4.18.18

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.18-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.17, 4.17.18, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.30, 4.17.31, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.4, 4.18.5, 4.18.7, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.8

Created: 2025-06-19 14:46:02 +0000 UTC

Image Digest: sha256:eca2e3f7de2bd92b18f69547c8f0ad842fdb83f0821f76b8692f2716a86b0bde

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.7 to 1.31.9
Kubernetes Tests upgraded from 1.31.6 to 1.31.9
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202504021150-0 to 418.94.202506121335-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

aws-cloud-controller-manager git c3951906 sha256:ea3af108659d7ba517e963568098c820a91d90dbc1836eec0b384ec7feab2b95
aws-cluster-api-controllers git 59febef1 sha256:8ae285523f679301ee83ee1639e4ccca0e7d27492069fef79792188beb3843ff
aws-ebs-csi-driver git b51cd6b8 sha256:f9add710effa358d579c9d4744a1d1b68a2f17ed584a2eb45c60b7be6af9a74f
aws-kms-encryption-provider git 088dcaf7 sha256:da5bc4179940744bf2722cccdf84b363bc26bb3191f2d22773dd2b70b8c7fa86
aws-machine-controllers git 53274f11 sha256:f30f637872bfe1464ae5e49acfcd014659c4340fe88bda09aea6c14b6ce86d42
aws-pod-identity-webhook git f54f9a19 sha256:897c5c9a142ef73dd15ff284def14a0f03ce112566aec53bf7f4ec7ebe205843
azure-cloud-controller-manager git 9c24d768 sha256:e29eb77f1a08c50b8b8611286d2ed7d04eb6339b5c2b8064d95d68dd8f2dcffd
azure-cloud-node-manager git 9c24d768 sha256:4cedda9848fe536f39bdf3f085f458e4d5719e30733045320c5cddd47b6e06a4
azure-cluster-api-controllers git 987615c8 sha256:bacaf40582c37195af6f43e1fab9f613476d1b294bf627b41018d8dcf778444a
azure-disk-csi-driver git 6cced666 sha256:dd75a11a78092066e8684b438cad81673f10289692552e38db5996b263f66017
azure-file-csi-driver git 4b34592e sha256:e666aebd24ba7dbc41ac1f01ba11b1b2fffcdf9b99756ab239b2abc1d06f5d07
azure-workload-identity-webhook git f60e4029 sha256:295a4052a109c97f00f8efb2c31b49f76e432b795929ee309425464d44ad2e32
baremetal-cluster-api-controllers git 7ec03e94 sha256:828146c37bf539a63de97ca965eceb22d16d90fbfdf9b3bf6579148f45c9f499
baremetal-machine-controllers git 1ede6c3f sha256:77336e4fd355808528d0028a6cfa86cb5616cc40d09e8ec90879323bfafb5287
baremetal-runtimecfg git 9e2015c3 sha256:7c27aecec0dbfd1bc74f723cf31a048894dc6fbee953a2bf435263717856d0fe
cluster-autoscaler-operator git 474ad65c sha256:251eda660c236dcbcd2a704ffe496e6032de0ae7036c16b2fabb0cc17e198796
cluster-baremetal-operator git e30ce1d8 sha256:4ce7bf7125448bf84d0ff70ff7645f9f8f58a7676574c3dd59b1de199e358dfa
cluster-bootstrap git d1e01954 sha256:c2574b9676ab05e4db7ea4ee77a887b525dec96982061a1421ca27d30b6369cd
cluster-capi-controllers git d05a6def sha256:e878cdd8fd53b0520e8733fa7bdb5a1f9ee874320295cf56ff4e825c91b65446
cluster-cloud-controller-manager-operator git 33856906 sha256:17c107bac857dcb37b538b4aa301c4e7275fe2af85b85cbd0fcfe6330b091c7e
cluster-config-operator git 85cb4072 sha256:6ddab1c4c1aedc276c6e6bbd196a02d02ed7b17d38d840bfb62948ceaa7e795e
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:b0ed41bfe41bf53e40902b5e9c987a7c71a4d2767d9c556949f8fdecc26e9beb
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:1a42dbedf83d35e7129e34a3580e2914e45d1605371b8b4d61413482fa274c14
cluster-dns-operator git 7cafd0c7 sha256:ea3c1b71629f74c41fe68c101fca92f5981a28fc7ff3f31e2b039e6a6e16633c
cluster-ingress-operator git d967a73c sha256:19ae50834a74993271505af6da5611d5b10170a2376908fd41bd0eba2f03eb71
cluster-kube-cluster-api-operator git 33a1141e sha256:7a31a1994f332f021a62420d0b7459f83707a1b99cd7b2e0fc8c5d8cd6dccf02
cluster-kube-controller-manager-operator git 0fac9aa9 sha256:c8a8aa65c6e8ba4e2896594a5a73ce4b24e2f049dd8a3263611ecd7fa669700c
cluster-kube-scheduler-operator git 6182930d sha256:cb6aea4b896a394290ea1807b087c45e6642830387821e254b146e80244c5fe7
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:eeed7e743b8f2810a16d42733e04e92aed3308be2856738f4e8e5f957c0e65b6
cluster-machine-approver git 01d5fbbe sha256:9f969aad4da6d4f79cc1aca6cb7529a635cc343dad9901344eb5e3c319379b77
cluster-node-tuning-operator git c004ea7e sha256:8f406e868277ebc0d8c4ab5783ba3beb7ed669f13a513d38dbc8543fd3c16f4f
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:b25d37cd8867ebb61e4acecd8dd1acb0de1444a1b84a6ac38a2242ccab150510
cluster-openshift-controller-manager-operator git f1711cf3 sha256:8016c8dfdeb98b22f17219166d97e1f9c6f659a58a7591c0dc7a13e222b24f32
cluster-policy-controller git 5fd85252 sha256:a0c1f2d8dc827cdba7f8fe9687ede25b58dfd59975961985e44d362177b2cdba
cluster-storage-operator git 65d06444 sha256:f375c08611490821eae918af26fc78c40b45cfebfe077ecdad7ecbbfe3dfcb09
console-operator git 10a0cc29 sha256:f6c4ba569d9b58d6156be0ac8714f8b168da5272ea04d9a6153b4731c4b142fe
csi-driver-manila git b52ca7e8 sha256:8379005b8bd82c13b53422a4d529c43065842c641f75f117ecc29f6f2e486352
csi-driver-nfs git 32e77590 sha256:f9b539e2a31e0ef8da8a826b309b20862d01dc59fc63a295ef52a92fc61340ae
csi-external-attacher git 39b37c06 sha256:8a1ebb3870d53c669a99df6056dde558eb0c99aaa8cd45cb110bb2c6b53dc5ab
csi-external-provisioner git 376f0ea0 sha256:4dee773dfccbf9a7cde4e0f3169daa3a148226f28cad4dd5f2c9f85b206b901d
csi-external-resizer git cca3837a sha256:8bd2e50247f7a8000b32272ced8b1150c1eacc757da25537a1a22a6754bd7093
csi-external-snapshotter git 838d2484 sha256:7f8573472e25c1db23d639ef7f23fe44e0d85ffe7f5bf6dc6a0e3cb87a0305e1
csi-livenessprobe git 3a977844 sha256:89af8518eb5538c8861ef1339c2add8e97506e1c1403e5d5832d53bab58e5a5a
csi-node-driver-registrar git c21f5d02 sha256:ff27d60494f1bb8a22d13c4124cee60c3b851b136e0ae6e9d24be8de95a5dc1b
csi-snapshot-controller git 838d2484 sha256:ddcf93543cdd759b8faa463f2ed1b1228647b1ee20e8ea11d73eb7744087b024
csi-snapshot-validation-webhook git 838d2484 sha256:ab93177f0a4dbf890cad6b301e5219122b8294e220820571f77ea53d3456420a
docker-builder git 62f644bc sha256:02314cddd34641644a085f21b16adc10c14c7f568c8510de4d90bb03c216b270
driver-toolkit git 2e139edc sha256:4a52491afabbd33d7e0a07e83373c2a85e5324535215271a0b7949fb16da0c16
egress-router-cni git 3193a756 sha256:61a8e68ec6b7b6242376c9bc114f428086cdba028de4589cf1f6b980c001e742
gcp-cloud-controller-manager git 6ea23561 sha256:016eeb3a6cc2f9a438b7eab64f690fef1917b520c9e304254365b53f9f444766
gcp-cluster-api-controllers git af54f528 sha256:4d32ac2e2d567abd61a2d3cad62a425c582ee65b2267028031d00e4cd7a70179
gcp-machine-controllers git 01f6b419 sha256:8f9476ad234907130336e61fe0d6043a599712f06042c36d46b0cfc7aafc135b
gcp-pd-csi-driver git 1b8c94ac sha256:9f9575e66f423da65836a27c7d94438604fae439d16b1b0b2437062e777a9f58
gcp-pd-csi-driver-operator git 7cb8b38c sha256:7311a4fa837bf0517a0bd7baabbf8ddd80284a8eabd841c662db915ed95d1b0d
gcp-workload-identity-federation-webhook git f0a670c7 sha256:0a9ee241762f93e90736c534732da42842220e78098a1a6f5801019dcbfa828e
haproxy-router git d8058949 sha256:b6fdca02f2da9e6dc456d8b49d8b40d0610a3e3741f9ee85d94f45d4e446c0fe
ibm-cloud-controller-manager git a33026b1 sha256:3cf7651ee20c60da6e5cb42721b256cd69e3899b7901ba06deb4273300c186da
ibm-vpc-block-csi-driver-operator git feae2605 sha256:15ce2ffa32c1b67c31f97de4d514471370b49405333da4379c00d71cf20b0003
ibmcloud-cluster-api-controllers git 2ba764f9 sha256:b70b58d3a039eda87eb958b40626b25d8e9c19eca91d613f27ccaf337d00ccd6
ibmcloud-machine-controllers git 3ffdea64 sha256:a8cb9a0cfa929c854d83ce7c51eef05d3f8704d82055375e3e3110730e759e70
insights-runtime-exporter git 7149f2d5 sha256:ed876158c5ba6202c393e3b69986a2eab83619229bd68c1b98b74adfd88f68f0
insights-runtime-extractor git 7149f2d5 sha256:78b9e8fc3138d90ec3466f3921c3fef13ff572f0471024237612fa0815a9308f
ironic-static-ip-manager git cfbae04f sha256:974672b41ea4d90d9f35e2dea8e4e8edf48e27e3ea1258f8fd10d209019ec48b
keepalived-ipfailover git 716eb0ef sha256:1330821474e0dee5cb9a15c9ed2be1c59caac63dd207d9204972a59fde250005
kube-metrics-server git 962ccca2 sha256:60e2b9f0d3597c4676c246cd67b41f20b3a21fd059608cbe93d67ac348c42740
kube-rbac-proxy git 526498ab sha256:0911beebdfb3b798192a70bf74397fdcf5ea15fa5bbf8843350ac3cdc0f5b0fb
kube-state-metrics git cb5a9296 sha256:8b04db96e9f6496416b50a1893dbe8397d236174d1cbfe464c429c2ebd254e19
kubevirt-cloud-controller-manager git 3f4542ec sha256:06d691c0eb1bad0842295db4db92c7eb94d389c33abb0363bd1e5887efdbc97d
libvirt-machine-controllers git a336f0b5 sha256:13149f9d7806372603d97ec981a56ab32f154b79924efb2a103011662f46757d
machine-os-images git ab432836 sha256:ce0fc8434ba937aeb820eca1719d0f5fbbc36fa29d45bf89fde462a3c1bbead8
multus-cni git 21fb8e05 sha256:0248b640014aa67478afa91cd06edba309ee2813a83d1ce166792fd47736c0a2
multus-cni-microshift git 21fb8e05 sha256:55dd6d779d98c33cb0fd2a478ec357397ca7d6d4ee0bd4673aa96d66d3d06965
multus-route-override-cni git 391c1b03 sha256:f7c8149d5e82a79181f82cdbeae19c4ad871f0d85b9d767b6104eb3955c4c44e
network-interface-bond-cni git 9506a1ff sha256:754abb5eb9b5fee15e2f8a89ea4950450bb51091e7dc72c1d6fb93fd79fe8acd
network-metrics-daemon git e4c214c3 sha256:76e3f808d026151faca99dc438cb9664b8dc2bcbe754d5625625719235b6eb23
nutanix-cloud-controller-manager git d9fe8f38 sha256:6bf0de37d857b71671a5fda83fbad63237969914c12f68a06634295ab3f7328b
oauth-apiserver git 2575ff41 sha256:b2532aba65c2fd72ceb9a332a4646f43cd56c80a593663cb3e52e803e143f1c6
oauth-proxy git cbd44ad9 sha256:445fc6321879119a34cc13fd78ddfd1f1989051ca475d16671f2094c55b5207b
openshift-apiserver git 1872fbf5 sha256:07ec3db0881927d6d61433b117b8e0042faa4883ccaaef47bf391fbb9fbf09d3
openstack-cinder-csi-driver git b52ca7e8 sha256:ce0be91772b1e2d38bdbddcaad8937a3970e861d6185a29b85a6d1a00a3bb531
openstack-cloud-controller-manager git b52ca7e8 sha256:7c69fd2ea1a0f6e5e92072988126e4722a94121852e5fcb6b74b0bb9bfa706b9
openstack-cluster-api-controllers git b0f0dc4e sha256:6c1890557c4c14660de865d10bf87e95738720d93d7f09c7e1afb40f51146e66
openstack-machine-api-provider git d914e77e sha256:b31cd8dd2169b3f1bf7d6ae179119f73e3aacddaaddd88ab3ad95f1554c0633d
ovirt-csi-driver git 1db726a9 sha256:d9e5505363fb8493965957930e71bc71c2557af030bbb90bb5bcec8c7aa7fce8
ovirt-csi-driver-operator git 0feae256 sha256:e8051d142da21cba5113b1dbd728392c8ca5f8f4d5ab5776e78c7550e5c650b6
powervs-block-csi-driver git d36aea34 sha256:d2127de3ebe0efcaefe1a8f3750ca33c2136fc74c63cc2a54e568fb112cbf167
powervs-block-csi-driver-operator git 01fc505a sha256:3ed974554e16e8355e3e4e15eed1948691f69ca161c24e7d24678e967f5f01f1
powervs-cloud-controller-manager git 17ae6fba sha256:88ef9fefe49c9f8892d69538c4047200aa4fda89f67ab5c8edd7b2f0d039c9b2
prometheus-config-reloader git 74987748 sha256:bc189b2122ce1154daf99922434a68923e4891148b27ae47d61f5b3d0dffff46
prometheus-operator git 74987748 sha256:107cd1d81938d3e64aea6de3ad5eb42885609f2f6c9b6d157e7ca3940c3570f8
prometheus-operator-admission-webhook git 74987748 sha256:bec45f09986f7c34854ddf2651ab251395f1b3d3bef155e4bb7fada06dd7d2a8
rhel-coreos sha256:8fea916602e93f2d504affb82cb6eceb0d45c2c80fdc26c9c363bd61ade8c064
rhel-coreos-extensions sha256:d177c322852b75378b6d65f66164c63d8cb89e63c6d3700be3ea8358ce029d70
service-ca-operator git 30efb529 sha256:5df43fcceedcaa79876b4a5079b168e73ae1991fdce16a7d9daab9c3e3634f54
thanos git f1599f65 sha256:96dce5232736eba8bc278a480e0bac1ef8df3293f37ba85f385a7a94436abc6e
vsphere-cloud-controller-manager git c414d1f5 sha256:8fe1115c62ab3b326a3b2a835b0a70212649ab59996229068569e7c8c3566c08
vsphere-cluster-api-controllers git d664fe2b sha256:58befdac9676514162a2d5027c870b823d0ec1fdcd90176a23aaf83fe913ac8e
vsphere-csi-driver git cfcad01d sha256:d65359754035e4b58050f6bca0f105536817c5faf63f36ca618dae5a6f1410a2
vsphere-csi-driver-syncer git cfcad01d sha256:4b686cd3ed7c1d741532547cc592e307f734a2dd9f9fed5d0933c4b08a72883d
vsphere-problem-detector git 7cf7fe24 sha256:9766dad510cf08a93d83bcb8d3449ce0ee17a3a4db8925881e3b97941a78400b

agent-installer-api-server

OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53721: Bump jwt to 4.5.2 in release-4.18 (#1085) #1085
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#958) #958
MGMT-20227: Skip Motherboard serial if set to “-” (#955) (#957) #955
OCPBUGS-54544: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) #965
OCPBUGS-53713: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) #963
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-54383: Disable remove-not-ready-taint for azure disk csi driver #374
Full changelog

azure-kms-encryption-provider

OCPBUGS-53497: bump golang-jwt v4 #11
Full changelog

azure-machine-controllers

OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
OCPBUGS-54947: Fix Load balancer IP setup #9659
OCPBUGS-45564: Align vSphere UPI haproxy config with IPI #9276
Full changelog

baremetal-operator

OCPBUGS-56431: Redfish: correctly handle missing system ID #417
OCPBUGS-53324: BMO can expose any secret via BMCEventSubscription CRD #405
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
Full changelog

cloud-credential-operator

OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-authentication-operator

OCPBUGS-54569: Avoid duplicate OAuth client creation #764
Full changelog

cluster-autoscaler

OCPBUGS-53241: improve replica counting and decrease target size behavior #346
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-config-api

Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
OCPBUGS-54784: [release-4.18] Bump openshift/controller-tools to latest commit #2267
Full changelog

cluster-etcd-operator

OCPBUGS-56110: adjust alerts according to platform #1424
OCPBUGS-53513: fix CVE-2025-30204 #1413
OCPBUGS-55066: increase etcdGRPCRequestsSlow duration #1408
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
OCPBUGS-49898: bindata/alerts/slo: improve burnrate calculation #1808
OCPBUGS-53066: Bump library-go #1828
Full changelog

cluster-monitoring-operator

OCPBUGS-55005: chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and set CMO to Upgradeable=false if errors are found #2592
Full changelog

cluster-network-operator

OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
OCPBUGS-54717: Add IPv6 NGINX configuration #2683
Full changelog

cluster-olm-operator

OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
OCPBUGS-54258: Adding mutex to func createSamples on handler.go #615
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #72
Full changelog

cluster-version-operator

OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
OCPBUGS-55354: Fix dhcp #186
OCPBUGS-55346: Check error returned by ipv6 SettleAddresses #185
Full changelog

coredns

append .0 to go.mod version #134
Full changelog

docker-registry

OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
: OCPBUGS-54807: skip tests on platform type External #2268
Full changelog

hypershift

OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
OCPBUGS-55146: Use 135 for terminationGracePeriodSeconds for v2 KAS #6057
OCPBUGS-54698: Add missing servicemonitors and prometheusrules permissions for non-OVN #6000
OCPBUGS-53404: Set shutdown watch termination grace period on kube-apiserver #5874
OCPBUGS-51810: Fix golang crypto dependency go.mod replacement #5992
OCPBUGS-54814: [release-4.18] add feature set aware feature gates to HO and CPO #6014
OCPBUGS-54624: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5980
OCPBUGS-54630: Sync RBAC for attaching volumes on VM level #5988
OCPBUGS-54627: Use system trust bundle in CPO IDP https client #5981
ARO-15695, OCPBUGS-54625: backport capabilities api #5964
OCPBUGS-54411: Backport PR 5876 to release-4.18 #5936
OCPBUGS-54498: Support hypershift-operator scoping for secretJanitor #5961
OCPBUGS-54609: [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable #5950
Full changelog

ibm-vpc-block-csi-driver

append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
OCPBUGS-53913: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #82
Full changelog

insights-operator

OCPBUGS-51163: Fix bad IPv6 address (#1074) #1074
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
OCPBUGS-55364: Delay determining the hostname to put into ignition #183
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-storage-version-migrator

append .0 to go.mod version #216
Full changelog

kubevirt-csi-driver

OCPBUGS-54630: Ensure volume stays attached through reboots #55
Full changelog

machine-api-operator

OCPBUGS-57057: Updates GCP CredentialsRequest #1376
Full changelog

machine-config-operator

OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Update cluster operator’s status condition message #4993
OCPBUGS-53278: In OCL. Cannot install extensions #4945
OCPBUGS-54817: Make mtu-migration run after wait-for-primary-ip #4979
OKD-239: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4955
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
Full changelog

monitoring-plugin

OU-724: remove deleted image #376
Full changelog

multus-admission-controller

append .0 to go.mod version #96
Full changelog

multus-networkpolicy

append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

append .0 to go.mod version #370
OCPBUGS-55270: Fix whereabouts-reconciler no namespace error #362
Full changelog

must-gather

append .0 to go.mod version #491
Full changelog

network-tools

Fix build error #147
Full changelog

networking-console-plugin

CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Add translations scripts #234
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
Full changelog

oauth-server

append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-56659: v2/archive: print unarchive progress (#1160) #1160
OCPBUGS-54653: delete: continue on errors (#1146) #1146
OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
OCPBUGS-51217: Fix CVE-2025-27144 (#1108) #1108
OCPBUGS-54727: Use tag 0.0.3+2 of catalog-filter (#1128) #1128
Full changelog

olm-operator-controller

UPSTREAM: <carry>: fix crdupgradesafety diff when items schema differ (#1863) #1863
Full changelog

openshift-controller-manager

OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
OCPBUGS-54304: Intermittent authentication issues when accessing OpenShift registry #369
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
Full changelog

operator-marketplace

ART-13123: append .0 to go.mod version #637
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
OCPBUGS-54671: EIP no reroute: allow multiple entries for pod to pod and pod to join #2510
Full changelog

powervs-machine-controllers

OCPBUGS-54243: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 #111
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
OCPBUGS-54940: Scraping: Bump cache iteration after error to avoid false duplicate detection. #247
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Revert “OCPBUGS-55277: backport 4.18” #29720
OCPBUGS-55277: backport 4.18 #29645
OCPBUGS-55110: Backport MetricsCollectionProfiles patches to 4.18 #29561
OCPBUGS-54807: support provider type external #29666
OCPBUGS-54725: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29657
OCPBUGS-53015: bump(k8s): update k8s.io/* dependencies to v1.31.7 #29634
Full changelog

vsphere-csi-driver-operator

OCPBUGS-54701: add manifest-topology.yaml for topology related feature and test #303
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github