# 4.18.14

Created: 2025-05-16 16:14:18 +0000 UTC

Image Digest: `sha256:78c0475ba249e03b0ed5b3d3cca619020a2996fb75efb9e7b5a2d5972fbdac7c`


## Changes from 4.18.12

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.7 to 1.31.8
* Kubernetes Tests upgraded from 1.31.7 to 1.31.8
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202504291430-0 to 418.94.202505151852-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| ExternalOIDCWithUIDAndExtraClaimMappings <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [93463599](https://github.com/openshift/assisted-service/commit/9346359925bec817c0a193f5ff59b9c5a6616594) `sha256:bd12dea0f6825918e7098c39d381b663a821c610e7ebf1fceb200e14b3c6b21d`
* [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [92575979](https://github.com/openshift/assisted-installer/commit/92575979cc7d65303169444f2afce22d36f918ce) `sha256:8ea2a04022cd8eae1d8a63b9cc4d4d6170cf0fe25291bb7538b2fc211c4716e2`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [615411a4](https://github.com/openshift/assisted-installer-agent/commit/615411a4df7a54c536871533d7af22f666b4e2ab) `sha256:6816b5f3a4fc63f4b14a2a78aebc0c2ea5d4ec76023e832679d413feb7f167d5`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [3f6d1d8b](https://github.com/openshift/agent-installer-utils/commit/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d) `sha256:67ce51307fa2125f69e7df6d0a9d91de48e49f0ce99945baf8a52fa19734a7fe`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [c004ea7e](https://github.com/openshift/cluster-node-tuning-operator/commit/c004ea7ea486e983d296311ca2b40cc9a431c394) `sha256:f2e7b10810b05341846fa3463710ee8456a74b35dbce910b2835e1ca55f43a67`
* [docker-builder](https://github.com/openshift/builder) git [62f644bc](https://github.com/openshift/builder/commit/62f644bcf0b0010f51765b48a7dab28426ae2933) `sha256:406d0e79d40414216a50a417aeb5f3b262b6e226cd8dbf9739ae1909ebc1964f`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:4341fad46f04641d4f336ffe51c92ce93ea526c829f7afd8a6670c857f2ada17`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [6964fcc8](https://github.com/openshift/ironic-agent-image/commit/6964fcc8f8ee7a05410d0daae1369c2ea914f3be) `sha256:f4051bbd53aa3f95bae64974a0505ecf8e75cbd2b690904f492ef5b6968fb7ea`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [04c22eee](https://github.com/openshift/ironic-rhcos-downloader/commit/04c22eee43786b4a8bc53441b7e8173372251bd8) `sha256:2002d41789ca14128e2a730ce381768a43db71f6fd0b46f685fa22167cf8c4fb`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:42d3bba12c065fada2785e9af94f2908d986fb2a848115d433a251359f2b5e65`
* [metallb-frr](https://github.com/openshift/frr) git [98ccbe64](https://github.com/openshift/frr/commit/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) `sha256:3c5d5f4f7418fbcef8fd9a671282f854bb3219d973cc547fa2097ae156a6faff`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [eb6123bd](https://github.com/openshift/monitoring-plugin/commit/eb6123bd41269ccc6f5abddadfbc8e3af4481e09) `sha256:38d1a7ec008a58a450eb1ab3e780142eded88a5b74c7b5e89625db600b9f7c35`
* [must-gather](https://github.com/openshift/must-gather) git [c864494e](https://github.com/openshift/must-gather/commit/c864494e2b10793ec1de833ade2fda7afe6a7c88) `sha256:c7f5cfc815879790ab4d8463204c70bf7bcb39b9bf4b32102d1009ebcf4a6e4a`
* [network-tools](https://github.com/openshift/network-tools) git [f76635f2](https://github.com/openshift/network-tools/commit/f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f) `sha256:214235b1f8069c5e5e72917e467f971724d33fc6b56384174a32e9b38adbf5b0`
* rhel-coreos `sha256:88787af2ee0fa6bbd0064d5fc32a7c34f458d32c8c0768db8b52d0d1e298eae2`
* rhel-coreos-extensions `sha256:b378b80c6b56f24bd3843262c42faed4939199162e936393ef3884047aee9094`


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/c4935a5ec26f04b1f1ef0b5f21c61904d77b6b5a)

* [OCPBUGS-55373](https://issues.redhat.com/browse/OCPBUGS-55373): Update eviction policy for Spot VMs from Deallocate to Delete [#139](https://github.com/openshift/machine-api-provider-azure/pull/139)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b8bc2053066bace662f5fece646be7ea76bc3c72...c4935a5ec26f04b1f1ef0b5f21c61904d77b6b5a)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/dcee0567ad6d27fbc9b2631eb1b1010ad9d4f3e5)

* [OCPBUGS-50840](https://issues.redhat.com/browse/OCPBUGS-50840): Fix panic when there are no available IPs [#9479](https://github.com/openshift/installer/pull/9479)
* [OCPBUGS-55794](https://issues.redhat.com/browse/OCPBUGS-55794): IBI nmstate unit test fix [#9692](https://github.com/openshift/installer/pull/9692)
* [Full changelog](https://github.com/openshift/installer/compare/9357b668a760d53a34f7094840d1e9f773127441...dcee0567ad6d27fbc9b2631eb1b1010ad9d4f3e5)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/35f7af703663a7459e0bc494e69ed2cc80543d04)

* [OCPBUGS-55449](https://issues.redhat.com/browse/OCPBUGS-55449): Get installer image from configMap for node-image command [#2013](https://github.com/openshift/oc/pull/2013)
* [OCPBUGS-55647](https://issues.redhat.com/browse/OCPBUGS-55647): Use fedora image in unit tests instead of centos [#2014](https://github.com/openshift/oc/pull/2014)
* [Full changelog](https://github.com/openshift/oc/compare/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64...35f7af703663a7459e0bc494e69ed2cc80543d04)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/beacfbc2f2afa651616ad1c3c6712c511318a8d4)

* [OCPBUGS-56156](https://issues.redhat.com/browse/OCPBUGS-56156): Increase API call timeout to 30 second [#170](https://github.com/openshift/cloud-network-config-controller/pull/170)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f648c78dba768619f0c6e2120132ee1aeefb8571...beacfbc2f2afa651616ad1c3c6712c511318a8d4)


### [cluster-config-api](https://github.com/openshift/api/tree/d21e7b9699338d2d989fbe43523acf0bc6a9477c)

* [OCPBUGS-55792](https://issues.redhat.com/browse/OCPBUGS-55792): [release-4.18] config: add uid and extra claim mappings for external OIDC configuration [#2311](https://github.com/openshift/api/pull/2311)
* [OCPBUGS-53221](https://issues.redhat.com/browse/OCPBUGS-53221): Allow spaces in AWS resource tags [#2239](https://github.com/openshift/api/pull/2239)
* [Full changelog](https://github.com/openshift/api/compare/d6c84c55a124ab4bd96b1a18c916d3f314f1a95a...d21e7b9699338d2d989fbe43523acf0bc6a9477c)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2c2910d7c3095706aaf66ddbcf3c1a31285b3567)

* [OCPBUGS-56110](https://issues.redhat.com/browse/OCPBUGS-56110): adjust alerts according to platform [#1424](https://github.com/openshift/cluster-etcd-operator/pull/1424)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b355afe20310c9b2ae45f712980907c70d855bd8...2c2910d7c3095706aaf66ddbcf3c1a31285b3567)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)

* [OCPBUGS-55783](https://issues.redhat.com/browse/OCPBUGS-55783): Samples Operator should sort failing image imports [#638](https://github.com/openshift/cluster-samples-operator/pull/638)
* [OCPBUGS-55782](https://issues.redhat.com/browse/OCPBUGS-55782): only update LastTransitionTime if operator status change [#637](https://github.com/openshift/cluster-samples-operator/pull/637)
* [OCPBUGS-55781](https://issues.redhat.com/browse/OCPBUGS-55781): Adding filter to clusterOperatorInformerEventHandler [#636](https://github.com/openshift/cluster-samples-operator/pull/636)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/919d51f809c24ba2ab05d898ba165640af2c41af...5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/94c0e705d520b0eeb765f72de2dae2cd6f1159bb)

* [OCPBUGS-55359](https://issues.redhat.com/browse/OCPBUGS-55359): install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 [#1181](https://github.com/openshift/cluster-version-operator/pull/1181)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4...94c0e705d520b0eeb765f72de2dae2cd6f1159bb)


### [console](https://github.com/openshift/console/tree/75bc16449eff8deb67aec29a31baa9a1c01c467b)

* [OCPBUGS-55991](https://issues.redhat.com/browse/OCPBUGS-55991): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15043](https://github.com/openshift/console/pull/15043)
* [OCPBUGS-53172](https://issues.redhat.com/browse/OCPBUGS-53172): Include init containers in readiness count if ready and started is true [#14884](https://github.com/openshift/console/pull/14884)
* [OCPBUGS-54899](https://issues.redhat.com/browse/OCPBUGS-54899): Fetching taskRuns in PLR details page using PLR UID also [#14961](https://github.com/openshift/console/pull/14961)
* [OCPBUGS-54888](https://issues.redhat.com/browse/OCPBUGS-54888): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14959](https://github.com/openshift/console/pull/14959)
* [Full changelog](https://github.com/openshift/console/compare/4294cddb71d5ee70b6461163f6818b7272108a28...75bc16449eff8deb67aec29a31baa9a1c01c467b)


### [etcd](https://github.com/openshift/etcd/tree/72173bc741f97fa70e52bf9f34df9c23f7612c2d)

* [OCPBUGS-55724](https://issues.redhat.com/browse/OCPBUGS-55724): Add configurable option for hardware-related timeout delay [#328](https://github.com/openshift/etcd/pull/328)
* [Full changelog](https://github.com/openshift/etcd/compare/98b19154718fd94d4e8ad30824c00ba1de87cb78...72173bc741f97fa70e52bf9f34df9c23f7612c2d)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/d060f964d37d5ac94a75897551526703286b7ca1)

* UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… [#2283](https://github.com/openshift/kubernetes/pull/2283)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#2278](https://github.com/openshift/kubernetes/pull/2278)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0b8a68191de069deeca944e443a5ead7e0469b41...d060f964d37d5ac94a75897551526703286b7ca1)


### [hypershift](https://github.com/openshift/hypershift/tree/ab02c94ed951d38fbc454e580e838705b52fc393)

* [OCPBUGS-55177](https://issues.redhat.com/browse/OCPBUGS-55177): Don't check if olm images exist if guest cluster [#6065](https://github.com/openshift/hypershift/pull/6065)
* [OCPBUGS-55230](https://issues.redhat.com/browse/OCPBUGS-55230): Add annotation to configure KAS goaway-chance [#6066](https://github.com/openshift/hypershift/pull/6066)
* [Full changelog](https://github.com/openshift/hypershift/compare/430d602120077bf30c28b7f9fe860fe26e6fca8c...ab02c94ed951d38fbc454e580e838705b52fc393)


### [ironic](https://github.com/openshift/ironic-image/tree/9161a5fdb75042856bd40eec31bdba7b7c07d4a2)

* [OCPBUGS-55938](https://issues.redhat.com/browse/OCPBUGS-55938): Extract files one-by-one in logwatch [#657](https://github.com/openshift/ironic-image/pull/657)
* [Full changelog](https://github.com/openshift/ironic-image/compare/bc0800a6d184c4253ee18d7e8f68aecebe1b3393...9161a5fdb75042856bd40eec31bdba7b7c07d4a2)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/07d60583be4d6e29772b8490bb2ba3f410e03af9)

* [OCPBUGS-55383](https://issues.redhat.com/browse/OCPBUGS-55383): Leverage shared node.env for both AWS providerID and hostname units [#5008](https://github.com/openshift/machine-config-operator/pull/5008)
* [OCPBUGS-53427](https://issues.redhat.com/browse/OCPBUGS-53427): pkg/operator/status: Drop kubelet skew guard, add RHEL guard [#4956](https://github.com/openshift/machine-config-operator/pull/4956)
* [release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension [#5018](https://github.com/openshift/machine-config-operator/pull/5018)
* [OCPBUGS-54765](https://issues.redhat.com/browse/OCPBUGS-54765): [release-4.18] kubelet-service: narrow down restorecon path [#4978](https://github.com/openshift/machine-config-operator/pull/4978)
* [OCPBUGS-55428](https://issues.redhat.com/browse/OCPBUGS-55428): MSBIC should not update windows machinesets [#5012](https://github.com/openshift/machine-config-operator/pull/5012)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b927430d6bad82dc043dfd8f3a4d6bc362d1519e...07d60583be4d6e29772b8490bb2ba3f410e03af9)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/9404c2330085c3dd42504f34c608974ffb957d6e)

* [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#240](https://github.com/openshift/networking-console-plugin/pull/240)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/e98a404fa9d0d81f6c8e9aa38ca2ee775a81d083...9404c2330085c3dd42504f34c608974ffb957d6e)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/afe324bf56e0348fb45e5fbb9c832c1587482153)

* [OCPBUGS-51861](https://issues.redhat.com/browse/OCPBUGS-51861): fixing CVE-2025-22868 [#96](https://github.com/openshift/machine-api-provider-nutanix/pull/96)
* [OCPBUGS-54616](https://issues.redhat.com/browse/OCPBUGS-54616): Fix link-local addresses being added to machine [#101](https://github.com/openshift/machine-api-provider-nutanix/pull/101)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/7d0cb735f3e86c0828821cf54f8a40c74d9232aa...afe324bf56e0348fb45e5fbb9c832c1587482153)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/6b0882e21264b4efc463ccb646846037882a5551)

* [OCPBUGS-54626](https://issues.redhat.com/browse/OCPBUGS-54626): [release-4.18] cli: return distinct error codes depending on failure (#1125) [#1125](https://github.com/openshift/oc-mirror/pull/1125)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/594354393ad1774038e1951621bcde165fc13821...6b0882e21264b4efc463ccb646846037882a5551)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/214c4c29bacb8260a80cce7a39534a16d92eda42)

* [OCPBUGS-55699](https://issues.redhat.com/browse/OCPBUGS-55699): Empty proxy variables are causing issues during the build [#377](https://github.com/openshift/openshift-controller-manager/pull/377)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/eec49c5b91ec801640e973743b46a55689f5eb40...214c4c29bacb8260a80cce7a39534a16d92eda42)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d83b7565606cc984396860212bb60bdfd1ed578a)

* [OCPBUGS-56098](https://issues.redhat.com/browse/OCPBUGS-56098): fix(olm): improve error logging for missing olm.managed label (#3558) [#1001](https://github.com/openshift/operator-framework-olm/pull/1001)
* [OCPBUGS-51225](https://issues.redhat.com/browse/OCPBUGS-51225), [OCPBUGS-51227](https://issues.redhat.com/browse/OCPBUGS-51227), [OCPBUGS-51245](https://issues.redhat.com/browse/OCPBUGS-51245): pin go-jose/v4@v4.0.5 (#3550) [#992](https://github.com/openshift/operator-framework-olm/pull/992)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/cc44b486ea91015a30946029b3a0be3af49ea789...d83b7565606cc984396860212bb60bdfd1ed578a)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/b5e32a0f733ccdc59ce0012d768dc3edb6caf013)

* [OCPBUGS-55016](https://issues.redhat.com/browse/OCPBUGS-55016): DownStream Merge Sync from 4.19 [05-08-2025] [#2555](https://github.com/openshift/ovn-kubernetes/pull/2555)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/09261dc5c16b81bf98f44fab62d26838d5a28f8e...b5e32a0f733ccdc59ce0012d768dc3edb6caf013)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)

* [OCPBUGS-55338](https://issues.redhat.com/browse/OCPBUGS-55338): Added error event for failed ingress to route conversion [#59](https://github.com/openshift/route-controller-manager/pull/59)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/07daee4d2f0b5c7aaca56ee45ff6dfdf97680db0...ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3)


### [tests](https://github.com/openshift/origin/tree/14d003cc1e73aaf8a5d94bb6b72f0b002d9742ac)

* [OCPBUGS-55667](https://issues.redhat.com/browse/OCPBUGS-55667): aws/edge: prevent test using unschedulable nodes [#29750](https://github.com/openshift/origin/pull/29750)
* [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#29765](https://github.com/openshift/origin/pull/29765)
* [OCPBUGS-50628](https://issues.redhat.com/browse/OCPBUGS-50628): [test: networking] Skip isolation test when cgroupv1 nodes are present [#29541](https://github.com/openshift/origin/pull/29541)
* [Full changelog](https://github.com/openshift/origin/compare/092777d3db2c56fb8b5f5e7d8f7fc74a55e283a3...14d003cc1e73aaf8a5d94bb6b72f0b002d9742ac)