4.13.44

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.44-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
- gcp-ovn-rt-upgrade-4.13-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded (3 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.23, 4.12.24, 4.12.25, 4.12.27, 4.12.28, 4.12.29, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.40, 4.12.41, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.47, 4.12.48, 4.12.49, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.13.10, 4.13.11, 4.13.12, 4.13.13, 4.13.14, 4.13.15, 4.13.17, 4.13.19, 4.13.21, 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.3, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.34, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.4, 4.13.40, 4.13.5, 4.13.6, 4.13.7, 4.13.8, 4.13.9

Upgrades to:

4.14.33 (changes) - S F S
4.14.32 (changes) - F S S S
4.14.31 (changes) - S S F
4.14.30 (changes) - Success
4.14.0-0.nightly-2024-07-11-204310 (changes) - Success
4.14.0-0.nightly-2024-07-11-135819 (changes) - Success
4.14.0-0.nightly-2024-07-11-072947 (changes) - Success
4.14.0-0.nightly-2024-07-11-034901 (changes) - Success
4.14.0-0.nightly-2024-07-10-205051 (changes) - Failed Success
4.14.0-0.nightly-2024-07-10-161926 (changes) - Success
4.14.0-0.nightly-2024-07-10-100854 (changes) - Success
4.14.0-0.nightly-2024-07-10-034428 (changes) - Success
4.14.0-0.nightly-2024-07-09-225539 (changes) - Failed Success
4.14.0-0.nightly-2024-07-09-184556 (changes) - Success
4.14.0-0.nightly-2024-07-09-131152 (changes) - Success
4.14.0-0.nightly-2024-07-09-052704 (changes) - Success
4.14.0-0.nightly-2024-07-08-205954 (changes) - F F S
4.14.0-0.nightly-2024-07-08-170047 (changes) - Success
4.14.0-0.nightly-2024-07-08-131625 (changes) - Success
4.14.0-0.nightly-2024-07-08-013010 (changes) - Success
4.14.0-0.nightly-2024-07-07-182244 (changes) - Failed Success
4.14.0-0.nightly-2024-07-07-144409 (changes) - Success
4.14.0-0.nightly-2024-07-07-102908 (changes) - Success
4.14.0-0.nightly-2024-07-07-054325 (changes) - Failed Success
4.14.0-0.nightly-2024-07-06-234205 (changes) - Failed Success
4.14.0-0.nightly-2024-07-06-183730 (changes) - Success
4.14.0-0.nightly-2024-07-06-121938 (changes) - Success
4.14.0-0.nightly-2024-07-06-062656 (changes) - F F S
4.14.0-0.nightly-2024-07-05-233038 (changes) - Failed Failed
4.14.0-0.nightly-2024-07-05-195000 (changes) - Success
4.14.0-0.nightly-2024-07-05-145251 (changes) - Success
4.14.0-0.nightly-2024-07-05-083345 (changes) - Success
4.14.0-0.nightly-2024-07-05-033708 (changes) - Success
4.14.0-0.nightly-2024-07-04-213156 (changes) - Success
4.14.0-0.nightly-2024-07-04-152929 (changes) - Success
4.14.0-0.nightly-2024-07-04-081327 (changes) - Failed Success
4.14.0-0.nightly-2024-07-04-022311 (changes) - Success
4.14.0-0.nightly-2024-07-03-014226 (changes) - Success
4.14.0-0.nightly-2024-07-02-144817 (changes) - Success
4.14.0-0.nightly-2024-07-02-085132 (changes) - Success
4.14.0-0.nightly-2024-07-02-035711 (changes) - Failed Success
4.14.0-0.nightly-2024-07-01-231407 (changes) - Failed Success
4.14.0-0.nightly-2024-07-01-185610 (changes) - Success
4.14.0-0.nightly-2024-07-01-143310 (changes) - Success
4.14.0-0.nightly-2024-07-01-032911 (changes) - Success
4.14.0-0.nightly-2024-06-30-211527 (changes) - Success
4.14.0-0.nightly-2024-06-30-160129 (changes) - Success
4.14.0-0.nightly-2024-06-30-091827 (changes) - Failed Success
4.14.0-0.nightly-2024-06-30-033056 (changes) - Success
4.14.0-0.nightly-2024-06-29-231623 (changes) - Success
4.14.0-0.nightly-2024-06-29-165019 (changes) - Success
4.14.0-0.nightly-2024-06-29-114107 (changes) - Failed Success
4.14.0-0.nightly-2024-06-29-055445 (changes) - F F S
4.14.0-0.nightly-2024-06-28-223407 (changes) - Success
4.14.0-0.nightly-2024-06-28-073501 (changes) - Success
4.14.0-0.nightly-2024-06-27-194655 (changes) - Success
4.14.0-0.nightly-2024-06-27-135224 (changes) - Success
4.14.0-0.nightly-2024-06-26-153544 (changes) - Success
4.14.0-0.nightly-2024-06-26-115018 (changes) - Success
4.14.0-0.nightly-2024-06-26-010324 (changes) - F F S
4.14.0-0.nightly-2024-06-25-193927 (changes) - Success
4.14.0-0.nightly-2024-06-25-003745 (changes) - Success
4.14.0-0.nightly-2024-06-24-182440 (changes) - Success
4.14.0-0.nightly-2024-06-24-110225 (changes) - Success
4.14.0-0.nightly-2024-06-23-234712 (changes) - Success
4.14.0-0.nightly-2024-06-22-052248 (changes) - Success
4.14.0-0.nightly-2024-06-22-010138 (changes) - Success
4.14.0-0.nightly-2024-06-21-195942 (changes) - F F S
4.14.0-0.nightly-2024-06-21-144119 (changes) - Success
4.14.0-0.nightly-2024-06-21-083833 (changes) - Success
4.14.0-0.nightly-2024-06-21-025515 (changes) - F F S
4.14.0-0.nightly-2024-06-20-201725 (changes) - Success
4.14.0-0.nightly-2024-06-20-095116 (changes) - Failed Success
4.14.0-0.nightly-2024-06-20-030041 (changes) - Failed Success
4.14.0-0.nightly-2024-06-19-070718 (changes) - Failed Success
4.14.0-0.nightly-2024-06-18-192941 (changes) - Success
4.14.0-0.nightly-2024-06-18-114150 (changes) - Success
4.14.0-0.nightly-2024-06-18-070913 (changes) - Success
4.14.0-0.nightly-2024-06-17-112430 (changes) - Success
4.14.0-0.nightly-2024-06-14-162955 (changes) - Success
4.14.0-0.nightly-2024-06-14-081235 (changes) - Success
4.14.0-0.nightly-2024-06-14-013131 (changes) - Success
4.14.0-0.nightly-2024-06-13-172547 (changes) - Failed Success
4.14.0-0.ci-2024-07-11-205648 (changes) - Success Failed
4.14.0-0.ci-2024-07-11-145648 (changes) - Success Success
4.14.0-0.ci-2024-07-11-080004 (changes) - F S S
4.14.0-0.ci-2024-07-11-001621 (changes) - F S F S
4.14.0-0.ci-2024-07-10-181621 (changes) - Success Success
4.14.0-0.ci-2024-07-10-121621 (changes) - Success Success
4.14.0-0.ci-2024-07-10-012653 (changes) - S F F S
4.14.0-0.ci-2024-07-09-112705 (changes) - S F F F F
4.14.0-0.ci-2024-07-09-052705 (changes) - Success Success
4.14.0-0.ci-2024-07-08-214352 (changes) - S F F S
4.14.0-0.ci-2024-07-08-154352 (changes) - Success Success
4.14.0-0.ci-2024-07-08-094352 (changes) - Success Success
4.14.0-0.ci-2024-07-08-031232 (changes) - F S S
4.14.0-0.ci-2024-07-07-173444 (changes) - S F S
4.14.0-0.ci-2024-07-07-113444 (changes) - Success Success
4.14.0-0.ci-2024-07-06-221821 (changes) - S F F F F
4.14.0-0.ci-2024-07-06-094515 (changes) - S F F F F
4.14.0-0.ci-2024-07-06-031358 (changes) - S F S
4.14.0-0.ci-2024-07-05-211358 (changes) - Success Success
4.14.0-0.ci-2024-07-03-143401 (changes) - S F S
4.14.0-0.ci-2024-07-03-083401 (changes) - Success Success
4.14.0-0.ci-2024-07-03-014249 (changes) - S F S
4.14.0-0.ci-2024-07-02-194249 (changes) - Success Success
4.14.0-0.ci-2024-07-02-123952 (changes) - S F F S
4.14.0-0.ci-2024-07-02-063952 (changes) - Success Success
4.14.0-0.ci-2024-07-01-193642 (changes) - F F S S
4.14.0-0.ci-2024-07-01-133642 (changes) - Success Success
4.14.0-0.ci-2024-07-01-063214 (changes) - S F S
4.14.0-0.ci-2024-06-30-173840 (changes) - S F F S
4.14.0-0.ci-2024-06-30-105302 (changes) - F S S
4.14.0-0.ci-2024-06-29-083313 (changes) - Success Success
4.14.0-0.ci-2024-06-29-023313 (changes) - Success Success
4.14.0-0.ci-2024-06-28-162512 (changes) - F F S F S
4.14.0-0.ci-2024-06-28-082145 (changes) - F S S
4.14.0-0.ci-2024-06-27-221243 (changes) - F F S S
4.14.0-0.ci-2024-06-27-154308 (changes) - Success Success
4.14.0-0.ci-2024-06-27-090449 (changes) - F S S
4.14.0-0.ci-2024-06-27-000321 (changes) - F F S S
4.14.0-0.ci-2024-06-26-180321 (changes) - S F S
4.14.0-0.ci-2024-06-26-075554 (changes) - S F F S
4.14.0-0.ci-2024-06-25-225223 (changes) - S F S
4.14.0-0.ci-2024-06-25-165223 (changes) - Success Success
4.14.0-0.ci-2024-06-25-021615 (changes) - Success Success
4.14.0-0.ci-2024-06-24-154649 (changes) - S F F F F
4.14.0-0.ci-2024-06-24-094649 (changes) - Success Success
4.14.0-0.ci-2024-06-24-024950 (changes) - F S S
4.14.0-0.ci-2024-06-22-070311 (changes) - Success Success
4.14.0-0.ci-2024-06-22-003401 (changes) - F S F S
4.14.0-0.ci-2024-06-21-180438 (changes) - S F S
4.14.0-0.ci-2024-06-21-111837 (changes) - S F S
4.14.0-0.ci-2024-06-21-051837 (changes) - Success Success
4.14.0-0.ci-2024-06-20-214144 (changes) - S F S
4.14.0-0.ci-2024-06-20-062826 (changes) - S F F F S
4.14.0-0.ci-2024-06-19-232204 (changes) - S F S
4.14.0-0.ci-2024-06-19-172204 (changes) - S F S
4.14.0-0.ci-2024-06-19-104803 (changes) - S F S
4.14.0-0.ci-2024-06-19-044803 (changes) - Success Success
4.14.0-0.ci-2024-06-18-224803 (changes) - F S S
4.14.0-0.ci-2024-06-18-155737 (changes) - S F S
4.14.0-0.ci-2024-06-18-095737 (changes) - Success Success
4.14.0-0.ci-2024-06-18-035737 (changes) - Success Success
4.14.0-0.ci-2024-06-17-190251 (changes) - Success Success
4.14.0-0.ci-2024-06-17-130251 (changes) - Success Success
4.14.0-0.ci-2024-06-17-070251 (changes) - Success Success
4.14.0-0.ci-2024-06-17-010251 (changes) - Success Success
4.14.0-0.ci-2024-06-15-055711 (changes) - S F S
4.14.0-0.ci-2024-06-14-161914 (changes) - S F F F F
4.14.0-0.ci-2024-06-14-095853 (changes) - S F S
4.14.0-0.ci-2024-06-13-174949 (changes) - F F S F F F S
4.13.52 (changes) - Failed
4.13.46 (changes) - Success
4.13.45 (changes) - S S S S

Loading changelog, this may take a while ...

Changes from 4.13.16

Created: 2024-06-13 09:37:10 +0000 UTC

Image Digest: sha256:e58807c46fab369428af73bdfec64ad4b509dcbdb4586694059013c69856e8a5

Release 4.13.44 was created from registry.ci.openshift.org/ocp/release:4.13.0-0.nightly-2024-06-12-074717

Components

Kubernetes upgraded from 1.26.9 to 1.26.15
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202310100714-0 to 413.92.202406110749-0 (diff)

Rebuilt images without code change

alibaba-machine-controllers git 4c0f96a6 sha256:ec3017b250448a7f0a8b5f73c16527e48b2096df145b042bbb795e1d575e5b32
cluster-bootstrap git ee908b6b sha256:d1c52125474b88873cfce2e65353ae79fc5fba7ac35078aeb9c8d08bb36719eb
cluster-update-keys git 5b725937 sha256:5ef2a794638d521041a4b0b647a3ae7fb98fd737972d0f104191eb6f4378c832
configmap-reloader git 9adad592 sha256:e5c8c7cebf34d384d5b64238c081085e83187bb6909b4f207a23d8ca41c5cca3
csi-driver-nfs git 2b914c21 sha256:654969f13ae4916216fe50d94323a594e7a9e7e21636ba518745a4915836ed54
docker-registry git 47a15ac8 sha256:fc217cfca2b56af9155346d9a0e2327de4e09454a42f19e3719bcf5eb34186e9
driver-toolkit git d719bdcf sha256:9e83556fe05a7f0a554b391c648b532c6c1cce1ac84a2c8ff6a4a4b82a05f076
ibmcloud-machine-controllers git bb253a0c sha256:bdc48078d591f58cd530a9462f43f03a5cf628c8a6787187d6bd91ffc85becf0
ironic-machine-os-downloader git ce291779 sha256:6a89e5ef21fe059929aa95850d5ab28e341fadf4b6d5e0f136d48b004cbfa7bf
ironic-static-ip-manager git 4536724a sha256:99913957f3b864c4bcd76663281460e720112199dc8ebb173e0ea283d7f2d50b
kube-storage-version-migrator git bad104d1 sha256:9e3c3209f008a5fe76c88dd6829bee00c76646d164eccf6bef2f14b45bb45632
kubevirt-cloud-controller-manager git ee2033ec sha256:8e8dd1aee72590fa9f60076f246e9316df633981412291b61686d98be9ca3c1f
kuryr-cni git 36754b7b sha256:f3f71acc0faf8d1455185124efa6ec4026dd82521e3ec63f82190bedc6eade70
kuryr-controller git 36754b7b sha256:85f1151c429511c47f9e6d43bfdd223bbdb0940a61c9f848b03a879aef622ac8
libvirt-machine-controllers git d4b7a8ab sha256:4a5e34eb8b210a20d6e875390cbfe056acd2ce14fc0a42016dc0230aac1632de
machine-os-content sha256:4d1e85f2052eb045083709f3d72b5cd4b6c5d2afdb81f6720c4d848b7a94c651
machine-os-images git b14856ff sha256:840b8fd38903bd810ebf7461b84c88eda6acee66103e91eed5726a851fe1a676
multus-route-override-cni git ca3bbec5 sha256:70437b39fb2e601ba7431265757cccd38c76de865ecb1c7fb5b0860973f96a7e
must-gather git 288ef2fc sha256:3a06c837dc1eaaff263ac749ee483988dac3145264c021c8dab25974002ea367
network-interface-bond-cni git 84bda2af sha256:26dcb561860ec312130ac369d76d44aee1d507c78ec68627fe8b1fc755f852f8
network-tools git 073feda1 sha256:81153b28d936bfeb15c65153696a64942cfcc8b69eb8137950209209e49af5db
nutanix-cloud-controller-manager git 4d1c58e2 sha256:3909606fd531a8efe779b4b6318ba4c93c2edca82bddc76e0046a34dc3f753b2
oauth-proxy git 44af5a3a sha256:f8d598452467293dd32bdd7e774d660d6d844b61f5ec3f9a5ed1dab4cab24734
openshift-controller-manager git 385057e5 sha256:9d89bc42eba00551d7917704b23d8fe972d3f694ce632dc18ebde24c3dee671e
openstack-machine-api-provider git 7bce9d67 sha256:b28f32a6cd306f3125b32835dab5559707ea866be5544736355c60e5d2430324
ovirt-machine-controllers git 22d89b3f sha256:c42e9062843904e6106c8234b33d704439ce975bffb9065ad5bb8826cc74a787
prom-label-proxy git b501d5e2 sha256:99c2ea079f2f9ca43ce8aa490d8b5bc98317f0e15a9389ba36badf143d293fdf
rhel-coreos sha256:d0ce18e674a24ceb5b02a9acc388bb273804a85ffdbb6a8aeb7ba04922a57cb4
rhel-coreos-extensions sha256:f615aadacb266c6b7727eec27d068fe7d31253dc229ae64085339587a4f3656c
route-controller-manager git 6667a6cb sha256:3971fa2886c38c055d3537ebfe62528d82aa20eabfeb7e5d6ebf7f6b595664df

agent-installer-api-server

MGMT-17595: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) #6215
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) #6202
MGMT-17541: Replace broken golangci reference (#6196) #6196
NO-ISSUE: replace postgres images as current one disappeared from quay (#6133) #6133
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) #835
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) #829
MGMT-17541: Replace broken golangci reference (#826) #826
Full changelog

agent-installer-node-agent

MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) #706
NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) #700
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) #702
MGMT-17541: Replace broken golangci reference (#697) #697
MGMT-13111: Freeze on 404 Not Found (#628) #628
Full changelog

alibaba-cloud-controller-manager

OCPBUGS-21238: Bump golang.org/x/net to v0.19.0 #43
Full changelog

alibaba-cloud-csi-driver

OCPBUGS-21329: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37
Full changelog

alibaba-disk-csi-driver-operator

OCPBUGS-21428: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #65
Full changelog

apiserver-network-proxy

OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
HOSTEDCP-1323: Merge latest code into 4.14 branch #45
Full changelog

aws-cloud-controller-manager

OCPBUGS-27964: bump go.opentelemetry.io #72
OCPBUGS-20738: Update golang.org/x/net to v0.17.0 #54
Full changelog

aws-cluster-api-controllers

OCPBUGS-32470: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #509
OCPBUGS-20836: bump golang.org/x/net to v0.17.0 #482
Full changelog

aws-ebs-csi-driver

OCPBUGS-33363: [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments #266
OCPBUGS-20939: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #240
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33363: Explicitly reserve 1 attachment for the root disk #307
OCPBUGS-21034: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #281
Full changelog

aws-machine-controllers

OCPBUGS-24563: Reduce metrics cardinality #96
OCPBUGS-21568: Update golang.org/x/net to v0.17.0 #89
Full changelog

aws-pod-identity-webhook

OCPBUGS-32882: Upgrade go-jose module to 2.6.3 #190
OCPBUGS-21331: Upgrade golang/x/net for CVE-2023-39325 #184
NO-ISSUE: Sync OWNERS with team members #177
snyk: exclude vendor/ #172
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-21419: Bump golang.org/x/net to v0.18.0 #94
Full changelog

azure-cluster-api-controllers

OCPBUGS-21503: bump golang.org/x/net to v0.17.0 #288
Full changelog

azure-disk-csi-driver

OCPBUGS-23216: Update to v1.26.7 #63
OCPBUGS-20688: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-20766: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #102
Full changelog

azure-file-csi-driver

OCPBUGS-20862: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
Full changelog

azure-file-csi-driver-operator

OCPBUGS-20964: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #77
Full changelog

azure-machine-controllers

OCPBUGS-29906: Don’t create availability set when using spot instances #104
OCPBUGS-24563: Reduce metrics cardinality #89
OCPBUGS-20758: Bump x/net package to v0.18.0 #83
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-33732: preserve category name when trying to find tag category #8419
OCPBUGS-33062: openstack: Honour worker server group policy #8323
OCPBUGS-32359: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8284
OCPBUGS-22979: IBMCloud: Add eu-es region #7685
OCPBUGS-30629: baremetal: populate customDeploy in advance #8129
OCPBUGS-29627: update RHCOS 4.13 bootimage metadata to 413.92.202402131523-0 #8038
OCPBUGS-30000: [release-4.13] Bump containerd for vulnerability fix #8073
OCPBUGS-28654: Fix depreciated typo #7963
OCPBUGS-27453: baremetal: correct external_http_url for v6-only BMCs #7934
OCPBUGS-23499: update RHCOS 4.13 bootimage metadata to 413.92.202401100947-0 #7920
OCPBUGS-25420: destroy: gcp: fix destroying regional disks #7840
OCPBUGS-23464: Add KMS encryption keys if provided #7746
OCPBUGS-23141: Specify google cloud CLI to version 447.0.0 #7706
OCPBUGS-22939: azure: validation: validate defaultMachinePlatform #7679
OCPBUGS-14551: [vSphere] Upi installation failed due to VMs for master and worker node creation failed #7229
OCPBUGS-19307: Implement workaround to allow SNO installations for OKD/FCOS #7480
Full changelog

baremetal-machine-controllers

OCPBUGS-29822: Extend metal3remediation aggregation role #212
OCPBUGS-21701: Uplift x/net to v0.17.0 #199
Full changelog

baremetal-operator

OCPBUGS-30629: Do not update instance_info and deploy_interface for active nodes #337
OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #321
OCPBUGS-21167: Uplift x/net to v0.17.0 #309
Full changelog

baremetal-runtimecfg

OCPBUGS-26929: Add .snyk file to ignore vendor and test files #295
OCPBUGS-22207: deps: upgrade x/sys #282
OCPBUGS-20081: Increase timeout for bootstrap kubeapi #278
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30288: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1700
OCPBUGS-25418: Add client version in must-gather summary #1635
OCPBUGS-24461: Overwrite template’s namespace with the explicit one #1617
AUTH-443: Add OAuth2 Authorization Code Grant Flow for login #1599
OCPBUGS-22815: regeneratemco: explicitly check for PlatformStatus field #1593
OCPBUGS-20298: Use quay redis image instead docker mysql #1566
Full changelog

cloud-credential-operator

OCPBUGS-32898: Upgrade go-jose module to 2.6.3 #698
OCPBUGS-27912: Resolve all outstanding snyk vulnerabilities #651
NO-JIRA: Removing andrew from OWNERS #644
OCPBUGS-25369: Discover AWS dns suffix from partition and region. #640
OCPBUGS-21367: Upgrade golang/x/net for CVE-2023-39325 #623
snyk: exclude vendor/ #616
Full changelog

cloud-network-config-controller

OCPBUGS-32180: Avoid nil pointer panic while assigning private IP on Azure #139
OCPBUGS-22299: Azure: skip backend pool if attached to an outbound rule #126
Full changelog

cluster-authentication-operator

OCPBUGS-28760: Fix http2 [4.13] #654
AUTH-443: Add openshift-cli-client OAuth Client #641
OCPBUGS-22210: increase timeout for probes #638
Full changelog

cluster-autoscaler

OCPBUGS-31702: add check for taint.value == nil #295
OCPBUGS-30874: Fix unstructured taint parsing in Cluster API provider #289
OCPBUGS-23272: Rebase 4.13 branch onto cluster autoscaler 1.26.4 #268
Full changelog

cluster-autoscaler-operator

OCPBUGS-31992: Update x/net to v0.25.0 #324
OCPBUGS-20770: Bump x/net package to v0.18.0 #299
Full changelog

cluster-baremetal-operator

OCPBUGS-23504: hack for deploying V6-only clusters from dualstack hubs #391
OCPBUGS-23444: Update the deprecated field APIServerInternalIP to APIServerInternalIPs #385
OCPBUGS-20867: Uplift x/net to v0.17.0 #370
Full changelog

cluster-capi-controllers

OCPBUGS-21531: bump golang.org/x/net to v0.17.0 #185
Full changelog

cluster-capi-operator

OCPBUGS-21082: bump golang.org/x/net to v0.17.0 #137
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-21169: Bump golang.org/x/net to v0.18.0 #296
Full changelog

cluster-config-operator

OCPBUGS-28802: Add required PSa labels #404
: OCPBUGS-21269: bump library-go to include switch to HTTP/1.1 #372
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-30156: Never delete a Machine when there’s a single Machine in an index #286
OCPBUGS-21364: Bump golang.org/x/net to v0.17.0 #259
OCPBUGS-20482: fix: e2e: add gcp custom type to test framework #249
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32334: create suitable role and roleBinding for csi-snapshot-webhook #206
OCPBUGS-21461: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #168
Full changelog

cluster-dns-operator

OCPBUGS-11449: Set DNS DaemonSet’s maxSurge value to 10% #366
OCPBUGS-21534: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #390
Full changelog

cluster-etcd-operator

OCPBUGS-31988: update golang x net #1255
OCPBUGS-30248: fix panic in health check timeouts #1217
OCPBUGS-30245: [4.13] Replace nodelister with master nodelister everywhere #1216
OCPBUGS-23572: Add annotation in the etcd-guard static pod for worklo… #1163
OCPBUGS-23106: [4.13] Remove z-upgrades from UpgradeBackupController #1154
Revert “[release-4.13] OCPBUGS-23044: remove revision stability check from bootstrap complet…” #1166
OCPBUGS-22783: relax readiness to local serializable requests #1144
OCPBUGS-23044: remove revision stability check from bootstrap complet… #1151
OCPBUGS-21155: fixing CVE-2023-39325 by updating dependencies #1143
OCPBUGS-20488: prioritize podman pull in etcdctl dl #1136
Full changelog

cluster-image-registry-operator

OCPBUGS-29935: pkg/storage/s3: enable bucket key on encryption settings #1007
OCPBUGS-22126: increase storage account key cache expiration #940
OCPBUGS-20698: mitigate effects of rapid reset #946
Full changelog

cluster-ingress-operator

OCPBUGS-35094: TestHostNetworkPortBinding: Delete t.Parallel() #1082
OCPBUGS-34765: Don’t add clientca-configmap finalizer if deleting #1073
OCPBUGS-34409: desiredRouterDeployment: Set HostPort if needed #1062
OCPBUGS-33990: Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] #1055
OCPBUGS-34476: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1065
OCPBUGS-20781: Bump golang.org/x/net for CVE-2023-44487 #987
OCPBUGS-22402: test/e2e: Don’t use openshift/origin-node #991
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-34062: [4.13] add a controller that reconciles SCCs’ volumes #1677
OCPBUGS-25922: [release-4.13] dashboard: use recording rules for most metrics #1611
: OCPBUGS-24023: Add workload partitioning annotation #1591
: OCPBUGS-20880: bump library-go to include switch to HTTP/1.1 #1573
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-20981: bump golang.org/x/net to v0.17.0 #28
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-27066: bump(library-go)=release-4.13 #788
OCPBUGS-21103: Drop flags removed in k8s 1.26 [4.13] #766
OCPBUGS-21078: Bump deps to address CVE-2023-44487 [4.13] #758
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-27065: bump(library-go)=release-4.13 #528
OCPBUGS-21811: Bump deps to address CVE-2023-44487 #502
Full changelog

cluster-kube-storage-version-migrator-operator

: OCPBUGS-21355: bump library-go to include switch to HTTP/1.1 #97
Full changelog

cluster-machine-approver

OCPBUGS-21447: Bump x/net package to v0.18.0 #213
OCPBUGS-23368: Filter non node CSRs in metrics #210
Full changelog

cluster-monitoring-operator

OCPBUGS-33581: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2344
OCPBUGS-28767: fix generation of telemeter token hash #2305
OCPBUGS-25388: Add RHACM telemetry metric for 4.13 #2203
OCPBUGS-21457: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2146
OCPBUGS-22920: jsonnet: pin commits #2144
OCPBUGS-22842: [release-4.13] add RHACS telemetry metrics #2139
OCPBUGS-22308: fix: force HTTP/1.1 connections #2134
OCPBUGS-21250: upgrade golang.org/x/net to v0.17.0 #2122
OCPBUGS-22099: Extend remote write test timeout #2127
Full changelog

cluster-network-operator

OCPBUGS-30150: ipsec: fix openssl typo #2290
OCPBUGS-29674: add env var in whereabouts-reconciler daemonset #2279
OCPBUGS-29301: Update ingressconfig_controller to use field Manager #2267
OCPBUGS-28208: ipsec: fix oopsy from 2e3fc8e (cherry-pick of 980c08318e) #2222
OCPBUGS-28777: fix whereabouts conformance test failures #2241
OCPBUGS-27958: Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2220
NO-JIRA: add kyrtapz as reviewer and approver for release 4.13 #2229
OCPBUGS-22293: remove all managed fields used by old manager #2094
OCPBUGS-24570: Disable weak SSH cipher suitesRm weak ciphers 4.13 #2163
OCPBUGS-21716: Bump golang.org/x/net and github.com/openshift/library-go #2123
OCPBUGS-22896: run update-codegen after adding maxLogFiles cfg #2162
OCPBUGS-22971: HyperShift: Use the local konnectivity proxy when checking proxy readiness #2098
OCPBUGS-22896: Remove oldest ovn acl log files when file limit exceeded #2097
SDN-4184: Limit OVN-Kubernetes RBAC permissions #2093
OCPBUGS-20278: Edited multus-admission-controller deployment config to not add autoount a service account token #1885
Full changelog

cluster-node-tuning-operator

OCPBUGS-33030: [release-4.13][manual]Reduce number of reboots in offline tests (#1048) #1048
Scheduler plugin: ignore IRQs (#1027) #1027
irqbalance: set banned cpus list to 0 (#1003) #1003
OCPBUGS-24353: rps: cherry-picks of rps fixes (#865) #865
Disable HTTP/2 for webhook and metrics servers (#846) #846
Remove obsolete protocols and weak ciphers (#843) #843
OCPBUGS-18493: e2e: deflake IRQ load-balancing (#782) #782
Use RHEL9 as a base (#829) #829
OCPBUGS-17943: Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) #796
nto: avoid timeout when there are too many CSV (#818) #818
Full changelog

cluster-openshift-apiserver-operator

: OCPBUGS-20707: bump library-go to include switch to HTTP/1.1 #555
OCPBUGS-22210: increase timeout for probes #553
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-20796: bump(k8s,openshift) to address CVE-2023-44487 #310
Full changelog

cluster-platform-operators-manager

OCPBUGS-20998: [release-4.13] Bump golang.org/x/net to v0.17.0 #97
Full changelog

cluster-policy-controller

OCPBUGS-21103: Bump deps to address CVE-2023-44487 [4.13] #135
Full changelog

cluster-samples-operator

OCPBUGS-22390: Sync library to remove invalid dockerhub references for OKD #521
Full changelog

cluster-storage-operator

OCPBUGS-33468: Fix problem-detector proxy setting #473
OCPBUGS-21284: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #406
Full changelog

cluster-version-operator

OCPBUGS-27049: pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1019
OCPBUGS-20744: [4.13] Bump http-related deps #989
OCPBUGS-19472: Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC #969
OCPBUGS-20321: pkg/cvo/sync_worker: Always enable the DeploymentConfig capability #981
OCPBUGS-19828: pkg/clusterconditions/promql: Warm cache with 1s delay #974
Full changelog

console

OCPBUGS-32147: Bump graphql-go to v1.3.0 #13922
OCPBUGS-33978: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13872
OCPBUGS-34342: Fix PipelineRun Logs tab navigation #13890
OCPBUGS-24395: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13405
OCPBUGS-33777: restrict Masthead logo to max-height to 60px #13860
OCPBUGS-33749: Add visual connector between VMs and non VMs workloads #13857
OCPBUGS-33382: Routes created by devfiles do not always use HTTPS #13827
OCPBUGS-33650: fix issues with Edit Route form #13851
OCPBUGS-32500: PipelineRuns in Console show wrong status or load indefinitely #13780
OCPBUGS-31077: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13683
OCPBUGS-31595: Fix operands list endpoint. #13714
OCPBUGS-29063: add additional check to determine if file is binary #13579
OCPBUGS-28788: Copy response code from proxied plugin requests #13561
OCPBUGS-29243: Add a new allowInsecure option to the internet proxy #13593
OCPBUGS-27406: Add Pipeline metrics tab using plugin #13525
OCPBUGS-23483: add access to create, edit and delete silences for developer user from developer perspective #13349
OCPBUGS-25427: Fix plugin proxy handler #13449
OCPBUGS-25465: fix runtime error on Node details Overview when Machin… #13452
OCPBUGS-25146: add access review for impersonate #13437
OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #13424
OCPBUGS-22241: Save also the location.search and .hash values in localStorage to restore them after login #13271
OCPBUGS-24240: Subsequent PipelineRuns take initial PipelineRun name into account #13385
OCPBUGS-23497: Cannot Edit Shipwright Build #13352
OCPBUGS-11316: Fix description for BuildAdapter SDK extension #12703
OCPBUGS-22986: Correct logout process #13310
OCPBUGS-23065: remove expandable toggle for conditional update risk d… #13316
OCPBUGS-22784: add support for new features annotations while preservi… #13299
OCPBUGS-19532: use active namespace in Create cta href of create action for operator backed #13179
OCPBUGS-18271: update the KnativeServing API version to v1beta1 for global-config extension #13112
OCPBUGS-20232: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13224
OCPBUGS-20231: fetch TaskRuns without selector and reduces the get TaskRuns requests #13223
OCPBUGS-20330: Check if filtered object contains name property #13227
Full changelog

console-operator

OCPBUGS-18674: Reset console operator’s conditions #894
OCPBUGS-30599: Disable HTTP/2 for webhook #875
OCPBUGS-21008: [release-4.13] Bump library-go and golang.org/x/net #866
OCPBUGS-6208: Updating openshift-enterprise-console-operator images to be consistent with ART #872
OCPBUGS-24591: ConsolePlugin metrics must no longer be grouped by the vendor #821
OCPBUGS-22333: Make enabled plugins unique #805
Full changelog

container-networking-plugins

OCPBUGS-20594: build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.13] #130
Full changelog

coredns

OCPBUGS-28205: UPSTREAM: 6277: openshift: Fix OCPBUGS-28205 #113
OCPBUGS-21046: UPSTREAM: <carry>: openshift: Address CVE-2023-39325 #102
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

Switch to a new CI #2444
Full changelog

csi-driver-manila-operator

OCPBUGS-26224: Fix selector for manila-csi-driver-controller-metrics service #224
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-28953: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #168
OCPBUGS-23116: Should reference configmaps instead of secrets #153
OCPBUGS-20719: bump golang.org/x/net to v0.17.0 #147
Full changelog

csi-driver-shared-resource-operator

OCPBUGS-28958: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #104
OCPBUGS-20806: bump golang.org/x/net to v0.17.0 #87
Full changelog

csi-external-attacher

OCPBUGS-21161: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #61
Full changelog

csi-external-provisioner

OCPBUGS-20759: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #73
Full changelog

csi-external-resizer

OCPBUGS-20908: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #148
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29728: cherry-pick:release-4.13: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #141
OCPBUGS-21011: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #110
Full changelog

csi-livenessprobe

OCPBUGS-20636: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
Full changelog

csi-node-driver-registrar

OCPBUGS-20686: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
Full changelog

docker-builder

OCPBUGS-22468: [release-4.13] Bump github.com/sigstore/rekor #374
OCPBUGS-23021: Add -p flag to cp command to preserve timestamps #371
OCPBUGS-20709: [release-4.13] Bump golang.org/x/net #363
Full changelog

egress-router-cni

OCPBUGS-11648: update go-yaml to v2.4.0 #68
Full changelog

etcd

OCPBUGS-32920: Revert “Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… #266
OCPBUGS-31653: Rebase etcd 3.5.13 openshift 4.13 #262
ETCD-537: Revert “bump build root go1.20” #263
OCPBUGS-28734: Rebase etcd 3.5.12 openshift 4.13 #245
ETCD-537: bump build root go1.20 #252
OCPBUGS-26925: Rebase etcd 3.5.11 openshift 4.13 #239
OCPBUGS-22697: [4.13] Carrying fixes for CVE-2023-44487 #225
Full changelog

gcp-cloud-controller-manager

OCPBUGS-21303: Bump golang.org/x/net to v0.18.0 #43
Full changelog

gcp-cluster-api-controllers

OCPBUGS-21398: Bump golang.org/x/net to v0.17.0 #204
Full changelog

gcp-machine-controllers

OCPBUGS-24563: Reduce metrics cardinality. #74
OCPBUGS-20851: Bump x/net package to v0.18.0 #68
Full changelog

gcp-pd-csi-driver

OCPBUGS-20735: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #46
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-20827: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #88
Full changelog

haproxy-router

OCPBUGS-34673: Properly handle rewrite-target annotation #608
OCPBUGS-33911: Reject routes with MD5 certs #600
OCPBUGS-33448: Count active services before setting weight to 1 #594
OCPBUGS-33280: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #591
OCPBUGS-21117: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #531
Full changelog

hyperkube, pod

OCPBUGS-28660: UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1875
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1938
OCPBUGS-31505: Update to kubernetes 1.26.15 #1930
Address CVE #14
OCPBUGS-29663: Update to kubernetes 1.26.14 #1889
OCPBUGS-12210: Prevent partially filled HPA behaviors from crashing kube-controller-manager #1876
OCPBUGS-27370: Update to kubernetes 1.26.13 #1859
OCPBUGS-25814: Fix device uncertain errors on reboot - 4.13 #1831
OCPBUGS-25988: Update to kubernetes 1.26.12 #1839
OCPBUGS-25767: legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber #1834
OCPBUGS-23521: UPSTREAM: <carry>: support for both icsp and idms objects #1798
OCPBUGS-23567: Update to kubernetes 1.26.11 #1809
OCPBUGS-18829: cm: reorder setting of sched_load_balance for sandbox slice #1696
OCPBUGS-23287: UPSTREAM: 121881: Use golang library instead of mklink #1802
openshift-hack: Fix sporadic 141 errors in build-rpms #1773
OCPBUGS-20114: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1746
OCPBUGS-21063: [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1759
Full changelog

hypershift

HOSTEDCP-1146: cpo: use CPO spec container image if it is a sha256 reference #3296
OCPBUGS-22971: Add konnectivity-proxy container to CNO #3167
OCPBUGS-23455: Use the same etcd snapshot for all replicas during etcd restore #3205
NO-JIRA: Red Hat Trusted App Pipeline purge hypershift-operator-release-413 #3217
Full changelog

ibm-cloud-controller-manager

OCPBUGS-24999: Add Snyk file to exclude vendor directory on scan #66
OCPBUGS-21137: Bump golang.org/x/net to v0.18.0 #56
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #47
OCPBUGS-21230: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-21319: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #82
OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #76
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-21432: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #28
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-21418: UPSTREAM: <carry>: bump golang.org/x/net to v0.18.0 #66
Full changelog

insights-operator

OCPBUGS-33449: anonymization - externalIP can be nil (#931) (#933) (#935) #931
OCPBUGS-31991: bump golang.org/x/net version (#927) #927
OCPBUGS-28157: Add extra check in ids to bypass validations (#905) #905
gather etcd_server_slow metrics (#902) (#909) #902
OCPBUGS-23962: adds helm information gather (#868) (#883) #868
OCPBUGS-22958: adds cluster storageclasses gather (#858) (#875) #858
OCPBUGS-22953: create Prometheus rules programmatically according the… (#860) #860
OCPBUGS-22914: remove username & password config options (#859) #859
OCPBUGS-20750: update dependencies (#840) #840
Add cherry-pick from 4.14 (#848) #848
Full changelog

ironic

OCPBUGS-32363: [4.13] remove unused prometheus-exporter #488
OCPBUGS-32387: Use unix sockets by default for reverse proxy communication #476
OCPBUGS-29190: Fix Inspector iPXE config for IPv6 addresses #453
OCPBUGS-23978: Ironic side of external_http_url (METAL-163) is not wired in correctly #430
OCPBUGS-23506: Uplift eventlet version #427
OCPBUGS-23356: Upgrade werkzeug dependency #422
OCPBUGS-19078: Handle Eject DVD 4.13 #416
OCPBUGS-23072: Use bash process substitution instead of pipe #413
Full changelog

ironic-agent

OCPBUGS-29725: Always add ignition to set hostname on /etc/hostname #111
Full changelog

k8s-prometheus-adapter

OCPBUGS-21457: upgrade golang.org/x/net to 0.17.0 to address CVE #90
OCPBUGS-20405: limit number of simultaneous client requests #78
Full changelog

keepalived-ipfailover

OCPBUGS-6236: Updating openshift-enterprise-egress-router images to be consistent with ART #121
Full changelog

kube-proxy, sdn

OCPBUGS-20771: update x/net to v0.17.0 #590
OCPBUGS-22932: Change the permission of 80-openshift-network.conf to 600 #582
OCPBUGS-14504: Use the ovsver build arg to infer the openvswitch short version number #572
Full changelog

kube-rbac-proxy

OCPBUGS-20702: v0.15.0 downstream release 4.13 #84
Full changelog

kube-state-metrics

OCPBUGS-20778: bump x/net to v0.17.0 #102
Full changelog

kubevirt-csi-driver

“OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #35
Full changelog

machine-api-operator

OCPBUGS-31994: Update x/net to v0.25.0 #1245
NO-JIRA: [release-4.13] Fix data race conditions in unit tests #1254
OCPBUGS-25165: Add Snyk file to exclude vendor directory on scan #1194
OCPBUGS-24277: Update reference URL #1188
OCPBUGS-24277: Use docs URL instead of KCS article #1181
OCPBUGS-21513: Bump golang.org/x/net to v0.18.0 #1175
Full changelog

machine-config-operator

OCPBUGS-32208: Run resolv-prepender entirely async #4314
OCPBUGS-33327: make verify should use MCO’s kube version #4352
OCPBUGS-29721: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4206
OCPBUGS-30285: set nodeStatusReportFrequency #4243
OCPBUGS-28740: crio: drop automatic image cleanup on upgrades #4154
OCPBUGS-29151: fix nodeStatusUpdateFrequency #4170
OCPBUGS-24661: daemon: Add support for new nmstate logic #4036
OCPBUGS-27816: use *resource.Quantity to not automatically set 0 #4141
OCPBUGS-22272, OCPBUGS-27172: kubelet: fix kubelet labels #4120
OCPBUGS-27096: Azure Run ovs-configuration.service before dnsmasq.service #4115
OCPBUGS-19658: After dual-stack conversion reconcile IPFamilies #3935
OCPBUGS-23468: support icsp and idms objects #4027
OCPBUGS-23536: Introduce kubelet-dependencies.target and firstboot-osupdate.target #4043
OCPBUGS-21052: Update library-go and kube deps to latest version #4011
OCPBUGS-22205: Consider ingress VIPs when selecting node IP #3991
OCPBUGS-18031: on-prem: run resolv-prepender on NM reapply event #3880
OCPBUGS-22412: bootstrap_test: always set APIVersion and Kind for DNS #4002
OCPBUGS-21721: install/0000_90_machine-config-operator_90_deletion: Drop this file #3983
OCPBUGS-20333: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3962
Full changelog

machine-image-customization-controller

OCPBUGS-27089: configurable ironic agent vlan creation #117
OCPBUGS-21549: Uplift x/net to v0.17.0 #105
Full changelog

multus-admission-controller

OCPBUGS-21353: Update go.mod for CVE-2023-39325 [Release-4.13] #72
Full changelog

multus-cni

OCPBUGS-28020: Fix SAST scan issues for multus-cni-container [4.13] #224
OCPBUGS-21076: Update go.mod for CVE-2023-39325 [Release-4.13] #195
Full changelog

multus-networkpolicy

OCPBUGS-21438: Update go.mod for CVE-2023-39325 (#35) #35
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-27958: Enable reconciler configuration #241
OCPBUGS-27367: [release-4.13] Backport fix assignment #236
OCPBUGS-21512: update golang.org/x/net to v0.17.0 #208
Full changelog

network-metrics-daemon

Added METRIC_TEST_IMAGE var (#90) #90
Update the k8s dependencies to 1.26.10 (#83) #83
Full changelog

nutanix-machine-controllers

OCPBUGS-24563: Reduce metrics cardinality #59
OCPBUGS-25459: Fix CI by running tests natively by default #60
Full changelog

oauth-apiserver

OCPBUGS-28674: Fix HTTP/2 deps for release-4.13 #102
Full changelog

oauth-server

AUTH-443: update osin to latest version #139
Full changelog

oc-mirror

Bump version to include v5.11.0 of go-git (#823) #823
OCPBUGS-385: Capability to override default channel (#749) (#791) #749
OCPBUGS-19429: Fix cross EUS channel upgrade path calculation (#775) #775
OCPBUGS-21460: Fix CVE-2023-44487 and CVE-2023-39325 (#714) #714
Full changelog

olm-rukpak

: OCPBUGS-27594,OCPBUGS-27679: Update go-git to v5.11.0 #75
OCPBUGS-23403: [release-4.13] Address http2 vulnerability #58
OCPBUGS-21363: [release-4.13] Bump golang.org/x/net to v0.17.0 #40
UPSTREAM: <carry>: add downstream owners #42
Full changelog

openshift-apiserver

: OCPBUGS-21449: Enable HTTP/2 CVE mitigation #398
Full changelog

openshift-state-metrics

OCPBUGS-20723: bump x/net to v0.17.0 #108
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-21565: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #136
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-35241: Unblock CI #772
OCPBUGS-27564, OCPBUGS-27569, OCPBUGS-27649, OCPBUGS-27654: bump go-git/v5 to 5.11.0 #682
OCPBUGS-28228: Registry Pod Controller Flag #672
OCPBUGS-27891: [CARRY] SSC RBAC #669
OCPBUGS-8653: bump golang-migrate to v4.16.1 (#1107) #649
OCPBUGS-20815: [release-4.13] fix apiserver vulnerability #616
OCPBUGS-22133: [release-4.13] Bump golang.org/x/net to v0.17.0 #589
Full changelog

operator-marketplace

OCPBUGS-20977: [release-4.13] bump golang.org/x/net to 0.17.0 #549
Full changelog

ovirt-csi-driver

OCPBUGS-23155: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
Full changelog

ovirt-csi-driver-operator

OCPBUGS-23241: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #127
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-34669, SDN-4186: Introduce a validating webhook for ovnkube-node #2053
OCPBUGS-29865: CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding #2095
OCPBUGS-33730: Improves service iptables efficiency on start up #2172
OCPBUGS-32988: Bumping OVS #2143
OCPBUGS-33421: [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2130
OCPBUGS-33218: [release-4.13] OVN bump to 23.06.1-112 #2153
OCPBUGS-28983, OCPBUGS-30920: Update netpol namespace address sets usage to the old ways #2097
OCPBUGS-29851: Egress IP, Services: use all node IP addresses #2090
OCPBUGS-28630: Synchronize node primary address update #2036
OCPBUGS-25611: Avoid panic due to stale ACLs with 1013 priority #1987
OCPBUGS-27257: Ensure session affinity cleanup on backend removal #2022
OCPBUGS-27736: CARRY: Updates owners and adds Surya #2024
OCPBUGS-24419: OVNK/GW: Ignore headless services in syncServices #1971
OCPBUGS-23258: Update leaderelection config to allow retries #1992
OCPBUGS-26242: Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks #2011
OCPBUGS-25923: Forward ICMP packets to OVN loadbalancer #2004
OCPBUGS-25224: [release-4.13] fixes MTU configuration on gateway router #1988
OCPBUGS-14799: Updating endpoints when using allocateLBNP=0, lgw mode fails #1940
OCPBUGS-25095: Fragment oversized reply packets in LGW mode #1983
OCPBUGS-24391: Limit OVN-Kubernetes RBAC permissions #1950
OCPBUGS-23014: Netpol retryFramework cleanup #1957
OCPBUGS-24263: Bump OVN to 23.06.1-39.el9fdp #1966
OCPBUGS-14314: Fix compilation error in e2e.go tests due to missing int32 parameter #1682
OCPBUGS-20047: Adjust python ssl library dependency check #1924
OCPBUGS-18976: Update bridge flow cache when the host address changes #1873
Full changelog

powervs-block-csi-driver

OCPBUGS-33638: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 #82
OCPBUGS-24728: synk: ignore vendor dir #61
OCPBUGS-21089: CVE-2023-39325 - Update net dependencies - 4.13 #52
Update OWNERS add yussufsh #54
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-25716: snyk: ignore vendor dir #61
OCPBUGS-21186: CVE-2023-39325 - Update net dependencies - 4.13 #41
Update OWNERS add yussufsh #45
Full changelog

powervs-cloud-controller-manager

OCPBUGS-24731: UPSTREAM: <carry>: snyk code scan exclude vendor directory #53
OCPBUGS-21280: CVE-2023-39325 - Update net dependencies - 4.13 #46
Full changelog

powervs-machine-controllers

OCPBUGS-24563: Reduce metrics cardinality #69
OCPBUGS-24741: snyk code scan exclude vendor directory #64
OCPBUGS-21880: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 #55
Full changelog

prometheus

OCPBUGS-26423: Add Exemplars support for all time series #191
OCPBUGS-21240: update golang.org/x/net to v0.17.0 [4.13] #174
Full changelog

prometheus-alertmanager

OCPBUGS-21043: Bump golang.org/x/net to v0.17.0 #81
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-20861: Bump golang.org/x/net to v0.17.0 #248
Full changelog

prometheus-node-exporter

OCPBUGS-21143: upgrade golang.org/x/net to v0.17.0 #135
Full changelog

service-ca-operator

OCPBUGS-28759: Fix HTTP/2 (4.13) #232
Full changelog

telemeter

OCPBUGS-21327: [release-4.13]: Bump golang.org/x/net to v0.17.0 #485
Full changelog

tests

OCPBUGS-33985: Provide SCC access via RBAC #28835
AUTH-443: Add oauth-server redirect URI validation e2e tests #28396
OCPBUGS-19378: [4.13] backport etcd restore tests #28267
Bug OCPBUGS-17469: Correct condition for rejecting connection #28151
OCPBUGS-20361: Update image stream test to create a manifest list image by default #28318
Full changelog

thanos

OCPBUGS-27206: Bump otel/http to 0.44.0 [openshift-4.13.z] #138
OCPBUGS-21157: Bump golang.org/x/net to v0.17.0 #125
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-21506: Bump golang.org/x/net to v0.18.0 #55
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-21556: bump golang.org/x/net to v0.17.0 #23
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-21561: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #91
Full changelog

vsphere-csi-driver-operator

OCPBUGS-21434: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #174
Full changelog

vsphere-problem-detector

OCPBUGS-21577: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github