4.18.19

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.19-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.29, 4.17.31, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.6, 4.18.7, 4.18.8

Upgrades to:

4.19.2 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.18.4

Created: 2025-06-26 08:39:22 +0000 UTC

Image Digest: sha256:e6d80b9ab85b17b47e90cb8de1b9ad0e3fe457780148629d329d532ef902d222

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.6 to 1.31.9
Kubernetes Tests upgraded from 1.31.6 to 1.31.9
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202503061016-0 to 418.94.202506251005-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

aws-cloud-controller-manager git c3951906 sha256:5d4da52e03507b24cc30a28c5f86975eb135466a98635a71650d9f68ac4cbfbb
aws-ebs-csi-driver git b51cd6b8 sha256:d078f0a39584b621500ac29ec7b2a5ec9beaf4e3a48248b59c67779141a8a48c
aws-kms-encryption-provider git 088dcaf7 sha256:077cfc5a0537ae3c0c186580b16321b10d3cfc1d9dd0f67e93a72f173b8a9b5f
aws-machine-controllers git 53274f11 sha256:6d64e13c3dbe8511a67a7fc36a8be18b2e8488e74b3605cc8f6c0ae5eb86edc9
azure-cloud-controller-manager git 9c24d768 sha256:07bb73133f2d8ad148a13a79b7e151893ac9560a595d456323dfcffc11c66e76
azure-cloud-node-manager git 9c24d768 sha256:ba6411975e6298f06bf2296f558d063afdde187ccc0a8e29b6f60f3df0165f8b
azure-cluster-api-controllers git 987615c8 sha256:644f8d8cff0c512e4cace218fe37ccfa5aec9b70a6fc0e3a028a55010d091d49
azure-disk-csi-driver git 6cced666 sha256:a2489587a3dbff9d53ba2fd16e05cd8c4e5956c6c66db3b0fd68ffd966efc6c5
azure-file-csi-driver git 4b34592e sha256:28eda3b15d83a7ec38b6cdc02a06c5af617d232a8b6896a368a01b9b229aeeee
baremetal-cluster-api-controllers git 7ec03e94 sha256:a98326716d7739bf195384e1b028eadf8688e52436b3c91924a593d856fd2248
baremetal-machine-controllers git 1ede6c3f sha256:fccf7c0f8a0898dd9bd807f3894caefac502b47bf58c6dbce435b0058898deae
baremetal-runtimecfg git 9e2015c3 sha256:f6baf785bad0cd501debe46b473dca1c71a6c963a2b199eb83b1494fb6d1d2e4
cluster-autoscaler-operator git 474ad65c sha256:b92264c1b002590c41fa6944e8b0a329426449ea4de2d6a91c9b9a6cbd2bace6
cluster-bootstrap git d1e01954 sha256:2bd46c8b44804eccaf3edf72d9ddc225eb135185ee817c0ea30b40c0a59d27fa
cluster-capi-controllers git d05a6def sha256:e686d8ab184e278df967776e25a66d1f66e394767a3f6f2f40c6ea4ec89e97b8
cluster-cloud-controller-manager-operator git 33856906 sha256:181d7487e56f8a7a8e72e70b321f8851fcf6b339f7544c43fe8aa9d0f8aa077e
cluster-config-operator git 85cb4072 sha256:2c2f0e17125eda30527a9ebada74da06a2311d8872c176c3386901f38e02f5d2
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:8afdbe433bb9aeaed278f5d825734b48f60bf7807942d8f377845d7a53e55771
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:4e380cc435a4b9dc51505f3f1554e37879c97af7152818a8d807e90c24ecd4c9
cluster-kube-cluster-api-operator git 33a1141e sha256:4e6179f7d0eb2729118c1c1c8ede81e5194d5f07dc537533aaf5640334fd1034
cluster-kube-controller-manager-operator git 0fac9aa9 sha256:00de0b3973e2a6aca28c1971bdabe8bd812217788f83a027483a93722d185186
cluster-kube-scheduler-operator git 6182930d sha256:f023a2d45e8beaf34aca4ef87a555d41d3c6e42410f2f4f3d58d585358f5ce3c
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:03bf19320da50f061db3215191b3bfe5cd6fbff5c9102c64ecc7ca0f08eb209e
cluster-machine-approver git 01d5fbbe sha256:9c6d484c2c3ffbb722cf1d3d5d43d5fa63511ff0364966d18144c65666eddcd8
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:d720be77245372eb846e3d2c5dbe443ca8d8d69f2d183180b5dee674f191e1ae
cluster-openshift-controller-manager-operator git f1711cf3 sha256:c2d7a9b9e15866eaa690fbfd7f07b6af7f5a5c42a18e62da6d542f044406db9b
cluster-policy-controller git 5fd85252 sha256:3a52fb72518a0e8772a1318348707af46617ef8e300167b2ed689c640d03d30e
cluster-storage-operator git 65d06444 sha256:8907e1950aecf775efea49e9488cd0fb21c605f5903dd4cc51582a84ad900488
csi-driver-manila git b52ca7e8 sha256:26b5e3bf88f6d9b4b97c96c48759c8c82749ff22402c80e777a42d4f912b5ad9
csi-driver-nfs git 32e77590 sha256:cb839d24e07b2af7ed433485d1f18d46361f998f2caa81b6befc0a67195c9296
csi-external-attacher git 39b37c06 sha256:bdbef807aef73d86e2408461ff2abb8e1e09b57e8eaf5dc7c477f00975eba15a
csi-external-provisioner git 376f0ea0 sha256:ba6dc99fb6ff7b6cbb44118ab4f1f22ee8e6374c01b1cbb2b2f791b60fe426ce
csi-external-resizer git cca3837a sha256:f75f5d33a2fdea38a4d6110bc0e8b8b371ec0a1be9ff42487ddaddcfb27779fa
csi-external-snapshotter git 838d2484 sha256:609158e9a782022f6d99f617ac2465b3e98f6736d2953df5d5ffba325a91a3e7
csi-livenessprobe git 3a977844 sha256:ada4e0c53000b0356a34d0b882788ab3c4c3bf72f45fdb4400dcc9ab5053c5e6
csi-node-driver-registrar git c21f5d02 sha256:2794b22e23af83ea4f9713c9578f37a2209e1ff93ad5d11e6bfb74f5f41272d3
csi-snapshot-controller git 838d2484 sha256:73d19576a9a9c74fe13771dcc502894736975209a97ccbfb04b6fb13a25fbd98
csi-snapshot-validation-webhook git 838d2484 sha256:92f8fd6f74451a0c4e95a8c9e174240e517d00fcf1ca0fcefd41b383ecf441df
driver-toolkit git 2e139edc sha256:cd20c17401d4a13672a0ae64122a0e5dcaf8fd87c785cb5919d953d608998a81
egress-router-cni git 3193a756 sha256:c8b18db7e6ab14c3b0992d80653e7467e5e90c667afd94557f41147155f9b2e9
gcp-cloud-controller-manager git 6ea23561 sha256:5d47b5d3deb697c8b81e9bdf8fe8bf7d0a9fdd69ab436321d7d02e088613fba2
gcp-cluster-api-controllers git af54f528 sha256:a1ade64451bc55f8b5bd83176eab3faa045fa369baca108d9018788ad0b397f7
gcp-pd-csi-driver-operator git 7cb8b38c sha256:535fca55a0cc1c72b834950b6ed7575c8f620c6cc4a400e72e088ed737987401
gcp-workload-identity-federation-webhook git f0a670c7 sha256:8d17ff1fd9809126c299f986a86c162f221792d239c310dd1579071635cb0fc8
haproxy-router git d8058949 sha256:d966247ec30d2068c6b4336cfd638f0cebff75bcae5e6c6da0517d824df72327
ibm-cloud-controller-manager git a33026b1 sha256:50295ef6927b6a67c59ba1be8ce063891c56bc3eb006f63fc4d0b200e6769189
ibm-vpc-block-csi-driver-operator git feae2605 sha256:85c1923e26f55a303f4593b3c1872d24570fe6d6651ba49b5e1212886ba2bb28
ibmcloud-cluster-api-controllers git 2ba764f9 sha256:be7a42213e04138db6b166dcd8152cbbefac1dd0380b6938ce91c0a369d42310
insights-runtime-exporter git 7149f2d5 sha256:db5bf677e8cd9adc99dc00e384e785fbdde3bbfb0567d0c02fd12983fc93694e
insights-runtime-extractor git 7149f2d5 sha256:2e8a0cc69ecbedf5f019e03cb58910e07c3667a998f4788d86dff8cbeed9bf6a
ironic-static-ip-manager git cfbae04f sha256:ce1c4b3b4c9e3eb3ab26a96ccdb5d9e5dc69f993fa100bcbcaf82744be880359
keepalived-ipfailover git 716eb0ef sha256:c8b8c464eab9f4f45e90fbd3d6db01459103a95dfe146ef3aa0c44d32205345c
kube-metrics-server git 962ccca2 sha256:7edadbdb9e08c79c57f601e767c02228aa1304ce136e1b474579abc9cb3fe0c4
kube-rbac-proxy git 526498ab sha256:a4606efa39f5046fe06fc0ccff329291620f439226f7e7b1530ef7978cc2d9ca
kube-state-metrics git cb5a9296 sha256:e5ef9c83b41bebfd27d36cdc3341edd3668bca123ad75ade2a2bd22608dacf91
kubevirt-cloud-controller-manager git 3f4542ec sha256:79d238e2281ff7c29284968d73621ae703fb3c0405ff193e36a3dc62c6d0563b
libvirt-machine-controllers git a336f0b5 sha256:c80631261f95fd18f9af456a146f066c03f4509380282c4f6d4bf47024674ca4
multus-route-override-cni git 391c1b03 sha256:d6a0cd1a605c1b3b1d38d4662ec15bbf855f6b9967c6fbad727c5ffdf64eee43
network-metrics-daemon git e4c214c3 sha256:d4eeeb0a794f83bd0ba6309bcb5444d3bd4f3eacf810dc1757911683fb551e1a
nutanix-cloud-controller-manager git d9fe8f38 sha256:b6005073aabe79b07247c938645cb6c1f4015acae4eb2544fbe475b1f77833b4
oauth-apiserver git 2575ff41 sha256:daaac2fa8c7540d39cb3d068b86a57f6518edb84cc556b8ed5a6a1416b99ff07
oauth-proxy git cbd44ad9 sha256:1d1fba14c8e4a629d48beb182ca0067f9b7d627234a5cc5f7e70b7ef7c86f196
openstack-cinder-csi-driver git b52ca7e8 sha256:b890574e445010212047aecc274ec0d11f04de637bbf970bc60723cba23d90d1
openstack-cloud-controller-manager git b52ca7e8 sha256:58ce6d6adb269ecb5c354a6561258a32e9d2a610dea969963d6a40fb52c19e0d
openstack-machine-api-provider git d914e77e sha256:9c6d46f929bcdf8f27a743eff49da4abe0e197b47630068509dc14bf47320b89
ovirt-csi-driver git 1db726a9 sha256:9f0bb062fbab6428275fe1909a29b8b84fc014c156e195990246a3116ad04a38
ovirt-csi-driver-operator git 0feae256 sha256:2e72c26cc697906ed780d7f99506e5ad3a163d7c8f0cc7b63620a9a519de33eb
powervs-block-csi-driver git d36aea34 sha256:71c5caf214bf6fbc10c31550dc30dc7baadf4d2fda8a0d12e4dc5e95962e84d9
powervs-block-csi-driver-operator git 01fc505a sha256:ca5bcd2289c8ecc8de0a694e85716d60de54bc842f2794adc238291730625dc7
powervs-cloud-controller-manager git 17ae6fba sha256:b6b9dfe4be4cff7accce52c1f7374d372ab72216500bbc31671ece9cfecb9998
rhel-coreos sha256:f1aeba19ab3d98d850d1688fe059684d668fa705d51d882bc9446c140343c212
rhel-coreos-extensions sha256:e9680cdd70cc35925e0cfc50b7b37de75504df77c7bd764a36a1668fe020a272
vsphere-cloud-controller-manager git c414d1f5 sha256:58481faf9a81ee12e8aa70d4fe1ea594f6e4a3aad236d169d9ab1db5459da825
vsphere-cluster-api-controllers git d664fe2b sha256:46960551a648369c22e2965cd99830ef10eda57093a27890692219bab7a64b6b
vsphere-csi-driver git cfcad01d sha256:78612f834c964495e647009f9eca0b9f120e3048ce5f503a4ef939b39533442f
vsphere-csi-driver-syncer git cfcad01d sha256:6d870d46f9d74452d3dc8f3fb0c737187ba35c9e858e6066a1a498e07b8bcf18
vsphere-problem-detector git 7cf7fe24 sha256:35a3ac61b1c816f5e8e1eacdf5cc413c1a6aa804d8ba0e4bdb9534028563d740

agent-installer-api-server

OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
OCPBUGS-54378: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) #7483
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) #7456
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53721: Bump jwt to 4.5.2 in release-4.18 (#1085) #1085
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#958) #958
MGMT-20227: Skip Motherboard serial if set to “-” (#955) (#957) #955
OCPBUGS-54544: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) #965
OCPBUGS-53713: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) #963
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-53729: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 #543
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-54383: Disable remove-not-ready-taint for azure disk csi driver #374
Full changelog

aws-pod-identity-webhook

OCPBUGS-51231: github.com/go-jose/go-jose/v4 v4.0.5 #201
Full changelog

azure-kms-encryption-provider

OCPBUGS-53497: bump golang-jwt v4 #11
Full changelog

azure-machine-controllers

OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
OCPBUGS-54355: Re-reconcile machine on NIC provisioning failure #135
Full changelog

azure-workload-identity-webhook

OCPBUGS-53801: github.com/golang-jwt/jwt/v4 v4.5.2 #31
OCPBUGS-51233: github.com/go-jose/go-jose/v4 v4.0.5 #27
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-56797: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9747
OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
OCPBUGS-54947: Fix Load balancer IP setup #9659
OCPBUGS-45564: Align vSphere UPI haproxy config with IPI #9276
OCPBUGS-53453: IBMCloud: Move to IBM TF openshift fork #9592
OCPBUGS-53422: Avoid adding duplicate entries to NO_PROXY #9588
OCPBUGS-52515: Remove error logging when determining image arch #9539
OCPBUGS-52429: Remove tmp directory used for agent pxe files #9536
Full changelog

baremetal-operator

OCPBUGS-56431: Redfish: correctly handle missing system ID #417
OCPBUGS-53324: BMO can expose any secret via BMCEventSubscription CRD #405
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-57507: avoid transfering permissions when copying artifacts from node-joiner pod #2039
OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
Full changelog

cloud-credential-operator

OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
OCPBUGS-53825: update github.com/golang-jwt/jwt #837
OCPBUGS-53345: github.com/golang/glog v1.2.4 #835
OCPBUGS-51550: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #822
OCPBUGS-51237: github.com/go-jose/go-jose/v4 v4.0.5 #824
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-authentication-operator

OCPBUGS-54569: Avoid duplicate OAuth client creation #764
Full changelog

cluster-autoscaler

OCPBUGS-53241: improve replica counting and decrease target size behavior #346
Full changelog

cluster-baremetal-operator

OCPBUGS-53080: Add missing relatedObjects #467
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-config-api

Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
OCPBUGS-54784: [release-4.18] Bump openshift/controller-tools to latest commit #2267
Full changelog

cluster-dns-operator

OCPBUGS-52514: [release-4.18] Add runbook_url for CoreDNSErrorsHigh #429
Full changelog

cluster-etcd-operator

OCPBUGS-56110: adjust alerts according to platform #1424
OCPBUGS-53513: fix CVE-2025-30204 #1413
OCPBUGS-55066: increase etcdGRPCRequestsSlow duration #1408
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-ingress-operator

NE-1951: Pre-upgrade Admin Gate for Gateway API CRD Management Succession #1196
NE-1952: Pre-upgrade check for Gateway API CRD Management Succession #1193
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
OCPBUGS-49898: bindata/alerts/slo: improve burnrate calculation #1808
OCPBUGS-53066: Bump library-go #1828
Full changelog

cluster-monitoring-operator

OCPBUGS-56251: set upgradable false when alertmanager v1 is specified #2591
OCPBUGS-55005: chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and set CMO to Upgradeable=false if errors are found #2592
OCPBUGS-53024: Fix opentelemetry metrics to use regexp on label match #2578
OCPBUGS-52565: Bump prometheus-operator to 0.78.2 #2576
OCPBUGS-50706: Add incidents metric to telemetry #2570
Full changelog

cluster-network-operator

OCPBUGS-58047: Add cert-rotation script into cno #2702
OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
OCPBUGS-54717: Add IPv6 NGINX configuration #2683
OCPBUGS-50582, OCPBUGS-52949: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2644
OCPBUGS-52837: frr-k8s: rename validatingwebhook name #2661
OCPBUGS-48305: frr-k8s: align manifests with operator #2657
Full changelog

cluster-node-tuning-operator

: OCPBUGS-57947: kernelPageSize + hugepages combinations validation ³⁄₃ #1343
: OCPBUGS-57947: Support hugepage size selection for ARM-based clusters ²⁄₃ #1342
OCPBUGS-57947: CNF-18142: Add kernel page size field ¹⁄₃ #1341
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) (#1306) #1303
machineconfig: add support for various hugepage sizes. (#1299) #1299
Full changelog

cluster-olm-operator

OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
OCPBUGS-54258: Adding mutex to func createSamples on handler.go #615
OCPBUGS-54351: add rhdmalone to owners #617
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #72
Full changelog

cluster-version-operator

OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-57580: Update vSphere configuration form to support CM YAML f… #15191
OCPBUGS-57743: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15188
OCPBUGS-57209: Add flags in console static plugin for all the components of this epic #15160
OCPBUGS-36173: Secret key with binary file changes when edited via Console. #15178
OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
OCPBUGS-54269: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14905
OCPBUGS-52372: VolumeSnapshots are not displayed in OpenShift Web Console #14833
OCPBUGS-52406: Retain original path when detecting perspective #14834
OCPBUGS-52371: Update the monitoring topic used by the console team #14832
OCPBUGS-52490: enable clicking outside NodeLogs Selects to close them #14843
OCPBUGS-50501: Updating cypress config to have video enabled for the CI results #14831
OCPBUGS-52511: Remove logoutOpenShift method call #14845
Full changelog

console-operator

OCPBUGS-45869: don’t set current clients when no OIDC providers are configured #948
OCPBUGS-52294: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #966
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
OCPBUGS-55354: Fix dhcp #186
OCPBUGS-55346: Check error returned by ipv6 SettleAddresses #185
Full changelog

coredns

append .0 to go.mod version #134
Full changelog

docker-builder

OCPBUGS-57758: S2I build cpu limits observed by assemble are limited to 1 cpu #473
OCPBUGS-48071: Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility #464
Full changelog

docker-registry

OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue #312
Full changelog

gcp-machine-controllers

OCPBUGS-52495: OCPBUGS-52494: Disable shielded VMs for non-UEFI disks #112
Full changelog

gcp-pd-csi-driver

OCPBUGS-44769: Fix RWX mode for hyperdisks #74
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-57070: UPSTREAM: <carry>: Bump cadvisor version to fix container_fs metrics #2332
OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
: OCPBUGS-54807: skip tests on platform type External #2268
OCPBUGS-53015: Update to Kubernetes v1.31.7 #2248
Full changelog

hypershift

OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
OCPBUGS-55146: Use 135 for terminationGracePeriodSeconds for v2 KAS #6057
OCPBUGS-54698: Add missing servicemonitors and prometheusrules permissions for non-OVN #6000
OCPBUGS-53404: Set shutdown watch termination grace period on kube-apiserver #5874
OCPBUGS-51810: Fix golang crypto dependency go.mod replacement #5992
OCPBUGS-54814: [release-4.18] add feature set aware feature gates to HO and CPO #6014
OCPBUGS-54624: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5980
OCPBUGS-54630: Sync RBAC for attaching volumes on VM level #5988
OCPBUGS-54627: Use system trust bundle in CPO IDP https client #5981
ARO-15695, OCPBUGS-54625: backport capabilities api #5964
OCPBUGS-54411: Backport PR 5876 to release-4.18 #5936
OCPBUGS-54498: Support hypershift-operator scoping for secretJanitor #5961
OCPBUGS-54609: [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable #5950
NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 #5963
OCPBUGS-53905: bump golang-jwt v4 and v5 #5905
ART-11792: update go mod dependency for konflux #5919
OCPBUGS-51739, OCPBUGS-51810: Bump dependencies to OCP fork in backports #5898
OCPBUGS-53321: Handle multiple mirror entries for source #5890
OCPBUGS-51239: fix(deps): bump go-jose #5858
OCPBUGS-52982: Fix audit-logs container to properly handle SIGTERM #5774
OCPBUGS-52863: stop using dev mode for loggers #5811
OCPBUGS-52878: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5780
OCPBUGS-52516: Make managed-trust-bundle optional #5783
Full changelog

ibm-vpc-block-csi-driver

append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
OCPBUGS-53913: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #82
Full changelog

ibmcloud-machine-controllers

OCPBUGS-52872: IBMCloud: MAPI replacing unhealthy CP nodes #62
Full changelog

insights-operator

OCPBUGS-51163: Fix bad IPv6 address (#1074) #1074
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
METAL-1302: Do not use openstack packages #646
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
OCPBUGS-55364: Delay determining the hostname to put into ignition #183
METAL-1302: Do not use openstack packages #178
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-storage-version-migrator

append .0 to go.mod version #216
Full changelog

kubevirt-csi-driver

OCPBUGS-54630: Ensure volume stays attached through reboots #55
Full changelog

machine-api-operator

OCPBUGS-57057: Updates GCP CredentialsRequest #1376
OCPBUGS-52494, OCPBUGS-52496: Updates GCP credentials request #1341
OCPBUGS-52567: add image/read permissions #1342
Full changelog

machine-config-operator

OCPBUGS-54463: Update desired config in MCN on OCL update #5026
OCPBUGS-57900: MCC complains about v1 MachineOSConfig in default featureset #5131
OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Update cluster operator’s status condition message #4993
OCPBUGS-53278: In OCL. Cannot install extensions #4945
OCPBUGS-54817: Make mtu-migration run after wait-for-primary-ip #4979
OKD-239: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4955
OCPBUGS-54462: OSUpdateStarted event should only be emitted on actual OS updates #4967
OCPBUGS-51132: [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4869
OCPBUGS-52949: Add ipsec connect wait service #4926
OCPBUGS-53306: Fixing typos for MachineConfigNode #4927
OCPNODE-2276: Set Upgradeable=False when cluster is on cgroup v1 #4921
OCPBUGS-53111: daemon: ensure ostree-finalize-staged is started before rebooting #4918
OCPBUGS-53110: Update ObservedGeneration in KubeletConfig #4917
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

machine-os-images

OCPBUGS-53141: Change rhcos release browser url #55
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
OCPBUGS-48305: Use metrics for readiness/liveness probes #76
Full changelog

monitoring-plugin

OU-724: remove deleted image #376
Full changelog

multus-admission-controller

append .0 to go.mod version #96
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47470: adds getpodcontext (backport 4.18) #259
Full changelog

multus-networkpolicy

append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

append .0 to go.mod version #370
OCPBUGS-55270: Fix whereabouts-reconciler no namespace error #362
Full changelog

must-gather

append .0 to go.mod version #491
Full changelog

network-interface-bond-cni

OCPBUGS-57794: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 #74
NO-JIRA: Add ci-operator yaml file #78
Full changelog

network-tools

Fix build error #147
Full changelog

networking-console-plugin

CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Add translations scripts #234
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
Full changelog

oauth-server

append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-57197: [release-4.18] v2/cli: always remove past archives before m2d (#1176) #1176
OCPBUGS-56486: v2/config: allow delete and mirror words (#1175) #1175
OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1173) #1173
OCPBUGS-56659: v2/archive: print unarchive progress (#1160) #1160
OCPBUGS-54653: delete: continue on errors (#1146) #1146
OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
OCPBUGS-51217: Fix CVE-2025-27144 (#1108) #1108
OCPBUGS-54727: Use tag 0.0.3+2 of catalog-filter (#1128) #1128
OCPBUGS-52978: delete: fix typo in –help output (#1121) #1121
OCPBUGS-52960: v2: fix setting version during build (#1118) #1118
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1114) #1114
OCPBUGS-52588: fix: error when no related image was found (#1106) #1106
Full changelog

olm-operator-controller

UPSTREAM: <carry>: fix crdupgradesafety diff when items schema differ (#1863) #1863
Full changelog

openshift-apiserver

OCPBUGS-52312: Skip blocked registry check for registries with mirrors #498
Full changelog

openshift-controller-manager

OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
OCPBUGS-54304: Intermittent authentication issues when accessing OpenShift registry #369
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44458: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #365
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
OCPBUGS-53108: Ensure that PSA label is latest instead of pinning versions #983
OCPBUGS-53040: add missing pod disruption reasons to isPodDead #981
Full changelog

operator-marketplace

ART-13123: append .0 to go.mod version #637
OCPBUGS-53149: Ensure that PSA label is latest instead of pinning versions #601
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-57108: Fix hybrid overlay node subnets collision with cluster subnets #2619
OCPBUGS-57106: Increase InformerSyncTimeout to 60s #2622
OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
OCPBUGS-54671: EIP no reroute: allow multiple entries for pod to pod and pod to join #2510
OCPBUGS-54187: Update OVN to FDP25.A.1 24.09.2-41. #2495
Full changelog

powervs-machine-controllers

OCPBUGS-54243: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 #111
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
OCPBUGS-54940: Scraping: Bump cache iteration after error to avoid false duplicate detection. #247
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-52565: Bump openshift/prometheus-operator to v0.78.2 #327
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

service-ca-operator

OCPBUGS-44952: [release-4.18] Bump go to 1.22.0 #253
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-57329: Fix failed tests of e2e-aws-ovn-tls-13 #29911
OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Revert “OCPBUGS-55277: backport 4.18” #29720
OCPBUGS-55277: backport 4.18 #29645
OCPBUGS-55110: Backport MetricsCollectionProfiles patches to 4.18 #29561
OCPBUGS-54807: support provider type external #29666
OCPBUGS-54725: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29657
OCPBUGS-53015: bump(k8s): update k8s.io/* dependencies to v1.31.7 #29634
OCPBUGS-52496: use non-fake boot image for patch #29584
OCPBUGS-52579: Use payload pullspec for image info test #29587
Full changelog

thanos

OCPBUGS-52945: Update Go version in go.mod to 1.22.0 #159
Full changelog

vsphere-csi-driver-operator

OCPBUGS-54701: add manifest-topology.yaml for topology related feature and test #303
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github