# 4.15.0-0.okd-scos-2024-04-24-063708

Created: 2024-04-24 06:41:43 +0000 UTC

Image Digest: `sha256:dcc81106570fe66f3f052ff1ade98fe18396e0ce12633131117763e11cc7df57`


## Changes from 4.15.0-0.okd-scos-2024-01-18-223523

### Components

* Kubernetes upgraded from 1.28.5 to 1.28.7
* CentOS Stream CoreOS upgraded from 415.9.202401181453-0 to 415.9.202401231452-0


### Rebuilt images without code change

* centos-stream-coreos-9 `sha256:e25f9ab822d6a82cb81922e8e9df25da1ee9bc401fd11f63a27ab4d3d3c55038`
* centos-stream-coreos-9-extensions `sha256:682cdb655c8fa7c3cd1ff4ab29e4f706585bd7ed3d6e9a492bfac2367235bec5`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [81ab2a17](https://github.com/openshift/cloud-network-config-controller/commit/81ab2a17f2886bccd90dddf3deb213ed368c5be2) `sha256:2aa502d6f082bc89cafdfddf4e92ff6c6e98af06f65291044f10910fc77be90f`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [c6cfbfe3](https://github.com/openshift/containernetworking-plugins/commit/c6cfbfe37adc5ecf540b1771c41bb38ad0a982d7) `sha256:a00b9f5d8a2700c0923fd527d6f41d5c9dc2aec08995b047e6369a601a7e85cd`
* [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [aea7be8e](https://github.com/openshift/kubevirt-csi-driver/commit/aea7be8e2213a74d1945d39eba4d1efec0369c36) `sha256:07734be0075ecf8ba9bad7ee3a72fea03c28fe89b91739dcc362695487d398dd`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [23a7cfe4](https://github.com/openshift/multus-admission-controller/commit/23a7cfe44cacd1e8c1049ee3e0a858ec01e03d44) `sha256:ee6c272fb093cff52fd906d32b7c53ffcfad94e646387f49ea9d0ec6ac1a0587`
* [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy) git [6212406b](https://github.com/openshift/multus-networkpolicy/commit/6212406b49cbcc75a01da85a67469b4872754e1d) `sha256:6d6fd8cb7f91959cb8cb0e0eeb40f6b4b1dde7e05f86169c7848438f7371a0d6`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [07e8f8b8](https://github.com/openshift/machine-api-provider-powervs/commit/07e8f8b81748d52cf596082b8102134e954137ba) `sha256:3c612d82aa0224fd9cf84c416d668acc9aa0876ad93a57b026bf4c2bdfef09fd`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [de02a75d](https://github.com/openshift/vsphere-problem-detector/commit/de02a75de63c6d8afd8467afd9aff97878d8bea4) `sha256:6645df7eb2e46641dcef34f93e429a8fd74eb4452912c82b1268afb3ff896d83`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d60e80f8658cf8a756ff4aa318983ddcf0e70bca)

* [MGMT-16517](https://issues.redhat.com/browse/MGMT-16517): Add Env Var Deployment Type & Set ABI (#6016) [#6016](https://github.com/openshift/assisted-service/pull/6016)
* [MGMT-16980](https://issues.redhat.com/browse/MGMT-16980): Change the default value of ENABLE_SKIP_MCO_REBOOT to false (#6005) [#6005](https://github.com/openshift/assisted-service/pull/6005)
* [MGMT-16494](https://issues.redhat.com/browse/MGMT-16494): Move ip hint file creation to ignition in order to change it in IBI process (#5926) [#5926](https://github.com/openshift/assisted-service/pull/5926)
* [OCPBUGS-24428](https://issues.redhat.com/browse/OCPBUGS-24428): Redact passwords logged in installConfigOverrides Ensure that any passwords included in installConfigOverrides are redacted in logs. (#5905) [#5905](https://github.com/openshift/assisted-service/pull/5905)
* [Full changelog](https://github.com/openshift/assisted-service/compare/93179b853387f4e40c80b311d1bdfb3fb612d03d...d60e80f8658cf8a756ff4aa318983ddcf0e70bca)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/550f2a568d4b4a494b3637ebba725bdd9c26ecd9)

* [MGMT-16843](https://issues.redhat.com/browse/MGMT-16843): Ensure valid hostname during install (#791) [#791](https://github.com/openshift/assisted-installer/pull/791)
* [OCPBUGS-25718](https://issues.redhat.com/browse/OCPBUGS-25718): Do not remove uninitialized taints if vSphere (#785) [#785](https://github.com/openshift/assisted-installer/pull/785)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/81ef8544529e59cafebaa094dc34cc0d6dd6bc88...550f2a568d4b4a494b3637ebba725bdd9c26ecd9)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/2e3cca19638cae3066cba27608ed61c284b4d529)

* [OCPBUGS-29079](https://issues.redhat.com/browse/OCPBUGS-29079): spec: add `Provides: ose-aws-ecr-image-credential-provider` [#77](https://github.com/openshift/cloud-provider-aws/pull/77)
* [OCPBUGS-27486](https://issues.redhat.com/browse/OCPBUGS-27486): Adds ecr-credential-plugin .spec [#70](https://github.com/openshift/cloud-provider-aws/pull/70)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/ff1f556f4f77d21bd2479af0d1a3974916f246ae...2e3cca19638cae3066cba27608ed61c284b4d529)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/61d60f6ca20443df434456c2f3eeba859634e6a2)

* [OCPBUGS-28325](https://issues.redhat.com/browse/OCPBUGS-28325): add an extra vendor exclude to snyk config [#100](https://github.com/openshift/machine-api-provider-aws/pull/100)
* [OCPCLOUD-2429](https://issues.redhat.com/browse/OCPCLOUD-2429): Rebase k8s to 1.29 and update dependencies [#99](https://github.com/openshift/machine-api-provider-aws/pull/99)
* [OCPBUGS-26187](https://issues.redhat.com/browse/OCPBUGS-26187): Add Snyk file to exclude vendor directory on scan [#98](https://github.com/openshift/machine-api-provider-aws/pull/98)
* [OCPBUGS-24934](https://issues.redhat.com/browse/OCPBUGS-24934): Updating ose-machine-api-provider-aws-container image to be consistent with ART [#94](https://github.com/openshift/machine-api-provider-aws/pull/94)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/0129b1e3e6cf8d142dbff58d6f25ec9d42b0d382...61d60f6ca20443df434456c2f3eeba859634e6a2)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/d6be293a11bf0dfdc6b80912fcdc3e90e8071ffe)

* [OCPBUGS-29956](https://issues.redhat.com/browse/OCPBUGS-29956): Remove startupScript vmextension lookup [#102](https://github.com/openshift/machine-api-provider-azure/pull/102)
* [OCPBUGS-28309](https://issues.redhat.com/browse/OCPBUGS-28309): add an extra vendor exclude to snyk config [#99](https://github.com/openshift/machine-api-provider-azure/pull/99)
* [OCPBUGS-25940](https://issues.redhat.com/browse/OCPBUGS-25940): Don't create availability set when using spot instances [#91](https://github.com/openshift/machine-api-provider-azure/pull/91)
* [OCPCLOUD-2428](https://issues.redhat.com/browse/OCPCLOUD-2428): Rebase k8s to 1.29 and update dependencies [#94](https://github.com/openshift/machine-api-provider-azure/pull/94)
* [OCPBUGS-26122](https://issues.redhat.com/browse/OCPBUGS-26122): Add Snyk file to exclude vendor directory on scan [#92](https://github.com/openshift/machine-api-provider-azure/pull/92)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Improving performance of creating VMs in Azure [#87](https://github.com/openshift/machine-api-provider-azure/pull/87)
* [OCPBUGS-25591](https://issues.redhat.com/browse/OCPBUGS-25591): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#90](https://github.com/openshift/machine-api-provider-azure/pull/90)
* [OCPBUGS-25008](https://issues.redhat.com/browse/OCPBUGS-25008): Updating ose-machine-api-provider-azure-container image to be consistent with ART [#88](https://github.com/openshift/machine-api-provider-azure/pull/88)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/91204c4886ab638a9b2ffc65b90e1e8290f2167d...d6be293a11bf0dfdc6b80912fcdc3e90e8071ffe)


### [baremetal-installer, installer](https://github.com/openshift/installer/tree/a70f3aa977cf497790d55d9e9bbb6b1b225e607f)

* [OCPBUGS-32517](https://issues.redhat.com/browse/OCPBUGS-32517): Ensure worker BMH's get unpaused [#8299](https://github.com/openshift/installer/pull/8299)
* [OCPBUGS-32591](https://issues.redhat.com/browse/OCPBUGS-32591): GCP Destroy target pools fix misleading log [#8298](https://github.com/openshift/installer/pull/8298)
* [CORS-3260](https://issues.redhat.com/browse/CORS-3260): CAPI: Create GCP Internal LB [#8151](https://github.com/openshift/installer/pull/8151)
* [OCPBUGS-15845](https://issues.redhat.com/browse/OCPBUGS-15845): Check host for compatibility with target cluster config [#7566](https://github.com/openshift/installer/pull/7566)
* no-jira: bump golangci lint to 1.54.2 [#8291](https://github.com/openshift/installer/pull/8291)
* [OCPBUGS-32425](https://issues.redhat.com/browse/OCPBUGS-32425): Test for the presence of "provisioned" server [#8289](https://github.com/openshift/installer/pull/8289)
* [SPLAT-1585](https://issues.redhat.com/browse/SPLAT-1585): capv - allow no auth to vcenter [#8276](https://github.com/openshift/installer/pull/8276)
* [SPLAT-1208](https://issues.redhat.com/browse/SPLAT-1208): replace UPI terraform with powercli [#7699](https://github.com/openshift/installer/pull/7699)
* [OCPBUGS-29765](https://issues.redhat.com/browse/OCPBUGS-29765): Fills CIS or DNS CRN in Metadata, never both [#8057](https://github.com/openshift/installer/pull/8057)
* [OCPBUGS-32042](https://issues.redhat.com/browse/OCPBUGS-32042): fix usage of addtionalTrustBundle field [#8253](https://github.com/openshift/installer/pull/8253)
* [METAL-872](https://issues.redhat.com/browse/METAL-872): Remove terraform libvirt provider [#8160](https://github.com/openshift/installer/pull/8160)
* [MULTIARCH-4549](https://issues.redhat.com/browse/MULTIARCH-4549): Logic for creating private DNS records for PowerVS CAPI [#8246](https://github.com/openshift/installer/pull/8246)
* [OCPSTRAT-915](https://issues.redhat.com/browse/OCPSTRAT-915): Nutanix capi support [#8211](https://github.com/openshift/installer/pull/8211)
* [OCPBUGS-32133](https://issues.redhat.com/browse/OCPBUGS-32133): GCP: Fixing GCP Bootstraping [#8248](https://github.com/openshift/installer/pull/8248)
* [METAL-939](https://issues.redhat.com/browse/METAL-939): baremetal: monitor bootstrap process [#8181](https://github.com/openshift/installer/pull/8181)
* no-jira: gather: replace deprecated errors package [#8280](https://github.com/openshift/installer/pull/8280)
* no-jira:  azure: Update capz version to 1.14.2 [#8268](https://github.com/openshift/installer/pull/8268)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add `ec2:DisassociateAddress` permission [#8247](https://github.com/openshift/installer/pull/8247)
* [OCPBUGS-31563](https://issues.redhat.com/browse/OCPBUGS-31563): sdk/aws: add ssh security group rule for compute [#8229](https://github.com/openshift/installer/pull/8229)
* [MULTIARCH-4550](https://issues.redhat.com/browse/MULTIARCH-4550): Power VS: Use a custom resolver when publish strategy is Internal [#8243](https://github.com/openshift/installer/pull/8243)
* [MULTIARCH-2678](https://issues.redhat.com/browse/MULTIARCH-2678), [OCPBUGS-14478](https://issues.redhat.com/browse/OCPBUGS-14478): Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x [#8205](https://github.com/openshift/installer/pull/8205)
* [CORS-3050](https://issues.redhat.com/browse/CORS-3050): capi/aws: copy AMI to target region, if needed [#8157](https://github.com/openshift/installer/pull/8157)
* [SPLAT-1592](https://issues.redhat.com/browse/SPLAT-1592): bump capv to v1.9.3 [#8267](https://github.com/openshift/installer/pull/8267)
* [OCPBUGS-30774](https://issues.redhat.com/browse/OCPBUGS-30774): always save serial logs if they were gathered [#8263](https://github.com/openshift/installer/pull/8263)
* [CORS-3261](https://issues.redhat.com/browse/CORS-3261): GCP cluster api add disk encryption [#8222](https://github.com/openshift/installer/pull/8222)
* [CORS-3419](https://issues.redhat.com/browse/CORS-3419), [OCPBUGS-30941](https://issues.redhat.com/browse/OCPBUGS-30941): Include baremetal IPI in openshift-installer [#8161](https://github.com/openshift/installer/pull/8161)
* no-jira: PowerVS: Open port 10258 [#8261](https://github.com/openshift/installer/pull/8261)
* [OCPBUGS-31711](https://issues.redhat.com/browse/OCPBUGS-31711): AWS update explain docs [#8258](https://github.com/openshift/installer/pull/8258)
* [OCPBUGS-27965](https://issues.redhat.com/browse/OCPBUGS-27965): escape '%' in proxy settings [#8265](https://github.com/openshift/installer/pull/8265)
* [OCPBUGS-32174](https://issues.redhat.com/browse/OCPBUGS-32174): save correct bootstrap public IP [#8264](https://github.com/openshift/installer/pull/8264)
* [CORS-3420](https://issues.redhat.com/browse/CORS-3420): Remove libvirt platform from openshift-baremetal-install [#8244](https://github.com/openshift/installer/pull/8244)
* no-jira: capi: replace deprecated `--metrics-bind-addr` arg [#8251](https://github.com/openshift/installer/pull/8251)
* [CORS-3436](https://issues.redhat.com/browse/CORS-3436): capi: save log output to file [#8218](https://github.com/openshift/installer/pull/8218)
* no-jira: PowerVS: Add destroy Power Server subnets [#8260](https://github.com/openshift/installer/pull/8260)
* [OCPBUGS-32091](https://issues.redhat.com/browse/OCPBUGS-32091): Add Top-level Context for Create Commands [#8063](https://github.com/openshift/installer/pull/8063)
* [CORS-3063](https://issues.redhat.com/browse/CORS-3063): Support control plane disk encryption [#8124](https://github.com/openshift/installer/pull/8124)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure CAPI Ignite Bootstrap [#8255](https://github.com/openshift/installer/pull/8255)
* no-jira: PowerVS: add AddIPToLoadBalancerPool [#8257](https://github.com/openshift/installer/pull/8257)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump API version to promote vSphereStaticIPs from TechPreview. [#7943](https://github.com/openshift/installer/pull/7943)
* no-jira: capi/aws: bump controller log level to debug [#8252](https://github.com/openshift/installer/pull/8252)
* [CORS-3254](https://issues.redhat.com/browse/CORS-3254): Update google.golang.org/api/cloudresourcemanager library version [#8213](https://github.com/openshift/installer/pull/8213)
* [MULTIARCH-4111](https://issues.redhat.com/browse/MULTIARCH-4111): Update the CI image with virt-install [#8259](https://github.com/openshift/installer/pull/8259)
* [CORS-3218](https://issues.redhat.com/browse/CORS-3218): GCP Remove the use case of users passing contents for json secret data [#8234](https://github.com/openshift/installer/pull/8234)
* [OCPBUGS-27844](https://issues.redhat.com/browse/OCPBUGS-27844): Fix task for attaching IPv6 subnet to router. [#8087](https://github.com/openshift/installer/pull/8087)
* [CORS-3270](https://issues.redhat.com/browse/CORS-3270): azure: tag installer-created LB resources [#8236](https://github.com/openshift/installer/pull/8236)
* [OCPBUGS-31813](https://issues.redhat.com/browse/OCPBUGS-31813): AWS: bump CCO for permission fix [#8233](https://github.com/openshift/installer/pull/8233)
* [CORS-3289](https://issues.redhat.com/browse/CORS-3289), [CORS-3308](https://issues.redhat.com/browse/CORS-3308), [CORS-3426](https://issues.redhat.com/browse/CORS-3426): Bump CAPA provider for various fixes [#8232](https://github.com/openshift/installer/pull/8232)
* [OCPBUGS-32041](https://issues.redhat.com/browse/OCPBUGS-32041): update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 [#8256](https://github.com/openshift/installer/pull/8256)
* no-jira: docs: Fix typos [#8245](https://github.com/openshift/installer/pull/8245)
* no-jira:PowerVS: Wait for IPs [#8239](https://github.com/openshift/installer/pull/8239)
* [CORS-3075](https://issues.redhat.com/browse/CORS-3075): Allow for installation in existing resource group [#8123](https://github.com/openshift/installer/pull/8123)
* [CORS-3446](https://issues.redhat.com/browse/CORS-3446): Add instructions for obtaining correct binary [#8230](https://github.com/openshift/installer/pull/8230)
* [AGENT-858](https://issues.redhat.com/browse/AGENT-858): Agent day2 ignition services [#8093](https://github.com/openshift/installer/pull/8093)
* [CORS-3418](https://issues.redhat.com/browse/CORS-3418): images: move installer images to static builds [#8215](https://github.com/openshift/installer/pull/8215)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capi/aws: support ignition proxy and CA bundle [#8170](https://github.com/openshift/installer/pull/8170)
* [OSASINFRA-3365](https://issues.redhat.com/browse/OSASINFRA-3365): clusterapi: Add worker asset to PreProvision [#8237](https://github.com/openshift/installer/pull/8237)
* [HIVE-2476](https://issues.redhat.com/browse/HIVE-2476): OpenStack.MachineSets(): Allow nil Replicas [#8227](https://github.com/openshift/installer/pull/8227)
* [CORS-3195](https://issues.redhat.com/browse/CORS-3195): Azure CAPI Supplemental Load Balancers [#8115](https://github.com/openshift/installer/pull/8115)
* no-jira: PowerVS: Set VPC service region [#8217](https://github.com/openshift/installer/pull/8217)
* [OCPBUGS-12890](https://issues.redhat.com/browse/OCPBUGS-12890): Create bucket, signed url and use proxy info for installs [#8056](https://github.com/openshift/installer/pull/8056)
* no-jira: PowerVS: Fix COS region and VPC subnets [#8219](https://github.com/openshift/installer/pull/8219)
* [OCPBUGS-31546](https://issues.redhat.com/browse/OCPBUGS-31546): azure: use filter when listing SKUs [#8134](https://github.com/openshift/installer/pull/8134)
* [CORS-3245](https://issues.redhat.com/browse/CORS-3245): Azure CAPI rhcos image [#8018](https://github.com/openshift/installer/pull/8018)
* [AGENT-874](https://issues.redhat.com/browse/AGENT-874): use AddNodesConfig asset [#8080](https://github.com/openshift/installer/pull/8080)
* no-jira: this clusterprofile isn't actually used [#8214](https://github.com/openshift/installer/pull/8214)
* no-jira: pkg/asset/machines: remove static ip log lines [#8190](https://github.com/openshift/installer/pull/8190)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): aws/capi: setting zones to when creating cluster [#8156](https://github.com/openshift/installer/pull/8156)
* [CORS-3071](https://issues.redhat.com/browse/CORS-3071): Create DNS entries for CAPZ implementation [#8045](https://github.com/openshift/installer/pull/8045)
* no-jira: PowerVS: Fix CAPI created service instance case [#8212](https://github.com/openshift/installer/pull/8212)
* [AGENT-857](https://issues.redhat.com/browse/AGENT-857): Agent day2 use clusterinfo [#8009](https://github.com/openshift/installer/pull/8009)
* [CORS-3431](https://issues.redhat.com/browse/CORS-3431): CAPI: Add firewall rule for worker nodes [#8200](https://github.com/openshift/installer/pull/8200)
* [OSASINFRA-3421](https://issues.redhat.com/browse/OSASINFRA-3421): OpenStack: Customizable clientOpts for CheckNetworkEx… [#8209](https://github.com/openshift/installer/pull/8209)
* no-jira: infra: aws: move SDK provisioner to its own dir [#8194](https://github.com/openshift/installer/pull/8194)
* [AGENT-868](https://issues.redhat.com/browse/AGENT-868): Generate ECDSA public private keys and pass it to assisted service [#8105](https://github.com/openshift/installer/pull/8105)
* [MULTIARCH-4096](https://issues.redhat.com/browse/MULTIARCH-4096): PowerVS: Generate the cluster assets [#8116](https://github.com/openshift/installer/pull/8116)
* [CORS-2901](https://issues.redhat.com/browse/CORS-2901), [CORS-3428](https://issues.redhat.com/browse/CORS-3428): pkg/types/aws: limit additionalSecurityGroups to 10 [#8184](https://github.com/openshift/installer/pull/8184)
* [OCPBUGS-27848](https://issues.redhat.com/browse/OCPBUGS-27848): If host is offline or disconnected don't check ver [#8206](https://github.com/openshift/installer/pull/8206)
* [METAL-855](https://issues.redhat.com/browse/METAL-855): baremetal: remove ironic-inspector [#8128](https://github.com/openshift/installer/pull/8128)
* [CORS-3280](https://issues.redhat.com/browse/CORS-3280): Bump cluster-api-provider-gcp to v1.6.0 [#8153](https://github.com/openshift/installer/pull/8153)
* [OSASINFRA-3420](https://issues.redhat.com/browse/OSASINFRA-3420): openstack: Decouple OpenStack API calls from Machine generation [#8187](https://github.com/openshift/installer/pull/8187)
* [CORS-2898](https://issues.redhat.com/browse/CORS-2898): capi/aws: configure IMDS [#8152](https://github.com/openshift/installer/pull/8152)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi/aws: destroy CAPA resources [#8179](https://github.com/openshift/installer/pull/8179)
* no-jira: capi/aws: reuse GenerateMachines for bootstrap [#8193](https://github.com/openshift/installer/pull/8193)
* [OCPBUGS-31209](https://issues.redhat.com/browse/OCPBUGS-31209): CAPG - Fix setting ServiceAccount role bindings for GCP [#8192](https://github.com/openshift/installer/pull/8192)
* [OCPBUGS-31050](https://issues.redhat.com/browse/OCPBUGS-31050): openstack: Honour worker server group policy [#8180](https://github.com/openshift/installer/pull/8180)
* [OCPBUGS-26052](https://issues.redhat.com/browse/OCPBUGS-26052): aws: altinfra: fix role creation in C2S [#7871](https://github.com/openshift/installer/pull/7871)
* [OCPBUGS-15941](https://issues.redhat.com/browse/OCPBUGS-15941): ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES [#7349](https://github.com/openshift/installer/pull/7349)
* [CORS-3256](https://issues.redhat.com/browse/CORS-3256): GCP destroy updates for CAPG [#8113](https://github.com/openshift/installer/pull/8113)
* Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8195](https://github.com/openshift/installer/pull/8195)
* [OCPBUGS-30882](https://issues.redhat.com/browse/OCPBUGS-30882): GCP capg distribute instances across zones [#8176](https://github.com/openshift/installer/pull/8176)
* [CORS-3142](https://issues.redhat.com/browse/CORS-3142): capi: write manifests to disk during create manifests [#8166](https://github.com/openshift/installer/pull/8166)
* [OCPBUGS-28870](https://issues.redhat.com/browse/OCPBUGS-28870): IBMCloud: Restrict CIS and DNS Service lookup [#7987](https://github.com/openshift/installer/pull/7987)
* [OCPBUGS-31013](https://issues.redhat.com/browse/OCPBUGS-31013): Fix vsi image missing [#8177](https://github.com/openshift/installer/pull/8177)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#8099](https://github.com/openshift/installer/pull/8099)
* [CORS-2894](https://issues.redhat.com/browse/CORS-2894), [CORS-3051](https://issues.redhat.com/browse/CORS-3051): Create DNS resources and PHZ for CAPI/aws [#8142](https://github.com/openshift/installer/pull/8142)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capa bump fallout [#8169](https://github.com/openshift/installer/pull/8169)
* [CORS-3307](https://issues.redhat.com/browse/CORS-3307): add 'A2' as tested machine types on GCP [#8148](https://github.com/openshift/installer/pull/8148)
* [CORS-2902](https://issues.redhat.com/browse/CORS-2902): capi/aws: add ext-LB as CAPA secondary LB [#8149](https://github.com/openshift/installer/pull/8149)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Tweak GCPCluster  Failure Domain Logic [#8017](https://github.com/openshift/installer/pull/8017)
* [CORS-3215](https://issues.redhat.com/browse/CORS-3215): capi: implement bootstrap gather [#8036](https://github.com/openshift/installer/pull/8036)
* NO-JIRA: OWNERS: pkg/infrastructure/openstack [#8165](https://github.com/openshift/installer/pull/8165)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for vSphere and Baremetal [#8101](https://github.com/openshift/installer/pull/8101)
* no-jira: Power VS: Fix comment on default for wait_for_workspace [#8158](https://github.com/openshift/installer/pull/8158)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for Nutanix [#8102](https://github.com/openshift/installer/pull/8102)
* [CORS-3303](https://issues.redhat.com/browse/CORS-3303): GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region [#8132](https://github.com/openshift/installer/pull/8132)
* [SPLAT-1390](https://issues.redhat.com/browse/SPLAT-1390): remove feature gate for vSphere control plane machinesets [#7908](https://github.com/openshift/installer/pull/7908)
* [CORS-2892](https://issues.redhat.com/browse/CORS-2892): capi/aws: add user tags to CAPA cluster [#8150](https://github.com/openshift/installer/pull/8150)
* [OCPBUGS-30836](https://issues.redhat.com/browse/OCPBUGS-30836): Power VS: Fix wait_for_workspace [#8145](https://github.com/openshift/installer/pull/8145)
* [OCPBUGS-25462](https://issues.redhat.com/browse/OCPBUGS-25462): Validate control plane replicas [#8082](https://github.com/openshift/installer/pull/8082)
* [OCPBUGS-30642](https://issues.redhat.com/browse/OCPBUGS-30642): pin google oauth2 version [#8133](https://github.com/openshift/installer/pull/8133)
* [OCPBUGS-30600](https://issues.redhat.com/browse/OCPBUGS-30600): update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 [#8121](https://github.com/openshift/installer/pull/8121)
* [CORS-3257](https://issues.redhat.com/browse/CORS-3257): Create GCP ServiceAccounts and assign to machines [#8066](https://github.com/openshift/installer/pull/8066)
* [OCPBUGS-15861](https://issues.redhat.com/browse/OCPBUGS-15861): Use a static pure-go libvirt library [#7252](https://github.com/openshift/installer/pull/7252)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437), [OCPBUGS-30547](https://issues.redhat.com/browse/OCPBUGS-30547): Run kubelet directly [#8131](https://github.com/openshift/installer/pull/8131)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: remove ironic tf files [#8117](https://github.com/openshift/installer/pull/8117)
* [OCPBUGS-30641](https://issues.redhat.com/browse/OCPBUGS-30641): Enable deploy by Service ID on PowerVS [#8111](https://github.com/openshift/installer/pull/8111)
* [CORS-3288](https://issues.redhat.com/browse/CORS-3288): bump CAPA for LB scheme fix [#8114](https://github.com/openshift/installer/pull/8114)
* no-jira:  machines/aws: fix subnet filter comment [#8120](https://github.com/openshift/installer/pull/8120)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: bootstrap: rename master label [#8107](https://github.com/openshift/installer/pull/8107)
* [OCPBUGS-29388](https://issues.redhat.com/browse/OCPBUGS-29388): upi: aws: fix typo in worker templates [#8112](https://github.com/openshift/installer/pull/8112)
* [OSASINFRA-3362](https://issues.redhat.com/browse/OSASINFRA-3362): Fix CAPI bootstrap deletion [#8104](https://github.com/openshift/installer/pull/8104)
* [OCPBUGS-24415](https://issues.redhat.com/browse/OCPBUGS-24415), [OCPVE-661](https://issues.redhat.com/browse/OCPVE-661): bump openshift/api version [#7546](https://github.com/openshift/installer/pull/7546)
* [MULTIARCH-4095](https://issues.redhat.com/browse/MULTIARCH-4095): Generate PowerVS machine manifests for CAPI [#8020](https://github.com/openshift/installer/pull/8020)
* [CORS-2900](https://issues.redhat.com/browse/CORS-2900): CAPI AWS IAM [#8031](https://github.com/openshift/installer/pull/8031)
* [OCPBUGS-30200](https://issues.redhat.com/browse/OCPBUGS-30200): Authn with platform-services-go-sdk for PowerVS [#8025](https://github.com/openshift/installer/pull/8025)
* [CORS-3281](https://issues.redhat.com/browse/CORS-3281): IBMCloud: initial CAPI infrastructure [#8090](https://github.com/openshift/installer/pull/8090)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): Bump CAPA Dependencies for Secondary Load Balancers [#8088](https://github.com/openshift/installer/pull/8088)
* [SPLAT-1460](https://issues.redhat.com/browse/SPLAT-1460): Make vSphere default ResourcePool formatting not contain double slash. [#8044](https://github.com/openshift/installer/pull/8044)
* [CORS-3212](https://issues.redhat.com/browse/CORS-3212): CAPG Add ignition for CAPG machines [#8027](https://github.com/openshift/installer/pull/8027)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): Remove terraform-provider-ironic [#7649](https://github.com/openshift/installer/pull/7649)
* [SPLAT-1468](https://issues.redhat.com/browse/SPLAT-1468): Added log message for import vsphere ova progress during CAPI install. [#8097](https://github.com/openshift/installer/pull/8097)
* no-jira: capi: aws: report all conflicting user tags at once [#8085](https://github.com/openshift/installer/pull/8085)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out - part 2 [#8070](https://github.com/openshift/installer/pull/8070)
* [SPLAT-1423](https://issues.redhat.com/browse/SPLAT-1423): Added static ip support to CAPI installer. [#8081](https://github.com/openshift/installer/pull/8081)
* [MULTIARCH-4159](https://issues.redhat.com/browse/MULTIARCH-4159): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8098](https://github.com/openshift/installer/pull/8098)
* [OCPBUGS-30058](https://issues.redhat.com/browse/OCPBUGS-30058): GCP: The CAPG bootstrap machine IP should be set according to the publish strategy [#8079](https://github.com/openshift/installer/pull/8079)
* [OCPBUGS-30057](https://issues.redhat.com/browse/OCPBUGS-30057): Don't auto create subnets for CAPG [#8083](https://github.com/openshift/installer/pull/8083)
* [MULTIARCH-4153](https://issues.redhat.com/browse/MULTIARCH-4153): Incorporating Eltorito Boot Loader fix for Agent [#8069](https://github.com/openshift/installer/pull/8069)
* no-jira: Missing permission from vsphere docs [#7789](https://github.com/openshift/installer/pull/7789)
* [OCPBUGS-30135](https://issues.redhat.com/browse/OCPBUGS-30135): fix "OpenShiftSDN deprecated" error message [#8092](https://github.com/openshift/installer/pull/8092)
* [CORS-3274](https://issues.redhat.com/browse/CORS-3274): GCP: add africa-south1 region to the survey as supported region [#8055](https://github.com/openshift/installer/pull/8055)
* [CORS-3251](https://issues.redhat.com/browse/CORS-3251): Create capz machine manifests [#7969](https://github.com/openshift/installer/pull/7969)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP CAPI Infra: auth with service account [#8077](https://github.com/openshift/installer/pull/8077)
* [CFE-857](https://issues.redhat.com/browse/CFE-857): Apply user defined tags on created gcp resources [#7279](https://github.com/openshift/installer/pull/7279)
* [AGENT-853](https://issues.redhat.com/browse/AGENT-853): Add ClusterInfo asset [#7997](https://github.com/openshift/installer/pull/7997)
* [SPLAT-1173](https://issues.redhat.com/browse/SPLAT-1173): Enhance vSphere Installer to use IPAddressClaims for static IP [#7501](https://github.com/openshift/installer/pull/7501)
* [CORS-3273](https://issues.redhat.com/browse/CORS-3273): capi system: don't log env vars [#8084](https://github.com/openshift/installer/pull/8084)
* [OCPBUGS-29860](https://issues.redhat.com/browse/OCPBUGS-29860): double looping of failuredomains breaks zonal [#8059](https://github.com/openshift/installer/pull/8059)
* no-jira: Remove v1alpha3 [#8061](https://github.com/openshift/installer/pull/8061)
* [OCPBUGS-30005](https://issues.redhat.com/browse/OCPBUGS-30005): remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 [#8072](https://github.com/openshift/installer/pull/8072)
* [OSASINFRA-3363](https://issues.redhat.com/browse/OSASINFRA-3363): ShiftStack CAPO integration [#7939](https://github.com/openshift/installer/pull/7939)
* [MULTIARCH-4158](https://issues.redhat.com/browse/MULTIARCH-4158): pkg/infrastructure/powervs: add initial CAPI provider [#8060](https://github.com/openshift/installer/pull/8060)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out [#8046](https://github.com/openshift/installer/pull/8046)
* [SPLAT-1459](https://issues.redhat.com/browse/SPLAT-1459): capv machines only full clone [#8042](https://github.com/openshift/installer/pull/8042)
* [OCPBUGS-29895](https://issues.redhat.com/browse/OCPBUGS-29895): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8058](https://github.com/openshift/installer/pull/8058)
* [SPLAT-1434](https://issues.redhat.com/browse/SPLAT-1434): aws: add support of BYO public ipv4 pool [#7983](https://github.com/openshift/installer/pull/7983)
* no-jira: images: libvirt: add oc to libvirt CI image [#8008](https://github.com/openshift/installer/pull/8008)
* [SPLAT-1465](https://issues.redhat.com/browse/SPLAT-1465): capv - add additional extra configs [#8054](https://github.com/openshift/installer/pull/8054)
* [SPLAT-1462](https://issues.redhat.com/browse/SPLAT-1462): capv - Remove unneeded auth env vars [#8053](https://github.com/openshift/installer/pull/8053)
* [OCPBUGS-29429](https://issues.redhat.com/browse/OCPBUGS-29429): feat: add check for SNO bootstrap condition [#8004](https://github.com/openshift/installer/pull/8004)
* Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer [#8028](https://github.com/openshift/installer/pull/8028)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP: Create DNS records and internal load balancer for CAPG Install [#8014](https://github.com/openshift/installer/pull/8014)
* [SPLAT-1198](https://issues.redhat.com/browse/SPLAT-1198): migrate vSphere installation to CAPV [#7962](https://github.com/openshift/installer/pull/7962)
* [OCPBUGS-29587](https://issues.redhat.com/browse/OCPBUGS-29587): Power VS: Fix service instance list [#8033](https://github.com/openshift/installer/pull/8033)
* [OCPBUGS-22410](https://issues.redhat.com/browse/OCPBUGS-22410): vsphere-fix convert if only provided name [#7931](https://github.com/openshift/installer/pull/7931)
* [OCPBUGS-29584](https://issues.redhat.com/browse/OCPBUGS-29584): PowerVS: handle composite_instance [#8029](https://github.com/openshift/installer/pull/8029)
* [OCPBUGS-29482](https://issues.redhat.com/browse/OCPBUGS-29482): Bump terraform-provider-ibm to v1.61.0 [#8023](https://github.com/openshift/installer/pull/8023)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): pkg/infrastructure/aws: add initial CAPI provider [#8012](https://github.com/openshift/installer/pull/8012)
* [CORS-3185](https://issues.redhat.com/browse/CORS-3185): update default release image [#7874](https://github.com/openshift/installer/pull/7874)
* [OCPBUGS-28590](https://issues.redhat.com/browse/OCPBUGS-28590): gcp: better error msg when service accnt missing [#8002](https://github.com/openshift/installer/pull/8002)
* [OCPBUGS-28203](https://issues.redhat.com/browse/OCPBUGS-28203): Power VS: Add sleep to allow workspace to configure PER [#7889](https://github.com/openshift/installer/pull/7889)
* [CORS-3220](https://issues.redhat.com/browse/CORS-3220): Initiate CAPG installation [#8011](https://github.com/openshift/installer/pull/8011)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Create the GCP cluster manifest [#7917](https://github.com/openshift/installer/pull/7917)
* [OCPBUGS-29441](https://issues.redhat.com/browse/OCPBUGS-29441): update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 [#8015](https://github.com/openshift/installer/pull/8015)
* [OCPBUGS-29425](https://issues.redhat.com/browse/OCPBUGS-29425): PowerVS Fix next start search [#8010](https://github.com/openshift/installer/pull/8010)
* Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation [#7998](https://github.com/openshift/installer/pull/7998)
* [SPLAT-1447](https://issues.redhat.com/browse/SPLAT-1447): Move MCO imports to API; update library-go, api [#8000](https://github.com/openshift/installer/pull/8000)
* NO-ISSUE: integrationt tests support for env vars substitution [#7992](https://github.com/openshift/installer/pull/7992)
* [OCPBUGS-29114](https://issues.redhat.com/browse/OCPBUGS-29114): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7985](https://github.com/openshift/installer/pull/7985)
* [OCPBUGS-29068](https://issues.redhat.com/browse/OCPBUGS-29068): GCP: Skip validation of public and private zones for terraform vars [#7986](https://github.com/openshift/installer/pull/7986)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Copy GCP manifests within MCO bootstrap to the correct location [#7991](https://github.com/openshift/installer/pull/7991)
* [OCPBUGS-20085](https://issues.redhat.com/browse/OCPBUGS-20085): IBMCloud: Handle disk delete errors [#7515](https://github.com/openshift/installer/pull/7515)
* [OCPBUGS-28827](https://issues.redhat.com/browse/OCPBUGS-28827): do not rename boot.catalog for arm64 iso [#7972](https://github.com/openshift/installer/pull/7972)
* [OSASINFRA-3371](https://issues.redhat.com/browse/OSASINFRA-3371): Pass rhcosImage and manifests to the PreProvision hook [#7967](https://github.com/openshift/installer/pull/7967)
* [SPLAT-1387](https://issues.redhat.com/browse/SPLAT-1387): enable additional tags to be associated with vsphere machines [#7905](https://github.com/openshift/installer/pull/7905)
* [CORS-3242](https://issues.redhat.com/browse/CORS-3242): PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item [#7861](https://github.com/openshift/installer/pull/7861)
* [OPNET-357](https://issues.redhat.com/browse/OPNET-357): Populate network configuration at install-time [#7604](https://github.com/openshift/installer/pull/7604)
* [CORS-3240](https://issues.redhat.com/browse/CORS-3240): add OWNERS_ALIASES madhu-pillai [#7733](https://github.com/openshift/installer/pull/7733)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): Revert "bootkube.sh: Render kernel boot arguments for SNO" [#7979](https://github.com/openshift/installer/pull/7979)
* [CORS-3188](https://issues.redhat.com/browse/CORS-3188): Bump k8s deps [#7970](https://github.com/openshift/installer/pull/7970)
* [OCPBUGS-2135](https://issues.redhat.com/browse/OCPBUGS-2135): Include CAPG objects in uninstall filter [#7907](https://github.com/openshift/installer/pull/7907)
* [AGENT-848](https://issues.redhat.com/browse/AGENT-848): add node-joiner cli tool main [#7958](https://github.com/openshift/installer/pull/7958)
* [CORS-3207](https://issues.redhat.com/browse/CORS-3207): Generate GCP machine manifests for CAPI [#7944](https://github.com/openshift/installer/pull/7944)
* [OCPBUGS-24575](https://issues.redhat.com/browse/OCPBUGS-24575): ic: gcp: validate instance architecture [#7850](https://github.com/openshift/installer/pull/7850)
* [CORS-3196](https://issues.redhat.com/browse/CORS-3196): capg: add infrastructure components [#7968](https://github.com/openshift/installer/pull/7968)
* [CORS-3208](https://issues.redhat.com/browse/CORS-3208): Create the GCP infrastructure controller [#7940](https://github.com/openshift/installer/pull/7940)
* [OCPBUGS-27156](https://issues.redhat.com/browse/OCPBUGS-27156): GCP Destroy cleanup correct zones/records [#7932](https://github.com/openshift/installer/pull/7932)
* [OCPBUGS-27737](https://issues.redhat.com/browse/OCPBUGS-27737): aws-edge-zones preventing err before discovering [#7945](https://github.com/openshift/installer/pull/7945)
* [OCPBUGS-28708](https://issues.redhat.com/browse/OCPBUGS-28708): update tested Azure Arm64 instance type on 4.15 [#7965](https://github.com/openshift/installer/pull/7965)
* [OCPBUGS-28643](https://issues.redhat.com/browse/OCPBUGS-28643): PowerVS: Add dal12 region [#7956](https://github.com/openshift/installer/pull/7956)
* [OCPBUGS-27263](https://issues.redhat.com/browse/OCPBUGS-27263): Bump golang 1.21 [#7925](https://github.com/openshift/installer/pull/7925)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#7692](https://github.com/openshift/installer/pull/7692)
* [OCPBUGS-28705](https://issues.redhat.com/browse/OCPBUGS-28705): [azure] update tested x86 instance type on 4.15 [#7961](https://github.com/openshift/installer/pull/7961)
* [CORS-3139](https://issues.redhat.com/browse/CORS-3139): Move CAPI behind infrastructure provider interface [#7824](https://github.com/openshift/installer/pull/7824)
* [OCPBUGS-27507](https://issues.redhat.com/browse/OCPBUGS-27507): bump containerd for vulnerability fix [#7942](https://github.com/openshift/installer/pull/7942)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#7954](https://github.com/openshift/installer/pull/7954)
* NO-JIRA: Minor fixes [#7947](https://github.com/openshift/installer/pull/7947)
* no-jira: azure: add metadata info to resource group tags [#7725](https://github.com/openshift/installer/pull/7725)
* [OCPBUGS-25453](https://issues.redhat.com/browse/OCPBUGS-25453): duplicate failure domains in CMPS [#7860](https://github.com/openshift/installer/pull/7860)
* [OCPBUGS-27788](https://issues.redhat.com/browse/OCPBUGS-27788): PowerVS: COS region configurable [#7941](https://github.com/openshift/installer/pull/7941)
* [SPLAT-1345](https://issues.redhat.com/browse/SPLAT-1345): Remove alibaba [#7832](https://github.com/openshift/installer/pull/7832)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): set the --cluster-profile flag for openshift/api rendering [#7924](https://github.com/openshift/installer/pull/7924)
* [Full changelog](https://github.com/openshift/installer/compare/7be2cf71cdef9f5fe0d2d9687615c2bb2741ffcd...a70f3aa977cf497790d55d9e9bbb6b1b225e607f)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/26641cde1dfee3edc8039fccafdf0e57f0c3bf8b)

* [OCPBUGS-28838](https://issues.redhat.com/browse/OCPBUGS-28838): Extend metal3remediation aggregation role [#210](https://github.com/openshift/cluster-api-provider-baremetal/pull/210)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/83bf459dfe084e2daa7402d49279a247dad45b1a...26641cde1dfee3edc8039fccafdf0e57f0c3bf8b)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/6f83b6f752ce27c6f997f2d0706b3a79b84aa763)

* [OCPBUGS-29338](https://issues.redhat.com/browse/OCPBUGS-29338): Ignore egress IP when selecting Node IP [#299](https://github.com/openshift/baremetal-runtimecfg/pull/299)
* [OCPBUGS-24070](https://issues.redhat.com/browse/OCPBUGS-24070): Updating ose-baremetal-runtimecfg-container image to be consistent with ART [#289](https://github.com/openshift/baremetal-runtimecfg/pull/289)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/0875aac9e2b41dca22a06ecb157d519d846521e8...6f83b6f752ce27c6f997f2d0706b3a79b84aa763)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d6175ebd387c07d8fd6354b476f6b1092f15ee1d)

* [OCPBUGS-30270](https://issues.redhat.com/browse/OCPBUGS-30270): Introduce --issuer-url flag in oc login [#1696](https://github.com/openshift/oc/pull/1696)
* [OCPBUGS-28204](https://issues.redhat.com/browse/OCPBUGS-28204): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1672](https://github.com/openshift/oc/pull/1672)
* [WRKLDS-1041](https://issues.redhat.com/browse/WRKLDS-1041): oc login: Built-in cred exec plugin implementation and wiring [#1658](https://github.com/openshift/oc/pull/1658)
* [Full changelog](https://github.com/openshift/oc/compare/e31bee5089f458c915a6343c172d984e69d776ba...d6175ebd387c07d8fd6354b476f6b1092f15ee1d)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/06a42948bf78b104e03a51bb5a555b6819db1b0a)

* [OCPBUGS-30412](https://issues.redhat.com/browse/OCPBUGS-30412): gcp actuator update check to consider custom roles [#686](https://github.com/openshift/cloud-credential-operator/pull/686)
* [OCPBUGS-29155](https://issues.redhat.com/browse/OCPBUGS-29155): Fix the ClusterOperator watch of the status controller [#675](https://github.com/openshift/cloud-credential-operator/pull/675)
* [OCPBUGS-29113](https://issues.redhat.com/browse/OCPBUGS-29113): ccoctl - use proxy when validating CloudFront URL [#674](https://github.com/openshift/cloud-credential-operator/pull/674)
* [OCPBUGS-27910](https://issues.redhat.com/browse/OCPBUGS-27910): Resolve all outstanding snyk vulnerabilities [#649](https://github.com/openshift/cloud-credential-operator/pull/649)
* [OCPBUGS-27901](https://issues.redhat.com/browse/OCPBUGS-27901): Use cached clients to avoid client side throttling [#660](https://github.com/openshift/cloud-credential-operator/pull/660)
* [OCPBUGS-27919](https://issues.redhat.com/browse/OCPBUGS-27919): Report manualpodidentity mode in metrics when using Azure Workload Identity [#661](https://github.com/openshift/cloud-credential-operator/pull/661)
* [OCPBUGS-27117](https://issues.redhat.com/browse/OCPBUGS-27117): Write manifests when AWS IAM roles already exist. [#653](https://github.com/openshift/cloud-credential-operator/pull/653)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/9fe2bdd985ebe4bce890d475ba6c6301a3d739d4...06a42948bf78b104e03a51bb5a555b6819db1b0a)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/52a7d25ade22ddcf791bf6488504e3f7ef3ae770)

* NO-JIRA: _output - remove dir [#652](https://github.com/openshift/cluster-authentication-operator/pull/652)
* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#647](https://github.com/openshift/cluster-authentication-operator/pull/647)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/aece7a2854ef81abc285879445e22c2a9d8bcd54...52a7d25ade22ddcf791bf6488504e3f7ef3ae770)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/b4a9dc6dd40c6c9e458e69bbfd2c667e9cb23e18)

* [OCPBUGS-27750](https://issues.redhat.com/browse/OCPBUGS-27750): Fix unstructured taint parsing in Cluster API provider [#282](https://github.com/openshift/kubernetes-autoscaler/pull/282)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/f0e3479f393963fb8562c726b3c85acee9397127...b4a9dc6dd40c6c9e458e69bbfd2c667e9cb23e18)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/fdce2d0892e255240ff760e91fa8a738ae4a7556)

* [OCPBUGS-29787](https://issues.redhat.com/browse/OCPBUGS-29787): Update the leader election durations to be tolerant [#405](https://github.com/openshift/cluster-baremetal-operator/pull/405)
* [OCPBUGS-29153](https://issues.redhat.com/browse/OCPBUGS-29153): manifests/0000_31_cluster-baremetal-operator_06_deployment: Enable leader election [#402](https://github.com/openshift/cluster-baremetal-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/95e6cbefed9a43562e031a6f3d9b74184c0cdc39...fdce2d0892e255240ff760e91fa8a738ae4a7556)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/932dc9b2858c53811f4a346f6a4b90ede870da88)

* [OCPBUGS-30595](https://issues.redhat.com/browse/OCPBUGS-30595): fix e2e tests on release branches [#201](https://github.com/openshift/cluster-api/pull/201)
* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): openshift: generate separate manifest for core CAPI CRDs [#198](https://github.com/openshift/cluster-api/pull/198)
* [Full changelog](https://github.com/openshift/cluster-api/compare/db1841a6c8acc1741010dfbd0b81e9233de0ef0b...932dc9b2858c53811f4a346f6a4b90ede870da88)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/c8c94baccbe1d87f08d2d2349749ca31296b85ba)

* [OCPBUGS-25505](https://issues.redhat.com/browse/OCPBUGS-25505): UPSTREAM: <carry>: bump x/crypto [#165](https://github.com/openshift/cluster-capi-operator/pull/165)
* [OCPBUGS-29515](https://issues.redhat.com/browse/OCPBUGS-29515): manifests-gen: store core capi crds also in their own manifest [#160](https://github.com/openshift/cluster-capi-operator/pull/160)
* [OCPBUGS-28754](https://issues.redhat.com/browse/OCPBUGS-28754): Start operator controllers only on supported platforms, add unsupported controller [#158](https://github.com/openshift/cluster-capi-operator/pull/158)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/fc98dca3226e7ed5667e03284d685a190fd82811...c8c94baccbe1d87f08d2d2349749ca31296b85ba)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/a125bc59fe576ad165c800badd90a93aba99c154)

* [OCPBUGS-25751](https://issues.redhat.com/browse/OCPBUGS-25751): Add Snyk file to exclude vendor directory on scan [#314](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/314)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/51fb8a64880a81d94c83643bc73cd8b3a9986dff...a125bc59fe576ad165c800badd90a93aba99c154)


### [cluster-config-api](https://github.com/openshift/api/tree/4511c790cc60bf2a0393c34739cf9e71d1648b39)

* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all current AWS partitions [#1767](https://github.com/openshift/api/pull/1767)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): allow multiple audiences to be configured for kube-apiserver [#1772](https://github.com/openshift/api/pull/1772)
* [OCPBUGS-29074](https://issues.redhat.com/browse/OCPBUGS-29074): Move network.config conditions to GA [#1756](https://github.com/openshift/api/pull/1756)
* [NP-905](https://issues.redhat.com/browse/NP-905): [release-4.15] Promote Live Migration to GA [#1749](https://github.com/openshift/api/pull/1749)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Allow modified IPv6 address as CPIC name [#1750](https://github.com/openshift/api/pull/1750)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): add separate authentication config manifest for hypershift [#1743](https://github.com/openshift/api/pull/1743)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): respect the cluster profile in rendering [#1735](https://github.com/openshift/api/pull/1735)
* [Full changelog](https://github.com/openshift/api/compare/11ed2fbcb80554091d74c53f3b5e589fd5934d36...4511c790cc60bf2a0393c34739cf9e71d1648b39)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/cc1fb201a307c049036c8307d950e5cde9e565ca)

* [OCPBUGS-28622](https://issues.redhat.com/browse/OCPBUGS-28622): Add required PSa labels [#402](https://github.com/openshift/cluster-config-operator/pull/402)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/c436b7ae2fe1372112d58eae29a75cc8d48e8193...cc1fb201a307c049036c8307d950e5cde9e565ca)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/673e7da36cad22402065e2952b4e06aff0cb9c99)

* [OCPBUGS-29419](https://issues.redhat.com/browse/OCPBUGS-29419): Never delete a Machine when there's a single Machine in an index [#280](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/280)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#279](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/279)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/d3e0fe7d4036f19cd1db69f03153a56136ed6c55...673e7da36cad22402065e2952b4e06aff0cb9c99)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9d596e149a662ff77d235b3c7e4b69f34638c2ed)

* [OCPBUGS-30042](https://issues.redhat.com/browse/OCPBUGS-30042): fix condition name type [#1212](https://github.com/openshift/cluster-etcd-operator/pull/1212)
* [OCPBUGS-28628](https://issues.redhat.com/browse/OCPBUGS-28628): fix panic in health check timeouts [#1191](https://github.com/openshift/cluster-etcd-operator/pull/1191)
* [OCPBUGS-29717](https://issues.redhat.com/browse/OCPBUGS-29717): [4.15] Replace nodelister with master nodelister everywhere [#1206](https://github.com/openshift/cluster-etcd-operator/pull/1206)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/85e53769e692705f1f7e9e749edf5d957fc2cf17...9d596e149a662ff77d235b3c7e4b69f34638c2ed)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/f122f0b9a706abff7610f732cba4dd6eca9771f6)

* [OCPBUGS-29983](https://issues.redhat.com/browse/OCPBUGS-29983): cmd/move-blobs: log and exit 1 on error instead of panic [#1009](https://github.com/openshift/cluster-image-registry-operator/pull/1009)
* [OCPBUGS-29638](https://issues.redhat.com/browse/OCPBUGS-29638): azurepathfix: fix stack hub, government and workload identity setup [#1004](https://github.com/openshift/cluster-image-registry-operator/pull/1004)
* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): move azure storage blobs from `docker` back into `/docker` [#1000](https://github.com/openshift/cluster-image-registry-operator/pull/1000)
* [OCPBUGS-28830](https://issues.redhat.com/browse/OCPBUGS-28830): pkg/storage/s3: enable bucket key on encryption settings [#994](https://github.com/openshift/cluster-image-registry-operator/pull/994)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/83eb04fe3e61954a1e1b5aeed81c985784bae2ad...f122f0b9a706abff7610f732cba4dd6eca9771f6)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/0106cb99b340a2f266a88700b4250f11457ffb05)

* [CORS-3169](https://issues.redhat.com/browse/CORS-3169): Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled [#1022](https://github.com/openshift/cluster-ingress-operator/pull/1022)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/611011bdc0586878923efe69a3c2f6caa885dbc4...0106cb99b340a2f266a88700b4250f11457ffb05)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/9fe0ab100bc6241030bf6ad1fc3f554ad0b0faf1)

* [OCPBUGS-30304](https://issues.redhat.com/browse/OCPBUGS-30304): cert rotation: Bump library-go to latest master [#1653](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1653)
* [OCPBUGS-29775](https://issues.redhat.com/browse/OCPBUGS-29775): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1647](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1647)
* [OCPBUGS-30180](https://issues.redhat.com/browse/OCPBUGS-30180): add provider name to cluster_infrastructure_provider when external platform [#1639](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1639)
* [OCPBUGS-28882](https://issues.redhat.com/browse/OCPBUGS-28882): Add sno section to alert description [#1636](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1636)
* [OCPBUGS-27491](https://issues.redhat.com/browse/OCPBUGS-27491): webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator [#1628](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1628)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/9f6208d68b7207e819767ffbad8bb95e6b8b7bb2...9fe0ab100bc6241030bf6ad1fc3f554ad0b0faf1)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/128d8e08c48e2002c416e84d0dec816bf5999c7e)

* [OCPBUGS-23711](https://issues.redhat.com/browse/OCPBUGS-23711): Add Snyk file to exclude vendor directory on scan [#34](https://github.com/openshift/cluster-api-operator/pull/34)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/097921fbf0741446d0f4297a71f0765dfcd7eeea...128d8e08c48e2002c416e84d0dec816bf5999c7e)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/642fb08461913d9352b781693311727da42ffc0a)

* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#790](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/790)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/8a3e677c03f7e821f5b9e2639eb6621b15f96edb...642fb08461913d9352b781693311727da42ffc0a)


### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)

* [OCPBUGS-27758](https://issues.redhat.com/browse/OCPBUGS-27758): Increase concurrent reconciles to 10 [#226](https://github.com/openshift/cluster-machine-approver/pull/226)
* [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/d537432fe131629ccfbb8ca099d4570bad07c3d5...3a6b6ae6933cf1a6550e0a4008eadd4a29f271ba)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a13d634285e9142a75b82f84c4ce62d2ac7e3ed1)

* [OCPBUGS-28703](https://issues.redhat.com/browse/OCPBUGS-28703): rollout metrics-server on cert rotations [#2249](https://github.com/openshift/cluster-monitoring-operator/pull/2249)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e04826eb2a14e0cdf51ea399b35444a93dfed0ff...a13d634285e9142a75b82f84c4ce62d2ac7e3ed1)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/f41dbd3ab6c426157b4d58e103f4148913edc531)

* [OCPBUGS-30615](https://issues.redhat.com/browse/OCPBUGS-30615): Fix managed cluster detection on ARO [#2304](https://github.com/openshift/cluster-network-operator/pull/2304)
* [OCPBUGS-29090](https://issues.redhat.com/browse/OCPBUGS-29090): network-node-identity mounts secrets with mode 0640 [#2251](https://github.com/openshift/cluster-network-operator/pull/2251)
* [OCPBUGS-29390](https://issues.redhat.com/browse/OCPBUGS-29390): ipsec: fix openssl typo [#2272](https://github.com/openshift/cluster-network-operator/pull/2272)
* [OCPBUGS-29522](https://issues.redhat.com/browse/OCPBUGS-29522): Not set CNO to degraded if API server returns conflict error [#2275](https://github.com/openshift/cluster-network-operator/pull/2275)
* [OCPBUGS-29654](https://issues.redhat.com/browse/OCPBUGS-29654): [release-4.15] Disable network-node-identity on ROKS [#2278](https://github.com/openshift/cluster-network-operator/pull/2278)
* [OCPBUGS-29299](https://issues.redhat.com/browse/OCPBUGS-29299): Update ingressconfig_controller to use field Manager [#2265](https://github.com/openshift/cluster-network-operator/pull/2265)
* [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Fix CloudPrivateIPConfig CRD in common [#2263](https://github.com/openshift/cluster-network-operator/pull/2263)
* [OCPBUGS-29082](https://issues.redhat.com/browse/OCPBUGS-29082), [OCPBUGS-29150](https://issues.redhat.com/browse/OCPBUGS-29150): Remove libreswan rpm existence checks [#2255](https://github.com/openshift/cluster-network-operator/pull/2255)
* [OCPBUGS-28778](https://issues.redhat.com/browse/OCPBUGS-28778): add env var in whereabouts-reconciler daemonset [#2242](https://github.com/openshift/cluster-network-operator/pull/2242)
* [OCPBUGS-27421](https://issues.redhat.com/browse/OCPBUGS-27421): Only reconcile on Node updates with Label changes [#2212](https://github.com/openshift/cluster-network-operator/pull/2212)
* [OCPBUGS-27199](https://issues.redhat.com/browse/OCPBUGS-27199): Remove egressip write permissions from ovn-kubernetes-node [#2203](https://github.com/openshift/cluster-network-operator/pull/2203)
* [OCPBUGS-27174](https://issues.redhat.com/browse/OCPBUGS-27174): network node identity: tolarate all taints [#2202](https://github.com/openshift/cluster-network-operator/pull/2202)
* [NP-905](https://issues.redhat.com/browse/NP-905), [OCPBUGS-28902](https://issues.redhat.com/browse/OCPBUGS-28902): Bump openshift API [#2247](https://github.com/openshift/cluster-network-operator/pull/2247)
* [OCPBUGS-28904](https://issues.redhat.com/browse/OCPBUGS-28904): [release-4.15] Restrict live migration to standalone managed clusters [#2243](https://github.com/openshift/cluster-network-operator/pull/2243)
* NO-JIRA: add kyrtapz as reviewer and approver for release 4.15 [#2227](https://github.com/openshift/cluster-network-operator/pull/2227)
* [OCPBUGS-28214](https://issues.redhat.com/browse/OCPBUGS-28214): Not update migration conditions when any MCP is updating [#2223](https://github.com/openshift/cluster-network-operator/pull/2223)
* [OCPBUGS-27777](https://issues.redhat.com/browse/OCPBUGS-27777): Deploy CNO IPsec MC even if user already have one [#2215](https://github.com/openshift/cluster-network-operator/pull/2215)
* [OCPBUGS-25652](https://issues.redhat.com/browse/OCPBUGS-25652): fix whereabouts conformance test failures [#2168](https://github.com/openshift/cluster-network-operator/pull/2168)
* [OCPBUGS-27748](https://issues.redhat.com/browse/OCPBUGS-27748): [release-4.15] Add ConfigMap mount to the whereabouts-reconciler [#2214](https://github.com/openshift/cluster-network-operator/pull/2214)
* [OCPBUGS-27198](https://issues.redhat.com/browse/OCPBUGS-27198): [release-4.15] Update ovn-k managed control-plane RBAC [#2204](https://github.com/openshift/cluster-network-operator/pull/2204)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/0e8926147d3bfeb1750c31f5912b01083231cc70...f41dbd3ab6c426157b4d58e103f4148913edc531)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/fc57075824faa9ccb64f7f4d2cd381c204c48490)

* [OCPBUGS-29752](https://issues.redhat.com/browse/OCPBUGS-29752): [release-4.15][manual] backport performance profile owner reference ehnancements (#963) [#963](https://github.com/openshift/cluster-node-tuning-operator/pull/963)
* Render: Add MCSelector to missing default MCPs (#959) [#959](https://github.com/openshift/cluster-node-tuning-operator/pull/959)
* Add support to inject owner-ref argument to render command (#966) [#966](https://github.com/openshift/cluster-node-tuning-operator/pull/966)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): Mixed CPUs e2e tests (#952) [#952](https://github.com/openshift/cluster-node-tuning-operator/pull/952)
* [OCPBUGS-27227](https://issues.redhat.com/browse/OCPBUGS-27227): irqbalance: set banned cpus list to '0' (#953) [#953](https://github.com/openshift/cluster-node-tuning-operator/pull/953)
* [OCPBUGS-29396](https://issues.redhat.com/browse/OCPBUGS-29396): Labels for e2e testing  (#949) [#949](https://github.com/openshift/cluster-node-tuning-operator/pull/949)
* [OCPBUGS-29376](https://issues.redhat.com/browse/OCPBUGS-29376): e2e: cgroups: introduce cgroup package (#942) [#942](https://github.com/openshift/cluster-node-tuning-operator/pull/942)
* makefile: add target to trigger mixedcpus e2e test (#941) [#941](https://github.com/openshift/cluster-node-tuning-operator/pull/941)
* [OCPBUGS-27948](https://issues.redhat.com/browse/OCPBUGS-27948): Tuned rendering and MCP detection improvements (#928) [#928](https://github.com/openshift/cluster-node-tuning-operator/pull/928)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b4be0464700b4597bab8f7f083d116d357caa841...fc57075824faa9ccb64f7f4d2cd381c204c48490)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/74013916aadbe6a18ac06e93c0ff72e8735a9668)

* [OCPBUGS-27225](https://issues.redhat.com/browse/OCPBUGS-27225): Remove "include.release.openshift.io/ibm-cloud-managed:" annotation [#567](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/567)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/3a6fc9ccce56eda7d27156d35d6256e3de24dcb6...74013916aadbe6a18ac06e93c0ff72e8735a9668)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/f189a00839491e166cd0220afe11d35cdb844754)

* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART [#319](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/319)
* [OCPBUGS-28946](https://issues.redhat.com/browse/OCPBUGS-28946): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#327](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/327)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/e87e15acee1bbdbc1663aec1bda9517a876023f2...f189a00839491e166cd0220afe11d35cdb844754)


### [cluster-platform-operators-manager](https://github.com/openshift/platform-operators/tree/37a0a919b1032f7affa49b756eda4762d77751d5)

* [OCPBUGS-24077](https://issues.redhat.com/browse/OCPBUGS-24077): Updating ose-cluster-platform-operators-manager-container image to be consistent with ART [#104](https://github.com/openshift/platform-operators/pull/104)
* [Full changelog](https://github.com/openshift/platform-operators/compare/25dbb307143ea9576fc977f737c0331a9b8e879f...37a0a919b1032f7affa49b756eda4762d77751d5)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/d4dd84396472c5e974f0562046a6ad068b6f20f8)

* [SO-121](https://issues.redhat.com/browse/SO-121): Syncing the library for only S2i Samples for OCP 4.16 [#543](https://github.com/openshift/cluster-samples-operator/pull/543)
* Revert "SO-121: Resync Libray for 4.16" [#542](https://github.com/openshift/cluster-samples-operator/pull/542)
* [SO-121](https://issues.redhat.com/browse/SO-121): Resync Libray for 4.16 [#540](https://github.com/openshift/cluster-samples-operator/pull/540)
* [OCPBUGS-31303](https://issues.redhat.com/browse/OCPBUGS-31303): bump K8s version to 29.2 [#536](https://github.com/openshift/cluster-samples-operator/pull/536)
* [AUTH-482](https://issues.redhat.com/browse/AUTH-482): set required-scc for openshift workloads [#535](https://github.com/openshift/cluster-samples-operator/pull/535)
* [OCPBUGS-26992](https://issues.redhat.com/browse/OCPBUGS-26992): Align builder and base for Dockerfile.okd with Dockerfile [#531](https://github.com/openshift/cluster-samples-operator/pull/531)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#532](https://github.com/openshift/cluster-samples-operator/pull/532)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/cca2553c92fc00d3f143b1b5dd3d0912310ccc9a...d4dd84396472c5e974f0562046a6ad068b6f20f8)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/1a2443a7fe8a00597f8c19382fb8ce617943029c)

* [OCPBUGS-29370](https://issues.redhat.com/browse/OCPBUGS-29370): Update AWSCSIDriverConfigSpec fields validation to accept all curren [#461](https://github.com/openshift/cluster-storage-operator/pull/461)
* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Allow vSphere CSI driver to be disabled [#446](https://github.com/openshift/cluster-storage-operator/pull/446)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/2a80235ba78e865e5395ae606ad9e74cbfd0e82f...1a2443a7fe8a00597f8c19382fb8ce617943029c)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24)

* [OCPBUGS-29570](https://issues.redhat.com/browse/OCPBUGS-29570): Apply hypershift cluster-profile for ibm-cloud-managed [#54](https://github.com/openshift/cluster-update-keys/pull/54)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/8045f1bd025596a5d7a561428698accef2e8c0d1...c0641e083d1bbe7d6f78e7e0c98c6d56a8b89d24)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/705f11a24965df33c4c3ae69147c0215e2109208)

* [OCPBUGS-27359](https://issues.redhat.com/browse/OCPBUGS-27359): CO health: only track current in-progress upgrade start [#1023](https://github.com/openshift/cluster-version-operator/pull/1023)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/2454e67ec411273fa9cd464886d911fdca76d2a9...705f11a24965df33c4c3ae69147c0215e2109208)


### [console](https://github.com/openshift/console/tree/4f1e7cb5a0e28596e3fc93c7f966a77e832a88e6)

* [OCPBUGS-30275](https://issues.redhat.com/browse/OCPBUGS-30275): adjusting documentation links for 4.15 [#13648](https://github.com/openshift/console/pull/13648)
* [OCPBUGS-30870](https://issues.redhat.com/browse/OCPBUGS-30870): chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 [#13641](https://github.com/openshift/console/pull/13641)
* [OCPBUGS-25831](https://issues.redhat.com/browse/OCPBUGS-25831): Date&Time values are not showing as per browser default language [#13467](https://github.com/openshift/console/pull/13467)
* [OCPBUGS-29080](https://issues.redhat.com/browse/OCPBUGS-29080): make getGroupVersionKindForResource null safe [#13582](https://github.com/openshift/console/pull/13582)
* [OCPBUGS-29781](https://issues.redhat.com/browse/OCPBUGS-29781): Fix operands list endpoint. [#13633](https://github.com/openshift/console/pull/13633)
* [OCPBUGS-29812](https://issues.redhat.com/browse/OCPBUGS-29812): Changes to prevent yaml editor crash in version 4.15 [#13638](https://github.com/openshift/console/pull/13638)
* [OCPBUGS-29842](https://issues.redhat.com/browse/OCPBUGS-29842): Switch to service from external result route endpoint [#13627](https://github.com/openshift/console/pull/13627)
* [OCPBUGS-28889](https://issues.redhat.com/browse/OCPBUGS-28889): VolumeSnapshots data not displayed in PVC >  VolumeSnapshots tab [#13570](https://github.com/openshift/console/pull/13570)
* [OCPBUGS-27431](https://issues.redhat.com/browse/OCPBUGS-27431): Add source maps to production builds [#13526](https://github.com/openshift/console/pull/13526)
* [OCPBUGS-26481](https://issues.redhat.com/browse/OCPBUGS-26481): Tab VolumeSnapshots crashed on PVC page [#13490](https://github.com/openshift/console/pull/13490)
* [OCPBUGS-25984](https://issues.redhat.com/browse/OCPBUGS-25984): Fix config ini format [#13475](https://github.com/openshift/console/pull/13475)
* [OCPBUGS-29844](https://issues.redhat.com/browse/OCPBUGS-29844): Enable catalog source badge to truncate for long names [#13629](https://github.com/openshift/console/pull/13629)
* [OCPBUGS-29846](https://issues.redhat.com/browse/OCPBUGS-29846): Prevent complete page reload when changing perspective [#13631](https://github.com/openshift/console/pull/13631)
* [OCPBUGS-29845](https://issues.redhat.com/browse/OCPBUGS-29845): Page fails to return to the Secrets list after clicking 'Cancel' on any Secret creation page [#13630](https://github.com/openshift/console/pull/13630)
* [OCPBUGS-29843](https://issues.redhat.com/browse/OCPBUGS-29843): improve empty state message for Machines and MachineSets page [#13628](https://github.com/openshift/console/pull/13628)
* [OCPBUGS-29679](https://issues.redhat.com/browse/OCPBUGS-29679): TaskRuns list page is loading constantly for all projects [#13618](https://github.com/openshift/console/pull/13618)
* [OCPBUGS-29640](https://issues.redhat.com/browse/OCPBUGS-29640): Output image url link leads to 404 for Shipwright Builds [#13615](https://github.com/openshift/console/pull/13615)
* [OCPBUGS-28232](https://issues.redhat.com/browse/OCPBUGS-28232): do not deduplicate ImageManifestVulns in Overview popover [#13545](https://github.com/openshift/console/pull/13545)
* chore(i18n) OCPBUGS-28623: update translations: : Completed OCP-4.15/Master Branch/Sprint 244 [#13594](https://github.com/openshift/console/pull/13594)
* [OCPBUGS-26567](https://issues.redhat.com/browse/OCPBUGS-26567): Fixed some problems in topology Chinese translation text [#13498](https://github.com/openshift/console/pull/13498)
* [OCPBUGS-29914](https://issues.redhat.com/browse/OCPBUGS-29914): [release-4.15] Use selfsubjectreview API from frontend [#13636](https://github.com/openshift/console/pull/13636)
* [OCPBUGS-29345](https://issues.redhat.com/browse/OCPBUGS-29345): Any namespace after deletion is still visible on UI if it is the default selection in namespace dropdown [#13599](https://github.com/openshift/console/pull/13599)
* [OCPBUGS-29096](https://issues.redhat.com/browse/OCPBUGS-29096): Add TaskRun tab in PLR details page using plugin [#13584](https://github.com/openshift/console/pull/13584)
* [OCPBUGS-29217](https://issues.redhat.com/browse/OCPBUGS-29217): Revision tab and routes tab in serving details page showing no resource found [#13590](https://github.com/openshift/console/pull/13590)
* [OCPBUGS-26411](https://issues.redhat.com/browse/OCPBUGS-26411): Logs for PipelineRuns fetched from the Tekton Results API is not loading [#13486](https://github.com/openshift/console/pull/13486)
* [OCPBUGS-28537](https://issues.redhat.com/browse/OCPBUGS-28537): remove "openshift-storage" namespace usage from the console [#13548](https://github.com/openshift/console/pull/13548)
* [OCPBUGS-29283](https://issues.redhat.com/browse/OCPBUGS-29283): Error in displaying BuildRun logs in Console [#13595](https://github.com/openshift/console/pull/13595)
* [OCPBUGS-28917](https://issues.redhat.com/browse/OCPBUGS-28917): Optimize federation of shared PF5 code for dynamic plugins [#13566](https://github.com/openshift/console/pull/13566)
* [OCPBUGS-29022](https://issues.redhat.com/browse/OCPBUGS-29022): fix i18n for Remove volume modal [#13575](https://github.com/openshift/console/pull/13575)
* [OCPBUGS-28940](https://issues.redhat.com/browse/OCPBUGS-28940): AUTH-440: fix usersettings identifier creation [#13571](https://github.com/openshift/console/pull/13571)
* [OCPBUGS-27012](https://issues.redhat.com/browse/OCPBUGS-27012): update check for the 'provider' label on the PackageMa… [#13501](https://github.com/openshift/console/pull/13501)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): OIDC: refresh sessions with a refresh token if present [#13563](https://github.com/openshift/console/pull/13563)
* [OCPBUGS-28591](https://issues.redhat.com/browse/OCPBUGS-28591): Fixed bug with user feedback where inform the direction of RedHat was not showing up [#13551](https://github.com/openshift/console/pull/13551)
* [CONSOLE-3829](https://issues.redhat.com/browse/CONSOLE-3829), [OCPBUGS-27235](https://issues.redhat.com/browse/OCPBUGS-27235): backend: use the k8s SelfSubjectReview API to get info about a user [#13514](https://github.com/openshift/console/pull/13514)
* [OCPBUGS-27896](https://issues.redhat.com/browse/OCPBUGS-27896): Add flags checks to hide Pipeline static plugin List and details pages [#13536](https://github.com/openshift/console/pull/13536)
* [AUTH-440](https://issues.redhat.com/browse/AUTH-440): expand options for the OIDC authenticator [#13509](https://github.com/openshift/console/pull/13509)
* [OCPBUGS-27909](https://issues.redhat.com/browse/OCPBUGS-27909): fix bug where Expand PVC modal assumes pvc.spec.resou… [#13542](https://github.com/openshift/console/pull/13542)
* [OCPBUGS-26439](https://issues.redhat.com/browse/OCPBUGS-26439): Add support for custom segment domains (to load JS and make API calls) [#13489](https://github.com/openshift/console/pull/13489)
* [OCPBUGS-27177](https://issues.redhat.com/browse/OCPBUGS-27177): fix bug where Clone PVC modal assumes pvc.spec.resourc… [#13508](https://github.com/openshift/console/pull/13508)
* [OCPBUGS-27306](https://issues.redhat.com/browse/OCPBUGS-27306): Copy response code from proxied plugin requests [#13518](https://github.com/openshift/console/pull/13518)
* [Full changelog](https://github.com/openshift/console/compare/1a6615d61fb5e0299628ee8ff983f34f4fbf97be...4f1e7cb5a0e28596e3fc93c7f966a77e832a88e6)


### [console-operator](https://github.com/openshift/console-operator/tree/e9ec54b60ce943bace46ef7493452e2be3c39983)

* [OCPBUGS-27113](https://issues.redhat.com/browse/OCPBUGS-27113): Prevent healthcheck controller from Available=False blipping [#835](https://github.com/openshift/console-operator/pull/835)
* [OCPBUGS-29658](https://issues.redhat.com/browse/OCPBUGS-29658): oauthclients: further split oidc and integrated oauth handling [#870](https://github.com/openshift/console-operator/pull/870)
* always sync oidcClients in authn status if the field is present [#859](https://github.com/openshift/console-operator/pull/859)
* [OCPBUGS-29010](https://issues.redhat.com/browse/OCPBUGS-29010): oauthclients: fix oauthclients degraded condition that never gets removed [#856](https://github.com/openshift/console-operator/pull/856)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OAuthClients: only add `oidcClients` to authentication status if the field exists [#854](https://github.com/openshift/console-operator/pull/854)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): OIDC: setup the volume name properly when custom CA is configured [#853](https://github.com/openshift/console-operator/pull/853)
* [OCPBUGS-22681](https://issues.redhat.com/browse/OCPBUGS-22681): Bump documentationBaseURL to 4.15 [#807](https://github.com/openshift/console-operator/pull/807)
* [CONSOLE-3912](https://issues.redhat.com/browse/CONSOLE-3912): Add secrets for session encryption/authentication in OIDC [#852](https://github.com/openshift/console-operator/pull/852)
* pick of OCPBUGS-27221: make it impossible double set conditions in a single loop [#851](https://github.com/openshift/console-operator/pull/851)
* [OCPBUGS-27221](https://issues.redhat.com/browse/OCPBUGS-27221): Bump library-go to deal with GET conflict [#837](https://github.com/openshift/console-operator/pull/837)
* [Full changelog](https://github.com/openshift/console-operator/compare/f5c3f83cc2bc9325d135044eaa8c039189c36dee...e9ec54b60ce943bace46ef7493452e2be3c39983)


### [coredns](https://github.com/openshift/coredns/tree/22f950eae53fcba187c2303ac4f1a8305b6c1c8a)

* [OCPBUGS-27904](https://issues.redhat.com/browse/OCPBUGS-27904): UPSTREAM: 6277: openshift: Fix OCPBUGS-27904 [#110](https://github.com/openshift/coredns/pull/110)
* [Full changelog](https://github.com/openshift/coredns/compare/44797b00e47789c9a15960773806dccc1612fff7...22f950eae53fcba187c2303ac4f1a8305b6c1c8a)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/1bec5942cd0651a3c2f7114368591f334952ceda)

* Make sure we don't mask LB tests failures and fix what was failing (#2360) (#2537) [#2360](https://github.com/openshift/cloud-provider-openstack/pull/2360)
* Remove handling code for glog (#2534) [#2534](https://github.com/openshift/cloud-provider-openstack/pull/2534)
* Bump golangci-lint for go 1.22 (#2545) [#2545](https://github.com/openshift/cloud-provider-openstack/pull/2545)
* Delete LB that gone into ERROR state (#2536) [#2536](https://github.com/openshift/cloud-provider-openstack/pull/2536)
* Add ability to add Events by OCCM (#2539) [#2539](https://github.com/openshift/cloud-provider-openstack/pull/2539)
* Lookup ports by SG and not tags (#2355) (#2538) [#2355](https://github.com/openshift/cloud-provider-openstack/pull/2355)
* retry ubuntu image download on temp error (#2506) [#2506](https://github.com/openshift/cloud-provider-openstack/pull/2506)
* update k8s.io/kubernetes to v1.28.4 in go.mod (#2496) [#2496](https://github.com/openshift/cloud-provider-openstack/pull/2496)
* Implement imagePullSecret support for release 1.28 (#2445) [#2445](https://github.com/openshift/cloud-provider-openstack/pull/2445)
* fix: octavia tlsContainerRef validation for barbican secrets (#2458) [#2458](https://github.com/openshift/cloud-provider-openstack/pull/2458)
* Remove duplicate pflag.Parse calls (#2467) [#2467](https://github.com/openshift/cloud-provider-openstack/pull/2467)
* manage-security-groups: Only add SGs to LB members (#2455) (#2466) [#2455](https://github.com/openshift/cloud-provider-openstack/pull/2455)
* Use standard service account name in OCCM helm chart (#2447) [#2447](https://github.com/openshift/cloud-provider-openstack/pull/2447)
* 1.28.1 release (#2426) [#2426](https://github.com/openshift/cloud-provider-openstack/pull/2426)
* delete barbican secret after the LB deletetion (#2424) [#2424](https://github.com/openshift/cloud-provider-openstack/pull/2424)
* ensure octavia monitor is always updated (#2382) [#2382](https://github.com/openshift/cloud-provider-openstack/pull/2382)
* add `max_retries_down` support for octavia health monitors (#2379) [#2379](https://github.com/openshift/cloud-provider-openstack/pull/2379)
* Fix multiarch builds of Cinder CSI (#2342) [#2342](https://github.com/openshift/cloud-provider-openstack/pull/2342)
* update tags (#2336) [#2336](https://github.com/openshift/cloud-provider-openstack/pull/2336)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/e1a9f48173b0056dc96b62ef6b141ccc1838cebc...1bec5942cd0651a3c2f7114368591f334952ceda)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/260a085ae25606bba7a94cdfed88f67265905ba9)

* [OCPBUGS-28944](https://issues.redhat.com/browse/OCPBUGS-28944): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#166](https://github.com/openshift/csi-driver-shared-resource/pull/166)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/0b75c0afd6b3b94f19b6763d307fda358c68e522...260a085ae25606bba7a94cdfed88f67265905ba9)


### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/8d017b7f19f0226dfd4fc7933271939c550d180f)

* [OCPBUGS-28956](https://issues.redhat.com/browse/OCPBUGS-28956): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#102](https://github.com/openshift/csi-driver-shared-resource-operator/pull/102)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/e466c41d9439b1826c51ed8856e0428941eeaf35...8d017b7f19f0226dfd4fc7933271939c550d180f)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13)

* [OCPBUGS-29336](https://issues.redhat.com/browse/OCPBUGS-29336): cherry-pick:release-4.15: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#143](https://github.com/openshift/csi-external-snapshotter/pull/143)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/090cd57847b98aebe42ecd5091c3a626eb870022...50fa049ccaa48d7f7dcb165fb6e20c185a0cbd13)


### [docker-builder](https://github.com/openshift/builder/tree/630692db2a3a39369d3c772a2543d7f2ea198455)

* [OCPBUGS-28948](https://issues.redhat.com/browse/OCPBUGS-28948): Replace 'coreydaley' with 'sayan-biswas' [#378](https://github.com/openshift/builder/pull/378)
* [Full changelog](https://github.com/openshift/builder/compare/0c0a73b21b471a2194713fa2c19d40cdbff26fa5...630692db2a3a39369d3c772a2543d7f2ea198455)


### [docker-registry](https://github.com/openshift/image-registry/tree/340eda0bfc9a86254d7f0f37cd6a5320779ecf81)

* [OCPBUGS-29525](https://issues.redhat.com/browse/OCPBUGS-29525): bump docker-distribution to fix azure path issue [#393](https://github.com/openshift/image-registry/pull/393)
* [Full changelog](https://github.com/openshift/image-registry/compare/9c3215bd57d45f58f4178ead0041b71e545a1815...340eda0bfc9a86254d7f0f37cd6a5320779ecf81)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/fc80687e76e6d04444f20914f60915067b832e30)

* [CFE-684](https://issues.redhat.com/browse/CFE-684): Add user defined tags to the created gcp resource [#54](https://github.com/openshift/machine-api-provider-gcp/pull/54)
* [OCPBUGS-27866](https://issues.redhat.com/browse/OCPBUGS-27866): Update Snyk file to exclude other vendor folders [#81](https://github.com/openshift/machine-api-provider-gcp/pull/81)
* [OCPCLOUD-2427](https://issues.redhat.com/browse/OCPCLOUD-2427): Rebase k8s to 1.29 and update dependencies [#78](https://github.com/openshift/machine-api-provider-gcp/pull/78)
* [OCPBUGS-26128](https://issues.redhat.com/browse/OCPBUGS-26128): Add Snyk file to exclude vendor directory on scan [#77](https://github.com/openshift/machine-api-provider-gcp/pull/77)
* [OCPBUGS-25578](https://issues.redhat.com/browse/OCPBUGS-25578): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#75](https://github.com/openshift/machine-api-provider-gcp/pull/75)
* [OCPBUGS-24970](https://issues.redhat.com/browse/OCPBUGS-24970): Updating ose-machine-api-provider-gcp-container image to be consistent with ART [#73](https://github.com/openshift/machine-api-provider-gcp/pull/73)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/b15daaf5836910277b7154a006800505f018aa5a...fc80687e76e6d04444f20914f60915067b832e30)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/6e2789bbd5893851c8bc4423e0090cd71b64f436)

* [OCPBUGS-29661](https://issues.redhat.com/browse/OCPBUGS-29661): Bump to 1.28.7 [#1891](https://github.com/openshift/kubernetes/pull/1891)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): structuredAuthenticationConfig for kube 1.28-ish [#1884](https://github.com/openshift/kubernetes/pull/1884)
* [OCPBUGS-27343](https://issues.redhat.com/browse/OCPBUGS-27343): UPSTREAM: <carry>: Update management webhook pod admission logic [#1854](https://github.com/openshift/kubernetes/pull/1854)
* [OCPBUGS-28209](https://issues.redhat.com/browse/OCPBUGS-28209): UPSTREAM <carry>: use snyk file [#1873](https://github.com/openshift/kubernetes/pull/1873)
* [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1878](https://github.com/openshift/kubernetes/pull/1878)
* [OCPBUGS-27368](https://issues.redhat.com/browse/OCPBUGS-27368): Update to kubernetes 1.28.6 [#1857](https://github.com/openshift/kubernetes/pull/1857)
* [Full changelog](https://github.com/openshift/kubernetes/compare/c84a6b8ba1ed969f496f70d630aaa525c5ecd41a...6e2789bbd5893851c8bc4423e0090cd71b64f436)


### [hypershift](https://github.com/openshift/hypershift/tree/37ccc3d8f91a4797599fc0b0e2243e0529ecab7b)

* NO-JIRA: Update RHTAP references (release-4.15) [#3738](https://github.com/openshift/hypershift/pull/3738)
* [OCPBUGS-30581](https://issues.redhat.com/browse/OCPBUGS-30581): [release-4.15] OCPBUGS-30220: Align PSA labels on guest cluster namespaces with standalone OCP [#3684](https://github.com/openshift/hypershift/pull/3684)
* [OCPBUGS-30572](https://issues.redhat.com/browse/OCPBUGS-30572): [release-4.15] Update OLM Default Catalog Sources to 4.15 [#3696](https://github.com/openshift/hypershift/pull/3696)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3705](https://github.com/openshift/hypershift/pull/3705)
* [OCPBUGS-30189](https://issues.redhat.com/browse/OCPBUGS-30189): set Konnectivity cipher suites [#3673](https://github.com/openshift/hypershift/pull/3673)
* "[release-4.15] OCPBUGS-27500: Fix default release image lookup" [#3549](https://github.com/openshift/hypershift/pull/3549)
* [OCPBUGS-30284](https://issues.redhat.com/browse/OCPBUGS-30284): do not set KAS OAuthMetadataFile with Authentication type OIDC [#3694](https://github.com/openshift/hypershift/pull/3694)
* [OCPBUGS-30281](https://issues.redhat.com/browse/OCPBUGS-30281): [release-4.15] OCPBUGS-30102: Support to disable machine management components [#3670](https://github.com/openshift/hypershift/pull/3670)
* NO-JIRA: chore(deps): update rhtap references (release-4.15) [#3675](https://github.com/openshift/hypershift/pull/3675)
* Update RHTAP references (release-4.15) [#3645](https://github.com/openshift/hypershift/pull/3645)
* [HOSTEDCP-1405](https://issues.redhat.com/browse/HOSTEDCP-1405): Remove files not needed [#3669](https://github.com/openshift/hypershift/pull/3669)
* [CNV-36056](https://issues.redhat.com/browse/CNV-36056): Expose NodeSelector for KubeVirt VMs in NodePool [#3648](https://github.com/openshift/hypershift/pull/3648)
* [OCPBUGS-30088](https://issues.redhat.com/browse/OCPBUGS-30088): rollout kas on auth config change [#3653](https://github.com/openshift/hypershift/pull/3653)
* NO-JIRA: remove PrivateIngressController cleanup [#3646](https://github.com/openshift/hypershift/pull/3646)
* [OCPBUGS-29880](https://issues.redhat.com/browse/OCPBUGS-29880): feat(config): Default RevisionHistoryLimit to 2 for deployments [#3632](https://github.com/openshift/hypershift/pull/3632)
* [OCPBUGS-29025](https://issues.redhat.com/browse/OCPBUGS-29025): cpo: honor user provided oauthmetadata configmap passed in Authentication config [#3522](https://github.com/openshift/hypershift/pull/3522)
* [OCPBUGS-30029](https://issues.redhat.com/browse/OCPBUGS-30029): sync AuthenticationConfiguration type with o/k 1.28 carry [#3644](https://github.com/openshift/hypershift/pull/3644)
* NO-JIRA: Red Hat Konflux update hypershift-release-mce-25 [#3643](https://github.com/openshift/hypershift/pull/3643)
* NO-JIRA: Remove specific pull secret watch in HCCO [#3606](https://github.com/openshift/hypershift/pull/3606)
* [OCPBUGS-29850](https://issues.redhat.com/browse/OCPBUGS-29850): control-plane-pki-operator: fix CA used for SRE client credentials [#3626](https://github.com/openshift/hypershift/pull/3626)
* NO-JIRA: PDB backports [#3628](https://github.com/openshift/hypershift/pull/3628)
* [OCPBUGS-29780](https://issues.redhat.com/browse/OCPBUGS-29780): use 2040 for apiserver svc in IBM provider [#3595](https://github.com/openshift/hypershift/pull/3595)
* [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): Use structured authentication config [#3607](https://github.com/openshift/hypershift/pull/3607)
* [OCPBUGS-28543](https://issues.redhat.com/browse/OCPBUGS-28543): Include OperatorHubSpec sync with HC when Config is empty [#3480](https://github.com/openshift/hypershift/pull/3480)
* [OCPBUGS-29508](https://issues.redhat.com/browse/OCPBUGS-29508): Default NodeUpgradeType on day2 nodepool creation [#3582](https://github.com/openshift/hypershift/pull/3582)
* [MULTIARCH-4084](https://issues.redhat.com/browse/MULTIARCH-4084): Reduce the policy access scope to specific instance [#3529](https://github.com/openshift/hypershift/pull/3529)
* NO-JIRA: Approvers update [#3579](https://github.com/openshift/hypershift/pull/3579)
* [OCPBUGS-27149](https://issues.redhat.com/browse/OCPBUGS-27149): Add storage, csisnapshotcontroller and clustercsidrive… [#3421](https://github.com/openshift/hypershift/pull/3421)
* [OCPBUGS-29416](https://issues.redhat.com/browse/OCPBUGS-29416): hypershift-operator: don't create PKI rbac when disabled [#3565](https://github.com/openshift/hypershift/pull/3565)
* [OCPBUGS-29418](https://issues.redhat.com/browse/OCPBUGS-29418): control-plane-pki-operator: add a signer for SRE break-glass [#3566](https://github.com/openshift/hypershift/pull/3566)
* [OCPBUGS-29089](https://issues.redhat.com/browse/OCPBUGS-29089): Make ControllerAvailabilityPolicy immutable [#3533](https://github.com/openshift/hypershift/pull/3533)
* [OCPBUGS-29310](https://issues.redhat.com/browse/OCPBUGS-29310): control-plane-pki-operator: validate CN for CSR [#3558](https://github.com/openshift/hypershift/pull/3558)
* [OCPBUGS-29303](https://issues.redhat.com/browse/OCPBUGS-29303): release-4.15: revocation controller backport [#3532](https://github.com/openshift/hypershift/pull/3532)
* [OCPBUGS-29020](https://issues.redhat.com/browse/OCPBUGS-29020): reduce external-dns route53 call volume [#3521](https://github.com/openshift/hypershift/pull/3521)
* [OCPBUGS-29179](https://issues.redhat.com/browse/OCPBUGS-29179): [4.15] reflect NodePool replica count nil in status [#3473](https://github.com/openshift/hypershift/pull/3473)
* NO-JIRA: remove unneeded code to copy Authentication refs [#3537](https://github.com/openshift/hypershift/pull/3537)
* [OCPBUGS-29029](https://issues.redhat.com/browse/OCPBUGS-29029): Add ValidatingAdmissionPolicy to KAS config [#3523](https://github.com/openshift/hypershift/pull/3523)
* [OCPBUGS-28764](https://issues.redhat.com/browse/OCPBUGS-28764): node spread anti-affinity for HA HCP [#3495](https://github.com/openshift/hypershift/pull/3495)
* [OCPBUGS-28603](https://issues.redhat.com/browse/OCPBUGS-28603): Remove webhook validations that introduce resource ordering [#3515](https://github.com/openshift/hypershift/pull/3515)
* [OCPBUGS-28594](https://issues.redhat.com/browse/OCPBUGS-28594): backport API moves [#3482](https://github.com/openshift/hypershift/pull/3482)
* [HOSTEDCP-1272](https://issues.redhat.com/browse/HOSTEDCP-1272): Added CLI support to create DualStack clusters using default values [#3502](https://github.com/openshift/hypershift/pull/3502)
* [OCPBUGS-27818](https://issues.redhat.com/browse/OCPBUGS-27818): Add GC knobs for KAS [#3457](https://github.com/openshift/hypershift/pull/3457)
* [OCPBUGS-27103](https://issues.redhat.com/browse/OCPBUGS-27103): hcco: use manual mode for CCO [#3420](https://github.com/openshift/hypershift/pull/3420)
* NO-JIRA: kubevirt, e2e Add additional network test [#3499](https://github.com/openshift/hypershift/pull/3499)
* [CNV-37394](https://issues.redhat.com/browse/CNV-37394): Remove '--attach-default-network' from productized cli [#3500](https://github.com/openshift/hypershift/pull/3500)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): indicate cluster profile to render the correct manifests [#3465](https://github.com/openshift/hypershift/pull/3465)
* [OCPBUGS-28235](https://issues.redhat.com/browse/OCPBUGS-28235): Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. [#3467](https://github.com/openshift/hypershift/pull/3467)
* [OCPBUGS-27432](https://issues.redhat.com/browse/OCPBUGS-27432): consider HCP upgradeable if CVO has no upgradable condition [#3444](https://github.com/openshift/hypershift/pull/3444)
* [HOSTEDCP-1374](https://issues.redhat.com/browse/HOSTEDCP-1374): external OIDC: copy Authentication OIDC client secrets through to guest [#3393](https://github.com/openshift/hypershift/pull/3393)
* [OCPBUGS-27076](https://issues.redhat.com/browse/OCPBUGS-27076): availability-prober: wait for infrastructure name to be set [#3419](https://github.com/openshift/hypershift/pull/3419)
* [Full changelog](https://github.com/openshift/hypershift/compare/89d701ce338a4b3847bfb374856e5c8bbf3fe518...37ccc3d8f91a4797599fc0b0e2243e0529ecab7b)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/34fb625247f6743637b0ef0c5767e000e0ec1e65)

* [OCPBUGS-25507](https://issues.redhat.com/browse/OCPBUGS-25507): update golang.org/x/crypto module [#78](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/78)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/7c4b63bcc763c822155f3dc8f890792409d8d1cd...34fb625247f6743637b0ef0c5767e000e0ec1e65)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/1a3a3030afcbbc0a26e794050d300b818069ba16)

* [OCPBUGS-27872](https://issues.redhat.com/browse/OCPBUGS-27872): add an extra vendor exclude to snyk config [#36](https://github.com/openshift/machine-api-provider-ibmcloud/pull/36)
* [OCPBUGS-28965](https://issues.redhat.com/browse/OCPBUGS-28965): update textlogger usage [#35](https://github.com/openshift/machine-api-provider-ibmcloud/pull/35)
* [OCPCLOUD-2426](https://issues.redhat.com/browse/OCPCLOUD-2426): Update to k8s 1.29 [#34](https://github.com/openshift/machine-api-provider-ibmcloud/pull/34)
* [OCPBUGS-26134](https://issues.redhat.com/browse/OCPBUGS-26134): Add Snyk file to exclude vendor directory on scan [#33](https://github.com/openshift/machine-api-provider-ibmcloud/pull/33)
* [OCPBUGS-25574](https://issues.redhat.com/browse/OCPBUGS-25574): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#32](https://github.com/openshift/machine-api-provider-ibmcloud/pull/32)
* [OCPBUGS-24962](https://issues.redhat.com/browse/OCPBUGS-24962): Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART [#31](https://github.com/openshift/machine-api-provider-ibmcloud/pull/31)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/6b0b8ea7b16d407fd012ef134b1f9a65ed0bc3a1...1a3a3030afcbbc0a26e794050d300b818069ba16)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a6923466398b283a68b78fad9b1f2c5ccf9eaded)

* Add extra check in ids to bypass validations (#901) [#901](https://github.com/openshift/insights-operator/pull/901)
* gather etcd_server_slow metrics (#900) [#900](https://github.com/openshift/insights-operator/pull/900)
* [Full changelog](https://github.com/openshift/insights-operator/compare/ff5e3ff1e4af5368aa33ac90cb5f4b5ec4ba0f66...a6923466398b283a68b78fad9b1f2c5ccf9eaded)


### [installer-altinfra](https://github.com/openshift/installer/tree/8b54909ba5b125aa7c584f8f4cfc57f30a660123)

* [OCPBUGS-30854](https://issues.redhat.com/browse/OCPBUGS-30854): Power VS: Fix wait_for_workspace [#8159](https://github.com/openshift/installer/pull/8159)
* [OCPBUGS-29964](https://issues.redhat.com/browse/OCPBUGS-29964): fix Azure API SKU calls timing out [#8086](https://github.com/openshift/installer/pull/8086)
* [OCPBUGS-30792](https://issues.redhat.com/browse/OCPBUGS-30792): Enable deploy by Service ID on PowerVS [#8138](https://github.com/openshift/installer/pull/8138)
* [OCPBUGS-30577](https://issues.redhat.com/browse/OCPBUGS-30577): Authn with platform-services-go-sdk for PowerVS [#8118](https://github.com/openshift/installer/pull/8118)
* [OCPBUGS-30148](https://issues.redhat.com/browse/OCPBUGS-30148): fix "OpenShiftSDN deprecated" error message [#8094](https://github.com/openshift/installer/pull/8094)
* [OCPBUGS-30011](https://issues.redhat.com/browse/OCPBUGS-30011): PowerVS: remove IBM-Cloud/bluemix-go/api/account/accountv2 in 4.15 [#8076](https://github.com/openshift/installer/pull/8076)
* [OCPBUGS-29768](https://issues.redhat.com/browse/OCPBUGS-29768): Power VS: Add sleep to allow workspace to configure PER [#8052](https://github.com/openshift/installer/pull/8052)
* Bug OCPBUGS-29726: OpenStack: Fix dualstack with external load-balancer [#8050](https://github.com/openshift/installer/pull/8050)
* [OCPBUGS-29495](https://issues.redhat.com/browse/OCPBUGS-29495): gcp: better error msg when service accnt missing [#8024](https://github.com/openshift/installer/pull/8024)
* Bug OCPBUGS-29458: OpenStack: fix controlPlanePort validation [#8019](https://github.com/openshift/installer/pull/8019)
* [OCPBUGS-29236](https://issues.redhat.com/browse/OCPBUGS-29236): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7996](https://github.com/openshift/installer/pull/7996)
* [OCPBUGS-28841](https://issues.redhat.com/browse/OCPBUGS-28841): PowerVS: Add dal12 region [#7977](https://github.com/openshift/installer/pull/7977)
* [OCPBUGS-29955](https://issues.redhat.com/browse/OCPBUGS-29955): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8065](https://github.com/openshift/installer/pull/8065)
* [OCPBUGS-29585](https://issues.redhat.com/browse/OCPBUGS-29585): PowerVS: handle composite_instance [#8032](https://github.com/openshift/installer/pull/8032)
* [OCPBUGS-29620](https://issues.redhat.com/browse/OCPBUGS-29620): Power VS: Fix service instance list [#8035](https://github.com/openshift/installer/pull/8035)
* [OCPBUGS-29523](https://issues.redhat.com/browse/OCPBUGS-29523): Bump terraform-provider-ibm to v1.61.0 [#8026](https://github.com/openshift/installer/pull/8026)
* [OCPBUGS-29436](https://issues.redhat.com/browse/OCPBUGS-29436): PowerVS Fix next start search [#8013](https://github.com/openshift/installer/pull/8013)
* [OCPBUGS-29442](https://issues.redhat.com/browse/OCPBUGS-29442): update RHCOS 4.15 bootimage metadata to 415.92.202402130021-0 [#8016](https://github.com/openshift/installer/pull/8016)
* [OCPBUGS-29219](https://issues.redhat.com/browse/OCPBUGS-29219): GCP: Skip validation of public and private zones for terraform vars [#7994](https://github.com/openshift/installer/pull/7994)
* [OCPBUGS-29201](https://issues.redhat.com/browse/OCPBUGS-29201): Copy GCP manifests within MCO bootstrap to the correct location [#7993](https://github.com/openshift/installer/pull/7993)
* [OCPBUGS-28822](https://issues.redhat.com/browse/OCPBUGS-28822): aws-edge-zones preventing err before discovering [#7973](https://github.com/openshift/installer/pull/7973)
* [OCPBUGS-29117](https://issues.redhat.com/browse/OCPBUGS-29117): IBMCloud: Handle disk delete errors [#7984](https://github.com/openshift/installer/pull/7984)
* [OCPBUGS-26036](https://issues.redhat.com/browse/OCPBUGS-26036): ic: aws: add iam:TagInstanceProfile permission requirement [#7866](https://github.com/openshift/installer/pull/7866)
* [OCPBUGS-28779](https://issues.redhat.com/browse/OCPBUGS-28779): update tested Azure Arm64 instance type on 4.15 [#7971](https://github.com/openshift/installer/pull/7971)
* [OCPBUGS-28546](https://issues.redhat.com/browse/OCPBUGS-28546): [release-4.15] Bump containerd for vulnerability fix [#7957](https://github.com/openshift/installer/pull/7957)
* [OCPBUGS-27346](https://issues.redhat.com/browse/OCPBUGS-27346): Warn that FeatureSet is not supported [#7922](https://github.com/openshift/installer/pull/7922)
* [OCPBUGS-27417](https://issues.redhat.com/browse/OCPBUGS-27417): baremetal: gather all recently refactored services [#7928](https://github.com/openshift/installer/pull/7928)
* [OCPBUGS-27380](https://issues.redhat.com/browse/OCPBUGS-27380): set the --cluster-profile flag for openshift/api rendering [#7955](https://github.com/openshift/installer/pull/7955)
* [OCPBUGS-27894](https://issues.redhat.com/browse/OCPBUGS-27894): duplicate failure domains in CMPS [#7951](https://github.com/openshift/installer/pull/7951)
* [OCPBUGS-27329](https://issues.redhat.com/browse/OCPBUGS-27329): remove retired serial NCv2 from azure tested instance type list on x86 [#7921](https://github.com/openshift/installer/pull/7921)
* [OCPBUGS-27850](https://issues.redhat.com/browse/OCPBUGS-27850): PowerVS: COS region configurable [#7948](https://github.com/openshift/installer/pull/7948)
* [OCPBUGS-27814](https://issues.redhat.com/browse/OCPBUGS-27814): [release-4.15] CORS-2950: Remove openshift-sdn as an install-time option [#7935](https://github.com/openshift/installer/pull/7935)
* [OCPBUGS-25251](https://issues.redhat.com/browse/OCPBUGS-25251): Changed OKD/FCOS workaround to also support Agent-based Installer [#7830](https://github.com/openshift/installer/pull/7830)
* [OCPBUGS-27299](https://issues.redhat.com/browse/OCPBUGS-27299): Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones [#7913](https://github.com/openshift/installer/pull/7913)
* [OCPBUGS-26515](https://issues.redhat.com/browse/OCPBUGS-26515): preserve category name when trying to find tag category [#7885](https://github.com/openshift/installer/pull/7885)
* [OCPBUGS-27311](https://issues.redhat.com/browse/OCPBUGS-27311): Fix depreciated typo [#7912](https://github.com/openshift/installer/pull/7912)
* [Full changelog](https://github.com/openshift/installer/compare/7acbb6beccdc0a182898a2b09619e263374e0882...8b54909ba5b125aa7c584f8f4cfc57f30a660123)


### [installer-artifacts](https://github.com/openshift/installer/tree/c94bdb3ab706e3d6dccc357a69fd8f67cb7d37a5)

* [OCPBUGS-32306](https://issues.redhat.com/browse/OCPBUGS-32306): GCP Destroy find regional and global addresses [#8275](https://github.com/openshift/installer/pull/8275)
* [OCPBUGS-32517](https://issues.redhat.com/browse/OCPBUGS-32517): Ensure worker BMH's get unpaused [#8299](https://github.com/openshift/installer/pull/8299)
* [OCPBUGS-32591](https://issues.redhat.com/browse/OCPBUGS-32591): GCP Destroy target pools fix misleading log [#8298](https://github.com/openshift/installer/pull/8298)
* [CORS-3260](https://issues.redhat.com/browse/CORS-3260): CAPI: Create GCP Internal LB [#8151](https://github.com/openshift/installer/pull/8151)
* [OCPBUGS-15845](https://issues.redhat.com/browse/OCPBUGS-15845): Check host for compatibility with target cluster config [#7566](https://github.com/openshift/installer/pull/7566)
* no-jira: bump golangci lint to 1.54.2 [#8291](https://github.com/openshift/installer/pull/8291)
* [OCPBUGS-32425](https://issues.redhat.com/browse/OCPBUGS-32425): Test for the presence of "provisioned" server [#8289](https://github.com/openshift/installer/pull/8289)
* [SPLAT-1585](https://issues.redhat.com/browse/SPLAT-1585): capv - allow no auth to vcenter [#8276](https://github.com/openshift/installer/pull/8276)
* [SPLAT-1208](https://issues.redhat.com/browse/SPLAT-1208): replace UPI terraform with powercli [#7699](https://github.com/openshift/installer/pull/7699)
* [OCPBUGS-29765](https://issues.redhat.com/browse/OCPBUGS-29765): Fills CIS or DNS CRN in Metadata, never both [#8057](https://github.com/openshift/installer/pull/8057)
* [OCPBUGS-32042](https://issues.redhat.com/browse/OCPBUGS-32042): fix usage of addtionalTrustBundle field [#8253](https://github.com/openshift/installer/pull/8253)
* [METAL-872](https://issues.redhat.com/browse/METAL-872): Remove terraform libvirt provider [#8160](https://github.com/openshift/installer/pull/8160)
* [MULTIARCH-4549](https://issues.redhat.com/browse/MULTIARCH-4549): Logic for creating private DNS records for PowerVS CAPI [#8246](https://github.com/openshift/installer/pull/8246)
* [OCPSTRAT-915](https://issues.redhat.com/browse/OCPSTRAT-915): Nutanix capi support [#8211](https://github.com/openshift/installer/pull/8211)
* [OCPBUGS-32133](https://issues.redhat.com/browse/OCPBUGS-32133): GCP: Fixing GCP Bootstraping [#8248](https://github.com/openshift/installer/pull/8248)
* [METAL-939](https://issues.redhat.com/browse/METAL-939): baremetal: monitor bootstrap process [#8181](https://github.com/openshift/installer/pull/8181)
* no-jira: gather: replace deprecated errors package [#8280](https://github.com/openshift/installer/pull/8280)
* no-jira:  azure: Update capz version to 1.14.2 [#8268](https://github.com/openshift/installer/pull/8268)
* [OCPBUGS-31017](https://issues.redhat.com/browse/OCPBUGS-31017): aws: add `ec2:DisassociateAddress` permission [#8247](https://github.com/openshift/installer/pull/8247)
* [OCPBUGS-31563](https://issues.redhat.com/browse/OCPBUGS-31563): sdk/aws: add ssh security group rule for compute [#8229](https://github.com/openshift/installer/pull/8229)
* [MULTIARCH-4550](https://issues.redhat.com/browse/MULTIARCH-4550): Power VS: Use a custom resolver when publish strategy is Internal [#8243](https://github.com/openshift/installer/pull/8243)
* [MULTIARCH-2678](https://issues.redhat.com/browse/MULTIARCH-2678), [OCPBUGS-14478](https://issues.redhat.com/browse/OCPBUGS-14478): Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x [#8205](https://github.com/openshift/installer/pull/8205)
* [CORS-3050](https://issues.redhat.com/browse/CORS-3050): capi/aws: copy AMI to target region, if needed [#8157](https://github.com/openshift/installer/pull/8157)
* [SPLAT-1592](https://issues.redhat.com/browse/SPLAT-1592): bump capv to v1.9.3 [#8267](https://github.com/openshift/installer/pull/8267)
* [OCPBUGS-30774](https://issues.redhat.com/browse/OCPBUGS-30774): always save serial logs if they were gathered [#8263](https://github.com/openshift/installer/pull/8263)
* [CORS-3261](https://issues.redhat.com/browse/CORS-3261): GCP cluster api add disk encryption [#8222](https://github.com/openshift/installer/pull/8222)
* [CORS-3419](https://issues.redhat.com/browse/CORS-3419), [OCPBUGS-30941](https://issues.redhat.com/browse/OCPBUGS-30941): Include baremetal IPI in openshift-installer [#8161](https://github.com/openshift/installer/pull/8161)
* no-jira: PowerVS: Open port 10258 [#8261](https://github.com/openshift/installer/pull/8261)
* [OCPBUGS-31711](https://issues.redhat.com/browse/OCPBUGS-31711): AWS update explain docs [#8258](https://github.com/openshift/installer/pull/8258)
* [OCPBUGS-27965](https://issues.redhat.com/browse/OCPBUGS-27965): escape '%' in proxy settings [#8265](https://github.com/openshift/installer/pull/8265)
* [OCPBUGS-32174](https://issues.redhat.com/browse/OCPBUGS-32174): save correct bootstrap public IP [#8264](https://github.com/openshift/installer/pull/8264)
* [CORS-3420](https://issues.redhat.com/browse/CORS-3420): Remove libvirt platform from openshift-baremetal-install [#8244](https://github.com/openshift/installer/pull/8244)
* no-jira: capi: replace deprecated `--metrics-bind-addr` arg [#8251](https://github.com/openshift/installer/pull/8251)
* [CORS-3436](https://issues.redhat.com/browse/CORS-3436): capi: save log output to file [#8218](https://github.com/openshift/installer/pull/8218)
* no-jira: PowerVS: Add destroy Power Server subnets [#8260](https://github.com/openshift/installer/pull/8260)
* [OCPBUGS-32091](https://issues.redhat.com/browse/OCPBUGS-32091): Add Top-level Context for Create Commands [#8063](https://github.com/openshift/installer/pull/8063)
* [CORS-3063](https://issues.redhat.com/browse/CORS-3063): Support control plane disk encryption [#8124](https://github.com/openshift/installer/pull/8124)
* [CORS-3269](https://issues.redhat.com/browse/CORS-3269): Azure CAPI Ignite Bootstrap [#8255](https://github.com/openshift/installer/pull/8255)
* no-jira: PowerVS: add AddIPToLoadBalancerPool [#8257](https://github.com/openshift/installer/pull/8257)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump API version to promote vSphereStaticIPs from TechPreview. [#7943](https://github.com/openshift/installer/pull/7943)
* no-jira: capi/aws: bump controller log level to debug [#8252](https://github.com/openshift/installer/pull/8252)
* [CORS-3254](https://issues.redhat.com/browse/CORS-3254): Update google.golang.org/api/cloudresourcemanager library version [#8213](https://github.com/openshift/installer/pull/8213)
* [MULTIARCH-4111](https://issues.redhat.com/browse/MULTIARCH-4111): Update the CI image with virt-install [#8259](https://github.com/openshift/installer/pull/8259)
* [CORS-3218](https://issues.redhat.com/browse/CORS-3218): GCP Remove the use case of users passing contents for json secret data [#8234](https://github.com/openshift/installer/pull/8234)
* [OCPBUGS-27844](https://issues.redhat.com/browse/OCPBUGS-27844): Fix task for attaching IPv6 subnet to router. [#8087](https://github.com/openshift/installer/pull/8087)
* [CORS-3270](https://issues.redhat.com/browse/CORS-3270): azure: tag installer-created LB resources [#8236](https://github.com/openshift/installer/pull/8236)
* [OCPBUGS-31813](https://issues.redhat.com/browse/OCPBUGS-31813): AWS: bump CCO for permission fix [#8233](https://github.com/openshift/installer/pull/8233)
* [CORS-3289](https://issues.redhat.com/browse/CORS-3289), [CORS-3308](https://issues.redhat.com/browse/CORS-3308), [CORS-3426](https://issues.redhat.com/browse/CORS-3426): Bump CAPA provider for various fixes [#8232](https://github.com/openshift/installer/pull/8232)
* [OCPBUGS-32041](https://issues.redhat.com/browse/OCPBUGS-32041): update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 [#8256](https://github.com/openshift/installer/pull/8256)
* no-jira: docs: Fix typos [#8245](https://github.com/openshift/installer/pull/8245)
* no-jira:PowerVS: Wait for IPs [#8239](https://github.com/openshift/installer/pull/8239)
* [CORS-3075](https://issues.redhat.com/browse/CORS-3075): Allow for installation in existing resource group [#8123](https://github.com/openshift/installer/pull/8123)
* [CORS-3446](https://issues.redhat.com/browse/CORS-3446): Add instructions for obtaining correct binary [#8230](https://github.com/openshift/installer/pull/8230)
* [AGENT-858](https://issues.redhat.com/browse/AGENT-858): Agent day2 ignition services [#8093](https://github.com/openshift/installer/pull/8093)
* [CORS-3418](https://issues.redhat.com/browse/CORS-3418): images: move installer images to static builds [#8215](https://github.com/openshift/installer/pull/8215)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capi/aws: support ignition proxy and CA bundle [#8170](https://github.com/openshift/installer/pull/8170)
* [OSASINFRA-3365](https://issues.redhat.com/browse/OSASINFRA-3365): clusterapi: Add worker asset to PreProvision [#8237](https://github.com/openshift/installer/pull/8237)
* [HIVE-2476](https://issues.redhat.com/browse/HIVE-2476): OpenStack.MachineSets(): Allow nil Replicas [#8227](https://github.com/openshift/installer/pull/8227)
* [CORS-3195](https://issues.redhat.com/browse/CORS-3195): Azure CAPI Supplemental Load Balancers [#8115](https://github.com/openshift/installer/pull/8115)
* no-jira: PowerVS: Set VPC service region [#8217](https://github.com/openshift/installer/pull/8217)
* [OCPBUGS-12890](https://issues.redhat.com/browse/OCPBUGS-12890): Create bucket, signed url and use proxy info for installs [#8056](https://github.com/openshift/installer/pull/8056)
* no-jira: PowerVS: Fix COS region and VPC subnets [#8219](https://github.com/openshift/installer/pull/8219)
* [OCPBUGS-31546](https://issues.redhat.com/browse/OCPBUGS-31546): azure: use filter when listing SKUs [#8134](https://github.com/openshift/installer/pull/8134)
* [CORS-3245](https://issues.redhat.com/browse/CORS-3245): Azure CAPI rhcos image [#8018](https://github.com/openshift/installer/pull/8018)
* [AGENT-874](https://issues.redhat.com/browse/AGENT-874): use AddNodesConfig asset [#8080](https://github.com/openshift/installer/pull/8080)
* no-jira: this clusterprofile isn't actually used [#8214](https://github.com/openshift/installer/pull/8214)
* no-jira: pkg/asset/machines: remove static ip log lines [#8190](https://github.com/openshift/installer/pull/8190)
* [CORS-2895](https://issues.redhat.com/browse/CORS-2895): aws/capi: setting zones to when creating cluster [#8156](https://github.com/openshift/installer/pull/8156)
* [CORS-3071](https://issues.redhat.com/browse/CORS-3071): Create DNS entries for CAPZ implementation [#8045](https://github.com/openshift/installer/pull/8045)
* no-jira: PowerVS: Fix CAPI created service instance case [#8212](https://github.com/openshift/installer/pull/8212)
* [AGENT-857](https://issues.redhat.com/browse/AGENT-857): Agent day2 use clusterinfo [#8009](https://github.com/openshift/installer/pull/8009)
* [CORS-3431](https://issues.redhat.com/browse/CORS-3431): CAPI: Add firewall rule for worker nodes [#8200](https://github.com/openshift/installer/pull/8200)
* [OSASINFRA-3421](https://issues.redhat.com/browse/OSASINFRA-3421): OpenStack: Customizable clientOpts for CheckNetworkEx… [#8209](https://github.com/openshift/installer/pull/8209)
* no-jira: infra: aws: move SDK provisioner to its own dir [#8194](https://github.com/openshift/installer/pull/8194)
* [AGENT-868](https://issues.redhat.com/browse/AGENT-868): Generate ECDSA public private keys and pass it to assisted service [#8105](https://github.com/openshift/installer/pull/8105)
* [MULTIARCH-4096](https://issues.redhat.com/browse/MULTIARCH-4096): PowerVS: Generate the cluster assets [#8116](https://github.com/openshift/installer/pull/8116)
* [CORS-2901](https://issues.redhat.com/browse/CORS-2901), [CORS-3428](https://issues.redhat.com/browse/CORS-3428): pkg/types/aws: limit additionalSecurityGroups to 10 [#8184](https://github.com/openshift/installer/pull/8184)
* [OCPBUGS-27848](https://issues.redhat.com/browse/OCPBUGS-27848): If host is offline or disconnected don't check ver [#8206](https://github.com/openshift/installer/pull/8206)
* [METAL-855](https://issues.redhat.com/browse/METAL-855): baremetal: remove ironic-inspector [#8128](https://github.com/openshift/installer/pull/8128)
* [CORS-3280](https://issues.redhat.com/browse/CORS-3280): Bump cluster-api-provider-gcp to v1.6.0 [#8153](https://github.com/openshift/installer/pull/8153)
* [OSASINFRA-3420](https://issues.redhat.com/browse/OSASINFRA-3420): openstack: Decouple OpenStack API calls from Machine generation [#8187](https://github.com/openshift/installer/pull/8187)
* [CORS-2898](https://issues.redhat.com/browse/CORS-2898): capi/aws: configure IMDS [#8152](https://github.com/openshift/installer/pull/8152)
* [CORS-2905](https://issues.redhat.com/browse/CORS-2905): capi/aws: destroy CAPA resources [#8179](https://github.com/openshift/installer/pull/8179)
* no-jira: capi/aws: reuse GenerateMachines for bootstrap [#8193](https://github.com/openshift/installer/pull/8193)
* [OCPBUGS-31209](https://issues.redhat.com/browse/OCPBUGS-31209): CAPG - Fix setting ServiceAccount role bindings for GCP [#8192](https://github.com/openshift/installer/pull/8192)
* [OCPBUGS-31050](https://issues.redhat.com/browse/OCPBUGS-31050): openstack: Honour worker server group policy [#8180](https://github.com/openshift/installer/pull/8180)
* [OCPBUGS-26052](https://issues.redhat.com/browse/OCPBUGS-26052): aws: altinfra: fix role creation in C2S [#7871](https://github.com/openshift/installer/pull/7871)
* [OCPBUGS-15941](https://issues.redhat.com/browse/OCPBUGS-15941): ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES [#7349](https://github.com/openshift/installer/pull/7349)
* [CORS-3256](https://issues.redhat.com/browse/CORS-3256): GCP destroy updates for CAPG [#8113](https://github.com/openshift/installer/pull/8113)
* Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic [#8195](https://github.com/openshift/installer/pull/8195)
* [OCPBUGS-30882](https://issues.redhat.com/browse/OCPBUGS-30882): GCP capg distribute instances across zones [#8176](https://github.com/openshift/installer/pull/8176)
* [CORS-3142](https://issues.redhat.com/browse/CORS-3142): capi: write manifests to disk during create manifests [#8166](https://github.com/openshift/installer/pull/8166)
* [OCPBUGS-28870](https://issues.redhat.com/browse/OCPBUGS-28870): IBMCloud: Restrict CIS and DNS Service lookup [#7987](https://github.com/openshift/installer/pull/7987)
* [OCPBUGS-31013](https://issues.redhat.com/browse/OCPBUGS-31013): Fix vsi image missing [#8177](https://github.com/openshift/installer/pull/8177)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#8099](https://github.com/openshift/installer/pull/8099)
* [CORS-2894](https://issues.redhat.com/browse/CORS-2894), [CORS-3051](https://issues.redhat.com/browse/CORS-3051): Create DNS resources and PHZ for CAPI/aws [#8142](https://github.com/openshift/installer/pull/8142)
* [CORS-3417](https://issues.redhat.com/browse/CORS-3417): capa bump fallout [#8169](https://github.com/openshift/installer/pull/8169)
* [CORS-3307](https://issues.redhat.com/browse/CORS-3307): add 'A2' as tested machine types on GCP [#8148](https://github.com/openshift/installer/pull/8148)
* [CORS-2902](https://issues.redhat.com/browse/CORS-2902): capi/aws: add ext-LB as CAPA secondary LB [#8149](https://github.com/openshift/installer/pull/8149)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Tweak GCPCluster  Failure Domain Logic [#8017](https://github.com/openshift/installer/pull/8017)
* [CORS-3215](https://issues.redhat.com/browse/CORS-3215): capi: implement bootstrap gather [#8036](https://github.com/openshift/installer/pull/8036)
* NO-JIRA: OWNERS: pkg/infrastructure/openstack [#8165](https://github.com/openshift/installer/pull/8165)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for vSphere and Baremetal [#8101](https://github.com/openshift/installer/pull/8101)
* no-jira: Power VS: Fix comment on default for wait_for_workspace [#8158](https://github.com/openshift/installer/pull/8158)
* [OPNET-476](https://issues.redhat.com/browse/OPNET-476): GA Load balancer feature for Nutanix [#8102](https://github.com/openshift/installer/pull/8102)
* [CORS-3303](https://issues.redhat.com/browse/CORS-3303): GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region [#8132](https://github.com/openshift/installer/pull/8132)
* [SPLAT-1390](https://issues.redhat.com/browse/SPLAT-1390): remove feature gate for vSphere control plane machinesets [#7908](https://github.com/openshift/installer/pull/7908)
* [CORS-2892](https://issues.redhat.com/browse/CORS-2892): capi/aws: add user tags to CAPA cluster [#8150](https://github.com/openshift/installer/pull/8150)
* [OCPBUGS-30836](https://issues.redhat.com/browse/OCPBUGS-30836): Power VS: Fix wait_for_workspace [#8145](https://github.com/openshift/installer/pull/8145)
* [OCPBUGS-25462](https://issues.redhat.com/browse/OCPBUGS-25462): Validate control plane replicas [#8082](https://github.com/openshift/installer/pull/8082)
* [OCPBUGS-30642](https://issues.redhat.com/browse/OCPBUGS-30642): pin google oauth2 version [#8133](https://github.com/openshift/installer/pull/8133)
* [OCPBUGS-30600](https://issues.redhat.com/browse/OCPBUGS-30600): update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 [#8121](https://github.com/openshift/installer/pull/8121)
* [CORS-3257](https://issues.redhat.com/browse/CORS-3257): Create GCP ServiceAccounts and assign to machines [#8066](https://github.com/openshift/installer/pull/8066)
* [OCPBUGS-15861](https://issues.redhat.com/browse/OCPBUGS-15861): Use a static pure-go libvirt library [#7252](https://github.com/openshift/installer/pull/7252)
* [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437), [OCPBUGS-30547](https://issues.redhat.com/browse/OCPBUGS-30547): Run kubelet directly [#8131](https://github.com/openshift/installer/pull/8131)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: remove ironic tf files [#8117](https://github.com/openshift/installer/pull/8117)
* [OCPBUGS-30641](https://issues.redhat.com/browse/OCPBUGS-30641): Enable deploy by Service ID on PowerVS [#8111](https://github.com/openshift/installer/pull/8111)
* [CORS-3288](https://issues.redhat.com/browse/CORS-3288): bump CAPA for LB scheme fix [#8114](https://github.com/openshift/installer/pull/8114)
* no-jira:  machines/aws: fix subnet filter comment [#8120](https://github.com/openshift/installer/pull/8120)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): baremetal: bootstrap: rename master label [#8107](https://github.com/openshift/installer/pull/8107)
* [OCPBUGS-29388](https://issues.redhat.com/browse/OCPBUGS-29388): upi: aws: fix typo in worker templates [#8112](https://github.com/openshift/installer/pull/8112)
* [OSASINFRA-3362](https://issues.redhat.com/browse/OSASINFRA-3362): Fix CAPI bootstrap deletion [#8104](https://github.com/openshift/installer/pull/8104)
* [OCPBUGS-24415](https://issues.redhat.com/browse/OCPBUGS-24415), [OCPVE-661](https://issues.redhat.com/browse/OCPVE-661): bump openshift/api version [#7546](https://github.com/openshift/installer/pull/7546)
* [MULTIARCH-4095](https://issues.redhat.com/browse/MULTIARCH-4095): Generate PowerVS machine manifests for CAPI [#8020](https://github.com/openshift/installer/pull/8020)
* [CORS-2900](https://issues.redhat.com/browse/CORS-2900): CAPI AWS IAM [#8031](https://github.com/openshift/installer/pull/8031)
* [OCPBUGS-30200](https://issues.redhat.com/browse/OCPBUGS-30200): Authn with platform-services-go-sdk for PowerVS [#8025](https://github.com/openshift/installer/pull/8025)
* [CORS-3281](https://issues.redhat.com/browse/CORS-3281): IBMCloud: initial CAPI infrastructure [#8090](https://github.com/openshift/installer/pull/8090)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): Bump CAPA Dependencies for Secondary Load Balancers [#8088](https://github.com/openshift/installer/pull/8088)
* [SPLAT-1460](https://issues.redhat.com/browse/SPLAT-1460): Make vSphere default ResourcePool formatting not contain double slash. [#8044](https://github.com/openshift/installer/pull/8044)
* [CORS-3212](https://issues.redhat.com/browse/CORS-3212): CAPG Add ignition for CAPG machines [#8027](https://github.com/openshift/installer/pull/8027)
* [METAL-871](https://issues.redhat.com/browse/METAL-871): Remove terraform-provider-ironic [#7649](https://github.com/openshift/installer/pull/7649)
* [SPLAT-1468](https://issues.redhat.com/browse/SPLAT-1468): Added log message for import vsphere ova progress during CAPI install. [#8097](https://github.com/openshift/installer/pull/8097)
* no-jira: capi: aws: report all conflicting user tags at once [#8085](https://github.com/openshift/installer/pull/8085)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out - part 2 [#8070](https://github.com/openshift/installer/pull/8070)
* [SPLAT-1423](https://issues.redhat.com/browse/SPLAT-1423): Added static ip support to CAPI installer. [#8081](https://github.com/openshift/installer/pull/8081)
* [MULTIARCH-4159](https://issues.redhat.com/browse/MULTIARCH-4159): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8098](https://github.com/openshift/installer/pull/8098)
* [OCPBUGS-30058](https://issues.redhat.com/browse/OCPBUGS-30058): GCP: The CAPG bootstrap machine IP should be set according to the publish strategy [#8079](https://github.com/openshift/installer/pull/8079)
* [OCPBUGS-30057](https://issues.redhat.com/browse/OCPBUGS-30057): Don't auto create subnets for CAPG [#8083](https://github.com/openshift/installer/pull/8083)
* [MULTIARCH-4153](https://issues.redhat.com/browse/MULTIARCH-4153): Incorporating Eltorito Boot Loader fix for Agent [#8069](https://github.com/openshift/installer/pull/8069)
* no-jira: Missing permission from vsphere docs [#7789](https://github.com/openshift/installer/pull/7789)
* [OCPBUGS-30135](https://issues.redhat.com/browse/OCPBUGS-30135): fix "OpenShiftSDN deprecated" error message [#8092](https://github.com/openshift/installer/pull/8092)
* [CORS-3274](https://issues.redhat.com/browse/CORS-3274): GCP: add africa-south1 region to the survey as supported region [#8055](https://github.com/openshift/installer/pull/8055)
* [CORS-3251](https://issues.redhat.com/browse/CORS-3251): Create capz machine manifests [#7969](https://github.com/openshift/installer/pull/7969)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP CAPI Infra: auth with service account [#8077](https://github.com/openshift/installer/pull/8077)
* [CFE-857](https://issues.redhat.com/browse/CFE-857): Apply user defined tags on created gcp resources [#7279](https://github.com/openshift/installer/pull/7279)
* [AGENT-853](https://issues.redhat.com/browse/AGENT-853): Add ClusterInfo asset [#7997](https://github.com/openshift/installer/pull/7997)
* [SPLAT-1173](https://issues.redhat.com/browse/SPLAT-1173): Enhance vSphere Installer to use IPAddressClaims for static IP [#7501](https://github.com/openshift/installer/pull/7501)
* [CORS-3273](https://issues.redhat.com/browse/CORS-3273): capi system: don't log env vars [#8084](https://github.com/openshift/installer/pull/8084)
* [OCPBUGS-29860](https://issues.redhat.com/browse/OCPBUGS-29860): double looping of failuredomains breaks zonal [#8059](https://github.com/openshift/installer/pull/8059)
* no-jira: Remove v1alpha3 [#8061](https://github.com/openshift/installer/pull/8061)
* [OCPBUGS-30005](https://issues.redhat.com/browse/OCPBUGS-30005): remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 [#8072](https://github.com/openshift/installer/pull/8072)
* [OSASINFRA-3363](https://issues.redhat.com/browse/OSASINFRA-3363): ShiftStack CAPO integration [#7939](https://github.com/openshift/installer/pull/7939)
* [MULTIARCH-4158](https://issues.redhat.com/browse/MULTIARCH-4158): pkg/infrastructure/powervs: add initial CAPI provider [#8060](https://github.com/openshift/installer/pull/8060)
* [OCPBUGS-29469](https://issues.redhat.com/browse/OCPBUGS-29469): fix Azure API SKU calls timing out [#8046](https://github.com/openshift/installer/pull/8046)
* [SPLAT-1459](https://issues.redhat.com/browse/SPLAT-1459): capv machines only full clone [#8042](https://github.com/openshift/installer/pull/8042)
* [OCPBUGS-29895](https://issues.redhat.com/browse/OCPBUGS-29895): PowerVS: Add debugging to ServiceInstanceNameToGUID [#8058](https://github.com/openshift/installer/pull/8058)
* [SPLAT-1434](https://issues.redhat.com/browse/SPLAT-1434): aws: add support of BYO public ipv4 pool [#7983](https://github.com/openshift/installer/pull/7983)
* no-jira: images: libvirt: add oc to libvirt CI image [#8008](https://github.com/openshift/installer/pull/8008)
* [SPLAT-1465](https://issues.redhat.com/browse/SPLAT-1465): capv - add additional extra configs [#8054](https://github.com/openshift/installer/pull/8054)
* [SPLAT-1462](https://issues.redhat.com/browse/SPLAT-1462): capv - Remove unneeded auth env vars [#8053](https://github.com/openshift/installer/pull/8053)
* [OCPBUGS-29429](https://issues.redhat.com/browse/OCPBUGS-29429): feat: add check for SNO bootstrap condition [#8004](https://github.com/openshift/installer/pull/8004)
* Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer [#8028](https://github.com/openshift/installer/pull/8028)
* [CORS-3259](https://issues.redhat.com/browse/CORS-3259): GCP: Create DNS records and internal load balancer for CAPG Install [#8014](https://github.com/openshift/installer/pull/8014)
* [SPLAT-1198](https://issues.redhat.com/browse/SPLAT-1198): migrate vSphere installation to CAPV [#7962](https://github.com/openshift/installer/pull/7962)
* [OCPBUGS-29587](https://issues.redhat.com/browse/OCPBUGS-29587): Power VS: Fix service instance list [#8033](https://github.com/openshift/installer/pull/8033)
* [OCPBUGS-22410](https://issues.redhat.com/browse/OCPBUGS-22410): vsphere-fix convert if only provided name [#7931](https://github.com/openshift/installer/pull/7931)
* [OCPBUGS-29584](https://issues.redhat.com/browse/OCPBUGS-29584): PowerVS: handle composite_instance [#8029](https://github.com/openshift/installer/pull/8029)
* [OCPBUGS-29482](https://issues.redhat.com/browse/OCPBUGS-29482): Bump terraform-provider-ibm to v1.61.0 [#8023](https://github.com/openshift/installer/pull/8023)
* [CORS-2890](https://issues.redhat.com/browse/CORS-2890): pkg/infrastructure/aws: add initial CAPI provider [#8012](https://github.com/openshift/installer/pull/8012)
* [CORS-3185](https://issues.redhat.com/browse/CORS-3185): update default release image [#7874](https://github.com/openshift/installer/pull/7874)
* [OCPBUGS-28590](https://issues.redhat.com/browse/OCPBUGS-28590): gcp: better error msg when service accnt missing [#8002](https://github.com/openshift/installer/pull/8002)
* [OCPBUGS-28203](https://issues.redhat.com/browse/OCPBUGS-28203): Power VS: Add sleep to allow workspace to configure PER [#7889](https://github.com/openshift/installer/pull/7889)
* [CORS-3220](https://issues.redhat.com/browse/CORS-3220): Initiate CAPG installation [#8011](https://github.com/openshift/installer/pull/8011)
* [CORS-3213](https://issues.redhat.com/browse/CORS-3213): Create the GCP cluster manifest [#7917](https://github.com/openshift/installer/pull/7917)
* [OCPBUGS-29441](https://issues.redhat.com/browse/OCPBUGS-29441): update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 [#8015](https://github.com/openshift/installer/pull/8015)
* [OCPBUGS-29425](https://issues.redhat.com/browse/OCPBUGS-29425): PowerVS Fix next start search [#8010](https://github.com/openshift/installer/pull/8010)
* Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation [#7998](https://github.com/openshift/installer/pull/7998)
* [SPLAT-1447](https://issues.redhat.com/browse/SPLAT-1447): Move MCO imports to API; update library-go, api [#8000](https://github.com/openshift/installer/pull/8000)
* NO-ISSUE: integrationt tests support for env vars substitution [#7992](https://github.com/openshift/installer/pull/7992)
* [OCPBUGS-29114](https://issues.redhat.com/browse/OCPBUGS-29114): Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. [#7985](https://github.com/openshift/installer/pull/7985)
* [OCPBUGS-29068](https://issues.redhat.com/browse/OCPBUGS-29068): GCP: Skip validation of public and private zones for terraform vars [#7986](https://github.com/openshift/installer/pull/7986)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Copy GCP manifests within MCO bootstrap to the correct location [#7991](https://github.com/openshift/installer/pull/7991)
* [OCPBUGS-20085](https://issues.redhat.com/browse/OCPBUGS-20085): IBMCloud: Handle disk delete errors [#7515](https://github.com/openshift/installer/pull/7515)
* [OCPBUGS-28827](https://issues.redhat.com/browse/OCPBUGS-28827): do not rename boot.catalog for arm64 iso [#7972](https://github.com/openshift/installer/pull/7972)
* [OSASINFRA-3371](https://issues.redhat.com/browse/OSASINFRA-3371): Pass rhcosImage and manifests to the PreProvision hook [#7967](https://github.com/openshift/installer/pull/7967)
* [SPLAT-1387](https://issues.redhat.com/browse/SPLAT-1387): enable additional tags to be associated with vsphere machines [#7905](https://github.com/openshift/installer/pull/7905)
* [CORS-3242](https://issues.redhat.com/browse/CORS-3242): PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item [#7861](https://github.com/openshift/installer/pull/7861)
* [OPNET-357](https://issues.redhat.com/browse/OPNET-357): Populate network configuration at install-time [#7604](https://github.com/openshift/installer/pull/7604)
* [CORS-3240](https://issues.redhat.com/browse/CORS-3240): add OWNERS_ALIASES madhu-pillai [#7733](https://github.com/openshift/installer/pull/7733)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): Revert "bootkube.sh: Render kernel boot arguments for SNO" [#7979](https://github.com/openshift/installer/pull/7979)
* [CORS-3188](https://issues.redhat.com/browse/CORS-3188): Bump k8s deps [#7970](https://github.com/openshift/installer/pull/7970)
* [OCPBUGS-2135](https://issues.redhat.com/browse/OCPBUGS-2135): Include CAPG objects in uninstall filter [#7907](https://github.com/openshift/installer/pull/7907)
* [AGENT-848](https://issues.redhat.com/browse/AGENT-848): add node-joiner cli tool main [#7958](https://github.com/openshift/installer/pull/7958)
* [CORS-3207](https://issues.redhat.com/browse/CORS-3207): Generate GCP machine manifests for CAPI [#7944](https://github.com/openshift/installer/pull/7944)
* [OCPBUGS-24575](https://issues.redhat.com/browse/OCPBUGS-24575): ic: gcp: validate instance architecture [#7850](https://github.com/openshift/installer/pull/7850)
* [CORS-3196](https://issues.redhat.com/browse/CORS-3196): capg: add infrastructure components [#7968](https://github.com/openshift/installer/pull/7968)
* [CORS-3208](https://issues.redhat.com/browse/CORS-3208): Create the GCP infrastructure controller [#7940](https://github.com/openshift/installer/pull/7940)
* [OCPBUGS-27156](https://issues.redhat.com/browse/OCPBUGS-27156): GCP Destroy cleanup correct zones/records [#7932](https://github.com/openshift/installer/pull/7932)
* [OCPBUGS-27737](https://issues.redhat.com/browse/OCPBUGS-27737): aws-edge-zones preventing err before discovering [#7945](https://github.com/openshift/installer/pull/7945)
* [OCPBUGS-28708](https://issues.redhat.com/browse/OCPBUGS-28708): update tested Azure Arm64 instance type on 4.15 [#7965](https://github.com/openshift/installer/pull/7965)
* [OCPBUGS-28643](https://issues.redhat.com/browse/OCPBUGS-28643): PowerVS: Add dal12 region [#7956](https://github.com/openshift/installer/pull/7956)
* [OCPBUGS-27263](https://issues.redhat.com/browse/OCPBUGS-27263): Bump golang 1.21 [#7925](https://github.com/openshift/installer/pull/7925)
* [CNF-10170](https://issues.redhat.com/browse/CNF-10170): bootkube.sh: Render kernel boot arguments for SNO [#7692](https://github.com/openshift/installer/pull/7692)
* [OCPBUGS-28705](https://issues.redhat.com/browse/OCPBUGS-28705): [azure] update tested x86 instance type on 4.15 [#7961](https://github.com/openshift/installer/pull/7961)
* [CORS-3139](https://issues.redhat.com/browse/CORS-3139): Move CAPI behind infrastructure provider interface [#7824](https://github.com/openshift/installer/pull/7824)
* [OCPBUGS-27507](https://issues.redhat.com/browse/OCPBUGS-27507): bump containerd for vulnerability fix [#7942](https://github.com/openshift/installer/pull/7942)
* NO-ISSUE: test fix to support slightly different nmstate error messages [#7954](https://github.com/openshift/installer/pull/7954)
* NO-JIRA: Minor fixes [#7947](https://github.com/openshift/installer/pull/7947)
* no-jira: azure: add metadata info to resource group tags [#7725](https://github.com/openshift/installer/pull/7725)
* [OCPBUGS-25453](https://issues.redhat.com/browse/OCPBUGS-25453): duplicate failure domains in CMPS [#7860](https://github.com/openshift/installer/pull/7860)
* [OCPBUGS-27788](https://issues.redhat.com/browse/OCPBUGS-27788): PowerVS: COS region configurable [#7941](https://github.com/openshift/installer/pull/7941)
* [SPLAT-1345](https://issues.redhat.com/browse/SPLAT-1345): Remove alibaba [#7832](https://github.com/openshift/installer/pull/7832)
* [OCPBUGS-27366](https://issues.redhat.com/browse/OCPBUGS-27366): set the --cluster-profile flag for openshift/api rendering [#7924](https://github.com/openshift/installer/pull/7924)
* [Full changelog](https://github.com/openshift/installer/compare/7be2cf71cdef9f5fe0d2d9687615c2bb2741ffcd...c94bdb3ab706e3d6dccc357a69fd8f67cb7d37a5)


### [ironic](https://github.com/openshift/ironic-image/tree/03e4331bd1495442b2c1cdba8c8127e376c55c31)

* [OCPBUGS-32390](https://issues.redhat.com/browse/OCPBUGS-32390): Use unix sockets by default for reverse proxy communication [#472](https://github.com/openshift/ironic-image/pull/472)
* [OCPBUGS-32162](https://issues.redhat.com/browse/OCPBUGS-32162): Bump eventlet version [#471](https://github.com/openshift/ironic-image/pull/471)
* [METAL-949](https://issues.redhat.com/browse/METAL-949): Force pysnmp-lextudio and pyasn1 min version [#464](https://github.com/openshift/ironic-image/pull/464)
* [METAL-952](https://issues.redhat.com/browse/METAL-952): Install sushy from source [#466](https://github.com/openshift/ironic-image/pull/466)
* [METAL-804](https://issues.redhat.com/browse/METAL-804): Bump ironic hash to include recent fixes and features [#465](https://github.com/openshift/ironic-image/pull/465)
* [METAL-944](https://issues.redhat.com/browse/METAL-944): Install ironic-lib from source [#463](https://github.com/openshift/ironic-image/pull/463)
* [METAL-923](https://issues.redhat.com/browse/METAL-923): pick-up non-bootable ISO fix [#462](https://github.com/openshift/ironic-image/pull/462)
* [METAL-922](https://issues.redhat.com/browse/METAL-922): Add check requirements script [#461](https://github.com/openshift/ironic-image/pull/461)
* [METAL-901](https://issues.redhat.com/browse/METAL-901): Update ironic dependencies for OCP 4.16 [#457](https://github.com/openshift/ironic-image/pull/457)
* NO-ISSUE: Merge from upstream metal3-io/ironic-image [#459](https://github.com/openshift/ironic-image/pull/459)
* [METAL-909](https://issues.redhat.com/browse/METAL-909): Avoid context copy in CI or local builds [#458](https://github.com/openshift/ironic-image/pull/458)
* [METAL-849](https://issues.redhat.com/browse/METAL-849): Install ironic and ironic-inspector from source [#444](https://github.com/openshift/ironic-image/pull/444)
* [METAL-902](https://issues.redhat.com/browse/METAL-902): Split OKD and OCP packages list [#456](https://github.com/openshift/ironic-image/pull/456)
* NO-ISSUE: Updating openstack-ironic version [#455](https://github.com/openshift/ironic-image/pull/455)
* [OCPBUGS-27967](https://issues.redhat.com/browse/OCPBUGS-27967): Update packages for OCP 4.16 [#451](https://github.com/openshift/ironic-image/pull/451)
* [METAL-850](https://issues.redhat.com/browse/METAL-850): Update packages for OCP 4.16 [#449](https://github.com/openshift/ironic-image/pull/449)
* [Full changelog](https://github.com/openshift/ironic-image/compare/08c340a1ee88d277d2a0430586538634cc2c8c97...03e4331bd1495442b2c1cdba8c8127e376c55c31)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/c8478dc5c9b514f9ec92aa9c40c07630240e74dd)

* [OCPBUGS-32172](https://issues.redhat.com/browse/OCPBUGS-32172): Fix name in setup.cfg [#122](https://github.com/openshift/ironic-agent-image/pull/122)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Fix permission of check reqs script [#120](https://github.com/openshift/ironic-agent-image/pull/120)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Add makefile with build and check reqs [#119](https://github.com/openshift/ironic-agent-image/pull/119)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Install ironic-python-agent from source [#118](https://github.com/openshift/ironic-agent-image/pull/118)
* [METAL-925](https://issues.redhat.com/browse/METAL-925): Add requirements placeholders for cachito [#117](https://github.com/openshift/ironic-agent-image/pull/117)
* NO-ISSUE: Update openstack-ironic-python-agent version [#110](https://github.com/openshift/ironic-agent-image/pull/110)
* [METAL-913](https://issues.redhat.com/browse/METAL-913): drop dependency on python-hardware [#113](https://github.com/openshift/ironic-agent-image/pull/113)
* [OCPBUGS-30075](https://issues.redhat.com/browse/OCPBUGS-30075): Fix tripleo url with commit hash for openstack repos config [#114](https://github.com/openshift/ironic-agent-image/pull/114)
* [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): Always add ignition to set hostname on /etc/hostname [#106](https://github.com/openshift/ironic-agent-image/pull/106)
* [METAL-850](https://issues.redhat.com/browse/METAL-850): Update packages for OCP 4.16 [#104](https://github.com/openshift/ironic-agent-image/pull/104)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/794c37f40f4f07a46761e2a74e31a960dbb80f66...c8478dc5c9b514f9ec92aa9c40c07630240e74dd)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/71a6f28d69f77953d104219cee344a70f7cbede1)

* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image (attempt #2) [#617](https://github.com/openshift/sdn/pull/617)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Revert #613 "OCPBUGS-28580: Move sdn to RHEL9 base image" [#616](https://github.com/openshift/sdn/pull/616)
* [OCPBUGS-28580](https://issues.redhat.com/browse/OCPBUGS-28580): Move sdn to RHEL9 base image [#613](https://github.com/openshift/sdn/pull/613)
* [OCPBUGS-28549](https://issues.redhat.com/browse/OCPBUGS-28549): Add Snyk file to exclude directories on scan [#614](https://github.com/openshift/sdn/pull/614)
* [OCPBUGS-27459](https://issues.redhat.com/browse/OCPBUGS-27459): Metrics: Add metric for multicast enabled netnamespaces [#606](https://github.com/openshift/sdn/pull/606)
* [Full changelog](https://github.com/openshift/sdn/compare/df7f4b18191282fc0e1387d2543ae64f05928325...71a6f28d69f77953d104219cee344a70f7cbede1)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/315a448d86ea260bcf6b31052bfd44c71dfcc3d2)

* [OCPBUGS-24118](https://issues.redhat.com/browse/OCPBUGS-24118): Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART [#28](https://github.com/openshift/cloud-provider-kubevirt/pull/28)
* [OCPBUGS-22061](https://issues.redhat.com/browse/OCPBUGS-22061): Bump golang.org/x/net to v0.18.0 [#34](https://github.com/openshift/cloud-provider-kubevirt/pull/34)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/e465e606e7d17c64392cdeba099f9382580e44b0...315a448d86ea260bcf6b31052bfd44c71dfcc3d2)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/39960583fe328b2271ba3649d793f8e0f0a4be79)

* [OCPBUGS-31962](https://issues.redhat.com/browse/OCPBUGS-31962): Bump x/net to v.0.24.0 [#1228](https://github.com/openshift/machine-api-operator/pull/1228)
* [OCPBUGS-29956](https://issues.redhat.com/browse/OCPBUGS-29956): Azure MAO CredentialsRequest Contains Unnecessary virtualMachines/extensions Permissions [#1219](https://github.com/openshift/machine-api-operator/pull/1219)
* [OCPBUGS-29874](https://issues.redhat.com/browse/OCPBUGS-29874): Apply hypershift cluster-profile for ibm-cloud-managed [#1218](https://github.com/openshift/machine-api-operator/pull/1218)
* [SPLAT-1293](https://issues.redhat.com/browse/SPLAT-1293): Bump IPAM types to v1beta1. [#1205](https://github.com/openshift/machine-api-operator/pull/1205)
* [OCPBUGS-26119](https://issues.redhat.com/browse/OCPBUGS-26119): Add build tags to tools.go file to solve linting issues when running Snyk scans [#1215](https://github.com/openshift/machine-api-operator/pull/1215)
* [OCPBUGS-25193](https://issues.redhat.com/browse/OCPBUGS-25193): Add additional vnet join permission for Azure [#1212](https://github.com/openshift/machine-api-operator/pull/1212)
* [SPLAT-1386](https://issues.redhat.com/browse/SPLAT-1386): reconcile additional tags assigned to machine [#1204](https://github.com/openshift/machine-api-operator/pull/1204)
* [OCPBUGS-26119](https://issues.redhat.com/browse/OCPBUGS-26119): Fix formatting in snyk vendor exclusions [#1201](https://github.com/openshift/machine-api-operator/pull/1201)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1211](https://github.com/openshift/machine-api-operator/pull/1211)
* [CFE-684](https://issues.redhat.com/browse/CFE-684), [OCPCLOUD-2430](https://issues.redhat.com/browse/OCPCLOUD-2430): Rebase k8s 1.29 and update dependencies [#1208](https://github.com/openshift/machine-api-operator/pull/1208)
* [CFE-684](https://issues.redhat.com/browse/CFE-684): Update GCPCloudCredentials with TagUser role [#1158](https://github.com/openshift/machine-api-operator/pull/1158)
* [OCPBUGS-27385](https://issues.redhat.com/browse/OCPBUGS-27385): Add useExternalIp gcp permission [#1206](https://github.com/openshift/machine-api-operator/pull/1206)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Set --max-concurrent-reconciles=10 for Azure machine controller [#1203](https://github.com/openshift/machine-api-operator/pull/1203)
* [OCPBUGS-23544](https://issues.redhat.com/browse/OCPBUGS-23544): Add AddWithActuatorOpts to allow overriding Machine controller options [#1202](https://github.com/openshift/machine-api-operator/pull/1202)
* [OCPCLOUD-1725](https://issues.redhat.com/browse/OCPCLOUD-1725): Add GCP custom roles [#1178](https://github.com/openshift/machine-api-operator/pull/1178)
* [OCPBUGS-25580](https://issues.redhat.com/browse/OCPBUGS-25580): Updating ose-machine-api-operator-container image to be consistent with ART [#1190](https://github.com/openshift/machine-api-operator/pull/1190)
* [OCPBUGS-25735](https://issues.redhat.com/browse/OCPBUGS-25735): Add Snyk file to exclude vendor directory on scan [#1192](https://github.com/openshift/machine-api-operator/pull/1192)
* [OCPBUGS-24980](https://issues.redhat.com/browse/OCPBUGS-24980): Updating ose-machine-api-operator-container image to be consistent with ART [#1187](https://github.com/openshift/machine-api-operator/pull/1187)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/2886a920caee53f77523f785d8d92c88f71f10d0...39960583fe328b2271ba3649d793f8e0f0a4be79)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/52e618e80e1ac6cd00ac7a41b19d354b6b254488)

* [MCO-424](https://issues.redhat.com/browse/MCO-424): cleanup: update references in docs from machine-os-contenet to rhel-coreos [#4329](https://github.com/openshift/machine-config-operator/pull/4329)
* [MCO-1029](https://issues.redhat.com/browse/MCO-1029): MCO-678: Implement Boot Image update opt-in API [#4281](https://github.com/openshift/machine-config-operator/pull/4281)
* [MCO-1117](https://issues.redhat.com/browse/MCO-1117): Make local MCO image builds faster [#4296](https://github.com/openshift/machine-config-operator/pull/4296)
* [OCPBUGS-32278](https://issues.redhat.com/browse/OCPBUGS-32278): Fix configure-ip-forwarding.sh [#4323](https://github.com/openshift/machine-config-operator/pull/4323)
* [MCO-1102](https://issues.redhat.com/browse/MCO-1102): OCPBUGS-32277: Add a ValidatingAdmissionPolicy for the boot images update opt-in API [#4285](https://github.com/openshift/machine-config-operator/pull/4285)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#4318](https://github.com/openshift/machine-config-operator/pull/4318)
* [MCO-1129](https://issues.redhat.com/browse/MCO-1129): Re-land Adapting the MCO featuregate usage to new API [#4315](https://github.com/openshift/machine-config-operator/pull/4315)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#4319](https://github.com/openshift/machine-config-operator/pull/4319)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Support Cluster ImagePolicy CRD [#4160](https://github.com/openshift/machine-config-operator/pull/4160)
* [OCPBUGS-32028](https://issues.redhat.com/browse/OCPBUGS-32028): Decrease logs of haproxy [#4245](https://github.com/openshift/machine-config-operator/pull/4245)
* [OCPBUGS-30192](https://issues.redhat.com/browse/OCPBUGS-30192): Move StartLimitIntervalSec to Unit section [#4304](https://github.com/openshift/machine-config-operator/pull/4304)
* [OCPBUGS-28577](https://issues.redhat.com/browse/OCPBUGS-28577): MCO-1030, MCO-910: Updating MCO base image to RHEL9 [#4241](https://github.com/openshift/machine-config-operator/pull/4241)
* [OCPBUGS-22910](https://issues.redhat.com/browse/OCPBUGS-22910): Remove the condition for checking the multiple ovs-if-br-ex profiles [#4016](https://github.com/openshift/machine-config-operator/pull/4016)
* [OCPBUGS-18955](https://issues.redhat.com/browse/OCPBUGS-18955): make sure CO degrades if OCL config is invalid [#4294](https://github.com/openshift/machine-config-operator/pull/4294)
* [OCPBUGS-31630](https://issues.redhat.com/browse/OCPBUGS-31630): fix: resources were in the wrong indentation level [#4299](https://github.com/openshift/machine-config-operator/pull/4299)
* [TRT-1587](https://issues.redhat.com/browse/TRT-1587): Revert #4275 "MCO-1092: Adapt the MCO's featuregate usage to new API" [#4295](https://github.com/openshift/machine-config-operator/pull/4295)
* [OCPBUGS-31376](https://issues.redhat.com/browse/OCPBUGS-31376): kubelet: restorecon necessary files on kubelet's prestart [#4287](https://github.com/openshift/machine-config-operator/pull/4287)
* [MCO-1092](https://issues.redhat.com/browse/MCO-1092): Adapt the MCO's featuregate usage to new API [#4275](https://github.com/openshift/machine-config-operator/pull/4275)
* [OCPBUGS-31067](https://issues.redhat.com/browse/OCPBUGS-31067): server: still serve kubeconfig with node-bootstrapper-token [#4276](https://github.com/openshift/machine-config-operator/pull/4276)
* [OCPBUGS-9108](https://issues.redhat.com/browse/OCPBUGS-9108): OCPBUGS-24228: Make MCO operator always Available, add retry to applyManifests before degrading [#4240](https://github.com/openshift/machine-config-operator/pull/4240)
* [OCPBUGS-27316](https://issues.redhat.com/browse/OCPBUGS-27316): configure-ovs: generate profiles directly in /run [#4042](https://github.com/openshift/machine-config-operator/pull/4042)
* [OCPBUGS-25744](https://issues.redhat.com/browse/OCPBUGS-25744), [OPNET-303](https://issues.redhat.com/browse/OPNET-303): Remove weights from ingress check script [#3698](https://github.com/openshift/machine-config-operator/pull/3698)
* [OCPBUGS-31365](https://issues.redhat.com/browse/OCPBUGS-31365): make verify should use MCO's kube version [#4280](https://github.com/openshift/machine-config-operator/pull/4280)
* [MCO-760](https://issues.redhat.com/browse/MCO-760): add rebuild mechanism to ocb [#4189](https://github.com/openshift/machine-config-operator/pull/4189)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Updates GCR CredentialProviderConfig [#4260](https://github.com/openshift/machine-config-operator/pull/4260)
* [OCPBUGS-30852](https://issues.redhat.com/browse/OCPBUGS-30852): add preferredduringscheduling annotation to kube-rbac-proxy-crio [#4261](https://github.com/openshift/machine-config-operator/pull/4261)
* [MCO-909](https://issues.redhat.com/browse/MCO-909): Openshift/Kubernetes 1.29 Rebase Updates [#4256](https://github.com/openshift/machine-config-operator/pull/4256)
* [OCPBUGS-30239](https://issues.redhat.com/browse/OCPBUGS-30239): Prevent OVS-configuration to run before kdump [#4213](https://github.com/openshift/machine-config-operator/pull/4213)
* [OCPCLOUD-2514](https://issues.redhat.com/browse/OCPCLOUD-2514), [OCPCLOUD-2516](https://issues.redhat.com/browse/OCPCLOUD-2516): Remove reliance on feature gates for cloud provider flags [#4228](https://github.com/openshift/machine-config-operator/pull/4228)
* NO-JIRA: Sync CRI-O owners [#4234](https://github.com/openshift/machine-config-operator/pull/4234)
* [OCPNODE-2098](https://issues.redhat.com/browse/OCPNODE-2098): Add static pod for kube-rbac-proxy-crio [#4175](https://github.com/openshift/machine-config-operator/pull/4175)
* [OCPCLOUD-2462](https://issues.redhat.com/browse/OCPCLOUD-2462): Add Image Credential Provider flags for Kubelet on Azure [#4222](https://github.com/openshift/machine-config-operator/pull/4222)
* [OCPBUGS-25821](https://issues.redhat.com/browse/OCPBUGS-25821): backportable version of api-int cert work [#4106](https://github.com/openshift/machine-config-operator/pull/4106)
* [MCO-898](https://issues.redhat.com/browse/MCO-898): OCPBUGS-29857: OCPBUGS-29819: Implement an alerting mechanism for boot image update failures [#4194](https://github.com/openshift/machine-config-operator/pull/4194)
* [OCPCLOUD-2465](https://issues.redhat.com/browse/OCPCLOUD-2465): Add Image Credential Provider flags for Kubelet on GCP [#4224](https://github.com/openshift/machine-config-operator/pull/4224)
* [OCPBUGS-30136](https://issues.redhat.com/browse/OCPBUGS-30136): APIVersion and Kind sometimes are empty when listing objects [#4231](https://github.com/openshift/machine-config-operator/pull/4231)
* [OCPBUGS-29946](https://issues.redhat.com/browse/OCPBUGS-29946): Prevent pull images in podmanCopy if they are present [#4216](https://github.com/openshift/machine-config-operator/pull/4216)
* [OCPBUGS-18670](https://issues.redhat.com/browse/OCPBUGS-18670): OCPBUGS-18535: MCO-809: rendercontroller should also reconcile machineconfigs [#4158](https://github.com/openshift/machine-config-operator/pull/4158)
* [OCPBUGS-30090](https://issues.redhat.com/browse/OCPBUGS-30090): add node owner to MCN [#4223](https://github.com/openshift/machine-config-operator/pull/4223)
* [OCPBUGS-29067](https://issues.redhat.com/browse/OCPBUGS-29067): Add HostToContainer propogataion for coreDNS pods on cloud platforms [#4218](https://github.com/openshift/machine-config-operator/pull/4218)
* NO-JIRA: ovs-configfuration, run after nmstate.service [#4212](https://github.com/openshift/machine-config-operator/pull/4212)
* [OCPBUGS-29713](https://issues.redhat.com/browse/OCPBUGS-29713): set nodeStatusReportFrequency [#4204](https://github.com/openshift/machine-config-operator/pull/4204)
* [MCO-998](https://issues.redhat.com/browse/MCO-998): sets up MCO repository for Snyk CI scans [#4197](https://github.com/openshift/machine-config-operator/pull/4197)
* [OCPBUGS-29732](https://issues.redhat.com/browse/OCPBUGS-29732): Always touch resolv-prepender file at end of script [#4207](https://github.com/openshift/machine-config-operator/pull/4207)
* [OCPBUGS-29659](https://issues.redhat.com/browse/OCPBUGS-29659): Apply new DNS configuration only if changed [#4196](https://github.com/openshift/machine-config-operator/pull/4196)
* [OCPBUGS-29624](https://issues.redhat.com/browse/OCPBUGS-29624): Restart resolv-prepender on failure [#4201](https://github.com/openshift/machine-config-operator/pull/4201)
* [OCPNODE-1877](https://issues.redhat.com/browse/OCPNODE-1877): Delete image openshift/openshift-proxy-pull-test [#4047](https://github.com/openshift/machine-config-operator/pull/4047)
* NO-JIRA: nmstate, configure nmstate to keep service yamls [#4190](https://github.com/openshift/machine-config-operator/pull/4190)
* NO-ISSUE: OWNERS: Remove myself from reviewers [#3628](https://github.com/openshift/machine-config-operator/pull/3628)
* NO-ISSUE: add e2e-techpreview-shared, remove layering test target [#4183](https://github.com/openshift/machine-config-operator/pull/4183)
* [OCPBUGS-27162](https://issues.redhat.com/browse/OCPBUGS-27162): Add dependency on crio-wipe to resolv-prepender [#4146](https://github.com/openshift/machine-config-operator/pull/4146)
* [OCPBUGS-22324](https://issues.redhat.com/browse/OCPBUGS-22324): Revert "Revert "Merge pull request #4028 from cybertron/wait-for-br-ex"" [#4079](https://github.com/openshift/machine-config-operator/pull/4079)
* [OPNET-355](https://issues.redhat.com/browse/OPNET-355): Use NM's dns-change event for resolv.conf [#4133](https://github.com/openshift/machine-config-operator/pull/4133)
* [OCPBUGS-18940](https://issues.redhat.com/browse/OCPBUGS-18940): Add keepalived healthcheck for machine-config-server [#4129](https://github.com/openshift/machine-config-operator/pull/4129)
* [MCO-774](https://issues.redhat.com/browse/MCO-774): Write e2e tests for bootimage management [#4177](https://github.com/openshift/machine-config-operator/pull/4177)
* NO-JIRA: remove kube-rbac-proxy for crio port [#4181](https://github.com/openshift/machine-config-operator/pull/4181)
* [OCPBUGS-26951](https://issues.redhat.com/browse/OCPBUGS-26951): annotate on-prem static pods for workload partitioning [#4143](https://github.com/openshift/machine-config-operator/pull/4143)
* NO-JIRA: Fix patch comparison bug in test [#4176](https://github.com/openshift/machine-config-operator/pull/4176)
* docs/HACKING: Update command for building customize OCP release [#4023](https://github.com/openshift/machine-config-operator/pull/4023)
* [OCPBUGS-18955](https://issues.redhat.com/browse/OCPBUGS-18955), [OCPBUGS-18989](https://issues.redhat.com/browse/OCPBUGS-18989), [OCPBUGS-18991](https://issues.redhat.com/browse/OCPBUGS-18991): add capability to react to OCB ImageBuilderType changes [#4127](https://github.com/openshift/machine-config-operator/pull/4127)
* [OCPBUGS-29098](https://issues.redhat.com/browse/OCPBUGS-29098): Revert "OCPNODE-2024: crio: migrate metrics port to localhost only" [#4168](https://github.com/openshift/machine-config-operator/pull/4168)
* [OCPBUGS-28969](https://issues.redhat.com/browse/OCPBUGS-28969): On-prem coredns manifests should not be generated for GCP [#4165](https://github.com/openshift/machine-config-operator/pull/4165)
* [OCPBUGS-26557](https://issues.redhat.com/browse/OCPBUGS-26557): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4111](https://github.com/openshift/machine-config-operator/pull/4111)
* [OCPNODE-2024](https://issues.redhat.com/browse/OCPNODE-2024): crio: migrate metrics port to localhost only [#4164](https://github.com/openshift/machine-config-operator/pull/4164)
* [OCPBUGS-24356](https://issues.redhat.com/browse/OCPBUGS-24356): ovs-configure: fix `vlan_parent` calculation [#4055](https://github.com/openshift/machine-config-operator/pull/4055)
* [OCPBUGS-24705](https://issues.redhat.com/browse/OCPBUGS-24705): consider currentImage and desiredImage annotations [#4135](https://github.com/openshift/machine-config-operator/pull/4135)
* [CORS-2814](https://issues.redhat.com/browse/CORS-2814): Add support for in-cluster DNS on Cloud Platforms when cloud DNS cannot be used [#4018](https://github.com/openshift/machine-config-operator/pull/4018)
* [OCPBUGS-22721](https://issues.redhat.com/browse/OCPBUGS-22721), [OCPBUGS-25753](https://issues.redhat.com/browse/OCPBUGS-25753): Run resolv-prepender entirely async [#4102](https://github.com/openshift/machine-config-operator/pull/4102)
* [OCPBUGS-26489](https://issues.redhat.com/browse/OCPBUGS-26489): feat: enable nodeip service for single node [#4142](https://github.com/openshift/machine-config-operator/pull/4142)
* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#4147](https://github.com/openshift/machine-config-operator/pull/4147)
* [OCPBUGS-24366](https://issues.redhat.com/browse/OCPBUGS-24366): Delete state files on reboot only [#4124](https://github.com/openshift/machine-config-operator/pull/4124)
* [OCPBUGS-17788](https://issues.redhat.com/browse/OCPBUGS-17788): Improved error handling for missing MC [#4096](https://github.com/openshift/machine-config-operator/pull/4096)
* [OCPBUGS-27508](https://issues.redhat.com/browse/OCPBUGS-27508): daemon: allow the user to override drains on IR changes [#4139](https://github.com/openshift/machine-config-operator/pull/4139)
* [MCO-831](https://issues.redhat.com/browse/MCO-831): added feature gate to mco for on cluster builds [#4060](https://github.com/openshift/machine-config-operator/pull/4060)
* [OCPNODE-2005](https://issues.redhat.com/browse/OCPNODE-2005): crio: add support for LinkLogs annotation by default [#4116](https://github.com/openshift/machine-config-operator/pull/4116)
* [OCPNODE-1632](https://issues.redhat.com/browse/OCPNODE-1632): Bump k8s api to v0.29.0 [#4119](https://github.com/openshift/machine-config-operator/pull/4119)
* [OCPBUGS-27190](https://issues.redhat.com/browse/OCPBUGS-27190): Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies [#4125](https://github.com/openshift/machine-config-operator/pull/4125)
* [OCPBUGS-25662](https://issues.redhat.com/browse/OCPBUGS-25662): Add Image Credential Provider flags for Kubelet on AWS [#4103](https://github.com/openshift/machine-config-operator/pull/4103)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/9fb0e625d5766b62ac3027a6ffeeb39492bca26a...52e618e80e1ac6cd00ac7a41b19d354b6b254488)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/c3d2272954610dc99a80e51f5b888af09973903f)

* [OCPBUGS-27202](https://issues.redhat.com/browse/OCPBUGS-27202): upgrade follow-redirects parent dependency [#94](https://github.com/openshift/monitoring-plugin/pull/94)
* [OU-318](https://issues.redhat.com/browse/OU-318): consider all metric keys to display all results on dashboards tables [#97](https://github.com/openshift/monitoring-plugin/pull/97)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/b9a2946c32ec3d1d1a36c1632b10132d3e67ea84...c3d2272954610dc99a80e51f5b888af09973903f)


### [multus-cni](https://github.com/openshift/multus-cni/tree/bd8686f05101480960845742a79414f21fd17945)

* [OCPBUGS-32440](https://issues.redhat.com/browse/OCPBUGS-32440): Update snyk file to add exclude vendor [#229](https://github.com/openshift/multus-cni/pull/229)
* [OCPBUGS-32393](https://issues.redhat.com/browse/OCPBUGS-32393): April 2024 [#228](https://github.com/openshift/multus-cni/pull/228)
* [OCPBUGS-30449](https://issues.redhat.com/browse/OCPBUGS-30449): Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 [#226](https://github.com/openshift/multus-cni/pull/226)
* [USHIFT-2218](https://issues.redhat.com/browse/USHIFT-2218): Dockerfile for MicroShift [#222](https://github.com/openshift/multus-cni/pull/222)
* [OCPBUGS-29856](https://issues.redhat.com/browse/OCPBUGS-29856): Upstream sync to 2024 02 22 [#221](https://github.com/openshift/multus-cni/pull/221)
* [OCPBUGS-28270](https://issues.redhat.com/browse/OCPBUGS-28270): Fix SAST scan issues for multus-cni-container [#217](https://github.com/openshift/multus-cni/pull/217)
* [OCPBUGS-27429](https://issues.redhat.com/browse/OCPBUGS-27429): Reload bootstrap kubeconfig if cert mgr failed to load valid certs [#216](https://github.com/openshift/multus-cni/pull/216)
* [OCPBUGS-29162](https://issues.redhat.com/browse/OCPBUGS-29162): Upstream sync to 20240207 [#214](https://github.com/openshift/multus-cni/pull/214)
* [OCPBUGS-28270](https://issues.redhat.com/browse/OCPBUGS-28270): Remove unused webhook related yamls [#213](https://github.com/openshift/multus-cni/pull/213)
* [OCPBUGS-28583](https://issues.redhat.com/browse/OCPBUGS-28583): Updating multus-cni-container image to be consistent with ART for 4.16 [#212](https://github.com/openshift/multus-cni/pull/212)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait to account for the possiblity of a not ready unix socket [#208](https://github.com/openshift/multus-cni/pull/208)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#204](https://github.com/openshift/multus-cni/pull/204)
* [OCPBUGS-26397](https://issues.redhat.com/browse/OCPBUGS-26397): Revert #205 "Adds a wait on unix socket readiness" [#207](https://github.com/openshift/multus-cni/pull/207)
* [OCPBUGS-26222](https://issues.redhat.com/browse/OCPBUGS-26222): Adds a wait on unix socket readiness [#205](https://github.com/openshift/multus-cni/pull/205)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#203](https://github.com/openshift/multus-cni/pull/203)
* [OCPBUGS-24863](https://issues.redhat.com/browse/OCPBUGS-24863): Updating multus-cni-container image to be consistent with ART [#202](https://github.com/openshift/multus-cni/pull/202)
* [Full changelog](https://github.com/openshift/multus-cni/compare/f9406f864f00191e9dfac455d7044a973986e32d...bd8686f05101480960845742a79414f21fd17945)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/2edc45fe57cc6c861f8014fdc514ca03442fde17)

* [OCPBUGS-27748](https://issues.redhat.com/browse/OCPBUGS-27748): Enable whereabouts-reconciler configuration 4.15 [#239](https://github.com/openshift/whereabouts-cni/pull/239)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/7906336346a2cedb1df5864e5a0b506d80eeaa19...2edc45fe57cc6c861f8014fdc514ca03442fde17)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/e98d068af925d2eeaf31e2ce65b5b88f3d07e7ed)

* [OCPBUGS-27390](https://issues.redhat.com/browse/OCPBUGS-27390): IPI install fails on Nutanix when using DHCP [#66](https://github.com/openshift/machine-api-provider-nutanix/pull/66)
* [OCPBUGS-27874](https://issues.redhat.com/browse/OCPBUGS-27874): Update Snyk file to exclude other vendor folders [#65](https://github.com/openshift/machine-api-provider-nutanix/pull/65)
* [OCPCLOUD-2425](https://issues.redhat.com/browse/OCPCLOUD-2425): Rebase to k8s 129 [#64](https://github.com/openshift/machine-api-provider-nutanix/pull/64)
* [OCPBUGS-26184](https://issues.redhat.com/browse/OCPBUGS-26184): Add Snyk file to exclude vendor directory on scan [#63](https://github.com/openshift/machine-api-provider-nutanix/pull/63)
* [OCPBUGS-24949](https://issues.redhat.com/browse/OCPBUGS-24949): Updating ose-nutanix-machine-controllers-container image to be consistent with ART [#58](https://github.com/openshift/machine-api-provider-nutanix/pull/58)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/d422f92e25c5306897b54c1541691549135c13b8...e98d068af925d2eeaf31e2ce65b5b88f3d07e7ed)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/34756b67ae1ce1307d07bd1834579de1e4b47f17)

* [OCPBUGS-21669](https://issues.redhat.com/browse/OCPBUGS-21669): bump k8s.io and others (4.15) [#99](https://github.com/openshift/oauth-apiserver/pull/99)
* [OCPBUGS-24132](https://issues.redhat.com/browse/OCPBUGS-24132): Updating ose-oauth-apiserver-container image to be consistent with ART [#93](https://github.com/openshift/oauth-apiserver/pull/93)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/beb99aefa447ee4ddaade964cefb6d0fa2b70c66...34756b67ae1ce1307d07bd1834579de1e4b47f17)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9621d8f72ecc7a0a13e40b9709b5e19cc621117b)

* [OCPBUGS-23550](https://issues.redhat.com/browse/OCPBUGS-23550): Generate both oc-mirror binaries for rhel9 and rhel8 (#804) [#804](https://github.com/openshift/oc-mirror/pull/804)
* Fix to ensure operator not found error exits with correct status (#794) [#794](https://github.com/openshift/oc-mirror/pull/794)
* [OCPBUGS-27946](https://issues.redhat.com/browse/OCPBUGS-27946): Capability to override default channel (#786) [#786](https://github.com/openshift/oc-mirror/pull/786)
* [OCPBUGS-27252](https://issues.redhat.com/browse/OCPBUGS-27252): Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#780) [#780](https://github.com/openshift/oc-mirror/pull/780)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/2ad11194cf62fc0d08797e8dc24d69bfe24831ec...9621d8f72ecc7a0a13e40b9709b5e19cc621117b)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/2724be3ed7a0205241c33c26d92d33f3d246662c)

* [OCPBUGS-29796](https://issues.redhat.com/browse/OCPBUGS-29796): UPSTREAM: 231: make garbage collection a runnable [#44](https://github.com/openshift/operator-framework-catalogd/pull/44)
* [OCPBUGS-27586](https://issues.redhat.com/browse/OCPBUGS-27586), [OCPBUGS-27671](https://issues.redhat.com/browse/OCPBUGS-27671): [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 [#39](https://github.com/openshift/operator-framework-catalogd/pull/39)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/3fc5f414256c9e227766d4e0831a51f9a45d02b5...2724be3ed7a0205241c33c26d92d33f3d246662c)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/e2906934f5051bb0f80ccdd0091e5ffd85addaff)

* [OCPBUGS-27591](https://issues.redhat.com/browse/OCPBUGS-27591), [OCPBUGS-27676](https://issues.redhat.com/browse/OCPBUGS-27676): [release-4.15] bump github.com/go-git/go-git/v5 to v5.11.0 [#68](https://github.com/openshift/operator-framework-operator-controller/pull/68)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/88d25fdc965144c826b61231a8b19278c4e1f4ef...e2906934f5051bb0f80ccdd0091e5ffd85addaff)


### [olm-rukpak](https://github.com/openshift/operator-framework-rukpak/tree/5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)

* : OCPBUGS-30264: Bump Helm & K8s dependencies [#79](https://github.com/openshift/operator-framework-rukpak/pull/79)
* [OCPBUGS-27596](https://issues.redhat.com/browse/OCPBUGS-27596), [OCPBUGS-27681](https://issues.redhat.com/browse/OCPBUGS-27681): UPSTREAM: <carry>: Update go-git to v5.11.0 [#72](https://github.com/openshift/operator-framework-rukpak/pull/72)
* [Full changelog](https://github.com/openshift/operator-framework-rukpak/compare/1369884b563638963e64caaf4be648c7676b63b4...5b09cd44e9ca7b2ec91fd6f906ac4612636277e3)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/edbf7353e21a286cac85867ec13d6cf937dd9c33)

* [OCPBUGS-24086](https://issues.redhat.com/browse/OCPBUGS-24086): Updating ose-openshift-controller-manager-container image to be consistent with ART [#281](https://github.com/openshift/openshift-controller-manager/pull/281)
* [OCPBUGS-28947](https://issues.redhat.com/browse/OCPBUGS-28947): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#285](https://github.com/openshift/openshift-controller-manager/pull/285)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/2a28a78279b127075b399a3442a2042f4a7d190d...edbf7353e21a286cac85867ec13d6cf937dd9c33)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/d1de8c63ee931be0038b55dd4813b2089fd6107e)

* 🐛 Persist API FloatingIP immediately on creation [#1846](https://github.com/openshift/cluster-api-provider-openstack/pull/1846)
* :bug: Fix potential panic during instance create [#1808](https://github.com/openshift/cluster-api-provider-openstack/pull/1808)
* fix --short flag is removed issue for CI [#1811](https://github.com/openshift/cluster-api-provider-openstack/pull/1811)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/acc3955450d75d33ea69f326ef9215f415051af4...d1de8c63ee931be0038b55dd4813b2089fd6107e)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/59aa935ebbe6948921ea3292603cbdce898e0091)

* [OCPBUGS-30219](https://issues.redhat.com/browse/OCPBUGS-30219): bump otelgrpc to 0.46.0 [#712](https://github.com/openshift/operator-framework-olm/pull/712)
* [OCPBUGS-30193](https://issues.redhat.com/browse/OCPBUGS-30193): Synchronize From Upstream Repositories [#711](https://github.com/openshift/operator-framework-olm/pull/711)
* [OCPBUGS-30141](https://issues.redhat.com/browse/OCPBUGS-30141): ClusterRoleBinding + Service SSA cherry-pick [#707](https://github.com/openshift/operator-framework-olm/pull/707)
* [OCPBUGS-30147](https://issues.redhat.com/browse/OCPBUGS-30147): Wait for required RBAC before creating packageserver CSV [#710](https://github.com/openshift/operator-framework-olm/pull/710)
* NO-ISSUE:  [release-4.15] Backport flaky CRD upgrade block e2e test fix [#694](https://github.com/openshift/operator-framework-olm/pull/694)
* [OCPBUGS-24159](https://issues.redhat.com/browse/OCPBUGS-24159): Updating operator-lifecycle-manager-container image to be consistent with ART [#623](https://github.com/openshift/operator-framework-olm/pull/623)
* [OCPBUGS-29083](https://issues.redhat.com/browse/OCPBUGS-29083): * olm,catalog: only validate the resources we label [#683](https://github.com/openshift/operator-framework-olm/pull/683)
* [OCPBUGS-29116](https://issues.redhat.com/browse/OCPBUGS-29116): [release-4.15]: Clear (existing) error cond from Subscription, once error resolved [#684](https://github.com/openshift/operator-framework-olm/pull/684)
* [OCPBUGS-27566](https://issues.redhat.com/browse/OCPBUGS-27566), [OCPBUGS-27571](https://issues.redhat.com/browse/OCPBUGS-27571), [OCPBUGS-27651](https://issues.redhat.com/browse/OCPBUGS-27651), [OCPBUGS-27656](https://issues.redhat.com/browse/OCPBUGS-27656): bump go-git/v5 to 5.11.0 (#1175) [#668](https://github.com/openshift/operator-framework-olm/pull/668)
* [OCPBUGS-25798](https://issues.redhat.com/browse/OCPBUGS-25798): Fix snapshot failure, backport e2es [#670](https://github.com/openshift/operator-framework-olm/pull/670)
* [OCPBUGS-27435](https://issues.redhat.com/browse/OCPBUGS-27435): OCPBUGS-25989: operators/olm: filter RBAC lists by namespace [#664](https://github.com/openshift/operator-framework-olm/pull/664)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/c17320571b51e06e023926aef3edfe7a8fedd2d7...59aa935ebbe6948921ea3292603cbdce898e0091)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/cfb26ffc98ef98b3bcc8e758eedf7bd43f47d94c)

* [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): enforce termination message policy on all platform pods [#559](https://github.com/operator-framework/operator-marketplace/pull/559)
* [OCPBUGS-29575](https://issues.redhat.com/browse/OCPBUGS-29575): Apply hypershift cluster-profile for ibm-cloud-managed [#556](https://github.com/operator-framework/operator-marketplace/pull/556)
* [OPECO-3031](https://issues.redhat.com/browse/OPECO-3031): Update community index to 4.16 [#558](https://github.com/operator-framework/operator-marketplace/pull/558)
* synching dco policy across v0 repos [#557](https://github.com/operator-framework/operator-marketplace/pull/557)
* [OPECO-3029](https://issues.redhat.com/browse/OPECO-3029): Update image tag to 4.16 for all indexes except community-operators [#555](https://github.com/operator-framework/operator-marketplace/pull/555)
* Delete deploy dir [#529](https://github.com/operator-framework/operator-marketplace/pull/529)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/53c124a3f0edfd151652e1f23c87dd39ed7646bb...cfb26ffc98ef98b3bcc8e758eedf7bd43f47d94c)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/42b1cc427538a736f8c056171b4de7e6c6a366fb)

* [OCPBUGS-29599](https://issues.redhat.com/browse/OCPBUGS-29599): Update HostNetworkNamespace address_set for remote zone nodes [#2074](https://github.com/openshift/ovn-kubernetes/pull/2074)
* [OCPBUGS-29185](https://issues.redhat.com/browse/OCPBUGS-29185): Wait for ovnkube controller to start before checking result error. [#2064](https://github.com/openshift/ovn-kubernetes/pull/2064)
* [OCPBUGS-28725](https://issues.redhat.com/browse/OCPBUGS-28725): Update netpol namespace address sets usage to the old ways [#2050](https://github.com/openshift/ovn-kubernetes/pull/2050)
* [OCPBUGS-29230](https://issues.redhat.com/browse/OCPBUGS-29230): [release-4.15] separate the handler sync from the informer sync & remove the full service resync during node tracker startup [#2060](https://github.com/openshift/ovn-kubernetes/pull/2060)
* [OCPBUGS-28818](https://issues.redhat.com/browse/OCPBUGS-28818): Support Permanent Session Affinity [#2045](https://github.com/openshift/ovn-kubernetes/pull/2045)
* [OCPBUGS-28848](https://issues.redhat.com/browse/OCPBUGS-28848): Ignore hybrid-overlay nodes from EgressIP controller [#2040](https://github.com/openshift/ovn-kubernetes/pull/2040)
* [OCPBUGS-29001](https://issues.redhat.com/browse/OCPBUGS-29001): kubevirt, Replace routes on migration [#2052](https://github.com/openshift/ovn-kubernetes/pull/2052)
* [OCPBUGS-27947](https://issues.redhat.com/browse/OCPBUGS-27947): [release-4.15] Fix LGW ETP=Local on IPv6 [#2028](https://github.com/openshift/ovn-kubernetes/pull/2028)
* [OCPBUGS-27255](https://issues.redhat.com/browse/OCPBUGS-27255): Ensure session affinity cleanup on backend removal [#2020](https://github.com/openshift/ovn-kubernetes/pull/2020)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/00d9aeb42013387a87ba289953bb81966bad14bc...42b1cc427538a736f8c056171b4de7e6c6a366fb)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/faad27f990b16a0806f92bf0362e45d777cec8e7)

* [OCPBUGS-29180](https://issues.redhat.com/browse/OCPBUGS-29180): fix: convert `continue` field between v1beta1 and v1alpha1 [#276](https://github.com/openshift/prometheus-operator/pull/276)
* [OCPBUGS-29509](https://issues.redhat.com/browse/OCPBUGS-29509): fix: don't fail metadata transform on unknown types (#6298) [#278](https://github.com/openshift/prometheus-operator/pull/278)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/b558bb393c7860ecb1e577a5825ec341f4e55e90...faad27f990b16a0806f92bf0362e45d777cec8e7)


### [telemeter](https://github.com/openshift/telemeter/tree/18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b)

* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Updating telemeter-container image to be consistent with ART [#496](https://github.com/openshift/telemeter/pull/496)
* [OCPBUGS-24153](https://issues.redhat.com/browse/OCPBUGS-24153): Force kill jobs after integration v2 test finish [#515](https://github.com/openshift/telemeter/pull/515)
* [Full changelog](https://github.com/openshift/telemeter/compare/e1f625aa31e46a84fb5d9f97c8224b9059e27d8a...18e1ab8682c78eb25d7aeaf53cfcb11d12abcc3b)


### [tests](https://github.com/openshift/origin/tree/d68c509dc1c13489fdff39e618fccaaa72a84fa3)

* [OCPNODE-2101](https://issues.redhat.com/browse/OCPNODE-2101): add kube-rbac-proxy-crio toleration change [#28637](https://github.com/openshift/origin/pull/28637)
* [OCPBUGS-30161](https://issues.redhat.com/browse/OCPBUGS-30161): Skip tests for image-registry operator with single replica [#28633](https://github.com/openshift/origin/pull/28633)
* [OCPBUGS-29927](https://issues.redhat.com/browse/OCPBUGS-29927): Only extract node role from properly formatted node-role label [#28615](https://github.com/openshift/origin/pull/28615)
* [TRT-1512](https://issues.redhat.com/browse/TRT-1512): Add debug messages to debug openshift-tests hang [#28610](https://github.com/openshift/origin/pull/28610)
* [OCPBUGS-27847](https://issues.redhat.com/browse/OCPBUGS-27847): Do not assume there is just a single kubelet systemd service [#28545](https://github.com/openshift/origin/pull/28545)
* [OCPBUGS-29031](https://issues.redhat.com/browse/OCPBUGS-29031): Replace 'coreydaley' with 'sayan-biswas' [#28573](https://github.com/openshift/origin/pull/28573)
* [OCPBUGS-26487](https://issues.redhat.com/browse/OCPBUGS-26487): Increase timeout for pod-network-service [#28508](https://github.com/openshift/origin/pull/28508)
* [OCPBUGS-27934](https://issues.redhat.com/browse/OCPBUGS-27934): fix panic in service-poller [#28550](https://github.com/openshift/origin/pull/28550)
* [OCPBUGS-26960](https://issues.redhat.com/browse/OCPBUGS-26960): updated timeout to 3 seconds to account for network timing issues [#28519](https://github.com/openshift/origin/pull/28519)
* [OCPBUGS-27373](https://issues.redhat.com/browse/OCPBUGS-27373): pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test [#28549](https://github.com/openshift/origin/pull/28549)
* [OCPBUGS-27348](https://issues.redhat.com/browse/OCPBUGS-27348): pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable [#28531](https://github.com/openshift/origin/pull/28531)
* fix jira components to match actual jira components [#28455](https://github.com/openshift/origin/pull/28455)
* [OCPBUGS-27373](https://issues.redhat.com/browse/OCPBUGS-27373): pathologicalevents: Ignore leaky RecreatingTerminatedP… [#28533](https://github.com/openshift/origin/pull/28533)
* [Full changelog](https://github.com/openshift/origin/compare/9354248440b2b46bf11967a203c7e8a7834b29c2...d68c509dc1c13489fdff39e618fccaaa72a84fa3)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/2070c131306654b67ad6c52261818833e3c70316)

* [OCPBUGS-26476](https://issues.redhat.com/browse/OCPBUGS-26476): UPSTREAM: <carry>: bump x/crypto [#35](https://github.com/openshift/cluster-api-provider-vsphere/pull/35)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/b21c0ba942580e08352ad6b3170ee17a010a2a00...2070c131306654b67ad6c52261818833e3c70316)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/74481e34aa9c2ef2de0ce0289e2383a179d34b89)

* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Revert "Merge pull request #97 from jsafrane/rebase-v3.1.1" [#110](https://github.com/openshift/vmware-vsphere-csi-driver/pull/110)
* [OCPBUGS-26074](https://issues.redhat.com/browse/OCPBUGS-26074), [OCPBUGS-26075](https://issues.redhat.com/browse/OCPBUGS-26075), [OCPBUGS-26076](https://issues.redhat.com/browse/OCPBUGS-26076): [release-4.15]: Fix CVE-2023-45142 and CVE-2023-47108 [#109](https://github.com/openshift/vmware-vsphere-csi-driver/pull/109)
* [OCPBUGS-25856](https://issues.redhat.com/browse/OCPBUGS-25856): UPSTREAM: 2714: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 [#107](https://github.com/openshift/vmware-vsphere-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/56a1741f76c7ab60751c3788245b9b77a82a43a9...74481e34aa9c2ef2de0ce0289e2383a179d34b89)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/e0d46570a06caff3439b410b9c9f75cb383a3d2d)

* [OCPBUGS-28817](https://issues.redhat.com/browse/OCPBUGS-28817): Mark the operator as Disabled on connection error [#219](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/219)
* [OCPBUGS-27378](https://issues.redhat.com/browse/OCPBUGS-27378): Rerun checks on reconnect [#216](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/216)
* [OCPBUGS-26409](https://issues.redhat.com/browse/OCPBUGS-26409): CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46 [#207](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/207)
* [OCPBUGS-26013](https://issues.redhat.com/browse/OCPBUGS-26013): Enable new features to prevent CSI driver from crash looping (revert OCPBUGS-23970) [#205](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/205)
* [OCPBUGS-25355](https://issues.redhat.com/browse/OCPBUGS-25355): setting TLSSecurityProfile with no minTLSVersion crashes controller [#204](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/204)
* [OCPBUGS-25161](https://issues.redhat.com/browse/OCPBUGS-25161): Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler [#200](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/200)
* [OCPBUGS-23970](https://issues.redhat.com/browse/OCPBUGS-23970): Enable new features to prevent CSI driver from crash looping [#192](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/192)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/d18d77f8dd7b977fc34234e4e7f4cea4e35181c3...e0d46570a06caff3439b410b9c9f75cb383a3d2d)