4.13.56

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.56-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Pending (1 retries) periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.13-fips-payload-scan
- gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.47, 4.12.48, 4.12.49, 4.12.50, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.70, 4.13.10, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.13.22, 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.3, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.4, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.13.48, 4.13.49, 4.13.5, 4.13.50, 4.13.51, 4.13.52, 4.13.6, 4.13.8, 4.13.9

Upgrades to:

4.14.49 (changes) - Failed
4.14.0-0.nightly-2025-03-14-132329 (changes) - F F P
4.14.0-0.nightly-2025-03-14-070813 (changes) - Success
4.14.0-0.ci-2025-03-14-124425 (changes) - Success Success
4.14.0-0.ci-2025-03-14-060240 (changes) - F S S

Loading changelog, this may take a while ...

Changes from 4.13.40

Created: 2025-03-13 15:41:52 +0000 UTC

Image Digest: sha256:1b45fabb8dc896cdf904ee6f0b88bc47f0f570ab46fe796b2da9ccd4948971f3

Components

Kubernetes upgraded from 1.26.14 to 1.26.15
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202404021456-0 to 413.92.202503112237-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git e41e11cc sha256:b20abecc0f2229af578fefd3154604d9c6a8d7a6a35536eb5016adc261f4b59a
alibaba-cloud-csi-driver git 6384f904 sha256:08a9291e92a6869a89c6278cdba0dd53c338bbe6710fb7bcce703ac941d023ce
alibaba-disk-csi-driver-operator git 7e415973 sha256:9b205a2d284fdc6cbf76f2f9ac01f1d7a611b13252c1b04ee6eb64bc7799e8bc
alibaba-machine-controllers git 4c0f96a6 sha256:a5efcf79f6882174b61f744989c4b12f088daf6d9b11efc5fe7aadc756ad0af6
aws-machine-controllers git e1a57b5e sha256:fc1aef41b9cb7c43da4876e5427544aceb5b1499cab67d73e6b01ba54cb2914a
azure-cloud-controller-manager git bf9bd022 sha256:8aec84356e1c44e1102e080b52ed998c672d8cb93f6ac60174b374f1b6cd6bb1
azure-cloud-node-manager git bf9bd022 sha256:5a209a8b6f30fa9425b4d4639dcaaabc07426ce26cb8250221c8be5f4de9a102
azure-disk-csi-driver git b6d3fbcb sha256:4cf9fd9d970a2a9ea962ae4eb429084fc3b61e880e897f212e7ad9e426f5b4cf
azure-disk-csi-driver-operator git 8534d756 sha256:c542f7bce1bb0af89fcd322dbf2ceea849d7d85d9d3fffb57c5e505a9f7ed67d
azure-file-csi-driver-operator git 70e05302 sha256:5776bb502ee1fd5979c51541b98831d6e221f7ba3148b519e1de8e3c8387edda
azure-machine-controllers git 62f6e0f3 sha256:6a451d1032b192acfb960cb09fdac8c6927a12e280165dde7261d9385273d4ea
baremetal-operator git f6db335c sha256:819813d1a7f8c180eb2b860a089e7c8c83758bdb314857bceb487782bf55b97d
baremetal-runtimecfg git 1280cf54 sha256:af30e80507429c63cafc1ab6746b6b29fcfc352e692e33f383fbc121c179286d
cli git d192e901 sha256:282eaaba48bc71331523dc178b1089a273a9ffb78bd454c62ff89532aa55a2a6
cli-artifacts git d192e901 sha256:86a455bc11306b94ee2e139d6d7cc7fcb9645b3c5a3c91f0b2ecef260d6c8277
cluster-authentication-operator git 1801056c sha256:03bc2caffee645101654699aef19ae521c9a6f9e4c2317c2a04979c2e1523181
cluster-bootstrap git ee908b6b sha256:a551616697ff706e9c41796365f33d0102eca45e59931351f196cb21003892a4
cluster-capi-controllers git 12f767b2 sha256:86fabe2a19adca72f43c7283b245f1767ad6d53e796ce52eaf33761ba143f1d3
cluster-capi-operator git b247793d sha256:8658bb71ada391358fc8100d27056f009fd761a7705e36b2628f839db63c2bde
cluster-config-operator git a6d56530 sha256:2c8b143dfeb990de04b7655af312eb9270051d0df435f0d4b8ba1018a81a2016
cluster-kube-cluster-api-operator git 18c076b1 sha256:3cea28f3e3c7b1ba6d88888909382b1b2a0ba1518d5961ca3771ad3e9aaf13ea
cluster-kube-controller-manager-operator git dac71136 sha256:3eb1fdae42278d0944faed4cdfb31400165976e4988014c9d6df7b4f59067316
cluster-kube-scheduler-operator git 2e7c269b sha256:5b91b03e18604beb37f334ec3c1e57a6e5d3d818f57ac78a909656c0eb54b9b0
cluster-kube-storage-version-migrator-operator git 721de5d6 sha256:a22b8f5ba85db866f2feb945aae604951ef502381eb7ec38aba78d352451e67a
cluster-machine-approver git 25fe7b4b sha256:4f764ffb91b92363c2a54af3a7016f7c73dd4e71d7e414ec0b5b8dc75ed35abd
cluster-openshift-apiserver-operator git 9abb220a sha256:5e944bd7facf70bbf4b1ef666c7cf3b3c3abb8e52c1ed952faaffbf34ffe976e
cluster-platform-operators-manager git 312c5f24 sha256:a0f993af66604a4207b73161c9125ad5e975063e78d66baa460ad072d7a020fa
cluster-policy-controller git 3b0d0755 sha256:732957b94eeabcb3474ea2f561ec9df68a9839282b8502e88da32047752fa1fc
configmap-reloader git 9adad592 sha256:da3b4a6df02fe406f52c3bf64634b7e096e75d5c3c910704acd6bd26b98de07e
container-networking-plugins git 614ca3c3 sha256:0c8988ebcfb880d1ec0592f21e8b950e4f1abe75fbcbeea8de128f306c3caa22
csi-driver-manila git c3b7d2f5 sha256:9e57a0526a166b81526f70e0c599c442d986440fd2f4e15c10dc9b24413801ad
csi-driver-manila-operator git 596a53c8 sha256:0d31b7c0bca54e5f8282963a3bd7c6b5414221f12ea8a2d36dc5d48344ea1cb9
csi-driver-nfs git 2b914c21 sha256:da185c76b994a497bf0c4a9942f43c8b0761444a048b1c3f1e9bd5a59e91f399
csi-driver-shared-resource git 01bbb23b sha256:66597626b1f5b898811b04b7d6d54a79ed9d10ea103c6c782c3585b708b471ec
csi-driver-shared-resource-operator git bc169d2d sha256:0f69e42f44d41f393a5233045f6df39bbbc72e80c9ac8cf3fd5e45e436ee4a10
csi-driver-shared-resource-webhook git 01bbb23b sha256:57317d7ecd1a8ec56a87e66aea5b3df31b88ef87b93f1f747eabceaa688012b9
csi-external-attacher git d9290843 sha256:2da19b0188d4bde185c9f1bc57ac56ada2ddd1f7a2e0e7f757044ae8867557b5
csi-external-provisioner git 0bf126b7 sha256:6f3e151b3a8ac18c3648e7deb9e261f64d34ec03fdd30eeeee4dc545932dbdee
csi-external-resizer git e8036caf sha256:0a691a60462919606668c8016fb218ecbb001905ee1e8c1eebac7ebaa4572b51
csi-external-snapshotter git c8a7a097 sha256:536c15388a4614b9fb746e7f4f829821325afbf0393704b1560e5eab65e3022d
csi-livenessprobe git 3587db51 sha256:f87a623e4528f0ec9a64b5c54a7be9e8eab54f15e5d01f90a1d9e1404eccad41
csi-node-driver-registrar git 9ea90f34 sha256:3ca3aa514a2e265414a4eb20fb4b22ac4083edad0afe118f696e9d80fc36dfb7
csi-snapshot-controller git c8a7a097 sha256:b76e2b5f9da672c0734ef4afe811c00b1469c85a0bfc41b49107a77777055f97
csi-snapshot-validation-webhook git c8a7a097 sha256:9c96d2f4fcf5d500bbff1cdd3ea0ac2cfd4e342a8e927035593bfbf0c45a7afb
deployer git d192e901 sha256:5dd8b0c6c0a75c3d3ce9e3b4c263b6bba0b897a8a7793ef2879cbaba8360e970
docker-registry git 47a15ac8 sha256:cb1d012b611e08efe6fd09d58b63b553679816d9c48521078542233afb960f4f
driver-toolkit git d719bdcf sha256:a2ba6ee7fa92c47401aa59ed07e9f95f61f5ff0ed48436090939e4278636f316
egress-router-cni git dfe03737 sha256:9f219c03eac7b0e58e3d0661e428e8cc2d5fadec68b7930fcbb4b683cd3591e8
gcp-cloud-controller-manager git 507fea98 sha256:0945a9240996ab555b2a9a9a9ef9705470493e95d45143a65e0b6d5b60b42465
gcp-cluster-api-controllers git b8a27725 sha256:c4f03d9b246583989bdffc549b83eb4a696267396c707b303a9ba4004ebb469d
gcp-machine-controllers git e53a397d sha256:8dffab9991988c7d5370f4a2f653164bb44010c30aed548578d4760d658389c1
gcp-pd-csi-driver git 81e60746 sha256:9db59484fb61891f82d26b7f83a3f6d88c87b5dfe555e4f32c4e9702e9f66ee8
gcp-pd-csi-driver-operator git 08c561b8 sha256:8846a840eb7c28ad8413460c9181cda169c1ccba8f866b131689043d7f56a28f
ibm-cloud-controller-manager git b5bcaf9c sha256:7a872f0bec29651f9165cf7163bb3bc21b8f0873ec49e7cdfad33ca750603a82
ironic-machine-os-downloader git ce291779 sha256:65731da3b63bf4313d759bc8eabc5e17b7cd6f0c1899de18276247c97f12ed7e
ironic-static-ip-manager git 4536724a sha256:1d9c651aaba7f0e638e2d18cc54611691f7c9bb03ac8525af81ee843ca420f3e
k8s-prometheus-adapter git 0fce7c7c sha256:f9fe27ce62753a09ec7667cf507011ca679549fb8615cd5b586f67260b7ad760
keepalived-ipfailover git 1a14e5c9 sha256:e22c5d05300a8837b548cf2a56ce0594a35496a61feb1379a57c0caa16b9994f
kube-proxy git 569ea111 sha256:ca2dec9992c63d969becc10045125525d5ac4048463d928399697bdf16cd5c83
kube-state-metrics git fd791df5 sha256:fd8b7244a9e4a1fd59bdef20cb77ade576708310bcb384fd8d48ce8810142499
kube-storage-version-migrator git bad104d1 sha256:8dce2b5e38f0ddbfb01d45da988a20abddf35151c83980283522a0173a1305cc
kubevirt-cloud-controller-manager git ee2033ec sha256:0dff6a20873a82f1b9e72b921c5f13e49abc2fcd99f27d592371cb5ffa1e9395
kuryr-cni git 36754b7b sha256:e88e0c021c5afcae57cd0fa3c10ad5aa955a35f112480b2686ca7cd82f645de7
kuryr-controller git 36754b7b sha256:4e5734fb788386ba6cae75ce7717fa8abbfaa2628d6f02ec2cfc5f2443c9f4c7
libvirt-machine-controllers git d4b7a8ab sha256:8f842b996d07194ddf19d0f7f4c3a3080030b780d995a2aff6b0c29d43430a48
machine-image-customization-controller git 34a4abe6 sha256:cfa3175a0ebb01f31349b6b6f990299883334040ec30570c440b08c1f1564e37
machine-os-content sha256:c986de33a1a91da59e16e4e8b80967b830bed4df6c8babd5a93c1069f209725e
machine-os-images git b14856ff sha256:d507758b657ba7136436db21e9361d2928e57c6fdf445bad3777575742bde89c
multus-admission-controller git 9b0656af sha256:a34ef471cb951d68b49ce6e8d9437a380849ea230cd94f512259c014bc57f0ae
multus-networkpolicy git 7176ab75 sha256:2b44427ad39af3bc0a9ed3813be6d82900c6746808eef2c050bc016de12de5f7
multus-route-override-cni git ca3bbec5 sha256:594de944aa67486c3f1104a583267a7fbdcbc5e00357f3e08f3df1c6e824946a
network-interface-bond-cni git 84bda2af sha256:063340ed73d015e319d082634eca7e9e5d9bc7923b0eac3b4c648c96549ee1d4
network-metrics-daemon git 3ef81a5c sha256:076ceb119cb8af50d6002b54a3dd515245f312d39ab6805e8b7e90e5ab4f8b56
network-tools git 073feda1 sha256:2cd1b7aab20b303802156bafbde235149a163d08c473e73cdcd617109c5e61c3
oauth-proxy git 44af5a3a sha256:c1e6481795dff066bf1676507181c1f20ec30ded05931f258a177b7a3fffd52b
oauth-server git eb54be28 sha256:ccd14f3cd73e95e38f2646b89ebfd5341a84cae3f661d916224a2408f901a0e8
openshift-state-metrics git 9be421f0 sha256:fe9f26abc99c1722bd06f1e64e1da5a8bf1f39a0ff3928dfac544b5b93974933
openstack-cinder-csi-driver git c3b7d2f5 sha256:bfd00cdadd5ae1aa39477e2b432c12e8341a5d4f93da5ec36a11e138daccdcfa
openstack-cinder-csi-driver-operator git b50a649b sha256:3d93a1cbf7415ba003e7a759175a485c7158392c2da3105ae26df0939666046a
openstack-cloud-controller-manager git c3b7d2f5 sha256:5ace57f34603ca1eb447860ff59de5e85576b91eb8fbabaec0e1c1b2bfd865e8
ovirt-csi-driver git 54958deb sha256:e7c68c45dc13bd250736a84ca846d2d7afc3afcd6c1178cf6180cd8e0d33b4ce
ovirt-csi-driver-operator git b293972f sha256:9686444a3c563f50b02d5898669609c345a3d22518e26da43ce0dff14924b827
ovirt-machine-controllers git 22d89b3f sha256:d480f7337012ebdac0ec384adf006498dcb689c560efa34a3dd2236203127968
powervs-block-csi-driver-operator git e70c980e sha256:6f20028e39117e809628f4752c0c7eafef49b2205beba17623091f08f0a680a8
prom-label-proxy git b501d5e2 sha256:c8155eda649883b52691cdd4afdd5977d72d887f23ebb54895b902f24248abdc
prometheus git 72886096 sha256:b6c5bb4a5b75df7cca3e401a74b9fa7682c32fb5905d0a77e4dfd1b39a337974
prometheus-alertmanager git df2f11e2 sha256:3c8ff2c751a5a22880496f770b04758ab3b413858dff1e70738e96e04440d35a
prometheus-config-reloader git 30fdccd1 sha256:123696fa149d8b85e6a07d593b4fe820093beead07abfb1c17dfceef99d52d40
prometheus-node-exporter git 59d699ca sha256:92890c054b037c3829449b2f8321f541130bd9acfa2bfe8c207780de10beb6ae
prometheus-operator git 30fdccd1 sha256:343587aa21fa619299c90d8342af4a450e015d2669cf0aafcc8e9ef5285e4ccc
prometheus-operator-admission-webhook git 30fdccd1 sha256:8f0aabe62275b214ecdf3ed25b11104092a98fe1a0508c26d8d5df3af612db6d
rhel-coreos sha256:7ef862763c0ff26a92b2c3740dfc1463c3a16ad0aa0be211b8bc9efa0be9f859
rhel-coreos-extensions sha256:ddba63852785f2f6e66d008afd01917f011b880b5cc00ca5bfd90f2c2805d645
route-controller-manager git 6667a6cb sha256:3068b61b914bc47856997ebc6d789fc124ff2e79ef4c8e5fbc91faa66642bd64
sdn git 569ea111 sha256:0c8e059dc937369c49342fd64066c819ec68b34754e39851d5e3fa879f2b0946
service-ca-operator git dba00dc5 sha256:695548118d5a0db9cb69ab645c5ec86226d5b1b77e21a8a6132bc25e2a1b4122
thanos git 70fb57fb sha256:2a95ba849f16414cbc36693e970d6e0a8409e90639c400525a7cefcaf597f786
tools git d192e901 sha256:3966a97d8432e05c3b16c08902ebf37672c33615153dfb30792d5938413f20be
vsphere-cloud-controller-manager git f56d57ba sha256:678f3c6701d7dc0e3f89bd0baa47fd2c4a946146b72492057700606e95505fa7
vsphere-cluster-api-controllers git da63f2b9 sha256:dbca3651165b51c507724aedcf1108c5beffa73d01f81ac75091acb3ff8e9bf8
vsphere-csi-driver git 4d3036a6 sha256:f3d6e7c316f6e178d15d198bcf7d0aa17f296775efb22853565d6582232eb66a
vsphere-csi-driver-operator git a9e5036e sha256:1a104d8c82b6ffc7c7bda526cb9f91749951f390e120ed981e23aaa405ea2039
vsphere-csi-driver-syncer git 4d3036a6 sha256:49f6a8ef0379eb7521017bb71f3db78e0e8937b0543d1cf5d8554178fa17a0b3
vsphere-problem-detector git 3ad7408f sha256:85ff538bd15a0c55231af768a03b69524dc799608a99d60cc0e69fb8ee8a5f5f

agent-installer-api-server

OCPBUGS-13611: Update version go-http-metrics/gin (#6919) #6919
MGMT-17595: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) #6215
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) #6202
MGMT-17541: Replace broken golangci reference (#6196) #6196
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Bump golang.org/x/net to 0.33.0 (#1015) #1015
OCPBUGS-13612: Update version go-http-metrics/gin (#935) #935
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) #835
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) #829
MGMT-17541: Replace broken golangci reference (#826) #826
Full changelog

agent-installer-node-agent

OCPBUGS-46952: Bump golang.org/x/net to 0.33.0 (#886) #886
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) #706
NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) #700
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) #702
MGMT-17541: Replace broken golangci reference (#697) #697
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32073: update for CVE-2023-45288 [release-4.13] #84
Full changelog

aws-cluster-api-controllers

OCPBUGS-32470: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #509
Full changelog

aws-ebs-csi-driver

OCPBUGS-33363: [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments #266
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33363: Explicitly reserve 1 attachment for the root disk #307
Full changelog

aws-pod-identity-webhook

OCPBUGS-32882: Upgrade go-jose module to 2.6.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-36022: Update go-retryablehttp to v0.7.7 #314
Full changelog

azure-file-csi-driver

OCPBUGS-41678: bump mount-utils to treat ENODEV error as corrupted mount #81
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-39217: Add yq v4 to ci image #8922
OCPBUGS-36088: [release-4.13]: bump go-retryablehttp for CVE fix #8659
OCPBUGS-29124: IBMCloud: Handle disk delete errors #7989
OCPBUGS-37168: Add yq-v4 to the upi-installer image for CI #8743
OCPBUGS-35976: [release-4.13] bump github.com/containers/image for CVE fix #8651
OCPBUGS-33732: preserve category name when trying to find tag category #8419
OCPBUGS-33062: openstack: Honour worker server group policy #8323
OCPBUGS-32359: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8284
OCPBUGS-22979: IBMCloud: Add eu-es region #7685
Full changelog

baremetal-machine-controllers

OCPBUGS-46640: Bump x/net 0.33.0 #229
Full changelog

cloud-credential-operator

OCPBUGS-43340: Update github.com/sirupsen/logrus v1.8.3 #770
OCPBUGS-37834: Resolve SNYK errors in security job. #743
OCPBUGS-37421: SNYK ignore go-client misreporting #740
OCPBUGS-36028: IBM/go-sdk-core update to v5.17.4 #722
OCPBUGS-32898: Upgrade go-jose module to 2.6.3 #698
Full changelog

cloud-network-config-controller

OCPBUGS-32180: Avoid nil pointer panic while assigning private IP on Azure #139
Full changelog

cluster-autoscaler

OCPBUGS-45151: [release-4.13] VPA: Update OWNERS file #328
OCPBUGS-40929: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #317
OCPBUGS-31702: add check for taint.value == nil #295
Full changelog

cluster-autoscaler-operator

OCPBUGS-31992: Update x/net to v0.25.0 #324
Full changelog

cluster-baremetal-operator

OCPBUGS-31993: bump x/net to 0.23.0 #439
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-35562: update azure and ash tolerations on node manager #353
OCPBUGS-35562: update unit tests [release-4.13] #354
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48259: Add unreadyNodeGracePeriod for allowing brief node hiccups #342
OCPBUGS-35380: Improved debugging of API listing errors #304
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32334: create suitable role and roleBinding for csi-snapshot-webhook #206
Full changelog

cluster-dns-operator

OCPBUGS-11449: Enable topology-aware hints iff nodes in >=2 zones #418
OCPBUGS-11449: Ignore max unavailable for status #417
Full changelog

cluster-etcd-operator

OCPBUGS-35077: return errors in wait-for-ceo #1273
OCPBUGS-31988: update golang x net #1255
Full changelog

cluster-image-registry-operator

OCPBUGS-36034: go.*,vendor: bump go-retryablehttp #1070
Full changelog

cluster-ingress-operator

OCPBUGS-43095: Add alert for RFC 7230 violation in Transfer-Encoding headers #1161
OCPBUGS-43095: Add e2e test for duplicate Transfer-Encoding headers #1150
OCPBUGS-36551: Add Regexp Anchor to TestAll #1104
OCPBUGS-35453: [release-4.13] internal service changed fix target port logic #1089
OCPBUGS-35094: TestHostNetworkPortBinding: Delete t.Parallel() #1082
OCPBUGS-34765: Don’t add clientca-configmap finalizer if deleting #1073
OCPBUGS-34409: desiredRouterDeployment: Set HostPort if needed #1062
OCPBUGS-33990: Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] #1055
OCPBUGS-34476: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1065
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50850: Increase waitForFallbackDegradedConditionTimeout #1809
OCPBUGS-34062: [4.13] add a controller that reconciles SCCs’ volumes #1677
OCPBUGS-25922: [release-4.13] dashboard: use recording rules for most metrics #1611
Full changelog

cluster-monitoring-operator

OCPBUGS-33581: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2344
OCPBUGS-28767: fix generation of telemeter token hash #2305
Full changelog

cluster-network-operator

OCPBUGS-43856: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2547
OCPBUGS-38403: Add missing runbook for OVNKubernetesNorthdInactive #2471
OCPBUGS-37941: update whereabouts crd #2458
Full changelog

cluster-node-tuning-operator

E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) #1069
OCPBUGS-33030: [release-4.13][manual]Reduce number of reboots in offline tests (#1048) #1048
Scheduler plugin: ignore IRQs (#1027) #1027
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-38455: Update opentelemetry to mitigate CVE #365
Full changelog

cluster-samples-operator

OCPBUGS-49663: add shannon and aroyoredhat as owners #599
OCPBUGS-21198: update k8s.io/apiserver version #589
Full changelog

cluster-storage-operator

OCPBUGS-33468: Fix problem-detector proxy setting #473
Full changelog

cluster-update-keys

OCPBUGS-43886: keys: Update Red Hat keys to use SHA256 signatures #67
Full changelog

cluster-version-operator

OCPBUGS-45332: deps: bump golang.org/x/net to 0.31.0 #1121
Full changelog

console

OCPBUGS-45292: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14573
OCPBUGS-44356: Application creation fail when manually entering input scaling value in local setup #14509
OCPBUGS-45197: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14552
OCPBUGS-44585: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14497
OCPBUGS-36557: Increase login flow state paramater length/entropy #14483
OCPBUGS-42951: The filepath including leading slash makes error during parsing devfile using Gitlab #14383
OCPBUGS-41594: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14263
OCPBUGS-35259: fix vCenter cluster being empty #13952
OCPBUGS-32147: Bump graphql-go to v1.3.0 #13922
OCPBUGS-33978: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13872
OCPBUGS-34342: Fix PipelineRun Logs tab navigation #13890
OCPBUGS-24395: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13405
OCPBUGS-33777: restrict Masthead logo to max-height to 60px #13860
OCPBUGS-33749: Add visual connector between VMs and non VMs workloads #13857
OCPBUGS-33382: Routes created by devfiles do not always use HTTPS #13827
OCPBUGS-33650: fix issues with Edit Route form #13851
OCPBUGS-32500: PipelineRuns in Console show wrong status or load indefinitely #13780
OCPBUGS-31077: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13683
OCPBUGS-31595: Fix operands list endpoint. #13714
Full changelog

console-operator

OCPBUGS-18674: Reset console operator’s conditions #894
Full changelog

coredns

OCPBUGS-38431: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #129
Full changelog

docker-builder

OCPBUGS-43295: Buildah dependency bump to 1.29.5 #460
OCPBUGS-43191: runc library bump to 1.1.12 #439
OCPBUGS-48836: skipping some unit tests to avoid failures as they are duplicate #434
OCPBUGS-48655: Add new team members to the OWNERS file #431
Replace ‘coreydaley’ with ‘sayan-biswas’ #407
BUILD-854: Add adambkaplan as approver #405
Full changelog

etcd

OCPBUGS-32920: Revert “Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… #266
OCPBUGS-31653: Rebase etcd 3.5.13 openshift 4.13 #262
ETCD-537: Revert “bump build root go1.20” #263
Full changelog

haproxy-router

OCPBUGS-43095: add duplicate_te_header_total metric #626
OCPBUGS-34673: Properly handle rewrite-target annotation #608
OCPBUGS-33911: Reject routes with MD5 certs #600
OCPBUGS-33448: Count active services before setting weight to 1 #594
OCPBUGS-33280: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #591
Full changelog

hyperkube, pod

OCPBUGS-41678: mount-utils: treat syscall.ENODEV as corrupted mount #2083
OCPBUGS-37280: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2045
OCPBUGS-28660: UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1875
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1938
OCPBUGS-31505: Update to kubernetes 1.26.15 #1930
Full changelog

hypershift

OCPBUGS-39184: fix: bump github.com/IBM/go-sdk-core/v5 #4627
OCPBUGS-41515: set Konnectivity cipher suites #4284
NO-JIRA: hack: make the e2e script generic #4202
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36064: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #74
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36070: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #123
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-36010: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #43
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-36076: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 #90
Full changelog

ibmcloud-machine-controllers

OCPBUGS-36082: Bump dependency for CVE #56
Full changelog

insights-operator

OCPBUGS-36475: properly encode the URL for the advisor links (#962) (#965) #962
OCPBUGS-33449: anonymization - externalIP can be nil (#931) (#933) (#935) #931
OCPBUGS-31991: bump golang.org/x/net version (#927) #927
Full changelog

ironic

OCPBUGS-48146, OCPBUGS-48595: Bump jinja2 to 3.0.1-6.el9.2 #626
OCPBUGS-43952, OCPBUGS-43960: Bump python-waitress [4.13] #608
OCPBUGS-37764, OCPBUGS-39384: Include fixes for CVE-2024-44082 #585
OCPBUGS-38509: set min version for python3-webob #557
OCPBUGS-33374: bump werkzeug #543
OCPBUGS-34898: bump jinja2 #538
OCPBUGS-37116: Update eventlet version #525
OCPBUGS-32363: [4.13] remove unused prometheus-exporter #488
OCPBUGS-32387: Use unix sockets by default for reverse proxy communication #476
Full changelog

ironic-agent

OCPBUGS-39384: Include fixes for CVE-2024-44082 #164
OCPBUGS-38509: set webob and bump werkzeug #152
Full changelog

kube-rbac-proxy

OCPBUGS-31987: CVE-2023-45288 [4.13] #107
Full changelog

kubevirt-csi-driver

“OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #35
Full changelog

machine-api-operator

OCPBUGS-43856: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1304
OCPBUGS-32015: Fix zone tag value reconciliation for vSphere machines #1225
OCPBUGS-31994: Update x/net to v0.25.0 #1245
NO-JIRA: [release-4.13] Fix data race conditions in unit tests #1254
Full changelog

machine-config-operator

OCPBUGS-44206: Panic seen in CI job for MCC pod #4680
OCPBUGS-38372: Revert “MCD-pull: run after network-online.target in Azure” #4527
OCPBUGS-38295: daemon/update: disable systemd unit before overwriting #4522
OCPBUGS-37783: Openshift uncordoned compute-node that was intentionally cordoned #4507
OCPBUGS-37160: MCD-pull: run after network-online.target in Azure #4474
OCPBUGS-36782: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4464
OCPBUGS-32208: Run resolv-prepender entirely async #4314
OCPBUGS-33327: make verify should use MCO’s kube version #4352
Full changelog

multus-cni

OCPBUGS-28020: Fix SAST scan issues for multus-cni-container [4.13] #224
Full changelog

nutanix-machine-controllers

OCPBUGS-20976: bump golang.org/x/net to v0.17.0 #86
Full changelog

oauth-apiserver

OCPBUGS-31996: bump x/net to 0.24.0 #112
Full changelog

oc-mirror

changes the owners file (#1012) #1012
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1025) #1025
Bump version to include v5.11.0 of go-git (#823) #823
Full changelog

openshift-apiserver

OCPBUGS-32446: bump(x/net) to v0.23.0 #430
Full changelog

openshift-controller-manager

OCPBUGS-48656: Add new team members to the OWNERS file #362
[release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency #326
OCPBUGS-41952: Add adambkaplan as approver #335
Full changelog

openstack-machine-api-provider

OCPBUGS-34422: Ensure portSecurity is correctly set in the Instance Ports #119
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46924, OCPBUGS-46931, OCPBUGS-47311: x/net bump to v0.34.0 [release-4.13] #942
OCPBUGS-47507: CRD upgrade existing CR validation fix (#3442) #924
NO-ISSUE: [release-4.13] Backport e2e fixes #876
OCPBUGS-42146: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #871
OCPBUGS-38254: [CARRY] perform operator apiService certificate validity checks directly #836
OCPBUGS-38608: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #843
OCPBUGS-32856: bump go-jose to v2.6.3 #780
OCPBUGS-35241: Unblock CI #772
Full changelog

operator-marketplace

OCPBUGS-49430: Upgrade golang.org/x/net [release-4.13] #590
OCPBUGS-32074: update golang.org/x/net for CVE-2023-45288 #566
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-38264: [release-4.13] Bump OVSDBTimeout and make it configurable #2289
OCPBUGS-37119: EgressIP: Reload certificates for the grpc heatlhcheck server #2226
OCPBUGS-35100: [release-4.13] ipv6+all protocols conntrack flush #2200
OCPBUGS-34669, SDN-4186: Introduce a validating webhook for ovnkube-node #2053
OCPBUGS-29865: CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding #2095
OCPBUGS-33730: Improves service iptables efficiency on start up #2172
OCPBUGS-32988: Bumping OVS #2143
OCPBUGS-33421: [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2130
OCPBUGS-33218: [release-4.13] OVN bump to 23.06.1-112 #2153
Full changelog

powervs-block-csi-driver

OCPBUGS-36094: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #91
OCPBUGS-33638: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 #82
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36104: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 #76
Full changelog

powervs-machine-controllers

OCPBUGS-41980: Update go.mod to fix CVE - 4.13 #87
Full changelog

telemeter

OCPBUGS-34829: fix issuer check during JWT authentication 4.13 #540
Full changelog

tests

OCPBUGS-52584: Use payload pullspec for image info test #29592
OCPBUGS-37921: Removes dependency on samples operator images #29007
OCPBUGS-35053: updated timeout to 3 seconds to account for network timing issues #28862
OCPBUGS-36501: test/extended: skip etcd leader change check on hypershift #28922
OCPBUGS-35857: Use centos7 tag instead of latest for cmd images tests #28895
OCPBUGS-33985: Provide SCC access via RBAC #28835
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github