# 4.18.15 Created: 2025-05-22 13:14:49 +0000 UTC Image Digest: `sha256:0ebcecebc52a63285669ed74f0e591865b702de34c0a488cbba02dfb53d71cbe` ## Changes from 4.18.12 ### Components * Kubectl 1.31.1 * Kubernetes upgraded from 1.31.7 to 1.31.8 * Kubernetes Tests upgraded from 1.31.7 to 1.31.8 * Red Hat Enterprise Linux CoreOS upgraded from 418.94.202504291430-0 to 418.94.202505191717-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | | ExternalOIDCWithUIDAndExtraClaimMappings
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) | ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [93463599](https://github.com/openshift/assisted-service/commit/9346359925bec817c0a193f5ff59b9c5a6616594) `sha256:bd12dea0f6825918e7098c39d381b663a821c610e7ebf1fceb200e14b3c6b21d` * [agent-installer-csr-approver](https://github.com/openshift/assisted-installer) git [92575979](https://github.com/openshift/assisted-installer/commit/92575979cc7d65303169444f2afce22d36f918ce) `sha256:8ea2a04022cd8eae1d8a63b9cc4d4d6170cf0fe25291bb7538b2fc211c4716e2` * [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [615411a4](https://github.com/openshift/assisted-installer-agent/commit/615411a4df7a54c536871533d7af22f666b4e2ab) `sha256:6816b5f3a4fc63f4b14a2a78aebc0c2ea5d4ec76023e832679d413feb7f167d5` * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [3f6d1d8b](https://github.com/openshift/agent-installer-utils/commit/3f6d1d8b1884552e0bb7c6320804e0d2ea8c589d) `sha256:67ce51307fa2125f69e7df6d0a9d91de48e49f0ce99945baf8a52fa19734a7fe` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [c004ea7e](https://github.com/openshift/cluster-node-tuning-operator/commit/c004ea7ea486e983d296311ca2b40cc9a431c394) `sha256:f2e7b10810b05341846fa3463710ee8456a74b35dbce910b2835e1ca55f43a67` * [docker-builder](https://github.com/openshift/builder) git [62f644bc](https://github.com/openshift/builder/commit/62f644bcf0b0010f51765b48a7dab28426ae2933) `sha256:406d0e79d40414216a50a417aeb5f3b262b6e226cd8dbf9739ae1909ebc1964f` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:f6ae177339a111fc7a3d9e77a407b66bc89fddfafd8e1d3e98dc033cfb2d8d9b` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [04c22eee](https://github.com/openshift/ironic-rhcos-downloader/commit/04c22eee43786b4a8bc53441b7e8173372251bd8) `sha256:8d25073696e605ca87c054fff8d919e4ecd377c1532d4e5605ac7ccf94fcac85` * [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:4d9040fa958769d51aeec9f15dd7580903ce17028560cf7724e8320eabba3e61` * [metallb-frr](https://github.com/openshift/frr) git [98ccbe64](https://github.com/openshift/frr/commit/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) `sha256:3c5d5f4f7418fbcef8fd9a671282f854bb3219d973cc547fa2097ae156a6faff` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [eb6123bd](https://github.com/openshift/monitoring-plugin/commit/eb6123bd41269ccc6f5abddadfbc8e3af4481e09) `sha256:38d1a7ec008a58a450eb1ab3e780142eded88a5b74c7b5e89625db600b9f7c35` * [must-gather](https://github.com/openshift/must-gather) git [c864494e](https://github.com/openshift/must-gather/commit/c864494e2b10793ec1de833ade2fda7afe6a7c88) `sha256:c7f5cfc815879790ab4d8463204c70bf7bcb39b9bf4b32102d1009ebcf4a6e4a` * [network-tools](https://github.com/openshift/network-tools) git [f76635f2](https://github.com/openshift/network-tools/commit/f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f) `sha256:214235b1f8069c5e5e72917e467f971724d33fc6b56384174a32e9b38adbf5b0` * rhel-coreos `sha256:d9d0b9503943c8e24799a6ebc3065e2b624568595ed82e5a195fb134f46234e0` * rhel-coreos-extensions `sha256:1bb8b5fa4342789160727463175231e0bdee95698da16c0d8c476e528cad26b3` ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/c4935a5ec26f04b1f1ef0b5f21c61904d77b6b5a) * [OCPBUGS-55373](https://issues.redhat.com/browse/OCPBUGS-55373): Update eviction policy for Spot VMs from Deallocate to Delete [#139](https://github.com/openshift/machine-api-provider-azure/pull/139) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b8bc2053066bace662f5fece646be7ea76bc3c72...c4935a5ec26f04b1f1ef0b5f21c61904d77b6b5a) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/b14bc7fa76fd892789ae0e75e438bc812638d2d6) * [OCPBUGS-50690](https://issues.redhat.com/browse/OCPBUGS-50690): vsphere - check if host is powered down or on standby before uploading template [#9468](https://github.com/openshift/installer/pull/9468) * [OCPBUGS-53142](https://issues.redhat.com/browse/OCPBUGS-53142): PowerVS: COS eu-es hack [#9626](https://github.com/openshift/installer/pull/9626) * [OCPBUGS-50840](https://issues.redhat.com/browse/OCPBUGS-50840): Fix panic when there are no available IPs [#9479](https://github.com/openshift/installer/pull/9479) * [OCPBUGS-55794](https://issues.redhat.com/browse/OCPBUGS-55794): IBI nmstate unit test fix [#9692](https://github.com/openshift/installer/pull/9692) * [Full changelog](https://github.com/openshift/installer/compare/9357b668a760d53a34f7094840d1e9f773127441...b14bc7fa76fd892789ae0e75e438bc812638d2d6) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/35f7af703663a7459e0bc494e69ed2cc80543d04) * [OCPBUGS-55449](https://issues.redhat.com/browse/OCPBUGS-55449): Get installer image from configMap for node-image command [#2013](https://github.com/openshift/oc/pull/2013) * [OCPBUGS-55647](https://issues.redhat.com/browse/OCPBUGS-55647): Use fedora image in unit tests instead of centos [#2014](https://github.com/openshift/oc/pull/2014) * [Full changelog](https://github.com/openshift/oc/compare/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64...35f7af703663a7459e0bc494e69ed2cc80543d04) ### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/beacfbc2f2afa651616ad1c3c6712c511318a8d4) * [OCPBUGS-56156](https://issues.redhat.com/browse/OCPBUGS-56156): Increase API call timeout to 30 second [#170](https://github.com/openshift/cloud-network-config-controller/pull/170) * [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/f648c78dba768619f0c6e2120132ee1aeefb8571...beacfbc2f2afa651616ad1c3c6712c511318a8d4) ### [cluster-config-api](https://github.com/openshift/api/tree/d21e7b9699338d2d989fbe43523acf0bc6a9477c) * [OCPBUGS-55792](https://issues.redhat.com/browse/OCPBUGS-55792): [release-4.18] config: add uid and extra claim mappings for external OIDC configuration [#2311](https://github.com/openshift/api/pull/2311) * [OCPBUGS-53221](https://issues.redhat.com/browse/OCPBUGS-53221): Allow spaces in AWS resource tags [#2239](https://github.com/openshift/api/pull/2239) * [Full changelog](https://github.com/openshift/api/compare/d6c84c55a124ab4bd96b1a18c916d3f314f1a95a...d21e7b9699338d2d989fbe43523acf0bc6a9477c) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2c2910d7c3095706aaf66ddbcf3c1a31285b3567) * [OCPBUGS-56110](https://issues.redhat.com/browse/OCPBUGS-56110): adjust alerts according to platform [#1424](https://github.com/openshift/cluster-etcd-operator/pull/1424) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b355afe20310c9b2ae45f712980907c70d855bd8...2c2910d7c3095706aaf66ddbcf3c1a31285b3567) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/383f10176f2509babc9dd49d135fa8bb0c2c277e) * [OCPBUGS-56030](https://issues.redhat.com/browse/OCPBUGS-56030): bump library-go to bring in updated audit policies [#1843](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1843) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/ad0e7bf6fb078047e58a923fa057293c0e5535ac...383f10176f2509babc9dd49d135fa8bb0c2c277e) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa) * [OCPBUGS-55783](https://issues.redhat.com/browse/OCPBUGS-55783): Samples Operator should sort failing image imports [#638](https://github.com/openshift/cluster-samples-operator/pull/638) * [OCPBUGS-55782](https://issues.redhat.com/browse/OCPBUGS-55782): only update LastTransitionTime if operator status change [#637](https://github.com/openshift/cluster-samples-operator/pull/637) * [OCPBUGS-55781](https://issues.redhat.com/browse/OCPBUGS-55781): Adding filter to clusterOperatorInformerEventHandler [#636](https://github.com/openshift/cluster-samples-operator/pull/636) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/919d51f809c24ba2ab05d898ba165640af2c41af...5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/94c0e705d520b0eeb765f72de2dae2cd6f1159bb) * [OCPBUGS-55359](https://issues.redhat.com/browse/OCPBUGS-55359): install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 [#1181](https://github.com/openshift/cluster-version-operator/pull/1181) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4...94c0e705d520b0eeb765f72de2dae2cd6f1159bb) ### [console](https://github.com/openshift/console/tree/c140960e4a83a14e907a77a015ee2762f2217d82) * [OCPBUGS-56255](https://issues.redhat.com/browse/OCPBUGS-56255): remove 60 day alert from cluster update modal [#15055](https://github.com/openshift/console/pull/15055) * [OCPBUGS-55991](https://issues.redhat.com/browse/OCPBUGS-55991): Remove the devconsole backend common internet proxy and replace it with dedicated ones [#15043](https://github.com/openshift/console/pull/15043) * [OCPBUGS-53172](https://issues.redhat.com/browse/OCPBUGS-53172): Include init containers in readiness count if ready and started is true [#14884](https://github.com/openshift/console/pull/14884) * [OCPBUGS-54899](https://issues.redhat.com/browse/OCPBUGS-54899): Fetching taskRuns in PLR details page using PLR UID also [#14961](https://github.com/openshift/console/pull/14961) * [OCPBUGS-54888](https://issues.redhat.com/browse/OCPBUGS-54888): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14959](https://github.com/openshift/console/pull/14959) * [Full changelog](https://github.com/openshift/console/compare/4294cddb71d5ee70b6461163f6818b7272108a28...c140960e4a83a14e907a77a015ee2762f2217d82) ### [etcd](https://github.com/openshift/etcd/tree/72173bc741f97fa70e52bf9f34df9c23f7612c2d) * [OCPBUGS-55724](https://issues.redhat.com/browse/OCPBUGS-55724): Add configurable option for hardware-related timeout delay [#328](https://github.com/openshift/etcd/pull/328) * [Full changelog](https://github.com/openshift/etcd/compare/98b19154718fd94d4e8ad30824c00ba1de87cb78...72173bc741f97fa70e52bf9f34df9c23f7612c2d) ### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/6342c7704072023fd9968c25a43c6938c80f994c) * [OCPBUGS-56192](https://issues.redhat.com/browse/OCPBUGS-56192): UPSTREAM: 131236: RWX tests should create RWX volumes [#2300](https://github.com/openshift/kubernetes/pull/2300) * UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… [#2283](https://github.com/openshift/kubernetes/pull/2283) * [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#2278](https://github.com/openshift/kubernetes/pull/2278) * [Full changelog](https://github.com/openshift/kubernetes/compare/0b8a68191de069deeca944e443a5ead7e0469b41...6342c7704072023fd9968c25a43c6938c80f994c) ### [hypershift](https://github.com/openshift/hypershift/tree/ab02c94ed951d38fbc454e580e838705b52fc393) * [OCPBUGS-55177](https://issues.redhat.com/browse/OCPBUGS-55177): Don't check if olm images exist if guest cluster [#6065](https://github.com/openshift/hypershift/pull/6065) * [OCPBUGS-55230](https://issues.redhat.com/browse/OCPBUGS-55230): Add annotation to configure KAS goaway-chance [#6066](https://github.com/openshift/hypershift/pull/6066) * [Full changelog](https://github.com/openshift/hypershift/compare/430d602120077bf30c28b7f9fe860fe26e6fca8c...ab02c94ed951d38fbc454e580e838705b52fc393) ### [ironic](https://github.com/openshift/ironic-image/tree/9161a5fdb75042856bd40eec31bdba7b7c07d4a2) * [OCPBUGS-55938](https://issues.redhat.com/browse/OCPBUGS-55938): Extract files one-by-one in logwatch [#657](https://github.com/openshift/ironic-image/pull/657) * [Full changelog](https://github.com/openshift/ironic-image/compare/bc0800a6d184c4253ee18d7e8f68aecebe1b3393...9161a5fdb75042856bd40eec31bdba7b7c07d4a2) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/b79bddef03460124923c7ce8616d83f719a49960) * [OCPBUGS-56097](https://issues.redhat.com/browse/OCPBUGS-56097): collect the entire journal from the host [#189](https://github.com/openshift/ironic-agent-image/pull/189) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/6964fcc8f8ee7a05410d0daae1369c2ea914f3be...b79bddef03460124923c7ce8616d83f719a49960) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/033e1dc48e10b12b20918e7a7e8a9177a65ae680) * [OCPBUGS-56217](https://issues.redhat.com/browse/OCPBUGS-56217): Compare the osImageURLs for OS validation check [#5052](https://github.com/openshift/machine-config-operator/pull/5052) * [OCPBUGS-56170](https://issues.redhat.com/browse/OCPBUGS-56170): error from generateAndValidateRenderedMachineConfig function can be misleading [#5049](https://github.com/openshift/machine-config-operator/pull/5049) * [OCPBUGS-55383](https://issues.redhat.com/browse/OCPBUGS-55383): Leverage shared node.env for both AWS providerID and hostname units [#5008](https://github.com/openshift/machine-config-operator/pull/5008) * [OCPBUGS-53427](https://issues.redhat.com/browse/OCPBUGS-53427): pkg/operator/status: Drop kubelet skew guard, add RHEL guard [#4956](https://github.com/openshift/machine-config-operator/pull/4956) * [release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension [#5018](https://github.com/openshift/machine-config-operator/pull/5018) * [OCPBUGS-54765](https://issues.redhat.com/browse/OCPBUGS-54765): [release-4.18] kubelet-service: narrow down restorecon path [#4978](https://github.com/openshift/machine-config-operator/pull/4978) * [OCPBUGS-55428](https://issues.redhat.com/browse/OCPBUGS-55428): MSBIC should not update windows machinesets [#5012](https://github.com/openshift/machine-config-operator/pull/5012) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/b927430d6bad82dc043dfd8f3a4d6bc362d1519e...033e1dc48e10b12b20918e7a7e8a9177a65ae680) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/9404c2330085c3dd42504f34c608974ffb957d6e) * [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#240](https://github.com/openshift/networking-console-plugin/pull/240) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/e98a404fa9d0d81f6c8e9aa38ca2ee775a81d083...9404c2330085c3dd42504f34c608974ffb957d6e) ### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/afe324bf56e0348fb45e5fbb9c832c1587482153) * [OCPBUGS-51861](https://issues.redhat.com/browse/OCPBUGS-51861): fixing CVE-2025-22868 [#96](https://github.com/openshift/machine-api-provider-nutanix/pull/96) * [OCPBUGS-54616](https://issues.redhat.com/browse/OCPBUGS-54616): Fix link-local addresses being added to machine [#101](https://github.com/openshift/machine-api-provider-nutanix/pull/101) * [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/7d0cb735f3e86c0828821cf54f8a40c74d9232aa...afe324bf56e0348fb45e5fbb9c832c1587482153) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/6b0882e21264b4efc463ccb646846037882a5551) * [OCPBUGS-54626](https://issues.redhat.com/browse/OCPBUGS-54626): [release-4.18] cli: return distinct error codes depending on failure (#1125) [#1125](https://github.com/openshift/oc-mirror/pull/1125) * [Full changelog](https://github.com/openshift/oc-mirror/compare/594354393ad1774038e1951621bcde165fc13821...6b0882e21264b4efc463ccb646846037882a5551) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/214c4c29bacb8260a80cce7a39534a16d92eda42) * [OCPBUGS-55699](https://issues.redhat.com/browse/OCPBUGS-55699): Empty proxy variables are causing issues during the build [#377](https://github.com/openshift/openshift-controller-manager/pull/377) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/eec49c5b91ec801640e973743b46a55689f5eb40...214c4c29bacb8260a80cce7a39534a16d92eda42) ### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/d83b7565606cc984396860212bb60bdfd1ed578a) * [OCPBUGS-56098](https://issues.redhat.com/browse/OCPBUGS-56098): fix(olm): improve error logging for missing olm.managed label (#3558) [#1001](https://github.com/openshift/operator-framework-olm/pull/1001) * [OCPBUGS-51225](https://issues.redhat.com/browse/OCPBUGS-51225), [OCPBUGS-51227](https://issues.redhat.com/browse/OCPBUGS-51227), [OCPBUGS-51245](https://issues.redhat.com/browse/OCPBUGS-51245): pin go-jose/v4@v4.0.5 (#3550) [#992](https://github.com/openshift/operator-framework-olm/pull/992) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/cc44b486ea91015a30946029b3a0be3af49ea789...d83b7565606cc984396860212bb60bdfd1ed578a) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/b5e32a0f733ccdc59ce0012d768dc3edb6caf013) * [OCPBUGS-55016](https://issues.redhat.com/browse/OCPBUGS-55016): DownStream Merge Sync from 4.19 [05-08-2025] [#2555](https://github.com/openshift/ovn-kubernetes/pull/2555) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/09261dc5c16b81bf98f44fab62d26838d5a28f8e...b5e32a0f733ccdc59ce0012d768dc3edb6caf013) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3) * [OCPBUGS-55338](https://issues.redhat.com/browse/OCPBUGS-55338): Added error event for failed ingress to route conversion [#59](https://github.com/openshift/route-controller-manager/pull/59) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/07daee4d2f0b5c7aaca56ee45ff6dfdf97680db0...ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3) ### [tests](https://github.com/openshift/origin/tree/14d003cc1e73aaf8a5d94bb6b72f0b002d9742ac) * [OCPBUGS-55667](https://issues.redhat.com/browse/OCPBUGS-55667): aws/edge: prevent test using unschedulable nodes [#29750](https://github.com/openshift/origin/pull/29750) * [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#29765](https://github.com/openshift/origin/pull/29765) * [OCPBUGS-50628](https://issues.redhat.com/browse/OCPBUGS-50628): [test: networking] Skip isolation test when cgroupv1 nodes are present [#29541](https://github.com/openshift/origin/pull/29541) * [Full changelog](https://github.com/openshift/origin/compare/092777d3db2c56fb8b5f5e7d8f7fc74a55e283a3...14d003cc1e73aaf8a5d94bb6b72f0b002d9742ac)