# 4.13.0-0.okd-2023-07-09-062029

Created: 2023-07-09 06:55:09 +0000 UTC

Image Digest: `sha256:dd8eeccd6dfed69b47ff892c2d8c7e2db1d419d12c3f763f06b2eeb894d0f883`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-07-09-062029


## Changes from 4.13.0-0.okd-2023-05-22-052007

### Components

* Kubernetes upgraded from 1.26.3 to 1.26.6
* Fedora CoreOS upgraded from 38.20230414.3 to 38.20230609.3


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [61e198ca](https://github.com/openshift/apiserver-network-proxy/commit/61e198ca00b9426e2f7309cf2818ac74426486ff) `sha256:67cf7c6421f33ed9b108cd4e8a6fdc61535a287ded18a4daf37488329dbb310c`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [acb52a08](https://github.com/openshift/cluster-api-provider-aws/commit/acb52a088682bf4019d616523881401526437fd3) `sha256:0752ac48aca42d58c7d71910e625537a41c8f07db2ad09896ecc825664f31244`
* [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator) git [b6dee5c3](https://github.com/openshift/aws-ebs-csi-driver-operator/commit/b6dee5c3585cbc92967530cb178a09a52164bfde) `sha256:8972b76d0671e1e5b600969f95155719c99dc14c49952846f8010e5c25e36b4a`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [ce1c9a35](https://github.com/openshift/cluster-capi-operator/commit/ce1c9a359ec9ab0c5526cd8594ea59bb52044026) `sha256:9f8026ea03c9d7d7486d942b533c31fa6adb6d984194db91e309e08484d61b4d`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:af7055332f18015e479166879647c7635ef698afee1cbb1c28a09ccdf2e916a9`
* [etcd](https://github.com/openshift/etcd) git [f70da9d7](https://github.com/openshift/etcd/commit/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d) `sha256:db91912b0e3c7c3ddef645b6bb057f25df5bf67b2ebcc0ddd64aa9fd3657a969`
* [haproxy-router](https://github.com/openshift/router) git [065deab8](https://github.com/openshift/router/commit/065deab84f342615db2d2f5c78a19ae04bb43912) `sha256:0638cdbb2f3390fac013f7d655c11fd991c51e1768921741dc5ba32db68a36aa`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [4536724a](https://github.com/openshift/ironic-static-ip-manager/commit/4536724a8644fda91a74b23901ba1789eaff7179) `sha256:992d07008204ddb28397878eb792b0880544570ae122d81fefa00216f3b36c04`
* [telemeter](https://github.com/openshift/telemeter) git [be81b434](https://github.com/openshift/telemeter/commit/be81b43429dcbf70f6ca19a9360ba455c97a1639) `sha256:8ef35b784507398208ffe74a4c514e1e577d8dea620815d325d4959e8f8ae9db`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8edd7dc2a74f3e4e0a7cd6229b89c9d4270952e6)

* [MGMT-13947](https://issues.redhat.com/browse/MGMT-13947): Revert assisted boot reporter service (#5292) [#5292](https://github.com/openshift/assisted-service/pull/5292)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8db33dbd81fe23f2a7f2ec69231b23015e2ae53b...8edd7dc2a74f3e4e0a7cd6229b89c9d4270952e6)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/f289c9e9d3abe5f7b6dc57a388ef31419d235347)

* [OCPBUGS-14848](https://issues.redhat.com/browse/OCPBUGS-14848): Filter out hidden devices (#559) [#559](https://github.com/openshift/assisted-installer-agent/pull/559)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e8de0582db56699d32653df02241c4a104755e1b...f289c9e9d3abe5f7b6dc57a388ef31419d235347)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/923631d779405e7cb684c174fa42e589c318060f)

* [OCPBUGS-13811](https://issues.redhat.com/browse/OCPBUGS-13811): Volume unmount repeats after successful unmount, preventing pod delete [#225](https://github.com/openshift/aws-ebs-csi-driver/pull/225)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/d8fa531075bd9e3da26a58e05fc906bc84e2625e...923631d779405e7cb684c174fa42e589c318060f)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/125a4b45d02ac7596406e43810398688b25ec91d)

* [OCPBUGS-12555](https://issues.redhat.com/browse/OCPBUGS-12555): Update builder to OCP4.13/go1.19 [#164](https://github.com/openshift/aws-pod-identity-webhook/pull/164)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/4969655df4169f19092e173b16c56c79d3a3383e...125a4b45d02ac7596406e43810398688b25ec91d)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/fb2d232da809a58929fe86cb9a59a045c7b44aa4)

* [OCPBUGS-13952](https://issues.redhat.com/browse/OCPBUGS-13952): Update x/net package to v0.8.0 [#68](https://github.com/openshift/cloud-provider-azure/pull/68)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/7afcf26e2e9190337134e75e0981d25d05dc16c8...fb2d232da809a58929fe86cb9a59a045c7b44aa4)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/8846366f4ae63a63ab75a35761cca1c95dee3c84)

* [OCPBUGS-12557](https://issues.redhat.com/browse/OCPBUGS-12557): Bump x/net package to v0.10.0 [#278](https://github.com/openshift/cluster-api-provider-azure/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/9885d4d37ed74d764eb83a826f3a7b013ed83d12...8846366f4ae63a63ab75a35761cca1c95dee3c84)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/b130aed2049b3f76db3cbe297ce505756e086e6c)

* [OCPBUGS-15187](https://issues.redhat.com/browse/OCPBUGS-15187): images: installer: add xz to the container [#7260](https://github.com/openshift/installer/pull/7260)
* [OCPBUGS-14867](https://issues.redhat.com/browse/OCPBUGS-14867): Shorten SNO installation duration by releasing CPC lease [#7241](https://github.com/openshift/installer/pull/7241)
* [OCPBUGS-13752](https://issues.redhat.com/browse/OCPBUGS-13752): Set AdditionalTrustBundle in override when mirroring not enabled [#7191](https://github.com/openshift/installer/pull/7191)
* [OCPBUGS-15289](https://issues.redhat.com/browse/OCPBUGS-15289): gcp use preconfigured private zone for installation [#7271](https://github.com/openshift/installer/pull/7271)
* [OCPBUGS-14916](https://issues.redhat.com/browse/OCPBUGS-14916): Replace with govc docker image and fix ibmcli folder permission issue [#7245](https://github.com/openshift/installer/pull/7245)
* [OCPBUGS-13323](https://issues.redhat.com/browse/OCPBUGS-13323): update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 [#7248](https://github.com/openshift/installer/pull/7248)
* [OCPBUGS-14860](https://issues.redhat.com/browse/OCPBUGS-14860): GCP XPN Private Cluster Fails with no Public Zone [#7240](https://github.com/openshift/installer/pull/7240)
* [OCPBUGS-13765](https://issues.redhat.com/browse/OCPBUGS-13765): Support /dev/disk/by-path root device hints [#7193](https://github.com/openshift/installer/pull/7193)
* [OCPBUGS-14171](https://issues.redhat.com/browse/OCPBUGS-14171): Ignore IAM Roles that the Installer is not authorized to access [#7210](https://github.com/openshift/installer/pull/7210)
* [OCPBUGS-11530](https://issues.redhat.com/browse/OCPBUGS-11530): [release-4.13] add project filter to gcp usage api requests [#7045](https://github.com/openshift/installer/pull/7045)
* [OCPBUGS-10493](https://issues.redhat.com/browse/OCPBUGS-10493): Nutanix Hostname of the VM is not set when using DHCP network config [#7016](https://github.com/openshift/installer/pull/7016)
* [OCPBUGS-14027](https://issues.redhat.com/browse/OCPBUGS-14027): GCP XPN: Pass instance service acct in manual mode [#7204](https://github.com/openshift/installer/pull/7204)
* [Full changelog](https://github.com/openshift/installer/compare/2f227cc47f4e7ca6ed8edf0caf7c48283a82fc03...b130aed2049b3f76db3cbe297ce505756e086e6c)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/3c924532a6965789f743fe37d77ed8b52a065c36)

* [OCPBUGS-13374](https://issues.redhat.com/browse/OCPBUGS-13374): Do not try to update images for nodes in transient states [#282](https://github.com/openshift/baremetal-operator/pull/282)
* [OCPBUGS-13927](https://issues.redhat.com/browse/OCPBUGS-13927): Deleting unmanaged BMH get stuck fix [#281](https://github.com/openshift/baremetal-operator/pull/281)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/d17c8bce1af351ffa1393026b0c75369a5cb0fa4...3c924532a6965789f743fe37d77ed8b52a065c36)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/7a4597c614871c34a805a981b1601464a5879919)

* [OCPBUGS-15101](https://issues.redhat.com/browse/OCPBUGS-15101): Use machine-config state instead of comparing roles [#261](https://github.com/openshift/baremetal-runtimecfg/pull/261)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/f0c1297c424d2ce8d20b376c488f8ada595b39b9...7a4597c614871c34a805a981b1601464a5879919)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/e4c9a6aeac8e382ad8a5dd6c2031a694ca0b80eb)

* handle the error case of node retrieval while waiting for reboot [#1484](https://github.com/openshift/oc/pull/1484)
* bring some cert rotation helpers back into 4.13 [#1474](https://github.com/openshift/oc/pull/1474)
* [OCPBUGS-14249](https://issues.redhat.com/browse/OCPBUGS-14249): preserve explicit release image in ClusterVersion [#1435](https://github.com/openshift/oc/pull/1435)
* [OCPBUGS-14180](https://issues.redhat.com/browse/OCPBUGS-14180): Remove closed centos7 registry from newapp unit tests [#1432](https://github.com/openshift/oc/pull/1432)
* [Full changelog](https://github.com/openshift/oc/compare/92b1a3d0e5d092430b523f6541aa0c504b2222b3...e4c9a6aeac8e382ad8a5dd6c2031a694ca0b80eb)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0621fcaf818f57ab05602259c1eb14db07b68dce)

* [OCPBUGS-12565](https://issues.redhat.com/browse/OCPBUGS-12565): CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] [#543](https://github.com/openshift/cloud-credential-operator/pull/543)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d3b5ffa30529cfb744715145919b58de6872656f...0621fcaf818f57ab05602259c1eb14db07b68dce)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/1258d548f7b8e98a08b98606e31c983b032afb3c)

* [OCPBUGS-14635](https://issues.redhat.com/browse/OCPBUGS-14635): increase GCP egress ip capacity to 100 from 10 [#113](https://github.com/openshift/cloud-network-config-controller/pull/113)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/71ccef5299dc865106a86f6f514041dbe33086bb...1258d548f7b8e98a08b98606e31c983b032afb3c)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/c14658f396539f25df7fa4735acfed39789af0e3)

* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#618](https://github.com/openshift/cluster-authentication-operator/pull/618)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a69e6b75c9a98bddae0e5ebdfd84c72f3fc72242...c14658f396539f25df7fa4735acfed39789af0e3)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/ee42773269a65998812435c0f1ab0c08cd8154f5)

* [OCPBUGS-15472](https://issues.redhat.com/browse/OCPBUGS-15472): Limit role binding to openshift-machine-api namespace [#346](https://github.com/openshift/cluster-baremetal-operator/pull/346)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/db283115e0b424e404307602701f1b6295c2f856...ee42773269a65998812435c0f1ab0c08cd8154f5)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/507f873307be10d8ddbbbe0fecba68aea7c2b5c1)

* [OCPBUGS-12567](https://issues.redhat.com/browse/OCPBUGS-12567): Bump x/net package to v0.10.0 [#176](https://github.com/openshift/cluster-api/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api/compare/0142186bad9acc2d7950663129a4ef82c32a5610...507f873307be10d8ddbbbe0fecba68aea7c2b5c1)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/64455eb66f17bb2c761ab529dbae76123f530d48)

* [OCPBUGS-13011](https://issues.redhat.com/browse/OCPBUGS-13011): Add beta topology labels flag to Azure cloud node manager [#250](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ecb49c59ae21b6beb7c3071e80c5c847f1ba7fbe...64455eb66f17bb2c761ab529dbae76123f530d48)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/42f323cd02b4e86ed630ed6649e32f9a876b3444)

* [OCPBUGS-15330](https://issues.redhat.com/browse/OCPBUGS-15330): Fix lint issue [#222](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/222)
* [OCPBUGS-15161](https://issues.redhat.com/browse/OCPBUGS-15161): Surface cpms vs machine diff [#218](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/218)
* [OCPBUGS-14024](https://issues.redhat.com/browse/OCPBUGS-14024): Check ProviderSpec before generating MachineInfo [#211](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/211)
* [OCPBUGS-13888](https://issues.redhat.com/browse/OCPBUGS-13888): fix double machine creation on stale cache [#208](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/208)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/98c3cdb13ff595b7f7bcf5d9d16901182b3b654f...42f323cd02b4e86ed630ed6649e32f9a876b3444)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67)

* [OCPBUGS-15434](https://issues.redhat.com/browse/OCPBUGS-15434): [release-4.13] Fix invalid DNS name formatting for GCP [#958](https://github.com/openshift/cluster-ingress-operator/pull/958)
* [OCPBUGS-15515](https://issues.redhat.com/browse/OCPBUGS-15515): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#955](https://github.com/openshift/cluster-ingress-operator/pull/955)
* [OCPBUGS-12743](https://issues.redhat.com/browse/OCPBUGS-12743): bump controller-runtime to fix the multi namespace cache indexing [#921](https://github.com/openshift/cluster-ingress-operator/pull/921)
* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#935](https://github.com/openshift/cluster-ingress-operator/pull/935)
* [OCPBUGS-12918](https://issues.redhat.com/browse/OCPBUGS-12918): gatewayclass: Update for OSSM 2.4 API change [#917](https://github.com/openshift/cluster-ingress-operator/pull/917)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/7262c34b3a6434b49851ff5f0cceec87a2ee9706...a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/0b4e454270fd837f94c8280178489add78ecc887)

* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log jwt tokens [#1499](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1499)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/02ea4a4120dd0f8eb49d070b1fe420ed6d1debba...0b4e454270fd837f94c8280178489add78ecc887)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/8d627a55e6d765019f4879ea20e2016e6cc0be63)

* [OCPBUGS-13093](https://issues.redhat.com/browse/OCPBUGS-13093): Bump golang.org/x/net [#20](https://github.com/openshift/cluster-api-operator/pull/20)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b8428eb60d727565fefa4e37c845d704913cf0c5...8d627a55e6d765019f4879ea20e2016e6cc0be63)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/56b970786d152344f0d4762c8271d20e5fc9d28b)

* [OCPBUGS-11353](https://issues.redhat.com/browse/OCPBUGS-11353): AWS should not use external-cloud-volume-plugin post CSI migration [#734](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/734)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/9f53628279a765cccb234b1ef992075ad7cddf96...56b970786d152344f0d4762c8271d20e5fc9d28b)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5c00da0816faf0f15e643f05666c963d862a8299)

* [OCPBUGS-14651](https://issues.redhat.com/browse/OCPBUGS-14651): disable debug pporf with unauthenticated port for 4.13 [#480](https://github.com/openshift/cluster-kube-scheduler-operator/pull/480)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/dc5cba57ddcdb5a4b43240d1c2ab908fa953d887...5c00da0816faf0f15e643f05666c963d862a8299)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a5566ceac4a5ba100e2c50f0e29d71ea017b5db8)

* [OCPBUGS-15469](https://issues.redhat.com/browse/OCPBUGS-15469): Limit the value of GOMAXPROCS on node-exporter to 4. [#2021](https://github.com/openshift/cluster-monitoring-operator/pull/2021)
* [OCPBUGS-14251](https://issues.redhat.com/browse/OCPBUGS-14251): Add new web console usage metrics [#1976](https://github.com/openshift/cluster-monitoring-operator/pull/1976)
* [OCPBUGS-12488](https://issues.redhat.com/browse/OCPBUGS-12488): go.mod: update golang.org/x/net to v0.7.0 [#1957](https://github.com/openshift/cluster-monitoring-operator/pull/1957)
* [OCPBUGS-13007](https://issues.redhat.com/browse/OCPBUGS-13007): Add build number to rules [#1964](https://github.com/openshift/cluster-monitoring-operator/pull/1964)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1563f682454aa22db0ac381fb4616efa6931dea6...a5566ceac4a5ba100e2c50f0e29d71ea017b5db8)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/34ef7155cdb21807150b94e555e4575150498c22)

* [OCPBUGS-15962](https://issues.redhat.com/browse/OCPBUGS-15962): Add logic to pick the ovn-k8s-cni-overlay binary from the right dir [#1877](https://github.com/openshift/cluster-network-operator/pull/1877)
* Change rhel7/8 to rhel8/9 [#1869](https://github.com/openshift/cluster-network-operator/pull/1869)
* [OCPBUGS-15476](https://issues.redhat.com/browse/OCPBUGS-15476): Add release version annotation to whereabouts-reconciler [#1853](https://github.com/openshift/cluster-network-operator/pull/1853)
* [OCPBUGS-15139](https://issues.redhat.com/browse/OCPBUGS-15139): Remove nodeSelector for architecture in whereabouts daemonset [#1840](https://github.com/openshift/cluster-network-operator/pull/1840)
* [OCPBUGS-14871](https://issues.redhat.com/browse/OCPBUGS-14871): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1837](https://github.com/openshift/cluster-network-operator/pull/1837)
* [OCPBUGS-13809](https://issues.redhat.com/browse/OCPBUGS-13809): Use `IfNotPresent` instead of `Always` in OVNK upgrades pre-puller [#1813](https://github.com/openshift/cluster-network-operator/pull/1813)
* [OCPBUGS-14367](https://issues.redhat.com/browse/OCPBUGS-14367): High API requests due to allowlist and operconfig reconcilers running too often [#1824](https://github.com/openshift/cluster-network-operator/pull/1824)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/3ed6bef191d49ede92ab8f7f684826a1b7967928...34ef7155cdb21807150b94e555e4575150498c22)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/2ac22ef24b5c11098f3fec6384a0ee6fb929b929)

* e2e: latency testing: increase the expected threshold (#709) [#709](https://github.com/openshift/cluster-node-tuning-operator/pull/709)
* Do not rollback settings on TuneD exit (#704) [#704](https://github.com/openshift/cluster-node-tuning-operator/pull/704)
* Switch to rslave/HostToContainer volume mount propagation (#705) [#705](https://github.com/openshift/cluster-node-tuning-operator/pull/705)
* e2e: perf-prof: disable truncating gomega output (#707) [#707](https://github.com/openshift/cluster-node-tuning-operator/pull/707)
* [OCPBUGS-14895](https://issues.redhat.com/browse/OCPBUGS-14895): Do not fail creating cgroups if they exist already (#684) [#684](https://github.com/openshift/cluster-node-tuning-operator/pull/684)
* [OCPBUGS-14331](https://issues.redhat.com/browse/OCPBUGS-14331): Fix updating numa core siblings map in GetCpuSiblings function (#669) [#669](https://github.com/openshift/cluster-node-tuning-operator/pull/669)
* render: remove uid from render-sync target (#594) (#609) [#594](https://github.com/openshift/cluster-node-tuning-operator/pull/594)
* Remove cpu-quota.crio.io: disable annotation (#670) [#670](https://github.com/openshift/cluster-node-tuning-operator/pull/670)
* Add PerformanceProfiles to 'oc adm must-gather' (#657) [#657](https://github.com/openshift/cluster-node-tuning-operator/pull/657)
* [OCPBUGS-11709](https://issues.redhat.com/browse/OCPBUGS-11709): pao e2e: skip hugepages and numa tests properly (#643) [#643](https://github.com/openshift/cluster-node-tuning-operator/pull/643)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/ec096805c69010250b9596b81977df3ac8b85e1d...2ac22ef24b5c11098f3fec6384a0ee6fb929b929)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ea4f097def493950e6e65068284084935b8ce4d9)

* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#541](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/541)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/aaa3cec4118d3743fd15f6197e348e86f7e48c7d...ea4f097def493950e6e65068284084935b8ce4d9)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/8d2af85d0b6dcf09256bd9fecc5d36ac77bc41d1)

* [OCPBUGS-14091](https://issues.redhat.com/browse/OCPBUGS-14091): [4.13] fix ClusterResourceQuotas to work for all api resources including custom resources [#116](https://github.com/openshift/cluster-policy-controller/pull/116)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/4aa5ecd04fa2a35a5ae07a13707bd2e0239432a9...8d2af85d0b6dcf09256bd9fecc5d36ac77bc41d1)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/f785bad1227439dfdb627538b3f7ecd0eb28f33c)

* [OCPBUGS-15756](https://issues.redhat.com/browse/OCPBUGS-15756): Update Jenkins and Jenkins Agent Base image versions [#505](https://github.com/openshift/cluster-samples-operator/pull/505)
* [OCPBUGS-14598](https://issues.redhat.com/browse/OCPBUGS-14598): Updating to use Jenkins 4.13 images [#503](https://github.com/openshift/cluster-samples-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/318d124ed3bcde76cbe960f6bef203728e34d1c6...f785bad1227439dfdb627538b3f7ecd0eb28f33c)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd)

* Adding the new CI Signer public key [#50](https://github.com/openshift/cluster-update-keys/pull/50)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/2796e1732615521e818be82663058e0a3f1b3941...5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd)


### [console](https://github.com/openshift/console/tree/3c87e69bb5c0a079d1d395a53bf1fd4583212112)

* [OCPBUGS-14426](https://issues.redhat.com/browse/OCPBUGS-14426): account for single object in status.conditions instead… [#12875](https://github.com/openshift/console/pull/12875)
* [OCPBUGS-14267](https://issues.redhat.com/browse/OCPBUGS-14267): Add Pipeline metrics unsupported empty page [#12864](https://github.com/openshift/console/pull/12864)
* [OCPBUGS-15410](https://issues.redhat.com/browse/OCPBUGS-15410): Add Git Repository (PAC) doesn't setup GitLab and Bitbucket configuration correct [#12936](https://github.com/openshift/console/pull/12936)
* [OCPBUGS-15787](https://issues.redhat.com/browse/OCPBUGS-15787): Remove access review check for PipelineResource from Pipeline section [#12967](https://github.com/openshift/console/pull/12967)
* [OCPBUGS-15228](https://issues.redhat.com/browse/OCPBUGS-15228): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12937](https://github.com/openshift/console/pull/12937)
* [release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading [#12931](https://github.com/openshift/console/pull/12931)
* [OCPBUGS-14166](https://issues.redhat.com/browse/OCPBUGS-14166): Fixed Make Serverless Form Error [#12857](https://github.com/openshift/console/pull/12857)
* [OCPBUGS-14336](https://issues.redhat.com/browse/OCPBUGS-14336): use service port name instead targetPort in the Pipeline Event listener route [#12870](https://github.com/openshift/console/pull/12870)
* [OCPBUGS-14310](https://issues.redhat.com/browse/OCPBUGS-14310): Could not import multiple resources via JSON (while YAML supports this) [#12868](https://github.com/openshift/console/pull/12868)
* [OCPBUGS-15335](https://issues.redhat.com/browse/OCPBUGS-15335): Delete annotation 'tekton.dev/v1beta1TaskRuns' when rerun the PLR [#12927](https://github.com/openshift/console/pull/12927)
* [OCPBUGS-15130](https://issues.redhat.com/browse/OCPBUGS-15130): Helm Repository "Edit" button results in 404 [#12909](https://github.com/openshift/console/pull/12909)
* [OCPBUGS-14189](https://issues.redhat.com/browse/OCPBUGS-14189): Corrected Labels for resolving the bug related to the Create Route Checkbox [#12858](https://github.com/openshift/console/pull/12858)
* [OCPBUGS-13642](https://issues.redhat.com/browse/OCPBUGS-13642): Fix OLM k8sResourcePrefix descriptor dropdown behavior [#12812](https://github.com/openshift/console/pull/12812)
* [OCPBUGS-11974](https://issues.redhat.com/browse/OCPBUGS-11974): Add page title to Devconsole pages [#12844](https://github.com/openshift/console/pull/12844)
* [OCPBUGS-15465](https://issues.redhat.com/browse/OCPBUGS-15465), [OCPBUGS-15481](https://issues.redhat.com/browse/OCPBUGS-15481): Remove PipelineResource CRD check because it's not installed with PO 1.11 anymore and disable operator-uninstall test [#12949](https://github.com/openshift/console/pull/12949)
* [OCPBUGS-14943](https://issues.redhat.com/browse/OCPBUGS-14943): visiting Configurations page returns error Cannot read… [#12897](https://github.com/openshift/console/pull/12897)
* [OCPBUGS-12785](https://issues.redhat.com/browse/OCPBUGS-12785): Project admin can update and view subscription from operator details page [#12780](https://github.com/openshift/console/pull/12780)
* [OCPBUGS-14574](https://issues.redhat.com/browse/OCPBUGS-14574): only copy workload annotations to debug pod [#12879](https://github.com/openshift/console/pull/12879)
* [OCPBUGS-14258](https://issues.redhat.com/browse/OCPBUGS-14258): Add vSphere cluster field. [#12862](https://github.com/openshift/console/pull/12862)
* [OCPBUGS-14195](https://issues.redhat.com/browse/OCPBUGS-14195): Topology UI doesn't recognize Serverless Rust function for proper UI icon [#12860](https://github.com/openshift/console/pull/12860)
* [OCPBUGS-10527](https://issues.redhat.com/browse/OCPBUGS-10527): When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox [#12658](https://github.com/openshift/console/pull/12658)
* [OCPBUGS-14165](https://issues.redhat.com/browse/OCPBUGS-14165): propagate labels to pipeline resources [#12856](https://github.com/openshift/console/pull/12856)
* [OCPBUGS-13959](https://issues.redhat.com/browse/OCPBUGS-13959): Wait with CRD/model translation until i18n bundles are loaded [#12842](https://github.com/openshift/console/pull/12842)
* [OCPBUGS-13783](https://issues.redhat.com/browse/OCPBUGS-13783): fix runtime error on OperatorHub details pages [#12830](https://github.com/openshift/console/pull/12830)
* [OCPBUGS-12770](https://issues.redhat.com/browse/OCPBUGS-12770): fix buildconfig form ns [#12776](https://github.com/openshift/console/pull/12776)
* [Full changelog](https://github.com/openshift/console/compare/62ae0f554b557dea4dcea405b3f38f1d31f9e7ec...3c87e69bb5c0a079d1d395a53bf1fd4583212112)


### [console-operator](https://github.com/openshift/console-operator/tree/c5f3b24448f6a7bf5dd5d145008df85e04ec5968)

* [OCPBUGS-12461](https://issues.redhat.com/browse/OCPBUGS-12461): Add new PrometheusRule to collect metrics for cluster-monitoring-operator [#758](https://github.com/openshift/console-operator/pull/758)
* [Full changelog](https://github.com/openshift/console-operator/compare/791e462bc88794ab24189c0c0cea18e4546049ef...c5f3b24448f6a7bf5dd5d145008df85e04ec5968)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/26001de8244adb4bd1ae4c4046932b5a9831edce)

* Add rhel9 binary [#102](https://github.com/openshift/containernetworking-plugins/pull/102)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/4655073266cb14756783bb06378224048f0dd3e3...26001de8244adb4bd1ae4c4046932b5a9831edce)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/f797d453f112aab86f3b7705c00ea871c2351d4a)

* [OCPBUGS-12484](https://issues.redhat.com/browse/OCPBUGS-12484), [OCPBUGS-12527](https://issues.redhat.com/browse/OCPBUGS-12527), [OCPBUGS-14505](https://issues.redhat.com/browse/OCPBUGS-14505): Mitigating CVE-2022-41723 [#140](https://github.com/openshift/csi-driver-shared-resource/pull/140)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d4685ceb2b13ac6ce60e1b7997a99dea7173649d...f797d453f112aab86f3b7705c00ea871c2351d4a)


### [docker-builder](https://github.com/openshift/builder/tree/1fec8a28a78b81aabc2bcbe8ac4843c8b7938230)

* [OCPBUGS-15606](https://issues.redhat.com/browse/OCPBUGS-15606): Add the git-lfs package [#352](https://github.com/openshift/builder/pull/352)
* [OCPBUGS-10002](https://issues.redhat.com/browse/OCPBUGS-10002), [OCPBUGS-8159](https://issues.redhat.com/browse/OCPBUGS-8159), [OCPBUGS-8191](https://issues.redhat.com/browse/OCPBUGS-8191): Mitigate CVE-2023-26054 [#348](https://github.com/openshift/builder/pull/348)
* [Full changelog](https://github.com/openshift/builder/compare/72c106db1fbdec85f02477b86b02ca3dd8a873c6...1fec8a28a78b81aabc2bcbe8ac4843c8b7938230)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/756e38455b8e08a34510e188673c77503dca3ff1)

* Add rhel9 binary [#71](https://github.com/openshift/egress-router-cni/pull/71)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/879b72bf6305ef394291ed1b4c5eeb3b11917633...756e38455b8e08a34510e188673c77503dca3ff1)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/78f61e4b7f5d3f8fbccb3bcc92b4652cf19a2c8e)

* Bump fedora-coreos to latest stable [#625](https://github.com/openshift/okd-machine-os/pull/625)
* Bump fedora-coreos to latest stable [#620](https://github.com/openshift/okd-machine-os/pull/620)
* Bump openshift-os to latest release-4.13 [#615](https://github.com/openshift/okd-machine-os/pull/615)
* Bump fedora-coreos to latest stable [#611](https://github.com/openshift/okd-machine-os/pull/611)
* Bump fedora-coreos to latest stable [#608](https://github.com/openshift/okd-machine-os/pull/608)
* add SELinux policy for `ip` AVCs [#603](https://github.com/openshift/okd-machine-os/pull/603)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/1df7a6769a40206e0e7506d3963e207b503b8ceb...78f61e4b7f5d3f8fbccb3bcc92b4652cf19a2c8e)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/efaf4dc692072338d472f086c9f691c71f4a028d)

* [OCPBUGS-12603](https://issues.redhat.com/browse/OCPBUGS-12603): Bump x/net package to v0.10.0 [#32](https://github.com/openshift/cloud-provider-gcp/pull/32)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/9b7ca987656ad184730a6b430dcd846f5bc75db5...efaf4dc692072338d472f086c9f691c71f4a028d)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)

* [OCPBUGS-12604](https://issues.redhat.com/browse/OCPBUGS-12604): Bump x/net package to v0.10.0 [#196](https://github.com/openshift/cluster-api-provider-gcp/pull/196)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/baf133cb8c200c1200363c97442382a9f9dab011...eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/a7ee68b55354d8c146ef81f82444c0765ea8885f)

* [OCPBUGS-15246](https://issues.redhat.com/browse/OCPBUGS-15246): Bump to k8s 1.26.6 [#1610](https://github.com/openshift/kubernetes/pull/1610)
* [OCPBUGS-8738](https://issues.redhat.com/browse/OCPBUGS-8738): bump apiserver-lib-go [#1611](https://github.com/openshift/kubernetes/pull/1611)
* [OCPBUGS-14589](https://issues.redhat.com/browse/OCPBUGS-14589): [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1596](https://github.com/openshift/kubernetes/pull/1596)
* [OCPBUGS-13747](https://issues.redhat.com/browse/OCPBUGS-13747): 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1580](https://github.com/openshift/kubernetes/pull/1580)
* [OCPBUGS-14048](https://issues.redhat.com/browse/OCPBUGS-14048): Bump to k8s 1.26.5 [#1586](https://github.com/openshift/kubernetes/pull/1586)
* [Full changelog](https://github.com/openshift/kubernetes/compare/b40493584076fb1ab29f3bed1d05d16cbc5b17f1...a7ee68b55354d8c146ef81f82444c0765ea8885f)


### [hypershift](https://github.com/openshift/hypershift/tree/156d2b2850ac04e82104d11621cb1826bb30b5d4)

* Update RHTAP references (release-4.13) [#2751](https://github.com/openshift/hypershift/pull/2751)
* [OCPBUGS-15171](https://issues.redhat.com/browse/OCPBUGS-15171): Skip AWS resource deletion for 'Unknown' OIDC state [#2701](https://github.com/openshift/hypershift/pull/2701)
* [HOSTEDCP-1008](https://issues.redhat.com/browse/HOSTEDCP-1008): Add NodePoolTransitionSeconds metric [#2758](https://github.com/openshift/hypershift/pull/2758)
* [OCPBUGS-15281](https://issues.redhat.com/browse/OCPBUGS-15281): Check OwningIngressController also in Labels [#2715](https://github.com/openshift/hypershift/pull/2715)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): refactor ignition-server reconcilation and add ignition-server proxy [#2748](https://github.com/openshift/hypershift/pull/2748)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2735](https://github.com/openshift/hypershift/pull/2735)
* [HOSTEDCP-1003](https://issues.redhat.com/browse/HOSTEDCP-1003): Set AWS conditions only for AWS platform [#2670](https://github.com/openshift/hypershift/pull/2670)
* OCPBUGS-15268 properly handle user CA bundle not existing [#2710](https://github.com/openshift/hypershift/pull/2710)
* [OCPBUGS-15301](https://issues.redhat.com/browse/OCPBUGS-15301): [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2696](https://github.com/openshift/hypershift/pull/2696)
* [OCPBUGS-14030](https://issues.redhat.com/browse/OCPBUGS-14030): Include default ingress CA in root CA bundle [#2599](https://github.com/openshift/hypershift/pull/2599)
* [OCPBUGS-14490](https://issues.redhat.com/browse/OCPBUGS-14490): Enable HCCO to reconcile over the OperatorHub's disableAllDefaultSources object [#2645](https://github.com/openshift/hypershift/pull/2645)
* [OCPBUGS-14801](https://issues.redhat.com/browse/OCPBUGS-14801): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2666](https://github.com/openshift/hypershift/pull/2666)
* [HOSTEDCP-1048](https://issues.redhat.com/browse/HOSTEDCP-1048): Add impersonate feature to the CLI and document HC dump procedure [#2681](https://github.com/openshift/hypershift/pull/2681)
* [OCPBUGS-14872](https://issues.redhat.com/browse/OCPBUGS-14872): Honor global ingress configuration LoadBalancer type on AWS [#2677](https://github.com/openshift/hypershift/pull/2677)
* [OCPBUGS-14436](https://issues.redhat.com/browse/OCPBUGS-14436): Add ClusterUpgradeDuration metric [#2637](https://github.com/openshift/hypershift/pull/2637)
* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2652](https://github.com/openshift/hypershift/pull/2652)
* Red Hat Trusted App Pipeline update hypershift-operator-release-413 [#2641](https://github.com/openshift/hypershift/pull/2641)
* Red Hat Trusted App Pipeline purge hypershift [#2640](https://github.com/openshift/hypershift/pull/2640)
* [OCPBUGS-13735](https://issues.redhat.com/browse/OCPBUGS-13735): Cluster-api SA can't create events and fix permissions wrongly included [#2610](https://github.com/openshift/hypershift/pull/2610)
* [OCPBUGS-14242](https://issues.redhat.com/browse/OCPBUGS-14242): Remove external-dns --events flag [#2621](https://github.com/openshift/hypershift/pull/2621)
* [OCPBUGS-14155](https://issues.redhat.com/browse/OCPBUGS-14155): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2613](https://github.com/openshift/hypershift/pull/2613)
* [OCPBUGS-13399](https://issues.redhat.com/browse/OCPBUGS-13399): Fix errors from HCP controller removeServiceCAAnnotationAndSecret() [#2552](https://github.com/openshift/hypershift/pull/2552)
* [HOSTEDCP-1010](https://issues.redhat.com/browse/HOSTEDCP-1010): Set ETCD Storage Size as immutable field and equalised the default size among both api versions [#2611](https://github.com/openshift/hypershift/pull/2611)
* [HOSTEDCP-947](https://issues.redhat.com/browse/HOSTEDCP-947): Increases default etcd PV size to 8Gi [#2569](https://github.com/openshift/hypershift/pull/2569)
* [HOSTEDCP-926](https://issues.redhat.com/browse/HOSTEDCP-926): Send metric when HO/CPO decide to skip cloud resource deletion [#2594](https://github.com/openshift/hypershift/pull/2594)
* [HOSTEDCP-975](https://issues.redhat.com/browse/HOSTEDCP-975): Backport nodepools metrics [#2601](https://github.com/openshift/hypershift/pull/2601)
* Red Hat Trusted App Pipeline update hypershift [#2603](https://github.com/openshift/hypershift/pull/2603)
* [Full changelog](https://github.com/openshift/hypershift/compare/3f61d88560660a04c860f2cb5fb355b8fb9142b8...156d2b2850ac04e82104d11621cb1826bb30b5d4)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/59edd923386b36f2cad99150b7fd11fb7bbb1688)

* [OCPBUGS-12612](https://issues.redhat.com/browse/OCPBUGS-12612): Update x/net to v0.7.0 [#52](https://github.com/openshift/cloud-provider-ibm/pull/52)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/1640c42033631b3e8847c9867772666e898dfd01...59edd923386b36f2cad99150b7fd11fb7bbb1688)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)

* [OCPBUGS-14073](https://issues.redhat.com/browse/OCPBUGS-14073): UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 [#24](https://github.com/openshift/ibm-vpc-node-label-updater/pull/24)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/283a614ee34e83afa065338dee25d4ee202c8aeb...96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/bb253a0c607f7d1f8139ffd401bd6c9c432090d1)

* [OCPBUGS-12616](https://issues.redhat.com/browse/OCPBUGS-12616): Bump x/net to v0.7.0 [#23](https://github.com/openshift/machine-api-provider-ibmcloud/pull/23)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c75f7e3e7a3b7525aa2d540f86fd7477e7800608...bb253a0c607f7d1f8139ffd401bd6c9c432090d1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/f87e4120ed55da397a323ddbc7fe1a5edb0f088c)

* [OCPBUGS-14773](https://issues.redhat.com/browse/OCPBUGS-14773): extend configmap gatherer to get gateway-mode-config (#788) (#791) [#788](https://github.com/openshift/insights-operator/pull/788)
* [release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) [#794](https://github.com/openshift/insights-operator/pull/794)
* [OCPBUGS-14318](https://issues.redhat.com/browse/OCPBUGS-14318): gather PDBs only from openshift namespaces (#786) [#786](https://github.com/openshift/insights-operator/pull/786)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0babf2b1fa2d68eae51a578f40fcdfb722fe485a...f87e4120ed55da397a323ddbc7fe1a5edb0f088c)


### [ironic](https://github.com/openshift/ironic-image/tree/0c7c4b6f7971d157525fc9c30880fb1118810f15)

* [OCPBUGS-13587](https://issues.redhat.com/browse/OCPBUGS-13587): Add python-flask dependency [#372](https://github.com/openshift/ironic-image/pull/372)
* [OCPBUGS-14135](https://issues.redhat.com/browse/OCPBUGS-14135): ironic.conf.j2: Bump min_command_interval to 30 on SCOS [#378](https://github.com/openshift/ironic-image/pull/378)
* Bug OCPBUGS-13334: Bump ironic version to include fix to OCPBUGS-13334. [#366](https://github.com/openshift/ironic-image/pull/366)
* [Full changelog](https://github.com/openshift/ironic-image/compare/798f79f2d37fe93502ac0e78f24830a9c4ffdcd9...0c7c4b6f7971d157525fc9c30880fb1118810f15)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/69d3b7f0bc111655e138ae8a30dbf276efa94604)

* "Bug OCPBUGS-15777: Switch to udevadm command install instead of package" [#81](https://github.com/openshift/ironic-agent-image/pull/81)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ee5bee32747e1053fc6add76fcdd98f5816b27ba...69d3b7f0bc111655e138ae8a30dbf276efa94604)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/ce2917794de5723248fe3302c8833f89fb54265a)

* [OCPBUGS-15734](https://issues.redhat.com/browse/OCPBUGS-15734): Binary should be compiled on rhel9 [#91](https://github.com/openshift/ironic-rhcos-downloader/pull/91)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/2ba6060dc968488a495fbcd1250cfb186e4ada78...ce2917794de5723248fe3302c8833f89fb54265a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a)

* [OCPBUGS-14278](https://issues.redhat.com/browse/OCPBUGS-14278): fix possible concurrent map read/write [#550](https://github.com/openshift/sdn/pull/550)
* [Full changelog](https://github.com/openshift/sdn/compare/d56dc6a393cf250704d2c4914c09533525caafba...97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f1205e66bf34421046288bc74aed0d69b8434206)

* [OCPBUGS-12513](https://issues.redhat.com/browse/OCPBUGS-12513): go.mod: update golang.org/x/net to v0.7.0 [#68](https://github.com/openshift/kube-rbac-proxy/pull/68)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/11b1439d48a47a408ae7e2dd851989f7b7b4f595...f1205e66bf34421046288bc74aed0d69b8434206)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/5baee73180230512dd0b45cf8ca23cb3da859586)

* [OCPBUGS-15457](https://issues.redhat.com/browse/OCPBUGS-15457): Remove unneeded grpcio dependencies from RPM [#735](https://github.com/openshift/kuryr-kubernetes/pull/735)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/3055dbe26667d6cf2d1f452a7dd97ca2113b606d...5baee73180230512dd0b45cf8ca23cb3da859586)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/370fdaa43c6964e2af6abbde2bf37789de509bec)

* [OCPBUGS-12626](https://issues.redhat.com/browse/OCPBUGS-12626): Update golang.org/x/net dependency [#1148](https://github.com/openshift/machine-api-operator/pull/1148)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a23baf767a80a2a7e467be1c8ef9b32d40c66825...370fdaa43c6964e2af6abbde2bf37789de509bec)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0ceebc00584733717887aed4c7c51b154cb33980)

* [OCPBUGS-14459](https://issues.redhat.com/browse/OCPBUGS-14459): daemon: Remove noisy log message [#3723](https://github.com/openshift/machine-config-operator/pull/3723)
* [OCPBUGS-15580](https://issues.redhat.com/browse/OCPBUGS-15580): 4.13: Dockerfile: update rhel7 nmstate pin [#3764](https://github.com/openshift/machine-config-operator/pull/3764)
* [OCPBUGS-15463](https://issues.redhat.com/browse/OCPBUGS-15463): Minor fix to support protectKernelDefaults field in Kubelet Config [#3757](https://github.com/openshift/machine-config-operator/pull/3757)
* 4.13: Dockerfile: use proper rhel9 image [#3771](https://github.com/openshift/machine-config-operator/pull/3771)
* 4.13: use rhel9 builder for daemon binary [#3760](https://github.com/openshift/machine-config-operator/pull/3760)
* [OCPBUGS-13311](https://issues.redhat.com/browse/OCPBUGS-13311): daemon: write certs in firstboot-complete path [#3702](https://github.com/openshift/machine-config-operator/pull/3702)
* [OCPBUGS-13404](https://issues.redhat.com/browse/OCPBUGS-13404), [OCPBUGS-14298](https://issues.redhat.com/browse/OCPBUGS-14298): Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 [#3716](https://github.com/openshift/machine-config-operator/pull/3716)
* [OCPBUGS-14850](https://issues.redhat.com/browse/OCPBUGS-14850): Allow userfaultfd syscall to be used by unprivileged users [#3743](https://github.com/openshift/machine-config-operator/pull/3743)
* [OCPBUGS-13974](https://issues.redhat.com/browse/OCPBUGS-13974): MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default [#3714](https://github.com/openshift/machine-config-operator/pull/3714)
* [OCPBUGS-13138](https://issues.redhat.com/browse/OCPBUGS-13138): daemon: Don't traverse `/run/ostree/auth.json` symlink [#3697](https://github.com/openshift/machine-config-operator/pull/3697)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/230bb7e5f5620af293f3dc5b9740e01f5644262f...0ceebc00584733717887aed4c7c51b154cb33980)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/f76d674edb07d7006f04748338c1013499c0e7ab)

* [OCPBUGS-13709](https://issues.redhat.com/browse/OCPBUGS-13709): Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 [#68](https://github.com/openshift/multus-admission-controller/pull/68)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/d6d52a7a7df2243056c5db83cc10885ac2ca775b...f76d674edb07d7006f04748338c1013499c0e7ab)


### [multus-cni](https://github.com/openshift/multus-cni/tree/bb616eff56bf0b71ad85009360231f4686a6e4a9)

* Add rhel9 binary for multus [#169](https://github.com/openshift/multus-cni/pull/169)
* [OCPBUGS-8398](https://issues.redhat.com/browse/OCPBUGS-8398): Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] [#154](https://github.com/openshift/multus-cni/pull/154)
* [OCPBUGS-13759](https://issues.redhat.com/browse/OCPBUGS-13759): Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) [#161](https://github.com/openshift/multus-cni/pull/161)
* [OCPBUGS-13814](https://issues.redhat.com/browse/OCPBUGS-13814): Fix multus to support CNI plugin which does not create interface [backport 4.13] [#163](https://github.com/openshift/multus-cni/pull/163)
* [Full changelog](https://github.com/openshift/multus-cni/compare/3f9b2d036b6cbc562aca9269bbeb7d0be198549c...bb616eff56bf0b71ad85009360231f4686a6e4a9)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)

* Add rhel9 binary [#37](https://github.com/openshift/route-override-cni/pull/37)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/6644ac7ba8481b2c7b035390d20d28ba4b55c5ab...ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/31f847af4c69f297a328b35bb4a1ac329ccc198e)

* [OCPBUGS-13871](https://issues.redhat.com/browse/OCPBUGS-13871): fix: changes on help info content (#654) [#654](https://github.com/openshift/oc-mirror/pull/654)
* Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) [#637](https://github.com/openshift/oc-mirror/pull/637)
* Removes Ross and adds Jeremy in the OWNER file (#645) [#645](https://github.com/openshift/oc-mirror/pull/645)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/aee430b90e7e3920d9798669cafaf70294314d44...31f847af4c69f297a328b35bb4a1ac329ccc198e)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c6396c8bf38a737b17c598931a038a1700643482)

* [OCPBUGS-15589](https://issues.redhat.com/browse/OCPBUGS-15589): fix dynamic conversion webhook [#499](https://github.com/openshift/operator-framework-olm/pull/499)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ce46f5b97e4838c4508f6dc471cabc1199a8f0b9...c6396c8bf38a737b17c598931a038a1700643482)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/6627b2a22d70fa740de8bb35f0beea3816b01ec4)

* [OCPBUGS-14653](https://issues.redhat.com/browse/OCPBUGS-14653): set upgrade condition of operator to false [#118](https://github.com/openshift/ovirt-csi-driver-operator/pull/118)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/3e49f77c34922a7e2ce675825cb5ff3bca3a6dbd...6627b2a22d70fa740de8bb35f0beea3816b01ec4)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/3d5f185ac07d93ba51b608aa0f39ac91f06e8518)

* Dockerfile: build both RHEL8 and RHEL9 shims [#1748](https://github.com/openshift/ovn-kubernetes/pull/1748)
* [OCPBUGS-15585](https://issues.redhat.com/browse/OCPBUGS-15585): [release-4.13] Fix egressFirewall create error handling [#1733](https://github.com/openshift/ovn-kubernetes/pull/1733)
* [OCPBUGS-14492](https://issues.redhat.com/browse/OCPBUGS-14492): Backport OVN component templates for NodePort services. [#1709](https://github.com/openshift/ovn-kubernetes/pull/1709)
* [OCPBUGS-15608](https://issues.redhat.com/browse/OCPBUGS-15608): Nuke old .rhel9 Dockerfiles [#1711](https://github.com/openshift/ovn-kubernetes/pull/1711)
* [OCPBUGS-13745](https://issues.redhat.com/browse/OCPBUGS-13745): [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire [#1675](https://github.com/openshift/ovn-kubernetes/pull/1675)
* [OCPBUGS-15372](https://issues.redhat.com/browse/OCPBUGS-15372): [release-4.13] Fix network policy to work with long namespace names [#1722](https://github.com/openshift/ovn-kubernetes/pull/1722)
* [OCPBUGS-14979](https://issues.redhat.com/browse/OCPBUGS-14979): Validate port before deleting conntrack flow [#1712](https://github.com/openshift/ovn-kubernetes/pull/1712)
* [OCPBUGS-15140](https://issues.redhat.com/browse/OCPBUGS-15140): Fix stale SNAT entries for completed pods [#1715](https://github.com/openshift/ovn-kubernetes/pull/1715)
* [OCPBUGS-14482](https://issues.redhat.com/browse/OCPBUGS-14482): Dockerfiles: sync RHEL9 dockerfiles to regular unused ones [#1695](https://github.com/openshift/ovn-kubernetes/pull/1695)
* [OCPBUGS-12864](https://issues.redhat.com/browse/OCPBUGS-12864): Drop packets were not properly SNATed [#1662](https://github.com/openshift/ovn-kubernetes/pull/1662)
* [OCPBUGS-13170](https://issues.redhat.com/browse/OCPBUGS-13170): Fix bug that resulted in routes not be restored to a new vnic [#1668](https://github.com/openshift/ovn-kubernetes/pull/1668)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/9b6742d1022709cc023e395e2c7fa8a7141ea325...3d5f185ac07d93ba51b608aa0f39ac91f06e8518)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/95a117826360e23e092be5bbee2da8dbcf44f17a)

* [OCPBUGS-12672](https://issues.redhat.com/browse/OCPBUGS-12672): update golang.org/x/net [#237](https://github.com/openshift/prometheus-operator/pull/237)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9cd6788ed2cb30982c8b9d6ec8f8c7e72b30d7df...95a117826360e23e092be5bbee2da8dbcf44f17a)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/6667a6cbf9a87331fcc4407375118c0bb884c925)

* [OCPBUGS-14276](https://issues.redhat.com/browse/OCPBUGS-14276): Bump k8s to 1.26.5 [#26](https://github.com/openshift/route-controller-manager/pull/26)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/d7a8e22db412b6fabb7028ca0da8de8f3d9ac3c3...6667a6cbf9a87331fcc4407375118c0bb884c925)


### [tests](https://github.com/openshift/origin/tree/6f68dc4781e72b3374dabbeeb1e56b8aae784a8a)

* [OCPBUGS-15892](https://issues.redhat.com/browse/OCPBUGS-15892): remove references to registry.centos.org [#28031](https://github.com/openshift/origin/pull/28031)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Skip CCM upgradable condition on AlibabaCloud [#28025](https://github.com/openshift/origin/pull/28025)
* [OCPBUGS-7762](https://issues.redhat.com/browse/OCPBUGS-7762): Bump with latest openshift/kubernetes at 4.13 [#27973](https://github.com/openshift/origin/pull/27973)
* [OCPBUGS-5029](https://issues.redhat.com/browse/OCPBUGS-5029): [release-4.13] OpenStack: Restore in-tree cinder provisioner tests [#27827](https://github.com/openshift/origin/pull/27827)
* [OCPBUGS-14342](https://issues.redhat.com/browse/OCPBUGS-14342): Increase timeout in sysctl allowlist test [#27956](https://github.com/openshift/origin/pull/27956)
* [OCPBUGS-13840](https://issues.redhat.com/browse/OCPBUGS-13840): Add missing error check in sysctl allowlist test [#27929](https://github.com/openshift/origin/pull/27929)
* [OCPBUGS-14127](https://issues.redhat.com/browse/OCPBUGS-14127): Move from registry.centos.org to quay.io [#27948](https://github.com/openshift/origin/pull/27948)
* [OCPBUGS-12700](https://issues.redhat.com/browse/OCPBUGS-12700): update-etcd-scaling-test [#27892](https://github.com/openshift/origin/pull/27892)
* [Full changelog](https://github.com/openshift/origin/compare/893ae5755c21bfabe8042f6e885dda7d80671b5c...6f68dc4781e72b3374dabbeeb1e56b8aae784a8a)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/64f62bff177c6f2df6f106eacecc05e49e9a9828)

* [OCPBUGS-14571](https://issues.redhat.com/browse/OCPBUGS-14571): Check all storage classes including CSI storageclasses [#120](https://github.com/openshift/vsphere-problem-detector/pull/120)
* [OCPBUGS-14098](https://issues.redhat.com/browse/OCPBUGS-14098): In UPI clusters VSphere platform could be nil [#118](https://github.com/openshift/vsphere-problem-detector/pull/118)
* [OCPBUGS-14085](https://issues.redhat.com/browse/OCPBUGS-14085): Log vcenter version information [#117](https://github.com/openshift/vsphere-problem-detector/pull/117)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/e10dc55232d1bf9f11251f63abcb72fe75bedd75...64f62bff177c6f2df6f106eacecc05e49e9a9828)