4.18.21

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.21-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.25, 4.17.26, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.18.10, 4.18.11, 4.18.12, 4.18.14, 4.18.15, 4.18.16, 4.18.4, 4.18.5, 4.18.6, 4.18.8, 4.18.9

Upgrades to:

4.19.6 (changes) - F S S S
4.19.0-0.nightly-2025-07-25-090703 (changes) - Success
4.19.0-0.nightly-2025-07-25-005602 (changes) - Failed Success
4.19.0-0.nightly-2025-07-24-182930 (changes) - Success
4.19.0-0.ci-2025-07-26-213108 (changes) - Success
4.19.0-0.ci-2025-07-26-131905 (changes) - Failed Success
4.19.0-0.ci-2025-07-26-013405 (changes) - Success
4.19.0-0.ci-2025-07-25-164930 (changes) - Failed Success
4.19.0-0.ci-2025-07-25-042323 (changes) - F F S
4.19.0-0.ci-2025-07-24-222323 (changes) - Success

Changes from 4.18.13

Created: 2025-07-24 11:11:05 +0000 UTC

Image Digest: sha256:9d1b107adad76f023493b8c2b74902639f66273cc120e255454ad447a9ef27d9

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.8 to 1.31.10
Kubernetes Tests upgraded from 1.31.7 to 1.31.10
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202505062142-0 to 418.94.202507221927-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-node-agent git 615411a4 sha256:72dd8b5d8d70047dd95135150fd51aa7e686030a6c02f2fd6624830590184552
aws-cloud-controller-manager git c3951906 sha256:96cd101d0083d858ae205b3b9ff2ec9a175638835dd004ddcf48aff3cc949a6a
aws-ebs-csi-driver git b51cd6b8 sha256:b6e150f0c10cfc825f9a0bb4d42d7a3001c4e350a655dc78fe25ba3b6f5d3025
aws-ebs-csi-driver-operator git cdc9d649 sha256:0c2bc90882e75deb921fb68922f61672f740f9b5ec4a90906ba3fe760ecb173d
aws-kms-encryption-provider git 088dcaf7 sha256:e0e33ff952b61c0907d6d9e7cbb2d5c72ba66c67f41d77ad4c4d498ff5c50415
aws-machine-controllers git 53274f11 sha256:5de2d4d019bbe340526f5f70438b7fabcb58f461fec2de97d876c3b9e7d579e4
aws-pod-identity-webhook git f54f9a19 sha256:4d178d2d8b434fb1436ceff3f64e1aec8d606c138598cc92a5f4f9c3032a05e7
azure-cloud-controller-manager git 9c24d768 sha256:7cb9e1af95a8936e6968aa38ca956cb0b66f86e6fbd4cde2d6adf52bfd5be6b0
azure-cloud-node-manager git 9c24d768 sha256:dda23d18d47aeede39e1fc28f336c559d29f63032056b15d03327693a80d51ac
azure-cluster-api-controllers git 987615c8 sha256:bf41a996c68280bf6a0f155fe35578d010ec78e63179f674b275b0ef7dc9bc64
azure-disk-csi-driver git 6cced666 sha256:9b01abdd59f36a4f54fd78e996ad3e9e38549daae098fb8e15ee5d4edd4f1e7a
azure-disk-csi-driver-operator git cdc9d649 sha256:efe7f74f4132e87295133d69a319e5e028a102bc168f8f2625cc578be127df03
azure-file-csi-driver git 4b34592e sha256:ba0a4a4b92718981cc7cf0862e81225df409999e60e38e6eac192a44fd448f4e
azure-file-csi-driver-operator git cdc9d649 sha256:d4009bd89d3bd814deca1cdabb280bcacce43466aa63b7d7136f36d876e5a3a7
azure-kms-encryption-provider git c937080f sha256:29dadf861b9290bb5d832455c762f59583dcf3c442c50e32df3f4caccc81ed47
azure-workload-identity-webhook git f60e4029 sha256:6c7e090fed1e663bfcef4a10ffefedac4fa4bb9d950c4c8caf42ccb4cd1327ac
baremetal-cluster-api-controllers git 7ec03e94 sha256:6eb0abbc44c5d41fcdf0e4a1fc08d76f565c1df65d2229f181b628b0b74ec93e
baremetal-machine-controllers git 1ede6c3f sha256:d19ff7c90e792e04b78a216d57d1e592a43c48b52f096ab6ac4c2aff8d81f9a5
cluster-authentication-operator git 4a9bc4f1 sha256:93b7fa4bff82f896029e133a56c2b79a40641b1f9cf521124ebcd9f6abe7e9fa
cluster-autoscaler-operator git 474ad65c sha256:e08146dc88892e1da17fca0885aaea07d4163c26cc5095f27611334a617f976e
cluster-baremetal-operator git e30ce1d8 sha256:2fbf42d55bd70bb692e9df6b112329c7b457922a7dca7a34fccebf7115bda974
cluster-bootstrap git d1e01954 sha256:258789c00d1f554b88e9b8b80d5e73a9f9a9df6ae027584f45fa34c0f97c621f
cluster-cloud-controller-manager-operator git 33856906 sha256:a0a5ed60ce54f1ed8a6b3ded92b5901c639a9041288053dff8f6782d96f05a63
cluster-config-operator git 85cb4072 sha256:1af9938783518d12d3c606c13a5d0190e9ceeccf7db58c6b9b5e12f24569efd5
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:c243762e9a3cfaab21a81e2867ba5c930ccf84408e4d78b0d408cfbdfd3993cd
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:9f4267aa39b793e5c5457e67f034390f279729ccfb79a1865d2cd588b0402884
cluster-dns-operator git 7cafd0c7 sha256:1c5b3d8224e1508e595f8df5cc9386a4d27ff62530a1e647645a9f39f0ed6af5
cluster-ingress-operator git d967a73c sha256:4b167bc28251281035fa1c68809b4ef825f87c556adf74b40970dbcee14d3163
cluster-kube-cluster-api-operator git 33a1141e sha256:f75c3270a98180eac793282a60f39ad47cfa852f7b7ccadeb9da75cae36643f0
cluster-kube-controller-manager-operator git 0fac9aa9 sha256:525b131ff1fbc4f3fd6f5b77f47ad376f83684c931f1e57d25295d7970e643c0
cluster-kube-scheduler-operator git 6182930d sha256:c8278095a903e756c30a53be76c372cc6f8921eac4e58aa94425e890eb5a94aa
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:cc28b16592d7bdfcbc0758fb3c8b5a80773cf0be6eafbe989132597e1a71c60e
cluster-machine-approver git 01d5fbbe sha256:b04858b68c72f73cead71ec061cccb2930f9cf420aa84ca09ded9b8760f82df4
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:73fd7e825245b569395bdc1b6f0d67f41019af1514942030705482045457d399
cluster-openshift-controller-manager-operator git f1711cf3 sha256:5fa56bbf7475efc00338062c70009b5dde2f472a3fb0a1ee9840384cac4a6d3c
cluster-policy-controller git 5fd85252 sha256:f04125d16f6fe641581fa3af12c5e5e8c260a64252f2a823d3cca8a0731b564c
cluster-samples-operator git 5cdbe18d sha256:a604bdbf5fbb1eca0f522b8666b3641887d434112ff072cca7466f769e57729d
cluster-storage-operator git 65d06444 sha256:5993f168fb8bef28a4c8833354524f4379aede484ed502982295330c701026b1
cluster-update-keys git 8caab452 sha256:a325244a32f6e9399a2b80ef075f5f8c4eabb9efe2cc6bd587595192921188e8
cluster-version-operator git 94c0e705 sha256:fa6cca9da44def13c13cee788a38209198158b92d238438e6c17fdd6ad4b6343
csi-driver-manila-operator git cdc9d649 sha256:9eec8ec062b6f4e95ff3dbb1a99f1b40fae1900619634cc6f15b8faeab40ddc5
csi-driver-nfs git 32e77590 sha256:410488ece3fc3c698b8e8c3f81787ec90c66a6bebe39bb2d537af952a3b2b4a0
csi-external-attacher git 39b37c06 sha256:eeaca6fb80403991e05c9e180f4b0af39877d944cdbc5243d232719a190095f2
csi-external-provisioner git 376f0ea0 sha256:b5bc06709b38b44d4014ec0e1ea588440c913aa8091c9fbc5b541a9453bf1bcb
csi-external-resizer git cca3837a sha256:f1bb0633682b2abc253ca1bacd0b0293b520d5892a998a46b7f7eb5b50707b99
csi-external-snapshotter git 838d2484 sha256:8e88504b94fbdc5c21e1a91f916d5b41f7817dc443e08eb1b42aecd60a7a3909
csi-livenessprobe git 3a977844 sha256:95f892b00f84d57107cc7a16c4458f2a37a4f2fb5f39a147e8372f4cfb3ee312
csi-node-driver-registrar git c21f5d02 sha256:f7e55814088537e503b4dc006e456bf444b049bdfbd4ba7879ad2fce3c6aef82
csi-snapshot-controller git 838d2484 sha256:b9c8e3c7a27e9d23f59b76162719e2f141c4f4a6c1e041f56959a53e2319f40a
csi-snapshot-validation-webhook git 838d2484 sha256:1c00455fa91def592289e90c9f62f0e5243195269da58c051389fb89cd1fb17b
driver-toolkit git 2e139edc sha256:32b7fb24866fc1464cba053919ab7a4185a517ad49f34e7949771fff1451e874
egress-router-cni git 3193a756 sha256:52babe12855a6a0fd29af2231bbcc357c930935120e20550caffbd7d02be874a
gcp-cloud-controller-manager git 6ea23561 sha256:05383be4b4221b1a1a0b7921872f9b1bd706217f2aad74452fa764661e0306b3
gcp-cluster-api-controllers git af54f528 sha256:c0fbee6c0f576e31eed70cadb61c23c578be9ef41a00e40aab5b900d86b3c105
gcp-machine-controllers git 01f6b419 sha256:c7a8b0a7edeea36819a0aba4baa268ce9d38b3177b4fc54f4381b75035ac5599
gcp-pd-csi-driver git 1b8c94ac sha256:d6bd9c1a75533d0620943dcc8cd7f2db064d66fdd3073e5274b119479bb3f152
gcp-pd-csi-driver-operator git 7cb8b38c sha256:4c2ddb808c8aa1b14f94edeccdc45cf1fe55f5d8133d4f14695304288826da3c
gcp-workload-identity-federation-webhook git f0a670c7 sha256:5c609e9facb2cebaf7eb7738c339ecaec2f2fa9bb6eacf998934813daa24317b
haproxy-router git d8058949 sha256:d97cd7ee327ffef2715fa5c5dd02e5a2ca147653dc920482b6a992d7a81adb3b
ibm-cloud-controller-manager git a33026b1 sha256:82037ebc880379f15d742fde21413afd652362021499f6b7d187d7c16f6807c0
ibmcloud-cluster-api-controllers git 2ba764f9 sha256:8dd0d57e36d76f70259b98e1a5e7a2a69efbe35779fe47ddb92e2bbe667a451f
ibmcloud-machine-controllers git 3ffdea64 sha256:3a5877dce4eb2ee3c73d7bb9e2f9cc5cdbad688d44c101944142a7650654b80f
insights-operator git 7f9ed155 sha256:6c71009c8a913ce2c0d2624e76c34f61a15990c618caa211b7e55a3d22c01484
insights-runtime-exporter git 7149f2d5 sha256:510f7a59d5fa6ec9534ae6216e45a1e679df159524cfe63f049184c4cae0773e
insights-runtime-extractor git 7149f2d5 sha256:8c74aa6da2608bc7cbb4ef5bbfc5601630b9c629b4d8234bf62d0b2b5aa0e7c1
ironic-static-ip-manager git cfbae04f sha256:f25f3a760216a01c20a24975c4ac558bab7e01f97d361d2dab5357736e8acf76
keepalived-ipfailover git 716eb0ef sha256:fd9c02c57c2accf4d303c0a2720c043d412873d36e87499f331e4c02c4b7ab91
kube-metrics-server git 962ccca2 sha256:a6b6f5d1aec4b38d835c5a083a40709990dfddf3b0e059620be0a57d9c6f100e
kube-rbac-proxy git 526498ab sha256:aacf7c64228bf87c3489986c66a11e4ac3b9f0d74d198b48b40ea0645a105dfb
kube-state-metrics git cb5a9296 sha256:3e65646cc6762d461ee3ec3a90b6a69f3c3ca2635d8a9249f28369ab130c443f
kubevirt-cloud-controller-manager git 3f4542ec sha256:b49a48a0f14aa541863a55163ed7b9cb4159559011c3f256f9f3eb235bdf4118
kubevirt-csi-driver git 2111495e sha256:5a4dcaeb6539dc5cf6a0604bc96d8c2f597684b3c37c82ed1c0b03cccccf2c70
libvirt-machine-controllers git a336f0b5 sha256:011b1a25ea121283d1f0c540ad037f939aff68d0cfe0b101ce3dfdd096e367b9
machine-os-images git ab432836 sha256:ce0769d02760546c0b2070ce9e0e4b770307e34432f017cd6fae7a9be6cefd35
metallb-frr git 98ccbe64 sha256:bddced72a1e3576f348aa001dd8815ed09e1ae8718f0856a365e4a3b9182afd4
multus-cni git 21fb8e05 sha256:f18e227b9d54935b39954f8a77f87b1d1b7897c70fc246e6843cbbe36fc79897
multus-cni-microshift git 21fb8e05 sha256:008537b0707e0f3694bf25149bab806dfab047bf0438d5e238667ca19cc453c2
multus-route-override-cni git 391c1b03 sha256:a90ed12a31c3fe6033ccbae7a42d63ddb1e16b51f631d9092041e01cffe58094
network-metrics-daemon git e4c214c3 sha256:1e186312f3f74820b8dde7144044424ffe39f5c0f2fb43ee97f87968f3d9c8c5
nutanix-cloud-controller-manager git d9fe8f38 sha256:24b39a7602d86e3fc3b623316751deb2b38dc49a97d1649facf842dd02bb23c9
oauth-apiserver git 2575ff41 sha256:ec3a36536c2cf9291b75479e6283d52ed38b59b67c57b7fa36e8413ca8dd8a07
olm-catalogd git 9f981b3e sha256:e4ce4a86321d683cd8049dea0e2fd03ac6f0410dd17cb9af73c3f64930eab494
openstack-cinder-csi-driver-operator git cdc9d649 sha256:4d2678c1fb01143edc0537d31f112616f6e73928af9f331f3ebbd8953594c385
openstack-machine-api-provider git d914e77e sha256:d349b730a37bdd6b30a42898705b8b20af5ed12a3f20991c4966747d56ba20ac
ovirt-csi-driver git 1db726a9 sha256:15fb907103a238bb3ef49f3b1b11edaaf20067eff8d19f908796b6f2bafe753f
ovirt-csi-driver-operator git 0feae256 sha256:6144660f9a6a194e5167aff414c674647ff86392cb202a7159dcc51ec0b15ec0
powervs-block-csi-driver git d36aea34 sha256:46412d18ccf0d2e97245c20085d9d0789e879785d63f9be2d0a874ce49ea0239
powervs-block-csi-driver-operator git 01fc505a sha256:c8af92263646b00f3c34982d94c642d076c46b8bd5fa7aad948c8b8887aad3f5
powervs-cloud-controller-manager git 17ae6fba sha256:3044642b63d8027472a0776ccdf3a439a0d8a8b90d8027a44370548e8ad8080a
powervs-machine-controllers git 10ac06f5 sha256:bb11a52a59513583b543d83ad91ade31a7956a509bbf616cafcf297e931f4a48
prometheus-config-reloader git 74987748 sha256:510a0eeb5bb587269c697317333f3f3909180582bfbc400531a24b3793aaa39e
prometheus-operator git 74987748 sha256:2cf23c1208e935869c0e2dffe7a9e20001f863ce905335a97230c98b061f0bd0
prometheus-operator-admission-webhook git 74987748 sha256:fefd4a4af15b6ed673e071b01ce5c9d04dbfebafa77f16cc1b16cb3a437cb735
rhel-coreos sha256:95d3610dad39807471bb2fd4aea4079b32fe5a2fed546f25c91fa9d99ee3e51c
rhel-coreos-extensions sha256:e40ac6498a409397d37c563f377675408a871f9971d354bb8f1a0b1845a0381f
service-ca-operator git 30efb529 sha256:1d6f140c5c2760bf3be8e3973047da258b9a889997a2d086a173ec2d71d25224
thanos git f1599f65 sha256:5afd1b76b9cff27d02afc7ea73b8909c71346b4a8c276c32a2615f295b21471e
vsphere-cloud-controller-manager git c414d1f5 sha256:5bc9ffcddf6c88513f35e45205053036c14dc15e68ed8f32fc220b8ccde60eaa
vsphere-cluster-api-controllers git d664fe2b sha256:7ca877134fe2a740f58c3af7cd159e44ad1fc89acd61abfb2ac86b2471bc9de0
vsphere-csi-driver git cfcad01d sha256:d1657c88ad495970b4829f0b4508337027c234f14955e2b582c6d73118025005
vsphere-csi-driver-operator git 2b241410 sha256:aa09bb5418cab22d8af02cca4ea279b494b707eca247304f3d91dd51d536fde3
vsphere-csi-driver-syncer git cfcad01d sha256:bfd0140ba55e635c7bcb28eacc18f665538d740ef5fbcb99353226498eb7da69
vsphere-problem-detector git 7cf7fe24 sha256:78678a8dd1b7c477b8ad1473d081b4f579b5ad96d3d314a46be9cb24c8d81f88

agent-installer-api-server

OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58650: Bump glog pkg to 1.2.4 (#1181) #1181
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-58670, OCPBUGS-58675: bump github.com/golang/glog to v1.2.5 #556
OCPBUGS-56434: Update manifests to use v1 admissionregistration group #554
Full changelog

azure-machine-controllers

OCPBUGS-56167: [release-4.18] Update virtualmachines service to armcompute/v5 SDK #145
OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-58321: allow to deploy single nodes with UPI #9824
OCPBUGS-54744: Filter out excess CA certs when adding node #9647
OCPBUGS-58264: vSphere - remove unit tests using nip.io #9813
OCPBUGS-56797: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9747
OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
Full changelog

baremetal-operator

OCPBUGS-56431: Redfish: correctly handle missing system ID #417
Full changelog

baremetal-runtimecfg

OCPBUGS-59280: Bump logrus version #354
OCPBUGS-57782: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #351
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-58233: Return error in case of error #2054
OCPBUGS-57507: avoid transfering permissions when copying artifacts from node-joiner pod #2039
OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
Full changelog

cloud-credential-operator

OCPBUGS-58247: ccoctl: only add owned tag to azure resources on create #882
OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-autoscaler

OCPBUGS-59260: Fix cool down status condition to trigger scale down #361
Full changelog

cluster-capi-controllers

OCPBUGS-56434: Update manifests to leverage v1 admissionregistration group #241
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-config-api

: add OnClusterBuilds to default config #2365
Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
Full changelog

cluster-etcd-operator

OCPBUGS-56834: etcd pod containers do not start when tls min version is 1.3 #1428
OCPBUGS-56110: adjust alerts according to platform #1424
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
Full changelog

cluster-monitoring-operator

OCPBUGS-56251: set upgradable false when alertmanager v1 is specified #2591
Full changelog

cluster-network-operator

OCPBUGS-58047: Add cert-rotation script into cno #2702
OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
Full changelog

cluster-node-tuning-operator

e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) #1355
: OCPBUGS-57947: kernelPageSize + hugepages combinations validation ³⁄₃ #1343
: OCPBUGS-57947: Support hugepage size selection for ARM-based clusters ²⁄₃ #1342
OCPBUGS-57947: CNF-18142: Add kernel page size field ¹⁄₃ #1341
Full changelog

cluster-olm-operator

OCPBUGS-57767: fix olm.maxOpenShiftVersion float parsing #125
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-59501: Add the Origin header to the HeaderBlacklist in the co… #15295
OCPBUGS-59443: Not able to launch terminal window from OCP web console due to console plugin conflicts #15290
OCPBUGS-59446: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15292
OCPBUGS-58457: fix bug where / in console.tab/horizontalNav href brea… #15250
OCPBUGS-58203: OpenShift console PVC clone cannot use B as the unit #15215
OCPBUGS-58317: Implement sessions in openshift authenticator #15237
OCPBUGS-58088: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15202
OCPBUGS-58089: Getting “Oh no something went wrong” error message in web console. #15203
OCPBUGS-57931: Add the ability to launch multiple modals with useModal hook #15196
OCPBUGS-57580: Update vSphere configuration form to support CM YAML f… #15191
OCPBUGS-57743: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15188
OCPBUGS-57209: Add flags in console static plugin for all the components of this epic #15160
OCPBUGS-36173: Secret key with binary file changes when edited via Console. #15178
OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
Full changelog

console-operator

OCPBUGS-45869: don’t set current clients when no OIDC providers are configured #948
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-56928: bridge: Add option to enable port isolation #203
append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
Full changelog

coredns

append .0 to go.mod version #134
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58835: CARRY: don’t ignore json files #339
Full changelog

docker-builder

OCPBUGS-57758: S2I build cpu limits observed by assemble are limited to 1 cpu #473
Full changelog

docker-registry

OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-57887: Update to Kubernetes v1.31.10 #2348
OCPBUGS-57070: UPSTREAM: <carry>: Bump cadvisor version to fix container_fs metrics #2332
OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
Full changelog

hypershift

OCPBUGS-57818: Reuse hosted cluster release and metadata providers #6301
OCPBUGS-58126: Don’t use /version for haproxy health checks #6323
OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58741: bump github.com/golang/glog to version v1.2.4 #104
append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55297: [IBM VPC] set offlineExpansion to false in e2e test manifest #144
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-storage-version-migrator

append .0 to go.mod version #216
Full changelog

machine-api-operator

OCPBUGS-57057: Updates GCP CredentialsRequest #1376
Full changelog

machine-config-operator

OCPBUGS-55246: kubelet: readonly mounts for criometricsproxy #4998
OCPBUGS-58067: Ensure the build controller restarts on upgrade #5140
OCPBUGS-57328: Do not set cpu system reserve below the default value #5152
OCPBUGS-56624: Give keepalived container chroot cap #5073
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #5138
OCPBUGS-57935: add MachineConfiguration to CO related objects #5134
OCPBUGS-54463: Update desired config in MCN on OCL update #5026
OCPBUGS-57900: MCC complains about v1 MachineOSConfig in default featureset #5131
OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

monitoring-plugin

OCPBUGS-54314: Fix “Export as CSV” #461
Full changelog

multus-admission-controller

append .0 to go.mod version #96
Full changelog

multus-networkpolicy

append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

append .0 to go.mod version #370
Full changelog

must-gather

append .0 to go.mod version #491
Full changelog

network-interface-bond-cni

OCPBUGS-58095: Bump github.com/containernetworking/plugins from to 1.7.1 #79
OCPBUGS-57794: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 #74
NO-JIRA: Add ci-operator yaml file #78
Full changelog

oauth-server

OCPBUGS-57300: Updating oauth-server-container image to be consistent with ART for 4.18 #186
append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-59235: [release-4.18] v2/archive: error d2m when no tar files found (#1212) #1212
OCPBUGS-58280: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1206) #1206
OCPBUGS-58272: Fixes the tag when rebuilt catalog by digest only (#1204) #1204
OCPBUGS-57387: v2/archive: fix sanitization of . (#1196) #1196
OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1195) #1195
OCPBUGS-57197: [release-4.18] v2/cli: always remove past archives before m2d (#1176) #1176
OCPBUGS-56486: v2/config: allow delete and mirror words (#1175) #1175
OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1173) #1173
OCPBUGS-56659: v2/archive: print unarchive progress (#1160) #1160
OCPBUGS-54653: delete: continue on errors (#1146) #1146
OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
Full changelog

openshift-apiserver

OCPBUGS-58461: Wire dry run option to Image API server operations #531
OCPBUGS-56609: Fix image reference in TestImageStreamImportQuayIO #514
Full changelog

openshift-controller-manager

OCPBUGS-57949: ignore error failing to find pull/push secrets #399
OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44458: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #365
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-59421: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1040
OCPBUGS-58882: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1034
OCPBUGS-57427: reduce cache expiry frequency [release-4.19] #1020
OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
Full changelog

operator-marketplace

ART-13123: append .0 to go.mod version #637
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-59623: Revert “unpin libreswan version” #2678
OCPBUGS-57318, OCPBUGS-58159: DownStream Merge Sync from 4.19 [06-26-2025] #2646
OCPBUGS-46401, OCPBUGS-48710, OCPBUGS-55263: DownStream Merge Sync from 4.19 [05-28-2025] #2593
OCPBUGS-57108: Fix hybrid overlay node subnets collision with cluster subnets #2619
OCPBUGS-57106: Increase InformerSyncTimeout to 60s #2622
OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-57887: Update to Kubernetes v1.31.10 #29941
OCPBUGS-58366: Make EgressIP helper functions more reliable #29950
OCPBUGS-57081: Do not set the MTU when using NetworkAttachementDefinition #29891
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #29937
OCPBUGS-57329: Fix failed tests of e2e-aws-ovn-tls-13 #29911
OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github