Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.13.0-0.okd-2023-06-24-145750

Tests:

• Blocking jobs
  • upgrade Succeeded (2 retries) release-openshift-okd-fcos-installer-e2e-gcp-upgrade-from-fcos-stable

Upgrades from:

• 4.13.0-0.okd-2023-06-24-103931 (changes) - F F S
• 4.13.0-0.okd-2023-06-04-080300 - F F F S
• 4.13.0-0.okd-2023-05-22-052007 (changes) - Failed Success
• 4.12.0-0.okd-2023-04-16-041331 (changes) - Failed

Upgrades to:

• 4.13.0-0.okd-2023-08-04-164726 (changes) - Failed Success
• 4.13.0-0.okd-2023-07-23-051208 (changes) - Failed Success
• 4.13.0-0.okd-2023-07-09-062029 (changes) - F S F S

---

Changes from 4.13.0-0.okd-2023-06-04-080300

Created: 2023-06-25 05:13:38 +0000 UTC

Image Digest: sha256:873c173b9ccb1f78bf2c5aa285227259c373191a722bcc3915375006903088a5

Release 4.13.0-0.okd-2023-06-24-145750 was created from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-06-24-145750

Components

• Kubernetes upgraded from 1.26.5 to 1.26.6
• Fedora CoreOS upgraded from 38.20230514.3 to 38.20230527.3

Rebuilt images without code change

• cluster-baremetal-operator git db283115 sha256:b4709e6a34053f3dbe94e44c5cc4ca3a2a1669e6743335845ee44918ac1dce86
• cluster-capi-operator git ce1c9a35 sha256:9f8026ea03c9d7d7486d942b533c31fa6adb6d984194db91e309e08484d61b4d
• cluster-kube-apiserver-operator git 02ea4a41 sha256:d3a7b50b6a96444b542acb6039f59b3a9c9d775600f85a3921cb87a8d65879c4
• driver-toolkit git d719bdcf sha256:af7055332f18015e479166879647c7635ef698afee1cbb1c28a09ccdf2e916a9
• etcd git f70da9d7 sha256:db91912b0e3c7c3ddef645b6bb057f25df5bf67b2ebcc0ddd64aa9fd3657a969
• haproxy-router git 065deab8 sha256:0638cdbb2f3390fac013f7d655c11fd991c51e1768921741dc5ba32db68a36aa
• telemeter git be81b434 sha256:8ef35b784507398208ffe74a4c514e1e577d8dea620815d325d4959e8f8ae9db

agent-installer-api-server

• MGMT-13947: Revert assisted boot reporter service (#5292) #5292
• Full changelog

agent-installer-node-agent

• OCPBUGS-14848: Filter out hidden devices (#559) #559
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-12555: Update builder to OCP4.13/go1.19 #164
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-13952: Update x/net package to v0.8.0 #68
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-12557: Bump x/net package to v0.10.0 #278
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-15289: gcp use preconfigured private zone for installation #7271
• OCPBUGS-14916: Replace with govc docker image and fix ibmcli folder permission issue #7245
• OCPBUGS-13323: update RHCOS 4.13 bootimage metadata to 413.92.202306140611-0 #7248
• OCPBUGS-14860: GCP XPN Private Cluster Fails with no Public Zone #7240
• Full changelog

baremetal-operator

• OCPBUGS-13374: Do not try to update images for nodes in transient states #282
• Full changelog

baremetal-runtimecfg

• OCPBUGS-15101: Use machine-config state instead of comparing roles #261
• Full changelog

cli, cli-artifacts, deployer, tools

• handle the error case of node retrieval while waiting for reboot #1484
• bring some cert rotation helpers back into 4.13 #1474
• Full changelog

cloud-credential-operator

• OCPBUGS-12565: CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] #543
• Full changelog

cloud-network-config-controller

• OCPBUGS-14635: increase GCP egress ip capacity to 100 from 10 #113
• Full changelog

cluster-capi-controllers

• OCPBUGS-12567: Bump x/net package to v0.10.0 #176
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-15330: Fix lint issue #222
• OCPBUGS-15161: Surface cpms vs machine diff #218
• OCPBUGS-14024: Check ProviderSpec before generating MachineInfo #211
• Full changelog

cluster-ingress-operator

• OCPBUGS-12743: bump controller-runtime to fix the multi namespace cache indexing #921
• OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #935
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-14651: disable debug pporf with unauthenticated port for 4.13 #480
• Full changelog

cluster-monitoring-operator

• OCPBUGS-14251: Add new web console usage metrics #1976
• OCPBUGS-12488: go.mod: update golang.org/x/net to v0.7.0 #1957
• Full changelog

cluster-network-operator

• OCPBUGS-14871: Do not rely on ControlPlaneTopology do determine if running in HyperShift #1837
• OCPBUGS-13809: Use IfNotPresent instead of Always in OVNK upgrades pre-puller #1813
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-14895: Do not fail creating cgroups if they exist already (#684) #684
• Full changelog

cluster-samples-operator

• OCPBUGS-14598: Updating to use Jenkins 4.13 images #503
• Full changelog

console

• OCPBUGS-14943: visiting Configurations page returns error Cannot read… #12897
• OCPBUGS-12785: Project admin can update and view subscription from operator details page #12780
• OCPBUGS-14574: only copy workload annotations to debug pod #12879
• OCPBUGS-14258: Add vSphere cluster field. #12862
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-12484, OCPBUGS-12527, OCPBUGS-14505: Mitigating CVE-2022-41723 #140
• Full changelog

docker-builder

• OCPBUGS-10002, OCPBUGS-8159, OCPBUGS-8191: Mitigate CVE-2023-26054 #348
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump fedora-coreos to latest stable #620
• Bump openshift-os to latest release-4.13 #615
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-12604: Bump x/net package to v0.10.0 #196
• Full changelog

hyperkube, pod

• OCPBUGS-15246: Bump to k8s 1.26.6 #1610
• releng/go: Update images, deps and version to go 1.19.10 #118555
• Automated cherry pick of #118515: kube-proxy avoid race condition using LocalModeNodeCIDR #118516
• Automated cherry pick of #118356: Add ephemeralcontainer to imagepolicy securityaccount #118473
• Automated cherry pick of #117792: kubeadm: Use internal etcd client through an interface #117916
• Automated cherry pick of #117586: Add DisruptionTarget condition when preempting for critical #118221
• Automated cherry pick of #118156: update webhook test to go 1.21 #118179
• Cherry Pick of #114766: [Prepare for go1.20] *: Bump versions and fix tests #115051
• Automated cherry pick of #118069: kubeadm: fix a bug where the static pod changes detection #118106
• Automated cherry pick of #118104: Fix waiting for CRD sync at server start #118112
• OCPBUGS-8738: bump apiserver-lib-go #1611
• OCPBUGS-14589: [release-4.13] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 #1596
• Full changelog

hypershift

• OCPBUGS-15268 properly handle user CA bundle not existing #2710
• OCPBUGS-15301: [release-4.13] fix(oauth): Do not proxy IBM Cloud IAM endpoints #2696
• OCPBUGS-14030: Include default ingress CA in root CA bundle #2599
• OCPBUGS-14490: Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2645
• OCPBUGS-14801: Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2666
• HOSTEDCP-1048: Add impersonate feature to the CLI and document HC dump procedure #2681
• OCPBUGS-14872: Honor global ingress configuration LoadBalancer type on AWS #2677
• OCPBUGS-14436: Add ClusterUpgradeDuration metric #2637
• HOSTEDCP-1009: Allow external-dns image to be set in install cli #2652
• Red Hat Trusted App Pipeline update hypershift-operator-release-413 #2641
• Red Hat Trusted App Pipeline purge hypershift #2640
• Full changelog

ibm-cloud-controller-manager

• OCPBUGS-12612: Update x/net to v0.7.0 #52
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-14073: UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #24
• Full changelog

insights-operator

• OCPBUGS-14318: gather PDBs only from openshift namespaces (#786) #786
• Full changelog

ironic

• OCPBUGS-13587: Add python-flask dependency #372
• Full changelog

kube-proxy, sdn

• OCPBUGS-14278: fix possible concurrent map read/write #550
• Full changelog

machine-api-operator

• OCPBUGS-12626: Update golang.org/x/net dependency #1148
• Full changelog

machine-config-operator

• OCPBUGS-13311: daemon: write certs in firstboot-complete path #3702
• OCPBUGS-13404, OCPBUGS-14298: Dockerfile: pin to nmstate-2.2.9-6.rhaos4.13.el8 #3716
• OCPBUGS-14850: Allow userfaultfd syscall to be used by unprivileged users #3743
• Full changelog

oc-mirror

• OCPBUGS-13871: fix: changes on help info content (#654) #654
• Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#637) #637
• Full changelog

ovirt-csi-driver-operator

• OCPBUGS-14653: set upgrade condition of operator to false #118
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-14979: Validate port before deleting conntrack flow #1712
• OCPBUGS-15140: Fix stale SNAT entries for completed pods #1715
• OCPBUGS-14482: Dockerfiles: sync RHEL9 dockerfiles to regular unused ones #1695
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-12672: update golang.org/x/net #237
• Full changelog

tests

• OCPBUGS-5029: [release-4.13] OpenStack: Restore in-tree cinder provisioner tests #27827
• Full changelog

vsphere-problem-detector

• OCPBUGS-14571: Check all storage classes including CSI storageclasses #120
• OCPBUGS-14098: In UPI clusters VSphere platform could be nil #118
• OCPBUGS-14085: Log vcenter version information #117
• Full changelog

---

View changelog in Markdown or change previous release: 4.13.0-0.okd-2023-06-04-0803004.13.0-0.okd-2023-05-22-0520074.12.0-0.okd-2023-04-16-0413314.12.0-0.okd-2023-04-01-0517244.12.0-0.okd-2023-03-18-0848154.12.0-0.okd-2023-03-05-0225044.12.0-0.okd-2023-02-18-0334384.12.0-0.okd-2023-02-04-2129534.12.0-0.okd-2023-01-21-0559004.11.0-0.okd-2023-01-14-1524304.11.0-0.okd-2022-12-02-1456404.11.0-0.okd-2022-11-19-0500304.11.0-0.okd-2022-11-05-0307114.11.0-0.okd-2022-10-28-1533524.11.0-0.okd-2022-10-15-0736514.11.0-0.okd-2022-08-20-0229194.11.0-0.okd-2022-07-29-1541524.10.0-0.okd-2022-07-09-0736064.10.0-0.okd-2022-06-24-2129054.10.0-0.okd-2022-06-10-1313274.10.0-0.okd-2022-05-28-0621484.10.0-0.okd-2022-05-07-0218334.10.0-0.okd-2022-04-23-1313574.10.0-0.okd-2022-03-07-1312134.9.0-0.okd-2022-02-12-1408514.9.0-0.okd-2022-01-29-0355364.9.0-0.okd-2022-01-14-2301134.9.0-0.okd-2021-12-12-0258474.9.0-0.okd-2021-11-28-0357104.8.0-0.okd-2021-11-14-0524184.8.0-0.okd-2021-10-24-0617364.8.0-0.okd-2021-10-10-0301174.8.0-0.okd-2021-10-01-2218354.7.0-0.okd-2021-09-19-0132474.7.0-0.okd-2021-08-22-1636184.7.0-0.okd-2021-08-07-0630454.7.0-0.okd-2021-07-03-1909014.7.0-0.okd-2021-06-19-1915474.7.0-0.okd-2021-06-13-0907454.7.0-0.okd-2021-06-04-1910314.7.0-0.okd-2021-05-22-0500084.7.0-0.okd-2021-04-24-1034384.7.0-0.okd-2021-04-11-1244334.7.0-0.okd-2021-03-28-1520094.7.0-0.okd-2021-03-21-0941464.7.0-0.okd-2021-03-07-0908214.7.0-0.okd-2021-03-06-1249084.7.0-0.okd-2021-02-25-1447004.6.0-0.okd-2021-02-14-2053054.6.0-0.okd-2021-01-23-1325114.6.0-0.okd-2021-01-17-1857034.6.0-0.okd-2020-12-12-1353544.6.0-0.okd-2020-11-27-2001264.5.0-0.okd-2020-10-15-2354284.5.0-0.okd-2020-10-03-0124324.5.0-0.okd-2020-09-18-2026314.5.0-0.okd-2020-09-04-1807564.5.0-0.okd-2020-08-12-0205414.5.0-0.okd-2020-07-29-0703164.5.0-0.okd-2020-07-14-153706-ga4.5.0-0.okd-2020-07-12-134038-rc4.5.0-0.okd-2020-06-29-110348-beta64.4.0-0.okd-2020-05-23-055148-beta54.4.0-0.okd-2020-04-21-163702-beta44.4.0-0.okd-2020-04-16-074048-beta34.4.0-0.okd-2020-04-07-175212-beta24.4.0-0.okd-2020-03-28-092308-beta1───4.15.0-0.okd-scos-2023-09-26-1328174.15.0-0.okd-scos-2023-09-26-0855494.15.0-0.okd-scos-2023-09-26-0541014.15.0-0.okd-scos-2023-09-26-0226434.15.0-0.okd-scos-2023-09-25-2305234.15.0-0.okd-scos-2023-09-25-1812064.15.0-0.okd-scos-2023-09-25-041610───4.15.0-0.okd-2023-09-26-1048574.15.0-0.okd-2023-09-26-0527084.15.0-0.okd-2023-09-25-2313414.15.0-0.okd-2023-09-25-1812014.15.0-0.okd-2023-09-25-0416084.15.0-0.okd-2023-09-24-0357524.15.0-0.okd-2023-09-23-214909───4.14.0-0.okd-scos-2023-09-26-1152254.14.0-0.okd-scos-2023-09-26-0833364.14.0-0.okd-scos-2023-09-26-0231414.14.0-0.okd-scos-2023-09-25-1843374.14.0-0.okd-scos-2023-09-24-1817464.14.0-0.okd-scos-2023-09-24-1217484.14.0-0.okd-scos-2023-09-24-0135304.14.0-0.okd-scos-2023-09-23-2018254.14.0-0.okd-scos-2023-09-23-170359───4.14.0-0.okd-2023-09-26-1436394.14.0-0.okd-2023-09-26-0742484.14.0-0.okd-2023-09-26-0227384.14.0-0.okd-2023-09-25-1843374.14.0-0.okd-2023-09-24-1817464.14.0-0.okd-2023-09-24-1217494.14.0-0.okd-2023-09-24-0017494.14.0-0.okd-2023-09-23-180240───4.13.0-0.okd-scos-2023-09-26-0923144.13.0-0.okd-scos-2023-09-26-0609524.13.0-0.okd-scos-2023-09-25-2308124.13.0-0.okd-scos-2023-09-25-1412124.13.0-0.okd-scos-2023-09-24-2259514.13.0-0.okd-scos-2023-09-24-000706───4.13.0-0.okd-2023-09-26-1105114.13.0-0.okd-2023-09-26-0512294.13.0-0.okd-2023-09-25-2308134.13.0-0.okd-2023-09-25-1412124.13.0-0.okd-2023-09-24-2259514.13.0-0.okd-2023-09-24-0007064.13.0-0.okd-2023-09-23-161839───4.12.0-0.okd-scos-2023-09-26-0019004.12.0-0.okd-scos-2023-09-25-1917404.12.0-0.okd-scos-2023-09-23-1309204.12.0-0.okd-scos-2023-09-22-1212424.12.0-0.okd-scos-2023-09-22-111242───4.12.0-0.okd-2023-09-26-0019004.12.0-0.okd-2023-09-25-1917404.12.0-0.okd-2023-09-23-1309204.12.0-0.okd-2023-09-22-1212424.12.0-0.okd-2023-09-22-111242───4.11.0-0.okd-2023-09-26-0559004.11.0-0.okd-2023-09-25-1724594.11.0-0.okd-2023-09-22-1302154.11.0-0.okd-2023-09-20-1234514.11.0-0.okd-2023-09-16-162632───4.10.0-0.okd-2023-09-26-1041584.10.0-0.okd-2023-09-22-1636324.10.0-0.okd-2023-09-17-1116324.10.0-0.okd-2023-09-17-0047224.10.0-0.okd-2023-09-12-104933───4.9.0-0.okd-2023-08-26-1230464.9.0-0.okd-2023-08-07-2357434.9.0-0.okd-2023-08-04-0546134.9.0-0.okd-2023-08-03-0142254.9.0-0.okd-2023-07-28-203600───4.8.0-0.okd-2023-07-28-0331014.8.0-0.okd-2023-07-15-0327544.8.0-0.okd-2023-04-19-2112164.8.0-0.okd-2023-02-23-1645104.8.0-0.okd-2023-02-11-1545274.8.0-0.okd-2021-06-19-2215444.8.0-0.okd-2021-05-22-0538244.8.0-0.okd-2021-05-04-030843───4.7.0-0.okd-2023-09-17-0430194.7.0-0.okd-2023-09-13-1747374.7.0-0.okd-2023-08-23-1349034.7.0-0.okd-2023-07-31-1831494.7.0-0.okd-2023-07-28-1136314.7.0-0.okd-2021-02-23-121606───4.6.0-0.okd-2023-08-02-1800324.6.0-0.okd-2023-07-28-0821524.6.0-0.okd-2023-07-28-0433114.6.0-0.okd-2023-07-28-0226014.6.0-0.okd-2023-07-27-190557───4.5.0-0.okd-2022-08-24-0734294.5.0-0.okd-2022-05-25-1630394.5.0-0.okd-2022-05-25-0220374.5.0-0.okd-2022-04-03-0734004.5.0-0.okd-2021-08-18-1452474.5.0-0.okd-2021-06-22-1813044.5.0-0.okd-2021-06-16-1401464.5.0-0.okd-2021-06-02-1817214.5.0-0.okd-2021-05-18-1748454.5.0-0.okd-2021-04-29-2056274.5.0-0.okd-2021-04-21-1810334.5.0-0.okd-2021-01-22-1200064.5.0-0.okd-2021-01-22-0900284.5.0-0.okd-2021-01-22-0725474.5.0-0.okd-2021-01-22-0443464.5.0-0.okd-2020-07-14-1537064.5.0-0.okd-2020-07-12-1340384.5.0-0.okd-2020-06-29-110348───4.4.0-0.okd-2023-06-01-0735124.4.0-0.okd-2023-05-19-0735454.4.0-0.okd-2023-04-01-0735244.4.0-0.okd-2022-10-15-0734334.4.0-0.okd-2022-04-03-0733594.4.0-0.okd-2021-03-10-0906554.4.0-0.okd-2021-02-22-0741034.4.0-0.okd-2021-02-11-2321594.4.0-0.okd-2021-02-04-0403384.4.0-0.okd-2021-02-04-0211284.4.0-0.okd-2020-05-23-0551484.4.0-0.okd-2020-04-21-1637024.4.0-0.okd-2020-04-16-0740484.4.0-0.okd-2020-04-07-1752124.4.0-0.okd-2020-03-28-0923084.4.0-0.okd-2020-01-28-022517───4.13.0-0.okd-scos-2023-09-07-0553534.13.0-0.okd-scos-2023-08-16-0639144.13.0-0.okd-scos-2023-07-07-0434174.13.0-0.okd-scos-2023-06-23-0414574.13.0-0.okd-scos-2023-06-22-0028524.13.0-0.okd-scos-2023-05-25-0858224.12.0-0.okd-scos-2023-04-14-0529314.12.0-0.okd-scos-2023-03-23-2136044.12.0-0.okd-scos-2023-02-14-0601094.12.0-0.okd-scos-2022-12-02-0837404.12.0-0.okd-scos-2022-10-25-053756───4.14.0-0.okd-scos-2023-09-07-0454454.14.0-0.okd-scos-2023-08-17-0220294.14.0-0.okd-scos-2023-05-23-2245404.13.0-0.okd-scos-2023-05-04-1922524.13.0-0.okd-scos-2023-03-29-1248244.13.0-0.okd-scos-2023-02-13-084859

Source code for this page located on github