Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.13.0-0.okd-2023-09-30-084937

Team Approvals:

No tests for this release

Upgrades from:

• 4.13.0-0.okd-scos-2023-07-07-043417 - F F F
• 4.13.0-0.okd-2023-09-30-012005 (changes) - Success
• 4.13.0-0.okd-2023-09-03-082426 (changes) - Success Success
• 4.13.0-0.okd-2023-08-18-135805 (changes) - Success Failed
• 4.13.0-0.okd-2023-08-04-164726 (changes) - Success Success
• 4.13.0-0.okd-2023-07-23-051208 (changes) - Success Success

Upgrades to:

• 4.13.0-0.okd-2023-10-28-065448 (changes) - F F S

---

Loading changelog, this may take a while ...

Changes from 4.13.0-0.okd-scos-2023-07-07-043417

Created: 2023-10-01 05:42:44 +0000 UTC

Image Digest: sha256:fc0dd43b87942f40d7eec16782ca2965199ced131906405127837884b5342b92

Release 4.13.0-0.okd-2023-09-30-084937 was created from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-09-30-084937

Components

• Kubernetes upgraded from 1.26.6 to 1.26.9
• Fedora CoreOS upgraded from 414.9.202306050607-0 to 38.20230902.3

New images

• contour git 45e9b621 sha256:670ea96e56d324551a7bc17d10c7fc763933b58b43bd4221bec85706951ecadb
• contour-operator git e07f7060 sha256:7749234f09796ea537fb80ecb6c8798ec6e11e330c0db02a9d3aebfcb8bf0575
• external-dns git 7511ef28 sha256:d760dd5ee7eacb8d84c913bf8518a57be3af14a1bed57bf59adaadeb64cc4d75
• fedora-coreos git 58203170 sha256:64a178ad740b0b031e95a91faf0f7550c86898a96dc2d770626113999febebe9
• ironic-hardware-inventory-recorder git 62469223 sha256:24d775eba959975ced19126ca768b3073099ea8527ae909c079fb99c52e8b6c4
• local-storage-static-provisioner git 4561a388 sha256:4bfe93760e855fae291f52a96c62817766eda1867c0aa181c60da31b76700915
• okd-rpms git 58203170 sha256:5f99900c59d100d00c1aeeb05df4bfdc59fbaef3b7e2b9bc220244ce9e307aaa
• ovirt-installer git 7cbe79cb sha256:6bf6b8862aa5bcba3919dee1f5cf3cb16c03ed3da39ca83e0816b0569e83f057

Removed images

• centos-stream-coreos-9

Rebuilt images without code change

• alibaba-disk-csi-driver-operator git c08d87a1 sha256:7d54ad24ae9fe62513311945fae20e2ab9fa6481fb4fdc13b9334b15179be56f
• apiserver-network-proxy git 61e198ca sha256:67cf7c6421f33ed9b108cd4e8a6fdc61535a287ded18a4daf37488329dbb310c
• cloud-credential-operator git 0621fcaf sha256:e6e8368d2b86ef93e9772fa1f3396a2a04b4ade9f63d4c3b054465e84247b578
• cluster-samples-operator git f785bad1 sha256:94b51662dc75a39c79e1bd9ff56cebdde85965a18e424ca16948827c51b648de
• cluster-update-keys git 5b725937 sha256:1c2dcd87d40fbcbcd669403face8f9de9c8db96a39db1e7eff854ef99a31f245
• csi-driver-manila git c59255a3 sha256:8dc30f879b05419608419e3104b80634c22dee1fbc12635af623963351a07b7f
• csi-driver-manila-operator git b1295cd1 sha256:21f1cee4d154b08bf65d4ced9dd0e2460f3737f3e2b20eec8fd5ed1e8d180e30
• csi-external-attacher git e9d59a2d sha256:bc5522a4ad7d20a451e7f318bbec689371470d55378d517b64258805301647da
• csi-external-resizer git 974ac363 sha256:61a1fc78697628892622edd64b239ce456937299b08f9a46ddea225eae802142
• csi-external-snapshotter git 3f52ee74 sha256:f833881476fca7dadf48cad85c93f6e8fd7d151c74218b5bfde818ac41d61950
• csi-node-driver-registrar git 5f13d5e6 sha256:32dcc0749823260f2e57e7d4fbab46baa0f1db32b2e07f672426bccf52aa5976
• csi-snapshot-controller git 3f52ee74 sha256:976d131c2325b788d37fd3bffc8cd845cdd689b800ec4cb34692487d5bb38392
• csi-snapshot-validation-webhook git 3f52ee74 sha256:acae100e011cfc81b1502ffc3f41a8a1c908092cec3d1a8d63fd7020933f6217
• docker-registry git 47a15ac8 sha256:fc90d9259e8f66cee8bd4e8ca187675331b2ef998e880cd04a0367e09ea8d035
• machine-os-content git 58203170 sha256:5f4cd59cd8a74a909c410322102e29dd8a1c78525073f0aabcb8af9fcb484338
• machine-os-images git b14856ff sha256:05f081d5921cf1c5c0fcd408b698b9e3e2bb7b0f3f98424674e23c48e1a2c8e7
• nutanix-machine-controllers git be43191e sha256:3e20cba200be2817ad14d3ef609a0945a72dab69771fb502b0abf59dbc05f500
• openstack-cinder-csi-driver git c59255a3 sha256:895545d90c2ddb2c635c02360b9404f681d094204e5b19b32147878c3e36d479
• openstack-cinder-csi-driver-operator git 90ee04bc sha256:5c874af663f29a2fcc6329dd7ae7430b728826ba3503619696231a2fbc9cfba6
• openstack-cloud-controller-manager git c59255a3 sha256:5adcc2803df95260476a3204edb29aa0e12fd7c421aef06044a3fff6d0f3401e
• service-ca-operator git 5984aac1 sha256:5a79d38a9613dc33b27cd2775d35613c0694c461b97135a04ebdbb7307532f47
• vsphere-cloud-controller-manager git 0fe0c5c3 sha256:e9f821cc330b4abadda345d0b947b80357e8b9ac04c916d673ed6cfd4d76e918

agent-installer-api-server

• MGMT-15150: Use same installer binary for all platform types (#5346) #5346
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#717) #670
• Full changelog

agent-installer-node-agent

• OCPBUGS-16373: Ignore arping errors on RHEL 9 (#577) #577
• MGMT-15661: Update to latest ghw version (#594) (#596) #594
• OCPBUGS-15557: vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) #565
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-16377: [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #31
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-13036: 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 #220
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-17145: Increase service idle max timeout to 100 minutes #81
• Full changelog

azure-disk-csi-driver

• OCPBUGS-16318: 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 #44
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #86
• Full changelog

azure-file-csi-driver

• OCPBUGS-16321: 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 #30
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #67
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-19670: [release-4.13] Allow different service account for xpn installs in gcp #7524
• OCPBUGS-19773: Increase bootstrap timeout for vSphere platform by 30 mins #7530
• OCPBUGS-16383: [release-4.13] Default dataStore is returned the name instead the inventoryPath #7343
• OCPBUGS-13681: FCOS: bump to latest stable version #7188
• OCPBUGS-11093: Azure: don’t set default subscriptionID for disk encryption sets #7432
• OCPBUGS-17809: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7427
• OCPBUGS-15231: new Aws secret regions support #7264
• OCPBUGS-15222: terraform: aws: secret regions now support ALIAS record #7262
• OCPBUGS-17823: CORS-2445: GCP: Add osImage to the install config #7431
• OCPBUGS-14432: Replica validations #7423
• OCPBUGS-13865: vSphere Add ova sha query; additional debugging #7198
• OCPBUGS-16640: [release-4.13] Update azure cli version to 2.49.0 #7357
• OCPBUGS-16777: update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 #7410
• CORS-2764: AWS Shared VPC Backport [release-4.13] #7362
• OCPBUGS-17104: [release-4.13] vsphere terraform bump #7383
• OCPBUGS-17397: backport openstack UPI for ansible 2.10 #7385
• OCPBUGS-15290: GCP: ic: improve project validation #7361
• OCPBUGS-16390: Allow override of networkType #7344
• OCPBUGS-16673: Fix timing issue between network services #7358
• OCPBUGS-14711: Convert Rendezvous IPv6 address to canonical format #7237
• OCPBUGS-16066: Use correct SELinux label. Make rename atomic. #7315
• OCPBUGS-14599: Log additional host info at warning level #7233
• OCPBUGS-15866: Use the same names for public LB in IPI and UPI Azure #7302
• OCPBUGS-16124: azure: skip LB creation when not needed #7322
• OCPBUGS-13812: ic: azure: validate diskTypes in AzureStack #7195
• OCPBUGS-15230: azure: skip NSG creation when BYO vnet #7263
• OCPBUGS-15591: [release-4.13] gcp: add confidential compute support for boostrap TF #7298
• Full changelog

baremetal-machine-controllers

• OCPBUGS-16084: Fix Metal3Remediation CRD install order #194
• Full changelog

baremetal-operator

• OCPBUGS-17365: Trigger reconcile on Secret change #295
• OCPBUGS-16013: Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 #292
• OCPBUGS-17229: Set minimum TLS version for webhook to 1.2 #294
• Full changelog

baremetal-runtimecfg

• OCPBUGS-18582: Move haproxy firewall rule check earlier in loop #271
• OCPBUGS-17423: Don’t render config with incomplete unicast peer list #267
• OCPBUGS-14487: Support IPv6 VIP for setup with multipe IPv6 addresses #259
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-13527: Bump x org deps 4.13 #1422
• OCPBUGS-16055: mcs cert: account for environments that use IP directly #1500
• OCPBUGS-16193: reboot: set ignition version to 3.1 #1508
• OCPBUGS-16172: Add tls-server-name when property exists in kubeconfig #1506
• Full changelog

cloud-network-config-controller

• OCPBUGS-15856: Azure: Handle already existing IP configurations #116
• Full changelog

cluster-authentication-operator

• OCPBUGS-15258: Correctly link oauth apiserver ServiceMonitor with its Service #617
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-17056: Address long acquire times during update #289
• OCPBUGS-17098: update x/net dependency to 0.7.0 #280
• OCPBUGS-16768: add nutanix labels that should be ignored #278
• Full changelog

cluster-baremetal-operator

• OCPBUGS-19369: Guard against nil PlatformStatus #363
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-17101: update x/net dependency to 0.7.0 #269
• OCPBUGS-15746: Alibaba platforms should not be upgradeable #260
• Full changelog

cluster-config-operator

• CORS-2766: AWS Shared VPC API Bump [release-4.13] #337
• OCPBUGS-16164: retire LatencySensitive featureset #329
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-17055: Address long acquire times during update #240
• Full changelog

cluster-dns-operator

• OCPBUGS-11449: Enable topology-aware hints if, and only if, nodes have zones #367
• OCPBUGS-15225: Add support for protocolStrategy API field to enable force_tcp configuration #372
• Full changelog

cluster-etcd-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1125
• OCPBUGS-16804: reset snapshot default counts to avoid file already lo… #1080
• OCPBUGS-12487: update golang.org/x/net/http2 #1075
• Full changelog

cluster-ingress-operator

• OCPBUGS-17733: [release-4.13] remove shared VPC cred request #972
• NE-1341: Add support for AWS shared VPC in another account #966
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1558
• OCPBUGS-15853: pkg/operator/configobserver: check that the serving certificate refer… #1522
• OCPBUGS-17081: make webhook connection failure a warning in log #1532
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #752
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #497
• Full changelog

cluster-monitoring-operator

• OCPBUGS-11016: Node Exporter ignores network interface under name “cali[a-f0-9]*” #1927
• OCPBUGS-16023: Add the trusted CA bundle in UWM Prometheus pods #2041
• Full changelog

cluster-network-operator

• OCPBUGS-18722: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1994
• OCPBUGS-18342: Fix bond-cni’s default directory in multus manifest #1977
• OCPBUGS-13920: add Hypershift release-image annotation to multus #1817
• OCPBUGS-18099: [release-4.13] Use encapsulation=true for IBM Cloud #1932
• OCPBUGS-17721: Enhance check controller to remove old check objects #1950
• OCPBUGS-17457: prevent creation of multiple cni-sysctl-allowlist-ds pods #1936
• OCPBUGS-11539: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1774
• OCPBUGS-15977: Add logic to pick the openshift-sdn shims from right directories #1880
• OCPBUGS-15962: Add logic to pick the ovn-k8s-cni-overlay binary from the right dir #1877
• Change rhel7/8 to rhel8/9 #1869
• Full changelog

cluster-node-tuning-operator

• Add kubeconfig path for IBM Managed OpenShift (#814) #814
• OCPBUGS-14137: e2e: perfprof: add SNO device recovery test (#653) (#806) #653
• OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) #788
• Sync DaemonSet if operand image changes (#786) #786
• Revert “Revert “Release leader election on manager exit (#773)” (#797)” (#802) #773
• OCPBUGS-19351: Keep Profile status.bootcmdline around (#803) #803
• Revert “Release leader election on manager exit (#773)” (#797) #773
• Release leader election on manager exit (#773) #773
• Tighten the rules for modifying Tuned Profiles (#766) #766
• OCPBUGS-18063: cgroup: Match the name of the cgroup to what is expected by kubelet (#774) #774
• update tsc karg to tsc=reliable (#757) #757
• OCPBUGS-17845: deflake ht aware test (#763) #763
• OCPBUGS-17794: rps: use default rps mask kernel API (#760) #760
• Improve render error handling (#755) #755
• nto:tuned: remove sched_min_granularity_ns settings (#726) #726
• Fix a race in e2e test rollback.go code (#740) #740
• E2E: Add memory manager sanity test case (#573) (#695) #573
• Full changelog

cluster-storage-operator

• OCPBUGS-18132: Add patch for allowing configmap updates via clusterrole #396
• OCPBUGS-19036: Fix PodStartupStorageOperationsFailing alert #397
• OCPBUGS-15378: decrease severity for MultipleDefaultStorageClasses alert #383
• Full changelog

cluster-version-operator

• OCPBUGS-16613: Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 #948
• Full changelog

console

• OCPBUGS-18764: Fixed Edit Application form for Knative Services #13147
• OCPBUGS-18538: OCP console mandate secret for repository creation #13135
• OCPBUGS-18679: [knative] Don’t rely on openshift/hello-openshift as a sample image #13140
• OCPBUGS-18289: Not able to import the repository with .tekton directory and func.yaml file present #13116
• OCPBUGS-18443: Fix crash when filtering the quick start catalog #13127
• OCPBUGS-18312: Web console slowness on Project>Project access page #13119
• OCPBUGS-18335: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13120
• OCPBUGS-17876: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13095
• OCPBUGS-16668: Dynamic plugin translation support for plurals broken #13041
• OCPBUGS-17181: Creation of GH webhook and attaching it to repo while importing from git using PAC #13060
• OCPBUGS-16040: fix bug where binary secret values are corrupted on edit and add test coverage #13048
• OCPBUGS-16659: Fix RTE in bridge. #13038
• OCPBUGS-16158: “Duplicate RoleBinding” leads to “Unsupported value” error #13008
• OCPBUGS-16434: Fix stop PLR option #13031
• OCPBUGS-14265: Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12865
• OCPBUGS-13641: Do not fetch catalog sources on CSV or Subscription details pages. #12811
• OCPBUGS-16421: When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13030
• OCPBUGS-15998: Upload JAR file does not work if the Cluster Samples Operator is disabled #12992
• OCPBUGS-15810: only show pipelines doc link for downstream #12981
• OCPBUGS-15982: get Kamelets from the camel-k-operator namespace as well #12988
• OCPBUGS-16244: Fix operator backed catalog page when copied CSVs disabled #13019
• OCPBUGS-15194: Remove tech preview badge from Pipeline repository pages #12916
• OCPBUGS-10326: re-enable operator-install-single-namespace.spec.ts test #12653
• OCPBUGS-15848: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12976
• OCPBUGS-15890: Use proxy with web socket connection and monitoring dashboard #12978
• OCPBUGS-15720, OCPBUGS-15721, OCPBUGS-15722: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12963
• OCPBUGS-14426: account for single object in status.conditions instead… #12875
• Full changelog

console-operator

• OCPBUGS-18192: Add haproxy timeout annotation to console routes #787
• OCPBUGS-16241: Add missing watch permission for helm-chartrepos-viewers #778
• OCPBUGS-14039: Backport #774 and #763 #779
• Full changelog

container-networking-plugins

• OCPBUGS-17728: Default CNI binaries to RHEL 8 #117
• Add rhel9 binary #102
• Full changelog

csi-external-provisioner

• OCPBUGS-16609: [release-4.13] UPSTREAM: 880: Bump golang.org/x/net #67
• Full changelog

csi-livenessprobe

• OCPBUGS-16600: [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 #46
• Full changelog

egress-router-cni

• Add rhel9 binary #71
• Full changelog

etcd

• OCPBUGS-18497: Updating ose-etcd images to be consistent with ART #214
• OCPBUGS-18398: UPSTREAM <carry>: update build images to rhel9 #212
• OCPBUGS-15859: [4.13] Rebase openshift/etcd to 3.5.9 #204
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-16331: 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 #38
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #80
• Full changelog

haproxy-router

• OCPBUGS-17762: haproxy/template: mitigate CVE-2023-40225 #506
• OCPBUGS-17107: properly handle weight=0 #501
• Full changelog

hyperkube, pod

• OCPBUGS-18287, OCPBUGS-19480: Update to Kubernetes 1.26.9 #1715
• OCPBUGS-18677: UPSTREAM: <carry>: Force using host go always and use host libriaries #1689
• OCPBUGS-17187: Update to Kubernetes 1.26.7 #1649
• OCPBUGS-17145: Increase service idle max timeout to 100 minutes #1657
• OCPBUGS-15866: remove readiness check for cache exclusion #1625
• OCPBUGS-15866: UPSTREAM: <drop>: hack/update-vendor.sh #1637
• Full changelog

hypershift

• chore(deps): update rhtap references (release-4.13) #3043
• Update RHTAP references (release-4.13) #2996
• OCPBUGS-17182: add need-management-kas-access label to olm-collect-profiles pods #2871
• OCPBUGS-16225: Add missing probes to two services #2821
• fix(olm): Use 4.13 catalog source images #2978
• Updated secret permissions for openshift-route-controller-manager #2923
• HOSTEDCP-1121: Ensure SG reconciliation for aws endpoint #2885
• chore(deps): update rhtap references (release-4.13) #2921
• Revert “HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS” #2931
• chore(deps): update rhtap references (release-4.13) #2904
• Update RHTAP references (release-4.13) #2866
• HOSTEDCP-1046: Add ImageDigestMirrorSet to Config API comment #2870
• HOSTEDCP-1046: Add IDMS to the list of valid config manifests #2863
• Update RHTAP references (release-4.13) #2833
• HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS #2839
• OCPBUGS-15743: Let getMachinesForNodePool return machines ordered by creation Timestamp #2767
• 4.13: Add management cluster KAS network policy #2786
• Leader election config update. #2801
• OCPBUGS-16160: fix deletion bug when hostedzone is already deleted #2813
• HOSTEDCP-1061: [release-4.13] Implement dedicated request serving nodes for HostedClusters #2809
• Update RHTAP references (release-4.13) #2816
• OCPBUGS-16057: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2798
• OCPBUGS-14862 Improve clarity around hypershift operator permissions #2810
• HOSTEDCP-1101: Add snyk-secret HO RHTAP scripts #2799
• OCPBUGS-16125: [release-4.13] Update vendored dependencies #2797
• OCPBUGS-15774: autoscaling balance similar groups #2805
• OCPBUGS-15965: Reject VPCE Connections during VPCE Service cleanup #2789
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-16378: 4.13: UPSTREAM: 157: K8S and grpc package upgrade #40
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #73
• Full changelog

insights-operator

• OCPBUGS-17661: workload info gatherer, add external image repo (#816) #816
• Full changelog

ironic

• OCPBUGS-17837: Fix PROVISIONING_MACS unbound #393
• OCPBUGS-17158: [4.13] Update packages with latest bugfix #388
• OCPBUGS-17551: Expand regex for fcos/okd packages list #390
• Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. #383
• Full changelog

ironic-agent

• OCPBUGS-19006: backport hostname fixes #89
• Switch to udevadm command install instead of package [OKD] #83
• Full changelog

kube-proxy, sdn

• OCPBUGS-15977: Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir #558
• OCPBUGS-15977: Dockerfile changes to build both rhel8 and rhel9 binaries #557
• Full changelog

kuryr-cni, kuryr-controller

• Bug OCPBUGS-16340: Fix np retry #738
• Full changelog

machine-config-operator

• OCPBUGS-19675: daemon: always use podman cp to copy extensions container content #3938
• OCPBUGS-19400: install: Recreate and delayed default ServiceAccount deletion #3923
• OCPBUGS-19509: Ignore invoking nbctl calls if its SDN #3929
• OCPBUGS-19414: The kubeconfig copied on to each node has 644 permissions #3924
• OCPBUGS-18159: Ensure azure-routes hack for internalLB hairpin traffic works for SGW #3904
• OCPBUGS-16218: Prevent NM from unsetting the hostname #3805
• OCPBUGS-17997: SSHkeys fails to write on upgrade to 4.13.rc3 #3879
• OCPBUGS-18076: daemon: create /etc/systemd/network directory on node #3888
• OCPBUGS-17769: Agent-based install process the container machine-config-controller will be oom #3868
• OKD-174: Dockerfile: OKD: Reenable extensions image on SCOS #3845
• OCPBUGS-17430: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3841
• OCPBUGS-17163: daemon: Always replace binary #3833
• OCPBUGS-16888: daemon: Make binary writing idempotent #3826
• OCPBUGS-16888: daemon: no need to reexec when target and source rhel version is same #3824
• OCPBUGS-16622: daemon: Copy matching binary to host, re-exec with it #3812
• OCPNODE-1717: Update config node spec while explicitly updating the cgroups mode #3793
• 4.13: Revert rhel9 binaries builds #3802
• Full changelog

machine-image-customization-controller

• OCPBUGS-19006: Pass BareMetalHost name to IPA (take 2) #98
• OCPBUGS-14250: Watch networkData Secrets for changes #95
• Full changelog

multus-cni

• Add rhel9 binary for multus #169
• Full changelog

multus-networkpolicy

• OCPBUGS-12641: CVE-2022-41723: Update vendors to fix dependabot alerts #28
• Full changelog

multus-route-override-cni

• Add rhel9 binary #37
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-4417: Denormalize IP name before checking if pod is alive [Backport 4.13] #168
• OCPBUGS-15956: Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #138
• Bug 16002: Change default binary to RHEL8 image #144
• Restores RHEL specific binary build in dockerfile and updates to rhel9/8 #139
• Full changelog

must-gather

• OCPBUGS-19928: [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes #383
• Full changelog

network-interface-bond-cni

• Add rhel9 binary #56
• Full changelog

network-tools

• Dockerfile: move to RHEL9 base image #83
• Full changelog

oauth-proxy

• OCPBUGS-16805: Updating golang-github-openshift-oauth-proxy images to be consistent with ART #261
• Full changelog

oc-mirror

• Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) #700
• Fix OCPBUGS-14402 (#675) #675
• OCPBUGS-18556: operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) #691
• OCPBUGS-18106: manual cherrypick (#684) #684
• OCPBUGS-17998: fix: ICSP with incorrect mirror path (#685) #685
• OCPBUGS-17453: Fix “ OCI index found, but accept header does not support OCI indexes (#677) #677
• OCPBUGS-16372: A variety of changes needed for correct operation with multi… (#661) #661
• Full changelog

openshift-controller-manager

• OCPBUGS-11091: mount build.Spec.Source.ConfigMaps for custom builder images #257
• Full changelog

openstack-machine-api-provider

• Bug OCPBUGS-19460: Set controller’s SyncPeriod to 1 hour #85
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-18305, RHIBMCS-151: Copied csv listing backport #548
• OCPBUGS-17791: opm: always serve pprof endpoints, improve server allocations (#1129) #540
• Introduce DOWNSTREAM_OWNERS file #538
• Allow cpb to be statically compiled / exempt from FIPS compliance #519
• Full changelog

operator-marketplace

• OCPBUGS-19085: Updating marketplace-operator images to be consistent with ART #538
• OCPBUGS-18502: remove a race condition #532
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #120
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-18672: Check libovsdbclient.ErrNotFound on wrapped errors #1861
• OCPBUGS-19449: Do not return error if pod IP cannot be retrieved for podSelectorPodNeedsDelete and perf improvements #1893
• OCPBUGS-18585: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1855
• OCPBUGS-17123: Remove stale egressip status entry #1793
• OCPBUGS-18057: [release-4.13] Create egress firewall with one db transaction #1834
• OCPBUGS-17910: Emit node events only when retry failure #1825
• OCPBUGS-17503: [release-4.13] libovsdb: give monitor setup time to process than normal transactions #1807
• OCPBUGS-13175: Check the status of a pod before trying to get its ip #1724
• OCPBUGS-15496: Fix default GW IPs retrieval #1738
• OCPBUGS-17001: Inactivity probe for ovndb connection #1796
• OCPBUGS-17120: Bump OVN to 23.06-23.06.0-51 #1790
• OCPBUGS-16121: [release-4.13]: Delete address sets after acls that reference them #1762
• OCPBUGS-15368: [release-4.13]: initial pods are not wired for hybrid overlay #1721
• OCPBUGS-15651: Improve syncNodes to remove stale data #1731
• OCPBUGS-15586: [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector #1745
• Dockerfile: build both RHEL8 and RHEL9 shims #1748
• OCPBUGS-15585: [release-4.13] Fix egressFirewall create error handling #1733
• OCPBUGS-14492: Backport OVN component templates for NodePort services. #1709
• Full changelog

powervs-block-csi-driver

• Updated golang.org/x/net/html dependency. #44
• Openshiftrelease 4.13 #41
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #34
• Full changelog

prometheus-node-exporter

• OCPBUGS-14274: Upgrade golang.org/x/net to v0.10.0 to fix the CVE #127
• Full changelog

tests

• OCPBUGS-16241: Update permission to incl. watch for helmchartrepositories for console users #28054
• OCPBUGS-16164: allow cluster-config-operator to manage featuregate upgrade block #28050
• OCPBUGS-15892: remove references to registry.centos.org #28031
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-16398: Rebase v3.0.2 #83
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-18132: Block 4.14 upgrades with admin ack #169
• OCPBUGS-18332: disable controller hostNetwork #166
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-2214034.17.0-0.okd-scos-2024-11-18-101403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github