4.13.54

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.54-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-serial
- aws-sdn-upgrade-4.13-micro Succeeded (2 retries) periodic-ci-openshift-release-master-nightly-4.13-e2e-aws-sdn-upgrade
- azure-ovn-upgrade-4.13-micro Succeeded periodic-ci-openshift-release-master-ci-4.13-e2e-azure-ovn-upgrade
- fips-scan Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.13-fips-payload-scan
- gcp-ovn-rt-upgrade-4.13-minor Succeeded periodic-ci-openshift-release-master-ci-4.13-upgrade-from-stable-4.12-e2e-gcp-ovn-rt-upgrade
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-ovn-ipv6
- metal-ipi-sdn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.13-e2e-metal-ipi-sdn-bm

Upgrades from:

Untested upgrades: 4.12.19, 4.12.20, 4.12.21, 4.12.22, 4.12.24, 4.12.25, 4.12.26, 4.12.27, 4.12.28, 4.12.29, 4.12.30, 4.12.31, 4.12.32, 4.12.33, 4.12.34, 4.12.35, 4.12.36, 4.12.37, 4.12.38, 4.12.39, 4.12.40, 4.12.42, 4.12.43, 4.12.44, 4.12.45, 4.12.47, 4.12.48, 4.12.49, 4.12.50, 4.12.51, 4.12.53, 4.12.54, 4.12.55, 4.12.56, 4.12.57, 4.12.58, 4.12.59, 4.12.60, 4.12.61, 4.12.62, 4.12.63, 4.12.64, 4.12.65, 4.12.66, 4.12.67, 4.13.10, 4.13.11, 4.13.12, 4.13.13, 4.13.16, 4.13.17, 4.13.18, 4.13.19, 4.13.21, 4.13.22, 4.13.23, 4.13.24, 4.13.25, 4.13.26, 4.13.27, 4.13.28, 4.13.29, 4.13.3, 4.13.30, 4.13.31, 4.13.32, 4.13.33, 4.13.35, 4.13.36, 4.13.37, 4.13.38, 4.13.39, 4.13.4, 4.13.40, 4.13.41, 4.13.42, 4.13.43, 4.13.44, 4.13.45, 4.13.46, 4.13.48, 4.13.49, 4.13.5, 4.13.50, 4.13.6, 4.13.7, 4.13.8, 4.13.9

Upgrades to:

4.14.43 (changes) - S S S
4.14.0-0.nightly-2024-12-21-092603 (changes) - Success
4.14.0-0.nightly-2024-12-21-031648 (changes) - Success
4.14.0-0.nightly-2024-12-20-232226 (changes) - Success
4.14.0-0.nightly-2024-12-20-115909 (changes) - Success
4.14.0-0.nightly-2024-12-20-035519 (changes) - Success
4.14.0-0.nightly-2024-12-19-081645 (changes) - Failed Success
4.14.0-0.nightly-2024-12-19-002924 (changes) - Failed Success
4.14.0-0.nightly-2024-12-18-170256 (changes) - Failed Success
4.14.0-0.nightly-2024-12-18-081824 (changes) - Success
4.14.0-0.nightly-2024-12-16-162403 (changes) - F F F F
4.14.0-0.nightly-2024-12-12-194106 (changes) - Success
4.14.0-0.nightly-2024-12-12-043049 (changes) - Success
4.14.0-0.nightly-2024-12-11-235050 (changes) - Success
4.14.0-0.nightly-2024-12-11-095644 (changes) - Success
4.14.0-0.nightly-2024-12-11-033016 (changes) - Success
4.14.0-0.nightly-2024-12-10-184304 (changes) - Failed Success
4.14.0-0.nightly-2024-12-06-210944 (changes) - F F S
4.14.0-0.nightly-2024-12-06-042433 (changes) - Success
4.14.0-0.ci-2024-12-21-101926 (changes) - Success Success
4.14.0-0.ci-2024-12-21-041926 (changes) - Success Success
4.14.0-0.ci-2024-12-20-195841 (changes) - S F S
4.14.0-0.ci-2024-12-20-135841 (changes) - Success Success
4.14.0-0.ci-2024-12-20-061733 (changes) - S F S
4.14.0-0.ci-2024-12-20-001733 (changes) - Success Success
4.14.0-0.ci-2024-12-19-100015 (changes) - F S F F F F
4.14.0-0.ci-2024-12-19-022415 (changes) - S F S
4.14.0-0.ci-2024-12-18-174054 (changes) - Success Success
4.14.0-0.ci-2024-12-18-114054 (changes) - Success Success
4.14.0-0.ci-2024-12-18-041036 (changes) - F S F S
4.14.0-0.ci-2024-12-17-173632 (changes) - S F F S
4.14.0-0.ci-2024-12-16-142631 (changes) - F F F S S
4.14.0-0.ci-2024-12-13-091741 (changes) - F S S
4.14.0-0.ci-2024-12-13-031741 (changes) - Success Success
4.14.0-0.ci-2024-12-12-182016 (changes) - F S S
4.14.0-0.ci-2024-12-12-063432 (changes) - S F F
4.14.0-0.ci-2024-12-12-003432 (changes) - F S F S
4.14.0-0.ci-2024-12-11-183432 (changes) - Success Success
4.14.0-0.ci-2024-12-11-061114 (changes) - F F S S
4.14.0-0.ci-2024-12-10-230027 (changes) - S F F S
4.14.0-0.ci-2024-12-10-170027 (changes) - Success Success
4.14.0-0.ci-2024-12-06-185742 (changes) - Success Success
4.14.0-0.ci-2024-12-06-125742 (changes) - Success Success
4.14.0-0.ci-2024-12-06-034109 (changes) - Success Success

Loading changelog, this may take a while ...

Changes from 4.13.34

Created: 2024-12-05 15:24:54 +0000 UTC

Image Digest: sha256:bfe066b4b30eeb48f1099339131d56d4005f0867d4e4b3484e3fcfee39b3d26f

Components

Kubernetes upgraded from 1.26.13 to 1.26.15
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202402131523-0 to 413.92.202411212100-0 (diff)

Rebuilt images without code change

alibaba-cloud-controller-manager git e41e11cc sha256:f1344378bdb88cc8d5362dece420a499618306323fcf9d7cee99c529aec72762
alibaba-cloud-csi-driver git 6384f904 sha256:07ce05441e66c59c8702324b3f3ce687b62737a410901e46a210369c94c8e774
alibaba-disk-csi-driver-operator git 7e415973 sha256:74c4cd1247ca33657044c70c738610eb961d927cb7423d44ca72773e58b5bdb8
alibaba-machine-controllers git 4c0f96a6 sha256:abc31d6d805f48073c5c43e1cbe6ed92d90857a5e777f2d3663b1ee7f49779c8
aws-machine-controllers git e1a57b5e sha256:7de67ce2b6260c1a9b1da583f5a229841efbd58c29f7548adddc8ce81bc382fa
azure-cloud-controller-manager git bf9bd022 sha256:61c3c420943cf404060f8d255996461c5349aac734bf3328a7b47c5b3a59d8b4
azure-cloud-node-manager git bf9bd022 sha256:66f462b7331916cef3b329d8e8ee76793ded7a1787daf5b3a073f9b5488dd62d
azure-disk-csi-driver git b6d3fbcb sha256:f41ca801ba1939785dca81e10cf8a02ade1fcfd10cb58c555c71c02799580500
azure-disk-csi-driver-operator git 8534d756 sha256:0f77004804e8bc910ef7447b046871d5048ed08568610b1f92fd8bc5ef0dc225
azure-file-csi-driver-operator git 70e05302 sha256:c8e826f0a9fae06a4abdca92b8b5b921172b09649ef704d58530bb32b27646c0
baremetal-runtimecfg git 1280cf54 sha256:faa5e20d565c41684c11ce24c2dfefc75e220081120c99f3e286e1abbe2a470e
cluster-authentication-operator git 1801056c sha256:9ae1b905eecc1b2a0406bfd06be1a8f8ba094dcbc5755f00bb5ff8c42b6642fb
cluster-bootstrap git ee908b6b sha256:9f0ac692e26d470b88a5ff29ee51b7cb53e1bca060a942f30df68c1cff7dd09c
cluster-capi-controllers git 12f767b2 sha256:48cb8a160aac416520efaf3e540c0d4860b249797d857c8e5dd3402a47fd84e4
cluster-capi-operator git b247793d sha256:bf287d7c950b53f54ccf6434aa5aa45dee220dbef9101610277d204d06ee9778
cluster-kube-cluster-api-operator git 18c076b1 sha256:ec8d15425c18f693853f59f1417fdeabb54c7dce0a10762654c0bf24aea9b444
cluster-kube-controller-manager-operator git dac71136 sha256:b8a3bec394b7b8e5ecb4ce1984dc33c2c29d6402e54c35b6acfb2838913697bb
cluster-kube-scheduler-operator git 2e7c269b sha256:da1bc7fc3ef86c723e01ca2b4e6f25719d0f2632742ef877a3295bc1ffac0567
cluster-kube-storage-version-migrator-operator git 721de5d6 sha256:103f7dd2fbe96cf71a057b29a20723da0de1ea97047b3282c53b62682a7d3055
cluster-machine-approver git 25fe7b4b sha256:375d6948ec9ced1f5ae54d9cbd82c807d38ae30a6cb0c2b876a17b3894d19f03
cluster-openshift-apiserver-operator git 9abb220a sha256:ff47a6c69bbc72f2e1c820a6346aec63b966595aaa4b4e9386bcd2a645b2144a
cluster-platform-operators-manager git 312c5f24 sha256:8734f762fd44b919593c51c1badf9aafc02cc81b1edc18f9be218c8eef369d8d
cluster-policy-controller git 3b0d0755 sha256:67a10c1105dc9615ca14a4c71cb9da81f4763475162bdfcfee88ea5e72c6c848
cluster-version-operator git 24517b23 sha256:9428faaaf2b49b67a73194be93bff29a28565ee8a4c8cdb10fc960dcfc77c485
configmap-reloader git 9adad592 sha256:510c453e836ee92024a59cbe6192b962bc23542ceeaf2a13bab217c0316d9a53
container-networking-plugins git 614ca3c3 sha256:cc3be1f08115a022276c2b46ab71d260ef89f19ca11a4551edd77bb828d45c36
csi-driver-manila git c3b7d2f5 sha256:1a4d44e70d5574e3a27de632deed5b72be41e83c7678e1d9186a2dd1fb34bee7
csi-driver-nfs git 2b914c21 sha256:09c47351b6cde2dff1d398fc6f736e5be70ea95b2b985255941510b8b745db4b
csi-driver-shared-resource git 01bbb23b sha256:369d55382b154d7d002844d43f3e80b57dcc3456dbb182347ad1f2cfae05320e
csi-driver-shared-resource-operator git bc169d2d sha256:7f18c1c972e538cbfdc7f0af53492921b8f3ee754e9ef551e7e87606a1ea0a7f
csi-driver-shared-resource-webhook git 01bbb23b sha256:c1f4b609d28d42b659f12c70ed27cc7ffea9bfbaa682915f9922ea7037227922
csi-external-attacher git d9290843 sha256:98030cda2e7daba12c82b4ef484e99d25ebbdd40a6040cadc507acecbf06bdd6
csi-external-provisioner git 0bf126b7 sha256:1b4f8074d639d5c8fa782ebfac978547fe9f253212b1e93983f82b104b890fb2
csi-external-resizer git e8036caf sha256:f7c182402cb074a283aa19b235bf717a7be4692f76c2f239b80fc675af586e4d
csi-livenessprobe git 3587db51 sha256:42938c36047b897d0e457b9e10dab5ac759a14fe3f12ed151264c854aeeb7cd9
csi-node-driver-registrar git 9ea90f34 sha256:4aabd984a01ac9335ff5f7ddbb7e6fed44e8f15e52eb0c17aa770ddf0cf5286b
docker-registry git 47a15ac8 sha256:e9eb8a7420bb2331836315d4716f4c61a1890e80ecd1af170ae6b0e2799a6c16
driver-toolkit git d719bdcf sha256:5ad504e54f7eb23228c77faf74af0b2fe95ba3978c35c5c6f3694097deaf2801
egress-router-cni git dfe03737 sha256:d275f29f4fe1b27ede12b4507d7e3dcf58383ad719716e5b2c162da920259a96
gcp-cloud-controller-manager git 507fea98 sha256:c5aad7a29350859f7652b8947ab8d98de38a9c0fc296c2fdb3123479ebfe7e5e
gcp-cluster-api-controllers git b8a27725 sha256:3e3629ebc3804e76c25a1584159dfe5bb8fedd67ed64b0102cb89ee37d2036d6
gcp-machine-controllers git e53a397d sha256:a6c851253f4a9f1b889c296e38be7ffc157402bd33b91eebbbc09d44e3c8d6c0
gcp-pd-csi-driver git 81e60746 sha256:45ceddb205faab8e993972af2f15bae70c89daf6e5be2ba27465cfc841f85bf7
gcp-pd-csi-driver-operator git 08c561b8 sha256:e23bc3b5083882250697a472bd92ccbf5ae0d33e1b5448f1aad316674dc0b854
ibm-cloud-controller-manager git b5bcaf9c sha256:a17116ce3ded50338b4dcf7036e56e3058cafac02f2c4c089ae24b04f45042b9
ibmcloud-machine-controllers git bb253a0c sha256:e49b1f72ac62e2dbe8ae9532a2c8292509f683ca80ee638212aab23abcb5dc05
ironic-machine-os-downloader git ce291779 sha256:2b96333a3621381712983912cb2d53abd574760ca07292e6cace5084f3fa1c75
ironic-static-ip-manager git 4536724a sha256:83df2b35956be66b69818ede3780faad5b723fe639d119d4a1531b15d151f46e
k8s-prometheus-adapter git 0fce7c7c sha256:dab59958742ef37d063ea97d54fa665e0005d185d6699dc0427dd3fb2a0c8dcd
keepalived-ipfailover git 1a14e5c9 sha256:1e3a9f99433a7dc90b6f181861c8c7af56261a2176caee8a4c540abd7e3fb85c
kube-proxy git 569ea111 sha256:5adb637ee15b69ebfa4aa149a11f2a61975ef0e3b9540bef182007d5cc523f45
kube-state-metrics git fd791df5 sha256:241963ed88fc944fa33b5b8e80c07b9f95e38073a02d6a3ae5f0cd2d65ab016f
kube-storage-version-migrator git bad104d1 sha256:fc4430529ac270ab53a3f4c120b1ef3395e71331c5139587b55558e57a7888dd
kubevirt-cloud-controller-manager git ee2033ec sha256:8c4beab1fd1a41648cfb32a93d523bba1d6e724b01738beb95a98cf75473aa1f
kuryr-cni git 36754b7b sha256:ddac1dcf356421eb0221f87d0644e09a86064903026717cf054f83764c9fb8f6
kuryr-controller git 36754b7b sha256:1cd647642c757fec41647a0163af2b8366edf8fd1998a6ac81c50bc5e456b80b
libvirt-machine-controllers git d4b7a8ab sha256:cae5f2f8833057419daafd1d1569ff654094c379d9df075a2e819673c407636c
machine-image-customization-controller git 34a4abe6 sha256:1d638fa93590a145eed9afce757391c6be02a6128cb01087512bdc179eca5ee4
machine-os-content sha256:372aebcfa12c7cca69becda6499ac1e79f8e3f8c340fa119a2df78cd2db5d72e
machine-os-images git b14856ff sha256:5a8427f9d1d71638bb592bf5b30c51a39e526558558862c6d1f9455a3b56cab1
multus-admission-controller git 9b0656af sha256:e5384f66ca52de4d5ee361891818033bd907bf469e5caa78abb010f8771271da
multus-networkpolicy git 7176ab75 sha256:84f023c78ffec421d5be313b5d82ed46a460685dbc7ddcd032f8a5332d53cad4
multus-route-override-cni git ca3bbec5 sha256:5449c6686344945f502937024b41c6cc7bbde62a619d81490e8341ab7a501f66
must-gather git 288ef2fc sha256:1a3e128db74439804f2ed0e917e12a7e2a21596014c707fdd0f4604fc914fd1c
network-interface-bond-cni git 84bda2af sha256:ea22ba5f2079d52b36f2e3df361f9464e8a803d0810860ef1cd97d3baca54244
network-metrics-daemon git 3ef81a5c sha256:37e5c7791213ca7121257439c3d542c71ee647fabd08df35ef5c34597e960da8
network-tools git 073feda1 sha256:d58d715f48956b91e64e4b2b84b8284a04eda99f66c5692f77afeb03fa3f3046
nutanix-cloud-controller-manager git 4d1c58e2 sha256:a7b2b7f84e5c98dea513959e385cc1d5f4fb0a6d244c9437d493f980ec084cd5
nutanix-machine-controllers git 105c5159 sha256:2c9140ecec6a33150fcba4e3ce45ab375efbdbc5d4586e83b813c3f794343514
oauth-proxy git 44af5a3a sha256:4aee098861080f307e69b0f7ef7a7e5ddc12ec0a674750945d4ee30d02feb29b
oauth-server git eb54be28 sha256:ad4f7efbb82a435a67c00243c90cb4da76a68b9cf4a93575557d0b393ed36750
openshift-state-metrics git 9be421f0 sha256:02ab0bde27efd6c65b4fce9d096f5cb14d00425f78209790d9860eecfcae7a59
openstack-cinder-csi-driver git c3b7d2f5 sha256:675ca36cad0d844e91900bb27e20820c12981d1457d12becad86983d5206b548
openstack-cinder-csi-driver-operator git b50a649b sha256:1499e2e6f62670cfaf83ae477e246af424d6a817ef3dc633b4504d05818b0103
openstack-cloud-controller-manager git c3b7d2f5 sha256:1c7deb99dd22aa6eb53a9ca1eb8b40bd89a529158ccc63d398d86ac35a7c213f
ovirt-csi-driver git 54958deb sha256:2b6a70cb6a6f436b63d40ff7d6883033b476bd9e766336a944e08de88e1c41b3
ovirt-csi-driver-operator git b293972f sha256:f71e3680310f78037ac957906240102947b01e046778ccf529d5903d04ad2b8f
ovirt-machine-controllers git 22d89b3f sha256:47d3e004e4d34884669eb8906faa236e9e4006dd47f67e322e1295dd525ce5e3
powervs-block-csi-driver-operator git e70c980e sha256:74aed320abd8d5b7442f9106727c3201e0de72429ec8428f6aa6f465b90708fa
prom-label-proxy git b501d5e2 sha256:071024759069eb72b01e434b21e5be7143c684a6392ab552b6b3979d6a53ce8a
prometheus git 72886096 sha256:2a9e58f2fa0681d4f8c24cc322ad6b4138b55c915b5f3833866e97992287c71c
prometheus-alertmanager git df2f11e2 sha256:9d5904d8b25b90f8b0ce4840b44ae38d70e55b77476a1042589bda6007baf36c
prometheus-config-reloader git 30fdccd1 sha256:f41d8fc06184bc06d992e4d6c4e937f996a9e39066f9a13597d548c986036df5
prometheus-node-exporter git 59d699ca sha256:bd507d01398d05d53c28436e0c414dcc4f8af199ae63fb0cb13df911e843b56d
prometheus-operator git 30fdccd1 sha256:8fc87fe23f248f172cbfed36e272a844e8068fccd50d23de2bc38846cb932bf4
prometheus-operator-admission-webhook git 30fdccd1 sha256:0805b95d5f25526ae726ceed8afadfa8711fa48dfac80a985ec9ba5c57dd2959
rhel-coreos sha256:646b4f849f07b11b43e73c4352f9dbb2f42ecfc104364c5977fea8eb4dbc5adc
rhel-coreos-extensions sha256:8cf453c3c9d9b62c82803cc103ffecd997b3cd09f5a41bca60e9bed4dacd05cc
route-controller-manager git 6667a6cb sha256:d13b1f9887edbf020b1eaf18efc76116e0b89803f3c0a17e255a10b79bc0da0b
sdn git 569ea111 sha256:9496b14a024f2621422036fe964abb4ba5163f282c7df72b723a15cff5f56bb6
service-ca-operator git dba00dc5 sha256:72efeb6af9bcc966519e903b90014b93091797a6b93253f2e37b31c5e3ef361f
thanos git 70fb57fb sha256:8f6c79108f3d0908c8663f6fc2d132b115130a3772b24eca29f90de030bcfaac
vsphere-cloud-controller-manager git f56d57ba sha256:808d60ce8aacb46daf189217a904dcfab44f5360da9a5a8b6c57061da52d8af1
vsphere-cluster-api-controllers git da63f2b9 sha256:e210a5c5e7ebda196a8745aa5cc3e01c081675c35337bcd62c26145800609ebc
vsphere-csi-driver git 4d3036a6 sha256:210554e50580f7392c710658f9ee29023a3d40a2b85ec0f7963beebb22114c83
vsphere-csi-driver-operator git a9e5036e sha256:ceca6902679524d6adbdae2df74d4ec39d556bf33948624b7585bda21de19c86
vsphere-csi-driver-syncer git 4d3036a6 sha256:d3b3f8efd9e52bfacc05981c7a18f70b798d8f3fd9e522b97621c0d5b3832c6f
vsphere-problem-detector git 3ad7408f sha256:9277ffee625d638f38fa0b825b9462d2c58c4462b439d6cfa7ffde29a4259b6f

agent-installer-api-server

OCPBUGS-13611: Update version go-http-metrics/gin (#6919) #6919
MGMT-17595: Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6215) #6215
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6202) #6202
MGMT-17541: Replace broken golangci reference (#6196) #6196
NO-ISSUE: replace postgres images as current one disappeared from quay (#6133) #6133
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-13612: Update version go-http-metrics/gin (#935) #935
MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#835) #835
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#829) #829
MGMT-17541: Replace broken golangci reference (#826) #826
Full changelog

agent-installer-node-agent

MGMT-17595: Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#706) #706
NO-ISSUE: Quick fix for broken ignition download test in 4.13 release (#700) #700
MGMT-17588: Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#702) #702
MGMT-17541: Replace broken golangci reference (#697) #697
Full changelog

apiserver-network-proxy

OCPBUGS-38066: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #61
OCPBUGS-31984: Bump golang.org/x/net to v0.23.0 #52
Full changelog

aws-cloud-controller-manager

OCPBUGS-32073: update for CVE-2023-45288 [release-4.13] #84
Full changelog

aws-cluster-api-controllers

OCPBUGS-32470: UPSTREAM: 4670:Update awsmachine providerID and instanceID immediately after ec2:RunInstances is called #509
Full changelog

aws-ebs-csi-driver

OCPBUGS-33363: [release-4.13] UPSTREAM: 1919: Add reserved-volume-attachments #266
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-33363: Explicitly reserve 1 attachment for the root disk #307
Full changelog

aws-pod-identity-webhook

OCPBUGS-32882: Upgrade go-jose module to 2.6.3 #190
Full changelog

azure-cluster-api-controllers

OCPBUGS-36022: Update go-retryablehttp to v0.7.7 #314
Full changelog

azure-file-csi-driver

OCPBUGS-41678: bump mount-utils to treat ENODEV error as corrupted mount #81
Full changelog

azure-machine-controllers

OCPBUGS-29906: Don’t create availability set when using spot instances #104
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-39217: Add yq v4 to ci image #8922
OCPBUGS-36088: [release-4.13]: bump go-retryablehttp for CVE fix #8659
OCPBUGS-29124: IBMCloud: Handle disk delete errors #7989
OCPBUGS-37168: Add yq-v4 to the upi-installer image for CI #8743
OCPBUGS-35976: [release-4.13] bump github.com/containers/image for CVE fix #8651
OCPBUGS-33732: preserve category name when trying to find tag category #8419
OCPBUGS-33062: openstack: Honour worker server group policy #8323
OCPBUGS-32359: Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8284
OCPBUGS-22979: IBMCloud: Add eu-es region #7685
OCPBUGS-30629: baremetal: populate customDeploy in advance #8129
OCPBUGS-29627: update RHCOS 4.13 bootimage metadata to 413.92.202402131523-0 #8038
OCPBUGS-30000: [release-4.13] Bump containerd for vulnerability fix #8073
OCPBUGS-28654: Fix depreciated typo #7963
Full changelog

baremetal-machine-controllers

OCPBUGS-29822: Extend metal3remediation aggregation role #212
Full changelog

baremetal-operator

OCPBUGS-30629: Do not update instance_info and deploy_interface for active nodes #337
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-30288: oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1700
Full changelog

cloud-credential-operator

OCPBUGS-43340: Update github.com/sirupsen/logrus v1.8.3 #770
OCPBUGS-37834: Resolve SNYK errors in security job. #743
OCPBUGS-37421: SNYK ignore go-client misreporting #740
OCPBUGS-36028: IBM/go-sdk-core update to v5.17.4 #722
OCPBUGS-32898: Upgrade go-jose module to 2.6.3 #698
Full changelog

cloud-network-config-controller

OCPBUGS-32180: Avoid nil pointer panic while assigning private IP on Azure #139
Full changelog

cluster-autoscaler

OCPBUGS-40929: update VPA golang.org/x/net for http rapid reset for CVE-2024-8421 #317
OCPBUGS-31702: add check for taint.value == nil #295
OCPBUGS-30874: Fix unstructured taint parsing in Cluster API provider #289
Full changelog

cluster-autoscaler-operator

OCPBUGS-31992: Update x/net to v0.25.0 #324
Full changelog

cluster-baremetal-operator

OCPBUGS-31993: bump x/net to 0.23.0 #439
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-35562: update azure and ash tolerations on node manager #353
OCPBUGS-35562: update unit tests [release-4.13] #354
Full changelog

cluster-config-operator

OCPBUGS-28802: Add required PSa labels #404
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-35380: Improved debugging of API listing errors #304
OCPBUGS-30156: Never delete a Machine when there’s a single Machine in an index #286
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-32334: create suitable role and roleBinding for csi-snapshot-webhook #206
Full changelog

cluster-dns-operator

OCPBUGS-11449: Enable topology-aware hints iff nodes in >=2 zones #418
OCPBUGS-11449: Ignore max unavailable for status #417
Full changelog

cluster-etcd-operator

OCPBUGS-35077: return errors in wait-for-ceo #1273
OCPBUGS-31988: update golang x net #1255
OCPBUGS-30248: fix panic in health check timeouts #1217
OCPBUGS-30245: [4.13] Replace nodelister with master nodelister everywhere #1216
Full changelog

cluster-image-registry-operator

OCPBUGS-36034: go.*,vendor: bump go-retryablehttp #1070
OCPBUGS-29935: pkg/storage/s3: enable bucket key on encryption settings #1007
Full changelog

cluster-ingress-operator

OCPBUGS-43095: Add alert for RFC 7230 violation in Transfer-Encoding headers #1161
OCPBUGS-43095: Add e2e test for duplicate Transfer-Encoding headers #1150
OCPBUGS-36551: Add Regexp Anchor to TestAll #1104
OCPBUGS-35453: [release-4.13] internal service changed fix target port logic #1089
OCPBUGS-35094: TestHostNetworkPortBinding: Delete t.Parallel() #1082
OCPBUGS-34765: Don’t add clientca-configmap finalizer if deleting #1073
OCPBUGS-34409: desiredRouterDeployment: Set HostPort if needed #1062
OCPBUGS-33990: Avoid spurious updates for internalTrafficPolicy [Backport to 4.13] #1055
OCPBUGS-34476: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1065
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-34062: [4.13] add a controller that reconciles SCCs’ volumes #1677
OCPBUGS-25922: [release-4.13] dashboard: use recording rules for most metrics #1611
Full changelog

cluster-monitoring-operator

OCPBUGS-33581: label for infra nodes for metric cluster:capacity_cpu_cores:sum #2344
OCPBUGS-28767: fix generation of telemeter token hash #2305
Full changelog

cluster-network-operator

OCPBUGS-43856: manifests/02-cncc-credentials: Set skipServiceCheck for GCP #2547
OCPBUGS-38403: Add missing runbook for OVNKubernetesNorthdInactive #2471
OCPBUGS-37941: update whereabouts crd #2458
OCPBUGS-30150: ipsec: fix openssl typo #2290
OCPBUGS-29674: add env var in whereabouts-reconciler daemonset #2279
Full changelog

cluster-node-tuning-operator

E2E: workload hints: compare existing profile with changes being made to avoid mcp getting stuck (#1069) #1069
OCPBUGS-33030: [release-4.13][manual]Reduce number of reboots in offline tests (#1048) #1048
Scheduler plugin: ignore IRQs (#1027) #1027
irqbalance: set banned cpus list to 0 (#1003) #1003
OCPBUGS-24353: rps: cherry-picks of rps fixes (#865) #865
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-38455: Update opentelemetry to mitigate CVE #365
Full changelog

cluster-samples-operator

OCPBUGS-21198: update k8s.io/apiserver version #589
Full changelog

cluster-storage-operator

OCPBUGS-33468: Fix problem-detector proxy setting #473
Full changelog

cluster-update-keys

OCPBUGS-43886: keys: Update Red Hat keys to use SHA256 signatures #67
Full changelog

console

OCPBUGS-44585: Need to allow blank for Project/namespace when setting SA Subject in ‘Project access tab’ #14497
OCPBUGS-36557: Increase login flow state paramater length/entropy #14483
OCPBUGS-42951: The filepath including leading slash makes error during parsing devfile using Gitlab #14383
OCPBUGS-41594: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14263
OCPBUGS-35259: fix vCenter cluster being empty #13952
OCPBUGS-32147: Bump graphql-go to v1.3.0 #13922
OCPBUGS-33978: Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13872
OCPBUGS-34342: Fix PipelineRun Logs tab navigation #13890
OCPBUGS-24395: Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13405
OCPBUGS-33777: restrict Masthead logo to max-height to 60px #13860
OCPBUGS-33749: Add visual connector between VMs and non VMs workloads #13857
OCPBUGS-33382: Routes created by devfiles do not always use HTTPS #13827
OCPBUGS-33650: fix issues with Edit Route form #13851
OCPBUGS-32500: PipelineRuns in Console show wrong status or load indefinitely #13780
OCPBUGS-31077: Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13683
OCPBUGS-31595: Fix operands list endpoint. #13714
OCPBUGS-29063: add additional check to determine if file is binary #13579
OCPBUGS-28788: Copy response code from proxied plugin requests #13561
Full changelog

console-operator

OCPBUGS-18674: Reset console operator’s conditions #894
OCPBUGS-30599: Disable HTTP/2 for webhook #875
OCPBUGS-21008: [release-4.13] Bump library-go and golang.org/x/net #866
OCPBUGS-6208: Updating openshift-enterprise-console-operator images to be consistent with ART #872
Full changelog

coredns

OCPBUGS-38431: UPSTREAM: 6354: openshift: key cache on Checking Disabled (CD) bit #129
Full changelog

csi-driver-manila-operator

OCPBUGS-26224: Fix selector for manila-csi-driver-controller-metrics service #224
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-29728: cherry-pick:release-4.13: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #141
Full changelog

docker-builder

Replace ‘coreydaley’ with ‘sayan-biswas’ #407
BUILD-854: Add adambkaplan as approver #405
Full changelog

etcd

OCPBUGS-32920: Revert “Merge pull request #262 from Elbehery/rebase-etcd-3.5.13-open… #266
OCPBUGS-31653: Rebase etcd 3.5.13 openshift 4.13 #262
ETCD-537: Revert “bump build root go1.20” #263
OCPBUGS-28734: Rebase etcd 3.5.12 openshift 4.13 #245
ETCD-537: bump build root go1.20 #252
Full changelog

haproxy-router

OCPBUGS-43095: add duplicate_te_header_total metric #626
OCPBUGS-34673: Properly handle rewrite-target annotation #608
OCPBUGS-33911: Reject routes with MD5 certs #600
OCPBUGS-33448: Count active services before setting weight to 1 #594
OCPBUGS-33280: Route ‘haproxy.router.openshift.io/timeout’ value is not validated #591
Full changelog

hyperkube, pod

OCPBUGS-41678: mount-utils: treat syscall.ENODEV as corrupted mount #2083
OCPBUGS-37280: UPSTREAM: 126104: Add funcs in pkg/filesystem/util that can actually … #2045
OCPBUGS-28660: UPSTREAM: <carry>: kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error #1875
UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 #1938
OCPBUGS-31505: Update to kubernetes 1.26.15 #1930
Address CVE #14
OCPBUGS-29663: Update to kubernetes 1.26.14 #1889
Full changelog

hypershift

OCPBUGS-39184: fix: bump github.com/IBM/go-sdk-core/v5 #4627
OCPBUGS-41515: set Konnectivity cipher suites #4284
NO-JIRA: hack: make the e2e script generic #4202
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-36064: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #74
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-36070: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #123
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-36010: CVE-2024-6104: bump github.com/hashicorp/go-retryablehttp to v0.7.7 #43
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-36076: UPSTREAM: <carry>: Fix go-retryablehttp CVE - 4.13 #90
Full changelog

insights-operator

OCPBUGS-36475: properly encode the URL for the advisor links (#962) (#965) #962
OCPBUGS-33449: anonymization - externalIP can be nil (#931) (#933) (#935) #931
OCPBUGS-31991: bump golang.org/x/net version (#927) #927
OCPBUGS-28157: Add extra check in ids to bypass validations (#905) #905
gather etcd_server_slow metrics (#902) (#909) #902
Full changelog

ironic

OCPBUGS-43952, OCPBUGS-43960: Bump python-waitress [4.13] #608
OCPBUGS-37764, OCPBUGS-39384: Include fixes for CVE-2024-44082 #585
OCPBUGS-38509: set min version for python3-webob #557
OCPBUGS-33374: bump werkzeug #543
OCPBUGS-34898: bump jinja2 #538
OCPBUGS-37116: Update eventlet version #525
OCPBUGS-32363: [4.13] remove unused prometheus-exporter #488
OCPBUGS-32387: Use unix sockets by default for reverse proxy communication #476
Full changelog

ironic-agent

OCPBUGS-39384: Include fixes for CVE-2024-44082 #164
OCPBUGS-38509: set webob and bump werkzeug #152
OCPBUGS-29725: Always add ignition to set hostname on /etc/hostname #111
Full changelog

kube-rbac-proxy

OCPBUGS-31987: CVE-2023-45288 [4.13] #107
Full changelog

kubevirt-csi-driver

“OCPBUGS-29791: [release-4.13] Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs” #35
Full changelog

machine-api-operator

OCPBUGS-43856: install/0000_30_machine-api-operator_00_credentials-request: Set skipServiceCheck again for GCP #1304
OCPBUGS-32015: Fix zone tag value reconciliation for vSphere machines #1225
OCPBUGS-31994: Update x/net to v0.25.0 #1245
NO-JIRA: [release-4.13] Fix data race conditions in unit tests #1254
Full changelog

machine-config-operator

OCPBUGS-44206: Panic seen in CI job for MCC pod #4680
OCPBUGS-38372: Revert “MCD-pull: run after network-online.target in Azure” #4527
OCPBUGS-38295: daemon/update: disable systemd unit before overwriting #4522
OCPBUGS-37783: Openshift uncordoned compute-node that was intentionally cordoned #4507
OCPBUGS-37160: MCD-pull: run after network-online.target in Azure #4474
OCPBUGS-36782: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4464
OCPBUGS-32208: Run resolv-prepender entirely async #4314
OCPBUGS-33327: make verify should use MCO’s kube version #4352
OCPBUGS-29721: Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4206
OCPBUGS-30285: set nodeStatusReportFrequency #4243
Full changelog

multus-cni

OCPBUGS-28020: Fix SAST scan issues for multus-cni-container [4.13] #224
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-37941, OCPBUGS-37944: [release-4.13] Stateful fixes #306
Full changelog

oauth-apiserver

OCPBUGS-31996: bump x/net to 0.24.0 #112
OCPBUGS-28674: Fix HTTP/2 deps for release-4.13 #102
Full changelog

oc-mirror

Bump version to include v5.11.0 of go-git (#823) #823
Full changelog

openshift-apiserver

OCPBUGS-32446: bump(x/net) to v0.23.0 #430
Full changelog

openshift-controller-manager

[release 4.13] OCPBUGS-38407, OCPBUGS-38408: Update opentelemetry dependency #326
OCPBUGS-41952: Add adambkaplan as approver #335
Full changelog

openstack-machine-api-provider

OCPBUGS-34422: Ensure portSecurity is correctly set in the Instance Ports #119
Full changelog

operator-lifecycle-manager, operator-registry

NO-ISSUE: [release-4.13] Backport e2e fixes #876
OCPBUGS-42146: adds paginating lister for evaluating CRs’ upgrade fitness versus new CRDs. #871
OCPBUGS-38254: [CARRY] perform operator apiService certificate validity checks directly #836
OCPBUGS-38608: (fix) Resolver: list CatSrc using client, instead of referring to registry-server cache (#3349) #843
OCPBUGS-32856: bump go-jose to v2.6.3 #780
OCPBUGS-35241: Unblock CI #772
Full changelog

operator-marketplace

OCPBUGS-32074: update golang.org/x/net for CVE-2023-45288 #566
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-38264: [release-4.13] Bump OVSDBTimeout and make it configurable #2289
OCPBUGS-37119: EgressIP: Reload certificates for the grpc heatlhcheck server #2226
OCPBUGS-35100: [release-4.13] ipv6+all protocols conntrack flush #2200
OCPBUGS-34669, SDN-4186: Introduce a validating webhook for ovnkube-node #2053
OCPBUGS-29865: CVE-2022-41723: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding #2095
OCPBUGS-33730: Improves service iptables efficiency on start up #2172
OCPBUGS-32988: Bumping OVS #2143
OCPBUGS-33421: [release-4.13] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix #2130
OCPBUGS-33218: [release-4.13] OVN bump to 23.06.1-112 #2153
OCPBUGS-28983, OCPBUGS-30920: Update netpol namespace address sets usage to the old ways #2097
OCPBUGS-29851: Egress IP, Services: use all node IP addresses #2090
OCPBUGS-28630: Synchronize node primary address update #2036
Full changelog

powervs-block-csi-driver

OCPBUGS-36094: Fix CVE-2024-6104 by updating http-retryable to 0.7.7 #91
OCPBUGS-33638: Fix CVE2023-45288 by bumping x/net to v0.24.0 -4.13 #82
Full changelog

powervs-cloud-controller-manager

OCPBUGS-36104: UPSTREAM: <carry>: Fix go-retryablehttp CVE 4.13 #76
Full changelog

powervs-machine-controllers

OCPBUGS-41980: Update go.mod to fix CVE - 4.13 #87
OCPBUGS-24563: Reduce metrics cardinality #69
Full changelog

telemeter

OCPBUGS-34829: fix issuer check during JWT authentication 4.13 #540
Full changelog

tests

OCPBUGS-37921: Removes dependency on samples operator images #29007
OCPBUGS-35053: updated timeout to 3 seconds to account for network timing issues #28862
OCPBUGS-36501: test/extended: skip etcd leader change check on hypershift #28922
OCPBUGS-35857: Use centos7 tag instead of latest for cmd images tests #28895
OCPBUGS-33985: Provide SCC access via RBAC #28835
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github