# 4.13.0-0.okd-2023-07-23-051208

Created: 2023-07-23 05:30:15 +0000 UTC

Image Digest: `sha256:f0e95c44ff7307fc4b3927ab2f1a9d30c2688f4e4ad3e8d702f04b1171bf84c6`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-07-23-051208


## Changes from 4.13.0-0.okd-2023-06-24-145750

### Components

* Kubernetes 1.26.6
* Fedora CoreOS upgraded from 38.20230527.3 to 38.20230625.3


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [61e198ca](https://github.com/openshift/apiserver-network-proxy/commit/61e198ca00b9426e2f7309cf2818ac74426486ff) `sha256:67cf7c6421f33ed9b108cd4e8a6fdc61535a287ded18a4daf37488329dbb310c`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [acb52a08](https://github.com/openshift/cluster-api-provider-aws/commit/acb52a088682bf4019d616523881401526437fd3) `sha256:0752ac48aca42d58c7d71910e625537a41c8f07db2ad09896ecc825664f31244`
* [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator) git [0621fcaf](https://github.com/openshift/cloud-credential-operator/commit/0621fcaf818f57ab05602259c1eb14db07b68dce) `sha256:e6e8368d2b86ef93e9772fa1f3396a2a04b4ade9f63d4c3b054465e84247b578`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:8dc30f879b05419608419e3104b80634c22dee1fbc12635af623963351a07b7f`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:895545d90c2ddb2c635c02360b9404f681d094204e5b19b32147878c3e36d479`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [c59255a3](https://github.com/openshift/cloud-provider-openstack/commit/c59255a34811a412bb9c7af4d176d8cdebf04367) `sha256:5adcc2803df95260476a3204edb29aa0e12fd7c421aef06044a3fff6d0f3401e`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/06189bcdb0bea068f8ac51a3550fcdcbde522a76)

* [MGMT-15150](https://issues.redhat.com/browse/MGMT-15150): Use same installer binary for all platform types (#5346) [#5346](https://github.com/openshift/assisted-service/pull/5346)
* [Full changelog](https://github.com/openshift/assisted-service/compare/8edd7dc2a74f3e4e0a7cd6229b89c9d4270952e6...06189bcdb0bea068f8ac51a3550fcdcbde522a76)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/3415688ae42d7f8305e10144ea27cdf503e62ad5)

* [OCPBUGS-15557](https://issues.redhat.com/browse/OCPBUGS-15557): vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) [#565](https://github.com/openshift/assisted-installer-agent/pull/565)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/f289c9e9d3abe5f7b6dc57a388ef31419d235347...3415688ae42d7f8305e10144ea27cdf503e62ad5)


### [alibaba-cloud-csi-driver](https://github.com/openshift/alibaba-cloud-csi-driver/tree/94667c6c213f07ec7613a6d6e831d64ee73181e1)

* [OCPBUGS-16377](https://issues.redhat.com/browse/OCPBUGS-16377): [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 [#31](https://github.com/openshift/alibaba-cloud-csi-driver/pull/31)
* [Full changelog](https://github.com/openshift/alibaba-cloud-csi-driver/compare/68c0ecfcdcfaa375450f0af1b7f8c6083e3f122f...94667c6c213f07ec7613a6d6e831d64ee73181e1)


### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/baf14a425efed2764c79d630d5aecb4744066397)

* [OCPBUGS-13036](https://issues.redhat.com/browse/OCPBUGS-13036): 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 [#220](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/220)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/b6dee5c3585cbc92967530cb178a09a52164bfde...baf14a425efed2764c79d630d5aecb4744066397)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/89e21d61f6f23b2e89f1b24096e458d6ade8a40a)

* [OCPBUGS-16318](https://issues.redhat.com/browse/OCPBUGS-16318): 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 [#44](https://github.com/openshift/azure-disk-csi-driver/pull/44)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/202e8afa8f1899d4cd1843d9e09cf8832ae0eff7...89e21d61f6f23b2e89f1b24096e458d6ade8a40a)


### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/842415aa35f7151c34645161ef6aede60354ae2a)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#86](https://github.com/openshift/azure-disk-csi-driver-operator/pull/86)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/67bda47232a73fe3877815d7901353f4f74ebeb0...842415aa35f7151c34645161ef6aede60354ae2a)


### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/60e0cb86a6055e420bfdb52530d0a0d6418f47fd)

* [OCPBUGS-16321](https://issues.redhat.com/browse/OCPBUGS-16321): 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 [#30](https://github.com/openshift/azure-file-csi-driver/pull/30)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/fd94a035e3d9dedce048f7e5f271e7ed6bea822f...60e0cb86a6055e420bfdb52530d0a0d6418f47fd)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/8acb744c86aee6a321e9ec29c4ff826016e61242)

* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): Use the same names for public LB in IPI and UPI Azure [#7302](https://github.com/openshift/installer/pull/7302)
* [OCPBUGS-16124](https://issues.redhat.com/browse/OCPBUGS-16124): azure: skip LB creation when not needed [#7322](https://github.com/openshift/installer/pull/7322)
* [OCPBUGS-13812](https://issues.redhat.com/browse/OCPBUGS-13812): ic: azure: validate diskTypes in AzureStack [#7195](https://github.com/openshift/installer/pull/7195)
* [OCPBUGS-15230](https://issues.redhat.com/browse/OCPBUGS-15230): azure: skip NSG creation when BYO vnet [#7263](https://github.com/openshift/installer/pull/7263)
* [OCPBUGS-15591](https://issues.redhat.com/browse/OCPBUGS-15591): [release-4.13] gcp: add confidential compute support for boostrap TF [#7298](https://github.com/openshift/installer/pull/7298)
* [OCPBUGS-15187](https://issues.redhat.com/browse/OCPBUGS-15187): images: installer: add xz to the container [#7260](https://github.com/openshift/installer/pull/7260)
* [OCPBUGS-14867](https://issues.redhat.com/browse/OCPBUGS-14867): Shorten SNO installation duration by releasing CPC lease [#7241](https://github.com/openshift/installer/pull/7241)
* [OCPBUGS-13752](https://issues.redhat.com/browse/OCPBUGS-13752): Set AdditionalTrustBundle in override when mirroring not enabled [#7191](https://github.com/openshift/installer/pull/7191)
* [Full changelog](https://github.com/openshift/installer/compare/f834ef0165bb5cbf70559eb43dad7e1203cd9aff...8acb744c86aee6a321e9ec29c4ff826016e61242)


### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/7de328a2d332833257fde75368e624908a3eec13)

* [OCPBUGS-16084](https://issues.redhat.com/browse/OCPBUGS-16084): Fix Metal3Remediation CRD install order [#194](https://github.com/openshift/cluster-api-provider-baremetal/pull/194)
* [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/d20bc578a4368130d10f41ad974bf147af9410f8...7de328a2d332833257fde75368e624908a3eec13)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/4930ec51cf668be611e24bf8f7e7ea976f5a66b8)

* [OCPBUGS-14487](https://issues.redhat.com/browse/OCPBUGS-14487): Support IPv6 VIP for setup with multipe IPv6 addresses [#259](https://github.com/openshift/baremetal-runtimecfg/pull/259)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/7a4597c614871c34a805a981b1601464a5879919...4930ec51cf668be611e24bf8f7e7ea976f5a66b8)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/e561d37285c8bde273ce00d086bea599a9cdd3be)

* [OCPBUGS-16193](https://issues.redhat.com/browse/OCPBUGS-16193): reboot: set ignition version to 3.1 [#1508](https://github.com/openshift/oc/pull/1508)
* [OCPBUGS-16172](https://issues.redhat.com/browse/OCPBUGS-16172): Add tls-server-name when property exists in kubeconfig [#1506](https://github.com/openshift/oc/pull/1506)
* [Full changelog](https://github.com/openshift/oc/compare/e4c9a6aeac8e382ad8a5dd6c2031a694ca0b80eb...e561d37285c8bde273ce00d086bea599a9cdd3be)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/4f190d6b8c06257071e01b4d75ea9ae33fd20885)

* [OCPBUGS-15856](https://issues.redhat.com/browse/OCPBUGS-15856): Azure: Handle already existing IP configurations [#116](https://github.com/openshift/cloud-network-config-controller/pull/116)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/1258d548f7b8e98a08b98606e31c983b032afb3c...4f190d6b8c06257071e01b4d75ea9ae33fd20885)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/a044dd9175d25911b799082fb189e4886391807b)

* [OCPBUGS-15258](https://issues.redhat.com/browse/OCPBUGS-15258): Correctly link oauth apiserver ServiceMonitor with its Service [#617](https://github.com/openshift/cluster-authentication-operator/pull/617)
* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#618](https://github.com/openshift/cluster-authentication-operator/pull/618)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a69e6b75c9a98bddae0e5ebdfd84c72f3fc72242...a044dd9175d25911b799082fb189e4886391807b)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/ee42773269a65998812435c0f1ab0c08cd8154f5)

* [OCPBUGS-15472](https://issues.redhat.com/browse/OCPBUGS-15472): Limit role binding to openshift-machine-api namespace [#346](https://github.com/openshift/cluster-baremetal-operator/pull/346)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/db283115e0b424e404307602701f1b6295c2f856...ee42773269a65998812435c0f1ab0c08cd8154f5)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/64de389ba247ec7cd599dfc0492752cbec43181e)

* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Alibaba platforms should not be upgradeable [#260](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/260)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/64455eb66f17bb2c761ab529dbae76123f530d48...64de389ba247ec7cd599dfc0492752cbec43181e)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/c6768d4537b7c2969b77fea26429b2822c0ec844)

* [OCPBUGS-11449](https://issues.redhat.com/browse/OCPBUGS-11449): Enable topology-aware hints if, and only if, nodes have zones [#367](https://github.com/openshift/cluster-dns-operator/pull/367)
* [OCPBUGS-15225](https://issues.redhat.com/browse/OCPBUGS-15225): Add support for protocolStrategy API field to enable force_tcp configuration [#372](https://github.com/openshift/cluster-dns-operator/pull/372)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/d96022a4d0d091955d73e7e99fc8cc81db56c86a...c6768d4537b7c2969b77fea26429b2822c0ec844)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67)

* [OCPBUGS-15434](https://issues.redhat.com/browse/OCPBUGS-15434): [release-4.13] Fix invalid DNS name formatting for GCP [#958](https://github.com/openshift/cluster-ingress-operator/pull/958)
* [OCPBUGS-15515](https://issues.redhat.com/browse/OCPBUGS-15515): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#955](https://github.com/openshift/cluster-ingress-operator/pull/955)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/382d006fc92671cb09b724e3c2b27b09364e0d15...a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/0b4e454270fd837f94c8280178489add78ecc887)

* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log jwt tokens [#1499](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1499)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/02ea4a4120dd0f8eb49d070b1fe420ed6d1debba...0b4e454270fd837f94c8280178489add78ecc887)


### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/8d627a55e6d765019f4879ea20e2016e6cc0be63)

* [OCPBUGS-13093](https://issues.redhat.com/browse/OCPBUGS-13093): Bump golang.org/x/net [#20](https://github.com/openshift/cluster-api-operator/pull/20)
* [Full changelog](https://github.com/openshift/cluster-api-operator/compare/b8428eb60d727565fefa4e37c845d704913cf0c5...8d627a55e6d765019f4879ea20e2016e6cc0be63)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/18b1d257239170726e5abdbafaca1f019e9e5eb9)

* [OCPBUGS-16023](https://issues.redhat.com/browse/OCPBUGS-16023): Add the trusted CA bundle in UWM Prometheus pods [#2041](https://github.com/openshift/cluster-monitoring-operator/pull/2041)
* [OCPBUGS-15469](https://issues.redhat.com/browse/OCPBUGS-15469): Limit the value of GOMAXPROCS on node-exporter to 4. [#2021](https://github.com/openshift/cluster-monitoring-operator/pull/2021)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/3777e7bb9e8c2f9008685492cff9589e31c20473...18b1d257239170726e5abdbafaca1f019e9e5eb9)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/6f6b79bb994a5f38b8fc25edcd43b42229b3b70a)

* [OCPBUGS-11539](https://issues.redhat.com/browse/OCPBUGS-11539): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1774](https://github.com/openshift/cluster-network-operator/pull/1774)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Add logic to pick the openshift-sdn shims from right directories [#1880](https://github.com/openshift/cluster-network-operator/pull/1880)
* [OCPBUGS-15962](https://issues.redhat.com/browse/OCPBUGS-15962): Add logic to pick the ovn-k8s-cni-overlay binary from the right dir [#1877](https://github.com/openshift/cluster-network-operator/pull/1877)
* Change rhel7/8 to rhel8/9 [#1869](https://github.com/openshift/cluster-network-operator/pull/1869)
* [OCPBUGS-15476](https://issues.redhat.com/browse/OCPBUGS-15476): Add release version annotation to whereabouts-reconciler [#1853](https://github.com/openshift/cluster-network-operator/pull/1853)
* [OCPBUGS-15139](https://issues.redhat.com/browse/OCPBUGS-15139): Remove nodeSelector for architecture in whereabouts daemonset [#1840](https://github.com/openshift/cluster-network-operator/pull/1840)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/cf774f4844621d058b951457a4068aeb3e1e609e...6f6b79bb994a5f38b8fc25edcd43b42229b3b70a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/5b4af42e9cfb78fce5a2052f49ed26b27fb40f99)

* E2E: Add memory manager sanity test case (#573) (#695) [#573](https://github.com/openshift/cluster-node-tuning-operator/pull/573)
* e2e: latency testing: increase the expected threshold (#709) [#709](https://github.com/openshift/cluster-node-tuning-operator/pull/709)
* Do not rollback settings on TuneD exit (#704) [#704](https://github.com/openshift/cluster-node-tuning-operator/pull/704)
* Switch to rslave/HostToContainer volume mount propagation (#705) [#705](https://github.com/openshift/cluster-node-tuning-operator/pull/705)
* e2e: perf-prof: disable truncating gomega output (#707) [#707](https://github.com/openshift/cluster-node-tuning-operator/pull/707)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/4bd0ef245e10269ac4a7e68c5119b94e393b46bb...5b4af42e9cfb78fce5a2052f49ed26b27fb40f99)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/ea4f097def493950e6e65068284084935b8ce4d9)

* [OCPBUGS-13763](https://issues.redhat.com/browse/OCPBUGS-13763): dont log tokens [#541](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/541)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/aaa3cec4118d3743fd15f6197e348e86f7e48c7d...ea4f097def493950e6e65068284084935b8ce4d9)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/f785bad1227439dfdb627538b3f7ecd0eb28f33c)

* [OCPBUGS-15756](https://issues.redhat.com/browse/OCPBUGS-15756): Update Jenkins and Jenkins Agent Base image versions [#505](https://github.com/openshift/cluster-samples-operator/pull/505)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/93fbf940ff04c6e01f0d0a6baef985470c966cc3...f785bad1227439dfdb627538b3f7ecd0eb28f33c)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6)

* [OCPBUGS-15378](https://issues.redhat.com/browse/OCPBUGS-15378): decrease severity for MultipleDefaultStorageClasses alert [#383](https://github.com/openshift/cluster-storage-operator/pull/383)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/6479617c1e9e92cc664d0e8c26ba62191320f4e4...98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/2ba8f8d7bc59f596db65d47e80ef8765ae340c34)

* [OCPBUGS-16613](https://issues.redhat.com/browse/OCPBUGS-16613): Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 [#948](https://github.com/openshift/cluster-version-operator/pull/948)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/e08a27913bc6c6d0ca0663dc131d1183773cca10...2ba8f8d7bc59f596db65d47e80ef8765ae340c34)


### [console](https://github.com/openshift/console/tree/920c7380e2774bcd300e9a286c430e79e8928f65)

* [OCPBUGS-15998](https://issues.redhat.com/browse/OCPBUGS-15998): Upload JAR file does not work if the Cluster Samples Operator is disabled [#12992](https://github.com/openshift/console/pull/12992)
* [OCPBUGS-15810](https://issues.redhat.com/browse/OCPBUGS-15810): only show pipelines doc link for downstream [#12981](https://github.com/openshift/console/pull/12981)
* [OCPBUGS-15982](https://issues.redhat.com/browse/OCPBUGS-15982): get Kamelets from the camel-k-operator namespace as well [#12988](https://github.com/openshift/console/pull/12988)
* [OCPBUGS-16244](https://issues.redhat.com/browse/OCPBUGS-16244): Fix operator backed catalog page when copied CSVs disabled [#13019](https://github.com/openshift/console/pull/13019)
* [OCPBUGS-15194](https://issues.redhat.com/browse/OCPBUGS-15194): Remove tech preview badge from Pipeline repository pages [#12916](https://github.com/openshift/console/pull/12916)
* [OCPBUGS-10326](https://issues.redhat.com/browse/OCPBUGS-10326): re-enable operator-install-single-namespace.spec.ts test [#12653](https://github.com/openshift/console/pull/12653)
* [OCPBUGS-15848](https://issues.redhat.com/browse/OCPBUGS-15848): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#12976](https://github.com/openshift/console/pull/12976)
* [OCPBUGS-15890](https://issues.redhat.com/browse/OCPBUGS-15890): Use proxy with web socket connection and monitoring dashboard [#12978](https://github.com/openshift/console/pull/12978)
* [OCPBUGS-15720](https://issues.redhat.com/browse/OCPBUGS-15720), [OCPBUGS-15721](https://issues.redhat.com/browse/OCPBUGS-15721), [OCPBUGS-15722](https://issues.redhat.com/browse/OCPBUGS-15722): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12963](https://github.com/openshift/console/pull/12963)
* [OCPBUGS-14426](https://issues.redhat.com/browse/OCPBUGS-14426): account for single object in status.conditions instead… [#12875](https://github.com/openshift/console/pull/12875)
* [OCPBUGS-14267](https://issues.redhat.com/browse/OCPBUGS-14267): Add Pipeline metrics unsupported empty page [#12864](https://github.com/openshift/console/pull/12864)
* [OCPBUGS-15410](https://issues.redhat.com/browse/OCPBUGS-15410): Add Git Repository (PAC) doesn't setup GitLab and Bitbucket configuration correct [#12936](https://github.com/openshift/console/pull/12936)
* [OCPBUGS-15787](https://issues.redhat.com/browse/OCPBUGS-15787): Remove access review check for PipelineResource from Pipeline section [#12967](https://github.com/openshift/console/pull/12967)
* [OCPBUGS-15228](https://issues.redhat.com/browse/OCPBUGS-15228): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12937](https://github.com/openshift/console/pull/12937)
* [release 4.13] OCPBUGS-15360: Serverless functions UI warning is misleading [#12931](https://github.com/openshift/console/pull/12931)
* [OCPBUGS-14166](https://issues.redhat.com/browse/OCPBUGS-14166): Fixed Make Serverless Form Error [#12857](https://github.com/openshift/console/pull/12857)
* [OCPBUGS-14336](https://issues.redhat.com/browse/OCPBUGS-14336): use service port name instead targetPort in the Pipeline Event listener route [#12870](https://github.com/openshift/console/pull/12870)
* [OCPBUGS-14310](https://issues.redhat.com/browse/OCPBUGS-14310): Could not import multiple resources via JSON (while YAML supports this) [#12868](https://github.com/openshift/console/pull/12868)
* [OCPBUGS-15335](https://issues.redhat.com/browse/OCPBUGS-15335): Delete annotation 'tekton.dev/v1beta1TaskRuns' when rerun the PLR [#12927](https://github.com/openshift/console/pull/12927)
* [OCPBUGS-15130](https://issues.redhat.com/browse/OCPBUGS-15130): Helm Repository "Edit" button results in 404 [#12909](https://github.com/openshift/console/pull/12909)
* [OCPBUGS-14189](https://issues.redhat.com/browse/OCPBUGS-14189): Corrected Labels for resolving the bug related to the Create Route Checkbox [#12858](https://github.com/openshift/console/pull/12858)
* [OCPBUGS-13642](https://issues.redhat.com/browse/OCPBUGS-13642): Fix OLM k8sResourcePrefix descriptor dropdown behavior [#12812](https://github.com/openshift/console/pull/12812)
* [OCPBUGS-11974](https://issues.redhat.com/browse/OCPBUGS-11974): Add page title to Devconsole pages [#12844](https://github.com/openshift/console/pull/12844)
* [OCPBUGS-15465](https://issues.redhat.com/browse/OCPBUGS-15465), [OCPBUGS-15481](https://issues.redhat.com/browse/OCPBUGS-15481): Remove PipelineResource CRD check because it's not installed with PO 1.11 anymore and disable operator-uninstall test [#12949](https://github.com/openshift/console/pull/12949)
* [Full changelog](https://github.com/openshift/console/compare/ba926294504fc3c0181cc272c66479989dfd3a1b...920c7380e2774bcd300e9a286c430e79e8928f65)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/26001de8244adb4bd1ae4c4046932b5a9831edce)

* Add rhel9 binary [#102](https://github.com/openshift/containernetworking-plugins/pull/102)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/4655073266cb14756783bb06378224048f0dd3e3...26001de8244adb4bd1ae4c4046932b5a9831edce)


### [docker-builder](https://github.com/openshift/builder/tree/1fec8a28a78b81aabc2bcbe8ac4843c8b7938230)

* [OCPBUGS-15606](https://issues.redhat.com/browse/OCPBUGS-15606): Add the git-lfs package [#352](https://github.com/openshift/builder/pull/352)
* [Full changelog](https://github.com/openshift/builder/compare/d02643e89631a31343c4c76e2004cd53c64acdf7...1fec8a28a78b81aabc2bcbe8ac4843c8b7938230)


### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/756e38455b8e08a34510e188673c77503dca3ff1)

* Add rhel9 binary [#71](https://github.com/openshift/egress-router-cni/pull/71)
* [Full changelog](https://github.com/openshift/egress-router-cni/compare/879b72bf6305ef394291ed1b4c5eeb3b11917633...756e38455b8e08a34510e188673c77503dca3ff1)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/00eaf19c6fe3572e59d4359d4927a59cac7e2f19)

* Bump to latest fedora-coreos stable [#630](https://github.com/openshift/okd-machine-os/pull/630)
* manifests: remove intel_pstate=disable, enforce cgroupsv2 [#629](https://github.com/openshift/okd-machine-os/pull/629)
* Bump fedora-coreos to latest stable [#625](https://github.com/openshift/okd-machine-os/pull/625)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/db790f4bd8f3ac866c6f8faefb3278e0978ddc44...00eaf19c6fe3572e59d4359d4927a59cac7e2f19)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/c30195c5c3148bf6e00795b49a79954e6d920130)

* [OCPBUGS-16331](https://issues.redhat.com/browse/OCPBUGS-16331): 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 [#38](https://github.com/openshift/gcp-pd-csi-driver/pull/38)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/c5ae6f5d4a62ecc686259cc680514f1ae9f1f733...c30195c5c3148bf6e00795b49a79954e6d920130)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/73ac5612fbb16a50ee4ffe95f8c2dbe33e477dbf)

* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): remove readiness check for cache exclusion [#1625](https://github.com/openshift/kubernetes/pull/1625)
* [OCPBUGS-15866](https://issues.redhat.com/browse/OCPBUGS-15866): UPSTREAM: <drop>: hack/update-vendor.sh [#1637](https://github.com/openshift/kubernetes/pull/1637)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a7ee68b55354d8c146ef81f82444c0765ea8885f...73ac5612fbb16a50ee4ffe95f8c2dbe33e477dbf)


### [hypershift](https://github.com/openshift/hypershift/tree/962bd1131c4e61427be9c66ef3589a8a1f7ac984)

* 4.13: Add management cluster KAS network policy [#2786](https://github.com/openshift/hypershift/pull/2786)
* Leader election config update. [#2801](https://github.com/openshift/hypershift/pull/2801)
* [OCPBUGS-16160](https://issues.redhat.com/browse/OCPBUGS-16160): fix deletion bug when hostedzone is already deleted [#2813](https://github.com/openshift/hypershift/pull/2813)
* [HOSTEDCP-1061](https://issues.redhat.com/browse/HOSTEDCP-1061): [release-4.13] Implement dedicated request serving nodes for HostedClusters [#2809](https://github.com/openshift/hypershift/pull/2809)
* Update RHTAP references (release-4.13) [#2816](https://github.com/openshift/hypershift/pull/2816)
* [OCPBUGS-16057](https://issues.redhat.com/browse/OCPBUGS-16057): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2798](https://github.com/openshift/hypershift/pull/2798)
* OCPBUGS-14862 Improve clarity around hypershift operator permissions [#2810](https://github.com/openshift/hypershift/pull/2810)
* [HOSTEDCP-1101](https://issues.redhat.com/browse/HOSTEDCP-1101): Add snyk-secret HO RHTAP scripts [#2799](https://github.com/openshift/hypershift/pull/2799)
* [OCPBUGS-16125](https://issues.redhat.com/browse/OCPBUGS-16125): [release-4.13] Update vendored dependencies [#2797](https://github.com/openshift/hypershift/pull/2797)
* [OCPBUGS-15774](https://issues.redhat.com/browse/OCPBUGS-15774): autoscaling balance similar groups [#2805](https://github.com/openshift/hypershift/pull/2805)
* [OCPBUGS-15965](https://issues.redhat.com/browse/OCPBUGS-15965): Reject VPCE Connections during VPCE Service cleanup [#2789](https://github.com/openshift/hypershift/pull/2789)
* Update RHTAP references (release-4.13) [#2751](https://github.com/openshift/hypershift/pull/2751)
* [OCPBUGS-15171](https://issues.redhat.com/browse/OCPBUGS-15171): Skip AWS resource deletion for 'Unknown' OIDC state [#2701](https://github.com/openshift/hypershift/pull/2701)
* [HOSTEDCP-1008](https://issues.redhat.com/browse/HOSTEDCP-1008): Add NodePoolTransitionSeconds metric [#2758](https://github.com/openshift/hypershift/pull/2758)
* [OCPBUGS-15281](https://issues.redhat.com/browse/OCPBUGS-15281): Check OwningIngressController also in Labels [#2715](https://github.com/openshift/hypershift/pull/2715)
* [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): refactor ignition-server reconcilation and add ignition-server proxy [#2748](https://github.com/openshift/hypershift/pull/2748)
* [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2735](https://github.com/openshift/hypershift/pull/2735)
* [HOSTEDCP-1003](https://issues.redhat.com/browse/HOSTEDCP-1003): Set AWS conditions only for AWS platform [#2670](https://github.com/openshift/hypershift/pull/2670)
* [Full changelog](https://github.com/openshift/hypershift/compare/5f86f71184775c6771f9038bedd9726d8ff1eb7e...962bd1131c4e61427be9c66ef3589a8a1f7ac984)


### [insights-operator](https://github.com/openshift/insights-operator/tree/f87e4120ed55da397a323ddbc7fe1a5edb0f088c)

* [OCPBUGS-14773](https://issues.redhat.com/browse/OCPBUGS-14773): extend configmap gatherer to get gateway-mode-config (#788) (#791) [#788](https://github.com/openshift/insights-operator/pull/788)
* [release-4.13 ]OCPBUGS-15031: fix the config serialization & add test (#794) (#796) [#794](https://github.com/openshift/insights-operator/pull/794)
* [Full changelog](https://github.com/openshift/insights-operator/compare/2c67bafb5161332a00cecbeae74c26ec006c6a17...f87e4120ed55da397a323ddbc7fe1a5edb0f088c)


### [ironic](https://github.com/openshift/ironic-image/tree/5212a6350a01e730c623e462d040431233b9a1d5)

* Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. [#383](https://github.com/openshift/ironic-image/pull/383)
* [Full changelog](https://github.com/openshift/ironic-image/compare/0c7c4b6f7971d157525fc9c30880fb1118810f15...5212a6350a01e730c623e462d040431233b9a1d5)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/c4141b13ec85e9642f60bcb55b50055c691f0b6b)

* Switch to udevadm command install instead of package [OKD] [#83](https://github.com/openshift/ironic-agent-image/pull/83)
* "Bug OCPBUGS-15777: Switch to udevadm command install instead of package" [#81](https://github.com/openshift/ironic-agent-image/pull/81)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ee5bee32747e1053fc6add76fcdd98f5816b27ba...c4141b13ec85e9642f60bcb55b50055c691f0b6b)


### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/ce2917794de5723248fe3302c8833f89fb54265a)

* [OCPBUGS-15734](https://issues.redhat.com/browse/OCPBUGS-15734): Binary should be compiled on rhel9 [#91](https://github.com/openshift/ironic-rhcos-downloader/pull/91)
* [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/2ba6060dc968488a495fbcd1250cfb186e4ada78...ce2917794de5723248fe3302c8833f89fb54265a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/12a5bcfe56550165a550230d016f3a954b18ddbe)

* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir [#558](https://github.com/openshift/sdn/pull/558)
* [OCPBUGS-15977](https://issues.redhat.com/browse/OCPBUGS-15977): Dockerfile changes to build both rhel8 and rhel9 binaries [#557](https://github.com/openshift/sdn/pull/557)
* [Full changelog](https://github.com/openshift/sdn/compare/97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a...12a5bcfe56550165a550230d016f3a954b18ddbe)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/f1205e66bf34421046288bc74aed0d69b8434206)

* [OCPBUGS-12513](https://issues.redhat.com/browse/OCPBUGS-12513): go.mod: update golang.org/x/net to v0.7.0 [#68](https://github.com/openshift/kube-rbac-proxy/pull/68)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/11b1439d48a47a408ae7e2dd851989f7b7b4f595...f1205e66bf34421046288bc74aed0d69b8434206)


### [kuryr-cni, kuryr-controller](https://github.com/openshift/kuryr-kubernetes/tree/36754b7b90928e26811e1c5ea13e7d0bd85709de)

* Bug OCPBUGS-16340: Fix np retry [#738](https://github.com/openshift/kuryr-kubernetes/pull/738)
* [OCPBUGS-15457](https://issues.redhat.com/browse/OCPBUGS-15457): Remove unneeded grpcio dependencies from RPM [#735](https://github.com/openshift/kuryr-kubernetes/pull/735)
* [Full changelog](https://github.com/openshift/kuryr-kubernetes/compare/3055dbe26667d6cf2d1f452a7dd97ca2113b606d...36754b7b90928e26811e1c5ea13e7d0bd85709de)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/56c0dc09bb5a0c0d73e356624a631fa5dba59f9f)

* [OCPNODE-1717](https://issues.redhat.com/browse/OCPNODE-1717): Update config node spec while explicitly updating the cgroups mode [#3793](https://github.com/openshift/machine-config-operator/pull/3793)
* 4.13: Revert rhel9 binaries builds [#3802](https://github.com/openshift/machine-config-operator/pull/3802)
* [OCPBUGS-14459](https://issues.redhat.com/browse/OCPBUGS-14459): daemon: Remove noisy log message [#3723](https://github.com/openshift/machine-config-operator/pull/3723)
* [OCPBUGS-15580](https://issues.redhat.com/browse/OCPBUGS-15580): 4.13: Dockerfile: update rhel7 nmstate pin [#3764](https://github.com/openshift/machine-config-operator/pull/3764)
* [OCPBUGS-15463](https://issues.redhat.com/browse/OCPBUGS-15463): Minor fix to support protectKernelDefaults field in Kubelet Config [#3757](https://github.com/openshift/machine-config-operator/pull/3757)
* 4.13: Dockerfile: use proper rhel9 image [#3771](https://github.com/openshift/machine-config-operator/pull/3771)
* 4.13: use rhel9 builder for daemon binary [#3760](https://github.com/openshift/machine-config-operator/pull/3760)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/95816efa5d37e980b65f65d98311ceeb8c946db7...56c0dc09bb5a0c0d73e356624a631fa5dba59f9f)


### [multus-cni](https://github.com/openshift/multus-cni/tree/bb616eff56bf0b71ad85009360231f4686a6e4a9)

* Add rhel9 binary for multus [#169](https://github.com/openshift/multus-cni/pull/169)
* [Full changelog](https://github.com/openshift/multus-cni/compare/38444d9e21e8a9793a382c82c7d12d01381e5c55...bb616eff56bf0b71ad85009360231f4686a6e4a9)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/7b99c194d5d2b092a64dc7b8673ef96a399cc7a8)

* [OCPBUGS-12641](https://issues.redhat.com/browse/OCPBUGS-12641): CVE-2022-41723: Update vendors to fix dependabot alerts [#28](https://github.com/openshift/multus-networkpolicy/pull/28)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/98a0bad1071074f0c04c35ff209f0333c5d7274b...7b99c194d5d2b092a64dc7b8673ef96a399cc7a8)


### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)

* Add rhel9 binary [#37](https://github.com/openshift/route-override-cni/pull/37)
* [Full changelog](https://github.com/openshift/route-override-cni/compare/6644ac7ba8481b2c7b035390d20d28ba4b55c5ab...ca3bbec5c75ebcd6814bdd74856b27db755c9fa3)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/1abe4c1f6f003d23c628f8d30c85bf8389562838)

* [Bug 16002](https://bugzilla.redhat.com/show_bug.cgi?id=16002): Change default binary to RHEL8 image [#144](https://github.com/openshift/whereabouts-cni/pull/144)
* Restores RHEL specific binary build in dockerfile and updates to rhel9/8 [#139](https://github.com/openshift/whereabouts-cni/pull/139)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/9f36752562fc784c9b5bf3fb4d592aae19ea31ad...1abe4c1f6f003d23c628f8d30c85bf8389562838)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/84bda2afb2ab260253b77d5d282df773cc6b3438)

* Add rhel9 binary [#56](https://github.com/openshift/bond-cni/pull/56)
* [Full changelog](https://github.com/openshift/bond-cni/compare/937b1e6a35d6b533a417b0c313cc0e498fffdd3b...84bda2afb2ab260253b77d5d282df773cc6b3438)


### [network-tools](https://github.com/openshift/network-tools/tree/073feda14fbd894c4238d693afa38a06392f2360)

* Dockerfile: move to RHEL9 base image [#83](https://github.com/openshift/network-tools/pull/83)
* [Full changelog](https://github.com/openshift/network-tools/compare/b4098c67659217e36ac7077229b25bbe2c3e5f38...073feda14fbd894c4238d693afa38a06392f2360)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f11a9001caad8fe146c73baf2acc38ddcf3642b5)

* [OCPBUGS-16372](https://issues.redhat.com/browse/OCPBUGS-16372): A variety of changes needed for correct operation with multi… (#661) [#661](https://github.com/openshift/oc-mirror/pull/661)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/31f847af4c69f297a328b35bb4a1ac329ccc198e...f11a9001caad8fe146c73baf2acc38ddcf3642b5)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/f1d9c59de5a7cb32eb70846411cdc443e2b8f4b9)

* Allow cpb to be statically compiled / exempt from FIPS compliance [#519](https://github.com/openshift/operator-framework-olm/pull/519)
* [OCPBUGS-15589](https://issues.redhat.com/browse/OCPBUGS-15589): fix dynamic conversion webhook [#499](https://github.com/openshift/operator-framework-olm/pull/499)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ce46f5b97e4838c4508f6dc471cabc1199a8f0b9...f1d9c59de5a7cb32eb70846411cdc443e2b8f4b9)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/256e112b4a66f2445d72e4eb0c3abe948115413b)

* [OCPBUGS-15368](https://issues.redhat.com/browse/OCPBUGS-15368): [release-4.13]: initial pods are not wired for hybrid overlay [#1721](https://github.com/openshift/ovn-kubernetes/pull/1721)
* [OCPBUGS-15651](https://issues.redhat.com/browse/OCPBUGS-15651): Improve syncNodes to remove stale data [#1731](https://github.com/openshift/ovn-kubernetes/pull/1731)
* [OCPBUGS-15586](https://issues.redhat.com/browse/OCPBUGS-15586): [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector [#1745](https://github.com/openshift/ovn-kubernetes/pull/1745)
* Dockerfile: build both RHEL8 and RHEL9 shims [#1748](https://github.com/openshift/ovn-kubernetes/pull/1748)
* [OCPBUGS-15585](https://issues.redhat.com/browse/OCPBUGS-15585): [release-4.13] Fix egressFirewall create error handling [#1733](https://github.com/openshift/ovn-kubernetes/pull/1733)
* [OCPBUGS-14492](https://issues.redhat.com/browse/OCPBUGS-14492): Backport OVN component templates for NodePort services. [#1709](https://github.com/openshift/ovn-kubernetes/pull/1709)
* [OCPBUGS-15608](https://issues.redhat.com/browse/OCPBUGS-15608): Nuke old .rhel9 Dockerfiles [#1711](https://github.com/openshift/ovn-kubernetes/pull/1711)
* [OCPBUGS-13745](https://issues.redhat.com/browse/OCPBUGS-13745): [release-4.13] ovnkube-master pod failed to reconnect to ovn db due to ssl expire [#1675](https://github.com/openshift/ovn-kubernetes/pull/1675)
* [OCPBUGS-15372](https://issues.redhat.com/browse/OCPBUGS-15372): [release-4.13] Fix network policy to work with long namespace names [#1722](https://github.com/openshift/ovn-kubernetes/pull/1722)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/855f4a44967fe932f6f067cd338d74d7b8f010c0...256e112b4a66f2445d72e4eb0c3abe948115413b)


### [tests](https://github.com/openshift/origin/tree/b1f4ee96d1d1f95af75b2701b8c5e42886a9912a)

* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): allow cluster-config-operator to manage featuregate upgrade block [#28050](https://github.com/openshift/origin/pull/28050)
* [OCPBUGS-15892](https://issues.redhat.com/browse/OCPBUGS-15892): remove references to registry.centos.org [#28031](https://github.com/openshift/origin/pull/28031)
* [OCPBUGS-15746](https://issues.redhat.com/browse/OCPBUGS-15746): Skip CCM upgradable condition on AlibabaCloud [#28025](https://github.com/openshift/origin/pull/28025)
* [OCPBUGS-7762](https://issues.redhat.com/browse/OCPBUGS-7762): Bump with latest openshift/kubernetes at 4.13 [#27973](https://github.com/openshift/origin/pull/27973)
* [Full changelog](https://github.com/openshift/origin/compare/dfd4e799e835aa53c8ae5e11f1676db1f665d54a...b1f4ee96d1d1f95af75b2701b8c5e42886a9912a)