# 4.13.0-rc.4 Created: 2023-04-14 19:23:49 +0000 UTC Image Digest: `sha256:8a603a30829b2fe3a35ca742934347d4db9c6b7673dee1aba5ad6b3b1627c357` ## Changes from 4.13.0-rc.3 ### Components * Kubernetes upgraded from 1.26.2 to 1.26.3 * Red Hat Enterprise Linux CoreOS upgraded from 413.92.202304101935-0 to 413.92.202304140330-0 ### Rebuilt images without code change * machine-os-content `sha256:2783be253d229de63f50d0a388f8bf4b35913845ba82e522c11c5a3db7cd1674` * [machine-os-images](https://github.com/openshift/machine-os-images) git [b14856ff](https://github.com/openshift/machine-os-images/commit/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e) `sha256:b3aba4d8b5fb9312f61c1efbd552605565009e246ab7b8c61d5e5212fa895bd8` * [network-tools](https://github.com/openshift/network-tools) git [b4098c67](https://github.com/openshift/network-tools/commit/b4098c67659217e36ac7077229b25bbe2c3e5f38) `sha256:d83d8ba405aec6f6c6f4bdf10d8e489463ad45c83a4024f483bfef79b5b6f5fb` * [ovn-kubernetes-microshift-rhel-9](https://github.com/openshift/ovn-kubernetes) git [c66883c0](https://github.com/openshift/ovn-kubernetes/commit/c66883c01e06722319fdf18e9997231b6abda3aa) `sha256:24da6891ed61d7172edc821275691303d48bb6d3287ecb27a43fed1f912e53d0` * [ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes) git [c66883c0](https://github.com/openshift/ovn-kubernetes/commit/c66883c01e06722319fdf18e9997231b6abda3aa) `sha256:1a6cfd2cc737888853e1021de76ec8f343afbafb11fa66cbadbce0488fedcf7b` * rhel-coreos `sha256:3a617bfd61c621430cc7a0ef3e7caa34a85e769cdaf36495ada7d71d044d8f1c` * rhel-coreos-extensions `sha256:832d986fc8afc56b0df3c0146d97bdebf165063a4c8f44ac708e19d495d5eeca` ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/00aa14516f3a20a849dba774c6865f43b89a438e) * [OCPBUGS-11659](https://issues.redhat.com/browse/OCPBUGS-11659): Upgrade libnmstate version used [#7082](https://github.com/openshift/installer/pull/7082) * [OCPBUGS-11661](https://issues.redhat.com/browse/OCPBUGS-11661): AWS - Remove ACLs from s3 ign [#7083](https://github.com/openshift/installer/pull/7083) * [Full changelog](https://github.com/openshift/installer/compare/d0358c5bcbc5bd0ceb3b752b01d8f0067b792a34...00aa14516f3a20a849dba774c6865f43b89a438e) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/7f2d02b853be787815e2109d8b1a62736c9e2bf7) * [OCPBUGS-11706](https://issues.redhat.com/browse/OCPBUGS-11706): ccoctl: Enable public anon read access to default OIDC S3 bucket [#528](https://github.com/openshift/cloud-credential-operator/pull/528) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/e74d108153107ff2979febe8c36588132c709796...7f2d02b853be787815e2109d8b1a62736c9e2bf7) ### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/ee908b6bb91dee3e61aface46d53a00b4e9288a2) * [OCPBUGS-10923](https://issues.redhat.com/browse/OCPBUGS-10923): Waiting for 2 masters in HA mode case [#83](https://github.com/openshift/cluster-bootstrap/pull/83) * [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/49fe1bdba1ab15b1a89797d7bb1d4d66de57fbeb...ee908b6bb91dee3e61aface46d53a00b4e9288a2) ### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/6294cba84fc2c54f50b52d88cbb06fb791a491c9) * [OCPBUGS-11506](https://issues.redhat.com/browse/OCPBUGS-11506): E2E periodics test timeout failures improvement [#187](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/187) * [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/6b5d5cf0fb4f10383b2e1cc588ca7d0cd18e40bf...6294cba84fc2c54f50b52d88cbb06fb791a491c9) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/f9f2b5dc404d866dee4b8c097b4313adddeb2f62) * [OCPBUGS-11683](https://issues.redhat.com/browse/OCPBUGS-11683): Add Controller health to CEO liveness probe [#1039](https://github.com/openshift/cluster-etcd-operator/pull/1039) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b633b4071b1b6dbd4ee6deb620376e8776b00b34...f9f2b5dc404d866dee4b8c097b4313adddeb2f62) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/02ea4a4120dd0f8eb49d070b1fe420ed6d1debba) * [OCPBUGS-4343](https://issues.redhat.com/browse/OCPBUGS-4343): update apf configuration to use v1beta3 [#1470](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1470) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/5f038db7df7ade2f3da707394a14e391c693d25c...02ea4a4120dd0f8eb49d070b1fe420ed6d1debba) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/ce66cd5420829c20837662770451ee1c64294d47) * [OCPBUGS-11227](https://issues.redhat.com/browse/OCPBUGS-11227): Update node client allowed usages [#190](https://github.com/openshift/cluster-machine-approver/pull/190) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/28c0c5359a1cc4109b4819bf51ee41a32ac47d17...ce66cd5420829c20837662770451ee1c64294d47) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/d9b70b9b587762e53863d61d0447f2f74580bd4b) * [OCPBUGS-11750](https://issues.redhat.com/browse/OCPBUGS-11750): Fix allowlist ds template [#1779](https://github.com/openshift/cluster-network-operator/pull/1779) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/b7b90a5bef21ebe3c91362bb1415469197e0290b...d9b70b9b587762e53863d61d0447f2f74580bd4b) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/0b344c121c7080341920c3035ea2c888315d2de2) * Revert #567 and cleanup PPC-generated TuneD config (#615) [#615](https://github.com/openshift/cluster-node-tuning-operator/pull/615) * Skip tests depending on Jira or Bz issue status (#599) [#599](https://github.com/openshift/cluster-node-tuning-operator/pull/599) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5d93791b480d5e873f0ab66e9124018e4de0db45...0b344c121c7080341920c3035ea2c888315d2de2) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/befad9db0b285a66e03d4154dd656f0b6d79418a) * UPSTREAM: <carry>: OCPNODE-1548,OCPNODE-1584: disable load balancing on created cgroups when managed is enabled [#1543](https://github.com/openshift/kubernetes/pull/1543) * [OCPBUGS-11669](https://issues.redhat.com/browse/OCPBUGS-11669): Bump to k8s 1.26.3 [#1540](https://github.com/openshift/kubernetes/pull/1540) * [OCPBUGS-10432](https://issues.redhat.com/browse/OCPBUGS-10432): CSI Inline Volume admission plugin does not log object name correctly [#1515](https://github.com/openshift/kubernetes/pull/1515) * [Full changelog](https://github.com/openshift/kubernetes/compare/22308ca177342eb6820b95e0cad1142e385ef4c9...befad9db0b285a66e03d4154dd656f0b6d79418a) ### [hypershift](https://github.com/openshift/hypershift/tree/d2b24c33728bfd7fdfcf09a0146adc09138d1880) * [OCPBUGS-11545](https://issues.redhat.com/browse/OCPBUGS-11545): Pass runAsUser to CNO so it can run its managed services with proper security context [#2392](https://github.com/openshift/hypershift/pull/2392) * [OCPBUGS-10422](https://issues.redhat.com/browse/OCPBUGS-10422): Create new EC2 client for AWS identity provider health check [#2402](https://github.com/openshift/hypershift/pull/2402) * [OCPBUGS-10995](https://issues.redhat.com/browse/OCPBUGS-10995): Honor scheduler profile in HostedCluster configuration [#2337](https://github.com/openshift/hypershift/pull/2337) * [OCPBUGS-11725](https://issues.redhat.com/browse/OCPBUGS-11725): Update HostedCluster oauthCallbackURLTemplate [#2409](https://github.com/openshift/hypershift/pull/2409) * [HOSTEDCP-568](https://issues.redhat.com/browse/HOSTEDCP-568): Update Konnectiviy socks5 proxy for IBM exception [#2404](https://github.com/openshift/hypershift/pull/2404) * bug OCPBUGS-10422: Preserve false status of ValidAWSIdentityProvider condition [#2401](https://github.com/openshift/hypershift/pull/2401) * [HOSTEDCP-802](https://issues.redhat.com/browse/HOSTEDCP-802): add cli flag to enable upgrade type [#2388](https://github.com/openshift/hypershift/pull/2388) * [OCPBUGS-11606](https://issues.redhat.com/browse/OCPBUGS-11606): properly reconcile with user specified changes for in proxy configuration [#2394](https://github.com/openshift/hypershift/pull/2394) * [Full changelog](https://github.com/openshift/hypershift/compare/3085705bb5646275be325047682ff61e0a5bd0b5...d2b24c33728bfd7fdfcf09a0146adc09138d1880) ### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/11b1439d48a47a408ae7e2dd851989f7b7b4f595) * [OCPBUGS-11643](https://issues.redhat.com/browse/OCPBUGS-11643): Updating kube-rbac-proxy images to be consistent with ART [#61](https://github.com/openshift/kube-rbac-proxy/pull/61) * [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/0aa2830ed7359fd8cd0e2f7db0ed96a733c5990e...11b1439d48a47a408ae7e2dd851989f7b7b4f595) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ad0b4c78e8a781000364f51f4e7178927ab7fff4) * [OCPBUGS-11051](https://issues.redhat.com/browse/OCPBUGS-11051): Splitting NetworkManager-onprem.conf.yaml to 2 files: [#3642](https://github.com/openshift/machine-config-operator/pull/3642) * [OCPBUGS-10946](https://issues.redhat.com/browse/OCPBUGS-10946): Fix kubelet.service node-ip for v6-primary dual-stack [#3638](https://github.com/openshift/machine-config-operator/pull/3638) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/0318874b6243752bb0bd30f8e99bd03d19278b37...ad0b4c78e8a781000364f51f4e7178927ab7fff4) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/9f36752562fc784c9b5bf3fb4d592aae19ea31ad) * [OCPBUGS-11427](https://issues.redhat.com/browse/OCPBUGS-11427): Fix network status annotation to k8s.v1.cni.cncf.io/network-status [#127](https://github.com/openshift/whereabouts-cni/pull/127) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/ef215ab64a192946123d4afaaa98e42cbcb4a915...9f36752562fc784c9b5bf3fb4d592aae19ea31ad) ### [tests](https://github.com/openshift/origin/tree/fc4fc33a5372b138b421f1e5cd70b48999da1543) * Revert "TRT-889: Temp flake all azure disruption" [#27870](https://github.com/openshift/origin/pull/27870) * [OCPBUGS-11307](https://issues.redhat.com/browse/OCPBUGS-11307): Add test for Egress Firewall node selector [#27845](https://github.com/openshift/origin/pull/27845) * [Full changelog](https://github.com/openshift/origin/compare/7fc179ae971e44d40a9d23361d14092672847328...fc4fc33a5372b138b421f1e5cd70b48999da1543)