# 4.13.29

Created: 2024-01-11 22:42:23 +0000 UTC

Image Digest: `sha256:9c4a4471bb93ab11d255925535ff719742cafa8ae06d622b870133787a72abc3`

Promoted from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2024-01-11-141458


## Changes from 4.13.26

### Components

* Kubernetes upgraded from 1.26.11 to 1.26.12
* Red Hat Enterprise Linux CoreOS upgraded from 413.92.202312042340-0 to 413.92.202401100947-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [06189bcd](https://github.com/openshift/assisted-service/commit/06189bcdb0bea068f8ac51a3550fcdcbde522a76) `sha256:d502c79f11f12e24a870a58c50ec56297c43c420470c8eb9eba0d91d519c6e2c`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [edf25423](https://github.com/openshift/assisted-installer/commit/edf25423e34294b754ac16a67dbaf1aed7467ca4) `sha256:b19ea79735da563208df243bc9c5a8ac0a38e361693f0924f672e8d35593636b`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [c5611048](https://github.com/openshift/assisted-installer-agent/commit/c5611048e36de8c7c917451fa8e4fb3f1edb8b6a) `sha256:66d8c54aa10c766124c332a0203e717f7f8b120031b5933e977f5b12644dd11a`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [05a417a7](https://github.com/openshift/cluster-node-tuning-operator/commit/05a417a71fb3ecccabe58ab98e139d245f619be1) `sha256:016e5cb9c1f6c851c46099e2b743a8b48f518216f4d3c083948c46570651b95e`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:1670b7ed6745cfab81e2f472e9e77834e0fb6dc792b017bccda1217403dc0247`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [ce291779](https://github.com/openshift/ironic-rhcos-downloader/commit/ce2917794de5723248fe3302c8833f89fb54265a) `sha256:7486da69bbcacaf43bea2cb8d681e556084aaccfd388e1ad4383cbba517d142b`
* [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [36754b7b](https://github.com/openshift/kuryr-kubernetes/commit/36754b7b90928e26811e1c5ea13e7d0bd85709de) `sha256:b7349d6c8797c5ae22bfbbc660cb6d3d42993c841d6c28631ef3a93199233d96`
* [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [36754b7b](https://github.com/openshift/kuryr-kubernetes/commit/36754b7b90928e26811e1c5ea13e7d0bd85709de) `sha256:5e5e7f79e8deb8bdf819cef0ff5ec9b91ca61bab039af16e4f9f3baf991fbbd7`
* machine-os-content `sha256:7a5bdfba9895645826d46119942c575ce965e5c3402e88c1278f0d361b54ce30`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b14856ff](https://github.com/openshift/machine-os-images/commit/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e) `sha256:4d130959e6d422914d6b55c0bd9653e5bae67fa5aa650f5c163629e09a1c3a7a`
* [must-gather](https://github.com/openshift/must-gather) git [288ef2fc](https://github.com/openshift/must-gather/commit/288ef2fcfe63cbfab0af69a41b508c044ee890aa) `sha256:59c5c28b9bf30f5159d05142d059d9aafe81e5208e7d9bbb60d6861cf1377d8d`
* [network-tools](https://github.com/openshift/network-tools) git [073feda1](https://github.com/openshift/network-tools/commit/073feda14fbd894c4238d693afa38a06392f2360) `sha256:db1d60dd61f746fdc09a73c6520a2e32590bfbd22417f8d379d6a72a3b7505b7`
* rhel-coreos `sha256:e03ff4329e92191ba2fd81eca78de3d60aed336137c48c001fba1d6b519feeff`
* rhel-coreos-extensions `sha256:529a5ec363f9c7f6cb75bdec2b1b1c6955cd823e25df30bef0a33b96da095d49`
* [sdn](https://github.com/openshift/sdn) git [f86266b2](https://github.com/openshift/sdn/commit/f86266b225c316e8c676894e5499fc6d8294d967) `sha256:76086fe913d63820064a8b6a713721456e7b738729790bb2c8f6b64438f08448`
* [tests](https://github.com/openshift/origin) git [99b9d537](https://github.com/openshift/origin/commit/99b9d537a935e6446ba1fcd55e9a5b5ba090820a) `sha256:a4084c4597803ebe3d1a226634d5322091855f0da34676a0538dd5ae21434bd0`


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/e1a57b5e4ce731e8f90cd2c0d4ded81e40fa7a37)

* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#96](https://github.com/openshift/machine-api-provider-aws/pull/96)
* [OCPBUGS-21568](https://issues.redhat.com/browse/OCPBUGS-21568): Update golang.org/x/net to v0.17.0 [#89](https://github.com/openshift/machine-api-provider-aws/pull/89)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/ba3b3a31ca9efcc984015280965a4b28ffd740e0...e1a57b5e4ce731e8f90cd2c0d4ded81e40fa7a37)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/06140aba64cbaca89af882d1a658e318063fb928)

* [OCPBUGS-21331](https://issues.redhat.com/browse/OCPBUGS-21331): Upgrade golang/x/net for CVE-2023-39325 [#184](https://github.com/openshift/aws-pod-identity-webhook/pull/184)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/ee0fcde48c1122eeb59b2dedaa5e603fbe33812f...06140aba64cbaca89af882d1a658e318063fb928)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/5923f3fd8bf3f8d3fe45658463e4200feb88abf9)

* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#89](https://github.com/openshift/machine-api-provider-azure/pull/89)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/ad252de98940d6eb2c3547d39391b9d00e8463d1...5923f3fd8bf3f8d3fe45658463e4200feb88abf9)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/7fdfcd378b4d05869e614964b44718d6126197d9)

* [OCPBUGS-25420](https://issues.redhat.com/browse/OCPBUGS-25420): destroy: gcp: fix destroying regional disks [#7840](https://github.com/openshift/installer/pull/7840)
* [Full changelog](https://github.com/openshift/installer/compare/293f6a2fd4b7e8039f8163354409683ba7a072e2...7fdfcd378b4d05869e614964b44718d6126197d9)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/7780c379ac62ddfc982b81eb0c4470b9597f505e)

* [OCPBUGS-25418](https://issues.redhat.com/browse/OCPBUGS-25418): Add client version in must-gather summary [#1635](https://github.com/openshift/oc/pull/1635)
* [OCPBUGS-24461](https://issues.redhat.com/browse/OCPBUGS-24461): Overwrite template's namespace with the explicit one [#1617](https://github.com/openshift/oc/pull/1617)
* [Full changelog](https://github.com/openshift/oc/compare/c7c6eb21da5c5b9f813ea09a21aa3e7226206993...7780c379ac62ddfc982b81eb0c4470b9597f505e)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/69ccc0745135ca29ccbf69be4e74b69908303804)

* [OCPBUGS-25369](https://issues.redhat.com/browse/OCPBUGS-25369): Discover AWS dns suffix from partition and region. [#640](https://github.com/openshift/cloud-credential-operator/pull/640)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/ba9743ac48edfc24ddf247312987127643903687...69ccc0745135ca29ccbf69be4e74b69908303804)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/288b3fe3f2637e3ac80464cc5513011fd3a3c583)

* [OCPBUGS-21169](https://issues.redhat.com/browse/OCPBUGS-21169): Bump golang.org/x/net to v0.18.0 [#296](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/296)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ef4594ef3f4ca535aa1d34878b79184323ecf481...288b3fe3f2637e3ac80464cc5513011fd3a3c583)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/759791edae6fcd129e9f04adf6406328892f0f53)

* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Set DNS DaemonSet's maxSurge value to 10% [#366](https://github.com/openshift/cluster-dns-operator/pull/366)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/807ae60ff7447adf83c8a12dc9491ab5f8a62764...759791edae6fcd129e9f04adf6406328892f0f53)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/a5ca01222476bb9f05916217be6f94f08e91a4ec)

* : OCPBUGS-24023: Add workload partitioning annotation [#1591](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1591)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/2b2d2d899781939ee57b1d26e59fef606d8603ed...a5ca01222476bb9f05916217be6f94f08e91a4ec)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/903a0e08938623c62ff552c0866b200a5a9c6b0f)

* [OCPBUGS-24570](https://issues.redhat.com/browse/OCPBUGS-24570): Disable weak SSH cipher suitesRm weak ciphers 4.13 [#2163](https://github.com/openshift/cluster-network-operator/pull/2163)
* [OCPBUGS-21716](https://issues.redhat.com/browse/OCPBUGS-21716): Bump golang.org/x/net and github.com/openshift/library-go [#2123](https://github.com/openshift/cluster-network-operator/pull/2123)
* [OCPBUGS-22896](https://issues.redhat.com/browse/OCPBUGS-22896): run update-codegen after adding maxLogFiles cfg [#2162](https://github.com/openshift/cluster-network-operator/pull/2162)
* [OCPBUGS-22971](https://issues.redhat.com/browse/OCPBUGS-22971): HyperShift: Use the local konnectivity proxy when checking proxy readiness [#2098](https://github.com/openshift/cluster-network-operator/pull/2098)
* [OCPBUGS-22896](https://issues.redhat.com/browse/OCPBUGS-22896): Remove oldest ovn acl log files when file limit exceeded [#2097](https://github.com/openshift/cluster-network-operator/pull/2097)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/edd0db7b72dc95b9c6df786eb9f0f6682195bee6...903a0e08938623c62ff552c0866b200a5a9c6b0f)


### [console](https://github.com/openshift/console/tree/071df39ac00de14ec18cfe29c18ad195bd2e7460)

* [OCPBUGS-23483](https://issues.redhat.com/browse/OCPBUGS-23483): add access to create, edit and delete silences for developer user from developer perspective [#13349](https://github.com/openshift/console/pull/13349)
* [OCPBUGS-25427](https://issues.redhat.com/browse/OCPBUGS-25427): Fix plugin proxy handler [#13449](https://github.com/openshift/console/pull/13449)
* [OCPBUGS-25465](https://issues.redhat.com/browse/OCPBUGS-25465): fix runtime error on Node details Overview when Machin… [#13452](https://github.com/openshift/console/pull/13452)
* [OCPBUGS-25146](https://issues.redhat.com/browse/OCPBUGS-25146): add access review for impersonate [#13437](https://github.com/openshift/console/pull/13437)
* [OCPBUGS-24591](https://issues.redhat.com/browse/OCPBUGS-24591): ConsolePlugin metrics must no longer be grouped by the vendor [#13424](https://github.com/openshift/console/pull/13424)
* [OCPBUGS-22241](https://issues.redhat.com/browse/OCPBUGS-22241): Save also the location.search and .hash values in localStorage to restore them after login [#13271](https://github.com/openshift/console/pull/13271)
* [Full changelog](https://github.com/openshift/console/compare/c1c701088a46a767bae7a26ca5f0adc729f53863...071df39ac00de14ec18cfe29c18ad195bd2e7460)


### [console-operator](https://github.com/openshift/console-operator/tree/af57a158949d258310b55729f0c238b291071d87)

* [OCPBUGS-24591](https://issues.redhat.com/browse/OCPBUGS-24591): ConsolePlugin metrics must no longer be grouped by the vendor [#821](https://github.com/openshift/console-operator/pull/821)
* [Full changelog](https://github.com/openshift/console-operator/compare/769384609d8b44b395f33262720ff7496430d2e5...af57a158949d258310b55729f0c238b291071d87)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/e53a397d838137a37895fe668cba4857a82e7da2)

* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality. [#74](https://github.com/openshift/machine-api-provider-gcp/pull/74)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/0eb63402e7e902250081c5befd6a1e045457bbc7...e53a397d838137a37895fe668cba4857a82e7da2)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/9ed7eaeb3a4d4ac63dd3a010d3ae2d6dd086b502)

* [OCPBUGS-25988](https://issues.redhat.com/browse/OCPBUGS-25988): Update to kubernetes 1.26.12 [#1839](https://github.com/openshift/kubernetes/pull/1839)
* [OCPBUGS-25767](https://issues.redhat.com/browse/OCPBUGS-25767): legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber [#1834](https://github.com/openshift/kubernetes/pull/1834)
* [OCPBUGS-23521](https://issues.redhat.com/browse/OCPBUGS-23521): UPSTREAM: <carry>: support for both icsp and idms objects [#1798](https://github.com/openshift/kubernetes/pull/1798)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7dfc52ebbfbc0e2c063badfcf2df414880d058a7...9ed7eaeb3a4d4ac63dd3a010d3ae2d6dd086b502)


### [hypershift](https://github.com/openshift/hypershift/tree/1ef713f57c05135df9b141d29d9d0f8412eb7e58)

* [HOSTEDCP-1146](https://issues.redhat.com/browse/HOSTEDCP-1146): cpo: use CPO spec container image if it is a sha256 reference [#3296](https://github.com/openshift/hypershift/pull/3296)
* [Full changelog](https://github.com/openshift/hypershift/compare/24cdafdc5cdb5ea1ae0af219d5418ccb38b5ff54...1ef713f57c05135df9b141d29d9d0f8412eb7e58)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/2dd4fbcdaea67b5cde10ebc50c0a3148d97bc8aa)

* [OCPBUGS-21137](https://issues.redhat.com/browse/OCPBUGS-21137): Bump golang.org/x/net to v0.18.0 [#56](https://github.com/openshift/cloud-provider-ibm/pull/56)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/59edd923386b36f2cad99150b7fd11fb7bbb1688...2dd4fbcdaea67b5cde10ebc50c0a3148d97bc8aa)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a5cb14c1de0b5272c1224e7ed57901c161dc5ac0)

* [OCPBUGS-23962](https://issues.redhat.com/browse/OCPBUGS-23962): adds helm information gather (#868) (#883) [#868](https://github.com/openshift/insights-operator/pull/868)
* [Full changelog](https://github.com/openshift/insights-operator/compare/dff6a1cca63790538913cd1658ed3dc2384f04c2...a5cb14c1de0b5272c1224e7ed57901c161dc5ac0)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/a8aa3e6bf6e5aa3beff681141bdd688f41e23975)

* [OCPBUGS-24277](https://issues.redhat.com/browse/OCPBUGS-24277): Update reference URL [#1188](https://github.com/openshift/machine-api-operator/pull/1188)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/403f727652089b543954d35e862e8ae872bc8694...a8aa3e6bf6e5aa3beff681141bdd688f41e23975)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1d78dc8d13fa5ca0f61ddbc24f4c090aeaa1499b)

* [OCPBUGS-19658](https://issues.redhat.com/browse/OCPBUGS-19658): After dual-stack conversion reconcile IPFamilies [#3935](https://github.com/openshift/machine-config-operator/pull/3935)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/bf629e3885c9becd8f7a99c4de14960b2806c666...1d78dc8d13fa5ca0f61ddbc24f4c090aeaa1499b)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/3ef81a5c468171f22d626c544fd7f02adc156ceb)

* Added METRIC_TEST_IMAGE var (#90) [#90](https://github.com/openshift/network-metrics-daemon/pull/90)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/ff460fbae0d9537b05e38b6402fd390136235482...3ef81a5c468171f22d626c544fd7f02adc156ceb)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/105c515996ed0856eca89e75b166e70331d95856)

* [OCPBUGS-24563](https://issues.redhat.com/browse/OCPBUGS-24563): Reduce metrics cardinality [#59](https://github.com/openshift/machine-api-provider-nutanix/pull/59)
* [OCPBUGS-25459](https://issues.redhat.com/browse/OCPBUGS-25459): Fix CI by running tests natively by default [#60](https://github.com/openshift/machine-api-provider-nutanix/pull/60)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/be43191e5b20c7d6a5755a39a22d31e7734b241a...105c515996ed0856eca89e75b166e70331d95856)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/2357f7530362fffeb9f3279f07425425a942160f)

* [OCPBUGS-8653](https://issues.redhat.com/browse/OCPBUGS-8653): bump golang-migrate to v4.16.1 (#1107) [#649](https://github.com/openshift/operator-framework-olm/pull/649)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/4a69934c45f3d566ad598831fc82535793415a93...2357f7530362fffeb9f3279f07425425a942160f)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/2eb8ec31976c59dbc3a92144b62e6c7754f933e4)

* [OCPBUGS-26242](https://issues.redhat.com/browse/OCPBUGS-26242): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#2011](https://github.com/openshift/ovn-kubernetes/pull/2011)
* [OCPBUGS-25923](https://issues.redhat.com/browse/OCPBUGS-25923): Forward ICMP packets to OVN loadbalancer [#2004](https://github.com/openshift/ovn-kubernetes/pull/2004)
* [OCPBUGS-25224](https://issues.redhat.com/browse/OCPBUGS-25224): [release-4.13] fixes MTU configuration on gateway router [#1988](https://github.com/openshift/ovn-kubernetes/pull/1988)
* [OCPBUGS-14799](https://issues.redhat.com/browse/OCPBUGS-14799): Updating endpoints when using allocateLBNP=0, lgw mode fails [#1940](https://github.com/openshift/ovn-kubernetes/pull/1940)
* [OCPBUGS-25095](https://issues.redhat.com/browse/OCPBUGS-25095): Fragment oversized reply packets in LGW mode [#1983](https://github.com/openshift/ovn-kubernetes/pull/1983)
* [OCPBUGS-24391](https://issues.redhat.com/browse/OCPBUGS-24391): Limit OVN-Kubernetes RBAC permissions [#1950](https://github.com/openshift/ovn-kubernetes/pull/1950)
* [OCPBUGS-23014](https://issues.redhat.com/browse/OCPBUGS-23014): Netpol retryFramework cleanup [#1957](https://github.com/openshift/ovn-kubernetes/pull/1957)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/bc1c4dc97bfe836a7a4bfed7e2166ed4be5a3014...2eb8ec31976c59dbc3a92144b62e6c7754f933e4)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/530f646b86f1ba898f534900eb463ae957a1b89e)

* [OCPBUGS-24728](https://issues.redhat.com/browse/OCPBUGS-24728): synk: ignore vendor dir [#61](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/61)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/62f7b1e12357e5f7c99d8b05c1a01ad1e75f770e...530f646b86f1ba898f534900eb463ae957a1b89e)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/e70c980e2561788b710d710efc3e09974ad7374c)

* [OCPBUGS-25716](https://issues.redhat.com/browse/OCPBUGS-25716): snyk: ignore vendor dir [#61](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/61)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/c0adbc0d8f7b6c91a81eec51f427947022ac9c8b...e70c980e2561788b710d710efc3e09974ad7374c)


### [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs/tree/de68def0c918a05ad4bf32cc0470a7931d661c27)

* [OCPBUGS-24731](https://issues.redhat.com/browse/OCPBUGS-24731): UPSTREAM: <carry>: snyk code scan exclude vendor directory [#53](https://github.com/openshift/cloud-provider-powervs/pull/53)
* [Full changelog](https://github.com/openshift/cloud-provider-powervs/compare/6f7d5cecc8403b9d6a5d133b3b242616aaf235a4...de68def0c918a05ad4bf32cc0470a7931d661c27)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/e275605a27d0cadce1d2b8c8351edfd18944e39e)

* [OCPBUGS-24741](https://issues.redhat.com/browse/OCPBUGS-24741): snyk code scan exclude vendor directory [#64](https://github.com/openshift/machine-api-provider-powervs/pull/64)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/6d9678bf4f29da8e569f24bfdc7db106c3c887ea...e275605a27d0cadce1d2b8c8351edfd18944e39e)