# 4.13.0-0.okd-2023-08-04-164726

Created: 2023-08-06 07:20:00 +0000 UTC

Image Digest: `sha256:939918fd96101657d5763170916cac1031b4720d8d2eb65fa7878e63c5d7ff80`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-08-04-164726


## Changes from 4.13.0-0.okd-2023-07-23-051208

### Components

* Kubernetes 1.26.6
* Fedora CoreOS upgraded from 38.20230625.3 to 38.20230709.3


### Rebuilt images without code change

* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [e9d59a2d](https://github.com/openshift/csi-external-attacher/commit/e9d59a2d66491d60d43488e05af7b4b673c722fd) `sha256:bc5522a4ad7d20a451e7f318bbec689371470d55378d517b64258805301647da`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [974ac363](https://github.com/openshift/csi-external-resizer/commit/974ac363a4f95b810ebb6f09ba26dedf1c8b8a4a) `sha256:61a1fc78697628892622edd64b239ce456937299b08f9a46ddea225eae802142`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:f833881476fca7dadf48cad85c93f6e8fd7d151c74218b5bfde818ac41d61950`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [5f13d5e6](https://github.com/openshift/csi-node-driver-registrar/commit/5f13d5e6f5b06a99995e0697d83bbdb36efceb46) `sha256:32dcc0749823260f2e57e7d4fbab46baa0f1db32b2e07f672426bccf52aa5976`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:976d131c2325b788d37fd3bffc8cd845cdd689b800ec4cb34692487d5bb38392`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:acae100e011cfc81b1502ffc3f41a8a1c908092cec3d1a8d63fd7020933f6217`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [5984aac1](https://github.com/openshift/service-ca-operator/commit/5984aac13df6c2f4440c67a1a14d32958bce9ec3) `sha256:5a79d38a9613dc33b27cd2775d35613c0694c461b97135a04ebdbb7307532f47`


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/b8d243397ff297baf875a88132f84d8cef34b968)

* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#81](https://github.com/openshift/cloud-provider-azure/pull/81)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/fb2d232da809a58929fe86cb9a59a045c7b44aa4...b8d243397ff297baf875a88132f84d8cef34b968)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/0a9a1a40a3a0dec5ae99e7bd00d2c54a4e0820d7)

* [OCPBUGS-15290](https://issues.redhat.com/browse/OCPBUGS-15290): GCP: ic: improve project validation [#7361](https://github.com/openshift/installer/pull/7361)
* [OCPBUGS-16390](https://issues.redhat.com/browse/OCPBUGS-16390): Allow override of networkType [#7344](https://github.com/openshift/installer/pull/7344)
* [OCPBUGS-16673](https://issues.redhat.com/browse/OCPBUGS-16673): Fix timing issue between network services [#7358](https://github.com/openshift/installer/pull/7358)
* [OCPBUGS-14711](https://issues.redhat.com/browse/OCPBUGS-14711): Convert Rendezvous IPv6 address to canonical format [#7237](https://github.com/openshift/installer/pull/7237)
* [OCPBUGS-16066](https://issues.redhat.com/browse/OCPBUGS-16066): Use correct SELinux label. Make rename atomic. [#7315](https://github.com/openshift/installer/pull/7315)
* [OCPBUGS-14599](https://issues.redhat.com/browse/OCPBUGS-14599): Log additional host info at warning level [#7233](https://github.com/openshift/installer/pull/7233)
* [Full changelog](https://github.com/openshift/installer/compare/8acb744c86aee6a321e9ec29c4ff826016e61242...0a9a1a40a3a0dec5ae99e7bd00d2c54a4e0820d7)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/e251b5ebd2466adde7b395bf3ab515b8f6cd0c84)

* [OCPBUGS-16055](https://issues.redhat.com/browse/OCPBUGS-16055): mcs cert: account for environments that use IP directly [#1500](https://github.com/openshift/oc/pull/1500)
* [Full changelog](https://github.com/openshift/oc/compare/e561d37285c8bde273ce00d086bea599a9cdd3be...e251b5ebd2466adde7b395bf3ab515b8f6cd0c84)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/29a00c91292ecf6512e35d6f01c2d5b8696c17ca)

* [OCPBUGS-17098](https://issues.redhat.com/browse/OCPBUGS-17098): update x/net dependency to 0.7.0 [#280](https://github.com/openshift/cluster-autoscaler-operator/pull/280)
* [OCPBUGS-16768](https://issues.redhat.com/browse/OCPBUGS-16768): add nutanix labels that should be ignored [#278](https://github.com/openshift/cluster-autoscaler-operator/pull/278)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99a0e2bacb4beacc58ea0c203c247f35fdf57ee1...29a00c91292ecf6512e35d6f01c2d5b8696c17ca)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/ef4594ef3f4ca535aa1d34878b79184323ecf481)

* [OCPBUGS-17101](https://issues.redhat.com/browse/OCPBUGS-17101): update x/net dependency to 0.7.0 [#269](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/269)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/64de389ba247ec7cd599dfc0492752cbec43181e...ef4594ef3f4ca535aa1d34878b79184323ecf481)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/0b27f0d6a463acf2e918f52ea8e6def2603f912f)

* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): retire LatencySensitive featureset [#329](https://github.com/openshift/cluster-config-operator/pull/329)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/923b864e76c6e8eb1bfcd66bb73327588dd8b75a...0b27f0d6a463acf2e918f52ea8e6def2603f912f)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/f608ce75498e2c214c71ebf5616d57fb0bddade8)

* [OCPBUGS-12487](https://issues.redhat.com/browse/OCPBUGS-12487): update golang.org/x/net/http2 [#1075](https://github.com/openshift/cluster-etcd-operator/pull/1075)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/4a9be58b44eee435cfa28b97f5f4c0d816424717...f608ce75498e2c214c71ebf5616d57fb0bddade8)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ad323b3657611da6bf7ea78eba8ffa998ba56fe9)

* [OCPBUGS-17081](https://issues.redhat.com/browse/OCPBUGS-17081): make webhook connection failure a warning in log [#1532](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1532)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/0b4e454270fd837f94c8280178489add78ecc887...ad323b3657611da6bf7ea78eba8ffa998ba56fe9)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/547c850b30e2183f8a6c9842c82ce672ba72cc76)

* [OCPBUGS-11016](https://issues.redhat.com/browse/OCPBUGS-11016): Node Exporter ignores network interface under name "cali[a-f0-9]*" [#1927](https://github.com/openshift/cluster-monitoring-operator/pull/1927)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/18b1d257239170726e5abdbafaca1f019e9e5eb9...547c850b30e2183f8a6c9842c82ce672ba72cc76)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/9d72d310605e9b8c646552c2b6f48d10faf0ac92)

* Fix a race in e2e test rollback.go code (#740) [#740](https://github.com/openshift/cluster-node-tuning-operator/pull/740)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5b4af42e9cfb78fce5a2052f49ed26b27fb40f99...9d72d310605e9b8c646552c2b6f48d10faf0ac92)


### [console](https://github.com/openshift/console/tree/67543a20dd0cd33917044eaec2199528e3be43af)

* [OCPBUGS-16040](https://issues.redhat.com/browse/OCPBUGS-16040): fix bug where binary secret values are corrupted on edit and add test coverage [#13048](https://github.com/openshift/console/pull/13048)
* [OCPBUGS-16659](https://issues.redhat.com/browse/OCPBUGS-16659): Fix RTE in bridge. [#13038](https://github.com/openshift/console/pull/13038)
* [OCPBUGS-16158](https://issues.redhat.com/browse/OCPBUGS-16158): "Duplicate RoleBinding" leads to "Unsupported value" error [#13008](https://github.com/openshift/console/pull/13008)
* [OCPBUGS-16434](https://issues.redhat.com/browse/OCPBUGS-16434): Fix stop PLR option [#13031](https://github.com/openshift/console/pull/13031)
* [OCPBUGS-14265](https://issues.redhat.com/browse/OCPBUGS-14265): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12865](https://github.com/openshift/console/pull/12865)
* [OCPBUGS-13641](https://issues.redhat.com/browse/OCPBUGS-13641): Do not fetch catalog sources on CSV or Subscription details pages. [#12811](https://github.com/openshift/console/pull/12811)
* [OCPBUGS-16421](https://issues.redhat.com/browse/OCPBUGS-16421): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13030](https://github.com/openshift/console/pull/13030)
* [Full changelog](https://github.com/openshift/console/compare/920c7380e2774bcd300e9a286c430e79e8928f65...67543a20dd0cd33917044eaec2199528e3be43af)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)

* [OCPBUGS-16609](https://issues.redhat.com/browse/OCPBUGS-16609): [release-4.13] UPSTREAM: 880: Bump golang.org/x/net [#67](https://github.com/openshift/csi-external-provisioner/pull/67)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/0dc83f5f1bd118247eaf0f91030c321da9c88aa3...f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/a888237c9ab43eab0ca992f0b18eff114ea4ade1)

* [OCPBUGS-16600](https://issues.redhat.com/browse/OCPBUGS-16600): [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 [#46](https://github.com/openshift/csi-livenessprobe/pull/46)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/c785aa6755bf96a4d39b4a804b7a826485965227...a888237c9ab43eab0ca992f0b18eff114ea4ade1)


### [etcd](https://github.com/openshift/etcd/tree/1b61faa606b5393076f5835418c6ec3cdc628615)

* [OCPBUGS-15859](https://issues.redhat.com/browse/OCPBUGS-15859): [4.13] Rebase openshift/etcd to 3.5.9 [#204](https://github.com/openshift/etcd/pull/204)
* [Full changelog](https://github.com/openshift/etcd/compare/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d...1b61faa606b5393076f5835418c6ec3cdc628615)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/8b310a39c1cad43ff3443b264524526b76ab1ac2)

* Bump FCOS version [#638](https://github.com/openshift/okd-machine-os/pull/638)
* Bump fedora-coreos to latest stable [#635](https://github.com/openshift/okd-machine-os/pull/635)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/00eaf19c6fe3572e59d4359d4927a59cac7e2f19...8b310a39c1cad43ff3443b264524526b76ab1ac2)


### [hypershift](https://github.com/openshift/hypershift/tree/227d6e1e0a50691ec8e858513c7ab8b2d21e55e2)

* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2870](https://github.com/openshift/hypershift/pull/2870)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2863](https://github.com/openshift/hypershift/pull/2863)
* Update RHTAP references (release-4.13) [#2833](https://github.com/openshift/hypershift/pull/2833)
* [HOSTEDCP-1110](https://issues.redhat.com/browse/HOSTEDCP-1110): [backport-4.13] Allow HCP Specification to Support ICSP & IDMS [#2839](https://github.com/openshift/hypershift/pull/2839)
* [OCPBUGS-15743](https://issues.redhat.com/browse/OCPBUGS-15743): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2767](https://github.com/openshift/hypershift/pull/2767)
* [Full changelog](https://github.com/openshift/hypershift/compare/962bd1131c4e61427be9c66ef3589a8a1f7ac984...227d6e1e0a50691ec8e858513c7ab8b2d21e55e2)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/42b5c256657da2de184c3e5ec9c619131ed1cd57)

* [OCPBUGS-16378](https://issues.redhat.com/browse/OCPBUGS-16378): 4.13: UPSTREAM: 157: K8S and grpc package upgrade [#40](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/40)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/66dcaf9a0591ec321828cec5ee24f0a4df0e5080...42b5c256657da2de184c3e5ec9c619131ed1cd57)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#73](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/73)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/e83df2f32ae88c84c15a12741a970607b20228ec...ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/88fcb47c150db0de0bb1507919b55d0e81233139)

* [OCPBUGS-17163](https://issues.redhat.com/browse/OCPBUGS-17163): daemon: Always replace binary [#3833](https://github.com/openshift/machine-config-operator/pull/3833)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: Make binary writing idempotent [#3826](https://github.com/openshift/machine-config-operator/pull/3826)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: no need to reexec when target and source rhel version is same [#3824](https://github.com/openshift/machine-config-operator/pull/3824)
* [OCPBUGS-16622](https://issues.redhat.com/browse/OCPBUGS-16622): daemon: Copy matching binary to host, re-exec with it [#3812](https://github.com/openshift/machine-config-operator/pull/3812)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/56c0dc09bb5a0c0d73e356624a631fa5dba59f9f...88fcb47c150db0de0bb1507919b55d0e81233139)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/08aaed367e959629693b6734018eb7bda5f6f09e)

* [OCPBUGS-15956](https://issues.redhat.com/browse/OCPBUGS-15956): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#138](https://github.com/openshift/whereabouts-cni/pull/138)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/1abe4c1f6f003d23c628f8d30c85bf8389562838...08aaed367e959629693b6734018eb7bda5f6f09e)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/44af5a3a021fd158c2e44d9951ad59a3d474cdf3)

* [OCPBUGS-16805](https://issues.redhat.com/browse/OCPBUGS-16805): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#261](https://github.com/openshift/oauth-proxy/pull/261)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f...44af5a3a021fd158c2e44d9951ad59a3d474cdf3)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/385057e57752b7b4f21ef32d7a7993d266a591eb)

* [OCPBUGS-11091](https://issues.redhat.com/browse/OCPBUGS-11091): mount build.Spec.Source.ConfigMaps for custom builder images [#257](https://github.com/openshift/openshift-controller-manager/pull/257)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/87de83867ac51730f506138ee790a56ca21d9fc9...385057e57752b7b4f21ef32d7a7993d266a591eb)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/13cba4453587d3080eaf126ecf9ae6de429da180)

* [OCPBUGS-13175](https://issues.redhat.com/browse/OCPBUGS-13175): Check the status of a pod before trying to get its ip [#1724](https://github.com/openshift/ovn-kubernetes/pull/1724)
* [OCPBUGS-15496](https://issues.redhat.com/browse/OCPBUGS-15496): Fix default GW IPs retrieval [#1738](https://github.com/openshift/ovn-kubernetes/pull/1738)
* [OCPBUGS-17001](https://issues.redhat.com/browse/OCPBUGS-17001): Inactivity probe for ovndb connection [#1796](https://github.com/openshift/ovn-kubernetes/pull/1796)
* [OCPBUGS-17120](https://issues.redhat.com/browse/OCPBUGS-17120): Bump OVN to 23.06-23.06.0-51 [#1790](https://github.com/openshift/ovn-kubernetes/pull/1790)
* [OCPBUGS-16121](https://issues.redhat.com/browse/OCPBUGS-16121): [release-4.13]: Delete address sets after acls that reference them [#1762](https://github.com/openshift/ovn-kubernetes/pull/1762)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/256e112b4a66f2445d72e4eb0c3abe948115413b...13cba4453587d3080eaf126ecf9ae6de429da180)