# 4.13.1

Created: 2023-05-25 08:25:20 +0000 UTC

Image Digest: `sha256:dbc768473b99538c15a35ea1be7ff656a6ac01e5001af4fac117c51f461c6054`

Promoted from registry.ci.openshift.org/ocp-s390x/release-s390x:4.13.0-0.nightly-s390x-2023-05-24-014456


## Changes from 4.13.0

### Components

* Kubernetes 1.26.3
* Red Hat Enterprise Linux CoreOS upgraded from 413.92.202305041429-0 to 413.92.202305231734-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [e8de0582](https://github.com/openshift/assisted-installer-agent/commit/e8de0582db56699d32653df02241c4a104755e1b) `sha256:efa3abda7dfbc249c451ef3402ec794f18c7ffa6d0578d8aa4632dc5b81f0112`
* [docker-builder](https://github.com/openshift/builder) git [72c106db](https://github.com/openshift/builder/commit/72c106db1fbdec85f02477b86b02ca3dd8a873c6) `sha256:71c9bc076dc3a3d1cbc4752a415e0f3ac520df91a3a44a793b02ae48acd57223`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:d9d93761986da3428ad4e9358ba6eff57e165e78feb61517274e16466616161f`
* [haproxy-router](https://github.com/openshift/router) git [e2864463](https://github.com/openshift/router/commit/e28644631982fb4596e065d3ae85099f0886829d) `sha256:2216f66f2e8ddd2f1e4d736a9781517fc949beb9cd33d0e50df81e2f323f730c`
* machine-os-content `sha256:5f3c8af32309c0d11cd2503ae5326b6dcc32e5efa7ec86aa3fb84a43488bd9f6`
* [network-tools](https://github.com/openshift/network-tools) git [b4098c67](https://github.com/openshift/network-tools/commit/b4098c67659217e36ac7077229b25bbe2c3e5f38) `sha256:7339582b8bdf73b370a730b070b1ab6ef78aede0a6abc5cfa457207f4f330fde`
* rhel-coreos `sha256:cbb713920e81f901aedd118b75d039b93b86e3bf9137d389db4f889e691701cb`
* rhel-coreos-extensions `sha256:a01376bd114474c0520b96a1adeff20645e0bf5f1afae65c527d832e762ecc76`
* [tests](https://github.com/openshift/origin) git [893ae575](https://github.com/openshift/origin/commit/893ae5755c21bfabe8042f6e885dda7d80671b5c) `sha256:9b03ee4d2f53aa4e0fc4d5b07a96b35479e1a92aa736cb1e0d723e2f166be2c5`
* [tools](https://github.com/openshift/oc) git [92b1a3d0](https://github.com/openshift/oc/commit/92b1a3d0e5d092430b523f6541aa0c504b2222b3) `sha256:4c238c62dc8beb625d36527462fc9f22c8337dd93f0e87faf7e86f043b96a9b6`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8db33dbd81fe23f2a7f2ec69231b23015e2ae53b)

* [OCPBUGS-13083](https://issues.redhat.com/browse/OCPBUGS-13083): Support by-path root device hints (#5213) [#5213](https://github.com/openshift/assisted-service/pull/5213)
* [OCPBUGS-13356](https://issues.redhat.com/browse/OCPBUGS-13356): Fix 'vendor' root device hint evaluation (#5204) [#5204](https://github.com/openshift/assisted-service/pull/5204)
* [Full changelog](https://github.com/openshift/assisted-service/compare/78fb9d5890a9e04091b70585a4a3fed735a6802c...8db33dbd81fe23f2a7f2ec69231b23015e2ae53b)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/2f227cc47f4e7ca6ed8edf0caf7c48283a82fc03)

* [OCPBUGS-11775](https://issues.redhat.com/browse/OCPBUGS-11775): Log additional info when status is pending-user-action [#7090](https://github.com/openshift/installer/pull/7090)
* [OCPBUGS-13086](https://issues.redhat.com/browse/OCPBUGS-13086): Bootstrap on aws should have same metadata service type as on other nodes [#7162](https://github.com/openshift/installer/pull/7162)
* [Full changelog](https://github.com/openshift/installer/compare/44db7b2959d97ecc9b7b14785ce092640fc87941...2f227cc47f4e7ca6ed8edf0caf7c48283a82fc03)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/d17c8bce1af351ffa1393026b0c75369a5cb0fa4)

* [OCPBUGS-12363](https://issues.redhat.com/browse/OCPBUGS-12363): release-4.13: Use same settings for provisioner and controller logs [#275](https://github.com/openshift/baremetal-operator/pull/275)
* [OCPBUGS-13082](https://issues.redhat.com/browse/OCPBUGS-13082): Allow by-path devices in root device hints [#277](https://github.com/openshift/baremetal-operator/pull/277)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/e037aa01c1b7b0438a34092b35aa1866a0d31851...d17c8bce1af351ffa1393026b0c75369a5cb0fa4)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/f0c1297c424d2ce8d20b376c488f8ada595b39b9)

* [OCPBUGS-13066](https://issues.redhat.com/browse/OCPBUGS-13066): Update x/net and parent dependencies [#246](https://github.com/openshift/baremetal-runtimecfg/pull/246)
* [OCPBUGS-13230](https://issues.redhat.com/browse/OCPBUGS-13230): Verify kubelet version in upgrade check [#248](https://github.com/openshift/baremetal-runtimecfg/pull/248)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/b9fbafdfd91950d644a6e219bdad514d97119837...f0c1297c424d2ce8d20b376c488f8ada595b39b9)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/d3b5ffa30529cfb744715145919b58de6872656f)

* [OCPBUGS-13692](https://issues.redhat.com/browse/OCPBUGS-13692): Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. [#538](https://github.com/openshift/cloud-credential-operator/pull/538)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/7f2d02b853be787815e2109d8b1a62736c9e2bf7...d3b5ffa30529cfb744715145919b58de6872656f)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/71ccef5299dc865106a86f6f514041dbe33086bb)

* [OCPBUGS-13127](https://issues.redhat.com/browse/OCPBUGS-13127): sync CloudPrivateIpConfig when node is missing [#106](https://github.com/openshift/cloud-network-config-controller/pull/106)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/224329c4bea49e726971f1bf4496bf7325e9acc3...71ccef5299dc865106a86f6f514041dbe33086bb)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/9740b7ebfb127dfaa251506714e6c8cb41f0ae2b)

* [OCPBUGS-13888](https://issues.redhat.com/browse/OCPBUGS-13888): fix double machine creation on stale cache [#208](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/208)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/98c3cdb13ff595b7f7bcf5d9d16901182b3b654f...9740b7ebfb127dfaa251506714e6c8cb41f0ae2b)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/56b970786d152344f0d4762c8271d20e5fc9d28b)

* [OCPBUGS-11353](https://issues.redhat.com/browse/OCPBUGS-11353): AWS should not use external-cloud-volume-plugin post CSI migration [#734](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/734)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/9f53628279a765cccb234b1ef992075ad7cddf96...56b970786d152344f0d4762c8271d20e5fc9d28b)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/1563f682454aa22db0ac381fb4616efa6931dea6)

* [OCPBUGS-13397](https://issues.redhat.com/browse/OCPBUGS-13397): Uncomment cluster:vsphere_infrastructure_failure_domains:max [#1962](https://github.com/openshift/cluster-monitoring-operator/pull/1962)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e537312288bb78e5da828ee763ca88ac620e0fc5...1563f682454aa22db0ac381fb4616efa6931dea6)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/3ed6bef191d49ede92ab8f7f684826a1b7967928)

* [OCPBUGS-11750](https://issues.redhat.com/browse/OCPBUGS-11750): fix reconciliation process of the allowlist controller [#1793](https://github.com/openshift/cluster-network-operator/pull/1793)
* [OCPBUGS-13155](https://issues.redhat.com/browse/OCPBUGS-13155): HyperShift: Support HostedControlPlane node selector [#1802](https://github.com/openshift/cluster-network-operator/pull/1802)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/fed9560d379fa9e178441642a69746a126ac39b5...3ed6bef191d49ede92ab8f7f684826a1b7967928)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/7333da210d37eedcb3e1829bce5f6136d006d12d)

* [OCPBUGS-11709](https://issues.redhat.com/browse/OCPBUGS-11709): pao e2e: skip hugepages and numa tests properly (#643) [#643](https://github.com/openshift/cluster-node-tuning-operator/pull/643)
* e2e: Fix RPS test for multi-worker cluster (#648) [#648](https://github.com/openshift/cluster-node-tuning-operator/pull/648)
* OCPBUGS-12978 use WatchNamespace() when deleting Profiles (#645) [#645](https://github.com/openshift/cluster-node-tuning-operator/pull/645)
* [OCPBUGS-11336](https://issues.redhat.com/browse/OCPBUGS-11336): pao e2e: fix update test suit timeouts (#642) [#642](https://github.com/openshift/cluster-node-tuning-operator/pull/642)
* Address CVE-2022-41723 (#633) [#633](https://github.com/openshift/cluster-node-tuning-operator/pull/633)
* [OCPBUGS-13148](https://issues.redhat.com/browse/OCPBUGS-13148): Configure cpu balancing cpu sets for all clusters (#647) [#647](https://github.com/openshift/cluster-node-tuning-operator/pull/647)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/fa37e0cb718a38a5b660f91a5cbe85aaf8632b37...7333da210d37eedcb3e1829bce5f6136d006d12d)


### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/4aa5ecd04fa2a35a5ae07a13707bd2e0239432a9)

* [OCPBUGS-13731](https://issues.redhat.com/browse/OCPBUGS-13731): external template and route Informer [#112](https://github.com/openshift/cluster-policy-controller/pull/112)
* [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/20a47733b59ba746aa3c6410dca2d1a1ab6339de...4aa5ecd04fa2a35a5ae07a13707bd2e0239432a9)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/6479617c1e9e92cc664d0e8c26ba62191320f4e4)

* [OCPBUGS-13004](https://issues.redhat.com/browse/OCPBUGS-13004): OCPBUGS-13005: 4.13: bump prometheus [#367](https://github.com/openshift/cluster-storage-operator/pull/367)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/31bcbc4dd67fc855fa7e3fd4a6e64c04fbf13382...6479617c1e9e92cc664d0e8c26ba62191320f4e4)


### [console](https://github.com/openshift/console/tree/6f58e088705d4c66e10b1d418a115e295fa5ac7b)

* [OCPBUGS-13959](https://issues.redhat.com/browse/OCPBUGS-13959): Wait with CRD/model translation until i18n bundles are loaded [#12842](https://github.com/openshift/console/pull/12842)
* [OCPBUGS-13783](https://issues.redhat.com/browse/OCPBUGS-13783): fix runtime error on OperatorHub details pages [#12830](https://github.com/openshift/console/pull/12830)
* [OCPBUGS-12770](https://issues.redhat.com/browse/OCPBUGS-12770): fix buildconfig form ns [#12776](https://github.com/openshift/console/pull/12776)
* [OCPBUGS-12850](https://issues.redhat.com/browse/OCPBUGS-12850): add support for minimal status of tekton [#12784](https://github.com/openshift/console/pull/12784)
* [OCPBUGS-12740](https://issues.redhat.com/browse/OCPBUGS-12740): update helm release empty state text [#12773](https://github.com/openshift/console/pull/12773)
* [Full changelog](https://github.com/openshift/console/compare/a551d28102f9e0d014d41215fdd1d8df4fc404dd...6f58e088705d4c66e10b1d418a115e295fa5ac7b)


### [console-operator](https://github.com/openshift/console-operator/tree/c5f3b24448f6a7bf5dd5d145008df85e04ec5968)

* [OCPBUGS-12461](https://issues.redhat.com/browse/OCPBUGS-12461): Add new PrometheusRule to collect metrics for cluster-monitoring-operator [#758](https://github.com/openshift/console-operator/pull/758)
* [OCPBUGS-12722](https://issues.redhat.com/browse/OCPBUGS-12722): Proper cleanup of route sync conditions [#759](https://github.com/openshift/console-operator/pull/759)
* [Full changelog](https://github.com/openshift/console-operator/compare/0ce3d0bf42f4820633159be84c5255f9e2584f08...c5f3b24448f6a7bf5dd5d145008df85e04ec5968)


### [hypershift](https://github.com/openshift/hypershift/tree/3f61d88560660a04c860f2cb5fb355b8fb9142b8)

* [OCPBUGS-13594](https://issues.redhat.com/browse/OCPBUGS-13594): Sync proxy TrustedCA to guest cluster [#2556](https://github.com/openshift/hypershift/pull/2556)
* fix nil deref in DefaultWorkerSecurityGroupID check [#2574](https://github.com/openshift/hypershift/pull/2574)
* [OCPBUGS-13215](https://issues.redhat.com/browse/OCPBUGS-13215): Let the aws endpoint to use the hypershift owned SG [#2529](https://github.com/openshift/hypershift/pull/2529)
* [OCPBUGS-13497](https://issues.redhat.com/browse/OCPBUGS-13497): Add internal/external elb tags to subnets [#2553](https://github.com/openshift/hypershift/pull/2553)
* [OCPBUGS-13531](https://issues.redhat.com/browse/OCPBUGS-13531): Clean up existing VPC endpoint connections [#2554](https://github.com/openshift/hypershift/pull/2554)
* Stop triggering rollout on labels/taint change [#2548](https://github.com/openshift/hypershift/pull/2548)
* Fixes HCCO reconcile error for kubevirt csi driver [#2538](https://github.com/openshift/hypershift/pull/2538)
* Fix kubevirt csi daemonset reconcile loop [#2542](https://github.com/openshift/hypershift/pull/2542)
* [HOSTEDCP-980](https://issues.redhat.com/browse/HOSTEDCP-980): Include HostedClusterDegraded in hypershift_hostedclusters_failure_conditions metric [#2525](https://github.com/openshift/hypershift/pull/2525)
* [Full changelog](https://github.com/openshift/hypershift/compare/cc7eae96384784620518b056107b6dacc0b09d9d...3f61d88560660a04c860f2cb5fb355b8fb9142b8)


### [insights-operator](https://github.com/openshift/insights-operator/tree/0babf2b1fa2d68eae51a578f40fcdfb722fe485a)

* [OCPBUGS-12618](https://issues.redhat.com/browse/OCPBUGS-12618): update golang.org/x/net version (#775) [#775](https://github.com/openshift/insights-operator/pull/775)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a44b2f181162678211a1e5785a1bd9a355a8d67e...0babf2b1fa2d68eae51a578f40fcdfb722fe485a)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/d56dc6a393cf250704d2c4914c09533525caafba)

* [OCPBUGS-12234](https://issues.redhat.com/browse/OCPBUGS-12234): CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [#536](https://github.com/openshift/sdn/pull/536)
* [OCPBUGS-13150](https://issues.redhat.com/browse/OCPBUGS-13150): EgressNetworkPolicy DNS resolution does not fall back to TCP [#540](https://github.com/openshift/sdn/pull/540)
* [Full changelog](https://github.com/openshift/sdn/compare/ebb16b342e311780f204b4e410cf3eeafd8a816b...d56dc6a393cf250704d2c4914c09533525caafba)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1ae3805822dfee3263bfd553d49fd36c648fbd12)

* [OCPBUGS-13138](https://issues.redhat.com/browse/OCPBUGS-13138): daemon: Don't traverse `/run/ostree/auth.json` symlink [#3697](https://github.com/openshift/machine-config-operator/pull/3697)
* [OCPBUGS-11302](https://issues.redhat.com/browse/OCPBUGS-11302): Fix regex dot in coredns config file [#3659](https://github.com/openshift/machine-config-operator/pull/3659)
* [OCPBUGS-12784](https://issues.redhat.com/browse/OCPBUGS-12784), [OCPBUGS-4476](https://issues.redhat.com/browse/OCPBUGS-4476): keepalived/ingress: change healthcheck script [#3687](https://github.com/openshift/machine-config-operator/pull/3687)
* [OCPBUGS-12919](https://issues.redhat.com/browse/OCPBUGS-12919): The MCD has a non-functional pivot command that should be removed [#3690](https://github.com/openshift/machine-config-operator/pull/3690)
* [OCPBUGS-10966](https://issues.redhat.com/browse/OCPBUGS-10966): configure-ovs: support UUID in vlan.parent [#3639](https://github.com/openshift/machine-config-operator/pull/3639)
* [OCPBUGS-13312](https://issues.redhat.com/browse/OCPBUGS-13312): daemon: event only on actual OS updates [#3703](https://github.com/openshift/machine-config-operator/pull/3703)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/70aa0a560c0b0a01093f695cb358a8749d30b3d2...1ae3805822dfee3263bfd553d49fd36c648fbd12)


### [multus-cni](https://github.com/openshift/multus-cni/tree/5d283fa3cf7f7e599c919ed7a37604f09df33062)

* [OCPBUGS-13814](https://issues.redhat.com/browse/OCPBUGS-13814): Fix multus to support CNI plugin which does not create interface [backport 4.13] [#163](https://github.com/openshift/multus-cni/pull/163)
* [Full changelog](https://github.com/openshift/multus-cni/compare/3f9b2d036b6cbc562aca9269bbeb7d0be198549c...5d283fa3cf7f7e599c919ed7a37604f09df33062)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/937b1e6a35d6b533a417b0c313cc0e498fffdd3b)

* [OCPBUGS-11881](https://issues.redhat.com/browse/OCPBUGS-11881): Ignore missing links during delete command [#49](https://github.com/openshift/bond-cni/pull/49)
* [Full changelog](https://github.com/openshift/bond-cni/compare/674f4753981739cff77f2ba05f203c2685a02c3f...937b1e6a35d6b533a417b0c313cc0e498fffdd3b)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/36f48b76303aea04f997cda658ca5e25841a079c)

* [OCPBUGS-12630](https://issues.redhat.com/browse/OCPBUGS-12630): Address CVE-2022-41723 [#71](https://github.com/openshift/machine-api-provider-openstack/pull/71)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/8b3f605f9fe185fe3e7e4018ce2231af5f08bd76...36f48b76303aea04f997cda658ca5e25841a079c)


### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/ce46f5b97e4838c4508f6dc471cabc1199a8f0b9)

* [OCPBUGS-13321](https://issues.redhat.com/browse/OCPBUGS-13321): OCPBUGS-1684: Optimize certificate generation [#488](https://github.com/openshift/operator-framework-olm/pull/488)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/3174a8afee20dad9df555e3cc1ab106c2dcd7e4e...ce46f5b97e4838c4508f6dc471cabc1199a8f0b9)


### [ovn-kubernetes-microshift-rhel-9, ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes/tree/db0dbadc1a409f40345e921e991bd3e22c55490a)

* [OCPBUGS-13170](https://issues.redhat.com/browse/OCPBUGS-13170): Fix bug that resulted in routes not be restored to a new vnic [#1668](https://github.com/openshift/ovn-kubernetes/pull/1668)
* [OCPBUGS-13598](https://issues.redhat.com/browse/OCPBUGS-13598): Call SyncEndpoints from AddService [#1672](https://github.com/openshift/ovn-kubernetes/pull/1672)
* [OCPBUGS-12725](https://issues.redhat.com/browse/OCPBUGS-12725): [release-4.13] Use loadbalancer.Name as client index [#1660](https://github.com/openshift/ovn-kubernetes/pull/1660)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/49f6f059507ed04116d91d8f9e8dadd6fd1978d9...db0dbadc1a409f40345e921e991bd3e22c55490a)


### [thanos](https://github.com/openshift/thanos/tree/43238be385374e76ca6148a6780ddff9ebca3d11)

* [OCPBUGS-12663](https://issues.redhat.com/browse/OCPBUGS-12663): go.mod: update golang.org/x/net to v0.7.0 [#109](https://github.com/openshift/thanos/pull/109)
* [Full changelog](https://github.com/openshift/thanos/compare/b6f11a5b2d63ca6269fcbd7b9488d8a8e9188d9a...43238be385374e76ca6148a6780ddff9ebca3d11)