4.18.38

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.38-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.36, 4.17.37, 4.17.38, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.18.10, 4.18.11, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.32, 4.18.33, 4.18.34, 4.18.4, 4.18.5, 4.18.6, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.27

Created: 2026-04-17 07:41:43 +0000 UTC

Image Digest: sha256:deacb4132f024a8c364ab8589b7b3f391b887ca4ae92bd4b37df2efa5b1e2145

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.13 to 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202604140044-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:54d2e14e91f22180b609aeef1240a06edc2e1738f9b52f0221925b31eebe9b18
agent-installer-orchestrator git 81d6bc27 sha256:30e050f41bcff203786a0f32bb70fc2bb2a83556bd424f5b91340a80c82ae0d2
apiserver-network-proxy git 2f62712d sha256:b1d3a2df309587c733f98df61997174aa368357ee0a31795eb9ff4c5a5e3c6eb
aws-cloud-controller-manager git c3951906 sha256:d15a7330d1876fd92c2bb80f65fa2cb9848ebbf776a5d0a537b702df7b850756
aws-ebs-csi-driver git b51cd6b8 sha256:6e88ddbbab87fe76d6657e0172c8a03c85549513a74fbd5a6d28ed61eb1dca0f
aws-kms-encryption-provider git 088dcaf7 sha256:eb79ae6f6f5fbfb20a1ee0a16815ff94d8277e68df93d20e10f299aaae143a7f
aws-pod-identity-webhook git f54f9a19 sha256:4a7f7d9936ce627f12840f03d8a37d9f974292a6c287c1f3926f9a4d8b0a97af
azure-cloud-controller-manager git 9c24d768 sha256:57583df7e9215b0adccb8244ed84f451970d45a78ac8cc89a2aa973c8571bad5
azure-cloud-node-manager git 9c24d768 sha256:04a565d60d3de99bf9abbcaaa525bc9638318a0391763c832074cab8d9e366b4
azure-disk-csi-driver git 6cced666 sha256:9f5623f5a47c97b2f04209ff30df67674f1cc24b6de2321eb5c8b121318df780
azure-file-csi-driver git 4b34592e sha256:4e23d76b4b7d18c6a926ee02c4dc496fdb2e62edc97e50221b06c1643b36efef
azure-kms-encryption-provider git c937080f sha256:41c70c82d8a2cc1d3b7ab10fb9dab686d673843dddc8bd38c2135bc9f4cb3b51
azure-workload-identity-webhook git f60e4029 sha256:9a572ab28133a152e180d95d3d0c3a0aaf1b4b6b0cc2f560bb56d2482894b241
baremetal-cluster-api-controllers git 80c3a063 sha256:b6482121338249f4bcc9cf7513806c23ebc2332d9352fbbd1a7e29865d2a4afb
baremetal-machine-controllers git 1ede6c3f sha256:a386ad26084032b7a4a7270f461832f4e920f05cb80e07d947e1ea5165bf7235
baremetal-runtimecfg git 35341068 sha256:21c5d9cc0d285d1c01f1778a6149ac6db3f6c51140fba9b8bebb1b1181dde5db
cluster-authentication-operator git 882f8799 sha256:f877f8a354883ac1b9300dcf9e58f99ee30827735ab8e61ef458b5dfeb8ad045
cluster-autoscaler-operator git 474ad65c sha256:78fec8f1793f39213c71a3d380b8e0a64f7b997a22a5be4ccba0e24e81bfd5df
cluster-bootstrap git d1e01954 sha256:824a6842f966cd14f373a235d2f700aa4695bc6cbffb0a9107cf4575025ee60f
cluster-capi-controllers git 63df38bc sha256:d921d911fed9549640100994d8c0deefc49ce37dc9ad3936c3ebab94c74aea4f
cluster-capi-operator git 2f2737e1 sha256:2a6ce42d8a8bca338a5bae7f8e15379c0cace3bd24b47885403ea7f7a84ef7e1
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:07adb7970a761203a904a21bbe6229b6c0c479f396265e5c630cb821a073d882
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:48df0fed5fe0eb04e872ed03404c82a23bd561398732b3deec6ea20db0943ded
cluster-dns-operator git 7cafd0c7 sha256:78a74341ae4736305a045152edc548f6a7cc6b2a1436851d3b1bdaaeae064646
cluster-image-registry-operator git 1e3caa4b sha256:e1441daff454c10c072660c2356de2a1e4b049b00015ab6a89bd10dc93715e4d
cluster-kube-cluster-api-operator git 33a1141e sha256:3ba2c090083479e958e9754408c15cfa536b00fea9cfbff7bedac191b93c7221
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:c62a4559443646692135d316eb0e716d9b24d3d9ef3123c7e636298b0b5f44fd
cluster-machine-approver git 01d5fbbe sha256:c5f3eab18627ffc66b7e4f86c5c7f08d54f958c2861c64ce4b23fffecff7e361
cluster-olm-operator git 88088e4b sha256:905b8fc158a8017b2c5c8c9203df74ca797d87c82c0baeb981546633c9bb1090
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:ae926984a1f84bfdbd573372dda594eff692f9ff69806b4911e458b6ab8fad3e
cluster-openshift-controller-manager-operator git f1711cf3 sha256:a6f84f751ee7e4b3c2560826b443d4c8b763751221aeeea72dfc31ffff133c48
cluster-policy-controller git 5fd85252 sha256:97670851c77ab96272463140a6e010662566d1c67842661d056788eca0a19f4b
cluster-update-keys git 8caab452 sha256:a999bb3f308bd630889cdbfaf901335fc6bcb41d3c534799f7fbbb9a45857c80
configmap-reloader git e2aaf00a sha256:2fc20b6af70defda307b22cd0d96356909417c854dff4de155e3d4bea3afe637
container-networking-plugins git e8ca1d70 sha256:c99672f0a205a568e0fa5efbafb9a0ee27d9edb05ae1a2b9f3327cbce2a13263
containernetworking-plugins-microshift git e8ca1d70 sha256:3ae56e7a9a1b1520d0f61c0e041d2f99de3235f6800a7ee55eaf49cbd65849ab
coredns git 8ca7f02b sha256:8aec9d41fa28a58c06da3a546a1c769f510cc61aa27075801810df9704045073
csi-driver-manila git 8857214a sha256:5afa52005a5a94d647b6340514b5d46bc0de9c2488230b38ed87a6439c5b737d
csi-driver-nfs git 32e77590 sha256:1ad8db2414702b68a6c29d34b53910463bebb8a9e7626258c1b3490524886268
csi-external-attacher git 39b37c06 sha256:95493ef1cf8bdb6cb2f71d8d454e5b6a02f4d6af23d53ba207789f8948c92097
csi-external-provisioner git 376f0ea0 sha256:beb95b887f25a965c77f42410c2b2160f8b407780a994cb907fd6291e9be8147
csi-external-resizer git a1423690 sha256:6f01d250656e86efd8a7cd2c731cfc46a8ddec2be37300b73a237eb27d5b5149
csi-livenessprobe git 3a977844 sha256:584810d7a22cae88d8208478aaf5de273bba5b1692fa3de498f6e6d28df4e6d5
driver-toolkit git 2e139edc sha256:51b9fd203c2f82c787b2b3e1ce77e54751ef6776c7b155ee6f52303989456d36
egress-router-cni git 3193a756 sha256:0bcb4e050cbc2093368c50bd9ba7400aa5d2b75cd0b06984d3a57714ce9b1020
etcd git b5a4f8d0 sha256:c8f9c4f1f702d576e426e937805096398aba35685753c44ae7827f9591acec48
gcp-cloud-controller-manager git 6ea23561 sha256:a8acaecbd19cb10cc0a52d18ed25885aa6a0b51a175fbf25ad30bdfe8f58e21b
gcp-machine-controllers git b2f858ba sha256:9ddcc69286a62a211555ef147c712a77d250cbe6f0022840acba8bf01d739a18
gcp-pd-csi-driver-operator git 7cb8b38c sha256:a3378257057f4cf773c73972d19f8d5e08aeb9c20d813f8001b4e3b31c32b013
gcp-workload-identity-federation-webhook git f0a670c7 sha256:474c793d2b6ea830c18efe1b928e9668961001d43ac70653f1ed8969b46f07f9
ibm-cloud-controller-manager git a33026b1 sha256:d4f82681f2b78289b2827687cbc24c110a0e10adb01437aa1d2f1c5c4e899d1a
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:57a7402809f0f564a36dc4b155d4aa96a069b6e791c1ed6c3839f3de9b681825
ironic-machine-os-downloader git 50ca44fd sha256:98ceeaab3084f4d5b767830dc709e5ca698f399b68077e9f341f2e151ddedf47
ironic-static-ip-manager git cfbae04f sha256:66321719b4befe04fe69f6f4a097a462be714dea076ca8f56c7c26518de23392
keepalived-ipfailover git 716eb0ef sha256:016e04bdfb4e6133b845ccecac9e12299bf784105b8e8a15afb4c18c06e72a64
kube-metrics-server git 962ccca2 sha256:3b4ecf22eaa72880b3afcebbd4fcc491464b67732a45dcf32e9824c41bfc9dd1
kube-rbac-proxy git 5a14ea9d sha256:211054e1b5dfc556eaa545685af3d99dcbe553ef4805a8ee25a44ffc084df8ba
kubevirt-cloud-controller-manager git 3f4542ec sha256:6d4826e668788ec98905a73c9501019077335d1ef6de2454760f23097a72a3f7
machine-os-images git ab432836 sha256:8250e93af36d53f73ecf521373340e63fd5658c572aad173d3821251245de2ad
multus-admission-controller git 0d7ea6c7 sha256:d4a707e28836c02b534cf406df05a638efaaba2f39a7ce4c2d02474532853a88
multus-networkpolicy git 3362bbc4 sha256:253ffe167a961af064ae14003523731f61fa3181499d18dd065474cbdb8bbb2a
multus-route-override-cni git 391c1b03 sha256:e3445e30ef93c278715a212d2c40aeb9570141f603f746c191c443348589cab9
multus-whereabouts-ipam-cni git 86191ded sha256:2e1bf6895e67f2622517f5d5be3468453e5889c56122c3dc689d31aa98322aa5
must-gather git 02e536cc sha256:a242a27fed05665af39449764eeba2ebb7e58c14c76857580282bf01ddf90a0f
network-interface-bond-cni git e2de9255 sha256:650d175a11e8a278afe6111340fa47199abd4980b216a318617681e73327153e
network-metrics-daemon git 11e2dec9 sha256:72b504bfb000928180bc6c36a1507c508eaf0e95afb6efb603f5199568c79e78
network-tools git 47b13549 sha256:fada570a32c182abb2a4e5fef4652f3456a74013f973bb3506f38cd40b6ea743
nutanix-cloud-controller-manager git d9fe8f38 sha256:156ae23e27e16cedf804f4d62c243ffcaf734ffa164620305fa03ccad7cab764
nutanix-machine-controllers git afe324bf sha256:bc6bda873d69cca8baa916fcb3c84b167405912d1a499e6764a67ce64d3bd3b2
oauth-proxy git 9225edb9 sha256:8720c0f80ab73163f11ca1504bf7f0b5f74f341df533b2352af83378143de941
oauth-server git 287caff3 sha256:7e1aa3920647f7f0ee750c78c65205aac6557de4467e059d37a939d86c22b0c5
olm-catalogd git 180aa92c sha256:f00fddc241a5cfd332d71f73a07b5bbd9c6401155a689ad5d1990afffabc85dc
olm-operator-controller git 48a1e924 sha256:123b6cf31b84909833b10385d102b16860da9dceeb9f3f61ddbb77ab41f5ba57
openshift-controller-manager git 8ee74406 sha256:5a084bced9567624dc96c11787a1fe2ff358b85d8899a153311f93a93cbee4fb
openshift-state-metrics git 3cca6fee sha256:77972a165aadf34bc1f9d3503123745ad968fb3e2e1b155291b70c2793bb3283
openstack-cinder-csi-driver git 8857214a sha256:37ca4289429a96117efdaa80c3c8d0fd0d6d0f48adfacbbd7abc01ae2086926e
openstack-cloud-controller-manager git 8857214a sha256:e47f614987b1672bed57094ac34fa909a43cea10a1761412edee851496c4f680
ovirt-csi-driver git 1db726a9 sha256:455fb600ea2ba342a565a870a493f5443f305649058cb0f6c19487206b2e62ff
powervs-block-csi-driver-operator git 01fc505a sha256:095bb47318ef643ae5cd3dac26dabf159610b81bdeadab58c59e0c9cfa637a39
powervs-cloud-controller-manager git 17ae6fba sha256:1d663ff5986d732f9b44187d2790d17e59fe339197a7abf61daaa05ec7d778bc
powervs-machine-controllers git 74e3ece7 sha256:3602b276d820e2b93e047a9621d8a2f73d8a0c6f24abb061e48b8665a42dfc49
prom-label-proxy git 35c11369 sha256:086b66066d4c24d6be8029f307f7478bec9f0a33dff4048f35d63a00b83fdb1c
prometheus git a85013a6 sha256:ac70b157bbe7da88ba72d24eb9a21907d72d96f32b5a354417659d9a025d19e9
prometheus-node-exporter git 92e17ff5 sha256:79e0587959cb01231d761618fe01e4daeb55132c6ed587e0c84bca1c6ca1fd69
rhel-coreos sha256:73a7324c2821ed29b47a0d9357ae8f9d658283f2ecccdd35533aecd39192a3e2
rhel-coreos-extensions sha256:c7b025845e6070873fc772ed4e077e57498632de8a56707dc43dc4e590d23257
route-controller-manager git ce6ffa24 sha256:045b31af7d3dcbe1803ee5775158fff936dfa0509a5925ae822e022e3dbb8e64
service-ca-operator git 30efb529 sha256:73cece342ba4eeddf58cd68c5406d14af3a2aa853b8568cf2e7ce37e4df4046c
telemeter git 490612bd sha256:22d5f6275a0ec557595d4a648cefa3869551ae0f7ffe4a0d68cae98f80bbc3da
thanos git f1599f65 sha256:e05481fd66e8e629708fcb2e3fbe5c4d89b8f64ec849b0697a374347fd01ec55
vsphere-csi-driver-operator git 2b241410 sha256:4fcb3180ca2c9531f6d28d4740b777679b8609c9d573564774372cea546bd4cc

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10019
OCPBUGS-74898: Retry incomplete cluster registration in ABI #8817
OCPBUGS-74911: Remove root=/dev/disk/by-label/dm-mpath-root from kargs #8820
Full changelog

agent-installer-node-agent

MGMT-21849: Skip arping for remote IPs not in outgoing NIC’s subnet #1332
Full changelog

agent-installer-utils

OCPBUGS-68243: bump github.com/sirupsen/logrus to v1.9.3 #237
Full changelog

aws-cluster-api-controllers

OCPBUGS-77903: [release-4.18] update go mod dependency for konflux #589
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-79429: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 #531
OCPBUGS-78299: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #524
OCPBUGS-76582: Fix Cinder, Manila driver metrics #501
OCPBUGS-62664: disable e2e snapshot tests #463
OCPBUGS-63558: Add RBAC ClusterRole and Binding for driver node #454
OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-machine-controllers

OCPBUGS-73789: Fix reconciler consistency checks in Update and Exists #166
OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-cluster-api-controllers

OCPBUGS-77905: [release-4.18] update go mod dependency for konflux #362
Full changelog

azure-machine-controllers

OCPBUGS-65882: Set updateDomainCount to one when faultDomainCount is one #175
OCPBUGS-63669: Support datadisks on Stack Hub #167
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-78550: fix wavelength zone name regex #10409
OCPBUGS-45579: PowerVS: Listen to machineNetwork #9277
OCPBUGS-73784: pkg/asset/manifests/azure: save cidr blocks #10217
OCPBUGS-76598: Increase agent-installer pre-network-manager timeout #10299
OCPBUGS-67203: Update the RHCOS 4.18 bootimage metadata #10294
OCPBUGS-74676: [release-4.18] GCP: skip AI zones #10275
OCPBUGS-69880: Azure UPI ARM template: use storageAccountId #10179
OCPBUGS-68244: [4.18] uplift logrus #10166
OCPBUGS-57590: Mount the user-ca-bundle into ICC #9794
OCPBUGS-63494: Catch gcp destroy cases where the operation is nil #10030
OCPBUGS-52659: [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme #9545
OCPBUGS-65588: Update the RHCOS 4.18 bootimage metadata #10113
OCPBUGS-58504: Refactor removing loadbalancer in OpenStack #9831
OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
Full changelog

baremetal-operator

OCPBUGS-76988: Unblock BMH direct deletion when detached annotation is present #461
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-65707: fix(must-gather): do not set node affinity if nodename is set #2145
OCPBUGS-64608: Help with must-gather scheduling through suggesting preferance of nodes #2127
Full changelog

cloud-credential-operator

OCPBUGS-74548: Resolve nil pointer exception in hasResourceTags #968
OCPBUGS-65800: ccoctl azure: retry custom role creation on consistency errors #950
OCPBUGS-65479: ccoctl: use pagination when listing resources in aws #947
OCPBUGS-63548: ccoctl: add public-key-file flag to create-all #938
Full changelog

cloud-network-config-controller

OCPBUGS-73750: [release-4.18] Fix pointers without ptr.Deref #199
OCPBUGS-65651: [release-4.18] Fix capacity calculation #193
OCPBUGS-64779: [release-4.18] Change the capacity struct from int to ptrOfInt #189
Full changelog

cluster-autoscaler

OCPBUGS-78699: allow clusterapi provider to skip paused resources #413
OCPBUGS-75925: Fixes histograms becoming empty after loaded from checkpoints #402
Full changelog

cluster-baremetal-operator

OCPBUGS-81549: Explicitly set the ReadOnlyRootFilesystem flag to false #584
OCPBUGS-78708: Update kubebuilder tools to more latest version #579
OCPBUGS-57590: Mount the user-ca-bundle into ICC #486
OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

OCPBUGS-70315: Add HTTPKeepAliveTimeout to IngressController API #2638
NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers #2625
OCPBUGS-67214: Introduce ClosedClientConnectionPolicy to IngressController API #2618
CNTRLPLANE-1980: Promote streaming list encoding to Default #2598
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2562
CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-config-operator

OCPBUGS-68249: Update logrus to 1.9.3 to address CVE-2025-65637 #464
Full changelog

cluster-etcd-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #1545
OCPBUGS-63451: Ensure revision.json persists on ungraceful shutdown #1503
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1518
Full changelog

cluster-ingress-operator

OCPBUGS-70315: Implement HTTPKeepAliveTimeout tuning option #1333
NO-JIRA: Add new NID team members to OWNERS #1319
OCPBUGS-67214: Implement ClosedClientConnectionPolicy field #1322
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #2031
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1976
OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #906
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #897
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #622
OCPBUGS-76284: Add priority field to prevent early shutdown #612
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #590
Full changelog

cluster-monitoring-operator

OCPBUGS-77274: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2833
OCPBUGS-67168: Add the collection of MTV migration metrics #2774
OCPBUGS-61965: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2723
OCPBUGS-64579: Fix KSM deny-list typo #2731
OCPBUGS-63488: Remove AlertManager endpoints when disabled #2737
OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
Full changelog

cluster-network-operator

OCPBUGS-78833: Fix whereabouts-token-watcher DaemonSet improvements #2940
OCPBUGS-74154: whereabouts-config is a reserved name for user interaction. #2884
OCPBUGS-73767: Tweak iptables-alerter to try to avoid crictl bug #2877
OCPBUGS-65704, OCPBUGS-65705: Annotate whereabouts-controller #2842
Full changelog

cluster-node-tuning-operator

OCPBUGS-75954: PPC: filter out namespaces dir #1465
OCPBUGS-69947: [release-4.18] E2E: skip stalld test checking sched_fifo #1451
OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

cluster-storage-operator

OCPBUGS-77627: add vsphere permissions for checking if users is authorized to see metrics #670
Full changelog

cluster-version-operator

OCPBUGS-70182: Unify capitalization when comparing architectures for available updates #1327
NO-ISSUE: hongkai becomes an approver release-4.18 #1286
Full changelog

console

CONSOLE-5011: migrate to yarn berry #16073
NO-JIRA: Bump builder image to v29 #15995
OCPBUGS-65808: Fix PatternFly dark theme colors for charts and form inputs #15951
OCPBUGS-74458: Bump lodash to latest #15965
OCPBUGS-73753: Fix Helm chart installation with CA/TLS certificates #15914
OCPBUGS-73662: Namespace is not persisting when switching to developer view from the topology page of admin page #15910
OCPBUGS-69915: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15868
OCPBUGS-69448: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15855
OCPBUGS-68361: Disallowed Pipelines-plugin Pipelines navigation section #15842
OCPBUGS-65592: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15725
OCPBUGS-65932: Preserve query string in perspective switch + remove dev console folks from reviewers #15761
OCPBUGS-65533: Preserve path on perspective switch #15716
OCPBUGS-64735: Expose prometheus tenancy label path as a proxy #15685
OCPBUGS-64682: limit node log length to 1000 lines #15680
OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
Full changelog

console-operator

OCPBUGS-77861: update go mod dependency for konflux #1113
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

docker-builder

OCPBUGS-66990: bump buildah to 1.37.7 to fix CVE-2025-52881 #498
OCPBUGS-65655: BuildConfig inline Dockerfile fails with heredoc syntax #486
Full changelog

docker-registry

OCPBUGS-68253: update logrus to v1.9.1 #464
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78278: [release-4.18] update go mod dependency for konflux #265
Full changelog

gcp-pd-csi-driver

OCPBUGS-68258: UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 #89
OCPBUGS-44772: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #83
Full changelog

haproxy-router

OCPBUGS-67214: Add option abortonclose to HAProxy configuration template #703
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-54724: Fix implementation of ContainsCIDR to allow non-equal addresses #2267
OCPBUGS-65553: Update to Kubernetes v1.31.14 #2521
OCPBUGS-65494: Fix Concurrentmap Iteration #2512
OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
Full changelog

hypershift

OCPBUGS-76532: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7699
OCPBUGS-77368: Fix ignition-server pod restarts #7878
CNTRLPLANE-1708: Backport Customer Global Pull Secret to OpenShift 4.18.z #7354
OCPBUGS-72932: Fix Konflux EC voilation, update deprecated base … #7456
OCPBUGS-69847: test: remove unit tests that depend on network communication [release-4.18] #7406
OCPBUGS-65843: specify SCC annotation for pods in data plane #7267
CNTRLPLANE-1902: Migrate 4.18 pipelines to common pipeline template #7211
OCPBUGS-61700: use csi-resizer image from release provider #7103
OCPBUGS-63638: [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7111
OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77207: [release-4.18] standardize build paths #122
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67286: [release-4.18] Fix incomplete vendor/ #140
Full changelog

ibmcloud-machine-controllers

OCPBUGS-81647: bump vpc go sdk #91
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #87
Full changelog

insights-operator

OCPBUGS-76537: [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1239
OCPBUGS-68263: Update github.com/sirupsen/logrus to v1.9.3 #1205
OCPBUGS-68263: [release-4.18] golanci-lint version update & corresponding fixes (#1045) #1206
OCPBUGS-66396: Add filtering to add other possible pod status to QEMU gatherer #1195
OCPBUGS-66182: QEMU logs are not gathered if there are pending status virt-launcher pods #1189
OCPBUGS-66181: [bugfix] The archive’s records may include files whose names are out of bounds #1188
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-77789: remove dnf cache from the container images #69
Full changelog

ironic

OCPBUGS-74115: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #795
OCPBUGS-69790: Bump eventlet version to 0.33.1-7 #760
OCPBUGS-65573: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #727
OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

ironic-agent

OCPBUGS-69780: Bump eventlet version to 0.33.1-7 #230
OCPBUGS-68360: Include Test advertised ip reachability before assigning it #226
OCPBUGS-62456: netutils: Use ethtool ioctl to get permanent mac address #206
Full changelog

kube-state-metrics

OCPBUGS-74873: Deduplicate CRS stores #131
Full changelog

kube-storage-version-migrator

OCPBUGS-78273: fix /vendor for hermetic 4.18 #239
Full changelog

kubevirt-csi-driver

OCPBUGS-79362: Add annotation-based fallback for infra VM node ID resolution #86
OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

libvirt-machine-controllers

OCPBUGS-77194: Fix incomplete vendor/ #300
Full changelog

machine-api-operator

OCPBUGS-78795: [release-4.18] : correct aws kms permissions #1478
OCPBUGS-78796: [release-4.18] Use resource group when generating default Azure image #1480
Full changelog

machine-config-operator

OCPBUGS-79483: set default-timeout-stop to 200s globally #5805
OCPBUGS-62692: configure-ovs: work around a Cisco switch issue #5329
OCPBUGS-78056: Prevent unnecessary systemd unit disable #5758
OCPBUGS-74148: enable nodeip-configuration for platform external #5578
OCPBUGS-77777: reduce MCO image size #5738
OCPBUGS-77576: mcd_config_drift not working properly #5726
OCPBUGS-77421: Remove MCD liveness probe #5710
OCPBUGS-74644: After OCL is enabled few phases in MCN are not updating as expected #5605
OCPBUGS-77092: Machine-config controller should not log about non-existent pull-secret changes #5680
OCPBUGS-77041: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5671
OCPBUGS-76560: [release-4.18]: cherry pick to few fixes that needed for missing services and configuration #5653
OCPBUGS-71227: MCP is not correctly degraded when a pivotError happens #5534
OCPBUGS-70336: Remove log exposing kubeconfig #5528
OCPBUGS-62169: Fix - NetworkManager restart or crash renders br-ex unusable #5356
OCPBUGS-65850: Remove –mount directives #5433
OCPBUGS-62294: Make static DNS with DHCP IP work #5311
Full changelog

machine-image-customization-controller

OCPBUGS-82149: Return error when network data Secret lacks nmstate key #174
OCPBUGS-77888: Clean up dnf cache to reduce container image size #168
OCPBUGS-68262: [4.18] Uplift logrus #151
Full changelog

metallb-frr

OCPBUGS-74485: Dockerfile: unpin FRR rpm #121
Full changelog

monitoring-plugin

OCPBUGS-83374: fix: re encode params when redirecting from graph to query-browser #878
NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds #870
OU-993: adding cypress Dockerfiles #861
OU-876: monitoring automated testing backported and adjusted to pf-5 and diff UI #777
NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] #818
OCPBUGS-70291: fix: update qs vulnerable dependency #739
OCPBUGS-65958: Fix metrics gaps 4.18 #656
OCPBUGS-64735: allow tenancy access to metrics tag #638
OU-1059: add perspective to action injector #632
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-77853: hermetic 4.18 #276
Full changelog

networking-console-plugin

CNV-76277: Fix name generator with unprofessional names #319
OCPBUGS-63582: Fixed - Extra semicolon observed before Service IP in OCP Console #306
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #170
OCPBUGS-65841: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #155
OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

oc-mirror

OCPBUGS-66051: Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) #1324
OCPBUGS-65510: removes unintended exec permissions #1312
Full changelog

openshift-apiserver

OCPBUGS-74234: Bump library-go for route path validation fix #603
OCPBUGS-69955: Add ValidatingAdmissionPolicy and check for omissions next time. #589
OCPBUGS-66379: pkg/image: conditionally parse raw image manifest #585
OCPBUGS-65842: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #581
Full changelog

openstack-cluster-api-controllers

OCPBUGS-64816: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #371
Full changelog

openstack-machine-api-provider

OCPBUGS-69648: Don’t record event for every reconcile #143
OCPBUGS-76792: Fix make test #159
OCPBUGS-74986: Revendor CAPO #152
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-81473: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1273
OCPBUGS-77714: Remove the collect-profiles info from the microshift kustomization file #1245
OCPBUGS-76924: Remove the collect-profiles job #1231
OCPBUGS-65700: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1156
Full changelog

operator-marketplace

OCPBUGS-73883: Increase default catalog polling interval to 4h (240m) #707
OCPBUGS-68272, OCPBUGS-68273: CVE-2025-65637 fixed in logrus v1.9.3+ #703
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68284: Bump github.com/sirupsen/logrus to v1.8.3 #150
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-78015: Add pperiyasamy to OWNERS for release-4.18 #3045
OCPBUGS-77516: Clear stale conntrack UDP entries for nodePorts #3016
OCPBUGS-77083, OCPBUGS-77106: [release-4.18] combined backport PR for 2 escalations #2987
OCPBUGS-48710: Branch Sync release-4.19 to release-4.18 [02-04-2026] #2970
OCPBUGS-74270: release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync #2943
OCPBUGS-70346: Branch Sync release-4.19 to release-4.18 [01-07-2026] #2922
OCPBUGS-66140: Branch Sync release-4.19 to release-4.18 [12-31-2025] #2916
CORENET-6055, OCPBUGS-48710, OCPBUGS-66360, OCPBUGS-66381, OCPBUGS-66428: Branch Sync release-4.19 to release-4.18 [12-03-2025] #2895
OCPBUGS-68347: Add ricky-rav to OWNERS for release-4.18 #2897
OCPBUGS-64855: Fix stale EIP assignments during failover and controller restart #2849
OCPBUGS-64780: kubevirt: fix bad release of IPs of live migratable pods #2847
OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
Full changelog

powervs-block-csi-driver

OCPBUGS-51896: Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 #102
OCPBUGS-70002: Update builder image’s golang version to 1.23 #103
Full changelog

prometheus-alertmanager

OCPBUGS-74976: Include go-verify-deps expected files in gitignore #114
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77298: backport upstream fix to reconcile resources with inconsistent status #370
OCPBUGS-77398: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #366
OCPBUGS-61965: reconcile workload configurations when a referenced secret/configmap key is updated #347
Full changelog

tests

OCPBUGS-77876: Backport: Remove duplicated graceful termination test from release-4.18 #30702
OCPBUGS-74207: Unrevert TLS tests with fixes #30708
OCPBUGS-69900: Updated the upgrade duration limit to 100 minutes for ppc64le #30628
OCPBUGS-63668: Add imagestream update dryrun test #30436
OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-77668: hermetic migration 4.18 #105
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78018: hermetic migration 4.18 #84
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68278: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #156
Full changelog

vsphere-problem-detector

OCPBUGS-70359: Fixed logic for vSphere compute cluster permission #200
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github