4.18.32

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.32-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded (1 retries) periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Failed (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.26, 4.18.27, 4.18.28, 4.18.4, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Loading changelog, this may take a while ...

Changes from 4.18.25

Created: 2026-01-26 15:55:10 +0000 UTC

Image Digest: sha256:6177c447b98c36a42fd45fa2ba413da73d14d0a7ad3aecfa977554f5ae9583cc

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.13 to 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202509241235-0 to 418.94.202601202224-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-api-server git 03ef1905 sha256:7b26569a85b4ef6cadf9670d3472b7c9ab15b109bcda9cb73dcc66e8230df4f4
agent-installer-csr-approver git 81d6bc27 sha256:e30865ea7d55b76cb925c7d26c650f0bc70fd9a02d7d59d0fe1a3024426229ad
agent-installer-node-agent git 32a1f2a4 sha256:233b59eac6fca6ccd87ab66f83799a4684116681e840103def6497241e6cfd23
agent-installer-orchestrator git 81d6bc27 sha256:a9f59df0ef23d82f6521ed0d2df4f525b6a22d01f2bf0f570cf6e8032a7b3b14
agent-installer-utils git 0e41f7d5 sha256:4665e4c56773950fe9da9a8158340f0997544155ded37207a5eadd77dd692743
apiserver-network-proxy git 2f62712d sha256:f0e3f8b45691fb21f582077aa69c5f8c7ea2500d16170d14d7edd8593291dbcb
aws-cloud-controller-manager git c3951906 sha256:d8674e1b02678e9be89806c59eeef13352138c7b58f45e0fb513b2138484972a
aws-cluster-api-controllers git f0aabeef sha256:96a6495fa5423c74755f90b16c9f7f036ad9d392a7cef288d66066714ba1afef
aws-ebs-csi-driver git b51cd6b8 sha256:08dcdfe78978b0e70e260df4ec206b22f21d7248256e4bbc058b188cd1601d45
aws-kms-encryption-provider git 088dcaf7 sha256:a5ace2dd90b2d621d42620b5a2ed422a13a7454297ffe4b657f7590452517e40
aws-pod-identity-webhook git f54f9a19 sha256:00539b70d0ed7bb7fa2c1451b39db3f9a52662e0e1ac7b7d56a9f5b576186c3c
azure-cloud-controller-manager git 9c24d768 sha256:5d11c65fbbaf76c60977d1565b51e9595febe214e14d24043511469f6962ec66
azure-cloud-node-manager git 9c24d768 sha256:8cfd9c3ff35c35ce150c1ff31a83981d432109d241896aa4ccdf3a91dfdecdf4
azure-cluster-api-controllers git b29c582e sha256:1cf6e70ee2b92520a08d729488b08d8bf409b9784d6592ae61d7c3b97da4a9e8
azure-disk-csi-driver git 6cced666 sha256:e35c62a0fcebd639016430efea319a3571be216f11c41d17e6dd7c6c8f3937ca
azure-file-csi-driver git 4b34592e sha256:cfd9360077ac2629442bad5789a8a51bbf63eeea208ba32187483ddd65a96400
azure-kms-encryption-provider git c937080f sha256:3320f623f15049f5c46f8425a14cb45c73e3ab11a704805ec883ad9512732856
azure-workload-identity-webhook git f60e4029 sha256:fcc8808ed449ee7b0d2656e7efb0f272a41a3cb2e19101055c2f01d1c907fd69
baremetal-cluster-api-controllers git 80c3a063 sha256:8908c9b768ba4ea4b7e93b53be6d2da856eb38eefc9bf0bc1264241a8280d00c
baremetal-machine-controllers git 1ede6c3f sha256:a0c61f9d9101a6b192b333d929d42f0430eba249b898afee01823990fff041ca
baremetal-operator git 45c6255c sha256:d6f6bed7208d2d05d8d93bc0fc47740f970539715c097f6be3a68b37e178ee2c
cluster-authentication-operator git 882f8799 sha256:047699c5a63593f45e9dd6f9fac0fa636ffc012331ee592891bfb08001bdd963
cluster-autoscaler git 4f1bde97 sha256:0ae90d63bfd8c5d349436cdde4879b9e9b7688cbda159a8ef0c3035d4fc68468
cluster-autoscaler-operator git 474ad65c sha256:bd8adea550cbbaf16cb9409b31ec8b997320d247f9f30c80608ac1fbf9c7a07e
cluster-bootstrap git d1e01954 sha256:1401a3d45911840fc38614b90338b6947b8452601d8096549a275257aa46f293
cluster-capi-controllers git 63df38bc sha256:ad99424448527c960627c241c83012837af97f3687a48b3c1a7791cfcbdf22dd
cluster-capi-operator git 2f2737e1 sha256:9adcf85afec4650d314b57f6abf710eb89fe98dad51bc59d5d61482729289dd2
cluster-config-operator git 85cb4072 sha256:2431778975829348e271dc9bf123c7a24c81a52537a61414cd17c8436436078b
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:47c1d88223ffb35bb36a4d2bde736fb3e45f08e204519387e0e52e3e3dc00cfb
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:13d06502c0f0a3c73f69bf8d0743718f7cfc46e71f4a12916517ad7e9bff17e1
cluster-dns-operator git 7cafd0c7 sha256:e1c8b9784a60860a08bd47935f0767b7b7f8f36c5c0adb7623a31b82c01d4c09
cluster-image-registry-operator git 1e3caa4b sha256:cc03f91dbf08df9907c0ebad30c54a7fa92285b19ec4e440ed762b197378a861
cluster-kube-cluster-api-operator git 33a1141e sha256:af3ed66448314364ba05a0aba0076459ef771630670d6e76e92bb8a83e44a83c
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:e391fce0b2e04f22fc089597db9e0671ba7f8b5b3a709151b5f33dd23b262144
cluster-machine-approver git 01d5fbbe sha256:1e7ac69aff2f28f6b3cbdb166c7dac7a3490167bcd670cd7057bdde1e1e7684d
cluster-olm-operator git 88088e4b sha256:333e6572029953b4c4676076f0991ee6e5c7d28cbe2887c71b1682f19831d8a1
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:6dd544a8a6b4d08fe0f4fd076109c09cf181302ab6056ec6b2b89d68a52954c5
cluster-openshift-controller-manager-operator git f1711cf3 sha256:f353131d8a1223db7f637c9851016b3a348d80c2b2be663a2db6d01e14ddca88
cluster-policy-controller git 5fd85252 sha256:5d54bd262ca625a326b01ea2bfd33db10a402c05590e6b710b0959712e1bf30b
cluster-update-keys git 8caab452 sha256:9621a8349f227a728571af9c11a8ba1e7bc35c372ac794148f132c498e1f170c
configmap-reloader git e2aaf00a sha256:0833a87e886ca5fec2adbc71655d8fbe4fc2925d2fb14a7cd926d4a79d6ba0ce
console-operator git 60dd3f55 sha256:95e7647e6fda21b94b692f03908e4cd154e3374fca0560229c646fefe2c46730
container-networking-plugins git e8ca1d70 sha256:e786e28fbe0b95c4f5723bebc3abde1333b259fd26673716fc5638d88286d8b7
containernetworking-plugins-microshift git e8ca1d70 sha256:6aeed20b8cd24c342bd24a92364c8fce56d1d34797a16be7ab8db9dbf2d7cf0f
csi-driver-nfs git 32e77590 sha256:a60c6b58097bb0ced1170dd3a6c88bfc2f05e19755bfef3045a227da15b8ac84
csi-external-attacher git 39b37c06 sha256:6cbbb8e2f4020c8d006b00901483ebc2968e06f1ce90cb73215724002a29177f
csi-external-provisioner git 376f0ea0 sha256:c784d65851be8f4a512f82b94d946e36f291e1ca49332ec95db7261ad10b2476
csi-livenessprobe git 3a977844 sha256:d18454f3b49661c052375ef14c9f6ca31589a61abe2f6d23ec0cbf49288b3685
docker-registry git cfa51ab4 sha256:fc2817e5b16d83dac91d1a274fb93521165953e9bdc28f3073b127eacc5a534e
driver-toolkit git 2e139edc sha256:bc4f78490737eb1d176bc498256ee4f013e723a0f0d4c058e959177c98c2134f
egress-router-cni git 3193a756 sha256:bfc52d6ca96f377d53757dc437ca720e860e3e016d16c084bd5f6f2e337d3a1d
etcd git b5a4f8d0 sha256:8bed6766df40c0c172611f3e4555cd20db639eb505b2345abed6d5babdcbb5e3
gcp-cloud-controller-manager git 6ea23561 sha256:4569fa0adbac85f6e0eb3b0fea15b8e54d0c1b47e30d2e4150ebfa1c454af232
gcp-cluster-api-controllers git 1fff6902 sha256:5b9a2e49d40059a937f07610c36d08b25831cb730d339d39fe0092a23484b7e2
gcp-machine-controllers git b2f858ba sha256:1f98b001245f7eb8d334deb8c40ae02d5d337223a138eb62c2207a76166c48b6
gcp-pd-csi-driver git 1b8c94ac sha256:9cd09c76f15748683e540f57fb78c18e3997fac265de588558d9523cb01af762
gcp-pd-csi-driver-operator git 7cb8b38c sha256:83402ec46858a4af6aa942398120e625060d1054b01f0153687878ff1bb7cdd5
gcp-workload-identity-federation-webhook git f0a670c7 sha256:fa17dd6cab9295064cc00b7d7838776910fffe3d6fa0e5f619a43c6db8ada0cd
ibm-cloud-controller-manager git a33026b1 sha256:e8f36ad2e4bf89a9bb1a66d9760ec91c6ad6702bf799c650454b177cf5e02661
ibm-vpc-block-csi-driver git c7d883c5 sha256:6b88e42f7000f64593afa03762f3147c0f9f0cdddd2ad762942ba6ec38198a06
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:23b0e71b138eb4c9e23e073f11974dd0f054d1cb78bc36227497076c0e8c1764
ibmcloud-machine-controllers git e6eddf85 sha256:6354e7d162ca21ff645f85b23efdbffec8881b41f636b635d9dd722fb2695fa7
insights-runtime-exporter git 7149f2d5 sha256:754659df84a55b4d50e12a60afd3a87cfcb6494bd00166e5d72f2badcf8b4480
insights-runtime-extractor git 7149f2d5 sha256:4d8512534b3c26665b3a4b895034f7f9855915392086357575ee0d576be6b04a
ironic-machine-os-downloader git 50ca44fd sha256:56a3eb27754a136e415cdec3caab804cbbfaa9aaede0fb9fae065bcc1a0196e5
ironic-static-ip-manager git cfbae04f sha256:7e8dc30740476e4dd332aa0539af3f9bc12bd6aa72c64e75f5e9e0b8d2620b3e
keepalived-ipfailover git 716eb0ef sha256:280a1d3ebea4063a3ecd076897fc7bfc0f5b994a68f56ca5f61aadc778f1e9c1
kube-metrics-server git 962ccca2 sha256:c1a0aba9ead3a33353dc8a033699dfa4795f4050516677dad6ed4ac664094692
kube-rbac-proxy git 5a14ea9d sha256:93bf1697031cce06c4e576aa1ba5d8bda7e91b918627ed1d61f8c89a95a111f0
kube-state-metrics git cb5a9296 sha256:9e96b53e74d1b802c2e63544e4689c9d262e9c996902c6e8a7f3ca34b23fdd50
kube-storage-version-migrator git c0f1886a sha256:240701090a5f8e40d4b88fa200cf63dffb11a8e2eae713cf3c629b016c2823b0
kubevirt-cloud-controller-manager git 3f4542ec sha256:a2a6c2aad7bbf903fda4d91b29e2940c5707d533e70b0671194f710472713b8b
libvirt-machine-controllers git a336f0b5 sha256:bbf05fdb021442514d6125cfbeec569b15594d5ca88f996f5c97a13fe58e39a0
machine-os-images git ab432836 sha256:cd60ed7fd7955cbac6882fa5e0d7e38bc3c06791950867c3ebcd98679e366f06
metallb-frr git 98ccbe64 sha256:7862391b6b069f985d3ba652ff80f29fedce94493a013b8e464e2d7bde964da4
multus-admission-controller git 0d7ea6c7 sha256:bbe162375a11ed3810a1081c30dd400f461f2421d5f1e27d8792048bbd216956
multus-cni git 21fb8e05 sha256:fe683caef773a1963fc13f96afe58892563ea9921db8ac39369e3a9a05ea7181
multus-cni-microshift git 21fb8e05 sha256:3678d30cf1504f94fa97afb735317fa7335984133c68a4500d49735f28412312
multus-route-override-cni git 391c1b03 sha256:15c5e645edf257a08c061ad9ae7dab4293104a042b8396181d76dd28f396cebe
multus-whereabouts-ipam-cni git 86191ded sha256:df623c15a78ca969fb8ad134bde911c2047bf82b50244ee8e523763b6587e072
must-gather git 02e536cc sha256:98a949efb0c81c5c5968e069c9b6a518b3b6afbaf4e75cae5eb207554b06c2db
network-metrics-daemon git 11e2dec9 sha256:80531a0fe966e1cc0582c581951b09a7a4e42037c106748c44859110361b2c1b
network-tools git 47b13549 sha256:75b9a66b716e2179c8c512339bf5f4996d809c1df4ce7b19213a84bd8e743c2f
nutanix-cloud-controller-manager git d9fe8f38 sha256:7055ad7af6f2763c0f9a1a6ac6f24fa4dc2ba312cc9b0805ae0a06187cecc89a
nutanix-machine-controllers git afe324bf sha256:a120d08d454a9112a7f31a9da6627e788406726fe1c035bd70c180eda14f37d8
oauth-server git 287caff3 sha256:2969828f1fcae82b7ef16d3588046ace3cf51b9ea578658c42475386e0ee1fc7
openshift-controller-manager git 8ee74406 sha256:f122c11c2f6a10ca150b136f7291d2e135b3a182d67809aa49727da289787cee
openshift-state-metrics git 3cca6fee sha256:3f08586dd67c2d3d21053a044138f1bbedceb0847f1af8c3aa76127d86135a58
openstack-cluster-api-controllers git ce2c2d17 sha256:ca88f406b57deca5600c7753cc0d64279a4e9b030b0081b85eeb87a93a8dc5a4
openstack-machine-api-provider git d914e77e sha256:dacf9ee50a503485566d7a987f231e04adf176c0852c6302bdf0bc4a0fdac0ad
ovirt-csi-driver git 1db726a9 sha256:059265b72f841516e2152ad96e660e7603aa31d267c0f6f8f7fca3bef4b39ae8
ovirt-csi-driver-operator git 0feae256 sha256:a79394247657bf440e71b0ebff47026d760c71b1b03510019b3c519de7253c79
powervs-block-csi-driver-operator git 01fc505a sha256:7d7e306ec16e50a8b5b527a78fdb62e8583866c2c0cf91b3befc8646e51deaa8
powervs-cloud-controller-manager git 17ae6fba sha256:9ce51f750a68023df9323fd15a7eaeb1472e9b8701c7ef413869d3febbb73459
powervs-machine-controllers git 74e3ece7 sha256:3dd74e170726d29f6fe0508c03f7410598d8fd7d37b6e60a76376953ccd8de55
prom-label-proxy git 35c11369 sha256:abf98e8b78df5cf21c9da051db2827b8c9081cf3ea201bf9017a5d9548dbc73e
prometheus git a85013a6 sha256:e4d0e747f55d3f773a63180bc4e4820ee5f17efbd45eb1dac9167fbc7520650e
prometheus-alertmanager git a4320675 sha256:f22dd40cd10354e3512d2065a8dd8c9dcb995ea487c0f661f172c527509123fc
prometheus-node-exporter git 92e17ff5 sha256:a64a70eb2fef4095ba241021e37c52034c067c57121d6c588f8c7fd3dc24b55f
rhel-coreos sha256:4aa42a4b31390d46f924ce2d0c4da772bfbf6a5e1e121bdb0f8b69f989e0a0db
rhel-coreos-extensions sha256:ee7b795566b8bd3a23d3186c8412e8cc1338556850ecac38c6734c20191fea91
route-controller-manager git ce6ffa24 sha256:0871b6c16b38a2eda5d1c89fd75079aff0775224307e940557e6fda6ba229f38
service-ca-operator git 30efb529 sha256:5abe992def861ec075251ae17bbd66fa23bd05bd3701953c0fdcf68a8d161f1e
telemeter git 490612bd sha256:9899b0f08b1202d149e16f09616ee7b8f37e3cda642386d93a6d3f63d72a316b
thanos git f1599f65 sha256:86d47b2746de823e60068255722d2c0f1ff9d327b2865071a4f2f1e08b1f4ee9
vsphere-cloud-controller-manager git c414d1f5 sha256:c2a6a8827b1441a27cd6b29cf39c6e6c2192da257a1d38f96cb81b2cc75175d6
vsphere-cluster-api-controllers git 767b33a7 sha256:d1977054e52a6bc368e4c9dd256c22e1f12c4597503ee6431c7e65e60c670a2b
vsphere-csi-driver git cfcad01d sha256:e40c4396a04373eb38c18fb54dcce637ee1d8e71a3ecb877e73f37a44e6aa3b2
vsphere-csi-driver-operator git 2b241410 sha256:a5dd49c88c7a2214ce16e99ef9837adcf0471e938793880f9f337d9a9431b79d
vsphere-csi-driver-syncer git cfcad01d sha256:3fb40f87d68dba42b6064e3f46436649422174bdf900788a4d0068cb5679310c

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-62664: disable e2e snapshot tests #463
OCPBUGS-63558: Add RBAC ClusterRole and Binding for driver node #454
OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
OCPBUGS-62973: Add withCABundleDaemonSetHook() to AWS EFS operator #447
Full changelog

aws-machine-controllers

OCPBUGS-73789: Fix reconciler consistency checks in Update and Exists #166
OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-machine-controllers

OCPBUGS-65882: Set updateDomainCount to one when faultDomainCount is one #175
OCPBUGS-63669: Support datadisks on Stack Hub #167
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-57590: Mount the user-ca-bundle into ICC #9794
OCPBUGS-63494: Catch gcp destroy cases where the operation is nil #10030
OCPBUGS-52659: [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme #9545
OCPBUGS-65588: Update the RHCOS 4.18 bootimage metadata #10113
OCPBUGS-58504: Refactor removing loadbalancer in OpenStack #9831
OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
OCPBUGS-62810: Update the RHCOS 4.18 bootimage metadata #10014
Full changelog

baremetal-runtimecfg

OCPBUGS-60111: Re-add ENABLE_NODEIP_DEBUG env var #364
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-65707: fix(must-gather): do not set node affinity if nodename is set #2145
OCPBUGS-64608: Help with must-gather scheduling through suggesting preferance of nodes #2127
Full changelog

cloud-credential-operator

OCPBUGS-65800: ccoctl azure: retry custom role creation on consistency errors #950
OCPBUGS-65479: ccoctl: use pagination when listing resources in aws #947
OCPBUGS-63548: ccoctl: add public-key-file flag to create-all #938
Full changelog

cloud-network-config-controller

OCPBUGS-73750: [release-4.18] Fix pointers without ptr.Deref #199
OCPBUGS-65651: [release-4.18] Fix capacity calculation #193
OCPBUGS-64779: [release-4.18] Change the capacity struct from int to ptrOfInt #189
Full changelog

cluster-baremetal-operator

OCPBUGS-57590: Mount the user-ca-bundle into ICC #486
OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

OCPBUGS-70315: Add HTTPKeepAliveTimeout to IngressController API #2638
NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers #2625
OCPBUGS-67214: Introduce ClosedClientConnectionPolicy to IngressController API #2618
CNTRLPLANE-1980: Promote streaming list encoding to Default #2598
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2562
CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-etcd-operator

OCPBUGS-63451: Ensure revision.json persists on ungraceful shutdown #1503
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1518
Full changelog

cluster-ingress-operator

OCPBUGS-70315: Implement HTTPKeepAliveTimeout tuning option #1333
NO-JIRA: Add new NID team members to OWNERS #1319
OCPBUGS-67214: Implement ClosedClientConnectionPolicy field #1322
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1976
OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #897
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #590
Full changelog

cluster-monitoring-operator

OCPBUGS-67168: Add the collection of MTV migration metrics #2774
OCPBUGS-61965: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2723
OCPBUGS-64579: Fix KSM deny-list typo #2731
OCPBUGS-63488: Remove AlertManager endpoints when disabled #2737
OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
OCPBUGS-63410: [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy #2724
OCPBUGS-63017: test: remove image registry e2e tests #2711
Full changelog

cluster-network-operator

OCPBUGS-73767: Tweak iptables-alerter to try to avoid crictl bug #2877
OCPBUGS-65704, OCPBUGS-65705: Annotate whereabouts-controller #2842
OCPBUGS-62671: Add drop flows for GARP #2810
Full changelog

cluster-node-tuning-operator

OCPBUGS-69947: [release-4.18] E2E: skip stalld test checking sched_fifo #1451
OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

cluster-storage-operator

OCPBUGS-62666: Move metrics to vsphere driver #632
Full changelog

cluster-version-operator

NO-ISSUE: hongkai becomes an approver release-4.18 #1286
OCPBUGS-62869: disable metrics auth for hypershift clusters #1242
Full changelog

console

OCPBUGS-73662: Namespace is not persisting when switching to developer view from the topology page of admin page #15910
OCPBUGS-69915: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15868
OCPBUGS-69448: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15855
OCPBUGS-68361: Disallowed Pipelines-plugin Pipelines navigation section #15842
OCPBUGS-65592: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15725
OCPBUGS-65932: Preserve query string in perspective switch + remove dev console folks from reviewers #15761
OCPBUGS-65533: Preserve path on perspective switch #15716
OCPBUGS-64735: Expose prometheus tenancy label path as a proxy #15685
OCPBUGS-64682: limit node log length to 1000 lines #15680
OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
OCPBUGS-63247: fix bug where Roles list was displaying invalid data f… #15619
OCPBUGS-63041: switch to dev perspective for /dev-monitoring #15601
OCPBUGS-44156: bump dompurify to latest #15589
OCPBUGS-62326: /auth/error?error=missing_state&error_type=auth is showing blank page #15544
Full changelog

coredns

OCPBUGS-60462: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #152
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-57800: Rebase release-4.18 onto release-1.31 #322
Full changelog

csi-external-resizer

OCPBUGS-62467: Requeue PVC over PV creation #176
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

docker-builder

OCPBUGS-65655: BuildConfig inline Dockerfile fails with heredoc syntax #486
Full changelog

haproxy-router

OCPBUGS-67214: Add option abortonclose to HAProxy configuration template #703
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-65553: Update to Kubernetes v1.31.14 #2521
OCPBUGS-65494: Fix Concurrentmap Iteration #2512
OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
CNTRLPLANE-1610: Backport StreamingCollectionEncoding for JSON and protobuf #2483
Full changelog

hypershift

OCPBUGS-72932: Fix Konflux EC voilation, update deprecated base … #7456
OCPBUGS-69847: test: remove unit tests that depend on network communication [release-4.18] #7406
OCPBUGS-65843: specify SCC annotation for pods in data plane #7267
CNTRLPLANE-1902: Migrate 4.18 pipelines to common pipeline template #7211
OCPBUGS-61700: use csi-resizer image from release provider #7103
OCPBUGS-63638: [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7111
OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
CNTRLPLANE-1424: feat(konflux): tag MCE HO images with latest #6837
OCPBUGS-62816: set default goaway-chance to 0.001 #6950
OCPBUGS-61904: resolve MIRRORED_RELEASE_IMAGE flapping #6858
OCPBUGS-61700: Sync RBAC for expansion support in kubevirt CSI driver #6355
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67286: [release-4.18] Fix incomplete vendor/ #140
Full changelog

insights-operator

OCPBUGS-68263: Update github.com/sirupsen/logrus to v1.9.3 #1205
OCPBUGS-68263: [release-4.18] golanci-lint version update & corresponding fixes (#1045) #1206
OCPBUGS-66396: Add filtering to add other possible pod status to QEMU gatherer #1195
OCPBUGS-66182: QEMU logs are not gathered if there are pending status virt-launcher pods #1189
OCPBUGS-66181: [bugfix] The archive’s records may include files whose names are out of bounds #1188
OCPBUGS-61972: add missing permissions for replicasets and events #1146
Full changelog

ironic

OCPBUGS-69790: Bump eventlet version to 0.33.1-7 #760
OCPBUGS-65573: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #727
OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

ironic-agent

OCPBUGS-69780: Bump eventlet version to 0.33.1-7 #230
OCPBUGS-68360: Include Test advertised ip reachability before assigning it #226
OCPBUGS-62456: netutils: Use ethtool ioctl to get permanent mac address #206
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-api-operator

OCPBUGS-59387: Enabled 10 concurrent reconciles on GCP #1392
Full changelog

machine-config-operator

OCPBUGS-71227: MCP is not correctly degraded when a pivotError happens #5534
OCPBUGS-70336: Remove log exposing kubeconfig #5528
OCPBUGS-62169: Fix - NetworkManager restart or crash renders br-ex unusable #5356
OCPBUGS-65850: Remove –mount directives #5433
OCPBUGS-62294: Make static DNS with DHCP IP work #5311
OCPBUGS-63346: Invalid architecture value found in annotation during 4.19 update #5366
OCPBUGS-60111: Enable debug logging for nodeip-configuration #5220
OCPBUGS-62671: [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it #5325
OCPBUGS-62845: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5341
OCPBUGS-62499: Add /etc/docker/certs.d to template #5320
OCPBUGS-62637: Machine-config controller should actively manage cordon while draining #5322
OCPBUGS-62350: Add mcd_local_unsupported_packages recording rule #5315
OCPBUGS-62321: Add control-plane label for master nodes on legacy clusters #5314
Full changelog

machine-image-customization-controller

OCPBUGS-68262: [4.18] Uplift logrus #151
Full changelog

monitoring-plugin

OCPBUGS-65958: Fix metrics gaps 4.18 #656
OCPBUGS-64735: allow tenancy access to metrics tag #638
OU-1059: add perspective to action injector #632
Full changelog

multus-networkpolicy

OCPBUGS-54939: [release-4.18]: Support default ports value #68
Full changelog

network-interface-bond-cni

OCPBUGS-62793: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #99
Full changelog

networking-console-plugin

CNV-76277: Fix name generator with unprofessional names #319
OCPBUGS-63582: Fixed - Extra semicolon observed before Service IP in OCP Console #306
Full changelog

oauth-apiserver

OCPBUGS-65841: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #155
OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

oauth-proxy

OCPBUGS-61444: Update x/crypto to v0.31.0 #333
Full changelog

oc-mirror

OCPBUGS-66051: Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) #1324
OCPBUGS-65510: removes unintended exec permissions #1312
OCPBUGS-62696: v2/cli: show binary version in output #1286
OCPBUGS-62711: generate the archive only after mirroring #1287
OCPBUGS-62432: changes the warning message of 4.21 #1278
Full changelog

olm-catalogd

OCPBUGS-62872: set the SElinux type #139
Full changelog

olm-operator-controller

OCPBUGS-62872: set the SElinux type #509
Full changelog

openshift-apiserver

OCPBUGS-66379: pkg/image: conditionally parse raw image manifest #585
OCPBUGS-65842: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #581
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-65700: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1156
Full changelog

operator-marketplace

OCPBUGS-73883: Increase default catalog polling interval to 4h (240m) #707
OCPBUGS-68272, OCPBUGS-68273: CVE-2025-65637 fixed in logrus v1.9.3+ #703
OCPBUGS-62218: Remove Expect func so that the test case can use the retry logic #669
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-70346: Branch Sync release-4.19 to release-4.18 [01-07-2026] #2922
OCPBUGS-66140: Branch Sync release-4.19 to release-4.18 [12-31-2025] #2916
CORENET-6055, OCPBUGS-48710, OCPBUGS-66360, OCPBUGS-66381, OCPBUGS-66428: Branch Sync release-4.19 to release-4.18 [12-03-2025] #2895
OCPBUGS-68347: Add ricky-rav to OWNERS for release-4.18 #2897
OCPBUGS-64855: Fix stale EIP assignments during failover and controller restart #2849
OCPBUGS-64780: kubevirt: fix bad release of IPs of live migratable pods #2847
OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
OCPBUGS-48710: [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] #2811
OCPBUGS-62671: Fix EgressIP stale GARP post reboot + pod restart #2775
OCPBUGS-59744, OCPBUGS-61455: [4.18] allow default network -> localnet on the same node for any localnet subnet #2785
OCPBUGS-61748: [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] #2777
OCPBUGS-59680: [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] #2768
Full changelog

powervs-block-csi-driver

OCPBUGS-51896: Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 #102
OCPBUGS-70002: Update builder image’s golang version to 1.23 #103
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-61965: reconcile workload configurations when a referenced secret/configmap key is updated #347
Full changelog

tests

OCPBUGS-69900: Updated the upgrade duration limit to 100 minutes for ppc64le #30628
OCPBUGS-63668: Add imagestream update dryrun test #30436
OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
Full changelog

vsphere-problem-detector

OCPBUGS-70359: Fixed logic for vSphere compute cluster permission #200
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github