# 4.15.0-0.okd-2024-03-10-010116

Created: 2024-03-10 06:53:44 +0000 UTC

Image Digest: `sha256:46b462be1e4c15ce5ab5fba97e713e8824bbb9f614ac5abe1be41fda916920cc`

Promoted from registry.ci.openshift.org/origin/release:4.15.0-0.okd-2024-03-10-010116


## Changes from 4.15.0-0.okd-2024-02-23-163410

### Components

* Kubernetes upgraded from 1.28.6 to 1.28.7
* Fedora CoreOS upgraded from 39.20240128.3 to 39.20240210.3


### Rebuilt images without code change

* [insights-operator](https://github.com/openshift/insights-operator) git [a6923466](https://github.com/openshift/insights-operator/commit/a6923466398b283a68b78fad9b1f2c5ccf9eaded) `sha256:6dccca75e1ec2f31b92ce06e1daad084ac321b8c68b17b0bbc92d9680ddbb5db`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [e465e606](https://github.com/openshift/cloud-provider-kubevirt/commit/e465e606e7d17c64392cdeba099f9382580e44b0) `sha256:9e166053d7b8c6ffc87825ac980e8742de371db56357f82a2045f9ba9492d2ef`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [07e8f8b8](https://github.com/openshift/machine-api-provider-powervs/commit/07e8f8b81748d52cf596082b8102134e954137ba) `sha256:3c612d82aa0224fd9cf84c416d668acc9aa0876ad93a57b026bf4c2bdfef09fd`


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/2e3cca19638cae3066cba27608ed61c284b4d529)

* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#77](https://github.com/openshift/cloud-provider-aws/pull/77)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/ba252ab129e78c8ce49529cb410a8742fb8e9045...2e3cca19638cae3066cba27608ed61c284b4d529)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/90771aba5adb0c3883b0927956875c94fa88e69e)

* [OCPBUGS-25510](https://issues.redhat.com/browse/OCPBUGS-25510): bump x/crypto [#100](https://github.com/openshift/machine-api-provider-azure/pull/100)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/34e8ac02a89101d328933368dd6cedef9d687580...90771aba5adb0c3883b0927956875c94fa88e69e)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/d0a415f1cca1fa2c164aff142afa1269b6fd9865)

* [OCPBUGS-30148](https://issues.redhat.com/browse/OCPBUGS-30148): fix "OpenShiftSDN deprecated" error message [#8094](https://github.com/openshift/installer/pull/8094)
* [OCPBUGS-30011](https://issues.redhat.com/browse/OCPBUGS-30011): PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 [#8076](https://github.com/openshift/installer/pull/8076)
* [OCPBUGS-29768](https://issues.redhat.com/browse/OCPBUGS-29768): Power VS: Add sleep to allow workspace to configure PER [#8052](https://github.com/openshift/installer/pull/8052)
* Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer [#8050](https://github.com/openshift/installer/pull/8050)
* [OCPBUGS-29495](https://issues.redhat.com/browse/OCPBUGS-29495): gcp: better error msg when service accnt missing [#8024](https://github.com/openshift/installer/pull/8024)
* Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation [#8019](https://github.com/openshift/installer/pull/8019)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7996](https://github.com/openshift/installer/pull/7996)
* [OCPBUGS-28841](https://issues.redhat.com/browse/OCPBUGS-28841): PowerVS: Add dal12 region [#7977](https://github.com/openshift/installer/pull/7977)
* [OCPBUGS-29955](https://issues.redhat.com/browse/OCPBUGS-29955): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8065](https://github.com/openshift/installer/pull/8065)
* [Full changelog](https://github.com/openshift/installer/compare/e8c70b7db9e64cafa7fe3182c365257c3e53fbb6...d0a415f1cca1fa2c164aff142afa1269b6fd9865)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/6f83b6f752ce27c6f997f2d0706b3a79b84aa763)

* [OCPBUGS-29338](https://issues.redhat.com/browse/OCPBUGS-29338): Ignore egress IP when selecting Node IP [#299](https://github.com/openshift/baremetal-runtimecfg/pull/299)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/84581c736b84a37c319d3e527e34a7dd5cf5262f...6f83b6f752ce27c6f997f2d0706b3a79b84aa763)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d6175ebd387c07d8fd6354b476f6b1092f15ee1d)

* [OCPBUGS-30270](https://issues.redhat.com/browse/OCPBUGS-30270): Introduce --issuer-url flag in oc login [#1696](https://github.com/openshift/oc/pull/1696)
* [Full changelog](https://github.com/openshift/oc/compare/48dcf5980a6671b5933707e5a055def023c7a13a...d6175ebd387c07d8fd6354b476f6b1092f15ee1d)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/06a42948bf78b104e03a51bb5a555b6819db1b0a)

* [OCPBUGS-30412](https://issues.redhat.com/browse/OCPBUGS-30412): gcp actuator update check to consider custom roles [#686](https://github.com/openshift/cloud-credential-operator/pull/686)
* [OCPBUGS-29155](https://issues.redhat.com/browse/OCPBUGS-29155): Fix the ClusterOperator watch of the status controller [#675](https://github.com/openshift/cloud-credential-operator/pull/675)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c9fd580aca5d15c291fc79981ff3182263c07bf7...06a42948bf78b104e03a51bb5a555b6819db1b0a)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fdce2d0892e255240ff760e91fa8a738ae4a7556)

* [OCPBUGS-29787](https://issues.redhat.com/browse/OCPBUGS-29787): Update the leader election durations to be tolerant [#405](https://github.com/openshift/cluster-baremetal-operator/pull/405)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/488fb7a201311aab96fd31ed7319b330770c781a...fdce2d0892e255240ff760e91fa8a738ae4a7556)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/c3b9ac8a39fd5bbf3d2e910fa17b38c86a58ac3a)

* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): openshift: generate separate manifest for core CAPI CRDs [#198](https://github.com/openshift/cluster-api/pull/198)
* [Full changelog](https://github.com/openshift/cluster-api/compare/db1841a6c8acc1741010dfbd0b81e9233de0ef0b...c3b9ac8a39fd5bbf3d2e910fa17b38c86a58ac3a)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/c8c94baccbe1d87f08d2d2349749ca31296b85ba)

* [OCPBUGS-25505](https://issues.redhat.com/browse/OCPBUGS-25505): UPSTREAM: <carry>: bump x/crypto [#165](https://github.com/openshift/cluster-capi-operator/pull/165)
* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): manifests-gen: store core capi crds also in their own manifest [#160](https://github.com/openshift/cluster-capi-operator/pull/160)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/6a24e09cc7b12924ccbee74f1839546dbd4b6dea...c8c94baccbe1d87f08d2d2349749ca31296b85ba)


### [cluster-config-api](https://github.com/openshift/api/tree/4511c790cc60bf2a0393c34739cf9e71d1648b39)

* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#1767](https://github.com/openshift/api/pull/1767)
* [Full changelog](https://github.com/openshift/api/compare/be926bb0d7511bd4e11519f794cd71df60454a31...4511c790cc60bf2a0393c34739cf9e71d1648b39)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/673e7da36cad22402065e2952b4e06aff0cb9c99)

* [OCPBUGS-29419](https://issues.redhat.com/browse/OCPBUGS-29419): Never delete a Machine when there's a single Machine in an index [#280](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/280)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#279](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/279)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/d3e0fe7d4036f19cd1db69f03153a56136ed6c55...673e7da36cad22402065e2952b4e06aff0cb9c99)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9d596e149a662ff77d235b3c7e4b69f34638c2ed)

* [OCPBUGS-30042](https://issues.redhat.com/browse/OCPBUGS-30042): fix condition name type [#1212](https://github.com/openshift/cluster-etcd-operator/pull/1212)
* [OCPBUGS-28628](https://issues.redhat.com/browse/OCPBUGS-28628): fix panic in health check timeouts [#1191](https://github.com/openshift/cluster-etcd-operator/pull/1191)
* [OCPBUGS-29717](https://issues.redhat.com/browse/OCPBUGS-29717): [4.15] Replace nodelister with master nodelister everywhere [#1206](https://github.com/openshift/cluster-etcd-operator/pull/1206)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/85e53769e692705f1f7e9e749edf5d957fc2cf17...9d596e149a662ff77d235b3c7e4b69f34638c2ed)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/f122f0b9a706abff7610f732cba4dd6eca9771f6)

* [OCPBUGS-29983](https://issues.redhat.com/browse/OCPBUGS-29983): cmd/move-blobs: log and exit 1 on error instead of panic [#1009](https://github.com/openshift/cluster-image-registry-operator/pull/1009)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/5da92bdb6eeb08abf096989d1383d56e6a6098a3...f122f0b9a706abff7610f732cba4dd6eca9771f6)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9fe0ab100bc6241030bf6ad1fc3f554ad0b0faf1)

* [OCPBUGS-30304](https://issues.redhat.com/browse/OCPBUGS-30304): cert rotation: Bump library-go to latest master [#1653](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1653)
* [OCPBUGS-29775](https://issues.redhat.com/browse/OCPBUGS-29775): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1647](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1647)
* [OCPBUGS-30180](https://issues.redhat.com/browse/OCPBUGS-30180): add provider name to cluster_infrastructure_provider when external platform [#1639](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1639)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/689a2bdc377383c774cc353c8e643dfcbb40159e...9fe0ab100bc6241030bf6ad1fc3f554ad0b0faf1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/4ad3c08b7b9f35224bdad111fc7b0205e0732f93)

* [OCPBUGS-29090](https://issues.redhat.com/browse/OCPBUGS-29090): network-node-identity mounts secrets with mode 0640 [#2251](https://github.com/openshift/cluster-network-operator/pull/2251)
* [OCPBUGS-29390](https://issues.redhat.com/browse/OCPBUGS-29390): ipsec: fix openssl typo [#2272](https://github.com/openshift/cluster-network-operator/pull/2272)
* [OCPBUGS-29522](https://issues.redhat.com/browse/OCPBUGS-29522): Not set CNO to degraded if API server returns conflict error [#2275](https://github.com/openshift/cluster-network-operator/pull/2275)
* [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): [release-4.15] Disable network-node-identity on ROKS [#2278](https://github.com/openshift/cluster-network-operator/pull/2278)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c1d987e7a93910a4f09c4183f9434e0f697f8c3f...4ad3c08b7b9f35224bdad111fc7b0205e0732f93)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fc57075824faa9ccb64f7f4d2cd381c204c48490)

* [OCPBUGS-29752](https://issues.redhat.com/browse/OCPBUGS-29752): [release-4.15][manual] backport performance profile owner reference ehnancements (#963) [#963](https://github.com/openshift/cluster-node-tuning-operator/pull/963)
* Render: Add MCSelector to missing default MCPs (#959) [#959](https://github.com/openshift/cluster-node-tuning-operator/pull/959)
* Add support to inject owner-ref argument to render command (#966) [#966](https://github.com/openshift/cluster-node-tuning-operator/pull/966)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/01fc8d9a765c7aa4dd6ae8f8c8e7e41fa03f1f05...fc57075824faa9ccb64f7f4d2cd381c204c48490)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/f189a00839491e166cd0220afe11d35cdb844754)

* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#319](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/319)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/1ba446b3a9003d6069a7a2f55b2616b6892729bc...f189a00839491e166cd0220afe11d35cdb844754)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/1a2443a7fe8a00597f8c19382fb8ce617943029c)

* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all curren [#461](https://github.com/openshift/cluster-storage-operator/pull/461)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/279df4f300da8d93ced3e141cd4b279e71bff7ae...1a2443a7fe8a00597f8c19382fb8ce617943029c)


### [console](https://github.com/openshift/console/tree/3ba6e63b106a9d10983887431ed705e48c401250)

* [OCPBUGS-25831](https://issues.redhat.com/browse/OCPBUGS-25831): Date&Time values are not showing as per browser default language [#13467](https://github.com/openshift/console/pull/13467)
* [OCPBUGS-29080](https://issues.redhat.com/browse/OCPBUGS-29080): make getGroupVersionKindForResource null safe [#13582](https://github.com/openshift/console/pull/13582)
* [OCPBUGS-29781](https://issues.redhat.com/browse/OCPBUGS-29781): Fix operands list endpoint. [#13633](https://github.com/openshift/console/pull/13633)
* [OCPBUGS-29812](https://issues.redhat.com/browse/OCPBUGS-29812): Changes to prevent yaml editor crash in version 4.15 [#13638](https://github.com/openshift/console/pull/13638)
* [OCPBUGS-29842](https://issues.redhat.com/browse/OCPBUGS-29842): Switch to service from external result route endpoint [#13627](https://github.com/openshift/console/pull/13627)
* [OCPBUGS-28889](https://issues.redhat.com/browse/OCPBUGS-28889): VolumeSnapshots data not displayed in PVC >  VolumeSnapshots tab [#13570](https://github.com/openshift/console/pull/13570)
* [OCPBUGS-27431](https://issues.redhat.com/browse/OCPBUGS-27431): Add source maps to production builds [#13526](https://github.com/openshift/console/pull/13526)
* [OCPBUGS-26481](https://issues.redhat.com/browse/OCPBUGS-26481): Tab VolumeSnapshots crashed on PVC page [#13490](https://github.com/openshift/console/pull/13490)
* [OCPBUGS-25984](https://issues.redhat.com/browse/OCPBUGS-25984): Fix config ini format [#13475](https://github.com/openshift/console/pull/13475)
* [OCPBUGS-29844](https://issues.redhat.com/browse/OCPBUGS-29844): Enable catalog source badge to truncate for long names [#13629](https://github.com/openshift/console/pull/13629)
* [OCPBUGS-29846](https://issues.redhat.com/browse/OCPBUGS-29846): Prevent complete page reload when changing perspective [#13631](https://github.com/openshift/console/pull/13631)
* [OCPBUGS-29845](https://issues.redhat.com/browse/OCPBUGS-29845): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13630](https://github.com/openshift/console/pull/13630)
* [OCPBUGS-29843](https://issues.redhat.com/browse/OCPBUGS-29843): improve empty state message for Machines and MachineSets page [#13628](https://github.com/openshift/console/pull/13628)
* [OCPBUGS-29679](https://issues.redhat.com/browse/OCPBUGS-29679): TaskRuns list page is loading constantly for all projects [#13618](https://github.com/openshift/console/pull/13618)
* [OCPBUGS-29640](https://issues.redhat.com/browse/OCPBUGS-29640): Output image url link leads to 404 for Shipwright Builds [#13615](https://github.com/openshift/console/pull/13615)
* [OCPBUGS-28232](https://issues.redhat.com/browse/OCPBUGS-28232): do not deduplicate ImageManifestVulns in Overview popover [#13545](https://github.com/openshift/console/pull/13545)
* chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13594](https://github.com/openshift/console/pull/13594)
* [OCPBUGS-26567](https://issues.redhat.com/browse/OCPBUGS-26567): Fixed some problems in topology Chinese translation text [#13498](https://github.com/openshift/console/pull/13498)
* [OCPBUGS-29914](https://issues.redhat.com/browse/OCPBUGS-29914): [release-4.15] Use selfsubjectreview API from frontend [#13636](https://github.com/openshift/console/pull/13636)
* [Full changelog](https://github.com/openshift/console/compare/803df88843fa8a4011ecadcaf29b530fa34851ed...3ba6e63b106a9d10983887431ed705e48c401250)


### [console-operator](https://github.com/openshift/console-operator/tree/e9ec54b60ce943bace46ef7493452e2be3c39983)

* [OCPBUGS-27113](https://issues.redhat.com/browse/OCPBUGS-27113): Prevent healthcheck controller from Available=False blipping [#835](https://github.com/openshift/console-operator/pull/835)
* [Full changelog](https://github.com/openshift/console-operator/compare/8f7bdec82b1e297fc558dc1dc81415e9678cba6d...e9ec54b60ce943bace46ef7493452e2be3c39983)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/6c35a5c2bc2bb839a85f0a67b0b739ba37cae1af)

* Bump Fedora CoreOS version string [#759](https://github.com/openshift/okd-machine-os/pull/759)
* Bump fedora-coreos to latest stable [#755](https://github.com/openshift/okd-machine-os/pull/755)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/58a702c1edd52e830bccbc53745793e76d84ba29...6c35a5c2bc2bb839a85f0a67b0b739ba37cae1af)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/6e2789bbd5893851c8bc4423e0090cd71b64f436)

* [OCPBUGS-29661](https://issues.redhat.com/browse/OCPBUGS-29661): Bump to 1.28.7 [#1891](https://github.com/openshift/kubernetes/pull/1891)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6216ea1e51a2126f5b843a4ae7c1f414161cca8b...6e2789bbd5893851c8bc4423e0090cd71b64f436)


### [hypershift](https://github.com/openshift/hypershift/tree/4f6c741c83626291f44d7cb623242056f7cde21c)

* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3705](https://github.com/openshift/hypershift/pull/3705)
* [OCPBUGS-30189](https://issues.redhat.com/browse/OCPBUGS-30189): set Konnectivity cipher suites [#3673](https://github.com/openshift/hypershift/pull/3673)
* "[release-4.15] OCPBUGS-27500: Fix default release image lookup" [#3549](https://github.com/openshift/hypershift/pull/3549)
* [OCPBUGS-30284](https://issues.redhat.com/browse/OCPBUGS-30284): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3694](https://github.com/openshift/hypershift/pull/3694)
* [OCPBUGS-30281](https://issues.redhat.com/browse/OCPBUGS-30281): [release-4.15] OCPBUGS-30102: Support to disable machine management components [#3670](https://github.com/openshift/hypershift/pull/3670)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3675](https://github.com/openshift/hypershift/pull/3675)
* Update RHTAP references (release-4.15) [#3645](https://github.com/openshift/hypershift/pull/3645)
* [HOSTEDCP-1405](https://issues.redhat.com/browse/HOSTEDCP-1405): Remove files not needed [#3669](https://github.com/openshift/hypershift/pull/3669)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3648](https://github.com/openshift/hypershift/pull/3648)
* [OCPBUGS-30088](https://issues.redhat.com/browse/OCPBUGS-30088): rollout kas on auth config change [#3653](https://github.com/openshift/hypershift/pull/3653)
* NO-JIRA: remove PrivateIngressController cleanup [#3646](https://github.com/openshift/hypershift/pull/3646)
* [OCPBUGS-29880](https://issues.redhat.com/browse/OCPBUGS-29880): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3632](https://github.com/openshift/hypershift/pull/3632)
* [OCPBUGS-29025](https://issues.redhat.com/browse/OCPBUGS-29025): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3522](https://github.com/openshift/hypershift/pull/3522)
* [OCPBUGS-30029](https://issues.redhat.com/browse/OCPBUGS-30029): sync AuthenticationConfiguration type with o/k 1.28 carry [#3644](https://github.com/openshift/hypershift/pull/3644)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#3643](https://github.com/openshift/hypershift/pull/3643)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3606](https://github.com/openshift/hypershift/pull/3606)
* [OCPBUGS-29850](https://issues.redhat.com/browse/OCPBUGS-29850): control-plane-pki-operator: fix CA used for SRE client credentials [#3626](https://github.com/openshift/hypershift/pull/3626)
* NO-JIRA: PDB backports [#3628](https://github.com/openshift/hypershift/pull/3628)
* [Full changelog](https://github.com/openshift/hypershift/compare/e04891928c4734cf12ec84a5e194f57595af332c...4f6c741c83626291f44d7cb623242056f7cde21c)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/39d5064babe4291e475268666b28b62004235e43)

* [OCPBUGS-30078](https://issues.redhat.com/browse/OCPBUGS-30078): [release-4.15] OCPBUGS-30078: Fix tripleo url with commit hash for openstack repos config [#115](https://github.com/openshift/ironic-agent-image/pull/115)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/cd0769a538f34456728bf1bba9302461c942d5ba...39d5064babe4291e475268666b28b62004235e43)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6eb0e07f062c0c06965da711454d1eaa12934f78)

* [OCPBUGS-30017](https://issues.redhat.com/browse/OCPBUGS-30017): CRI-O: Add missing Devices annotation to CRI-O configuration [#4227](https://github.com/openshift/machine-config-operator/pull/4227)
* [OCPBUGS-29339](https://issues.redhat.com/browse/OCPBUGS-29339): annotate on-prem static pods for workload partitioning [#4179](https://github.com/openshift/machine-config-operator/pull/4179)
* [OCPBUGS-29797](https://issues.redhat.com/browse/OCPBUGS-29797): set nodeStatusReportFrequency [#4211](https://github.com/openshift/machine-config-operator/pull/4211)
* [OCPBUGS-29166](https://issues.redhat.com/browse/OCPBUGS-29166): ovs-configure: fix `vlan_parent` calculation [#4171](https://github.com/openshift/machine-config-operator/pull/4171)
* [OCPBUGS-29651](https://issues.redhat.com/browse/OCPBUGS-29651): nmstate, configure nmstate to keep service yamls [#4192](https://github.com/openshift/machine-config-operator/pull/4192)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/c7981fcb54fcae3976818479a01f19f3fef40cd9...6eb0e07f062c0c06965da711454d1eaa12934f78)


### [multus-cni](https://github.com/openshift/multus-cni/tree/84b2a27392c12a0b346f5d33e6f38b8043b7db78)

* [OCPBUGS-28271](https://issues.redhat.com/browse/OCPBUGS-28271): Fix SAST scan issues for multus-cni-container [4.15] [#219](https://github.com/openshift/multus-cni/pull/219)
* [Full changelog](https://github.com/openshift/multus-cni/compare/f9406f864f00191e9dfac455d7044a973986e32d...84b2a27392c12a0b346f5d33e6f38b8043b7db78)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9621d8f72ecc7a0a13e40b9709b5e19cc621117b)

* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both oc-mirror binaries for rhel9 and rhel8 (#804) [#804](https://github.com/openshift/oc-mirror/pull/804)
* Fix to ensure operator not found error exits with correct status (#794) [#794](https://github.com/openshift/oc-mirror/pull/794)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/cae37aa25d9d96bdedcee45e659188a644f78a58...9621d8f72ecc7a0a13e40b9709b5e19cc621117b)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/2724be3ed7a0205241c33c26d92d33f3d246662c)

* [OCPBUGS-29796](https://issues.redhat.com/browse/OCPBUGS-29796): UPSTREAM: 231: make garbage collection a runnable [#44](https://github.com/openshift/operator-framework-catalogd/pull/44)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/c1a9a8e66f641df99989b174f052b4289c518a06...2724be3ed7a0205241c33c26d92d33f3d246662c)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)

* : OCPBUGS-30264: Bump Helm & K8s dependencies [#79](https://github.com/openshift/operator-framework-rukpak/pull/79)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/36acf8d67e27405e69685df79ea636757df3a4f4...5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/edbf7353e21a286cac85867ec13d6cf937dd9c33)

* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-openshift-controller-manager-container image to be consistent with ART [#281](https://github.com/openshift/openshift-controller-manager/pull/281)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/87d251169278f61434749fc17991b45cbcb53b15...edbf7353e21a286cac85867ec13d6cf937dd9c33)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cb0c5f2728e412f595cceeb11104af206421daec)

* [OCPBUGS-30193](https://issues.redhat.com/browse/OCPBUGS-30193): Synchronize From Upstream Repositories [#711](https://github.com/openshift/operator-framework-olm/pull/711)
* [OCPBUGS-30141](https://issues.redhat.com/browse/OCPBUGS-30141): ClusterRoleBinding + Service SSA cherry-pick [#707](https://github.com/openshift/operator-framework-olm/pull/707)
* [OCPBUGS-30147](https://issues.redhat.com/browse/OCPBUGS-30147): Wait for required RBAC before creating packageserver CSV [#710](https://github.com/openshift/operator-framework-olm/pull/710)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/0e8b957251ce3edb82ca8d9139380b18df1fe55c...cb0c5f2728e412f595cceeb11104af206421daec)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/42b1cc427538a736f8c056171b4de7e6c6a366fb)

* [OCPBUGS-29599](https://issues.redhat.com/browse/OCPBUGS-29599): Update HostNetworkNamespace address_set for remote zone nodes [#2074](https://github.com/openshift/ovn-kubernetes/pull/2074)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/3fdc9242e361a5e5007556054f5b0cc68a5be3d4...42b1cc427538a736f8c056171b4de7e6c6a366fb)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/faad27f990b16a0806f92bf0362e45d777cec8e7)

* [OCPBUGS-29180](https://issues.redhat.com/browse/OCPBUGS-29180): fix: convert `continue` field between v1beta1 and v1alpha1 [#276](https://github.com/openshift/prometheus-operator/pull/276)
* [OCPBUGS-29509](https://issues.redhat.com/browse/OCPBUGS-29509): fix: don't fail metadata transform on unknown types (#6298) [#278](https://github.com/openshift/prometheus-operator/pull/278)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/b558bb393c7860ecb1e577a5825ec341f4e55e90...faad27f990b16a0806f92bf0362e45d777cec8e7)


### [telemeter](https://github.com/openshift/telemeter/tree/18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b)

* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Updating telemeter-container image to be consistent with ART [#496](https://github.com/openshift/telemeter/pull/496)
* [Full changelog](https://github.com/openshift/telemeter/compare/80992e54778c3a9728c6db997a7ef0cae504beab...18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b)


### [tests](https://github.com/openshift/origin/tree/d68c509dc1c13489fdff39e618fccaaa72a84fa3)

* [OCPNODE-2101](https://issues.redhat.com/browse/OCPNODE-2101): add kube-rbac-proxy-crio toleration change [#28637](https://github.com/openshift/origin/pull/28637)
* [OCPBUGS-30161](https://issues.redhat.com/browse/OCPBUGS-30161): Skip tests for image-registry operator with single replica [#28633](https://github.com/openshift/origin/pull/28633)
* [OCPBUGS-29927](https://issues.redhat.com/browse/OCPBUGS-29927): Only extract node role from properly formatted node-role label [#28615](https://github.com/openshift/origin/pull/28615)
* [Full changelog](https://github.com/openshift/origin/compare/8be91d0910ffca456fe5de75955f6d6d15b03fd8...d68c509dc1c13489fdff39e618fccaaa72a84fa3)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/2070c131306654b67ad6c52261818833e3c70316)

* [OCPBUGS-26476](https://issues.redhat.com/browse/OCPBUGS-26476): UPSTREAM: <carry>: bump x/crypto [#35](https://github.com/openshift/cluster-api-provider-vsphere/pull/35)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/b21c0ba942580e08352ad6b3170ee17a010a2a00...2070c131306654b67ad6c52261818833e3c70316)