Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.13.0-0.okd-2023-07-23-051208

Team Approvals:

No tests for this release

Upgrades from:

• 4.13.0-0.okd-2023-07-22-222250 (changes) - Failed Success
• 4.13.0-0.okd-2023-07-09-062029 (changes) - Success Failed
• 4.13.0-0.okd-2023-06-24-145750 (changes) - Failed Success
• 4.13.0-0.okd-2023-06-04-080300 (changes) - Success Failed
• 4.13.0-0.okd-2023-05-22-052007 - F F F S

Upgrades to:

• 4.13.0-0.okd-2023-10-28-065448 (changes) - Failed Failed
• 4.13.0-0.okd-2023-09-30-084937 (changes) - Success Success
• 4.13.0-0.okd-2023-09-03-082426 (changes) - Success Success
• 4.13.0-0.okd-2023-08-18-135805 (changes) - Success Failed
• 4.13.0-0.okd-2023-08-04-164726 (changes) - Success Failed

---

Loading changelog, this may take a while ...

Changes from 4.13.0-0.okd-2023-05-22-052007

Created: 2023-07-23 05:30:15 +0000 UTC

Image Digest: sha256:f0e95c44ff7307fc4b3927ab2f1a9d30c2688f4e4ad3e8d702f04b1171bf84c6

Release 4.13.0-0.okd-2023-07-23-051208 was created from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-07-23-051208

Components

• Kubernetes upgraded from 1.26.3 to 1.26.6
• Fedora CoreOS upgraded from 38.20230414.3 to 38.20230625.3

Rebuilt images without code change

• apiserver-network-proxy git 61e198ca sha256:67cf7c6421f33ed9b108cd4e8a6fdc61535a287ded18a4daf37488329dbb310c
• aws-cluster-api-controllers git acb52a08 sha256:0752ac48aca42d58c7d71910e625537a41c8f07db2ad09896ecc825664f31244
• cluster-capi-operator git ce1c9a35 sha256:9f8026ea03c9d7d7486d942b533c31fa6adb6d984194db91e309e08484d61b4d
• csi-driver-manila git c59255a3 sha256:8dc30f879b05419608419e3104b80634c22dee1fbc12635af623963351a07b7f
• driver-toolkit git d719bdcf sha256:af7055332f18015e479166879647c7635ef698afee1cbb1c28a09ccdf2e916a9
• etcd git f70da9d7 sha256:db91912b0e3c7c3ddef645b6bb057f25df5bf67b2ebcc0ddd64aa9fd3657a969
• haproxy-router git 065deab8 sha256:0638cdbb2f3390fac013f7d655c11fd991c51e1768921741dc5ba32db68a36aa
• ironic-static-ip-manager git 4536724a sha256:992d07008204ddb28397878eb792b0880544570ae122d81fefa00216f3b36c04
• openstack-cinder-csi-driver git c59255a3 sha256:895545d90c2ddb2c635c02360b9404f681d094204e5b19b32147878c3e36d479
• openstack-cloud-controller-manager git c59255a3 sha256:5adcc2803df95260476a3204edb29aa0e12fd7c421aef06044a3fff6d0f3401e
• telemeter git be81b434 sha256:8ef35b784507398208ffe74a4c514e1e577d8dea620815d325d4959e8f8ae9db

agent-installer-api-server

• MGMT-15150: Use same installer binary for all platform types (#5346) #5346
• MGMT-13947: Revert assisted boot reporter service (#5292) #5292
• Full changelog

agent-installer-node-agent

• OCPBUGS-15557: vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) #565
• OCPBUGS-14848: Filter out hidden devices (#559) #559
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-16377: [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #31
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-13811: Volume unmount repeats after successful unmount, preventing pod delete #225
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-13036: 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 #220
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-12555: Update builder to OCP4.13/go1.19 #164
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-13952: Update x/net package to v0.8.0 #68
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-12557: Bump x/net package to v0.10.0 #278
• Full changelog

azure-disk-csi-driver

• OCPBUGS-16318: 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 #44
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #86
• Full changelog

azure-file-csi-driver

• OCPBUGS-16321: 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 #30
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-15866: Use the same names for public LB in IPI and UPI Azure #7302
• OCPBUGS-16124: azure: skip LB creation when not needed #7322
• OCPBUGS-13812: ic: azure: validate diskTypes in AzureStack #7195
• OCPBUGS-15230: azure: skip NSG creation when BYO vnet #7263
• OCPBUGS-15591: [release-4.13] gcp: add confidential compute support for boostrap TF #7298
• OCPBUGS-15187: images: installer: add xz to the container #7260
• OCPBUGS-14867: Shorten SNO installation duration by releasing CPC lease #7241
• OCPBUGS-13752: Set AdditionalTrustBundle in override when mirroring not enabled #7191
• OCPBUGS-15289: gcp use preconfigured private zone for installation #7271
• OCPBUGS-14916: Replace with govc docker image and fix ibmcli folder permission issue #7245
• OCPBUGS-13323: update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 #7248
• OCPBUGS-14860: GCP XPN Private Cluster Fails with no Public Zone #7240
• OCPBUGS-13765: Support /dev/disk/by-path root device hints #7193
• OCPBUGS-14171: Ignore IAM Roles that the Installer is not authorized to access #7210
• OCPBUGS-11530: [release-4.13] add project filter to gcp usage api requests #7045
• OCPBUGS-10493: Nutanix Hostname of the VM is not set when using DHCP network config #7016
• OCPBUGS-14027: GCP XPN: Pass instance service acct in manual mode #7204
• Full changelog

baremetal-machine-controllers

• OCPBUGS-16084: Fix Metal3Remediation CRD install order #194
• Full changelog

baremetal-operator

• OCPBUGS-13374: Do not try to update images for nodes in transient states #282
• OCPBUGS-13927: Deleting unmanaged BMH get stuck fix #281
• Full changelog

baremetal-runtimecfg

• OCPBUGS-14487: Support IPv6 VIP for setup with multipe IPv6 addresses #259
• OCPBUGS-15101: Use machine-config state instead of comparing roles #261
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-16193: reboot: set ignition version to 3.1 #1508
• OCPBUGS-16172: Add tls-server-name when property exists in kubeconfig #1506
• handle the error case of node retrieval while waiting for reboot #1484
• bring some cert rotation helpers back into 4.13 #1474
• OCPBUGS-14249: preserve explicit release image in ClusterVersion #1435
• OCPBUGS-14180: Remove closed centos7 registry from newapp unit tests #1432
• Full changelog

cloud-credential-operator

• OCPBUGS-12565: CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] #543
• Full changelog

cloud-network-config-controller

• OCPBUGS-15856: Azure: Handle already existing IP configurations #116
• OCPBUGS-14635: increase GCP egress ip capacity to 100 from 10 #113
• Full changelog

cluster-authentication-operator

• OCPBUGS-15258: Correctly link oauth apiserver ServiceMonitor with its Service #617
• OCPBUGS-13763: dont log tokens #618
• Full changelog

cluster-baremetal-operator

• OCPBUGS-15472: Limit role binding to openshift-machine-api namespace #346
• Full changelog

cluster-capi-controllers

• OCPBUGS-12567: Bump x/net package to v0.10.0 #176
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-15746: Alibaba platforms should not be upgradeable #260
• OCPBUGS-13011: Add beta topology labels flag to Azure cloud node manager #250
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-15330: Fix lint issue #222
• OCPBUGS-15161: Surface cpms vs machine diff #218
• OCPBUGS-14024: Check ProviderSpec before generating MachineInfo #211
• OCPBUGS-13888: fix double machine creation on stale cache #208
• Full changelog

cluster-dns-operator

• OCPBUGS-11449: Enable topology-aware hints if, and only if, nodes have zones #367
• OCPBUGS-15225: Add support for protocolStrategy API field to enable force_tcp configuration #372
• Full changelog

cluster-ingress-operator

• OCPBUGS-15434: [release-4.13] Fix invalid DNS name formatting for GCP #958
• OCPBUGS-15515: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #955
• OCPBUGS-12743: bump controller-runtime to fix the multi namespace cache indexing #921
• OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #935
• OCPBUGS-12918: gatewayclass: Update for OSSM 2.4 API change #917
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-13763: dont log jwt tokens #1499
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-13093: Bump golang.org/x/net #20
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-11353: AWS should not use external-cloud-volume-plugin post CSI migration #734
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-14651: disable debug pporf with unauthenticated port for 4.13 #480
• Full changelog

cluster-monitoring-operator

• OCPBUGS-16023: Add the trusted CA bundle in UWM Prometheus pods #2041
• OCPBUGS-15469: Limit the value of GOMAXPROCS on node-exporter to 4. #2021
• OCPBUGS-14251: Add new web console usage metrics #1976
• OCPBUGS-12488: go.mod: update golang.org/x/net to v0.7.0 #1957
• OCPBUGS-13007: Add build number to rules #1964
• Full changelog

cluster-network-operator

• OCPBUGS-11539: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1774
• OCPBUGS-15977: Add logic to pick the openshift-sdn shims from right directories #1880
• OCPBUGS-15962: Add logic to pick the ovn-k8s-cni-overlay binary from the right dir #1877
• Change rhel7/8 to rhel8/9 #1869
• OCPBUGS-15476: Add release version annotation to whereabouts-reconciler #1853
• OCPBUGS-15139: Remove nodeSelector for architecture in whereabouts daemonset #1840
• OCPBUGS-14871: Do not rely on ControlPlaneTopology do determine if running in HyperShift #1837
• OCPBUGS-13809: Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1813
• OCPBUGS-14367: High API requests due to allowlist and operconfig reconcilers running too often #1824
• Full changelog

cluster-node-tuning-operator

• E2E: Add memory manager sanity test case (#573) (#695) #573
• e2e: latency testing: increase the expected threshold (#709) #709
• Do not rollback settings on TuneD exit (#704) #704
• Switch to rslave/HostToContainer volume mount propagation (#705) #705
• e2e: perf-prof: disable truncating gomega output (#707) #707
• OCPBUGS-14895: Do not fail creating cgroups if they exist already (#684) #684
• OCPBUGS-14331: Fix updating numa core siblings map in GetCpuSiblings function (#669) #669
• render: remove uid from render-sync target (#594) (#609) #594
• Remove cpu-quota.crio.io: disable annotation (#670) #670
• Add PerformanceProfiles to ‘oc adm must-gather’ (#657) #657
• OCPBUGS-11709: pao e2e: skip hugepages and numa tests properly (#643) #643
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-13763: dont log tokens #541
• Full changelog

cluster-policy-controller

• OCPBUGS-14091: [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources #116
• Full changelog

cluster-samples-operator

• OCPBUGS-15756: Update Jenkins and Jenkins Agent Base image versions #505
• OCPBUGS-14598: Updating to use Jenkins 4.13 images #503
• Full changelog

cluster-storage-operator

• OCPBUGS-15378: decrease severity for MultipleDefaultStorageClasses alert #383
• Full changelog

cluster-update-keys

• Adding the new CI Signer public key #50
• Full changelog

cluster-version-operator

• OCPBUGS-16613: Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 #948
• Full changelog

console

• OCPBUGS-15998: Upload JAR file does not work if the Cluster Samples Operator is disabled #12992
• OCPBUGS-15810: only show pipelines doc link for downstream #12981
• OCPBUGS-15982: get Kamelets from the camel-k-operator namespace as well #12988
• OCPBUGS-16244: Fix operator backed catalog page when copied CSVs disabled #13019
• OCPBUGS-15194: Remove tech preview badge from Pipeline repository pages #12916
• OCPBUGS-10326: re-enable operator-install-single-namespace.spec.ts test #12653
• OCPBUGS-15848: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12976
• OCPBUGS-15890: Use proxy with web socket connection and monitoring dashboard #12978
• OCPBUGS-15720, OCPBUGS-15721, OCPBUGS-15722: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12963
• OCPBUGS-14426: account for single object in status.conditions instead… #12875
• OCPBUGS-14267: Add Pipeline metrics unsupported empty page #12864
• OCPBUGS-15410: Add Git Repository (PAC) doesn’t setup GitLab and Bitbucket configuration correct #12936
• OCPBUGS-15787: Remove access review check for PipelineResource from Pipeline section #12967
• OCPBUGS-15228: Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12937
• [release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading #12931
• OCPBUGS-14166: Fixed Make Serverless Form Error #12857
• OCPBUGS-14336: use service port name instead targetPort in the Pipeline Event listener route #12870
• OCPBUGS-14310: Could not import multiple resources via JSON (while YAML supports this) #12868
• OCPBUGS-15335: Delete annotation ‘tekton.dev/v1beta1TaskRuns’ when rerun the PLR #12927
• OCPBUGS-15130: Helm Repository “Edit” button results in 404 #12909
• OCPBUGS-14189: Corrected Labels for resolving the bug related to the Create Route Checkbox #12858
• OCPBUGS-13642: Fix OLM k8sResourcePrefix descriptor dropdown behavior #12812
• OCPBUGS-11974: Add page title to Devconsole pages #12844
• OCPBUGS-15465, OCPBUGS-15481: Remove PipelineResource CRD check because it’s not installed with PO 1.11 anymore and disable operator-uninstall test #12949
• OCPBUGS-14943: visiting Configurations page returns error Cannot read… #12897
• OCPBUGS-12785: Project admin can update and view subscription from operator details page #12780
• OCPBUGS-14574: only copy workload annotations to debug pod #12879
• OCPBUGS-14258: Add vSphere cluster field. #12862
• OCPBUGS-14195: Topology UI doesn’t recognize Serverless Rust function for proper UI icon #12860
• OCPBUGS-10527: When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox #12658
• OCPBUGS-14165: propagate labels to pipeline resources #12856
• OCPBUGS-13959: Wait with CRD/model translation until i18n bundles are loaded #12842
• OCPBUGS-13783: fix runtime error on OperatorHub details pages #12830
• OCPBUGS-12770: fix buildconfig form ns #12776
• Full changelog

console-operator

• OCPBUGS-12461: Add new PrometheusRule to collect metrics for cluster-monitoring-operator #758
• Full changelog

container-networking-plugins

• Add rhel9 binary #102
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-12484, OCPBUGS-12527, OCPBUGS-14505: Mitigating CVE-2022-41723 #140
• Full changelog

docker-builder

• OCPBUGS-15606: Add the git-lfs package #352
• OCPBUGS-10002, OCPBUGS-8159, OCPBUGS-8191: Mitigate CVE-2023-26054 #348
• Full changelog

egress-router-cni

• Add rhel9 binary #71
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump to latest fedora-coreos stable #630
• manifests: remove intel_pstate=disable, enforce cgroupsv2 #629
• Bump fedora-coreos to latest stable #625
• Bump fedora-coreos to latest stable #620
• Bump openshift-os to latest release-4.13 #615
• Bump fedora-coreos to latest stable #611
• Bump fedora-coreos to latest stable #608
• add SELinux policy for ip AVCs #603
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-12603: Bump x/net package to v0.10.0 #32
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-12604: Bump x/net package to v0.10.0 #196
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-16331: 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 #38
• Full changelog

hyperkube, pod

• OCPBUGS-15866: remove readiness check for cache exclusion #1625
• OCPBUGS-15866: UPSTREAM: <drop>: hack/update-vendor.sh #1637
• OCPBUGS-15246: Bump to k8s 1.26.6 #1610
• OCPBUGS-8738: bump apiserver-lib-go #1611
• OCPBUGS-14589: [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1596
• OCPBUGS-13747: 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy #1580
• OCPBUGS-14048: Bump to k8s 1.26.5 #1586
• Full changelog

hypershift

• 4.13: Add management cluster KAS network policy #2786
• Leader election config update. #2801
• OCPBUGS-16160: fix deletion bug when hostedzone is already deleted #2813
• HOSTEDCP-1061: [release-4.13] Implement dedicated request serving nodes for HostedClusters #2809
• Update RHTAP references (release-4.13) #2816
• OCPBUGS-16057: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2798
• OCPBUGS-14862 Improve clarity around hypershift operator permissions #2810
• HOSTEDCP-1101: Add snyk-secret HO RHTAP scripts #2799
• OCPBUGS-16125: [release-4.13] Update vendored dependencies #2797
• OCPBUGS-15774: autoscaling balance similar groups #2805
• OCPBUGS-15965: Reject VPCE Connections during VPCE Service cleanup #2789
• Update RHTAP references (release-4.13) #2751
• OCPBUGS-15171: Skip AWS resource deletion for ‘Unknown’ OIDC state #2701
• HOSTEDCP-1008: Add NodePoolTransitionSeconds metric #2758
• OCPBUGS-15281: Check OwningIngressController also in Labels #2715
• HOSTEDCP-1060: refactor ignition-server reconcilation and add ignition-server proxy #2748
• HOSTEDCP-1073: enforce blocked rollout of HCP #2735
• HOSTEDCP-1003: Set AWS conditions only for AWS platform #2670
• OCPBUGS-15268 properly handle user CA bundle not existing #2710
• OCPBUGS-15301: [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2696
• OCPBUGS-14030: Include default ingress CA in root CA bundle #2599
• OCPBUGS-14490: Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2645
• OCPBUGS-14801: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2666
• HOSTEDCP-1048: Add impersonate feature to the CLI and document HC dump procedure #2681
• OCPBUGS-14872: Honor global ingress configuration LoadBalancer type on AWS #2677
• OCPBUGS-14436: Add ClusterUpgradeDuration metric #2637
• HOSTEDCP-1009: Allow external-dns image to be set in install cli #2652
• Red Hat Trusted App Pipeline update hypershift-operator-release-413 #2641
• Red Hat Trusted App Pipeline purge hypershift #2640
• OCPBUGS-13735: Cluster-api SA can’t create events and fix permissions wrongly included #2610
• OCPBUGS-14242: Remove external-dns –events flag #2621
• OCPBUGS-14155: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2613
• OCPBUGS-13399: Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2552
• HOSTEDCP-1010: Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2611
• HOSTEDCP-947: Increases default etcd PV size to 8Gi #2569
• HOSTEDCP-926: Send metric when HO/CPO decide to skip cloud resource deletion #2594
• HOSTEDCP-975: Backport nodepools metrics #2601
• Red Hat Trusted App Pipeline update hypershift #2603
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-12612: Update x/net to v0.7.0 #52
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-14073: UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #24
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-12616: Bump x/net to v0.7.0 #23
• Full changelog

insights-operator

• OCPBUGS-14773: extend configmap gatherer to get gateway-mode-config (#788) (#791) #788
• [release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) #794
• OCPBUGS-14318: gather PDBs only from openshift namespaces (#786) #786
• Full changelog

ironic

• Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. #383
• OCPBUGS-13587: Add python-flask dependency #372
• OCPBUGS-14135: ironic.conf.j2: Bump min_command_interval to 30 on SCOS #378
• Bug OCPBUGS-13334: Bump ironic version to include fix to OCPBUGS-13334. #366
• Full changelog

ironic-agent

• Switch to udevadm command install instead of package [OKD] #83
• “Bug OCPBUGS-15777: Switch to udevadm command install instead of package” #81
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-15734: Binary should be compiled on rhel9 #91
• Full changelog

kube-proxy, sdn

• OCPBUGS-15977: Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir #558
• OCPBUGS-15977: Dockerfile changes to build both rhel8 and rhel9 binaries #557
• OCPBUGS-14278: fix possible concurrent map read/write #550
• Full changelog

kube-rbac-proxy

• OCPBUGS-12513: go.mod: update golang.org/x/net to v0.7.0 #68
• Full changelog

kuryr-cni, kuryr-controller

• Bug OCPBUGS-16340: Fix np retry #738
• OCPBUGS-15457: Remove unneeded grpcio dependencies from RPM #735
• Full changelog

machine-api-operator

• OCPBUGS-12626: Update golang.org/x/net dependency #1148
• Full changelog

machine-config-operator

• OCPNODE-1717: Update config node spec while explicitly updating the cgroups mode #3793
• 4.13: Revert rhel9 binaries builds #3802
• OCPBUGS-14459: daemon: Remove noisy log message #3723
• OCPBUGS-15580: 4.13: Dockerfile: update rhel7 nmstate pin #3764
• OCPBUGS-15463: Minor fix to support protectKernelDefaults field in Kubelet Config #3757
• 4.13: Dockerfile: use proper rhel9 image #3771
• 4.13: use rhel9 builder for daemon binary #3760
• OCPBUGS-13311: daemon: write certs in firstboot-complete path #3702
• OCPBUGS-13404, OCPBUGS-14298: Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 #3716
• OCPBUGS-14850: Allow userfaultfd syscall to be used by unprivileged users #3743
• OCPBUGS-13974: MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default #3714
• OCPBUGS-13138: daemon: Don’t traverse /run/ostree/auth.json symlink #3697
• Full changelog

multus-admission-controller

• OCPBUGS-13709: Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 #68
• Full changelog

multus-cni

• Add rhel9 binary for multus #169
• OCPBUGS-8398: Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] #154
• OCPBUGS-13759: Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) #161
• OCPBUGS-13814: Fix multus to support CNI plugin which does not create interface [backport 4.13] #163
• Full changelog

multus-networkpolicy

• OCPBUGS-12641: CVE-2022-41723: Update vendors to fix dependabot alerts #28
• Full changelog

multus-route-override-cni

• Add rhel9 binary #37
• Full changelog

multus-whereabouts-ipam-cni

• Bug 16002: Change default binary to RHEL8 image #144
• Restores RHEL specific binary build in dockerfile and updates to rhel9/8 #139
• Full changelog

network-interface-bond-cni

• Add rhel9 binary #56
• Full changelog

network-tools

• Dockerfile: move to RHEL9 base image #83
• Full changelog

oc-mirror

• OCPBUGS-16372: A variety of changes needed for correct operation with multi… (#661) #661
• OCPBUGS-13871: fix: changes on help info content (#654) #654
• Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) #637
• Removes Ross and adds Jeremy in the OWNER file (#645) #645
• Full changelog

operator-lifecycle-manager, operator-registry

• Allow cpb to be statically compiled / exempt from FIPS compliance #519
• OCPBUGS-15589: fix dynamic conversion webhook #499
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-14653: set upgrade condition of operator to false #118
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-15368: [release-4.13]: initial pods are not wired for hybrid overlay #1721
• OCPBUGS-15651: Improve syncNodes to remove stale data #1731
• OCPBUGS-15586: [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector #1745
• Dockerfile: build both RHEL8 and RHEL9 shims #1748
• OCPBUGS-15585: [release-4.13] Fix egressFirewall create error handling #1733
• OCPBUGS-14492: Backport OVN component templates for NodePort services. #1709
• OCPBUGS-15608: Nuke old .rhel9 Dockerfiles #1711
• OCPBUGS-13745: [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire #1675
• OCPBUGS-15372: [release-4.13] Fix network policy to work with long namespace names #1722
• OCPBUGS-14979: Validate port before deleting conntrack flow #1712
• OCPBUGS-15140: Fix stale SNAT entries for completed pods #1715
• OCPBUGS-14482: Dockerfiles: sync RHEL9 dockerfiles to regular unused ones #1695
• OCPBUGS-12864: Drop packets were not properly SNATed #1662
• OCPBUGS-13170: Fix bug that resulted in routes not be restored to a new vnic #1668
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-12672: update golang.org/x/net #237
• Full changelog

route-controller-manager

• OCPBUGS-14276: Bump k8s to 1.26.5 #26
• Full changelog

tests

• OCPBUGS-16164: allow cluster-config-operator to manage featuregate upgrade block #28050
• OCPBUGS-15892: remove references to registry.centos.org #28031
• OCPBUGS-15746: Skip CCM upgradable condition on AlibabaCloud #28025
• OCPBUGS-7762: Bump with latest openshift/kubernetes at 4.13 #27973
• OCPBUGS-5029: [release-4.13] OpenStack: Restore in-tree cinder provisioner tests #27827
• OCPBUGS-14342: Increase timeout in sysctl allowlist test #27956
• OCPBUGS-13840: Add missing error check in sysctl allowlist test #27929
• OCPBUGS-14127: Move from registry.centos.org to quay.io #27948
• OCPBUGS-12700: update-etcd-scaling-test #27892
• Full changelog

vsphere-problem-detector

• OCPBUGS-14571: Check all storage classes including CSI storageclasses #120
• OCPBUGS-14098: In UPI clusters VSphere platform could be nil #118
• OCPBUGS-14085: Log vcenter version information #117
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-21-1114284.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-221403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github