4.13.0-0.okd-scos-2023-06-22-002852

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.13.0-0.okd-scos-2023-06-22-002852

Team Approvals:

No tests for this release

Upgrades from:

4.13.0-0.okd-scos-2023-06-21-202120 (changes) - Failed Success

Changes from 4.13.0-0.okd-scos-2023-05-25-085822

Created: 2023-06-22 08:39:44 +0000 UTC

Image Digest: sha256:d6bf461f11470b31d6d5fb5df26dc388ebc8912e232cf26d53c6701333898e77

Release 4.13.0-0.okd-scos-2023-06-22-002852 was created from registry.ci.openshift.org/origin/release-scos:4.13.0-0.okd-scos-2023-06-22-002852

Components

Kubernetes upgraded from 1.26.3 to 1.26.5
CentOS Stream CoreOS upgraded from 414.9.202305250606-0 to 414.9.202306050607-0 (diff)

Rebuilt images without code change

aws-ebs-csi-driver-operator git b6dee5c3 sha256:5495cc459c57b4362941b1c665ceedb826b25e8773d7debdee6b8e44b209f6c0
centos-stream-coreos-9 sha256:790bbc5da730585fa9ed73c1ae76b9fc600593b5b2ea3fd3ba3347a42203cbf0
cluster-capi-operator git ce1c9a35 sha256:9f8026ea03c9d7d7486d942b533c31fa6adb6d984194db91e309e08484d61b4d
driver-toolkit git d719bdcf sha256:af7055332f18015e479166879647c7635ef698afee1cbb1c28a09ccdf2e916a9
etcd git f70da9d7 sha256:db91912b0e3c7c3ddef645b6bb057f25df5bf67b2ebcc0ddd64aa9fd3657a969
haproxy-router git 065deab8 sha256:0638cdbb2f3390fac013f7d655c11fd991c51e1768921741dc5ba32db68a36aa
ironic-static-ip-manager git 4536724a sha256:992d07008204ddb28397878eb792b0880544570ae122d81fefa00216f3b36c04
machine-os-content sha256:790bbc5da730585fa9ed73c1ae76b9fc600593b5b2ea3fd3ba3347a42203cbf0
telemeter git be81b434 sha256:8ef35b784507398208ffe74a4c514e1e577d8dea620815d325d4959e8f8ae9db

agent-installer-api-server

MGMT-13947: Revert assisted boot reporter service (#5292) #5292
Full changelog

agent-installer-node-agent

OCPBUGS-14848: Filter out hidden devices (#559) #559
Full changelog

aws-ebs-csi-driver

OCPBUGS-13811: Volume unmount repeats after successful unmount, preventing pod delete #225
Full changelog

aws-pod-identity-webhook

OCPBUGS-12555: Update builder to OCP4.13/go1.19 #164
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-13952: Update x/net package to v0.8.0 #68
Full changelog

azure-cluster-api-controllers

OCPBUGS-12557: Bump x/net package to v0.10.0 #278
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-14916: Replace with govc docker image and fix ibmcli folder permission issue #7245
OCPBUGS-13323: update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 #7248
OCPBUGS-14860: GCP XPN Private Cluster Fails with no Public Zone #7240
OCPBUGS-13765: Support /dev/disk/by-path root device hints #7193
OCPBUGS-14171: Ignore IAM Roles that the Installer is not authorized to access #7210
OCPBUGS-11530: [release-4.13] add project filter to gcp usage api requests #7045
OCPBUGS-10493: Nutanix Hostname of the VM is not set when using DHCP network config #7016
OCPBUGS-14027: GCP XPN: Pass instance service acct in manual mode #7204
Full changelog

baremetal-operator

OCPBUGS-13374: Do not try to update images for nodes in transient states #282
OCPBUGS-13927: Deleting unmanaged BMH get stuck fix #281
Full changelog

baremetal-runtimecfg

OCPBUGS-15101: Use machine-config state instead of comparing roles #261
Full changelog

cli, cli-artifacts, deployer, tools

bring some cert rotation helpers back into 4.13 #1474
OCPBUGS-14249: preserve explicit release image in ClusterVersion #1435
OCPBUGS-14180: Remove closed centos7 registry from newapp unit tests #1432
Full changelog

cloud-credential-operator

OCPBUGS-12565: CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] #543
Full changelog

cloud-network-config-controller

OCPBUGS-14635: increase GCP egress ip capacity to 100 from 10 #113
Full changelog

cluster-capi-controllers

OCPBUGS-12567: Bump x/net package to v0.10.0 #176
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-13011: Add beta topology labels flag to Azure cloud node manager #250
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-15161: Surface cpms vs machine diff #218
OCPBUGS-14024: Check ProviderSpec before generating MachineInfo #211
Full changelog

cluster-ingress-operator

OCPBUGS-12743: bump controller-runtime to fix the multi namespace cache indexing #921
OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #935
OCPBUGS-12918: gatewayclass: Update for OSSM 2.4 API change #917
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-14651: disable debug pporf with unauthenticated port for 4.13 #480
Full changelog

cluster-monitoring-operator

OCPBUGS-14251: Add new web console usage metrics #1976
OCPBUGS-12488: go.mod: update golang.org/x/net to v0.7.0 #1957
OCPBUGS-13007: Add build number to rules #1964
Full changelog

cluster-network-operator

OCPBUGS-14871: Do not rely on ControlPlaneTopology do determine if running in HyperShift #1837
OCPBUGS-13809: Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1813
OCPBUGS-14367: High API requests due to allowlist and operconfig reconcilers running too often #1824
Full changelog

cluster-node-tuning-operator

OCPBUGS-14895: Do not fail creating cgroups if they exist already (#684) #684
OCPBUGS-14331: Fix updating numa core siblings map in GetCpuSiblings function (#669) #669
render: remove uid from render-sync target (#594) (#609) #594
Remove cpu-quota.crio.io: disable annotation (#670) #670
Add PerformanceProfiles to ‘oc adm must-gather’ (#657) #657
Full changelog

cluster-policy-controller

OCPBUGS-14091: [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources #116
Full changelog

cluster-samples-operator

OCPBUGS-14598: Updating to use Jenkins 4.13 images #503
Full changelog

cluster-update-keys

Adding the new CI Signer public key #50
Full changelog

console

OCPBUGS-14943: visiting Configurations page returns error Cannot read… #12897
OCPBUGS-12785: Project admin can update and view subscription from operator details page #12780
OCPBUGS-14574: only copy workload annotations to debug pod #12879
OCPBUGS-14258: Add vSphere cluster field. #12862
OCPBUGS-14195: Topology UI doesn’t recognize Serverless Rust function for proper UI icon #12860
OCPBUGS-10527: When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox #12658
OCPBUGS-14165: propagate labels to pipeline resources #12856
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-12484, OCPBUGS-12527, OCPBUGS-14505: Mitigating CVE-2022-41723 #140
Full changelog

docker-builder

OCPBUGS-10002, OCPBUGS-8159, OCPBUGS-8191: Mitigate CVE-2023-26054 #348
Full changelog

gcp-cloud-controller-manager

OCPBUGS-12603: Bump x/net package to v0.10.0 #32
Full changelog

gcp-cluster-api-controllers

OCPBUGS-12604: Bump x/net package to v0.10.0 #196
Full changelog

hyperkube, pod

OCPBUGS-14589: [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1596
OCPBUGS-13747: 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy #1580
OCPBUGS-14048: Bump to k8s 1.26.5 #1586
Full changelog

hypershift

OCPBUGS-14030: Include default ingress CA in root CA bundle #2599
OCPBUGS-14490: Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2645
OCPBUGS-14801: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2666
HOSTEDCP-1048: Add impersonate feature to the CLI and document HC dump procedure #2681
OCPBUGS-14872: Honor global ingress configuration LoadBalancer type on AWS #2677
OCPBUGS-14436: Add ClusterUpgradeDuration metric #2637
HOSTEDCP-1009: Allow external-dns image to be set in install cli #2652
Red Hat Trusted App Pipeline update hypershift-operator-release-413 #2641
Red Hat Trusted App Pipeline purge hypershift #2640
OCPBUGS-13735: Cluster-api SA can’t create events and fix permissions wrongly included #2610
OCPBUGS-14242: Remove external-dns –events flag #2621
OCPBUGS-14155: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2613
OCPBUGS-13399: Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2552
HOSTEDCP-1010: Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2611
HOSTEDCP-947: Increases default etcd PV size to 8Gi #2569
HOSTEDCP-926: Send metric when HO/CPO decide to skip cloud resource deletion #2594
HOSTEDCP-975: Backport nodepools metrics #2601
Red Hat Trusted App Pipeline update hypershift #2603
Full changelog

ibm-cloud-controller-manager

OCPBUGS-12612: Update x/net to v0.7.0 #52
Full changelog

ibm-vpc-node-label-updater

OCPBUGS-14073: UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #24
Full changelog

ibmcloud-machine-controllers

OCPBUGS-12616: Bump x/net to v0.7.0 #23
Full changelog

ironic

OCPBUGS-13587: Add python-flask dependency #372
OCPBUGS-14135: ironic.conf.j2: Bump min_command_interval to 30 on SCOS #378
Full changelog

kube-proxy, sdn

OCPBUGS-14278: fix possible concurrent map read/write #550
Full changelog

machine-api-operator

OCPBUGS-12626: Update golang.org/x/net dependency #1148
Full changelog

machine-config-operator

OCPBUGS-13311: daemon: write certs in firstboot-complete path #3702
OCPBUGS-13404, OCPBUGS-14298: Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 #3716
OCPBUGS-14850: Allow userfaultfd syscall to be used by unprivileged users #3743
OCPBUGS-13974: MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default #3714
Full changelog

multus-admission-controller

OCPBUGS-13709: Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 #68
Full changelog

multus-cni

OCPBUGS-8398: Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] #154
OCPBUGS-13759: Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) #161
Full changelog

oc-mirror

OCPBUGS-13871: fix: changes on help info content (#654) #654
Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) #637
Removes Ross and adds Jeremy in the OWNER file (#645) #645
Full changelog

ovirt-csi-driver-operator

OCPBUGS-14653: set upgrade condition of operator to false #118
Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

OCPBUGS-14979: Validate port before deleting conntrack flow #1712
OCPBUGS-15140: Fix stale SNAT entries for completed pods #1715
OCPBUGS-14482: Dockerfiles: sync RHEL9 dockerfiles to regular unused ones #1695
OCPBUGS-12864: Drop packets were not properly SNATed #1662
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-12672: update golang.org/x/net #237
Full changelog

route-controller-manager

OCPBUGS-14276: Bump k8s to 1.26.5 #26
Full changelog

tests

OCPBUGS-5029: [release-4.13] OpenStack: Restore in-tree cinder provisioner tests #27827
OCPBUGS-14342: Increase timeout in sysctl allowlist test #27956
OCPBUGS-13840: Add missing error check in sysctl allowlist test #27929
OCPBUGS-14127: Move from registry.centos.org to quay.io #27948
OCPBUGS-12700: update-etcd-scaling-test #27892
Full changelog

vsphere-problem-detector

OCPBUGS-14571: Check all storage classes including CSI storageclasses #120
OCPBUGS-14098: In UPI clusters VSphere platform could be nil #118
OCPBUGS-14085: Log vcenter version information #117
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github