4.13.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.13.3-aarch64

Team Approvals:

Tests:

Informing jobs
- aws-sdn-serial-arm64 Succeeded periodic-ci-openshift-multiarch-master-nightly-4.13-ocp-e2e-sdn-serial-aws-arm64

Upgrades from:

Untested upgrades: 4.12.16, 4.12.17, 4.12.18, 4.12.19, 4.12.20, 4.12.21, 4.13.0, 4.13.1, 4.13.2

Upgrades to:

Changes from 4.13.2

Created: 2023-06-08 11:58:26 +0000 UTC

Image Digest: sha256:f61d496a3b69582f0f1c54da973a58241b3e6001d8d1a696368d604b9ae774f2

Release 4.13.3 was created from registry.ci.openshift.org/ocp-arm64/release-arm64:4.13.0-0.nightly-arm64-2023-06-07-061148

Components

Kubernetes 1.26.5
Red Hat Enterprise Linux CoreOS upgraded from 413.92.202305302312-0 to 413.92.202306070210-0 (diff)

Rebuilt images without code change

agent-installer-api-server git 8db33dbd sha256:b568e17e33b8ff0ff1b5dbd57302a119067dbba931a4e5481660c2e8e2f2bbcc
agent-installer-csr-approver git 6160d183 sha256:1ca67a5fc95fc154745c6acdfdd872849478a4d9950fb53ae9f175f27d39dd88
driver-toolkit git d719bdcf sha256:393604d959c1d7a501abfa8890594ce92ae2938741c48767d4b866fb49bdc481
ironic-machine-os-downloader git 2ba6060d sha256:c2d8562ac750965fdfe63274cde3644e868156a64ba99e4bf0f7c29f000d63ca
machine-os-content sha256:899912efa2e0cb6e07c785b5d8efd36d6d7433b1befe3ee274efc39db79556ba
machine-os-images git b14856ff sha256:5db066ed012c90506ff8ccbe90bc55e68f78f2c6b6f593a62848e01c1eaf28b6
must-gather git 5eca0cb6 sha256:9d71f4a8be698d9503778e1add6e1d03099f0b139395b8f1ae38f8d4097dc367
network-tools git b4098c67 sha256:1466ac0808b3ad037567bbcb05e370409d8336d781d1e4573a09437512f93134
ovn-kubernetes-rhel-9 git a6952360 sha256:61cc58cc9d3779cafa84092c516fcfbc8300ffacf44979977e8792a03dcc1223
rhel-coreos sha256:735d3ed204cb76aa34a881327f734f2a73cc1ac2c747c658ce09742a3221aa76
rhel-coreos-extensions sha256:4b22df68cd9f8879001791ec987e53c864dacf436bca39974e579c42b8ff662b

alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kuryr-cni, kuryr-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-13747: 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy #1580
Full changelog

aws-ebs-csi-driver

OCPBUGS-13811: Volume unmount repeats after successful unmount, preventing pod delete #225
Full changelog

aws-pod-identity-webhook

OCPBUGS-12555: Update builder to OCP4.13/go1.19 #164
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-13952: Update x/net package to v0.8.0 #68
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-13765: Support /dev/disk/by-path root device hints #7193
OCPBUGS-14171: Ignore IAM Roles that the Installer is not authorized to access #7210
OCPBUGS-11530: [release-4.13] add project filter to gcp usage api requests #7045
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-14249: preserve explicit release image in ClusterVersion #1435
Full changelog

cloud-credential-operator

OCPBUGS-12565: CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] #543
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-13011: Add beta topology labels flag to Azure cloud node manager #250
Full changelog

cluster-ingress-operator

OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #935
OCPBUGS-12918: gatewayclass: Update for OSSM 2.4 API change #917
Full changelog

cluster-monitoring-operator

OCPBUGS-12488: go.mod: update golang.org/x/net to v0.7.0 #1957
Full changelog

cluster-network-operator

OCPBUGS-14367: High API requests due to allowlist and operconfig reconcilers running too often #1824
Full changelog

cluster-node-tuning-operator

OCPBUGS-14331: Fix updating numa core siblings map in GetCpuSiblings function (#669) #669
render: remove uid from render-sync target (#594) (#609) #594
Remove cpu-quota.crio.io: disable annotation (#670) #670
Add PerformanceProfiles to ‘oc adm must-gather’ (#657) #657
Full changelog

cluster-update-keys

Adding the new CI Signer public key #50
Full changelog

console

OCPBUGS-14258: Add vSphere cluster field. #12862
OCPBUGS-14195: Topology UI doesn’t recognize Serverless Rust function for proper UI icon #12860
OCPBUGS-10527: When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox #12658
OCPBUGS-14165: propagate labels to pipeline resources #12856
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-12484, OCPBUGS-12527, OCPBUGS-14505: Mitigating CVE-2022-41723 #140
Full changelog

docker-builder

OCPBUGS-10002, OCPBUGS-8159, OCPBUGS-8191: Mitigate CVE-2023-26054 #348
Full changelog

gcp-cloud-controller-manager

OCPBUGS-12603: Bump x/net package to v0.10.0 #32
Full changelog

gcp-cluster-api-controllers

OCPBUGS-12604: Bump x/net package to v0.10.0 #196
Full changelog

haproxy-router

OCPBUGS-13964, OCPBUGS-13967: Handle mTLS CRLs, and fix accidental CRL duplication #485
Full changelog

hypershift

HOSTEDCP-1009: Allow external-dns image to be set in install cli #2652
Red Hat Trusted App Pipeline update hypershift-operator-release-413 #2641
Red Hat Trusted App Pipeline purge hypershift #2640
OCPBUGS-13735: Cluster-api SA can’t create events and fix permissions wrongly included #2610
OCPBUGS-14242: Remove external-dns –events flag #2621
OCPBUGS-14155: Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2613
OCPBUGS-13399: Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2552
HOSTEDCP-1010: Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2611
Full changelog

ironic

OCPBUGS-13587: Add python-flask dependency #372
OCPBUGS-14135: ironic.conf.j2: Bump min_command_interval to 30 on SCOS #378
Full changelog

ironic-static-ip-manager

OCPBUGS-14315: Flush addresses on provisioning interface with global scope only #36
Full changelog

kube-proxy, sdn

OCPBUGS-14278: fix possible concurrent map read/write #550
Full changelog

machine-api-operator

OCPBUGS-12626: Update golang.org/x/net dependency #1148
Full changelog

multus-cni

OCPBUGS-8398: Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] #154
Full changelog

route-controller-manager

OCPBUGS-14276: Bump k8s to 1.26.5 #26
Full changelog

tests

OCPBUGS-14342: Increase timeout in sysctl allowlist test #27956
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github