirrorsets.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/imagetagmirrorsets.config.openshift.io/AAA_ungated.yaml
index 589e3b2eee1..6d8d2eff861 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/imagetagmirrorsets.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/imagetagmirrorsets.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagetagmirrorsets.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/AAA_ungated.yaml
index ba6cc7fb411..8b1475a4960 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: infrastructures.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/BareMetalLoadBalancer.yaml b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/BareMetalLoadBalancer.yaml
index 2f8c2778aa1..499821e7d87 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/BareMetalLoadBalancer.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/BareMetalLoadBalancer.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/BareMetalLoadBalancer: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: infrastructures.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/GCPClusterHostedDNS.yaml b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/GCPClusterHostedDNS.yaml
index 14d1670b808..8521b723048 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/GCPClusterHostedDNS.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/GCPClusterHostedDNS.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/GCPClusterHostedDNS: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: infrastructures.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/GCPLabelsTags.yaml b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/GCPLabelsTags.yaml
index d9d033195d7..8b0dc0b7f2d 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/GCPLabelsTags.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/GCPLabelsTags.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/GCPLabelsTags: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: infrastructures.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/VSphereControlPlaneMachineSet.yaml b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/VSphereControlPlaneMachineSet.yaml
index 43ecf21be8a..3cebc4f4591 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/VSphereControlPlaneMachineSet.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/VSphereControlPlaneMachineSet.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/VSphereControlPlaneMachineSet: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: infrastructures.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/VSphereMultiVCenters.yaml b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/VSphereMultiVCenters.yaml
index 2a9bc86accb..36c070087aa 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/VSphereMultiVCenters.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/infrastructures.config.openshift.io/VSphereMultiVCenters.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/VSphereMultiVCenters: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: infrastructures.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/ingresses.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/ingresses.config.openshift.io/AAA_ungated.yaml
index bdb69dc9527..0e493771021 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/ingresses.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/ingresses.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: ingresses.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/AAA_ungated.yaml
index 5386450709e..335dd676592 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: networks.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/NetworkDiagnosticsConfig.yaml b/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/NetworkDiagnosticsConfig.yaml
index 9fe22bd6771..08806553752 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/NetworkDiagnosticsConfig.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/NetworkDiagnosticsConfig.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/NetworkDiagnosticsConfig: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: networks.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/NetworkLiveMigration.yaml b/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/NetworkLiveMigration.yaml
index 6e63ce47480..de8fc71b256 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/NetworkLiveMigration.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/networks.config.openshift.io/NetworkLiveMigration.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/NetworkLiveMigration: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: networks.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/nodes.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/nodes.config.openshift.io/AAA_ungated.yaml
index cb333878578..a74b227f1d0 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/nodes.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/nodes.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: nodes.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/oauths.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/oauths.config.openshift.io/AAA_ungated.yaml
index 1b023afa645..af623c139d3 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/oauths.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/oauths.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: oauths.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/projects.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/projects.config.openshift.io/AAA_ungated.yaml
index 68905ed7063..343fcf44f71 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/projects.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/projects.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: projects.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/proxies.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/proxies.config.openshift.io/AAA_ungated.yaml
index a72921508c8..6681d864e8f 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/proxies.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/proxies.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: proxies.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/schedulers.config.openshift.io/AAA_ungated.yaml b/config/v1/zz_generated.featuregated-crd-manifests/schedulers.config.openshift.io/AAA_ungated.yaml
index 2a8221ddd59..a1566e71e71 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/schedulers.config.openshift.io/AAA_ungated.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/schedulers.config.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: schedulers.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/schedulers.config.openshift.io/DynamicResourceAllocation.yaml b/config/v1/zz_generated.featuregated-crd-manifests/schedulers.config.openshift.io/DynamicResourceAllocation.yaml
index ff1b3fb96c2..20db9685f82 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/schedulers.config.openshift.io/DynamicResourceAllocation.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/schedulers.config.openshift.io/DynamicResourceAllocation.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/DynamicResourceAllocation: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: schedulers.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/operator/v1alpha1/types_image_content_source_policy.go b/operator/v1alpha1/types_image_content_source_policy.go
index 6e14720dd34..0830ed7448a 100644
--- a/operator/v1alpha1/types_image_content_source_policy.go
+++ b/operator/v1alpha1/types_image_content_source_policy.go
@@ -16,6 +16,7 @@ import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 // +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/470
 // +openshift:file-pattern=cvoRunLevel=0000_10,operatorName=config-operator,operatorOrdering=01
 // +openshift:compatibility-gen:level=4
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type ImageContentSourcePolicy struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/operator/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentsourcepolicies.crd.yaml b/operator/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentsourcepolicies.crd.yaml
index c33b05bef75..d41a9c1eb2c 100644
--- a/operator/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentsourcepolicies.crd.yaml
+++ b/operator/v1alpha1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentsourcepolicies.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagecontentsourcepolicies.operator.openshift.io
 spec:
   group: operator.openshift.io
diff --git a/operator/v1alpha1/zz_generated.featuregated-crd-manifests.yaml b/operator/v1alpha1/zz_generated.featuregated-crd-manifests.yaml
index 2b6cbef2753..30c058236da 100644
--- a/operator/v1alpha1/zz_generated.featuregated-crd-manifests.yaml
+++ b/operator/v1alpha1/zz_generated.featuregated-crd-manifests.yaml
@@ -22,7 +22,8 @@ etcdbackups.operator.openshift.io:
   Version: v1alpha1
 
 imagecontentsourcepolicies.operator.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: imagecontentsourcepolicies.operator.openshift.io
   Capability: ""
diff --git a/operator/v1alpha1/zz_generated.featuregated-crd-manifests/imagecontentsourcepolicies.operator.openshift.io/AAA_ungated.yaml b/operator/v1alpha1/zz_generated.featuregated-crd-manifests/imagecontentsourcepolicies.operator.openshift.io/AAA_ungated.yaml
index 3b9f3ac6c5d..8f465805c21 100644
--- a/operator/v1alpha1/zz_generated.featuregated-crd-manifests/imagecontentsourcepolicies.operator.openshift.io/AAA_ungated.yaml
+++ b/operator/v1alpha1/zz_generated.featuregated-crd-manifests/imagecontentsourcepolicies.operator.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagecontentsourcepolicies.operator.openshift.io
 spec:
   group: operator.openshift.io
diff --git a/payload-manifests/crds/0000_03_config-operator_01_clusterresourcequotas.crd.yaml b/payload-manifests/crds/0000_03_config-operator_01_clusterresourcequotas.crd.yaml
index 9a6272b3395..b481b8c069c 100644
--- a/payload-manifests/crds/0000_03_config-operator_01_clusterresourcequotas.crd.yaml
+++ b/payload-manifests/crds/0000_03_config-operator_01_clusterresourcequotas.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: clusterresourcequotas.quota.openshift.io
 spec:
   group: quota.openshift.io
diff --git a/payload-manifests/crds/0000_03_config-operator_01_proxies.crd.yaml b/payload-manifests/crds/0000_03_config-operator_01_proxies.crd.yaml
index 01b1a8afb3b..d2db3c826f1 100644
--- a/payload-manifests/crds/0000_03_config-operator_01_proxies.crd.yaml
+++ b/payload-manifests/crds/0000_03_config-operator_01_proxies.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: proxies.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_03_config-operator_01_rolebindingrestrictions.crd.yaml b/payload-manifests/crds/0000_03_config-operator_01_rolebindingrestrictions.crd.yaml
index ec31e04ba19..d1c738989ba 100644
--- a/payload-manifests/crds/0000_03_config-operator_01_rolebindingrestrictions.crd.yaml
+++ b/payload-manifests/crds/0000_03_config-operator_01_rolebindingrestrictions.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: rolebindingrestrictions.authorization.openshift.io
 spec:
   group: authorization.openshift.io
diff --git a/payload-manifests/crds/0000_03_config-operator_01_securitycontextconstraints.crd.yaml b/payload-manifests/crds/0000_03_config-operator_01_securitycontextconstraints.crd.yaml
index f5e54704de9..93562e7d3fb 100644
--- a/payload-manifests/crds/0000_03_config-operator_01_securitycontextconstraints.crd.yaml
+++ b/payload-manifests/crds/0000_03_config-operator_01_securitycontextconstraints.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: securitycontextconstraints.security.openshift.io
 spec:
   group: security.openshift.io
diff --git a/payload-manifests/crds/0000_03_config-operator_02_rangeallocations.crd.yaml b/payload-manifests/crds/0000_03_config-operator_02_rangeallocations.crd.yaml
index 038b7482acd..dd8ecd584a2 100644
--- a/payload-manifests/crds/0000_03_config-operator_02_rangeallocations.crd.yaml
+++ b/payload-manifests/crds/0000_03_config-operator_02_rangeallocations.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: rangeallocations.security.internal.openshift.io
 spec:
   group: security.internal.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_apiservers.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_apiservers.crd.yaml
index 0274bdeb219..bd09e38fcfe 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_apiservers.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_apiservers.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: apiservers.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_authentications-Hypershift.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
index b602c498b34..1d3ed5bca04 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: authentications.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
index 796371ee567..e6268ff973d 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: CustomNoUpgrade
   name: authentications.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
index 8439a5120a0..72ccf31f6d2 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: Default
   name: authentications.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
index 028ae8f3f53..1bb1e92ddd9 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: DevPreviewNoUpgrade
   name: authentications.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
index 7911fefb761..c8711ecbaef 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
@@ -5,6 +5,7 @@ metadata:
     api-approved.openshift.io: https://github.com/openshift/api/pull/470
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: TechPreviewNoUpgrade
   name: authentications.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_consoles.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_consoles.crd.yaml
index 3de7a2b74b3..57c8ee341ea 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_consoles.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_consoles.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: consoles.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_dnses.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_dnses.crd.yaml
index af4adb51675..40432b110f0 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_dnses.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_dnses.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: dnses.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_featuregates.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_featuregates.crd.yaml
index c27cb73e2d3..8f876bd94cd 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_featuregates.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_featuregates.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: featuregates.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_imagecontentpolicies.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
index 89879276ed0..d9c1fb40f75 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagecontentpolicies.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_imagecontentsourcepolicies.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_imagecontentsourcepolicies.crd.yaml
index c33b05bef75..d41a9c1eb2c 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_imagecontentsourcepolicies.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_imagecontentsourcepolicies.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagecontentsourcepolicies.operator.openshift.io
 spec:
   group: operator.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
index 440fe9fe9fc..984aa93786e 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagedigestmirrorsets.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_images.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_images.crd.yaml
index 9433ebaefce..9c4ff628f79 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_images.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_images.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: images.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
index 6939801ebc4..6115cc0ee62 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: imagetagmirrorsets.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
index a21a3672c6f..3a8bbd1e793 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: CustomNoUpgrade
   name: infrastructures.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_infrastructures-Default.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_infrastructures-Default.crd.yaml
index d5ff23ffe14..3c113c3bf31 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_infrastructures-Default.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_infrastructures-Default.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: Default
   name: infrastructures.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
index 1171cbba062..56d1f2ad655 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: DevPreviewNoUpgrade
   name: infrastructures.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
index ad58dc2fea5..3f5da183f08 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: TechPreviewNoUpgrade
   name: infrastructures.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_ingresses.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_ingresses.crd.yaml
index 67c0eceabf8..8dca3ea3ff8 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_ingresses.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_ingresses.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: ingresses.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_networks.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_networks.crd.yaml
index 7b990192c6d..16ac576d292 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_networks.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_networks.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: networks.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_nodes.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_nodes.crd.yaml
index 7eed6a0e750..6266442d5ad 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_nodes.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_nodes.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: nodes.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_oauths.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_oauths.crd.yaml
index 3069f0e5358..dcce4d3afcf 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_oauths.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_oauths.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: oauths.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_projects.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_projects.crd.yaml
index 9c522d3bacc..2698a1f4592 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_projects.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_projects.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: projects.config.openshift.io
 spec:
   group: config.openshift.io
diff --git a/payload-manifests/crds/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
index ae27b68f23e..75f82a92557 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: CustomNoUpgrade
   name: schedulers.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_schedulers-Default.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_schedulers-Default.crd.yaml
index a6c5d06d225..30967909abd 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_schedulers-Default.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_schedulers-Default.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: Default
   name: schedulers.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
index b18926fed65..ae306025666 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: DevPreviewNoUpgrade
   name: schedulers.config.openshift.io
 spec:
diff --git a/payload-manifests/crds/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
index a781d93cae2..5aa43ed4190 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
     release.openshift.io/feature-set: TechPreviewNoUpgrade
   name: schedulers.config.openshift.io
 spec:
diff --git a/quota/v1/generated.proto b/quota/v1/generated.proto
index a72b97c8844..452ce6f29ff 100644
--- a/quota/v1/generated.proto
+++ b/quota/v1/generated.proto
@@ -53,6 +53,7 @@ message AppliedClusterResourceQuotaList {
 // +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/470
 // +openshift:file-pattern=cvoRunLevel=0000_03,operatorName=config-operator,operatorOrdering=01
 // +openshift:compatibility-gen:level=1
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 message ClusterResourceQuota {
   // metadata is the standard object's metadata.
   // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
diff --git a/quota/v1/types.go b/quota/v1/types.go
index de918711be9..7a29ddcd4b1 100644
--- a/quota/v1/types.go
+++ b/quota/v1/types.go
@@ -19,6 +19,7 @@ import (
 // +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/470
 // +openshift:file-pattern=cvoRunLevel=0000_03,operatorName=config-operator,operatorOrdering=01
 // +openshift:compatibility-gen:level=1
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type ClusterResourceQuota struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/quota/v1/zz_generated.crd-manifests/0000_03_config-operator_01_clusterresourcequotas.crd.yaml b/quota/v1/zz_generated.crd-manifests/0000_03_config-operator_01_clusterresourcequotas.crd.yaml
index 9a6272b3395..b481b8c069c 100644
--- a/quota/v1/zz_generated.crd-manifests/0000_03_config-operator_01_clusterresourcequotas.crd.yaml
+++ b/quota/v1/zz_generated.crd-manifests/0000_03_config-operator_01_clusterresourcequotas.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: clusterresourcequotas.quota.openshift.io
 spec:
   group: quota.openshift.io
diff --git a/quota/v1/zz_generated.featuregated-crd-manifests.yaml b/quota/v1/zz_generated.featuregated-crd-manifests.yaml
index 50caedde1c2..b0fae46f7d4 100644
--- a/quota/v1/zz_generated.featuregated-crd-manifests.yaml
+++ b/quota/v1/zz_generated.featuregated-crd-manifests.yaml
@@ -1,5 +1,6 @@
 clusterresourcequotas.quota.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: clusterresourcequotas.quota.openshift.io
   Capability: ""
diff --git a/quota/v1/zz_generated.featuregated-crd-manifests/clusterresourcequotas.quota.openshift.io/AAA_ungated.yaml b/quota/v1/zz_generated.featuregated-crd-manifests/clusterresourcequotas.quota.openshift.io/AAA_ungated.yaml
index 2f1ec9da688..547cf699dd6 100644
--- a/quota/v1/zz_generated.featuregated-crd-manifests/clusterresourcequotas.quota.openshift.io/AAA_ungated.yaml
+++ b/quota/v1/zz_generated.featuregated-crd-manifests/clusterresourcequotas.quota.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: clusterresourcequotas.quota.openshift.io
 spec:
   group: quota.openshift.io
diff --git a/security/v1/generated.proto b/security/v1/generated.proto
index c6d60915d36..0f00758e5b3 100644
--- a/security/v1/generated.proto
+++ b/security/v1/generated.proto
@@ -210,6 +210,7 @@ message SELinuxContextStrategyOptions {
 // +kubebuilder:printcolumn:name="Volumes",type=string,JSONPath=.volumes,description="White list of allowed volume plugins"
 // +kubebuilder:singular=securitycontextconstraint
 // +openshift:compatibility-gen:level=1
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 message SecurityContextConstraints {
   // metadata is the standard object's metadata.
   // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
diff --git a/security/v1/types.go b/security/v1/types.go
index b57da305815..44db1cdd39a 100644
--- a/security/v1/types.go
+++ b/security/v1/types.go
@@ -37,6 +37,7 @@ var AllowAllCapabilities corev1.Capability = "*"
 // +kubebuilder:printcolumn:name="Volumes",type=string,JSONPath=.volumes,description="White list of allowed volume plugins"
 // +kubebuilder:singular=securitycontextconstraint
 // +openshift:compatibility-gen:level=1
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 type SecurityContextConstraints struct {
 	metav1.TypeMeta `json:",inline"`
 
diff --git a/security/v1/zz_generated.crd-manifests/0000_03_config-operator_01_securitycontextconstraints.crd.yaml b/security/v1/zz_generated.crd-manifests/0000_03_config-operator_01_securitycontextconstraints.crd.yaml
index f5e54704de9..93562e7d3fb 100644
--- a/security/v1/zz_generated.crd-manifests/0000_03_config-operator_01_securitycontextconstraints.crd.yaml
+++ b/security/v1/zz_generated.crd-manifests/0000_03_config-operator_01_securitycontextconstraints.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: securitycontextconstraints.security.openshift.io
 spec:
   group: security.openshift.io
diff --git a/security/v1/zz_generated.featuregated-crd-manifests.yaml b/security/v1/zz_generated.featuregated-crd-manifests.yaml
index ea3967ab289..86f78058a24 100644
--- a/security/v1/zz_generated.featuregated-crd-manifests.yaml
+++ b/security/v1/zz_generated.featuregated-crd-manifests.yaml
@@ -1,5 +1,6 @@
 securitycontextconstraints.security.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/470
   CRDName: securitycontextconstraints.security.openshift.io
   Capability: ""
diff --git a/security/v1/zz_generated.featuregated-crd-manifests/securitycontextconstraints.security.openshift.io/AAA_ungated.yaml b/security/v1/zz_generated.featuregated-crd-manifests/securitycontextconstraints.security.openshift.io/AAA_ungated.yaml
index ca4e4cae7b0..a0cb82d9cc4 100644
--- a/security/v1/zz_generated.featuregated-crd-manifests/securitycontextconstraints.security.openshift.io/AAA_ungated.yaml
+++ b/security/v1/zz_generated.featuregated-crd-manifests/securitycontextconstraints.security.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "01"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: securitycontextconstraints.security.openshift.io
 spec:
   group: security.openshift.io
diff --git a/securityinternal/v1/types.go b/securityinternal/v1/types.go
index 523fc278628..a3d1e5c17f3 100644
--- a/securityinternal/v1/types.go
+++ b/securityinternal/v1/types.go
@@ -16,6 +16,7 @@ import (
 // +kubebuilder:resource:path=rangeallocations,scope=Cluster
 // +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/751
 // +openshift:file-pattern=cvoRunLevel=0000_03,operatorName=config-operator,operatorOrdering=02
+// +kubebuilder:metadata:annotations=release.openshift.io/bootstrap-required=true
 // +openshift:compatibility-gen:level=1
 type RangeAllocation struct {
 	metav1.TypeMeta `json:",inline"`
diff --git a/securityinternal/v1/zz_generated.crd-manifests/0000_03_config-operator_02_rangeallocations.crd.yaml b/securityinternal/v1/zz_generated.crd-manifests/0000_03_config-operator_02_rangeallocations.crd.yaml
index 038b7482acd..dd8ecd584a2 100644
--- a/securityinternal/v1/zz_generated.crd-manifests/0000_03_config-operator_02_rangeallocations.crd.yaml
+++ b/securityinternal/v1/zz_generated.crd-manifests/0000_03_config-operator_02_rangeallocations.crd.yaml
@@ -6,6 +6,7 @@ metadata:
     api.openshift.io/merged-by-featuregates: "true"
     include.release.openshift.io/ibm-cloud-managed: "true"
     include.release.openshift.io/self-managed-high-availability: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: rangeallocations.security.internal.openshift.io
 spec:
   group: security.internal.openshift.io
diff --git a/securityinternal/v1/zz_generated.featuregated-crd-manifests.yaml b/securityinternal/v1/zz_generated.featuregated-crd-manifests.yaml
index b364eeff3fb..7870a60a338 100644
--- a/securityinternal/v1/zz_generated.featuregated-crd-manifests.yaml
+++ b/securityinternal/v1/zz_generated.featuregated-crd-manifests.yaml
@@ -1,5 +1,6 @@
 rangeallocations.security.internal.openshift.io:
-  Annotations: {}
+  Annotations:
+    release.openshift.io/bootstrap-required: "true"
   ApprovedPRNumber: https://github.com/openshift/api/pull/751
   CRDName: rangeallocations.security.internal.openshift.io
   Capability: ""
diff --git a/securityinternal/v1/zz_generated.featuregated-crd-manifests/rangeallocations.security.internal.openshift.io/AAA_ungated.yaml b/securityinternal/v1/zz_generated.featuregated-crd-manifests/rangeallocations.security.internal.openshift.io/AAA_ungated.yaml
index a563ff69732..1570df26f4c 100644
--- a/securityinternal/v1/zz_generated.featuregated-crd-manifests/rangeallocations.security.internal.openshift.io/AAA_ungated.yaml
+++ b/securityinternal/v1/zz_generated.featuregated-crd-manifests/rangeallocations.security.internal.openshift.io/AAA_ungated.yaml
@@ -7,6 +7,7 @@ metadata:
     api.openshift.io/filename-operator: config-operator
     api.openshift.io/filename-ordering: "02"
     feature-gate.release.openshift.io/: "true"
+    release.openshift.io/bootstrap-required: "true"
   name: rangeallocations.security.internal.openshift.io
 spec:
   group: security.internal.openshift.io