# 4.15.0-0.okd-2024-03-10-010116

Created: 2024-03-10 06:53:44 +0000 UTC

Image Digest: `sha256:46b462be1e4c15ce5ab5fba97e713e8824bbb9f614ac5abe1be41fda916920cc`

Promoted from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-03-10-010116


## Changes from 4.15.0-0.okd-2024-01-27-070424

### Components

* Kubernetes upgraded from 1.28.6 to 1.28.7
* Fedora CoreOS upgraded from 39.20240104.3 to 39.20240210.3


### Rebuilt images without code change

* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [81ab2a17](https://github.com/openshift/cloud-network-config-controller/commit/81ab2a17f2886bccd90dddf3deb213ed368c5be2) `sha256:2aa502d6f082bc89cafdfddf4e92ff6c6e98af06f65291044f10910fc77be90f`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [c6cfbfe3](https://github.com/openshift/containernetworking-plugins/commit/c6cfbfe37adc5ecf540b1771c41bb38ad0a982d7) `sha256:a00b9f5d8a2700c0923fd527d6f41d5c9dc2aec08995b047e6369a601a7e85cd`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [e465e606](https://github.com/openshift/cloud-provider-kubevirt/commit/e465e606e7d17c64392cdeba099f9382580e44b0) `sha256:9e166053d7b8c6ffc87825ac980e8742de371db56357f82a2045f9ba9492d2ef`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [23a7cfe4](https://github.com/openshift/multus-admission-controller/commit/23a7cfe44cacd1e8c1049ee3e0a858ec01e03d44) `sha256:ee6c272fb093cff52fd906d32b7c53ffcfad94e646387f49ea9d0ec6ac1a0587`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [6212406b](https://github.com/openshift/multus-networkpolicy/commit/6212406b49cbcc75a01da85a67469b4872754e1d) `sha256:6d6fd8cb7f91959cb8cb0e0eeb40f6b4b1dde7e05f86169c7848438f7371a0d6`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [2edc45fe](https://github.com/openshift/whereabouts-cni/commit/2edc45fe57cc6c861f8014fdc514ca03442fde17) `sha256:a0026afdc40d1b962a220bca2e7f0c2b7a7a44396d866beb8aa913337c434a07`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [07e8f8b8](https://github.com/openshift/machine-api-provider-powervs/commit/07e8f8b81748d52cf596082b8102134e954137ba) `sha256:3c612d82aa0224fd9cf84c416d668acc9aa0876ad93a57b026bf4c2bdfef09fd`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [de02a75d](https://github.com/openshift/vsphere-problem-detector/commit/de02a75de63c6d8afd8467afd9aff97878d8bea4) `sha256:6645df7eb2e46641dcef34f93e429a8fd74eb4452912c82b1268afb3ff896d83`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d60e80f8658cf8a756ff4aa318983ddcf0e70bca)

* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var Deployment Type & Set ABI (#6016) [#6016](https://github.com/openshift/assisted-service/pull/6016)
* [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) [#6005](https://github.com/openshift/assisted-service/pull/6005)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5926) [#5926](https://github.com/openshift/assisted-service/pull/5926)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) [#5905](https://github.com/openshift/assisted-service/pull/5905)
* [Full changelog](https://github.com/openshift/assisted-service/compare/93179b853387f4e40c80b311d1bdfb3fb612d03d...d60e80f8658cf8a756ff4aa318983ddcf0e70bca)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/550f2a568d4b4a494b3637ebba725bdd9c26ecd9)

* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#791) [#791](https://github.com/openshift/assisted-installer/pull/791)
* [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere (#785) [#785](https://github.com/openshift/assisted-installer/pull/785)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/81ef8544529e59cafebaa094dc34cc0d6dd6bc88...550f2a568d4b4a494b3637ebba725bdd9c26ecd9)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/2e3cca19638cae3066cba27608ed61c284b4d529)

* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#77](https://github.com/openshift/cloud-provider-aws/pull/77)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/ba252ab129e78c8ce49529cb410a8742fb8e9045...2e3cca19638cae3066cba27608ed61c284b4d529)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/90771aba5adb0c3883b0927956875c94fa88e69e)

* [OCPBUGS-25510](https://issues.redhat.com/browse/OCPBUGS-25510): bump x/crypto [#100](https://github.com/openshift/machine-api-provider-azure/pull/100)
* [OCPBUGS-29007](https://issues.redhat.com/browse/OCPBUGS-29007): Don't create availability set when using spot instances [#95](https://github.com/openshift/machine-api-provider-azure/pull/95)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/7f41c22925470a14c4ed070ee41063e36ff26d9f...90771aba5adb0c3883b0927956875c94fa88e69e)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/d0a415f1cca1fa2c164aff142afa1269b6fd9865)

* [OCPBUGS-30148](https://issues.redhat.com/browse/OCPBUGS-30148): fix "OpenShiftSDN deprecated" error message [#8094](https://github.com/openshift/installer/pull/8094)
* [OCPBUGS-30011](https://issues.redhat.com/browse/OCPBUGS-30011): PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 [#8076](https://github.com/openshift/installer/pull/8076)
* [OCPBUGS-29768](https://issues.redhat.com/browse/OCPBUGS-29768): Power VS: Add sleep to allow workspace to configure PER [#8052](https://github.com/openshift/installer/pull/8052)
* Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer [#8050](https://github.com/openshift/installer/pull/8050)
* [OCPBUGS-29495](https://issues.redhat.com/browse/OCPBUGS-29495): gcp: better error msg when service accnt missing [#8024](https://github.com/openshift/installer/pull/8024)
* Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation [#8019](https://github.com/openshift/installer/pull/8019)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7996](https://github.com/openshift/installer/pull/7996)
* [OCPBUGS-28841](https://issues.redhat.com/browse/OCPBUGS-28841): PowerVS: Add dal12 region [#7977](https://github.com/openshift/installer/pull/7977)
* [OCPBUGS-29955](https://issues.redhat.com/browse/OCPBUGS-29955): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8065](https://github.com/openshift/installer/pull/8065)
* [OCPBUGS-29585](https://issues.redhat.com/browse/OCPBUGS-29585): PowerVS: handle composite_instance [#8032](https://github.com/openshift/installer/pull/8032)
* [OCPBUGS-29620](https://issues.redhat.com/browse/OCPBUGS-29620): Power VS: Fix service instance list [#8035](https://github.com/openshift/installer/pull/8035)
* [OCPBUGS-29523](https://issues.redhat.com/browse/OCPBUGS-29523): Bump terraform-provider-ibm to v1.61.0 [#8026](https://github.com/openshift/installer/pull/8026)
* [OCPBUGS-29436](https://issues.redhat.com/browse/OCPBUGS-29436): PowerVS Fix next start search [#8013](https://github.com/openshift/installer/pull/8013)
* [OCPBUGS-29442](https://issues.redhat.com/browse/OCPBUGS-29442): update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 [#8016](https://github.com/openshift/installer/pull/8016)
* [OCPBUGS-29219](https://issues.redhat.com/browse/OCPBUGS-29219): GCP: Skip validation of public and private zones for terraform vars [#7994](https://github.com/openshift/installer/pull/7994)
* [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): Copy GCP manifests within MCO bootstrap to the correct location [#7993](https://github.com/openshift/installer/pull/7993)
* [OCPBUGS-28822](https://issues.redhat.com/browse/OCPBUGS-28822): aws-edge-zones preventing err before discovering [#7973](https://github.com/openshift/installer/pull/7973)
* [OCPBUGS-29117](https://issues.redhat.com/browse/OCPBUGS-29117): IBMCloud: Handle disk delete errors [#7984](https://github.com/openshift/installer/pull/7984)
* [OCPBUGS-26036](https://issues.redhat.com/browse/OCPBUGS-26036): ic: aws: add iam:TagInstanceProfile permission requirement [#7866](https://github.com/openshift/installer/pull/7866)
* [OCPBUGS-28779](https://issues.redhat.com/browse/OCPBUGS-28779): update tested Azure Arm64 instance type on 4.15 [#7971](https://github.com/openshift/installer/pull/7971)
* [OCPBUGS-28546](https://issues.redhat.com/browse/OCPBUGS-28546): [release-4.15] Bump containerd for vulnerability fix [#7957](https://github.com/openshift/installer/pull/7957)
* [OCPBUGS-27346](https://issues.redhat.com/browse/OCPBUGS-27346): Warn that FeatureSet is not supported [#7922](https://github.com/openshift/installer/pull/7922)
* [OCPBUGS-27417](https://issues.redhat.com/browse/OCPBUGS-27417): baremetal: gather all recently refactored services [#7928](https://github.com/openshift/installer/pull/7928)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): set the --cluster-profile flag for openshift/api rendering [#7955](https://github.com/openshift/installer/pull/7955)
* [OCPBUGS-27894](https://issues.redhat.com/browse/OCPBUGS-27894): duplicate failure domains in CMPS [#7951](https://github.com/openshift/installer/pull/7951)
* [OCPBUGS-27329](https://issues.redhat.com/browse/OCPBUGS-27329): remove retired serial NCv2 from azure tested instance type list on x86 [#7921](https://github.com/openshift/installer/pull/7921)
* [Full changelog](https://github.com/openshift/installer/compare/5d2f3da52876b66638c50d45616a8bef867fdf06...d0a415f1cca1fa2c164aff142afa1269b6fd9865)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/26641cde1dfee3edc8039fccafdf0e57f0c3bf8b)

* [OCPBUGS-28838](https://issues.redhat.com/browse/OCPBUGS-28838): Extend metal3remediation aggregation role [#210](https://github.com/openshift/cluster-api-provider-baremetal/pull/210)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/83bf459dfe084e2daa7402d49279a247dad45b1a...26641cde1dfee3edc8039fccafdf0e57f0c3bf8b)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/6f83b6f752ce27c6f997f2d0706b3a79b84aa763)

* [OCPBUGS-29338](https://issues.redhat.com/browse/OCPBUGS-29338): Ignore egress IP when selecting Node IP [#299](https://github.com/openshift/baremetal-runtimecfg/pull/299)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/84581c736b84a37c319d3e527e34a7dd5cf5262f...6f83b6f752ce27c6f997f2d0706b3a79b84aa763)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d6175ebd387c07d8fd6354b476f6b1092f15ee1d)

* [OCPBUGS-30270](https://issues.redhat.com/browse/OCPBUGS-30270): Introduce --issuer-url flag in oc login [#1696](https://github.com/openshift/oc/pull/1696)
* [OCPBUGS-28204](https://issues.redhat.com/browse/OCPBUGS-28204): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1672](https://github.com/openshift/oc/pull/1672)
* [Full changelog](https://github.com/openshift/oc/compare/9ff9bd754ea6e530ffc31865fce334f3c58cadc0...d6175ebd387c07d8fd6354b476f6b1092f15ee1d)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/06a42948bf78b104e03a51bb5a555b6819db1b0a)

* [OCPBUGS-30412](https://issues.redhat.com/browse/OCPBUGS-30412): gcp actuator update check to consider custom roles [#686](https://github.com/openshift/cloud-credential-operator/pull/686)
* [OCPBUGS-29155](https://issues.redhat.com/browse/OCPBUGS-29155): Fix the ClusterOperator watch of the status controller [#675](https://github.com/openshift/cloud-credential-operator/pull/675)
* [OCPBUGS-29113](https://issues.redhat.com/browse/OCPBUGS-29113): ccoctl - use proxy when validating CloudFront URL [#674](https://github.com/openshift/cloud-credential-operator/pull/674)
* [OCPBUGS-27910](https://issues.redhat.com/browse/OCPBUGS-27910): Resolve all outstanding snyk vulnerabilities [#649](https://github.com/openshift/cloud-credential-operator/pull/649)
* [OCPBUGS-27901](https://issues.redhat.com/browse/OCPBUGS-27901): Use cached clients to avoid client side throttling [#660](https://github.com/openshift/cloud-credential-operator/pull/660)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0c0d5ff50bfb5c9aef95380b28ab08a8992a7aff...06a42948bf78b104e03a51bb5a555b6819db1b0a)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/52a7d25ade22ddcf791bf6488504e3f7ef3ae770)

* NO-JIRA: _output - remove dir [#652](https://github.com/openshift/cluster-authentication-operator/pull/652)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#647](https://github.com/openshift/cluster-authentication-operator/pull/647)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/aece7a2854ef81abc285879445e22c2a9d8bcd54...52a7d25ade22ddcf791bf6488504e3f7ef3ae770)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fdce2d0892e255240ff760e91fa8a738ae4a7556)

* [OCPBUGS-29787](https://issues.redhat.com/browse/OCPBUGS-29787): Update the leader election durations to be tolerant [#405](https://github.com/openshift/cluster-baremetal-operator/pull/405)
* [OCPBUGS-29153](https://issues.redhat.com/browse/OCPBUGS-29153): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#402](https://github.com/openshift/cluster-baremetal-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/95e6cbefed9a43562e031a6f3d9b74184c0cdc39...fdce2d0892e255240ff760e91fa8a738ae4a7556)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/c3b9ac8a39fd5bbf3d2e910fa17b38c86a58ac3a)

* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): openshift: generate separate manifest for core CAPI CRDs [#198](https://github.com/openshift/cluster-api/pull/198)
* [Full changelog](https://github.com/openshift/cluster-api/compare/db1841a6c8acc1741010dfbd0b81e9233de0ef0b...c3b9ac8a39fd5bbf3d2e910fa17b38c86a58ac3a)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/c8c94baccbe1d87f08d2d2349749ca31296b85ba)

* [OCPBUGS-25505](https://issues.redhat.com/browse/OCPBUGS-25505): UPSTREAM: <carry>: bump x/crypto [#165](https://github.com/openshift/cluster-capi-operator/pull/165)
* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): manifests-gen: store core capi crds also in their own manifest [#160](https://github.com/openshift/cluster-capi-operator/pull/160)
* [OCPBUGS-28754](https://issues.redhat.com/browse/OCPBUGS-28754): Start operator controllers only on supported platforms, add unsupported controller [#158](https://github.com/openshift/cluster-capi-operator/pull/158)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/fc98dca3226e7ed5667e03284d685a190fd82811...c8c94baccbe1d87f08d2d2349749ca31296b85ba)


### [cluster-config-api](https://github.com/openshift/api/tree/4511c790cc60bf2a0393c34739cf9e71d1648b39)

* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#1767](https://github.com/openshift/api/pull/1767)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): allow multiple audiences to be configured for kube-apiserver [#1772](https://github.com/openshift/api/pull/1772)
* [OCPBUGS-29074](https://issues.redhat.com/browse/OCPBUGS-29074): Move network.config conditions to GA [#1756](https://github.com/openshift/api/pull/1756)
* [NP-905](https://issues.redhat.com/browse/NP-905): [release-4.15] Promote Live Migration to GA [#1749](https://github.com/openshift/api/pull/1749)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Allow modified IPv6 address as CPIC name [#1750](https://github.com/openshift/api/pull/1750)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): add separate authentication config manifest for hypershift [#1743](https://github.com/openshift/api/pull/1743)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): respect the cluster profile in rendering [#1735](https://github.com/openshift/api/pull/1735)
* [Full changelog](https://github.com/openshift/api/compare/11ed2fbcb80554091d74c53f3b5e589fd5934d36...4511c790cc60bf2a0393c34739cf9e71d1648b39)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/cc1fb201a307c049036c8307d950e5cde9e565ca)

* [OCPBUGS-28622](https://issues.redhat.com/browse/OCPBUGS-28622): Add required PSa labels [#402](https://github.com/openshift/cluster-config-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/c436b7ae2fe1372112d58eae29a75cc8d48e8193...cc1fb201a307c049036c8307d950e5cde9e565ca)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/673e7da36cad22402065e2952b4e06aff0cb9c99)

* [OCPBUGS-29419](https://issues.redhat.com/browse/OCPBUGS-29419): Never delete a Machine when there's a single Machine in an index [#280](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/280)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#279](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/279)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/d3e0fe7d4036f19cd1db69f03153a56136ed6c55...673e7da36cad22402065e2952b4e06aff0cb9c99)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9d596e149a662ff77d235b3c7e4b69f34638c2ed)

* [OCPBUGS-30042](https://issues.redhat.com/browse/OCPBUGS-30042): fix condition name type [#1212](https://github.com/openshift/cluster-etcd-operator/pull/1212)
* [OCPBUGS-28628](https://issues.redhat.com/browse/OCPBUGS-28628): fix panic in health check timeouts [#1191](https://github.com/openshift/cluster-etcd-operator/pull/1191)
* [OCPBUGS-29717](https://issues.redhat.com/browse/OCPBUGS-29717): [4.15] Replace nodelister with master nodelister everywhere [#1206](https://github.com/openshift/cluster-etcd-operator/pull/1206)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/85e53769e692705f1f7e9e749edf5d957fc2cf17...9d596e149a662ff77d235b3c7e4b69f34638c2ed)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/f122f0b9a706abff7610f732cba4dd6eca9771f6)

* [OCPBUGS-29983](https://issues.redhat.com/browse/OCPBUGS-29983): cmd/move-blobs: log and exit 1 on error instead of panic [#1009](https://github.com/openshift/cluster-image-registry-operator/pull/1009)
* [OCPBUGS-29638](https://issues.redhat.com/browse/OCPBUGS-29638): azurepathfix: fix stack hub, government and workload identity setup [#1004](https://github.com/openshift/cluster-image-registry-operator/pull/1004)
* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): move azure storage blobs from `docker` back into `/docker` [#1000](https://github.com/openshift/cluster-image-registry-operator/pull/1000)
* [OCPBUGS-28830](https://issues.redhat.com/browse/OCPBUGS-28830): pkg/storage/s3: enable bucket key on encryption settings [#994](https://github.com/openshift/cluster-image-registry-operator/pull/994)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/83eb04fe3e61954a1e1b5aeed81c985784bae2ad...f122f0b9a706abff7610f732cba4dd6eca9771f6)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0106cb99b340a2f266a88700b4250f11457ffb05)

* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1022](https://github.com/openshift/cluster-ingress-operator/pull/1022)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/611011bdc0586878923efe69a3c2f6caa885dbc4...0106cb99b340a2f266a88700b4250f11457ffb05)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9fe0ab100bc6241030bf6ad1fc3f554ad0b0faf1)

* [OCPBUGS-30304](https://issues.redhat.com/browse/OCPBUGS-30304): cert rotation: Bump library-go to latest master [#1653](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1653)
* [OCPBUGS-29775](https://issues.redhat.com/browse/OCPBUGS-29775): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1647](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1647)
* [OCPBUGS-30180](https://issues.redhat.com/browse/OCPBUGS-30180): add provider name to cluster_infrastructure_provider when external platform [#1639](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1639)
* [OCPBUGS-28882](https://issues.redhat.com/browse/OCPBUGS-28882): Add sno section to alert description [#1636](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1636)
* [OCPBUGS-27491](https://issues.redhat.com/browse/OCPBUGS-27491): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1628](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1628)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9f6208d68b7207e819767ffbad8bb95e6b8b7bb2...9fe0ab100bc6241030bf6ad1fc3f554ad0b0faf1)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/128d8e08c48e2002c416e84d0dec816bf5999c7e)

* [OCPBUGS-23711](https://issues.redhat.com/browse/OCPBUGS-23711): Add Snyk file to exclude vendor directory on scan [#34](https://github.com/openshift/cluster-api-operator/pull/34)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/097921fbf0741446d0f4297a71f0765dfcd7eeea...128d8e08c48e2002c416e84d0dec816bf5999c7e)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)

* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Increase concurrent reconciles to 10 [#226](https://github.com/openshift/cluster-machine-approver/pull/226)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d537432fe131629ccfbb8ca099d4570bad07c3d5...3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a13d634285e9142a75b82f84c4ce62d2ac7e3ed1)

* [OCPBUGS-28703](https://issues.redhat.com/browse/OCPBUGS-28703): rollout metrics-server on cert rotations [#2249](https://github.com/openshift/cluster-monitoring-operator/pull/2249)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e04826eb2a14e0cdf51ea399b35444a93dfed0ff...a13d634285e9142a75b82f84c4ce62d2ac7e3ed1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/4ad3c08b7b9f35224bdad111fc7b0205e0732f93)

* [OCPBUGS-29090](https://issues.redhat.com/browse/OCPBUGS-29090): network-node-identity mounts secrets with mode 0640 [#2251](https://github.com/openshift/cluster-network-operator/pull/2251)
* [OCPBUGS-29390](https://issues.redhat.com/browse/OCPBUGS-29390): ipsec: fix openssl typo [#2272](https://github.com/openshift/cluster-network-operator/pull/2272)
* [OCPBUGS-29522](https://issues.redhat.com/browse/OCPBUGS-29522): Not set CNO to degraded if API server returns conflict error [#2275](https://github.com/openshift/cluster-network-operator/pull/2275)
* [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): [release-4.15] Disable network-node-identity on ROKS [#2278](https://github.com/openshift/cluster-network-operator/pull/2278)
* [OCPBUGS-29299](https://issues.redhat.com/browse/OCPBUGS-29299): Update ingressconfig_controller to use field Manager [#2265](https://github.com/openshift/cluster-network-operator/pull/2265)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Fix CloudPrivateIPConfig CRD in common [#2263](https://github.com/openshift/cluster-network-operator/pull/2263)
* [OCPBUGS-29082](https://issues.redhat.com/browse/OCPBUGS-29082), [OCPBUGS-29150](https://issues.redhat.com/browse/OCPBUGS-29150): Remove libreswan rpm existence checks [#2255](https://github.com/openshift/cluster-network-operator/pull/2255)
* [OCPBUGS-28778](https://issues.redhat.com/browse/OCPBUGS-28778): add env var in whereabouts-reconciler daemonset [#2242](https://github.com/openshift/cluster-network-operator/pull/2242)
* [OCPBUGS-27421](https://issues.redhat.com/browse/OCPBUGS-27421): Only reconcile on Node updates with Label changes [#2212](https://github.com/openshift/cluster-network-operator/pull/2212)
* [OCPBUGS-27199](https://issues.redhat.com/browse/OCPBUGS-27199): Remove egressip write permissions from ovn-kubernetes-node [#2203](https://github.com/openshift/cluster-network-operator/pull/2203)
* [OCPBUGS-27174](https://issues.redhat.com/browse/OCPBUGS-27174): network node identity: tolarate all taints [#2202](https://github.com/openshift/cluster-network-operator/pull/2202)
* [NP-905](https://issues.redhat.com/browse/NP-905), [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Bump openshift API [#2247](https://github.com/openshift/cluster-network-operator/pull/2247)
* [OCPBUGS-28904](https://issues.redhat.com/browse/OCPBUGS-28904): [release-4.15] Restrict live migration to standalone managed clusters [#2243](https://github.com/openshift/cluster-network-operator/pull/2243)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 [#2227](https://github.com/openshift/cluster-network-operator/pull/2227)
* [OCPBUGS-28214](https://issues.redhat.com/browse/OCPBUGS-28214): Not update migration conditions when any MCP is updating [#2223](https://github.com/openshift/cluster-network-operator/pull/2223)
* [OCPBUGS-27777](https://issues.redhat.com/browse/OCPBUGS-27777): Deploy CNO IPsec MC even if user already have one [#2215](https://github.com/openshift/cluster-network-operator/pull/2215)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8b91c0ba0c12a6f4e1d221805df2f5027c076f54...4ad3c08b7b9f35224bdad111fc7b0205e0732f93)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fc57075824faa9ccb64f7f4d2cd381c204c48490)

* [OCPBUGS-29752](https://issues.redhat.com/browse/OCPBUGS-29752): [release-4.15][manual] backport performance profile owner reference ehnancements (#963) [#963](https://github.com/openshift/cluster-node-tuning-operator/pull/963)
* Render: Add MCSelector to missing default MCPs (#959) [#959](https://github.com/openshift/cluster-node-tuning-operator/pull/959)
* Add support to inject owner-ref argument to render command (#966) [#966](https://github.com/openshift/cluster-node-tuning-operator/pull/966)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): Mixed CPUs e2e tests (#952) [#952](https://github.com/openshift/cluster-node-tuning-operator/pull/952)
* [OCPBUGS-27227](https://issues.redhat.com/browse/OCPBUGS-27227): irqbalance: set banned cpus list to '0' (#953) [#953](https://github.com/openshift/cluster-node-tuning-operator/pull/953)
* [OCPBUGS-29396](https://issues.redhat.com/browse/OCPBUGS-29396): Labels for e2e testing  (#949) [#949](https://github.com/openshift/cluster-node-tuning-operator/pull/949)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): e2e: cgroups: introduce cgroup package (#942) [#942](https://github.com/openshift/cluster-node-tuning-operator/pull/942)
* makefile: add target to trigger mixedcpus e2e test (#941) [#941](https://github.com/openshift/cluster-node-tuning-operator/pull/941)
* [OCPBUGS-27948](https://issues.redhat.com/browse/OCPBUGS-27948): Tuned rendering and MCP detection improvements (#928) [#928](https://github.com/openshift/cluster-node-tuning-operator/pull/928)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b4be0464700b4597bab8f7f083d116d357caa841...fc57075824faa9ccb64f7f4d2cd381c204c48490)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/f189a00839491e166cd0220afe11d35cdb844754)

* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#319](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/319)
* [OCPBUGS-28946](https://issues.redhat.com/browse/OCPBUGS-28946): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#327](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/327)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e87e15acee1bbdbc1663aec1bda9517a876023f2...f189a00839491e166cd0220afe11d35cdb844754)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/37a0a919b1032f7affa49b756eda4762d77751d5)

* [OCPBUGS-24077](https://issues.redhat.com/browse/OCPBUGS-24077): Updating ose-cluster-platform-operators-manager-container image to be consistent with ART [#104](https://github.com/openshift/platform-operators/pull/104)
* [Full changelog](https://github.com/openshift/platform-operators/compare/25dbb307143ea9576fc977f737c0331a9b8e879f...37a0a919b1032f7affa49b756eda4762d77751d5)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/1a2443a7fe8a00597f8c19382fb8ce617943029c)

* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all curren [#461](https://github.com/openshift/cluster-storage-operator/pull/461)
* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Allow vSphere CSI driver to be disabled [#446](https://github.com/openshift/cluster-storage-operator/pull/446)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/2a80235ba78e865e5395ae606ad9e74cbfd0e82f...1a2443a7fe8a00597f8c19382fb8ce617943029c)


### [console](https://github.com/openshift/console/tree/3ba6e63b106a9d10983887431ed705e48c401250)

* [OCPBUGS-25831](https://issues.redhat.com/browse/OCPBUGS-25831): Date&Time values are not showing as per browser default language [#13467](https://github.com/openshift/console/pull/13467)
* [OCPBUGS-29080](https://issues.redhat.com/browse/OCPBUGS-29080): make getGroupVersionKindForResource null safe [#13582](https://github.com/openshift/console/pull/13582)
* [OCPBUGS-29781](https://issues.redhat.com/browse/OCPBUGS-29781): Fix operands list endpoint. [#13633](https://github.com/openshift/console/pull/13633)
* [OCPBUGS-29812](https://issues.redhat.com/browse/OCPBUGS-29812): Changes to prevent yaml editor crash in version 4.15 [#13638](https://github.com/openshift/console/pull/13638)
* [OCPBUGS-29842](https://issues.redhat.com/browse/OCPBUGS-29842): Switch to service from external result route endpoint [#13627](https://github.com/openshift/console/pull/13627)
* [OCPBUGS-28889](https://issues.redhat.com/browse/OCPBUGS-28889): VolumeSnapshots data not displayed in PVC >  VolumeSnapshots tab [#13570](https://github.com/openshift/console/pull/13570)
* [OCPBUGS-27431](https://issues.redhat.com/browse/OCPBUGS-27431): Add source maps to production builds [#13526](https://github.com/openshift/console/pull/13526)
* [OCPBUGS-26481](https://issues.redhat.com/browse/OCPBUGS-26481): Tab VolumeSnapshots crashed on PVC page [#13490](https://github.com/openshift/console/pull/13490)
* [OCPBUGS-25984](https://issues.redhat.com/browse/OCPBUGS-25984): Fix config ini format [#13475](https://github.com/openshift/console/pull/13475)
* [OCPBUGS-29844](https://issues.redhat.com/browse/OCPBUGS-29844): Enable catalog source badge to truncate for long names [#13629](https://github.com/openshift/console/pull/13629)
* [OCPBUGS-29846](https://issues.redhat.com/browse/OCPBUGS-29846): Prevent complete page reload when changing perspective [#13631](https://github.com/openshift/console/pull/13631)
* [OCPBUGS-29845](https://issues.redhat.com/browse/OCPBUGS-29845): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13630](https://github.com/openshift/console/pull/13630)
* [OCPBUGS-29843](https://issues.redhat.com/browse/OCPBUGS-29843): improve empty state message for Machines and MachineSets page [#13628](https://github.com/openshift/console/pull/13628)
* [OCPBUGS-29679](https://issues.redhat.com/browse/OCPBUGS-29679): TaskRuns list page is loading constantly for all projects [#13618](https://github.com/openshift/console/pull/13618)
* [OCPBUGS-29640](https://issues.redhat.com/browse/OCPBUGS-29640): Output image url link leads to 404 for Shipwright Builds [#13615](https://github.com/openshift/console/pull/13615)
* [OCPBUGS-28232](https://issues.redhat.com/browse/OCPBUGS-28232): do not deduplicate ImageManifestVulns in Overview popover [#13545](https://github.com/openshift/console/pull/13545)
* chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13594](https://github.com/openshift/console/pull/13594)
* [OCPBUGS-26567](https://issues.redhat.com/browse/OCPBUGS-26567): Fixed some problems in topology Chinese translation text [#13498](https://github.com/openshift/console/pull/13498)
* [OCPBUGS-29914](https://issues.redhat.com/browse/OCPBUGS-29914): [release-4.15] Use selfsubjectreview API from frontend [#13636](https://github.com/openshift/console/pull/13636)
* [OCPBUGS-29345](https://issues.redhat.com/browse/OCPBUGS-29345): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13599](https://github.com/openshift/console/pull/13599)
* [OCPBUGS-29096](https://issues.redhat.com/browse/OCPBUGS-29096): Add TaskRun tab in PLR details page using plugin [#13584](https://github.com/openshift/console/pull/13584)
* [OCPBUGS-29217](https://issues.redhat.com/browse/OCPBUGS-29217): Revision tab and routes tab in serving details page showing no resource found [#13590](https://github.com/openshift/console/pull/13590)
* [OCPBUGS-26411](https://issues.redhat.com/browse/OCPBUGS-26411): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13486](https://github.com/openshift/console/pull/13486)
* [OCPBUGS-28537](https://issues.redhat.com/browse/OCPBUGS-28537): remove "openshift-storage" namespace usage from the console [#13548](https://github.com/openshift/console/pull/13548)
* [OCPBUGS-29283](https://issues.redhat.com/browse/OCPBUGS-29283): Error in displaying BuildRun logs in Console [#13595](https://github.com/openshift/console/pull/13595)
* [OCPBUGS-28917](https://issues.redhat.com/browse/OCPBUGS-28917): Optimize federation of shared PF5 code for dynamic plugins [#13566](https://github.com/openshift/console/pull/13566)
* [OCPBUGS-29022](https://issues.redhat.com/browse/OCPBUGS-29022): fix i18n for Remove volume modal [#13575](https://github.com/openshift/console/pull/13575)
* [OCPBUGS-28940](https://issues.redhat.com/browse/OCPBUGS-28940): AUTH-440: fix usersettings identifier creation [#13571](https://github.com/openshift/console/pull/13571)
* [OCPBUGS-27012](https://issues.redhat.com/browse/OCPBUGS-27012): update check for the 'provider' label on the PackageMa… [#13501](https://github.com/openshift/console/pull/13501)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13563](https://github.com/openshift/console/pull/13563)
* [OCPBUGS-28591](https://issues.redhat.com/browse/OCPBUGS-28591): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13551](https://github.com/openshift/console/pull/13551)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-27235](https://issues.redhat.com/browse/OCPBUGS-27235): backend: use the k8s SelfSubjectReview API to get info about a user [#13514](https://github.com/openshift/console/pull/13514)
* [OCPBUGS-27896](https://issues.redhat.com/browse/OCPBUGS-27896): Add flags checks to hide Pipeline static plugin List and details pages [#13536](https://github.com/openshift/console/pull/13536)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13509](https://github.com/openshift/console/pull/13509)
* [OCPBUGS-27909](https://issues.redhat.com/browse/OCPBUGS-27909): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13542](https://github.com/openshift/console/pull/13542)
* [Full changelog](https://github.com/openshift/console/compare/1756a41ea81c9078259de178c43304693fb2cc96...3ba6e63b106a9d10983887431ed705e48c401250)


### [console-operator](https://github.com/openshift/console-operator/tree/e9ec54b60ce943bace46ef7493452e2be3c39983)

* [OCPBUGS-27113](https://issues.redhat.com/browse/OCPBUGS-27113): Prevent healthcheck controller from Available=False blipping [#835](https://github.com/openshift/console-operator/pull/835)
* [OCPBUGS-29658](https://issues.redhat.com/browse/OCPBUGS-29658): oauthclients: further split oidc and integrated oauth handling [#870](https://github.com/openshift/console-operator/pull/870)
* always sync oidcClients in authn status if the field is present [#859](https://github.com/openshift/console-operator/pull/859)
* [OCPBUGS-29010](https://issues.redhat.com/browse/OCPBUGS-29010): oauthclients: fix oauthclients degraded condition that never gets removed [#856](https://github.com/openshift/console-operator/pull/856)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#854](https://github.com/openshift/console-operator/pull/854)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#853](https://github.com/openshift/console-operator/pull/853)
* [OCPBUGS-22681](https://issues.redhat.com/browse/OCPBUGS-22681): Bump documentationBaseURL to 4.15 [#807](https://github.com/openshift/console-operator/pull/807)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#852](https://github.com/openshift/console-operator/pull/852)
* pick of OCPBUGS-27221: make it impossible double set conditions in a single loop [#851](https://github.com/openshift/console-operator/pull/851)
* [Full changelog](https://github.com/openshift/console-operator/compare/6f516b82c0a1f621ffec02694d9eeebdb8c600cb...e9ec54b60ce943bace46ef7493452e2be3c39983)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/1bec5942cd0651a3c2f7114368591f334952ceda)

* Make sure we don't mask LB tests failures and fix what was failing (#2360) (#2537) [#2360](https://github.com/openshift/cloud-provider-openstack/pull/2360)
* Remove handling code for glog (#2534) [#2534](https://github.com/openshift/cloud-provider-openstack/pull/2534)
* Bump golangci-lint for go 1.22 (#2545) [#2545](https://github.com/openshift/cloud-provider-openstack/pull/2545)
* Delete LB that gone into ERROR state (#2536) [#2536](https://github.com/openshift/cloud-provider-openstack/pull/2536)
* Add ability to add Events by OCCM (#2539) [#2539](https://github.com/openshift/cloud-provider-openstack/pull/2539)
* Lookup ports by SG and not tags (#2355) (#2538) [#2355](https://github.com/openshift/cloud-provider-openstack/pull/2355)
* retry ubuntu image download on temp error (#2506) [#2506](https://github.com/openshift/cloud-provider-openstack/pull/2506)
* update k8s.io/kubernetes to v1.28.4 in go.mod (#2496) [#2496](https://github.com/openshift/cloud-provider-openstack/pull/2496)
* Implement imagePullSecret support for release 1.28 (#2445) [#2445](https://github.com/openshift/cloud-provider-openstack/pull/2445)
* fix: octavia tlsContainerRef validation for barbican secrets (#2458) [#2458](https://github.com/openshift/cloud-provider-openstack/pull/2458)
* Remove duplicate pflag.Parse calls (#2467) [#2467](https://github.com/openshift/cloud-provider-openstack/pull/2467)
* manage-security-groups: Only add SGs to LB members (#2455) (#2466) [#2455](https://github.com/openshift/cloud-provider-openstack/pull/2455)
* Use standard service account name in OCCM helm chart (#2447) [#2447](https://github.com/openshift/cloud-provider-openstack/pull/2447)
* 1.28.1 release (#2426) [#2426](https://github.com/openshift/cloud-provider-openstack/pull/2426)
* delete barbican secret after the LB deletetion (#2424) [#2424](https://github.com/openshift/cloud-provider-openstack/pull/2424)
* ensure octavia monitor is always updated (#2382) [#2382](https://github.com/openshift/cloud-provider-openstack/pull/2382)
* add `max_retries_down` support for octavia health monitors (#2379) [#2379](https://github.com/openshift/cloud-provider-openstack/pull/2379)
* Fix multiarch builds of Cinder CSI (#2342) [#2342](https://github.com/openshift/cloud-provider-openstack/pull/2342)
* update tags (#2336) [#2336](https://github.com/openshift/cloud-provider-openstack/pull/2336)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/e1a9f48173b0056dc96b62ef6b141ccc1838cebc...1bec5942cd0651a3c2f7114368591f334952ceda)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/260a085ae25606bba7a94cdfed88f67265905ba9)

* [OCPBUGS-28944](https://issues.redhat.com/browse/OCPBUGS-28944): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#166](https://github.com/openshift/csi-driver-shared-resource/pull/166)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/0b75c0afd6b3b94f19b6763d307fda358c68e522...260a085ae25606bba7a94cdfed88f67265905ba9)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/8d017b7f19f0226dfd4fc7933271939c550d180f)

* [OCPBUGS-28956](https://issues.redhat.com/browse/OCPBUGS-28956): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#102](https://github.com/openshift/csi-driver-shared-resource-operator/pull/102)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/e466c41d9439b1826c51ed8856e0428941eeaf35...8d017b7f19f0226dfd4fc7933271939c550d180f)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13)

* [OCPBUGS-29336](https://issues.redhat.com/browse/OCPBUGS-29336): cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#143](https://github.com/openshift/csi-external-snapshotter/pull/143)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/090cd57847b98aebe42ecd5091c3a626eb870022...50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13)


### [docker-builder](https://github.com/openshift/builder/tree/630692db2a3a39369d3c772a2543d7f2ea198455)

* [OCPBUGS-28948](https://issues.redhat.com/browse/OCPBUGS-28948): Replace 'coreydaley' with 'sayan-biswas' [#378](https://github.com/openshift/builder/pull/378)
* [Full changelog](https://github.com/openshift/builder/compare/0c0a73b21b471a2194713fa2c19d40cdbff26fa5...630692db2a3a39369d3c772a2543d7f2ea198455)


### [docker-registry](https://github.com/openshift/image-registry/tree/340eda0bfc9a86254d7f0f37cd6a5320779ecf81)

* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): bump docker-distribution to fix azure path issue [#393](https://github.com/openshift/image-registry/pull/393)
* [Full changelog](https://github.com/openshift/image-registry/compare/9c3215bd57d45f58f4178ead0041b71e545a1815...340eda0bfc9a86254d7f0f37cd6a5320779ecf81)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/6c35a5c2bc2bb839a85f0a67b0b739ba37cae1af)

* Bump Fedora CoreOS version string [#759](https://github.com/openshift/okd-machine-os/pull/759)
* Bump fedora-coreos to latest stable [#755](https://github.com/openshift/okd-machine-os/pull/755)
* Bump fedora-coreos to latest stable [#751](https://github.com/openshift/okd-machine-os/pull/751)
* Bump fedora-coreos to latest stable [#748](https://github.com/openshift/okd-machine-os/pull/748)
* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): Install ecr-credential-provider from artifacts instead of stub script [#747](https://github.com/openshift/okd-machine-os/pull/747)
* Bump Fedora CoreOS version string [#744](https://github.com/openshift/okd-machine-os/pull/744)
* Bump fedora-coreos to latest stable [#739](https://github.com/openshift/okd-machine-os/pull/739)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/9cb91592b487d56a05084f4a4df4511f444e3930...6c35a5c2bc2bb839a85f0a67b0b739ba37cae1af)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/6e2789bbd5893851c8bc4423e0090cd71b64f436)

* [OCPBUGS-29661](https://issues.redhat.com/browse/OCPBUGS-29661): Bump to 1.28.7 [#1891](https://github.com/openshift/kubernetes/pull/1891)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): structuredAuthenticationConfig for kube 1.28-ish [#1884](https://github.com/openshift/kubernetes/pull/1884)
* [OCPBUGS-27343](https://issues.redhat.com/browse/OCPBUGS-27343): UPSTREAM: <carry>: Update management webhook pod admission logic [#1854](https://github.com/openshift/kubernetes/pull/1854)
* [OCPBUGS-28209](https://issues.redhat.com/browse/OCPBUGS-28209): UPSTREAM <carry>: use snyk file [#1873](https://github.com/openshift/kubernetes/pull/1873)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1878](https://github.com/openshift/kubernetes/pull/1878)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0fb47263bee9d427fb36e6581023d40bce8933d1...6e2789bbd5893851c8bc4423e0090cd71b64f436)


### [hypershift](https://github.com/openshift/hypershift/tree/4f6c741c83626291f44d7cb623242056f7cde21c)

* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3705](https://github.com/openshift/hypershift/pull/3705)
* [OCPBUGS-30189](https://issues.redhat.com/browse/OCPBUGS-30189): set Konnectivity cipher suites [#3673](https://github.com/openshift/hypershift/pull/3673)
* "[release-4.15] OCPBUGS-27500: Fix default release image lookup" [#3549](https://github.com/openshift/hypershift/pull/3549)
* [OCPBUGS-30284](https://issues.redhat.com/browse/OCPBUGS-30284): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3694](https://github.com/openshift/hypershift/pull/3694)
* [OCPBUGS-30281](https://issues.redhat.com/browse/OCPBUGS-30281): [release-4.15] OCPBUGS-30102: Support to disable machine management components [#3670](https://github.com/openshift/hypershift/pull/3670)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3675](https://github.com/openshift/hypershift/pull/3675)
* Update RHTAP references (release-4.15) [#3645](https://github.com/openshift/hypershift/pull/3645)
* [HOSTEDCP-1405](https://issues.redhat.com/browse/HOSTEDCP-1405): Remove files not needed [#3669](https://github.com/openshift/hypershift/pull/3669)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3648](https://github.com/openshift/hypershift/pull/3648)
* [OCPBUGS-30088](https://issues.redhat.com/browse/OCPBUGS-30088): rollout kas on auth config change [#3653](https://github.com/openshift/hypershift/pull/3653)
* NO-JIRA: remove PrivateIngressController cleanup [#3646](https://github.com/openshift/hypershift/pull/3646)
* [OCPBUGS-29880](https://issues.redhat.com/browse/OCPBUGS-29880): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3632](https://github.com/openshift/hypershift/pull/3632)
* [OCPBUGS-29025](https://issues.redhat.com/browse/OCPBUGS-29025): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3522](https://github.com/openshift/hypershift/pull/3522)
* [OCPBUGS-30029](https://issues.redhat.com/browse/OCPBUGS-30029): sync AuthenticationConfiguration type with o/k 1.28 carry [#3644](https://github.com/openshift/hypershift/pull/3644)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#3643](https://github.com/openshift/hypershift/pull/3643)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3606](https://github.com/openshift/hypershift/pull/3606)
* [OCPBUGS-29850](https://issues.redhat.com/browse/OCPBUGS-29850): control-plane-pki-operator: fix CA used for SRE client credentials [#3626](https://github.com/openshift/hypershift/pull/3626)
* NO-JIRA: PDB backports [#3628](https://github.com/openshift/hypershift/pull/3628)
* [OCPBUGS-29780](https://issues.redhat.com/browse/OCPBUGS-29780): use 2040 for apiserver svc in IBM provider [#3595](https://github.com/openshift/hypershift/pull/3595)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3607](https://github.com/openshift/hypershift/pull/3607)
* [OCPBUGS-28543](https://issues.redhat.com/browse/OCPBUGS-28543): Include OperatorHubSpec sync with HC when Config is empty [#3480](https://github.com/openshift/hypershift/pull/3480)
* [OCPBUGS-29508](https://issues.redhat.com/browse/OCPBUGS-29508): Default NodeUpgradeType on day2 nodepool creation [#3582](https://github.com/openshift/hypershift/pull/3582)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3529](https://github.com/openshift/hypershift/pull/3529)
* NO-JIRA: Approvers update [#3579](https://github.com/openshift/hypershift/pull/3579)
* [OCPBUGS-27149](https://issues.redhat.com/browse/OCPBUGS-27149): Add storage, csisnapshotcontroller and clustercsidrive… [#3421](https://github.com/openshift/hypershift/pull/3421)
* [OCPBUGS-29416](https://issues.redhat.com/browse/OCPBUGS-29416): hypershift-operator: don't create PKI rbac when disabled [#3565](https://github.com/openshift/hypershift/pull/3565)
* [OCPBUGS-29418](https://issues.redhat.com/browse/OCPBUGS-29418): control-plane-pki-operator: add a signer for SRE break-glass [#3566](https://github.com/openshift/hypershift/pull/3566)
* [OCPBUGS-29089](https://issues.redhat.com/browse/OCPBUGS-29089): Make ControllerAvailabilityPolicy immutable [#3533](https://github.com/openshift/hypershift/pull/3533)
* [OCPBUGS-29310](https://issues.redhat.com/browse/OCPBUGS-29310): control-plane-pki-operator: validate CN for CSR [#3558](https://github.com/openshift/hypershift/pull/3558)
* [OCPBUGS-29303](https://issues.redhat.com/browse/OCPBUGS-29303): release-4.15: revocation controller backport [#3532](https://github.com/openshift/hypershift/pull/3532)
* [OCPBUGS-29020](https://issues.redhat.com/browse/OCPBUGS-29020): reduce external-dns route53 call volume [#3521](https://github.com/openshift/hypershift/pull/3521)
* [OCPBUGS-29179](https://issues.redhat.com/browse/OCPBUGS-29179): [4.15] reflect NodePool replica count nil in status [#3473](https://github.com/openshift/hypershift/pull/3473)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3537](https://github.com/openshift/hypershift/pull/3537)
* [OCPBUGS-29029](https://issues.redhat.com/browse/OCPBUGS-29029): Add ValidatingAdmissionPolicy to KAS config [#3523](https://github.com/openshift/hypershift/pull/3523)
* [OCPBUGS-28764](https://issues.redhat.com/browse/OCPBUGS-28764): node spread anti-affinity for HA HCP [#3495](https://github.com/openshift/hypershift/pull/3495)
* [OCPBUGS-28603](https://issues.redhat.com/browse/OCPBUGS-28603): Remove webhook validations that introduce resource ordering [#3515](https://github.com/openshift/hypershift/pull/3515)
* [OCPBUGS-28594](https://issues.redhat.com/browse/OCPBUGS-28594): backport API moves [#3482](https://github.com/openshift/hypershift/pull/3482)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3502](https://github.com/openshift/hypershift/pull/3502)
* [OCPBUGS-27818](https://issues.redhat.com/browse/OCPBUGS-27818): Add GC knobs for KAS [#3457](https://github.com/openshift/hypershift/pull/3457)
* [OCPBUGS-27103](https://issues.redhat.com/browse/OCPBUGS-27103): hcco: use manual mode for CCO [#3420](https://github.com/openshift/hypershift/pull/3420)
* NO-JIRA: kubevirt, e2e Add additional network test [#3499](https://github.com/openshift/hypershift/pull/3499)
* [CNV-37394](https://issues.redhat.com/browse/CNV-37394): Remove '--attach-default-network' from productized cli [#3500](https://github.com/openshift/hypershift/pull/3500)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): indicate cluster profile to render the correct manifests [#3465](https://github.com/openshift/hypershift/pull/3465)
* [OCPBUGS-28235](https://issues.redhat.com/browse/OCPBUGS-28235): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3467](https://github.com/openshift/hypershift/pull/3467)
* [Full changelog](https://github.com/openshift/hypershift/compare/b41f167731a7941bc764fdfdacb6962f7f1df384...4f6c741c83626291f44d7cb623242056f7cde21c)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/34fb625247f6743637b0ef0c5767e000e0ec1e65)

* [OCPBUGS-25507](https://issues.redhat.com/browse/OCPBUGS-25507): update golang.org/x/crypto module [#78](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/78)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/7c4b63bcc763c822155f3dc8f890792409d8d1cd...34fb625247f6743637b0ef0c5767e000e0ec1e65)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a6923466398b283a68b78fad9b1f2c5ccf9eaded)

* Add extra check in ids to bypass validations (#901) [#901](https://github.com/openshift/insights-operator/pull/901)
* gather etcd_server_slow metrics (#900) [#900](https://github.com/openshift/insights-operator/pull/900)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ff5e3ff1e4af5368aa33ac90cb5f4b5ec4ba0f66...a6923466398b283a68b78fad9b1f2c5ccf9eaded)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/39d5064babe4291e475268666b28b62004235e43)

* [OCPBUGS-30078](https://issues.redhat.com/browse/OCPBUGS-30078): [release-4.15] OCPBUGS-30078: Fix tripleo url with commit hash for openstack repos config [#115](https://github.com/openshift/ironic-agent-image/pull/115)
* [OCPBUGS-28756](https://issues.redhat.com/browse/OCPBUGS-28756): Always add ignition to set hostname on /etc/hostname [#108](https://github.com/openshift/ironic-agent-image/pull/108)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/0145f7ac0b3f7dfa34e7513e63c665d1ab787f27...39d5064babe4291e475268666b28b62004235e43)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/71a6f28d69f77953d104219cee344a70f7cbede1)

* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image (attempt #2) [#617](https://github.com/openshift/sdn/pull/617)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Revert #613 "OCPBUGS-28580: Move sdn to RHEL9 base image" [#616](https://github.com/openshift/sdn/pull/616)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image [#613](https://github.com/openshift/sdn/pull/613)
* [OCPBUGS-28549](https://issues.redhat.com/browse/OCPBUGS-28549): Add Snyk file to exclude directories on scan [#614](https://github.com/openshift/sdn/pull/614)
* [Full changelog](https://github.com/openshift/sdn/compare/308ab5d23898f333c79c2e8881f636b273a1af5f...71a6f28d69f77953d104219cee344a70f7cbede1)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e2b4537e57f4407e5469ad673dda126df5bb2a8b)

* [OCPBUGS-28762](https://issues.redhat.com/browse/OCPBUGS-28762): Add additional vnet join permission for Azure [#1216](https://github.com/openshift/machine-api-operator/pull/1216)
* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Set --max-concurrent-reconciles=10 for Azure machine controller [#1210](https://github.com/openshift/machine-api-operator/pull/1210)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/cf0b671267745df55589b57024d99d7d7aaa86b4...e2b4537e57f4407e5469ad673dda126df5bb2a8b)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6eb0e07f062c0c06965da711454d1eaa12934f78)

* [OCPBUGS-30017](https://issues.redhat.com/browse/OCPBUGS-30017): CRI-O: Add missing Devices annotation to CRI-O configuration [#4227](https://github.com/openshift/machine-config-operator/pull/4227)
* [OCPBUGS-29339](https://issues.redhat.com/browse/OCPBUGS-29339): annotate on-prem static pods for workload partitioning [#4179](https://github.com/openshift/machine-config-operator/pull/4179)
* [OCPBUGS-29797](https://issues.redhat.com/browse/OCPBUGS-29797): set nodeStatusReportFrequency [#4211](https://github.com/openshift/machine-config-operator/pull/4211)
* [OCPBUGS-29166](https://issues.redhat.com/browse/OCPBUGS-29166): ovs-configure: fix `vlan_parent` calculation [#4171](https://github.com/openshift/machine-config-operator/pull/4171)
* [OCPBUGS-29651](https://issues.redhat.com/browse/OCPBUGS-29651): nmstate, configure nmstate to keep service yamls [#4192](https://github.com/openshift/machine-config-operator/pull/4192)
* [OCPBUGS-29038](https://issues.redhat.com/browse/OCPBUGS-29038): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4166](https://github.com/openshift/machine-config-operator/pull/4166)
* [OCPSTRAT-1062](https://issues.redhat.com/browse/OCPSTRAT-1062): [4.15] crio: enable log linking by default in 4.15 [#4174](https://github.com/openshift/machine-config-operator/pull/4174)
* [OCPBUGS-29105](https://issues.redhat.com/browse/OCPBUGS-29105): On-prem coredns manifests should not be generated for GCP [#4169](https://github.com/openshift/machine-config-operator/pull/4169)
* [OCPBUGS-28909](https://issues.redhat.com/browse/OCPBUGS-28909), [OCPBUGS-28910](https://issues.redhat.com/browse/OCPBUGS-28910): Run resolv-prepender entirely async [#4161](https://github.com/openshift/machine-config-operator/pull/4161)
* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4155](https://github.com/openshift/machine-config-operator/pull/4155)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/90cab989d0062333daea41c24596e35385ef1ea0...6eb0e07f062c0c06965da711454d1eaa12934f78)


### [multus-cni](https://github.com/openshift/multus-cni/tree/84b2a27392c12a0b346f5d33e6f38b8043b7db78)

* [OCPBUGS-28271](https://issues.redhat.com/browse/OCPBUGS-28271): Fix SAST scan issues for multus-cni-container [4.15] [#219](https://github.com/openshift/multus-cni/pull/219)
* [Full changelog](https://github.com/openshift/multus-cni/compare/f9406f864f00191e9dfac455d7044a973986e32d...84b2a27392c12a0b346f5d33e6f38b8043b7db78)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/34756b67ae1ce1307d07bd1834579de1e4b47f17)

* [OCPBUGS-21669](https://issues.redhat.com/browse/OCPBUGS-21669): bump k8s.io and others (4.15) [#99](https://github.com/openshift/oauth-apiserver/pull/99)
* [OCPBUGS-24132](https://issues.redhat.com/browse/OCPBUGS-24132): Updating ose-oauth-apiserver-container image to be consistent with ART [#93](https://github.com/openshift/oauth-apiserver/pull/93)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/beb99aefa447ee4ddaade964cefb6d0fa2b70c66...34756b67ae1ce1307d07bd1834579de1e4b47f17)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9621d8f72ecc7a0a13e40b9709b5e19cc621117b)

* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both oc-mirror binaries for rhel9 and rhel8 (#804) [#804](https://github.com/openshift/oc-mirror/pull/804)
* Fix to ensure operator not found error exits with correct status (#794) [#794](https://github.com/openshift/oc-mirror/pull/794)
* [OCPBUGS-27946](https://issues.redhat.com/browse/OCPBUGS-27946): Capability to override default channel (#786) [#786](https://github.com/openshift/oc-mirror/pull/786)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/6ddf902e42c93a3fd1cb155d52584bb8dd912c43...9621d8f72ecc7a0a13e40b9709b5e19cc621117b)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/2724be3ed7a0205241c33c26d92d33f3d246662c)

* [OCPBUGS-29796](https://issues.redhat.com/browse/OCPBUGS-29796): UPSTREAM: 231: make garbage collection a runnable [#44](https://github.com/openshift/operator-framework-catalogd/pull/44)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/c1a9a8e66f641df99989b174f052b4289c518a06...2724be3ed7a0205241c33c26d92d33f3d246662c)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)

* : OCPBUGS-30264: Bump Helm & K8s dependencies [#79](https://github.com/openshift/operator-framework-rukpak/pull/79)
* [OCPBUGS-27596](https://issues.redhat.com/browse/OCPBUGS-27596), [OCPBUGS-27681](https://issues.redhat.com/browse/OCPBUGS-27681): UPSTREAM: <carry>: Update go-git to v5.11.0 [#72](https://github.com/openshift/operator-framework-rukpak/pull/72)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/1369884b563638963e64caaf4be648c7676b63b4...5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/edbf7353e21a286cac85867ec13d6cf937dd9c33)

* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-openshift-controller-manager-container image to be consistent with ART [#281](https://github.com/openshift/openshift-controller-manager/pull/281)
* [OCPBUGS-28947](https://issues.redhat.com/browse/OCPBUGS-28947): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#285](https://github.com/openshift/openshift-controller-manager/pull/285)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/2a28a78279b127075b399a3442a2042f4a7d190d...edbf7353e21a286cac85867ec13d6cf937dd9c33)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d1de8c63ee931be0038b55dd4813b2089fd6107e)

* 🐛 Persist API FloatingIP immediately on creation [#1846](https://github.com/openshift/cluster-api-provider-openstack/pull/1846)
* :bug: Fix potential panic during instance create [#1808](https://github.com/openshift/cluster-api-provider-openstack/pull/1808)
* fix --short flag is removed issue for CI [#1811](https://github.com/openshift/cluster-api-provider-openstack/pull/1811)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/acc3955450d75d33ea69f326ef9215f415051af4...d1de8c63ee931be0038b55dd4813b2089fd6107e)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cb0c5f2728e412f595cceeb11104af206421daec)

* [OCPBUGS-30193](https://issues.redhat.com/browse/OCPBUGS-30193): Synchronize From Upstream Repositories [#711](https://github.com/openshift/operator-framework-olm/pull/711)
* [OCPBUGS-30141](https://issues.redhat.com/browse/OCPBUGS-30141): ClusterRoleBinding + Service SSA cherry-pick [#707](https://github.com/openshift/operator-framework-olm/pull/707)
* [OCPBUGS-30147](https://issues.redhat.com/browse/OCPBUGS-30147): Wait for required RBAC before creating packageserver CSV [#710](https://github.com/openshift/operator-framework-olm/pull/710)
* NO-ISSUE:  [release-4.15] Backport flaky CRD upgrade block e2e test fix [#694](https://github.com/openshift/operator-framework-olm/pull/694)
* [OCPBUGS-24159](https://issues.redhat.com/browse/OCPBUGS-24159): Updating operator-lifecycle-manager-container image to be consistent with ART [#623](https://github.com/openshift/operator-framework-olm/pull/623)
* [OCPBUGS-29083](https://issues.redhat.com/browse/OCPBUGS-29083): * olm,catalog: only validate the resources we label [#683](https://github.com/openshift/operator-framework-olm/pull/683)
* [OCPBUGS-29116](https://issues.redhat.com/browse/OCPBUGS-29116): [release-4.15]: Clear (existing) error cond from Subscription, once error resolved [#684](https://github.com/openshift/operator-framework-olm/pull/684)
* [OCPBUGS-27566](https://issues.redhat.com/browse/OCPBUGS-27566), [OCPBUGS-27571](https://issues.redhat.com/browse/OCPBUGS-27571), [OCPBUGS-27651](https://issues.redhat.com/browse/OCPBUGS-27651), [OCPBUGS-27656](https://issues.redhat.com/browse/OCPBUGS-27656): bump go-git/v5 to 5.11.0 (#1175) [#668](https://github.com/openshift/operator-framework-olm/pull/668)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/fc6550c372bb7e788bf0e6d6adf2f24780d0a9f1...cb0c5f2728e412f595cceeb11104af206421daec)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/42b1cc427538a736f8c056171b4de7e6c6a366fb)

* [OCPBUGS-29599](https://issues.redhat.com/browse/OCPBUGS-29599): Update HostNetworkNamespace address_set for remote zone nodes [#2074](https://github.com/openshift/ovn-kubernetes/pull/2074)
* [OCPBUGS-29185](https://issues.redhat.com/browse/OCPBUGS-29185): Wait for ovnkube controller to start before checking result error. [#2064](https://github.com/openshift/ovn-kubernetes/pull/2064)
* [OCPBUGS-28725](https://issues.redhat.com/browse/OCPBUGS-28725): Update netpol namespace address sets usage to the old ways [#2050](https://github.com/openshift/ovn-kubernetes/pull/2050)
* [OCPBUGS-29230](https://issues.redhat.com/browse/OCPBUGS-29230): [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup [#2060](https://github.com/openshift/ovn-kubernetes/pull/2060)
* [OCPBUGS-28818](https://issues.redhat.com/browse/OCPBUGS-28818): Support Permanent Session Affinity [#2045](https://github.com/openshift/ovn-kubernetes/pull/2045)
* [OCPBUGS-28848](https://issues.redhat.com/browse/OCPBUGS-28848): Ignore hybrid-overlay nodes from EgressIP controller [#2040](https://github.com/openshift/ovn-kubernetes/pull/2040)
* [OCPBUGS-29001](https://issues.redhat.com/browse/OCPBUGS-29001): kubevirt, Replace routes on migration [#2052](https://github.com/openshift/ovn-kubernetes/pull/2052)
* [OCPBUGS-27947](https://issues.redhat.com/browse/OCPBUGS-27947): [release-4.15] Fix LGW ETP=Local on IPv6 [#2028](https://github.com/openshift/ovn-kubernetes/pull/2028)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2476c75ade680f6324391be71a6edfe15fb60d98...42b1cc427538a736f8c056171b4de7e6c6a366fb)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/faad27f990b16a0806f92bf0362e45d777cec8e7)

* [OCPBUGS-29180](https://issues.redhat.com/browse/OCPBUGS-29180): fix: convert `continue` field between v1beta1 and v1alpha1 [#276](https://github.com/openshift/prometheus-operator/pull/276)
* [OCPBUGS-29509](https://issues.redhat.com/browse/OCPBUGS-29509): fix: don't fail metadata transform on unknown types (#6298) [#278](https://github.com/openshift/prometheus-operator/pull/278)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/b558bb393c7860ecb1e577a5825ec341f4e55e90...faad27f990b16a0806f92bf0362e45d777cec8e7)


### [telemeter](https://github.com/openshift/telemeter/tree/18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b)

* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Updating telemeter-container image to be consistent with ART [#496](https://github.com/openshift/telemeter/pull/496)
* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Force kill jobs after integration v2 test finish [#515](https://github.com/openshift/telemeter/pull/515)
* [Full changelog](https://github.com/openshift/telemeter/compare/e1f625aa31e46a84fb5d9f97c8224b9059e27d8a...18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b)


### [tests](https://github.com/openshift/origin/tree/d68c509dc1c13489fdff39e618fccaaa72a84fa3)

* [OCPNODE-2101](https://issues.redhat.com/browse/OCPNODE-2101): add kube-rbac-proxy-crio toleration change [#28637](https://github.com/openshift/origin/pull/28637)
* [OCPBUGS-30161](https://issues.redhat.com/browse/OCPBUGS-30161): Skip tests for image-registry operator with single replica [#28633](https://github.com/openshift/origin/pull/28633)
* [OCPBUGS-29927](https://issues.redhat.com/browse/OCPBUGS-29927): Only extract node role from properly formatted node-role label [#28615](https://github.com/openshift/origin/pull/28615)
* [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28610](https://github.com/openshift/origin/pull/28610)
* [OCPBUGS-27847](https://issues.redhat.com/browse/OCPBUGS-27847): Do not assume there is just a single kubelet systemd service [#28545](https://github.com/openshift/origin/pull/28545)
* [OCPBUGS-29031](https://issues.redhat.com/browse/OCPBUGS-29031): Replace 'coreydaley' with 'sayan-biswas' [#28573](https://github.com/openshift/origin/pull/28573)
* [OCPBUGS-26487](https://issues.redhat.com/browse/OCPBUGS-26487): Increase timeout for pod-network-service [#28508](https://github.com/openshift/origin/pull/28508)
* [OCPBUGS-27934](https://issues.redhat.com/browse/OCPBUGS-27934): fix panic in service-poller [#28550](https://github.com/openshift/origin/pull/28550)
* [OCPBUGS-26960](https://issues.redhat.com/browse/OCPBUGS-26960): updated timeout to 3 seconds to account for network timing issues [#28519](https://github.com/openshift/origin/pull/28519)
* [Full changelog](https://github.com/openshift/origin/compare/5a636661527da4173703ed69d660fb0ef679401f...d68c509dc1c13489fdff39e618fccaaa72a84fa3)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/2070c131306654b67ad6c52261818833e3c70316)

* [OCPBUGS-26476](https://issues.redhat.com/browse/OCPBUGS-26476): UPSTREAM: <carry>: bump x/crypto [#35](https://github.com/openshift/cluster-api-provider-vsphere/pull/35)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/b21c0ba942580e08352ad6b3170ee17a010a2a00...2070c131306654b67ad6c52261818833e3c70316)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/74481e34aa9c2ef2de0ce0289e2383a179d34b89)

* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Revert "Merge pull request #97 from jsafrane/rebase-v3.1.1" [#110](https://github.com/openshift/vmware-vsphere-csi-driver/pull/110)
* [OCPBUGS-26074](https://issues.redhat.com/browse/OCPBUGS-26074), [OCPBUGS-26075](https://issues.redhat.com/browse/OCPBUGS-26075), [OCPBUGS-26076](https://issues.redhat.com/browse/OCPBUGS-26076): [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 [#109](https://github.com/openshift/vmware-vsphere-csi-driver/pull/109)
* [OCPBUGS-25856](https://issues.redhat.com/browse/OCPBUGS-25856): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#107](https://github.com/openshift/vmware-vsphere-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/56a1741f76c7ab60751c3788245b9b77a82a43a9...74481e34aa9c2ef2de0ce0289e2383a179d34b89)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e0d46570a06caff3439b410b9c9f75cb383a3d2d)

* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Mark the operator as Disabled on connection error [#219](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/219)
* [OCPBUGS-27378](https://issues.redhat.com/browse/OCPBUGS-27378): Rerun checks on reconnect [#216](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/216)
* [OCPBUGS-26409](https://issues.redhat.com/browse/OCPBUGS-26409): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#207](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/207)
* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#205](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/205)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#204](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/204)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#200](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/200)
* [OCPBUGS-23970](https://issues.redhat.com/browse/OCPBUGS-23970): Enable new features to prevent CSI driver from crash looping [#192](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/192)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d18d77f8dd7b977fc34234e4e7f4cea4e35181c3...e0d46570a06caff3439b410b9c9f75cb383a3d2d)