Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.13.0-0.okd-2023-07-23-051208

No tests for this release

Upgrades from:

• 4.13.0-0.okd-2023-07-22-222250 (changes) - Failed Success
• 4.13.0-0.okd-2023-07-09-062029 - Success Failed
• 4.13.0-0.okd-2023-06-24-145750 (changes) - Failed Success
• 4.13.0-0.okd-2023-06-04-080300 (changes) - Success Failed
• 4.13.0-0.okd-2023-05-22-052007 (changes) - F F F S

Upgrades to:

• 4.13.0-0.okd-2023-10-28-065448 (changes) - Failed Failed
• 4.13.0-0.okd-2023-09-30-084937 (changes) - Success Success
• 4.13.0-0.okd-2023-09-03-082426 (changes) - Success Success
• 4.13.0-0.okd-2023-08-18-135805 (changes) - Success Failed
• 4.13.0-0.okd-2023-08-04-164726 (changes) - Success Failed

---

Changes from 4.13.0-0.okd-2023-07-09-062029

Created: 2023-07-23 05:30:15 +0000 UTC

Image Digest: sha256:f0e95c44ff7307fc4b3927ab2f1a9d30c2688f4e4ad3e8d702f04b1171bf84c6

Release 4.13.0-0.okd-2023-07-23-051208 was created from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-07-23-051208

Components

• Kubernetes 1.26.6
• Fedora CoreOS upgraded from 38.20230609.3 to 38.20230625.3

Rebuilt images without code change

• cloud-credential-operator git 0621fcaf sha256:e6e8368d2b86ef93e9772fa1f3396a2a04b4ade9f63d4c3b054465e84247b578
• csi-driver-manila git c59255a3 sha256:8dc30f879b05419608419e3104b80634c22dee1fbc12635af623963351a07b7f
• openstack-cinder-csi-driver git c59255a3 sha256:895545d90c2ddb2c635c02360b9404f681d094204e5b19b32147878c3e36d479
• openstack-cloud-controller-manager git c59255a3 sha256:5adcc2803df95260476a3204edb29aa0e12fd7c421aef06044a3fff6d0f3401e

agent-installer-api-server

• MGMT-15150: Use same installer binary for all platform types (#5346) #5346
• Full changelog

agent-installer-node-agent

• OCPBUGS-15557: vendor agent-installer-utils to v0.0.0-20230707155933-79b142ede77d (#565) #565
• Full changelog

alibaba-cloud-csi-driver

• OCPBUGS-16377: [release-4.13] UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #31
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-13036: 4.13: Bump (golang.org/x/net): to address CVE-2022-41723 #220
• Full changelog

azure-disk-csi-driver

• OCPBUGS-16318: 4.13: UPSTREAM: 1744: fix: CVE-2022-41723 #44
• Full changelog

azure-disk-csi-driver-operator

• OCPBUGS-16250: Add management workloads annotations #86
• Full changelog

azure-file-csi-driver

• OCPBUGS-16321: 4.13: UPSTREAM: 1211: fix: CVE-2022-41723 #30
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-15866: Use the same names for public LB in IPI and UPI Azure #7302
• OCPBUGS-16124: azure: skip LB creation when not needed #7322
• OCPBUGS-13812: ic: azure: validate diskTypes in AzureStack #7195
• OCPBUGS-15230: azure: skip NSG creation when BYO vnet #7263
• OCPBUGS-15591: [release-4.13] gcp: add confidential compute support for boostrap TF #7298
• Full changelog

baremetal-machine-controllers

• OCPBUGS-16084: Fix Metal3Remediation CRD install order #194
• Full changelog

baremetal-runtimecfg

• OCPBUGS-14487: Support IPv6 VIP for setup with multipe IPv6 addresses #259
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-16193: reboot: set ignition version to 3.1 #1508
• OCPBUGS-16172: Add tls-server-name when property exists in kubeconfig #1506
• Full changelog

cloud-network-config-controller

• OCPBUGS-15856: Azure: Handle already existing IP configurations #116
• Full changelog

cluster-authentication-operator

• OCPBUGS-15258: Correctly link oauth apiserver ServiceMonitor with its Service #617
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-15746: Alibaba platforms should not be upgradeable #260
• Full changelog

cluster-dns-operator

• OCPBUGS-11449: Enable topology-aware hints if, and only if, nodes have zones #367
• OCPBUGS-15225: Add support for protocolStrategy API field to enable force_tcp configuration #372
• Full changelog

cluster-monitoring-operator

• OCPBUGS-16023: Add the trusted CA bundle in UWM Prometheus pods #2041
• Full changelog

cluster-network-operator

• OCPBUGS-11539: Hypershift: Add RollingUpdate parameters to multus-admission-controller #1774
• OCPBUGS-15977: Add logic to pick the openshift-sdn shims from right directories #1880
• Full changelog

cluster-node-tuning-operator

• E2E: Add memory manager sanity test case (#573) (#695) #573
• Full changelog

cluster-storage-operator

• OCPBUGS-15378: decrease severity for MultipleDefaultStorageClasses alert #383
• Full changelog

cluster-version-operator

• OCPBUGS-16613: Add admin-gate ack-4.13-kube-1.27-api-removals-in-4.14 #948
• Full changelog

console

• OCPBUGS-15998: Upload JAR file does not work if the Cluster Samples Operator is disabled #12992
• OCPBUGS-15810: only show pipelines doc link for downstream #12981
• OCPBUGS-15982: get Kamelets from the camel-k-operator namespace as well #12988
• OCPBUGS-16244: Fix operator backed catalog page when copied CSVs disabled #13019
• OCPBUGS-15194: Remove tech preview badge from Pipeline repository pages #12916
• OCPBUGS-10326: re-enable operator-install-single-namespace.spec.ts test #12653
• OCPBUGS-15848: The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12976
• OCPBUGS-15890: Use proxy with web socket connection and monitoring dashboard #12978
• OCPBUGS-15720, OCPBUGS-15721, OCPBUGS-15722: Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12963
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump to latest fedora-coreos stable #630
• manifests: remove intel_pstate=disable, enforce cgroupsv2 #629
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-16331: 4.13: UPSTREAM: 1169: Fix CVE-2022-41723 #38
• Full changelog

hyperkube, pod

• OCPBUGS-15866: remove readiness check for cache exclusion #1625
• OCPBUGS-15866: UPSTREAM: <drop>: hack/update-vendor.sh #1637
• Full changelog

hypershift

• 4.13: Add management cluster KAS network policy #2786
• Leader election config update. #2801
• OCPBUGS-16160: fix deletion bug when hostedzone is already deleted #2813
• HOSTEDCP-1061: [release-4.13] Implement dedicated request serving nodes for HostedClusters #2809
• Update RHTAP references (release-4.13) #2816
• OCPBUGS-16057: use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2798
• OCPBUGS-14862 Improve clarity around hypershift operator permissions #2810
• HOSTEDCP-1101: Add snyk-secret HO RHTAP scripts #2799
• OCPBUGS-16125: [release-4.13] Update vendored dependencies #2797
• OCPBUGS-15774: autoscaling balance similar groups #2805
• OCPBUGS-15965: Reject VPCE Connections during VPCE Service cleanup #2789
• Full changelog

ironic

• Bug OCPBUGS-15235: Incrementing Ironic versions to include backported SNMPv3 FIPS fix. #383
• Full changelog

ironic-agent

• Switch to udevadm command install instead of package [OKD] #83
• Full changelog

kube-proxy, sdn

• OCPBUGS-15977: Dockerfile: keep a RHEL-8 CNI shim binary in the default /opt/cni/bin dir #558
• OCPBUGS-15977: Dockerfile changes to build both rhel8 and rhel9 binaries #557
• Full changelog

kuryr-cni, kuryr-controller

• Bug OCPBUGS-16340: Fix np retry #738
• Full changelog

machine-config-operator

• OCPNODE-1717: Update config node spec while explicitly updating the cgroups mode #3793
• 4.13: Revert rhel9 binaries builds #3802
• Full changelog

multus-networkpolicy

• OCPBUGS-12641: CVE-2022-41723: Update vendors to fix dependabot alerts #28
• Full changelog

multus-whereabouts-ipam-cni

• Bug 16002: Change default binary to RHEL8 image #144
• Restores RHEL specific binary build in dockerfile and updates to rhel9/8 #139
• Full changelog

network-interface-bond-cni

• Add rhel9 binary #56
• Full changelog

network-tools

• Dockerfile: move to RHEL9 base image #83
• Full changelog

oc-mirror

• OCPBUGS-16372: A variety of changes needed for correct operation with multi… (#661) #661
• Full changelog

operator-lifecycle-manager, operator-registry

• Allow cpb to be statically compiled / exempt from FIPS compliance #519
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-15368: [release-4.13]: initial pods are not wired for hybrid overlay #1721
• OCPBUGS-15651: Improve syncNodes to remove stale data #1731
• OCPBUGS-15586: [release-4.13]: Allow hostNetwork ingress for network policies with empty namespace selector #1745
• Full changelog

tests

• OCPBUGS-16164: allow cluster-config-operator to manage featuregate upgrade block #28050
• Full changelog

---

View changelog in Markdown or change previous release: 4.13.0-0.okd-2023-07-09-0620294.13.0-0.okd-2023-06-24-1457504.13.0-0.okd-2023-06-04-0803004.13.0-0.okd-2023-05-22-052007───4.17.0-0.okd-2024-04-22-104002───4.16.0-0.okd-scos-2024-04-27-0640054.16.0-0.okd-scos-2024-04-26-1840054.16.0-0.okd-scos-2024-04-26-0640054.16.0-0.okd-scos-2024-04-25-1840054.16.0-0.okd-scos-2024-04-25-0519224.16.0-0.okd-scos-2024-04-24-1719224.16.0-0.okd-scos-2024-04-23-2028384.16.0-0.okd-scos-2024-03-14-134315───4.16.0-0.okd-2024-04-27-0806114.16.0-0.okd-2024-04-26-2006114.16.0-0.okd-2024-04-26-0806114.16.0-0.okd-2024-04-25-2006114.16.0-0.okd-2024-04-25-0806114.16.0-0.okd-2024-04-24-2006114.16.0-0.okd-2024-03-27-0155364.16.0-0.okd-2024-03-26-1355364.16.0-0.okd-2024-03-26-0155364.16.0-0.okd-2024-03-25-1355364.16.0-0.okd-2024-03-23-225022───4.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-04-23-1633134.15.0-0.okd-scos-2024-01-18-2235234.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-04-27-0853234.15.0-0.okd-2024-04-26-2053234.15.0-0.okd-2024-04-26-0853234.15.0-0.okd-2024-04-25-2053234.15.0-0.okd-2024-04-23-2015564.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.14.0-0.okd-scos-2024-04-27-1336094.14.0-0.okd-scos-2024-04-26-1336094.14.0-0.okd-scos-2024-04-24-0815334.14.0-0.okd-scos-2024-04-23-0815334.14.0-0.okd-scos-2024-04-20-1242414.14.0-0.okd-scos-2024-04-19-1242414.14.0-0.okd-scos-2024-01-27-0937454.14.0-0.okd-scos-2024-01-26-0937454.14.0-0.okd-scos-2024-01-25-0937454.14.0-0.okd-scos-2024-01-24-093745───4.14.0-0.okd-2024-04-27-1335174.14.0-0.okd-2024-04-26-1335174.14.0-0.okd-2024-04-24-0817244.14.0-0.okd-2024-04-23-0817244.14.0-0.okd-2024-04-20-1254414.14.0-0.okd-2024-04-19-1254414.14.0-0.okd-2024-03-18-1648434.14.0-0.okd-2024-03-14-1137094.14.0-0.okd-2024-03-13-1137094.14.0-0.okd-2024-03-12-1137094.14.0-0.okd-2024-03-11-113709───4.13.0-0.okd-scos-2024-04-09-1520214.13.0-0.okd-scos-2024-03-12-1520214.13.0-0.okd-scos-2024-02-13-1520214.13.0-0.okd-scos-2024-01-16-1520214.13.0-0.okd-scos-2023-12-19-1520214.13.0-0.okd-scos-2023-12-19-0942084.13.0-0.okd-scos-2023-12-19-054611───4.13.0-0.okd-2024-04-09-1520224.13.0-0.okd-2024-03-12-1520224.13.0-0.okd-2024-02-13-1520224.13.0-0.okd-2024-01-16-1520224.13.0-0.okd-2023-12-19-152022───4.15.0-0.okd-scos-2024-01-18-2235234.15.0-0.okd-scos-2024-01-11-0323574.15.0-0.okd-scos-2023-12-21-0614374.15.0-0.okd-scos-2023-11-29-1143554.15.0-0.okd-scos-2023-11-10-1924314.14.0-0.okd-scos-2023-10-19-1232264.14.0-0.okd-scos-2023-10-11-0442584.14.0-0.okd-scos-2023-08-17-0220294.14.0-0.okd-scos-2023-05-23-2245404.13.0-0.okd-scos-2023-05-04-1922524.13.0-0.okd-scos-2023-03-29-1248244.13.0-0.okd-scos-2023-02-13-084859───4.14.0-0.okd-scos-2024-01-30-0325254.14.0-0.okd-scos-2024-01-10-1518184.14.0-0.okd-scos-2023-12-21-0732124.14.0-0.okd-scos-2023-11-10-0508464.13.0-0.okd-scos-2023-10-19-1112564.13.0-0.okd-scos-2023-10-11-0632524.13.0-0.okd-scos-2023-07-07-0434174.13.0-0.okd-scos-2023-06-23-0414574.13.0-0.okd-scos-2023-06-22-0028524.13.0-0.okd-scos-2023-05-25-085822

Source code for this page located on github