Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.11-x86_64

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
  • upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
• Informing jobs
  • aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
  • aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
  • azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
  • gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
  • metal-ipi-sdn-bm Failed (3 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

• 4.13.10 (changes) - S S S S
• 4.13.9 (changes) - Failed
• 4.13.8 (changes) - Failed
• 4.13.7 (changes) - Failed
• 4.13.6 (changes) - Failed
• 4.13.4 (changes) - Failed
• 4.13.2 (changes) - Success
• 4.13.1 (changes) - Success
• 4.13.0 - Failed
• 4.12.32 (changes) - Failed
• 4.12.31 (changes) - S S S
• 4.12.30 (changes) - Failed
• 4.12.29 (changes) - Success
• 4.12.27 (changes) - Failed
• 4.12.24 (changes) - Failed
• 4.12.18 (changes) - Success
• 4.12.17 (changes) - Success
• 4.12.16 (changes) - Failed

Upgrades to:

• 4.14.0-rc.4 (changes) - Success
• 4.14.0-rc.3 (changes) - Success
• 4.14.0-rc.2 (changes) - Failed
• 4.14.0-rc.1 (changes) - Failed
• 4.14.0-rc.0 (changes) - S F S S S
• 4.13.45 (changes) - Failed
• 4.13.31 (changes) - Failed
• 4.13.29 (changes) - Success
• 4.13.18 (changes) - Success
• 4.13.16 (changes) - Success
• 4.13.15 (changes) - Failed
• 4.13.14 (changes) - Failed
• 4.13.13 (changes) - Failed
• 4.13.12 (changes) - F F S S S F

---

Loading changelog, this may take a while ...

Changes from 4.13.0

Created: 2023-08-31 16:41:38 +0000 UTC

Image Digest: sha256:e1c2377fdae1d063aaddc753b99acf25972b6997ab9a0b7e80cfef627b9ef3dd

Release 4.13.11 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2023-08-29-102305

Components

• Kubernetes upgraded from 1.26.3 to 1.26.7
• Red Hat Enterprise Linux CoreOS upgraded from 413.92.202305041429-0 to 413.92.202308210212-0 (diff)

Rebuilt images without code change

• agent-installer-csr-approver git 6160d183 sha256:e2082ed174072e71435611a4805ed6832fb42861e42a7bf675a3b2de41cbd8ab
• agent-installer-orchestrator git 6160d183 sha256:ba7c701881c61d370afac63145ce2da775f6bc725cd58213781b4a47cf8c2db5
• alibaba-cloud-controller-manager git b5200baa sha256:aa5a8c7ed32771a2bfa5a31c3fb4e5d5ffc997b79cf73e4379886525cb176adf
• alibaba-machine-controllers git 4c0f96a6 sha256:9318a5c7785679df61210df5225293b3072af0eb7566d4d17e3a05d23973e11f
• aws-cloud-controller-manager git 946daa07 sha256:2c3b58cc936f549383b7308d379c8c534e2c72efa9b896c08129796765e49e95
• cluster-autoscaler git c58c53bf sha256:6edc769dde4effaea5a1b439d02a4d4f277d6fd21099888106edd407093517f3
• cluster-bootstrap git ee908b6b sha256:cb59c1e9dceb57ba6fe468a26bc9d32e0439a655d4954dc0e8eb35d5dd27bda2
• cluster-capi-operator git ce1c9a35 sha256:5e444e7e7212eaa0d8dcba4bd3fb695ffdc13571fd8a9bb8ee355fd8f09982d8
• cluster-csi-snapshot-controller-operator git 97b486cb sha256:d97f98b1e4849837c0d87bb1c31688e8ee90c577ef0387698b4e73bc944c5cbe
• cluster-image-registry-operator git 3ed61e2b sha256:40d751c499838abe79e6490f4e2f70075a24e88b9b89451ed780331c95c961b2
• cluster-kube-storage-version-migrator-operator git 9f475980 sha256:a5b9aa311829214f31da58bf3b747deddad206efa594c03bfe4033047386a29a
• cluster-machine-approver git ce66cd54 sha256:cbc247e602020d57ed9a8bfcd73b170322829e6d1e1effb18214880e3c563dd6
• cluster-openshift-controller-manager-operator git 9a8aba8c sha256:6dea9cc000b11bc45f9fcc903950f847a507a0a188add38c5a5f5741e2a46946
• cluster-platform-operators-manager git 471a8068 sha256:6b7dfcbacf59ee1513e4f73f132acd3334c3d5aa2d09193b5d0a4b869e13966d
• configmap-reloader git 9adad592 sha256:69311c6ac7faba2110c9f1efd3c5140042a928f7701b303f8acbc4d0631e238c
• coredns git 5560e4ad sha256:550ebebef790e9968fde5c2f52e86dd134367e47464313ed8e75fe020632c692
• csi-driver-manila-operator git e540ced4 sha256:b764fa7f28cd17a382d0ccdfa10b00e399bfb15e5473a680acbd1bab22287f56
• csi-driver-nfs git 2b914c21 sha256:611d6e43120e47489f8403b980dcb30692c5bb1b0278077ed6df56f65d3b3550
• csi-driver-shared-resource-operator git 318c84a5 sha256:cb294eac2099497ca89ad2eeff70cdb06ec6957675fcc3d7c8dc56f768fa1022
• docker-registry git f414ba73 sha256:8a9d3350f576688e9e3a82bf9e81a69ae9f66216641bf0c5db35a1b8587458a8
• driver-toolkit git d719bdcf sha256:f04368a12caf33c399b5d46bca2b179bb6e7183ac85842342dc899e578c032cb
• gcp-machine-controllers git 38ddff06 sha256:48d8c7477af67ad6b6cea923ded427965416f87e9b7995aa6a2f841db8143b86
• ibmcloud-cluster-api-controllers git d221afa4 sha256:90be20febffda827e9c1899ddb9b304c3c11e68264c6baeb32bc60a0d03ac33d
• k8s-prometheus-adapter git b2e40105 sha256:bc2e6bfc4f4dc7674dbfd08f005dc0c19372d030fb1a27590cad7a2f2b75dada
• keepalived-ipfailover git 04659348 sha256:224c008b9b9cc32a33e0a8f2ba25892ec9be6835c43471bb7097ecccc066b30e
• kube-state-metrics git 4b969848 sha256:003407ddaf4d30339a316ce6a951ce0ea3615ba5ce8501d5f10cc6ee748d0eca
• kube-storage-version-migrator git bad104d1 sha256:7c7da95865257b7a2b776e4d08498de33bf1a3deb9409824af5769da32d557ba
• kubevirt-cloud-controller-manager git ee2033ec sha256:8ac233a9b240b573c27f04053b5dfd0b2c905b356661e6a0fa7d234c58bc55e0
• kubevirt-csi-driver git efa0b943 sha256:fe35f8d9bafe5b4ddda18a9386854f683cf43d0498ec023e6ba293b743160aa9
• libvirt-machine-controllers git e55e92c1 sha256:952d8c8c96c83bc57b07f756bcbf14daa6465d08d459086b801cf31fff14237b
• machine-image-customization-controller git 87651668 sha256:48d9c5279d7436d8228eb11d27e20c674c247ee45db869329bd0db8b3514a25f
• machine-os-content sha256:af0adec7aa2b4574e28ca1153695da428a580f252d4cb2807db6bf51988e911b
• machine-os-images git b14856ff sha256:acea001d2ed9a82f96d528dd13c3b60ff8b9283924f1abb2167b196ad96033cc
• must-gather git 5eca0cb6 sha256:c7ba6e80b1914b8399679117588e008a7417d74931be592a9f5a4a740089d07c
• network-metrics-daemon git e72c8ad1 sha256:42073525882ce1556bdb61040906435a3e8829845828d20b73287b23eefbcc25
• nutanix-machine-controllers git be43191e sha256:163d72fca51fdaf0a681042ae1c77dfd6636e72bceafd4a43a5a5beea1660ab7
• oauth-apiserver git 41c2dfea sha256:0324c3f4b8831aed262dc7a7ed88bc74cd9b59290e094804e303921936b06492
• oauth-server git b841149f sha256:b48e825b47dd3aec8161db836d29132fb10b462aa5f006f8b57c8a7985fb3063
• olm-rukpak git 66b3e551 sha256:00b56969ea474a9307ea6cd59292882fc75f358ac30f8ea96f6c156da2e2d2f5
• openshift-apiserver git 0b827682 sha256:f9b63247a5e1e94af8651fd57f452269da216ad6b55c01d05461869f64f39d4f
• openshift-state-metrics git 7beb8807 sha256:34026a12425fdffe238e05081edcc4e1b7d61dfd5d9fe69023e32ff2bf65ad20
• openstack-cinder-csi-driver-operator git 14fcca54 sha256:9d610e37767847f5f96db01c27c252c483329587afbc8692358f69f6b2215a33
• operator-marketplace git d569c22c sha256:506e303b9cffc93ba061486ba2caea4bfb4cb29dc306b693b0905163439d2539
• ovirt-csi-driver git f21b470f sha256:b432f5c53dddd0eb73eba6e46cef0e7e5a70dbd594bafa010e316cba08ce86ed
• ovirt-machine-controllers git 22d89b3f sha256:61e827d8e36cb7e180e8ac7d0de6219d7b662e008fbf5f3a89828a86a5a0d993
• powervs-cloud-controller-manager git 13036562 sha256:19ee965ffe5c55457c45a263fbf83a1eee654ddf64894b36c6742c2a7da90884
• powervs-machine-controllers git bf49c5c1 sha256:cc9336ec515e716a0397710b2732cd369c63b7cc4ac8eff5a667a8b6513d0e09
• prom-label-proxy git b501d5e2 sha256:29abf4df12bcff5193959ffc6918634b88fd2ba8f9d512a53402ae784bd19848
• prometheus git 8279148f sha256:2572eff86dc111203c5de6ce7325cc061ddb4bd737e09a1639313f3a9ed07a9c
• prometheus-alertmanager git f44d574d sha256:c8bb0a1430d21684cacce5e4300a6fd6ed53d76f5fb90e43d5f832bae0637f28
• rhel-coreos sha256:b97e5afdb73043727f78f09f6a6f369d07125d0306e9cc42eae519e4cb826736
• rhel-coreos-extensions sha256:5d8d582ff84ab3e4ae8e79fa5b61506beb1fbeaa4d88ea67d4e5cc40146df099
• vsphere-cluster-api-controllers git 24e08ddf sha256:9ea704686cd1f41c1e1071eef2935198bc9d98287c033c97fd43565d4d91d9d8
• vsphere-csi-driver-operator git ab111cf6 sha256:fa80a9ef039e6b1f631606b1418bc23824dc9f7155e839c218ab3de75ec842ac

agent-installer-api-server

• MGMT-15150: Use same installer binary for all platform types (#5346) #5346
• MGMT-13947: Revert assisted boot reporter service (#5292) #5292
• OCPBUGS-13083: Support by-path root device hints (#5213) #5213
• OCPBUGS-13356: Fix ‘vendor’ root device hint evaluation (#5204) #5204
• Full changelog

agent-installer-node-agent

• OCPBUGS-15557: vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) #565
• OCPBUGS-14848: Filter out hidden devices (#559) #559
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-16377: [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #31
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #55
• Full changelog

apiserver-network-proxy

• OCPBUGS-10187: Updating ose-apiserver-network-proxy images to be consistent with ART #30
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-15512: Pass right SGs for IsExternallyManaged on creation #468
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-13811: Volume unmount repeats after successful unmount, preventing pod delete #225
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-13036: 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 #220
• OCPBUGS-13828: assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #224
• Full changelog

aws-machine-controllers

• OCPBUGS-13092: Bump x/net package to v0.9.0 #70
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-12555: Update builder to OCP4.13/go1.19 #164
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-17145: Increase service idle max timeout to 100 minutes #81
• OCPBUGS-13952: Update x/net package to v0.8.0 #68
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-12557: Bump x/net package to v0.10.0 #278
• Full changelog

azure-disk-csi-driver

• OCPBUGS-16318: 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 #44
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #86
• Full changelog

azure-file-csi-driver

• OCPBUGS-16321: 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 #30
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #67
• Full changelog

azure-machine-controllers

• OCPBUGS-13053: Bump x/net to v.0.7.0 #61
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-13865: vSphere Add ova sha query; additional debugging #7198
• OCPBUGS-16640: [release-4.13] Update azure cli version to 2.49.0 #7357
• OCPBUGS-16777: update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 #7410
• CORS-2764: AWS Shared VPC Backport [release-4.13] #7362
• OCPBUGS-17104: [release-4.13] vsphere terraform bump #7383
• OCPBUGS-17397: backport openstack UPI for ansible 2.10 #7385
• OCPBUGS-15290: GCP: ic: improve project validation #7361
• OCPBUGS-16390: Allow override of networkType #7344
• OCPBUGS-16673: Fix timing issue between network services #7358
• OCPBUGS-14711: Convert Rendezvous IPv6 address to canonical format #7237
• OCPBUGS-16066: Use correct SELinux label. Make rename atomic. #7315
• OCPBUGS-14599: Log additional host info at warning level #7233
• OCPBUGS-15866: Use the same names for public LB in IPI and UPI Azure #7302
• OCPBUGS-16124: azure: skip LB creation when not needed #7322
• OCPBUGS-13812: ic: azure: validate diskTypes in AzureStack #7195
• OCPBUGS-15230: azure: skip NSG creation when BYO vnet #7263
• OCPBUGS-15591: [release-4.13] gcp: add confidential compute support for boostrap TF #7298
• OCPBUGS-15187: images: installer: add xz to the container #7260
• OCPBUGS-14867: Shorten SNO installation duration by releasing CPC lease #7241
• OCPBUGS-13752: Set AdditionalTrustBundle in override when mirroring not enabled #7191
• OCPBUGS-15289: gcp use preconfigured private zone for installation #7271
• OCPBUGS-14916: Replace with govc docker image and fix ibmcli folder permission issue #7245
• OCPBUGS-13323: update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 #7248
• OCPBUGS-14860: GCP XPN Private Cluster Fails with no Public Zone #7240
• OCPBUGS-13765: Support /dev/disk/by-path root device hints #7193
• OCPBUGS-14171: Ignore IAM Roles that the Installer is not authorized to access #7210
• OCPBUGS-11530: [release-4.13] add project filter to gcp usage api requests #7045
• OCPBUGS-10493: Nutanix Hostname of the VM is not set when using DHCP network config #7016
• OCPBUGS-14027: GCP XPN: Pass instance service acct in manual mode #7204
• OCPBUGS-11775: Log additional info when status is pending-user-action #7090
• OCPBUGS-13086: Bootstrap on aws should have same metadata service type as on other nodes #7162
• Full changelog

baremetal-machine-controllers

• OCPBUGS-16084: Fix Metal3Remediation CRD install order #194
• Full changelog

baremetal-operator

• OCPBUGS-17365: Trigger reconcile on Secret change #295
• OCPBUGS-16013: Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 #292
• OCPBUGS-17229: Set minimum TLS version for webhook to 1.2 #294
• OCPBUGS-13374: Do not try to update images for nodes in transient states #282
• OCPBUGS-13927: Deleting unmanaged BMH get stuck fix #281
• OCPBUGS-12363: release-4.13: Use same settings for provisioner and controller logs #275
• OCPBUGS-13082: Allow by-path devices in root device hints #277
• Full changelog

baremetal-runtimecfg

• OCPBUGS-17423: Don’t render config with incomplete unicast peer list #267
• OCPBUGS-14487: Support IPv6 VIP for setup with multipe IPv6 addresses #259
• OCPBUGS-15101: Use machine-config state instead of comparing roles #261
• OCPBUGS-13066: Update x/net and parent dependencies #246
• OCPBUGS-13230: Verify kubelet version in upgrade check #248
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-13527: Bump x org deps 4.13 #1422
• OCPBUGS-16055: mcs cert: account for environments that use IP directly #1500
• OCPBUGS-16193: reboot: set ignition version to 3.1 #1508
• OCPBUGS-16172: Add tls-server-name when property exists in kubeconfig #1506
• handle the error case of node retrieval while waiting for reboot #1484
• bring some cert rotation helpers back into 4.13 #1474
• OCPBUGS-14249: preserve explicit release image in ClusterVersion #1435
• OCPBUGS-14180: Remove closed centos7 registry from newapp unit tests #1432
• Full changelog

cloud-credential-operator

• OCPBUGS-12565: CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] #543
• OCPBUGS-13692: Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #538
• Full changelog

cloud-network-config-controller

• OCPBUGS-15856: Azure: Handle already existing IP configurations #116
• OCPBUGS-14635: increase GCP egress ip capacity to 100 from 10 #113
• OCPBUGS-13127: sync CloudPrivateIpConfig when node is missing #106
• Full changelog

cluster-authentication-operator

• OCPBUGS-15258: Correctly link oauth apiserver ServiceMonitor with its Service #617
• OCPBUGS-13763: dont log tokens #618
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-17098: update x/net dependency to 0.7.0 #280
• OCPBUGS-16768: add nutanix labels that should be ignored #278
• Full changelog

cluster-baremetal-operator

• OCPBUGS-15472: Limit role binding to openshift-machine-api namespace #346
• Full changelog

cluster-capi-controllers

• OCPBUGS-12567: Bump x/net package to v0.10.0 #176
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-17101: update x/net dependency to 0.7.0 #269
• OCPBUGS-15746: Alibaba platforms should not be upgradeable #260
• OCPBUGS-13011: Add beta topology labels flag to Azure cloud node manager #250
• Full changelog

cluster-config-operator

• CORS-2766: AWS Shared VPC API Bump [release-4.13] #337
• OCPBUGS-16164: retire LatencySensitive featureset #329
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-15330: Fix lint issue #222
• OCPBUGS-15161: Surface cpms vs machine diff #218
• OCPBUGS-14024: Check ProviderSpec before generating MachineInfo #211
• OCPBUGS-13888: fix double machine creation on stale cache #208
• Full changelog

cluster-dns-operator

• OCPBUGS-11449: Enable topology-aware hints if, and only if, nodes have zones #367
• OCPBUGS-15225: Add support for protocolStrategy API field to enable force_tcp configuration #372
• Full changelog

cluster-etcd-operator

• OCPBUGS-16804: reset snapshot default counts to avoid file already lo… #1080
• OCPBUGS-12487: update golang.org/x/net/http2 #1075
• Full changelog

cluster-ingress-operator

• OCPBUGS-17733: [release-4.13] remove shared VPC cred request #972
• NE-1341: Add support for AWS shared VPC in another account #966
• OCPBUGS-15434: [release-4.13] Fix invalid DNS name formatting for GCP #958
• OCPBUGS-15515: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #955
• OCPBUGS-12743: bump controller-runtime to fix the multi namespace cache indexing #921
• OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #935
• OCPBUGS-12918: gatewayclass: Update for OSSM 2.4 API change #917
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-17081: make webhook connection failure a warning in log #1532
• OCPBUGS-13763: dont log jwt tokens #1499
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-13093: Bump golang.org/x/net #20
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-11353: AWS should not use external-cloud-volume-plugin post CSI migration #734
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-14651: disable debug pporf with unauthenticated port for 4.13 #480
• Full changelog

cluster-monitoring-operator

• OCPBUGS-11016: Node Exporter ignores network interface under name “cali[a-f0-9]*” #1927
• OCPBUGS-16023: Add the trusted CA bundle in UWM Prometheus pods #2041
• OCPBUGS-15469: Limit the value of GOMAXPROCS on node-exporter to 4. #2021
• OCPBUGS-14251: Add new web console usage metrics #1976
• OCPBUGS-12488: go.mod: update golang.org/x/net to v0.7.0 #1957
• OCPBUGS-13007: Add build number to rules #1964
• OCPBUGS-13397: Uncomment cluster:vsphere_infrastructure_failure_domains:max #1962
• Full changelog

cluster-network-operator

• OCPBUGS-17721: Enhance check controller to remove old check objects #1950
• OCPBUGS-17457: prevent creation of multiple cni-sysctl-allowlist-ds pods #1936
• OCPBUGS-11539: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1774
• OCPBUGS-15977: Add logic to pick the openshift-sdn shims from right directories #1880
• OCPBUGS-15962: Add logic to pick the ovn-k8s-cni-overlay binary from the right dir #1877
• Change rhel7/8 to rhel8/9 #1869
• OCPBUGS-15476: Add release version annotation to whereabouts-reconciler #1853
• OCPBUGS-15139: Remove nodeSelector for architecture in whereabouts daemonset #1840
• OCPBUGS-14871: Do not rely on ControlPlaneTopology do determine if running in HyperShift #1837
• OCPBUGS-13809: Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1813
• OCPBUGS-14367: High API requests due to allowlist and operconfig reconcilers running too often #1824
• OCPBUGS-11750: fix reconciliation process of the allowlist controller #1793
• OCPBUGS-13155: HyperShift: Support HostedControlPlane node selector #1802
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-17845: deflake ht aware test (#763) #763
• OCPBUGS-17794: rps: use default rps mask kernel API (#760) #760
• Improve render error handling (#755) #755
• nto:tuned: remove sched_min_granularity_ns settings (#726) #726
• Fix a race in e2e test rollback.go code (#740) #740
• E2E: Add memory manager sanity test case (#573) (#695) #573
• e2e: latency testing: increase the expected threshold (#709) #709
• Do not rollback settings on TuneD exit (#704) #704
• Switch to rslave/HostToContainer volume mount propagation (#705) #705
• e2e: perf-prof: disable truncating gomega output (#707) #707
• OCPBUGS-14895: Do not fail creating cgroups if they exist already (#684) #684
• OCPBUGS-14331: Fix updating numa core siblings map in GetCpuSiblings function (#669) #669
• render: remove uid from render-sync target (#594) (#609) #594
• Remove cpu-quota.crio.io: disable annotation (#670) #670
• Add PerformanceProfiles to ‘oc adm must-gather’ (#657) #657
• OCPBUGS-11709: pao e2e: skip hugepages and numa tests properly (#643) #643
• e2e: Fix RPS test for multi-worker cluster (#648) #648
• OCPBUGS-12978 use WatchNamespace() when deleting Profiles (#645) #645
• OCPBUGS-11336: pao e2e: fix update test suit timeouts (#642) #642
• Address CVE-2022-41723 (#633) #633
• OCPBUGS-13148: Configure cpu balancing cpu sets for all clusters (#647) #647
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-13763: dont log tokens #541
• Full changelog

cluster-policy-controller

• OCPBUGS-14091: [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources #116
• OCPBUGS-13731: external template and route Informer #112
• Full changelog

cluster-samples-operator

• OCPBUGS-15756: Update Jenkins and Jenkins Agent Base image versions #505
• OCPBUGS-14598: Updating to use Jenkins 4.13 images #503
• Full changelog

cluster-storage-operator

• OCPBUGS-15378: decrease severity for MultipleDefaultStorageClasses alert #383
• OCPBUGS-13004: OCPBUGS-13005: 4.13: bump prometheus #367
• Full changelog

cluster-update-keys

• Adding the new CI Signer public key #50
• Full changelog

cluster-version-operator

• OCPBUGS-16613: Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 #948
• Full changelog

console

• OCPBUGS-16668: Dynamic plugin translation support for plurals broken #13041
• OCPBUGS-17181: Creation of GH webhook and attaching it to repo while importing from git using PAC #13060
• OCPBUGS-16040: fix bug where binary secret values are corrupted on edit and add test coverage #13048
• OCPBUGS-16659: Fix RTE in bridge. #13038
• OCPBUGS-16158: “Duplicate RoleBinding” leads to “Unsupported value” error #13008
• OCPBUGS-16434: Fix stop PLR option #13031
• OCPBUGS-14265: Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12865
• OCPBUGS-13641: Do not fetch catalog sources on CSV or Subscription details pages. #12811
• OCPBUGS-16421: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13030
• OCPBUGS-15998: Upload JAR file does not work if the Cluster Samples Operator is disabled #12992
• OCPBUGS-15810: only show pipelines doc link for downstream #12981
• OCPBUGS-15982: get Kamelets from the camel-k-operator namespace as well #12988
• OCPBUGS-16244: Fix operator backed catalog page when copied CSVs disabled #13019
• OCPBUGS-15194: Remove tech preview badge from Pipeline repository pages #12916
• OCPBUGS-10326: re-enable operator-install-single-namespace.spec.ts test #12653
• OCPBUGS-15848: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12976
• OCPBUGS-15890: Use proxy with web socket connection and monitoring dashboard #12978
• OCPBUGS-15720, OCPBUGS-15721, OCPBUGS-15722: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12963
• OCPBUGS-14426: account for single object in status.conditions instead… #12875
• OCPBUGS-14267: Add Pipeline metrics unsupported empty page #12864
• OCPBUGS-15410: Add Git Repository (PAC) doesn’t setup GitLab and Bitbucket configuration correct #12936
• OCPBUGS-15787: Remove access review check for PipelineResource from Pipeline section #12967
• OCPBUGS-15228: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12937
• [release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading #12931
• OCPBUGS-14166: Fixed Make Serverless Form Error #12857
• OCPBUGS-14336: use service port name instead targetPort in the Pipeline Event listener route #12870
• OCPBUGS-14310: Could not import multiple resources via JSON (while YAML supports this) #12868
• OCPBUGS-15335: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12927
• OCPBUGS-15130: Helm Repository “Edit” button results in 404 #12909
• OCPBUGS-14189: Corrected Labels for resolving the bug related to the Create Route Checkbox #12858
• OCPBUGS-13642: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12812
• OCPBUGS-11974: Add page title to Devconsole pages #12844
• OCPBUGS-15465, OCPBUGS-15481: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore and disable operator-uninstall test #12949
• OCPBUGS-14943: visiting Configurations page returns error Cannot read… #12897
• OCPBUGS-12785: Project admin can update and view subscription from operator details page #12780
• OCPBUGS-14574: only copy workload annotations to debug pod #12879
• OCPBUGS-14258: Add vSphere cluster field. #12862
• OCPBUGS-14195: Topology UI doesn’t recognize Serverless Rust function for proper UI icon #12860
• OCPBUGS-10527: When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox #12658
• OCPBUGS-14165: propagate labels to pipeline resources #12856
• OCPBUGS-13959: Wait with CRD/model translation until i18n bundles are loaded #12842
• OCPBUGS-13783: fix runtime error on OperatorHub details pages #12830
• OCPBUGS-12770: fix buildconfig form ns #12776
• OCPBUGS-12850: add support for minimal status of tekton #12784
• OCPBUGS-12740: update helm release empty state text #12773
• Full changelog

console-operator

• OCPBUGS-14039: Backport #774 and #763 #779
• OCPBUGS-12461: Add new PrometheusRule to collect metrics for cluster-monitoring-operator #758
• OCPBUGS-12722: Proper cleanup of route sync conditions #759
• Full changelog

container-networking-plugins

• OCPBUGS-17728: Default CNI binaries to RHEL 8 #117
• Add rhel9 binary #102
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-15973: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 #202
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-12484, OCPBUGS-12527, OCPBUGS-14505: Mitigating CVE-2022-41723 #140
• Full changelog

csi-external-attacher

• OCPBUGS-16637: [release-4.13] UPSTREAM: 415: fix: CVE-2022-41723 #56
• Full changelog

csi-external-provisioner

• OCPBUGS-16609: [release-4.13] UPSTREAM: 880: Bump golang.org/x/net #67
• Full changelog

csi-external-resizer

• OCPBUGS-16639: [release-4.13] UPSTREAM: 268: Bump golang.org/x/net #143
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-16638: [release-4.13] UPSTREAM: 815: updated go module files #103
• Full changelog

csi-livenessprobe

• OCPBUGS-16600: [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 #46
• Full changelog

csi-node-driver-registrar

• OCPBUGS-16608: [release-4.13] UPSTREAM: 284: Bump golang.org/x/net #48
• Full changelog

docker-builder

• OCPBUGS-15606: Add the git-lfs package #352
• OCPBUGS-10002, OCPBUGS-8159, OCPBUGS-8191: Mitigate CVE-2023-26054 #348
• Full changelog

egress-router-cni

• Add rhel9 binary #71
• Full changelog

etcd

• OCPBUGS-15859: [4.13] Rebase openshift/etcd to 3.5.9 #204
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-12603: Bump x/net package to v0.10.0 #32
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-12604: Bump x/net package to v0.10.0 #196
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-16331: 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 #38
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #80
• Full changelog

haproxy-router

• OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #485
• Full changelog

hyperkube, pod

• OCPBUGS-17187: Update to Kubernetes 1.26.7 #1649
• OCPBUGS-17145: Increase service idle max timeout to 100 minutes #1657
• OCPBUGS-15866: remove readiness check for cache exclusion #1625
• OCPBUGS-15866: UPSTREAM: <drop>: hack/update-vendor.sh #1637
• OCPBUGS-15246: Bump to k8s 1.26.6 #1610
• OCPBUGS-8738: bump apiserver-lib-go #1611
• OCPBUGS-14589: [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1596
• OCPBUGS-13747: 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy #1580
• OCPBUGS-14048: Bump to k8s 1.26.5 #1586
• Full changelog

hypershift

• chore(deps): update rhtap references (release-4.13) #2921
• Revert “HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS” #2931
• chore(deps): update rhtap references (release-4.13) #2904
• Update RHTAP references (release-4.13) #2866
• HOSTEDCP-1046: Add ImageDigestMirrorSet to Config API comment #2870
• HOSTEDCP-1046: Add IDMS to the list of valid config manifests #2863
• Update RHTAP references (release-4.13) #2833
• HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS #2839
• OCPBUGS-15743: Let getMachinesForNodePool return machines ordered by creation Timestamp #2767
• 4.13: Add management cluster KAS network policy #2786
• Leader election config update. #2801
• OCPBUGS-16160: fix deletion bug when hostedzone is already deleted #2813
• HOSTEDCP-1061: [release-4.13] Implement dedicated request serving nodes for HostedClusters #2809
• Update RHTAP references (release-4.13) #2816
• OCPBUGS-16057: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2798
• OCPBUGS-14862 Improve clarity around hypershift operator permissions #2810
• HOSTEDCP-1101: Add snyk-secret HO RHTAP scripts #2799
• OCPBUGS-16125: [release-4.13] Update vendored dependencies #2797
• OCPBUGS-15774: autoscaling balance similar groups #2805
• OCPBUGS-15965: Reject VPCE Connections during VPCE Service cleanup #2789
• Update RHTAP references (release-4.13) #2751
• OCPBUGS-15171: Skip AWS resource deletion for ‘Unknown’ OIDC state #2701
• HOSTEDCP-1008: Add NodePoolTransitionSeconds metric #2758
• OCPBUGS-15281: Check OwningIngressController also in Labels #2715
• HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2748
• HOSTEDCP-1073: enforce blocked rollout of HCP #2735
• HOSTEDCP-1003: Set AWS conditions only for AWS platform #2670
• OCPBUGS-15268 properly handle user CA bundle not existing #2710
• OCPBUGS-15301: [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2696
• OCPBUGS-14030: Include default ingress CA in root CA bundle #2599
• OCPBUGS-14490: Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2645
• OCPBUGS-14801: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2666
• HOSTEDCP-1048: Add impersonate feature to the CLI and document HC dump procedure #2681
• OCPBUGS-14872: Honor global ingress configuration LoadBalancer type on AWS #2677
• OCPBUGS-14436: Add ClusterUpgradeDuration metric #2637
• HOSTEDCP-1009: Allow external-dns image to be set in install cli #2652
• Red Hat Trusted App Pipeline update hypershift-operator-release-413 #2641
• Red Hat Trusted App Pipeline purge hypershift #2640
• OCPBUGS-13735: Cluster-api SA can’t create events and fix permissions wrongly included #2610
• OCPBUGS-14242: Remove external-dns –events flag #2621
• OCPBUGS-14155: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2613
• OCPBUGS-13399: Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2552
• HOSTEDCP-1010: Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2611
• HOSTEDCP-947: Increases default etcd PV size to 8Gi #2569
• HOSTEDCP-926: Send metric when HO/CPO decide to skip cloud resource deletion #2594
• HOSTEDCP-975: Backport nodepools metrics #2601
• Red Hat Trusted App Pipeline update hypershift #2603
• OCPBUGS-13594: Sync proxy TrustedCA to guest cluster #2556
• fix nil deref in DefaultWorkerSecurityGroupID check #2574
• OCPBUGS-13215: Let the aws endpoint to use the hypershift owned SG #2529
• OCPBUGS-13497: Add internal/external elb tags to subnets #2553
• OCPBUGS-13531: Clean up existing VPC endpoint connections #2554
• Stop triggering rollout on labels/taint change #2548
• Fixes HCCO reconcile error for kubevirt csi driver #2538
• Fix kubevirt csi daemonset reconcile loop #2542
• HOSTEDCP-980: Include HostedClusterDegraded in hypershift_hostedclusters_failure_conditions metric #2525
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-12612: Update x/net to v0.7.0 #52
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-16378: 4.13: UPSTREAM: 157: K8S and grpc package upgrade #40
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #73
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-14073: UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #24
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-12616: Bump x/net to v0.7.0 #23
• Full changelog

insights-operator

• OCPBUGS-14773: extend configmap gatherer to get gateway-mode-config (#788) (#791) #788
• [release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) #794
• OCPBUGS-14318: gather PDBs only from openshift namespaces (#786) #786
• OCPBUGS-12618: update golang.org/x/net version (#775) #775
• Full changelog

ironic

• OCPBUGS-17837: Fix PROVISIONING_MACS unbound #393
• OCPBUGS-17158: [4.13] Update packages with latest bugfix #388
• OCPBUGS-17551: Expand regex for fcos/okd packages list #390
• Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. #383
• OCPBUGS-13587: Add python-flask dependency #372
• OCPBUGS-14135: ironic.conf.j2: Bump min_command_interval to 30 on SCOS #378
• Bug OCPBUGS-13334: Bump ironic version to include fix to OCPBUGS-13334. #366
• Full changelog

ironic-agent

• Switch to udevadm command install instead of package [OKD] #83
• “Bug OCPBUGS-15777: Switch to udevadm command install instead of package” #81
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-15734: Binary should be compiled on rhel9 #91
• Full changelog

ironic-static-ip-manager

• OCPBUGS-14315: Flush addresses on provisioning interface with global scope only #36
• Full changelog

kube-proxy, sdn

• OCPBUGS-15977: Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir #558
• OCPBUGS-15977: Dockerfile changes to build both rhel8 and rhel9 binaries #557
• OCPBUGS-14278: fix possible concurrent map read/write #550
• OCPBUGS-12234: CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) #536
• OCPBUGS-13150: EgressNetworkPolicy DNS resolution does not fall back to TCP #540
• Full changelog

kube-rbac-proxy

• OCPBUGS-12513: go.mod: update golang.org/x/net to v0.7.0 #68
• Full changelog

kuryr-cni, kuryr-controller

• Bug OCPBUGS-16340: Fix np retry #738
• OCPBUGS-15457: Remove unneeded grpcio dependencies from RPM #735
• OCPBUGS-13427: KuryrPort cleanup: Fix issue of subport not found #726
• Full changelog

machine-api-operator

• OCPBUGS-12626: Update golang.org/x/net dependency #1148
• Full changelog

machine-config-operator

• OCPBUGS-18076: daemon: create /etc/systemd/network directory on node #3888
• OCPBUGS-17769: Agent-based install process the container machine-config-controller will be oom #3868
• OKD-174: Dockerfile: OKD: Reenable extensions image on SCOS #3845
• OCPBUGS-17430: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3841
• OCPBUGS-17163: daemon: Always replace binary #3833
• OCPBUGS-16888: daemon: Make binary writing idempotent #3826
• OCPBUGS-16888: daemon: no need to reexec when target and source rhel version is same #3824
• OCPBUGS-16622: daemon: Copy matching binary to host, re-exec with it #3812
• OCPNODE-1717: Update config node spec while explicitly updating the cgroups mode #3793
• 4.13: Revert rhel9 binaries builds #3802
• OCPBUGS-14459: daemon: Remove noisy log message #3723
• OCPBUGS-15580: 4.13: Dockerfile: update rhel7 nmstate pin #3764
• OCPBUGS-15463: Minor fix to support protectKernelDefaults field in Kubelet Config #3757
• 4.13: Dockerfile: use proper rhel9 image #3771
• 4.13: use rhel9 builder for daemon binary #3760
• OCPBUGS-13311: daemon: write certs in firstboot-complete path #3702
• OCPBUGS-13404, OCPBUGS-14298: Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 #3716
• OCPBUGS-14850: Allow userfaultfd syscall to be used by unprivileged users #3743
• OCPBUGS-13974: MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default #3714
• OCPBUGS-13138: daemon: Don’t traverse /run/ostree/auth.json symlink #3697
• OCPBUGS-11302: Fix regex dot in coredns config file #3659
• OCPBUGS-12784, OCPBUGS-4476: keepalived/ingress: change healthcheck script #3687
• OCPBUGS-12919: The MCD has a non-functional pivot command that should be removed #3690
• OCPBUGS-10966: configure-ovs: support UUID in vlan.parent #3639
• OCPBUGS-13312: daemon: event only on actual OS updates #3703
• Full changelog

multus-admission-controller

• OCPBUGS-13709: Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 #68
• Full changelog

multus-cni

• Add rhel9 binary for multus #169
• OCPBUGS-8398: Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] #154
• OCPBUGS-13759: Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) #161
• OCPBUGS-13814: Fix multus to support CNI plugin which does not create interface [backport 4.13] #163
• Full changelog

multus-networkpolicy

• OCPBUGS-12641: CVE-2022-41723: Update vendors to fix dependabot alerts #28
• Full changelog

multus-route-override-cni

• Add rhel9 binary #37
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-4417: Denormalize IP name before checking if pod is alive [Backport 4.13] #168
• OCPBUGS-15956: Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #138
• Bug 16002: Change default binary to RHEL8 image #144
• Restores RHEL specific binary build in dockerfile and updates to rhel9/8 #139
• Full changelog

network-interface-bond-cni

• Add rhel9 binary #56
• OCPBUGS-11881: Ignore missing links during delete command #49
• Full changelog

network-tools

• Dockerfile: move to RHEL9 base image #83
• Full changelog

nutanix-cloud-controller-manager

• Updating ose-nutanix-cloud-controller-manager images to be consistent with ART #15
• Full changelog

oauth-proxy

• OCPBUGS-16805: Updating golang-github-openshift-oauth-proxy images to be consistent with ART #261
• Full changelog

oc-mirror

• OCPBUGS-18106: manual cherrypick (#684) #684
• OCPBUGS-17998: fix: ICSP with incorrect mirror path (#685) #685
• OCPBUGS-17453: Fix “ OCI index found, but accept header does not support OCI indexes (#677) #677
• OCPBUGS-16372: A variety of changes needed for correct operation with multi… (#661) #661
• OCPBUGS-13871: fix: changes on help info content (#654) #654
• Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) #637
• Removes Ross and adds Jeremy in the OWNER file (#645) #645
• OCPBUGS-13591, OCPBUGS-13592: Limit the nested repository path while mirroring the images (#635) #635
• Full changelog

openshift-controller-manager

• OCPBUGS-11091: mount build.Spec.Source.ConfigMaps for custom builder images #257
• Full changelog

openstack-machine-api-provider

• OCPBUGS-12630: Address CVE-2022-41723 #71
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-17791: opm: always serve pprof endpoints, improve server allocations (#1129) #540
• Introduce DOWNSTREAM_OWNERS file #538
• Allow cpb to be statically compiled / exempt from FIPS compliance #519
• OCPBUGS-15589: fix dynamic conversion webhook #499
• OCPBUGS-13321: OCPBUGS-1684: Optimize certificate generation #488
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-14653: set upgrade condition of operator to false #118
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-17910: Emit node events only when retry failure #1825
• OCPBUGS-17503: [release-4.13] libovsdb: give monitor setup time to process than normal transactions #1807
• OCPBUGS-13175: Check the status of a pod before trying to get its ip #1724
• OCPBUGS-15496: Fix default GW IPs retrieval #1738
• OCPBUGS-17001: Inactivity probe for ovndb connection #1796
• OCPBUGS-17120: Bump OVN to 23.06-23.06.0-51 #1790
• OCPBUGS-16121: [release-4.13]: Delete address sets after acls that reference them #1762
• OCPBUGS-15368: [release-4.13]: initial pods are not wired for hybrid overlay #1721
• OCPBUGS-15651: Improve syncNodes to remove stale data #1731
• OCPBUGS-15586: [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector #1745
• Dockerfile: build both RHEL8 and RHEL9 shims #1748
• OCPBUGS-15585: [release-4.13] Fix egressFirewall create error handling #1733
• OCPBUGS-14492: Backport OVN component templates for NodePort services. #1709
• OCPBUGS-15608: Nuke old .rhel9 Dockerfiles #1711
• OCPBUGS-13745: [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1675
• OCPBUGS-15372: [release-4.13] Fix network policy to work with long namespace names #1722
• OCPBUGS-14979: Validate port before deleting conntrack flow #1712
• OCPBUGS-15140: Fix stale SNAT entries for completed pods #1715
• OCPBUGS-14482: Dockerfiles: sync RHEL9 dockerfiles to regular unused ones #1695
• OCPBUGS-12864: Drop packets were not properly SNATed #1662
• OCPBUGS-13170: Fix bug that resulted in routes not be restored to a new vnic #1668
• OCPBUGS-13598: Call SyncEndpoints from AddService #1672
• OCPBUGS-12725: [release-4.13] Use loadbalancer.Name as client index #1660
• Full changelog

powervs-block-csi-driver

• Openshiftrelease 4.13 #41
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #34
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-12672: update golang.org/x/net #237
• Full changelog

prometheus-node-exporter

• OCPBUGS-14274: Upgrade golang.org/x/net to v0.10.0 to fix the CVE #127
• Full changelog

route-controller-manager

• OCPBUGS-14276: Bump k8s to 1.26.5 #26
• Full changelog

service-ca-operator

• OCPBUGS-16806: Updating ose-service-ca-operator images to be consistent with ART #214
• Full changelog

telemeter

• OCPBUGS-14418: Update golang.org/x/net to lastest version #463
• Full changelog

tests

• OCPBUGS-16241: Update permission to incl. watch for helmchartrepositories for console users #28054
• OCPBUGS-16164: allow cluster-config-operator to manage featuregate upgrade block #28050
• OCPBUGS-15892: remove references to registry.centos.org #28031
• OCPBUGS-15746: Skip CCM upgradable condition on AlibabaCloud #28025
• OCPBUGS-7762: Bump with latest openshift/kubernetes at 4.13 #27973
• OCPBUGS-5029: [release-4.13] OpenStack: Restore in-tree cinder provisioner tests #27827
• OCPBUGS-14342: Increase timeout in sysctl allowlist test #27956
• OCPBUGS-13840: Add missing error check in sysctl allowlist test #27929
• OCPBUGS-14127: Move from registry.centos.org to quay.io #27948
• OCPBUGS-12700: update-etcd-scaling-test #27892
• Full changelog

thanos

• OCPBUGS-12663: go.mod: update golang.org/x/net to v0.7.0 #109
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-17103: update x/net dependency to 0.7.0 #46
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-16398: Rebase v3.0.2 #83
• OCPBUGS-13563: Fix node resync master #79
• OCPBUGS-13162: Rebase against 3.0.1 version #77
• Full changelog

vsphere-problem-detector

• OCPBUGS-14571: Check all storage classes including CSI storageclasses #120
• OCPBUGS-14098: In UPI clusters VSphere platform could be nil #118
• OCPBUGS-14085: Log vcenter version information #117
• Full changelog

---

View changelog in Markdown or change previous release: 4.13.104.13.94.13.84.13.74.13.64.13.54.13.44.13.34.13.24.13.14.13.04.13.0-rc.84.13.0-rc.74.13.0-rc.64.13.0-rc.54.13.0-rc.44.13.0-rc.34.13.0-rc.24.13.0-rc.04.12.704.12.694.12.684.12.674.12.664.12.654.12.644.12.634.12.624.12.614.12.604.12.594.12.584.12.574.12.564.12.554.12.544.12.534.12.524.12.514.12.504.12.494.12.484.12.474.12.464.12.454.12.444.12.434.12.424.12.414.12.404.12.394.12.384.12.374.12.364.12.354.12.344.12.334.12.324.12.314.12.304.12.294.12.284.12.274.12.264.12.254.12.244.12.234.12.224.12.214.12.204.12.194.12.184.12.174.12.164.12.154.12.144.12.134.12.124.12.114.12.104.12.94.12.84.12.74.12.64.12.54.12.44.12.34.12.24.12.14.12.04.12.0-rc.84.12.0-rc.74.12.0-rc.64.12.0-rc.54.12.0-rc.44.12.0-rc.34.12.0-rc.24.12.0-rc.14.12.0-rc.04.11.594.11.584.11.574.11.564.11.554.11.544.11.534.11.524.11.514.11.504.11.494.11.484.11.474.11.464.11.454.11.444.11.434.11.424.11.414.11.404.11.394.11.384.11.374.11.364.11.354.11.344.11.334.11.324.11.314.11.304.11.294.11.284.11.274.11.264.11.254.11.244.11.234.11.224.11.214.11.204.11.194.11.184.11.174.11.164.11.154.11.144.11.134.11.124.11.114.11.104.11.94.11.84.11.74.11.64.11.54.11.44.11.34.11.24.11.14.11.04.11.0-rc.74.11.0-rc.64.11.0-rc.54.11.0-rc.44.11.0-rc.34.11.0-rc.24.11.0-rc.14.11.0-rc.04.11.0-fc.34.11.0-fc.24.11.0-fc.0───4.19.0-0.nightly-2024-12-11-0726544.19.0-0.nightly-2024-12-11-0012494.19.0-0.nightly-2024-12-10-1614394.19.0-0.nightly-2024-12-10-1109334.19.0-0.nightly-2024-12-10-0404154.19.0-0.nightly-2024-12-09-1958144.19.0-0.nightly-2024-12-09-1144434.19.0-0.nightly-2024-12-06-1019304.19.0-0.nightly-2024-12-05-2226524.19.0-0.nightly-2024-12-04-0312294.19.0-0.nightly-2024-12-03-0437014.19.0-0.nightly-2024-12-02-0457054.19.0-0.nightly-2024-12-01-2148574.19.0-0.nightly-2024-12-01-1442294.19.0-0.nightly-2024-11-30-001633───4.19.0-0.ci-2024-12-11-0630434.19.0-0.ci-2024-12-11-0030434.19.0-0.ci-2024-12-10-1830414.19.0-0.ci-2024-12-10-1230404.19.0-0.ci-2024-12-10-0630394.19.0-0.ci-2024-12-10-0030384.19.0-0.ci-2024-12-09-1830374.19.0-0.ci-2024-12-09-1230374.19.0-0.ci-2024-12-09-0630364.19.0-0.ci-2024-12-09-0030364.19.0-0.ci-2024-12-08-1830364.19.0-0.ci-2024-12-08-123036───4.18.0-0.nightly-2024-12-11-0533574.18.0-0.nightly-2024-12-10-2215384.18.0-0.nightly-2024-12-10-1405464.18.0-0.nightly-2024-12-10-0616384.18.0-0.nightly-2024-12-09-2238024.18.0-0.nightly-2024-12-09-1758284.18.0-0.nightly-2024-12-09-1043384.18.0-0.nightly-2024-12-05-1913554.18.0-0.nightly-2024-12-05-1036444.18.0-0.nightly-2024-12-04-1130144.18.0-0.nightly-2024-12-04-0103114.18.0-0.nightly-2024-12-03-1746394.18.0-0.nightly-2024-12-03-0450064.18.0-0.nightly-2024-11-30-1417164.18.0-0.nightly-2024-11-29-2037484.18.0-0.nightly-2024-11-27-162407───4.18.0-0.ci-2024-12-11-0921584.18.0-0.ci-2024-12-11-0321584.18.0-0.ci-2024-12-10-2121584.18.0-0.ci-2024-12-10-1521584.18.0-0.ci-2024-12-10-0921584.18.0-0.ci-2024-12-10-0321584.18.0-0.ci-2024-12-09-2121584.18.0-0.ci-2024-12-09-1521584.18.0-0.ci-2024-12-09-0909014.18.0-0.ci-2024-12-09-030901───4.17.0-0.nightly-2024-12-11-0105314.17.0-0.nightly-2024-12-10-1822124.17.0-0.nightly-2024-12-10-1330084.17.0-0.nightly-2024-12-10-0843064.17.0-0.nightly-2024-12-09-1356534.17.0-0.nightly-2024-12-08-1617574.17.0-0.nightly-2024-12-06-0127054.17.0-0.nightly-2024-12-04-1922574.17.0-0.nightly-2024-12-04-0523554.17.0-0.nightly-2024-12-03-1833574.17.0-0.nightly-2024-12-03-0825234.17.0-0.nightly-2024-12-02-1750164.17.0-0.nightly-2024-12-02-1035244.17.0-0.nightly-2024-12-02-0251264.17.0-0.nightly-2024-12-01-1349274.17.0-0.nightly-2024-11-30-1420344.17.0-0.nightly-2024-11-29-1224044.17.0-0.nightly-2024-11-28-2011024.17.0-0.nightly-2024-11-28-1323414.17.0-0.nightly-2024-11-28-0736314.17.0-0.nightly-2024-11-28-0026464.17.0-0.nightly-2024-11-27-180232───4.17.0-0.ci-2024-12-11-0823024.17.0-0.ci-2024-12-11-0118564.17.0-0.ci-2024-12-10-1918564.17.0-0.ci-2024-12-10-1318564.17.0-0.ci-2024-12-10-0718564.17.0-0.ci-2024-12-10-0118564.17.0-0.ci-2024-12-09-1634214.17.0-0.ci-2024-12-09-1034214.17.0-0.ci-2024-12-09-0434214.17.0-0.ci-2024-12-08-2234214.17.0-0.ci-2024-12-08-115823───4.16.0-0.nightly-2024-12-11-0558124.16.0-0.nightly-2024-12-10-1819104.16.0-0.nightly-2024-12-10-1406084.16.0-0.nightly-2024-12-10-0749004.16.0-0.nightly-2024-12-10-0201284.16.0-0.nightly-2024-12-09-1657234.16.0-0.nightly-2024-12-06-0728484.16.0-0.nightly-2024-12-05-1111034.16.0-0.nightly-2024-12-05-0622194.16.0-0.nightly-2024-12-04-1926204.16.0-0.nightly-2024-12-04-0242044.16.0-0.nightly-2024-12-02-1835364.16.0-0.nightly-2024-12-02-1114164.16.0-0.nightly-2024-12-02-0258204.16.0-0.nightly-2024-11-29-1940114.16.0-0.nightly-2024-11-29-1441544.16.0-0.nightly-2024-11-27-1651504.16.0-0.nightly-2024-11-27-120557───4.16.0-0.ci-2024-12-11-0929594.16.0-0.ci-2024-12-11-0329594.16.0-0.ci-2024-12-10-1942294.16.0-0.ci-2024-12-10-1215544.16.0-0.ci-2024-12-10-0502014.16.0-0.ci-2024-12-09-2302014.16.0-0.ci-2024-12-09-1702014.16.0-0.ci-2024-12-09-101903───4.15.0-0.nightly-2024-12-11-1040504.15.0-0.nightly-2024-12-11-0403514.15.0-0.nightly-2024-12-10-1906214.15.0-0.nightly-2024-12-09-1546504.15.0-0.nightly-2024-12-06-1018494.15.0-0.nightly-2024-12-05-1413534.15.0-0.nightly-2024-12-05-040454───4.15.0-0.ci-2024-12-11-1120304.15.0-0.ci-2024-12-10-1922224.15.0-0.ci-2024-12-10-1322224.15.0-0.ci-2024-12-10-0017054.15.0-0.ci-2024-12-09-1817054.15.0-0.ci-2024-12-09-1217054.15.0-0.ci-2024-12-07-073615───4.14.0-0.nightly-2024-12-11-0956444.14.0-0.nightly-2024-12-11-0330164.14.0-0.nightly-2024-12-10-1843044.14.0-0.nightly-2024-12-06-2109444.14.0-0.nightly-2024-12-06-0424334.14.0-0.nightly-2024-12-05-0239284.14.0-0.nightly-2024-12-04-165319───4.14.0-0.ci-2024-12-11-0611144.14.0-0.ci-2024-12-10-2300274.14.0-0.ci-2024-12-10-1700274.14.0-0.ci-2024-12-06-1857424.14.0-0.ci-2024-12-06-1257424.14.0-0.ci-2024-12-06-0341094.14.0-0.ci-2024-12-05-142818───4.13.0-0.nightly-2024-12-08-1610434.13.0-0.nightly-2024-11-30-0419004.13.0-0.nightly-2024-11-23-1013054.13.0-0.nightly-2024-11-20-0919214.13.0-0.nightly-2024-11-19-0924194.13.0-0.nightly-2024-11-18-041323───4.13.0-0.ci-2024-12-10-0156154.13.0-0.ci-2024-12-09-1540304.13.0-0.ci-2024-12-08-1612014.13.0-0.ci-2024-12-06-1507024.13.0-0.ci-2024-12-06-084137───4.12.0-0.nightly-2024-12-11-0326344.12.0-0.nightly-2024-12-04-0119504.12.0-0.nightly-2024-12-02-1832084.12.0-0.nightly-2024-12-02-0443584.12.0-0.nightly-2024-11-28-0022544.12.0-0.nightly-2024-11-27-1038174.12.0-0.nightly-2024-11-27-0039294.12.0-0.nightly-2024-11-25-1001394.12.0-0.nightly-2024-11-20-1247564.12.0-0.nightly-2024-11-18-021414───4.12.0-0.ci-2024-12-11-0327464.12.0-0.ci-2024-12-10-0036454.12.0-0.ci-2024-12-09-1528044.12.0-0.ci-2024-12-03-0259324.12.0-0.ci-2024-12-02-1735344.12.0-0.ci-2024-12-02-0430344.12.0-0.ci-2024-11-28-1234364.12.0-0.ci-2024-11-28-023247───4.11.0-0.nightly-2024-07-06-0140574.11.0-0.nightly-2024-07-01-0855474.11.0-0.nightly-2024-04-20-1326214.11.0-0.nightly-2024-04-15-1237064.11.0-0.nightly-2024-04-15-0346274.11.0-0.nightly-2024-03-18-1654324.11.0-0.nightly-2024-03-12-2229304.11.0-0.nightly-2024-02-01-0446274.11.0-0.nightly-2024-01-19-1107024.11.0-0.nightly-2024-01-15-0229494.11.0-0.nightly-2024-01-10-203533───4.11.0-0.ci-2024-11-14-2201374.11.0-0.ci-2024-11-14-1432224.11.0-0.ci-2024-09-18-0735584.11.0-0.ci-2024-09-17-2036254.11.0-0.ci-2024-07-30-2032534.11.0-0.ci-2024-07-23-1708064.11.0-0.ci-2024-07-01-0910384.11.0-0.ci-2024-06-07-1944004.11.0-0.ci-2024-06-05-1627184.11.0-0.ci-2024-06-01-042714───4.18.0-ec.44.18.0-ec.34.18.0-ec.24.18.0-ec.14.18.0-ec.0

Source code for this page located on github