Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.21-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
  • aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
  • gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.13.20 (changes) - S S S
• 4.13.19 (changes) - Success
• 4.13.18 (changes) - Success
• 4.13.17 (changes) - Success
• 4.13.12 (changes) - Failed
• 4.13.4 (changes) - Success
• 4.13.3 - Success
• 4.13.2 (changes) - Success
• 4.13.1 (changes) - Failed
• 4.13.0 (changes) - Success
• 4.12.42 (changes) - S S S
• 4.12.41 (changes) - Success
• 4.12.40 (changes) - Success
• 4.12.39 (changes) - Success
• 4.12.26 (changes) - Success
• 4.12.23 (changes) - Failed
• 4.12.18 (changes) - Success
• 4.12.17 (changes) - Failed
• 4.12.16 (changes) - Success

Upgrades to:

• 4.14.43 (changes) - Failed
• 4.14.33 (changes) - Success
• 4.14.32 (changes) - Success
• 4.14.31 (changes) - Success
• 4.14.30 (changes) - Success
• 4.14.29 (changes) - Failed
• 4.14.28 (changes) - Failed
• 4.14.27 (changes) - Success
• 4.14.26 (changes) - Failed
• 4.14.25 (changes) - Failed
• 4.14.24 (changes) - Success
• 4.14.23 (changes) - Success
• 4.14.22 (changes) - Success
• 4.14.21 (changes) - Success
• 4.14.20 (changes) - Failed
• 4.14.19 (changes) - Success
• 4.14.18 (changes) - Failed
• 4.14.17 (changes) - Failed
• 4.14.16 (changes) - Failed
• 4.14.15 (changes) - Success
• 4.14.14 (changes) - Success
• 4.14.13 (changes) - Success
• 4.14.12 (changes) - Success
• 4.14.11 (changes) - Failed
• 4.14.10 (changes) - Failed
• 4.14.9 (changes) - Success
• 4.14.8 (changes) - Success
• 4.14.7 (changes) - Success
• 4.14.6 (changes) - Failed
• 4.14.5 (changes) - Failed
• 4.13.43 (changes) - Success
• 4.13.37 (changes) - Success
• 4.13.31 (changes) - Success
• 4.13.27 (changes) - Failed

---

Loading changelog, this may take a while ...

Changes from 4.13.3

Created: 2023-11-03 15:39:44 +0000 UTC

Image Digest: sha256:562c214e9662e3684ac5b8c3d5d2759a83f544da8897a00ebe91a02fcad6d2d9

Release 4.13.21 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2023-11-01-180734

Components

• Kubernetes upgraded from 1.26.5 to 1.26.9
• Red Hat Enterprise Linux CoreOS upgraded from 413.92.202306070210-0 to 413.92.202310210500-0 (diff)

Rebuilt images without code change

• alibaba-cloud-controller-manager git b5200baa sha256:0213ae8c410f2fa168fc7aa93db995528e6f57d02f5a89a09591bb40345a739a
• alibaba-machine-controllers git 4c0f96a6 sha256:0001eefcf05d6ecb2a3384605d6380a6d15b26d78f335c44c33e6b2e5f47a365
• aws-cloud-controller-manager git 946daa07 sha256:06234e9aa3459b65291d416b82e8223bf9e7869099003ea4adf5b8001798fc23
• aws-machine-controllers git ba3b3a31 sha256:16e3530a773584c0eee9bf11decc054845d4cfb3b746fbc20773105f62c03a57
• aws-pod-identity-webhook git 125a4b45 sha256:8f1857508aef719351262aab6d548eb9ce3b8a3cdb0e41a491a634da8bfe9e07
• azure-machine-controllers git 2c0c0ec9 sha256:8caf4216fccc46aa58b33b3f2ff08c89cdf8fe04ee1d358f14193c377454a474
• cloud-credential-operator git 0621fcaf sha256:c47f74d675882e2611adc9fb4dda3dd8f7c235821cec71aac79ae0c11ba7168e
• cluster-autoscaler git c58c53bf sha256:cec40ebe22032ec64bed5ad160db8d16ccc0c939e76fa83b0301b2b215c37f73
• cluster-bootstrap git ee908b6b sha256:a1248aa2fd1650c15b555ed084c6017feafd466b33e97d9d3f50d404c9d47c02
• cluster-capi-operator git ce1c9a35 sha256:a4b31a1dd5ab31cd6768908c3a304e5908457feec05858c9021e950b83f26b08
• cluster-image-registry-operator git 3ed61e2b sha256:928e7955b979c93af4aaa393a130907443a643cc1a876271f97248eca6b7423b
• cluster-kube-storage-version-migrator-operator git 9f475980 sha256:ec072786af6acf6fc8bb6f84c692053eb8c87bcfd7c10cbab843331b89632c73
• cluster-machine-approver git ce66cd54 sha256:807aadfb23e75866a3bee8ec26cf1c8688e3b09fcb473f1296b8daa77a9cffed
• cluster-openshift-controller-manager-operator git 9a8aba8c sha256:2bd2dacd97561a8f7db7a8a4505247f7e574d47e9c011c802e15d98c63061406
• cluster-policy-controller git 8d2af85d sha256:90597101f70428e828cff7528aeb348d2d6707e8bebc7658a0534d8e72d29d75
• cluster-update-keys git 5b725937 sha256:5dcf2444f8b90f851a987c02896c187bd189b9e56901e0a9e99311d016de81cd
• configmap-reloader git 9adad592 sha256:4eced6009d461855dd98c09622708a2088dfa975c2aed94ad02e19a72e2d0f16
• csi-driver-nfs git 2b914c21 sha256:de256d50714e04cc7b46dab9da3f3fb0a0e4bf00e3589bdf4bfab97f1706bc21
• driver-toolkit git d719bdcf sha256:f4f0e65b6c61fd9fc5cb5166579ef047d911844fdffef97b0fece3f1bfe97905
• gcp-cloud-controller-manager git efaf4dc6 sha256:cfef1b7f748d79a6645b0b9cb6ad20c43b6b36e93e3f55ec58563701c09fc01b
• gcp-cluster-api-controllers git eaeccca9 sha256:1a2dea8d7ed9ee67dad07fa51b64c7c3b9622ab4480141573ebe2675214ef535
• gcp-machine-controllers git 38ddff06 sha256:fcb514bd3cd87a7cf12a0c1ea027fc5b088b021dfc5ff7d37b9fd9a7415ccce3
• ibm-cloud-controller-manager git 59edd923 sha256:bb61a9f87a9ebce3c313c6584afce6c58146f14fa5f374499e75c40d0cf1d5e1
• ibmcloud-cluster-api-controllers git d221afa4 sha256:3855c2ffc18f2851e2180e37d4d614261e69e05a3e3784e35d2c0eddcadafb8a
• ibmcloud-machine-controllers git bb253a0c sha256:19003238966d6757e69391ee1300d221161d34c6c9df04bc836107800d572f3b
• ironic-static-ip-manager git 4536724a sha256:afeeed1cf9d974ce711ad47571e32ba21ea7984ab34b7f5e392360356186f022
• keepalived-ipfailover git 04659348 sha256:e85f2fce52bf969da9012bd7045c995d3a7cdc78d60f393f5cd82bddee1e5840
• kube-state-metrics git 4b969848 sha256:98544c9374b2cd0680744b962e314baa07020f2bd7ce1a3bd250632bc3b9568c
• kube-storage-version-migrator git bad104d1 sha256:7e60341a616177a07896163dcd010aa57b25fb9f9f4535eadc1a1b108b2da46b
• kubevirt-cloud-controller-manager git ee2033ec sha256:e21220e5372a941bb0c542d0c61c662e5ca8e1d11f12ef71641aaf91fa44fd84
• kubevirt-csi-driver git efa0b943 sha256:1b04aa85f157a96fab3b9240f1e8ce93ce05a12014c95dc0d46cc585d5412731
• machine-api-operator git 370fdaa4 sha256:b5f9becb7e143dcd4b3eea0c29cbc3d32f7e411add0dced75fcfe91879d0b0f2
• machine-os-content sha256:d1b61c7b46ef69a76ee890fd137f8a890c40adee5d52b848fc49507199eb5dbc
• machine-os-images git b14856ff sha256:6d077c9de44c4b48b2c60e1645f2f1d34f15a2398452909fdd24e17f586b4849
• multus-admission-controller git f76d674e sha256:f2a7b0024ad2a5028510b7b3a72a9c3b6e96fc3c341c5bd2d474db84db7786c2
• network-metrics-daemon git e72c8ad1 sha256:0202fefff47372359d46e495142a0b7c34575fb8f483254fa110ce17f92c65ca
• nutanix-cloud-controller-manager git 4d1c58e2 sha256:c49ad927e147779ee922333a2998c762d04c0d5c2fd3774e2098db0d570b2e95
• nutanix-machine-controllers git be43191e sha256:bdbc73e53f86992e6f68d4a52f6dfd95e057fa1072bd8cb9030932ce204e391b
• oauth-apiserver git 41c2dfea sha256:e0f5c32d46158cc5c5061aa678c856fd828006460f00492b2ac100ababb0e1ed
• oauth-server git b841149f sha256:ac027c4c87cd9ade00972f52dbf4a3a112a18e390c081d05c98a0c79afcf198f
• openshift-apiserver git 0b827682 sha256:00d69ca897e5dc382920c2dd72529e973627a0e25f136fc9b1e8cb07e72319d9
• openshift-state-metrics git 7beb8807 sha256:2b41c266ee7a127d081ce8b715e1721dc1530fe12eb7d8920a17a670548e7e12
• ovirt-csi-driver git f21b470f sha256:8eb48825254953e7a3f21104e5bad7aae40d9a03fbb8d30e8091d4a635ae4a6b
• ovirt-machine-controllers git 22d89b3f sha256:23e5ac22d2cb68b4a600e29be0cb3c3c2a280f81ed43bb7049ead844db6cc1a7
• prom-label-proxy git b501d5e2 sha256:3103203a2377462def441f1e431f995bb69d8d42c38f1f54ad7ac21e66fa9f59
• rhel-coreos sha256:758fdd54c5ca811c8e4658bbae32a0e6c45f9ce43a078bd1c05d9a11e9146994
• rhel-coreos-extensions sha256:1959a66463a2987e96d1bc3c17f3788a490aa409585126bd89b9c81ec144c7d7
• route-controller-manager git 6667a6cb sha256:dd2f3a89807ce21295e469a1265dd1b79802813773077cb0a5809d45f50bf753
• vsphere-cluster-api-controllers git 24e08ddf sha256:b2bc61a04c1348a387be529965efc9f44182ba20e26e9cc98681c0d142ffec10

agent-installer-api-server

• MGMT-15150: Use same installer binary for all platform types (#5346) #5346
• MGMT-13947: Revert assisted boot reporter service (#5292) #5292
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#717) #670
• Full changelog

agent-installer-node-agent

• OCPBUGS-16373: Ignore arping errors on RHEL 9 (#577) #577
• MGMT-15661: Update to latest ghw version (#594) (#596) #594
• OCPBUGS-15557: vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) #565
• OCPBUGS-14848: Filter out hidden devices (#559) #559
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-21329: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37
• OCPBUGS-16377: [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #31
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-21428: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #65
• OCPBUGS-16250: Add management workloads annotations #55
• Full changelog

apiserver-network-proxy

• OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-15512: Pass right SGs for IsExternallyManaged on creation #468
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-20939: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #240
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-21034: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #281
• OCPBUGS-13036: 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 #220
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-17145: Increase service idle max timeout to 100 minutes #81
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-12557: Bump x/net package to v0.10.0 #278
• Full changelog

azure-disk-csi-driver

• OCPBUGS-20688: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
• OCPBUGS-16318: 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 #44
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #86
• Full changelog

azure-file-csi-driver

• OCPBUGS-20862: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
• OCPBUGS-16321: 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 #30
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-20964: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #77
• OCPBUGS-16250: Add management workloads annotations #67
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-19307: Implement workaround to allow SNO installations for OKD/FCOS #7480
• OCPBUGS-18787: vSphere set bootstrap/master efi #7481
• OCPBUGS-19320: [release-4.13] for vsphere ipi add cluster domain to the uploaded vm configs so that… #7498
• OCPBUGS-20141: [release-4.13] Use updated ansible-core for Openstack image #7559
• OCPBUGS-19670: [release-4.13] Allow different service account for xpn installs in gcp #7524
• OCPBUGS-19773: Increase bootstrap timeout for vSphere platform by 30 mins #7530
• OCPBUGS-16383: [release-4.13] Default dataStore is returned the name instead the inventoryPath #7343
• OCPBUGS-13681: FCOS: bump to latest stable version #7188
• OCPBUGS-11093: Azure: don’t set default subscriptionID for disk encryption sets #7432
• OCPBUGS-17809: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7427
• OCPBUGS-15231: new Aws secret regions support #7264
• OCPBUGS-15222: terraform: aws: secret regions now support ALIAS record #7262
• OCPBUGS-17823: CORS-2445: GCP: Add osImage to the install config #7431
• OCPBUGS-14432: Replica validations #7423
• OCPBUGS-13865: vSphere Add ova sha query; additional debugging #7198
• OCPBUGS-16640: [release-4.13] Update azure cli version to 2.49.0 #7357
• OCPBUGS-16777: update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 #7410
• CORS-2764: AWS Shared VPC Backport [release-4.13] #7362
• OCPBUGS-17104: [release-4.13] vsphere terraform bump #7383
• OCPBUGS-17397: backport openstack UPI for ansible 2.10 #7385
• OCPBUGS-15290: GCP: ic: improve project validation #7361
• OCPBUGS-16390: Allow override of networkType #7344
• OCPBUGS-16673: Fix timing issue between network services #7358
• OCPBUGS-14711: Convert Rendezvous IPv6 address to canonical format #7237
• OCPBUGS-16066: Use correct SELinux label. Make rename atomic. #7315
• OCPBUGS-14599: Log additional host info at warning level #7233
• OCPBUGS-15866: Use the same names for public LB in IPI and UPI Azure #7302
• OCPBUGS-16124: azure: skip LB creation when not needed #7322
• OCPBUGS-13812: ic: azure: validate diskTypes in AzureStack #7195
• OCPBUGS-15230: azure: skip NSG creation when BYO vnet #7263
• OCPBUGS-15591: [release-4.13] gcp: add confidential compute support for boostrap TF #7298
• OCPBUGS-15187: images: installer: add xz to the container #7260
• OCPBUGS-14867: Shorten SNO installation duration by releasing CPC lease #7241
• OCPBUGS-13752: Set AdditionalTrustBundle in override when mirroring not enabled #7191
• OCPBUGS-15289: gcp use preconfigured private zone for installation #7271
• OCPBUGS-14916: Replace with govc docker image and fix ibmcli folder permission issue #7245
• OCPBUGS-13323: update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 #7248
• OCPBUGS-14860: GCP XPN Private Cluster Fails with no Public Zone #7240
• Full changelog

baremetal-machine-controllers

• OCPBUGS-21701: Uplift x/net to v0.17.0 #199
• OCPBUGS-16084: Fix Metal3Remediation CRD install order #194
• Full changelog

baremetal-operator

• OCPBUGS-21167: Uplift x/net to v0.17.0 #309
• OCPBUGS-17365: Trigger reconcile on Secret change #295
• OCPBUGS-16013: Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 #292
• OCPBUGS-17229: Set minimum TLS version for webhook to 1.2 #294
• OCPBUGS-13374: Do not try to update images for nodes in transient states #282
• Full changelog

baremetal-runtimecfg

• OCPBUGS-20081: Increase timeout for bootstrap kubeapi #278
• OCPBUGS-18582: Move haproxy firewall rule check earlier in loop #271
• OCPBUGS-17423: Don’t render config with incomplete unicast peer list #267
• OCPBUGS-14487: Support IPv6 VIP for setup with multipe IPv6 addresses #259
• OCPBUGS-15101: Use machine-config state instead of comparing roles #261
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-20298: Use quay redis image instead docker mysql #1566
• OCPBUGS-19942: Truncate existing files when writing from inspect #1553
• OCPBUGS-13527: Bump x org deps 4.13 #1422
• OCPBUGS-16055: mcs cert: account for environments that use IP directly #1500
• OCPBUGS-16193: reboot: set ignition version to 3.1 #1508
• OCPBUGS-16172: Add tls-server-name when property exists in kubeconfig #1506
• handle the error case of node retrieval while waiting for reboot #1484
• bring some cert rotation helpers back into 4.13 #1474
• Full changelog

cloud-network-config-controller

• OCPBUGS-22299: Azure: skip backend pool if attached to an outbound rule #126
• OCPBUGS-15856: Azure: Handle already existing IP configurations #116
• OCPBUGS-14635: increase GCP egress ip capacity to 100 from 10 #113
• Full changelog

cluster-authentication-operator

• OCPBUGS-22210: increase timeout for probes #638
• OCPBUGS-15258: Correctly link oauth apiserver ServiceMonitor with its Service #617
• OCPBUGS-13763: dont log tokens #618
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-17056: Address long acquire times during update #289
• OCPBUGS-17098: update x/net dependency to 0.7.0 #280
• OCPBUGS-16768: add nutanix labels that should be ignored #278
• Full changelog

cluster-baremetal-operator

• OCPBUGS-20867: Uplift x/net to v0.17.0 #370
• OCPBUGS-19369: Guard against nil PlatformStatus #363
• OCPBUGS-15472: Limit role binding to openshift-machine-api namespace #346
• Full changelog

cluster-capi-controllers

• OCPBUGS-12567: Bump x/net package to v0.10.0 #176
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-17101: update x/net dependency to 0.7.0 #269
• OCPBUGS-15746: Alibaba platforms should not be upgradeable #260
• Full changelog

cluster-config-operator

• CORS-2766: AWS Shared VPC API Bump [release-4.13] #337
• OCPBUGS-16164: retire LatencySensitive featureset #329
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-20482: fix: e2e: add gcp custom type to test framework #249
• OCPBUGS-17055: Address long acquire times during update #240
• OCPBUGS-15330: Fix lint issue #222
• OCPBUGS-15161: Surface cpms vs machine diff #218
• OCPBUGS-14024: Check ProviderSpec before generating MachineInfo #211
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-21461: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #168
• Full changelog

cluster-dns-operator

• OCPBUGS-21534: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #390
• OCPBUGS-11449: Enable topology-aware hints if, and only if, nodes have zones #367
• OCPBUGS-15225: Add support for protocolStrategy API field to enable force_tcp configuration #372
• Full changelog

cluster-etcd-operator

• OCPBUGS-20488: prioritize podman pull in etcdctl dl #1136
• OCPBUGS-19378: [4.13] Backports of backup/restore fixes #1117
• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1125
• OCPBUGS-16804: reset snapshot default counts to avoid file already lo… #1080
• OCPBUGS-12487: update golang.org/x/net/http2 #1075
• Full changelog

cluster-ingress-operator

• OCPBUGS-20781: Bump golang.org/x/net for CVE-2023-44487 #987
• OCPBUGS-22402: test/e2e: Don’t use openshift/origin-node #991
• OCPBUGS-17733: [release-4.13] remove shared VPC cred request #972
• NE-1341: Add support for AWS shared VPC in another account #966
• OCPBUGS-15434: [release-4.13] Fix invalid DNS name formatting for GCP #958
• OCPBUGS-15515: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #955
• OCPBUGS-12743: bump controller-runtime to fix the multi namespace cache indexing #921
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1558
• OCPBUGS-15853: pkg/operator/configobserver: check that the serving certificate refer… #1522
• OCPBUGS-17081: make webhook connection failure a warning in log #1532
• OCPBUGS-13763: dont log jwt tokens #1499
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-13093: Bump golang.org/x/net #20
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-21078: Bump deps to address CVE-2023-44487 [4.13] #758
• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #752
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #497
• OCPBUGS-14651: disable debug pporf with unauthenticated port for 4.13 #480
• Full changelog

cluster-monitoring-operator

• OCPBUGS-22308: fix: force HTTP/1.1 connections #2134
• OCPBUGS-21250: upgrade golang.org/x/net to v0.17.0 #2122
• OCPBUGS-22099: Extend remote write test timeout #2127
• OCPBUGS-11016: Node Exporter ignores network interface under name “cali[a-f0-9]*” #1927
• OCPBUGS-16023: Add the trusted CA bundle in UWM Prometheus pods #2041
• OCPBUGS-15469: Limit the value of GOMAXPROCS on node-exporter to 4. #2021
• OCPBUGS-14251: Add new web console usage metrics #1976
• Full changelog

cluster-network-operator

• OCPBUGS-19894: remove prestop hooks for northd, sbdbd and nbdb #2001
• OCPBUGS-18722: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1994
• OCPBUGS-18342: Fix bond-cni’s default directory in multus manifest #1977
• OCPBUGS-13920: add Hypershift release-image annotation to multus #1817
• OCPBUGS-18099: [release-4.13] Use encapsulation=true for IBM Cloud #1932
• OCPBUGS-17721: Enhance check controller to remove old check objects #1950
• OCPBUGS-17457: prevent creation of multiple cni-sysctl-allowlist-ds pods #1936
• OCPBUGS-11539: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1774
• OCPBUGS-15977: Add logic to pick the openshift-sdn shims from right directories #1880
• OCPBUGS-15962: Add logic to pick the ovn-k8s-cni-overlay binary from the right dir #1877
• Change rhel7/8 to rhel8/9 #1869
• OCPBUGS-15476: Add release version annotation to whereabouts-reconciler #1853
• OCPBUGS-15139: Remove nodeSelector for architecture in whereabouts daemonset #1840
• OCPBUGS-14871: Do not rely on ControlPlaneTopology do determine if running in HyperShift #1837
• OCPBUGS-13809: Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1813
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-18493: e2e: deflake IRQ load-balancing (#782) #782
• Use RHEL9 as a base (#829) #829
• OCPBUGS-17943: Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) #796
• nto: avoid timeout when there are too many CSV (#818) #818
• OCPBUGS-19459: check for object being nil (#820) #820
• Add kubeconfig path for IBM Managed OpenShift (#814) #814
• OCPBUGS-14137: e2e: perfprof: add SNO device recovery test (#653) (#806) #653
• OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) #788
• Sync DaemonSet if operand image changes (#786) #786
• Revert “Revert “Release leader election on manager exit (#773)” (#797)” (#802) #773
• OCPBUGS-19351: Keep Profile status.bootcmdline around (#803) #803
• Revert “Release leader election on manager exit (#773)” (#797) #773
• Release leader election on manager exit (#773) #773
• Tighten the rules for modifying Tuned Profiles (#766) #766
• OCPBUGS-18063: cgroup: Match the name of the cgroup to what is expected by kubelet (#774) #774
• update tsc karg to tsc=reliable (#757) #757
• OCPBUGS-17845: deflake ht aware test (#763) #763
• OCPBUGS-17794: rps: use default rps mask kernel API (#760) #760
• Improve render error handling (#755) #755
• nto:tuned: remove sched_min_granularity_ns settings (#726) #726
• Fix a race in e2e test rollback.go code (#740) #740
• E2E: Add memory manager sanity test case (#573) (#695) #573
• e2e: latency testing: increase the expected threshold (#709) #709
• Do not rollback settings on TuneD exit (#704) #704
• Switch to rslave/HostToContainer volume mount propagation (#705) #705
• e2e: perf-prof: disable truncating gomega output (#707) #707
• OCPBUGS-14895: Do not fail creating cgroups if they exist already (#684) #684
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-13763: dont log tokens #541
• Full changelog

cluster-platform-operators-manager

• OCPBUGS-20998: [release-4.13] Bump golang.org/x/net to v0.17.0 #97
• Full changelog

cluster-samples-operator

• OCPBUGS-22390: Sync library to remove invalid dockerhub references for OKD #521
• OCPBUGS-15756: Update Jenkins and Jenkins Agent Base image versions #505
• OCPBUGS-14598: Updating to use Jenkins 4.13 images #503
• Full changelog

cluster-storage-operator

• OCPBUGS-21284: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #406
• OCPBUGS-18132: Add patch for allowing configmap updates via clusterrole #396
• OCPBUGS-19036: Fix PodStartupStorageOperationsFailing alert #397
• OCPBUGS-15378: decrease severity for MultipleDefaultStorageClasses alert #383
• Full changelog

cluster-version-operator

• OCPBUGS-19472: Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC #969
• OCPBUGS-20321: pkg/cvo/sync_worker: Always enable the DeploymentConfig capability #981
• OCPBUGS-19828: pkg/clusterconditions/promql: Warm cache with 1s delay #974
• OCPBUGS-20263: pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #980
• OCPBUGS-16613: Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 #948
• Full changelog

console

• OCPBUGS-19532: use active namespace in Create cta href of create action for operator backed #13179
• OCPBUGS-18271: update the KnativeServing API version to v1beta1 for global-config extension #13112
• OCPBUGS-20232: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13224
• OCPBUGS-20231: fetch TaskRuns without selector and reduces the get TaskRuns requests #13223
• OCPBUGS-20330: Check if filtered object contains name property #13227
• OCPBUGS-13285: add multipath device type to LocalVolumeSet #12804
• OCPBUGS-17481: Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13083
• OCPBUGS-18764: Fixed Edit Application form for Knative Services #13147
• OCPBUGS-18538: OCP console mandate secret for repository creation #13135
• OCPBUGS-18679: [knative] Don’t rely on openshift/hello-openshift as a sample image #13140
• OCPBUGS-18289: Not able to import the repository with .tekton directory and func.yaml file present #13116
• OCPBUGS-18443: Fix crash when filtering the quick start catalog #13127
• OCPBUGS-18312: Web console slowness on Project>Project access page #13119
• OCPBUGS-18335: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13120
• OCPBUGS-17876: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13095
• OCPBUGS-16668: Dynamic plugin translation support for plurals broken #13041
• OCPBUGS-17181: Creation of GH webhook and attaching it to repo while importing from git using PAC #13060
• OCPBUGS-16040: fix bug where binary secret values are corrupted on edit and add test coverage #13048
• OCPBUGS-16659: Fix RTE in bridge. #13038
• OCPBUGS-16158: “Duplicate RoleBinding” leads to “Unsupported value” error #13008
• OCPBUGS-16434: Fix stop PLR option #13031
• OCPBUGS-14265: Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12865
• OCPBUGS-13641: Do not fetch catalog sources on CSV or Subscription details pages. #12811
• OCPBUGS-16421: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13030
• OCPBUGS-15998: Upload JAR file does not work if the Cluster Samples Operator is disabled #12992
• OCPBUGS-15810: only show pipelines doc link for downstream #12981
• OCPBUGS-15982: get Kamelets from the camel-k-operator namespace as well #12988
• OCPBUGS-16244: Fix operator backed catalog page when copied CSVs disabled #13019
• OCPBUGS-15194: Remove tech preview badge from Pipeline repository pages #12916
• OCPBUGS-10326: re-enable operator-install-single-namespace.spec.ts test #12653
• OCPBUGS-15848: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12976
• OCPBUGS-15890: Use proxy with web socket connection and monitoring dashboard #12978
• OCPBUGS-15720, OCPBUGS-15721, OCPBUGS-15722: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12963
• OCPBUGS-14426: account for single object in status.conditions instead… #12875
• OCPBUGS-14267: Add Pipeline metrics unsupported empty page #12864
• OCPBUGS-15410: Add Git Repository (PAC) doesn’t setup GitLab and Bitbucket configuration correct #12936
• OCPBUGS-15787: Remove access review check for PipelineResource from Pipeline section #12967
• OCPBUGS-15228: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12937
• [release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading #12931
• OCPBUGS-14166: Fixed Make Serverless Form Error #12857
• OCPBUGS-14336: use service port name instead targetPort in the Pipeline Event listener route #12870
• OCPBUGS-14310: Could not import multiple resources via JSON (while YAML supports this) #12868
• OCPBUGS-15335: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12927
• OCPBUGS-15130: Helm Repository “Edit” button results in 404 #12909
• OCPBUGS-14189: Corrected Labels for resolving the bug related to the Create Route Checkbox #12858
• OCPBUGS-13642: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12812
• OCPBUGS-11974: Add page title to Devconsole pages #12844
• OCPBUGS-15465, OCPBUGS-15481: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore and disable operator-uninstall test #12949
• OCPBUGS-14943: visiting Configurations page returns error Cannot read… #12897
• OCPBUGS-12785: Project admin can update and view subscription from operator details page #12780
• OCPBUGS-14574: only copy workload annotations to debug pod #12879
• Full changelog

console-operator

• OCPBUGS-22333: Make enabled plugins unique #805
• OCPBUGS-18972: Manual backport of #761 #793
• OCPBUGS-18192: Add haproxy timeout annotation to console routes #787
• OCPBUGS-16241: Add missing watch permission for helm-chartrepos-viewers #778
• OCPBUGS-14039: Backport #774 and #763 #779
• Full changelog

container-networking-plugins

• OCPBUGS-17728: Default CNI binaries to RHEL 8 #117
• Add rhel9 binary #102
• Full changelog

coredns

• OCPBUGS-21046: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #102
• OCPBUGS-19985: UPSTREAM: <carry>: openshift: Fix OCPBUGS-19985 #97
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-20571: [release-4.13] CARRY: Add DOWNSTREAM_OWNERS #228
• OCPBUGS-20133: FastFix: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 #221
• OCPBUGS-15973: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 #202
• Full changelog

csi-driver-manila-operator

• OCPBUGS-16250: Add management workloads annotations #195
• OCPBUGS-17160: Don’t cache OpenStack client #196
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-20719: bump golang.org/x/net to v0.17.0 #147
• Full changelog

csi-driver-shared-resource-operator

• OCPBUGS-20806: bump golang.org/x/net to v0.17.0 #87
• Full changelog

csi-external-attacher

• OCPBUGS-21161: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #61
• OCPBUGS-16637: [release-4.13] UPSTREAM: 415: fix: CVE-2022-41723 #56
• Full changelog

csi-external-provisioner

• OCPBUGS-20759: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #73
• OCPBUGS-16609: [release-4.13] UPSTREAM: 880: Bump golang.org/x/net #67
• Full changelog

csi-external-resizer

• OCPBUGS-20908: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #148
• OCPBUGS-16639: [release-4.13] UPSTREAM: 268: Bump golang.org/x/net #143
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-21011: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #110
• OCPBUGS-16638: [release-4.13] UPSTREAM: 815: updated go module files #103
• Full changelog

csi-livenessprobe

• OCPBUGS-20636: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• OCPBUGS-16600: [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 #46
• Full changelog

csi-node-driver-registrar

• OCPBUGS-20686: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
• OCPBUGS-16608: [release-4.13] UPSTREAM: 284: Bump golang.org/x/net #48
• Full changelog

docker-builder

• OCPBUGS-15606: Add the git-lfs package #352
• Full changelog

docker-registry

• OCPBUGS-19655: increase rest.Config QPS and Burst #383
• OCPBUGS-18321: bump docker-distribution #376
• Full changelog

egress-router-cni

• Add rhel9 binary #71
• Full changelog

etcd

• OCPBUGS-18497: Updating ose-etcd images to be consistent with ART #214
• OCPBUGS-18398: UPSTREAM <carry>: update build images to rhel9 #212
• OCPBUGS-15859: [4.13] Rebase openshift/etcd to 3.5.9 #204
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-20735: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #46
• OCPBUGS-16331: 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 #38
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-20827: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #88
• OCPBUGS-16250: Add management workloads annotations #80
• Full changelog

haproxy-router

• OCPBUGS-21117: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #531
• OCPBUGS-17762: haproxy/template: mitigate CVE-2023-40225 #506
• OCPBUGS-17107: properly handle weight=0 #501
• Full changelog

hyperkube, pod

• openshift-hack: Fix sporadic 141 errors in build-rpms #1773
• OCPBUGS-20114: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1746
• OCPBUGS-21063: [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1759
• OCPBUGS-19885: UPSTREAM: 120789: change rolling update logic to exclude sunsetting nodes #1725
• OCPBUGS-18287, OCPBUGS-19480: Update to Kubernetes 1.26.9 #1715
• OCPBUGS-18677: UPSTREAM: <carry>: Force using host go always and use host libriaries #1689
• OCPBUGS-17187: Update to Kubernetes 1.26.7 #1649
• OCPBUGS-17145: Increase service idle max timeout to 100 minutes #1657
• OCPBUGS-15866: remove readiness check for cache exclusion #1625
• OCPBUGS-15866: UPSTREAM: <drop>: hack/update-vendor.sh #1637
• OCPBUGS-15246: Bump to k8s 1.26.6 #1610
• OCPBUGS-8738: bump apiserver-lib-go #1611
• OCPBUGS-14589: [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1596
• Full changelog

hypershift

• chore(deps): update rhtap references (release-4.13) #3043
• Update RHTAP references (release-4.13) #2996
• OCPBUGS-17182: add need-management-kas-access label to olm-collect-profiles pods #2871
• OCPBUGS-16225: Add missing probes to two services #2821
• fix(olm): Use 4.13 catalog source images #2978
• Updated secret permissions for openshift-route-controller-manager #2923
• HOSTEDCP-1121: Ensure SG reconciliation for aws endpoint #2885
• chore(deps): update rhtap references (release-4.13) #2921
• Revert “HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS” #2931
• chore(deps): update rhtap references (release-4.13) #2904
• Update RHTAP references (release-4.13) #2866
• HOSTEDCP-1046: Add ImageDigestMirrorSet to Config API comment #2870
• HOSTEDCP-1046: Add IDMS to the list of valid config manifests #2863
• Update RHTAP references (release-4.13) #2833
• HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS #2839
• OCPBUGS-15743: Let getMachinesForNodePool return machines ordered by creation Timestamp #2767
• 4.13: Add management cluster KAS network policy #2786
• Leader election config update. #2801
• OCPBUGS-16160: fix deletion bug when hostedzone is already deleted #2813
• HOSTEDCP-1061: [release-4.13] Implement dedicated request serving nodes for HostedClusters #2809
• Update RHTAP references (release-4.13) #2816
• OCPBUGS-16057: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2798
• OCPBUGS-14862 Improve clarity around hypershift operator permissions #2810
• HOSTEDCP-1101: Add snyk-secret HO RHTAP scripts #2799
• OCPBUGS-16125: [release-4.13] Update vendored dependencies #2797
• OCPBUGS-15774: autoscaling balance similar groups #2805
• OCPBUGS-15965: Reject VPCE Connections during VPCE Service cleanup #2789
• Update RHTAP references (release-4.13) #2751
• OCPBUGS-15171: Skip AWS resource deletion for ‘Unknown’ OIDC state #2701
• HOSTEDCP-1008: Add NodePoolTransitionSeconds metric #2758
• OCPBUGS-15281: Check OwningIngressController also in Labels #2715
• HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2748
• HOSTEDCP-1073: enforce blocked rollout of HCP #2735
• HOSTEDCP-1003: Set AWS conditions only for AWS platform #2670
• OCPBUGS-15268 properly handle user CA bundle not existing #2710
• OCPBUGS-15301: [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2696
• OCPBUGS-14030: Include default ingress CA in root CA bundle #2599
• OCPBUGS-14490: Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2645
• OCPBUGS-14801: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2666
• HOSTEDCP-1048: Add impersonate feature to the CLI and document HC dump procedure #2681
• OCPBUGS-14872: Honor global ingress configuration LoadBalancer type on AWS #2677
• OCPBUGS-14436: Add ClusterUpgradeDuration metric #2637
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-21230: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• OCPBUGS-16378: 4.13: UPSTREAM: 157: K8S and grpc package upgrade #40
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-21319: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #82
• OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #76
• OCPBUGS-16250: Add management workloads annotations #73
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-21432: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #28
• OCPBUGS-14073: UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #24
• Full changelog

insights-operator

• OCPBUGS-20750: update dependencies (#840) #840
• Add cherry-pick from 4.14 (#848) #848
• OCPBUGS-19476: update Insights report config logging (#828) #828
• OCPBUGS-17661: workload info gatherer, add external image repo (#816) #816
• OCPBUGS-14773: extend configmap gatherer to get gateway-mode-config (#788) (#791) #788
• [release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) #794
• OCPBUGS-14318: gather PDBs only from openshift namespaces (#786) #786
• Full changelog

ironic

• OCPBUGS-17837: Fix PROVISIONING_MACS unbound #393
• OCPBUGS-17158: [4.13] Update packages with latest bugfix #388
• OCPBUGS-17551: Expand regex for fcos/okd packages list #390
• Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. #383
• Full changelog

ironic-agent

• OCPBUGS-19006: backport hostname fixes #89
• Switch to udevadm command install instead of package [OKD] #83
• “Bug OCPBUGS-15777: Switch to udevadm command install instead of package” #81
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-15734: Binary should be compiled on rhel9 #91
• Full changelog

k8s-prometheus-adapter

• OCPBUGS-20405: limit number of simultaneous client requests #78
• Full changelog

kube-proxy, sdn

• OCPBUGS-14504: Use the ovsver build arg to infer the openvswitch short version number #572
• OCPBUGS-15977: Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir #558
• OCPBUGS-15977: Dockerfile changes to build both rhel8 and rhel9 binaries #557
• Full changelog

kube-rbac-proxy

• OCPBUGS-20702: v0.15.0 downstream release 4.13 #84
• OCPBUGS-12513: go.mod: update golang.org/x/net to v0.7.0 #68
• Full changelog

kuryr-cni, kuryr-controller

• Bug OCPBUGS-16340: Fix np retry #738
• OCPBUGS-15457: Remove unneeded grpcio dependencies from RPM #735
• Full changelog

libvirt-machine-controllers

• “OCPBUGS-19927: libvirt: Don’t force use of virtio console” #268
• Full changelog

machine-config-operator

• OCPBUGS-22412: bootstrap_test: always set APIVersion and Kind for DNS #4002
• OCPBUGS-21721: install/0000_90_machine-config-operator_90_deletion: Drop this file #3983
• OCPBUGS-20333: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3962
• OCPBUGS-18803: Soften grep pattern for ingress default router #3908
• OCPBUGS-19958: [release-4.13] Backport logspam PRs #3950
• OCPBUGS-19675: daemon: always use podman cp to copy extensions container content #3938
• OCPBUGS-19400: install: Recreate and delayed default ServiceAccount deletion #3923
• OCPBUGS-19509: Ignore invoking nbctl calls if its SDN #3929
• OCPBUGS-19414: The kubeconfig copied on to each node has 644 permissions #3924
• OCPBUGS-18159: Ensure azure-routes hack for internalLB hairpin traffic works for SGW #3904
• OCPBUGS-16218: Prevent NM from unsetting the hostname #3805
• OCPBUGS-17997: SSHkeys fails to write on upgrade to 4.13.rc3 #3879
• OCPBUGS-18076: daemon: create /etc/systemd/network directory on node #3888
• OCPBUGS-17769: Agent-based install process the container machine-config-controller will be oom #3868
• OKD-174: Dockerfile: OKD: Reenable extensions image on SCOS #3845
• OCPBUGS-17430: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3841
• OCPBUGS-17163: daemon: Always replace binary #3833
• OCPBUGS-16888: daemon: Make binary writing idempotent #3826
• OCPBUGS-16888: daemon: no need to reexec when target and source rhel version is same #3824
• OCPBUGS-16622: daemon: Copy matching binary to host, re-exec with it #3812
• OCPNODE-1717: Update config node spec while explicitly updating the cgroups mode #3793
• 4.13: Revert rhel9 binaries builds #3802
• OCPBUGS-14459: daemon: Remove noisy log message #3723
• OCPBUGS-15580: 4.13: Dockerfile: update rhel7 nmstate pin #3764
• OCPBUGS-15463: Minor fix to support protectKernelDefaults field in Kubelet Config #3757
• 4.13: Dockerfile: use proper rhel9 image #3771
• 4.13: use rhel9 builder for daemon binary #3760
• OCPBUGS-13311: daemon: write certs in firstboot-complete path #3702
• OCPBUGS-13404, OCPBUGS-14298: Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 #3716
• OCPBUGS-14850: Allow userfaultfd syscall to be used by unprivileged users #3743
• Full changelog

machine-image-customization-controller

• OCPBUGS-21549: Uplift x/net to v0.17.0 #105
• OCPBUGS-19006: Pass BareMetalHost name to IPA (take 2) #98
• OCPBUGS-14250: Watch networkData Secrets for changes #95
• Full changelog

multus-cni

• Add rhel9 binary for multus #169
• Full changelog

multus-networkpolicy

• OCPBUGS-12641: CVE-2022-41723: Update vendors to fix dependabot alerts #28
• Full changelog

multus-route-override-cni

• Add rhel9 binary #37
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-4417: Denormalize IP name before checking if pod is alive [Backport 4.13] #168
• OCPBUGS-15956: Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #138
• Bug 16002: Change default binary to RHEL8 image #144
• Restores RHEL specific binary build in dockerfile and updates to rhel9/8 #139
• Full changelog

must-gather

• OCPBUGS-19928: [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes #383
• Full changelog

network-interface-bond-cni

• Add rhel9 binary #56
• Full changelog

network-tools

• Dockerfile: move to RHEL9 base image #83
• Full changelog

oauth-proxy

• OCPBUGS-16805: Updating golang-github-openshift-oauth-proxy images to be consistent with ART #261
• Full changelog

oc-mirror

• Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) #700
• Fix OCPBUGS-14402 (#675) #675
• OCPBUGS-18556: operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) #691
• OCPBUGS-18106: manual cherrypick (#684) #684
• OCPBUGS-17998: fix: ICSP with incorrect mirror path (#685) #685
• OCPBUGS-17453: Fix “ OCI index found, but accept header does not support OCI indexes (#677) #677
• OCPBUGS-16372: A variety of changes needed for correct operation with multi… (#661) #661
• OCPBUGS-13871: fix: changes on help info content (#654) #654
• Full changelog

olm-rukpak

• OCPBUGS-21363: [release-4.13] Bump golang.org/x/net to v0.17.0 #40
• UPSTREAM: <carry>: add downstream owners #42
• Full changelog

openshift-controller-manager

• OCPBUGS-11091: mount build.Spec.Source.ConfigMaps for custom builder images #257
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-21565: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #136
• OCPBUGS-16250: Add management workloads annotations #125
• OCPBUGS-17071: Fix SCC admission failure race during initial deployment #124
• Full changelog

openstack-machine-api-provider

• Bug OCPBUGS-19460: Set controller’s SyncPeriod to 1 hour #85
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-22133: [release-4.13] Bump golang.org/x/net to v0.17.0 #589
• OCPBUGS-18305, RHIBMCS-151: Copied csv listing backport #548
• OCPBUGS-17791: opm: always serve pprof endpoints, improve server allocations (#1129) #540
• Introduce DOWNSTREAM_OWNERS file #538
• Allow cpb to be statically compiled / exempt from FIPS compliance #519
• OCPBUGS-15589: fix dynamic conversion webhook #499
• Full changelog

operator-marketplace

• OCPBUGS-20977: [release-4.13] bump golang.org/x/net to 0.17.0 #549
• OCPBUGS-19085: Updating marketplace-operator images to be consistent with ART #538
• OCPBUGS-18502: remove a race condition #532
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #120
• OCPBUGS-14653: set upgrade condition of operator to false #118
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-14314: Fix compilation error in e2e.go tests due to missing int32 parameter #1682
• OCPBUGS-20047: Adjust python ssl library dependency check #1924
• OCPBUGS-18976: Update bridge flow cache when the host address changes #1873
• OCPBUGS-18791, OCPBUGS-18792, OCPBUGS-19088, OCPBUGS-7406: Dockerfile: bump OVN to ovn23.06-23.06.1-8.el9fdp #1880
• OCPBUGS-18672: Check libovsdbclient.ErrNotFound on wrapped errors #1861
• OCPBUGS-19449: Do not return error if pod IP cannot be retrieved for podSelectorPodNeedsDelete and perf improvements #1893
• OCPBUGS-18585: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1855
• OCPBUGS-17123: Remove stale egressip status entry #1793
• OCPBUGS-18057: [release-4.13] Create egress firewall with one db transaction #1834
• OCPBUGS-17910: Emit node events only when retry failure #1825
• OCPBUGS-17503: [release-4.13] libovsdb: give monitor setup time to process than normal transactions #1807
• OCPBUGS-13175: Check the status of a pod before trying to get its ip #1724
• OCPBUGS-15496: Fix default GW IPs retrieval #1738
• OCPBUGS-17001: Inactivity probe for ovndb connection #1796
• OCPBUGS-17120: Bump OVN to 23.06-23.06.0-51 #1790
• OCPBUGS-16121: [release-4.13]: Delete address sets after acls that reference them #1762
• OCPBUGS-15368: [release-4.13]: initial pods are not wired for hybrid overlay #1721
• OCPBUGS-15651: Improve syncNodes to remove stale data #1731
• OCPBUGS-15586: [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector #1745
• Dockerfile: build both RHEL8 and RHEL9 shims #1748
• OCPBUGS-15585: [release-4.13] Fix egressFirewall create error handling #1733
• OCPBUGS-14492: Backport OVN component templates for NodePort services. #1709
• OCPBUGS-15608: Nuke old .rhel9 Dockerfiles #1711
• OCPBUGS-13745: [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1675
• OCPBUGS-15372: [release-4.13] Fix network policy to work with long namespace names #1722
• OCPBUGS-14979: Validate port before deleting conntrack flow #1712
• OCPBUGS-15140: Fix stale SNAT entries for completed pods #1715
• OCPBUGS-14482: Dockerfiles: sync RHEL9 dockerfiles to regular unused ones #1695
• Full changelog

powervs-block-csi-driver

• OCPBUGS-21089: CVE-2023-39325 - Update net dependencies - 4.13 #52
• Update OWNERS add yussufsh #54
• Updated golang.org/x/net/html dependency. #44
• Openshiftrelease 4.13 #41
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-21186: CVE-2023-39325 - Update net dependencies - 4.13 #41
• Update OWNERS add yussufsh #45
• OCPBUGS-16250: Add management workloads annotations #34
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-21280: CVE-2023-39325 - Update net dependencies - 4.13 #46
• Full changelog

powervs-machine-controllers

• OCPBUGS-21880: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 #55
• Full changelog

prometheus

• OCPBUGS-21240: update golang.org/x/net to v0.17.0 [4.13] #174
• Full changelog

prometheus-alertmanager

• OCPBUGS-21043: Bump golang.org/x/net to v0.17.0 #81
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-12672: update golang.org/x/net #237
• Full changelog

prometheus-node-exporter

• OCPBUGS-21143: upgrade golang.org/x/net to v0.17.0 #135
• OCPBUGS-14274: Upgrade golang.org/x/net to v0.10.0 to fix the CVE #127
• Full changelog

service-ca-operator

• OCPBUGS-16806: Updating ose-service-ca-operator images to be consistent with ART #214
• Full changelog

telemeter

• OCPBUGS-21327: [release-4.13]: Bump golang.org/x/net to v0.17.0 #485
• OCPBUGS-14418: Update golang.org/x/net to lastest version #463
• Full changelog

tests

• OCPBUGS-19378: [4.13] backport etcd restore tests #28267
• Bug OCPBUGS-17469: Correct condition for rejecting connection #28151
• OCPBUGS-20361: Update image stream test to create a manifest list image by default #28318
• OCPBUGS-16241: Update permission to incl. watch for helmchartrepositories for console users #28054
• OCPBUGS-16164: allow cluster-config-operator to manage featuregate upgrade block #28050
• OCPBUGS-15892: remove references to registry.centos.org #28031
• OCPBUGS-15746: Skip CCM upgradable condition on AlibabaCloud #28025
• OCPBUGS-7762: Bump with latest openshift/kubernetes at 4.13 #27973
• OCPBUGS-5029: [release-4.13] OpenStack: Restore in-tree cinder provisioner tests #27827
• Full changelog

thanos

• OCPBUGS-21157: Bump golang.org/x/net to v0.17.0 #125
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-17103: update x/net dependency to 0.7.0 #46
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-21561: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #91
• OCPBUGS-16398: Rebase v3.0.2 #83
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-21434: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #174
• OCPBUGS-18132: Block 4.14 upgrades with admin ack #169
• OCPBUGS-18332: disable controller hostNetwork #166
• Full changelog

vsphere-problem-detector

• OCPBUGS-21577: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
• OCPBUGS-14571: Check all storage classes including CSI storageclasses #120
• Full changelog

---

View changelog in Markdown or change previous release: 4.13.194.13.184.13.174.13.164.13.154.13.144.13.134.13.124.13.114.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2024-12-21-0603014.19.0-0.nightly-2024-12-21-0038284.19.0-0.nightly-2024-12-20-1702094.19.0-0.nightly-2024-12-20-0629024.19.0-0.nightly-2024-12-19-1852134.19.0-0.nightly-2024-12-19-0556344.19.0-0.nightly-2024-12-18-2105394.19.0-0.nightly-2024-12-18-1614574.19.0-0.nightly-2024-12-13-0834214.19.0-0.nightly-2024-12-10-0404154.19.0-0.nightly-2024-12-06-101930───4.19.0-0.ci-2024-12-21-1039464.19.0-0.ci-2024-12-21-0439464.19.0-0.ci-2024-12-20-2239464.19.0-0.ci-2024-12-20-1637574.19.0-0.ci-2024-12-20-1037574.19.0-0.ci-2024-12-20-0429534.19.0-0.ci-2024-12-19-2229534.19.0-0.ci-2024-12-19-1629534.19.0-0.ci-2024-12-19-1619534.19.0-0.ci-2024-12-19-1407544.19.0-0.ci-2024-12-19-0807544.19.0-0.ci-2024-12-19-0207544.19.0-0.ci-2024-12-18-2007544.19.0-0.ci-2024-12-16-0017194.19.0-0.ci-2024-12-15-1817194.19.0-0.ci-2024-12-14-183709───4.18.0-0.nightly-2024-12-20-2218304.18.0-0.nightly-2024-12-20-1013174.18.0-0.nightly-2024-12-20-0100324.18.0-0.nightly-2024-12-19-1551224.18.0-0.nightly-2024-12-19-0716374.18.0-0.nightly-2024-12-19-0210274.18.0-0.nightly-2024-12-18-1822514.18.0-0.nightly-2024-12-18-1052304.18.0-0.nightly-2024-12-18-0241444.18.0-0.nightly-2024-12-16-0653054.18.0-0.nightly-2024-12-15-2025094.18.0-0.nightly-2024-12-14-1525154.18.0-0.nightly-2024-12-14-0744164.18.0-0.nightly-2024-12-14-0127254.18.0-0.nightly-2024-12-13-1811064.18.0-0.nightly-2024-12-13-1108234.18.0-0.nightly-2024-12-12-2204014.18.0-0.nightly-2024-12-12-1339264.18.0-0.nightly-2024-12-12-0534244.18.0-0.nightly-2024-12-11-2212224.18.0-0.nightly-2024-12-11-1229214.18.0-0.nightly-2024-12-10-221538───4.18.0-0.ci-2024-12-21-1112174.18.0-0.ci-2024-12-21-0512174.18.0-0.ci-2024-12-20-2312174.18.0-0.ci-2024-12-20-1659294.18.0-0.ci-2024-12-20-1058064.18.0-0.ci-2024-12-20-0458064.18.0-0.ci-2024-12-19-2258064.18.0-0.ci-2024-12-19-1642164.18.0-0.ci-2024-12-19-1042164.18.0-0.ci-2024-12-19-0347014.18.0-0.ci-2024-12-18-2132484.18.0-0.ci-2024-12-18-153248───4.17.0-0.nightly-2024-12-20-1403514.17.0-0.nightly-2024-12-20-0506184.17.0-0.nightly-2024-12-19-0750174.17.0-0.nightly-2024-12-19-0206144.17.0-0.nightly-2024-12-18-2036004.17.0-0.nightly-2024-12-18-1030134.17.0-0.nightly-2024-12-17-2335124.17.0-0.nightly-2024-12-17-0927344.17.0-0.nightly-2024-12-15-0833134.17.0-0.nightly-2024-12-14-1236264.17.0-0.nightly-2024-12-14-0753384.17.0-0.nightly-2024-12-14-0038364.17.0-0.nightly-2024-12-13-1512024.17.0-0.nightly-2024-12-13-0500464.17.0-0.nightly-2024-12-12-2053264.17.0-0.nightly-2024-12-12-1522384.17.0-0.nightly-2024-12-12-0724244.17.0-0.nightly-2024-12-11-2347454.17.0-0.nightly-2024-12-11-1809364.17.0-0.nightly-2024-12-11-010531───4.17.0-0.ci-2024-12-20-1148044.17.0-0.ci-2024-12-20-0407564.17.0-0.ci-2024-12-19-1853244.17.0-0.ci-2024-12-19-1253244.17.0-0.ci-2024-12-19-0653244.17.0-0.ci-2024-12-18-2238264.17.0-0.ci-2024-12-18-163826───4.16.0-0.nightly-2024-12-20-2106384.16.0-0.nightly-2024-12-20-1245424.16.0-0.nightly-2024-12-20-0431384.16.0-0.nightly-2024-12-18-2237524.16.0-0.nightly-2024-12-18-1615254.16.0-0.nightly-2024-12-18-0426104.16.0-0.nightly-2024-12-17-2005124.16.0-0.nightly-2024-12-17-0641304.16.0-0.nightly-2024-12-16-2104064.16.0-0.nightly-2024-12-16-1434144.16.0-0.nightly-2024-12-16-0815024.16.0-0.nightly-2024-12-16-0020054.16.0-0.nightly-2024-12-15-1841364.16.0-0.nightly-2024-12-15-1312554.16.0-0.nightly-2024-12-14-1438514.16.0-0.nightly-2024-12-14-0700044.16.0-0.nightly-2024-12-14-0133314.16.0-0.nightly-2024-12-13-2057244.16.0-0.nightly-2024-12-13-1537524.16.0-0.nightly-2024-12-13-0453274.16.0-0.nightly-2024-12-12-2004394.16.0-0.nightly-2024-12-12-1315314.16.0-0.nightly-2024-12-12-0134464.16.0-0.nightly-2024-12-11-1835274.16.0-0.nightly-2024-12-11-055812───4.16.0-0.ci-2024-12-20-1857224.16.0-0.ci-2024-12-20-1116054.16.0-0.ci-2024-12-20-0254554.16.0-0.ci-2024-12-19-1515074.16.0-0.ci-2024-12-19-0631244.16.0-0.ci-2024-12-18-2343594.16.0-0.ci-2024-12-18-174359───4.15.0-0.nightly-2024-12-20-0401194.15.0-0.nightly-2024-12-19-1750424.15.0-0.nightly-2024-12-19-0836534.15.0-0.nightly-2024-12-19-0259044.15.0-0.nightly-2024-12-18-2121584.15.0-0.nightly-2024-12-18-1424284.15.0-0.nightly-2024-12-18-0946454.15.0-0.nightly-2024-12-18-023538───4.15.0-0.ci-2024-12-21-0839294.15.0-0.ci-2024-12-20-1852214.15.0-0.ci-2024-12-20-1252214.15.0-0.ci-2024-12-20-0643064.15.0-0.ci-2024-12-20-0043064.15.0-0.ci-2024-12-19-1148504.15.0-0.ci-2024-12-19-0548504.15.0-0.ci-2024-12-18-2301194.15.0-0.ci-2024-12-18-152834───4.14.0-0.nightly-2024-12-21-0926034.14.0-0.nightly-2024-12-21-0316484.14.0-0.nightly-2024-12-20-2322264.14.0-0.nightly-2024-12-20-1159094.14.0-0.nightly-2024-12-20-0355194.14.0-0.nightly-2024-12-19-0816454.14.0-0.nightly-2024-12-19-0029244.14.0-0.nightly-2024-12-18-1702564.14.0-0.nightly-2024-12-18-081824───4.14.0-0.ci-2024-12-21-1019264.14.0-0.ci-2024-12-21-0419264.14.0-0.ci-2024-12-20-1958414.14.0-0.ci-2024-12-20-1358414.14.0-0.ci-2024-12-20-0617334.14.0-0.ci-2024-12-20-0017334.14.0-0.ci-2024-12-19-1000154.14.0-0.ci-2024-12-19-0224154.14.0-0.ci-2024-12-18-174054───4.13.0-0.nightly-2024-12-21-0449454.13.0-0.nightly-2024-12-14-1651584.13.0-0.nightly-2024-12-08-1610434.13.0-0.nightly-2024-11-30-0419004.13.0-0.nightly-2024-11-23-1013054.13.0-0.nightly-2024-11-20-0919214.13.0-0.nightly-2024-11-19-0924194.13.0-0.nightly-2024-11-18-041323───4.13.0-0.ci-2024-12-21-1034464.13.0-0.ci-2024-12-21-0434464.13.0-0.ci-2024-12-20-0704164.13.0-0.ci-2024-12-19-1724224.13.0-0.ci-2024-12-19-0128294.13.0-0.ci-2024-12-16-2001334.13.0-0.ci-2024-12-16-0513354.13.0-0.ci-2024-12-14-1651464.13.0-0.ci-2024-12-14-043905───4.12.0-0.nightly-2024-12-20-1940464.12.0-0.nightly-2024-12-19-1742534.12.0-0.nightly-2024-12-19-0606434.12.0-0.nightly-2024-12-18-2056184.12.0-0.nightly-2024-12-18-0931464.12.0-0.nightly-2024-12-17-0141444.12.0-0.nightly-2024-12-16-1941444.12.0-0.nightly-2024-12-11-1726594.12.0-0.nightly-2024-12-02-1832084.12.0-0.nightly-2024-12-02-044358───4.12.0-0.ci-2024-12-20-1941584.12.0-0.ci-2024-12-19-2210374.12.0-0.ci-2024-12-19-0851164.12.0-0.ci-2024-12-18-1939414.12.0-0.ci-2024-12-18-1221474.12.0-0.ci-2024-12-18-0608224.12.0-0.ci-2024-12-16-221114───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.19.0-ec.04.18.0-ec.44.18.0-ec.34.18.0-ec.24.18.0-ec.14.18.0-ec.0

Source code for this page located on github