Release v1.28.2

What's Changed

• [release-1.28] [occm] Use standard service account name in OCCM helm chart by @wwentland in #2447
• [release-1.28] manage-security-groups: Only add SGs to LB members (#2455) by @dulek in #2466
• [release-1.28] Remove duplicate pflag.Parse calls by @stephenfin in #2467
• [release-1.28] [occm] fix: octavia tlsContainerRef validation for barbican secrets by @k8s-infra-cherrypick-robot in #2458
• [charts/occm] Implement imagePullSecret support for release 1.28 by @carlotardl in #2445
• [release-1.28] update k8s.io/kubernetes to v1.28.4 in go.mod by @kayrus in #2496
• [release-1.28] [tests] retry ubuntu image download on temp error by @k8s-infra-cherrypick-robot in #2506
• [release-1.28] [occm] Lookup ports by SG and not tags (#2355) by @dulek in #2538
• [release-1.28] [occm] Add ability to add Events by OCCM by @k8s-infra-cherrypick-robot in #2539
• [release-1.28] [occm] Delete LB that gone into ERROR state by @k8s-infra-cherrypick-robot in #2536
• [release-1.28] [ci] Bump golangci-lint for go 1.22 by @k8s-infra-cherrypick-robot in #2545
• [release-1.28] Remove handling code for glog by @k8s-infra-cherrypick-robot in #2534
• [release-1.28] [occm] Make sure we don't mask LB tests failures and fix what was failing by @dulek in #2537
• Cut 1.28.2 by @dulek in #2559

Full Changelog: v1.28.1...v1.28.2