Merge Requests integrated in this release

26 merge requests were integrated in this repo between 1.5.4 and 1.5.5.
These notes don't account for the MRs merged in secondary repos.

Kubernetes

[backport-1.5] pin coredns version on first-node installation !8160 ~"rke2" (issues: #4174)

Update Sylva Helm chart sylva-capi-cluster to v0.11.21 !8953 ~"renovate"
[backport-1.5] Do not rely on gitlab CI cache in delete workload cluster job !8022 ~"type::bug"
Update Sylva-elements !7462 ~"area:observability" ~"capo" ~"monitoring" ~"renovate"

Update heat-operator to v0.2.2 !7938 ~"renovate"
Update Sylva-elements !7462 ~"area:capi" ~"area:observability" ~"monitoring" ~"renovate"
Update Sylva-elements !8609 ~"area:observability" ~"monitoring" ~"renovate"

Update Helm chart rancher-monitoring to v106.1.4+up69.8.2-rancher.23 !6196 ~"area:observability" ~"rancher" ~"renovate"
Update Sylva-elements !7462 ~"area:capi" ~"area:observability" ~"capo" ~"renovate"
Update Sylva-elements !8609 ~"area:observability" ~"capo" ~"renovate"

[backport-1.5]: Prevent running vault with root privilege + additional fix for error (Operation not permitted) !7921 (issues: #4066)
[backport-1.5]: Fix kustomize units signature !8204 ~"backport" ~"type::bug" (issues: #4202)
[backport-1.5] fix bug in sbom-operator unit !9020 ~"backport" ~"bug-workaround::identified" ~"type::bug" (issues: #4333)

[backport-1.5] pin coredns version on first-node installation !8160 ~"area:kubernetes-core" (issues: #4174)

[backport-1.5] multus-cleanup: priority-class and terminationGracePeriodSeconds !8320 (issues: #4237)
[backport-1.5] Ensure the OpenBao resources land in vault ns even in Workload Cluster !8497
[backport-1.5] Preserve SR-IOV CRDs from deletion when upgrading from Sylva 1.4 !8624 (issues: #4328)
[backport-1.5] prevent namespace defined outside of namespace-defs unit to be pruned by Flux !8730 ~"backport"
[backport-1.5] Keycloak: Remove the patchs added by the keycloak-upgrade-db !8120 ~"backport" ~"security::user-and-role-management" (issues: #4156)
[backport-1.5] Update k8s gateway repo url !9150 ~"backport"

[backport-1.5] Check for thanos_query_url existence before running tests !8229 ~"backport"
[Backport 1.5] Fix intermittent bin/env failures in delete-workload-cluster !8300 ~"type::bug"
Keep only a weekly essential coverage for scheduled pipelines for release-1.5 !8395
[Backport 1.5] Change downstream pipeline strategy from depend to mirror !8448
[backport-1.5] add exception for k8s secret in mgmt-leak-report !8773 ~"backport" (issues: #4449)
[backport-1.5] run wkld-detect-unplanned-node-rolling-updates on deploy runners !8207 ~"backport" (issues: #3854)
Remove okd & ck8s from Weekly essentials pipelines in release-1.5 !9132
[backport-1.5] apply infra-capd CI values !9162 ~"backport" (issues: #4627)

15 people contributed.