# 4.13.3 Created: 2023-06-08 11:58:26 +0000 UTC Image Digest: `sha256:2bf60fe7b0c72a301aa26544e3faabb61fe750e449ee130ee6945b588a727e67` Promoted from registry.ci.openshift.org/ocp-ppc64le/release-ppc64le:4.13.0-0.nightly-ppc64le-2023-06-07-053649 ## Changes from 4.13.2 ### Components * Kubernetes 1.26.5 * Red Hat Enterprise Linux CoreOS upgraded from 413.92.202305302312-0 to 413.92.202306070210-0 ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [8db33dbd](https://github.com/openshift/assisted-service/commit/8db33dbd81fe23f2a7f2ec69231b23015e2ae53b) `sha256:6ca9683ec9960a2e9f0a26a876f4f8563314403118718a69fbfa944bd7b8482f` * [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [6160d183](https://github.com/openshift/assisted-installer/commit/6160d18379195ac3f65ab3898429936a95522fd0) `sha256:45783e817eac8aa242d203dfaff9ed82792d69881eb4981b2edebbc0bf83ceb7` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:8a98c5324a9ce23955fbea3b65a797ab8be78aee5f2379b346296cb5b5fbd7c6` * [kuryr-cni](https://github.com/openshift/kuryr-kubernetes) git [3055dbe2](https://github.com/openshift/kuryr-kubernetes/commit/3055dbe26667d6cf2d1f452a7dd97ca2113b606d) `sha256:234f6ad5ff94000249b6f6f500a1be868e5a1aa2a57ba48945db7dc3ecb4e4c2` * [kuryr-controller](https://github.com/openshift/kuryr-kubernetes) git [3055dbe2](https://github.com/openshift/kuryr-kubernetes/commit/3055dbe26667d6cf2d1f452a7dd97ca2113b606d) `sha256:89131c5d39eacdb3ef00973f6bfa116a5009f1e10ecdc4005a1cfc91e81a3c6d` * machine-os-content `sha256:4a77ebc93fc99d198ccdd4887df4ce843e5da513e29994fc34424327f672af2c` * [machine-os-images](https://github.com/openshift/machine-os-images) git [b14856ff](https://github.com/openshift/machine-os-images/commit/b14856ffbc8fbe1f986cf1b7b835bbeaa786ce5e) `sha256:758eb536209a77c000b458a18f340e536594d2520a5d80c16d520867acf79133` * [must-gather](https://github.com/openshift/must-gather) git [5eca0cb6](https://github.com/openshift/must-gather/commit/5eca0cb65ea6dd13f907d1f7493ed237f07e3906) `sha256:1e1d1775c9da54528eeeb76fe60f142abbfbdfd594cf8b5698218178068b4369` * [network-tools](https://github.com/openshift/network-tools) git [b4098c67](https://github.com/openshift/network-tools/commit/b4098c67659217e36ac7077229b25bbe2c3e5f38) `sha256:cd24d548e117b3ca550cb91a06233e071f9bc5ae47480ce0c92e3c8efca7d2e3` * [ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes) git [a6952360](https://github.com/openshift/ovn-kubernetes/commit/a69523609f7bbfa2a487e0d1bef52e194c282f90) `sha256:0f048b256203ada0a1b0363e90cb1aa8a7a2f848b6952af8b568e586944b5f44` * rhel-coreos `sha256:ac9a7686d021312b5e6fece8e5d6b810c7eaf2b7ab0aad26f7ab5b64abcd269d` * rhel-coreos-extensions `sha256:eb552b25788b4f5cc0f1381ea057041b575e40ba8e18b73a6ae3684b8c0e94f4` ### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/7a891f05c7beb9527024c7616d95f6ff5c309f27) * [OCPBUGS-13747](https://issues.redhat.com/browse/OCPBUGS-13747): 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1580](https://github.com/openshift/kubernetes/pull/1580) * [Full changelog](https://github.com/openshift/kubernetes/compare/0001a21b5c48ec2befb79e06949a0db8120ea413...7a891f05c7beb9527024c7616d95f6ff5c309f27) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/90bb61f38881d07ce94368f0b34089d152ffa4ef) * [OCPBUGS-13765](https://issues.redhat.com/browse/OCPBUGS-13765): Support /dev/disk/by-path root device hints [#7193](https://github.com/openshift/installer/pull/7193) * [OCPBUGS-14171](https://issues.redhat.com/browse/OCPBUGS-14171): Ignore IAM Roles that the Installer is not authorized to access [#7210](https://github.com/openshift/installer/pull/7210) * [OCPBUGS-11530](https://issues.redhat.com/browse/OCPBUGS-11530): [release-4.13] add project filter to gcp usage api requests [#7045](https://github.com/openshift/installer/pull/7045) * [Full changelog](https://github.com/openshift/installer/compare/b332f7a85441051e355521a121294436a032402c...90bb61f38881d07ce94368f0b34089d152ffa4ef) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/05d83eff7e17160e679898a2a5cd6019ec252c49) * [OCPBUGS-14249](https://issues.redhat.com/browse/OCPBUGS-14249): preserve explicit release image in ClusterVersion [#1435](https://github.com/openshift/oc/pull/1435) * [Full changelog](https://github.com/openshift/oc/compare/1024efcddde13f3a08dd1725f94d8b8bd7462b6a...05d83eff7e17160e679898a2a5cd6019ec252c49) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0621fcaf818f57ab05602259c1eb14db07b68dce) * [OCPBUGS-12565](https://issues.redhat.com/browse/OCPBUGS-12565): CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] [#543](https://github.com/openshift/cloud-credential-operator/pull/543) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d3b5ffa30529cfb744715145919b58de6872656f...0621fcaf818f57ab05602259c1eb14db07b68dce) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/64455eb66f17bb2c761ab529dbae76123f530d48) * [OCPBUGS-13011](https://issues.redhat.com/browse/OCPBUGS-13011): Add beta topology labels flag to Azure cloud node manager [#250](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/250) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ecb49c59ae21b6beb7c3071e80c5c847f1ba7fbe...64455eb66f17bb2c761ab529dbae76123f530d48) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/052f4163fdfc55043afcc499e25193c21348dee7) * [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#935](https://github.com/openshift/cluster-ingress-operator/pull/935) * [OCPBUGS-12918](https://issues.redhat.com/browse/OCPBUGS-12918): gatewayclass: Update for OSSM 2.4 API change [#917](https://github.com/openshift/cluster-ingress-operator/pull/917) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/7262c34b3a6434b49851ff5f0cceec87a2ee9706...052f4163fdfc55043afcc499e25193c21348dee7) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0e4a7e4b62076c911e385e4141698e74b43c12b3) * [OCPBUGS-12488](https://issues.redhat.com/browse/OCPBUGS-12488): go.mod: update golang.org/x/net to v0.7.0 [#1957](https://github.com/openshift/cluster-monitoring-operator/pull/1957) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4a992c336804d87b53d40124ce5ba210d9239dbc...0e4a7e4b62076c911e385e4141698e74b43c12b3) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/924fd3c589f0dc345807550965ef80099311b82a) * [OCPBUGS-14367](https://issues.redhat.com/browse/OCPBUGS-14367): High API requests due to allowlist and operconfig reconcilers running too often [#1824](https://github.com/openshift/cluster-network-operator/pull/1824) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/3ed6bef191d49ede92ab8f7f684826a1b7967928...924fd3c589f0dc345807550965ef80099311b82a) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/cbd341ba09c0f83ead652af6a8b17454fc2b5e9e) * [OCPBUGS-14331](https://issues.redhat.com/browse/OCPBUGS-14331): Fix updating numa core siblings map in GetCpuSiblings function (#669) [#669](https://github.com/openshift/cluster-node-tuning-operator/pull/669) * render: remove uid from render-sync target (#594) (#609) [#594](https://github.com/openshift/cluster-node-tuning-operator/pull/594) * Remove cpu-quota.crio.io: disable annotation (#670) [#670](https://github.com/openshift/cluster-node-tuning-operator/pull/670) * Add PerformanceProfiles to 'oc adm must-gather' (#657) [#657](https://github.com/openshift/cluster-node-tuning-operator/pull/657) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7333da210d37eedcb3e1829bce5f6136d006d12d...cbd341ba09c0f83ead652af6a8b17454fc2b5e9e) ### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd) * Adding the new CI Signer public key [#50](https://github.com/openshift/cluster-update-keys/pull/50) * [Full changelog](https://github.com/openshift/cluster-update-keys/compare/2796e1732615521e818be82663058e0a3f1b3941...5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd) ### [console](https://github.com/openshift/console/tree/9222e2a40746c41ea767b6600554005e2725f8cb) * [OCPBUGS-14258](https://issues.redhat.com/browse/OCPBUGS-14258): Add vSphere cluster field. [#12862](https://github.com/openshift/console/pull/12862) * [OCPBUGS-14195](https://issues.redhat.com/browse/OCPBUGS-14195): Topology UI doesn't recognize Serverless Rust function for proper UI icon [#12860](https://github.com/openshift/console/pull/12860) * [OCPBUGS-10527](https://issues.redhat.com/browse/OCPBUGS-10527): When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox [#12658](https://github.com/openshift/console/pull/12658) * [OCPBUGS-14165](https://issues.redhat.com/browse/OCPBUGS-14165): propagate labels to pipeline resources [#12856](https://github.com/openshift/console/pull/12856) * [Full changelog](https://github.com/openshift/console/compare/6f58e088705d4c66e10b1d418a115e295fa5ac7b...9222e2a40746c41ea767b6600554005e2725f8cb) ### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/f797d453f112aab86f3b7705c00ea871c2351d4a) * [OCPBUGS-12484](https://issues.redhat.com/browse/OCPBUGS-12484), [OCPBUGS-12527](https://issues.redhat.com/browse/OCPBUGS-12527), [OCPBUGS-14505](https://issues.redhat.com/browse/OCPBUGS-14505): Mitigating CVE-2022-41723 [#140](https://github.com/openshift/csi-driver-shared-resource/pull/140) * [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d4685ceb2b13ac6ce60e1b7997a99dea7173649d...f797d453f112aab86f3b7705c00ea871c2351d4a) ### [docker-builder](https://github.com/openshift/builder/tree/d02643e89631a31343c4c76e2004cd53c64acdf7) * [OCPBUGS-10002](https://issues.redhat.com/browse/OCPBUGS-10002), [OCPBUGS-8159](https://issues.redhat.com/browse/OCPBUGS-8159), [OCPBUGS-8191](https://issues.redhat.com/browse/OCPBUGS-8191): Mitigate CVE-2023-26054 [#348](https://github.com/openshift/builder/pull/348) * [Full changelog](https://github.com/openshift/builder/compare/72c106db1fbdec85f02477b86b02ca3dd8a873c6...d02643e89631a31343c4c76e2004cd53c64acdf7) ### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/efaf4dc692072338d472f086c9f691c71f4a028d) * [OCPBUGS-12603](https://issues.redhat.com/browse/OCPBUGS-12603): Bump x/net package to v0.10.0 [#32](https://github.com/openshift/cloud-provider-gcp/pull/32) * [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/9b7ca987656ad184730a6b430dcd846f5bc75db5...efaf4dc692072338d472f086c9f691c71f4a028d) ### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/eaeccca9082e1c02ad3422ff49e69cc595bd2ec6) * [OCPBUGS-12604](https://issues.redhat.com/browse/OCPBUGS-12604): Bump x/net package to v0.10.0 [#196](https://github.com/openshift/cluster-api-provider-gcp/pull/196) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/baf133cb8c200c1200363c97442382a9f9dab011...eaeccca9082e1c02ad3422ff49e69cc595bd2ec6) ### [haproxy-router](https://github.com/openshift/router/tree/065deab84f342615db2d2f5c78a19ae04bb43912) * [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#485](https://github.com/openshift/router/pull/485) * [Full changelog](https://github.com/openshift/router/compare/e28644631982fb4596e065d3ae85099f0886829d...065deab84f342615db2d2f5c78a19ae04bb43912) ### [hypershift](https://github.com/openshift/hypershift/tree/2e77f3e233285341ad92fdb9bd38ff7ce11457f0) * [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2652](https://github.com/openshift/hypershift/pull/2652) * Red Hat Trusted App Pipeline update hypershift-operator-release-413 [#2641](https://github.com/openshift/hypershift/pull/2641) * Red Hat Trusted App Pipeline purge hypershift [#2640](https://github.com/openshift/hypershift/pull/2640) * [OCPBUGS-13735](https://issues.redhat.com/browse/OCPBUGS-13735): Cluster-api SA can't create events and fix permissions wrongly included [#2610](https://github.com/openshift/hypershift/pull/2610) * [OCPBUGS-14242](https://issues.redhat.com/browse/OCPBUGS-14242): Remove external-dns --events flag [#2621](https://github.com/openshift/hypershift/pull/2621) * [OCPBUGS-14155](https://issues.redhat.com/browse/OCPBUGS-14155): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2613](https://github.com/openshift/hypershift/pull/2613) * [OCPBUGS-13399](https://issues.redhat.com/browse/OCPBUGS-13399): Fix errors from HCP controller removeServiceCAAnnotationAndSecret() [#2552](https://github.com/openshift/hypershift/pull/2552) * [HOSTEDCP-1010](https://issues.redhat.com/browse/HOSTEDCP-1010): Set ETCD Storage Size as immutable field and equalised the default size among both api versions [#2611](https://github.com/openshift/hypershift/pull/2611) * [Full changelog](https://github.com/openshift/hypershift/compare/3cf83fa9a3cc2090b00b7e1cfac435959e594fb3...2e77f3e233285341ad92fdb9bd38ff7ce11457f0) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a) * [OCPBUGS-14278](https://issues.redhat.com/browse/OCPBUGS-14278): fix possible concurrent map read/write [#550](https://github.com/openshift/sdn/pull/550) * [Full changelog](https://github.com/openshift/sdn/compare/d56dc6a393cf250704d2c4914c09533525caafba...97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/370fdaa43c6964e2af6abbde2bf37789de509bec) * [OCPBUGS-12626](https://issues.redhat.com/browse/OCPBUGS-12626): Update golang.org/x/net dependency [#1148](https://github.com/openshift/machine-api-operator/pull/1148) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/a23baf767a80a2a7e467be1c8ef9b32d40c66825...370fdaa43c6964e2af6abbde2bf37789de509bec) ### [multus-cni](https://github.com/openshift/multus-cni/tree/38444d9e21e8a9793a382c82c7d12d01381e5c55) * [OCPBUGS-8398](https://issues.redhat.com/browse/OCPBUGS-8398): Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] [#154](https://github.com/openshift/multus-cni/pull/154) * [Full changelog](https://github.com/openshift/multus-cni/compare/fd7b8b0017dd69fc3437799601312fdb260aeea2...38444d9e21e8a9793a382c82c7d12d01381e5c55) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/6667a6cbf9a87331fcc4407375118c0bb884c925) * [OCPBUGS-14276](https://issues.redhat.com/browse/OCPBUGS-14276): Bump k8s to 1.26.5 [#26](https://github.com/openshift/route-controller-manager/pull/26) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/d7a8e22db412b6fabb7028ca0da8de8f3d9ac3c3...6667a6cbf9a87331fcc4407375118c0bb884c925) ### [tests](https://github.com/openshift/origin/tree/f210c2da9130c61196dde41a3b2d16e8a392e974) * [OCPBUGS-14342](https://issues.redhat.com/browse/OCPBUGS-14342): Increase timeout in sysctl allowlist test [#27956](https://github.com/openshift/origin/pull/27956) * [Full changelog](https://github.com/openshift/origin/compare/3a41eb376d8e6ac8accd05318e983b2b55d6f485...f210c2da9130c61196dde41a3b2d16e8a392e974)