# 4.13.0-0.okd-2023-06-24-145750

Created: 2023-06-25 05:13:38 +0000 UTC

Image Digest: `sha256:873c173b9ccb1f78bf2c5aa285227259c373191a722bcc3915375006903088a5`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-06-24-145750


## Changes from 4.13.0-0.okd-2023-06-04-080300

### Components

* Kubernetes upgraded from 1.26.5 to 1.26.6
* Fedora CoreOS upgraded from 38.20230514.3 to 38.20230527.3


### Rebuilt images without code change

* [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator) git [db283115](https://github.com/openshift/cluster-baremetal-operator/commit/db283115e0b424e404307602701f1b6295c2f856) `sha256:b4709e6a34053f3dbe94e44c5cc4ca3a2a1669e6743335845ee44918ac1dce86`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [ce1c9a35](https://github.com/openshift/cluster-capi-operator/commit/ce1c9a359ec9ab0c5526cd8594ea59bb52044026) `sha256:9f8026ea03c9d7d7486d942b533c31fa6adb6d984194db91e309e08484d61b4d`
* [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator) git [02ea4a41](https://github.com/openshift/cluster-kube-apiserver-operator/commit/02ea4a4120dd0f8eb49d070b1fe420ed6d1debba) `sha256:d3a7b50b6a96444b542acb6039f59b3a9c9d775600f85a3921cb87a8d65879c4`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:af7055332f18015e479166879647c7635ef698afee1cbb1c28a09ccdf2e916a9`
* [etcd](https://github.com/openshift/etcd) git [f70da9d7](https://github.com/openshift/etcd/commit/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d) `sha256:db91912b0e3c7c3ddef645b6bb057f25df5bf67b2ebcc0ddd64aa9fd3657a969`
* [haproxy-router](https://github.com/openshift/router) git [065deab8](https://github.com/openshift/router/commit/065deab84f342615db2d2f5c78a19ae04bb43912) `sha256:0638cdbb2f3390fac013f7d655c11fd991c51e1768921741dc5ba32db68a36aa`
* [telemeter](https://github.com/openshift/telemeter) git [be81b434](https://github.com/openshift/telemeter/commit/be81b43429dcbf70f6ca19a9360ba455c97a1639) `sha256:8ef35b784507398208ffe74a4c514e1e577d8dea620815d325d4959e8f8ae9db`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8edd7dc2a74f3e4e0a7cd6229b89c9d4270952e6)

* [MGMT-13947](https://issues.redhat.com/browse/MGMT-13947): Revert assisted boot reporter service (#5292) [#5292](https://github.com/openshift/assisted-service/pull/5292)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8db33dbd81fe23f2a7f2ec69231b23015e2ae53b...8edd7dc2a74f3e4e0a7cd6229b89c9d4270952e6)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/f289c9e9d3abe5f7b6dc57a388ef31419d235347)

* [OCPBUGS-14848](https://issues.redhat.com/browse/OCPBUGS-14848): Filter out hidden devices (#559) [#559](https://github.com/openshift/assisted-installer-agent/pull/559)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e8de0582db56699d32653df02241c4a104755e1b...f289c9e9d3abe5f7b6dc57a388ef31419d235347)


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/125a4b45d02ac7596406e43810398688b25ec91d)

* [OCPBUGS-12555](https://issues.redhat.com/browse/OCPBUGS-12555): Update builder to OCP4.13/go1.19 [#164](https://github.com/openshift/aws-pod-identity-webhook/pull/164)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/4969655df4169f19092e173b16c56c79d3a3383e...125a4b45d02ac7596406e43810398688b25ec91d)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/fb2d232da809a58929fe86cb9a59a045c7b44aa4)

* [OCPBUGS-13952](https://issues.redhat.com/browse/OCPBUGS-13952): Update x/net package to v0.8.0 [#68](https://github.com/openshift/cloud-provider-azure/pull/68)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/7afcf26e2e9190337134e75e0981d25d05dc16c8...fb2d232da809a58929fe86cb9a59a045c7b44aa4)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/8846366f4ae63a63ab75a35761cca1c95dee3c84)

* [OCPBUGS-12557](https://issues.redhat.com/browse/OCPBUGS-12557): Bump x/net package to v0.10.0 [#278](https://github.com/openshift/cluster-api-provider-azure/pull/278)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/9885d4d37ed74d764eb83a826f3a7b013ed83d12...8846366f4ae63a63ab75a35761cca1c95dee3c84)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/f834ef0165bb5cbf70559eb43dad7e1203cd9aff)

* [OCPBUGS-15289](https://issues.redhat.com/browse/OCPBUGS-15289): gcp use preconfigured private zone for installation [#7271](https://github.com/openshift/installer/pull/7271)
* [OCPBUGS-14916](https://issues.redhat.com/browse/OCPBUGS-14916): Replace with govc docker image and fix ibmcli folder permission issue [#7245](https://github.com/openshift/installer/pull/7245)
* [OCPBUGS-13323](https://issues.redhat.com/browse/OCPBUGS-13323): update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 [#7248](https://github.com/openshift/installer/pull/7248)
* [OCPBUGS-14860](https://issues.redhat.com/browse/OCPBUGS-14860): GCP XPN Private Cluster Fails with no Public Zone [#7240](https://github.com/openshift/installer/pull/7240)
* [Full changelog](https://github.com/openshift/installer/compare/90bb61f38881d07ce94368f0b34089d152ffa4ef...f834ef0165bb5cbf70559eb43dad7e1203cd9aff)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/3c924532a6965789f743fe37d77ed8b52a065c36)

* [OCPBUGS-13374](https://issues.redhat.com/browse/OCPBUGS-13374): Do not try to update images for nodes in transient states [#282](https://github.com/openshift/baremetal-operator/pull/282)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/b771b3bf1ad22acf65afb123e6616aac980661b9...3c924532a6965789f743fe37d77ed8b52a065c36)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/7a4597c614871c34a805a981b1601464a5879919)

* [OCPBUGS-15101](https://issues.redhat.com/browse/OCPBUGS-15101): Use machine-config state instead of comparing roles [#261](https://github.com/openshift/baremetal-runtimecfg/pull/261)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/f0c1297c424d2ce8d20b376c488f8ada595b39b9...7a4597c614871c34a805a981b1601464a5879919)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/e4c9a6aeac8e382ad8a5dd6c2031a694ca0b80eb)

* handle the error case of node retrieval while waiting for reboot [#1484](https://github.com/openshift/oc/pull/1484)
* bring some cert rotation helpers back into 4.13 [#1474](https://github.com/openshift/oc/pull/1474)
* [Full changelog](https://github.com/openshift/oc/compare/05d83eff7e17160e679898a2a5cd6019ec252c49...e4c9a6aeac8e382ad8a5dd6c2031a694ca0b80eb)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0621fcaf818f57ab05602259c1eb14db07b68dce)

* [OCPBUGS-12565](https://issues.redhat.com/browse/OCPBUGS-12565): CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] [#543](https://github.com/openshift/cloud-credential-operator/pull/543)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d3b5ffa30529cfb744715145919b58de6872656f...0621fcaf818f57ab05602259c1eb14db07b68dce)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/1258d548f7b8e98a08b98606e31c983b032afb3c)

* [OCPBUGS-14635](https://issues.redhat.com/browse/OCPBUGS-14635): increase GCP egress ip capacity to 100 from 10 [#113](https://github.com/openshift/cloud-network-config-controller/pull/113)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/71ccef5299dc865106a86f6f514041dbe33086bb...1258d548f7b8e98a08b98606e31c983b032afb3c)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/507f873307be10d8ddbbbe0fecba68aea7c2b5c1)

* [OCPBUGS-12567](https://issues.redhat.com/browse/OCPBUGS-12567): Bump x/net package to v0.10.0 [#176](https://github.com/openshift/cluster-api/pull/176)
* [Full changelog](https://github.com/openshift/cluster-api/compare/0142186bad9acc2d7950663129a4ef82c32a5610...507f873307be10d8ddbbbe0fecba68aea7c2b5c1)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/42f323cd02b4e86ed630ed6649e32f9a876b3444)

* [OCPBUGS-15330](https://issues.redhat.com/browse/OCPBUGS-15330): Fix lint issue [#222](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/222)
* [OCPBUGS-15161](https://issues.redhat.com/browse/OCPBUGS-15161): Surface cpms vs machine diff [#218](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/218)
* [OCPBUGS-14024](https://issues.redhat.com/browse/OCPBUGS-14024): Check ProviderSpec before generating MachineInfo [#211](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/211)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/9740b7ebfb127dfaa251506714e6c8cb41f0ae2b...42f323cd02b4e86ed630ed6649e32f9a876b3444)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/382d006fc92671cb09b724e3c2b27b09364e0d15)

* [OCPBUGS-12743](https://issues.redhat.com/browse/OCPBUGS-12743): bump controller-runtime to fix the multi namespace cache indexing [#921](https://github.com/openshift/cluster-ingress-operator/pull/921)
* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#935](https://github.com/openshift/cluster-ingress-operator/pull/935)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/502e3517f8f10b7d36c7d9d78197db49dae7f2e6...382d006fc92671cb09b724e3c2b27b09364e0d15)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/5c00da0816faf0f15e643f05666c963d862a8299)

* [OCPBUGS-14651](https://issues.redhat.com/browse/OCPBUGS-14651): disable debug pporf with unauthenticated port for 4.13 [#480](https://github.com/openshift/cluster-kube-scheduler-operator/pull/480)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/dc5cba57ddcdb5a4b43240d1c2ab908fa953d887...5c00da0816faf0f15e643f05666c963d862a8299)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/3777e7bb9e8c2f9008685492cff9589e31c20473)

* [OCPBUGS-14251](https://issues.redhat.com/browse/OCPBUGS-14251): Add new web console usage metrics [#1976](https://github.com/openshift/cluster-monitoring-operator/pull/1976)
* [OCPBUGS-12488](https://issues.redhat.com/browse/OCPBUGS-12488): go.mod: update golang.org/x/net to v0.7.0 [#1957](https://github.com/openshift/cluster-monitoring-operator/pull/1957)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4a992c336804d87b53d40124ce5ba210d9239dbc...3777e7bb9e8c2f9008685492cff9589e31c20473)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/cf774f4844621d058b951457a4068aeb3e1e609e)

* [OCPBUGS-14871](https://issues.redhat.com/browse/OCPBUGS-14871): Do not rely on ControlPlaneTopology do determine if running in HyperShift [#1837](https://github.com/openshift/cluster-network-operator/pull/1837)
* [OCPBUGS-13809](https://issues.redhat.com/browse/OCPBUGS-13809): Use `IfNotPresent` instead of `Always` in OVNK upgrades pre-puller [#1813](https://github.com/openshift/cluster-network-operator/pull/1813)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/924fd3c589f0dc345807550965ef80099311b82a...cf774f4844621d058b951457a4068aeb3e1e609e)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/4bd0ef245e10269ac4a7e68c5119b94e393b46bb)

* [OCPBUGS-14895](https://issues.redhat.com/browse/OCPBUGS-14895): Do not fail creating cgroups if they exist already (#684) [#684](https://github.com/openshift/cluster-node-tuning-operator/pull/684)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/cbd341ba09c0f83ead652af6a8b17454fc2b5e9e...4bd0ef245e10269ac4a7e68c5119b94e393b46bb)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/93fbf940ff04c6e01f0d0a6baef985470c966cc3)

* [OCPBUGS-14598](https://issues.redhat.com/browse/OCPBUGS-14598): Updating to use Jenkins 4.13 images [#503](https://github.com/openshift/cluster-samples-operator/pull/503)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/318d124ed3bcde76cbe960f6bef203728e34d1c6...93fbf940ff04c6e01f0d0a6baef985470c966cc3)


### [console](https://github.com/openshift/console/tree/ba926294504fc3c0181cc272c66479989dfd3a1b)

* [OCPBUGS-14943](https://issues.redhat.com/browse/OCPBUGS-14943): visiting Configurations page returns error Cannot read… [#12897](https://github.com/openshift/console/pull/12897)
* [OCPBUGS-12785](https://issues.redhat.com/browse/OCPBUGS-12785): Project admin can update and view subscription from operator details page [#12780](https://github.com/openshift/console/pull/12780)
* [OCPBUGS-14574](https://issues.redhat.com/browse/OCPBUGS-14574): only copy workload annotations to debug pod [#12879](https://github.com/openshift/console/pull/12879)
* [OCPBUGS-14258](https://issues.redhat.com/browse/OCPBUGS-14258): Add vSphere cluster field. [#12862](https://github.com/openshift/console/pull/12862)
* [Full changelog](https://github.com/openshift/console/compare/237aa38b64f8cb4d20aa4d17f272d8deb5849b8d...ba926294504fc3c0181cc272c66479989dfd3a1b)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/f797d453f112aab86f3b7705c00ea871c2351d4a)

* [OCPBUGS-12484](https://issues.redhat.com/browse/OCPBUGS-12484), [OCPBUGS-12527](https://issues.redhat.com/browse/OCPBUGS-12527), [OCPBUGS-14505](https://issues.redhat.com/browse/OCPBUGS-14505): Mitigating CVE-2022-41723 [#140](https://github.com/openshift/csi-driver-shared-resource/pull/140)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d4685ceb2b13ac6ce60e1b7997a99dea7173649d...f797d453f112aab86f3b7705c00ea871c2351d4a)


### [docker-builder](https://github.com/openshift/builder/tree/d02643e89631a31343c4c76e2004cd53c64acdf7)

* [OCPBUGS-10002](https://issues.redhat.com/browse/OCPBUGS-10002), [OCPBUGS-8159](https://issues.redhat.com/browse/OCPBUGS-8159), [OCPBUGS-8191](https://issues.redhat.com/browse/OCPBUGS-8191): Mitigate CVE-2023-26054 [#348](https://github.com/openshift/builder/pull/348)
* [Full changelog](https://github.com/openshift/builder/compare/72c106db1fbdec85f02477b86b02ca3dd8a873c6...d02643e89631a31343c4c76e2004cd53c64acdf7)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/db790f4bd8f3ac866c6f8faefb3278e0978ddc44)

* Bump fedora-coreos to latest stable [#620](https://github.com/openshift/okd-machine-os/pull/620)
* Bump openshift-os to latest release-4.13 [#615](https://github.com/openshift/okd-machine-os/pull/615)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/5e6acfcdc385e7c2653d082d9c8a1dbee32aed49...db790f4bd8f3ac866c6f8faefb3278e0978ddc44)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)

* [OCPBUGS-12604](https://issues.redhat.com/browse/OCPBUGS-12604): Bump x/net package to v0.10.0 [#196](https://github.com/openshift/cluster-api-provider-gcp/pull/196)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/baf133cb8c200c1200363c97442382a9f9dab011...eaeccca9082e1c02ad3422ff49e69cc595bd2ec6)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/a7ee68b55354d8c146ef81f82444c0765ea8885f)

* [OCPBUGS-15246](https://issues.redhat.com/browse/OCPBUGS-15246): Bump to k8s 1.26.6 [#1610](https://github.com/openshift/kubernetes/pull/1610)
* [OCPBUGS-8738](https://issues.redhat.com/browse/OCPBUGS-8738): bump apiserver-lib-go [#1611](https://github.com/openshift/kubernetes/pull/1611)
* [OCPBUGS-14589](https://issues.redhat.com/browse/OCPBUGS-14589): [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1596](https://github.com/openshift/kubernetes/pull/1596)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7a891f05c7beb9527024c7616d95f6ff5c309f27...a7ee68b55354d8c146ef81f82444c0765ea8885f)


### [hypershift](https://github.com/openshift/hypershift/tree/5f86f71184775c6771f9038bedd9726d8ff1eb7e)

* OCPBUGS-15268 properly handle user CA bundle not existing [#2710](https://github.com/openshift/hypershift/pull/2710)
* [OCPBUGS-15301](https://issues.redhat.com/browse/OCPBUGS-15301): [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2696](https://github.com/openshift/hypershift/pull/2696)
* [OCPBUGS-14030](https://issues.redhat.com/browse/OCPBUGS-14030): Include default ingress CA in root CA bundle [#2599](https://github.com/openshift/hypershift/pull/2599)
* [OCPBUGS-14490](https://issues.redhat.com/browse/OCPBUGS-14490): Enable HCCO to reconcile over the OperatorHub's disableAllDefaultSources object [#2645](https://github.com/openshift/hypershift/pull/2645)
* [OCPBUGS-14801](https://issues.redhat.com/browse/OCPBUGS-14801): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2666](https://github.com/openshift/hypershift/pull/2666)
* [HOSTEDCP-1048](https://issues.redhat.com/browse/HOSTEDCP-1048): Add impersonate feature to the CLI and document HC dump procedure [#2681](https://github.com/openshift/hypershift/pull/2681)
* [OCPBUGS-14872](https://issues.redhat.com/browse/OCPBUGS-14872): Honor global ingress configuration LoadBalancer type on AWS [#2677](https://github.com/openshift/hypershift/pull/2677)
* [OCPBUGS-14436](https://issues.redhat.com/browse/OCPBUGS-14436): Add ClusterUpgradeDuration metric [#2637](https://github.com/openshift/hypershift/pull/2637)
* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2652](https://github.com/openshift/hypershift/pull/2652)
* Red Hat Trusted App Pipeline update hypershift-operator-release-413 [#2641](https://github.com/openshift/hypershift/pull/2641)
* Red Hat Trusted App Pipeline purge hypershift [#2640](https://github.com/openshift/hypershift/pull/2640)
* [Full changelog](https://github.com/openshift/hypershift/compare/7b6e5a22af222f82ee93877c165a5e02f503fa4e...5f86f71184775c6771f9038bedd9726d8ff1eb7e)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/59edd923386b36f2cad99150b7fd11fb7bbb1688)

* [OCPBUGS-12612](https://issues.redhat.com/browse/OCPBUGS-12612): Update x/net to v0.7.0 [#52](https://github.com/openshift/cloud-provider-ibm/pull/52)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/1640c42033631b3e8847c9867772666e898dfd01...59edd923386b36f2cad99150b7fd11fb7bbb1688)


### [ibm-vpc-node-label-updater](https://github.com/openshift/ibm-vpc-node-label-updater/tree/96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)

* [OCPBUGS-14073](https://issues.redhat.com/browse/OCPBUGS-14073): UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 [#24](https://github.com/openshift/ibm-vpc-node-label-updater/pull/24)
* [Full changelog](https://github.com/openshift/ibm-vpc-node-label-updater/compare/283a614ee34e83afa065338dee25d4ee202c8aeb...96ff048184ce4005bd8a4ae6ef1146ba0fa230ac)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2c67bafb5161332a00cecbeae74c26ec006c6a17)

* [OCPBUGS-14318](https://issues.redhat.com/browse/OCPBUGS-14318): gather PDBs only from openshift namespaces (#786) [#786](https://github.com/openshift/insights-operator/pull/786)
* [Full changelog](https://github.com/openshift/insights-operator/compare/0babf2b1fa2d68eae51a578f40fcdfb722fe485a...2c67bafb5161332a00cecbeae74c26ec006c6a17)


### [ironic](https://github.com/openshift/ironic-image/tree/0c7c4b6f7971d157525fc9c30880fb1118810f15)

* [OCPBUGS-13587](https://issues.redhat.com/browse/OCPBUGS-13587): Add python-flask dependency [#372](https://github.com/openshift/ironic-image/pull/372)
* [Full changelog](https://github.com/openshift/ironic-image/compare/2acc3b02b1bc6d7c6e5676f20d3eddf1b2612036...0c7c4b6f7971d157525fc9c30880fb1118810f15)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a)

* [OCPBUGS-14278](https://issues.redhat.com/browse/OCPBUGS-14278): fix possible concurrent map read/write [#550](https://github.com/openshift/sdn/pull/550)
* [Full changelog](https://github.com/openshift/sdn/compare/d56dc6a393cf250704d2c4914c09533525caafba...97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/370fdaa43c6964e2af6abbde2bf37789de509bec)

* [OCPBUGS-12626](https://issues.redhat.com/browse/OCPBUGS-12626): Update golang.org/x/net dependency [#1148](https://github.com/openshift/machine-api-operator/pull/1148)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a23baf767a80a2a7e467be1c8ef9b32d40c66825...370fdaa43c6964e2af6abbde2bf37789de509bec)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/95816efa5d37e980b65f65d98311ceeb8c946db7)

* [OCPBUGS-13311](https://issues.redhat.com/browse/OCPBUGS-13311): daemon: write certs in firstboot-complete path [#3702](https://github.com/openshift/machine-config-operator/pull/3702)
* [OCPBUGS-13404](https://issues.redhat.com/browse/OCPBUGS-13404), [OCPBUGS-14298](https://issues.redhat.com/browse/OCPBUGS-14298): Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 [#3716](https://github.com/openshift/machine-config-operator/pull/3716)
* [OCPBUGS-14850](https://issues.redhat.com/browse/OCPBUGS-14850): Allow userfaultfd syscall to be used by unprivileged users [#3743](https://github.com/openshift/machine-config-operator/pull/3743)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5c5a902aeb55c02b5abda80f90fae264a2d5ad69...95816efa5d37e980b65f65d98311ceeb8c946db7)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/31f847af4c69f297a328b35bb4a1ac329ccc198e)

* [OCPBUGS-13871](https://issues.redhat.com/browse/OCPBUGS-13871): fix: changes on help info content (#654) [#654](https://github.com/openshift/oc-mirror/pull/654)
* Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) [#637](https://github.com/openshift/oc-mirror/pull/637)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/74d32079a96c431136aa7444cc043ec548ceffd0...31f847af4c69f297a328b35bb4a1ac329ccc198e)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/6627b2a22d70fa740de8bb35f0beea3816b01ec4)

* [OCPBUGS-14653](https://issues.redhat.com/browse/OCPBUGS-14653): set upgrade condition of operator to false [#118](https://github.com/openshift/ovirt-csi-driver-operator/pull/118)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/3e49f77c34922a7e2ce675825cb5ff3bca3a6dbd...6627b2a22d70fa740de8bb35f0beea3816b01ec4)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/855f4a44967fe932f6f067cd338d74d7b8f010c0)

* [OCPBUGS-14979](https://issues.redhat.com/browse/OCPBUGS-14979): Validate port before deleting conntrack flow [#1712](https://github.com/openshift/ovn-kubernetes/pull/1712)
* [OCPBUGS-15140](https://issues.redhat.com/browse/OCPBUGS-15140): Fix stale SNAT entries for completed pods [#1715](https://github.com/openshift/ovn-kubernetes/pull/1715)
* [OCPBUGS-14482](https://issues.redhat.com/browse/OCPBUGS-14482): Dockerfiles: sync RHEL9 dockerfiles to regular unused ones [#1695](https://github.com/openshift/ovn-kubernetes/pull/1695)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/a69523609f7bbfa2a487e0d1bef52e194c282f90...855f4a44967fe932f6f067cd338d74d7b8f010c0)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/95a117826360e23e092be5bbee2da8dbcf44f17a)

* [OCPBUGS-12672](https://issues.redhat.com/browse/OCPBUGS-12672): update golang.org/x/net [#237](https://github.com/openshift/prometheus-operator/pull/237)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/9cd6788ed2cb30982c8b9d6ec8f8c7e72b30d7df...95a117826360e23e092be5bbee2da8dbcf44f17a)


### [tests](https://github.com/openshift/origin/tree/dfd4e799e835aa53c8ae5e11f1676db1f665d54a)

* [OCPBUGS-5029](https://issues.redhat.com/browse/OCPBUGS-5029): [release-4.13] OpenStack: Restore in-tree cinder provisioner tests [#27827](https://github.com/openshift/origin/pull/27827)
* [Full changelog](https://github.com/openshift/origin/compare/f210c2da9130c61196dde41a3b2d16e8a392e974...dfd4e799e835aa53c8ae5e11f1676db1f665d54a)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/64f62bff177c6f2df6f106eacecc05e49e9a9828)

* [OCPBUGS-14571](https://issues.redhat.com/browse/OCPBUGS-14571): Check all storage classes including CSI storageclasses [#120](https://github.com/openshift/vsphere-problem-detector/pull/120)
* [OCPBUGS-14098](https://issues.redhat.com/browse/OCPBUGS-14098): In UPI clusters VSphere platform could be nil [#118](https://github.com/openshift/vsphere-problem-detector/pull/118)
* [OCPBUGS-14085](https://issues.redhat.com/browse/OCPBUGS-14085): Log vcenter version information [#117](https://github.com/openshift/vsphere-problem-detector/pull/117)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/e10dc55232d1bf9f11251f63abcb72fe75bedd75...64f62bff177c6f2df6f106eacecc05e49e9a9828)