4.13.5

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.5-x86_64

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Failed (3 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.12.22

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.13.0

Created: 2023-07-14 17:59:11 +0000 UTC

Image Digest: sha256:af19e94813478382e36ae1fa2ae7bbbff1f903dded6180f4eb0624afe6fc6cd4

Release 4.13.5 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2023-07-14-070245

Components

Kubernetes upgraded from 1.26.3 to 1.26.6
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202305041429-0 to 413.92.202307140015-0 (diff)

Rebuilt images without code change

agent-installer-csr-approver git 6160d183 sha256:ec139e8f2e721e02af28e3af4cde65316409d42b5d9360b756908abcfdb1359e
agent-installer-orchestrator git 6160d183 sha256:c826b2b6548ab6c25347fc09fd85b9b9c12c34d089bc9fdd21e835246275667f
alibaba-cloud-controller-manager git b5200baa sha256:dd81716a9df41055cc83fa5d3162d9337dc68b89254b1d7b58924e065e0afdfd
alibaba-cloud-csi-driver git 68c0ecfc sha256:359b506567dc21ae6a0aaa6466f25b319b1f787f9715b60ed18c84671d426aa0
alibaba-disk-csi-driver-operator git 0f4b92ab sha256:3e172bdd99f0a745ff4de328f599192de10fbc790733a95b8c49c9e779eb6064
alibaba-machine-controllers git 4c0f96a6 sha256:5a6b417c24bdc1ba7b1717fcfb471a72fcd3a811150c0a1941dac9c74ed900aa
apiserver-network-proxy git 61e198ca sha256:be64e5a8e977d619ad655a02321e9260351687e1245ba72fc0680c17a3b1c82a
aws-cloud-controller-manager git 946daa07 sha256:88b62f5038731ef4e1884cde756327c921a0e04f7b21f6cf9497fc91e1688b49
azure-disk-csi-driver git 202e8afa sha256:6130e2ac732364f41f9770914b1e4dcdf75e343150744c75a9ff88f1e98c93f9
azure-disk-csi-driver-operator git 67bda472 sha256:fb16bdf6e10ba13d2192000fd33c5c6d3c1c8f995a092c31b0b29c7665f31875
azure-file-csi-driver git fd94a035 sha256:13b49ace9089bf129354590ba36965c9851d3b571d348e1285cd63d79f6e4b40
azure-file-csi-driver-operator git 994c32c9 sha256:9efdfaf8d05b380835d2378f020e8ee399c01846b5886809f09a3e7bdc779d91
cluster-autoscaler git c58c53bf sha256:3ab987d1c390ebeb8888dc12a33f3f2eda67d213b353aaa248fe4f1a5f2765bc
cluster-autoscaler-operator git 99a0e2ba sha256:182b342e5973afec8d506ed4ae72f67528a89093aa5b677adfb696ad7eb841a1
cluster-bootstrap git ee908b6b sha256:ed2ccba3570f4721af977756f1b344f6d73d0a1ed5d31fa23f17b6b55c715738
cluster-capi-operator git ce1c9a35 sha256:24225fda4dee7464496d5173cc929ecb8edc9ffbdaaea943ac3af931fc639ee0
cluster-config-operator git 923b864e sha256:45f4f745bbbff9c479f7fed638dfecc719cb038b37bcd2816d933004c863e3a6
cluster-csi-snapshot-controller-operator git 97b486cb sha256:c2269c9374eebe0a87920845aaa47ab27e76bd943f53a18b7bbc11f6d788c141
cluster-etcd-operator git 4a9be58b sha256:184c12994be8732331a19f259cd80515da93c60fabe9d3d3e114b8a51841c45f
cluster-image-registry-operator git 3ed61e2b sha256:7532c3fa391ccb3456f37743fc6b37e625b1141a2ee1edea34bf43016b6603b6
cluster-kube-storage-version-migrator-operator git 9f475980 sha256:c565a57048a62fdbeb3528847246467bee214ffc364ba502b4501c981458dccc
cluster-machine-approver git ce66cd54 sha256:d958ac8b8092dec0e31c6c6a8138377f42d8ae7189a160ea9a14b338cea238b9
cluster-openshift-controller-manager-operator git 9a8aba8c sha256:fc323d69f6f47d2b6a7f1a8a3d4fbec35e0e42512fa035417bd374b17a874b0b
cluster-platform-operators-manager git 471a8068 sha256:1431b07f511e6bc41062fdb9296b620d906a77779f8a570f0f9a22f2b13ac5d2
cluster-version-operator git e08a2791 sha256:9985b0e09bd9f6133c72cb2f0f56fff6a94c3ecc1210a195e22fe1c182e31949
configmap-reloader git 9adad592 sha256:cc61c82d03006a7524a4e834223e27d1cf022375066daa09a1f6e3e878aaf07b
coredns git 5560e4ad sha256:8eb6714b4a1e9e2df3e09e1a815825ba3d7b417422621b2f61a9bc62bbd47e12
csi-driver-manila git af5c48da sha256:910da52a204debd36613fecbd32e363cda53b8107d10018b2497df16c616dcf2
csi-driver-manila-operator git e540ced4 sha256:12f0a04cb8e2adbeb4e18e873738673a876cbdb1c736489d60c4de9e1ddd53c7
csi-driver-nfs git 2b914c21 sha256:d8eb7902c3060459ad56fb1beee786c8b93bd5d17f3a30a187b181e48b975a19
csi-driver-shared-resource-operator git 318c84a5 sha256:3562bb6db08f493ff6e10efa3ede017f10dd435d414593ca293b63d213be4dc1
csi-external-attacher git 335d78a2 sha256:f8672859aeaaf325ff46d14b3f9bd040a45c782bedd14860bb06f190b3d88bf7
csi-external-provisioner git 0dc83f5f sha256:19df4d69b6c1a9833e0a57433eb140ea5af1b4ad1c6b50f8ff28f4c7a22bf5f8
csi-external-resizer git 3b206709 sha256:99f5a0a67e7776a7e79f7edb235aaa4da96491ba2373463a1c02835623dc72f6
csi-external-snapshotter git e7114303 sha256:02701b227a32d2baa98c0a74833085b72744b61db0c205bc8989fa5c28cec264
csi-livenessprobe git c785aa67 sha256:ea654a2c8a71863e6144267ab47d612fe49ab4eb5460f07a1367a90ec18c119f
csi-node-driver-registrar git ee27c345 sha256:362dd0fb05869eb1a6d888ef6426e7659362e7dfc8d187db67c78c713c10a9e5
csi-snapshot-controller git e7114303 sha256:3ed582b9d0916e8838b12491990ea96075efe59004f9cd6c145cfad186a4d63a
csi-snapshot-validation-webhook git e7114303 sha256:cba25282520c6f065b58ea208923ac6f3c341da6b32c877b4d5d0b72c116162c
docker-registry git f414ba73 sha256:9292538fd1a9b69752115d81062b93ed4d5d5a12ca94db31349ae90c9b365ccd
driver-toolkit git d719bdcf sha256:34586bda6e4661b46c44559dd15e2f2bd9e31a80b134cd6fdcf659c2ae21a74b
etcd git f70da9d7 sha256:892330e982fc250890b619e5862fd4840e0e5ada538f41623d592fd40a08d2ad
gcp-machine-controllers git 38ddff06 sha256:fa015cf92e655ae191dd2c1dd01e698ec5078852bb208f3fbde65ddda0511e81
gcp-pd-csi-driver git c5ae6f5d sha256:7987110032311e4e4310f3aa50c9b58f9a88075d03a84762548a5b86d5135913
gcp-pd-csi-driver-operator git d151ef0f sha256:9f04ee5115ec12eafea7e5141a3d6c3cdc9b46c4557e69dba3994d8a1a7b76a1
ibm-vpc-block-csi-driver git 66dcaf9a sha256:a0b82027e18d0f16d867afb59b7d66fe2ac807700fe1a4e49449f80cf2894dd8
ibm-vpc-block-csi-driver-operator git e83df2f3 sha256:bd95b45ec8f01dca96d0ade1bbe84c1d8c680a5f2fd0f484e9dc344c02dcd10f
ibmcloud-cluster-api-controllers git d221afa4 sha256:373d46b53cd60ca03a5fb267553c8054fafd118f9febd3c9add50ab3a30849d9
k8s-prometheus-adapter git b2e40105 sha256:537e3ab534fdc22efb9aa3012d25a73f7a785618564706dc2ecdc7a1af05c012
keepalived-ipfailover git 04659348 sha256:a3f2b808e6a76fc6a8953b3d9399bf37ba484f970832a3ffea5c2e5d06ed40a3
kube-state-metrics git 4b969848 sha256:6fb7d64f013a6a452566e0816f9577a393e068830b6f9f969e4f1bf0e6904be0
kube-storage-version-migrator git bad104d1 sha256:4c20d48d2fbe2117b726de21934924d0ecbd368aab58cff8e93f8689d2e9971f
kubevirt-cloud-controller-manager git ee2033ec sha256:afad864df95dbcff76002f2432913e7f078d48fa6e2cf1189ab81064abb2f7f3
kubevirt-csi-driver git efa0b943 sha256:dea58f77bca449d2613625e913ef3b4fce7de9182f0aec4cb68aaf4efe6802b1
libvirt-machine-controllers git e55e92c1 sha256:513315ac5a0bfdbb3e0b5024ca6ddbb6d75ed698565ca99ac0268b153d5810b9
machine-image-customization-controller git 87651668 sha256:78005fc4d2e7b14a582e07f75ff31f96c9a2e8ad7768abf6fd53aa3ea8c18116
machine-os-content sha256:3b0ae9fffcc752fd3010fc57bb3b09f9a750c488d0f2e664ab087c632f4dce87
machine-os-images git b14856ff sha256:57d579f1989a5b1e6d73fa02d2ab96a70664e3c067ee6d8dce73deb2bc10adee
multus-networkpolicy git 98a0bad1 sha256:2949eaa1faf860c960db7689e3290e5631479f78f6381dec075d0de49824e7b7
must-gather git 5eca0cb6 sha256:cad6837b9b36ad87b7914c649aaf37097b4e4aa783284c1659813dab5085f00c
network-metrics-daemon git e72c8ad1 sha256:23bb53f3111ee3fc63339f2930495c49d14ed73a3add5e85b6493e5e508532bc
nutanix-machine-controllers git be43191e sha256:40c52652ee21f9ac256fdd5728d8494304eccacf3e70a249a756776e8bb46c4d
oauth-apiserver git 41c2dfea sha256:533e07c9b519a04e7f6f4520b97d32477022d32d1f3ae2ae127062212b83a360
oauth-proxy git 03e5b13b sha256:5710554c08735126986b7c553cdb9a31bf97071c7adceda20f7aa116f35e867f
oauth-server git b841149f sha256:57cde39a122733df8a2034bf16fa31a11c1dc8942dfcc92abf6267798db1236c
olm-rukpak git 66b3e551 sha256:21d3099d9056b4f88cb4d6a83d82f1cd31d598f3b67af748c747d7052f25cbd5
openshift-apiserver git 0b827682 sha256:e95fb825bef0df356440f6dbcb570c224a0ddc4f053bd890c2aff40151ca274e
openshift-controller-manager git 87de8386 sha256:582a7e911268e36114f0e9901253161ea018560503df613daa52f01ef5feaa06
openshift-state-metrics git 7beb8807 sha256:b13247f4c6a4267a334936b9c6bb65068ac230f7ec0f3dc1d845c28758556fab
openstack-cinder-csi-driver git af5c48da sha256:fb7b9551a8931b8857c384b475a51d02dfebe36c75bc5fa64440d755228dea94
openstack-cinder-csi-driver-operator git 14fcca54 sha256:c9a1d3360990729ab91a7685a1caabd2958ec4d72f0f3cb4d59ce227e6e9b3b8
openstack-cloud-controller-manager git af5c48da sha256:aee3b9d07962c86a7e7279e99dd75c8878da5e1db380fb52a306d9e3d41cde80
operator-marketplace git d569c22c sha256:93f1216bcbe0e3fc7f79787ccf55b9644b97f04a6124465c54234ea0594e7cbc
ovirt-csi-driver git f21b470f sha256:0a20b3bb7c30ae66bf9dc9cac22689d14774de8f01c3a37edbb4e8c436d67cce
ovirt-machine-controllers git 22d89b3f sha256:802dae645f0fed07bb0d793da3e717856bee08f692b4d8588ce1c6f2e9f69887
powervs-block-csi-driver git e0e89f1b sha256:85ba74878783f1e5501310459cc84e080a240a4fd3bf4a6ccbac6561a38209ae
powervs-block-csi-driver-operator git b4085056 sha256:68be174207c85fa16fb0ca86e7f0b8e0042d1d48c763ff8e2a5d565a2d87696e
powervs-cloud-controller-manager git 13036562 sha256:69d1a3858770a38906d5e1e8363c477e9098edcb95edf9ab318bec01988fc49c
powervs-machine-controllers git bf49c5c1 sha256:c734d4626b71031fc55e736bcd7ad1c21784813a55829e6f007f5fb174d61487
prom-label-proxy git b501d5e2 sha256:bec992c22e612c353d939ca4b9e907b0ae2f165537ca3187d1abb7fd5ea2c31e
prometheus git 8279148f sha256:fb38759c9d3768032983d9ecae86c17e958c46f6578e6c4b64b7cac3020f2954
prometheus-alertmanager git f44d574d sha256:2931c3c4be4739f00b4f0af33727f2fae0db3d15f021389b92a313f0681ab68b
prometheus-node-exporter git 10dc380d sha256:644d8025bdd91481e73a4ada06886ed0987e30b52e8e541359aab610d8e4be09
rhel-coreos sha256:64e718da9e357a00954fbb52d0aebd121ba8352812461b65ca2380d92dd50a8c
rhel-coreos-extensions sha256:06827d3c52816eafba7b280270687fba974a8a0ccc636809a944f84c1f1e6517
service-ca-operator git 1b89fdce sha256:1f13b1a815db576785605f0c8dccaee2df094300c1f458960571e226afb60adb
vsphere-cloud-controller-manager git e9a65389 sha256:1dca506bf14c7208e551c72dd52c3066d393c7981b338b46ca17a4e5792ee37d
vsphere-cluster-api-controllers git 24e08ddf sha256:19f7515e1ba7e6c7bd5ed9fee623620c1040e785bdbabb8f935fb46ce8a1569f
vsphere-csi-driver-operator git ab111cf6 sha256:4be25a807344bf86ec58d065a1c4b0f5a28436d8cc18eb61a58960e0a91418a7

agent-installer-api-server

MGMT-13947: Revert assisted boot reporter service (#5292) #5292
OCPBUGS-13083: Support by-path root device hints (#5213) #5213
OCPBUGS-13356: Fix ‘vendor’ root device hint evaluation (#5204) #5204
Full changelog

agent-installer-node-agent

OCPBUGS-15557: vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) #565
OCPBUGS-14848: Filter out hidden devices (#559) #559
Full changelog

aws-cluster-api-controllers

OCPBUGS-15512: Pass right SGs for IsExternallyManaged on creation #468
Full changelog

aws-ebs-csi-driver

OCPBUGS-13811: Volume unmount repeats after successful unmount, preventing pod delete #225
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-13828: assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #224
Full changelog

aws-machine-controllers

OCPBUGS-13092: Bump x/net package to v0.9.0 #70
Full changelog

aws-pod-identity-webhook

OCPBUGS-12555: Update builder to OCP4.13/go1.19 #164
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-13952: Update x/net package to v0.8.0 #68
Full changelog

azure-cluster-api-controllers

OCPBUGS-12557: Bump x/net package to v0.10.0 #278
Full changelog

azure-machine-controllers

OCPBUGS-13053: Bump x/net to v.0.7.0 #61
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-13812: ic: azure: validate diskTypes in AzureStack #7195
OCPBUGS-15230: azure: skip NSG creation when BYO vnet #7263
OCPBUGS-15591: [release-4.13] gcp: add confidential compute support for boostrap TF #7298
OCPBUGS-15187: images: installer: add xz to the container #7260
OCPBUGS-14867: Shorten SNO installation duration by releasing CPC lease #7241
OCPBUGS-13752: Set AdditionalTrustBundle in override when mirroring not enabled #7191
OCPBUGS-15289: gcp use preconfigured private zone for installation #7271
OCPBUGS-14916: Replace with govc docker image and fix ibmcli folder permission issue #7245
OCPBUGS-13323: update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 #7248
OCPBUGS-14860: GCP XPN Private Cluster Fails with no Public Zone #7240
OCPBUGS-13765: Support /dev/disk/by-path root device hints #7193
OCPBUGS-14171: Ignore IAM Roles that the Installer is not authorized to access #7210
OCPBUGS-11530: [release-4.13] add project filter to gcp usage api requests #7045
OCPBUGS-10493: Nutanix Hostname of the VM is not set when using DHCP network config #7016
OCPBUGS-14027: GCP XPN: Pass instance service acct in manual mode #7204
OCPBUGS-11775: Log additional info when status is pending-user-action #7090
OCPBUGS-13086: Bootstrap on aws should have same metadata service type as on other nodes #7162
Full changelog

baremetal-machine-controllers

OCPBUGS-16084: Fix Metal3Remediation CRD install order #194
Full changelog

baremetal-operator

OCPBUGS-13374: Do not try to update images for nodes in transient states #282
OCPBUGS-13927: Deleting unmanaged BMH get stuck fix #281
OCPBUGS-12363: release-4.13: Use same settings for provisioner and controller logs #275
OCPBUGS-13082: Allow by-path devices in root device hints #277
Full changelog

baremetal-runtimecfg

OCPBUGS-14487: Support IPv6 VIP for setup with multipe IPv6 addresses #259
OCPBUGS-15101: Use machine-config state instead of comparing roles #261
OCPBUGS-13066: Update x/net and parent dependencies #246
OCPBUGS-13230: Verify kubelet version in upgrade check #248
Full changelog

cli, cli-artifacts, deployer, tools

handle the error case of node retrieval while waiting for reboot #1484
bring some cert rotation helpers back into 4.13 #1474
OCPBUGS-14249: preserve explicit release image in ClusterVersion #1435
OCPBUGS-14180: Remove closed centos7 registry from newapp unit tests #1432
Full changelog

cloud-credential-operator

OCPBUGS-12565: CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] #543
OCPBUGS-13692: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #538
Full changelog

cloud-network-config-controller

OCPBUGS-14635: increase GCP egress ip capacity to 100 from 10 #113
OCPBUGS-13127: sync CloudPrivateIpConfig when node is missing #106
Full changelog

cluster-authentication-operator

OCPBUGS-13763: dont log tokens #618
Full changelog

cluster-baremetal-operator

OCPBUGS-15472: Limit role binding to openshift-machine-api namespace #346
Full changelog

cluster-capi-controllers

OCPBUGS-12567: Bump x/net package to v0.10.0 #176
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-15746: Alibaba platforms should not be upgradeable #260
OCPBUGS-13011: Add beta topology labels flag to Azure cloud node manager #250
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-15330: Fix lint issue #222
OCPBUGS-15161: Surface cpms vs machine diff #218
OCPBUGS-14024: Check ProviderSpec before generating MachineInfo #211
OCPBUGS-13888: fix double machine creation on stale cache #208
Full changelog

cluster-dns-operator

OCPBUGS-15225: Add support for protocolStrategy API field to enable force_tcp configuration #372
Full changelog

cluster-ingress-operator

OCPBUGS-15434: [release-4.13] Fix invalid DNS name formatting for GCP #958
OCPBUGS-15515: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #955
OCPBUGS-12743: bump controller-runtime to fix the multi namespace cache indexing #921
OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #935
OCPBUGS-12918: gatewayclass: Update for OSSM 2.4 API change #917
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-13763: dont log jwt tokens #1499
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-13093: Bump golang.org/x/net #20
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-11353: AWS should not use external-cloud-volume-plugin post CSI migration #734
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-14651: disable debug pporf with unauthenticated port for 4.13 #480
Full changelog

cluster-monitoring-operator

OCPBUGS-15469: Limit the value of GOMAXPROCS on node-exporter to 4. #2021
OCPBUGS-14251: Add new web console usage metrics #1976
OCPBUGS-12488: go.mod: update golang.org/x/net to v0.7.0 #1957
OCPBUGS-13007: Add build number to rules #1964
OCPBUGS-13397: Uncomment cluster:vsphere_infrastructure_failure_domains:max #1962
Full changelog

cluster-network-operator

OCPBUGS-15977: Add logic to pick the openshift-sdn shims from right directories #1880
OCPBUGS-15962: Add logic to pick the ovn-k8s-cni-overlay binary from the right dir #1877
Change rhel7/8 to rhel8/9 #1869
OCPBUGS-15476: Add release version annotation to whereabouts-reconciler #1853
OCPBUGS-15139: Remove nodeSelector for architecture in whereabouts daemonset #1840
OCPBUGS-14871: Do not rely on ControlPlaneTopology do determine if running in HyperShift #1837
OCPBUGS-13809: Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1813
OCPBUGS-14367: High API requests due to allowlist and operconfig reconcilers running too often #1824
OCPBUGS-11750: fix reconciliation process of the allowlist controller #1793
OCPBUGS-13155: HyperShift: Support HostedControlPlane node selector #1802
Full changelog

cluster-node-tuning-operator

E2E: Add memory manager sanity test case (#573) (#695) #573
e2e: latency testing: increase the expected threshold (#709) #709
Do not rollback settings on TuneD exit (#704) #704
Switch to rslave/HostToContainer volume mount propagation (#705) #705
e2e: perf-prof: disable truncating gomega output (#707) #707
OCPBUGS-14895: Do not fail creating cgroups if they exist already (#684) #684
OCPBUGS-14331: Fix updating numa core siblings map in GetCpuSiblings function (#669) #669
render: remove uid from render-sync target (#594) (#609) #594
Remove cpu-quota.crio.io: disable annotation (#670) #670
Add PerformanceProfiles to ‘oc adm must-gather’ (#657) #657
OCPBUGS-11709: pao e2e: skip hugepages and numa tests properly (#643) #643
e2e: Fix RPS test for multi-worker cluster (#648) #648
OCPBUGS-12978 use WatchNamespace() when deleting Profiles (#645) #645
OCPBUGS-11336: pao e2e: fix update test suit timeouts (#642) #642
Address CVE-2022-41723 (#633) #633
OCPBUGS-13148: Configure cpu balancing cpu sets for all clusters (#647) #647
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-13763: dont log tokens #541
Full changelog

cluster-policy-controller

OCPBUGS-14091: [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources #116
OCPBUGS-13731: external template and route Informer #112
Full changelog

cluster-samples-operator

OCPBUGS-15756: Update Jenkins and Jenkins Agent Base image versions #505
OCPBUGS-14598: Updating to use Jenkins 4.13 images #503
Full changelog

cluster-storage-operator

OCPBUGS-13004: OCPBUGS-13005: 4.13: bump prometheus #367
Full changelog

cluster-update-keys

Adding the new CI Signer public key #50
Full changelog

console

OCPBUGS-10326: re-enable operator-install-single-namespace.spec.ts test #12653
OCPBUGS-15848: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12976
OCPBUGS-15890: Use proxy with web socket connection and monitoring dashboard #12978
OCPBUGS-15720, OCPBUGS-15721, OCPBUGS-15722: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12963
OCPBUGS-14426: account for single object in status.conditions instead… #12875
OCPBUGS-14267: Add Pipeline metrics unsupported empty page #12864
OCPBUGS-15410: Add Git Repository (PAC) doesn’t setup GitLab and Bitbucket configuration correct #12936
OCPBUGS-15787: Remove access review check for PipelineResource from Pipeline section #12967
OCPBUGS-15228: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12937
[release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading #12931
OCPBUGS-14166: Fixed Make Serverless Form Error #12857
OCPBUGS-14336: use service port name instead targetPort in the Pipeline Event listener route #12870
OCPBUGS-14310: Could not import multiple resources via JSON (while YAML supports this) #12868
OCPBUGS-15335: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12927
OCPBUGS-15130: Helm Repository “Edit” button results in 404 #12909
OCPBUGS-14189: Corrected Labels for resolving the bug related to the Create Route Checkbox #12858
OCPBUGS-13642: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12812
OCPBUGS-11974: Add page title to Devconsole pages #12844
OCPBUGS-15465, OCPBUGS-15481: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore and disable operator-uninstall test #12949
OCPBUGS-14943: visiting Configurations page returns error Cannot read… #12897
OCPBUGS-12785: Project admin can update and view subscription from operator details page #12780
OCPBUGS-14574: only copy workload annotations to debug pod #12879
OCPBUGS-14258: Add vSphere cluster field. #12862
OCPBUGS-14195: Topology UI doesn’t recognize Serverless Rust function for proper UI icon #12860
OCPBUGS-10527: When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox #12658
OCPBUGS-14165: propagate labels to pipeline resources #12856
OCPBUGS-13959: Wait with CRD/model translation until i18n bundles are loaded #12842
OCPBUGS-13783: fix runtime error on OperatorHub details pages #12830
OCPBUGS-12770: fix buildconfig form ns #12776
OCPBUGS-12850: add support for minimal status of tekton #12784
OCPBUGS-12740: update helm release empty state text #12773
Full changelog

console-operator

OCPBUGS-12461: Add new PrometheusRule to collect metrics for cluster-monitoring-operator #758
OCPBUGS-12722: Proper cleanup of route sync conditions #759
Full changelog

container-networking-plugins

Add rhel9 binary #102
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-12484, OCPBUGS-12527, OCPBUGS-14505: Mitigating CVE-2022-41723 #140
Full changelog

docker-builder

OCPBUGS-15606: Add the git-lfs package #352
OCPBUGS-10002, OCPBUGS-8159, OCPBUGS-8191: Mitigate CVE-2023-26054 #348
Full changelog

egress-router-cni

Add rhel9 binary #71
Full changelog

gcp-cloud-controller-manager

OCPBUGS-12603: Bump x/net package to v0.10.0 #32
Full changelog

gcp-cluster-api-controllers

OCPBUGS-12604: Bump x/net package to v0.10.0 #196
Full changelog

haproxy-router

OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #485
Full changelog

hyperkube, pod

OCPBUGS-15866: UPSTREAM: <drop>: hack/update-vendor.sh #1637
OCPBUGS-15246: Bump to k8s 1.26.6 #1610
OCPBUGS-8738: bump apiserver-lib-go #1611
OCPBUGS-14589: [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1596
OCPBUGS-13747: 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy #1580
OCPBUGS-14048: Bump to k8s 1.26.5 #1586
Full changelog

hypershift

HOSTEDCP-1101: Add snyk-secret HO RHTAP scripts #2799
OCPBUGS-16125: [release-4.13] Update vendored dependencies #2797
OCPBUGS-15774: autoscaling balance similar groups #2805
OCPBUGS-15965: Reject VPCE Connections during VPCE Service cleanup #2789
Update RHTAP references (release-4.13) #2751
OCPBUGS-15171: Skip AWS resource deletion for ‘Unknown’ OIDC state #2701
HOSTEDCP-1008: Add NodePoolTransitionSeconds metric #2758
OCPBUGS-15281: Check OwningIngressController also in Labels #2715
HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2748
HOSTEDCP-1073: enforce blocked rollout of HCP #2735
HOSTEDCP-1003: Set AWS conditions only for AWS platform #2670
OCPBUGS-15268 properly handle user CA bundle not existing #2710
OCPBUGS-15301: [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2696
OCPBUGS-14030: Include default ingress CA in root CA bundle #2599
OCPBUGS-14490: Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2645
OCPBUGS-14801: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2666
HOSTEDCP-1048: Add impersonate feature to the CLI and document HC dump procedure #2681
OCPBUGS-14872: Honor global ingress configuration LoadBalancer type on AWS #2677
OCPBUGS-14436: Add ClusterUpgradeDuration metric #2637
HOSTEDCP-1009: Allow external-dns image to be set in install cli #2652
Red Hat Trusted App Pipeline update hypershift-operator-release-413 #2641
Red Hat Trusted App Pipeline purge hypershift #2640
OCPBUGS-13735: Cluster-api SA can’t create events and fix permissions wrongly included #2610
OCPBUGS-14242: Remove external-dns –events flag #2621
OCPBUGS-14155: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2613
OCPBUGS-13399: Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2552
HOSTEDCP-1010: Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2611
HOSTEDCP-947: Increases default etcd PV size to 8Gi #2569
HOSTEDCP-926: Send metric when HO/CPO decide to skip cloud resource deletion #2594
HOSTEDCP-975: Backport nodepools metrics #2601
Red Hat Trusted App Pipeline update hypershift #2603
OCPBUGS-13594: Sync proxy TrustedCA to guest cluster #2556
fix nil deref in DefaultWorkerSecurityGroupID check #2574
OCPBUGS-13215: Let the aws endpoint to use the hypershift owned SG #2529
OCPBUGS-13497: Add internal/external elb tags to subnets #2553
OCPBUGS-13531: Clean up existing VPC endpoint connections #2554
Stop triggering rollout on labels/taint change #2548
Fixes HCCO reconcile error for kubevirt csi driver #2538
Fix kubevirt csi daemonset reconcile loop #2542
HOSTEDCP-980: Include HostedClusterDegraded in hypershift_hostedclusters_failure_conditions metric #2525
Full changelog

ibm-cloud-controller-manager

OCPBUGS-12612: Update x/net to v0.7.0 #52
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-14073: UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #24
Full changelog

ibmcloud-machine-controllers

OCPBUGS-12616: Bump x/net to v0.7.0 #23
Full changelog

insights-operator

OCPBUGS-14773: extend configmap gatherer to get gateway-mode-config (#788) (#791) #788
[release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) #794
OCPBUGS-14318: gather PDBs only from openshift namespaces (#786) #786
OCPBUGS-12618: update golang.org/x/net version (#775) #775
Full changelog

ironic

Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. #383
OCPBUGS-13587: Add python-flask dependency #372
OCPBUGS-14135: ironic.conf.j2: Bump min_command_interval to 30 on SCOS #378
Bug OCPBUGS-13334: Bump ironic version to include fix to OCPBUGS-13334. #366
Full changelog

ironic-agent

Switch to udevadm command install instead of package [OKD] #83
“Bug OCPBUGS-15777: Switch to udevadm command install instead of package” #81
Full changelog

ironic-machine-os-downloader

OCPBUGS-15734: Binary should be compiled on rhel9 #91
Full changelog

ironic-static-ip-manager

OCPBUGS-14315: Flush addresses on provisioning interface with global scope only #36
Full changelog

kube-proxy, sdn

OCPBUGS-15977: Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir #558
OCPBUGS-15977: Dockerfile changes to build both rhel8 and rhel9 binaries #557
OCPBUGS-14278: fix possible concurrent map read/write #550
OCPBUGS-12234: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) #536
OCPBUGS-13150: EgressNetworkPolicy DNS resolution does not fall back to TCP #540
Full changelog

kube-rbac-proxy

OCPBUGS-12513: go.mod: update golang.org/x/net to v0.7.0 #68
Full changelog

kuryr-cni, kuryr-controller

OCPBUGS-15457: Remove unneeded grpcio dependencies from RPM #735
OCPBUGS-13427: KuryrPort cleanup: Fix issue of subport not found #726
Full changelog

machine-api-operator

OCPBUGS-12626: Update golang.org/x/net dependency #1148
Full changelog

machine-config-operator

4.13: Revert rhel9 binaries builds #3802
OCPBUGS-14459: daemon: Remove noisy log message #3723
OCPBUGS-15580: 4.13: Dockerfile: update rhel7 nmstate pin #3764
OCPBUGS-15463: Minor fix to support protectKernelDefaults field in Kubelet Config #3757
4.13: Dockerfile: use proper rhel9 image #3771
4.13: use rhel9 builder for daemon binary #3760
OCPBUGS-13311: daemon: write certs in firstboot-complete path #3702
OCPBUGS-13404, OCPBUGS-14298: Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 #3716
OCPBUGS-14850: Allow userfaultfd syscall to be used by unprivileged users #3743
OCPBUGS-13974: MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default #3714
OCPBUGS-13138: daemon: Don’t traverse /run/ostree/auth.json symlink #3697
OCPBUGS-11302: Fix regex dot in coredns config file #3659
OCPBUGS-12784, OCPBUGS-4476: keepalived/ingress: change healthcheck script #3687
OCPBUGS-12919: The MCD has a non-functional pivot command that should be removed #3690
OCPBUGS-10966: configure-ovs: support UUID in vlan.parent #3639
OCPBUGS-13312: daemon: event only on actual OS updates #3703
Full changelog

multus-admission-controller

OCPBUGS-13709: Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 #68
Full changelog

multus-cni

Add rhel9 binary for multus #169
OCPBUGS-8398: Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] #154
OCPBUGS-13759: Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) #161
OCPBUGS-13814: Fix multus to support CNI plugin which does not create interface [backport 4.13] #163
Full changelog

multus-route-override-cni

Add rhel9 binary #37
Full changelog

multus-whereabouts-ipam-cni

Bug 16002: Change default binary to RHEL8 image #144
Restores RHEL specific binary build in dockerfile and updates to rhel9/8 #139
Full changelog

network-interface-bond-cni

Add rhel9 binary #56
OCPBUGS-11881: Ignore missing links during delete command #49
Full changelog

network-tools

Dockerfile: move to RHEL9 base image #83
Full changelog

nutanix-cloud-controller-manager

Updating ose-nutanix-cloud-controller-manager images to be consistent with ART #15
Full changelog

oc-mirror

OCPBUGS-13871: fix: changes on help info content (#654) #654
Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) #637
Removes Ross and adds Jeremy in the OWNER file (#645) #645
OCPBUGS-13591, OCPBUGS-13592: Limit the nested repository path while mirroring the images (#635) #635
Full changelog

openstack-machine-api-provider

OCPBUGS-12630: Address CVE-2022-41723 #71
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-15589: fix dynamic conversion webhook #499
OCPBUGS-13321: OCPBUGS-1684: Optimize certificate generation #488
Full changelog

ovirt-csi-driver-operator

OCPBUGS-14653: set upgrade condition of operator to false #118
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-15651: Improve syncNodes to remove stale data #1731
OCPBUGS-15586: [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector #1745
Dockerfile: build both RHEL8 and RHEL9 shims #1748
OCPBUGS-15585: [release-4.13] Fix egressFirewall create error handling #1733
OCPBUGS-14492: Backport OVN component templates for NodePort services. #1709
OCPBUGS-15608: Nuke old .rhel9 Dockerfiles #1711
OCPBUGS-13745: [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1675
OCPBUGS-15372: [release-4.13] Fix network policy to work with long namespace names #1722
OCPBUGS-14979: Validate port before deleting conntrack flow #1712
OCPBUGS-15140: Fix stale SNAT entries for completed pods #1715
OCPBUGS-14482: Dockerfiles: sync RHEL9 dockerfiles to regular unused ones #1695
OCPBUGS-12864: Drop packets were not properly SNATed #1662
OCPBUGS-13170: Fix bug that resulted in routes not be restored to a new vnic #1668
OCPBUGS-13598: Call SyncEndpoints from AddService #1672
OCPBUGS-12725: [release-4.13] Use loadbalancer.Name as client index #1660
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-12672: update golang.org/x/net #237
Full changelog

route-controller-manager

OCPBUGS-14276: Bump k8s to 1.26.5 #26
Full changelog

telemeter

OCPBUGS-14418: Update golang.org/x/net to lastest version #463
Full changelog

tests

OCPBUGS-15892: remove references to registry.centos.org #28031
OCPBUGS-15746: Skip CCM upgradable condition on AlibabaCloud #28025
OCPBUGS-7762: Bump with latest openshift/kubernetes at 4.13 #27973
OCPBUGS-5029: [release-4.13] OpenStack: Restore in-tree cinder provisioner tests #27827
OCPBUGS-14342: Increase timeout in sysctl allowlist test #27956
OCPBUGS-13840: Add missing error check in sysctl allowlist test #27929
OCPBUGS-14127: Move from registry.centos.org to quay.io #27948
OCPBUGS-12700: update-etcd-scaling-test #27892
Full changelog

thanos

OCPBUGS-12663: go.mod: update golang.org/x/net to v0.7.0 #109
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-13563: Fix node resync master #79
OCPBUGS-13162: Rebase against 3.0.1 version #77
Full changelog

vsphere-problem-detector

OCPBUGS-14571: Check all storage classes including CSI storageclasses #120
OCPBUGS-14098: In UPI clusters VSphere platform could be nil #118
OCPBUGS-14085: Log vcenter version information #117
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github