4.13.18

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.18-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.30, 4.12.31, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.13.12, 4.13.13, 4.13.14, 4.13.3, 4.13.4, 4.13.5, 4.13.7, 4.13.8, 4.13.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.13.6

Created: 2023-10-19 14:18:36 +0000 UTC

Image Digest: sha256:d0fd9d3ab8690605f816c879d74f4e6d6d9f72982f63a3e0ef3e027ecc512e1c

Release 4.13.18 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2023-10-17-114326

Components

Kubernetes upgraded from 1.26.6 to 1.26.9
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202307182034-0 to 413.92.202310170351-0 (diff)

Rebuilt images without code change

agent-installer-api-server git 06189bcd sha256:4f5f696c13e636289e6dd98c716a49efccfb8abf5029b5aacac868c387931d49
alibaba-cloud-controller-manager git b5200baa sha256:426e8b3d621360d5a85681fee7f82e2b987f5f35cf8a41676662fa5ad9aabe09
alibaba-machine-controllers git 4c0f96a6 sha256:4fb53890e71308fb5a6e58735ab695af2d465f425257b005f13ce8fe51c4b155
aws-cloud-controller-manager git 946daa07 sha256:cab68619b21252fe6781e0553622176094371b5d92f97be5c67b7cc3877935fa
aws-cluster-api-controllers git acb52a08 sha256:317df115901c80f9251dc188b98ec93e759f616454ac55c3989dd9696434df8a
aws-ebs-csi-driver git 923631d7 sha256:c995a608af9f4e023790f4ecddafa346ca4ebc9a6feb7231ae4e9587af56a159
aws-ebs-csi-driver-operator git baf14a42 sha256:9e6c9b916f4b925974f074786247ec750a026189cc8ed15c3c38a4af1f3d941e
aws-machine-controllers git ba3b3a31 sha256:644d37d744d28e40e4b2002085a41a0cbaea7cf197861d73fb904945400831d7
aws-pod-identity-webhook git 125a4b45 sha256:e3fc40b5c7f7e15afa6b15ca38fd6f44c128dbd61d2204911a74cc7fe3773f78
azure-cluster-api-controllers git 8846366f sha256:4ebdb694aa60efaccf96a1571849b3b21fc977acfcb8ec563a07e9524c2ca5f3
azure-disk-csi-driver-operator git 842415aa sha256:3842f3c942d2119b19a25fa3bbcec8e868783755aedd3bc90bb7a851b205b034
azure-machine-controllers git 2c0c0ec9 sha256:cc5ab2ae7e0dfd048ad48360f8eb5f2c7da05b1a7f2c625c127b37ef62d2a2f5
baremetal-machine-controllers git 7de328a2 sha256:aa4a46585e7d33ce98409c91306a426e083e524b1fd35fea1eb8c96a2383e8b4
cloud-credential-operator git 0621fcaf sha256:55eade1d682f5151d98d1f3feaa8b3b0b90fbd102356aad7f7c9f92bb0fe66f6
cloud-network-config-controller git 4f190d6b sha256:8875ec444265a8c7338c7829377c7eed7676b450cb2825a523cac32bc2a171b8
cluster-autoscaler git c58c53bf sha256:95738d8ce821197376ab0941d6954da11d6fb9384c0a27a7ab41e557264a7765
cluster-bootstrap git ee908b6b sha256:10ed24b3907ffd3b18dfdbccce8b0c466d865fb1aa9983bb4b71844981d870fc
cluster-capi-controllers git 507f8733 sha256:17f727de972f15c0fb59566766951d3238041916a52d599cd1b1d2692d546a79
cluster-capi-operator git ce1c9a35 sha256:56a33c16884413966be882256377493fbc39ed6f4c64b2163379fa1ab12cd8f2
cluster-csi-snapshot-controller-operator git 97b486cb sha256:d99e28970a8a7a6c33a071823876f9de53dbe15948c17d30944be99860ceca88
cluster-image-registry-operator git 3ed61e2b sha256:7bf8d9404c2c6c29a5079138b33c415bca91b54cf3b7a90c54a0624997b64a4c
cluster-kube-cluster-api-operator git 8d627a55 sha256:067091f643d0a3d6f37f1d12ab2a62991ef6f1694b452ba647d5be35ffa99e02
cluster-kube-storage-version-migrator-operator git 9f475980 sha256:47c05bea0abfcf1ec7ee324b14300ef2c3a2c5639051f1e85e1e542f691aac1c
cluster-machine-approver git ce66cd54 sha256:635fb68d1c9d6bb11ca3442b6efc131eb316c3a5be42cbc9bfe3ef5debbf00f6
cluster-openshift-apiserver-operator git ea4f097d sha256:df170c2c78674a8f5eb1974b21878e9ce45dd0d507447bd39efcc12f1900e93a
cluster-openshift-controller-manager-operator git 9a8aba8c sha256:95b515b84abff5b0bfe666f1e4cf0509452832f8b52727d634e53feb8e5df9ae
cluster-platform-operators-manager git 471a8068 sha256:48d226c3e54e211e9e45ef5c4cda3bf122e5495032f6037f8fbf338536ddd10b
cluster-policy-controller git 8d2af85d sha256:05e1af0fe93e4adae09c6db0e8b426df778a50c506436662902d8a5faef286e8
cluster-samples-operator git f785bad1 sha256:fa34ea8c1b3a0f57659bc98fafa5ee46734b265c27fdd8b793250a4dd3271d5c
cluster-update-keys git 5b725937 sha256:3b75c5a3d09f76f177326038a788aa22d0cc5f5d5e5b9c6391093f9468ea296a
configmap-reloader git 9adad592 sha256:6a9c14dd9b72739f642e5e7b27e0534cdb2435b908ed3c15e09b081d1b30803f
csi-driver-nfs git 2b914c21 sha256:01e82ae76616ed87afbea5e9eed5961454819e0f5f1921fce2362c9081705acc
csi-driver-shared-resource git f797d453 sha256:ab496696109de6ce2b3e97e36a0ec8f2ae88a79ce93cb8aaa03c2ac9a28172c9
csi-driver-shared-resource-operator git 318c84a5 sha256:09ccedec19457d859856db1d0c3b9a619561e16421fd73b7f7e022f27242d368
csi-driver-shared-resource-webhook git f797d453 sha256:fcf02486f1289b21bfdbee730d38bf7feb0b63e975c6464ea83648086bd522d1
docker-builder git 1fec8a28 sha256:5722df6e139d0ee70e108e548fdcb7ca4ff5f31779e4a742f04b78cb86d9d453
driver-toolkit git d719bdcf sha256:ddd5ae8159e9da453907ddc8cea4b984afde2028a4a52553aabd66104cd2e328
egress-router-cni git 756e3845 sha256:27a6118e14c5a83e39d916859945b5a84bb83522404904696946f44ad6977a66
gcp-cloud-controller-manager git efaf4dc6 sha256:5900e0b313b36564c2524e27f6af144903c1d855492866314a26f0e27cfb4cfe
gcp-cluster-api-controllers git eaeccca9 sha256:b61d501cf7b52bbb83bb045e30ff0a2357cc8ff98d3eb1b29b54ff6f13edd713
gcp-machine-controllers git 38ddff06 sha256:ea302039dde95174f6837d29048cb922c8ee0d28137e0a7583b8133dc4315027
ibm-cloud-controller-manager git 59edd923 sha256:f41901c4f9fcff3ccd4bc9dd9ac21e69abc41837da0dc65db8e62053173237d1
ibm-vpc-node-label-updater git 96ff0481 sha256:5782c742606c236ca29cd363fc8a115ab3f884d290ea14e3ed635a5f89db3db0
ibmcloud-cluster-api-controllers git d221afa4 sha256:14769db016adcfdeda227b2dfdd5c52e020e95892dbb4a01e1a557194ee0db13
ibmcloud-machine-controllers git bb253a0c sha256:e78a620f99894a262eaeb062e9d2b0568408322be0172718bfb4178f451d4551
ironic-machine-os-downloader git ce291779 sha256:66cfa049ac47732d9a3424accff90c935d85411dc20865812ffee8dd9af37993
ironic-static-ip-manager git 4536724a sha256:57d174088d6f248fe2f51837354f712929ceb4ec6885e77327ed62be7e497e9e
keepalived-ipfailover git 04659348 sha256:0b953c4af5ce45a0b0afdc332846db6d9e28592dc0458a985ae8ed6011b3c50f
kube-proxy git 12a5bcfe sha256:f939e8148abe338faba1e938f98c7923a62f7196dc24fc1355b9ce57d5083ad3
kube-rbac-proxy git f1205e66 sha256:019f9feeecae727639759f27a7c62ba4adbfdea95436aeb35a4c3ac080d609ba
kube-state-metrics git 4b969848 sha256:13093dc7590b12c5a301cf09cdaf4f98399a1427a428780795c8a3ae03bb044f
kube-storage-version-migrator git bad104d1 sha256:a8d829b56f04161a18d527c9d4d00f61240cd7cf83d4dc476b45879bc4f4d8e4
kubevirt-cloud-controller-manager git ee2033ec sha256:807fc056e123047b25b96e8c284723255c4a1cd70a46569ae175be3b7b43d7ce
kubevirt-csi-driver git efa0b943 sha256:eca55e61186531ba0bfa837257961cba9e328a490864db612aa97b788023121e
machine-api-operator git 370fdaa4 sha256:3171c76d235d38397dcdf5788822134138d7ccb87b98d69b88f8c8aec6b9e70e
machine-os-content sha256:c57771ebe62a50e3b02e61456af81ee6b33b7fb5d6bb883f3ce002c69c60791c
machine-os-images git b14856ff sha256:d40d92287a561e10641cdb03dff45f365f67f3265e304512057ca129e215baa8
multus-admission-controller git f76d674e sha256:57c34966eef6996bc3bce0c802bce98b0cfb8190cf62ededb76fae22755794ec
multus-cni git bb616eff sha256:ce444a53ac886a494e18865e6f0cc89a016aae49c2d15add670c5070deac3109
multus-networkpolicy git 7b99c194 sha256:9a01336379bc0d1e11d27dde55e8456a34c478b7a5c027c48e55433852117589
multus-route-override-cni git ca3bbec5 sha256:50d1ce5bcd21a346070f161dda18c3e2fff2253c8492b1dc2daf542a2b6dbf47
network-interface-bond-cni git 84bda2af sha256:3456bd0afb32f2d96d94b92592797425c1a780853fa4b0ec8dd474cd941cdd7a
network-metrics-daemon git e72c8ad1 sha256:469ec69a5e1a554640e4e5306bd417cbadfc22a3f7c32f91bc5fccdaa4bf3303
network-tools git 073feda1 sha256:cfe00fa37cb2eb4604b436b58ba85c5c32e30cb2486d743d959411a21f841e99
nutanix-cloud-controller-manager git 4d1c58e2 sha256:03a6fee3cb68bed260c4ccc6f9f6c8c863d7d6c3d9a6d569b0ce07a26f8a6e16
nutanix-machine-controllers git be43191e sha256:a6613ac90381edc961862ac123b621caddab7352f7658724a5d37ad57316b85e
oauth-apiserver git 41c2dfea sha256:5431e62ef7d91b8e0013161d0950a3b84fa9562a876fb63821825a47a292e71e
oauth-server git b841149f sha256:b306224d1c3d13564bc2f68cb1025245cad4223d24b08bb937d34072cbd8522f
olm-rukpak git 66b3e551 sha256:bbe08b75dd1918e1662123f6bce057dab2e7873dd7369d68895b437928d186f5
openshift-apiserver git 0b827682 sha256:37a9d0020d04bddd01d11fb0ffdcadd3e940054c3f99576e85b9c3ae8606779f
openshift-state-metrics git 7beb8807 sha256:222696e88002a623021d9609a001ad8a2b8f595a81cf16a0b9f1c5c1e5b5d8e9
ovirt-csi-driver git f21b470f sha256:34392271202d0fc04a4d2f992ca372e0fad8434adf544170af655e90f97af916
ovirt-machine-controllers git 22d89b3f sha256:82d567c792ff4b2dbc05aed5392de6f57f502028c415cb6f9dce7be20316b46a
powervs-cloud-controller-manager git 13036562 sha256:215ace04a721e1046a711fe0353fbd271c8d0061e158eb715b2654005adbe431
powervs-machine-controllers git bf49c5c1 sha256:b1a054bc5044f37d42057b418f9392bab69db82a428a64922cd9dda9e9ded0ea
prom-label-proxy git b501d5e2 sha256:09214fe2dbcb65aabf82cdd5002d5bd77718070dc78d37184cd58dee27655a28
prometheus git 8279148f sha256:8001c2fd6f19e95762d5db95761e8ba3c860737a2d181c9f1f062054d77827fa
prometheus-alertmanager git f44d574d sha256:f573af6d2a6f3d5d23712675424f1f4dd3cbf5d7172b706e69152ce3941bc6b3
prometheus-config-reloader git 95a11782 sha256:df526d9f9dfc6c307bcf91cbbd6086bdcf08fe11ded4b4f379cd05b2614e43be
prometheus-operator git 95a11782 sha256:1f6142104aea1227b378db8883a9f262f7e8e68f36f12321377d56a58c52c436
prometheus-operator-admission-webhook git 95a11782 sha256:98d9cf23b398cd50ca8683b64d598713b2510825c8fb491f987e298f8945650f
rhel-coreos sha256:8ac95243305f47b2be3f2e5bfe704f5e349f26bc9bd6effe4829e8cd0b3e6ec3
rhel-coreos-extensions sha256:d2ea7052ec067e8554fc8e59e20f5e71cb08654e01b71fde32f273b6e662fbac
route-controller-manager git 6667a6cb sha256:9b05a3e28d3a7d4d343e298fd902d10bda4861a11244b499d545d426b44b15d9
sdn git 12a5bcfe sha256:1c83a867da3bae6ec076a3aa81981b290738dd92b5be163a60db4191b5da423d
telemeter git be81b434 sha256:4ed56bad7d4f65799c04e3845c0f5a276da75d5a46b7aa820c1c387711282a2e
thanos git 43238be3 sha256:f9b5953801e1b0dc8255078668101232f326acc7ffd79a86e985c8bb06aa3807
vsphere-cluster-api-controllers git 24e08ddf sha256:49ee440e5b95faaa6252c65b55da7698821c7f734d287cbf27ca7c4ab32113c3
vsphere-problem-detector git 64f62bff sha256:fa41aff671e90d9cef6eab3dad3b0c778d0e0b167b2cabaf1f1643477275a004

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#717) #670
Full changelog

agent-installer-node-agent

OCPBUGS-16373: Ignore arping errors on RHEL 9 (#577) #577
MGMT-15661: Update to latest ghw version (#594) (#596) #594
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-16377: [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #31
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-16250: Add management workloads annotations #55
Full changelog

apiserver-network-proxy

OCPBUGS-19266: Updating ose-apiserver-network-proxy images to be consistent with ART #33
OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-17145: Increase service idle max timeout to 100 minutes #81
Full changelog

azure-disk-csi-driver

OCPBUGS-16318: 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 #44
Full changelog

azure-file-csi-driver

OCPBUGS-16321: 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 #30
Full changelog

azure-file-csi-driver-operator

OCPBUGS-16250: Add management workloads annotations #67
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-19307: Implement workaround to allow SNO installations for OKD/FCOS #7480
OCPBUGS-18787: vSphere set bootstrap/master efi #7481
OCPBUGS-19320: [release-4.13] for vsphere ipi add cluster domain to the uploaded vm configs so that… #7498
OCPBUGS-20141: [release-4.13] Use updated ansible-core for Openstack image #7559
OCPBUGS-19670: [release-4.13] Allow different service account for xpn installs in gcp #7524
OCPBUGS-19773: Increase bootstrap timeout for vSphere platform by 30 mins #7530
OCPBUGS-16383: [release-4.13] Default dataStore is returned the name instead the inventoryPath #7343
OCPBUGS-13681: FCOS: bump to latest stable version #7188
OCPBUGS-11093: Azure: don’t set default subscriptionID for disk encryption sets #7432
OCPBUGS-17809: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7427
OCPBUGS-15231: new Aws secret regions support #7264
OCPBUGS-15222: terraform: aws: secret regions now support ALIAS record #7262
OCPBUGS-17823: CORS-2445: GCP: Add osImage to the install config #7431
OCPBUGS-14432: Replica validations #7423
OCPBUGS-13865: vSphere Add ova sha query; additional debugging #7198
OCPBUGS-16640: [release-4.13] Update azure cli version to 2.49.0 #7357
OCPBUGS-16777: update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 #7410
CORS-2764: AWS Shared VPC Backport [release-4.13] #7362
OCPBUGS-17104: [release-4.13] vsphere terraform bump #7383
OCPBUGS-17397: backport openstack UPI for ansible 2.10 #7385
OCPBUGS-15290: GCP: ic: improve project validation #7361
OCPBUGS-16390: Allow override of networkType #7344
OCPBUGS-16673: Fix timing issue between network services #7358
OCPBUGS-14711: Convert Rendezvous IPv6 address to canonical format #7237
OCPBUGS-16066: Use correct SELinux label. Make rename atomic. #7315
OCPBUGS-14599: Log additional host info at warning level #7233
OCPBUGS-15866: Use the same names for public LB in IPI and UPI Azure #7302
OCPBUGS-16124: azure: skip LB creation when not needed #7322
Full changelog

baremetal-operator

OCPBUGS-17365: Trigger reconcile on Secret change #295
OCPBUGS-16013: Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 #292
OCPBUGS-17229: Set minimum TLS version for webhook to 1.2 #294
Full changelog

baremetal-runtimecfg

OCPBUGS-20081: Increase timeout for bootstrap kubeapi #278
OCPBUGS-18582: Move haproxy firewall rule check earlier in loop #271
OCPBUGS-17423: Don’t render config with incomplete unicast peer list #267
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-20298: Use quay redis image instead docker mysql #1566
OCPBUGS-19942: Truncate existing files when writing from inspect #1553
OCPBUGS-13527: Bump x org deps 4.13 #1422
OCPBUGS-16055: mcs cert: account for environments that use IP directly #1500
OCPBUGS-16193: reboot: set ignition version to 3.1 #1508
Full changelog

cluster-authentication-operator

OCPBUGS-15258: Correctly link oauth apiserver ServiceMonitor with its Service #617
Full changelog

cluster-autoscaler-operator

OCPBUGS-17056: Address long acquire times during update #289
OCPBUGS-17098: update x/net dependency to 0.7.0 #280
OCPBUGS-16768: add nutanix labels that should be ignored #278
Full changelog

cluster-baremetal-operator

OCPBUGS-19369: Guard against nil PlatformStatus #363
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-17101: update x/net dependency to 0.7.0 #269
Full changelog

cluster-config-operator

CORS-2766: AWS Shared VPC API Bump [release-4.13] #337
OCPBUGS-16164: retire LatencySensitive featureset #329
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-20482: fix: e2e: add gcp custom type to test framework #249
OCPBUGS-17055: Address long acquire times during update #240
Full changelog

cluster-dns-operator

OCPBUGS-11449: Enable topology-aware hints if, and only if, nodes have zones #367
Full changelog

cluster-etcd-operator

OCPBUGS-20488: prioritize podman pull in etcdctl dl #1136
OCPBUGS-19378: [4.13] Backports of backup/restore fixes #1117
OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1125
OCPBUGS-16804: reset snapshot default counts to avoid file already lo… #1080
OCPBUGS-12487: update golang.org/x/net/http2 #1075
Full changelog

cluster-ingress-operator

OCPBUGS-17733: [release-4.13] remove shared VPC cred request #972
NE-1341: Add support for AWS shared VPC in another account #966
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1558
OCPBUGS-15853: pkg/operator/configobserver: check that the serving certificate refer… #1522
OCPBUGS-17081: make webhook connection failure a warning in log #1532
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #752
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #497
Full changelog

cluster-monitoring-operator

OCPBUGS-11016: Node Exporter ignores network interface under name “cali[a-f0-9]*” #1927
OCPBUGS-16023: Add the trusted CA bundle in UWM Prometheus pods #2041
Full changelog

cluster-network-operator

OCPBUGS-19894: remove prestop hooks for northd, sbdbd and nbdb #2001
OCPBUGS-18722: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1994
OCPBUGS-18342: Fix bond-cni’s default directory in multus manifest #1977
OCPBUGS-13920: add Hypershift release-image annotation to multus #1817
OCPBUGS-18099: [release-4.13] Use encapsulation=true for IBM Cloud #1932
OCPBUGS-17721: Enhance check controller to remove old check objects #1950
OCPBUGS-17457: prevent creation of multiple cni-sysctl-allowlist-ds pods #1936
Full changelog

cluster-node-tuning-operator

OCPBUGS-19459: check for object being nil (#820) #820
Add kubeconfig path for IBM Managed OpenShift (#814) #814
OCPBUGS-14137: e2e: perfprof: add SNO device recovery test (#653) (#806) #653
OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) #788
Sync DaemonSet if operand image changes (#786) #786
Revert “Revert “Release leader election on manager exit (#773)” (#797)” (#802) #773
OCPBUGS-19351: Keep Profile status.bootcmdline around (#803) #803
Revert “Release leader election on manager exit (#773)” (#797) #773
Release leader election on manager exit (#773) #773
Tighten the rules for modifying Tuned Profiles (#766) #766
OCPBUGS-18063: cgroup: Match the name of the cgroup to what is expected by kubelet (#774) #774
update tsc karg to tsc=reliable (#757) #757
OCPBUGS-17845: deflake ht aware test (#763) #763
OCPBUGS-17794: rps: use default rps mask kernel API (#760) #760
Improve render error handling (#755) #755
nto:tuned: remove sched_min_granularity_ns settings (#726) #726
Fix a race in e2e test rollback.go code (#740) #740
Full changelog

cluster-storage-operator

OCPBUGS-18132: Add patch for allowing configmap updates via clusterrole #396
OCPBUGS-19036: Fix PodStartupStorageOperationsFailing alert #397
Full changelog

cluster-version-operator

OCPBUGS-20321: pkg/cvo/sync_worker: Always enable the DeploymentConfig capability #981
OCPBUGS-19828: pkg/clusterconditions/promql: Warm cache with 1s delay #974
OCPBUGS-20263: pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #980
OCPBUGS-16613: Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 #948
Full changelog

console

OCPBUGS-20232: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13224
OCPBUGS-20231: fetch TaskRuns without selector and reduces the get TaskRuns requests #13223
OCPBUGS-20330: Check if filtered object contains name property #13227
OCPBUGS-13285: add multipath device type to LocalVolumeSet #12804
OCPBUGS-17481: Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13083
OCPBUGS-18764: Fixed Edit Application form for Knative Services #13147
OCPBUGS-18538: OCP console mandate secret for repository creation #13135
OCPBUGS-18679: [knative] Don’t rely on openshift/hello-openshift as a sample image #13140
OCPBUGS-18289: Not able to import the repository with .tekton directory and func.yaml file present #13116
OCPBUGS-18443: Fix crash when filtering the quick start catalog #13127
OCPBUGS-18312: Web console slowness on Project>Project access page #13119
OCPBUGS-18335: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13120
OCPBUGS-17876: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13095
OCPBUGS-16668: Dynamic plugin translation support for plurals broken #13041
OCPBUGS-17181: Creation of GH webhook and attaching it to repo while importing from git using PAC #13060
OCPBUGS-16040: fix bug where binary secret values are corrupted on edit and add test coverage #13048
OCPBUGS-16659: Fix RTE in bridge. #13038
OCPBUGS-16158: “Duplicate RoleBinding” leads to “Unsupported value” error #13008
OCPBUGS-16434: Fix stop PLR option #13031
OCPBUGS-14265: Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12865
OCPBUGS-13641: Do not fetch catalog sources on CSV or Subscription details pages. #12811
OCPBUGS-16421: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13030
OCPBUGS-15998: Upload JAR file does not work if the Cluster Samples Operator is disabled #12992
OCPBUGS-15810: only show pipelines doc link for downstream #12981
Full changelog

console-operator

OCPBUGS-18972: Manual backport of #761 #793
OCPBUGS-18192: Add haproxy timeout annotation to console routes #787
OCPBUGS-16241: Add missing watch permission for helm-chartrepos-viewers #778
OCPBUGS-14039: Backport #774 and #763 #779
Full changelog

container-networking-plugins

OCPBUGS-17728: Default CNI binaries to RHEL 8 #117
Full changelog

coredns

OCPBUGS-19985: UPSTREAM: <carry>: openshift: Fix OCPBUGS-19985 #97
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-20571: [release-4.13] CARRY: Add DOWNSTREAM_OWNERS #228
OCPBUGS-20133: FastFix: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 #221
Full changelog

csi-driver-manila-operator

OCPBUGS-16250: Add management workloads annotations #195
OCPBUGS-17160: Don’t cache OpenStack client #196
Full changelog

csi-external-attacher

OCPBUGS-16637: [release-4.13] UPSTREAM: 415: fix: CVE-2022-41723 #56
Full changelog

csi-external-provisioner

OCPBUGS-16609: [release-4.13] UPSTREAM: 880: Bump golang.org/x/net #67
Full changelog

csi-external-resizer

OCPBUGS-16639: [release-4.13] UPSTREAM: 268: Bump golang.org/x/net #143
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-16638: [release-4.13] UPSTREAM: 815: updated go module files #103
Full changelog

csi-livenessprobe

OCPBUGS-16600: [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 #46
Full changelog

csi-node-driver-registrar

OCPBUGS-16608: [release-4.13] UPSTREAM: 284: Bump golang.org/x/net #48
Full changelog

docker-registry

OCPBUGS-19655: increase rest.Config QPS and Burst #383
OCPBUGS-18321: bump docker-distribution #376
Full changelog

etcd

OCPBUGS-18497: Updating ose-etcd images to be consistent with ART #214
OCPBUGS-18398: UPSTREAM <carry>: update build images to rhel9 #212
OCPBUGS-15859: [4.13] Rebase openshift/etcd to 3.5.9 #204
Full changelog

gcp-pd-csi-driver

OCPBUGS-16331: 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 #38
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-16250: Add management workloads annotations #80
Full changelog

haproxy-router

OCPBUGS-17762: haproxy/template: mitigate CVE-2023-40225 #506
OCPBUGS-17107: properly handle weight=0 #501
Full changelog

hyperkube, pod

OCPBUGS-21063: [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1759
OCPBUGS-19885: UPSTREAM: 120789: change rolling update logic to exclude sunsetting nodes #1725
OCPBUGS-18287, OCPBUGS-19480: Update to Kubernetes 1.26.9 #1715
OCPBUGS-18677: UPSTREAM: <carry>: Force using host go always and use host libriaries #1689
OCPBUGS-17187: Update to Kubernetes 1.26.7 #1649
OCPBUGS-17145: Increase service idle max timeout to 100 minutes #1657
Full changelog

hypershift

chore(deps): update rhtap references (release-4.13) #3043
Update RHTAP references (release-4.13) #2996
OCPBUGS-17182: add need-management-kas-access label to olm-collect-profiles pods #2871
OCPBUGS-16225: Add missing probes to two services #2821
fix(olm): Use 4.13 catalog source images #2978
Updated secret permissions for openshift-route-controller-manager #2923
HOSTEDCP-1121: Ensure SG reconciliation for aws endpoint #2885
chore(deps): update rhtap references (release-4.13) #2921
Revert “HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS” #2931
chore(deps): update rhtap references (release-4.13) #2904
Update RHTAP references (release-4.13) #2866
HOSTEDCP-1046: Add ImageDigestMirrorSet to Config API comment #2870
HOSTEDCP-1046: Add IDMS to the list of valid config manifests #2863
Update RHTAP references (release-4.13) #2833
HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS #2839
OCPBUGS-15743: Let getMachinesForNodePool return machines ordered by creation Timestamp #2767
4.13: Add management cluster KAS network policy #2786
Leader election config update. #2801
OCPBUGS-16160: fix deletion bug when hostedzone is already deleted #2813
HOSTEDCP-1061: [release-4.13] Implement dedicated request serving nodes for HostedClusters #2809
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-16378: 4.13: UPSTREAM: 157: K8S and grpc package upgrade #40
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #76
OCPBUGS-16250: Add management workloads annotations #73
Full changelog

insights-operator

OCPBUGS-19476: update Insights report config logging (#828) #828
OCPBUGS-17661: workload info gatherer, add external image repo (#816) #816
Full changelog

ironic

OCPBUGS-17837: Fix PROVISIONING_MACS unbound #393
OCPBUGS-17158: [4.13] Update packages with latest bugfix #388
OCPBUGS-17551: Expand regex for fcos/okd packages list #390
Full changelog

ironic-agent

OCPBUGS-19006: backport hostname fixes #89
Full changelog

k8s-prometheus-adapter

OCPBUGS-20405: limit number of simultaneous client requests #78
Full changelog

kuryr-cni, kuryr-controller

Bug OCPBUGS-16340: Fix np retry #738
Full changelog

libvirt-machine-controllers

“OCPBUGS-19927: libvirt: Don’t force use of virtio console” #268
Full changelog

machine-config-operator

OCPBUGS-20333: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3962
OCPBUGS-18803: Soften grep pattern for ingress default router #3908
OCPBUGS-19958: [release-4.13] Backport logspam PRs #3950
OCPBUGS-19675: daemon: always use podman cp to copy extensions container content #3938
OCPBUGS-19400: install: Recreate and delayed default ServiceAccount deletion #3923
OCPBUGS-19509: Ignore invoking nbctl calls if its SDN #3929
OCPBUGS-19414: The kubeconfig copied on to each node has 644 permissions #3924
OCPBUGS-18159: Ensure azure-routes hack for internalLB hairpin traffic works for SGW #3904
OCPBUGS-16218: Prevent NM from unsetting the hostname #3805
OCPBUGS-17997: SSHkeys fails to write on upgrade to 4.13.rc3 #3879
OCPBUGS-18076: daemon: create /etc/systemd/network directory on node #3888
OCPBUGS-17769: Agent-based install process the container machine-config-controller will be oom #3868
OKD-174: Dockerfile: OKD: Reenable extensions image on SCOS #3845
OCPBUGS-17430: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3841
OCPBUGS-17163: daemon: Always replace binary #3833
OCPBUGS-16888: daemon: Make binary writing idempotent #3826
OCPBUGS-16888: daemon: no need to reexec when target and source rhel version is same #3824
OCPBUGS-16622: daemon: Copy matching binary to host, re-exec with it #3812
Full changelog

machine-image-customization-controller

OCPBUGS-19006: Pass BareMetalHost name to IPA (take 2) #98
OCPBUGS-14250: Watch networkData Secrets for changes #95
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-4417: Denormalize IP name before checking if pod is alive [Backport 4.13] #168
OCPBUGS-15956: Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #138
Full changelog

must-gather

OCPBUGS-19928: [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes #383
Full changelog

oauth-proxy

OCPBUGS-16805: Updating golang-github-openshift-oauth-proxy images to be consistent with ART #261
Full changelog

oc-mirror

Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) #700
Fix OCPBUGS-14402 (#675) #675
OCPBUGS-18556: operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) #691
OCPBUGS-18106: manual cherrypick (#684) #684
OCPBUGS-17998: fix: ICSP with incorrect mirror path (#685) #685
OCPBUGS-17453: Fix “ OCI index found, but accept header does not support OCI indexes (#677) #677
OCPBUGS-16372: A variety of changes needed for correct operation with multi… (#661) #661
Full changelog

openshift-controller-manager

OCPBUGS-11091: mount build.Spec.Source.ConfigMaps for custom builder images #257
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-16250: Add management workloads annotations #125
OCPBUGS-17071: Fix SCC admission failure race during initial deployment #124
Full changelog

openstack-machine-api-provider

Bug OCPBUGS-19460: Set controller’s SyncPeriod to 1 hour #85
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-18305, RHIBMCS-151: Copied csv listing backport #548
OCPBUGS-17791: opm: always serve pprof endpoints, improve server allocations (#1129) #540
Introduce DOWNSTREAM_OWNERS file #538
Full changelog

operator-marketplace

OCPBUGS-19085: Updating marketplace-operator images to be consistent with ART #538
OCPBUGS-18502: remove a race condition #532
Full changelog

ovirt-csi-driver-operator

OCPBUGS-16250: Add management workloads annotations #120
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-20047: Adjust python ssl library dependency check #1924
OCPBUGS-18976: Update bridge flow cache when the host address changes #1873
OCPBUGS-18791, OCPBUGS-18792, OCPBUGS-19088, OCPBUGS-7406: Dockerfile: bump OVN to ovn23.06-23.06.1-8.el9fdp #1880
OCPBUGS-18672: Check libovsdbclient.ErrNotFound on wrapped errors #1861
OCPBUGS-19449: Do not return error if pod IP cannot be retrieved for podSelectorPodNeedsDelete and perf improvements #1893
OCPBUGS-18585: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1855
OCPBUGS-17123: Remove stale egressip status entry #1793
OCPBUGS-18057: [release-4.13] Create egress firewall with one db transaction #1834
OCPBUGS-17910: Emit node events only when retry failure #1825
OCPBUGS-17503: [release-4.13] libovsdb: give monitor setup time to process than normal transactions #1807
OCPBUGS-13175: Check the status of a pod before trying to get its ip #1724
OCPBUGS-15496: Fix default GW IPs retrieval #1738
OCPBUGS-17001: Inactivity probe for ovndb connection #1796
OCPBUGS-17120: Bump OVN to 23.06-23.06.0-51 #1790
OCPBUGS-16121: [release-4.13]: Delete address sets after acls that reference them #1762
Full changelog

powervs-block-csi-driver

Update OWNERS add yussufsh #54
Updated golang.org/x/net/html dependency. #44
Openshiftrelease 4.13 #41
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-16250: Add management workloads annotations #34
Full changelog

prometheus-node-exporter

OCPBUGS-14274: Upgrade golang.org/x/net to v0.10.0 to fix the CVE #127
Full changelog

service-ca-operator

OCPBUGS-16806: Updating ose-service-ca-operator images to be consistent with ART #214
Full changelog

tests

Bug OCPBUGS-17469: Correct condition for rejecting connection #28151
OCPBUGS-20361: Update image stream test to create a manifest list image by default #28318
OCPBUGS-16241: Update permission to incl. watch for helmchartrepositories for console users #28054
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-17103: update x/net dependency to 0.7.0 #46
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-16398: Rebase v3.0.2 #83
Full changelog

vsphere-csi-driver-operator

OCPBUGS-18132: Block 4.14 upgrades with admin ack #169
OCPBUGS-18332: disable controller hostNetwork #166
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github