# 4.13.0-0.okd-2023-09-30-084937

Created: 2023-10-01 05:42:44 +0000 UTC

Image Digest: `sha256:fc0dd43b87942f40d7eec16782ca2965199ced131906405127837884b5342b92`

Promoted from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-09-30-084937


## Changes from 4.13.0-0.okd-2023-07-23-051208

### Components

* Kubernetes upgraded from 1.26.6 to 1.26.9
* Fedora CoreOS upgraded from 38.20230625.3 to 38.20230902.3


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [06189bcd](https://github.com/openshift/assisted-service/commit/06189bcdb0bea068f8ac51a3550fcdcbde522a76) `sha256:c206d62b89774800aa3797060e54bcc8951a55a8934e27c3c8fd708540b1964e`
* [alibaba-disk-csi-driver-operator](https://github.com/openshift/alibaba-disk-csi-driver-operator) git [c08d87a1](https://github.com/openshift/alibaba-disk-csi-driver-operator/commit/c08d87a1d043dc04d3d3cb59be9265ee5ed29b06) `sha256:7d54ad24ae9fe62513311945fae20e2ab9fa6481fb4fdc13b9334b15179be56f`
* [csi-driver-manila-operator](https://github.com/openshift/csi-driver-manila-operator) git [b1295cd1](https://github.com/openshift/csi-driver-manila-operator/commit/b1295cd1a5978faa503c199d59d129e3ecfe2aeb) `sha256:21f1cee4d154b08bf65d4ced9dd0e2460f3737f3e2b20eec8fd5ed1e8d180e30`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [e9d59a2d](https://github.com/openshift/csi-external-attacher/commit/e9d59a2d66491d60d43488e05af7b4b673c722fd) `sha256:bc5522a4ad7d20a451e7f318bbec689371470d55378d517b64258805301647da`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [974ac363](https://github.com/openshift/csi-external-resizer/commit/974ac363a4f95b810ebb6f09ba26dedf1c8b8a4a) `sha256:61a1fc78697628892622edd64b239ce456937299b08f9a46ddea225eae802142`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:f833881476fca7dadf48cad85c93f6e8fd7d151c74218b5bfde818ac41d61950`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [5f13d5e6](https://github.com/openshift/csi-node-driver-registrar/commit/5f13d5e6f5b06a99995e0697d83bbdb36efceb46) `sha256:32dcc0749823260f2e57e7d4fbab46baa0f1db32b2e07f672426bccf52aa5976`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:976d131c2325b788d37fd3bffc8cd845cdd689b800ec4cb34692487d5bb38392`
* [csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter) git [3f52ee74](https://github.com/openshift/csi-external-snapshotter/commit/3f52ee74753f7823f102c239d0750784b64b6398) `sha256:acae100e011cfc81b1502ffc3f41a8a1c908092cec3d1a8d63fd7020933f6217`
* [docker-registry](https://github.com/openshift/image-registry) git [47a15ac8](https://github.com/openshift/image-registry/commit/47a15ac8b7233bb1de44c1364bbd787de2edaaf0) `sha256:fc90d9259e8f66cee8bd4e8ca187675331b2ef998e880cd04a0367e09ea8d035`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [b14856ff](https://github.com/openshift/machine-os-images/commit/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e) `sha256:05f081d5921cf1c5c0fcd408b698b9e3e2bb7b0f3f98424674e23c48e1a2c8e7`
* [multus-cni](https://github.com/openshift/multus-cni) git [bb616eff](https://github.com/openshift/multus-cni/commit/bb616eff56bf0b71ad85009360231f4686a6e4a9) `sha256:d8a6c758b2d88f3cc7af5de179f7af0c791160e134a583dbe929b5ba733a8329`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [be43191e](https://github.com/openshift/machine-api-provider-nutanix/commit/be43191e5b20c7d6a5755a39a22d31e7734b241a) `sha256:3e20cba200be2817ad14d3ef609a0945a72dab69771fb502b0abf59dbc05f500`
* [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator) git [90ee04bc](https://github.com/openshift/openstack-cinder-csi-driver-operator/commit/90ee04bcfbfc0eb6173bc9fbea8c9f87ec1dea7d) `sha256:5c874af663f29a2fcc6329dd7ae7430b728826ba3503619696231a2fbc9cfba6`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [5984aac1](https://github.com/openshift/service-ca-operator/commit/5984aac13df6c2f4440c67a1a14d32958bce9ec3) `sha256:5a79d38a9613dc33b27cd2775d35613c0694c461b97135a04ebdbb7307532f47`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [0fe0c5c3](https://github.com/openshift/cloud-provider-vsphere/commit/0fe0c5c37d06893359f584e4b6f62d371703e9d1) `sha256:e9f821cc330b4abadda345d0b947b80357e8b9ac04c916d673ed6cfd4d76e918`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/edf25423e34294b754ac16a67dbaf1aed7467ca4)

* [MGMT-13586](https://issues.redhat.com/browse/MGMT-13586): Wait for ETCD Bootstrap to complete (#670) (#717) [#670](https://github.com/openshift/assisted-installer/pull/670)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/6160d18379195ac3f65ab3898429936a95522fd0...edf25423e34294b754ac16a67dbaf1aed7467ca4)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/35357f5725d925f451c29668c0b9e307998c6ac5)

* [OCPBUGS-16373](https://issues.redhat.com/browse/OCPBUGS-16373): Ignore arping errors on RHEL 9 (#577) [#577](https://github.com/openshift/assisted-installer-agent/pull/577)
* [MGMT-15661](https://issues.redhat.com/browse/MGMT-15661): Update to latest ghw version (#594) (#596) [#594](https://github.com/openshift/assisted-installer-agent/pull/594)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/3415688ae42d7f8305e10144ea27cdf503e62ad5...35357f5725d925f451c29668c0b9e307998c6ac5)


### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/b8d243397ff297baf875a88132f84d8cef34b968)

* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#81](https://github.com/openshift/cloud-provider-azure/pull/81)
* [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/fb2d232da809a58929fe86cb9a59a045c7b44aa4...b8d243397ff297baf875a88132f84d8cef34b968)


### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/a79311d87a15769d1bad162d80fb9cb978478a42)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#67](https://github.com/openshift/azure-file-csi-driver-operator/pull/67)
* [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/994c32c927a69df33f83aed440cc150e8d270341...a79311d87a15769d1bad162d80fb9cb978478a42)


### [baremetal-installer, installer, installer-artifacts, ovirt-installer](https://github.com/openshift/installer/tree/7cbe79cbc9a8704552b95c96721b7c73e0d5e552)

* [OCPBUGS-19670](https://issues.redhat.com/browse/OCPBUGS-19670): [release-4.13] Allow different service account for xpn installs in gcp [#7524](https://github.com/openshift/installer/pull/7524)
* [OCPBUGS-19773](https://issues.redhat.com/browse/OCPBUGS-19773): Increase bootstrap timeout for vSphere platform by 30 mins [#7530](https://github.com/openshift/installer/pull/7530)
* [OCPBUGS-16383](https://issues.redhat.com/browse/OCPBUGS-16383): [release-4.13] Default dataStore is returned the name instead the inventoryPath [#7343](https://github.com/openshift/installer/pull/7343)
* [OCPBUGS-13681](https://issues.redhat.com/browse/OCPBUGS-13681): FCOS: bump to latest stable version [#7188](https://github.com/openshift/installer/pull/7188)
* [OCPBUGS-11093](https://issues.redhat.com/browse/OCPBUGS-11093): Azure: don't set default subscriptionID for disk encryption sets [#7432](https://github.com/openshift/installer/pull/7432)
* [OCPBUGS-17809](https://issues.redhat.com/browse/OCPBUGS-17809): Allow destroy for C2S isolated (us-iso and us-isob) partitions [#7427](https://github.com/openshift/installer/pull/7427)
* [OCPBUGS-15231](https://issues.redhat.com/browse/OCPBUGS-15231): new Aws secret regions support [#7264](https://github.com/openshift/installer/pull/7264)
* [OCPBUGS-15222](https://issues.redhat.com/browse/OCPBUGS-15222): terraform: aws: secret regions now support ALIAS record [#7262](https://github.com/openshift/installer/pull/7262)
* [OCPBUGS-17823](https://issues.redhat.com/browse/OCPBUGS-17823): CORS-2445: GCP: Add osImage to the install config [#7431](https://github.com/openshift/installer/pull/7431)
* [OCPBUGS-14432](https://issues.redhat.com/browse/OCPBUGS-14432): Replica validations [#7423](https://github.com/openshift/installer/pull/7423)
* [OCPBUGS-13865](https://issues.redhat.com/browse/OCPBUGS-13865): vSphere Add ova sha query; additional debugging [#7198](https://github.com/openshift/installer/pull/7198)
* [OCPBUGS-16640](https://issues.redhat.com/browse/OCPBUGS-16640): [release-4.13] Update azure cli version to 2.49.0 [#7357](https://github.com/openshift/installer/pull/7357)
* [OCPBUGS-16777](https://issues.redhat.com/browse/OCPBUGS-16777): update RHCOS 4.13 bootimage metadata to 413.92.202307260246-0 [#7410](https://github.com/openshift/installer/pull/7410)
* [CORS-2764](https://issues.redhat.com/browse/CORS-2764): AWS Shared VPC Backport [release-4.13] [#7362](https://github.com/openshift/installer/pull/7362)
* [OCPBUGS-17104](https://issues.redhat.com/browse/OCPBUGS-17104): [release-4.13] vsphere terraform bump [#7383](https://github.com/openshift/installer/pull/7383)
* [OCPBUGS-17397](https://issues.redhat.com/browse/OCPBUGS-17397): backport openstack UPI for ansible 2.10 [#7385](https://github.com/openshift/installer/pull/7385)
* [OCPBUGS-15290](https://issues.redhat.com/browse/OCPBUGS-15290): GCP: ic: improve project validation [#7361](https://github.com/openshift/installer/pull/7361)
* [OCPBUGS-16390](https://issues.redhat.com/browse/OCPBUGS-16390): Allow override of networkType [#7344](https://github.com/openshift/installer/pull/7344)
* [OCPBUGS-16673](https://issues.redhat.com/browse/OCPBUGS-16673): Fix timing issue between network services [#7358](https://github.com/openshift/installer/pull/7358)
* [OCPBUGS-14711](https://issues.redhat.com/browse/OCPBUGS-14711): Convert Rendezvous IPv6 address to canonical format [#7237](https://github.com/openshift/installer/pull/7237)
* [OCPBUGS-16066](https://issues.redhat.com/browse/OCPBUGS-16066): Use correct SELinux label. Make rename atomic. [#7315](https://github.com/openshift/installer/pull/7315)
* [OCPBUGS-14599](https://issues.redhat.com/browse/OCPBUGS-14599): Log additional host info at warning level [#7233](https://github.com/openshift/installer/pull/7233)
* [Full changelog](https://github.com/openshift/installer/compare/8acb744c86aee6a321e9ec29c4ff826016e61242...7cbe79cbc9a8704552b95c96721b7c73e0d5e552)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/12e53b8aeee5bb4d576e88dad5611c798928249b)

* [OCPBUGS-17365](https://issues.redhat.com/browse/OCPBUGS-17365): Trigger reconcile on Secret change [#295](https://github.com/openshift/baremetal-operator/pull/295)
* [OCPBUGS-16013](https://issues.redhat.com/browse/OCPBUGS-16013): Bump go.etcd.io/etcd/client/pkg/v3 from 3.5.6 to 3.5.9 [#292](https://github.com/openshift/baremetal-operator/pull/292)
* [OCPBUGS-17229](https://issues.redhat.com/browse/OCPBUGS-17229): Set minimum TLS version for webhook to 1.2 [#294](https://github.com/openshift/baremetal-operator/pull/294)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/3c924532a6965789f743fe37d77ed8b52a065c36...12e53b8aeee5bb4d576e88dad5611c798928249b)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/dc50979bf902b9e217ab694b225f391529b92963)

* [OCPBUGS-18582](https://issues.redhat.com/browse/OCPBUGS-18582): Move haproxy firewall rule check earlier in loop [#271](https://github.com/openshift/baremetal-runtimecfg/pull/271)
* [OCPBUGS-17423](https://issues.redhat.com/browse/OCPBUGS-17423): Don't render config with incomplete unicast peer list [#267](https://github.com/openshift/baremetal-runtimecfg/pull/267)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/4930ec51cf668be611e24bf8f7e7ea976f5a66b8...dc50979bf902b9e217ab694b225f391529b92963)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/17b7accf8fd25125ce015cf4bea7d3cd3f336317)

* [OCPBUGS-13527](https://issues.redhat.com/browse/OCPBUGS-13527): Bump x org deps 4.13 [#1422](https://github.com/openshift/oc/pull/1422)
* [OCPBUGS-16055](https://issues.redhat.com/browse/OCPBUGS-16055): mcs cert: account for environments that use IP directly [#1500](https://github.com/openshift/oc/pull/1500)
* [Full changelog](https://github.com/openshift/oc/compare/e561d37285c8bde273ce00d086bea599a9cdd3be...17b7accf8fd25125ce015cf4bea7d3cd3f336317)


### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/8531634cd2984370912b7530798a85ff4eb86c1e)

* [OCPBUGS-17056](https://issues.redhat.com/browse/OCPBUGS-17056): Address long acquire times during update [#289](https://github.com/openshift/cluster-autoscaler-operator/pull/289)
* [OCPBUGS-17098](https://issues.redhat.com/browse/OCPBUGS-17098): update x/net dependency to 0.7.0 [#280](https://github.com/openshift/cluster-autoscaler-operator/pull/280)
* [OCPBUGS-16768](https://issues.redhat.com/browse/OCPBUGS-16768): add nutanix labels that should be ignored [#278](https://github.com/openshift/cluster-autoscaler-operator/pull/278)
* [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/99a0e2bacb4beacc58ea0c203c247f35fdf57ee1...8531634cd2984370912b7530798a85ff4eb86c1e)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/3d1da56f5dd6f350497fde8be1c2020e7ecf22fc)

* [OCPBUGS-19369](https://issues.redhat.com/browse/OCPBUGS-19369): Guard against nil PlatformStatus [#363](https://github.com/openshift/cluster-baremetal-operator/pull/363)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/ee42773269a65998812435c0f1ab0c08cd8154f5...3d1da56f5dd6f350497fde8be1c2020e7ecf22fc)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/ef4594ef3f4ca535aa1d34878b79184323ecf481)

* [OCPBUGS-17101](https://issues.redhat.com/browse/OCPBUGS-17101): update x/net dependency to 0.7.0 [#269](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/269)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/64de389ba247ec7cd599dfc0492752cbec43181e...ef4594ef3f4ca535aa1d34878b79184323ecf481)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/a9e658abf7de525b411ff005b65e061e39f58bd6)

* [CORS-2766](https://issues.redhat.com/browse/CORS-2766): AWS Shared VPC API Bump [release-4.13] [#337](https://github.com/openshift/cluster-config-operator/pull/337)
* [OCPBUGS-16164](https://issues.redhat.com/browse/OCPBUGS-16164): retire LatencySensitive featureset [#329](https://github.com/openshift/cluster-config-operator/pull/329)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/923b864e76c6e8eb1bfcd66bb73327588dd8b75a...a9e658abf7de525b411ff005b65e061e39f58bd6)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/7af4825b90ced0b9e59a418c5f208d5521f0a421)

* [OCPBUGS-17055](https://issues.redhat.com/browse/OCPBUGS-17055): Address long acquire times during update [#240](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/240)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/42f323cd02b4e86ed630ed6649e32f9a876b3444...7af4825b90ced0b9e59a418c5f208d5521f0a421)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/ce4cf2011428c511e38c5873e10259f9636d2f49)

* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#1125](https://github.com/openshift/cluster-etcd-operator/pull/1125)
* [OCPBUGS-16804](https://issues.redhat.com/browse/OCPBUGS-16804): reset snapshot default counts to avoid file already lo… [#1080](https://github.com/openshift/cluster-etcd-operator/pull/1080)
* [OCPBUGS-12487](https://issues.redhat.com/browse/OCPBUGS-12487): update golang.org/x/net/http2 [#1075](https://github.com/openshift/cluster-etcd-operator/pull/1075)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/4a9be58b44eee435cfa28b97f5f4c0d816424717...ce4cf2011428c511e38c5873e10259f9636d2f49)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2ecad04e6dcd3338b7180529a9f55cb13dff276d)

* [OCPBUGS-17733](https://issues.redhat.com/browse/OCPBUGS-17733): [release-4.13] remove shared VPC cred request [#972](https://github.com/openshift/cluster-ingress-operator/pull/972)
* [NE-1341](https://issues.redhat.com/browse/NE-1341): Add support for AWS shared VPC in another account [#966](https://github.com/openshift/cluster-ingress-operator/pull/966)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/a4dc8290ffb1c5a1876e0640ee3a87d9599c0a67...2ecad04e6dcd3338b7180529a9f55cb13dff276d)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d525f5d788e2a8bbf7dd01902084c3587d32a58f)

* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#1558](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1558)
* [OCPBUGS-15853](https://issues.redhat.com/browse/OCPBUGS-15853): pkg/operator/configobserver: check that the serving certificate refer… [#1522](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1522)
* [OCPBUGS-17081](https://issues.redhat.com/browse/OCPBUGS-17081): make webhook connection failure a warning in log [#1532](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1532)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/0b4e454270fd837f94c8280178489add78ecc887...d525f5d788e2a8bbf7dd01902084c3587d32a58f)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/cc6a31430749e2e0a1b0d9db18c6e664dd4b626e)

* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#752](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/752)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/56b970786d152344f0d4762c8271d20e5fc9d28b...cc6a31430749e2e0a1b0d9db18c6e664dd4b626e)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/b4c50a4d65f6971abeed1da815aac038d8700715)

* [OCPBUGS-19825](https://issues.redhat.com/browse/OCPBUGS-19825): Update staticpod file permissions to conform with CIS benchmarks [#497](https://github.com/openshift/cluster-kube-scheduler-operator/pull/497)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/5c00da0816faf0f15e643f05666c963d862a8299...b4c50a4d65f6971abeed1da815aac038d8700715)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/547c850b30e2183f8a6c9842c82ce672ba72cc76)

* [OCPBUGS-11016](https://issues.redhat.com/browse/OCPBUGS-11016): Node Exporter ignores network interface under name "cali[a-f0-9]*" [#1927](https://github.com/openshift/cluster-monitoring-operator/pull/1927)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/18b1d257239170726e5abdbafaca1f019e9e5eb9...547c850b30e2183f8a6c9842c82ce672ba72cc76)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/777eb7b410863537b87be8266533d4bdca15ada6)

* [OCPBUGS-18722](https://issues.redhat.com/browse/OCPBUGS-18722): IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping [#1994](https://github.com/openshift/cluster-network-operator/pull/1994)
* [OCPBUGS-18342](https://issues.redhat.com/browse/OCPBUGS-18342): Fix bond-cni's default directory in multus manifest [#1977](https://github.com/openshift/cluster-network-operator/pull/1977)
* [OCPBUGS-13920](https://issues.redhat.com/browse/OCPBUGS-13920): add Hypershift release-image annotation to multus [#1817](https://github.com/openshift/cluster-network-operator/pull/1817)
* [OCPBUGS-18099](https://issues.redhat.com/browse/OCPBUGS-18099): [release-4.13] Use encapsulation=true for IBM Cloud [#1932](https://github.com/openshift/cluster-network-operator/pull/1932)
* [OCPBUGS-17721](https://issues.redhat.com/browse/OCPBUGS-17721): Enhance check controller to remove old check objects [#1950](https://github.com/openshift/cluster-network-operator/pull/1950)
* [OCPBUGS-17457](https://issues.redhat.com/browse/OCPBUGS-17457): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1936](https://github.com/openshift/cluster-network-operator/pull/1936)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/6f6b79bb994a5f38b8fc25edcd43b42229b3b70a...777eb7b410863537b87be8266533d4bdca15ada6)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/c09108fb4c7dfedf5c17c939df0d010170b31ee2)

* Add kubeconfig path for IBM Managed OpenShift (#814) [#814](https://github.com/openshift/cluster-node-tuning-operator/pull/814)
* [OCPBUGS-14137](https://issues.redhat.com/browse/OCPBUGS-14137): e2e: perfprof: add SNO device recovery test (#653) (#806) [#653](https://github.com/openshift/cluster-node-tuning-operator/pull/653)
* [OCPBUGS-18868](https://issues.redhat.com/browse/OCPBUGS-18868): [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) [#788](https://github.com/openshift/cluster-node-tuning-operator/pull/788)
* Sync DaemonSet if operand image changes (#786) [#786](https://github.com/openshift/cluster-node-tuning-operator/pull/786)
* Revert "Revert "Release leader election on manager exit (#773)" (#797)" (#802) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* [OCPBUGS-19351](https://issues.redhat.com/browse/OCPBUGS-19351): Keep Profile status.bootcmdline around (#803) [#803](https://github.com/openshift/cluster-node-tuning-operator/pull/803)
* Revert "Release leader election on manager exit (#773)" (#797) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* Release leader election on manager exit (#773) [#773](https://github.com/openshift/cluster-node-tuning-operator/pull/773)
* Tighten the rules for modifying Tuned Profiles (#766) [#766](https://github.com/openshift/cluster-node-tuning-operator/pull/766)
* [OCPBUGS-18063](https://issues.redhat.com/browse/OCPBUGS-18063): cgroup: Match the name of the cgroup to what is expected by kubelet (#774) [#774](https://github.com/openshift/cluster-node-tuning-operator/pull/774)
* update tsc karg to tsc=reliable (#757) [#757](https://github.com/openshift/cluster-node-tuning-operator/pull/757)
* [OCPBUGS-17845](https://issues.redhat.com/browse/OCPBUGS-17845): deflake ht aware test (#763) [#763](https://github.com/openshift/cluster-node-tuning-operator/pull/763)
* [OCPBUGS-17794](https://issues.redhat.com/browse/OCPBUGS-17794): rps: use default rps mask kernel API (#760) [#760](https://github.com/openshift/cluster-node-tuning-operator/pull/760)
* Improve render error handling (#755) [#755](https://github.com/openshift/cluster-node-tuning-operator/pull/755)
* nto:tuned: remove sched_min_granularity_ns settings (#726) [#726](https://github.com/openshift/cluster-node-tuning-operator/pull/726)
* Fix a race in e2e test rollback.go code (#740) [#740](https://github.com/openshift/cluster-node-tuning-operator/pull/740)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5b4af42e9cfb78fce5a2052f49ed26b27fb40f99...c09108fb4c7dfedf5c17c939df0d010170b31ee2)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/6769015121cc5212b13995e1317aea8e22ebda55)

* [OCPBUGS-18132](https://issues.redhat.com/browse/OCPBUGS-18132): Add patch for allowing configmap updates via clusterrole [#396](https://github.com/openshift/cluster-storage-operator/pull/396)
* [OCPBUGS-19036](https://issues.redhat.com/browse/OCPBUGS-19036): Fix PodStartupStorageOperationsFailing alert [#397](https://github.com/openshift/cluster-storage-operator/pull/397)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/98120d5f97b9fa0e83e4e99f9f466072ce7ca9d6...6769015121cc5212b13995e1317aea8e22ebda55)


### [console](https://github.com/openshift/console/tree/317522e9d541a091abdec9cf060c034d8d2b8ed3)

* [OCPBUGS-18764](https://issues.redhat.com/browse/OCPBUGS-18764): Fixed Edit Application form for Knative Services [#13147](https://github.com/openshift/console/pull/13147)
* [OCPBUGS-18538](https://issues.redhat.com/browse/OCPBUGS-18538): OCP console mandate secret for repository creation [#13135](https://github.com/openshift/console/pull/13135)
* [OCPBUGS-18679](https://issues.redhat.com/browse/OCPBUGS-18679): [knative] Don't rely on openshift/hello-openshift as a sample image [#13140](https://github.com/openshift/console/pull/13140)
* [OCPBUGS-18289](https://issues.redhat.com/browse/OCPBUGS-18289): Not able to import the repository with .tekton directory and func.yaml file present [#13116](https://github.com/openshift/console/pull/13116)
* [OCPBUGS-18443](https://issues.redhat.com/browse/OCPBUGS-18443): Fix crash when filtering the quick start catalog [#13127](https://github.com/openshift/console/pull/13127)
* [OCPBUGS-18312](https://issues.redhat.com/browse/OCPBUGS-18312): Web console slowness on Project>Project access page [#13119](https://github.com/openshift/console/pull/13119)
* [OCPBUGS-18335](https://issues.redhat.com/browse/OCPBUGS-18335): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13120](https://github.com/openshift/console/pull/13120)
* [OCPBUGS-17876](https://issues.redhat.com/browse/OCPBUGS-17876): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13095](https://github.com/openshift/console/pull/13095)
* [OCPBUGS-16668](https://issues.redhat.com/browse/OCPBUGS-16668): Dynamic plugin translation support for plurals broken [#13041](https://github.com/openshift/console/pull/13041)
* [OCPBUGS-17181](https://issues.redhat.com/browse/OCPBUGS-17181): Creation of GH webhook and attaching it to repo while importing from git using PAC [#13060](https://github.com/openshift/console/pull/13060)
* [OCPBUGS-16040](https://issues.redhat.com/browse/OCPBUGS-16040): fix bug where binary secret values are corrupted on edit and add test coverage [#13048](https://github.com/openshift/console/pull/13048)
* [OCPBUGS-16659](https://issues.redhat.com/browse/OCPBUGS-16659): Fix RTE in bridge. [#13038](https://github.com/openshift/console/pull/13038)
* [OCPBUGS-16158](https://issues.redhat.com/browse/OCPBUGS-16158): "Duplicate RoleBinding" leads to "Unsupported value" error [#13008](https://github.com/openshift/console/pull/13008)
* [OCPBUGS-16434](https://issues.redhat.com/browse/OCPBUGS-16434): Fix stop PLR option [#13031](https://github.com/openshift/console/pull/13031)
* [OCPBUGS-14265](https://issues.redhat.com/browse/OCPBUGS-14265): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12865](https://github.com/openshift/console/pull/12865)
* [OCPBUGS-13641](https://issues.redhat.com/browse/OCPBUGS-13641): Do not fetch catalog sources on CSV or Subscription details pages. [#12811](https://github.com/openshift/console/pull/12811)
* [OCPBUGS-16421](https://issues.redhat.com/browse/OCPBUGS-16421): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13030](https://github.com/openshift/console/pull/13030)
* [Full changelog](https://github.com/openshift/console/compare/920c7380e2774bcd300e9a286c430e79e8928f65...317522e9d541a091abdec9cf060c034d8d2b8ed3)


### [console-operator](https://github.com/openshift/console-operator/tree/997e23f7305b376ad99d6f85b237f1b83d97bf87)

* [OCPBUGS-18192](https://issues.redhat.com/browse/OCPBUGS-18192): Add haproxy timeout annotation to console routes [#787](https://github.com/openshift/console-operator/pull/787)
* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Add missing watch permission for helm-chartrepos-viewers [#778](https://github.com/openshift/console-operator/pull/778)
* [OCPBUGS-14039](https://issues.redhat.com/browse/OCPBUGS-14039): Backport #774 and #763 [#779](https://github.com/openshift/console-operator/pull/779)
* [Full changelog](https://github.com/openshift/console-operator/compare/c5f3b24448f6a7bf5dd5d145008df85e04ec5968...997e23f7305b376ad99d6f85b237f1b83d97bf87)


### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)

* [OCPBUGS-17728](https://issues.redhat.com/browse/OCPBUGS-17728): Default CNI binaries to RHEL 8 [#117](https://github.com/openshift/containernetworking-plugins/pull/117)
* [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/26001de8244adb4bd1ae4c4046932b5a9831edce...dbf24deae8df2b7ccc4c468fddcbb4a19214afa5)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)

* [OCPBUGS-16609](https://issues.redhat.com/browse/OCPBUGS-16609): [release-4.13] UPSTREAM: 880: Bump golang.org/x/net [#67](https://github.com/openshift/csi-external-provisioner/pull/67)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/0dc83f5f1bd118247eaf0f91030c321da9c88aa3...f1fa8099e31e57452b7cf6f2e1ca288ae21ce78f)


### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/a888237c9ab43eab0ca992f0b18eff114ea4ade1)

* [OCPBUGS-16600](https://issues.redhat.com/browse/OCPBUGS-16600): [release-4.13] UPSTREAM: 179: fix: CVE-2022-41723 [#46](https://github.com/openshift/csi-livenessprobe/pull/46)
* [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/c785aa6755bf96a4d39b4a804b7a826485965227...a888237c9ab43eab0ca992f0b18eff114ea4ade1)


### [etcd](https://github.com/openshift/etcd/tree/7efbc019a20e4c025d482749d49d0d72892dbfe1)

* [OCPBUGS-18497](https://issues.redhat.com/browse/OCPBUGS-18497): Updating ose-etcd images to be consistent with ART [#214](https://github.com/openshift/etcd/pull/214)
* [OCPBUGS-18398](https://issues.redhat.com/browse/OCPBUGS-18398): UPSTREAM <carry>: update build images to rhel9 [#212](https://github.com/openshift/etcd/pull/212)
* [OCPBUGS-15859](https://issues.redhat.com/browse/OCPBUGS-15859): [4.13] Rebase openshift/etcd to 3.5.9 [#204](https://github.com/openshift/etcd/pull/204)
* [Full changelog](https://github.com/openshift/etcd/compare/f70da9d78221bc3e6bf8ac14c0c4ecc106f4f57d...7efbc019a20e4c025d482749d49d0d72892dbfe1)


### [fedora-coreos, machine-os-content, okd-rpms](https://github.com/openshift/okd-machine-os/tree/58203170256f4f57b1e833225bb0d2e80c10e910)

* Bump Fedora CoreOS version string [#665](https://github.com/openshift/okd-machine-os/pull/665)
* Bump fedora-coreos to latest stable [#661](https://github.com/openshift/okd-machine-os/pull/661)
* Bump fedora-coreos to latest stable [#653](https://github.com/openshift/okd-machine-os/pull/653)
* Bump Fedora CoreOS version string [#650](https://github.com/openshift/okd-machine-os/pull/650)
* Bump fedora-coreos to latest stable [#647](https://github.com/openshift/okd-machine-os/pull/647)
* Bump OKD OS version [#643](https://github.com/openshift/okd-machine-os/pull/643)
* Bump fedora-coreos to latest stable [#641](https://github.com/openshift/okd-machine-os/pull/641)
* Bump FCOS version [#638](https://github.com/openshift/okd-machine-os/pull/638)
* Bump fedora-coreos to latest stable [#635](https://github.com/openshift/okd-machine-os/pull/635)
* [Full changelog](https://github.com/openshift/okd-machine-os/compare/00eaf19c6fe3572e59d4359d4927a59cac7e2f19...58203170256f4f57b1e833225bb0d2e80c10e910)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/6534fed3d667750a54fb6750bffc09bee61832e8)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#80](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/d151ef0f5268ccdedf5bb43b649d4cab13b21d68...6534fed3d667750a54fb6750bffc09bee61832e8)


### [haproxy-router](https://github.com/openshift/router/tree/057eae91f82fb3900fc3d18172b5e6e6ad2d59d8)

* [OCPBUGS-17762](https://issues.redhat.com/browse/OCPBUGS-17762): haproxy/template: mitigate CVE-2023-40225 [#506](https://github.com/openshift/router/pull/506)
* [OCPBUGS-17107](https://issues.redhat.com/browse/OCPBUGS-17107): properly handle weight=0 [#501](https://github.com/openshift/router/pull/501)
* [Full changelog](https://github.com/openshift/router/compare/065deab84f342615db2d2f5c78a19ae04bb43912...057eae91f82fb3900fc3d18172b5e6e6ad2d59d8)


### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/52589e6ce268bdc7712fcd21159783f6b1ba09f1)

* [OCPBUGS-18287](https://issues.redhat.com/browse/OCPBUGS-18287), [OCPBUGS-19480](https://issues.redhat.com/browse/OCPBUGS-19480): Update to Kubernetes 1.26.9 [#1715](https://github.com/openshift/kubernetes/pull/1715)
* [OCPBUGS-18677](https://issues.redhat.com/browse/OCPBUGS-18677): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1689](https://github.com/openshift/kubernetes/pull/1689)
* [OCPBUGS-17187](https://issues.redhat.com/browse/OCPBUGS-17187): Update to Kubernetes 1.26.7 [#1649](https://github.com/openshift/kubernetes/pull/1649)
* [OCPBUGS-17145](https://issues.redhat.com/browse/OCPBUGS-17145): Increase service idle max timeout to 100 minutes [#1657](https://github.com/openshift/kubernetes/pull/1657)
* [Full changelog](https://github.com/openshift/kubernetes/compare/73ac5612fbb16a50ee4ffe95f8c2dbe33e477dbf...52589e6ce268bdc7712fcd21159783f6b1ba09f1)


### [hypershift](https://github.com/openshift/hypershift/tree/2c52769df12895ea389c8e87c6175dc59aedd4d6)

* chore(deps): update rhtap references (release-4.13) [#3043](https://github.com/openshift/hypershift/pull/3043)
* Update RHTAP references (release-4.13) [#2996](https://github.com/openshift/hypershift/pull/2996)
* [OCPBUGS-17182](https://issues.redhat.com/browse/OCPBUGS-17182): add need-management-kas-access label to olm-collect-profiles pods [#2871](https://github.com/openshift/hypershift/pull/2871)
* [OCPBUGS-16225](https://issues.redhat.com/browse/OCPBUGS-16225): Add missing probes to two services [#2821](https://github.com/openshift/hypershift/pull/2821)
* fix(olm): Use 4.13 catalog source images [#2978](https://github.com/openshift/hypershift/pull/2978)
* Updated secret permissions for openshift-route-controller-manager [#2923](https://github.com/openshift/hypershift/pull/2923)
* [HOSTEDCP-1121](https://issues.redhat.com/browse/HOSTEDCP-1121): Ensure SG reconciliation for aws endpoint [#2885](https://github.com/openshift/hypershift/pull/2885)
* chore(deps): update rhtap references (release-4.13) [#2921](https://github.com/openshift/hypershift/pull/2921)
* Revert "HOSTEDCP-1110: [backport-4.13] Allow HCP Specification to Support ICSP & IDMS" [#2931](https://github.com/openshift/hypershift/pull/2931)
* chore(deps): update rhtap references (release-4.13) [#2904](https://github.com/openshift/hypershift/pull/2904)
* Update RHTAP references (release-4.13) [#2866](https://github.com/openshift/hypershift/pull/2866)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add ImageDigestMirrorSet to Config API comment [#2870](https://github.com/openshift/hypershift/pull/2870)
* [HOSTEDCP-1046](https://issues.redhat.com/browse/HOSTEDCP-1046): Add IDMS to the list of valid config manifests [#2863](https://github.com/openshift/hypershift/pull/2863)
* Update RHTAP references (release-4.13) [#2833](https://github.com/openshift/hypershift/pull/2833)
* [HOSTEDCP-1110](https://issues.redhat.com/browse/HOSTEDCP-1110): [backport-4.13] Allow HCP Specification to Support ICSP & IDMS [#2839](https://github.com/openshift/hypershift/pull/2839)
* [OCPBUGS-15743](https://issues.redhat.com/browse/OCPBUGS-15743): Let getMachinesForNodePool return machines ordered by creation Timestamp [#2767](https://github.com/openshift/hypershift/pull/2767)
* [Full changelog](https://github.com/openshift/hypershift/compare/962bd1131c4e61427be9c66ef3589a8a1f7ac984...2c52769df12895ea389c8e87c6175dc59aedd4d6)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/42b5c256657da2de184c3e5ec9c619131ed1cd57)

* [OCPBUGS-16378](https://issues.redhat.com/browse/OCPBUGS-16378): 4.13: UPSTREAM: 157: K8S and grpc package upgrade [#40](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/40)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/66dcaf9a0591ec321828cec5ee24f0a4df0e5080...42b5c256657da2de184c3e5ec9c619131ed1cd57)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#73](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/73)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/e83df2f32ae88c84c15a12741a970607b20228ec...ce92007db2dfd6cd8b9b9c7cfcfaeec801e76097)


### [insights-operator](https://github.com/openshift/insights-operator/tree/4909f5c49576e6459a3e764cde98c28610b45468)

* [OCPBUGS-17661](https://issues.redhat.com/browse/OCPBUGS-17661): workload info gatherer, add external image repo (#816) [#816](https://github.com/openshift/insights-operator/pull/816)
* [Full changelog](https://github.com/openshift/insights-operator/compare/f87e4120ed55da397a323ddbc7fe1a5edb0f088c...4909f5c49576e6459a3e764cde98c28610b45468)


### [ironic](https://github.com/openshift/ironic-image/tree/fc1cca95711797767336878bfb9e2e4b9801ecfa)

* [OCPBUGS-17837](https://issues.redhat.com/browse/OCPBUGS-17837): Fix PROVISIONING_MACS unbound [#393](https://github.com/openshift/ironic-image/pull/393)
* [OCPBUGS-17158](https://issues.redhat.com/browse/OCPBUGS-17158): [4.13] Update packages with latest bugfix [#388](https://github.com/openshift/ironic-image/pull/388)
* [OCPBUGS-17551](https://issues.redhat.com/browse/OCPBUGS-17551): Expand regex for fcos/okd packages list [#390](https://github.com/openshift/ironic-image/pull/390)
* [Full changelog](https://github.com/openshift/ironic-image/compare/5212a6350a01e730c623e462d040431233b9a1d5...fc1cca95711797767336878bfb9e2e4b9801ecfa)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/508e61245eb34d1f83771b1522021ffcde59fecc)

* [OCPBUGS-19006](https://issues.redhat.com/browse/OCPBUGS-19006): backport hostname fixes [#89](https://github.com/openshift/ironic-agent-image/pull/89)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/c4141b13ec85e9642f60bcb55b50055c691f0b6b...508e61245eb34d1f83771b1522021ffcde59fecc)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3d95390f8afe8456ceba69eb73d7b95d3b954f6d)

* [OCPBUGS-19675](https://issues.redhat.com/browse/OCPBUGS-19675): daemon: always use `podman cp` to copy extensions container content [#3938](https://github.com/openshift/machine-config-operator/pull/3938)
* [OCPBUGS-19400](https://issues.redhat.com/browse/OCPBUGS-19400): install: Recreate and delayed default ServiceAccount deletion [#3923](https://github.com/openshift/machine-config-operator/pull/3923)
* [OCPBUGS-19509](https://issues.redhat.com/browse/OCPBUGS-19509): Ignore invoking nbctl calls if its SDN [#3929](https://github.com/openshift/machine-config-operator/pull/3929)
* [OCPBUGS-19414](https://issues.redhat.com/browse/OCPBUGS-19414): The kubeconfig copied on to each node has 644 permissions [#3924](https://github.com/openshift/machine-config-operator/pull/3924)
* [OCPBUGS-18159](https://issues.redhat.com/browse/OCPBUGS-18159): Ensure azure-routes hack for internalLB hairpin traffic works for SGW [#3904](https://github.com/openshift/machine-config-operator/pull/3904)
* [OCPBUGS-16218](https://issues.redhat.com/browse/OCPBUGS-16218): Prevent NM from unsetting the hostname [#3805](https://github.com/openshift/machine-config-operator/pull/3805)
* [OCPBUGS-17997](https://issues.redhat.com/browse/OCPBUGS-17997): SSHkeys fails to write on upgrade to 4.13.rc3 [#3879](https://github.com/openshift/machine-config-operator/pull/3879)
* [OCPBUGS-18076](https://issues.redhat.com/browse/OCPBUGS-18076): daemon: create /etc/systemd/network directory on node [#3888](https://github.com/openshift/machine-config-operator/pull/3888)
* [OCPBUGS-17769](https://issues.redhat.com/browse/OCPBUGS-17769): Agent-based install process the container machine-config-controller will be oom [#3868](https://github.com/openshift/machine-config-operator/pull/3868)
* [OKD-174](https://issues.redhat.com/browse/OKD-174): Dockerfile: OKD: Reenable extensions image on SCOS [#3845](https://github.com/openshift/machine-config-operator/pull/3845)
* [OCPBUGS-17430](https://issues.redhat.com/browse/OCPBUGS-17430): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3841](https://github.com/openshift/machine-config-operator/pull/3841)
* [OCPBUGS-17163](https://issues.redhat.com/browse/OCPBUGS-17163): daemon: Always replace binary [#3833](https://github.com/openshift/machine-config-operator/pull/3833)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: Make binary writing idempotent [#3826](https://github.com/openshift/machine-config-operator/pull/3826)
* [OCPBUGS-16888](https://issues.redhat.com/browse/OCPBUGS-16888): daemon: no need to reexec when target and source rhel version is same [#3824](https://github.com/openshift/machine-config-operator/pull/3824)
* [OCPBUGS-16622](https://issues.redhat.com/browse/OCPBUGS-16622): daemon: Copy matching binary to host, re-exec with it [#3812](https://github.com/openshift/machine-config-operator/pull/3812)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/56c0dc09bb5a0c0d73e356624a631fa5dba59f9f...3d95390f8afe8456ceba69eb73d7b95d3b954f6d)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/0f4119d19349077d30ad108a9e611eed7205d14a)

* [OCPBUGS-19006](https://issues.redhat.com/browse/OCPBUGS-19006): Pass BareMetalHost name to IPA (take 2) [#98](https://github.com/openshift/image-customization-controller/pull/98)
* [OCPBUGS-14250](https://issues.redhat.com/browse/OCPBUGS-14250): Watch networkData Secrets for changes [#95](https://github.com/openshift/image-customization-controller/pull/95)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/87651668b314426960ea4974429f3b0ed16c3f31...0f4119d19349077d30ad108a9e611eed7205d14a)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/7ea40205ffef4c3e047153f4655444245c2792d3)

* [OCPBUGS-4417](https://issues.redhat.com/browse/OCPBUGS-4417): Denormalize IP name before checking if pod is alive [Backport 4.13] [#168](https://github.com/openshift/whereabouts-cni/pull/168)
* [OCPBUGS-15956](https://issues.redhat.com/browse/OCPBUGS-15956): Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#138](https://github.com/openshift/whereabouts-cni/pull/138)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/1abe4c1f6f003d23c628f8d30c85bf8389562838...7ea40205ffef4c3e047153f4655444245c2792d3)


### [must-gather](https://github.com/openshift/must-gather/tree/288ef2fcfe63cbfab0af69a41b508c044ee890aa)

* [OCPBUGS-19928](https://issues.redhat.com/browse/OCPBUGS-19928): [release-4.13] Add csi-proxy logs collection in must-gather for Windows nodes [#383](https://github.com/openshift/must-gather/pull/383)
* [Full changelog](https://github.com/openshift/must-gather/compare/5eca0cb65ea6dd13f907d1f7493ed237f07e3906...288ef2fcfe63cbfab0af69a41b508c044ee890aa)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/44af5a3a021fd158c2e44d9951ad59a3d474cdf3)

* [OCPBUGS-16805](https://issues.redhat.com/browse/OCPBUGS-16805): Updating golang-github-openshift-oauth-proxy images to be consistent with ART [#261](https://github.com/openshift/oauth-proxy/pull/261)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f...44af5a3a021fd158c2e44d9951ad59a3d474cdf3)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/3742681e417aee146fe258cf779b6cdfae8054a3)

* Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#700) [#700](https://github.com/openshift/oc-mirror/pull/700)
* Fix OCPBUGS-14402 (#675) [#675](https://github.com/openshift/oc-mirror/pull/675)
* [OCPBUGS-18556](https://issues.redhat.com/browse/OCPBUGS-18556): operator catalogs from oc-mirror fail to deploy because of invalid caches (#691) [#691](https://github.com/openshift/oc-mirror/pull/691)
* [OCPBUGS-18106](https://issues.redhat.com/browse/OCPBUGS-18106): manual cherrypick (#684) [#684](https://github.com/openshift/oc-mirror/pull/684)
* [OCPBUGS-17998](https://issues.redhat.com/browse/OCPBUGS-17998): fix: ICSP with incorrect mirror path (#685) [#685](https://github.com/openshift/oc-mirror/pull/685)
* [OCPBUGS-17453](https://issues.redhat.com/browse/OCPBUGS-17453): Fix " OCI index found, but accept header does not support OCI indexes (#677) [#677](https://github.com/openshift/oc-mirror/pull/677)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/f11a9001caad8fe146c73baf2acc38ddcf3642b5...3742681e417aee146fe258cf779b6cdfae8054a3)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/385057e57752b7b4f21ef32d7a7993d266a591eb)

* [OCPBUGS-11091](https://issues.redhat.com/browse/OCPBUGS-11091): mount build.Spec.Source.ConfigMaps for custom builder images [#257](https://github.com/openshift/openshift-controller-manager/pull/257)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/87de83867ac51730f506138ee790a56ca21d9fc9...385057e57752b7b4f21ef32d7a7993d266a591eb)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/7bce9d67fba63a0ed6a39b78488da8e85bf07dbd)

* Bug OCPBUGS-19460: Set controller's SyncPeriod to 1 hour [#85](https://github.com/openshift/machine-api-provider-openstack/pull/85)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/36f48b76303aea04f997cda658ca5e25841a079c...7bce9d67fba63a0ed6a39b78488da8e85bf07dbd)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/9957ffd6be55ffadf08c107191fa459e03af5f26)

* [OCPBUGS-18305](https://issues.redhat.com/browse/OCPBUGS-18305), [RHIBMCS-151](https://issues.redhat.com/browse/RHIBMCS-151): Copied csv listing backport [#548](https://github.com/openshift/operator-framework-olm/pull/548)
* [OCPBUGS-17791](https://issues.redhat.com/browse/OCPBUGS-17791): opm: always serve pprof endpoints, improve server allocations (#1129) [#540](https://github.com/openshift/operator-framework-olm/pull/540)
* Introduce DOWNSTREAM_OWNERS file [#538](https://github.com/openshift/operator-framework-olm/pull/538)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/f1d9c59de5a7cb32eb70846411cdc443e2b8f4b9...9957ffd6be55ffadf08c107191fa459e03af5f26)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3a424b991b6505699f53badce9085d4398575f68)

* [OCPBUGS-19085](https://issues.redhat.com/browse/OCPBUGS-19085): Updating marketplace-operator images to be consistent with ART [#538](https://github.com/operator-framework/operator-marketplace/pull/538)
* [OCPBUGS-18502](https://issues.redhat.com/browse/OCPBUGS-18502): remove a race condition [#532](https://github.com/operator-framework/operator-marketplace/pull/532)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/d569c22c518fc931ff48f66fb38064ddd976729f...3a424b991b6505699f53badce9085d4398575f68)


### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/aca579dfc9aa1921849f9573f5179fcb2bf89f28)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#120](https://github.com/openshift/ovirt-csi-driver-operator/pull/120)
* [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/6627b2a22d70fa740de8bb35f0beea3816b01ec4...aca579dfc9aa1921849f9573f5179fcb2bf89f28)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/d0925e2b849eff980ec668b37605ea3676eff604)

* [OCPBUGS-18672](https://issues.redhat.com/browse/OCPBUGS-18672): Check libovsdbclient.ErrNotFound on wrapped errors [#1861](https://github.com/openshift/ovn-kubernetes/pull/1861)
* [OCPBUGS-19449](https://issues.redhat.com/browse/OCPBUGS-19449): Do not return error if pod IP cannot be retrieved for `podSelectorPodNeedsDelete` and perf improvements [#1893](https://github.com/openshift/ovn-kubernetes/pull/1893)
* [OCPBUGS-18585](https://issues.redhat.com/browse/OCPBUGS-18585): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1855](https://github.com/openshift/ovn-kubernetes/pull/1855)
* [OCPBUGS-17123](https://issues.redhat.com/browse/OCPBUGS-17123): Remove stale egressip status entry [#1793](https://github.com/openshift/ovn-kubernetes/pull/1793)
* [OCPBUGS-18057](https://issues.redhat.com/browse/OCPBUGS-18057): [release-4.13] Create egress firewall with one db transaction [#1834](https://github.com/openshift/ovn-kubernetes/pull/1834)
* [OCPBUGS-17910](https://issues.redhat.com/browse/OCPBUGS-17910): Emit node events only when retry failure [#1825](https://github.com/openshift/ovn-kubernetes/pull/1825)
* [OCPBUGS-17503](https://issues.redhat.com/browse/OCPBUGS-17503): [release-4.13] libovsdb: give monitor setup time to process than normal transactions [#1807](https://github.com/openshift/ovn-kubernetes/pull/1807)
* [OCPBUGS-13175](https://issues.redhat.com/browse/OCPBUGS-13175): Check the status of a pod before trying to get its ip [#1724](https://github.com/openshift/ovn-kubernetes/pull/1724)
* [OCPBUGS-15496](https://issues.redhat.com/browse/OCPBUGS-15496): Fix default GW IPs retrieval [#1738](https://github.com/openshift/ovn-kubernetes/pull/1738)
* [OCPBUGS-17001](https://issues.redhat.com/browse/OCPBUGS-17001): Inactivity probe for ovndb connection [#1796](https://github.com/openshift/ovn-kubernetes/pull/1796)
* [OCPBUGS-17120](https://issues.redhat.com/browse/OCPBUGS-17120): Bump OVN to 23.06-23.06.0-51 [#1790](https://github.com/openshift/ovn-kubernetes/pull/1790)
* [OCPBUGS-16121](https://issues.redhat.com/browse/OCPBUGS-16121): [release-4.13]: Delete address sets after acls that reference them [#1762](https://github.com/openshift/ovn-kubernetes/pull/1762)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/256e112b4a66f2445d72e4eb0c3abe948115413b...d0925e2b849eff980ec668b37605ea3676eff604)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/26d166e8f7d1f33eff1efd7ccab92a27a188f431)

* Updated golang.org/x/net/html dependency. [#44](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/44)
* Openshiftrelease 4.13 [#41](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/41)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/e0e89f1b778799e45b3d5095a9275e2802de376a...26d166e8f7d1f33eff1efd7ccab92a27a188f431)


### [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/tree/2d8e82b25c39fd0617632ae32fec070b7c5f8f21)

* [OCPBUGS-16250](https://issues.redhat.com/browse/OCPBUGS-16250): Add management workloads annotations [#34](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/pull/34)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/compare/b40850568a7c9de0f5493147d7126a12af889b45...2d8e82b25c39fd0617632ae32fec070b7c5f8f21)


### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/5409afd036445411969ed074e681c73f2df36909)

* [OCPBUGS-14274](https://issues.redhat.com/browse/OCPBUGS-14274): Upgrade golang.org/x/net to v0.10.0 to fix the CVE [#127](https://github.com/openshift/node_exporter/pull/127)
* [Full changelog](https://github.com/openshift/node_exporter/compare/10dc380d4ce996d2557b10991b3f7623a4551e21...5409afd036445411969ed074e681c73f2df36909)


### [tests](https://github.com/openshift/origin/tree/62852a2a543c7e12a2bca8d7393b1e84eab700b9)

* [OCPBUGS-16241](https://issues.redhat.com/browse/OCPBUGS-16241): Update permission to incl. watch for helmchartrepositories for console users [#28054](https://github.com/openshift/origin/pull/28054)
* [Full changelog](https://github.com/openshift/origin/compare/b1f4ee96d1d1f95af75b2701b8c5e42886a9912a...62852a2a543c7e12a2bca8d7393b1e84eab700b9)


### [vsphere-csi-driver, vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver/tree/9079a510ebbe7bc0df6a06aae43b6dbada3adb32)

* [OCPBUGS-16398](https://issues.redhat.com/browse/OCPBUGS-16398): Rebase v3.0.2 [#83](https://github.com/openshift/vmware-vsphere-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver/compare/5e0efc3911345f62ef6fa6ae7334d01fbf4de4bd...9079a510ebbe7bc0df6a06aae43b6dbada3adb32)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/1d88292198b5fe969b952532919fc595534af259)

* [OCPBUGS-18132](https://issues.redhat.com/browse/OCPBUGS-18132): Block 4.14 upgrades with admin ack [#169](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/169)
* [OCPBUGS-18332](https://issues.redhat.com/browse/OCPBUGS-18332): disable controller hostNetwork [#166](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/166)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/ab111cf6a6f39b81ace6990dc56eb9ca14560614...1d88292198b5fe969b952532919fc595534af259)