# 4.13.3

Created: 2023-06-08 11:58:26 +0000 UTC

Image Digest: `sha256:c26d48b04d8864fc20145204b543957824d1d86696c82efdd9738d096796326d`

Promoted from registry.ci.openshift.org/ocp-s390x/release-s390x:4.13.0-0.nightly-s390x-2023-06-07-053647


## Changes from 4.13.2

### Components

* Kubernetes 1.26.5
* Red Hat Enterprise Linux CoreOS upgraded from 413.92.202305302312-0 to 413.92.202306070210-0


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [8db33dbd](https://github.com/openshift/assisted-service/commit/8db33dbd81fe23f2a7f2ec69231b23015e2ae53b) `sha256:19b0b859029870542a16b291635e70a02c04e420adec0f69b795f27c8b7cfce9`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [6160d183](https://github.com/openshift/assisted-installer/commit/6160d18379195ac3f65ab3898429936a95522fd0) `sha256:56af6bbe9c2510f6ad29fb5beb5b0dc9d00dcfdf2b5a095e80386287b139ab22`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [d719bdcf](https://github.com/openshift/driver-toolkit/commit/d719bdcfa49bc18b729117ee513a86a1ddecb63a) `sha256:b6a56357c202111ae442ea6fab721e745ccc9e572dce61dc8c4782eabc1f12ec`
* machine-os-content `sha256:780ff87c2a87c72e40379b22b7f72a920af15c3bcf636fd4d41e33fe542169f5`
* [must-gather](https://github.com/openshift/must-gather) git [5eca0cb6](https://github.com/openshift/must-gather/commit/5eca0cb65ea6dd13f907d1f7493ed237f07e3906) `sha256:fc8e8df36d9b0b7cceb4a63e4b2093c8c2007823c948f67a65fcc1184f507851`
* [network-tools](https://github.com/openshift/network-tools) git [b4098c67](https://github.com/openshift/network-tools/commit/b4098c67659217e36ac7077229b25bbe2c3e5f38) `sha256:e05f2b5b6e35f5e0262efc8648aa60ce911a37a387a1f2f876f252a180a54403`
* [ovn-kubernetes-rhel-9](https://github.com/openshift/ovn-kubernetes) git [a6952360](https://github.com/openshift/ovn-kubernetes/commit/a69523609f7bbfa2a487e0d1bef52e194c282f90) `sha256:1e26486eb64692ea6df29c48e17cca74ef36511e03923b344fd2389bea9fb560`
* rhel-coreos `sha256:5fd92e80574877d4fc1c551e8dc4fe6d30dcfea4d6b3003558eec489c7892896`
* rhel-coreos-extensions `sha256:912b1ccec1124e52d8b53b77930ad86650956d87087432d4b9665490f93bfca2`


### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kuryr-cni, kuryr-controller, machine-image-customization-controller, machine-os-images, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/7a891f05c7beb9527024c7616d95f6ff5c309f27)

* [OCPBUGS-13747](https://issues.redhat.com/browse/OCPBUGS-13747): 4.13: kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1580](https://github.com/openshift/kubernetes/pull/1580)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0001a21b5c48ec2befb79e06949a0db8120ea413...7a891f05c7beb9527024c7616d95f6ff5c309f27)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/90bb61f38881d07ce94368f0b34089d152ffa4ef)

* [OCPBUGS-13765](https://issues.redhat.com/browse/OCPBUGS-13765): Support /dev/disk/by-path root device hints [#7193](https://github.com/openshift/installer/pull/7193)
* [OCPBUGS-14171](https://issues.redhat.com/browse/OCPBUGS-14171): Ignore IAM Roles that the Installer is not authorized to access [#7210](https://github.com/openshift/installer/pull/7210)
* [OCPBUGS-11530](https://issues.redhat.com/browse/OCPBUGS-11530): [release-4.13] add project filter to gcp usage api requests [#7045](https://github.com/openshift/installer/pull/7045)
* [Full changelog](https://github.com/openshift/installer/compare/b332f7a85441051e355521a121294436a032402c...90bb61f38881d07ce94368f0b34089d152ffa4ef)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/05d83eff7e17160e679898a2a5cd6019ec252c49)

* [OCPBUGS-14249](https://issues.redhat.com/browse/OCPBUGS-14249): preserve explicit release image in ClusterVersion [#1435](https://github.com/openshift/oc/pull/1435)
* [Full changelog](https://github.com/openshift/oc/compare/1024efcddde13f3a08dd1725f94d8b8bd7462b6a...05d83eff7e17160e679898a2a5cd6019ec252c49)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0621fcaf818f57ab05602259c1eb14db07b68dce)

* [OCPBUGS-12565](https://issues.redhat.com/browse/OCPBUGS-12565): CVE-2022-41723 ose-cloud-credential-operator-container: net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding [openshift-4] [#543](https://github.com/openshift/cloud-credential-operator/pull/543)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/d3b5ffa30529cfb744715145919b58de6872656f...0621fcaf818f57ab05602259c1eb14db07b68dce)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/64455eb66f17bb2c761ab529dbae76123f530d48)

* [OCPBUGS-13011](https://issues.redhat.com/browse/OCPBUGS-13011): Add beta topology labels flag to Azure cloud node manager [#250](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/ecb49c59ae21b6beb7c3071e80c5c847f1ba7fbe...64455eb66f17bb2c761ab529dbae76123f530d48)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/052f4163fdfc55043afcc499e25193c21348dee7)

* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#935](https://github.com/openshift/cluster-ingress-operator/pull/935)
* [OCPBUGS-12918](https://issues.redhat.com/browse/OCPBUGS-12918): gatewayclass: Update for OSSM 2.4 API change [#917](https://github.com/openshift/cluster-ingress-operator/pull/917)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/7262c34b3a6434b49851ff5f0cceec87a2ee9706...052f4163fdfc55043afcc499e25193c21348dee7)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/0e4a7e4b62076c911e385e4141698e74b43c12b3)

* [OCPBUGS-12488](https://issues.redhat.com/browse/OCPBUGS-12488): go.mod: update golang.org/x/net to v0.7.0 [#1957](https://github.com/openshift/cluster-monitoring-operator/pull/1957)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4a992c336804d87b53d40124ce5ba210d9239dbc...0e4a7e4b62076c911e385e4141698e74b43c12b3)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/924fd3c589f0dc345807550965ef80099311b82a)

* [OCPBUGS-14367](https://issues.redhat.com/browse/OCPBUGS-14367): High API requests due to allowlist and operconfig reconcilers running too often [#1824](https://github.com/openshift/cluster-network-operator/pull/1824)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/3ed6bef191d49ede92ab8f7f684826a1b7967928...924fd3c589f0dc345807550965ef80099311b82a)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/cbd341ba09c0f83ead652af6a8b17454fc2b5e9e)

* [OCPBUGS-14331](https://issues.redhat.com/browse/OCPBUGS-14331): Fix updating numa core siblings map in GetCpuSiblings function (#669) [#669](https://github.com/openshift/cluster-node-tuning-operator/pull/669)
* render: remove uid from render-sync target (#594) (#609) [#594](https://github.com/openshift/cluster-node-tuning-operator/pull/594)
* Remove cpu-quota.crio.io: disable annotation (#670) [#670](https://github.com/openshift/cluster-node-tuning-operator/pull/670)
* Add PerformanceProfiles to 'oc adm must-gather' (#657) [#657](https://github.com/openshift/cluster-node-tuning-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7333da210d37eedcb3e1829bce5f6136d006d12d...cbd341ba09c0f83ead652af6a8b17454fc2b5e9e)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd)

* Adding the new CI Signer public key [#50](https://github.com/openshift/cluster-update-keys/pull/50)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/2796e1732615521e818be82663058e0a3f1b3941...5b725937d51e9f089c3f99e27e4ee77a6d2cbbcd)


### [console](https://github.com/openshift/console/tree/9222e2a40746c41ea767b6600554005e2725f8cb)

* [OCPBUGS-14258](https://issues.redhat.com/browse/OCPBUGS-14258): Add vSphere cluster field. [#12862](https://github.com/openshift/console/pull/12862)
* [OCPBUGS-14195](https://issues.redhat.com/browse/OCPBUGS-14195): Topology UI doesn't recognize Serverless Rust function for proper UI icon [#12860](https://github.com/openshift/console/pull/12860)
* [OCPBUGS-10527](https://issues.redhat.com/browse/OCPBUGS-10527): When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox [#12658](https://github.com/openshift/console/pull/12658)
* [OCPBUGS-14165](https://issues.redhat.com/browse/OCPBUGS-14165): propagate labels to pipeline resources [#12856](https://github.com/openshift/console/pull/12856)
* [Full changelog](https://github.com/openshift/console/compare/6f58e088705d4c66e10b1d418a115e295fa5ac7b...9222e2a40746c41ea767b6600554005e2725f8cb)


### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/f797d453f112aab86f3b7705c00ea871c2351d4a)

* [OCPBUGS-12484](https://issues.redhat.com/browse/OCPBUGS-12484), [OCPBUGS-12527](https://issues.redhat.com/browse/OCPBUGS-12527), [OCPBUGS-14505](https://issues.redhat.com/browse/OCPBUGS-14505): Mitigating CVE-2022-41723 [#140](https://github.com/openshift/csi-driver-shared-resource/pull/140)
* [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/d4685ceb2b13ac6ce60e1b7997a99dea7173649d...f797d453f112aab86f3b7705c00ea871c2351d4a)


### [docker-builder](https://github.com/openshift/builder/tree/d02643e89631a31343c4c76e2004cd53c64acdf7)

* [OCPBUGS-10002](https://issues.redhat.com/browse/OCPBUGS-10002), [OCPBUGS-8159](https://issues.redhat.com/browse/OCPBUGS-8159), [OCPBUGS-8191](https://issues.redhat.com/browse/OCPBUGS-8191): Mitigate CVE-2023-26054 [#348](https://github.com/openshift/builder/pull/348)
* [Full changelog](https://github.com/openshift/builder/compare/72c106db1fbdec85f02477b86b02ca3dd8a873c6...d02643e89631a31343c4c76e2004cd53c64acdf7)


### [haproxy-router](https://github.com/openshift/router/tree/065deab84f342615db2d2f5c78a19ae04bb43912)

* [OCPBUGS-13964](https://issues.redhat.com/browse/OCPBUGS-13964), [OCPBUGS-13967](https://issues.redhat.com/browse/OCPBUGS-13967): Handle mTLS CRLs, and fix accidental CRL duplication [#485](https://github.com/openshift/router/pull/485)
* [Full changelog](https://github.com/openshift/router/compare/e28644631982fb4596e065d3ae85099f0886829d...065deab84f342615db2d2f5c78a19ae04bb43912)


### [hypershift](https://github.com/openshift/hypershift/tree/2e77f3e233285341ad92fdb9bd38ff7ce11457f0)

* [HOSTEDCP-1009](https://issues.redhat.com/browse/HOSTEDCP-1009): Allow external-dns image to be set in install cli [#2652](https://github.com/openshift/hypershift/pull/2652)
* Red Hat Trusted App Pipeline update hypershift-operator-release-413 [#2641](https://github.com/openshift/hypershift/pull/2641)
* Red Hat Trusted App Pipeline purge hypershift [#2640](https://github.com/openshift/hypershift/pull/2640)
* [OCPBUGS-13735](https://issues.redhat.com/browse/OCPBUGS-13735): Cluster-api SA can't create events and fix permissions wrongly included [#2610](https://github.com/openshift/hypershift/pull/2610)
* [OCPBUGS-14242](https://issues.redhat.com/browse/OCPBUGS-14242): Remove external-dns --events flag [#2621](https://github.com/openshift/hypershift/pull/2621)
* [OCPBUGS-14155](https://issues.redhat.com/browse/OCPBUGS-14155): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2613](https://github.com/openshift/hypershift/pull/2613)
* [OCPBUGS-13399](https://issues.redhat.com/browse/OCPBUGS-13399): Fix errors from HCP controller removeServiceCAAnnotationAndSecret() [#2552](https://github.com/openshift/hypershift/pull/2552)
* [HOSTEDCP-1010](https://issues.redhat.com/browse/HOSTEDCP-1010): Set ETCD Storage Size as immutable field and equalised the default size among both api versions [#2611](https://github.com/openshift/hypershift/pull/2611)
* [Full changelog](https://github.com/openshift/hypershift/compare/3cf83fa9a3cc2090b00b7e1cfac435959e594fb3...2e77f3e233285341ad92fdb9bd38ff7ce11457f0)


### [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm/tree/59edd923386b36f2cad99150b7fd11fb7bbb1688)

* [OCPBUGS-12612](https://issues.redhat.com/browse/OCPBUGS-12612): Update x/net to v0.7.0 [#52](https://github.com/openshift/cloud-provider-ibm/pull/52)
* [Full changelog](https://github.com/openshift/cloud-provider-ibm/compare/1640c42033631b3e8847c9867772666e898dfd01...59edd923386b36f2cad99150b7fd11fb7bbb1688)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/bb253a0c607f7d1f8139ffd401bd6c9c432090d1)

* [OCPBUGS-12616](https://issues.redhat.com/browse/OCPBUGS-12616): Bump x/net to v0.7.0 [#23](https://github.com/openshift/machine-api-provider-ibmcloud/pull/23)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/c75f7e3e7a3b7525aa2d540f86fd7477e7800608...bb253a0c607f7d1f8139ffd401bd6c9c432090d1)


### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a)

* [OCPBUGS-14278](https://issues.redhat.com/browse/OCPBUGS-14278): fix possible concurrent map read/write [#550](https://github.com/openshift/sdn/pull/550)
* [Full changelog](https://github.com/openshift/sdn/compare/d56dc6a393cf250704d2c4914c09533525caafba...97336cd4cc0bd4ab592cf2f8ac7143edd5623e1a)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/370fdaa43c6964e2af6abbde2bf37789de509bec)

* [OCPBUGS-12626](https://issues.redhat.com/browse/OCPBUGS-12626): Update golang.org/x/net dependency [#1148](https://github.com/openshift/machine-api-operator/pull/1148)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/a23baf767a80a2a7e467be1c8ef9b32d40c66825...370fdaa43c6964e2af6abbde2bf37789de509bec)


### [multus-cni](https://github.com/openshift/multus-cni/tree/38444d9e21e8a9793a382c82c7d12d01381e5c55)

* [OCPBUGS-8398](https://issues.redhat.com/browse/OCPBUGS-8398): Multus entrypoint should regenerate kubeconfig if secret changes [backport 4.13] [#154](https://github.com/openshift/multus-cni/pull/154)
* [Full changelog](https://github.com/openshift/multus-cni/compare/fd7b8b0017dd69fc3437799601312fdb260aeea2...38444d9e21e8a9793a382c82c7d12d01381e5c55)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/6667a6cbf9a87331fcc4407375118c0bb884c925)

* [OCPBUGS-14276](https://issues.redhat.com/browse/OCPBUGS-14276): Bump k8s to 1.26.5 [#26](https://github.com/openshift/route-controller-manager/pull/26)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/d7a8e22db412b6fabb7028ca0da8de8f3d9ac3c3...6667a6cbf9a87331fcc4407375118c0bb884c925)


### [tests](https://github.com/openshift/origin/tree/f210c2da9130c61196dde41a3b2d16e8a392e974)

* [OCPBUGS-14342](https://issues.redhat.com/browse/OCPBUGS-14342): Increase timeout in sysctl allowlist test [#27956](https://github.com/openshift/origin/pull/27956)
* [Full changelog](https://github.com/openshift/origin/compare/3a41eb376d8e6ac8accd05318e983b2b55d6f485...f210c2da9130c61196dde41a3b2d16e8a392e974)