4.13.57

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.57-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Failed (3 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.13-fips-payload-scan
- gcp-ovn-rt-upgrade-4.13-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.12.19, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.46, 4.12.48, 4.12.49, 4.12.50, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.60, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.12.68, 4.12.69, 4.12.70, 4.12.71, 4.12.72, 4.13.10, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.16, 4.13.18, 4.13.19, 4.13.21, 4.13.22, 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.39, 4.13.4, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.13.48, 4.13.49, 4.13.5, 4.13.50, 4.13.51, 4.13.52, 4.13.53, 4.13.6, 4.13.7, 4.13.8, 4.13.9

Upgrades to:

4.14.50 (changes) - Success
4.14.0-0.nightly-2025-04-24-084003 (changes) - Pending
4.14.0-0.nightly-2025-04-24-012548 (changes) - Success
4.14.0-0.nightly-2025-04-23-195607 (changes) - Failed Success
4.14.0-0.nightly-2025-04-23-144229 (changes) - Success
4.14.0-0.nightly-2025-04-23-074313 (changes) - Success
4.14.0-0.nightly-2025-04-22-175024 (changes) - Failed Success
4.14.0-0.nightly-2025-04-22-113415 (changes) - Success
4.14.0-0.nightly-2025-04-21-222809 (changes) - Success
4.14.0-0.nightly-2025-04-21-121449 (changes) - Success
4.14.0-0.nightly-2025-04-21-031719 (changes) - Success
4.14.0-0.nightly-2025-04-19-075745 (changes) - Success
4.14.0-0.nightly-2025-04-17-181550 (changes) - Success
4.14.0-0.nightly-2025-04-15-125847 (changes) - Success
4.14.0-0.nightly-2025-04-15-050913 (changes) - Success
4.14.0-0.nightly-2025-04-14-193030 (changes) - F F F S
4.14.0-0.nightly-2025-04-13-082712 (changes) - Success
4.14.0-0.nightly-2025-04-11-060520 (changes) - Success
4.14.0-0.nightly-2025-04-10-211128 (changes) - Failed Success
4.14.0-0.ci-2025-04-24-054103 (changes) - F P F P
4.14.0-0.ci-2025-04-23-234051 (changes) - Success Success
4.14.0-0.ci-2025-04-23-163210 (changes) - Success Success
4.14.0-0.ci-2025-04-23-075751 (changes) - Success Success
4.14.0-0.ci-2025-04-22-220621 (changes) - F F S S
4.14.0-0.ci-2025-04-22-110102 (changes) - F S S
4.14.0-0.ci-2025-04-21-213411 (changes) - Success Success
4.14.0-0.ci-2025-04-21-142656 (changes) - S F S
4.14.0-0.ci-2025-04-21-070446 (changes) - F F F S
4.14.0-0.ci-2025-04-19-093024 (changes) - F F F F S
4.14.0-0.ci-2025-04-18-185503 (changes) - F F F F F S
4.14.0-0.ci-2025-04-18-110014 (changes) - F F F F S
4.14.0-0.ci-2025-04-17-230442 (changes) - F F F F F F F S
4.14.0-0.ci-2025-04-17-170426 (changes) - Failed Success
4.14.0-0.ci-2025-04-17-005427 (changes) - F F F F F F F F
4.14.0-0.ci-2025-04-16-042601 (changes) - S F F F S
4.14.0-0.ci-2025-04-15-174535 (changes) - F F F F F S
4.14.0-0.ci-2025-04-15-050022 (changes) - S F F F F
4.14.0-0.ci-2025-04-14-201818 (changes) - F F F F F F
4.14.0-0.ci-2025-04-14-132713 (changes) - F F S
4.14.0-0.ci-2025-04-13-084534 (changes) - Success Success
4.14.0-0.ci-2025-04-11-191346 (changes) - Success Success
4.14.0-0.ci-2025-04-11-120711 (changes) - F S S
4.14.0-0.ci-2025-04-11-030046 (changes) - F S S
4.14.0-0.ci-2025-04-10-162532 (changes) - F F S

Loading changelog, this may take a while ...

Changes from 4.13.38

Created: 2025-04-10 09:14:40 +0000 UTC

Image Digest: sha256:9d16c0afca73d20e79bc190e318a305f466a571fab05766dae6b597957ec0ebf

Components

Kubernetes upgraded from 1.26.14 to 1.26.15
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202403200554-0 to 413.92.202504070146-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git e41e11cc sha256:c32b16db0241e524b6c696f850e8f38cc9122eca86cdb247dc4a6bfc1a492d88
alibaba-cloud-csi-driver git 6384f904 sha256:83d8d3e880424ef1fb910e68805e1aa644b8c37e516eabc4855f798183c834a4
alibaba-disk-csi-driver-operator git 7e415973 sha256:34d9170c86cd3044a74b6f7198574f73061930d70c6efe4020f93e2879a3d387
alibaba-machine-controllers git 4c0f96a6 sha256:e2a22b6498ae574e9d142c060779a3c58eb5a763255b69b285d8a23fc5e3faff
aws-machine-controllers git e1a57b5e sha256:7ec9fd8064e12aabf75beab5cbf8b56689cef7d5c74fd67f6d0118f7ee21f58e
azure-cloud-controller-manager git bf9bd022 sha256:56e67e9673962e96344615b34eb5213c356aa7b897bdc35e998595adcee15ebc
azure-cloud-node-manager git bf9bd022 sha256:8ee2dea64c94eb4ac9bee6e4edd77d36d746a59bc4d1d26e9e493d5b9c1cf310
azure-disk-csi-driver git b6d3fbcb sha256:257308dd4915b708a67d2ed256965da1043591b0908806051efaf5f6cdb8c6c6
azure-disk-csi-driver-operator git 8534d756 sha256:bbc312625e5164ffc7cd3f98735fc0ac50e4b13bd09746181113bc87de563a02
azure-file-csi-driver-operator git 70e05302 sha256:2388a3d130b71626aff2da0378ad375acd5f5403611c69fa53b82ff19df0c4fd
azure-machine-controllers git 62f6e0f3 sha256:8bdc2c541bade7c1063265f904f53bbda24cf3adf528a85da02a1f712ce19867
baremetal-operator git f6db335c sha256:4f71f08949c2e874143d00e10e1d446280ec9b33bd1940488b9668dc8fe3e254
baremetal-runtimecfg git 1280cf54 sha256:14a3d17d9469319ef4bc9884ffc8fe98283f9049350d1395b2b0981a95871ccb
cluster-authentication-operator git 1801056c sha256:97d37f262981d54edfbe2defdd629f58b7415a28cd3427f5a6b76e54297489f1
cluster-bootstrap git ee908b6b sha256:2106cf2e6ed54a7289100bee339216ce552b1af28d6fc1933b344137004bb16d
cluster-capi-controllers git 12f767b2 sha256:3cbd1c9848626b482d3c9cf649ee0781d2c1eb45e2be068a601cb4a985cf5a45
cluster-capi-operator git b247793d sha256:f8f4b6f4d81547eea6b98408a01a7ebf9fc2b38971f031101c53000ef2ebb9f8
cluster-config-operator git a6d56530 sha256:83c5a08fac9182a4be46ccf05f4b52fa694830aace05fe5dd689cb7dbfb6dec4
cluster-kube-cluster-api-operator git 18c076b1 sha256:4954d7dab9c43189e202bafeca7580edbf6d9b8a28d7c4c647e7bf1e2b21ced2
cluster-kube-controller-manager-operator git dac71136 sha256:19d95ffb40e41d0634615fa2ad89e5713b0986b4853add09cae3735a4e8f12ac
cluster-kube-scheduler-operator git 2e7c269b sha256:d8d65ff5ed079a6c183354130cd56a9c70ec7d6725ea9a29b63bedc82d9df79a
cluster-kube-storage-version-migrator-operator git 721de5d6 sha256:078671b6f2217ea400b705685220c94ec59d8173717b63bfdb87eddc22584fdb
cluster-machine-approver git 25fe7b4b sha256:acb4bf5421174ade9ed1623c03d1e4746a2cb98de1b84d58e7e50fbefd4ff97a
cluster-openshift-apiserver-operator git 9abb220a sha256:d7eac563248dc8dc72bbcb66334a5a93ee4cac6b7ee8bfcc9dbc962de722f750
cluster-platform-operators-manager git 312c5f24 sha256:cb0436a4c8f661c923c115d81dbe4e12bb6f1d451c4d7ae17adb7c01cdb73111
cluster-policy-controller git 3b0d0755 sha256:6a52e2c51c45043db2308039fb0fed460f73cfb0785faf0d71a3798428b6eb50
configmap-reloader git 9adad592 sha256:12239588a5a40f95af89f6a1cb9bdeddb0ccb17acbff66205852ee92573dfea6
container-networking-plugins git 614ca3c3 sha256:1f500b4d491238fc5725cdfa8c066f9a642bfd9d8f41e4e7f39c36a9375024c0
csi-driver-manila git c3b7d2f5 sha256:d4e47608da11e4f061c1ac1d044f50de27509b78d12fbc77dc69692efe5651f5
csi-driver-manila-operator git 596a53c8 sha256:85ee2e183f5cc3715b27796850c0cf8e400290455a520fe658315bee5237dfd1
csi-driver-nfs git 2b914c21 sha256:3f0c1b9f18188bdbed383e547d4e0b8de1705b33baf8e5128325c1cfa2b6ccd3
csi-driver-shared-resource git 01bbb23b sha256:1092af8683481224d4563d17d28be2ef4556b31a0e5ae0dee186a09f603278e1
csi-driver-shared-resource-operator git bc169d2d sha256:c5074cb27a3c9019d21f352d3e38f0000958f8e5f4c302fcc3a2454ee0cc2aa5
csi-driver-shared-resource-webhook git 01bbb23b sha256:ba2b83449e5e10172710febb6a4c7be9bd615d4fc38d724dac05eef0c16145a0
csi-external-attacher git d9290843 sha256:3235ae333723bfb43d97d533c9874451d3affd3f344c78d51d67bf89d14b5111
csi-external-provisioner git 0bf126b7 sha256:3a0190ee084dc3efb3882732a0ef2889f0b839c64141f9a39287f2dd7f7a5352
csi-external-resizer git e8036caf sha256:1560edeac016ef5402e0a0ceedf1f762c823969559555677ebb769f911d55e73
csi-external-snapshotter git c8a7a097 sha256:b624f84751e9e805393e7756ae5c7ccc54f3fcc2fbc0881bd76d7144c2bb1ec4
csi-livenessprobe git 3587db51 sha256:b13900be78eb1e2067a9807884796818d4e5102b0c2d4b06731980f4593a2576
csi-node-driver-registrar git 9ea90f34 sha256:ee7c0a04eafd25c9474a172861360c52d5725213e7a77a70ff5f8dff2f25783e
csi-snapshot-controller git c8a7a097 sha256:7d1f06e2e6c25a3ce6a11e072198bdbfa39b4795e2d611ccfffb0d57d832549a
csi-snapshot-validation-webhook git c8a7a097 sha256:2270dc29abb8f3daef1277e1b110f5c85370ace1961389208c21665d46cc8c2b
docker-registry git 47a15ac8 sha256:3326dee2719c811daddc44ef45d10978e385a0aad759ff34b0f20e9a20da816d
driver-toolkit git d719bdcf sha256:0c1b95bffc927d710fa95eef45ea95a1edb412d10c119e091f4188c6f9120c89
egress-router-cni git dfe03737 sha256:277e9d8648b3859ef4d76eb4a9c96969eb11bd2f582cf409ee468e864d8629cc
gcp-cloud-controller-manager git 507fea98 sha256:062cea179e3b68499b6eb0369935538437df9f843625c1d3bfc21fdfe4af7dfd
gcp-cluster-api-controllers git b8a27725 sha256:ff5034ba48977392e621eb215d5642e7fcd253ec2af5247b9d881170cbd185f3
gcp-machine-controllers git e53a397d sha256:89b97ef33b9cdce822ba3e3259709ae0e882e301e6259c0b2b3321925c212c17
gcp-pd-csi-driver git 81e60746 sha256:0b890c1fa9dca1b614d58b31ccf5b7be1322b9f12bd4c3942f1c4a69e0a54136
gcp-pd-csi-driver-operator git 08c561b8 sha256:9f30f1c0720953d7f98007aa6ba11ef74400661b4cf459dbcbe12a1b8af3534a
ibm-cloud-controller-manager git b5bcaf9c sha256:868b2c7d5c891ce7f5bb27f939e9d5995e62bf563316b84b910988e3c7a12566
ironic-machine-os-downloader git ce291779 sha256:166fbc4eec62805bffe9765c856c42e63d8ffe98e51dbf254b0638d62bb04d78
ironic-static-ip-manager git 4536724a sha256:e1033b9449151fe09bf152afcfcbe28c75601e0a2048ac80ab3eedd1e7568dac
k8s-prometheus-adapter git 0fce7c7c sha256:1fc30f5ad1e3e1753ad8a29d6d0b45633aeb7b9938a540244623ad419a8c4f64
keepalived-ipfailover git 1a14e5c9 sha256:896c943b9039704741879a95d99f09f095ea098c57b2bda6761788ce8941b10d
kube-proxy git 569ea111 sha256:0906f4594d6734f72bc1fd167bda2db0b88e9152184b3588daa13e44e83b0096
kube-state-metrics git fd791df5 sha256:a0f3a32bde03c126a83974e18b6f47b3205aa25d9396f536fca8ba93326925b9
kube-storage-version-migrator git bad104d1 sha256:5cd270a7b84474bfa6bb26e3b43164881bcafcd62d72108f6906e49f5fb50986
kubevirt-cloud-controller-manager git ee2033ec sha256:4595880b115f7122aa17c14367039e2305337f5d9f2059a6327a3712dffebf31
kuryr-cni git 36754b7b sha256:c39d360ab226bf016439c21907b2329c7b0cedfae8ddf02f6f65036b3d6fb892
kuryr-controller git 36754b7b sha256:972b1fb2b03ef63aed3fe1758033c403eb19a9c083c340fec163db5187249a46
libvirt-machine-controllers git d4b7a8ab sha256:6d91c12ad2f5439025193a22981d7c4525d7ca38f3bd0004b97bf8c4f01c55c0
machine-image-customization-controller git 34a4abe6 sha256:53a7c9f0e49d3761befc22a28f6c80c1ea421036e89066c8b57e079e7c0ad24d
machine-os-content sha256:8f8ace971989f4fe64f3d52b783ff931444d146b386784e9777a84ffc63d4310
multus-admission-controller git 9b0656af sha256:b1204a80054ade2e6034bda8decde4b8fad95a9eae31cb818bc294b06a411a8c
multus-networkpolicy git 7176ab75 sha256:ece29d860466f2e521c0d9e29611c4cb1170166a335f2dbdfe3c2c1aa5f36e0e
multus-route-override-cni git ca3bbec5 sha256:2340161fcbba98015cd4b73da68e19e52d2e14c3d16b026044370f856d9f07c5
network-interface-bond-cni git 84bda2af sha256:ac8d0832ecf4d94c8bffb6b1ed865f9e5eb5f72e4dcbc83fb6cf4ac2af7ad9f3
network-metrics-daemon git 3ef81a5c sha256:4c54141ef4ef3276f119e3b6939ef1c8aa85c6488a8cb184c633773d75ac7f24
network-tools git 073feda1 sha256:ede6aafa4f5b35ba41802ea651860c0a80918924a7c4152923f4082539f39625
oauth-proxy git 44af5a3a sha256:bfde14a6381286088f6151adc062bcf6d916386c53bc794308d7c7e2797f515c
oauth-server git eb54be28 sha256:433ac73ee07bec2b739b6c7fc1075ee5b2d5edbc43cca8eab208424544668c21
openshift-state-metrics git 9be421f0 sha256:93450c02e74dded6bfc2f819491193e7ba4a503a022b80cb9f459b5da77c8f8f
openstack-cinder-csi-driver git c3b7d2f5 sha256:4aa28a2a6f428b56d369bdbd65105fad48dbd52672fce3fb39faf1dc166b1877
openstack-cinder-csi-driver-operator git b50a649b sha256:67be70bd5e5c8139b73901394149600f9bb0fb22bd7a49e1438c5b12d047fadb
openstack-cloud-controller-manager git c3b7d2f5 sha256:3dfdf5e75e6cdfa8eb08ac64766acb1c14c3688988a37a0771c9e58796a24b70
ovirt-csi-driver git 54958deb sha256:ae8fbd5cad600e57679221a0e2e980e9afd1a67738ecea4c61eb35547798f4a3
ovirt-csi-driver-operator git b293972f sha256:3f6787309081816c0a07e476612ce35d655f3a3d6527e65a3baf9f8f1e052ec3
ovirt-machine-controllers git 22d89b3f sha256:7bfb259851773257e799b1c661266c39c52d134c02845f9e693bbfdf95f9be85
powervs-block-csi-driver-operator git e70c980e sha256:98a64f4c4de49c8d59b2cdda0069092cc7cb966820f593111e8745bda21cc251
prom-label-proxy git b501d5e2 sha256:ee23e63e6cbd60ea2e4256835e708a549439564321a9d5078df412baf25c2cee
prometheus git 72886096 sha256:23071b7826081301407d51aeee49f6f46d4728050ca60ee942bf4d16c83c220b
prometheus-alertmanager git df2f11e2 sha256:36cc1dbc3a46029f588fb38ed4c38eb5720f17335eb5222ca8be1584d1bccc07
prometheus-config-reloader git 30fdccd1 sha256:a4243e79095b708f8eaf236e71a49dfcc40f4117f7511eff91a881990dbbb8d4
prometheus-node-exporter git 59d699ca sha256:05ca4a20cd3ec0b4fff496489cc4457674f1d647fbd95a664e4820d412e63c45
prometheus-operator git 30fdccd1 sha256:8db89a4d8574e0485bac23b7f5c58a2ba91d1d09ee05934f8ccfcba8ccb6cb3d
prometheus-operator-admission-webhook git 30fdccd1 sha256:e6da710bbe60af967af2ee27dee63e630c85ee12f6791e041217367deb07e8b7
rhel-coreos sha256:ecbdf7e204b1b85ceeb99046f1cf9b1d136d314a7f2e14b3244cb78dbe46e28c
rhel-coreos-extensions sha256:759d99895ae30e11d71dc5ff786798babfcb2b02cd87385845b1aebaf83ab55a
route-controller-manager git 6667a6cb sha256:b8acbe18dcd24b11a337d3dfd5337a956900a39cee88e480545e28b15355f22f
sdn git 569ea111 sha256:9a263fda43be728f93a0fca32d1f49d9187496cc4f9f5b0d3fb38dbdebaea494
service-ca-operator git dba00dc5 sha256:7204ee91c6af86b0e26ba90d8f9476bbb33fa72346ae7cdbbcdc0656b73900ca
thanos git 70fb57fb sha256:be555d69bad117dbbd2c6d83adc6b09f1ed459928a9d03796050c7fb6f2dcb1a
vsphere-cloud-controller-manager git f56d57ba sha256:64b5f94ac044b1d4f5ca57f96b9224918006fb618f95d1b3441e0efaf629b10c
vsphere-cluster-api-controllers git da63f2b9 sha256:ec4712f17eb86ab8252fc73a43aad7653b1f89595e5740c2ebf87d01e1c25699
vsphere-csi-driver git 4d3036a6 sha256:2832756c956f55b73f358b2c87c0ccdb8c92c62cefcef36e4101fcc661f486c7
vsphere-csi-driver-operator git a9e5036e sha256:98d2096b3c4123e99bec61a64b82def3f65eed71cf880e2e156673b3bcc33a3f
vsphere-csi-driver-syncer git 4d3036a6 sha256:d42cf2a7f18ffa976f9df5c03f955ed68ffb8256b7483b1185147bc4be74831f
vsphere-problem-detector git 3ad7408f sha256:0b1cfd929db484f600821f8ffd432f857554febbb16a18f7db9c5267a4317a72

agent-installer-api-server

OCPBUGS-13611: Update version go-http-metrics/gin (#6919) #6919
MGMT-17595: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) #6215
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) #6202
MGMT-17541: Replace broken golangci reference (#6196) #6196
NO-ISSUE: replace postgres images as current one disappeared from quay (#6133) #6133
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Bump golang.org/x/net to 0.33.0 (#1015) #1015
OCPBUGS-13612: Update version go-http-metrics/gin (#935) #935
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) #835
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) #829
MGMT-17541: Replace broken golangci reference (#826) #826
Full changelog

agent-installer-node-agent

OCPBUGS-46952: Bump golang.org/x/net to 0.33.0 (#886) #886
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) #706
NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) #700
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) #702
MGMT-17541: Replace broken golangci reference (#697) #697
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32073: update for CVE-2023-45288 [release-4.13] #84
Full changelog

aws-cluster-api-controllers

OCPBUGS-32470: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #509
Full changelog

aws-ebs-csi-driver

OCPBUGS-33363: [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments #266
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33363: Explicitly reserve 1 attachment for the root disk #307
Full changelog

aws-pod-identity-webhook

OCPBUGS-32882: Upgrade go-jose module to 2.6.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-36022: Update go-retryablehttp to v0.7.7 #314
Full changelog

azure-file-csi-driver

OCPBUGS-41678: bump mount-utils to treat ENODEV error as corrupted mount #81
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-39217: Add yq v4 to ci image #8922
OCPBUGS-36088: [release-4.13]: bump go-retryablehttp for CVE fix #8659
OCPBUGS-29124: IBMCloud: Handle disk delete errors #7989
OCPBUGS-37168: Add yq-v4 to the upi-installer image for CI #8743
OCPBUGS-35976: [release-4.13] bump github.com/containers/image for CVE fix #8651
OCPBUGS-33732: preserve category name when trying to find tag category #8419
OCPBUGS-33062: openstack: Honour worker server group policy #8323
OCPBUGS-32359: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8284
OCPBUGS-22979: IBMCloud: Add eu-es region #7685
Full changelog

baremetal-machine-controllers

OCPBUGS-46640: Bump x/net 0.33.0 #229
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30288: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1700
Full changelog

cloud-credential-operator

OCPBUGS-51546: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #831
OCPBUGS-43340: Update github.com/sirupsen/logrus v1.8.3 #770
OCPBUGS-37834: Resolve SNYK errors in security job. #743
OCPBUGS-37421: SNYK ignore go-client misreporting #740
OCPBUGS-36028: IBM/go-sdk-core update to v5.17.4 #722
OCPBUGS-32898: Upgrade go-jose module to 2.6.3 #698
Full changelog

cloud-network-config-controller

OCPBUGS-32180: Avoid nil pointer panic while assigning private IP on Azure #139
Full changelog

cluster-autoscaler

OCPBUGS-45151: [release-4.13] VPA: Update OWNERS file #328
OCPBUGS-40929: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #317
OCPBUGS-31702: add check for taint.value == nil #295
Full changelog

cluster-autoscaler-operator

OCPBUGS-31992: Update x/net to v0.25.0 #324
Full changelog

cluster-baremetal-operator

OCPBUGS-31993: bump x/net to 0.23.0 #439
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-35562: update azure and ash tolerations on node manager #353
OCPBUGS-35562: update unit tests [release-4.13] #354
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-48259: Add unreadyNodeGracePeriod for allowing brief node hiccups #342
OCPBUGS-35380: Improved debugging of API listing errors #304
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32334: create suitable role and roleBinding for csi-snapshot-webhook #206
Full changelog

cluster-dns-operator

OCPBUGS-52501: [release-4.13] Add runbook_url for CoreDNSErrorsHigh #434
OCPBUGS-11449: Enable topology-aware hints iff nodes in >=2 zones #418
OCPBUGS-11449: Ignore max unavailable for status #417
Full changelog

cluster-etcd-operator

OCPBUGS-35077: return errors in wait-for-ceo #1273
OCPBUGS-31988: update golang x net #1255
Full changelog

cluster-image-registry-operator

OCPBUGS-36034: go.*,vendor: bump go-retryablehttp #1070
Full changelog

cluster-ingress-operator

OCPBUGS-43095: Add alert for RFC 7230 violation in Transfer-Encoding headers #1161
OCPBUGS-43095: Add e2e test for duplicate Transfer-Encoding headers #1150
OCPBUGS-36551: Add Regexp Anchor to TestAll #1104
OCPBUGS-35453: [release-4.13] internal service changed fix target port logic #1089
OCPBUGS-35094: TestHostNetworkPortBinding: Delete t.Parallel() #1082
OCPBUGS-34765: Don’t add clientca-configmap finalizer if deleting #1073
OCPBUGS-34409: desiredRouterDeployment: Set HostPort if needed #1062
OCPBUGS-33990: Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] #1055
OCPBUGS-34476: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1065
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50850: Increase waitForFallbackDegradedConditionTimeout #1809
OCPBUGS-34062: [4.13] add a controller that reconciles SCCs’ volumes #1677
OCPBUGS-25922: [release-4.13] dashboard: use recording rules for most metrics #1611
Full changelog

cluster-monitoring-operator

OCPBUGS-33581: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2344
OCPBUGS-28767: fix generation of telemeter token hash #2305
Full changelog

cluster-network-operator

OCPBUGS-43856: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2547
OCPBUGS-38403: Add missing runbook for OVNKubernetesNorthdInactive #2471
OCPBUGS-37941: update whereabouts crd #2458
Full changelog

cluster-node-tuning-operator

E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) #1069
OCPBUGS-33030: [release-4.13][manual]Reduce number of reboots in offline tests (#1048) #1048
Scheduler plugin: ignore IRQs (#1027) #1027
irqbalance: set banned cpus list to 0 (#1003) #1003
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-38455: Update opentelemetry to mitigate CVE #365
Full changelog

cluster-samples-operator

OCPBUGS-49663: add shannon and aroyoredhat as owners #599
OCPBUGS-21198: update k8s.io/apiserver version #589
Full changelog

cluster-storage-operator

OCPBUGS-33468: Fix problem-detector proxy setting #473
Full changelog

cluster-update-keys

OCPBUGS-43886: keys: Update Red Hat keys to use SHA256 signatures #67
Full changelog

cluster-version-operator

OCPBUGS-45332: deps: bump golang.org/x/net to 0.31.0 #1121
Full changelog

console

OCPBUGS-45292: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14573
OCPBUGS-44356: Application creation fail when manually entering input scaling value in local setup #14509
OCPBUGS-45197: Edit the secret and add the Chinese in the web-console, garbled characters will be displayed #14552
OCPBUGS-44585: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14497
OCPBUGS-36557: Increase login flow state paramater length/entropy #14483
OCPBUGS-42951: The filepath including leading slash makes error during parsing devfile using Gitlab #14383
OCPBUGS-41594: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14263
OCPBUGS-35259: fix vCenter cluster being empty #13952
OCPBUGS-32147: Bump graphql-go to v1.3.0 #13922
OCPBUGS-33978: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13872
OCPBUGS-34342: Fix PipelineRun Logs tab navigation #13890
OCPBUGS-24395: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13405
OCPBUGS-33777: restrict Masthead logo to max-height to 60px #13860
OCPBUGS-33749: Add visual connector between VMs and non VMs workloads #13857
OCPBUGS-33382: Routes created by devfiles do not always use HTTPS #13827
OCPBUGS-33650: fix issues with Edit Route form #13851
OCPBUGS-32500: PipelineRuns in Console show wrong status or load indefinitely #13780
OCPBUGS-31077: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13683
OCPBUGS-31595: Fix operands list endpoint. #13714
Full changelog

console-operator

OCPBUGS-18674: Reset console operator’s conditions #894
Full changelog

coredns

OCPBUGS-38431: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #129
Full changelog

docker-builder

OCPBUGS-43295: Buildah dependency bump to 1.29.5 #460
OCPBUGS-43191: runc library bump to 1.1.12 #439
OCPBUGS-48836: skipping some unit tests to avoid failures as they are duplicate #434
OCPBUGS-48655: Add new team members to the OWNERS file #431
Replace ‘coreydaley’ with ‘sayan-biswas’ #407
BUILD-854: Add adambkaplan as approver #405
Full changelog

etcd

OCPBUGS-32920: Revert “Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… #266
OCPBUGS-31653: Rebase etcd 3.5.13 openshift 4.13 #262
ETCD-537: Revert “bump build root go1.20” #263
Full changelog

haproxy-router

OCPBUGS-43095: add duplicate_te_header_total metric #626
OCPBUGS-34673: Properly handle rewrite-target annotation #608
OCPBUGS-33911: Reject routes with MD5 certs #600
OCPBUGS-33448: Count active services before setting weight to 1 #594
OCPBUGS-33280: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #591
Full changelog

hyperkube, pod

OCPBUGS-41678: mount-utils: treat syscall.ENODEV as corrupted mount #2083
OCPBUGS-37280: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2045
OCPBUGS-28660: UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1875
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1938
OCPBUGS-31505: Update to kubernetes 1.26.15 #1930
Address CVE #14
Full changelog

hypershift

OCPBUGS-39184: fix: bump github.com/IBM/go-sdk-core/v5 #4627
OCPBUGS-41515: set Konnectivity cipher suites #4284
NO-JIRA: hack: make the e2e script generic #4202
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36064: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #74
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36070: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #123
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-36010: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #43
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-36076: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 #90
Full changelog

ibmcloud-machine-controllers

OCPBUGS-36082: Bump dependency for CVE #56
Full changelog

insights-operator

OCPBUGS-36475: properly encode the URL for the advisor links (#962) (#965) #962
OCPBUGS-33449: anonymization - externalIP can be nil (#931) (#933) (#935) #931
OCPBUGS-31991: bump golang.org/x/net version (#927) #927
Full changelog

ironic

OCPBUGS-48146, OCPBUGS-48595: Bump jinja2 to 3.0.1-6.el9.2 #626
OCPBUGS-43952, OCPBUGS-43960: Bump python-waitress [4.13] #608
OCPBUGS-37764, OCPBUGS-39384: Include fixes for CVE-2024-44082 #585
OCPBUGS-38509: set min version for python3-webob #557
OCPBUGS-33374: bump werkzeug #543
OCPBUGS-34898: bump jinja2 #538
OCPBUGS-37116: Update eventlet version #525
OCPBUGS-32363: [4.13] remove unused prometheus-exporter #488
OCPBUGS-32387: Use unix sockets by default for reverse proxy communication #476
Full changelog

ironic-agent

OCPBUGS-39384: Include fixes for CVE-2024-44082 #164
OCPBUGS-38509: set webob and bump werkzeug #152
Full changelog

kube-rbac-proxy

OCPBUGS-31987: CVE-2023-45288 [4.13] #107
Full changelog

kubevirt-csi-driver

“OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #35
Full changelog

machine-api-operator

OCPBUGS-43856: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1304
OCPBUGS-32015: Fix zone tag value reconciliation for vSphere machines #1225
OCPBUGS-31994: Update x/net to v0.25.0 #1245
NO-JIRA: [release-4.13] Fix data race conditions in unit tests #1254
Full changelog

machine-config-operator

OCPBUGS-44206: Panic seen in CI job for MCC pod #4680
OCPBUGS-38372: Revert “MCD-pull: run after network-online.target in Azure” #4527
OCPBUGS-38295: daemon/update: disable systemd unit before overwriting #4522
OCPBUGS-37783: Openshift uncordoned compute-node that was intentionally cordoned #4507
OCPBUGS-37160: MCD-pull: run after network-online.target in Azure #4474
OCPBUGS-36782: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4464
OCPBUGS-32208: Run resolv-prepender entirely async #4314
OCPBUGS-33327: make verify should use MCO’s kube version #4352
Full changelog

machine-os-images

OCPBUGS-54172: Change rhcos release browser url #60
Full changelog

multus-cni

OCPBUGS-28020: Fix SAST scan issues for multus-cni-container [4.13] #224
Full changelog

nutanix-machine-controllers

OCPBUGS-20976: bump golang.org/x/net to v0.17.0 #86
Full changelog

oauth-apiserver

OCPBUGS-31996: bump x/net to 0.24.0 #112
Full changelog

oc-mirror

changes the owners file (#1012) #1012
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1025) #1025
Bump version to include v5.11.0 of go-git (#823) #823
Full changelog

openshift-apiserver

OCPBUGS-32446: bump(x/net) to v0.23.0 #430
Full changelog

openshift-controller-manager

OCPBUGS-48656: Add new team members to the OWNERS file #362
[release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency #326
OCPBUGS-41952: Add adambkaplan as approver #335
Full changelog

openstack-machine-api-provider

OCPBUGS-34422: Ensure portSecurity is correctly set in the Instance Ports #119
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-46924, OCPBUGS-46931, OCPBUGS-47311: x/net bump to v0.34.0 [release-4.13] #942
OCPBUGS-47507: CRD upgrade existing CR validation fix (#3442) #924
NO-ISSUE: [release-4.13] Backport e2e fixes #876
OCPBUGS-42146: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #871
OCPBUGS-38254: [CARRY] perform operator apiService certificate validity checks directly #836
OCPBUGS-38608: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #843
OCPBUGS-32856: bump go-jose to v2.6.3 #780
OCPBUGS-35241: Unblock CI #772
Full changelog

operator-marketplace

OCPBUGS-49430: Upgrade golang.org/x/net [release-4.13] #590
OCPBUGS-32074: update golang.org/x/net for CVE-2023-45288 #566
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-38264: [release-4.13] Bump OVSDBTimeout and make it configurable #2289
OCPBUGS-37119: EgressIP: Reload certificates for the grpc heatlhcheck server #2226
OCPBUGS-35100: [release-4.13] ipv6+all protocols conntrack flush #2200
OCPBUGS-34669, SDN-4186: Introduce a validating webhook for ovnkube-node #2053
OCPBUGS-29865: CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding #2095
OCPBUGS-33730: Improves service iptables efficiency on start up #2172
OCPBUGS-32988: Bumping OVS #2143
OCPBUGS-33421: [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2130
OCPBUGS-33218: [release-4.13] OVN bump to 23.06.1-112 #2153
OCPBUGS-28983, OCPBUGS-30920: Update netpol namespace address sets usage to the old ways #2097
Full changelog

powervs-block-csi-driver

OCPBUGS-36094: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #91
OCPBUGS-33638: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 #82
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36104: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 #76
Full changelog

powervs-machine-controllers

OCPBUGS-41980: Update go.mod to fix CVE - 4.13 #87
Full changelog

telemeter

OCPBUGS-34829: fix issuer check during JWT authentication 4.13 #540
Full changelog

tests

OCPBUGS-53285: Add/remove team members to the OWNERS file for Builds #29608
OCPBUGS-53297: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token #29610
OCPBUGS-52584: Use payload pullspec for image info test #29592
OCPBUGS-37921: Removes dependency on samples operator images #29007
OCPBUGS-35053: updated timeout to 3 seconds to account for network timing issues #28862
OCPBUGS-36501: test/extended: skip etcd leader change check on hypershift #28922
OCPBUGS-35857: Use centos7 tag instead of latest for cmd images tests #28895
OCPBUGS-33985: Provide SCC access via RBAC #28835
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github