4.13.42

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.42-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Failed periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.13-e2e-aws-sdn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-main-ci-4.13-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-main-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.13-e2e-metal-ipi-sdn-bm
  - Attempt 1 Failed
  - Attempt 2 Succeeded

Upgrades from:

Untested upgrades: 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.48, 4.12.49, 4.12.51, 4.12.54, 4.13.10, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.13.22, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.3, 4.13.30, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.4, 4.13.5, 4.13.6, 4.13.8, 4.13.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.13.23

Created: 2024-05-16 10:28:08 +0000 UTC

Image Digest: sha256:dcf5c3ad7384f8bee3c275da8f886b0bc9aea7611d166d695d0cf0fff40a0b55

Release 4.13.42 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2024-05-15-165412

Components

Kubernetes upgraded from 1.26.9 to 1.26.15
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202311151359-0 to 413.92.202405132113-0 (diff)

Rebuilt images without code change

alibaba-cloud-csi-driver git 6384f904 sha256:0a55bc10f54e8b7db062a5c415fcdff89a1bccb920524adfa0e64e1de0bfab09
alibaba-disk-csi-driver-operator git 7e415973 sha256:f6dee2c694a8ce59a3845e07268282d22a38015fb72ab06980fff2d9d0169bdf
alibaba-machine-controllers git 4c0f96a6 sha256:1b912aa1c44368efdbcb32517a8a66e67e6338a80f873858724d9d938f67b85a
azure-cluster-api-controllers git aa3b650e sha256:f775814ce9b9a8dc1811ba37d98ab11fbd20cd11e2acf26d8a9e765f8bbff761
azure-disk-csi-driver git b6d3fbcb sha256:040d036a3c58bf0b9f1c125f592827b89cac97f8f617dd2d0759a9b4971cc2a3
azure-disk-csi-driver-operator git 8534d756 sha256:9c0380ae96c4efc34d4d1fb8c2f3693e0ff19145ebfacbfc7cc7dd14c3e97c44
azure-file-csi-driver git 33d52ecd sha256:78d880abbed76cb858081cd8504bbf05b1fa4902a3313b18d6d67f633631f96f
azure-file-csi-driver-operator git 70e05302 sha256:81469203a58488ee4018e4b3908b26dc6ab2dc22c723f8edd382fb9772fe8b29
cluster-bootstrap git ee908b6b sha256:0a54a894bb73b11c755511e5a5b476edfe467bb2073ed3dcb96441d6db1c816d
cluster-capi-controllers git 12f767b2 sha256:b5333f30116f5b57387881fa67da3968407a20ef96c76746ddeda8e4756e4121
cluster-capi-operator git b247793d sha256:4dde372e00aed17196d36451502f14cae76375baa4670a849393a520ce0c557f
cluster-ingress-operator git 5379ce1c sha256:cd8fb81708f2c2edb8a6b08ac6eca1e2fe59a402094c2af47b66c7736a018c04
cluster-kube-cluster-api-operator git 18c076b1 sha256:f6c34cb793a6c498720afe31aac1d17d66a37ba380d4b00c6b0e515692448209
cluster-kube-storage-version-migrator-operator git 721de5d6 sha256:7e153eda55122416c5eb4728e862b4d1a19a452c8755f9b9ec127d3ce0258297
cluster-openshift-apiserver-operator git 9abb220a sha256:fd519f75ab0e0a6e5d487b183078eed93ea2cbaa614678d4e7d056be41d63844
cluster-openshift-controller-manager-operator git d2818fb5 sha256:7a26474e816733ccc0c4f1bccf6d77d216d0381c3744ae3cb22a9c54e94d6d5c
cluster-platform-operators-manager git 312c5f24 sha256:faf46bff2727092d92475a828d7e582934e17aafcfc08c2d64db2563ebbf302a
cluster-policy-controller git 3b0d0755 sha256:9ddc0dbba32e26b5f3ed02f6f464522a5321b57ac2ea697e54766706d9022533
cluster-samples-operator git bcc08e96 sha256:1696ea9b490a6141ea8b9bcf23e837166103813de32c6bc0b5f5492908eda899
cluster-storage-operator git 5cd56c34 sha256:200e9b717afba418a284350f0d33aaf5d89de2d836a1011fdaccd1770d3426bf
cluster-update-keys git 5b725937 sha256:0da9bf9c43023d9f360a65f12d61882b48adbaaa9d58d906bc948fad24b8cecf
configmap-reloader git 9adad592 sha256:5c20fa171143f124907b62d08fdec3304b21856409e962d3ddb18071affbe8b5
container-networking-plugins git 614ca3c3 sha256:770773360bf9adcaf12344f7e769b641f3c14a1c5b1c35093947fdccf58958e1
csi-driver-nfs git 2b914c21 sha256:d66add609ba0b8c3aface5092a73d739cd6528c318935f1107e73489f1eddea2
csi-external-attacher git d9290843 sha256:31bde9f020afa7aafe8a57ec0e869fce1d8dd912e022867c5b1c84c8411ea222
csi-external-provisioner git 0bf126b7 sha256:d3d033e471313bb14cdbbf5710277ef25196b5774724737b594fa93563d31850
csi-external-resizer git e8036caf sha256:15ea400a270e3aed6f0d6dc36480877e3988a36dd2dc0afd372bf1c1750c4835
csi-livenessprobe git 3587db51 sha256:97acb7ad393634eb958b930be51f5f9f08b6b1b85a820a1810826d3465680f6f
csi-node-driver-registrar git 9ea90f34 sha256:f7faa1fef98c2a7c173f78dbfa5384bb5ab58e8cc1d5504bfdea6dab0b21d988
docker-builder git 0155fb18 sha256:fc7c96a0e3711888e8d5a599fb600ba9a89e118dacd9e7663cdaa09f80431999
docker-registry git 47a15ac8 sha256:1e729522bb35eebe640c182aa8e4e3215337ac6ba020f4788d1bd13f383967ff
driver-toolkit git d719bdcf sha256:1536fd0f2055b1b007a76653928043714c954c2bfd66f12a52438411c6e63cf1
gcp-cluster-api-controllers git b8a27725 sha256:20a73ce021d82dabbae9d864622ffabf367060c73180205d21d62807e0e87083
gcp-pd-csi-driver git 81e60746 sha256:2db219badda545c5a1c72ea2d6c97ed2f6806cf31fb43d71961d014dd4243a18
gcp-pd-csi-driver-operator git 08c561b8 sha256:ccd0403539c497716bfff86a3a88de883986d1ddee4aec252f0d2744cf9f7b6f
ibm-vpc-block-csi-driver git 3e0eb20f sha256:efa3113104b23b62f4660e52e5ab07758530af069099ac3e49dd86e8e2b37047
ibm-vpc-block-csi-driver-operator git 38c439da sha256:95f8fb7497ab73cb7b7a4b286be7c3fc996b94e4ad7c723021c610473565a8da
ibm-vpc-node-label-updater git 7721a9e7 sha256:f8e99d62ada198a47163b6b5efcafc042b6692f042b37d70f322eab78bf4ebe5
ibmcloud-machine-controllers git bb253a0c sha256:179ba8bcfb252543e70e82c8790d4f6abcc7057d32b4ad540df57239a2bb2e0c
ironic-machine-os-downloader git ce291779 sha256:066806ff9e4b6cc4a3594624e0f795a53c60cca22a8bf6b4408173c51827cab2
ironic-static-ip-manager git 4536724a sha256:712bec5126af458e82579ea0c94704d4efc4175258eb1fd8325bd8414bde2a02
kube-rbac-proxy git ae32bfa0 sha256:40e01c69cf5381c1ad23e009e41febbd57b9048e5497ac7d25d977849f42d29f
kube-state-metrics git fd791df5 sha256:1a7a08ce2e4bd16bc5d475a0a59d564f2993af30c3ca195430c37ce8a35fc815
kube-storage-version-migrator git bad104d1 sha256:1c4e634262e0f2463d408c28bec07de263e00e3e6994132e2982bcfa7b6b535a
kubevirt-cloud-controller-manager git ee2033ec sha256:5949c4cc939feb942848dce8eaa99cbb9368a1442174940b1fd4e4e0ce8b0da4
kuryr-cni git 36754b7b sha256:41d3e7882ecf34bd2c7b9681372d85cadd12e82ebe7a7dc9e05afd53eb699d98
kuryr-controller git 36754b7b sha256:2f27f610f0bb3b9f3b32c33121a0cfeeab51ab96e3c3478b3d0742bd792be8b3
libvirt-machine-controllers git d4b7a8ab sha256:38ef37987d467aedb9e196c92e1002e7a5886615524782acc55866cdb6badaa4
machine-os-content sha256:9492100dbbaffafe85fe6e79cf66ec44175a9733cda2d2f8318d966bb4a6c12f
machine-os-images git b14856ff sha256:1ca8a3aa28bfdf99853cf77faf7940c426c809a748b4ce6a5ae4938deea9749e
multus-admission-controller git 9b0656af sha256:eef59e757b55c4446ffe1d793c8e6671f65c5e2a11ec3377ca1b804946f642eb
multus-networkpolicy git 7176ab75 sha256:c8debb3c1cc57ad09099cbf105adaae0fc686205a4e2bbacb7e37225d3f5340d
multus-route-override-cni git ca3bbec5 sha256:67b3e7289b27ba2dedcb85459b865caa423f07582a8d1655e4ea40e52d568ee8
must-gather git 288ef2fc sha256:72a67cc65e51a20cf618590b9f68a85669149651c4ea383ee319f025b4fa96e1
network-interface-bond-cni git 84bda2af sha256:deaedafe42202f5534f8a6093df4478a53394d19e9c9dfb1ecc676e82ab483b0
network-tools git 073feda1 sha256:f12677aea04815177c46726d376d660cc5fd21704f1f8e215ae9d32f03e76e1b
nutanix-cloud-controller-manager git 4d1c58e2 sha256:2afeff84eb5d7a53c6589e88f68944a593c665499bed5b3bc42814818dc9f923
oauth-proxy git 44af5a3a sha256:58a083ccff0dae48a9317c76418920c82e3892f4d163e85768bfdc5a2af3aa7b
oauth-server git eb54be28 sha256:6a9bc78c8cd68032e5acf3d9632c7a16a660400d9156febd7a1c798012679d7b
openshift-controller-manager git 385057e5 sha256:ca4cfd3e1eef86de865ab8a0b776201a2707f106c458d43c26d6a03b93d4f0e0
openstack-cinder-csi-driver-operator git b50a649b sha256:f85af23ab76f04464ad3da7daaef1c54ae571a00f650114935524320b799b20e
openstack-machine-api-provider git 7bce9d67 sha256:e3624d78ef28f4c45da1cad70549bd4c29492a6064d05c507afe98a2bbe10451
operator-marketplace git 867e7ed8 sha256:9c74c9810af2c1ad8ae5fcb4935da8185d0b0fbccbcf9ffc7d22bac128c007ef
ovirt-csi-driver git 54958deb sha256:0ab8e75207c734994c666db80f11c0a3258fa33a2b6d1425fcb23325032c5ff6
ovirt-csi-driver-operator git b293972f sha256:9eed51aafe886b8c79ab5a363d2d0a858931bc19e810f0bf41bfa9f496c18889
ovirt-machine-controllers git 22d89b3f sha256:b832770f8514d7691f71ef138b7442b75402ffbdfd763c06a8d92e446baa73f1
prom-label-proxy git b501d5e2 sha256:f34b2a14a4f8e8a33e6b7128d10a9735c0ccd22a08cfdac08855925f11688df5
prometheus-alertmanager git df2f11e2 sha256:50fe74059354410c78f1a4a62db026a5f0d9231a78efa2bf1fb8ffdea2eff586
prometheus-config-reloader git 30fdccd1 sha256:7dd8a4ce74abfdf6b7c933dd343ceb3a677608e65764e80989d72955d9ac73ac
prometheus-node-exporter git 59d699ca sha256:61ecfe7026336026dda719794410fe620d586b340453a7df76a8aebd70453e3a
prometheus-operator git 30fdccd1 sha256:68ae91fffff9287d20592f797434d4d21824fa9dbc0e362ad28f69e10ae7cdb2
prometheus-operator-admission-webhook git 30fdccd1 sha256:be596135a75fd31cabc537e7d83ba276402c47742960691951e28100f29dc74d
rhel-coreos sha256:0fe76abe3d4c8e33210a34f3d757aecd9553cb96f6bf05d9daafa34c8baee300
rhel-coreos-extensions sha256:1bd2a579c0efe7adebb17758891c9e76dae5a1ad384306f9262c399e11d4d901
route-controller-manager git 6667a6cb sha256:40e008301b66ae6e3b83ebc30c9176d904f7487db1009534d81ccc4ebb693308
telemeter git 8c9a8a75 sha256:6089218a22f2300a6550c7ff267bf41745665b41f0b20f0578c10be2d9673559
tests git 99b9d537 sha256:847c6ad3143e70601e00e855c107dcdd7bfe27a10594a8838818c222ab09d02e
vsphere-csi-driver git 4d3036a6 sha256:d544d27f20b78cc2da75b13baef6c037e45c88a33d175c4c31d2cfb5b3cb8a85
vsphere-csi-driver-operator git a9e5036e sha256:5d339282f96cb77b6ada6bd5a09fd63d8d8f2397a4f13c2b08419f90eebdc4c5
vsphere-csi-driver-syncer git 4d3036a6 sha256:af4f0c0633730955a222d1085703dede78b85bf1a9053a70b75799617e2d50e4
vsphere-problem-detector git 3ad7408f sha256:bf2a28ee5dd8d802b4bfc2d58fcbb9ac2eb31dc906dcd3777556ed3815306973

agent-installer-api-server

MGMT-17595: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) #6215
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) #6202
MGMT-17541: Replace broken golangci reference (#6196) #6196
NO-ISSUE: replace postgres images as current one disappeared from quay (#6133) #6133
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) #835
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) #829
MGMT-17541: Replace broken golangci reference (#826) #826
Full changelog

agent-installer-node-agent

MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) #706
NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) #700
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) #702
MGMT-17541: Replace broken golangci reference (#697) #697
MGMT-13111: Freeze on 404 Not Found (#628) #628
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21238: Bump golang.org/x/net to v0.19.0 #43
Full changelog

apiserver-network-proxy

OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
HOSTEDCP-1323: Merge latest code into 4.14 branch #45
Full changelog

aws-cloud-controller-manager

OCPBUGS-27964: bump go.opentelemetry.io #72
Full changelog

aws-cluster-api-controllers

OCPBUGS-32470: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #509
OCPBUGS-20836: bump golang.org/x/net to v0.17.0 #482
Full changelog

aws-ebs-csi-driver

OCPBUGS-33363: [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments #266
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33363: Explicitly reserve 1 attachment for the root disk #307
Full changelog

aws-machine-controllers

OCPBUGS-24563: Reduce metrics cardinality #96
OCPBUGS-21568: Update golang.org/x/net to v0.17.0 #89
Full changelog

aws-pod-identity-webhook

OCPBUGS-32882: Upgrade go-jose module to 2.6.3 #190
OCPBUGS-21331: Upgrade golang/x/net for CVE-2023-39325 #184
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-21419: Bump golang.org/x/net to v0.18.0 #94
Full changelog

azure-machine-controllers

OCPBUGS-29906: Don’t create availability set when using spot instances #104
OCPBUGS-24563: Reduce metrics cardinality #89
OCPBUGS-20758: Bump x/net package to v0.18.0 #83
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-33062: openstack: Honour worker server group policy #8323
OCPBUGS-32359: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8284
OCPBUGS-22979: IBMCloud: Add eu-es region #7685
OCPBUGS-30629: baremetal: populate customDeploy in advance #8129
OCPBUGS-29627: update RHCOS 4.13 bootimage metadata to 413.92.202402131523-0 #8038
OCPBUGS-30000: [release-4.13] Bump containerd for vulnerability fix #8073
OCPBUGS-28654: Fix depreciated typo #7963
OCPBUGS-27453: baremetal: correct external_http_url for v6-only BMCs #7934
OCPBUGS-23499: update RHCOS 4.13 bootimage metadata to 413.92.202401100947-0 #7920
OCPBUGS-25420: destroy: gcp: fix destroying regional disks #7840
OCPBUGS-23464: Add KMS encryption keys if provided #7746
Full changelog

baremetal-machine-controllers

OCPBUGS-29822: Extend metal3remediation aggregation role #212
Full changelog

baremetal-operator

OCPBUGS-30629: Do not update instance_info and deploy_interface for active nodes #337
OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #321
Full changelog

baremetal-runtimecfg

OCPBUGS-26929: Add .snyk file to ignore vendor and test files #295
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30288: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1700
OCPBUGS-25418: Add client version in must-gather summary #1635
OCPBUGS-24461: Overwrite template’s namespace with the explicit one #1617
Full changelog

cloud-credential-operator

OCPBUGS-32898: Upgrade go-jose module to 2.6.3 #698
OCPBUGS-27912: Resolve all outstanding snyk vulnerabilities #651
NO-JIRA: Removing andrew from OWNERS #644
OCPBUGS-25369: Discover AWS dns suffix from partition and region. #640
OCPBUGS-21367: Upgrade golang/x/net for CVE-2023-39325 #623
Full changelog

cloud-network-config-controller

OCPBUGS-32180: Avoid nil pointer panic while assigning private IP on Azure #139
Full changelog

cluster-authentication-operator

OCPBUGS-28760: Fix http2 [4.13] #654
Full changelog

cluster-autoscaler

OCPBUGS-31702: add check for taint.value == nil #295
OCPBUGS-30874: Fix unstructured taint parsing in Cluster API provider #289
OCPBUGS-23272: Rebase 4.13 branch onto cluster autoscaler 1.26.4 #268
Full changelog

cluster-autoscaler-operator

OCPBUGS-20770: Bump x/net package to v0.18.0 #299
Full changelog

cluster-baremetal-operator

OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #391
OCPBUGS-23444: Update the deprecated field APIServerInternalIP to APIServerInternalIPs #385
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-21169: Bump golang.org/x/net to v0.18.0 #296
Full changelog

cluster-config-operator

OCPBUGS-28802: Add required PSa labels #404
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-30156: Never delete a Machine when there’s a single Machine in an index #286
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32334: create suitable role and roleBinding for csi-snapshot-webhook #206
Full changelog

cluster-dns-operator

OCPBUGS-11449: Set DNS DaemonSet’s maxSurge value to 10% #366
Full changelog

cluster-etcd-operator

OCPBUGS-31988: update golang x net #1255
OCPBUGS-30248: fix panic in health check timeouts #1217
OCPBUGS-30245: [4.13] Replace nodelister with master nodelister everywhere #1216
OCPBUGS-23572: Add annotation in the etcd-guard static pod for worklo… #1163
OCPBUGS-23106: [4.13] Remove z-upgrades from UpgradeBackupController #1154
Revert “[release-4.13] OCPBUGS-23044: remove revision stability check from bootstrap complet…” #1166
Full changelog

cluster-image-registry-operator

OCPBUGS-29935: pkg/storage/s3: enable bucket key on encryption settings #1007
OCPBUGS-22126: increase storage account key cache expiration #940
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-25922: [release-4.13] dashboard: use recording rules for most metrics #1611
: OCPBUGS-24023: Add workload partitioning annotation #1591
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-27066: bump(library-go)=release-4.13 #788
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-27065: bump(library-go)=release-4.13 #528
Full changelog

cluster-machine-approver

OCPBUGS-21447: Bump x/net package to v0.18.0 #213
OCPBUGS-23368: Filter non node CSRs in metrics #210
Full changelog

cluster-monitoring-operator

OCPBUGS-33581: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2344
OCPBUGS-28767: fix generation of telemeter token hash #2305
OCPBUGS-25388: Add RHACM telemetry metric for 4.13 #2203
OCPBUGS-21457: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2146
Full changelog

cluster-network-operator

OCPBUGS-30150: ipsec: fix openssl typo #2290
OCPBUGS-29674: add env var in whereabouts-reconciler daemonset #2279
OCPBUGS-29301: Update ingressconfig_controller to use field Manager #2267
OCPBUGS-28208: ipsec: fix oopsy from 2e3fc8e (cherry-pick of 980c08318e) #2222
OCPBUGS-28777: fix whereabouts conformance test failures #2241
OCPBUGS-27958: Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2220
NO-JIRA: add kyrtapz as reviewer and approver for release 4.13 #2229
OCPBUGS-22293: remove all managed fields used by old manager #2094
OCPBUGS-24570: Disable weak SSH cipher suitesRm weak ciphers 4.13 #2163
OCPBUGS-21716: Bump golang.org/x/net and github.com/openshift/library-go #2123
OCPBUGS-22896: run update-codegen after adding maxLogFiles cfg #2162
OCPBUGS-22971: HyperShift: Use the local konnectivity proxy when checking proxy readiness #2098
OCPBUGS-22896: Remove oldest ovn acl log files when file limit exceeded #2097
SDN-4184: Limit OVN-Kubernetes RBAC permissions #2093
Full changelog

cluster-node-tuning-operator

Scheduler plugin: ignore IRQs (#1027) #1027
irqbalance: set banned cpus list to 0 (#1003) #1003
OCPBUGS-24353: rps: cherry-picks of rps fixes (#865) #865
Full changelog

cluster-version-operator

OCPBUGS-27049: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1019
Full changelog

console

OCPBUGS-32500: PipelineRuns in Console show wrong status or load indefinitely #13780
OCPBUGS-31077: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13683
OCPBUGS-31595: Fix operands list endpoint. #13714
OCPBUGS-29063: add additional check to determine if file is binary #13579
OCPBUGS-28788: Copy response code from proxied plugin requests #13561
OCPBUGS-29243: Add a new allowInsecure option to the internet proxy #13593
OCPBUGS-27406: Add Pipeline metrics tab using plugin #13525
OCPBUGS-23483: add access to create, edit and delete silences for developer user from developer perspective #13349
OCPBUGS-25427: Fix plugin proxy handler #13449
OCPBUGS-25465: fix runtime error on Node details Overview when Machin… #13452
OCPBUGS-25146: add access review for impersonate #13437
OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #13424
OCPBUGS-22241: Save also the location.search and .hash values in localStorage to restore them after login #13271
OCPBUGS-24240: Subsequent PipelineRuns take initial PipelineRun name into account #13385
OCPBUGS-23497: Cannot Edit Shipwright Build #13352
OCPBUGS-11316: Fix description for BuildAdapter SDK extension #12703
OCPBUGS-22986: Correct logout process #13310
Full changelog

console-operator

OCPBUGS-18674: Reset console operator’s conditions #894
OCPBUGS-30599: Disable HTTP/2 for webhook #875
OCPBUGS-21008: [release-4.13] Bump library-go and golang.org/x/net #866
OCPBUGS-6208: Updating openshift-enterprise-console-operator images to be consistent with ART #872
OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #821
Full changelog

coredns

OCPBUGS-28205: UPSTREAM: 6277: openshift: Fix OCPBUGS-28205 #113
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

Replace gorilla/mux with chi (#2074) #2074
retry ubuntu image download on temp error (#2508) #2508
update k8s.io/kubernetes to v1.26.11 in go.mod (#2498) #2498
fix: octavia tlsContainerRef validation for barbican secrets (#2459) #2459
Use standard service account name in OCCM helm chart (#2449) #2449
Full changelog

csi-driver-manila-operator

OCPBUGS-26224: Fix selector for manila-csi-driver-controller-metrics service #224
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28953: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #168
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28958: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #104
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29728: cherry-pick:release-4.13: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #141
Full changelog

egress-router-cni

OCPBUGS-11648: update go-yaml to v2.4.0 #68
Full changelog

etcd

OCPBUGS-31653: Rebase etcd 3.5.13 openshift 4.13 #262
ETCD-537: Revert “bump build root go1.20” #263
OCPBUGS-28734: Rebase etcd 3.5.12 openshift 4.13 #245
ETCD-537: bump build root go1.20 #252
OCPBUGS-26925: Rebase etcd 3.5.11 openshift 4.13 #239
Full changelog

gcp-cloud-controller-manager

OCPBUGS-21303: Bump golang.org/x/net to v0.18.0 #43
Full changelog

gcp-machine-controllers

OCPBUGS-24563: Reduce metrics cardinality. #74
OCPBUGS-20851: Bump x/net package to v0.18.0 #68
Full changelog

haproxy-router

OCPBUGS-33448: Count active services before setting weight to 1 #594
OCPBUGS-33280: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #591
Full changelog

hyperkube, pod

OCPBUGS-28660: UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1875
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1938
OCPBUGS-31505: Update to kubernetes 1.26.15 #1930
Address CVE #14
OCPBUGS-29663: Update to kubernetes 1.26.14 #1889
OCPBUGS-12210: Prevent partially filled HPA behaviors from crashing kube-controller-manager #1876
OCPBUGS-27370: Update to kubernetes 1.26.13 #1859
OCPBUGS-25814: Fix device uncertain errors on reboot - 4.13 #1831
OCPBUGS-25988: Update to kubernetes 1.26.12 #1839
OCPBUGS-25767: legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1834
OCPBUGS-23521: UPSTREAM: <carry>: support for both icsp and idms objects #1798
OCPBUGS-23567: Update to kubernetes 1.26.11 #1809
OCPBUGS-18829: cm: reorder setting of sched_load_balance for sandbox slice #1696
OCPBUGS-23287: UPSTREAM: 121881: Use golang library instead of mklink #1802
Full changelog

hypershift

HOSTEDCP-1146: cpo: use CPO spec container image if it is a sha256 reference #3296
OCPBUGS-22971: Add konnectivity-proxy container to CNO #3167
OCPBUGS-23455: Use the same etcd snapshot for all replicas during etcd restore #3205
NO-JIRA: Red Hat Trusted App Pipeline purge hypershift-operator-release-413 #3217
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24999: Add Snyk file to exclude vendor directory on scan #66
OCPBUGS-21137: Bump golang.org/x/net to v0.18.0 #56
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-21418: UPSTREAM: <carry>: bump golang.org/x/net to v0.18.0 #66
Full changelog

insights-operator

OCPBUGS-33449: anonymization - externalIP can be nil (#931) (#933) (#935) #931
OCPBUGS-31991: bump golang.org/x/net version (#927) #927
OCPBUGS-28157: Add extra check in ids to bypass validations (#905) #905
gather etcd_server_slow metrics (#902) (#909) #902
OCPBUGS-23962: adds helm information gather (#868) (#883) #868
OCPBUGS-22958: adds cluster storageclasses gather (#858) (#875) #858
Full changelog

ironic

OCPBUGS-32363: [4.13] remove unused prometheus-exporter #488
OCPBUGS-32387: Use unix sockets by default for reverse proxy communication #476
OCPBUGS-29190: Fix Inspector iPXE config for IPv6 addresses #453
OCPBUGS-23978: Ironic side of external_http_url (METAL-163) is not wired in correctly #430
OCPBUGS-23506: Uplift eventlet version #427
OCPBUGS-23356: Upgrade werkzeug dependency #422
Full changelog

ironic-agent

OCPBUGS-29725: Always add ignition to set hostname on /etc/hostname #111
Full changelog

k8s-prometheus-adapter

OCPBUGS-21457: upgrade golang.org/x/net to 0.17.0 to address CVE #90
Full changelog

keepalived-ipfailover

OCPBUGS-6236: Updating openshift-enterprise-egress-router images to be consistent with ART #121
Full changelog

kube-proxy, sdn

OCPBUGS-20771: update x/net to v0.17.0 #590
Full changelog

kubevirt-csi-driver

“OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #35
Full changelog

machine-api-operator

OCPBUGS-25165: Add Snyk file to exclude vendor directory on scan #1194
OCPBUGS-24277: Update reference URL #1188
OCPBUGS-24277: Use docs URL instead of KCS article #1181
OCPBUGS-21513: Bump golang.org/x/net to v0.18.0 #1175
Full changelog

machine-config-operator

OCPBUGS-32208: Run resolv-prepender entirely async #4314
OCPBUGS-33327: make verify should use MCO’s kube version #4352
OCPBUGS-29721: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4206
OCPBUGS-30285: set nodeStatusReportFrequency #4243
OCPBUGS-28740: crio: drop automatic image cleanup on upgrades #4154
OCPBUGS-29151: fix nodeStatusUpdateFrequency #4170
OCPBUGS-24661: daemon: Add support for new nmstate logic #4036
OCPBUGS-27816: use *resource.Quantity to not automatically set 0 #4141
OCPBUGS-22272, OCPBUGS-27172: kubelet: fix kubelet labels #4120
OCPBUGS-27096: Azure Run ovs-configuration.service before dnsmasq.service #4115
OCPBUGS-19658: After dual-stack conversion reconcile IPFamilies #3935
OCPBUGS-23468: support icsp and idms objects #4027
OCPBUGS-23536: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4043
Full changelog

machine-image-customization-controller

OCPBUGS-27089: configurable ironic agent vlan creation #117
Full changelog

multus-cni

OCPBUGS-28020: Fix SAST scan issues for multus-cni-container [4.13] #224
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-27958: Enable reconciler configuration #241
OCPBUGS-27367: [release-4.13] Backport fix assignment #236
OCPBUGS-21512: update golang.org/x/net to v0.17.0 #208
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#90) #90
Full changelog

nutanix-machine-controllers

OCPBUGS-24563: Reduce metrics cardinality #59
OCPBUGS-25459: Fix CI by running tests natively by default #60
Full changelog

oauth-apiserver

OCPBUGS-28674: Fix HTTP/2 deps for release-4.13 #102
Full changelog

oc-mirror

Bump version to include v5.11.0 of go-git (#823) #823
OCPBUGS-385: Capability to override default channel (#749) (#791) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#775) #775
Full changelog

olm-rukpak

: OCPBUGS-27594,OCPBUGS-27679: Update go-git to v5.11.0 #75
OCPBUGS-23403: [release-4.13] Address http2 vulnerability #58
Full changelog

openshift-apiserver

: OCPBUGS-21449: Enable HTTP/2 CVE mitigation #398
Full changelog

openshift-state-metrics

OCPBUGS-20723: bump x/net to v0.17.0 #108
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-27564, OCPBUGS-27569, OCPBUGS-27649, OCPBUGS-27654: bump go-git/v5 to 5.11.0 #682
OCPBUGS-28228: Registry Pod Controller Flag #672
OCPBUGS-27891: [CARRY] SSC RBAC #669
OCPBUGS-8653: bump golang-migrate to v4.16.1 (#1107) #649
OCPBUGS-20815: [release-4.13] fix apiserver vulnerability #616
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-33421: [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2130
OCPBUGS-33218: [release-4.13] OVN bump to 23.06.1-112 #2153
OCPBUGS-28983, OCPBUGS-30920: Update netpol namespace address sets usage to the old ways #2097
OCPBUGS-29851: Egress IP, Services: use all node IP addresses #2090
OCPBUGS-28630: Synchronize node primary address update #2036
OCPBUGS-25611: Avoid panic due to stale ACLs with 1013 priority #1987
OCPBUGS-27257: Ensure session affinity cleanup on backend removal #2022
OCPBUGS-27736: CARRY: Updates owners and adds Surya #2024
OCPBUGS-24419: OVNK/GW: Ignore headless services in syncServices #1971
OCPBUGS-23258: Update leaderelection config to allow retries #1992
OCPBUGS-26242: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2011
OCPBUGS-25923: Forward ICMP packets to OVN loadbalancer #2004
OCPBUGS-25224: [release-4.13] fixes MTU configuration on gateway router #1988
OCPBUGS-14799: Updating endpoints when using allocateLBNP=0, lgw mode fails #1940
OCPBUGS-25095: Fragment oversized reply packets in LGW mode #1983
OCPBUGS-24391: Limit OVN-Kubernetes RBAC permissions #1950
OCPBUGS-23014: Netpol retryFramework cleanup #1957
OCPBUGS-24263: Bump OVN to 23.06.1-39.el9fdp #1966
Full changelog