4.18.30

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.30-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Failed (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Failed (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.24, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.15, 4.18.16, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.14

Created: 2025-12-05 07:32:54 +0000 UTC

Image Digest: sha256:349912ef80ff71bdb591b36d8b3eca9df2446fa2497af08058d1777b8e0cf3ca

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.8 to 1.31.14
Kubernetes Tests upgraded from 1.31.8 to 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202505151852-0 to 418.94.202512022246-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

aws-cloud-controller-manager git c3951906 sha256:3bc2eacfcbd76a6bdc64c3a3bf343b0adddde3a48bce7e18b29e6d83fbfd0068
aws-ebs-csi-driver git b51cd6b8 sha256:bc4364d9fd8df0372b3519a2fa79cc48b7ba1a0574aa65c78531a5f5b433ce87
aws-kms-encryption-provider git 088dcaf7 sha256:7db7c1e3bc45a381f17b4757ca6c7bdc7aef8942f584c794b0c3eb677532c0ad
aws-pod-identity-webhook git f54f9a19 sha256:3fbbde9a9eddb1063119543e1242e998b7886be550bea1a2ca18b1c56f79fb09
azure-cloud-controller-manager git 9c24d768 sha256:67dceadbc4f3ae076448d76d68014666cbdf183479b919f14e0a1db814074cbe
azure-cloud-node-manager git 9c24d768 sha256:2e501b551f653bd533740858075f9a4b1909385423e8ade0f84ae9f551652925
azure-disk-csi-driver git 6cced666 sha256:4d8655770fe392f27ed1867592bf4350f1a82d9c7a6bc2d1cf0b08ca8ce06cdf
azure-file-csi-driver git 4b34592e sha256:575d85f29e7ad73a404c05132de772be8178a11d7100e817446289adb7bc5231
azure-kms-encryption-provider git c937080f sha256:2880bfb081dd461b31daa939a81201ebe1a2aabae052004b63ff0d3c546655ff
azure-workload-identity-webhook git f60e4029 sha256:28bebbff1388b667916d88cac6862ee64b1987eedc446878e23b657a6d6c0c15
baremetal-machine-controllers git 1ede6c3f sha256:8eb8a5a8fa5cde786093ffb24bff0efa073fd4e878e1954cbb36a1db5bc80da6
cluster-autoscaler-operator git 474ad65c sha256:befd25695492e1ec436318d53c3c46afd1ad7b47f597e4292d5af52b7689e5f1
cluster-bootstrap git d1e01954 sha256:9989799459100ca3f60a7f94e5ed2560f79c333b718d9bbd6d5afb2ca7957966
cluster-config-operator git 85cb4072 sha256:e3ccc2d494132576e6bf24339ff6862d26d1db109db8c09ba988c0cb882359a6
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:1a569a784294587d7328784ce19ebeab7f9b786a3814818c751964809c57737c
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:d8039dd745c6ea6f3e40e9aff8c3701a929fec8cb6a53ced582083cb52b43224
cluster-dns-operator git 7cafd0c7 sha256:8c0997f5f25d5750fdecdcbc08a212ddcdeb5b905beb6ca2383aa4cdbe904f8e
cluster-ingress-operator git d967a73c sha256:ff4183e6e3523c4a4081499a4490914232943450dfe316d7d391c61e748b4b09
cluster-kube-cluster-api-operator git 33a1141e sha256:8e20144c2f392d5061c7b532a9583cf79fc73d8e48b9c0b1d958571baaaf802e
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:839351f286165faaebffdfc8574ed9b67fef8113d806c4decbece06bbcc127e8
cluster-machine-approver git 01d5fbbe sha256:11f11b927c43f5a3ef2b688b1ad6c92f537f205a0d4c631b59a8950f416ca530
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:d3625af539f5a6ffc4cd5f9aa3b8ce343fa97bcadd6354d925862f5188b09405
cluster-openshift-controller-manager-operator git f1711cf3 sha256:e727a3f7cee2030781a011eb52af2e48644287a62c0e5ae57f26ac6619acffff
cluster-policy-controller git 5fd85252 sha256:bf8c356abe904110a5b2866c386b6fb1f33d0451fde5610bcb1d3294d1b91b0a
cluster-update-keys git 8caab452 sha256:fb7fa289ffcc0b489d5574a094279f49d4574518ffcb5476b5c68650fab8707d
csi-driver-nfs git 32e77590 sha256:35a615bf26386dc00e94f38cdcb843581ceccf4da7458dc4bdee63e933552b03
csi-external-attacher git 39b37c06 sha256:49f2ce8f67f6da11ea1f1ce91d991a1182730d2dddf79b67e00b2eb0f96f3f93
csi-external-provisioner git 376f0ea0 sha256:e3de1a029c4bec8f8e5b57aac12dbb52cc4e2376616367897dce790d942051fd
csi-livenessprobe git 3a977844 sha256:3248f4afcca2cdfe432234dec95ec79c60af4ca7c35ad3055ec326f73f4655a4
driver-toolkit git 2e139edc sha256:51051eb2af7a27d0f0fc98d10b287fafdc10cf5cb59e2d67839afe6a8c83d198
egress-router-cni git 3193a756 sha256:9a5a71efa06abe22db500df646857ffeb67390e2c3e3c84ca8026203dd9ddc3a
gcp-cloud-controller-manager git 6ea23561 sha256:6f9856e53722d2c84da7bb9db33d3df619f60f6a8f918aa115e443988208cf16
gcp-pd-csi-driver git 1b8c94ac sha256:460991751c3ff2e4e9abcaa1f93984117c4a76896980d80ca47c0c25a5b10ef6
gcp-pd-csi-driver-operator git 7cb8b38c sha256:81d0b7cf408571dbb1e8dcd28e48e1bcbc16a9539b6230c9efb6afe284172954
gcp-workload-identity-federation-webhook git f0a670c7 sha256:8afff834bfbed9f18907ecb677f51beca37cf8e258b65deb2db41f984697cfd4
haproxy-router git d8058949 sha256:0af23bc26a1d8a64483ea2831a0d222b44b3a6e33f6763d01cd04843a6aadef4
ibm-cloud-controller-manager git a33026b1 sha256:b65886b9ba08d837ea8867e40a78a5dcbf0a0bea19a376fcbfb9fb63fecb84b9
insights-runtime-exporter git 7149f2d5 sha256:d5d23b0dc2587d8ab079177d23c1945e976cab4862801f1c506f3522243d4a23
insights-runtime-extractor git 7149f2d5 sha256:3d24c222c24a51f669ae1a869b76ca3fac08e84df20b227b7c30879847c42383
ironic-static-ip-manager git cfbae04f sha256:2cb7d5fb99f9380f33c4b619b9cd7d7f800fd505cd032b6029cf20fd8ecedb11
keepalived-ipfailover git 716eb0ef sha256:8893ee6a62997b84f1c1daa953e4bead918cb338d52c10eabeff14fd83fc799f
kube-metrics-server git 962ccca2 sha256:62916a71b6808d472167485d0fb8e5d0491f1c40561820f477e7e514b9dd3817
kube-state-metrics git cb5a9296 sha256:d657864af703df142993a130f68e830bb2491c80347b097c6be62cc1ba73ef1d
kubevirt-cloud-controller-manager git 3f4542ec sha256:014d6d974980f411a76b0ecae79394af9e913ea90f5ebf6ad10239df1f833405
libvirt-machine-controllers git a336f0b5 sha256:b830e466251e7090a6f9b9e5ef10f9f4630b05acfa98d91beba2ed6c85959bff
machine-os-images git ab432836 sha256:4f3919f0a51035ba3569ff922c8c057779ec12c4939dda6227680c2ec351eb87
metallb-frr git 98ccbe64 sha256:d551aba57e21e8434d95c6ba091fabe4fe112402448eb91cd21d256178f37ca0
multus-cni git 21fb8e05 sha256:8b41208b9d1b4c2988a99e3c890703166bde94f23d4cd3c48064e2a5fce18fea
multus-cni-microshift git 21fb8e05 sha256:f9d86dc5ee44da3eb1b8f73b94538478657fada310d1b8ad33b22860d4da2ef5
multus-route-override-cni git 391c1b03 sha256:13ffcf90c187b738347a95ebb1bc4ec0c66a5b82dd2da05280b0acbee1e404ab
nutanix-cloud-controller-manager git d9fe8f38 sha256:96afcd6ba8f4773440eeb1b732d51b27caf1d703632dedad69943e596e25810e
nutanix-machine-controllers git afe324bf sha256:92f9ba67d86cc4c10737d8babba6c1a93f7777ecd86943787483e5fa2ff8c9d7
openstack-machine-api-provider git d914e77e sha256:d94537cfa111a1ce4a43bae7a18aeda9e56fab8783353e488c23c44f59cfb19a
ovirt-csi-driver git 1db726a9 sha256:1751bbba7c7ed389bb5528459e492882de9715878ae6b13169b529925d045869
ovirt-csi-driver-operator git 0feae256 sha256:93fb69ee3cc98b04943c747099487cf83956e8bfc4c6bb182e2584e2a9e33552
powervs-block-csi-driver git d36aea34 sha256:813a2f1be201549288e3f8f4eb27149763c79dc647349dd932ebf4ac791420d4
powervs-block-csi-driver-operator git 01fc505a sha256:80d8b919b21b518d4769966fc7c014e9406726f43ae5ed9a8657be1f95acffe4
powervs-cloud-controller-manager git 17ae6fba sha256:d2a076fd6a924be10f0ed6e3e754498a81aa7962d4c67be237424095ae3fb47b
rhel-coreos sha256:09c7261710e5a91f63f67b0d80f47f4ecf26fe9e0ee07dfd1962944e73a019d5
rhel-coreos-extensions sha256:0fda2743b0f7a9c3123824a70de8d3d91dfb82c9d095a99ceb837e25ec553501
route-controller-manager git ce6ffa24 sha256:a5826a05343bdd49d04d77305ddd935228863941549d27e6497888c96638aa69
service-ca-operator git 30efb529 sha256:2af60f461be57443bdaf0985f6f4a6bbabac434cfe25cfd6df90683241c5f250
thanos git f1599f65 sha256:91bbf74739eab88f5d14efa73f1a61def57a8a6567c57974e9d3f0b486a9d98b
vsphere-cloud-controller-manager git c414d1f5 sha256:fdfd596de25317bd9fad53399e84a7057051de2dde28105d065efeec4d3b5232
vsphere-csi-driver git cfcad01d sha256:601460acc632432ea02ee6183744f4a269791cd8d554e8fb2e8d5f9ca4fbcb85
vsphere-csi-driver-operator git 2b241410 sha256:3696f233e765ade95400a063f7503fd69c14d6e525eb9c5655026d1504814c67
vsphere-csi-driver-syncer git cfcad01d sha256:f4c6005c229cfbd6f91e0802bd599ebc9865fc9a29ec2963b89d7febfb59d417

agent-installer-api-server

NO-ISSUE: pin gotestsum to v1.12.3 (#8018) #8018
OCPBUGS-58635, OCPBUGS-58640: Bump glog to v1.2.5 in release-4.18 (#7877) #7877
OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58650: Bump glog pkg to 1.2.4 (#1181) #1181
Full changelog

agent-installer-node-agent

OCPBUGS-58655, OCPBUGS-58660: Bump glog to v1.2.5 in release-4.18 (#1069) #1069
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-61841: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #570
OCPBUGS-58670, OCPBUGS-58675: bump github.com/golang/glog to v1.2.5 #556
OCPBUGS-56434: Update manifests to use v1 admissionregistration group #554
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-62664: disable e2e snapshot tests #463
OCPBUGS-63558: Add RBAC ClusterRole and Binding for driver node #454
OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
OCPBUGS-62973: Add withCABundleDaemonSetHook() to AWS EFS operator #447
OCPBUGS-55053: Correct ASH driver inject env config #381
OCPBUGS-54453: Enable required driver services #375
OCPBUGS-60596: Bump library-go to fix assignment to nil map issue #421
OCPBUGS-60203: Remove stale conditions #413
Full changelog

aws-machine-controllers

OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #348
Full changelog

azure-machine-controllers

OCPBUGS-65882: Set updateDomainCount to one when faultDomainCount is one #175
OCPBUGS-63669: Support datadisks on Stack Hub #167
OCPBUGS-56167: [release-4.18] Update virtualmachines service to armcompute/v5 SDK #145
OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #51
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-52659: [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme #9545
OCPBUGS-65588: Update the RHCOS 4.18 bootimage metadata #10113
OCPBUGS-58504: Refactor removing loadbalancer in OpenStack #9831
OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
OCPBUGS-62810: Update the RHCOS 4.18 bootimage metadata #10014
OCPBUGS-59490: Make swift containers removal not fatal for UPI. #9839
OCPBUGS-61529: Use less permissive access for /var/lib/etcd for SNO #9937
OCPBUGS-61178: Refine check for supported SNO platforms #9923
OCPBUGS-60592: baremetal: always set external v6 URL on dualstack #9895
OCPBUGS-54598: Update the RHCOS 4.18 bootimage metadata #9900
OCPBUGS-56177, OCPBUGS-59155, OCPBUGS-59158: Migrate AWS SDK to V2 to support MX-Central Region #9709
OCPBUGS-58321: allow to deploy single nodes with UPI #9824
OCPBUGS-54744: Filter out excess CA certs when adding node #9647
OCPBUGS-58264: vSphere - remove unit tests using nip.io #9813
OCPBUGS-56797: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9747
OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
Full changelog

baremetal-operator

OCPBUGS-56766: Make firmware update handle only a subset of Spec.Updates #421
OCPBUGS-56431: Redfish: correctly handle missing system ID #417
Full changelog

baremetal-runtimecfg

OCPBUGS-60111: Re-add ENABLE_NODEIP_DEBUG env var #364
OCPBUGS-59280: Bump logrus version #354
OCPBUGS-57782: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #351
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-65707: fix(must-gather): do not set node affinity if nodename is set #2145
OCPBUGS-64608: Help with must-gather scheduling through suggesting preferance of nodes #2127
OCPBUGS-58233: Return error in case of error #2054
OCPBUGS-57507: avoid transfering permissions when copying artifacts from node-joiner pod #2039
OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
Full changelog

cloud-credential-operator

OCPBUGS-65800: ccoctl azure: retry custom role creation on consistency errors #950
OCPBUGS-65479: ccoctl: use pagination when listing resources in aws #947
OCPBUGS-63548: ccoctl: add public-key-file flag to create-all #938
OCPBUGS-55127: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #915
OCPBUGS-60971: ccoctl: aws to use proper issuer url on subsequent runs #907
OCPBUGS-60618: ccoctl azure dnszone-resource-group-name now optional #899
OCPBUGS-58680: github.com/golang/glog v1.2.5 #891
OCPBUGS-58247: ccoctl: only add owned tag to azure resources on create #882
OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
Full changelog

cloud-network-config-controller

OCPBUGS-65651: [release-4.18] Fix capacity calculation #193
OCPBUGS-64779: [release-4.18] Change the capacity struct from int to ptrOfInt #189
Full changelog

cluster-authentication-operator

OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #754
Full changelog

cluster-autoscaler

OCPBUGS-60908: revert openshift replica fix #375
OCPBUGS-60235: fix checkpoint gc of unknown recommenders #368
OCPBUGS-59260: Fix cool down status condition to trigger scale down #361
Full changelog

cluster-baremetal-operator

OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
OCPBUGS-60586: Remove webhookport (9447) as HostPort #501
OCPBUGS-58315: Bump github.com/go-errors/errors to v1.5.1 #492
Full changelog

cluster-capi-controllers

OCPBUGS-56434: Update manifests to leverage v1 admissionregistration group #241
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
OCPBUGS-60015: Add Service using common resource templating #405
OCPBUGS-60015: Update service selector to match deployment label #403
Full changelog

cluster-config-api

NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2562
CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
OCPBUGS-52347: Add CEL validation for RegistrySources in Image API #2218
OCPBUGS-60904: MachineOSConfig name should match MachineConfigPool #2458
Update crd-schema.json to release 1.33 branch #2459
: add OnClusterBuilds to default config #2365
Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
Full changelog

cluster-etcd-operator

OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1518
OCPBUGS-61235: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1478
OCPBUGS-59992: fix ordering on bootstrap IP selection #1458
OCPBUGS-59803: add missing ports to svc and pod spec #1455
OCPBUGS-56834: etcd pod containers do not start when tls min version is 1.3 #1428
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1976
OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
OCPBUGS-61039: Set goaway chance to 0.001 #1912
OCPBUGS-60176: Add missing service ports to apiserver service #1888
OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #897
OCPBUGS-60131: Missing endpoint slices for open ports the operator uses #852
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #590
Full changelog

cluster-monitoring-operator

OCPBUGS-61965: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2723
OCPBUGS-64579: Fix KSM deny-list typo #2731
OCPBUGS-63488: Remove AlertManager endpoints when disabled #2737
OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
OCPBUGS-63410: [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy #2724
OCPBUGS-63017: test: remove image registry e2e tests #2711
OCPBUGS-61706: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2669
OCPBUGS-59962: operator: increase wait time till degraded to max 4 times 5m #2633
OCPBUGS-56251: set upgradable false when alertmanager v1 is specified #2591
Full changelog

cluster-network-operator

OCPBUGS-65704, OCPBUGS-65705: Annotate whereabouts-controller #2842
OCPBUGS-62671: Add drop flows for GARP #2810
OCPBUGS-60984: Update CNO reviewers/approvers #2766
OCPBUGS-60795: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2782
OCPBUGS-47651: Re-disable metrics server #2622
OCPBUGS-58047: Add cert-rotation script into cno #2702
OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
Full changelog

cluster-node-tuning-operator

OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
And 6 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-olm-operator

OCPBUGS-57767: fix olm.maxOpenShiftVersion float parsing #125
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

cluster-storage-operator

OCPBUGS-62666: Move metrics to vsphere driver #632
Full changelog

cluster-version-operator

OCPBUGS-62869: disable metrics auth for hypershift clusters #1242
OCPBUGS-58450: Failing=Unknown upon long CO updating #1211
OCPBUGS-60222: CVO protects /metrics with authorization #1223
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-65592: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15725
OCPBUGS-65932: Preserve query string in perspective switch + remove dev console folks from reviewers #15761
OCPBUGS-65533: Preserve path on perspective switch #15716
OCPBUGS-64735: Expose prometheus tenancy label path as a proxy #15685
OCPBUGS-64682: limit node log length to 1000 lines #15680
OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
OCPBUGS-63247: fix bug where Roles list was displaying invalid data f… #15619
OCPBUGS-63041: switch to dev perspective for /dev-monitoring #15601
OCPBUGS-44156: bump dompurify to latest #15589
OCPBUGS-62326: /auth/error?error=missing_state&error_type=auth is showing blank page #15544
OCPBUGS-61569: Update CHANGELOG for 4.18 plugin SDK package publish #15516
OCPBUGS-61569: Fix bug with Console provided PatternFly shared modules #15479
OCPBUGS-61697: Remove ancient X-XSS-Protection header #15493
OCPBUGS-60236: Make sure CSP violations are only reported to telemetry once per day per browser #15453
NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish #15456
OCPBUGS-50983: Store Topology sidebar alert in the localStorage #15431
OCPBUGS-54660: Added patternfly/react-topology to shared module list of dynamic plugin sdk #15371
OCPBUGS-50570: Fix regression where plugins were not tracking CSP violation status a… #14754
OCPBUGS-60140: Recognize Detached BMH status #15362
OCPBUGS-54660: Add BaseNode in topology folder into Dynamic Plugin SDK #15369
: OCPBUGS-60278: Fix i18n string for event stream #15403
OCPBUGS-54660: Expose OdcBaseNode through the dynamic plugin SDK #15370
OCPBUGS-54660: Expose topology components and utils via plugin SDK internal package #14777
OCPBUGS-58364: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15272
OCPBUGS-59778: add data-test attrs to console plugins table #15327
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15330
OCPBUGS-59501: Add the Origin header to the HeaderBlacklist in the co… #15295
OCPBUGS-59443: Not able to launch terminal window from OCP web console due to console plugin conflicts #15290
OCPBUGS-59446: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15292
OCPBUGS-58457: fix bug where / in console.tab/horizontalNav href brea… #15250
OCPBUGS-58203: OpenShift console PVC clone cannot use B as the unit #15215
OCPBUGS-58317: Implement sessions in openshift authenticator #15237
OCPBUGS-58088: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15202
OCPBUGS-58089: Getting “Oh no something went wrong” error message in web console. #15203
OCPBUGS-57931: Add the ability to launch multiple modals with useModal hook #15196
OCPBUGS-57580: Update vSphere configuration form to support CM YAML f… #15191
OCPBUGS-57743: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15188
OCPBUGS-57209: Add flags in console static plugin for all the components of this epic #15160
OCPBUGS-36173: Secret key with binary file changes when edited via Console. #15178
OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

NETOBSERV-2023, OCPBUGS-60304: Implement a quickstart for netobserv operator #997
OCPBUGS-60081: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1031
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #1027
OCPBUGS-45869: don’t set current clients when no OIDC providers are configured #948
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-60871: [release-4.18] host-device: Return interface name in result #208
OCPBUGS-56928: bridge: Add option to enable port isolation #203
append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
Full changelog

coredns

OCPBUGS-60462: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #152
append .0 to go.mod version #134
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-57800: Rebase release-4.18 onto release-1.31 #322
OCPBUGS-58835: CARRY: don’t ignore json files #339
Full changelog

csi-external-resizer

OCPBUGS-62467: Requeue PVC over PV creation #176
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

docker-builder

OCPBUGS-65655: BuildConfig inline Dockerfile fails with heredoc syntax #486
OCPBUGS-57758: S2I build cpu limits observed by assemble are limited to 1 cpu #473
Full changelog

docker-registry

IR-526: remove AWS region check #437
OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

OCPBUGS-57112: Updating ose-etcd-container image to be consistent with ART for 4.18 #333
Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
Full changelog

gcp-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #247
Full changelog

gcp-machine-controllers

OCPBUGS-59387: Add max-concurrent-reconciles flag to machine actuator #126
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-65553: Update to Kubernetes v1.31.14 #2521
OCPBUGS-65494: Fix Concurrentmap Iteration #2512
OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
CNTRLPLANE-1610: Backport StreamingCollectionEncoding for JSON and protobuf #2483
OCPBUGS-61557: Rebase v1.31.13 #2465
Revert “UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.”” #2448
OCPBUGS-60511: Bump to v1.31.12 #2440
OCPBUGS-60524: podresources: list: use active pods #2413
UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2422
OCPBUGS-57488: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2333
OCPBUGS-57499: UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image #2399
OCPBUGS-44757: Adjust NodeMonitorGracePeriod to 50s #2385
OCPBUGS-59535: Rebase v1.31.11 to 4.18 #2377
OCPBUGS-57887: Update to Kubernetes v1.31.10 #2348
OCPBUGS-57070: UPSTREAM: <carry>: Bump cadvisor version to fix container_fs metrics #2332
OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
Full changelog

hypershift

OCPBUGS-65843: specify SCC annotation for pods in data plane #7267
CNTRLPLANE-1902: Migrate 4.18 pipelines to common pipeline template #7211
OCPBUGS-61700: use csi-resizer image from release provider #7103
OCPBUGS-63638: [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7111
OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
CNTRLPLANE-1424: feat(konflux): tag MCE HO images with latest #6837
OCPBUGS-62816: set default goaway-chance to 0.001 #6950
OCPBUGS-61904: resolve MIRRORED_RELEASE_IMAGE flapping #6858
OCPBUGS-61700: Sync RBAC for expansion support in kubevirt CSI driver #6355
OCPBUGS-61568: [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution #6793
OCPBUGS-61203: ci: konflux multi-arch images #6867
OCPBUGS-61203: Use the common konflux pipeline and update CLI dockerfile #6832
NO-JIRA: chore(deps): update konflux references #6667
OCPBUGS-57142: [release-4.18] HCP payload doesn’t respect multiple mirrors #6672
OCPBUGS-60485: feat(validations): add wildcard support to DNS SAN conflict detection #6649
OCPBUGS-60148: Always compress and encode payload in token secret for inplace upgrades #6721
OCPBUGS-60923: MCE 2.8 konflux for hcp-cli #6700
CNTRLPLANE-1333: New API to support specifying cluster-autoscaler flags #6641
OCPBUGS-60458: Update PSA from v1beta1 to v1 #6644
CNTRLPLANE-1269: chore(deps): update konflux references #6658
CNTRLPLANE-1205: Add missing mce-2.8 pipeline #6656
OCPBUGS-59503: [release-4.18] Support proxy authentication when user/pass is included in URL #6460
CNTRLPLANE-1229: Move CPO pipeline to hermetic builds #6597
OCPBUGS-57818: Reuse hosted cluster release and metadata providers #6301
OCPBUGS-58126: Don’t use /version for haproxy health checks #6323
OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58741: bump github.com/golang/glog to version v1.2.4 #104
append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55297: [IBM VPC] set offlineExpansion to false in e2e test manifest #144
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51825: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #120
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #119
Full changelog

ibmcloud-machine-controllers

OCPBUGS-47135: CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] #69
Full changelog

insights-operator

OCPBUGS-66182: QEMU logs are not gathered if there are pending status virt-launcher pods #1189
OCPBUGS-66181: [bugfix] The archive’s records may include files whose names are out of bounds #1188
OCPBUGS-61972: add missing permissions for replicasets and events #1146
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-65573: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #727
OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-rbac-proxy

OCPBUGS-60930: fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 #125
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). #225
append .0 to go.mod version #216
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-api-operator

OCPBUGS-59387: Enabled 10 concurrent reconciles on GCP #1392
OCPBUGS-57057: Updates GCP CredentialsRequest #1376
Full changelog

machine-config-operator

OCPBUGS-62169: Fix - NetworkManager restart or crash renders br-ex unusable #5356
OCPBUGS-65850: Remove –mount directives #5433
OCPBUGS-62294: Make static DNS with DHCP IP work #5311
OCPBUGS-63346: Invalid architecture value found in annotation during 4.19 update #5366
OCPBUGS-60111: Enable debug logging for nodeip-configuration #5220
OCPBUGS-62671: [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it #5325
OCPBUGS-62845: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5341
OCPBUGS-62499: Add /etc/docker/certs.d to template #5320
OCPBUGS-62637: Machine-config controller should actively manage cordon while draining #5322
OCPBUGS-62350: Add mcd_local_unsupported_packages recording rule #5315
OCPBUGS-62321: Add control-plane label for master nodes on legacy clusters #5314
OCPBUGS-61840: Override NMState service definition #5288
OCPBUGS-57357: Race in configure-ovs.sh affects bonding interface configuration. #5118
OCPBUGS-59929, OPNET-681: Support migration to NMState #5207
OCPBUGS-60034: Add workaround fix for static pod race #5212
OCPBUGS-56751: Support NODEIP_HINT in IPI deployments too #5081
OCPBUGS-55246: kubelet: readonly mounts for criometricsproxy #4998
OCPBUGS-58067: Ensure the build controller restarts on upgrade #5140
OCPBUGS-57328: Do not set cpu system reserve below the default value #5152
OCPBUGS-56624: Give keepalived container chroot cap #5073
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #5138
OCPBUGS-57935: add MachineConfiguration to CO related objects #5134
OCPBUGS-54463: Update desired config in MCN on OCL update #5026
OCPBUGS-57900: MCC complains about v1 MachineOSConfig in default featureset #5131
OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

monitoring-plugin

OCPBUGS-65958: Fix metrics gaps 4.18 #656
OCPBUGS-64735: allow tenancy access to metrics tag #638
OU-1059: add perspective to action injector #632
NO-JIRA: update i18n strings #508
OCPBUGS-60199: feat: add alerting rules tab to dev console #493
OCPBUGS-54314: Fix “Export as CSV” #461
Full changelog

multus-admission-controller

OCPBUGS-58771: Update the github.com/golang/glog module to v1.2.4 #101
append .0 to go.mod version #96
Full changelog

multus-networkpolicy

OCPBUGS-54939: [release-4.18]: Support default ports value #68
append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-59697: Prevent accidental IP deallocation in statefulsets #376
OCPBUGS-58360: The node slice controller should only process valid whereabouts confi… #381
OCPBUGS-58360: Add nodeslicecontroller bin to dockerfile #373
append .0 to go.mod version #370
Full changelog

must-gather

OCPBUGS-46437: Separate resources with comma to fix malformed inspect #470
append .0 to go.mod version #491
Full changelog

network-interface-bond-cni

OCPBUGS-62793: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #99
OCPBUGS-58095: Bump github.com/containernetworking/plugins from to 1.7.1 #79
OCPBUGS-57794: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 #74
NO-JIRA: Add ci-operator yaml file #78
Full changelog

network-metrics-daemon

OCPBUGS-58781: Bump github.com/golang/glog to v1.2.4 (#111) #111
OCPBUGS-60174: Replace e2e test image (#120) #120
Full changelog

network-tools

Fix build error #147
Full changelog

networking-console-plugin

OCPBUGS-60178: Fix ingress details #264
OCPBUGS-60124: Fix requiremenets with no value #259
OCPBUGS-57286: Fix pod context #251
Full changelog

oauth-apiserver

OCPBUGS-65841: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #155
OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

oauth-proxy

OCPBUGS-61444: Update x/crypto to v0.31.0 #333
OCPBUGS-57172: 4.18 kube 1.31 #317
OCPBUGS-58312: fix e2e tests #325
Full changelog

oauth-server

OCPBUGS-57300: Updating oauth-server-container image to be consistent with ART for 4.18 #186
append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-65510: removes unintended exec permissions #1312
OCPBUGS-62696: v2/cli: show binary version in output #1286
OCPBUGS-62711: generate the archive only after mirroring #1287
OCPBUGS-62432: changes the warning message of 4.21 #1278
And 15 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd

OCPBUGS-62872: set the SElinux type #139
Full changelog

olm-operator-controller

OCPBUGS-62872: set the SElinux type #509
And 7 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-65842: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #581
OCPBUGS-58461: Wire dry run option to Image API server operations #531
OCPBUGS-56609: Fix image reference in TestImageStreamImportQuayIO #514
Full changelog

openshift-controller-manager

OCPBUGS-61002: legacy image pull secret rollback controller #411
OCPBUGS-57949: ignore error failing to find pull/push secrets #399
OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44458: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #365
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-65700: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1156
OCPBUGS-61364: [4.18] e2e stability fixes #1080
OCPBUGS-60644: Add NetworkPolicy as a supported kind #1048
OCPBUGS-59421: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1040
OCPBUGS-58882: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1034
OCPBUGS-57427: reduce cache expiry frequency [release-4.19] #1020
OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
Full changelog

operator-marketplace

OCPBUGS-62218: Remove Expect func so that the test case can use the retry logic #669
ART-13123: append .0 to go.mod version #637
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-64855: Fix stale EIP assignments during failover and controller restart #2849
OCPBUGS-64780: kubevirt: fix bad release of IPs of live migratable pods #2847
OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
OCPBUGS-48710: [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] #2811
OCPBUGS-62671: Fix EgressIP stale GARP post reboot + pod restart #2775
OCPBUGS-59744, OCPBUGS-61455: [4.18] allow default network -> localnet on the same node for any localnet subnet #2785
OCPBUGS-61748: [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] #2777
OCPBUGS-59680: [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] #2768
OCPBUGS-48710: Update OWNERS file: Add Patryk/Martin as approvers #2700
OCPBUGS-59371: EIP OVN controller: stop pod config flap #2703
OCPBUGS-59531: EgressIP: fix startup syncer #2690
OCPBUGS-59623: Revert “unpin libreswan version” #2678
OCPBUGS-57318, OCPBUGS-58159: DownStream Merge Sync from 4.19 [06-26-2025] #2646
OCPBUGS-46401, OCPBUGS-48710, OCPBUGS-55263: DownStream Merge Sync from 4.19 [05-28-2025] #2593
OCPBUGS-57108: Fix hybrid overlay node subnets collision with cluster subnets #2619
OCPBUGS-57106: Increase InformerSyncTimeout to 60s #2622
Full changelog

powervs-machine-controllers

OCPBUGS-61163: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #125
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-61706: chore: compute highestTimestamp at queryManager level #267
OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-61965: reconcile workload configurations when a referenced secret/configmap key is updated #347
OCPBUGS-58194: Fix: One Alertmanager Config failing blocks all others #335
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-63668: Add imagestream update dryrun test #30436
OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
OCPBUGS-61698: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30253
OCPBUGS-60511: Bump to latest openshift/kubernetes (v1.31.12) #30230
OCPBUGS-60662: images/tests: Remove rteval #30135
OCPBUGS-60881: Exclude RHEL nodes in verifying that nodes have no unexpected reboots test #30170
OCPBUGS-60881: extended/machines: add –no-pager to journalctl cmds #30180
OCPBUGS-60927: Wait 30s after the upgrade is complete to validate workloads #30179
NO-JIRA: Update extended/networking OWNERS #30089
OCPBUGS-58461: Backport pr 29834 to release-4.18 #29968
OCPBUGS-60066, OCPBUGS-60067: Don’t check for isNoUpgrade #30053
OCPBUGS-60066, OCPBUGS-60067: Tolerate various expected Upgradeable=False conditions #30048
OCPBUGS-57887: Update to Kubernetes v1.31.10 #29941
OCPBUGS-58366: Make EgressIP helper functions more reliable #29950
OCPBUGS-57081: Do not set the MTU when using NetworkAttachementDefinition #29891
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #29937
OCPBUGS-57329: Fix failed tests of e2e-aws-ovn-tls-13 #29911
OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61651: Fix unit tests #70
OCPBUGS-58861: [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 #62
Full changelog

vsphere-problem-detector

OCPBUGS-60784: Check for number of FailureDomain-s in GetVCenter() #189
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github