Back to index

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.13.0-0.okd-2023-10-28-065448

Team Approvals:

No tests for this release

Upgrades from:

• 4.13.0-0.okd-2023-10-28-013842 (changes) - Success
• 4.13.0-0.okd-2023-09-30-084937 - F F S
• 4.13.0-0.okd-2023-09-03-082426 (changes) - F F S F F F
• 4.13.0-0.okd-2023-08-18-135805 (changes) - Failed Failed
• 4.13.0-0.okd-2023-08-04-164726 (changes) - Failed Failed
• 4.13.0-0.okd-2023-07-23-051208 (changes) - Failed Failed

Upgrades to:

• 4.14.0-0.okd-2024-01-06-084517 (changes) - Failed Success
• 4.14.0-0.okd-2023-11-14-101924 (changes) - F S F
• 4.14.0-0.okd-2023-11-12-042703 (changes) - Success Success
• 4.14.0-0.okd-2023-10-28-073550 (changes) - Success Failed

---

Changes from 4.13.0-0.okd-2023-09-30-084937

Created: 2023-10-28 14:50:49 +0000 UTC

Image Digest: sha256:29e8ad18b5d011c3fd8275ec9aad5964e4dcfd0138d229f2917acfcbefde930c

Release 4.13.0-0.okd-2023-10-28-065448 was created from registry.ci.openshift.org/origin/release:4.13.0-0.okd-2023-10-28-065448

Components

• Kubernetes 1.26.9
• Fedora CoreOS upgraded from 38.20230902.3 to 38.20231002.3

Rebuilt images without code change

• alibaba-machine-controllers git 4c0f96a6 sha256:c9e4be5bee409a3a95d937c836cb4449b01244bd626e9bf00578ac66ec7c03be
• cluster-openshift-controller-manager-operator git 9a8aba8c sha256:ae840b5328bb94129128f15063422a271e71139639f29a7d36a0808dfbe618b4
• coredns git 598440f5 sha256:dd286a23ab14a2f262b67a76f23414a36bfbd7466f8ae94ba59dff659d3e270f
• csi-driver-shared-resource-operator git 1dc475bb sha256:9516f81718d17ea3ac6a6305d56f3f65b112ab1edb229580172d19fa4415c90f
• docker-builder git 1fec8a28 sha256:4e0392c1a9795fbe207cdf9eede1725213649520d532318ec405a68cd715faf0
• etcd git 7efbc019 sha256:de0a331fb5dc22642b6ba67d5777b5b80baf1cac349151e08479f45703814178
• k8s-prometheus-adapter git 8ebc578d sha256:7ead341c92e3dfdb0282473b7c640c1afa39a84d9a8a2a25c827ddc08ff97d7d
• libvirt-machine-controllers git d4b7a8ab sha256:9137b7a88653a9b8fc03fa77d79ac119843c57d8cb01d291bf704982b6c3c177
• openshift-controller-manager git 385057e5 sha256:b3433c1da485162602f6430d163d792f77f82b04bbbefbc01a20bd23443f009c

alibaba-cloud-csi-driver

• OCPBUGS-21329: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37
• Full changelog

alibaba-disk-csi-driver-operator

• OCPBUGS-21428: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #65
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-20939: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #240
• Full changelog

aws-ebs-csi-driver-operator

• OCPBUGS-21034: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #281
• Full changelog

azure-disk-csi-driver

• OCPBUGS-20688: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #55
• Full changelog

azure-file-csi-driver

• OCPBUGS-20862: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #38
• Full changelog

azure-file-csi-driver-operator

• OCPBUGS-20964: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #77
• Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

• OCPBUGS-19307: Implement workaround to allow SNO installations for OKD/FCOS #7480
• OCPBUGS-18787: vSphere set bootstrap/master efi #7481
• OCPBUGS-19320: [release-4.13] for vsphere ipi add cluster domain to the uploaded vm configs so that… #7498
• OCPBUGS-20141: [release-4.13] Use updated ansible-core for Openstack image #7559
• Full changelog

baremetal-machine-controllers

• OCPBUGS-21701: Uplift x/net to v0.17.0 #199
• Full changelog

baremetal-operator

• OCPBUGS-21167: Uplift x/net to v0.17.0 #309
• Full changelog

baremetal-runtimecfg

• OCPBUGS-20081: Increase timeout for bootstrap kubeapi #278
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-20298: Use quay redis image instead docker mysql #1566
• OCPBUGS-19942: Truncate existing files when writing from inspect #1553
• Full changelog

cluster-baremetal-operator

• OCPBUGS-20867: Uplift x/net to v0.17.0 #370
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-20482: fix: e2e: add gcp custom type to test framework #249
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-21461: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #168
• Full changelog

cluster-dns-operator

• OCPBUGS-21534: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #390
• Full changelog

cluster-etcd-operator

• OCPBUGS-20488: prioritize podman pull in etcdctl dl #1136
• OCPBUGS-19378: [4.13] Backports of backup/restore fixes #1117
• Full changelog

cluster-ingress-operator

• OCPBUGS-20781: Bump golang.org/x/net for CVE-2023-44487 #987
• OCPBUGS-22402: test/e2e: Don’t use openshift/origin-node #991
• Full changelog

cluster-monitoring-operator

• OCPBUGS-21250: upgrade golang.org/x/net to v0.17.0 #2122
• OCPBUGS-22099: Extend remote write test timeout #2127
• Full changelog

cluster-network-operator

• OCPBUGS-19894: remove prestop hooks for northd, sbdbd and nbdb #2001
• Full changelog

cluster-node-tuning-operator

• Use RHEL9 as a base (#829) #829
• OCPBUGS-17943: Add rtentsk plugin to pp tuned profile Signed-off-by: Brent Rowsell <browsell@redhat.com> (#796) #796
• nto: avoid timeout when there are too many CSV (#818) #818
• OCPBUGS-19459: check for object being nil (#820) #820
• Full changelog

cluster-platform-operators-manager

• OCPBUGS-20998: [release-4.13] Bump golang.org/x/net to v0.17.0 #97
• Full changelog

cluster-samples-operator

• OCPBUGS-22390: Sync library to remove invalid dockerhub references for OKD #521
• Full changelog

cluster-storage-operator

• OCPBUGS-21284: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #406
• Full changelog

cluster-version-operator

• OCPBUGS-19472: Reconcile Volumes in SCCs and flag Upgradeable=False when detecting modified SCC #969
• OCPBUGS-20321: pkg/cvo/sync_worker: Always enable the DeploymentConfig capability #981
• OCPBUGS-19828: pkg/clusterconditions/promql: Warm cache with 1s delay #974
• OCPBUGS-20263: pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #980
• Full changelog

console

• OCPBUGS-19532: use active namespace in Create cta href of create action for operator backed #13179
• OCPBUGS-18271: update the KnativeServing API version to v1beta1 for global-config extension #13112
• OCPBUGS-20232: show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13224
• OCPBUGS-20231: fetch TaskRuns without selector and reduces the get TaskRuns requests #13223
• OCPBUGS-20330: Check if filtered object contains name property #13227
• OCPBUGS-13285: add multipath device type to LocalVolumeSet #12804
• OCPBUGS-17481: Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13083
• Full changelog

console-operator

• OCPBUGS-18972: Manual backport of #761 #793
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-20571: [release-4.13] CARRY: Add DOWNSTREAM_OWNERS #228
• OCPBUGS-20133: FastFix: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.26 into release-4.13 #221
• Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

• OCPBUGS-20719: bump golang.org/x/net to v0.17.0 #147
• Full changelog

csi-external-attacher

• OCPBUGS-21161: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #61
• Full changelog

csi-external-provisioner

• OCPBUGS-20759: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #73
• Full changelog

csi-external-resizer

• OCPBUGS-20908: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #148
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-21011: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #110
• Full changelog

csi-livenessprobe

• OCPBUGS-20636: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• Full changelog

csi-node-driver-registrar

• OCPBUGS-20686: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #53
• Full changelog

fedora-coreos, machine-os-content, okd-rpms

• Bump fedora-coreos to latest stable #677
• Bump fedora-coreos to latest stable #672
• Bump fedora-coreos to latest stable #669
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-20735: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #46
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-20827: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #88
• Full changelog

haproxy-router

• OCPBUGS-21117: Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 #531
• Full changelog

hyperkube, pod

• openshift-hack: Fix sporadic 141 errors in build-rpms #1773
• OCPBUGS-20114: UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels #1746
• OCPBUGS-21063: [release-4.13] UPSTREAM: 121126: [1.26][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 #1759
• OCPBUGS-19885: UPSTREAM: 120789: change rolling update logic to exclude sunsetting nodes #1725
• Full changelog

ibm-vpc-block-csi-driver

• OCPBUGS-21230: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-21319: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #82
• OCPBUGS-18143: [IBM VPC] failed provisioning volume in proxy cluster #76
• Full changelog

ibm-vpc-node-label-updater

• OCPBUGS-21432: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #28
• Full changelog

insights-operator

• Add cherry-pick from 4.14 (#848) #848
• OCPBUGS-19476: update Insights report config logging (#828) #828
• Full changelog

kube-proxy, sdn

• OCPBUGS-14504: Use the ovsver build arg to infer the openvswitch short version number #572
• Full changelog

kube-rbac-proxy

• OCPBUGS-20702: v0.15.0 downstream release 4.13 #84
• Full changelog

machine-config-operator

• OCPBUGS-22412: bootstrap_test: always set APIVersion and Kind for DNS #4002
• OCPBUGS-21721: install/0000_90_machine-config-operator_90_deletion: Drop this file #3983
• OCPBUGS-20333: resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3962
• OCPBUGS-18803: Soften grep pattern for ingress default router #3908
• OCPBUGS-19958: [release-4.13] Backport logspam PRs #3950
• Full changelog

machine-image-customization-controller

• OCPBUGS-21549: Uplift x/net to v0.17.0 #105
• Full changelog

olm-rukpak

• OCPBUGS-21363: [release-4.13] Bump golang.org/x/net to v0.17.0 #40
• UPSTREAM: <carry>: add downstream owners #42
• Full changelog

openstack-cinder-csi-driver-operator

• OCPBUGS-21565: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #136
• Full changelog

operator-lifecycle-manager, operator-registry

• OCPBUGS-22133: [release-4.13] Bump golang.org/x/net to v0.17.0 #589
• Full changelog

operator-marketplace

• OCPBUGS-20977: [release-4.13] bump golang.org/x/net to 0.17.0 #549
• Full changelog

ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9

• OCPBUGS-14314: Fix compilation error in e2e.go tests due to missing int32 parameter #1682
• OCPBUGS-20047: Adjust python ssl library dependency check #1924
• OCPBUGS-18976: Update bridge flow cache when the host address changes #1873
• OCPBUGS-18791, OCPBUGS-18792, OCPBUGS-19088, OCPBUGS-7406: Dockerfile: bump OVN to ovn23.06-23.06.1-8.el9fdp #1880
• Full changelog

powervs-block-csi-driver

• OCPBUGS-21089: CVE-2023-39325 - Update net dependencies - 4.13 #52
• Update OWNERS add yussufsh #54
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-21186: CVE-2023-39325 - Update net dependencies - 4.13 #41
• Update OWNERS add yussufsh #45
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-21280: CVE-2023-39325 - Update net dependencies - 4.13 #46
• Full changelog

powervs-machine-controllers

• OCPBUGS-21880: CVE-2023-39325 - Bump golang.org/x/net to v0.17.0 - 4.13 #55
• Full changelog

telemeter

• OCPBUGS-21327: [release-4.13]: Bump golang.org/x/net to v0.17.0 #485
• Full changelog

tests

• OCPBUGS-19378: [4.13] backport etcd restore tests #28267
• Bug OCPBUGS-17469: Correct condition for rejecting connection #28151
• OCPBUGS-20361: Update image stream test to create a manifest list image by default #28318
• Full changelog

thanos

• OCPBUGS-21157: Bump golang.org/x/net to v0.17.0 #125
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-21561: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #91
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-21434: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #174
• Full changelog

vsphere-problem-detector

• OCPBUGS-21577: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #130
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-0.okd-scos-2024-11-21-0211394.18.0-0.okd-scos-2024-11-20-1411384.18.0-0.okd-scos-2024-11-20-0209584.18.0-0.okd-scos-2024-11-19-1409574.18.0-0.okd-scos-2024-11-19-0209564.18.0-0.okd-scos-2024-11-18-140955───4.17.0-0.okd-scos-2024-11-20-2214034.17.0-0.okd-scos-2024-11-20-1014034.17.0-0.okd-scos-2024-11-19-2214034.17.0-0.okd-scos-2024-11-19-1014034.17.0-0.okd-scos-2024-11-18-2214034.17.0-0.okd-scos-2024-11-18-101403───4.16.0-0.okd-scos-2024-11-21-0014434.16.0-0.okd-scos-2024-11-20-1214434.16.0-0.okd-scos-2024-11-20-0014434.16.0-0.okd-scos-2024-11-19-1214434.16.0-0.okd-scos-2024-11-19-0014434.16.0-0.okd-scos-2024-11-18-121443───4.15.0-0.okd-scos-2024-05-13-2236094.15.0-0.okd-scos-2024-04-25-1837084.15.0-0.okd-scos-2024-04-25-0637084.15.0-0.okd-scos-2024-04-24-1837084.15.0-0.okd-scos-2024-04-24-0637084.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2024-11-14-2031284.15.0-0.okd-2024-11-09-0406444.15.0-0.okd-2024-11-08-1606444.15.0-0.okd-2024-11-05-1344204.15.0-0.okd-2024-11-05-0144204.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github