# 4.15.0-0.okd-2024-02-23-163410

Created: 2024-02-25 09:36:22 +0000 UTC

Image Digest: `sha256:75045c88a94bbfd4a390fdd4859bb58b1f222cf71e5b85c0c086526a734ea37d`

Promoted from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-02-23-163410


## Changes from 4.15.0-0.okd-2024-01-27-070424

### Components

* Kubernetes 1.28.6
* Fedora CoreOS upgraded from 39.20240104.3 to 39.20240128.3


### Rebuilt images without code change

* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [ba252ab1](https://github.com/openshift/cloud-provider-aws/commit/ba252ab129e78c8ce49529cb410a8742fb8e9045) `sha256:9c4fba3fd355f30240371f44a83f2ef76f07937f9fd4cbec9081c71bc6f642e5`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [84581c73](https://github.com/openshift/baremetal-runtimecfg/commit/84581c736b84a37c319d3e527e34a7dd5cf5262f) `sha256:532dd534a5020c274d3733a55273bc4b5ba36a49a65fc2a32b2661443706af94`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [81ab2a17](https://github.com/openshift/cloud-network-config-controller/commit/81ab2a17f2886bccd90dddf3deb213ed368c5be2) `sha256:2aa502d6f082bc89cafdfddf4e92ff6c6e98af06f65291044f10910fc77be90f`
* [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [85e53769](https://github.com/openshift/cluster-etcd-operator/commit/85e53769e692705f1f7e9e749edf5d957fc2cf17) `sha256:1293e284063d8687a5219876bfa69b0844a9153143a832deae77df35e9d24cd2`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [c6cfbfe3](https://github.com/openshift/containernetworking-plugins/commit/c6cfbfe37adc5ecf540b1771c41bb38ad0a982d7) `sha256:a00b9f5d8a2700c0923fd527d6f41d5c9dc2aec08995b047e6369a601a7e85cd`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [23a7cfe4](https://github.com/openshift/multus-admission-controller/commit/23a7cfe44cacd1e8c1049ee3e0a858ec01e03d44) `sha256:ee6c272fb093cff52fd906d32b7c53ffcfad94e646387f49ea9d0ec6ac1a0587`
* [multus-cni](https://github.com/openshift/multus-cni) git [f9406f86](https://github.com/openshift/multus-cni/commit/f9406f864f00191e9dfac455d7044a973986e32d) `sha256:adf13225f7a4e1cafb2d98bb08853518f05a37ee129da68a993d0b6b65424e78`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [6212406b](https://github.com/openshift/multus-networkpolicy/commit/6212406b49cbcc75a01da85a67469b4872754e1d) `sha256:6d6fd8cb7f91959cb8cb0e0eeb40f6b4b1dde7e05f86169c7848438f7371a0d6`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [2edc45fe](https://github.com/openshift/whereabouts-cni/commit/2edc45fe57cc6c861f8014fdc514ca03442fde17) `sha256:a0026afdc40d1b962a220bca2e7f0c2b7a7a44396d866beb8aa913337c434a07`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [de02a75d](https://github.com/openshift/vsphere-problem-detector/commit/de02a75de63c6d8afd8467afd9aff97878d8bea4) `sha256:6645df7eb2e46641dcef34f93e429a8fd74eb4452912c82b1268afb3ff896d83`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d60e80f8658cf8a756ff4aa318983ddcf0e70bca)

* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var Deployment Type & Set ABI (#6016) [#6016](https://github.com/openshift/assisted-service/pull/6016)
* [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) [#6005](https://github.com/openshift/assisted-service/pull/6005)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5926) [#5926](https://github.com/openshift/assisted-service/pull/5926)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) [#5905](https://github.com/openshift/assisted-service/pull/5905)
* [Full changelog](https://github.com/openshift/assisted-service/compare/93179b853387f4e40c80b311d1bdfb3fb612d03d...d60e80f8658cf8a756ff4aa318983ddcf0e70bca)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/550f2a568d4b4a494b3637ebba725bdd9c26ecd9)

* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#791) [#791](https://github.com/openshift/assisted-installer/pull/791)
* [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere (#785) [#785](https://github.com/openshift/assisted-installer/pull/785)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/81ef8544529e59cafebaa094dc34cc0d6dd6bc88...550f2a568d4b4a494b3637ebba725bdd9c26ecd9)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/34e8ac02a89101d328933368dd6cedef9d687580)

* [OCPBUGS-29007](https://issues.redhat.com/browse/OCPBUGS-29007): Don't create availability set when using spot instances [#95](https://github.com/openshift/machine-api-provider-azure/pull/95)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/7f41c22925470a14c4ed070ee41063e36ff26d9f...34e8ac02a89101d328933368dd6cedef9d687580)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/e8c70b7db9e64cafa7fe3182c365257c3e53fbb6)

* [OCPBUGS-29585](https://issues.redhat.com/browse/OCPBUGS-29585): PowerVS: handle composite_instance [#8032](https://github.com/openshift/installer/pull/8032)
* [OCPBUGS-29620](https://issues.redhat.com/browse/OCPBUGS-29620): Power VS: Fix service instance list [#8035](https://github.com/openshift/installer/pull/8035)
* [OCPBUGS-29523](https://issues.redhat.com/browse/OCPBUGS-29523): Bump terraform-provider-ibm to v1.61.0 [#8026](https://github.com/openshift/installer/pull/8026)
* [OCPBUGS-29436](https://issues.redhat.com/browse/OCPBUGS-29436): PowerVS Fix next start search [#8013](https://github.com/openshift/installer/pull/8013)
* [OCPBUGS-29442](https://issues.redhat.com/browse/OCPBUGS-29442): update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 [#8016](https://github.com/openshift/installer/pull/8016)
* [OCPBUGS-29219](https://issues.redhat.com/browse/OCPBUGS-29219): GCP: Skip validation of public and private zones for terraform vars [#7994](https://github.com/openshift/installer/pull/7994)
* [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): Copy GCP manifests within MCO bootstrap to the correct location [#7993](https://github.com/openshift/installer/pull/7993)
* [OCPBUGS-28822](https://issues.redhat.com/browse/OCPBUGS-28822): aws-edge-zones preventing err before discovering [#7973](https://github.com/openshift/installer/pull/7973)
* [OCPBUGS-29117](https://issues.redhat.com/browse/OCPBUGS-29117): IBMCloud: Handle disk delete errors [#7984](https://github.com/openshift/installer/pull/7984)
* [OCPBUGS-26036](https://issues.redhat.com/browse/OCPBUGS-26036): ic: aws: add iam:TagInstanceProfile permission requirement [#7866](https://github.com/openshift/installer/pull/7866)
* [OCPBUGS-28779](https://issues.redhat.com/browse/OCPBUGS-28779): update tested Azure Arm64 instance type on 4.15 [#7971](https://github.com/openshift/installer/pull/7971)
* [OCPBUGS-28546](https://issues.redhat.com/browse/OCPBUGS-28546): [release-4.15] Bump containerd for vulnerability fix [#7957](https://github.com/openshift/installer/pull/7957)
* [OCPBUGS-27346](https://issues.redhat.com/browse/OCPBUGS-27346): Warn that FeatureSet is not supported [#7922](https://github.com/openshift/installer/pull/7922)
* [OCPBUGS-27417](https://issues.redhat.com/browse/OCPBUGS-27417): baremetal: gather all recently refactored services [#7928](https://github.com/openshift/installer/pull/7928)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): set the --cluster-profile flag for openshift/api rendering [#7955](https://github.com/openshift/installer/pull/7955)
* [OCPBUGS-27894](https://issues.redhat.com/browse/OCPBUGS-27894): duplicate failure domains in CMPS [#7951](https://github.com/openshift/installer/pull/7951)
* [OCPBUGS-27329](https://issues.redhat.com/browse/OCPBUGS-27329): remove retired serial NCv2 from azure tested instance type list on x86 [#7921](https://github.com/openshift/installer/pull/7921)
* [Full changelog](https://github.com/openshift/installer/compare/5d2f3da52876b66638c50d45616a8bef867fdf06...e8c70b7db9e64cafa7fe3182c365257c3e53fbb6)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/26641cde1dfee3edc8039fccafdf0e57f0c3bf8b)

* [OCPBUGS-28838](https://issues.redhat.com/browse/OCPBUGS-28838): Extend metal3remediation aggregation role [#210](https://github.com/openshift/cluster-api-provider-baremetal/pull/210)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/83bf459dfe084e2daa7402d49279a247dad45b1a...26641cde1dfee3edc8039fccafdf0e57f0c3bf8b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/48dcf5980a6671b5933707e5a055def023c7a13a)

* [OCPBUGS-28204](https://issues.redhat.com/browse/OCPBUGS-28204): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1672](https://github.com/openshift/oc/pull/1672)
* [Full changelog](https://github.com/openshift/oc/compare/9ff9bd754ea6e530ffc31865fce334f3c58cadc0...48dcf5980a6671b5933707e5a055def023c7a13a)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c9fd580aca5d15c291fc79981ff3182263c07bf7)

* [OCPBUGS-29113](https://issues.redhat.com/browse/OCPBUGS-29113): ccoctl - use proxy when validating CloudFront URL [#674](https://github.com/openshift/cloud-credential-operator/pull/674)
* [OCPBUGS-27910](https://issues.redhat.com/browse/OCPBUGS-27910): Resolve all outstanding snyk vulnerabilities [#649](https://github.com/openshift/cloud-credential-operator/pull/649)
* [OCPBUGS-27901](https://issues.redhat.com/browse/OCPBUGS-27901): Use cached clients to avoid client side throttling [#660](https://github.com/openshift/cloud-credential-operator/pull/660)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0c0d5ff50bfb5c9aef95380b28ab08a8992a7aff...c9fd580aca5d15c291fc79981ff3182263c07bf7)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/52a7d25ade22ddcf791bf6488504e3f7ef3ae770)

* NO-JIRA: _output - remove dir [#652](https://github.com/openshift/cluster-authentication-operator/pull/652)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#647](https://github.com/openshift/cluster-authentication-operator/pull/647)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/aece7a2854ef81abc285879445e22c2a9d8bcd54...52a7d25ade22ddcf791bf6488504e3f7ef3ae770)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/488fb7a201311aab96fd31ed7319b330770c781a)

* [OCPBUGS-29153](https://issues.redhat.com/browse/OCPBUGS-29153): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#402](https://github.com/openshift/cluster-baremetal-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/95e6cbefed9a43562e031a6f3d9b74184c0cdc39...488fb7a201311aab96fd31ed7319b330770c781a)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/6a24e09cc7b12924ccbee74f1839546dbd4b6dea)

* [OCPBUGS-28754](https://issues.redhat.com/browse/OCPBUGS-28754): Start operator controllers only on supported platforms, add unsupported controller [#158](https://github.com/openshift/cluster-capi-operator/pull/158)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/fc98dca3226e7ed5667e03284d685a190fd82811...6a24e09cc7b12924ccbee74f1839546dbd4b6dea)


### [cluster-config-api](https://github.com/openshift/api/tree/be926bb0d7511bd4e11519f794cd71df60454a31)

* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): allow multiple audiences to be configured for kube-apiserver [#1772](https://github.com/openshift/api/pull/1772)
* [OCPBUGS-29074](https://issues.redhat.com/browse/OCPBUGS-29074): Move network.config conditions to GA [#1756](https://github.com/openshift/api/pull/1756)
* [NP-905](https://issues.redhat.com/browse/NP-905): [release-4.15] Promote Live Migration to GA [#1749](https://github.com/openshift/api/pull/1749)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Allow modified IPv6 address as CPIC name [#1750](https://github.com/openshift/api/pull/1750)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): add separate authentication config manifest for hypershift [#1743](https://github.com/openshift/api/pull/1743)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): respect the cluster profile in rendering [#1735](https://github.com/openshift/api/pull/1735)
* [Full changelog](https://github.com/openshift/api/compare/11ed2fbcb80554091d74c53f3b5e589fd5934d36...be926bb0d7511bd4e11519f794cd71df60454a31)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/cc1fb201a307c049036c8307d950e5cde9e565ca)

* [OCPBUGS-28622](https://issues.redhat.com/browse/OCPBUGS-28622): Add required PSa labels [#402](https://github.com/openshift/cluster-config-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/c436b7ae2fe1372112d58eae29a75cc8d48e8193...cc1fb201a307c049036c8307d950e5cde9e565ca)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/5da92bdb6eeb08abf096989d1383d56e6a6098a3)

* [OCPBUGS-29638](https://issues.redhat.com/browse/OCPBUGS-29638): azurepathfix: fix stack hub, government and workload identity setup [#1004](https://github.com/openshift/cluster-image-registry-operator/pull/1004)
* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): move azure storage blobs from `docker` back into `/docker` [#1000](https://github.com/openshift/cluster-image-registry-operator/pull/1000)
* [OCPBUGS-28830](https://issues.redhat.com/browse/OCPBUGS-28830): pkg/storage/s3: enable bucket key on encryption settings [#994](https://github.com/openshift/cluster-image-registry-operator/pull/994)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/83eb04fe3e61954a1e1b5aeed81c985784bae2ad...5da92bdb6eeb08abf096989d1383d56e6a6098a3)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0106cb99b340a2f266a88700b4250f11457ffb05)

* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1022](https://github.com/openshift/cluster-ingress-operator/pull/1022)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/611011bdc0586878923efe69a3c2f6caa885dbc4...0106cb99b340a2f266a88700b4250f11457ffb05)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/689a2bdc377383c774cc353c8e643dfcbb40159e)

* [OCPBUGS-28882](https://issues.redhat.com/browse/OCPBUGS-28882): Add sno section to alert description [#1636](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1636)
* [OCPBUGS-27491](https://issues.redhat.com/browse/OCPBUGS-27491): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1628](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1628)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9f6208d68b7207e819767ffbad8bb95e6b8b7bb2...689a2bdc377383c774cc353c8e643dfcbb40159e)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/128d8e08c48e2002c416e84d0dec816bf5999c7e)

* [OCPBUGS-23711](https://issues.redhat.com/browse/OCPBUGS-23711): Add Snyk file to exclude vendor directory on scan [#34](https://github.com/openshift/cluster-api-operator/pull/34)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/097921fbf0741446d0f4297a71f0765dfcd7eeea...128d8e08c48e2002c416e84d0dec816bf5999c7e)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)

* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Increase concurrent reconciles to 10 [#226](https://github.com/openshift/cluster-machine-approver/pull/226)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d537432fe131629ccfbb8ca099d4570bad07c3d5...3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a13d634285e9142a75b82f84c4ce62d2ac7e3ed1)

* [OCPBUGS-28703](https://issues.redhat.com/browse/OCPBUGS-28703): rollout metrics-server on cert rotations [#2249](https://github.com/openshift/cluster-monitoring-operator/pull/2249)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e04826eb2a14e0cdf51ea399b35444a93dfed0ff...a13d634285e9142a75b82f84c4ce62d2ac7e3ed1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c1d987e7a93910a4f09c4183f9434e0f697f8c3f)

* [OCPBUGS-29299](https://issues.redhat.com/browse/OCPBUGS-29299): Update ingressconfig_controller to use field Manager [#2265](https://github.com/openshift/cluster-network-operator/pull/2265)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Fix CloudPrivateIPConfig CRD in common [#2263](https://github.com/openshift/cluster-network-operator/pull/2263)
* [OCPBUGS-29082](https://issues.redhat.com/browse/OCPBUGS-29082), [OCPBUGS-29150](https://issues.redhat.com/browse/OCPBUGS-29150): Remove libreswan rpm existence checks [#2255](https://github.com/openshift/cluster-network-operator/pull/2255)
* [OCPBUGS-28778](https://issues.redhat.com/browse/OCPBUGS-28778): add env var in whereabouts-reconciler daemonset [#2242](https://github.com/openshift/cluster-network-operator/pull/2242)
* [OCPBUGS-27421](https://issues.redhat.com/browse/OCPBUGS-27421): Only reconcile on Node updates with Label changes [#2212](https://github.com/openshift/cluster-network-operator/pull/2212)
* [OCPBUGS-27199](https://issues.redhat.com/browse/OCPBUGS-27199): Remove egressip write permissions from ovn-kubernetes-node [#2203](https://github.com/openshift/cluster-network-operator/pull/2203)
* [OCPBUGS-27174](https://issues.redhat.com/browse/OCPBUGS-27174): network node identity: tolarate all taints [#2202](https://github.com/openshift/cluster-network-operator/pull/2202)
* [NP-905](https://issues.redhat.com/browse/NP-905), [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Bump openshift API [#2247](https://github.com/openshift/cluster-network-operator/pull/2247)
* [OCPBUGS-28904](https://issues.redhat.com/browse/OCPBUGS-28904): [release-4.15] Restrict live migration to standalone managed clusters [#2243](https://github.com/openshift/cluster-network-operator/pull/2243)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 [#2227](https://github.com/openshift/cluster-network-operator/pull/2227)
* [OCPBUGS-28214](https://issues.redhat.com/browse/OCPBUGS-28214): Not update migration conditions when any MCP is updating [#2223](https://github.com/openshift/cluster-network-operator/pull/2223)
* [OCPBUGS-27777](https://issues.redhat.com/browse/OCPBUGS-27777): Deploy CNO IPsec MC even if user already have one [#2215](https://github.com/openshift/cluster-network-operator/pull/2215)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8b91c0ba0c12a6f4e1d221805df2f5027c076f54...c1d987e7a93910a4f09c4183f9434e0f697f8c3f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/01fc8d9a765c7aa4dd6ae8f8c8e7e41fa03f1f05)

* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): Mixed CPUs e2e tests (#952) [#952](https://github.com/openshift/cluster-node-tuning-operator/pull/952)
* [OCPBUGS-27227](https://issues.redhat.com/browse/OCPBUGS-27227): irqbalance: set banned cpus list to '0' (#953) [#953](https://github.com/openshift/cluster-node-tuning-operator/pull/953)
* [OCPBUGS-29396](https://issues.redhat.com/browse/OCPBUGS-29396): Labels for e2e testing  (#949) [#949](https://github.com/openshift/cluster-node-tuning-operator/pull/949)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): e2e: cgroups: introduce cgroup package (#942) [#942](https://github.com/openshift/cluster-node-tuning-operator/pull/942)
* makefile: add target to trigger mixedcpus e2e test (#941) [#941](https://github.com/openshift/cluster-node-tuning-operator/pull/941)
* [OCPBUGS-27948](https://issues.redhat.com/browse/OCPBUGS-27948): Tuned rendering and MCP detection improvements (#928) [#928](https://github.com/openshift/cluster-node-tuning-operator/pull/928)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b4be0464700b4597bab8f7f083d116d357caa841...01fc8d9a765c7aa4dd6ae8f8c8e7e41fa03f1f05)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/1ba446b3a9003d6069a7a2f55b2616b6892729bc)

* [OCPBUGS-28946](https://issues.redhat.com/browse/OCPBUGS-28946): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#327](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/327)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e87e15acee1bbdbc1663aec1bda9517a876023f2...1ba446b3a9003d6069a7a2f55b2616b6892729bc)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/37a0a919b1032f7affa49b756eda4762d77751d5)

* [OCPBUGS-24077](https://issues.redhat.com/browse/OCPBUGS-24077): Updating ose-cluster-platform-operators-manager-container image to be consistent with ART [#104](https://github.com/openshift/platform-operators/pull/104)
* [Full changelog](https://github.com/openshift/platform-operators/compare/25dbb307143ea9576fc977f737c0331a9b8e879f...37a0a919b1032f7affa49b756eda4762d77751d5)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/279df4f300da8d93ced3e141cd4b279e71bff7ae)

* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Allow vSphere CSI driver to be disabled [#446](https://github.com/openshift/cluster-storage-operator/pull/446)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/2a80235ba78e865e5395ae606ad9e74cbfd0e82f...279df4f300da8d93ced3e141cd4b279e71bff7ae)


### [console](https://github.com/openshift/console/tree/803df88843fa8a4011ecadcaf29b530fa34851ed)

* [OCPBUGS-29345](https://issues.redhat.com/browse/OCPBUGS-29345): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13599](https://github.com/openshift/console/pull/13599)
* [OCPBUGS-29096](https://issues.redhat.com/browse/OCPBUGS-29096): Add TaskRun tab in PLR details page using plugin [#13584](https://github.com/openshift/console/pull/13584)
* [OCPBUGS-29217](https://issues.redhat.com/browse/OCPBUGS-29217): Revision tab and routes tab in serving details page showing no resource found [#13590](https://github.com/openshift/console/pull/13590)
* [OCPBUGS-26411](https://issues.redhat.com/browse/OCPBUGS-26411): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13486](https://github.com/openshift/console/pull/13486)
* [OCPBUGS-28537](https://issues.redhat.com/browse/OCPBUGS-28537): remove "openshift-storage" namespace usage from the console [#13548](https://github.com/openshift/console/pull/13548)
* [OCPBUGS-29283](https://issues.redhat.com/browse/OCPBUGS-29283): Error in displaying BuildRun logs in Console [#13595](https://github.com/openshift/console/pull/13595)
* [OCPBUGS-28917](https://issues.redhat.com/browse/OCPBUGS-28917): Optimize federation of shared PF5 code for dynamic plugins [#13566](https://github.com/openshift/console/pull/13566)
* [OCPBUGS-29022](https://issues.redhat.com/browse/OCPBUGS-29022): fix i18n for Remove volume modal [#13575](https://github.com/openshift/console/pull/13575)
* [OCPBUGS-28940](https://issues.redhat.com/browse/OCPBUGS-28940): AUTH-440: fix usersettings identifier creation [#13571](https://github.com/openshift/console/pull/13571)
* [OCPBUGS-27012](https://issues.redhat.com/browse/OCPBUGS-27012): update check for the 'provider' label on the PackageMa… [#13501](https://github.com/openshift/console/pull/13501)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13563](https://github.com/openshift/console/pull/13563)
* [OCPBUGS-28591](https://issues.redhat.com/browse/OCPBUGS-28591): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13551](https://github.com/openshift/console/pull/13551)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-27235](https://issues.redhat.com/browse/OCPBUGS-27235): backend: use the k8s SelfSubjectReview API to get info about a user [#13514](https://github.com/openshift/console/pull/13514)
* [OCPBUGS-27896](https://issues.redhat.com/browse/OCPBUGS-27896): Add flags checks to hide Pipeline static plugin List and details pages [#13536](https://github.com/openshift/console/pull/13536)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13509](https://github.com/openshift/console/pull/13509)
* [OCPBUGS-27909](https://issues.redhat.com/browse/OCPBUGS-27909): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13542](https://github.com/openshift/console/pull/13542)
* [Full changelog](https://github.com/openshift/console/compare/1756a41ea81c9078259de178c43304693fb2cc96...803df88843fa8a4011ecadcaf29b530fa34851ed)


### [console-operator](https://github.com/openshift/console-operator/tree/8f7bdec82b1e297fc558dc1dc81415e9678cba6d)

* [OCPBUGS-29658](https://issues.redhat.com/browse/OCPBUGS-29658): oauthclients: further split oidc and integrated oauth handling [#870](https://github.com/openshift/console-operator/pull/870)
* always sync oidcClients in authn status if the field is present [#859](https://github.com/openshift/console-operator/pull/859)
* [OCPBUGS-29010](https://issues.redhat.com/browse/OCPBUGS-29010): oauthclients: fix oauthclients degraded condition that never gets removed [#856](https://github.com/openshift/console-operator/pull/856)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#854](https://github.com/openshift/console-operator/pull/854)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#853](https://github.com/openshift/console-operator/pull/853)
* [OCPBUGS-22681](https://issues.redhat.com/browse/OCPBUGS-22681): Bump documentationBaseURL to 4.15 [#807](https://github.com/openshift/console-operator/pull/807)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#852](https://github.com/openshift/console-operator/pull/852)
* pick of OCPBUGS-27221: make it impossible double set conditions in a single loop [#851](https://github.com/openshift/console-operator/pull/851)
* [Full changelog](https://github.com/openshift/console-operator/compare/6f516b82c0a1f621ffec02694d9eeebdb8c600cb...8f7bdec82b1e297fc558dc1dc81415e9678cba6d)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/1bec5942cd0651a3c2f7114368591f334952ceda)

* Make sure we don't mask LB tests failures and fix what was failing (#2360) (#2537) [#2360](https://github.com/openshift/cloud-provider-openstack/pull/2360)
* Remove handling code for glog (#2534) [#2534](https://github.com/openshift/cloud-provider-openstack/pull/2534)
* Bump golangci-lint for go 1.22 (#2545) [#2545](https://github.com/openshift/cloud-provider-openstack/pull/2545)
* Delete LB that gone into ERROR state (#2536) [#2536](https://github.com/openshift/cloud-provider-openstack/pull/2536)
* Add ability to add Events by OCCM (#2539) [#2539](https://github.com/openshift/cloud-provider-openstack/pull/2539)
* Lookup ports by SG and not tags (#2355) (#2538) [#2355](https://github.com/openshift/cloud-provider-openstack/pull/2355)
* retry ubuntu image download on temp error (#2506) [#2506](https://github.com/openshift/cloud-provider-openstack/pull/2506)
* update k8s.io/kubernetes to v1.28.4 in go.mod (#2496) [#2496](https://github.com/openshift/cloud-provider-openstack/pull/2496)
* Implement imagePullSecret support for release 1.28 (#2445) [#2445](https://github.com/openshift/cloud-provider-openstack/pull/2445)
* fix: octavia tlsContainerRef validation for barbican secrets (#2458) [#2458](https://github.com/openshift/cloud-provider-openstack/pull/2458)
* Remove duplicate pflag.Parse calls (#2467) [#2467](https://github.com/openshift/cloud-provider-openstack/pull/2467)
* manage-security-groups: Only add SGs to LB members (#2455) (#2466) [#2455](https://github.com/openshift/cloud-provider-openstack/pull/2455)
* Use standard service account name in OCCM helm chart (#2447) [#2447](https://github.com/openshift/cloud-provider-openstack/pull/2447)
* 1.28.1 release (#2426) [#2426](https://github.com/openshift/cloud-provider-openstack/pull/2426)
* delete barbican secret after the LB deletetion (#2424) [#2424](https://github.com/openshift/cloud-provider-openstack/pull/2424)
* ensure octavia monitor is always updated (#2382) [#2382](https://github.com/openshift/cloud-provider-openstack/pull/2382)
* add `max_retries_down` support for octavia health monitors (#2379) [#2379](https://github.com/openshift/cloud-provider-openstack/pull/2379)
* Fix multiarch builds of Cinder CSI (#2342) [#2342](https://github.com/openshift/cloud-provider-openstack/pull/2342)
* update tags (#2336) [#2336](https://github.com/openshift/cloud-provider-openstack/pull/2336)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/e1a9f48173b0056dc96b62ef6b141ccc1838cebc...1bec5942cd0651a3c2f7114368591f334952ceda)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/260a085ae25606bba7a94cdfed88f67265905ba9)

* [OCPBUGS-28944](https://issues.redhat.com/browse/OCPBUGS-28944): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#166](https://github.com/openshift/csi-driver-shared-resource/pull/166)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/0b75c0afd6b3b94f19b6763d307fda358c68e522...260a085ae25606bba7a94cdfed88f67265905ba9)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/8d017b7f19f0226dfd4fc7933271939c550d180f)

* [OCPBUGS-28956](https://issues.redhat.com/browse/OCPBUGS-28956): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#102](https://github.com/openshift/csi-driver-shared-resource-operator/pull/102)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/e466c41d9439b1826c51ed8856e0428941eeaf35...8d017b7f19f0226dfd4fc7933271939c550d180f)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13)

* [OCPBUGS-29336](https://issues.redhat.com/browse/OCPBUGS-29336): cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#143](https://github.com/openshift/csi-external-snapshotter/pull/143)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/090cd57847b98aebe42ecd5091c3a626eb870022...50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13)


### [docker-builder](https://github.com/openshift/builder/tree/630692db2a3a39369d3c772a2543d7f2ea198455)

* [OCPBUGS-28948](https://issues.redhat.com/browse/OCPBUGS-28948): Replace 'coreydaley' with 'sayan-biswas' [#378](https://github.com/openshift/builder/pull/378)
* [Full changelog](https://github.com/openshift/builder/compare/0c0a73b21b471a2194713fa2c19d40cdbff26fa5...630692db2a3a39369d3c772a2543d7f2ea198455)


### [docker-registry](https://github.com/openshift/image-registry/tree/340eda0bfc9a86254d7f0f37cd6a5320779ecf81)

* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): bump docker-distribution to fix azure path issue [#393](https://github.com/openshift/image-registry/pull/393)
* [Full changelog](https://github.com/openshift/image-registry/compare/9c3215bd57d45f58f4178ead0041b71e545a1815...340eda0bfc9a86254d7f0f37cd6a5320779ecf81)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/58a702c1edd52e830bccbc53745793e76d84ba29)

* Bump fedora-coreos to latest stable [#751](https://github.com/openshift/okd-machine-os/pull/751)
* Bump fedora-coreos to latest stable [#748](https://github.com/openshift/okd-machine-os/pull/748)
* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): Install ecr-credential-provider from artifacts instead of stub script [#747](https://github.com/openshift/okd-machine-os/pull/747)
* Bump Fedora CoreOS version string [#744](https://github.com/openshift/okd-machine-os/pull/744)
* Bump fedora-coreos to latest stable [#739](https://github.com/openshift/okd-machine-os/pull/739)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/9cb91592b487d56a05084f4a4df4511f444e3930...58a702c1edd52e830bccbc53745793e76d84ba29)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/6216ea1e51a2126f5b843a4ae7c1f414161cca8b)

* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): structuredAuthenticationConfig for kube 1.28-ish [#1884](https://github.com/openshift/kubernetes/pull/1884)
* [OCPBUGS-27343](https://issues.redhat.com/browse/OCPBUGS-27343): UPSTREAM: <carry>: Update management webhook pod admission logic [#1854](https://github.com/openshift/kubernetes/pull/1854)
* [OCPBUGS-28209](https://issues.redhat.com/browse/OCPBUGS-28209): UPSTREAM <carry>: use snyk file [#1873](https://github.com/openshift/kubernetes/pull/1873)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1878](https://github.com/openshift/kubernetes/pull/1878)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0fb47263bee9d427fb36e6581023d40bce8933d1...6216ea1e51a2126f5b843a4ae7c1f414161cca8b)


### [hypershift](https://github.com/openshift/hypershift/tree/e04891928c4734cf12ec84a5e194f57595af332c)

* [OCPBUGS-29780](https://issues.redhat.com/browse/OCPBUGS-29780): use 2040 for apiserver svc in IBM provider [#3595](https://github.com/openshift/hypershift/pull/3595)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3607](https://github.com/openshift/hypershift/pull/3607)
* [OCPBUGS-28543](https://issues.redhat.com/browse/OCPBUGS-28543): Include OperatorHubSpec sync with HC when Config is empty [#3480](https://github.com/openshift/hypershift/pull/3480)
* [OCPBUGS-29508](https://issues.redhat.com/browse/OCPBUGS-29508): Default NodeUpgradeType on day2 nodepool creation [#3582](https://github.com/openshift/hypershift/pull/3582)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3529](https://github.com/openshift/hypershift/pull/3529)
* NO-JIRA: Approvers update [#3579](https://github.com/openshift/hypershift/pull/3579)
* [OCPBUGS-27149](https://issues.redhat.com/browse/OCPBUGS-27149): Add storage, csisnapshotcontroller and clustercsidrive… [#3421](https://github.com/openshift/hypershift/pull/3421)
* [OCPBUGS-29416](https://issues.redhat.com/browse/OCPBUGS-29416): hypershift-operator: don't create PKI rbac when disabled [#3565](https://github.com/openshift/hypershift/pull/3565)
* [OCPBUGS-29418](https://issues.redhat.com/browse/OCPBUGS-29418): control-plane-pki-operator: add a signer for SRE break-glass [#3566](https://github.com/openshift/hypershift/pull/3566)
* [OCPBUGS-29089](https://issues.redhat.com/browse/OCPBUGS-29089): Make ControllerAvailabilityPolicy immutable [#3533](https://github.com/openshift/hypershift/pull/3533)
* [OCPBUGS-29310](https://issues.redhat.com/browse/OCPBUGS-29310): control-plane-pki-operator: validate CN for CSR [#3558](https://github.com/openshift/hypershift/pull/3558)
* [OCPBUGS-29303](https://issues.redhat.com/browse/OCPBUGS-29303): release-4.15: revocation controller backport [#3532](https://github.com/openshift/hypershift/pull/3532)
* [OCPBUGS-29020](https://issues.redhat.com/browse/OCPBUGS-29020): reduce external-dns route53 call volume [#3521](https://github.com/openshift/hypershift/pull/3521)
* [OCPBUGS-29179](https://issues.redhat.com/browse/OCPBUGS-29179): [4.15] reflect NodePool replica count nil in status [#3473](https://github.com/openshift/hypershift/pull/3473)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3537](https://github.com/openshift/hypershift/pull/3537)
* [OCPBUGS-29029](https://issues.redhat.com/browse/OCPBUGS-29029): Add ValidatingAdmissionPolicy to KAS config [#3523](https://github.com/openshift/hypershift/pull/3523)
* [OCPBUGS-28764](https://issues.redhat.com/browse/OCPBUGS-28764): node spread anti-affinity for HA HCP [#3495](https://github.com/openshift/hypershift/pull/3495)
* [OCPBUGS-28603](https://issues.redhat.com/browse/OCPBUGS-28603): Remove webhook validations that introduce resource ordering [#3515](https://github.com/openshift/hypershift/pull/3515)
* [OCPBUGS-28594](https://issues.redhat.com/browse/OCPBUGS-28594): backport API moves [#3482](https://github.com/openshift/hypershift/pull/3482)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3502](https://github.com/openshift/hypershift/pull/3502)
* [OCPBUGS-27818](https://issues.redhat.com/browse/OCPBUGS-27818): Add GC knobs for KAS [#3457](https://github.com/openshift/hypershift/pull/3457)
* [OCPBUGS-27103](https://issues.redhat.com/browse/OCPBUGS-27103): hcco: use manual mode for CCO [#3420](https://github.com/openshift/hypershift/pull/3420)
* NO-JIRA: kubevirt, e2e Add additional network test [#3499](https://github.com/openshift/hypershift/pull/3499)
* [CNV-37394](https://issues.redhat.com/browse/CNV-37394): Remove '--attach-default-network' from productized cli [#3500](https://github.com/openshift/hypershift/pull/3500)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): indicate cluster profile to render the correct manifests [#3465](https://github.com/openshift/hypershift/pull/3465)
* [OCPBUGS-28235](https://issues.redhat.com/browse/OCPBUGS-28235): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3467](https://github.com/openshift/hypershift/pull/3467)
* [Full changelog](https://github.com/openshift/hypershift/compare/b41f167731a7941bc764fdfdacb6962f7f1df384...e04891928c4734cf12ec84a5e194f57595af332c)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/34fb625247f6743637b0ef0c5767e000e0ec1e65)

* [OCPBUGS-25507](https://issues.redhat.com/browse/OCPBUGS-25507): update golang.org/x/crypto module [#78](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/78)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/7c4b63bcc763c822155f3dc8f890792409d8d1cd...34fb625247f6743637b0ef0c5767e000e0ec1e65)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a6923466398b283a68b78fad9b1f2c5ccf9eaded)

* Add extra check in ids to bypass validations (#901) [#901](https://github.com/openshift/insights-operator/pull/901)
* gather etcd_server_slow metrics (#900) [#900](https://github.com/openshift/insights-operator/pull/900)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ff5e3ff1e4af5368aa33ac90cb5f4b5ec4ba0f66...a6923466398b283a68b78fad9b1f2c5ccf9eaded)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/cd0769a538f34456728bf1bba9302461c942d5ba)

* [OCPBUGS-28756](https://issues.redhat.com/browse/OCPBUGS-28756): Always add ignition to set hostname on /etc/hostname [#108](https://github.com/openshift/ironic-agent-image/pull/108)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/0145f7ac0b3f7dfa34e7513e63c665d1ab787f27...cd0769a538f34456728bf1bba9302461c942d5ba)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/71a6f28d69f77953d104219cee344a70f7cbede1)

* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image (attempt #2) [#617](https://github.com/openshift/sdn/pull/617)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Revert #613 "OCPBUGS-28580: Move sdn to RHEL9 base image" [#616](https://github.com/openshift/sdn/pull/616)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image [#613](https://github.com/openshift/sdn/pull/613)
* [OCPBUGS-28549](https://issues.redhat.com/browse/OCPBUGS-28549): Add Snyk file to exclude directories on scan [#614](https://github.com/openshift/sdn/pull/614)
* [Full changelog](https://github.com/openshift/sdn/compare/308ab5d23898f333c79c2e8881f636b273a1af5f...71a6f28d69f77953d104219cee344a70f7cbede1)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e2b4537e57f4407e5469ad673dda126df5bb2a8b)

* [OCPBUGS-28762](https://issues.redhat.com/browse/OCPBUGS-28762): Add additional vnet join permission for Azure [#1216](https://github.com/openshift/machine-api-operator/pull/1216)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Set --max-concurrent-reconciles=10 for Azure machine controller [#1210](https://github.com/openshift/machine-api-operator/pull/1210)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/cf0b671267745df55589b57024d99d7d7aaa86b4...e2b4537e57f4407e5469ad673dda126df5bb2a8b)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/c7981fcb54fcae3976818479a01f19f3fef40cd9)

* [OCPBUGS-29038](https://issues.redhat.com/browse/OCPBUGS-29038): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4166](https://github.com/openshift/machine-config-operator/pull/4166)
* [OCPSTRAT-1062](https://issues.redhat.com/browse/OCPSTRAT-1062): [4.15] crio: enable log linking by default in 4.15 [#4174](https://github.com/openshift/machine-config-operator/pull/4174)
* [OCPBUGS-29105](https://issues.redhat.com/browse/OCPBUGS-29105): On-prem coredns manifests should not be generated for GCP [#4169](https://github.com/openshift/machine-config-operator/pull/4169)
* [OCPBUGS-28909](https://issues.redhat.com/browse/OCPBUGS-28909), [OCPBUGS-28910](https://issues.redhat.com/browse/OCPBUGS-28910): Run resolv-prepender entirely async [#4161](https://github.com/openshift/machine-config-operator/pull/4161)
* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4155](https://github.com/openshift/machine-config-operator/pull/4155)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/90cab989d0062333daea41c24596e35385ef1ea0...c7981fcb54fcae3976818479a01f19f3fef40cd9)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/34756b67ae1ce1307d07bd1834579de1e4b47f17)

* [OCPBUGS-21669](https://issues.redhat.com/browse/OCPBUGS-21669): bump k8s.io and others (4.15) [#99](https://github.com/openshift/oauth-apiserver/pull/99)
* [OCPBUGS-24132](https://issues.redhat.com/browse/OCPBUGS-24132): Updating ose-oauth-apiserver-container image to be consistent with ART [#93](https://github.com/openshift/oauth-apiserver/pull/93)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/beb99aefa447ee4ddaade964cefb6d0fa2b70c66...34756b67ae1ce1307d07bd1834579de1e4b47f17)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/cae37aa25d9d96bdedcee45e659188a644f78a58)

* [OCPBUGS-27946](https://issues.redhat.com/browse/OCPBUGS-27946): Capability to override default channel (#786) [#786](https://github.com/openshift/oc-mirror/pull/786)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/6ddf902e42c93a3fd1cb155d52584bb8dd912c43...cae37aa25d9d96bdedcee45e659188a644f78a58)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/36acf8d67e27405e69685df79ea636757df3a4f4)

* [OCPBUGS-27596](https://issues.redhat.com/browse/OCPBUGS-27596), [OCPBUGS-27681](https://issues.redhat.com/browse/OCPBUGS-27681): UPSTREAM: <carry>: Update go-git to v5.11.0 [#72](https://github.com/openshift/operator-framework-rukpak/pull/72)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/1369884b563638963e64caaf4be648c7676b63b4...36acf8d67e27405e69685df79ea636757df3a4f4)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/87d251169278f61434749fc17991b45cbcb53b15)

* [OCPBUGS-28947](https://issues.redhat.com/browse/OCPBUGS-28947): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#285](https://github.com/openshift/openshift-controller-manager/pull/285)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/2a28a78279b127075b399a3442a2042f4a7d190d...87d251169278f61434749fc17991b45cbcb53b15)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d1de8c63ee931be0038b55dd4813b2089fd6107e)

* 🐛 Persist API FloatingIP immediately on creation [#1846](https://github.com/openshift/cluster-api-provider-openstack/pull/1846)
* :bug: Fix potential panic during instance create [#1808](https://github.com/openshift/cluster-api-provider-openstack/pull/1808)
* fix --short flag is removed issue for CI [#1811](https://github.com/openshift/cluster-api-provider-openstack/pull/1811)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/acc3955450d75d33ea69f326ef9215f415051af4...d1de8c63ee931be0038b55dd4813b2089fd6107e)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/0e8b957251ce3edb82ca8d9139380b18df1fe55c)

* NO-ISSUE:  [release-4.15] Backport flaky CRD upgrade block e2e test fix [#694](https://github.com/openshift/operator-framework-olm/pull/694)
* [OCPBUGS-24159](https://issues.redhat.com/browse/OCPBUGS-24159): Updating operator-lifecycle-manager-container image to be consistent with ART [#623](https://github.com/openshift/operator-framework-olm/pull/623)
* [OCPBUGS-29083](https://issues.redhat.com/browse/OCPBUGS-29083): * olm,catalog: only validate the resources we label [#683](https://github.com/openshift/operator-framework-olm/pull/683)
* [OCPBUGS-29116](https://issues.redhat.com/browse/OCPBUGS-29116): [release-4.15]: Clear (existing) error cond from Subscription, once error resolved [#684](https://github.com/openshift/operator-framework-olm/pull/684)
* [OCPBUGS-27566](https://issues.redhat.com/browse/OCPBUGS-27566), [OCPBUGS-27571](https://issues.redhat.com/browse/OCPBUGS-27571), [OCPBUGS-27651](https://issues.redhat.com/browse/OCPBUGS-27651), [OCPBUGS-27656](https://issues.redhat.com/browse/OCPBUGS-27656): bump go-git/v5 to 5.11.0 (#1175) [#668](https://github.com/openshift/operator-framework-olm/pull/668)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/fc6550c372bb7e788bf0e6d6adf2f24780d0a9f1...0e8b957251ce3edb82ca8d9139380b18df1fe55c)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/3fdc9242e361a5e5007556054f5b0cc68a5be3d4)

* [OCPBUGS-29185](https://issues.redhat.com/browse/OCPBUGS-29185): Wait for ovnkube controller to start before checking result error. [#2064](https://github.com/openshift/ovn-kubernetes/pull/2064)
* [OCPBUGS-28725](https://issues.redhat.com/browse/OCPBUGS-28725): Update netpol namespace address sets usage to the old ways [#2050](https://github.com/openshift/ovn-kubernetes/pull/2050)
* [OCPBUGS-29230](https://issues.redhat.com/browse/OCPBUGS-29230): [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup [#2060](https://github.com/openshift/ovn-kubernetes/pull/2060)
* [OCPBUGS-28818](https://issues.redhat.com/browse/OCPBUGS-28818): Support Permanent Session Affinity [#2045](https://github.com/openshift/ovn-kubernetes/pull/2045)
* [OCPBUGS-28848](https://issues.redhat.com/browse/OCPBUGS-28848): Ignore hybrid-overlay nodes from EgressIP controller [#2040](https://github.com/openshift/ovn-kubernetes/pull/2040)
* [OCPBUGS-29001](https://issues.redhat.com/browse/OCPBUGS-29001): kubevirt, Replace routes on migration [#2052](https://github.com/openshift/ovn-kubernetes/pull/2052)
* [OCPBUGS-27947](https://issues.redhat.com/browse/OCPBUGS-27947): [release-4.15] Fix LGW ETP=Local on IPv6 [#2028](https://github.com/openshift/ovn-kubernetes/pull/2028)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2476c75ade680f6324391be71a6edfe15fb60d98...3fdc9242e361a5e5007556054f5b0cc68a5be3d4)


### [telemeter](https://github.com/openshift/telemeter/tree/80992e54778c3a9728c6db997a7ef0cae504beab)

* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Force kill jobs after integration v2 test finish [#515](https://github.com/openshift/telemeter/pull/515)
* [Full changelog](https://github.com/openshift/telemeter/compare/e1f625aa31e46a84fb5d9f97c8224b9059e27d8a...80992e54778c3a9728c6db997a7ef0cae504beab)


### [tests](https://github.com/openshift/origin/tree/8be91d0910ffca456fe5de75955f6d6d15b03fd8)

* [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28610](https://github.com/openshift/origin/pull/28610)
* [OCPBUGS-27847](https://issues.redhat.com/browse/OCPBUGS-27847): Do not assume there is just a single kubelet systemd service [#28545](https://github.com/openshift/origin/pull/28545)
* [OCPBUGS-29031](https://issues.redhat.com/browse/OCPBUGS-29031): Replace 'coreydaley' with 'sayan-biswas' [#28573](https://github.com/openshift/origin/pull/28573)
* [OCPBUGS-26487](https://issues.redhat.com/browse/OCPBUGS-26487): Increase timeout for pod-network-service [#28508](https://github.com/openshift/origin/pull/28508)
* [OCPBUGS-27934](https://issues.redhat.com/browse/OCPBUGS-27934): fix panic in service-poller [#28550](https://github.com/openshift/origin/pull/28550)
* [OCPBUGS-26960](https://issues.redhat.com/browse/OCPBUGS-26960): updated timeout to 3 seconds to account for network timing issues [#28519](https://github.com/openshift/origin/pull/28519)
* [Full changelog](https://github.com/openshift/origin/compare/5a636661527da4173703ed69d660fb0ef679401f...8be91d0910ffca456fe5de75955f6d6d15b03fd8)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/74481e34aa9c2ef2de0ce0289e2383a179d34b89)

* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Revert "Merge pull request #97 from jsafrane/rebase-v3.1.1" [#110](https://github.com/openshift/vmware-vsphere-csi-driver/pull/110)
* [OCPBUGS-26074](https://issues.redhat.com/browse/OCPBUGS-26074), [OCPBUGS-26075](https://issues.redhat.com/browse/OCPBUGS-26075), [OCPBUGS-26076](https://issues.redhat.com/browse/OCPBUGS-26076): [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 [#109](https://github.com/openshift/vmware-vsphere-csi-driver/pull/109)
* [OCPBUGS-25856](https://issues.redhat.com/browse/OCPBUGS-25856): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#107](https://github.com/openshift/vmware-vsphere-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/56a1741f76c7ab60751c3788245b9b77a82a43a9...74481e34aa9c2ef2de0ce0289e2383a179d34b89)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e0d46570a06caff3439b410b9c9f75cb383a3d2d)

* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Mark the operator as Disabled on connection error [#219](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/219)
* [OCPBUGS-27378](https://issues.redhat.com/browse/OCPBUGS-27378): Rerun checks on reconnect [#216](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/216)
* [OCPBUGS-26409](https://issues.redhat.com/browse/OCPBUGS-26409): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#207](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/207)
* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#205](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/205)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#204](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/204)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#200](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/200)
* [OCPBUGS-23970](https://issues.redhat.com/browse/OCPBUGS-23970): Enable new features to prevent CSI driver from crash looping [#192](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/192)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d18d77f8dd7b977fc34234e4e7f4cea4e35181c3...e0d46570a06caff3439b410b9c9f75cb383a3d2d)