# 4.18.28
Created: 2025-11-06 15:54:47 +0000 UTC
Image Digest: `sha256:98c80d92a2ef8d44ee625b229b77b7bfdb1b06cbfe0d4df9e2ca2cba904467f7`
## Changes from 4.18.27
### Components
* Kubectl 1.31.1
* Kubernetes 1.31.13
* Kubernetes Tests 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202511041748-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| StreamingCollectionEncodingToJSON
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| StreamingCollectionEncodingToProtobuf
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### Rebuilt images without code change
* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [03ef1905](https://github.com/openshift/assisted-service/commit/03ef19051b8561514d37ec691652647cdd2f260c) `sha256:a08f08b91e19f6d0b8326272dcf967599aab7dd630ae15e818a917bc6fe9a1dd`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [32a1f2a4](https://github.com/openshift/assisted-installer-agent/commit/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb) `sha256:52d9570d380c39a331fee729396514e3c8a7e9e6522471c2fc49b56a338990f8`
* [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:6526eda46595a77edede1f48a33b046e35dbcc39bc8a362aab9544b9979bf90c`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:2a934670530316b84ccc8562e91c32df028ab95780142dd706eae750954398b7`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [35341068](https://github.com/openshift/baremetal-runtimecfg/commit/353410688340dadb583668215e13e2d6cc90e272) `sha256:0e5c0acdd03dc840d7345ae397feaf6147a32a8fef89a0ac2ddc8d14b068c9ff`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [e8ca1d70](https://github.com/openshift/containernetworking-plugins/commit/e8ca1d70c43f33cd0e75c776e2a24afbec61b46c) `sha256:0d866f93bed16cfebd8019ad6b89a4dd4abedfc20ee5d28d7edad045e7df0fda`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:2e8e7bdb9db0feed98f96e6542cc2e8bb4cb33dc1dc3d61c1df092cdbde4db06`
* [docker-builder](https://github.com/openshift/builder) git [a5cbc2b1](https://github.com/openshift/builder/commit/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f) `sha256:d00e4a8d28cc3d2d3fb5373755d14d8b28eac162507662675fae2c82047ff869`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:673cb0c159ef713fa3756a8808533c840370105733d9a47cfe63b201f3e193ba`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1b8c94ac](https://github.com/openshift/gcp-pd-csi-driver/commit/1b8c94ac55d8602ba6669325ade654ae47ea74cf) `sha256:dc737e45c5fb285e5e07a2da206c0361db34abac6715ca6d245bccdd22c6f726`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:16633b0c52c5133b692c8b75af2f3f644cf70d678ce8d656647e647c504c1a81`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:0247eac32c117b5ee2fbd09f694d7ce28e9000b5b9237f33f658ea020d5a8827`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:0335711cbdf908bd36d15b90cd2d015a848b7b67d4f85a00863b7f48a34ba28a`
* [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [d9a71247](https://github.com/openshift/image-customization-controller/commit/d9a71247dafd469182d4bd13ef227c9be82a1e32) `sha256:a89d97b3f48e9dee1e20c913897b81185cd0af7f09b7dd3b58d18852f4220cbf`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:82395dbf9c54f869b1bab1ad4ff27253704dfdb48cbdba5049aba2e6464eb5b9`
* [metallb-frr](https://github.com/openshift/frr) git [98ccbe64](https://github.com/openshift/frr/commit/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) `sha256:4629a2d090ecc0b613a9e6b50601fd2cdb99cb2e511f1fed6d335106f2789baf`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fafea6bc](https://github.com/openshift/monitoring-plugin/commit/fafea6bc427827c137eb312d9a8d31ad2893114e) `sha256:30948d73ae763e995468b7e0767b855425ccbbbef13667a2fd3ba06b3c40a165`
* [must-gather](https://github.com/openshift/must-gather) git [02e536cc](https://github.com/openshift/must-gather/commit/02e536cc7b3a6632da0643ab78f8dd6570e7f122) `sha256:5e70580b9f50a9a93e6340b82beeaf8498b83f2f90bf0d17375bad26e2ccb8ed`
* [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:3abf628c1fc1326f2508f490b6a6f9a4ee3da73dd14ecd8c138ac54e6c31ddd3`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [15535681](https://github.com/openshift/networking-console-plugin/commit/15535681de838e97e0a137fb0cc7123746019b08) `sha256:25b69045d961dc26719bc4cbb3a854737938b6e97375c04197e9cbc932541b17`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [d36aea34](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/d36aea34452210f988f74e93e0640318f3db1938) `sha256:cba7ad10fb39b7441100637b3a829ede02aa3a1e70b79e16e0b4da49f071f3ea`
* rhel-coreos `sha256:411b8fa606f0f605401f0a4477f7f5a3e640d42bd145fdc09b8a78272f8e6baf`
* rhel-coreos-extensions `sha256:72b0a0c9efb387b7bc098327fb451c359aa613f41cd90a7651d11588dee986a5`
* [tools](https://github.com/openshift/oc) git [4fcb2d07](https://github.com/openshift/oc/commit/4fcb2d07875f05d881ac90af73723db0ae5b1d6e) `sha256:fdcfa264ad6a1a653f17399845e605dbc99e8f391cfdd940fd684819d6e91001`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [cfcad01d](https://github.com/openshift/vmware-vsphere-csi-driver/commit/cfcad01dbca611e0bf7d54af099bba8563acfd4f) `sha256:21a891e2bef32460f4b97e591644b09d138de811855f8c896d05a9d51dbb6651`
### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cf56e3a4c83edceae052175f2331c4089d22f52c)
* [OCPBUGS-63407](https://issues.redhat.com/browse/OCPBUGS-63407): Use 127.0.0.1 for healtz http-endpoints [#450](https://github.com/openshift/csi-operator/pull/450)
* [Full changelog](https://github.com/openshift/csi-operator/compare/2ff53ccbf0da1bad9db98bc128a3a164cf1c25b7...cf56e3a4c83edceae052175f2331c4089d22f52c)
### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/96389ffa2b20a310888dd3163956fa978ab1ca71)
* [OCPBUGS-63138](https://issues.redhat.com/browse/OCPBUGS-63138): client: re-use a single file for building the session instead of randomly named files [#146](https://github.com/openshift/machine-api-provider-aws/pull/146)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08...96389ffa2b20a310888dd3163956fa978ab1ca71)
### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/9d90e7e5503c3cb70da051f3dd29f8761013b7e5)
* [OCPBUGS-63669](https://issues.redhat.com/browse/OCPBUGS-63669): Support datadisks on Stack Hub [#167](https://github.com/openshift/machine-api-provider-azure/pull/167)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/457dead4a58293dec7fb7854e14640c10cf69278...9d90e7e5503c3cb70da051f3dd29f8761013b7e5)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/d4d4b15b3121e69b12a66435b8fae3ea081321d1)
* [OCPBUGS-53235](https://issues.redhat.com/browse/OCPBUGS-53235): Validation for API and Ingress VIPs when using user-managed load balancer [#10046](https://github.com/openshift/installer/pull/10046)
* [Full changelog](https://github.com/openshift/installer/compare/4ef0aa88f4afa77181d9edafa075f2f6cbb44743...d4d4b15b3121e69b12a66435b8fae3ea081321d1)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/555fab9f8c12da6ebdadaeaf6134df22902a42e9)
* [OCPBUGS-63439](https://issues.redhat.com/browse/OCPBUGS-63439): Always have a service for ironic-api port [#514](https://github.com/openshift/cluster-baremetal-operator/pull/514)
* [OCPBUGS-63469](https://issues.redhat.com/browse/OCPBUGS-63469): Allow provisioningIP when network disabled [#515](https://github.com/openshift/cluster-baremetal-operator/pull/515)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6bff75babbad0d352e2b0ee6db0416d3cf19c0e...555fab9f8c12da6ebdadaeaf6134df22902a42e9)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/8abb067318de3cc68967a0f24627c26912242524)
* [OCPBUGS-63166](https://issues.redhat.com/browse/OCPBUGS-63166): ccm: disable unused secure-serving port and webhook [#421](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/421)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1f8672a663e5c0ad873eb9c3760ed430c7369fa5...8abb067318de3cc68967a0f24627c26912242524)
### [cluster-config-api](https://github.com/openshift/api/tree/98e18dae8c7a82a4075c65ca0d357c9bf31cfb7c)
* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Add feature gates for StreamingCollectionEncoding [#2528](https://github.com/openshift/api/pull/2528)
* [Full changelog](https://github.com/openshift/api/compare/e16f6cc860949caf863e79bd838491cdcb6e9641...98e18dae8c7a82a4075c65ca0d357c9bf31cfb7c)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/bac8a7c99c2e8562a05b784c8fe4f8ecd91eecdf)
* [OCPBUGS-63119](https://issues.redhat.com/browse/OCPBUGS-63119): SCC: add hostmount-anyuid-v2 [#1937](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1937)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b6ad4b065b9f9677f0b33d625f9ae9dc36ccc3fc...bac8a7c99c2e8562a05b784c8fe4f8ecd91eecdf)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e8683f7f2fd30b45bfd8a94ca5c70c37029c1363)
* [OCPBUGS-62852](https://issues.redhat.com/browse/OCPBUGS-62852): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 [#2702](https://github.com/openshift/cluster-monitoring-operator/pull/2702)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/75efec0f49b35d12e1f2c0d4e9e585729bbd68b1...e8683f7f2fd30b45bfd8a94ca5c70c37029c1363)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eb5caaf6e854e26dbf249862eac1b0a902325ad8)
* [OCPBUGS-63450](https://issues.redhat.com/browse/OCPBUGS-63450): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1417](https://github.com/openshift/cluster-node-tuning-operator/pull/1417)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a56352c7bda47c69fe34c3d9189071430b71fc94...eb5caaf6e854e26dbf249862eac1b0a902325ad8)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bc725fd43d29758ad8f704044ccc8abb6926ad84)
* [OCPBUGS-63511](https://issues.redhat.com/browse/OCPBUGS-63511): references to github.com/sclorg/django-ex.git now also refer to the branch [#657](https://github.com/openshift/cluster-samples-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa...bc725fd43d29758ad8f704044ccc8abb6926ad84)
### [console](https://github.com/openshift/console/tree/fbb9a4ec3bf61a9ecdd6fcc722d7bfc68a9fb515)
* [OCPBUGS-63657](https://issues.redhat.com/browse/OCPBUGS-63657): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15654](https://github.com/openshift/console/pull/15654)
* [Full changelog](https://github.com/openshift/console/compare/924130a79f8dd519f741bf7017055d8313e1927c...fbb9a4ec3bf61a9ecdd6fcc722d7bfc68a9fb515)
### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/8ddbcd381bf5317c1d1a93db3b5760681a33cb27)
* [OCPBUGS-63574](https://issues.redhat.com/browse/OCPBUGS-63574): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#190](https://github.com/openshift/csi-external-snapshotter/pull/190)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/838d2484157f076bbb81f1b584898aec6f051c2f...8ddbcd381bf5317c1d1a93db3b5760681a33cb27)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)
* [OCPBUGS-63324](https://issues.redhat.com/browse/OCPBUGS-63324): update log level verbosity to not clutter logs [#89](https://github.com/openshift/csi-node-driver-registrar/pull/89)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/c21f5d02b498e9e49d94818f4ad3eaaae77ca161...ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)
### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/56747b62f392bf1b0da64649aa2285f6a524c435)
* [OCPBUGS-61773](https://issues.redhat.com/browse/OCPBUGS-61773): UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 [#2475](https://github.com/openshift/kubernetes/pull/2475)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0ee04c7e38c5c04c6ca854ce4a095d58d3ea6c53...56747b62f392bf1b0da64649aa2285f6a524c435)
### [hypershift](https://github.com/openshift/hypershift/tree/5a73548bacc7b5d6904cca1bd68175a31cee4a25)
* [OCPBUGS-63034](https://issues.redhat.com/browse/OCPBUGS-63034): [release-4.18] Update DNS names for ovn-kubernetes cp metrics [#7025](https://github.com/openshift/hypershift/pull/7025)
* [OCPBUGS-63369](https://issues.redhat.com/browse/OCPBUGS-63369): Make the hypershift CLI binary FIPS-compliant [#7093](https://github.com/openshift/hypershift/pull/7093)
* [OCPBUGS-62808](https://issues.redhat.com/browse/OCPBUGS-62808): Fix driver-config ConfigMap content flapping due to random ordering #6944 [#6947](https://github.com/openshift/hypershift/pull/6947)
* [Full changelog](https://github.com/openshift/hypershift/compare/03122e61f5ab834d937b9b909626113c7dae56e6...5a73548bacc7b5d6904cca1bd68175a31cee4a25)
### [ironic](https://github.com/openshift/ironic-image/tree/cd4755924baecf3b87f87c348c2568dec88434fd)
* [OCPBUGS-62647](https://issues.redhat.com/browse/OCPBUGS-62647): Bump sushy to include etag fix [#701](https://github.com/openshift/ironic-image/pull/701)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9161a5fdb75042856bd40eec31bdba7b7c07d4a2...cd4755924baecf3b87f87c348c2568dec88434fd)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/09f4797657654ce788ea3a1077fd7cf7ce96fb5a)
* [OCPBUGS-63670](https://issues.redhat.com/browse/OCPBUGS-63670): Add awels as an approver in 4.18 branch [#73](https://github.com/openshift/kubevirt-csi-driver/pull/73)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Implement volume expansion [#71](https://github.com/openshift/kubevirt-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/2111495e6d03f1bfe0702996fdd1355ca21b78cf...09f4797657654ce788ea3a1077fd7cf7ce96fb5a)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/bb2aa85171d93b2df952ed802a8cb200164e666f)
* [OCPBUGS-62294](https://issues.redhat.com/browse/OCPBUGS-62294): Make static DNS with DHCP IP work [#5311](https://github.com/openshift/machine-config-operator/pull/5311)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6027b8f9bec4175d8a4059c1f8a86569731ddafb...bb2aa85171d93b2df952ed802a8cb200164e666f)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e54edaa6a6b3dd09831d24654835b54c1bdd089f)
* [OCPBUGS-63050](https://issues.redhat.com/browse/OCPBUGS-63050): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#149](https://github.com/openshift/oauth-apiserver/pull/149)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/2575ff417406ea6680aff0de6efb524dbbe2b8d2...e54edaa6a6b3dd09831d24654835b54c1bdd089f)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/2fe096327a6da6602c509d108ea0ed4a599a7eb3)
* [OCPBUGS-63459](https://issues.redhat.com/browse/OCPBUGS-63459): Branch Sync release-4.19 to release-4.18 [10-22-2025] [#2825](https://github.com/openshift/ovn-kubernetes/pull/2825)
* [OCPBUGS-63716](https://issues.redhat.com/browse/OCPBUGS-63716): Skip Pending pods in EgressIP status updates [#2836](https://github.com/openshift/ovn-kubernetes/pull/2836)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7bb7a9e71737d4d2d7e00f693080df3fc4d735db...2fe096327a6da6602c509d108ea0ed4a599a7eb3)
### [tests](https://github.com/openshift/origin/tree/408d767f503d45acdaf996fc854ffc94d1c614df)
* [OCPBUGS-63712](https://issues.redhat.com/browse/OCPBUGS-63712): Migrate OCP-32383 to upstream [#30443](https://github.com/openshift/origin/pull/30443)
* [Full changelog](https://github.com/openshift/origin/compare/7aabb3cc677fc0a44376d88ebb9847d7fe3f9ee8...408d767f503d45acdaf996fc854ffc94d1c614df)