# 4.13.0-0.okd-2023-09-03-082426

Created: 2023-09-03 11:56:59 +0000 UTC

Image Digest: `sha256:21589242ca379cd347bfe5ce1b0cc69fb6dcc2d3f2f536663e26632532f1ae97`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-09-03-082426


## Changes from 4.13.0-0.okd-2023-08-18-135805

### Components

* Kubernetes 1.26.7
* Fedora CoreOS upgraded from 38.20230722.3 to 38.20230806.3


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [06189bcd](https://github.com/openshift/assisted-service/commit/06189bcdb0bea068f8ac51a3550fcdcbde522a76) `sha256:d114a327e6081129db53fd22b3f888d8f7463c78d4d6f23d9177fa1fecc40dc5`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [496fd488](https://github.com/openshift/csi-driver-manila-operator/commit/496fd488c7b7a9213006a777c4e4fe101eb97860) `sha256:6e20535d581702ed7699b8979008387e344613cc2b63ce036a96da3b83f4ad21`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [87651668](https://github.com/openshift/image-customization-controller/commit/87651668b314426960ea4974429f3b0ed16c3f31) `sha256:bc0ed4a09ab4051be6c487b17fec5242f201f1075ad6966d6c9b1fc98603002f`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b14856ff](https://github.com/openshift/machine-os-images/commit/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e) `sha256:05f081d5921cf1c5c0fcd408b698b9e3e2bb7b0f3f98424674e23c48e1a2c8e7`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [e548fbd0](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/e548fbd06c6ab3973e1a683cd94ec84a905c1354) `sha256:308f3a748aeb5563118657044e883625c54f994a0eca2fe097ec6b0726d0de32`
* [operator-marketplace](https://github.com/operator-framework/operator-marketplace) git [d569c22c](https://github.com/operator-framework/operator-marketplace/commit/d569c22c518fc931ff48f66fb38064ddd976729f) `sha256:fa83286597062b31dddea11fe81d1df074bcd420faa7784a558e5dcc954f19c6`


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/efdf6fb258d835614fef0d570074defa5d74aa93)

* [OCPBUGS-17823](https://issues.redhat.com/browse/OCPBUGS-17823): CORS-2445: GCP: Add osImage to the install config [#7431](https://github.com/openshift/installer/pull/7431)
* [OCPBUGS-14432](https://issues.redhat.com/browse/OCPBUGS-14432): Replica validations [#7423](https://github.com/openshift/installer/pull/7423)
* [OCPBUGS-13865](https://issues.redhat.com/browse/OCPBUGS-13865): vSphere Add ova sha query; additional debugging [#7198](https://github.com/openshift/installer/pull/7198)
* [Full changelog](https://github.com/openshift/installer/compare/26b887d89a13709170d9685ea1c133b3f865997d...efdf6fb258d835614fef0d570074defa5d74aa93)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/64248a87ca421b5f28d2d472c48cd29a465e75f8)

* [OCPBUGS-15853](https://issues.redhat.com/browse/OCPBUGS-15853): pkg/operator/configobserver: check that the serving certificate refer… [#1522](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1522)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/ad323b3657611da6bf7ea78eba8ffa998ba56fe9...64248a87ca421b5f28d2d472c48cd29a465e75f8)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/11c7b29545be8abc0004ec3d46de1695d3f8896a)

* [OCPBUGS-13920](https://issues.redhat.com/browse/OCPBUGS-13920): add Hypershift release-image annotation to multus [#1817](https://github.com/openshift/cluster-network-operator/pull/1817)
* [OCPBUGS-18099](https://issues.redhat.com/browse/OCPBUGS-18099): [release-4.13] Use encapsulation=true for IBM Cloud [#1932](https://github.com/openshift/cluster-network-operator/pull/1932)
* [OCPBUGS-17721](https://issues.redhat.com/browse/OCPBUGS-17721): Enhance check controller to remove old check objects [#1950](https://github.com/openshift/cluster-network-operator/pull/1950)
* [OCPBUGS-17457](https://issues.redhat.com/browse/OCPBUGS-17457): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1936](https://github.com/openshift/cluster-network-operator/pull/1936)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6f6b79bb994a5f38b8fc25edcd43b42229b3b70a...11c7b29545be8abc0004ec3d46de1695d3f8896a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/bf1680f951b8fa7d3e886c7ce7e50193af87e376)

* [OCPBUGS-17845](https://issues.redhat.com/browse/OCPBUGS-17845): deflake ht aware test (#763) [#763](https://github.com/openshift/cluster-node-tuning-operator/pull/763)
* [OCPBUGS-17794](https://issues.redhat.com/browse/OCPBUGS-17794): rps: use default rps mask kernel API (#760) [#760](https://github.com/openshift/cluster-node-tuning-operator/pull/760)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/792290a068bcb0e013c5f3aa6e8d36157581e111...bf1680f951b8fa7d3e886c7ce7e50193af87e376)


### [console](https://github.com/openshift/console/tree/875f16fa464ed8f2f0b9e86a5652ac085ebd5097)

* [OCPBUGS-18335](https://issues.redhat.com/browse/OCPBUGS-18335): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13120](https://github.com/openshift/console/pull/13120)
* [OCPBUGS-17876](https://issues.redhat.com/browse/OCPBUGS-17876): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13095](https://github.com/openshift/console/pull/13095)
* [Full changelog](https://github.com/openshift/console/compare/cc515ac4c3e731917d5a82b74e1fe380dfdb5085...875f16fa464ed8f2f0b9e86a5652ac085ebd5097)


### [console-operator](https://github.com/openshift/console-operator/tree/6886f89bb31c59e60f35c20c05bcde0df8c29c94)

* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Add missing watch permission for helm-chartrepos-viewers [#778](https://github.com/openshift/console-operator/pull/778)
* [OCPBUGS-14039](https://issues.redhat.com/browse/OCPBUGS-14039): Backport #774 and #763 [#779](https://github.com/openshift/console-operator/pull/779)
* [Full changelog](https://github.com/openshift/console-operator/compare/c5f3b24448f6a7bf5dd5d145008df85e04ec5968...6886f89bb31c59e60f35c20c05bcde0df8c29c94)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)

* [OCPBUGS-17728](https://issues.redhat.com/browse/OCPBUGS-17728): Default CNI binaries to RHEL 8 [#117](https://github.com/openshift/containernetworking-plugins/pull/117)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/26001de8244adb4bd1ae4c4046932b5a9831edce...dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)


### [fedora-coreos, machine-os-content](https://github.com/openshift/okd-machine-os/tree/c1b89631c0c4894b1a808356f8bd53b33def0675)

* Bump fedora-coreos to latest stable [#647](https://github.com/openshift/okd-machine-os/pull/647)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/bafc562d4ca82ff18a35f606c225cce21800c5d3...c1b89631c0c4894b1a808356f8bd53b33def0675)


### [hypershift](https://github.com/openshift/hypershift/tree/86c3c63a08af8a0b2d208d437ee13f1fb463d829)

* Updated secret permissions for openshift-route-controller-manager [#2923](https://github.com/openshift/hypershift/pull/2923)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2885](https://github.com/openshift/hypershift/pull/2885)
* chore(deps): update rhtap references (release-4.13) [#2921](https://github.com/openshift/hypershift/pull/2921)
* Revert "HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS" [#2931](https://github.com/openshift/hypershift/pull/2931)
* [Full changelog](https://github.com/openshift/hypershift/compare/2372a7701a03b338e843ef4c03528beb498ad216...86c3c63a08af8a0b2d208d437ee13f1fb463d829)


### [ironic](https://github.com/openshift/ironic-image/tree/fc1cca95711797767336878bfb9e2e4b9801ecfa)

* [OCPBUGS-17837](https://issues.redhat.com/browse/OCPBUGS-17837): Fix PROVISIONING_MACS unbound [#393](https://github.com/openshift/ironic-image/pull/393)
* [Full changelog](https://github.com/openshift/ironic-image/compare/6cb7c592c317e07a80b1d004312ece76e37024a7...fc1cca95711797767336878bfb9e2e4b9801ecfa)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/aeb7d050748a23e0474f98a447d490e3b72e0ae6)

* [OCPBUGS-16218](https://issues.redhat.com/browse/OCPBUGS-16218): Prevent NM from unsetting the hostname [#3805](https://github.com/openshift/machine-config-operator/pull/3805)
* [OCPBUGS-17997](https://issues.redhat.com/browse/OCPBUGS-17997): SSHkeys fails to write on upgrade to 4.13.rc3 [#3879](https://github.com/openshift/machine-config-operator/pull/3879)
* [OCPBUGS-18076](https://issues.redhat.com/browse/OCPBUGS-18076): daemon: create /etc/systemd/network directory on node [#3888](https://github.com/openshift/machine-config-operator/pull/3888)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/eebcd95ce3be079098c06c4a0f1bb28b072e99ff...aeb7d050748a23e0474f98a447d490e3b72e0ae6)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/2f7e7bc237611601702ae32c3055a44f9694bf97)

* [OCPBUGS-18106](https://issues.redhat.com/browse/OCPBUGS-18106): manual cherrypick (#684) [#684](https://github.com/openshift/oc-mirror/pull/684)
* [OCPBUGS-17998](https://issues.redhat.com/browse/OCPBUGS-17998): fix: ICSP with incorrect mirror path (#685) [#685](https://github.com/openshift/oc-mirror/pull/685)
* [OCPBUGS-17453](https://issues.redhat.com/browse/OCPBUGS-17453): Fix " OCI index found, but accept header does not support OCI indexes (#677) [#677](https://github.com/openshift/oc-mirror/pull/677)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/f11a9001caad8fe146c73baf2acc38ddcf3642b5...2f7e7bc237611601702ae32c3055a44f9694bf97)


### [okd-rpms](https://github.com/openshift/okd-machine-os/tree/7d3cc6a4a8541a866202ee4b5472aa246688d25a)

* Bump Fedora CoreOS version string [#650](https://github.com/openshift/okd-machine-os/pull/650)
* Bump fedora-coreos to latest stable [#647](https://github.com/openshift/okd-machine-os/pull/647)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/bafc562d4ca82ff18a35f606c225cce21800c5d3...7d3cc6a4a8541a866202ee4b5472aa246688d25a)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/1e62b169e418e72d443ae396b797f66e520b81de)

* [OCPBUGS-17791](https://issues.redhat.com/browse/OCPBUGS-17791): opm: always serve pprof endpoints, improve server allocations (#1129) [#540](https://github.com/openshift/operator-framework-olm/pull/540)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/142d758d46ea996ef8fa79912700c7afea0badaf...1e62b169e418e72d443ae396b797f66e520b81de)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/75d07f23eb921493aafee24c540b05771b03b6d6)

* [OCPBUGS-18057](https://issues.redhat.com/browse/OCPBUGS-18057): [release-4.13] Create egress firewall with one db transaction [#1834](https://github.com/openshift/ovn-kubernetes/pull/1834)
* [OCPBUGS-17910](https://issues.redhat.com/browse/OCPBUGS-17910): Emit node events only when retry failure [#1825](https://github.com/openshift/ovn-kubernetes/pull/1825)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/e6dd7d0b48e1a47578cc6feb39695d5608bf0125...75d07f23eb921493aafee24c540b05771b03b6d6)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/26d166e8f7d1f33eff1efd7ccab92a27a188f431)

* Updated golang.org/x/net/html dependency. [#44](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/44)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/8c7b15b0b45d0f8aa168ccb8848f1e4768716f07...26d166e8f7d1f33eff1efd7ccab92a27a188f431)


### [tests](https://github.com/openshift/origin/tree/62852a2a543c7e12a2bca8d7393b1e84eab700b9)

* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Update permission to incl. watch for helmchartrepositories for console users [#28054](https://github.com/openshift/origin/pull/28054)
* [Full changelog](https://github.com/openshift/origin/compare/b1f4ee96d1d1f95af75b2701b8c5e42886a9912a...62852a2a543c7e12a2bca8d7393b1e84eab700b9)