# 4.15.19 Created: 2024-06-20 20:18:12 +0000 UTC Image Digest: `sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648` Promoted from registry.ci.openshift.org/ocp/release:4.15.0-0.nightly-2024-06-20-070602 ## Changes from 4.15.2 ### Components * Kubernetes upgraded from 1.28.6 to 1.28.10 * Red Hat Enterprise Linux CoreOS upgraded from 415.92.202403061641-0 to 415.92.202406190406-0 ### Rebuilt images without code change * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [33b7d855](https://github.com/openshift/agent-installer-utils/commit/33b7d855fdebd24a972f32dafafd29e40b117e46) `sha256:c1999e384e731570b0532802c273f7612035eace2b4556a70b1b03f7940f09e1` * [alibaba-cloud-controller-manager](https://github.com/openshift/cloud-provider-alibaba-cloud) git [abf4fa96](https://github.com/openshift/cloud-provider-alibaba-cloud/commit/abf4fa96550caf09e788b66fc06f1df802768397) `sha256:d890833d409ba444af6dfb81c00cd1e932983d18366e08665553b39248580d08` * [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver) git [be4888d3](https://github.com/openshift/alibaba-cloud-csi-driver/commit/be4888d3dc176b9801364981fbb34d831f6d6ffe) `sha256:389e04ca9686deccb1805cde015e0939a1c2642af1fac546dfbc534e13123680` * [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [41b367ae](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/41b367ae3bb6de9292539c0ecd98c81c5edc8294) `sha256:a9dad6038c783164b1c7ef283a2fd5f8330b073571f2298a3b4f6cd459ea8f73` * [alibaba-machine-controllers](https://github.com/openshift/cluster-api-provider-alibaba) git [d3ba04c3](https://github.com/openshift/cluster-api-provider-alibaba/commit/d3ba04c35e77e4e937aa9b7b4d069753cd514335) `sha256:968ef81e79c74797df4f32de98b5b647671d62e7d64907bb9b1aee86bb2bdd82` * [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [0129b1e3](https://github.com/openshift/machine-api-provider-aws/commit/0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382) `sha256:623318d3b8b5328729d81bce27fb5e0579f7184082f45a0fb0c6ecc00bed9580` * [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [dcb7e1c7](https://github.com/openshift/azure-disk-csi-driver/commit/dcb7e1c7d239ab5a26d70d7abcff1eb97b634b8d) `sha256:b07ae705c8fa2c4ae2dac23015af3ce7ca593dff536b5f39e81091690e48096a` * [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator) git [160cf624](https://github.com/openshift/azure-disk-csi-driver-operator/commit/160cf624a88f500de7a1f79e6dd9384bb7d17842) `sha256:ad5d47a8e5845c41e68634207f14346d6ca73f4cd289a749a599c0990038c9e6` * [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [fdce2d08](https://github.com/openshift/cluster-baremetal-operator/commit/fdce2d0892e255240ff760e91fa8a738ae4a7556) `sha256:c46af7737156dd8bf905589bb5bce3c99ec25177d27ae02c3b011aff6e4f5af2` * [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [0849c462](https://github.com/openshift/cluster-bootstrap/commit/0849c462de13b9a5765b9a8c882acb9e6e8bf39e) `sha256:6baa1624777c5eefaed04df27ff1197dbf74ee600f8191266776034198a20eef` * [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [128d8e08](https://github.com/openshift/cluster-api-operator/commit/128d8e08c48e2002c416e84d0dec816bf5999c7e) `sha256:0f6b642f75201d32dd3e8c360277be6539ce9a16baf613d4e1b836f1ded41742` * [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [37015e87](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/37015e879a7ef647d7a953edea902d67e2ae91a7) `sha256:9012b84ff14e08d73ce1ac6ee0e2d78f4e82a6f97797ede2a29a5eb50c6aa1b5` * [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [3a6b6ae6](https://github.com/openshift/cluster-machine-approver/commit/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba) `sha256:434bab89b7d3f3b208ce08bdf6ce58145286510dc797522d2d4789dd18f58af9` * [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator) git [a7ba8987](https://github.com/openshift/cluster-olm-operator/commit/a7ba89874970cd10765e1d0753405e32fb357d84) `sha256:3d804164689813b4ead1130b7d36eb73011d95804b504d41451aec4a45d088e9` * [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator) git [74013916](https://github.com/openshift/cluster-openshift-apiserver-operator/commit/74013916aadbe6a18ac06e93c0ff72e8735a9668) `sha256:403e34d0c79e566244708905cb206cf595f23040656e8a07636ea0bc53a79aeb` * [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [37a0a919](https://github.com/openshift/platform-operators/commit/37a0a919b1032f7affa49b756eda4762d77751d5) `sha256:238733a82c994c67209abc55b6379279481a5466250c01e567884cc4e809ab2d` * [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [cc48f315](https://github.com/openshift/cluster-policy-controller/commit/cc48f3152213bfe6e42fdd82f760246e862d208f) `sha256:d2735c8c074d67a6fbd10871da971fcf49b41cb2900d5e97f3dafcb85bf3402c` * [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [be6ba5b0](https://github.com/openshift/cluster-update-keys/commit/be6ba5b0acee8970345b5259025506a04562ad37) `sha256:7b701406568c35ecd780b5ecc0ad69283fa34493f1239a280406dfbcef6e1452` * [configmap-reloader](https://github.com/openshift/configmap-reload) git [617398f5](https://github.com/openshift/configmap-reload/commit/617398f581faadbad2c7ded993bfa3169a87b6ab) `sha256:ec8088e083fd3d527e348c75a289096341e8f517f08dd945172a080d7962038c` * [coredns](https://github.com/openshift/coredns) git [22f950ea](https://github.com/openshift/coredns/commit/22f950eae53fcba187c2303ac4f1a8305b6c1c8a) `sha256:9508a871e104890826a0c7f08890b57f5dd9d1549e0caee610112aa3a5c90f4e` * [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [2fc4a7cc](https://github.com/openshift/csi-driver-manila-operator/commit/2fc4a7cc8f67164f6b11a0f4453201bbbb6fc9b7) `sha256:aa8ed6483f83a8cc0c39e8377a5c5d9e14816bc86f7148562a37bcd13163d6cc` * [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [d032dc10](https://github.com/openshift/csi-driver-nfs/commit/d032dc1050b58a965e6bb9f923baef6d3c95538e) `sha256:1cf868f930e2a903d4cc76e56209586e7058fb284aeaa845bc27c981a31d88c0` * [csi-driver-shared-resource](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:5bdb8a9b20115af704b4c9aa7b7fcf7aefd740701cb6da5d83179ecaed352b41` * [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator) git [8d017b7f](https://github.com/openshift/csi-driver-shared-resource-operator/commit/8d017b7f19f0226dfd4fc7933271939c550d180f) `sha256:df8d0f78a034504a2904abaef4f3cfd37cc807a638d0f50c0d7fa10c05dc1a87` * [csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource) git [260a085a](https://github.com/openshift/csi-driver-shared-resource/commit/260a085ae25606bba7a94cdfed88f67265905ba9) `sha256:f6f350143ce8856fc5ac36e3ae58e6df394e273a62fee87efdbbaf50e2d99b3d` * [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [f806f266](https://github.com/openshift/csi-external-attacher/commit/f806f266600fbc0db4d072e4d041fc80e28deee7) `sha256:c1885d0bb81cc7f30a5f22676bdff2985613b15300e8779c2dda6dcf894c75a1` * [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [ce5a1a33](https://github.com/openshift/csi-external-provisioner/commit/ce5a1a33fadf10bba0c90510c09dfc879dcfec87) `sha256:2e2e16ed863d85008fdd9d23e601f620ec149ea4f1d79bc44449ba7a8ad6d2b8` * [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [3b4236d3](https://github.com/openshift/csi-external-resizer/commit/3b4236d382e4593ca41ecc6f394775be467b1a0d) `sha256:c6c971e7f994869e2c4fb084d336ef41f3e0fb170468813c2454eda21b274b8a` * [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [240bb8c0](https://github.com/openshift/csi-livenessprobe/commit/240bb8c0c7b24d0b18831be4ace39bcbc8d599e3) `sha256:e79d574eda09fd6b39c17759605e5ea1e577b8008347c7824ec7a47fd1f8f815` * [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [9005584e](https://github.com/openshift/csi-node-driver-registrar/commit/9005584ee45c4d3158e383870aafa5d78a03b141) `sha256:d4ae187242ec50188e765b3cad94c07706548600d888059acf9f18cc4e996dc6` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7a448c2e](https://github.com/openshift/driver-toolkit/commit/7a448c2ee026c772e293dd344da587493c859f82) `sha256:d37a0fd58d82cf599925bfbd2579c6490123dbaa83967514b2fe642e6ed332fc` * [egress-router-cni](https://github.com/openshift/egress-router-cni) git [39ea8ee1](https://github.com/openshift/egress-router-cni/commit/39ea8ee1d8299b9052be76bd4b50c79d731c9e38) `sha256:55e40cba290fadafc1b7b420fa7113a2d9299a8b1901a00bd7b233ac54867899` * [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [b15daaf5](https://github.com/openshift/machine-api-provider-gcp/commit/b15daaf5836910277b7154a006800505f018aa5a) `sha256:3822f744484ef8333ca2c05489636ec05528d8307f284a2bc41e0b63f28db77b` * [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [856ee3e2](https://github.com/openshift/gcp-pd-csi-driver/commit/856ee3e23802cd341619cc4fc3181cf6ebbbd548) `sha256:3f56bc67986536262b4b161844d062ae287be2cbcb3dd22808cb2a749279c65b` * [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator) git [3b91ee31](https://github.com/openshift/gcp-pd-csi-driver-operator/commit/3b91ee310c8a7394ceb2d4de6a51dd18a3800312) `sha256:14db505d822eb3980bc5013508ef202ea23fa947c06efd2d1c3ee555d79b280e` * [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [19e64d5c](https://github.com/openshift/cloud-provider-ibm/commit/19e64d5c78656c7c91cbec310ca312cbe92f60f0) `sha256:ee715d4636d3bd0ac997b0ff1ea39995020a0a1ef442bd3a164acca8e2ed1d9b` * [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [ce7f53cd](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/ce7f53cdf24173b0625b9263ef38a8ed956adcd2) `sha256:106d77c24a5f664e1dd0585d88b32547f8e3f96dec86cf365b1a7135f5e5f6aa` * [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater) git [e1a0adca](https://github.com/openshift/ibm-vpc-node-label-updater/commit/e1a0adca08158691dd1e5b1a834741ceea6a6f8b) `sha256:1a41dcde59f7edf59701ffef472fd70cd821fe38a94f634624f536648a0a5a8a` * [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [34fb6252](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/34fb625247f6743637b0ef0c5767e000e0ec1e65) `sha256:33f61a10a06cad22166cd3c46b21feccdedff80a98d156f4395d2919e26b2f09` * [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [6b0b8ea7](https://github.com/openshift/machine-api-provider-ibmcloud/commit/6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1) `sha256:35d00c7763a5fe26d51a34f221513521178c9fbf1f5be0ff2420868b82d28266` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [bcbcd95b](https://github.com/openshift/ironic-rhcos-downloader/commit/bcbcd95b6209afc8248b34c55294686dbd3831a3) `sha256:f5be3b297157b981f17f24295d469ecc94de750becbc0a7bf3f5eab044e85a02` * [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [47200021](https://github.com/openshift/ironic-static-ip-manager/commit/472000211344be4a5e9581820e94895144cf2bfc) `sha256:41ddfeca64804ad2742ae868642a3d60112438fc94c9964d8c886b447afa535b` * [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [bcbf241c](https://github.com/openshift/kubernetes-metrics-server/commit/bcbf241cece8ef455be32a910f1570bae827b4a1) `sha256:f47ceabd682086fccef4b2218e8c36072f40644f1651d755c3b5044f22024717` * [kube-proxy](https://github.com/openshift/sdn) git [71a6f28d](https://github.com/openshift/sdn/commit/71a6f28d69f77953d104219cee344a70f7cbede1) `sha256:7f375fcb022e913a7bced0022c13e0118347336782f9baeea7e04fb9f68bb203` * [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [e8e8c84b](https://github.com/openshift/kube-rbac-proxy/commit/e8e8c84bcc6d4419970726f3028df4b178c0b1c9) `sha256:f15be2dc3d6d2c1848f997b7921d11bf4c0873c129cdf182155ac133880b0a89` * [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [037b59c2](https://github.com/openshift/kube-state-metrics/commit/037b59c265454c599dfb0829a856e14b1ab07896) `sha256:8704d2c1da1c62610746457b6e1164d9bc80332e97c0713e90e9d3add35cb895` * [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [e8749689](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/e8749689edb8e7fea42eca5f2b67c3187192cdeb) `sha256:42874dc069f0b6563b3523cdebb0d0789b04f125afd35c27b9a350ab86617849` * [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [1e096cdf](https://github.com/openshift/cluster-api-provider-libvirt/commit/1e096cdf1bfd60e9bf5ee6c90585a8f96cc0c09a) `sha256:64f9942fe8909c8eb810c639466346ff68efaa45cc16f12007a72c2068f74cbf` * [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [97d87657](https://github.com/openshift/image-customization-controller/commit/97d87657caab4323f82f9d0958e6d30fc8fd1846) `sha256:d504bf6ab9372f83ca27150e7cc381bbcd83cbadc4ad4d5967db5e341aa2e646` * machine-os-content `sha256:366758609eb488bca40eddc2038bbfd7c32f70073508983cdc52e9d8b7da5efd` * [machine-os-images](https://github.com/openshift/machine-os-images) git [9e9c920f](https://github.com/openshift/machine-os-images/commit/9e9c920f985a375536e8d4caafd2d7ed579e27f3) `sha256:2ea6b14933997476b0f1a2e090cb7d9a23610ab61cab0a7cb93aa402d45ba2b6` * [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [23a7cfe4](https://github.com/openshift/multus-admission-controller/commit/23a7cfe44cacd1e8c1049ee3e0a858ec01e03d44) `sha256:bf7178a8abce655f50c36276fb4973255dad1b3d28b7edb446267220182ed195` * [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [6212406b](https://github.com/openshift/multus-networkpolicy/commit/6212406b49cbcc75a01da85a67469b4872754e1d) `sha256:4d2d9b6cd5d0f326f1ae6391bbdbbe0f0a2529f593dff8c98686709e1a04d00e` * [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [a5b755b5](https://github.com/openshift/route-override-cni/commit/a5b755b513f39e6e06ae3eca8daa6f965e96e6c5) `sha256:4b8ccd58fa99842e5222b5eb5e85ea18912acd807d1c51fafa1932a65a932562` * [must-gather](https://github.com/openshift/must-gather) git [47335065](https://github.com/openshift/must-gather/commit/47335065cc7137ec098567b06d21f742669b4200) `sha256:0ca95d38c2dc199dc336991818af4ade67286fd227b725d709233e81010f55b6` * [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [f91decaa](https://github.com/openshift/bond-cni/commit/f91decaa10cfa233c9e680c96ec7ae642e30a03c) `sha256:7264244bf893fd9134eda9cbabf3a28d10c8e40c9261c8646b319d553f520149` * [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [0288f362](https://github.com/openshift/network-metrics-daemon/commit/0288f3620532f481ce258f5169b42a67b7f9a0cb) `sha256:fd5d7fb8ef5cbe83a6f8aff31a624d482595c7934fdb9b44ee0f62045246ccf2` * [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33fb22c1](https://github.com/openshift/cloud-provider-nutanix/commit/33fb22c182fa86d5de5bdc5c1b08a39b1278be3d) `sha256:afc6e3c5ef38bd9bc0bbdff0bbb547295e941b4e84d306c0953d5bb309cf8297` * [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [f02b1a28](https://github.com/openshift/machine-api-provider-nutanix/commit/f02b1a28d89ea69c614995163874ca1eff4f4aaf) `sha256:2cc370a3d1973cae05a42c9cd3db96511d3f9340eef00f61939c4e40b2d9c337` * [oauth-proxy](https://github.com/openshift/oauth-proxy) git [241a88c4](https://github.com/openshift/oauth-proxy/commit/241a88c47cb01d0e61ff105ceff81ad14fd9ea6e) `sha256:d8276d23009d5fa55bf0b552a4dff528ee2a9469b14512e5f4148ca30b0e42ae` * [olm-catalogd](https://github.com/openshift/operator-framework-catalogd) git [2724be3e](https://github.com/openshift/operator-framework-catalogd/commit/2724be3ed7a0205241c33c26d92d33f3d246662c) `sha256:e21d5abd0111b874909412ff42c71c7b1b0cefa9488195f303bb499b52903a5e` * [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller) git [e2906934](https://github.com/openshift/operator-framework-operator-controller/commit/e2906934f5051bb0f80ccdd0091e5ffd85addaff) `sha256:d0742e8d8b80b1fba42ebde599d09f4ebf7a4519bf689759eccc2da8ae11a474` * [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [1915f645](https://github.com/openshift/openshift-state-metrics/commit/1915f64591a18c11138d10c00c50b3f5cff632ce) `sha256:bc29608ce77c7028607d47a685ff6c76fa212666c628f160dd01ee73a7d79207` * [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [b8d25ad6](https://github.com/openshift/ovirt-csi-driver/commit/b8d25ad6d140a198e96527b46a9dbde65aae41ce) `sha256:29a71c0b1141a149950c63c1241d93c4ebef87d095566945d966253fb31845fe` * [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [e9b0fa23](https://github.com/openshift/ovirt-csi-driver-operator/commit/e9b0fa233d75a97e6d29106265938b42bc16d677) `sha256:724fada8b45990d571a3caf79958f57629f7990021a8cf1ad7b0553cf6d52338` * [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt) git [5d708631](https://github.com/openshift/cluster-api-provider-ovirt/commit/5d708631fca37aff0ede7d7f8fc9ba76c7fcee47) `sha256:d3de5f5ff6a65619d82d5f02f6b4ca7e6eba60bacb9bab24acdf2fa180928384` * [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [a3729dcb](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/a3729dcb75a7da8c9ee7466da5de07e2f1fe5951) `sha256:57800c5210442ff8cf5a1f4212fc2a2f1fb424ba1807d67a37f340ef5db9bafd` * [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [521b80df](https://github.com/openshift/cloud-provider-powervs/commit/521b80dfc284a1ca0c6e112ac7bf7b504c786d88) `sha256:953bf9f64417318e63f745a5d1f6bbc11a201f856d9b273f539e89f5c1291979` * [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [07e8f8b8](https://github.com/openshift/machine-api-provider-powervs/commit/07e8f8b81748d52cf596082b8102134e954137ba) `sha256:80e261561f3a5329ff54589fd8aa829b920a578a16a5c618a2caed15941e340a` * [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [f3f1f5d1](https://github.com/openshift/prom-label-proxy/commit/f3f1f5d1161df6c25a0e1d04218dfc6447782ab4) `sha256:85f9a485b73d32528862074ddf199f767e0299bc99ce1401b1b90729c49206ff` * [prometheus](https://github.com/openshift/prometheus) git [6828e446](https://github.com/openshift/prometheus/commit/6828e4464c45f239a89c7965233c2fef49c6b1fb) `sha256:38bd10b6a28c9ba6813a591b51d1ba851735ba9b8983cc4182428f06ff863b8b` * [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [870ade52](https://github.com/openshift/prometheus-alertmanager/commit/870ade52a6097bc55cec29c1a9cc028967c5d23c) `sha256:f0021faf49ceb0d02be6f2c9e17976f74af57863806f832a0ae958576164a9bb` * [prometheus-config-reloader](https://github.com/openshift/prometheus-operator) git [faad27f9](https://github.com/openshift/prometheus-operator/commit/faad27f990b16a0806f92bf0362e45d777cec8e7) `sha256:cdd305e3b49f9e1f45f749a17f16579a4f5abdc1ab9c80d2272ea524c7af1744` * [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [aed837c3](https://github.com/openshift/node_exporter/commit/aed837c322b6eb54d88956acada07b5b390b5c25) `sha256:ec1cfa62ba3dd3edb6603ac11c909109552824655e73b12fdcf6688b0a4dacf6` * [prometheus-operator](https://github.com/openshift/prometheus-operator) git [faad27f9](https://github.com/openshift/prometheus-operator/commit/faad27f990b16a0806f92bf0362e45d777cec8e7) `sha256:c0540db6904752391f9c926ecfb1b1fa2f9b6b3b5ff1106ff06360a6048dfd44` * [prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator) git [faad27f9](https://github.com/openshift/prometheus-operator/commit/faad27f990b16a0806f92bf0362e45d777cec8e7) `sha256:db735dcf10113fb7e3b26cb2af108b50e2cf66a270c9ab306f99ab58cfe56e06` * rhel-coreos `sha256:a0feb7d16d7885ee1a363a9a1cba359ac4365d6a25ba4433afe9d737f838cf93` * rhel-coreos-extensions `sha256:617e3e6c20701e2fdd669e6cb7498ff46b9ddbc7ea7382cb386013a8bcada7e3` * [route-controller-manager](https://github.com/openshift/route-controller-manager) git [c5cc7a73](https://github.com/openshift/route-controller-manager/commit/c5cc7a73705e4086759e2a36811b055b7716def4) `sha256:72025440f89c39b0264f23ce1b2f48ad2d154635bf5a8cca73c224c3d0bf0dc4` * [sdn](https://github.com/openshift/sdn) git [71a6f28d](https://github.com/openshift/sdn/commit/71a6f28d69f77953d104219cee344a70f7cbede1) `sha256:4629ca6f9e617e661417918e0d380c1ad96d550ade1b407eb0bde7985cb85729` * [thanos](https://github.com/openshift/thanos) git [66161ad4](https://github.com/openshift/thanos/commit/66161ad4e03e5593f5a3a33aaaffbcd41555d62a) `sha256:7e9a08f28ad8862b17957ca4bd4747436d1957dfc78caf6a5b8dae0378c215c5` * [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [d2af6982](https://github.com/openshift/cloud-provider-vsphere/commit/d2af698277d7dbbd020f8b05b1c319e1bbb1eeae) `sha256:8e6e9e2bb77eaa122219614291d4d469937fc0eed05c6e728b287e0218c7dc5e` * [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator) git [e0d46570](https://github.com/openshift/vmware-vsphere-csi-driver-operator/commit/e0d46570a06caff3439b410b9c9f75cb383a3d2d) `sha256:6a2c9e4a314361ff69085072b50e1d479c4ed13ea6ee8864e8be113ebcd782e3` * [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [de02a75d](https://github.com/openshift/vsphere-problem-detector/commit/de02a75de63c6d8afd8467afd9aff97878d8bea4) `sha256:81929809b099083429b002d827068ada1416ca116f5d85a589f00807e7ee90fe` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/833fd90a6dc4d0707f5ffca18e9b288e260346c1) * [OCPBUGS-34641](https://issues.redhat.com/browse/OCPBUGS-34641): Invalid Pull-Secret when using password which contains a colon character (#6381) [#6381](https://github.com/openshift/assisted-service/pull/6381) * [OCPBUGS-31631](https://issues.redhat.com/browse/OCPBUGS-31631): Deploy dual stack with IPv6 on top of bond/vlan fails (#6245) [#6245](https://github.com/openshift/assisted-service/pull/6245) * [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#6217) [#6217](https://github.com/openshift/assisted-service/pull/6217) * 17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6211) [#6211](https://github.com/openshift/assisted-service/pull/6211) * Revert "MGMT-17549: Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194)" (#6208) [#6194](https://github.com/openshift/assisted-service/pull/6194) * [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#6194) [#6194](https://github.com/openshift/assisted-service/pull/6194) * [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#6191) [#6191](https://github.com/openshift/assisted-service/pull/6191) * [OCPBUGS-30232](https://issues.redhat.com/browse/OCPBUGS-30232): Handle skipping hostPrefix validation for IPv6 For non-OVN/SDN networkTypes, the hostPrefix validation is not required and it is skipped. This fixes a regression introduced in the fix for https://issues.redhat.com/browse/OCPBUGS-23069 in which IPv6 CIDRs were not using the correct default hostPrefix. In addition, all cases where the validation is used are now covered. (#6137) [#6137](https://github.com/openshift/assisted-service/pull/6137) * NO-ISSUE: replace postgres images as current one disappeared from quay (#6135) [#6135](https://github.com/openshift/assisted-service/pull/6135) * [Full changelog](https://github.com/openshift/assisted-service/compare/d60e80f8658cf8a756ff4aa318983ddcf0e70bca...833fd90a6dc4d0707f5ffca18e9b288e260346c1) ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/3fe931b2a36e97b5fdfb82b62b1eaee14d7c7417) * [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Use hostnamectl to replace illegal hostname (#851) [#851](https://github.com/openshift/assisted-installer/pull/851) * [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#833) [#833](https://github.com/openshift/assisted-installer/pull/833) * [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#827) [#827](https://github.com/openshift/assisted-installer/pull/827) * [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#824) [#824](https://github.com/openshift/assisted-installer/pull/824) * [Full changelog](https://github.com/openshift/assisted-installer/compare/550f2a568d4b4a494b3637ebba725bdd9c26ecd9...3fe931b2a36e97b5fdfb82b62b1eaee14d7c7417) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1f44c0261c5d1fd5c9dbc6ad6754838f1f3245af) * [OCPBUGS-33404](https://issues.redhat.com/browse/OCPBUGS-33404): Make removable disks eligible (#718) [#718](https://github.com/openshift/assisted-installer-agent/pull/718) * [MGMT-17593](https://issues.redhat.com/browse/MGMT-17593): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#704) [#704](https://github.com/openshift/assisted-installer-agent/pull/704) * [MGMT-17549](https://issues.redhat.com/browse/MGMT-17549): Bump runc version to 1.1.12 to Mitigate CVE-2024-21626 (#699) [#699](https://github.com/openshift/assisted-installer-agent/pull/699) * [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#695) [#695](https://github.com/openshift/assisted-installer-agent/pull/695) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/b0beda7b7323ff17e5f13262f23ac01c35a56485...1f44c0261c5d1fd5c9dbc6ad6754838f1f3245af) ### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/698a4035d9e6fad1478db37c3156fdd56c00f65e) * [OCPBUGS-31953](https://issues.redhat.com/browse/OCPBUGS-31953): Bump golang.org/x/net to v0.23.0 [#51](https://github.com/openshift/apiserver-network-proxy/pull/51) * [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/dc30b80c9931de88a841eb0677dadbd1d63c27a6...698a4035d9e6fad1478db37c3156fdd56c00f65e) ### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/1e5e25da5ea2a115b84f6ec2ba695d5a244149de) * [OCPBUGS-31954](https://issues.redhat.com/browse/OCPBUGS-31954): update for CVE-2023-45288 [release-4.15] [#81](https://github.com/openshift/cloud-provider-aws/pull/81) * [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): Updates build-rpm.sh to set release to build time [#76](https://github.com/openshift/cloud-provider-aws/pull/76) * [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/2e3cca19638cae3066cba27608ed61c284b4d529...1e5e25da5ea2a115b84f6ec2ba695d5a244149de) ### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/51e7a81c40ab6d384e9b643dd6d2c97a417d1634) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#511](https://github.com/openshift/cluster-api-provider-aws/pull/511) * [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): UPSTREAM: <carry>: Fix instance PrivateDNSName when domain-name is set in dhcpOpts [#508](https://github.com/openshift/cluster-api-provider-aws/pull/508) * [OCPBUGS-31036](https://issues.redhat.com/browse/OCPBUGS-31036): UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called [#501](https://github.com/openshift/cluster-api-provider-aws/pull/501) * [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#504](https://github.com/openshift/cluster-api-provider-aws/pull/504) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/3e23a968b30cd41b648010ef3be053a0bfefab0c...51e7a81c40ab6d384e9b643dd6d2c97a417d1634) ### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/7043c1cca6e17dd3c90006140f6361cf0e776d69) * [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): UPSTREAM: 1919: Add reserved-volume-attachments [#263](https://github.com/openshift/aws-ebs-csi-driver/pull/263) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/b692edb1bcad959162c5c62969c13f85d0266fa2...7043c1cca6e17dd3c90006140f6361cf0e776d69) ### [aws-ebs-csi-driver-operator](https://github.com/openshift/csi-operator/tree/2a2b9dd109ba9d4abce11411c96787b21887f929) * [OCPBUGS-33043](https://issues.redhat.com/browse/OCPBUGS-33043): Explicitly reserve 1 attachment for the root disk [#222](https://github.com/openshift/csi-operator/pull/222) * [OCPBUGS-30621](https://issues.redhat.com/browse/OCPBUGS-30621): remove legacy directory and duplicate Dockerfile.*.test files [#201](https://github.com/openshift/csi-operator/pull/201) * [OCPBUGS-30621](https://issues.redhat.com/browse/OCPBUGS-30621): move test manifest to top-level directory [#195](https://github.com/openshift/csi-operator/pull/195) * [Full changelog](https://github.com/openshift/csi-operator/compare/f258bd0bf4e0ed13d6f555962d594818bd756f2d...2a2b9dd109ba9d4abce11411c96787b21887f929) ### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/13385034ec9a843a6b40f8b3aec9966ada785115) * [OCPBUGS-32886](https://issues.redhat.com/browse/OCPBUGS-32886): Upgrade go-jose module to 2.6.3 [#188](https://github.com/openshift/aws-pod-identity-webhook/pull/188) * [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/a63743aff1004f4834b347812833834ba508c27b...13385034ec9a843a6b40f8b3aec9966ada785115) ### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/0d799a261f70bbdf546d911f5f8b59e2c324bd16) * [OCPBUGS-33127](https://issues.redhat.com/browse/OCPBUGS-33127): Improvements to client timeouts to prevent hangs [#118](https://github.com/openshift/cloud-provider-azure/pull/118) * [OCPBUGS-33092](https://issues.redhat.com/browse/OCPBUGS-33092): Bump otelgrpc [#117](https://github.com/openshift/cloud-provider-azure/pull/117) * [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update acr-credential-provider.spec [#115](https://github.com/openshift/cloud-provider-azure/pull/115) * [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Adds acr-credential-provider spec file and build script [#114](https://github.com/openshift/cloud-provider-azure/pull/114) * [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/5beac87d7395d2f9c5d76a66669ad17e13d1ca07...0d799a261f70bbdf546d911f5f8b59e2c324bd16) ### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/0584f1f5bab24b147d94f7f990c2f74d4e7d41c1) * [OCPBUGS-29502](https://issues.redhat.com/browse/OCPBUGS-29502): Bump helm to v3.14.4 [#303](https://github.com/openshift/cluster-api-provider-azure/pull/303) * [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/84ef752bcb274d97ccf57c0b61b1c7a8800c7aee...0584f1f5bab24b147d94f7f990c2f74d4e7d41c1) ### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/dc463da48b275ba9a6fd7afc22a555f2b12c9ae4) * [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): Rebase v1.29.5 for OCP 4.15 [#65](https://github.com/openshift/azure-file-csi-driver/pull/65) * [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/364d90d4dd15bfbe15835b0427c8c7d8f1100fb9...dc463da48b275ba9a6fd7afc22a555f2b12c9ae4) ### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/367c4e45899033f7fb7494c0004b83157b6723aa) * [OCPBUGS-33038](https://issues.redhat.com/browse/OCPBUGS-33038): add token audience for Azure File [#103](https://github.com/openshift/azure-file-csi-driver-operator/pull/103) * [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/1c6294a4815b076ea3932c4bed4510043d738504...367c4e45899033f7fb7494c0004b83157b6723aa) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/2c8c33d88e4098aaa7f57082e084d8cd1b10f152) * [OCPBUGS-30215](https://issues.redhat.com/browse/OCPBUGS-30215): Remove startupScript vmextension lookup [#103](https://github.com/openshift/machine-api-provider-azure/pull/103) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/90771aba5adb0c3883b0927956875c94fa88e69e...2c8c33d88e4098aaa7f57082e084d8cd1b10f152) ### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/2333b7fae0592ae26d77cbac49ce23e7fbaa00b1) * [OCPBUGS-32895](https://issues.redhat.com/browse/OCPBUGS-32895): Upgrade go-jose module to 2.6.3 [#17](https://github.com/openshift/azure-workload-identity/pull/17) * [Full changelog](https://github.com/openshift/azure-workload-identity/compare/1fd2e4e8c0a56e5a5e9367f11b3dafbb79d31ea1...2333b7fae0592ae26d77cbac49ce23e7fbaa00b1) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/fecb878206af5aaa7527f7f3b4a33b3349ae54b8) * [OCPBUGS-35586](https://issues.redhat.com/browse/OCPBUGS-35586): [release-4.15] bump github.com/containers/image for CVE fix [#8621](https://github.com/openshift/installer/pull/8621) * [OCPBUGS-31387](https://issues.redhat.com/browse/OCPBUGS-31387): If host is offline or disconnected don't check ver [#8208](https://github.com/openshift/installer/pull/8208) * [OCPBUGS-35355](https://issues.redhat.com/browse/OCPBUGS-35355): baremetal: Don't always enable provisioning-interface.service [#8580](https://github.com/openshift/installer/pull/8580) * [OCPBUGS-35032](https://issues.redhat.com/browse/OCPBUGS-35032): [release-4.15] aws: terraform: add spot instance support for masters [#8540](https://github.com/openshift/installer/pull/8540) * [OCPBUGS-35059](https://issues.redhat.com/browse/OCPBUGS-35059): images: change libvirt-installer base [#8550](https://github.com/openshift/installer/pull/8550) * [OCPBUGS-33672](https://issues.redhat.com/browse/OCPBUGS-33672): add quota support to ca-west-1 [#8412](https://github.com/openshift/installer/pull/8412) * [OCPBUGS-33454](https://issues.redhat.com/browse/OCPBUGS-33454): go.mod: bump aws-sdk-go for ca-west-1 support [#8381](https://github.com/openshift/installer/pull/8381) * [OCPBUGS-33205](https://issues.redhat.com/browse/OCPBUGS-33205): Gcp bootstraping release 4.15 [#8339](https://github.com/openshift/installer/pull/8339) * [OCPBUGS-33542](https://issues.redhat.com/browse/OCPBUGS-33542): images: do not force terraform-providers to be statically linked [#8392](https://github.com/openshift/installer/pull/8392) * [OCPBUGS-29929](https://issues.redhat.com/browse/OCPBUGS-29929): GCP Destroy cleanup correct zones/records [#8062](https://github.com/openshift/installer/pull/8062) * [OCPBUGS-32383](https://issues.redhat.com/browse/OCPBUGS-32383): sdk/aws: add ssh security group rule for compute [#8282](https://github.com/openshift/installer/pull/8282) * [OCPBUGS-32690](https://issues.redhat.com/browse/OCPBUGS-32690): AWS: bump CCO for permission fix [#8302](https://github.com/openshift/installer/pull/8302) * [OCPBUGS-32264](https://issues.redhat.com/browse/OCPBUGS-32264): always save serial logs if they were gathered [#8274](https://github.com/openshift/installer/pull/8274) * [OCPBUGS-30944](https://issues.redhat.com/browse/OCPBUGS-30944): Don't run libvirt validations in agent installer [#8167](https://github.com/openshift/installer/pull/8167) * NO-ISSUE: test fix to support slightly different nmstate error messages [#8285](https://github.com/openshift/installer/pull/8285) * [OCPBUGS-32259](https://issues.redhat.com/browse/OCPBUGS-32259): escape '%' in proxy settings [#8272](https://github.com/openshift/installer/pull/8272) * [OCPBUGS-32355](https://issues.redhat.com/browse/OCPBUGS-32355): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8277](https://github.com/openshift/installer/pull/8277) * [OCPBUGS-31335](https://issues.redhat.com/browse/OCPBUGS-31335): openstack: Honour worker server group policy [#8202](https://github.com/openshift/installer/pull/8202) * : OCPBUGS-31590: GCP: Skip populating Private/Public Zones within DNS manifest [#8220](https://github.com/openshift/installer/pull/8220) * [OCPBUGS-30922](https://issues.redhat.com/browse/OCPBUGS-30922): coreos-installer iso kargs show broken on Agent ISO [#8163](https://github.com/openshift/installer/pull/8163) * [OCPBUGS-30822](https://issues.redhat.com/browse/OCPBUGS-30822): Validate control plane replicas [#8143](https://github.com/openshift/installer/pull/8143) * [OCPBUGS-31274](https://issues.redhat.com/browse/OCPBUGS-31274): IBMCloud: Restrict CIS and DNS Service lookup [#8197](https://github.com/openshift/installer/pull/8197) * [OCPBUGS-30605](https://issues.redhat.com/browse/OCPBUGS-30605): upi: aws: fix typo in worker templates [#8125](https://github.com/openshift/installer/pull/8125) * Bug OCPBUGS-31284: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8199](https://github.com/openshift/installer/pull/8199) * [OCPBUGS-31087](https://issues.redhat.com/browse/OCPBUGS-31087): Fix vsi image missing [#8186](https://github.com/openshift/installer/pull/8186) * [OCPBUGS-30098](https://issues.redhat.com/browse/OCPBUGS-30098): feat: add check for SNO bootstrap condition [#8089](https://github.com/openshift/installer/pull/8089) * [OCPBUGS-30601](https://issues.redhat.com/browse/OCPBUGS-30601): update RHCOS 4.15 bootimage metadata to 415.92.202402201450-0 [#8122](https://github.com/openshift/installer/pull/8122) * [OCPBUGS-30854](https://issues.redhat.com/browse/OCPBUGS-30854): Power VS: Fix wait_for_workspace [#8159](https://github.com/openshift/installer/pull/8159) * [OCPBUGS-29964](https://issues.redhat.com/browse/OCPBUGS-29964): fix Azure API SKU calls timing out [#8086](https://github.com/openshift/installer/pull/8086) * [OCPBUGS-30792](https://issues.redhat.com/browse/OCPBUGS-30792): Enable deploy by Service ID on PowerVS [#8138](https://github.com/openshift/installer/pull/8138) * [OCPBUGS-30577](https://issues.redhat.com/browse/OCPBUGS-30577): Authn with platform-services-go-sdk for PowerVS [#8118](https://github.com/openshift/installer/pull/8118) * [Full changelog](https://github.com/openshift/installer/compare/d0a415f1cca1fa2c164aff142afa1269b6fd9865...fecb878206af5aaa7527f7f3b4a33b3349ae54b8) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/73a72cc821224eb7ad0fad25d3bcc8272658238b) * [OCPBUGS-30876](https://issues.redhat.com/browse/OCPBUGS-30876): Bump golang-protobuf version [#214](https://github.com/openshift/cluster-api-provider-baremetal/pull/214) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/26641cde1dfee3edc8039fccafdf0e57f0c3bf8b...73a72cc821224eb7ad0fad25d3bcc8272658238b) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/226e1df22266320dc9dafb89820c024aa910e6ea) * [OCPBUGS-34682](https://issues.redhat.com/browse/OCPBUGS-34682): PreprovisioningImage should not be created on poweroff [#358](https://github.com/openshift/baremetal-operator/pull/358) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/c17023eb3546d24d0529cdb4b7db96fc9ce288a7...226e1df22266320dc9dafb89820c024aa910e6ea) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/3eeb109b8c8d2d6de7cfb65a52ad2f99f3d08a1c) * [OCPBUGS-35543](https://issues.redhat.com/browse/OCPBUGS-35543): Add support for OVN HostCidrs annotation [#319](https://github.com/openshift/baremetal-runtimecfg/pull/319) * [OCPBUGS-32024](https://issues.redhat.com/browse/OCPBUGS-32024): Decrease log level when detecting node IP [#304](https://github.com/openshift/baremetal-runtimecfg/pull/304) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/6f83b6f752ce27c6f997f2d0706b3a79b84aa763...3eeb109b8c8d2d6de7cfb65a52ad2f99f3d08a1c) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/44edfb50c55756395abc844fc4f7edb19dfefa50) * [OCPBUGS-35201](https://issues.redhat.com/browse/OCPBUGS-35201): Bump joelanford/ignore to bump go-git to 5.11.0 [#1798](https://github.com/openshift/oc/pull/1798) * [OCPBUGS-32840](https://issues.redhat.com/browse/OCPBUGS-32840): Bump go-jose indirect reference to 2.6.3 [#1749](https://github.com/openshift/oc/pull/1749) * [OCPBUGS-31879](https://issues.redhat.com/browse/OCPBUGS-31879): Add OIDC specific certificate authority bundle flag [#1730](https://github.com/openshift/oc/pull/1730) * [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Remove some of newapp unit tests relying on external deprecated images [#1726](https://github.com/openshift/oc/pull/1726) * [OCPBUGS-30286](https://issues.redhat.com/browse/OCPBUGS-30286): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1698](https://github.com/openshift/oc/pull/1698) * [Full changelog](https://github.com/openshift/oc/compare/d6175ebd387c07d8fd6354b476f6b1092f15ee1d...44edfb50c55756395abc844fc4f7edb19dfefa50) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/af5662f1dbe2af823b7528484cc888de2fcf72ea) * [OCPBUGS-32900](https://issues.redhat.com/browse/OCPBUGS-32900): Upgrade go-jose module to 2.6.3 [#696](https://github.com/openshift/cloud-credential-operator/pull/696) * [OCPBUGS-31924](https://issues.redhat.com/browse/OCPBUGS-31924): aws: remove non-existent permission [#691](https://github.com/openshift/cloud-credential-operator/pull/691) * [OCPBUGS-30412](https://issues.redhat.com/browse/OCPBUGS-30412): gcp actuator update check to consider custom roles [#686](https://github.com/openshift/cloud-credential-operator/pull/686) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/9adc8f69a48c3226e48406db453bada963b5fa32...af5662f1dbe2af823b7528484cc888de2fcf72ea) ### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/6864da0642026d6004df171539fa9fd5bcb6c2df) * [OCPBUGS-33780](https://issues.redhat.com/browse/OCPBUGS-33780): Avoid panic when looking up attachedOutboundRule.ID in azure [#145](https://github.com/openshift/cloud-network-config-controller/pull/145) * [OCPBUGS-31754](https://issues.redhat.com/browse/OCPBUGS-31754): Avoid nil pointer panic while assigning private IP on Azure [#137](https://github.com/openshift/cloud-network-config-controller/pull/137) * [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/81ab2a17f2886bccd90dddf3deb213ed368c5be2...6864da0642026d6004df171539fa9fd5bcb6c2df) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/7aaa40eb28afdae8c5994b672b33cd4be31cc7d1) * [OCPBUGS-34795](https://issues.redhat.com/browse/OCPBUGS-34795): set required-scc for openshift workloads [#675](https://github.com/openshift/cluster-authentication-operator/pull/675) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/52a7d25ade22ddcf791bf6488504e3f7ef3ae770...7aaa40eb28afdae8c5994b672b33cd4be31cc7d1) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/05ff8c92b0723b7c5dfde3b0899fd73e5fce985e) * [OCPBUGS-31464](https://issues.redhat.com/browse/OCPBUGS-31464): add check for taint.value == nil [#293](https://github.com/openshift/kubernetes-autoscaler/pull/293) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/b4a9dc6dd40c6c9e458e69bbfd2c667e9cb23e18...05ff8c92b0723b7c5dfde3b0899fd73e5fce985e) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/1ba1af3d6df9a0805baa126ee0abb98ee47bb2e4) * [OCPBUGS-31947](https://issues.redhat.com/browse/OCPBUGS-31947): Update x/net to v0.24.0 [#319](https://github.com/openshift/cluster-autoscaler-operator/pull/319) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/d90c9299f6699cb26c0598af26cc8f791f8c4f28...1ba1af3d6df9a0805baa126ee0abb98ee47bb2e4) ### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/2053e13cb0fda9188e9b685db83c1e1f492e6efa) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#206](https://github.com/openshift/cluster-api/pull/206) * [OCPBUGS-33200](https://issues.redhat.com/browse/OCPBUGS-33200): Bump protobuf to v1.33.0 [#204](https://github.com/openshift/cluster-api/pull/204) * [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#201](https://github.com/openshift/cluster-api/pull/201) * [Full changelog](https://github.com/openshift/cluster-api/compare/c3b9ac8a39fd5bbf3d2e910fa17b38c86a58ac3a...2053e13cb0fda9188e9b685db83c1e1f492e6efa) ### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/0e5dbd062fd689a198943b9f63983552ae4fcba2) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests-gen: also add CustomNoUpgrade annotation value [#166](https://github.com/openshift/cluster-capi-operator/pull/166) * [OCPBUGS-30118](https://issues.redhat.com/browse/OCPBUGS-30118): create openshift-cluster-api namespace in CustomNoUpgrade [#167](https://github.com/openshift/cluster-capi-operator/pull/167) * [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/c8c94baccbe1d87f08d2d2349749ca31296b85ba...0e5dbd062fd689a198943b9f63983552ae4fcba2) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/f92ff8fe0ea217ec314abe3506a2bc396760cdab) * [OCPBUGS-33547](https://issues.redhat.com/browse/OCPBUGS-33547): update azure and ash tolerations on node manager [#343](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/343) * Bug OCPBUGS-32246: Allow to patch events in OpenStack RBAC [#339](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/339) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/a125bc59fe576ad165c800badd90a93aba99c154...f92ff8fe0ea217ec314abe3506a2bc396760cdab) ### [cluster-config-api](https://github.com/openshift/api/tree/62c02ae51e47c0c968d204cdb6ea40e45e159ec0) * [OCPBUGS-35214](https://issues.redhat.com/browse/OCPBUGS-35214): [Release 4-15] Add transit switch config to 4.15 [#1872](https://github.com/openshift/api/pull/1872) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Add UnservableInFutureVersions route status condition type [#1751](https://github.com/openshift/api/pull/1751) * [Full changelog](https://github.com/openshift/api/compare/4511c790cc60bf2a0393c34739cf9e71d1648b39...62c02ae51e47c0c968d204cdb6ea40e45e159ec0) ### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/ceadbc115582047a3836a62e488f9692e336c71b) * [OCPBUGS-26542](https://issues.redhat.com/browse/OCPBUGS-26542): remove duplicate manifests in image [#395](https://github.com/openshift/cluster-config-operator/pull/395) * [Full changelog](https://github.com/openshift/cluster-config-operator/compare/cc1fb201a307c049036c8307d950e5cde9e565ca...ceadbc115582047a3836a62e488f9692e336c71b) ### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/603c1bcc1574dc9119ca03ef04c91a8c350877d2) * [OCPBUGS-34971](https://issues.redhat.com/browse/OCPBUGS-34971): Add unreadyNodeGracePeriod for allowing brief node hiccups [#299](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/299) * [OCPBUGS-35496](https://issues.redhat.com/browse/OCPBUGS-35496): Wait for ControlPlaneMachineSet to be created when waiting for it to be updated [#308](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/308) * [OCPBUGS-35255](https://issues.redhat.com/browse/OCPBUGS-35255): Improved debugging of API listing errors [#301](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/301) * [Release 4.15] OCPBUGS-32414: Fix ExportFailureDomain to handle empty platform spec [#290](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/290) * [Release 4.15] OCPBUGS-32357: Modified webhook to allow templates by name instead of just by path. [#289](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/289) * [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/673e7da36cad22402065e2952b4e06aff0cb9c99...603c1bcc1574dc9119ca03ef04c91a8c350877d2) ### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/87d7080a91e9247c9fde6c3e2d9e222c23df541e) * [OCPBUGS-31599](https://issues.redhat.com/browse/OCPBUGS-31599): create suitable role and roleBinding for csi-snapshot-webhook [#203](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/203) * [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/1afe553a46159bd5b65061c98e15138bf48327cc...87d7080a91e9247c9fde6c3e2d9e222c23df541e) ### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/49290d7db2194df73dfaeb1e719580dabf166690) * [OCPBUGS-32093](https://issues.redhat.com/browse/OCPBUGS-32093): Add RBAC related to featuregates to fix hypershift upgrade [#407](https://github.com/openshift/cluster-dns-operator/pull/407) * [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/9eb983497cd90c4115d7dc476e4bcf0dfb5ee002...49290d7db2194df73dfaeb1e719580dabf166690) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b72a596d1f588da8eca821f28f286dfd609691d1) * [OCPBUGS-33564](https://issues.redhat.com/browse/OCPBUGS-33564): return errors in wait-for-ceo [#1261](https://github.com/openshift/cluster-etcd-operator/pull/1261) * [OCPBUGS-32952](https://issues.redhat.com/browse/OCPBUGS-32952): remove etcd-health-probe log [#1257](https://github.com/openshift/cluster-etcd-operator/pull/1257) * [OCPBUGS-31942](https://issues.redhat.com/browse/OCPBUGS-31942): update golang x net [#1253](https://github.com/openshift/cluster-etcd-operator/pull/1253) * [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#1220](https://github.com/openshift/cluster-etcd-operator/pull/1220) * [OCPBUGS-30915](https://issues.redhat.com/browse/OCPBUGS-30915): CEO aliveness check should only detect deadlocks [#1225](https://github.com/openshift/cluster-etcd-operator/pull/1225) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9d596e149a662ff77d235b3c7e4b69f34638c2ed...b72a596d1f588da8eca821f28f286dfd609691d1) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/f577b35192699d228f334dc950faa8fb221ffe39) * [OCPBUGS-34571](https://issues.redhat.com/browse/OCPBUGS-34571): azure-path-fix: get client secret from k8s secret [#1049](https://github.com/openshift/cluster-image-registry-operator/pull/1049) * [OCPBUGS-34539](https://issues.redhat.com/browse/OCPBUGS-34539): pkg/storage/s3: use force path style in favour of virtual hosted style config [#1048](https://github.com/openshift/cluster-image-registry-operator/pull/1048) * [OCPBUGS-33208](https://issues.redhat.com/browse/OCPBUGS-33208): azurepathfix: check if platform status is nil before accessing it [#1031](https://github.com/openshift/cluster-image-registry-operator/pull/1031) * [OCPBUGS-32396](https://issues.redhat.com/browse/OCPBUGS-32396): azure-path-fix: support auth via account key (without clientID) [#1022](https://github.com/openshift/cluster-image-registry-operator/pull/1022) * [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): bump aws-sdk-go from v1.44 to v1.50 [#1014](https://github.com/openshift/cluster-image-registry-operator/pull/1014) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/f122f0b9a706abff7610f732cba4dd6eca9771f6...f577b35192699d228f334dc950faa8fb221ffe39) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a0ac804cae89b91763ec8d0e16ed918c49eb3411) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Prevent upgrades for SHA1 default cert and SHA1 route certs [#1014](https://github.com/openshift/cluster-ingress-operator/pull/1014) * [OCPBUGS-35028](https://issues.redhat.com/browse/OCPBUGS-35028): internalServiceChanged: Fix target port logic [#1081](https://github.com/openshift/cluster-ingress-operator/pull/1081) * [OCPBUGS-34887](https://issues.redhat.com/browse/OCPBUGS-34887): TestHostNetworkPortBinding: Delete t.Parallel() [#1075](https://github.com/openshift/cluster-ingress-operator/pull/1075) * [OCPBUGS-34252](https://issues.redhat.com/browse/OCPBUGS-34252): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1058](https://github.com/openshift/cluster-ingress-operator/pull/1058) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/0106cb99b340a2f266a88700b4250f11457ffb05...a0ac804cae89b91763ec8d0e16ed918c49eb3411) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/eae692607f7ef1cfc6ef95bcd57c67f04d2c165c) * [OCPBUGS-29361](https://issues.redhat.com/browse/OCPBUGS-29361): operator: stop removing kube-apiserver-slos asset [#1643](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1643) * [OCPBUGS-34492](https://issues.redhat.com/browse/OCPBUGS-34492): Create one-shot migrations for the flowcontrol group. [#1692](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1692) * [OCPBUGS-33697](https://issues.redhat.com/browse/OCPBUGS-33697): add a controller that reconciles SCCs' volumes [#1679](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1679) * [OCPBUGS-33277](https://issues.redhat.com/browse/OCPBUGS-33277): Fix incorrect name for hostmount-anyuid SCC ClusterRole [#1672](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1672) * [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): Use RotatedSigningCASecret in update only mode [#1662](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1662) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9fe0ab100bc6241030bf6ad1fc3f554ad0b0faf1...eae692607f7ef1cfc6ef95bcd57c67f04d2c165c) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f) * [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode [#801](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/801) * [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#797](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/797) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/642fb08461913d9352b781693311727da42ffc0a...ee8cf52558df0862f9927dbc7275fbe6cc1a1e5f) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/f054dfaf189b43b262c11ef7f97038c79592c796) * [OCPBUGS-31865](https://issues.redhat.com/browse/OCPBUGS-31865): bump(library-go)=release-4.15 [#537](https://github.com/openshift/cluster-kube-scheduler-operator/pull/537) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/e1a1e3a845fd27d2dc8cbd7eb40975505ff294ab...f054dfaf189b43b262c11ef7f97038c79592c796) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/631e54532c4d40c0d85d8d025dfe1d16028201d9) * [OCPBUGS-33512](https://issues.redhat.com/browse/OCPBUGS-33512): fix Thanos ruler alert generator url [#2343](https://github.com/openshift/cluster-monitoring-operator/pull/2343) * [OCPBUGS-32055](https://issues.redhat.com/browse/OCPBUGS-32055): backport ols metric allowlist to 4.15 [#2313](https://github.com/openshift/cluster-monitoring-operator/pull/2313) * [OCPBUGS-28769](https://issues.redhat.com/browse/OCPBUGS-28769): fix generation of telemeter token hash [#2303](https://github.com/openshift/cluster-monitoring-operator/pull/2303) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a13d634285e9142a75b82f84c4ce62d2ac7e3ed1...631e54532c4d40c0d85d8d025dfe1d16028201d9) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/2d6a049ae8dae379e7a1583695f165f3bafac810) * [OCPBUGS-29739](https://issues.redhat.com/browse/OCPBUGS-29739): Run dhcp-daemon pods as system-node-critical priority [#2283](https://github.com/openshift/cluster-network-operator/pull/2283) * [OCPBUGS-34596](https://issues.redhat.com/browse/OCPBUGS-34596): Add ipsec state metric [#2389](https://github.com/openshift/cluster-network-operator/pull/2389) * [OCPBUGS-32515](https://issues.redhat.com/browse/OCPBUGS-32515): Fix wait logic for IPsec certificate signing request [#2348](https://github.com/openshift/cluster-network-operator/pull/2348) * [OCPBUGS-29092](https://issues.redhat.com/browse/OCPBUGS-29092): Add probes to node-network-identity [#2253](https://github.com/openshift/cluster-network-operator/pull/2253) * [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): Fully disable network-node-identity on ROKS [#2314](https://github.com/openshift/cluster-network-operator/pull/2314) * [OCPBUGS-30927](https://issues.redhat.com/browse/OCPBUGS-30927): ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures [#2310](https://github.com/openshift/cluster-network-operator/pull/2310) * [OCPBUGS-30615](https://issues.redhat.com/browse/OCPBUGS-30615): Fix managed cluster detection on ARO [#2304](https://github.com/openshift/cluster-network-operator/pull/2304) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/4ad3c08b7b9f35224bdad111fc7b0205e0732f93...2d6a049ae8dae379e7a1583695f165f3bafac810) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d736c81df4ec794dfddd471f0ba141d26c01c63f) * [OCPBUGS-33929](https://issues.redhat.com/browse/OCPBUGS-33929): Negative net interface name does not reduce queues (#1066) [#1066](https://github.com/openshift/cluster-node-tuning-operator/pull/1066) * Add a '.snyk' to silence static code analysis warnings (#1001) [#1001](https://github.com/openshift/cluster-node-tuning-operator/pull/1001) * fix extra-reboot on upgrade with paused mcp worker (#1049) [#1049](https://github.com/openshift/cluster-node-tuning-operator/pull/1049) * fix rendering extra ctrcfgs (#975) [#975](https://github.com/openshift/cluster-node-tuning-operator/pull/975) * [OCPBUGS-31694](https://issues.redhat.com/browse/OCPBUGS-31694): E2E: Workload hints test cases fixes (#1012) (#1043) [#1012](https://github.com/openshift/cluster-node-tuning-operator/pull/1012) * Reduce number of reboots in offline tests (#1014) [#1014](https://github.com/openshift/cluster-node-tuning-operator/pull/1014) * Systemd processes not being moved to cpuset/systemd.slice fix (#1016) [#1016](https://github.com/openshift/cluster-node-tuning-operator/pull/1016) * Scheduler plugin: ignore IRQs (#983) [#983](https://github.com/openshift/cluster-node-tuning-operator/pull/983) * e2e: when crun is enabled by default skip checking runc config (#1013) [#1013](https://github.com/openshift/cluster-node-tuning-operator/pull/1013) * [OCPBUGS-30507](https://issues.redhat.com/browse/OCPBUGS-30507): Add performance real time tuned template (#984) [#984](https://github.com/openshift/cluster-node-tuning-operator/pull/984) * Report duplicate priority only for multiple matching profiles (#965) [#965](https://github.com/openshift/cluster-node-tuning-operator/pull/965) * hack: fix backport of render-sync.sh (#996) [#996](https://github.com/openshift/cluster-node-tuning-operator/pull/996) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/fc57075824faa9ccb64f7f4d2cd381c204c48490...d736c81df4ec794dfddd471f0ba141d26c01c63f) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/9c4fb818258a579901343fec3c2c47ec20ad2555) * [OCPBUGS-31708](https://issues.redhat.com/browse/OCPBUGS-31708): Update opentelemetry dependency 415 [#342](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/342) * [OCPBUGS-25985](https://issues.redhat.com/browse/OCPBUGS-25985): Disable deployer-controller when deploymentconfig is disabled [#322](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/322) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/f189a00839491e166cd0220afe11d35cdb844754...9c4fb818258a579901343fec3c2c47ec20ad2555) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bf845b5b1b077c3a73de00b77da2c499e13371e4) * [OCPBUGS-22034](https://issues.redhat.com/browse/OCPBUGS-22034): bump K8s version to 29.2 [#538](https://github.com/openshift/cluster-samples-operator/pull/538) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/d546ec2c5146e3a701840ab1a84cdca5b3682dc2...bf845b5b1b077c3a73de00b77da2c499e13371e4) ### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/ae53b26cf3ec3eeb37f6aefe2873da628d086716) * [OCPBUGS-33466](https://issues.redhat.com/browse/OCPBUGS-33466): Fix problem-detector proxy setting [#471](https://github.com/openshift/cluster-storage-operator/pull/471) * [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/1a2443a7fe8a00597f8c19382fb8ce617943029c...ae53b26cf3ec3eeb37f6aefe2873da628d086716) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/45eb61a738454ec54d67a29c47577e77d2acdd07) * [OCPBUGS-33984](https://issues.redhat.com/browse/OCPBUGS-33984): Add admin-gate for OCP 4.16 [#1049](https://github.com/openshift/cluster-version-operator/pull/1049) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/705f11a24965df33c4c3ae69147c0215e2109208...45eb61a738454ec54d67a29c47577e77d2acdd07) ### [console](https://github.com/openshift/console/tree/62e075dadf61642bda14d1c2b51de94a50be854f) * [OCPBUGS-34350](https://issues.redhat.com/browse/OCPBUGS-34350): Create Serverless form does not create BuildConfig [#13891](https://github.com/openshift/console/pull/13891) * [OCPBUGS-32029](https://issues.redhat.com/browse/OCPBUGS-32029): Use UserInfo username field when logging out as kubeadmin [#13748](https://github.com/openshift/console/pull/13748) * [OCPBUGS-30208](https://issues.redhat.com/browse/OCPBUGS-30208): Fix asynccache bugs [#13807](https://github.com/openshift/console/pull/13807) * [OCPBUGS-33838](https://issues.redhat.com/browse/OCPBUGS-33838): TaskRuns should not be fetched for Failed PLR's [#13863](https://github.com/openshift/console/pull/13863) * [OCPBUGS-34703](https://issues.redhat.com/browse/OCPBUGS-34703): fix bug where textarea is not resizable [#13913](https://github.com/openshift/console/pull/13913) * Revert "OCPBUGS-34550: Dont render ARN mode role field and warning for HyperShift clusters" [#13905](https://github.com/openshift/console/pull/13905) * [OCPBUGS-33263](https://issues.redhat.com/browse/OCPBUGS-33263): Pipeline list page is crashed when navigating from Search page [#13819](https://github.com/openshift/console/pull/13819) * [OCPBUGS-33166](https://issues.redhat.com/browse/OCPBUGS-33166): Fix NAD always on default namespace [#13865](https://github.com/openshift/console/pull/13865) * [OCPBUGS-31863](https://issues.redhat.com/browse/OCPBUGS-31863): make sure folder is encapsulated with quotas [#13737](https://github.com/openshift/console/pull/13737) * [OCPBUGS-33506](https://issues.redhat.com/browse/OCPBUGS-33506): Fix Pipeline details page with when expression using CEL expression [#13835](https://github.com/openshift/console/pull/13835) * [OCPBUGS-32505](https://issues.redhat.com/browse/OCPBUGS-32505): Add visual connector between VMs and non VMs workloads [#13782](https://github.com/openshift/console/pull/13782) * [OCPBUGS-33548](https://issues.redhat.com/browse/OCPBUGS-33548): restrict Masthead logo to max-height [#13839](https://github.com/openshift/console/pull/13839) * [OCPBUGS-32497](https://issues.redhat.com/browse/OCPBUGS-32497): Improve Create serverless function error message [#13778](https://github.com/openshift/console/pull/13778) * [OCPBUGS-33191](https://issues.redhat.com/browse/OCPBUGS-33191): Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable [#13810](https://github.com/openshift/console/pull/13810) * [OCPBUGS-33058](https://issues.redhat.com/browse/OCPBUGS-33058): fix issues with Edit Route form [#13800](https://github.com/openshift/console/pull/13800) * [OCPBUGS-32187](https://issues.redhat.com/browse/OCPBUGS-32187): Add flag to hide Output tab contributed by pipelines-plugin [#13756](https://github.com/openshift/console/pull/13756) * [OCPBUGS-32716](https://issues.redhat.com/browse/OCPBUGS-32716): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13788](https://github.com/openshift/console/pull/13788) * [OCPBUGS-32506](https://issues.redhat.com/browse/OCPBUGS-32506): setting correct image trigger annotation [#13783](https://github.com/openshift/console/pull/13783) * [OCPBUGS-32933](https://issues.redhat.com/browse/OCPBUGS-32933): change OperatorHub filter FIPS Mode to Designed for FIPS [#13796](https://github.com/openshift/console/pull/13796) * [OCPBUGS-31799](https://issues.redhat.com/browse/OCPBUGS-31799): Improve PipelineRun list view performance [#13731](https://github.com/openshift/console/pull/13731) * [OCPBUGS-32796](https://issues.redhat.com/browse/OCPBUGS-32796): auth: fix OIDC logging out [#13793](https://github.com/openshift/console/pull/13793) * [OCPBUGS-31445](https://issues.redhat.com/browse/OCPBUGS-31445): Upgrade Pipeline trigger resources to v1beta1 [#13704](https://github.com/openshift/console/pull/13704) * [OCPBUGS-31045](https://issues.redhat.com/browse/OCPBUGS-31045): fix for execute inline markdown syntax issue [#13681](https://github.com/openshift/console/pull/13681) * [OCPBUGS-32518](https://issues.redhat.com/browse/OCPBUGS-32518): Add warning about service binding operator will not be supported from 4.15 [#13784](https://github.com/openshift/console/pull/13784) * [OCPBUGS-32391](https://issues.redhat.com/browse/OCPBUGS-32391): Routes created by devfiles do not always use HTTPS [#13771](https://github.com/openshift/console/pull/13771) * [OCPBUGS-32340](https://issues.redhat.com/browse/OCPBUGS-32340): Increased max nodes limit to 200 in topology page [#13767](https://github.com/openshift/console/pull/13767) * [OCPBUGS-32399](https://issues.redhat.com/browse/OCPBUGS-32399): Update devfile library to v2.2.2 [#13762](https://github.com/openshift/console/pull/13762) * [OCPBUGS-32156](https://issues.redhat.com/browse/OCPBUGS-32156): TaskRun status is not displayed near the name [#13752](https://github.com/openshift/console/pull/13752) * [OCPBUGS-31806](https://issues.redhat.com/browse/OCPBUGS-31806): Use bearer-token for local dev with auth [#13732](https://github.com/openshift/console/pull/13732) * [OCPBUGS-31839](https://issues.redhat.com/browse/OCPBUGS-31839): fix bug where paused MCPs were incorrectly unpausing w… [#13735](https://github.com/openshift/console/pull/13735) * [OCPBUGS-31105](https://issues.redhat.com/browse/OCPBUGS-31105): Update to pf5.2 to fix quick starts [#13686](https://github.com/openshift/console/pull/13686) * [OCPBUGS-31476](https://issues.redhat.com/browse/OCPBUGS-31476): Requesting for country codes in localization of openshift - webconsole [#13707](https://github.com/openshift/console/pull/13707) * [OCPBUGS-31046](https://issues.redhat.com/browse/OCPBUGS-31046): Application creation fail when manually entering input scaling value in local setup [#13682](https://github.com/openshift/console/pull/13682) * [OCPBUGS-30916](https://issues.redhat.com/browse/OCPBUGS-30916), [OCPBUGS-30917](https://issues.redhat.com/browse/OCPBUGS-30917): PipelineRuns in Console show wrong status or load indefinitely [#13672](https://github.com/openshift/console/pull/13672) * [OCPBUGS-30869](https://issues.redhat.com/browse/OCPBUGS-30869): TaskRun with same name in different project don't show 2 entries when listing in all namespace [#13668](https://github.com/openshift/console/pull/13668) * [OCPBUGS-31107](https://issues.redhat.com/browse/OCPBUGS-31107): Upload Jar form's Clear button is not functioning [#13688](https://github.com/openshift/console/pull/13688) * [OCPBUGS-30759](https://issues.redhat.com/browse/OCPBUGS-30759): Fix bugs in Console dynamic plugin SDK webpack code [#13678](https://github.com/openshift/console/pull/13678) * [OCPBUGS-30871](https://issues.redhat.com/browse/OCPBUGS-30871): fix Configure link in AlertmanagerReceiversNotConfigur… [#13669](https://github.com/openshift/console/pull/13669) * [OCPBUGS-29963](https://issues.redhat.com/browse/OCPBUGS-29963): i18n upload/download routine task - chore(i18n): update translations [#13670](https://github.com/openshift/console/pull/13670) * [OCPBUGS-30801](https://issues.redhat.com/browse/OCPBUGS-30801): Switch to service to get the PLR and TR logs from the Tekton results summary API [#13663](https://github.com/openshift/console/pull/13663) * [OCPBUGS-30275](https://issues.redhat.com/browse/OCPBUGS-30275): adjusting documentation links for 4.15 [#13648](https://github.com/openshift/console/pull/13648) * [OCPBUGS-30870](https://issues.redhat.com/browse/OCPBUGS-30870): chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13641](https://github.com/openshift/console/pull/13641) * [OCPBUGS-25831](https://issues.redhat.com/browse/OCPBUGS-25831): Date&Time values are not showing as per browser default language [#13467](https://github.com/openshift/console/pull/13467) * [OCPBUGS-29080](https://issues.redhat.com/browse/OCPBUGS-29080): make getGroupVersionKindForResource null safe [#13582](https://github.com/openshift/console/pull/13582) * [Full changelog](https://github.com/openshift/console/compare/5bc3950025885a232761c18ac8cbce01200b7a09...62e075dadf61642bda14d1c2b51de94a50be854f) ### [console-operator](https://github.com/openshift/console-operator/tree/94e41901dc8ee1578bf5f3dd6c74280bcae6c987) * [OCPBUGS-31520](https://issues.redhat.com/browse/OCPBUGS-31520): oidc: synchronize the CM with a CA to trust the issuer, if configured [#881](https://github.com/openshift/console-operator/pull/881) * [OCPBUGS-33720](https://issues.redhat.com/browse/OCPBUGS-33720): Add missing return statement to fix crash in healthcheck controller [#903](https://github.com/openshift/console-operator/pull/903) * [OCPBUGS-31499](https://issues.redhat.com/browse/OCPBUGS-31499): Update RHDH QuickStarts and add CR examples [#880](https://github.com/openshift/console-operator/pull/880) * [OCPBUGS-31619](https://issues.redhat.com/browse/OCPBUGS-31619): use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes [#882](https://github.com/openshift/console-operator/pull/882) * [OCPBUGS-29332](https://issues.redhat.com/browse/OCPBUGS-29332): Remove Janus IDP and update RHDH quickstarts [#863](https://github.com/openshift/console-operator/pull/863) * [Full changelog](https://github.com/openshift/console-operator/compare/e9ec54b60ce943bace46ef7493452e2be3c39983...94e41901dc8ee1578bf5f3dd6c74280bcae6c987) ### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/401d35070f2d1d4db3f08ffe183b8262754b7287) * [OCPBUGS-30045](https://issues.redhat.com/browse/OCPBUGS-30045): [4.15] cherry-pick containernetworking/plugins#997 [#155](https://github.com/openshift/containernetworking-plugins/pull/155) * [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/c6cfbfe37adc5ecf540b1771c41bb38ad0a982d7...401d35070f2d1d4db3f08ffe183b8262754b7287) ### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/d85d23f2a68264f90ba4df99152f39701baabfff) * [OCPBUGS-32246](https://issues.redhat.com/browse/OCPBUGS-32246): Remove enforcement of IPv6 LB as internal [#277](https://github.com/openshift/cloud-provider-openstack/pull/277) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/1bec5942cd0651a3c2f7114368591f334952ceda...d85d23f2a68264f90ba4df99152f39701baabfff) ### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/4f2955c7c90cd150f9dfae782148d0fa8eba7342) * [OCPBUGS-31599](https://issues.redhat.com/browse/OCPBUGS-31599): add cmdline args to enable group snapshot webhooks [#147](https://github.com/openshift/csi-external-snapshotter/pull/147) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13...4f2955c7c90cd150f9dfae782148d0fa8eba7342) ### [docker-builder](https://github.com/openshift/builder/tree/b98fb65efa75a8fbd8eefe70dbbf9decd65395a5) * [OCPBUGS-32845](https://issues.redhat.com/browse/OCPBUGS-32845): bump go-jose to fix CVE-2024-28180 [#396](https://github.com/openshift/builder/pull/396) * [BUILD-854](https://issues.redhat.com/browse/BUILD-854): Add adambkaplan as approver [#381](https://github.com/openshift/builder/pull/381) * [Full changelog](https://github.com/openshift/builder/compare/630692db2a3a39369d3c772a2543d7f2ea198455...b98fb65efa75a8fbd8eefe70dbbf9decd65395a5) ### [docker-registry](https://github.com/openshift/image-registry/tree/0a844cbcffc5e03e10842f723f97f5c98b797eb1) * [OCPBUGS-31641](https://issues.redhat.com/browse/OCPBUGS-31641): vendor: bump aws-sdk-go to support ca-west-1 [#396](https://github.com/openshift/image-registry/pull/396) * [Full changelog](https://github.com/openshift/image-registry/compare/340eda0bfc9a86254d7f0f37cd6a5320779ecf81...0a844cbcffc5e03e10842f723f97f5c98b797eb1) ### [etcd](https://github.com/openshift/etcd/tree/a7005ef1eae85eec6c59411860538169cea182fd) * [OCPBUGS-32768](https://issues.redhat.com/browse/OCPBUGS-32768): Revert "OCPBUGS-31644: Rebase etcd 3.5.13 openshift 4.15" [#264](https://github.com/openshift/etcd/pull/264) * [OCPBUGS-31644](https://issues.redhat.com/browse/OCPBUGS-31644): Rebase etcd 3.5.13 openshift 4.15 [#260](https://github.com/openshift/etcd/pull/260) * [OCPBUGS-28731](https://issues.redhat.com/browse/OCPBUGS-28731): Rebase etcd 3.5.12 openshift 4.15 [#243](https://github.com/openshift/etcd/pull/243) * [Full changelog](https://github.com/openshift/etcd/compare/5acb4f3078adbea40d050365ac5294229e574c67...a7005ef1eae85eec6c59411860538169cea182fd) ### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/fc50272ac32348a96455688c470bf256b1042825) * [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Update gcr-credential-provider.spec [#60](https://github.com/openshift/cloud-provider-gcp/pull/60) * [OCPBUGS-30970](https://issues.redhat.com/browse/OCPBUGS-30970): Adds auth-provider-gcp .spec file and build script [#59](https://github.com/openshift/cloud-provider-gcp/pull/59) * [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/118209dfa2ee7ce8acea2872db4544068aa9e1a1...fc50272ac32348a96455688c470bf256b1042825) ### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/bad54034ed075b24ee8962661e78cfbd84a7dd0a) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#225](https://github.com/openshift/cluster-api-provider-gcp/pull/225) * [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#223](https://github.com/openshift/cluster-api-provider-gcp/pull/223) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/8a32c37ba168db37780064dc2798f9e6b230dd85...bad54034ed075b24ee8962661e78cfbd84a7dd0a) ### [haproxy-router](https://github.com/openshift/router/tree/dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Upgrade Validation plugin for SHA1 certs [#585](https://github.com/openshift/router/pull/585) * [OCPBUGS-32977](https://issues.redhat.com/browse/OCPBUGS-32977): Count active services before setting weight to 1 [#586](https://github.com/openshift/router/pull/586) * [OCPBUGS-32693](https://issues.redhat.com/browse/OCPBUGS-32693): Reject routes with MD5 certs [#584](https://github.com/openshift/router/pull/584) * [OCPBUGS-32435](https://issues.redhat.com/browse/OCPBUGS-32435): Introduce 'idle-close-on-response' option for frontends [#579](https://github.com/openshift/router/pull/579) * [OCPBUGS-31544](https://issues.redhat.com/browse/OCPBUGS-31544): Properly handle rewrite-target annotation [#569](https://github.com/openshift/router/pull/569) * [Full changelog](https://github.com/openshift/router/compare/b7001137f832d02d4ed68cba27fe3001ff523fa6...dc38fbd84dfbed3a897f2d36b469d0ccfd1ecda3) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/a2c84a5418d02fbb0230fa10ade3e3c3d093f891) * [OCPBUGS-33711](https://issues.redhat.com/browse/OCPBUGS-33711): Bump to Kubernetes v1.28.10 [#1969](https://github.com/openshift/kubernetes/pull/1969) * [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#1962](https://github.com/openshift/kubernetes/pull/1962) * [OCPBUGS-29613](https://issues.redhat.com/browse/OCPBUGS-29613): UPSTREAM: <carry>: bump structured-merge-diff [#1893](https://github.com/openshift/kubernetes/pull/1893) * [OCPBUGS-32299](https://issues.redhat.com/browse/OCPBUGS-32299): Bump to k8s 1.28.9 [#1946](https://github.com/openshift/kubernetes/pull/1946) * [OCPBUGS-29922](https://issues.redhat.com/browse/OCPBUGS-29922): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1897](https://github.com/openshift/kubernetes/pull/1897) * [OCPBUGS-31807](https://issues.redhat.com/browse/OCPBUGS-31807): UPSTREAM: <carry>: allow type mutation for specific secrets [#1939](https://github.com/openshift/kubernetes/pull/1939) * UPSTREAM: <carry>: OCPBUGS-31348: fix cpu manager cpuset check [#1915](https://github.com/openshift/kubernetes/pull/1915) * [OCPBUGS-31740](https://issues.redhat.com/browse/OCPBUGS-31740): 4.15: UPSTREAM: 124048: Use the right feature gate when updating uncertain volumes [#1935](https://github.com/openshift/kubernetes/pull/1935) * [OCPBUGS-31503](https://issues.redhat.com/browse/OCPBUGS-31503): Bump to 1.28.8 [#1926](https://github.com/openshift/kubernetes/pull/1926) * Address CVE [#11](https://github.com/openshift/kubernetes/pull/11) * [OCPBUGS-30963](https://issues.redhat.com/browse/OCPBUGS-30963): Set up CEL IP/CIDR library from 4.14 onwards [#1912](https://github.com/openshift/kubernetes/pull/1912) * [OCPBUGS-29661](https://issues.redhat.com/browse/OCPBUGS-29661): Bump to 1.28.7 [#1891](https://github.com/openshift/kubernetes/pull/1891) * [Full changelog](https://github.com/openshift/kubernetes/compare/6216ea1e51a2126f5b843a4ae7c1f414161cca8b...a2c84a5418d02fbb0230fa10ade3e3c3d093f891) ### [hypershift](https://github.com/openshift/hypershift/tree/9c62624659c54ec453ec7556f44601572e9060ae) * [OCPBUGS-32404](https://issues.redhat.com/browse/OCPBUGS-32404): Fix failure to create a second hostedcluster in the same namespace [#3907](https://github.com/openshift/hypershift/pull/3907) * NO-JIRA: chore(deps): update konflux references to ff44cf3 (release-4.15) [#4246](https://github.com/openshift/hypershift/pull/4246) * NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform [#4231](https://github.com/openshift/hypershift/pull/4231) * chore(deps): update konflux references to 2be7c9c (release-4.15) [#4224](https://github.com/openshift/hypershift/pull/4224) * [OCPBUGS-34580](https://issues.redhat.com/browse/OCPBUGS-34580): Add TrustedBundles to OAS container [#4211](https://github.com/openshift/hypershift/pull/4211) * NO-JIRA: hack: make the e2e script generic [#4199](https://github.com/openshift/hypershift/pull/4199) * [OCPBUGS-33627](https://issues.redhat.com/browse/OCPBUGS-33627): Restrict image registry overrides to control plane components [#4131](https://github.com/openshift/hypershift/pull/4131) * [OCPBUGS-34156](https://issues.redhat.com/browse/OCPBUGS-34156): fix router on 4.14 y-stream upgrade [#4077](https://github.com/openshift/hypershift/pull/4077) * [OCPBUGS-35002](https://issues.redhat.com/browse/OCPBUGS-35002): [release-4.15] HOSTEDCP-1122: Backport etcd defrag controller [#4162](https://github.com/openshift/hypershift/pull/4162) * NO-JIRA: Update Konflux references to 1025001 (release-4.15) [#4180](https://github.com/openshift/hypershift/pull/4180) * NO-JIRA: chore(deps): update konflux references (release-4.15) [#4167](https://github.com/openshift/hypershift/pull/4167) * [OCPBUGS-34997](https://issues.redhat.com/browse/OCPBUGS-34997): add AWS STS URL to OIDC provider audiences [#4157](https://github.com/openshift/hypershift/pull/4157) * [OCPBUGS-35074](https://issues.redhat.com/browse/OCPBUGS-35074): Fix disconnected metadata inspection for nodepool [#4175](https://github.com/openshift/hypershift/pull/4175) * [HOSTEDCP-1708](https://issues.redhat.com/browse/HOSTEDCP-1708): remove liveness and readiness probes that use the metrics [#4128](https://github.com/openshift/hypershift/pull/4128) * [OCPBUGS-34423](https://issues.redhat.com/browse/OCPBUGS-34423): Fixed audit-logs sigterm failing to terminate gracefully [#4089](https://github.com/openshift/hypershift/pull/4089) * [OCPBUGS-33526](https://issues.redhat.com/browse/OCPBUGS-33526): Disable DNS resolving for CNO [#4148](https://github.com/openshift/hypershift/pull/4148) * [OCPBUGS-34904](https://issues.redhat.com/browse/OCPBUGS-34904): remove weak cipher [#4156](https://github.com/openshift/hypershift/pull/4156) * [OCPBUGS-34510](https://issues.redhat.com/browse/OCPBUGS-34510): Reconcile KAS endpoints and endpoint slice [#4097](https://github.com/openshift/hypershift/pull/4097) * NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ [#4151](https://github.com/openshift/hypershift/pull/4151) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4120](https://github.com/openshift/hypershift/pull/4120) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#4072](https://github.com/openshift/hypershift/pull/4072) * [OCPBUGS-33510](https://issues.redhat.com/browse/OCPBUGS-33510): Run haproxy to connect to kas from data plane if noproxy settings contain kas [#4014](https://github.com/openshift/hypershift/pull/4014) * NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.15) [#4064](https://github.com/openshift/hypershift/pull/4064) * NO-JIRA: Remove CLI inspection of release image [#4056](https://github.com/openshift/hypershift/pull/4056) * [HOSTEDCP-1518](https://issues.redhat.com/browse/HOSTEDCP-1518): Preserve container resource requests and limits [#4032](https://github.com/openshift/hypershift/pull/4032) * NO-JIRA: Update RHTAP references (release-4.15) [#4041](https://github.com/openshift/hypershift/pull/4041) * [OCPBUGS-33118](https://issues.redhat.com/browse/OCPBUGS-33118): Recycler-pod image now points to the OCP Payload reference [#3963](https://github.com/openshift/hypershift/pull/3963) * [OCPBUGS-32220](https://issues.redhat.com/browse/OCPBUGS-32220): Fix disconnected metadata inspection [#3881](https://github.com/openshift/hypershift/pull/3881) * NO-JIRA: Update RHTAP references to 1f62eaf (release-4.15) [#4030](https://github.com/openshift/hypershift/pull/4030) * [OCPBUGS-33117](https://issues.redhat.com/browse/OCPBUGS-33117): Reconcile over ICSP/IDMS [#3962](https://github.com/openshift/hypershift/pull/3962) * NO-JIRA: Update RHTAP references to 2d39df1 (release-4.15) [#4022](https://github.com/openshift/hypershift/pull/4022) * [HOSTEDCP-1480](https://issues.redhat.com/browse/HOSTEDCP-1480): Update TLS cert hash creation with sha512 [#4017](https://github.com/openshift/hypershift/pull/4017) * [HOSTEDCP-1513](https://issues.redhat.com/browse/HOSTEDCP-1513): Support hypershift-operator scoping for hostedclusters [#3998](https://github.com/openshift/hypershift/pull/3998) * Revert "[release-4.15] OCPBUGS-32013: Set OPERATOR_IMAGE environment variable" [#3939](https://github.com/openshift/hypershift/pull/3939) * [OCPBUGS-33207](https://issues.redhat.com/browse/OCPBUGS-33207): Remove kube-scheduler readiness probe [#3955](https://github.com/openshift/hypershift/pull/3955) * NO-JIRA: chore(deps): update rhtap references to c6fdbf4 (release-4.15) [#3989](https://github.com/openshift/hypershift/pull/3989) * [OCPBUGS-25858](https://issues.redhat.com/browse/OCPBUGS-25858): Improve description for agent APIServerAddress CLI flag [#3977](https://github.com/openshift/hypershift/pull/3977) * [OCPBUGS-33224](https://issues.redhat.com/browse/OCPBUGS-33224): disable OCM pull secret controller when imageregistry config managementstate is Removed [#3976](https://github.com/openshift/hypershift/pull/3976) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3982](https://github.com/openshift/hypershift/pull/3982) * [OCPBUGS-31747](https://issues.redhat.com/browse/OCPBUGS-31747): update desired image even when HCP doesn't exist yet [#3839](https://github.com/openshift/hypershift/pull/3839) * NO-JIRA: chore(deps): update rhtap references to e9efe99 (release-4.15) [#3974](https://github.com/openshift/hypershift/pull/3974) * [OCPBUGS-32229](https://issues.redhat.com/browse/OCPBUGS-32229): disable autoscaler when no nodepool require it [#3884](https://github.com/openshift/hypershift/pull/3884) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3967](https://github.com/openshift/hypershift/pull/3967) * [HOSTEDCP-1552](https://issues.redhat.com/browse/HOSTEDCP-1552): Update RHTAP tekton files for 0.3 -> 0.4 migration [#3957](https://github.com/openshift/hypershift/pull/3957) * [OCPBUGS-31826](https://issues.redhat.com/browse/OCPBUGS-31826): use dnsPolicy: Default for konnectivity-agent in data plane [#3845](https://github.com/openshift/hypershift/pull/3845) * NO-JIRA: Update RHTAP references (release-4.15) [#3935](https://github.com/openshift/hypershift/pull/3935) * [OCPBUGS-32715](https://issues.redhat.com/browse/OCPBUGS-32715): Fix OLM intilization args [#3923](https://github.com/openshift/hypershift/pull/3923) * [HOSTEDCP-1519](https://issues.redhat.com/browse/HOSTEDCP-1519): [release-4.15] feat(api): Add ingress-controller-load-balancer-scope annotation [#3908](https://github.com/openshift/hypershift/pull/3908) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3921](https://github.com/openshift/hypershift/pull/3921) * [OCPBUGS-32164](https://issues.redhat.com/browse/OCPBUGS-32164): Fix ICSP and IDMS inclusion as registriesOverrides [#3870](https://github.com/openshift/hypershift/pull/3870) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3904](https://github.com/openshift/hypershift/pull/3904) * [OCPBUGS-30280](https://issues.redhat.com/browse/OCPBUGS-30280): Switch to use service endpoint for Konnectivity [#3692](https://github.com/openshift/hypershift/pull/3692) * [OCPBUGS-32191](https://issues.redhat.com/browse/OCPBUGS-32191): Kas disable audit cherry pick release 4.15 [#3875](https://github.com/openshift/hypershift/pull/3875) * [OCPBUGS-32114](https://issues.redhat.com/browse/OCPBUGS-32114): Add new permission required in CAPA [#3861](https://github.com/openshift/hypershift/pull/3861) * NO-JIRA: Update RHTAP references (release-4.15) [#3887](https://github.com/openshift/hypershift/pull/3887) * NO-JIRA: [release-4.15] [e2e test framework] Add a flag to add an annotation to HostedCluster [#3893](https://github.com/openshift/hypershift/pull/3893) * [HOSTEDCP-1524](https://issues.redhat.com/browse/HOSTEDCP-1524): [release-4.15] Support additional node selectors for request serving nodes [#3883](https://github.com/openshift/hypershift/pull/3883) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3873](https://github.com/openshift/hypershift/pull/3873) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3868](https://github.com/openshift/hypershift/pull/3868) * [OCPBUGS-32013](https://issues.redhat.com/browse/OCPBUGS-32013): Set OPERATOR_IMAGE environment variable [#3853](https://github.com/openshift/hypershift/pull/3853) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3857](https://github.com/openshift/hypershift/pull/3857) * NO-JIRA: Update RHTAP references (release-4.15) [#3835](https://github.com/openshift/hypershift/pull/3835) * [OCPBUGS-31766](https://issues.redhat.com/browse/OCPBUGS-31766): include hostnetwork SCC CPO role for 4.13 and earlier [#3840](https://github.com/openshift/hypershift/pull/3840) * [HOSTEDCP-1438](https://issues.redhat.com/browse/HOSTEDCP-1438): [release-4.15] Preserve container resources for more hosted control plane components [#3828](https://github.com/openshift/hypershift/pull/3828) * [OCPBUGS-31324](https://issues.redhat.com/browse/OCPBUGS-31324): Add missing PodSecurityViolation alert [#3798](https://github.com/openshift/hypershift/pull/3798) * NO-JIRA: Increase stability in autoscaled environments [#3777](https://github.com/openshift/hypershift/pull/3777) * [OCPBUGS-31471](https://issues.redhat.com/browse/OCPBUGS-31471): Reduce log file size for hypershift apiservers [#3816](https://github.com/openshift/hypershift/pull/3816) * [OCPBUGS-31604](https://issues.redhat.com/browse/OCPBUGS-31604): disable http2 for ignition server and proxy [#3825](https://github.com/openshift/hypershift/pull/3825) * [OCPBUGS-31426](https://issues.redhat.com/browse/OCPBUGS-31426): copy issuerCertificateAuthority configmap into HC openshift-config [#3808](https://github.com/openshift/hypershift/pull/3808) * [OCPBUGS-31265](https://issues.redhat.com/browse/OCPBUGS-31265): inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs [#3802](https://github.com/openshift/hypershift/pull/3802) * NO-JIRA: Update RHTAP references (release-4.15) [#3812](https://github.com/openshift/hypershift/pull/3812) * NO-JIRA: Remove unused ref to hostnetwork in cpo role [#3796](https://github.com/openshift/hypershift/pull/3796) * [OCPBUGS-31064](https://issues.redhat.com/browse/OCPBUGS-31064): ibmcloud KMS: remove breaking image check and enable KMS v2 support [#3774](https://github.com/openshift/hypershift/pull/3774) * [OCPBUGS-31377](https://issues.redhat.com/browse/OCPBUGS-31377): Manually cherry pick #3782 to 4.15 [#3803](https://github.com/openshift/hypershift/pull/3803) * [OCPBUGS-31326](https://issues.redhat.com/browse/OCPBUGS-31326): fix(ignition): Fix priority class override [#3800](https://github.com/openshift/hypershift/pull/3800) * [OCPBUGS-30804](https://issues.redhat.com/browse/OCPBUGS-30804): honor HC image configuration [#3730](https://github.com/openshift/hypershift/pull/3730) * "[release-4.15] OCPBUGS-30164: Ensure cloud resources are destroyed for all platforms when --destroy-cloud-resources is used" [#3677](https://github.com/openshift/hypershift/pull/3677) * [OCPBUGS-31116](https://issues.redhat.com/browse/OCPBUGS-31116): external OIDC: fix certificateAuthority field in structured auth config [#3783](https://github.com/openshift/hypershift/pull/3783) * [OCPBUGS-30862](https://issues.redhat.com/browse/OCPBUGS-30862): Manual cherry pick 3685&3727 to release 4.15 [#3740](https://github.com/openshift/hypershift/pull/3740) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3791](https://github.com/openshift/hypershift/pull/3791) * NO-JIRA: Update RHTAP references (release-4.15) [#3785](https://github.com/openshift/hypershift/pull/3785) * [OCPBUGS-29881](https://issues.redhat.com/browse/OCPBUGS-29881): feat(ho): Add flag for dedicated request serving isolation [#3633](https://github.com/openshift/hypershift/pull/3633) * [OCPBUGS-30742](https://issues.redhat.com/browse/OCPBUGS-30742): [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group [#3726](https://github.com/openshift/hypershift/pull/3726) * [OCPBUGS-30650](https://issues.redhat.com/browse/OCPBUGS-30650): Set KAS config pod security Enforce to privileged [#3719](https://github.com/openshift/hypershift/pull/3719) * NO-JIRA: Bump CPO API budget to 4000 in EnsureApiBudget [#3741](https://github.com/openshift/hypershift/pull/3741) * [OCPBUGS-30651](https://issues.redhat.com/browse/OCPBUGS-30651): Remove EnsurePSANotPrivileged [#3744](https://github.com/openshift/hypershift/pull/3744) * NO-JIRA: Update RHTAP references (release-4.15) [#3754](https://github.com/openshift/hypershift/pull/3754) * [HOSTEDCP-1488](https://issues.redhat.com/browse/HOSTEDCP-1488): Use regionalized STS endpoints in AWS [#3747](https://github.com/openshift/hypershift/pull/3747) * NO-JIRA: Update RHTAP references (release-4.15) [#3738](https://github.com/openshift/hypershift/pull/3738) * [OCPBUGS-30581](https://issues.redhat.com/browse/OCPBUGS-30581): [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP [#3684](https://github.com/openshift/hypershift/pull/3684) * [OCPBUGS-30572](https://issues.redhat.com/browse/OCPBUGS-30572): [release-4.15] Update OLM Default Catalog Sources to 4.15 [#3696](https://github.com/openshift/hypershift/pull/3696) * NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3705](https://github.com/openshift/hypershift/pull/3705) * [OCPBUGS-30189](https://issues.redhat.com/browse/OCPBUGS-30189): set Konnectivity cipher suites [#3673](https://github.com/openshift/hypershift/pull/3673) * [Full changelog](https://github.com/openshift/hypershift/compare/2407d94b33a47db891649d89bf2228a0223e5345...9c62624659c54ec453ec7556f44601572e9060ae) ### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/7d1e4d205925fa33a897e4e0e1f8885532d32ee1) * [OCPBUGS-33641](https://issues.redhat.com/browse/OCPBUGS-33641): [ibm-vpc] Scheduling issue on IBM Cloud Bare Metal nodes [#116](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/116) * [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/516264a98d130f9f2a03b20acf33dcc1b556e6a8...7d1e4d205925fa33a897e4e0e1f8885532d32ee1) ### [insights-operator](https://github.com/openshift/insights-operator/tree/5adc8962dca746b52ef47f1d99e826627d2e5713) * [OCPBUGS-32702](https://issues.redhat.com/browse/OCPBUGS-32702): anonymization - externalIP can be nil (#931) [#931](https://github.com/openshift/insights-operator/pull/931) * [OCPBUGS-31946](https://issues.redhat.com/browse/OCPBUGS-31946): bump golang.org/x/net version (#925) [#925](https://github.com/openshift/insights-operator/pull/925) * [Full changelog](https://github.com/openshift/insights-operator/compare/a6923466398b283a68b78fad9b1f2c5ccf9eaded...5adc8962dca746b52ef47f1d99e826627d2e5713) ### [ironic](https://github.com/openshift/ironic-image/tree/9df86ffa7035bf8c9215231b50fa1b858ffca441) * Bug OCPBUGS-33736: Disable installation of .pyc files through pip [#511](https://github.com/openshift/ironic-image/pull/511) * [OCPBUGS-32365](https://issues.redhat.com/browse/OCPBUGS-32365): [4.15] Remove unused prometheus exporter [#485](https://github.com/openshift/ironic-image/pull/485) * [OCPBUGS-32351](https://issues.redhat.com/browse/OCPBUGS-32351): [4.15] Update to include fixes for ironic servicing feature [#479](https://github.com/openshift/ironic-image/pull/479) * [OCPBUGS-32389](https://issues.redhat.com/browse/OCPBUGS-32389): Use unix sockets by default for reverse proxy communication [#474](https://github.com/openshift/ironic-image/pull/474) * [OCPBUGS-31686](https://issues.redhat.com/browse/OCPBUGS-31686), [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802), [OCPBUGS-31830](https://issues.redhat.com/browse/OCPBUGS-31830): [4.15] install ironic projects from source [#470](https://github.com/openshift/ironic-image/pull/470) * [OCPBUGS-31802](https://issues.redhat.com/browse/OCPBUGS-31802): [4.15] Add requirements placeholders for cachito [#467](https://github.com/openshift/ironic-image/pull/467) * [Full changelog](https://github.com/openshift/ironic-image/compare/e38f8df7cff70fb7c2b87aee3bf9a265e342d676...9df86ffa7035bf8c9215231b50fa1b858ffca441) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/4f8c828af122ab56ba97ba02467e3c306e8bfd1d) * [OCPBUGS-33133](https://issues.redhat.com/browse/OCPBUGS-33133): update ironic-lib with latest fixes [#131](https://github.com/openshift/ironic-agent-image/pull/131) * [OCPBUGS-32173](https://issues.redhat.com/browse/OCPBUGS-32173): [4.15] Fix name in setup.cfg [#123](https://github.com/openshift/ironic-agent-image/pull/123) * [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add makefile [#126](https://github.com/openshift/ironic-agent-image/pull/126) * [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Install ironic-python-agent from source [#125](https://github.com/openshift/ironic-agent-image/pull/125) * [OCPBUGS-31811](https://issues.redhat.com/browse/OCPBUGS-31811): [4.15] Add requirements placeholders for cachito [#121](https://github.com/openshift/ironic-agent-image/pull/121) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/39d5064babe4291e475268666b28b62004235e43...4f8c828af122ab56ba97ba02467e3c306e8bfd1d) ### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/da16e56001ae274021794aef7926d77ccd96dab5) * [OCPBUGS-32214](https://issues.redhat.com/browse/OCPBUGS-32214), [OCPBUGS-32215](https://issues.redhat.com/browse/OCPBUGS-32215): upgrade deps [#102](https://github.com/openshift/k8s-prometheus-adapter/pull/102) * [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/c38187e7ff03fb341eab7c05b4b91d6b2c40410e...da16e56001ae274021794aef7926d77ccd96dab5) ### [keepalived-ipfailover](https://github.com/openshift/images/tree/27f169500584b0909270d1775f5da295bc212e3e) * [OCPBUGS-30413](https://issues.redhat.com/browse/OCPBUGS-30413): update unit tests in egress/dns-proxy [#168](https://github.com/openshift/images/pull/168) * [Full changelog](https://github.com/openshift/images/compare/5d1de7f1b00d8517ba5c4b5b635fc60b954f2bff...27f169500584b0909270d1775f5da295bc212e3e) ### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/dbaf9ea1edd5a953606a80cb45f723c934a73ded) * [OCPBUGS-31801](https://issues.redhat.com/browse/OCPBUGS-31801): Bump opentelemetry [#39](https://github.com/openshift/cloud-provider-kubevirt/pull/39) * [OCPBUGS-24118](https://issues.redhat.com/browse/OCPBUGS-24118): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART [#28](https://github.com/openshift/cloud-provider-kubevirt/pull/28) * [OCPBUGS-22061](https://issues.redhat.com/browse/OCPBUGS-22061): Bump golang.org/x/net to v0.18.0 [#34](https://github.com/openshift/cloud-provider-kubevirt/pull/34) * [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/e465e606e7d17c64392cdeba099f9382580e44b0...dbaf9ea1edd5a953606a80cb45f723c934a73ded) ### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3) * [OCPBUGS-29793](https://issues.redhat.com/browse/OCPBUGS-29793): [release-4.15] Address https://github.com/advisories/GHSA-fg9q-5cw2-p6r9: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs [#33](https://github.com/openshift/kubevirt-csi-driver/pull/33) * [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/aea7be8e2213a74d1945d39eba4d1efec0369c36...d3bdbce4b08eb05eea70be77f4ecf33e351ce4d3) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/ad9fdfd5640f166da06ad96aa34f8fcc4c19f6f6) * [OCPBUGS-31949](https://issues.redhat.com/browse/OCPBUGS-31949): Update x/net to v0.24.0 [#1231](https://github.com/openshift/machine-api-operator/pull/1231) * [OCPBUGS-30215](https://issues.redhat.com/browse/OCPBUGS-30215): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1222](https://github.com/openshift/machine-api-operator/pull/1222) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/e2b4537e57f4407e5469ad673dda126df5bb2a8b...ad9fdfd5640f166da06ad96aa34f8fcc4c19f6f6) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/eac63b92593461d31042085ab5d156bb680006ed) * [OCPBUGS-32092](https://issues.redhat.com/browse/OCPBUGS-32092): Decrease logs of haproxy [#4313](https://github.com/openshift/machine-config-operator/pull/4313) * [OCPBUGS-35010](https://issues.redhat.com/browse/OCPBUGS-35010): set required-scc for openshift workloads [#4393](https://github.com/openshift/machine-config-operator/pull/4393) * [OCPBUGS-31461](https://issues.redhat.com/browse/OCPBUGS-31461): Remove weights from ingress check script [#4290](https://github.com/openshift/machine-config-operator/pull/4290) * [OCPBUGS-33847](https://issues.redhat.com/browse/OCPBUGS-33847): If multiple hostnames are returned, use the first one for the Node name [#4373](https://github.com/openshift/machine-config-operator/pull/4373) * [OCPBUGS-20152](https://issues.redhat.com/browse/OCPBUGS-20152): Don't error if the certs.d dir doesn't exist yet [#4358](https://github.com/openshift/machine-config-operator/pull/4358) * [OCPBUGS-32922](https://issues.redhat.com/browse/OCPBUGS-32922): [release-4.15] add cluster fleet evaluation support to mco [#4334](https://github.com/openshift/machine-config-operator/pull/4334) * [OCPBUGS-28926](https://issues.redhat.com/browse/OCPBUGS-28926): [4.15] crio: update pids limit to be -1 [#4163](https://github.com/openshift/machine-config-operator/pull/4163) * [OCPBUGS-28545](https://issues.redhat.com/browse/OCPBUGS-28545): Delete state files on reboot only [#4311](https://github.com/openshift/machine-config-operator/pull/4311) * [OCPBUGS-31820](https://issues.redhat.com/browse/OCPBUGS-31820): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4309](https://github.com/openshift/machine-config-operator/pull/4309) * [OCPBUGS-27029](https://issues.redhat.com/browse/OCPBUGS-27029): Log network service output to console [#4113](https://github.com/openshift/machine-config-operator/pull/4113) * [OCPBUGS-31646](https://issues.redhat.com/browse/OCPBUGS-31646): fix: resources were in the wrong indentation level [#4301](https://github.com/openshift/machine-config-operator/pull/4301) * : OCPBUGS-31576: kubelet: restorecon necessary files on kubelet's prestart [#4297](https://github.com/openshift/machine-config-operator/pull/4297) * [OCPBUGS-30884](https://issues.redhat.com/browse/OCPBUGS-30884): Prevent OVS-configuration to run before kdump [#4259](https://github.com/openshift/machine-config-operator/pull/4259) * [OCPBUGS-31383](https://issues.redhat.com/browse/OCPBUGS-31383): make verify should use MCO's kube version [#4282](https://github.com/openshift/machine-config-operator/pull/4282) * [OCPBUGS-30971](https://issues.redhat.com/browse/OCPBUGS-30971): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4264](https://github.com/openshift/machine-config-operator/pull/4264) * [OCPBUGS-29731](https://issues.redhat.com/browse/OCPBUGS-29731): Delete image openshift/openshift-proxy-pull-test [#4199](https://github.com/openshift/machine-config-operator/pull/4199) * [OCPBUGS-30093](https://issues.redhat.com/browse/OCPBUGS-30093): Mount /run/nodeip-configuration into coredns containers [#4229](https://github.com/openshift/machine-config-operator/pull/4229) * [OCPBUGS-30761](https://issues.redhat.com/browse/OCPBUGS-30761): add static pods for rbacproxy [#4252](https://github.com/openshift/machine-config-operator/pull/4252) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/6eb0e07f062c0c06965da711454d1eaa12934f78...eac63b92593461d31042085ab5d156bb680006ed) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/53c186206d94508b2aec4c5af5e112b79d5f67d1) * [OU-417](https://issues.redhat.com/browse/OU-417): throw an error when a custom datasource is not found [#118](https://github.com/openshift/monitoring-plugin/pull/118) * [OU-415](https://issues.redhat.com/browse/OU-415): Add datasource parameter to handle metrics from custom datasources [#116](https://github.com/openshift/monitoring-plugin/pull/116) * [OCPBUGS-32097](https://issues.redhat.com/browse/OCPBUGS-32097): make createdBy mandatory and auto fill with the current user [#115](https://github.com/openshift/monitoring-plugin/pull/115) * [OCPBUGS-31310](https://issues.redhat.com/browse/OCPBUGS-31310): upgrade sanitize-html vulnerable dependency [#107](https://github.com/openshift/monitoring-plugin/pull/107) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c3d2272954610dc99a80e51f5b888af09973903f...53c186206d94508b2aec4c5af5e112b79d5f67d1) ### [multus-cni](https://github.com/openshift/multus-cni/tree/05497ad135c629de9b4ffb0a13fb91d58a335d25) * [OCPBUGS-35047](https://issues.redhat.com/browse/OCPBUGS-35047): Update owners file [#240](https://github.com/openshift/multus-cni/pull/240) * [OCPBUGS-35258](https://issues.redhat.com/browse/OCPBUGS-35258): Thick plugin should not wait for API readiness on CNI DEL [#242](https://github.com/openshift/multus-cni/pull/242) * [OCPBUGS-33477](https://issues.redhat.com/browse/OCPBUGS-33477): Fix CNI cache update function to prevent nil access [#234](https://github.com/openshift/multus-cni/pull/234) * [OCPBUGS-30237](https://issues.redhat.com/browse/OCPBUGS-30237): Reload bootstrap kubeconfig if cert mgr failed to load valid certs [#223](https://github.com/openshift/multus-cni/pull/223) * [Full changelog](https://github.com/openshift/multus-cni/compare/84b2a27392c12a0b346f5d33e6f38b8043b7db78...05497ad135c629de9b4ffb0a13fb91d58a335d25) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/8a3df962522bf076233775b5c4e7381fed730e74) * [OCPBUGS-35081](https://issues.redhat.com/browse/OCPBUGS-35081): [release-4.15] Use IP to identify orphaned allocation to be deleted [#288](https://github.com/openshift/whereabouts-cni/pull/288) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/2edc45fe57cc6c861f8014fdc514ca03442fde17...8a3df962522bf076233775b5c4e7381fed730e74) ### [network-tools](https://github.com/openshift/network-tools/tree/17536c8dff76d50efb604187ba763020bd084771) * [OCPBUGS-31764](https://issues.redhat.com/browse/OCPBUGS-31764): replace wireshark with wireshark-cli [#118](https://github.com/openshift/network-tools/pull/118) * [Full changelog](https://github.com/openshift/network-tools/compare/be5b7d060d18980e4f54204e5023615d3cd52dae...17536c8dff76d50efb604187ba763020bd084771) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/0e158441dbfdf232d7fea50b7c4eae3023d2cdbb) * [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#114](https://github.com/openshift/oauth-apiserver/pull/114) * [OCPBUGS-31951](https://issues.redhat.com/browse/OCPBUGS-31951): bump x/net to 0.24.0 [#109](https://github.com/openshift/oauth-apiserver/pull/109) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/34756b67ae1ce1307d07bd1834579de1e4b47f17...0e158441dbfdf232d7fea50b7c4eae3023d2cdbb) ### [oauth-server](https://github.com/openshift/oauth-server/tree/c055dbb9a84e04575ade106e9a43cc638a8aeaef) * [OCPBUGS-33210](https://issues.redhat.com/browse/OCPBUGS-33210): bump lib-go to fix SAs acting as OAuth2 clients [#148](https://github.com/openshift/oauth-server/pull/148) * [Full changelog](https://github.com/openshift/oauth-server/compare/8296c0542bbc90e96d7b5cee5aa6f5cacc3489b5...c055dbb9a84e04575ade106e9a43cc638a8aeaef) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e91f573c771182f7fd4a2d3513ed49562dee6b38) * [OCPBUGS-34521](https://issues.redhat.com/browse/OCPBUGS-34521): Fix DiskToMirror without internet connection without rebuild catalog (#866) [#866](https://github.com/openshift/oc-mirror/pull/866) * [OCPBUGS-33575](https://issues.redhat.com/browse/OCPBUGS-33575): Change default behavior to not rebuild catalogs for V1 (#849) [#849](https://github.com/openshift/oc-mirror/pull/849) * [OCPBUGS-31466](https://issues.redhat.com/browse/OCPBUGS-31466): Fix for oc-mirror new defaultChannel override (#846) [#846](https://github.com/openshift/oc-mirror/pull/846) * Bump version to include v5.11.0 of go-git (#819) [#819](https://github.com/openshift/oc-mirror/pull/819) * [Full changelog](https://github.com/openshift/oc-mirror/compare/9621d8f72ecc7a0a13e40b9709b5e19cc621117b...e91f573c771182f7fd4a2d3513ed49562dee6b38) ### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3) * : OCPBUGS-30264: Bump Helm & K8s dependencies [#79](https://github.com/openshift/operator-framework-rukpak/pull/79) * [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/36acf8d67e27405e69685df79ea636757df3a4f4...5b09cd44e9ca7b2ec91fd6f906ac4612636277e3) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/ebb067d8738bd96b46905771791c8faa08bc2035) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Bump openshift/api to get updated docs for UnservableInFutureVersions [#436](https://github.com/openshift/openshift-apiserver/pull/436) * [OCPBUGS-31469](https://issues.redhat.com/browse/OCPBUGS-31469): vendor upgrade runtime-utils [#422](https://github.com/openshift/openshift-apiserver/pull/422) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/ae99b858c04476b7a98c6b3dc40283586ef98380...ebb067d8738bd96b46905771791c8faa08bc2035) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/104b9ece0feb24da89fa6b87d90d60dd27fce813) * [OCPBUGS-32807](https://issues.redhat.com/browse/OCPBUGS-32807), [OCPBUGS-33371](https://issues.redhat.com/browse/OCPBUGS-33371): Rollback state of managed image pull secrets after downgrade [#303](https://github.com/openshift/openshift-controller-manager/pull/303) * [OCPBUGS-31490](https://issues.redhat.com/browse/OCPBUGS-31490): Bumps opentelemetry dependencies [#294](https://github.com/openshift/openshift-controller-manager/pull/294) * [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-openshift-controller-manager-container image to be consistent with ART [#281](https://github.com/openshift/openshift-controller-manager/pull/281) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/87d251169278f61434749fc17991b45cbcb53b15...104b9ece0feb24da89fa6b87d90d60dd27fce813) ### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/5b47d5db2382a04cf377cc6c92c5d606ca429fbf) * [OCPBUGS-34927](https://issues.redhat.com/browse/OCPBUGS-34927): Correct out-of-bounds check [#172](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/172) * [OCPBUGS-32744](https://issues.redhat.com/browse/OCPBUGS-32744): Relax requirement to enable topology [#165](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/165) * [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/2367f2c22bc3edf8e5ebbb9fd20b0a9690d05c80...5b47d5db2382a04cf377cc6c92c5d606ca429fbf) ### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/232472ea527aa86764d93e77dc67b0c7db9cc050) * [OCPBUGS-25859](https://issues.redhat.com/browse/OCPBUGS-25859): CARRY: Add Snyk security scan config [#299](https://github.com/openshift/cluster-api-provider-openstack/pull/299) * [OCPBUGS-26208](https://issues.redhat.com/browse/OCPBUGS-26208): openshift/manifests: CloudCredential capability for CredentialsRequest [#297](https://github.com/openshift/cluster-api-provider-openstack/pull/297) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/d1de8c63ee931be0038b55dd4813b2089fd6107e...232472ea527aa86764d93e77dc67b0c7db9cc050) ### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/4cca3954d5e39ddd200ad222cb2a5366cff1caef) * [OCPBUGS-30857](https://issues.redhat.com/browse/OCPBUGS-30857): Ensure portSecurity is correctly set in the Port [#108](https://github.com/openshift/machine-api-provider-openstack/pull/108) * [OCPBUGS-28326](https://issues.redhat.com/browse/OCPBUGS-28326): Add snyk configuration file [#105](https://github.com/openshift/machine-api-provider-openstack/pull/105) * [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/316f6cb6bdf83da9fd065a3989f5734dc43854cf...4cca3954d5e39ddd200ad222cb2a5366cff1caef) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/95839e128d9aadb30d51314a840017840730e0c6) * [OCPBUGS-35720](https://issues.redhat.com/browse/OCPBUGS-35720): Warn and allow CRD upgrade if validation fails but webhook is specified [#789](https://github.com/openshift/operator-framework-olm/pull/789) * [OCPBUGS-31939](https://issues.redhat.com/browse/OCPBUGS-31939), [OCPBUGS-31940](https://issues.redhat.com/browse/OCPBUGS-31940): UPSTREAM: <carry>: update golang.org/x/net for CVE-2023-45288 [#747](https://github.com/openshift/operator-framework-olm/pull/747) * [OCPBUGS-35229](https://issues.redhat.com/browse/OCPBUGS-35229): Unblock CI [#768](https://github.com/openshift/operator-framework-olm/pull/768) * [OCPBUGS-32860](https://issues.redhat.com/browse/OCPBUGS-32860): UPSTREAM: <carry>: bump go-jose [#740](https://github.com/openshift/operator-framework-olm/pull/740) * [OCPBUGS-32311](https://issues.redhat.com/browse/OCPBUGS-32311): [release-4.15]: Update if AlreadyExists [#736](https://github.com/openshift/operator-framework-olm/pull/736) * [OCPBUGS-31842](https://issues.redhat.com/browse/OCPBUGS-31842): copy-content: delete destination dirs before copying (#3197) [#728](https://github.com/openshift/operator-framework-olm/pull/728) * [OCPBUGS-31651](https://issues.redhat.com/browse/OCPBUGS-31651): [release-4.15] Correctly detect catalog image ID for extractContent catalog pods [#726](https://github.com/openshift/operator-framework-olm/pull/726) * [OCPBUGS-30219](https://issues.redhat.com/browse/OCPBUGS-30219): bump otelgrpc to 0.46.0 [#712](https://github.com/openshift/operator-framework-olm/pull/712) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/cb0c5f2728e412f595cceeb11104af206421daec...95839e128d9aadb30d51314a840017840730e0c6) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3f36a1bd8759b1d36fe81830457e0743a1f84d7b) * [OCPBUGS-32060](https://issues.redhat.com/browse/OCPBUGS-32060): update golang.org/x/net for CVE-2023-45288 [#564](https://github.com/operator-framework/operator-marketplace/pull/564) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/53c124a3f0edfd151652e1f23c87dd39ed7646bb...3f36a1bd8759b1d36fe81830457e0743a1f84d7b) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/29f1b8aff950b2cb670aa14edb0a181530f2ba53) * [OCPBUGS-33623](https://issues.redhat.com/browse/OCPBUGS-33623), [OCPBUGS-33624](https://issues.redhat.com/browse/OCPBUGS-33624): Improve CI signal by removing/suppressing signals [#2168](https://github.com/openshift/ovn-kubernetes/pull/2168) * [OCPBUGS-31814](https://issues.redhat.com/browse/OCPBUGS-31814): ipv6+all protocols conntrack flush [#2131](https://github.com/openshift/ovn-kubernetes/pull/2131) * [OCPBUGS-34404](https://issues.redhat.com/browse/OCPBUGS-34404): [release-4.15] dns: fix deadlock in case of error [#2182](https://github.com/openshift/ovn-kubernetes/pull/2182) * [OCPBUGS-33294](https://issues.redhat.com/browse/OCPBUGS-33294): Reuse node-subnet from cache if exists [#2163](https://github.com/openshift/ovn-kubernetes/pull/2163) * [OCPBUGS-33960](https://issues.redhat.com/browse/OCPBUGS-33960): Egressip garp fix 4.15 [#2175](https://github.com/openshift/ovn-kubernetes/pull/2175) * [OCPBUGS-30899](https://issues.redhat.com/browse/OCPBUGS-30899): use a forked version of j-keck/arping that fixes a threading issue [#2105](https://github.com/openshift/ovn-kubernetes/pull/2105) * [OCPBUGS-32426](https://issues.redhat.com/browse/OCPBUGS-32426): [release-4.15] Improves service iptables efficiency on start up [#2156](https://github.com/openshift/ovn-kubernetes/pull/2156) * [Release 4.15] OCPBUGS-32986: Bump OVS [#2147](https://github.com/openshift/ovn-kubernetes/pull/2147) * [OCPBUGS-27852](https://issues.redhat.com/browse/OCPBUGS-27852): [release-4.15] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2025](https://github.com/openshift/ovn-kubernetes/pull/2025) * [OCPBUGS-29316](https://issues.redhat.com/browse/OCPBUGS-29316): [release-4.15] Ignore missing live migratable pod annotation on AddNode [#2065](https://github.com/openshift/ovn-kubernetes/pull/2065) * [OCPBUGS-32202](https://issues.redhat.com/browse/OCPBUGS-32202): [release-4.15] Bump OVN to 23.09.0-139 [#2121](https://github.com/openshift/ovn-kubernetes/pull/2121) * [OCPBUGS-33020](https://issues.redhat.com/browse/OCPBUGS-33020): drop-forwarding: Add ClusterSubnets to allowed forwarding CIDRs [#2141](https://github.com/openshift/ovn-kubernetes/pull/2141) * [OCPBUGS-32154](https://issues.redhat.com/browse/OCPBUGS-32154): Custom v4 and v6 transit switch subnets while creating kind cluster [#2094](https://github.com/openshift/ovn-kubernetes/pull/2094) * [OCPBUGS-31081](https://issues.redhat.com/browse/OCPBUGS-31081): Periodically check the ovnkube-node certificate is not expired [#2099](https://github.com/openshift/ovn-kubernetes/pull/2099) * [OCPBUGS-31033](https://issues.redhat.com/browse/OCPBUGS-31033): Remove OVN topology version reporting/detection [#2098](https://github.com/openshift/ovn-kubernetes/pull/2098) * [OCPBUGS-31500](https://issues.redhat.com/browse/OCPBUGS-31500), [OCPBUGS-31501](https://issues.redhat.com/browse/OCPBUGS-31501): EIP multi NIC IPv6 support and default route with next hop [#2103](https://github.com/openshift/ovn-kubernetes/pull/2103) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/42b1cc427538a736f8c056171b4de7e6c6a366fb...29f1b8aff950b2cb670aa14edb0a181530f2ba53) ### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/2baff7a1112ede3c53d59c7a97d75da29ca58125) * [OCPBUGS-33622](https://issues.redhat.com/browse/OCPBUGS-33622): Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.15 [#80](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/80) * [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/5ca428c8a7be80681a1abc8fcb5bb36aaa09c5bc...2baff7a1112ede3c53d59c7a97d75da29ca58125) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/19f312e96bb4e5b7da9f61ea4cab202b227a60c6) * [OCPBUGS-34797](https://issues.redhat.com/browse/OCPBUGS-34797): set required-scc for openshift workloads [#243](https://github.com/openshift/service-ca-operator/pull/243) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/f5972cc74670c274bdc2b29d0903c4ed0432b9ca...19f312e96bb4e5b7da9f61ea4cab202b227a60c6) ### [telemeter](https://github.com/openshift/telemeter/tree/82cd6434d4096d624dc498c7e56f263dfa4d1ff2) * : OCPBUGS-35076: Release Fix CVE go-jose [#542](https://github.com/openshift/telemeter/pull/542) * [OCPBUGS-32890](https://issues.redhat.com/browse/OCPBUGS-32890): CVE-2024-28180 bump go-jose to v3.0.3 [#531](https://github.com/openshift/telemeter/pull/531) * [Full changelog](https://github.com/openshift/telemeter/compare/18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b...82cd6434d4096d624dc498c7e56f263dfa4d1ff2) ### [tests](https://github.com/openshift/origin/tree/c13a01ea83ab8e5b8afd58e7a3eb11f97c629012) * [OCPBUGS-28928](https://issues.redhat.com/browse/OCPBUGS-28928): Add test for UpgradeValidation contention [#28820](https://github.com/openshift/origin/pull/28820) * [OCPBUGS-33368](https://issues.redhat.com/browse/OCPBUGS-33368): [release-4.15] monitor test service-type-load-balancer-availability setup fails frequently in 4.14 & 4.15 PowerVS CI jobs [#28821](https://github.com/openshift/origin/pull/28821) * #28776 FIX [release-4.15] OCPBUGS-33368: monitor test fix to wait before connecting to a non-existent dns on PowerVS and IBMCloud platforms [#28791](https://github.com/openshift/origin/pull/28791) * [OCPBUGS-26520](https://issues.redhat.com/browse/OCPBUGS-26520): Kuryr: Ignore Upgradeable=False on operators tests [#28512](https://github.com/openshift/origin/pull/28512) * [OCPBUGS-33347](https://issues.redhat.com/browse/OCPBUGS-33347): Provide SCC access via RBAC [#28780](https://github.com/openshift/origin/pull/28780) * [OCPBUGS-33541](https://issues.redhat.com/browse/OCPBUGS-33541): Adjust the method of get the apiServer (release-4.15) [#28762](https://github.com/openshift/origin/pull/28762) * [OCPBUGS-33473](https://issues.redhat.com/browse/OCPBUGS-33473): [release-4.15] MULTIARCH-4352: Censor private key from pod dump logs [#28666](https://github.com/openshift/origin/pull/28666) * : OCPBUGS-32554: Also rely on oomkilled exit code 137 in build test [#28724](https://github.com/openshift/origin/pull/28724) * [OCPBUGS-31726](https://issues.redhat.com/browse/OCPBUGS-31726): Use centos7 tag instead of latest for cmd images tests [#28688](https://github.com/openshift/origin/pull/28688) * [OCPBUGS-30892](https://issues.redhat.com/browse/OCPBUGS-30892): fix panic on non-standard node-role labels [#28656](https://github.com/openshift/origin/pull/28656) * [OCPNODE-2101](https://issues.redhat.com/browse/OCPNODE-2101): add kube-rbac-proxy-crio toleration change [#28637](https://github.com/openshift/origin/pull/28637) * [Full changelog](https://github.com/openshift/origin/compare/a4c87e20d7902b3984459ca6c6f31686a9d426ff...c13a01ea83ab8e5b8afd58e7a3eb11f97c629012) ### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/5611168658586d68b5a92c77c07304694fc2cc64) * [OCPBUGS-30117](https://issues.redhat.com/browse/OCPBUGS-30117): manifests: Add in CustomNoUpgrade [#38](https://github.com/openshift/cluster-api-provider-vsphere/pull/38) * [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/2070c131306654b67ad6c52261818833e3c70316...5611168658586d68b5a92c77c07304694fc2cc64) ### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/4b15e93bd578484c4bfb1c124fa655c451bbd1ca) * [OCPBUGS-33604](https://issues.redhat.com/browse/OCPBUGS-33604): FailedPrecondition volume does not appear staged [#118](https://github.com/openshift/vmware-vsphere-csi-driver/pull/118) * [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/74481e34aa9c2ef2de0ce0289e2383a179d34b89...4b15e93bd578484c4bfb1c124fa655c451bbd1ca)