blocked-edges/4.15.3-EarlyAPICertRotation: Extend to 4.15.2 and .3

21684f7 (blocked-edges/4.15.0-EarlyAPICertRotation: Fixed in
4.15.2, 2024-03-08, openshift#4898) thought this was fixed, but apparently not
[1].

[1]: https://issues.redhat.com/browse/OCPBUGS-31384

blocked-edges/4.15.0-EarlyAPICertRotation.yaml

@@ -1,6 +1,5 @@
 to: 4.15.0
 from: 4[.]14[.].*
-fixedIn: 4.15.2
 url: https://issues.redhat.com/browse/API-1687
 name: EarlyAPICertRotation
 message: Clusters born in 4.7 and earlier will trigger an api-int certificate authority rollout, and bugs in that rollout may break kubelet access to the Kubernetes API service.

blocked-edges/4.15.2-EarlyAPICertRotation.yaml

@@ -0,0 +1,14 @@
+to: 4.15.2
+from: 4[.]14[.].*
+url: https://issues.redhat.com/browse/API-1687
+name: EarlyAPICertRotation
+message: Clusters born in 4.7 and earlier will trigger an api-int certificate authority rollout, and bugs in that rollout may break kubelet access to the Kubernetes API service.
+matchingRules:
+  - type: PromQL
+    promql:
+      promql: |
+        topk(1,
+          label_replace(group by (version) (cluster_version{_id="",type="initial",version=~"4[.][0-9][.].*"}),"born_by_4_9", "yes, so possibly actually born in 4.7 or earlier", "", "")
+          or
+          label_replace(0 * group by (version) (cluster_version{_id="",type="initial",version!~"4[.][0-9][.].*"}),"born_by_4_9", "no, born in 4.10 or later", "", "")
+        )

blocked-edges/4.15.3-EarlyAPICertRotation.yaml

@@ -0,0 +1,14 @@
+to: 4.15.3
+from: 4[.]14[.].*
+url: https://issues.redhat.com/browse/API-1687
+name: EarlyAPICertRotation
+message: Clusters born in 4.7 and earlier will trigger an api-int certificate authority rollout, and bugs in that rollout may break kubelet access to the Kubernetes API service.
+matchingRules:
+  - type: PromQL
+    promql:
+      promql: |
+        topk(1,
+          label_replace(group by (version) (cluster_version{_id="",type="initial",version=~"4[.][0-9][.].*"}),"born_by_4_9", "yes, so possibly actually born in 4.7 or earlier", "", "")
+          or
+          label_replace(0 * group by (version) (cluster_version{_id="",type="initial",version!~"4[.][0-9][.].*"}),"born_by_4_9", "no, born in 4.10 or later", "", "")
+        )