# 4.15.0-0.okd-2024-02-10-035534

Created: 2024-02-11 07:15:48 +0000 UTC

Image Digest: `sha256:e13d5f24fc0347b51f1144e7f5bb03b48a99b43d3de0a260af171bf7e39a30f7`

Promoted from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-02-10-035534


## Changes from 4.15.0-0.okd-2024-01-27-070424

### Components

* Kubernetes 1.28.6
* Fedora CoreOS upgraded from 39.20240104.3 to 39.20240112.3


### Rebuilt images without code change

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [ba252ab1](https://github.com/openshift/cloud-provider-aws/commit/ba252ab129e78c8ce49529cb410a8742fb8e9045) `sha256:9c4fba3fd355f30240371f44a83f2ef76f07937f9fd4cbec9081c71bc6f642e5`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [84581c73](https://github.com/openshift/baremetal-runtimecfg/commit/84581c736b84a37c319d3e527e34a7dd5cf5262f) `sha256:532dd534a5020c274d3733a55273bc4b5ba36a49a65fc2a32b2661443706af94`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [81ab2a17](https://github.com/openshift/cloud-network-config-controller/commit/81ab2a17f2886bccd90dddf3deb213ed368c5be2) `sha256:2aa502d6f082bc89cafdfddf4e92ff6c6e98af06f65291044f10910fc77be90f`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [85e53769](https://github.com/openshift/cluster-etcd-operator/commit/85e53769e692705f1f7e9e749edf5d957fc2cf17) `sha256:1293e284063d8687a5219876bfa69b0844a9153143a832deae77df35e9d24cd2`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [c6cfbfe3](https://github.com/openshift/containernetworking-plugins/commit/c6cfbfe37adc5ecf540b1771c41bb38ad0a982d7) `sha256:a00b9f5d8a2700c0923fd527d6f41d5c9dc2aec08995b047e6369a601a7e85cd`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [23a7cfe4](https://github.com/openshift/multus-admission-controller/commit/23a7cfe44cacd1e8c1049ee3e0a858ec01e03d44) `sha256:ee6c272fb093cff52fd906d32b7c53ffcfad94e646387f49ea9d0ec6ac1a0587`
* [multus-cni](https://github.com/openshift/multus-cni) git [f9406f86](https://github.com/openshift/multus-cni/commit/f9406f864f00191e9dfac455d7044a973986e32d) `sha256:adf13225f7a4e1cafb2d98bb08853518f05a37ee129da68a993d0b6b65424e78`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [6212406b](https://github.com/openshift/multus-networkpolicy/commit/6212406b49cbcc75a01da85a67469b4872754e1d) `sha256:6d6fd8cb7f91959cb8cb0e0eeb40f6b4b1dde7e05f86169c7848438f7371a0d6`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [2edc45fe](https://github.com/openshift/whereabouts-cni/commit/2edc45fe57cc6c861f8014fdc514ca03442fde17) `sha256:a0026afdc40d1b962a220bca2e7f0c2b7a7a44396d866beb8aa913337c434a07`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [de02a75d](https://github.com/openshift/vsphere-problem-detector/commit/de02a75de63c6d8afd8467afd9aff97878d8bea4) `sha256:6645df7eb2e46641dcef34f93e429a8fd74eb4452912c82b1268afb3ff896d83`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/07e76eecfdf2f89b031e66a78325ccf9b6d9072c)

* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5926) [#5926](https://github.com/openshift/assisted-service/pull/5926)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) [#5905](https://github.com/openshift/assisted-service/pull/5905)
* [Full changelog](https://github.com/openshift/assisted-service/compare/93179b853387f4e40c80b311d1bdfb3fb612d03d...07e76eecfdf2f89b031e66a78325ccf9b6d9072c)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/34e8ac02a89101d328933368dd6cedef9d687580)

* [OCPBUGS-29007](https://issues.redhat.com/browse/OCPBUGS-29007): Don't create availability set when using spot instances [#95](https://github.com/openshift/machine-api-provider-azure/pull/95)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/7f41c22925470a14c4ed070ee41063e36ff26d9f...34e8ac02a89101d328933368dd6cedef9d687580)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/3f9c6463d7111e468d8efbc3b1c2f1810d83ac08)

* [OCPBUGS-29219](https://issues.redhat.com/browse/OCPBUGS-29219): GCP: Skip validation of public and private zones for terraform vars [#7994](https://github.com/openshift/installer/pull/7994)
* [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): Copy GCP manifests within MCO bootstrap to the correct location [#7993](https://github.com/openshift/installer/pull/7993)
* [OCPBUGS-28822](https://issues.redhat.com/browse/OCPBUGS-28822): aws-edge-zones preventing err before discovering [#7973](https://github.com/openshift/installer/pull/7973)
* [OCPBUGS-29117](https://issues.redhat.com/browse/OCPBUGS-29117): IBMCloud: Handle disk delete errors [#7984](https://github.com/openshift/installer/pull/7984)
* [OCPBUGS-26036](https://issues.redhat.com/browse/OCPBUGS-26036): ic: aws: add iam:TagInstanceProfile permission requirement [#7866](https://github.com/openshift/installer/pull/7866)
* [OCPBUGS-28779](https://issues.redhat.com/browse/OCPBUGS-28779): update tested Azure Arm64 instance type on 4.15 [#7971](https://github.com/openshift/installer/pull/7971)
* [OCPBUGS-28546](https://issues.redhat.com/browse/OCPBUGS-28546): [release-4.15] Bump containerd for vulnerability fix [#7957](https://github.com/openshift/installer/pull/7957)
* [OCPBUGS-27346](https://issues.redhat.com/browse/OCPBUGS-27346): Warn that FeatureSet is not supported [#7922](https://github.com/openshift/installer/pull/7922)
* [OCPBUGS-27417](https://issues.redhat.com/browse/OCPBUGS-27417): baremetal: gather all recently refactored services [#7928](https://github.com/openshift/installer/pull/7928)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): set the --cluster-profile flag for openshift/api rendering [#7955](https://github.com/openshift/installer/pull/7955)
* [OCPBUGS-27894](https://issues.redhat.com/browse/OCPBUGS-27894): duplicate failure domains in CMPS [#7951](https://github.com/openshift/installer/pull/7951)
* [OCPBUGS-27329](https://issues.redhat.com/browse/OCPBUGS-27329): remove retired serial NCv2 from azure tested instance type list on x86 [#7921](https://github.com/openshift/installer/pull/7921)
* [Full changelog](https://github.com/openshift/installer/compare/5d2f3da52876b66638c50d45616a8bef867fdf06...3f9c6463d7111e468d8efbc3b1c2f1810d83ac08)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/26641cde1dfee3edc8039fccafdf0e57f0c3bf8b)

* [OCPBUGS-28838](https://issues.redhat.com/browse/OCPBUGS-28838): Extend metal3remediation aggregation role [#210](https://github.com/openshift/cluster-api-provider-baremetal/pull/210)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/83bf459dfe084e2daa7402d49279a247dad45b1a...26641cde1dfee3edc8039fccafdf0e57f0c3bf8b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/48dcf5980a6671b5933707e5a055def023c7a13a)

* [OCPBUGS-28204](https://issues.redhat.com/browse/OCPBUGS-28204): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1672](https://github.com/openshift/oc/pull/1672)
* [Full changelog](https://github.com/openshift/oc/compare/9ff9bd754ea6e530ffc31865fce334f3c58cadc0...48dcf5980a6671b5933707e5a055def023c7a13a)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c9fd580aca5d15c291fc79981ff3182263c07bf7)

* [OCPBUGS-29113](https://issues.redhat.com/browse/OCPBUGS-29113): ccoctl - use proxy when validating CloudFront URL [#674](https://github.com/openshift/cloud-credential-operator/pull/674)
* [OCPBUGS-27910](https://issues.redhat.com/browse/OCPBUGS-27910): Resolve all outstanding snyk vulnerabilities [#649](https://github.com/openshift/cloud-credential-operator/pull/649)
* [OCPBUGS-27901](https://issues.redhat.com/browse/OCPBUGS-27901): Use cached clients to avoid client side throttling [#660](https://github.com/openshift/cloud-credential-operator/pull/660)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0c0d5ff50bfb5c9aef95380b28ab08a8992a7aff...c9fd580aca5d15c291fc79981ff3182263c07bf7)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/52a7d25ade22ddcf791bf6488504e3f7ef3ae770)

* NO-JIRA: _output - remove dir [#652](https://github.com/openshift/cluster-authentication-operator/pull/652)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#647](https://github.com/openshift/cluster-authentication-operator/pull/647)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/aece7a2854ef81abc285879445e22c2a9d8bcd54...52a7d25ade22ddcf791bf6488504e3f7ef3ae770)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/488fb7a201311aab96fd31ed7319b330770c781a)

* [OCPBUGS-29153](https://issues.redhat.com/browse/OCPBUGS-29153): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#402](https://github.com/openshift/cluster-baremetal-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/95e6cbefed9a43562e031a6f3d9b74184c0cdc39...488fb7a201311aab96fd31ed7319b330770c781a)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/6a24e09cc7b12924ccbee74f1839546dbd4b6dea)

* [OCPBUGS-28754](https://issues.redhat.com/browse/OCPBUGS-28754): Start operator controllers only on supported platforms, add unsupported controller [#158](https://github.com/openshift/cluster-capi-operator/pull/158)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/fc98dca3226e7ed5667e03284d685a190fd82811...6a24e09cc7b12924ccbee74f1839546dbd4b6dea)


### [cluster-config-api](https://github.com/openshift/api/tree/8ec9b53f66b6f0925a81dfc17b96c4f86a52ed01)

* [OCPBUGS-29074](https://issues.redhat.com/browse/OCPBUGS-29074): Move network.config conditions to GA [#1756](https://github.com/openshift/api/pull/1756)
* [NP-905](https://issues.redhat.com/browse/NP-905): [release-4.15] Promote Live Migration to GA [#1749](https://github.com/openshift/api/pull/1749)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Allow modified IPv6 address as CPIC name [#1750](https://github.com/openshift/api/pull/1750)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): add separate authentication config manifest for hypershift [#1743](https://github.com/openshift/api/pull/1743)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): respect the cluster profile in rendering [#1735](https://github.com/openshift/api/pull/1735)
* [Full changelog](https://github.com/openshift/api/compare/11ed2fbcb80554091d74c53f3b5e589fd5934d36...8ec9b53f66b6f0925a81dfc17b96c4f86a52ed01)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/5ce78e7671fef460060c2c77c4cee6b4024e4dd2)

* [OCPBUGS-28830](https://issues.redhat.com/browse/OCPBUGS-28830): pkg/storage/s3: enable bucket key on encryption settings [#994](https://github.com/openshift/cluster-image-registry-operator/pull/994)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/83eb04fe3e61954a1e1b5aeed81c985784bae2ad...5ce78e7671fef460060c2c77c4cee6b4024e4dd2)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0106cb99b340a2f266a88700b4250f11457ffb05)

* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1022](https://github.com/openshift/cluster-ingress-operator/pull/1022)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/611011bdc0586878923efe69a3c2f6caa885dbc4...0106cb99b340a2f266a88700b4250f11457ffb05)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/90d35d617b6b87004530fb974cbc6eb39bc3fe3b)

* [OCPBUGS-27491](https://issues.redhat.com/browse/OCPBUGS-27491): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1628](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1628)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9f6208d68b7207e819767ffbad8bb95e6b8b7bb2...90d35d617b6b87004530fb974cbc6eb39bc3fe3b)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)

* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Increase concurrent reconciles to 10 [#226](https://github.com/openshift/cluster-machine-approver/pull/226)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d537432fe131629ccfbb8ca099d4570bad07c3d5...3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a13d634285e9142a75b82f84c4ce62d2ac7e3ed1)

* [OCPBUGS-28703](https://issues.redhat.com/browse/OCPBUGS-28703): rollout metrics-server on cert rotations [#2249](https://github.com/openshift/cluster-monitoring-operator/pull/2249)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e04826eb2a14e0cdf51ea399b35444a93dfed0ff...a13d634285e9142a75b82f84c4ce62d2ac7e3ed1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/b0afc41a96918ec441cfa4ac495c1e850244f237)

* [OCPBUGS-29082](https://issues.redhat.com/browse/OCPBUGS-29082), [OCPBUGS-29150](https://issues.redhat.com/browse/OCPBUGS-29150): Remove libreswan rpm existence checks [#2255](https://github.com/openshift/cluster-network-operator/pull/2255)
* [OCPBUGS-28778](https://issues.redhat.com/browse/OCPBUGS-28778): add env var in whereabouts-reconciler daemonset [#2242](https://github.com/openshift/cluster-network-operator/pull/2242)
* [OCPBUGS-27421](https://issues.redhat.com/browse/OCPBUGS-27421): Only reconcile on Node updates with Label changes [#2212](https://github.com/openshift/cluster-network-operator/pull/2212)
* [OCPBUGS-27199](https://issues.redhat.com/browse/OCPBUGS-27199): Remove egressip write permissions from ovn-kubernetes-node [#2203](https://github.com/openshift/cluster-network-operator/pull/2203)
* [OCPBUGS-27174](https://issues.redhat.com/browse/OCPBUGS-27174): network node identity: tolarate all taints [#2202](https://github.com/openshift/cluster-network-operator/pull/2202)
* [NP-905](https://issues.redhat.com/browse/NP-905), [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Bump openshift API [#2247](https://github.com/openshift/cluster-network-operator/pull/2247)
* [OCPBUGS-28904](https://issues.redhat.com/browse/OCPBUGS-28904): [release-4.15] Restrict live migration to standalone managed clusters [#2243](https://github.com/openshift/cluster-network-operator/pull/2243)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 [#2227](https://github.com/openshift/cluster-network-operator/pull/2227)
* [OCPBUGS-28214](https://issues.redhat.com/browse/OCPBUGS-28214): Not update migration conditions when any MCP is updating [#2223](https://github.com/openshift/cluster-network-operator/pull/2223)
* [OCPBUGS-27777](https://issues.redhat.com/browse/OCPBUGS-27777): Deploy CNO IPsec MC even if user already have one [#2215](https://github.com/openshift/cluster-network-operator/pull/2215)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8b91c0ba0c12a6f4e1d221805df2f5027c076f54...b0afc41a96918ec441cfa4ac495c1e850244f237)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a8d42a79c8e1d4025b55b685e30f233e3a2a21dd)

* [OCPBUGS-27948](https://issues.redhat.com/browse/OCPBUGS-27948): Tuned rendering and MCP detection improvements (#928) [#928](https://github.com/openshift/cluster-node-tuning-operator/pull/928)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b4be0464700b4597bab8f7f083d116d357caa841...a8d42a79c8e1d4025b55b685e30f233e3a2a21dd)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/1ba446b3a9003d6069a7a2f55b2616b6892729bc)

* [OCPBUGS-28946](https://issues.redhat.com/browse/OCPBUGS-28946): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#327](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/327)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e87e15acee1bbdbc1663aec1bda9517a876023f2...1ba446b3a9003d6069a7a2f55b2616b6892729bc)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/279df4f300da8d93ced3e141cd4b279e71bff7ae)

* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Allow vSphere CSI driver to be disabled [#446](https://github.com/openshift/cluster-storage-operator/pull/446)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/2a80235ba78e865e5395ae606ad9e74cbfd0e82f...279df4f300da8d93ced3e141cd4b279e71bff7ae)


### [console](https://github.com/openshift/console/tree/38dd67f7646f7851fcc94cce41e47206f67383fa)

* [OCPBUGS-28917](https://issues.redhat.com/browse/OCPBUGS-28917): Optimize federation of shared PF5 code for dynamic plugins [#13566](https://github.com/openshift/console/pull/13566)
* [OCPBUGS-29022](https://issues.redhat.com/browse/OCPBUGS-29022): fix i18n for Remove volume modal [#13575](https://github.com/openshift/console/pull/13575)
* [OCPBUGS-28940](https://issues.redhat.com/browse/OCPBUGS-28940): AUTH-440: fix usersettings identifier creation [#13571](https://github.com/openshift/console/pull/13571)
* [OCPBUGS-27012](https://issues.redhat.com/browse/OCPBUGS-27012): update check for the 'provider' label on the PackageMa… [#13501](https://github.com/openshift/console/pull/13501)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13563](https://github.com/openshift/console/pull/13563)
* [OCPBUGS-28591](https://issues.redhat.com/browse/OCPBUGS-28591): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13551](https://github.com/openshift/console/pull/13551)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-27235](https://issues.redhat.com/browse/OCPBUGS-27235): backend: use the k8s SelfSubjectReview API to get info about a user [#13514](https://github.com/openshift/console/pull/13514)
* [OCPBUGS-27896](https://issues.redhat.com/browse/OCPBUGS-27896): Add flags checks to hide Pipeline static plugin List and details pages [#13536](https://github.com/openshift/console/pull/13536)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13509](https://github.com/openshift/console/pull/13509)
* [OCPBUGS-27909](https://issues.redhat.com/browse/OCPBUGS-27909): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13542](https://github.com/openshift/console/pull/13542)
* [Full changelog](https://github.com/openshift/console/compare/1756a41ea81c9078259de178c43304693fb2cc96...38dd67f7646f7851fcc94cce41e47206f67383fa)


### [console-operator](https://github.com/openshift/console-operator/tree/66b2656b3eefa30b3622386a9dbac9608416dba1)

* always sync oidcClients in authn status if the field is present [#859](https://github.com/openshift/console-operator/pull/859)
* [OCPBUGS-29010](https://issues.redhat.com/browse/OCPBUGS-29010): oauthclients: fix oauthclients degraded condition that never gets removed [#856](https://github.com/openshift/console-operator/pull/856)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#854](https://github.com/openshift/console-operator/pull/854)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#853](https://github.com/openshift/console-operator/pull/853)
* [OCPBUGS-22681](https://issues.redhat.com/browse/OCPBUGS-22681): Bump documentationBaseURL to 4.15 [#807](https://github.com/openshift/console-operator/pull/807)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#852](https://github.com/openshift/console-operator/pull/852)
* pick of OCPBUGS-27221: make it impossible double set conditions in a single loop [#851](https://github.com/openshift/console-operator/pull/851)
* [Full changelog](https://github.com/openshift/console-operator/compare/6f516b82c0a1f621ffec02694d9eeebdb8c600cb...66b2656b3eefa30b3622386a9dbac9608416dba1)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/260a085ae25606bba7a94cdfed88f67265905ba9)

* [OCPBUGS-28944](https://issues.redhat.com/browse/OCPBUGS-28944): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#166](https://github.com/openshift/csi-driver-shared-resource/pull/166)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/0b75c0afd6b3b94f19b6763d307fda358c68e522...260a085ae25606bba7a94cdfed88f67265905ba9)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/8d017b7f19f0226dfd4fc7933271939c550d180f)

* [OCPBUGS-28956](https://issues.redhat.com/browse/OCPBUGS-28956): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#102](https://github.com/openshift/csi-driver-shared-resource-operator/pull/102)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/e466c41d9439b1826c51ed8856e0428941eeaf35...8d017b7f19f0226dfd4fc7933271939c550d180f)


### [docker-builder](https://github.com/openshift/builder/tree/630692db2a3a39369d3c772a2543d7f2ea198455)

* [OCPBUGS-28948](https://issues.redhat.com/browse/OCPBUGS-28948): Replace 'coreydaley' with 'sayan-biswas' [#378](https://github.com/openshift/builder/pull/378)
* [Full changelog](https://github.com/openshift/builder/compare/0c0a73b21b471a2194713fa2c19d40cdbff26fa5...630692db2a3a39369d3c772a2543d7f2ea198455)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/bb87154986975e469b43ffbde5c04a57fff2febc)

* Bump Fedora CoreOS version string [#744](https://github.com/openshift/okd-machine-os/pull/744)
* Bump fedora-coreos to latest stable [#739](https://github.com/openshift/okd-machine-os/pull/739)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/9cb91592b487d56a05084f4a4df4511f444e3930...bb87154986975e469b43ffbde5c04a57fff2febc)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/f1618d54a81f9f1bc0c3bf326454ab8e107eea87)

* [OCPBUGS-28209](https://issues.redhat.com/browse/OCPBUGS-28209): UPSTREAM <carry>: use snyk file [#1873](https://github.com/openshift/kubernetes/pull/1873)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1878](https://github.com/openshift/kubernetes/pull/1878)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0fb47263bee9d427fb36e6581023d40bce8933d1...f1618d54a81f9f1bc0c3bf326454ab8e107eea87)


### [hypershift](https://github.com/openshift/hypershift/tree/a8479785e49fe6e6008a436c035fd7dbbf51a17a)

* [OCPBUGS-29303](https://issues.redhat.com/browse/OCPBUGS-29303): release-4.15: revocation controller backport [#3532](https://github.com/openshift/hypershift/pull/3532)
* [OCPBUGS-29020](https://issues.redhat.com/browse/OCPBUGS-29020): reduce external-dns route53 call volume [#3521](https://github.com/openshift/hypershift/pull/3521)
* [OCPBUGS-29179](https://issues.redhat.com/browse/OCPBUGS-29179): [4.15] reflect NodePool replica count nil in status [#3473](https://github.com/openshift/hypershift/pull/3473)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3537](https://github.com/openshift/hypershift/pull/3537)
* [OCPBUGS-29029](https://issues.redhat.com/browse/OCPBUGS-29029): Add ValidatingAdmissionPolicy to KAS config [#3523](https://github.com/openshift/hypershift/pull/3523)
* [OCPBUGS-28764](https://issues.redhat.com/browse/OCPBUGS-28764): node spread anti-affinity for HA HCP [#3495](https://github.com/openshift/hypershift/pull/3495)
* [OCPBUGS-28603](https://issues.redhat.com/browse/OCPBUGS-28603): Remove webhook validations that introduce resource ordering [#3515](https://github.com/openshift/hypershift/pull/3515)
* [OCPBUGS-28594](https://issues.redhat.com/browse/OCPBUGS-28594): backport API moves [#3482](https://github.com/openshift/hypershift/pull/3482)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3502](https://github.com/openshift/hypershift/pull/3502)
* [OCPBUGS-27818](https://issues.redhat.com/browse/OCPBUGS-27818): Add GC knobs for KAS [#3457](https://github.com/openshift/hypershift/pull/3457)
* [OCPBUGS-27103](https://issues.redhat.com/browse/OCPBUGS-27103): hcco: use manual mode for CCO [#3420](https://github.com/openshift/hypershift/pull/3420)
* NO-JIRA: kubevirt, e2e Add additional network test [#3499](https://github.com/openshift/hypershift/pull/3499)
* [CNV-37394](https://issues.redhat.com/browse/CNV-37394): Remove '--attach-default-network' from productized cli [#3500](https://github.com/openshift/hypershift/pull/3500)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): indicate cluster profile to render the correct manifests [#3465](https://github.com/openshift/hypershift/pull/3465)
* [OCPBUGS-28235](https://issues.redhat.com/browse/OCPBUGS-28235): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3467](https://github.com/openshift/hypershift/pull/3467)
* [Full changelog](https://github.com/openshift/hypershift/compare/b41f167731a7941bc764fdfdacb6962f7f1df384...a8479785e49fe6e6008a436c035fd7dbbf51a17a)


### [insights-operator](https://github.com/openshift/insights-operator/tree/d67d3081e084f1a991ceb0521d2fb7a1d5d36f44)

* gather etcd_server_slow metrics (#900) [#900](https://github.com/openshift/insights-operator/pull/900)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ff5e3ff1e4af5368aa33ac90cb5f4b5ec4ba0f66...d67d3081e084f1a991ceb0521d2fb7a1d5d36f44)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/71a6f28d69f77953d104219cee344a70f7cbede1)

* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image (attempt #2) [#617](https://github.com/openshift/sdn/pull/617)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Revert #613 "OCPBUGS-28580: Move sdn to RHEL9 base image" [#616](https://github.com/openshift/sdn/pull/616)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image [#613](https://github.com/openshift/sdn/pull/613)
* [OCPBUGS-28549](https://issues.redhat.com/browse/OCPBUGS-28549): Add Snyk file to exclude directories on scan [#614](https://github.com/openshift/sdn/pull/614)
* [Full changelog](https://github.com/openshift/sdn/compare/308ab5d23898f333c79c2e8881f636b273a1af5f...71a6f28d69f77953d104219cee344a70f7cbede1)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e2b4537e57f4407e5469ad673dda126df5bb2a8b)

* [OCPBUGS-28762](https://issues.redhat.com/browse/OCPBUGS-28762): Add additional vnet join permission for Azure [#1216](https://github.com/openshift/machine-api-operator/pull/1216)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Set --max-concurrent-reconciles=10 for Azure machine controller [#1210](https://github.com/openshift/machine-api-operator/pull/1210)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/cf0b671267745df55589b57024d99d7d7aaa86b4...e2b4537e57f4407e5469ad673dda126df5bb2a8b)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6305fca334948e9ed37b078884d96051f8859b99)

* [OCPSTRAT-1062](https://issues.redhat.com/browse/OCPSTRAT-1062): [4.15] crio: enable log linking by default in 4.15 [#4174](https://github.com/openshift/machine-config-operator/pull/4174)
* [OCPBUGS-29105](https://issues.redhat.com/browse/OCPBUGS-29105): On-prem coredns manifests should not be generated for GCP [#4169](https://github.com/openshift/machine-config-operator/pull/4169)
* [OCPBUGS-28909](https://issues.redhat.com/browse/OCPBUGS-28909), [OCPBUGS-28910](https://issues.redhat.com/browse/OCPBUGS-28910): Run resolv-prepender entirely async [#4161](https://github.com/openshift/machine-config-operator/pull/4161)
* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4155](https://github.com/openshift/machine-config-operator/pull/4155)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/90cab989d0062333daea41c24596e35385ef1ea0...6305fca334948e9ed37b078884d96051f8859b99)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/34756b67ae1ce1307d07bd1834579de1e4b47f17)

* [OCPBUGS-21669](https://issues.redhat.com/browse/OCPBUGS-21669): bump k8s.io and others (4.15) [#99](https://github.com/openshift/oauth-apiserver/pull/99)
* [OCPBUGS-24132](https://issues.redhat.com/browse/OCPBUGS-24132): Updating ose-oauth-apiserver-container image to be consistent with ART [#93](https://github.com/openshift/oauth-apiserver/pull/93)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/beb99aefa447ee4ddaade964cefb6d0fa2b70c66...34756b67ae1ce1307d07bd1834579de1e4b47f17)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/cae37aa25d9d96bdedcee45e659188a644f78a58)

* [OCPBUGS-27946](https://issues.redhat.com/browse/OCPBUGS-27946): Capability to override default channel (#786) [#786](https://github.com/openshift/oc-mirror/pull/786)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/6ddf902e42c93a3fd1cb155d52584bb8dd912c43...cae37aa25d9d96bdedcee45e659188a644f78a58)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/36acf8d67e27405e69685df79ea636757df3a4f4)

* [OCPBUGS-27596](https://issues.redhat.com/browse/OCPBUGS-27596), [OCPBUGS-27681](https://issues.redhat.com/browse/OCPBUGS-27681): UPSTREAM: <carry>: Update go-git to v5.11.0 [#72](https://github.com/openshift/operator-framework-rukpak/pull/72)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/1369884b563638963e64caaf4be648c7676b63b4...36acf8d67e27405e69685df79ea636757df3a4f4)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/87d251169278f61434749fc17991b45cbcb53b15)

* [OCPBUGS-28947](https://issues.redhat.com/browse/OCPBUGS-28947): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#285](https://github.com/openshift/openshift-controller-manager/pull/285)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/2a28a78279b127075b399a3442a2042f4a7d190d...87d251169278f61434749fc17991b45cbcb53b15)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/711336ec8ded4b51cc93d5d68b152e5db71aa9a6)

* [OCPBUGS-24159](https://issues.redhat.com/browse/OCPBUGS-24159): Updating operator-lifecycle-manager-container image to be consistent with ART [#623](https://github.com/openshift/operator-framework-olm/pull/623)
* [OCPBUGS-29083](https://issues.redhat.com/browse/OCPBUGS-29083): * olm,catalog: only validate the resources we label [#683](https://github.com/openshift/operator-framework-olm/pull/683)
* [OCPBUGS-29116](https://issues.redhat.com/browse/OCPBUGS-29116): [release-4.15]: Clear (existing) error cond from Subscription, once error resolved [#684](https://github.com/openshift/operator-framework-olm/pull/684)
* [OCPBUGS-27566](https://issues.redhat.com/browse/OCPBUGS-27566), [OCPBUGS-27571](https://issues.redhat.com/browse/OCPBUGS-27571), [OCPBUGS-27651](https://issues.redhat.com/browse/OCPBUGS-27651), [OCPBUGS-27656](https://issues.redhat.com/browse/OCPBUGS-27656): bump go-git/v5 to 5.11.0 (#1175) [#668](https://github.com/openshift/operator-framework-olm/pull/668)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/fc6550c372bb7e788bf0e6d6adf2f24780d0a9f1...711336ec8ded4b51cc93d5d68b152e5db71aa9a6)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/519efdbf04d2b02fee49e621f0a256aca9e27686)

* [OCPBUGS-29230](https://issues.redhat.com/browse/OCPBUGS-29230): [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup [#2060](https://github.com/openshift/ovn-kubernetes/pull/2060)
* [OCPBUGS-28818](https://issues.redhat.com/browse/OCPBUGS-28818): Support Permanent Session Affinity [#2045](https://github.com/openshift/ovn-kubernetes/pull/2045)
* [OCPBUGS-28848](https://issues.redhat.com/browse/OCPBUGS-28848): Ignore hybrid-overlay nodes from EgressIP controller [#2040](https://github.com/openshift/ovn-kubernetes/pull/2040)
* [OCPBUGS-29001](https://issues.redhat.com/browse/OCPBUGS-29001): kubevirt, Replace routes on migration [#2052](https://github.com/openshift/ovn-kubernetes/pull/2052)
* [OCPBUGS-27947](https://issues.redhat.com/browse/OCPBUGS-27947): [release-4.15] Fix LGW ETP=Local on IPv6 [#2028](https://github.com/openshift/ovn-kubernetes/pull/2028)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2476c75ade680f6324391be71a6edfe15fb60d98...519efdbf04d2b02fee49e621f0a256aca9e27686)


### [tests](https://github.com/openshift/origin/tree/f05b5794430cf7e8bb977bf33b619aad40ff1224)

* [OCPBUGS-29031](https://issues.redhat.com/browse/OCPBUGS-29031): Replace 'coreydaley' with 'sayan-biswas' [#28573](https://github.com/openshift/origin/pull/28573)
* [OCPBUGS-26487](https://issues.redhat.com/browse/OCPBUGS-26487): Increase timeout for pod-network-service [#28508](https://github.com/openshift/origin/pull/28508)
* [OCPBUGS-27934](https://issues.redhat.com/browse/OCPBUGS-27934): fix panic in service-poller [#28550](https://github.com/openshift/origin/pull/28550)
* [OCPBUGS-26960](https://issues.redhat.com/browse/OCPBUGS-26960): updated timeout to 3 seconds to account for network timing issues [#28519](https://github.com/openshift/origin/pull/28519)
* [Full changelog](https://github.com/openshift/origin/compare/5a636661527da4173703ed69d660fb0ef679401f...f05b5794430cf7e8bb977bf33b619aad40ff1224)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/74481e34aa9c2ef2de0ce0289e2383a179d34b89)

* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Revert "Merge pull request #97 from jsafrane/rebase-v3.1.1" [#110](https://github.com/openshift/vmware-vsphere-csi-driver/pull/110)
* [OCPBUGS-26074](https://issues.redhat.com/browse/OCPBUGS-26074), [OCPBUGS-26075](https://issues.redhat.com/browse/OCPBUGS-26075), [OCPBUGS-26076](https://issues.redhat.com/browse/OCPBUGS-26076): [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 [#109](https://github.com/openshift/vmware-vsphere-csi-driver/pull/109)
* [OCPBUGS-25856](https://issues.redhat.com/browse/OCPBUGS-25856): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#107](https://github.com/openshift/vmware-vsphere-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/56a1741f76c7ab60751c3788245b9b77a82a43a9...74481e34aa9c2ef2de0ce0289e2383a179d34b89)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e0d46570a06caff3439b410b9c9f75cb383a3d2d)

* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Mark the operator as Disabled on connection error [#219](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/219)
* [OCPBUGS-27378](https://issues.redhat.com/browse/OCPBUGS-27378): Rerun checks on reconnect [#216](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/216)
* [OCPBUGS-26409](https://issues.redhat.com/browse/OCPBUGS-26409): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#207](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/207)
* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#205](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/205)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#204](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/204)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#200](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/200)
* [OCPBUGS-23970](https://issues.redhat.com/browse/OCPBUGS-23970): Enable new features to prevent CSI driver from crash looping [#192](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/192)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d18d77f8dd7b977fc34234e4e7f4cea4e35181c3...e0d46570a06caff3439b410b9c9f75cb383a3d2d)