# 4.15.0-0.okd-scos-2024-01-11-032357

Created: 2024-01-11 09:23:49 +0000 UTC

Image Digest: `sha256:0203a6750a256e72420af5deac4623da1ce0f8bfaa20f81a9bbec40fa8dacf0f`

Promoted from registry.ci.openshift.org/origin/release-scos:4.15.0-0.okd-scos-2024-01-11-032357


## Changes from 4.15.0-0.okd-scos-2023-12-21-061437

### Components

* Kubernetes upgraded from 1.28.4 to 1.28.5
* CentOS Stream CoreOS upgraded from 415.9.202312201452-0 to 415.9.202401101453-0


### Rebuilt images without code change

* centos-stream-coreos-9 `sha256:0daa9576c01b353890a7514b49f7e0468a755d2e5b897274bc9d9f72dd5f55ba`
* centos-stream-coreos-9-extensions `sha256:46bcef60a70d4a6d708f34f0284f1715d7d1123c3d6af8894a837d23a4b8c41e`
* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [95e6cbef](https://github.com/openshift/cluster-baremetal-operator/commit/95e6cbefed9a43562e031a6f3d9b74184c0cdc39) `sha256:e207af56864d8386bad181f7682c0b2953636d245be114812477236efbe6649e`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [a3729dcb](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951) `sha256:557b35dff59e86057ed482eb18df62311dbbc269090c1443c72b566b71eeb42f`


### [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud/tree/abf4fa96550caf09e788b66fc06f1df802768397)

* [OCPBUGS-23697](https://issues.redhat.com/browse/OCPBUGS-23697): Add Snyk file to exclude vendor directory on scan [#48](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/48)
* [OCPBUGS-21984](https://issues.redhat.com/browse/OCPBUGS-21984): Bump golang.org/x/net to v0.19.0 [#41](https://github.com/openshift/cloud-provider-alibaba-cloud/pull/41)
* [Full changelog](https://github.com/openshift/cloud-provider-alibaba-cloud/compare/2fc6d7574cc3b7ef60e8aa3dc23d1446055b65fa...abf4fa96550caf09e788b66fc06f1df802768397)


### [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator/tree/41b367ae3bb6de9292539c0ecd98c81c5edc8294)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#82](https://github.com/openshift/alibaba-disk-csi-driver-operator/pull/82)
* [Full changelog](https://github.com/openshift/alibaba-disk-csi-driver-operator/compare/c7832d52ab9e105d16221dbe9ac9e549f2b688fb...41b367ae3bb6de9292539c0ecd98c81c5edc8294)


### [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba/tree/d3ba04c35e77e4e937aa9b7b4d069753cd514335)

* [OCPBUGS-24124](https://issues.redhat.com/browse/OCPBUGS-24124): Updating ose-alibaba-machine-controllers-container image to be consistent with ART [#47](https://github.com/openshift/cluster-api-provider-alibaba/pull/47)
* [Full changelog](https://github.com/openshift/cluster-api-provider-alibaba/compare/3da1e37cb91389c8c6422e8f76d19a1a95a38a79...d3ba04c35e77e4e937aa9b7b4d069753cd514335)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/dc30b80c9931de88a841eb0677dadbd1d63c27a6)

* [OCPBUGS-24165](https://issues.redhat.com/browse/OCPBUGS-24165): Updating ose-apiserver-network-proxy-container image to be consistent with ART [#44](https://github.com/openshift/apiserver-network-proxy/pull/44)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/f0caebbab59ca8e8907f3eb8eb48f15c2a341228...dc30b80c9931de88a841eb0677dadbd1d63c27a6)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/b692edb1bcad959162c5c62969c13f85d0266fa2)

* [OCPBUGS-25824](https://issues.redhat.com/browse/OCPBUGS-25824): UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#253](https://github.com/openshift/aws-ebs-csi-driver/pull/253)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/0f68c87bdfbf23265b35e97ffeaa674e6b3a3c03...b692edb1bcad959162c5c62969c13f85d0266fa2)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/f258bd0bf4e0ed13d6f555962d594818bd756f2d)

* [OCPBUGS-26195](https://issues.redhat.com/browse/OCPBUGS-26195): Create RBAC objects first [#93](https://github.com/openshift/csi-operator/pull/93)
* [OCPBUGS-25995](https://issues.redhat.com/browse/OCPBUGS-25995): Add selinux [#91](https://github.com/openshift/csi-operator/pull/91)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#90](https://github.com/openshift/csi-operator/pull/90)
* [Full changelog](https://github.com/openshift/csi-operator/compare/efb00eaf53b8df7f7218c744f4f38fa9a97ea2c2...f258bd0bf4e0ed13d6f555962d594818bd756f2d)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d)

* [OCPBUGS-25768](https://issues.redhat.com/browse/OCPBUGS-25768): UPSTREAM: 2132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#72](https://github.com/openshift/azure-disk-csi-driver/pull/72)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/54d5a305fb616adc1ac5aa7900df434cac0a94d3...dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/160cf624a88f500de7a1f79e6dd9384bb7d17842)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#121](https://github.com/openshift/azure-disk-csi-driver-operator/pull/121)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/828230dbe6098d184a565ae37d672eb340eb8e98...160cf624a88f500de7a1f79e6dd9384bb7d17842)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/364d90d4dd15bfbe15835b0427c8c7d8f1100fb9)

* [OCPBUGS-25697](https://issues.redhat.com/browse/OCPBUGS-25697): UPSTREAM: 1626: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#50](https://github.com/openshift/azure-file-csi-driver/pull/50)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/18c0abf7c11cb2bd8df97b912bbb01009eb25c04...364d90d4dd15bfbe15835b0427c8c7d8f1100fb9)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/1c6294a4815b076ea3932c4bed4510043d738504)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#95](https://github.com/openshift/azure-file-csi-driver-operator/pull/95)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/3f0a814f32d473c7a632353bf0a386f101052275...1c6294a4815b076ea3932c4bed4510043d738504)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1)

* [OCPBUGS-22003](https://issues.redhat.com/browse/OCPBUGS-22003): Upgrade golang/x/net for CVE-2023-39325 (4.15) [#13](https://github.com/openshift/azure-workload-identity/pull/13)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/2872dbac3b8ceee33490d974c979d309d266521d...1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/1bad952b455480d8fe6523fa0e39e0191673040f)

* [CORS-3190](https://issues.redhat.com/browse/CORS-3190): GCP: Add load balancer info to cluster infra [#7888](https://github.com/openshift/installer/pull/7888)
* [MULTIARCH-4072](https://issues.redhat.com/browse/MULTIARCH-4072): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7870](https://github.com/openshift/installer/pull/7870)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7884](https://github.com/openshift/installer/pull/7884)
* [OCPBUGS-25841](https://issues.redhat.com/browse/OCPBUGS-25841): preserve category name when trying to find tag category [#7876](https://github.com/openshift/installer/pull/7876)
* [ARO-4744](https://issues.redhat.com/browse/ARO-4744): Do not run platform validation on ARO [#7865](https://github.com/openshift/installer/pull/7865)
* [OCPBUGS-24956](https://issues.redhat.com/browse/OCPBUGS-24956): Add cloud credential capability validation [#7875](https://github.com/openshift/installer/pull/7875)
* [OSASINFRA-3280](https://issues.redhat.com/browse/OSASINFRA-3280): OpenStack: clarify root volume size requirements [#7698](https://github.com/openshift/installer/pull/7698)
* [OCPBUGS-26048](https://issues.redhat.com/browse/OCPBUGS-26048): Bump default channel to stable-4.16 [#7867](https://github.com/openshift/installer/pull/7867)
* [OCPBUGS-24862](https://issues.redhat.com/browse/OCPBUGS-24862): Updating ose-installer-altinfra-container image to be … [#7872](https://github.com/openshift/installer/pull/7872)
* [CORS-2852](https://issues.redhat.com/browse/CORS-2852): cmd/create: allow clean shutdown of resources [#7864](https://github.com/openshift/installer/pull/7864)
* [OCPBUGS-24820](https://issues.redhat.com/browse/OCPBUGS-24820): Updating ose-baremetal-installer-container image to be consistent with ART [#7817](https://github.com/openshift/installer/pull/7817)
* [OCPBUGS-24814](https://issues.redhat.com/browse/OCPBUGS-24814): Updating ose-installer-container image to be consistent with ART [#7816](https://github.com/openshift/installer/pull/7816)
* [OCPBUGS-25600](https://issues.redhat.com/browse/OCPBUGS-25600): aws: validate instance arch [#7835](https://github.com/openshift/installer/pull/7835)
* [OCPBUGS-25440](https://issues.redhat.com/browse/OCPBUGS-25440): ic: aws: add iam:TagInstanceProfile permission requirement [#7843](https://github.com/openshift/installer/pull/7843)
* [OCPBUGS-25132](https://issues.redhat.com/browse/OCPBUGS-25132): Fixes for the OpensStack UPI playbooks. [#7833](https://github.com/openshift/installer/pull/7833)
* [OCPBUGS-24853](https://issues.redhat.com/browse/OCPBUGS-24853): Updating ose-installer-artifacts-container image to be consistent with ART [#7818](https://github.com/openshift/installer/pull/7818)
* [Full changelog](https://github.com/openshift/installer/compare/c6c992295f82c9e5352a2334f39a1c9e05776836...1bad952b455480d8fe6523fa0e39e0191673040f)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/d90c9299f6699cb26c0598af26cc8f791f8c4f28)

* [OCPBUGS-23706](https://issues.redhat.com/browse/OCPBUGS-23706): Add Snyk file to exclude vendor directory on scan [#307](https://github.com/openshift/cluster-autoscaler-operator/pull/307)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/b9d95b9a418d3678d77008faff53b1052b23c62a...d90c9299f6699cb26c0598af26cc8f791f8c4f28)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/0849c462de13b9a5765b9a8c882acb9e6e8bf39e)

* [OCPBUGS-24147](https://issues.redhat.com/browse/OCPBUGS-24147): Updating ose-cluster-bootstrap-container image to be consistent with ART [#101](https://github.com/openshift/cluster-bootstrap/pull/101)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/68b3168fbb4a1e5ce19e2233ee05f5a53db20f51...0849c462de13b9a5765b9a8c882acb9e6e8bf39e)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/fc98dca3226e7ed5667e03284d685a190fd82811)

* [OCPBUGS-26413](https://issues.redhat.com/browse/OCPBUGS-26413), [OCPCLOUD-1726](https://issues.redhat.com/browse/OCPCLOUD-1726): GCP Credential Req. manifest for CAPI to use new API field [#155](https://github.com/openshift/cluster-capi-operator/pull/155)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c0448925b8dda2493032379953105e923a416c88...fc98dca3226e7ed5667e03284d685a190fd82811)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/51fb8a64880a81d94c83643bc73cd8b3a9986dff)

* [OCPBUGS-26480](https://issues.redhat.com/browse/OCPBUGS-26480), [OCPCLOUD-1724](https://issues.redhat.com/browse/OCPCLOUD-1724): GCP Credentials req. manifest of CCMO to use new API field [#320](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/320)
* [OCPBUGS-26210](https://issues.redhat.com/browse/OCPBUGS-26210): Adds CloudConfigTransformer for Azure [#319](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/319)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ac7b0ea83f3968daad19e9088460f71c600a3e67...51fb8a64880a81d94c83643bc73cd8b3a9986dff)


### [cluster-config-api](https://github.com/openshift/api/tree/44756aa368798f4feea1bdc047e6df13174e88d9)

* [OCPBUGS-26441](https://issues.redhat.com/browse/OCPBUGS-26441): disable psa [#1717](https://github.com/openshift/api/pull/1717)
* [CORS-3029](https://issues.redhat.com/browse/CORS-3029): Add Cloud LB IPs to GCP PlatformStatus of Infrastructure CR [#1705](https://github.com/openshift/api/pull/1705)
* [Full changelog](https://github.com/openshift/api/compare/7cca8a108d7b6b13001564420688f4e06a6dd320...44756aa368798f4feea1bdc047e6df13174e88d9)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/9eb983497cd90c4115d7dc476e4bcf0dfb5ee002)

* [OCPBUGS-20024](https://issues.redhat.com/browse/OCPBUGS-20024): Enable topology-aware hints iff nodes in >=2 zones [#399](https://github.com/openshift/cluster-dns-operator/pull/399)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/b8c175340dcc27ec1b7bff3da69ac9d52af6592a...9eb983497cd90c4115d7dc476e4bcf0dfb5ee002)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0fcdb4f22df3e1fa151815c31fec47cb4b676238)

* [OCPBUGS-26063](https://issues.redhat.com/browse/OCPBUGS-26063): IBMCloud - Add support for endpoint overrides [#984](https://github.com/openshift/cluster-image-registry-operator/pull/984)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/09884b538029322fd09d242f4a20bc959666bb80...0fcdb4f22df3e1fa151815c31fec47cb4b676238)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/611011bdc0586878923efe69a3c2f6caa885dbc4)

* [OCPBUGS-26544](https://issues.redhat.com/browse/OCPBUGS-26544): Replace GCP role with explicit permissions [#1015](https://github.com/openshift/cluster-ingress-operator/pull/1015)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/70b608deace24e4ded73278f086a87ef4565a63d...611011bdc0586878923efe69a3c2f6caa885dbc4)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/097921fbf0741446d0f4297a71f0765dfcd7eeea)

* [OCPBUGS-24085](https://issues.redhat.com/browse/OCPBUGS-24085): Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART [#31](https://github.com/openshift/cluster-api-operator/pull/31)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/4c6b685796e38a41debaa5a6d810f65291bc89b7...097921fbf0741446d0f4297a71f0765dfcd7eeea)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/37015e879a7ef647d7a953edea902d67e2ae91a7)

* [OCPBUGS-24156](https://issues.redhat.com/browse/OCPBUGS-24156): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART [#100](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/100)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/e55e78a941daa4f3ac10aec8faf68caef7f4d8b7...37015e879a7ef647d7a953edea902d67e2ae91a7)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/46c093451347d31a7461cd2c116db85587da9c6f)

* [OCPBUGS-24036](https://issues.redhat.com/browse/OCPBUGS-24036): remove all managed fields used by old manager [#2167](https://github.com/openshift/cluster-network-operator/pull/2167)
* [OCPBUGS-25312](https://issues.redhat.com/browse/OCPBUGS-25312), [OCPBUGS-25921](https://issues.redhat.com/browse/OCPBUGS-25921): Avoid removal of ipsec-host daemonset when node is NotReady [#2181](https://github.com/openshift/cluster-network-operator/pull/2181)
* [OCPBUGS-24148](https://issues.redhat.com/browse/OCPBUGS-24148): Updating cluster-network-operator-container image to be consistent with ART [#2133](https://github.com/openshift/cluster-network-operator/pull/2133)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c12c45c65c40101d0d11bf8690edc088bb4bc82a...46c093451347d31a7461cd2c116db85587da9c6f)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/b4be0464700b4597bab8f7f083d116d357caa841)

* [OCPBUGS-25982](https://issues.redhat.com/browse/OCPBUGS-25982): E2E: Add tests for Dynamic ovs pinning (#904) [#904](https://github.com/openshift/cluster-node-tuning-operator/pull/904)
* rps: fail silently when rps application failed (#897) [#897](https://github.com/openshift/cluster-node-tuning-operator/pull/897)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/590ba65f79e92479355a89984a50605729c05f64...b4be0464700b4597bab8f7f083d116d357caa841)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/3a6fc9ccce56eda7d27156d35d6256e3de24dcb6)

* [OCPBUGS-24145](https://issues.redhat.com/browse/OCPBUGS-24145): Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART [#560](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/560)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/bb83e65273bd75c5916a0c26307557f9354dec1a...3a6fc9ccce56eda7d27156d35d6256e3de24dcb6)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/5ae83b0e51342ca99c242c6993efc1e8c01ef17e)

* [OCPBUGS-25949](https://issues.redhat.com/browse/OCPBUGS-25949): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1013](https://github.com/openshift/cluster-version-operator/pull/1013)
* [OCPBUGS-25664](https://issues.redhat.com/browse/OCPBUGS-25664): pkg/cvo/sync_worker: Verification-failure details for unforced updates too [#1007](https://github.com/openshift/cluster-version-operator/pull/1007)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/8161b06406510b58c69e8c4d90c762a8c19d27ed...5ae83b0e51342ca99c242c6993efc1e8c01ef17e)


### [console](https://github.com/openshift/console/tree/f391957d34874041bb876c0b6ce06c9af8513ef9)

* [OCPBUGS-24812](https://issues.redhat.com/browse/OCPBUGS-24812): Add missing https:// check for an external link [#13433](https://github.com/openshift/console/pull/13433)
* [OCPBUGS-26516](https://issues.redhat.com/browse/OCPBUGS-26516): bump helm version to 3.13.2 for OCP 4.15 [#13465](https://github.com/openshift/console/pull/13465)
* [OCPBUGS-26041](https://issues.redhat.com/browse/OCPBUGS-26041): fix bug where Update cluster modal will not open [#13479](https://github.com/openshift/console/pull/13479)
* [OCPBUGS-26209](https://issues.redhat.com/browse/OCPBUGS-26209): Fix PipelineRun Logs tab navigation [#13484](https://github.com/openshift/console/pull/13484)
* [OCPBUGS-25726](https://issues.redhat.com/browse/OCPBUGS-25726): Re-enable and fix pipelines e2e tests [#13463](https://github.com/openshift/console/pull/13463)
* [OCPBUGS-25706](https://issues.redhat.com/browse/OCPBUGS-25706): update the checks for showing Archived to Tekton results icon for PLRs and TRs list and details page [#13461](https://github.com/openshift/console/pull/13461)
* [Full changelog](https://github.com/openshift/console/compare/35786a4ddcd555a89f3b6e9d3dfcf237a5d7a53b...f391957d34874041bb876c0b6ce06c9af8513ef9)


### [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator/tree/2fc4a7cc8f67164f6b11a0f4453201bbbb6fc9b7)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#221](https://github.com/openshift/csi-driver-manila-operator/pull/221)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#216](https://github.com/openshift/csi-driver-manila-operator/pull/216)
* [Full changelog](https://github.com/openshift/csi-driver-manila-operator/compare/37d697a57f7247ca71a512d63e99f7c60b2fac93...2fc4a7cc8f67164f6b11a0f4453201bbbb6fc9b7)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ce5a1a33fadf10bba0c90510c09dfc879dcfec87)

* [OCPBUGS-25698](https://issues.redhat.com/browse/OCPBUGS-25698): UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#86](https://github.com/openshift/csi-external-provisioner/pull/86)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/3aafbf6ead2d717ebbf09574bbddf9c76447dea8...ce5a1a33fadf10bba0c90510c09dfc879dcfec87)


### [etcd](https://github.com/openshift/etcd/tree/5acb4f3078adbea40d050365ac5294229e574c67)

* [OCPBUGS-24933](https://issues.redhat.com/browse/OCPBUGS-24933): Rebase etcd 3.5.11 openshift 4.15 [#232](https://github.com/openshift/etcd/pull/232)
* [Full changelog](https://github.com/openshift/etcd/compare/969d7afab8258b4610569d001e9a06b677acd021...5acb4f3078adbea40d050365ac5294229e574c67)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/118209dfa2ee7ce8acea2872db4544068aa9e1a1)

* [OCPBUGS-25947](https://issues.redhat.com/browse/OCPBUGS-25947): Fix changing load balancer scope [#56](https://github.com/openshift/cloud-provider-gcp/pull/56)
* [OCPBUGS-25808](https://issues.redhat.com/browse/OCPBUGS-25808): Add Snyk file to exclude vendor directory on scan [#55](https://github.com/openshift/cloud-provider-gcp/pull/55)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/a216255f56bca52ea33c2fd84ca3833101a2ecc1...118209dfa2ee7ce8acea2872db4544068aa9e1a1)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/6d63f90dee8893565fbc6083376fe3c5e616b284)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#108](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/108)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/08248c4237bc5de6f09f9e1a9b27ec59db50aca4...6d63f90dee8893565fbc6083376fe3c5e616b284)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/b400f2077ca1e5191282c53a64bd650209a430af)

* [OCPBUGS-26068](https://issues.redhat.com/browse/OCPBUGS-26068): Backport CEL IP and CIDR validations [#1843](https://github.com/openshift/kubernetes/pull/1843)
* [OCPBUGS-26005](https://issues.redhat.com/browse/OCPBUGS-26005): Update to Kubernetes 1.28.5 [#1837](https://github.com/openshift/kubernetes/pull/1837)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7aa0a745c4363fdecb2b5afc69a8a647471d8651...b400f2077ca1e5191282c53a64bd650209a430af)


### [hypershift](https://github.com/openshift/hypershift/tree/3ab6c267bf4512f67fd5d10d868effaa73256032)

* [OCPBUGS-26412](https://issues.redhat.com/browse/OCPBUGS-26412): Set new condition on SG deletion. [#3381](https://github.com/openshift/hypershift/pull/3381)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry remote writer when MGMT cluster is disconnected [#3380](https://github.com/openshift/hypershift/pull/3380)
* [OCPBUGS-26410](https://issues.redhat.com/browse/OCPBUGS-26410): Disable UWM Telemetry writer when telemeter-client cm not exists [#3379](https://github.com/openshift/hypershift/pull/3379)
* [OCPBUGS-26223](https://issues.redhat.com/browse/OCPBUGS-26223): hostedcontrolplane: don't start pki operator when disabled [#3376](https://github.com/openshift/hypershift/pull/3376)
* [OCPBUGS-25782](https://issues.redhat.com/browse/OCPBUGS-25782): Added support for OLM Disable default sources on HC creation [#3321](https://github.com/openshift/hypershift/pull/3321)
* [CCO-511](https://issues.redhat.com/browse/CCO-511): control-plane-operator: reconcile the CCO [#3336](https://github.com/openshift/hypershift/pull/3336)
* [Full changelog](https://github.com/openshift/hypershift/compare/cce0cb354bbd4c4b41e40a30a8558b1eca6bb748...3ab6c267bf4512f67fd5d10d868effaa73256032)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/7c4b63bcc763c822155f3dc8f890792409d8d1cd)

* [OCPBUGS-23685](https://issues.redhat.com/browse/OCPBUGS-23685): Add Snyk file to exclude vendor directory on scan [#72](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/72)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/fa2ba9fce081b6bba923383d3296503ecc5ebc33...7c4b63bcc763c822155f3dc8f890792409d8d1cd)


### [installer-altinfra](https://github.com/openshift/installer/tree/c20bcb355061fc9055992b18cca08683511b676c)

* [OCPBUGS-26511](https://issues.redhat.com/browse/OCPBUGS-26511): Bump default channel to 4.15 [#7883](https://github.com/openshift/installer/pull/7883)
* [OCPBUGS-26051](https://issues.redhat.com/browse/OCPBUGS-26051): aws: validate instance arch [#7868](https://github.com/openshift/installer/pull/7868)
* [OCPBUGS-25990](https://issues.redhat.com/browse/OCPBUGS-25990): Fixes for the OpensStack UPI playbooks. [#7863](https://github.com/openshift/installer/pull/7863)
* [Full changelog](https://github.com/openshift/installer/compare/2b894776f1653ab818e368fa625019a6de82a8c7...c20bcb355061fc9055992b18cca08683511b676c)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/e8749689edb8e7fea42eca5f2b67c3187192cdeb)

* [OCPBUGS-24142](https://issues.redhat.com/browse/OCPBUGS-24142): Updating ose-kube-storage-version-migrator-container image to be consistent with ART [#201](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/201)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/95ad20fc390cd34e0e5ba5135d5048bc0f008c0d...e8749689edb8e7fea42eca5f2b67c3187192cdeb)


### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a)

* [OCPBUGS-26045](https://issues.redhat.com/browse/OCPBUGS-26045): Replace genisoimage with xorriso in 4.15 to allow rhel9 bump [#272](https://github.com/openshift/cluster-api-provider-libvirt/pull/272)
* [OCPBUGS-25772](https://issues.redhat.com/browse/OCPBUGS-25772): Add Snyk file to exclude vendor directory on scan [#278](https://github.com/openshift/cluster-api-provider-libvirt/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/43b2b82069d4752609f91049d580df2756e570b9...1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/2886a920caee53f77523f785d8d92c88f71f10d0)

* [OCPBUGS-26406](https://issues.redhat.com/browse/OCPBUGS-26406), [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1196](https://github.com/openshift/machine-api-operator/pull/1196)
* [OCPBUGS-25734](https://issues.redhat.com/browse/OCPBUGS-25734): Add Snyk file to exclude vendor directory on scan [#1193](https://github.com/openshift/machine-api-operator/pull/1193)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/ffcde1ea9daa32f305d9f803e055e2b0f1144a73...2886a920caee53f77523f785d8d92c88f71f10d0)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/8c4ca51b2f9c22c4dc14092166e0d454ba1401b7)

* [OCPBUGS-24416](https://issues.redhat.com/browse/OCPBUGS-24416): Sync MCN with node creation and deletion [#4062](https://github.com/openshift/machine-config-operator/pull/4062)
* NO-ISSUE: pkg: Deduplicate api/machineconfiguration/v1 imports [#4091](https://github.com/openshift/machine-config-operator/pull/4091)
* [MCO-679](https://issues.redhat.com/browse/MCO-679): MCO-830: Managed boot images MVP [#4083](https://github.com/openshift/machine-config-operator/pull/4083)
* [OCPBUGS-25406](https://issues.redhat.com/browse/OCPBUGS-25406): Azure Run ovs-configuration.service before dnsmasq.service [#4087](https://github.com/openshift/machine-config-operator/pull/4087)
* [OCPBUGS-19628](https://issues.redhat.com/browse/OCPBUGS-19628): Log network service output to console [#3927](https://github.com/openshift/machine-config-operator/pull/3927)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/0d53a7e82cf33f102dc22bd81d8ac492b6af05c2...8c4ca51b2f9c22c4dc14092166e0d454ba1401b7)


### [multus-cni](https://github.com/openshift/multus-cni/tree/5cfe4aead61e1c07b7ddc014c6f6baf4ccccb28a)

* [OCPBUGS-26535](https://issues.redhat.com/browse/OCPBUGS-26535): Revert #206 "Adds a wait on unix socket readiness [backport 4.15]" [#209](https://github.com/openshift/multus-cni/pull/209)
* [OCPBUGS-22839](https://issues.redhat.com/browse/OCPBUGS-22839): Adds a wait on unix socket readiness [backport 4.15] [#206](https://github.com/openshift/multus-cni/pull/206)
* [Full changelog](https://github.com/openshift/multus-cni/compare/473da983ccafa7d14198594b498fa125cd8018df...5cfe4aead61e1c07b7ddc014c6f6baf4ccccb28a)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/a55daf619fc97ff5c0c0b61edd320381c943bc8f)

* [OCPBUGS-24090](https://issues.redhat.com/browse/OCPBUGS-24090): Updating ose-openshift-apiserver-container image to be consistent with ART [#406](https://github.com/openshift/openshift-apiserver/pull/406)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/0c311d3c194446a863726f5b6d5c6abe9a2a4915...a55daf619fc97ff5c0c0b61edd320381c943bc8f)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80)

* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#154](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/154)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#148](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/148)
* [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/6d5e462c702b53059147af9fdb07a32d25009fd2...2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c17320571b51e06e023926aef3edfe7a8fedd2d7)

* [OCPBUGS-26066](https://issues.redhat.com/browse/OCPBUGS-26066): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#648](https://github.com/openshift/operator-framework-olm/pull/648)
* [OCPBUGS-25818](https://issues.redhat.com/browse/OCPBUGS-25818): NO-ISSUE: Synchronize From Upstream Repositories [#644](https://github.com/openshift/operator-framework-olm/pull/644)
* [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798), [OCPBUGS-25802](https://issues.redhat.com/browse/OCPBUGS-25802): [release-4.15] NO-ISSUE: Synchronize From Upstream Repositories [#643](https://github.com/openshift/operator-framework-olm/pull/643)
* NO-ISSUE: Update verified directories for microshift-manifests [#642](https://github.com/openshift/operator-framework-olm/pull/642)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/8d9fd047c014877b5d3285acb8516a7494a24026...c17320571b51e06e023926aef3edfe7a8fedd2d7)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e6ba47f4986f2165c09668d97067f011caa0f4cf)

* [OCPBUGS-25486](https://issues.redhat.com/browse/OCPBUGS-25486): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#1999](https://github.com/openshift/ovn-kubernetes/pull/1999)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/a62756b08e496b3690db3cfee39052c54f931d14...e6ba47f4986f2165c09668d97067f011caa0f4cf)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/5ca428c8a7be80681a1abc8fcb5bb36aaa09c5bc)

* [OCPBUGS-25978](https://issues.redhat.com/browse/OCPBUGS-25978): Rebase with upstream: Fix snyk code issue: Path Traversal [#71](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/ecd5957d49ae71c8026e649e0b48909168408a7e...5ca428c8a7be80681a1abc8fcb5bb36aaa09c5bc)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/07e8f8b81748d52cf596082b8102134e954137ba)

* [OCPBUGS-26555](https://issues.redhat.com/browse/OCPBUGS-26555): PowerVS: Bump powervs-utils to v0.0.0-20240105123432-7588e9595c17 [#72](https://github.com/openshift/machine-api-provider-powervs/pull/72)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/c77a9bdac3cc992702191b7a01845108f0942047...07e8f8b81748d52cf596082b8102134e954137ba)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/f5972cc74670c274bdc2b29d0903c4ed0432b9ca)

* [OCPBUGS-24107](https://issues.redhat.com/browse/OCPBUGS-24107): Updating ose-service-ca-operator-container image to be consistent with ART [#226](https://github.com/openshift/service-ca-operator/pull/226)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/4d3d966edaaafcae7c9d4a1aa87a67ac627a6ebd...f5972cc74670c274bdc2b29d0903c4ed0432b9ca)


### [tests](https://github.com/openshift/origin/tree/6d5063bb04e0395cc93d4c2591e5e1372d8e5119)

* [OCPBUGS-26239](https://issues.redhat.com/browse/OCPBUGS-26239): Properly ignore kube guard probe events [#28504](https://github.com/openshift/origin/pull/28504)
* [OCPBUGS-26206](https://issues.redhat.com/browse/OCPBUGS-26206): Update cluster-monitoring-operator request limits [#28506](https://github.com/openshift/origin/pull/28506)
* [Full changelog](https://github.com/openshift/origin/compare/ecca9c7c8212677dd28aa93d328849885221fb23...6d5063bb04e0395cc93d4c2591e5e1372d8e5119)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/de02a75de63c6d8afd8467afd9aff97878d8bea4)

* [OCPBUGS-25648](https://issues.redhat.com/browse/OCPBUGS-25648): Fix VPD crash when vm is not found [#149](https://github.com/openshift/vsphere-problem-detector/pull/149)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/50cd01c01db25d8c3043ef923f18019d3c8c87bf...de02a75de63c6d8afd8467afd9aff97878d8bea4)