4.18.18

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.18-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.17, 4.17.18, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.30, 4.17.31, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.4, 4.18.5, 4.18.7, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.2

Created: 2025-06-19 14:46:02 +0000 UTC

Image Digest: sha256:eca2e3f7de2bd92b18f69547c8f0ad842fdb83f0821f76b8692f2716a86b0bde

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.6 to 1.31.9
Kubernetes Tests upgraded from 1.31.1 to 1.31.9
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202502250906-0 to 418.94.202506121335-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

aws-cloud-controller-manager git c3951906 sha256:ea3af108659d7ba517e963568098c820a91d90dbc1836eec0b384ec7feab2b95
aws-ebs-csi-driver git b51cd6b8 sha256:f9add710effa358d579c9d4744a1d1b68a2f17ed584a2eb45c60b7be6af9a74f
aws-kms-encryption-provider git 088dcaf7 sha256:da5bc4179940744bf2722cccdf84b363bc26bb3191f2d22773dd2b70b8c7fa86
aws-machine-controllers git 53274f11 sha256:f30f637872bfe1464ae5e49acfcd014659c4340fe88bda09aea6c14b6ce86d42
azure-cloud-controller-manager git 9c24d768 sha256:e29eb77f1a08c50b8b8611286d2ed7d04eb6339b5c2b8064d95d68dd8f2dcffd
azure-cloud-node-manager git 9c24d768 sha256:4cedda9848fe536f39bdf3f085f458e4d5719e30733045320c5cddd47b6e06a4
azure-cluster-api-controllers git 987615c8 sha256:bacaf40582c37195af6f43e1fab9f613476d1b294bf627b41018d8dcf778444a
azure-disk-csi-driver git 6cced666 sha256:dd75a11a78092066e8684b438cad81673f10289692552e38db5996b263f66017
azure-file-csi-driver git 4b34592e sha256:e666aebd24ba7dbc41ac1f01ba11b1b2fffcdf9b99756ab239b2abc1d06f5d07
baremetal-cluster-api-controllers git 7ec03e94 sha256:828146c37bf539a63de97ca965eceb22d16d90fbfdf9b3bf6579148f45c9f499
baremetal-machine-controllers git 1ede6c3f sha256:77336e4fd355808528d0028a6cfa86cb5616cc40d09e8ec90879323bfafb5287
baremetal-runtimecfg git 9e2015c3 sha256:7c27aecec0dbfd1bc74f723cf31a048894dc6fbee953a2bf435263717856d0fe
cluster-autoscaler-operator git 474ad65c sha256:251eda660c236dcbcd2a704ffe496e6032de0ae7036c16b2fabb0cc17e198796
cluster-bootstrap git d1e01954 sha256:c2574b9676ab05e4db7ea4ee77a887b525dec96982061a1421ca27d30b6369cd
cluster-capi-controllers git d05a6def sha256:e878cdd8fd53b0520e8733fa7bdb5a1f9ee874320295cf56ff4e825c91b65446
cluster-cloud-controller-manager-operator git 33856906 sha256:17c107bac857dcb37b538b4aa301c4e7275fe2af85b85cbd0fcfe6330b091c7e
cluster-config-operator git 85cb4072 sha256:6ddab1c4c1aedc276c6e6bbd196a02d02ed7b17d38d840bfb62948ceaa7e795e
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:b0ed41bfe41bf53e40902b5e9c987a7c71a4d2767d9c556949f8fdecc26e9beb
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:1a42dbedf83d35e7129e34a3580e2914e45d1605371b8b4d61413482fa274c14
cluster-kube-cluster-api-operator git 33a1141e sha256:7a31a1994f332f021a62420d0b7459f83707a1b99cd7b2e0fc8c5d8cd6dccf02
cluster-kube-controller-manager-operator git 0fac9aa9 sha256:c8a8aa65c6e8ba4e2896594a5a73ce4b24e2f049dd8a3263611ecd7fa669700c
cluster-kube-scheduler-operator git 6182930d sha256:cb6aea4b896a394290ea1807b087c45e6642830387821e254b146e80244c5fe7
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:eeed7e743b8f2810a16d42733e04e92aed3308be2856738f4e8e5f957c0e65b6
cluster-machine-approver git 01d5fbbe sha256:9f969aad4da6d4f79cc1aca6cb7529a635cc343dad9901344eb5e3c319379b77
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:b25d37cd8867ebb61e4acecd8dd1acb0de1444a1b84a6ac38a2242ccab150510
cluster-openshift-controller-manager-operator git f1711cf3 sha256:8016c8dfdeb98b22f17219166d97e1f9c6f659a58a7591c0dc7a13e222b24f32
cluster-policy-controller git 5fd85252 sha256:a0c1f2d8dc827cdba7f8fe9687ede25b58dfd59975961985e44d362177b2cdba
csi-driver-nfs git 32e77590 sha256:f9b539e2a31e0ef8da8a826b309b20862d01dc59fc63a295ef52a92fc61340ae
csi-external-attacher git 39b37c06 sha256:8a1ebb3870d53c669a99df6056dde558eb0c99aaa8cd45cb110bb2c6b53dc5ab
csi-external-provisioner git 376f0ea0 sha256:4dee773dfccbf9a7cde4e0f3169daa3a148226f28cad4dd5f2c9f85b206b901d
csi-external-resizer git cca3837a sha256:8bd2e50247f7a8000b32272ced8b1150c1eacc757da25537a1a22a6754bd7093
csi-external-snapshotter git 838d2484 sha256:7f8573472e25c1db23d639ef7f23fe44e0d85ffe7f5bf6dc6a0e3cb87a0305e1
csi-livenessprobe git 3a977844 sha256:89af8518eb5538c8861ef1339c2add8e97506e1c1403e5d5832d53bab58e5a5a
csi-node-driver-registrar git c21f5d02 sha256:ff27d60494f1bb8a22d13c4124cee60c3b851b136e0ae6e9d24be8de95a5dc1b
csi-snapshot-controller git 838d2484 sha256:ddcf93543cdd759b8faa463f2ed1b1228647b1ee20e8ea11d73eb7744087b024
csi-snapshot-validation-webhook git 838d2484 sha256:ab93177f0a4dbf890cad6b301e5219122b8294e220820571f77ea53d3456420a
driver-toolkit git 2e139edc sha256:4a52491afabbd33d7e0a07e83373c2a85e5324535215271a0b7949fb16da0c16
egress-router-cni git 3193a756 sha256:61a8e68ec6b7b6242376c9bc114f428086cdba028de4589cf1f6b980c001e742
gcp-cloud-controller-manager git 6ea23561 sha256:016eeb3a6cc2f9a438b7eab64f690fef1917b520c9e304254365b53f9f444766
gcp-cluster-api-controllers git af54f528 sha256:4d32ac2e2d567abd61a2d3cad62a425c582ee65b2267028031d00e4cd7a70179
gcp-pd-csi-driver-operator git 7cb8b38c sha256:7311a4fa837bf0517a0bd7baabbf8ddd80284a8eabd841c662db915ed95d1b0d
gcp-workload-identity-federation-webhook git f0a670c7 sha256:0a9ee241762f93e90736c534732da42842220e78098a1a6f5801019dcbfa828e
ibm-cloud-controller-manager git a33026b1 sha256:3cf7651ee20c60da6e5cb42721b256cd69e3899b7901ba06deb4273300c186da
ibm-vpc-block-csi-driver-operator git feae2605 sha256:15ce2ffa32c1b67c31f97de4d514471370b49405333da4379c00d71cf20b0003
ibmcloud-cluster-api-controllers git 2ba764f9 sha256:b70b58d3a039eda87eb958b40626b25d8e9c19eca91d613f27ccaf337d00ccd6
insights-runtime-exporter git 7149f2d5 sha256:ed876158c5ba6202c393e3b69986a2eab83619229bd68c1b98b74adfd88f68f0
insights-runtime-extractor git 7149f2d5 sha256:78b9e8fc3138d90ec3466f3921c3fef13ff572f0471024237612fa0815a9308f
ironic-static-ip-manager git cfbae04f sha256:974672b41ea4d90d9f35e2dea8e4e8edf48e27e3ea1258f8fd10d209019ec48b
keepalived-ipfailover git 716eb0ef sha256:1330821474e0dee5cb9a15c9ed2be1c59caac63dd207d9204972a59fde250005
kube-metrics-server git 962ccca2 sha256:60e2b9f0d3597c4676c246cd67b41f20b3a21fd059608cbe93d67ac348c42740
kube-rbac-proxy git 526498ab sha256:0911beebdfb3b798192a70bf74397fdcf5ea15fa5bbf8843350ac3cdc0f5b0fb
kube-state-metrics git cb5a9296 sha256:8b04db96e9f6496416b50a1893dbe8397d236174d1cbfe464c429c2ebd254e19
kubevirt-cloud-controller-manager git 3f4542ec sha256:06d691c0eb1bad0842295db4db92c7eb94d389c33abb0363bd1e5887efdbc97d
libvirt-machine-controllers git a336f0b5 sha256:13149f9d7806372603d97ec981a56ab32f154b79924efb2a103011662f46757d
multus-route-override-cni git 391c1b03 sha256:f7c8149d5e82a79181f82cdbeae19c4ad871f0d85b9d767b6104eb3955c4c44e
network-interface-bond-cni git 9506a1ff sha256:754abb5eb9b5fee15e2f8a89ea4950450bb51091e7dc72c1d6fb93fd79fe8acd
network-metrics-daemon git e4c214c3 sha256:76e3f808d026151faca99dc438cb9664b8dc2bcbe754d5625625719235b6eb23
nutanix-cloud-controller-manager git d9fe8f38 sha256:6bf0de37d857b71671a5fda83fbad63237969914c12f68a06634295ab3f7328b
oauth-apiserver git 2575ff41 sha256:b2532aba65c2fd72ceb9a332a4646f43cd56c80a593663cb3e52e803e143f1c6
openstack-cluster-api-controllers git b0f0dc4e sha256:6c1890557c4c14660de865d10bf87e95738720d93d7f09c7e1afb40f51146e66
openstack-machine-api-provider git d914e77e sha256:b31cd8dd2169b3f1bf7d6ae179119f73e3aacddaaddd88ab3ad95f1554c0633d
ovirt-csi-driver git 1db726a9 sha256:d9e5505363fb8493965957930e71bc71c2557af030bbb90bb5bcec8c7aa7fce8
ovirt-csi-driver-operator git 0feae256 sha256:e8051d142da21cba5113b1dbd728392c8ca5f8f4d5ab5776e78c7550e5c650b6
powervs-block-csi-driver git d36aea34 sha256:d2127de3ebe0efcaefe1a8f3750ca33c2136fc74c63cc2a54e568fb112cbf167
powervs-block-csi-driver-operator git 01fc505a sha256:3ed974554e16e8355e3e4e15eed1948691f69ca161c24e7d24678e967f5f01f1
powervs-cloud-controller-manager git 17ae6fba sha256:88ef9fefe49c9f8892d69538c4047200aa4fda89f67ab5c8edd7b2f0d039c9b2
rhel-coreos sha256:8fea916602e93f2d504affb82cb6eceb0d45c2c80fdc26c9c363bd61ade8c064
rhel-coreos-extensions sha256:d177c322852b75378b6d65f66164c63d8cb89e63c6d3700be3ea8358ce029d70
vsphere-cloud-controller-manager git c414d1f5 sha256:8fe1115c62ab3b326a3b2a835b0a70212649ab59996229068569e7c8c3566c08
vsphere-cluster-api-controllers git d664fe2b sha256:58befdac9676514162a2d5027c870b823d0ec1fdcd90176a23aaf83fe913ac8e
vsphere-csi-driver git cfcad01d sha256:d65359754035e4b58050f6bca0f105536817c5faf63f36ca618dae5a6f1410a2
vsphere-csi-driver-syncer git cfcad01d sha256:4b686cd3ed7c1d741532547cc592e307f734a2dd9f9fed5d0933c4b08a72883d
vsphere-problem-detector git 7cf7fe24 sha256:9766dad510cf08a93d83bcb8d3449ce0ee17a3a4db8925881e3b97941a78400b

agent-installer-api-server

OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
OCPBUGS-54378: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) #7483
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) #7456
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53721: Bump jwt to 4.5.2 in release-4.18 (#1085) #1085
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#958) #958
MGMT-20227: Skip Motherboard serial if set to “-” (#955) (#957) #955
OCPBUGS-54544: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) #965
OCPBUGS-53713: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) #963
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-53729: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 #543
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-54383: Disable remove-not-ready-taint for azure disk csi driver #374
Full changelog

aws-pod-identity-webhook

OCPBUGS-51231: github.com/go-jose/go-jose/v4 v4.0.5 #201
Full changelog

azure-kms-encryption-provider

OCPBUGS-53497: bump golang-jwt v4 #11
Full changelog

azure-machine-controllers

OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
OCPBUGS-54355: Re-reconcile machine on NIC provisioning failure #135
Full changelog

azure-workload-identity-webhook

OCPBUGS-53801: github.com/golang-jwt/jwt/v4 v4.5.2 #31
OCPBUGS-51233: github.com/go-jose/go-jose/v4 v4.0.5 #27
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
OCPBUGS-54947: Fix Load balancer IP setup #9659
OCPBUGS-45564: Align vSphere UPI haproxy config with IPI #9276
OCPBUGS-53453: IBMCloud: Move to IBM TF openshift fork #9592
OCPBUGS-53422: Avoid adding duplicate entries to NO_PROXY #9588
OCPBUGS-52515: Remove error logging when determining image arch #9539
OCPBUGS-52429: Remove tmp directory used for agent pxe files #9536
OCPBUGS-51211: Fixes panic during GCP tags fetch due to unstable network #9513
OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
Full changelog

baremetal-operator

OCPBUGS-56431: Redfish: correctly handle missing system ID #417
OCPBUGS-53324: BMO can expose any secret via BMCEventSubscription CRD #405
OCPBUGS-45250: Remove dataImage finalizer if BMH is missing #389
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
Full changelog

cloud-credential-operator

OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
OCPBUGS-53825: update github.com/golang-jwt/jwt #837
OCPBUGS-53345: github.com/golang/glog v1.2.4 #835
OCPBUGS-51550: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #822
OCPBUGS-51237: github.com/go-jose/go-jose/v4 v4.0.5 #824
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-authentication-operator

OCPBUGS-54569: Avoid duplicate OAuth client creation #764
Full changelog

cluster-autoscaler

OCPBUGS-53241: improve replica counting and decrease target size behavior #346
Full changelog

cluster-baremetal-operator

OCPBUGS-53080: Add missing relatedObjects #467
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-config-api

Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
OCPBUGS-54784: [release-4.18] Bump openshift/controller-tools to latest commit #2267
OCPBUGS-51295, OCPBUGS-51380: Reject new NodeStatus with revision set #2215
OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
Full changelog

cluster-dns-operator

OCPBUGS-52514: [release-4.18] Add runbook_url for CoreDNSErrorsHigh #429
Full changelog

cluster-etcd-operator

OCPBUGS-56110: adjust alerts according to platform #1424
OCPBUGS-53513: fix CVE-2025-30204 #1413
OCPBUGS-55066: increase etcdGRPCRequestsSlow duration #1408
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-ingress-operator

NE-1951: Pre-upgrade Admin Gate for Gateway API CRD Management Succession #1196
NE-1952: Pre-upgrade check for Gateway API CRD Management Succession #1193
OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
OCPBUGS-49898: bindata/alerts/slo: improve burnrate calculation #1808
OCPBUGS-53066: Bump library-go #1828
Full changelog

cluster-monitoring-operator

OCPBUGS-55005: chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and set CMO to Upgradeable=false if errors are found #2592
OCPBUGS-53024: Fix opentelemetry metrics to use regexp on label match #2578
OCPBUGS-52565: Bump prometheus-operator to 0.78.2 #2576
OCPBUGS-50706: Add incidents metric to telemetry #2570
Full changelog

cluster-network-operator

OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
OCPBUGS-54717: Add IPv6 NGINX configuration #2683
OCPBUGS-50582, OCPBUGS-52949: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2644
OCPBUGS-52837: frr-k8s: rename validatingwebhook name #2661
OCPBUGS-48305: frr-k8s: align manifests with operator #2657
OCPBUGS-41178: Updating cluster-network-operator-container image to be consistent with ART for 4.18 #2491
Full changelog

cluster-node-tuning-operator

OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) (#1306) #1303
machineconfig: add support for various hugepage sizes. (#1299) #1299
OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
e2e: common way to fetch poolName (#1255) (#1300) #1255
Full changelog

cluster-olm-operator

OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
OCPBUGS-54258: Adding mutex to func createSamples on handler.go #615
OCPBUGS-54351: add rhdmalone to owners #617
Full changelog

cluster-storage-operator

OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #72
Full changelog

cluster-version-operator

OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
OCPBUGS-54269: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14905
OCPBUGS-52372: VolumeSnapshots are not displayed in OpenShift Web Console #14833
OCPBUGS-52406: Retain original path when detecting perspective #14834
OCPBUGS-52371: Update the monitoring topic used by the console team #14832
OCPBUGS-52490: enable clicking outside NodeLogs Selects to close them #14843
OCPBUGS-50501: Updating cypress config to have video enabled for the CI results #14831
OCPBUGS-52511: Remove logoutOpenShift method call #14845
OCPBUGS-50609: update the Deployment pod on change in imageStream #14757
OCPBUGS-50648: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14761
OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
OCPBUGS-51180: Linkify OLM operator uninstall message #14789
OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
Full changelog

console-operator

OCPBUGS-52294: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #966
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
OCPBUGS-55354: Fix dhcp #186
OCPBUGS-55346: Check error returned by ipv6 SettleAddresses #185
Full changelog

coredns

append .0 to go.mod version #134
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43430: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 #312
Full changelog

docker-builder

OCPBUGS-48071: Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility #464
OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
Full changelog

docker-registry

OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue #312
ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
Full changelog

gcp-machine-controllers

OCPBUGS-52495: OCPBUGS-52494: Disable shielded VMs for non-UEFI disks #112
Full changelog

gcp-pd-csi-driver

OCPBUGS-44769: Fix RWX mode for hyperdisks #74
Full changelog

haproxy-router

OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
: OCPBUGS-54807: skip tests on platform type External #2268
OCPBUGS-53015: Update to Kubernetes v1.31.7 #2248
Full changelog

hypershift

OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
OCPBUGS-55146: Use 135 for terminationGracePeriodSeconds for v2 KAS #6057
OCPBUGS-54698: Add missing servicemonitors and prometheusrules permissions for non-OVN #6000
OCPBUGS-53404: Set shutdown watch termination grace period on kube-apiserver #5874
OCPBUGS-51810: Fix golang crypto dependency go.mod replacement #5992
OCPBUGS-54814: [release-4.18] add feature set aware feature gates to HO and CPO #6014
OCPBUGS-54624: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5980
OCPBUGS-54630: Sync RBAC for attaching volumes on VM level #5988
OCPBUGS-54627: Use system trust bundle in CPO IDP https client #5981
ARO-15695, OCPBUGS-54625: backport capabilities api #5964
OCPBUGS-54411: Backport PR 5876 to release-4.18 #5936
OCPBUGS-54498: Support hypershift-operator scoping for secretJanitor #5961
OCPBUGS-54609: [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable #5950
NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 #5963
OCPBUGS-53905: bump golang-jwt v4 and v5 #5905
ART-11792: update go mod dependency for konflux #5919
OCPBUGS-51739, OCPBUGS-51810: Bump dependencies to OCP fork in backports #5898
OCPBUGS-53321: Handle multiple mirror entries for source #5890
OCPBUGS-51239: fix(deps): bump go-jose #5858
OCPBUGS-52982: Fix audit-logs container to properly handle SIGTERM #5774
OCPBUGS-52863: stop using dev mode for loggers #5811
OCPBUGS-52878: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5780
OCPBUGS-52516: Make managed-trust-bundle optional #5783
OCPBUGS-52417: [release-4.18] refactor aws identity health check into new controller #5770
OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
Full changelog

ibm-vpc-block-csi-driver

append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
OCPBUGS-53913: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #82
Full changelog

ibmcloud-machine-controllers

OCPBUGS-52872: IBMCloud: MAPI replacing unhealthy CP nodes #62
Full changelog

insights-operator

OCPBUGS-51163: Fix bad IPv6 address (#1074) #1074
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
METAL-1302: Do not use openstack packages #646
OCPBUGS-52290: Fix runlogwatch script #642
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
OCPBUGS-55364: Delay determining the hostname to put into ignition #183
METAL-1302: Do not use openstack packages #178
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-storage-version-migrator

append .0 to go.mod version #216
Full changelog

kubevirt-csi-driver

OCPBUGS-54630: Ensure volume stays attached through reboots #55
Full changelog

machine-api-operator

OCPBUGS-57057: Updates GCP CredentialsRequest #1376
OCPBUGS-52494, OCPBUGS-52496: Updates GCP credentials request #1341
OCPBUGS-52567: add image/read permissions #1342
OCPBUGS-51263: Drop oVirt support #1333
Full changelog

machine-config-operator

OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Update cluster operator’s status condition message #4993
OCPBUGS-53278: In OCL. Cannot install extensions #4945
OCPBUGS-54817: Make mtu-migration run after wait-for-primary-ip #4979
OKD-239: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4955
OCPBUGS-54462: OSUpdateStarted event should only be emitted on actual OS updates #4967
OCPBUGS-51132: [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4869
OCPBUGS-52949: Add ipsec connect wait service #4926
OCPBUGS-53306: Fixing typos for MachineConfigNode #4927
OCPNODE-2276: Set Upgradeable=False when cluster is on cgroup v1 #4921
OCPBUGS-53111: daemon: ensure ostree-finalize-staged is started before rebooting #4918
OCPBUGS-53110: Update ObservedGeneration in KubeletConfig #4917
[release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built #4859
OCPBUGS-50865: Make resolv-prepender env file optional #4855
OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
OCPBUGS-48341: configure-ovs workaround for ovs-if-br-ex bug #4883
OCPBUGS-51015: Enforce VIPs to be collocated at the same host #4865
OCPBUGS-51194: Update cluster-reader ClusterRole permissions #4874
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

machine-os-images

OCPBUGS-53141: Change rhcos release browser url #55
OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
OCPBUGS-48305: Use metrics for readiness/liveness probes #76
Full changelog

monitoring-plugin

OU-724: remove deleted image #376
Full changelog

multus-admission-controller

append .0 to go.mod version #96
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47470: adds getpodcontext (backport 4.18) #259
Full changelog

multus-networkpolicy

append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

append .0 to go.mod version #370
OCPBUGS-55270: Fix whereabouts-reconciler no namespace error #362
Full changelog

must-gather

append .0 to go.mod version #491
Full changelog

network-tools

Fix build error #147
Full changelog

networking-console-plugin

CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Add translations scripts #234
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
OCPBUGS-47268: fixing CVE-2024-45338 #91
Full changelog

oauth-proxy

OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
Full changelog

oauth-server

append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-56659: v2/archive: print unarchive progress (#1160) #1160
OCPBUGS-54653: delete: continue on errors (#1146) #1146
OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
OCPBUGS-51217: Fix CVE-2025-27144 (#1108) #1108
OCPBUGS-54727: Use tag 0.0.3+2 of catalog-filter (#1128) #1128
OCPBUGS-52978: delete: fix typo in –help output (#1121) #1121
OCPBUGS-52960: v2: fix setting version during build (#1118) #1118
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1114) #1114
OCPBUGS-52588: fix: error when no related image was found (#1106) #1106
CLID-325: adds cpu and memory profiling (#1103) #1103
fixes CVE-2024-0406 (#1101) #1101
v2: disable spinners when not running in a tty (#1082) #1082
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
Full changelog

olm-catalogd

UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
Full changelog

olm-operator-controller

UPSTREAM: <carry>: fix crdupgradesafety diff when items schema differ (#1863) #1863
Full changelog

openshift-apiserver

OCPBUGS-52312: Skip blocked registry check for registries with mirrors #498
Full changelog

openshift-controller-manager

OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
OCPBUGS-54304: Intermittent authentication issues when accessing OpenShift registry #369
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
OCPBUGS-53108: Ensure that PSA label is latest instead of pinning versions #983
OCPBUGS-53040: add missing pod disruption reasons to isPodDead #981
OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
Full changelog

operator-marketplace

ART-13123: append .0 to go.mod version #637
OCPBUGS-53149: Ensure that PSA label is latest instead of pinning versions #601
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
OCPBUGS-54671: EIP no reroute: allow multiple entries for pod to pod and pod to join #2510
OCPBUGS-54187: Update OVN to FDP25.A.1 24.09.2-41. #2495
OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
Full changelog

powervs-machine-controllers

OCPBUGS-54243: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 #111
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
OCPBUGS-54940: Scraping: Bump cache iteration after error to avoid false duplicate detection. #247
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-52565: Bump openshift/prometheus-operator to v0.78.2 #327
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

service-ca-operator

OCPBUGS-44952: [release-4.18] Bump go to 1.22.0 #253
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Revert “OCPBUGS-55277: backport 4.18” #29720
OCPBUGS-55277: backport 4.18 #29645
OCPBUGS-55110: Backport MetricsCollectionProfiles patches to 4.18 #29561
OCPBUGS-54807: support provider type external #29666
OCPBUGS-54725: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29657
OCPBUGS-53015: bump(k8s): update k8s.io/* dependencies to v1.31.7 #29634
OCPBUGS-52496: use non-fake boot image for patch #29584
OCPBUGS-52579: Use payload pullspec for image info test #29587
OCPBUGS-51295: Rely on unstructured for update status instead of type conversion #29564
OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
OCPBUGS-48389: move initialization of OC to test instead of package level #29472
OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
OCPBUGS-50930: managed services: add known image check for gcp #29547
Full changelog

thanos

OCPBUGS-52945: Update Go version in go.mod to 1.22.0 #159
Full changelog

vsphere-csi-driver-operator

OCPBUGS-54701: add manifest-topology.yaml for topology related feature and test #303
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github