Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.13.0-0.okd-2023-10-28-065448

Team Approvals:

No tests for this release

Upgrades from:

• 4.13.0-0.okd-2023-10-28-013842 (changes) - Success
• 4.13.0-0.okd-2023-09-30-084937 (changes) - F F S
• 4.13.0-0.okd-2023-09-03-082426 (changes) - F F S F F F
• 4.13.0-0.okd-2023-08-18-135805 (changes) - Failed Failed
• 4.13.0-0.okd-2023-08-04-164726 - Failed Failed
• 4.13.0-0.okd-2023-07-23-051208 (changes) - Failed Failed

Upgrades to:

• 4.14.0-0.okd-2024-01-06-084517 (changes) - Failed Success
• 4.14.0-0.okd-2023-11-14-101924 (changes) - F S F
• 4.14.0-0.okd-2023-11-12-042703 (changes) - Success Success
• 4.14.0-0.okd-2023-10-28-073550 (changes) - Success Failed

---

Loading changelog, this may take a while ...

Changes from 4.13.0-0.okd-2023-08-04-164726

Created: 2023-10-28 14:50:49 +0000 UTC

Image Digest: sha256:29e8ad18b5d011c3fd8275ec9aad5964e4dcfd0138d229f2917acfcbefde930c

Release 4.13.0-0.okd-2023-10-28-065448 was created from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-10-28-065448

Components

• Kubernetes upgraded from 1.26.6 to 1.26.9
• Fedora CoreOS upgraded from 38.20230709.3 to 38.20231002.3

Rebuilt images without code change

• agent-installer-api-server git 06189bcd sha256:c206d62b89774800aa3797060e54bcc8951a55a8934e27c3c8fd708540b1964e
• alibaba-disk-csi-driver-operator git 7e415973 sha256:daa94ad5ba34b00c409ef4c180d1d1b0d57a3aaf828f2e8948cc1341a6b7348d
• alibaba-machine-controllers git 4c0f96a6 sha256:c9e4be5bee409a3a95d937c836cb4449b01244bd626e9bf00578ac66ec7c03be
• cluster-openshift-controller-manager-operator git 9a8aba8c sha256:ae840b5328bb94129128f15063422a271e71139639f29a7d36a0808dfbe618b4
• coredns git 598440f5 sha256:dd286a23ab14a2f262b67a76f23414a36bfbd7466f8ae94ba59dff659d3e270f
• csi-driver-manila-operator git b1295cd1 sha256:21f1cee4d154b08bf65d4ced9dd0e2460f3737f3e2b20eec8fd5ed1e8d180e30
• csi-driver-shared-resource-operator git 1dc475bb sha256:9516f81718d17ea3ac6a6305d56f3f65b112ab1edb229580172d19fa4415c90f
• docker-builder git 1fec8a28 sha256:4e0392c1a9795fbe207cdf9eede1725213649520d532318ec405a68cd715faf0
• docker-registry git 47a15ac8 sha256:fc90d9259e8f66cee8bd4e8ca187675331b2ef998e880cd04a0367e09ea8d035
• k8s-prometheus-adapter git 8ebc578d sha256:7ead341c92e3dfdb0282473b7c640c1afa39a84d9a8a2a25c827ddc08ff97d7d
• libvirt-machine-controllers git d4b7a8ab sha256:9137b7a88653a9b8fc03fa77d79ac119843c57d8cb01d291bf704982b6c3c177
• machine-os-images git b14856ff sha256:05f081d5921cf1c5c0fcd408b698b9e3e2bb7b0f3f98424674e23c48e1a2c8e7
• multus-cni git bb616eff sha256:d8a6c758b2d88f3cc7af5de179f7af0c791160e134a583dbe929b5ba733a8329
• nutanix-machine-controllers git be43191e sha256:3e20cba200be2817ad14d3ef609a0945a72dab69771fb502b0abf59dbc05f500
• openshift-controller-manager git 385057e5 sha256:b3433c1da485162602f6430d163d792f77f82b04bbbefbc01a20bd23443f009c
• openstack-cinder-csi-driver-operator git b50a649b sha256:0d947c3e38ae822f3f97aec85292da2433491f7ea6687d89c5f35f00758cfedf
• vsphere-cloud-controller-manager git 0fe0c5c3 sha256:e9f821cc330b4abadda345d0b947b80357e8b9ac04c916d673ed6cfd4d76e918

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-13586: Wait for ETCD Bootstrap to complete (#670) (#717) #670
• Full changelog

agent-installer-node-agent

• OCPBUGS-16373: Ignore arping errors on RHEL 9 (#577) #577
• MGMT-15661: Update to latest ghw version (#594) (#596) #594
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-21329: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-20939: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #240
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-21034: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #281
• Full changelog

azure-disk-csi-driver

• OCPBUGS-20688: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
• Full changelog

azure-file-csi-driver

• OCPBUGS-20862: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-20964: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #77
• OCPBUGS-16250: Add management workloads annotations #67
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-19307: Implement workaround to allow SNO installations for OKD/FCOS #7480
• OCPBUGS-18787: vSphere set bootstrap/master efi #7481
• OCPBUGS-19320: [release-4.13] for vsphere ipi add cluster domain to the uploaded vm configs so that… #7498
• OCPBUGS-20141: [release-4.13] Use updated ansible-core for Openstack image #7559
• OCPBUGS-19670: [release-4.13] Allow different service account for xpn installs in gcp #7524
• OCPBUGS-19773: Increase bootstrap timeout for vSphere platform by 30 mins #7530
• OCPBUGS-16383: [release-4.13] Default dataStore is returned the name instead the inventoryPath #7343
• OCPBUGS-13681: FCOS: bump to latest stable version #7188
• OCPBUGS-11093: Azure: don’t set default subscriptionID for disk encryption sets #7432
• OCPBUGS-17809: Allow destroy for C2S isolated (us-iso and us-isob) partitions #7427
• OCPBUGS-15231: new Aws secret regions support #7264
• OCPBUGS-15222: terraform: aws: secret regions now support ALIAS record #7262
• OCPBUGS-17823: CORS-2445: GCP: Add osImage to the install config #7431
• OCPBUGS-14432: Replica validations #7423
• OCPBUGS-13865: vSphere Add ova sha query; additional debugging #7198
• OCPBUGS-16640: [release-4.13] Update azure cli version to 2.49.0 #7357
• OCPBUGS-16777: update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 #7410
• CORS-2764: AWS Shared VPC Backport [release-4.13] #7362
• OCPBUGS-17104: [release-4.13] vsphere terraform bump #7383
• OCPBUGS-17397: backport openstack UPI for ansible 2.10 #7385
• Full changelog

baremetal-machine-controllers

• OCPBUGS-21701: Uplift x/net to v0.17.0 #199
• Full changelog

baremetal-operator

• OCPBUGS-21167: Uplift x/net to v0.17.0 #309
• OCPBUGS-17365: Trigger reconcile on Secret change #295
• OCPBUGS-16013: Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 #292
• OCPBUGS-17229: Set minimum TLS version for webhook to 1.2 #294
• Full changelog

baremetal-runtimecfg

• OCPBUGS-20081: Increase timeout for bootstrap kubeapi #278
• OCPBUGS-18582: Move haproxy firewall rule check earlier in loop #271
• OCPBUGS-17423: Don’t render config with incomplete unicast peer list #267
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-20298: Use quay redis image instead docker mysql #1566
• OCPBUGS-19942: Truncate existing files when writing from inspect #1553
• OCPBUGS-13527: Bump x org deps 4.13 #1422
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-17056: Address long acquire times during update #289
• Full changelog

cluster-baremetal-operator

• OCPBUGS-20867: Uplift x/net to v0.17.0 #370
• OCPBUGS-19369: Guard against nil PlatformStatus #363
• Full changelog

cluster-config-operator

• CORS-2766: AWS Shared VPC API Bump [release-4.13] #337
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-20482: fix: e2e: add gcp custom type to test framework #249
• OCPBUGS-17055: Address long acquire times during update #240
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-21461: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #168
• Full changelog

cluster-dns-operator

• OCPBUGS-21534: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #390
• Full changelog

cluster-etcd-operator

• OCPBUGS-20488: prioritize podman pull in etcdctl dl #1136
• OCPBUGS-19378: [4.13] Backports of backup/restore fixes #1117
• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1125
• OCPBUGS-16804: reset snapshot default counts to avoid file already lo… #1080
• Full changelog

cluster-ingress-operator

• OCPBUGS-20781: Bump golang.org/x/net for CVE-2023-44487 #987
• OCPBUGS-22402: test/e2e: Don’t use openshift/origin-node #991
• OCPBUGS-17733: [release-4.13] remove shared VPC cred request #972
• NE-1341: Add support for AWS shared VPC in another account #966
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #1558
• OCPBUGS-15853: pkg/operator/configobserver: check that the serving certificate refer… #1522
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #752
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-19825: Update staticpod file permissions to conform with CIS benchmarks #497
• Full changelog

cluster-monitoring-operator

• OCPBUGS-21250: upgrade golang.org/x/net to v0.17.0 #2122
• OCPBUGS-22099: Extend remote write test timeout #2127
• Full changelog

cluster-network-operator

• OCPBUGS-19894: remove prestop hooks for northd, sbdbd and nbdb #2001
• OCPBUGS-18722: IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1994
• OCPBUGS-18342: Fix bond-cni’s default directory in multus manifest #1977
• OCPBUGS-13920: add Hypershift release-image annotation to multus #1817
• OCPBUGS-18099: [release-4.13] Use encapsulation=true for IBM Cloud #1932
• OCPBUGS-17721: Enhance check controller to remove old check objects #1950
• OCPBUGS-17457: prevent creation of multiple cni-sysctl-allowlist-ds pods #1936
• Full changelog

cluster-node-tuning-operator

• Use RHEL9 as a base (#829) #829
• OCPBUGS-17943: Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) #796
• nto: avoid timeout when there are too many CSV (#818) #818
• OCPBUGS-19459: check for object being nil (#820) #820
• Add kubeconfig path for IBM Managed OpenShift (#814) #814
• OCPBUGS-14137: e2e: perfprof: add SNO device recovery test (#653) (#806) #653
• OCPBUGS-18868: [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) #788
• Sync DaemonSet if operand image changes (#786) #786
• Revert “Revert “Release leader election on manager exit (#773)” (#797)” (#802) #773
• OCPBUGS-19351: Keep Profile status.bootcmdline around (#803) #803
• Revert “Release leader election on manager exit (#773)” (#797) #773
• Release leader election on manager exit (#773) #773
• Tighten the rules for modifying Tuned Profiles (#766) #766
• OCPBUGS-18063: cgroup: Match the name of the cgroup to what is expected by kubelet (#774) #774
• update tsc karg to tsc=reliable (#757) #757
• OCPBUGS-17845: deflake ht aware test (#763) #763
• OCPBUGS-17794: rps: use default rps mask kernel API (#760) #760
• Improve render error handling (#755) #755
• nto:tuned: remove sched_min_granularity_ns settings (#726) #726
• Full changelog

cluster-platform-operators-manager

• OCPBUGS-20998: [release-4.13] Bump golang.org/x/net to v0.17.0 #97
• Full changelog

cluster-samples-operator

• OCPBUGS-22390: Sync library to remove invalid dockerhub references for OKD #521
• Full changelog

cluster-storage-operator

• OCPBUGS-21284: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #406
• OCPBUGS-18132: Add patch for allowing configmap updates via clusterrole #396
• OCPBUGS-19036: Fix PodStartupStorageOperationsFailing alert #397
• Full changelog

cluster-version-operator

• OCPBUGS-19472: Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC #969
• OCPBUGS-20321: pkg/cvo/sync_worker: Always enable the DeploymentConfig capability #981
• OCPBUGS-19828: pkg/clusterconditions/promql: Warm cache with 1s delay #974
• OCPBUGS-20263: pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #980
• Full changelog

console

• OCPBUGS-19532: use active namespace in Create cta href of create action for operator backed #13179
• OCPBUGS-18271: update the KnativeServing API version to v1beta1 for global-config extension #13112
• OCPBUGS-20232: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13224
• OCPBUGS-20231: fetch TaskRuns without selector and reduces the get TaskRuns requests #13223
• OCPBUGS-20330: Check if filtered object contains name property #13227
• OCPBUGS-13285: add multipath device type to LocalVolumeSet #12804
• OCPBUGS-17481: Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13083
• OCPBUGS-18764: Fixed Edit Application form for Knative Services #13147
• OCPBUGS-18538: OCP console mandate secret for repository creation #13135
• OCPBUGS-18679: [knative] Don’t rely on openshift/hello-openshift as a sample image #13140
• OCPBUGS-18289: Not able to import the repository with .tekton directory and func.yaml file present #13116
• OCPBUGS-18443: Fix crash when filtering the quick start catalog #13127
• OCPBUGS-18312: Web console slowness on Project>Project access page #13119
• OCPBUGS-18335: Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13120
• OCPBUGS-17876: Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13095
• OCPBUGS-16668: Dynamic plugin translation support for plurals broken #13041
• OCPBUGS-17181: Creation of GH webhook and attaching it to repo while importing from git using PAC #13060
• Full changelog

console-operator

• OCPBUGS-18972: Manual backport of #761 #793
• OCPBUGS-18192: Add haproxy timeout annotation to console routes #787
• OCPBUGS-16241: Add missing watch permission for helm-chartrepos-viewers #778
• OCPBUGS-14039: Backport #774 and #763 #779
• Full changelog

container-networking-plugins

• OCPBUGS-17728: Default CNI binaries to RHEL 8 #117
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-20571: [release-4.13] CARRY: Add DOWNSTREAM_OWNERS #228
• OCPBUGS-20133: FastFix: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 #221
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-20719: bump golang.org/x/net to v0.17.0 #147
• Full changelog

csi-external-attacher

• OCPBUGS-21161: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #61
• Full changelog

csi-external-provisioner

• OCPBUGS-20759: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #73
• Full changelog

csi-external-resizer

• OCPBUGS-20908: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #148
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-21011: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #110
• Full changelog

csi-livenessprobe

• OCPBUGS-20636: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• Full changelog

csi-node-driver-registrar

• OCPBUGS-20686: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
• Full changelog

etcd

• OCPBUGS-18497: Updating ose-etcd images to be consistent with ART #214
• OCPBUGS-18398: UPSTREAM <carry>: update build images to rhel9 #212
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump fedora-coreos to latest stable #677
• Bump fedora-coreos to latest stable #672
• Bump fedora-coreos to latest stable #669
• Bump Fedora CoreOS version string #665
• Bump fedora-coreos to latest stable #661
• Bump fedora-coreos to latest stable #653
• Bump Fedora CoreOS version string #650
• Bump fedora-coreos to latest stable #647
• Bump OKD OS version #643
• Bump fedora-coreos to latest stable #641
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-20735: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #46
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-20827: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #88
• OCPBUGS-16250: Add management workloads annotations #80
• Full changelog

haproxy-router

• OCPBUGS-21117: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #531
• OCPBUGS-17762: haproxy/template: mitigate CVE-2023-40225 #506
• OCPBUGS-17107: properly handle weight=0 #501
• Full changelog

hyperkube, pod

• openshift-hack: Fix sporadic 141 errors in build-rpms #1773
• OCPBUGS-20114: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1746
• OCPBUGS-21063: [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1759
• OCPBUGS-19885: UPSTREAM: 120789: change rolling update logic to exclude sunsetting nodes #1725
• OCPBUGS-18287, OCPBUGS-19480: Update to Kubernetes 1.26.9 #1715
• OCPBUGS-18677: UPSTREAM: <carry>: Force using host go always and use host libriaries #1689
• OCPBUGS-17187: Update to Kubernetes 1.26.7 #1649
• OCPBUGS-17145: Increase service idle max timeout to 100 minutes #1657
• Full changelog

hypershift

• chore(deps): update rhtap references (release-4.13) #3043
• Update RHTAP references (release-4.13) #2996
• OCPBUGS-17182: add need-management-kas-access label to olm-collect-profiles pods #2871
• OCPBUGS-16225: Add missing probes to two services #2821
• fix(olm): Use 4.13 catalog source images #2978
• Updated secret permissions for openshift-route-controller-manager #2923
• HOSTEDCP-1121: Ensure SG reconciliation for aws endpoint #2885
• chore(deps): update rhtap references (release-4.13) #2921
• Revert “HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS” #2931
• chore(deps): update rhtap references (release-4.13) #2904
• Update RHTAP references (release-4.13) #2866
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-21230: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-21319: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #82
• OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #76
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-21432: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #28
• Full changelog

insights-operator

• Add cherry-pick from 4.14 (#848) #848
• OCPBUGS-19476: update Insights report config logging (#828) #828
• OCPBUGS-17661: workload info gatherer, add external image repo (#816) #816
• Full changelog

ironic

• OCPBUGS-17837: Fix PROVISIONING_MACS unbound #393
• OCPBUGS-17158: [4.13] Update packages with latest bugfix #388
• OCPBUGS-17551: Expand regex for fcos/okd packages list #390
• Full changelog

ironic-agent

• OCPBUGS-19006: backport hostname fixes #89
• Full changelog

kube-proxy, sdn

• OCPBUGS-14504: Use the ovsver build arg to infer the openvswitch short version number #572
• Full changelog

kube-rbac-proxy

• OCPBUGS-20702: v0.15.0 downstream release 4.13 #84
• Full changelog

machine-config-operator

• OCPBUGS-22412: bootstrap_test: always set APIVersion and Kind for DNS #4002
• OCPBUGS-21721: install/0000_90_machine-config-operator_90_deletion: Drop this file #3983
• OCPBUGS-20333: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3962
• OCPBUGS-18803: Soften grep pattern for ingress default router #3908
• OCPBUGS-19958: [release-4.13] Backport logspam PRs #3950
• OCPBUGS-19675: daemon: always use podman cp to copy extensions container content #3938
• OCPBUGS-19400: install: Recreate and delayed default ServiceAccount deletion #3923
• OCPBUGS-19509: Ignore invoking nbctl calls if its SDN #3929
• OCPBUGS-19414: The kubeconfig copied on to each node has 644 permissions #3924
• OCPBUGS-18159: Ensure azure-routes hack for internalLB hairpin traffic works for SGW #3904
• OCPBUGS-16218: Prevent NM from unsetting the hostname #3805
• OCPBUGS-17997: SSHkeys fails to write on upgrade to 4.13.rc3 #3879
• OCPBUGS-18076: daemon: create /etc/systemd/network directory on node #3888
• OCPBUGS-17769: Agent-based install process the container machine-config-controller will be oom #3868
• OKD-174: Dockerfile: OKD: Reenable extensions image on SCOS #3845
• OCPBUGS-17430: The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3841
• Full changelog

machine-image-customization-controller

• OCPBUGS-21549: Uplift x/net to v0.17.0 #105
• OCPBUGS-19006: Pass BareMetalHost name to IPA (take 2) #98
• OCPBUGS-14250: Watch networkData Secrets for changes #95
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-4417: Denormalize IP name before checking if pod is alive [Backport 4.13] #168
• Full changelog

must-gather

• OCPBUGS-19928: [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes #383
• Full changelog

oc-mirror

• Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) #700
• Fix OCPBUGS-14402 (#675) #675
• OCPBUGS-18556: operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) #691
• OCPBUGS-18106: manual cherrypick (#684) #684
• OCPBUGS-17998: fix: ICSP with incorrect mirror path (#685) #685
• OCPBUGS-17453: Fix “ OCI index found, but accept header does not support OCI indexes (#677) #677
• Full changelog

olm-rukpak

• OCPBUGS-21363: [release-4.13] Bump golang.org/x/net to v0.17.0 #40
• UPSTREAM: <carry>: add downstream owners #42
• Full changelog

openstack-machine-api-provider

• Bug OCPBUGS-19460: Set controller’s SyncPeriod to 1 hour #85
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-22133: [release-4.13] Bump golang.org/x/net to v0.17.0 #589
• OCPBUGS-18305, RHIBMCS-151: Copied csv listing backport #548
• OCPBUGS-17791: opm: always serve pprof endpoints, improve server allocations (#1129) #540
• Introduce DOWNSTREAM_OWNERS file #538
• Full changelog

operator-marketplace

• OCPBUGS-20977: [release-4.13] bump golang.org/x/net to 0.17.0 #549
• OCPBUGS-19085: Updating marketplace-operator images to be consistent with ART #538
• OCPBUGS-18502: remove a race condition #532
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #120
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-14314: Fix compilation error in e2e.go tests due to missing int32 parameter #1682
• OCPBUGS-20047: Adjust python ssl library dependency check #1924
• OCPBUGS-18976: Update bridge flow cache when the host address changes #1873
• OCPBUGS-18791, OCPBUGS-18792, OCPBUGS-19088, OCPBUGS-7406: Dockerfile: bump OVN to ovn23.06-23.06.1-8.el9fdp #1880
• OCPBUGS-18672: Check libovsdbclient.ErrNotFound on wrapped errors #1861
• OCPBUGS-19449: Do not return error if pod IP cannot be retrieved for podSelectorPodNeedsDelete and perf improvements #1893
• OCPBUGS-18585: Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR #1855
• OCPBUGS-17123: Remove stale egressip status entry #1793
• OCPBUGS-18057: [release-4.13] Create egress firewall with one db transaction #1834
• OCPBUGS-17910: Emit node events only when retry failure #1825
• OCPBUGS-17503: [release-4.13] libovsdb: give monitor setup time to process than normal transactions #1807
• Full changelog

powervs-block-csi-driver

• OCPBUGS-21089: CVE-2023-39325 - Update net dependencies - 4.13 #52
• Update OWNERS add yussufsh #54
• Updated golang.org/x/net/html dependency. #44
• Openshiftrelease 4.13 #41
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-21186: CVE-2023-39325 - Update net dependencies - 4.13 #41
• Update OWNERS add yussufsh #45
• OCPBUGS-16250: Add management workloads annotations #34
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-21280: CVE-2023-39325 - Update net dependencies - 4.13 #46
• Full changelog

powervs-machine-controllers

• OCPBUGS-21880: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 #55
• Full changelog

prometheus-node-exporter

• OCPBUGS-14274: Upgrade golang.org/x/net to v0.10.0 to fix the CVE #127
• Full changelog

telemeter

• OCPBUGS-21327: [release-4.13]: Bump golang.org/x/net to v0.17.0 #485
• Full changelog

tests

• OCPBUGS-19378: [4.13] backport etcd restore tests #28267
• Bug OCPBUGS-17469: Correct condition for rejecting connection #28151
• OCPBUGS-20361: Update image stream test to create a manifest list image by default #28318
• OCPBUGS-16241: Update permission to incl. watch for helmchartrepositories for console users #28054
• Full changelog

thanos

• OCPBUGS-21157: Bump golang.org/x/net to v0.17.0 #125
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-21561: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #91
• OCPBUGS-16398: Rebase v3.0.2 #83
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-21434: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #174
• OCPBUGS-18132: Block 4.14 upgrades with admin ack #169
• OCPBUGS-18332: disable controller hostNetwork #166
• Full changelog

vsphere-problem-detector

• OCPBUGS-21577: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
• Full changelog

---

View changelog in Markdown or change previous release: 4.19.0-0.okd-scos-2024-12-21-2225294.19.0-0.okd-scos-2024-12-21-1025294.19.0-0.okd-scos-2024-12-20-2225294.19.0-0.okd-scos-2024-12-20-1025294.19.0-0.okd-scos-2024-12-19-2225294.19.0-0.okd-scos-2024-12-19-1025294.19.0-0.okd-scos-2024-12-18-222529───4.18.0-0.okd-scos-2024-12-21-1448534.18.0-0.okd-scos-2024-12-21-0248534.18.0-0.okd-scos-2024-12-20-1448534.18.0-0.okd-scos-2024-12-20-0248534.18.0-0.okd-scos-2024-12-19-1448534.18.0-0.okd-scos-2024-12-19-024853───4.17.0-0.okd-scos-2024-12-21-2111004.17.0-0.okd-scos-2024-12-20-2108334.17.0-0.okd-scos-2024-12-20-0908324.17.0-0.okd-scos-2024-12-19-2105514.17.0-0.okd-scos-2024-12-19-090550───4.16.0-0.okd-scos-2024-12-21-0239424.16.0-0.okd-scos-2024-12-20-1439424.16.0-0.okd-scos-2024-12-20-0239424.16.0-0.okd-scos-2024-12-18-1422464.16.0-0.okd-scos-2024-12-18-0222464.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-12-16-1952254.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github