4.18.34

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.34-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Failed (1 retries) periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Failed (1 retries) periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.4, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.24

Created: 2026-02-19 11:53:11 +0000 UTC

Image Digest: sha256:14bd3c04daa885009785d48f4973e2890751a7ec116cc14d17627245cda54d7b

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.12 to 1.31.14
Kubernetes Tests upgraded from 1.31.10 to 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202509100653-0 to 418.94.202602172219-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:9c946fdc5a4cd16ff998c17844780e7efc38f7f38b97a8a40d75cd77b318ddef
agent-installer-orchestrator git 81d6bc27 sha256:4c60342a9b9efba628155b01cd76cba0b9d54616013fcdf044fafe7700b09d2c
apiserver-network-proxy git 2f62712d sha256:3855269a6da63e743e5fb56971c20e0294bcf043a1d5888416eae9d01afec13c
aws-cloud-controller-manager git c3951906 sha256:7f27ed65e6269a488dbb970d674fc0df5cd28b802e101dd1a384121aeb600570
aws-ebs-csi-driver git b51cd6b8 sha256:06ef6dcf5e3f0f83ed90209f5d3b31dab1debd1049ec97ec92f4f800abea8b78
aws-kms-encryption-provider git 088dcaf7 sha256:f7d8c6318c6f63f6e039328d2b2e8abede939721d4e696d160b4527a2fdbf726
aws-pod-identity-webhook git f54f9a19 sha256:9df4b1292ada1a3bdcc32ae2d06d98721b5c477393014075fb080880c3e139ca
azure-cloud-controller-manager git 9c24d768 sha256:0e817ab559d4dd63977ba1bb2d54355efe485572a1cd35db4b2e1c0568b330b5
azure-cloud-node-manager git 9c24d768 sha256:fbc2b37c71b29db734e455ca5d85d2dca6c5c68afae32a71a717f741f4717351
azure-cluster-api-controllers git b29c582e sha256:733244ab98bacb8dd5341fb9603d1353723082dcd1fab201d839fd918b7a2a45
azure-disk-csi-driver git 6cced666 sha256:1757b0d6e876ded828d41fa93b19a7c739275ebfa17883654ff0442dba9bd643
azure-file-csi-driver git 4b34592e sha256:f8a21af582f1840c82bba649d5981193dd88a14595cd7fc37e5722b7178c8921
azure-kms-encryption-provider git c937080f sha256:23b96da8a46e47ea3f25ae1d43dc21ace02bbd3f97f10eb013a9ed2a78401af5
azure-workload-identity-webhook git f60e4029 sha256:f058aef45b8401ecbcfdfe2d0555e4cac1c7dc67906732f72b61a0e059859f69
baremetal-cluster-api-controllers git 80c3a063 sha256:7339570be59df7891ae09a5cd0582642934040cd08e07e9fbcc68175a434ea7a
baremetal-machine-controllers git 1ede6c3f sha256:bde2cf190c9e2c82b1c671db5b066cb71708904d313fe48b6e38cab86c38fd2c
baremetal-operator git 45c6255c sha256:9522591343dd990113d32c45ba9abb36919fb371e3a0f5fa93cd8067d1ec5baa
cluster-authentication-operator git 882f8799 sha256:9bd818e37e1f9dbe5393c557b89e81010d68171408e0e4157a3d92ae0ca1c953
cluster-autoscaler-operator git 474ad65c sha256:00b591b3820682dc99f16f07a3a0a4ec06dfedba63cd0f79b998ac4509fabea3
cluster-bootstrap git d1e01954 sha256:9663c7b8418139060e6e25d1eeef5b445cc2c1dfdd0afef374e2355b68712c7a
cluster-capi-controllers git 63df38bc sha256:d87df2f534871aceadba48b1dc3e54dd57d370b4edf5dd0bff6dce6a1e1f8a41
cluster-capi-operator git 2f2737e1 sha256:8fb340ef55952f19e723410c2cba07d6a813d8d2dd8109d405f374c8bef29e3f
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:e9ee63a30a9b95b5801afa36e09fc583ec2cda3c5cb3c8676e478fea016abfa1
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:4010a8f9d932615336227e2fd43325d4fa9025dca4bebe032106efea733fcfc3
cluster-dns-operator git 7cafd0c7 sha256:b9b8bc43bac294be3c7669cde049e388ad9d8751242051ba40f83e1c401eceda
cluster-image-registry-operator git 1e3caa4b sha256:28f33d62fd0b94c5ea0ebcd7a4216848c8dd671a38d901ce98f4c399b700e1c7
cluster-kube-cluster-api-operator git 33a1141e sha256:c1048ad0e5126bbd952143b3dd9851347c547a06764e536e61915c88be6dabc3
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:d11f13e867f4df046ca6789bb7273da5d0c08895b3dea00949c8a5458f9e22f9
cluster-machine-approver git 01d5fbbe sha256:ebee49810f493f9b566740bd61256fd40b897cc51423f1efa01a02bb57ce177d
cluster-olm-operator git 88088e4b sha256:834063dd26fb3d2489e193489198a0d5fbe9c775a0e30173e5fcef6994fbf0f6
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:d601c8437b4d8bbe2da0f3b08f1bd8693f5a4ef6d835377ec029c79d9dca5dab
cluster-openshift-controller-manager-operator git f1711cf3 sha256:526c5c02a8fa86a2fa83a7087d4a5c4b1c4072c0f3906163494cc3b3c1295e9b
cluster-policy-controller git 5fd85252 sha256:3a324f47cf789c0480fa4bcb0812152abc3cd844318bab193108fe4349eed609
cluster-update-keys git 8caab452 sha256:16ad4201f5d6e5ddd4605a376892fdf1d3a308da07e2143a3b9d50635a905e58
configmap-reloader git e2aaf00a sha256:ff427d7ccac07e420022fbff715d525b266f275a07c54255d5d5b2669e1c6a9a
console-operator git 60dd3f55 sha256:b9ca868abfecbf9a9c414a4c79e57c4c55e62c8a6796f899ba59dde86c4cf4bb
csi-driver-nfs git 32e77590 sha256:3e30f12a259fe5a18431e487e5868c85753d7e22d44c34cfa9c47728a4ac95bc
csi-external-attacher git 39b37c06 sha256:81ea02ba3286c8748ae8607730de107584b888c0827f65569310957e6f73f7ff
csi-external-provisioner git 376f0ea0 sha256:035e2d85907cee77c0fa3a52a6a65f07fd4175bb16072801c5dca7517d1298c9
csi-livenessprobe git 3a977844 sha256:78078bbcd93ceab253456f3d551a382f6e8974f71f7c8d90aa1650aeb61065b7
docker-registry git cfa51ab4 sha256:b4fda3b54d00ce93f9646411aaa4d337f897e30a70da77288b7f3fdeb5a8b1a6
driver-toolkit git 2e139edc sha256:e820a1d2f88325ef132f454c72978f476168f5a927673e5ec3b28c2e92174787
egress-router-cni git 3193a756 sha256:ac6f0695d3386e6d601f4ae507940981352fa3ad884b0fed6fb25698c5e6f916
etcd git b5a4f8d0 sha256:cc20748723f55f960cfb6328d1591880bbd1b3452155633996d4f41fc7c5f46b
gcp-cloud-controller-manager git 6ea23561 sha256:8114cf4a34028043c4706085a7c86bd3f1a7b6c7961341afa415e04c6d848e92
gcp-cluster-api-controllers git 1fff6902 sha256:c3ac5fbd1e41d86d3283e7bf2482282e937cca6496f883b9b902e74ba32a7732
gcp-machine-controllers git b2f858ba sha256:1a034af25669f15aab5e05f6f051ac97aef19ecfd868a6778e544ecbfdadadd5
gcp-pd-csi-driver-operator git 7cb8b38c sha256:3bf7ebb7d731da7f28d37117f4a38c9ee300ffd76e1f237bc1aab40390bbeb1c
gcp-workload-identity-federation-webhook git f0a670c7 sha256:1208de9eba9f588abbdd661c9288873ab41fb337c530286a8eb40ed8e1e6a055
ibm-cloud-controller-manager git a33026b1 sha256:dfa927a13f850b8242dcd92e77853dee621cb86cb86b0f8019daa6c5d7cd2c0e
ibm-vpc-block-csi-driver git c7d883c5 sha256:4a1eb5fee11695dc15d201e6115f420d6e106e15e2e9982335ed8176b504d6e6
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:a5b86ea1a69ac634d7ed1282fe01b2330ee682a1c4d0fe5c4572f36b4d654ebc
ibmcloud-machine-controllers git e6eddf85 sha256:b826e039d36f4e5923eb153d0065bdc7f9d67abeea92c499f0a4ab1e358083ee
insights-runtime-exporter git 7149f2d5 sha256:d07bfae68c427a9578e3ef824ca3ec49a596e372ea28b76844bf9465451adabb
insights-runtime-extractor git 7149f2d5 sha256:686704423a622c173ec904c0dede90c7c11086891fa03ac70bf1c518d65b54d6
ironic-machine-os-downloader git 50ca44fd sha256:50304ed384cb95c7af6fdd66c953717cf2017c75f0c67089c3b80e67879c930b
ironic-static-ip-manager git cfbae04f sha256:2976841c9d6a02220a243f800cff37f9e0f1a9af5522a39d8b6fe09bd9cede4e
keepalived-ipfailover git 716eb0ef sha256:07b0f1258ce6f43f81079051e01b9e48679620971aed366d37b9271d8cc6f81d
kube-metrics-server git 962ccca2 sha256:243ce0f08a360370edf4960aec94fc6c5be9d4aae26cf8c5320adcd047c1b14f
kube-rbac-proxy git 5a14ea9d sha256:8677f7a973553c25d282bc249fc8bc0f5aa42fb144ea0956d1f04c5a6cd80501
kube-storage-version-migrator git c0f1886a sha256:cf9670d0f269f8d49fd9ef4981999be195f6624a4146aa93d9201eb8acc81053
kubevirt-cloud-controller-manager git 3f4542ec sha256:0ca9e29678b506a26c58fb12f7f572e905d2e0ccdf245c2905a197d5e64af92d
libvirt-machine-controllers git a336f0b5 sha256:bf86227022f7be86e94abac11eae119d11a619959f6b670a91e87e11405f78c7
machine-os-images git ab432836 sha256:e099743af5a8afe29ee6bf38742ad7beea0c1c67e293f53dc9de199c17c133db
multus-admission-controller git 0d7ea6c7 sha256:5230462066ab36e3025524e948dd33fa6f51ee29a4f91fa469bfc268568b5fd9
multus-cni git 21fb8e05 sha256:381e96959e3c3b08a3e2715e6024697ae14af31bd0378b49f583e984b3b9a192
multus-cni-microshift git 21fb8e05 sha256:642ba0bb2ccbdc4df22210117a41496417a66faec883ec7effd81ff5ec021f43
multus-route-override-cni git 391c1b03 sha256:c8f0fda36e9a2040dbe0537361dcd73658df4e669d846f8101a8f9f29f0be9a7
multus-whereabouts-ipam-cni git 86191ded sha256:e207c762b7802ee0e54507d21ed1f25b19eddc511a4b824934c16c163193be6a
must-gather git 02e536cc sha256:c3622019e2189f61f57ca8f7ea4f67aa8f74c37b573f45b2975200c058895439
network-metrics-daemon git 11e2dec9 sha256:89cb093f319eaa04acfe9431b8697bffbc71ab670546f7ed257daa332165c626
network-tools git 47b13549 sha256:8e9759d9e83b9d2cb1ca58f43e68226be045dcc84b6198d1faa41e4539305805
nutanix-cloud-controller-manager git d9fe8f38 sha256:6fad23e1dd5aad6eab886939dd4b08a39780299903092a8d8c9496bca1d683e7
nutanix-machine-controllers git afe324bf sha256:f1e72fddac232eafc0aa23ff93c1bd80b689dcb76cb09c9f82e1070b43f1f6bf
oauth-server git 287caff3 sha256:3d3571ade02a7c61123d62c53fda6a57031a52c058c0571759dc09f96b23978f
openshift-controller-manager git 8ee74406 sha256:eb82e437a701ce83b70e56be8477d987da67578714dda3d9fa6628804b1b56f5
openshift-state-metrics git 3cca6fee sha256:bececf32872455775075a3d35100302396ca58ae29827b24d7df086d8ac14432
ovirt-csi-driver git 1db726a9 sha256:961c2c0c561028c1b0ff7eb979519659bae2ad7ebeda8c31f9790dfff7bcf52c
powervs-block-csi-driver-operator git 01fc505a sha256:5443f312d8a9a14766a3b82972589cb0b1623c9649be1e6df60f1aa96aa5592f
powervs-cloud-controller-manager git 17ae6fba sha256:942e96d90074bf5dc620419bf4e1ed58940c7b07809d726d74805be1aadfee29
powervs-machine-controllers git 74e3ece7 sha256:e0b1018934ff4e66cee2bd81912038e3ea0ca6a8f6f65b9500cec756fa932464
prom-label-proxy git 35c11369 sha256:62eb734bffa3a20fcd96776dd00c9975c23c1068fc012b4104cc4971fdf32e63
prometheus-node-exporter git 92e17ff5 sha256:3888758fa24689d4e63dfb78ed97a852c687295adcabdabf8cdc4a2beaa42398
rhel-coreos sha256:488c7559709f4747b9cc29de1db18038270193dc7acdb546c94a33dc077504e2
rhel-coreos-extensions sha256:25968f175e97edd03d85d1cdff3b3d2de25e08c55e75d18285788b825a35e3f3
route-controller-manager git ce6ffa24 sha256:2fe5144b1f72bdcf5d5a52130f02ed86fbec3875cc4ac108ead00eaac1659e06
service-ca-operator git 30efb529 sha256:7220d16ea511c0f0410cf45db45aaafcc64847c9cb5732ad1eff39ceb482cdba
telemeter git 490612bd sha256:efed4867528a19e3de56447aa00fe53a6d97b74a207e9adb57f06c62dcc8944e
thanos git f1599f65 sha256:2c8f904c1084450856b501d40bbc9246265fe34a2b70efec23541e3285da7f88
vsphere-cloud-controller-manager git c414d1f5 sha256:c0d5b9dbf8b42783f803af5d8f1ed1222e9d00cd8470e2e29f49867a32e88a47
vsphere-csi-driver-operator git 2b241410 sha256:f604982bcdbed79ab78ca987b7a394c2376873079e8dbf6eb987880c6675c69f

agent-installer-api-server

OCPBUGS-74911: Remove root=/dev/disk/by-label/dm-mpath-root from kargs #8820
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

MGMT-21849: Skip arping for remote IPs not in outgoing NIC’s subnet #1332
Full changelog

agent-installer-utils

OCPBUGS-68243: bump github.com/sirupsen/logrus to v1.9.3 #237
Full changelog

aws-cluster-api-controllers

OCPBUGS-61841: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #570
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-62664: disable e2e snapshot tests #463
OCPBUGS-63558: Add RBAC ClusterRole and Binding for driver node #454
OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
OCPBUGS-62973: Add withCABundleDaemonSetHook() to AWS EFS operator #447
Full changelog

aws-machine-controllers

OCPBUGS-73789: Fix reconciler consistency checks in Update and Exists #166
OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-machine-controllers

OCPBUGS-65882: Set updateDomainCount to one when faultDomainCount is one #175
OCPBUGS-63669: Support datadisks on Stack Hub #167
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-67203: Update the RHCOS 4.18 bootimage metadata #10294
OCPBUGS-74676: [release-4.18] GCP: skip AI zones #10275
OCPBUGS-69880: Azure UPI ARM template: use storageAccountId #10179
OCPBUGS-68244: [4.18] uplift logrus #10166
OCPBUGS-57590: Mount the user-ca-bundle into ICC #9794
OCPBUGS-63494: Catch gcp destroy cases where the operation is nil #10030
OCPBUGS-52659: [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme #9545
OCPBUGS-65588: Update the RHCOS 4.18 bootimage metadata #10113
OCPBUGS-58504: Refactor removing loadbalancer in OpenStack #9831
OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
OCPBUGS-62810: Update the RHCOS 4.18 bootimage metadata #10014
OCPBUGS-59490: Make swift containers removal not fatal for UPI. #9839
OCPBUGS-61529: Use less permissive access for /var/lib/etcd for SNO #9937
Full changelog

baremetal-runtimecfg

OCPBUGS-60111: Re-add ENABLE_NODEIP_DEBUG env var #364
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-65707: fix(must-gather): do not set node affinity if nodename is set #2145
OCPBUGS-64608: Help with must-gather scheduling through suggesting preferance of nodes #2127
Full changelog

cloud-credential-operator

OCPBUGS-65800: ccoctl azure: retry custom role creation on consistency errors #950
OCPBUGS-65479: ccoctl: use pagination when listing resources in aws #947
OCPBUGS-63548: ccoctl: add public-key-file flag to create-all #938
OCPBUGS-55127: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #915
Full changelog

cloud-network-config-controller

OCPBUGS-73750: [release-4.18] Fix pointers without ptr.Deref #199
OCPBUGS-65651: [release-4.18] Fix capacity calculation #193
OCPBUGS-64779: [release-4.18] Change the capacity struct from int to ptrOfInt #189
Full changelog

cluster-autoscaler

OCPBUGS-75925: Fixes histograms becoming empty after loaded from checkpoints #402
Full changelog

cluster-baremetal-operator

OCPBUGS-57590: Mount the user-ca-bundle into ICC #486
OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

OCPBUGS-70315: Add HTTPKeepAliveTimeout to IngressController API #2638
NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers #2625
OCPBUGS-67214: Introduce ClosedClientConnectionPolicy to IngressController API #2618
CNTRLPLANE-1980: Promote streaming list encoding to Default #2598
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2562
CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-config-operator

OCPBUGS-68249: Update logrus to 1.9.3 to address CVE-2025-65637 #464
Full changelog

cluster-etcd-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #1545
OCPBUGS-63451: Ensure revision.json persists on ungraceful shutdown #1503
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1518
Full changelog

cluster-ingress-operator

OCPBUGS-70315: Implement HTTPKeepAliveTimeout tuning option #1333
NO-JIRA: Add new NID team members to OWNERS #1319
OCPBUGS-67214: Implement ClosedClientConnectionPolicy field #1322
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #2031
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1976
OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #906
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #897
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #612
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #590
Full changelog

cluster-monitoring-operator

OCPBUGS-67168: Add the collection of MTV migration metrics #2774
OCPBUGS-61965: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2723
OCPBUGS-64579: Fix KSM deny-list typo #2731
OCPBUGS-63488: Remove AlertManager endpoints when disabled #2737
OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
OCPBUGS-63410: [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy #2724
OCPBUGS-63017: test: remove image registry e2e tests #2711
OCPBUGS-61706: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2669
Full changelog

cluster-network-operator

OCPBUGS-73767: Tweak iptables-alerter to try to avoid crictl bug #2877
OCPBUGS-65704, OCPBUGS-65705: Annotate whereabouts-controller #2842
OCPBUGS-62671: Add drop flows for GARP #2810
Full changelog

cluster-node-tuning-operator

OCPBUGS-69947: [release-4.18] E2E: skip stalld test checking sched_fifo #1451
OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

cluster-storage-operator

OCPBUGS-62666: Move metrics to vsphere driver #632
Full changelog

cluster-version-operator

NO-ISSUE: hongkai becomes an approver release-4.18 #1286
OCPBUGS-62869: disable metrics auth for hypershift clusters #1242
Full changelog

console

NO-JIRA: Bump builder image to v29 #15995
OCPBUGS-65808: Fix PatternFly dark theme colors for charts and form inputs #15951
OCPBUGS-74458: Bump lodash to latest #15965
OCPBUGS-73753: Fix Helm chart installation with CA/TLS certificates #15914
OCPBUGS-73662: Namespace is not persisting when switching to developer view from the topology page of admin page #15910
OCPBUGS-69915: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15868
OCPBUGS-69448: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15855
OCPBUGS-68361: Disallowed Pipelines-plugin Pipelines navigation section #15842
OCPBUGS-65592: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15725
OCPBUGS-65932: Preserve query string in perspective switch + remove dev console folks from reviewers #15761
OCPBUGS-65533: Preserve path on perspective switch #15716
OCPBUGS-64735: Expose prometheus tenancy label path as a proxy #15685
OCPBUGS-64682: limit node log length to 1000 lines #15680
OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
OCPBUGS-63247: fix bug where Roles list was displaying invalid data f… #15619
OCPBUGS-63041: switch to dev perspective for /dev-monitoring #15601
OCPBUGS-44156: bump dompurify to latest #15589
OCPBUGS-62326: /auth/error?error=missing_state&error_type=auth is showing blank page #15544
OCPBUGS-61569: Update CHANGELOG for 4.18 plugin SDK package publish #15516
OCPBUGS-61569: Fix bug with Console provided PatternFly shared modules #15479
OCPBUGS-61697: Remove ancient X-XSS-Protection header #15493
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-60871: [release-4.18] host-device: Return interface name in result #208
Full changelog

coredns

OCPBUGS-60462: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #152
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-57800: Rebase release-4.18 onto release-1.31 #322
Full changelog

csi-external-resizer

OCPBUGS-62467: Requeue PVC over PV creation #176
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

docker-builder

OCPBUGS-66990: bump buildah to 1.37.7 to fix CVE-2025-52881 #498
OCPBUGS-65655: BuildConfig inline Dockerfile fails with heredoc syntax #486
Full changelog

gcp-pd-csi-driver

OCPBUGS-68258: UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 #89
OCPBUGS-44772: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #83
Full changelog

haproxy-router

OCPBUGS-67214: Add option abortonclose to HAProxy configuration template #703
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-54724: Fix implementation of ContainsCIDR to allow non-equal addresses #2267
OCPBUGS-65553: Update to Kubernetes v1.31.14 #2521
OCPBUGS-65494: Fix Concurrentmap Iteration #2512
OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
CNTRLPLANE-1610: Backport StreamingCollectionEncoding for JSON and protobuf #2483
OCPBUGS-61557: Rebase v1.31.13 #2465
Revert “UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.”” #2448
Full changelog

hypershift

CNTRLPLANE-1708: Backport Customer Global Pull Secret to OpenShift 4.18.z #7354
OCPBUGS-72932: Fix Konflux EC voilation, update deprecated base … #7456
OCPBUGS-69847: test: remove unit tests that depend on network communication [release-4.18] #7406
OCPBUGS-65843: specify SCC annotation for pods in data plane #7267
CNTRLPLANE-1902: Migrate 4.18 pipelines to common pipeline template #7211
OCPBUGS-61700: use csi-resizer image from release provider #7103
OCPBUGS-63638: [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7111
OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
CNTRLPLANE-1424: feat(konflux): tag MCE HO images with latest #6837
OCPBUGS-62816: set default goaway-chance to 0.001 #6950
OCPBUGS-61904: resolve MIRRORED_RELEASE_IMAGE flapping #6858
OCPBUGS-61700: Sync RBAC for expansion support in kubevirt CSI driver #6355
OCPBUGS-61568: [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution #6793
OCPBUGS-61203: ci: konflux multi-arch images #6867
OCPBUGS-61203: Use the common konflux pipeline and update CLI dockerfile #6832
NO-JIRA: chore(deps): update konflux references #6667
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67286: [release-4.18] Fix incomplete vendor/ #140
Full changelog

insights-operator

OCPBUGS-68263: Update github.com/sirupsen/logrus to v1.9.3 #1205
OCPBUGS-68263: [release-4.18] golanci-lint version update & corresponding fixes (#1045) #1206
OCPBUGS-66396: Add filtering to add other possible pod status to QEMU gatherer #1195
OCPBUGS-66182: QEMU logs are not gathered if there are pending status virt-launcher pods #1189
OCPBUGS-66181: [bugfix] The archive’s records may include files whose names are out of bounds #1188
OCPBUGS-61972: add missing permissions for replicasets and events #1146
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-69790: Bump eventlet version to 0.33.1-7 #760
OCPBUGS-65573: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #727
OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

ironic-agent

OCPBUGS-69780: Bump eventlet version to 0.33.1-7 #230
OCPBUGS-68360: Include Test advertised ip reachability before assigning it #226
OCPBUGS-62456: netutils: Use ethtool ioctl to get permanent mac address #206
Full changelog

kube-state-metrics

OCPBUGS-74873: Deduplicate CRS stores #131
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-api-operator

OCPBUGS-59387: Enabled 10 concurrent reconciles on GCP #1392
Full changelog

machine-config-operator

OCPBUGS-76560: [release-4.18]: cherry pick to few fixes that needed for missing services and configuration #5653
OCPBUGS-71227: MCP is not correctly degraded when a pivotError happens #5534
OCPBUGS-70336: Remove log exposing kubeconfig #5528
OCPBUGS-62169: Fix - NetworkManager restart or crash renders br-ex unusable #5356
OCPBUGS-65850: Remove –mount directives #5433
OCPBUGS-62294: Make static DNS with DHCP IP work #5311
OCPBUGS-63346: Invalid architecture value found in annotation during 4.19 update #5366
OCPBUGS-60111: Enable debug logging for nodeip-configuration #5220
OCPBUGS-62671: [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it #5325
OCPBUGS-62845: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5341
OCPBUGS-62499: Add /etc/docker/certs.d to template #5320
OCPBUGS-62637: Machine-config controller should actively manage cordon while draining #5322
OCPBUGS-62350: Add mcd_local_unsupported_packages recording rule #5315
OCPBUGS-62321: Add control-plane label for master nodes on legacy clusters #5314
OCPBUGS-61840: Override NMState service definition #5288
Full changelog

machine-image-customization-controller

OCPBUGS-68262: [4.18] Uplift logrus #151
Full changelog

metallb-frr

OCPBUGS-74485: Dockerfile: unpin FRR rpm #121
Full changelog

monitoring-plugin

OCPBUGS-70291: fix: update qs vulnerable dependency #739
OCPBUGS-65958: Fix metrics gaps 4.18 #656
OCPBUGS-64735: allow tenancy access to metrics tag #638
OU-1059: add perspective to action injector #632
Full changelog

multus-networkpolicy

OCPBUGS-54939: [release-4.18]: Support default ports value #68
Full changelog

network-interface-bond-cni

OCPBUGS-62793: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #99
Full changelog

networking-console-plugin

CNV-76277: Fix name generator with unprofessional names #319
OCPBUGS-63582: Fixed - Extra semicolon observed before Service IP in OCP Console #306
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #170
OCPBUGS-65841: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #155
OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

oauth-proxy

OCPBUGS-61444: Update x/crypto to v0.31.0 #333
Full changelog

oc-mirror

OCPBUGS-66051: Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) #1324
OCPBUGS-65510: removes unintended exec permissions #1312
OCPBUGS-62696: v2/cli: show binary version in output #1286
OCPBUGS-62711: generate the archive only after mirroring #1287
OCPBUGS-62432: changes the warning message of 4.21 #1278
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd

OCPBUGS-62872: set the SElinux type #139
Full changelog

olm-operator-controller

OCPBUGS-62872: set the SElinux type #509
Full changelog

openshift-apiserver

OCPBUGS-69955: Add ValidatingAdmissionPolicy and check for omissions next time. #589
OCPBUGS-66379: pkg/image: conditionally parse raw image manifest #585
OCPBUGS-65842: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #581
Full changelog

openstack-cluster-api-controllers

OCPBUGS-64816: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #371
Full changelog

openstack-machine-api-provider

OCPBUGS-76792: Fix make test #159
OCPBUGS-74986: Revendor CAPO #152
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-76924: Remove the collect-profiles job #1231
OCPBUGS-65700: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1156
Full changelog

operator-marketplace

OCPBUGS-73883: Increase default catalog polling interval to 4h (240m) #707
OCPBUGS-68272, OCPBUGS-68273: CVE-2025-65637 fixed in logrus v1.9.3+ #703
OCPBUGS-62218: Remove Expect func so that the test case can use the retry logic #669
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68284: Bump github.com/sirupsen/logrus to v1.8.3 #150
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-74270: release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync #2943
OCPBUGS-70346: Branch Sync release-4.19 to release-4.18 [01-07-2026] #2922
OCPBUGS-66140: Branch Sync release-4.19 to release-4.18 [12-31-2025] #2916
CORENET-6055, OCPBUGS-48710, OCPBUGS-66360, OCPBUGS-66381, OCPBUGS-66428: Branch Sync release-4.19 to release-4.18 [12-03-2025] #2895
OCPBUGS-68347: Add ricky-rav to OWNERS for release-4.18 #2897
OCPBUGS-64855: Fix stale EIP assignments during failover and controller restart #2849
OCPBUGS-64780: kubevirt: fix bad release of IPs of live migratable pods #2847
OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
OCPBUGS-48710: [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] #2811
OCPBUGS-62671: Fix EgressIP stale GARP post reboot + pod restart #2775
OCPBUGS-59744, OCPBUGS-61455: [4.18] allow default network -> localnet on the same node for any localnet subnet #2785
OCPBUGS-61748: [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] #2777
OCPBUGS-59680: [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] #2768
Full changelog

powervs-block-csi-driver

OCPBUGS-51896: Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 #102
OCPBUGS-70002: Update builder image’s golang version to 1.23 #103
Full changelog

prometheus

OCPBUGS-61706: chore: compute highestTimestamp at queryManager level #267
Full changelog

prometheus-alertmanager

OCPBUGS-74976: Include go-verify-deps expected files in gitignore #114
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-61965: reconcile workload configurations when a referenced secret/configmap key is updated #347
Full changelog

tests

OCPBUGS-74207: Unrevert TLS tests with fixes #30708
OCPBUGS-69900: Updated the upgrade duration limit to 100 minutes for ppc64le #30628
OCPBUGS-63668: Add imagestream update dryrun test #30436
OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
OCPBUGS-61698: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30253
OCPBUGS-60511: Bump to latest openshift/kubernetes (v1.31.12) #30230
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61651: Fix unit tests #70
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68278: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #156
Full changelog

vsphere-problem-detector

OCPBUGS-70359: Fixed logic for vSphere compute cluster permission #200
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github