4.18.23

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.23-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.34, 4.17.35, 4.18.10, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.18, 4.18.19, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

4.19.10 (changes) - S F F
4.19.0-0.ci-2025-08-29-054026 (changes) - Pending
4.19.0-0.ci-2025-08-28-234026 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.18.11

Created: 2025-08-28 10:32:19 +0000 UTC

Image Digest: sha256:0bf2e8c1edf16de717c330b94d85f6d463c7208956b0a545cbb3fcf715e14c38

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.7 to 1.31.11
Kubernetes Tests upgraded from 1.31.7 to 1.31.10
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202504231329-0 to 418.94.202508261658-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

aws-cloud-controller-manager git c3951906 sha256:4237d1f3bbe422147b295bf918d3c355edc2286c3ffcb8e6944d83ac0207d610
aws-ebs-csi-driver git b51cd6b8 sha256:b97f78e0989a59a188b3c2308b04798e2e2aef7cedb20c561b84c72b1336a24a
aws-kms-encryption-provider git 088dcaf7 sha256:63065ab750db3c24e3380fa9c89b26891c441512e2791068eaeaf37d041d34eb
aws-machine-controllers git 53274f11 sha256:207cd7351841bd0b8b56d6252f014fbaddfd436882b73f1db8a64ffc204ead86
aws-pod-identity-webhook git f54f9a19 sha256:965b2a3a6be2dec3debfc0a3f98b4c5a9d86d92a1ff1a56ef0250e1782a27575
azure-cloud-controller-manager git 9c24d768 sha256:7da284e7d4a33a3c46922673324213de447f99dfb7cf120c5bf184816fe58387
azure-cloud-node-manager git 9c24d768 sha256:6c0be90a6cc5e5c2e42df9230f6d6feae14dbfc95683094b3597f5dd75685f34
azure-disk-csi-driver git 6cced666 sha256:6c6c911d3aac2792169bd09b0c638fa068e1fc8ee77c047ddfaced6e984aec23
azure-file-csi-driver git 4b34592e sha256:44b1c4eb1a9b38dd2945dcb51d5e1e63fc60d6fdbd9e42f57c3f4e685a1549ab
azure-kms-encryption-provider git c937080f sha256:99cb93d1c2cac003280f5faac0126e811898a7f69b802aff2ba4ac2634119303
azure-workload-identity-webhook git f60e4029 sha256:903797419160c6d4fe5811856eb727f53f8c5ad9e34706b6d841155dfd59e9a9
baremetal-machine-controllers git 1ede6c3f sha256:c4407e42ecec19e9eaaea79c51e9147bf4302af5b35c08c31ea4993d38ff6931
cluster-autoscaler-operator git 474ad65c sha256:db66960eb91d3348c05323a38aa77186df1562b55baadf5b5bcdce0955b12d59
cluster-bootstrap git d1e01954 sha256:3cbba55ecd5bb44889c6c4434325c4fc3a10f8c6951b15c8b12f319ba7bc6a04
cluster-config-operator git 85cb4072 sha256:a4779ad93682b206d84ba3d3405cf093f7616de223e31f07c4ef3068be850b83
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:2d726021db05e85c22966c5e8810be86c8fde70944d4c1adc075c513253cac77
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:05ec4fc0483339ecaddbdb723142437e62ab796bc2080098e24a3d6fef87e761
cluster-dns-operator git 7cafd0c7 sha256:d4cf9cb6cd4ecc24f2c9c71b4575875d0ec45ebf0b2ea7013a7945ee21403f76
cluster-ingress-operator git d967a73c sha256:f8899e7b479006d8d6c14e127b1f9f65c388ce647df5d6a97842d516bca8b0e4
cluster-kube-cluster-api-operator git 33a1141e sha256:b2f94b354de0cf44ed4b6440ee3875757a809eeb18eefc28ab133c5e1b8a5990
cluster-kube-scheduler-operator git 6182930d sha256:0c5748932e208068e4c6285d06df7e44af61cccfdfd9a110dbf4ec41383161ea
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:b64076e354e182632e9bb1a732cdcac31c7b67f377a3a6d3e16f43878579e72e
cluster-machine-approver git 01d5fbbe sha256:9761c8ea9b23641fdbc3fa7ee163e1dda1e65dac2b381dd007657c5e6f0f6990
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:2038cad7cef0b373f5297bc9bf338df1f777b79fe270edb9d1bba2440d552410
cluster-openshift-controller-manager-operator git f1711cf3 sha256:caaa0a3ed9bb61b3356e29c08ccab4b07b543bd4661785e11af9548383aff831
cluster-policy-controller git 5fd85252 sha256:4d4dbd56edde5b9dc1f8e8ee4f5b709928efaece3943b580a738c3735f19f0ea
cluster-storage-operator git 65d06444 sha256:b20b5feb482b424cf690e6f55b89e1ffcce37bd41233c174cad1380081327c6e
cluster-update-keys git 8caab452 sha256:b82e91fd4ef9cbadb8d76a895ee437b0b21855ef3384daab30fab882f1f3132b
csi-driver-nfs git 32e77590 sha256:f45f6555fb87398d083da14d93d643db7e24ef9b4994a87d807a3a1b4793ee0d
csi-external-attacher git 39b37c06 sha256:0b397ed89ad84e5fc20bcb4546d98e887e6c7e64ed467f603fc1f2b790a1f83d
csi-external-provisioner git 376f0ea0 sha256:44b7de7780e7851318a8c68638c1fc221f97ac2e5e8a50fca465a6467be3df9d
csi-external-resizer git cca3837a sha256:99e071daac0bda292be8db1fd188ffddd474cff4e88d0655e4a793396de528da
csi-external-snapshotter git 838d2484 sha256:dde11d10138f3af41d989eb88a34d9ba0bdc3aec129a3931a6689df3990d492f
csi-livenessprobe git 3a977844 sha256:8786f067fc9b55c3a5c3d9b252c479a31b1aaf68b99c94e79e4076a3285f95ce
csi-node-driver-registrar git c21f5d02 sha256:c9fcdb547528145d1334652190386064d77d60774c4adf186d776871f36c31bd
csi-snapshot-controller git 838d2484 sha256:398184506d43278f5abb00b3dacb766c6cc3cffd94fa821c701e747add69a40c
csi-snapshot-validation-webhook git 838d2484 sha256:6b845f5709b42acc145314447679bbb4537882813335d904e653772341d95d7b
driver-toolkit git 2e139edc sha256:5281268088cbd188713e386c74604c5a6084f5b6ee5cff58bfe5071e5c932a00
egress-router-cni git 3193a756 sha256:923672855d9ca60bef182b77d23cb4161828e6ae5d9dc65a6a417728fb323e3f
gcp-cloud-controller-manager git 6ea23561 sha256:8e35649c4edbf940628ea29885ce9e9e67ca748f622ef482503032d14e17d1ea
gcp-pd-csi-driver git 1b8c94ac sha256:277e56c65a23b28454229da7b0df6413c4ed12de00f5daf3733279d6c6487b59
gcp-pd-csi-driver-operator git 7cb8b38c sha256:8f597e03dfc9fdbb8632646c72bdb15c690816166e5d93b6645adb5b7185c07d
gcp-workload-identity-federation-webhook git f0a670c7 sha256:f2cb5840deacac20bbe75f2af6972387a78a502d865de1ab5a4a12c9475b4a5f
haproxy-router git d8058949 sha256:3afe86a1db4b0cadd29edd815c8106fc0cfca92916e8a7f33fcda8c5e5b21914
ibm-cloud-controller-manager git a33026b1 sha256:0242190f05088ce500fc80dff474d15e3a764aa21be0a6d9aa5da781e1472aae
insights-runtime-exporter git 7149f2d5 sha256:19cdfbadf2838045e8bb2694fd8a50de53429cb7058db5db0fb4e606990e9485
insights-runtime-extractor git 7149f2d5 sha256:5b7b100d26aba70b4484b72550db4b095eff0bd0ba2f290f7c9a5c7ba37104b7
ironic-static-ip-manager git cfbae04f sha256:8d1c5d4a234b11636ed9f4607d7dd47c289bae05f1c600b2dbcc1a93a4b1bec1
keepalived-ipfailover git 716eb0ef sha256:dbb088683a748bca1691afc439d012e00e782744a059c9cddf62e5ed1447455f
kube-metrics-server git 962ccca2 sha256:53259c7236fed212959564f05a214e6d1aa879ea1ac3265df9e203f30abe4445
kube-rbac-proxy git 526498ab sha256:05ea4625eec55253f86b454dec2742638bd4f4993d2ba0d5422e8d7beaef864b
kube-state-metrics git cb5a9296 sha256:8cb8b5d563cf802ae5a0cd506b27d14b1eff02ee783a41e946ba2236070918f2
kubevirt-cloud-controller-manager git 3f4542ec sha256:7756873cd0ff6ff3861176d4bad3cd177578ffd4842770115a42e326cf726660
kubevirt-csi-driver git 2111495e sha256:1c080f0a233303e6097fdfa8d00a5122358079e67c68867ade8f00e2ebd7e7fa
libvirt-machine-controllers git a336f0b5 sha256:2735f7ba604c51d1c625b0e9b0df3e8b96ac1a8b559a2ebd8ae8ca79b5d4203b
machine-os-images git ab432836 sha256:9246b137a731e13a90f6e23eaa163c814186cf9b552d6ce10478b8c7f1acaccc
multus-cni git 21fb8e05 sha256:09ee479f87f73be1e09df5364ab4fe755acbe625ab79f99b7c59c090e1028d4f
multus-cni-microshift git 21fb8e05 sha256:ca78cad82282a70210b26c6781b9f86d6d18a62980d09c20e62e5e3592ccad1e
multus-route-override-cni git 391c1b03 sha256:e80ff4942f266d709603587b560aee86a3df5531d616452158c59d36e451dd8d
nutanix-cloud-controller-manager git d9fe8f38 sha256:aeea500de4c45cefe60e18ed4db4ca9de48e46cec7d1b63e51734193e12f7a5a
oauth-apiserver git 2575ff41 sha256:f3703bb8357eff03415433744e1813ad5b158a4612d3aa55dc67d23942f238ea
openstack-machine-api-provider git d914e77e sha256:7f42daa503a2742e421ecb808d12423df6fc3bd80e5230dd9ec1c865decce692
ovirt-csi-driver git 1db726a9 sha256:c461b27d74cfc5b6e619a31a1bf5f8e387ddd7ab119b98a04d656b199f429a06
ovirt-csi-driver-operator git 0feae256 sha256:937207bc65e9f296fc780d8b008e8c4e4eb281c2462cc980993584eaf157c74c
powervs-block-csi-driver git d36aea34 sha256:2ebca57291d84f8a18bdb73d1bdd08c16950c5e39eb19bce2bdc0c9356a3732c
powervs-block-csi-driver-operator git 01fc505a sha256:145196f7dd84c4a287833a6841514887c452fd2b668a433af249ed3010ec5406
powervs-cloud-controller-manager git 17ae6fba sha256:5a5792751c2fb9cbe385130151c3bbc660baa125c7eb49c0ad791662be845293
powervs-machine-controllers git 10ac06f5 sha256:f1f4c8788a5cd8cb612dc781f265cfba426863ca2d6e0dabc4b1b5b663ef1b35
prometheus-config-reloader git 74987748 sha256:7d38fc3b08719665e6a1035658085989a3b8c7a9392cffb78d7bdb84213145b7
prometheus-operator git 74987748 sha256:81531bc329323c5888aeec2f5270b7fc5115c6dd45a327f2f9ff0e5298a07b81
prometheus-operator-admission-webhook git 74987748 sha256:f742696df9c59795eb6a1fe1c62df6c2021cd439d2699738040e670b94bf8a12
rhel-coreos sha256:b91753ec7ab0ecb55a4fa86d5c1c0ebe34a0343109879347f0a9a0884552a34c
rhel-coreos-extensions sha256:114fa02047f86ded5c40c4d136ca41fb2ba16bd6df894e71dff78e1fe1b2f29e
service-ca-operator git 30efb529 sha256:3f0bcbff40a7c02499b25e8c70386261eeb2e53d4fc26d302da44fdf71c6d336
thanos git f1599f65 sha256:791c7e849ef8fd9fee06193dc67bd7790d213e796bdc0b03ac3adde635960a69
vsphere-cloud-controller-manager git c414d1f5 sha256:68f158b3197523fb5b23da23ebdc5b54f83c8d688808f5f69a1b3e483c857554
vsphere-csi-driver git cfcad01d sha256:a2d736bebb280eb8469b1adb6018eef4afe36234ad9ff944fe18fe9be083bba2
vsphere-csi-driver-operator git 2b241410 sha256:c1fdaea1096254f1e8d77a08e6ef438ee744482d9625e3a8a1b4104e06d5d1ff
vsphere-csi-driver-syncer git cfcad01d sha256:2706433ecd1a4e21d08eda9385c3e31ea3dd1a25c741862a6325d04d93feed4d

agent-installer-api-server

OCPBUGS-58635, OCPBUGS-58640: Bump glog to v1.2.5 in release-4.18 (#7877) #7877
OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58650: Bump glog pkg to 1.2.4 (#1181) #1181
Full changelog

agent-installer-node-agent

OCPBUGS-58655, OCPBUGS-58660: Bump glog to v1.2.5 in release-4.18 (#1069) #1069
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-58670, OCPBUGS-58675: bump github.com/golang/glog to v1.2.5 #556
OCPBUGS-56434: Update manifests to use v1 admissionregistration group #554
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-60203: Remove stale conditions #413
Full changelog

azure-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #348
Full changelog

azure-machine-controllers

OCPBUGS-56167: [release-4.18] Update virtualmachines service to armcompute/v5 SDK #145
OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #51
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-60592: baremetal: always set external v6 URL on dualstack #9895
OCPBUGS-54598: Update the RHCOS 4.18 bootimage metadata #9900
OCPBUGS-56177, OCPBUGS-59155, OCPBUGS-59158: Migrate AWS SDK to V2 to support MX-Central Region #9709
OCPBUGS-58321: allow to deploy single nodes with UPI #9824
OCPBUGS-54744: Filter out excess CA certs when adding node #9647
OCPBUGS-58264: vSphere - remove unit tests using nip.io #9813
OCPBUGS-56797: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9747
OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
Full changelog

baremetal-operator

OCPBUGS-56766: Make firmware update handle only a subset of Spec.Updates #421
OCPBUGS-56431: Redfish: correctly handle missing system ID #417
Full changelog

baremetal-runtimecfg

OCPBUGS-59280: Bump logrus version #354
OCPBUGS-57782: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #351
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-58233: Return error in case of error #2054
OCPBUGS-57507: avoid transfering permissions when copying artifacts from node-joiner pod #2039
OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
Full changelog

cloud-credential-operator

OCPBUGS-60618: ccoctl azure dnszone-resource-group-name now optional #899
OCPBUGS-58680: github.com/golang/glog v1.2.5 #891
OCPBUGS-58247: ccoctl: only add owned tag to azure resources on create #882
OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-authentication-operator

OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #754
Full changelog

cluster-autoscaler

OCPBUGS-60235: fix checkpoint gc of unknown recommenders #368
OCPBUGS-59260: Fix cool down status condition to trigger scale down #361
Full changelog

cluster-baremetal-operator

OCPBUGS-58315: Bump github.com/go-errors/errors to v1.5.1 #492
Full changelog

cluster-capi-controllers

OCPBUGS-56434: Update manifests to leverage v1 admissionregistration group #241
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-60015: Add Service using common resource templating #405
OCPBUGS-60015: Update service selector to match deployment label #403
Full changelog

cluster-config-api

: add OnClusterBuilds to default config #2365
Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
Full changelog

cluster-etcd-operator

OCPBUGS-59803: add missing ports to svc and pod spec #1455
OCPBUGS-56834: etcd pod containers do not start when tls min version is 1.3 #1428
OCPBUGS-56110: adjust alerts according to platform #1424
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-60176: Add missing service ports to apiserver service #1888
OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60131: Missing endpoint slices for open ports the operator uses #852
Full changelog

cluster-monitoring-operator

OCPBUGS-59962: operator: increase wait time till degraded to max 4 times 5m #2633
OCPBUGS-56251: set upgradable false when alertmanager v1 is specified #2591
Full changelog

cluster-network-operator

OCPBUGS-47651: Re-disable metrics server #2622
OCPBUGS-58047: Add cert-rotation script into cno #2702
OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
Full changelog

cluster-node-tuning-operator

e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) #1355
: OCPBUGS-57947: kernelPageSize + hugepages combinations validation ³⁄₃ #1343
: OCPBUGS-57947: Support hugepage size selection for ARM-based clusters ²⁄₃ #1342
OCPBUGS-57947: CNF-18142: Add kernel page size field ¹⁄₃ #1341
Full changelog

cluster-olm-operator

OCPBUGS-57767: fix olm.maxOpenShiftVersion float parsing #125
OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
Full changelog

cluster-version-operator

OCPBUGS-58450: Failing=Unknown upon long CO updating #1211
OCPBUGS-60222: CVO protects /metrics with authorization #1223
OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-54660: Added patternfly/react-topology to shared module list of dynamic plugin sdk #15371
OCPBUGS-50570: Fix regression where plugins were not tracking CSP violation status a… #14754
OCPBUGS-60140: Recognize Detached BMH status #15362
OCPBUGS-54660: Add BaseNode in topology folder into Dynamic Plugin SDK #15369
: OCPBUGS-60278: Fix i18n string for event stream #15403
OCPBUGS-54660: Expose OdcBaseNode through the dynamic plugin SDK #15370
OCPBUGS-54660: Expose topology components and utils via plugin SDK internal package #14777
OCPBUGS-58364: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15272
OCPBUGS-59778: add data-test attrs to console plugins table #15327
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15330
OCPBUGS-59501: Add the Origin header to the HeaderBlacklist in the co… #15295
OCPBUGS-59443: Not able to launch terminal window from OCP web console due to console plugin conflicts #15290
OCPBUGS-59446: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15292
OCPBUGS-58457: fix bug where / in console.tab/horizontalNav href brea… #15250
OCPBUGS-58203: OpenShift console PVC clone cannot use B as the unit #15215
OCPBUGS-58317: Implement sessions in openshift authenticator #15237
OCPBUGS-58088: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15202
OCPBUGS-58089: Getting “Oh no something went wrong” error message in web console. #15203
OCPBUGS-57931: Add the ability to launch multiple modals with useModal hook #15196
OCPBUGS-57580: Update vSphere configuration form to support CM YAML f… #15191
OCPBUGS-57743: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15188
OCPBUGS-57209: Add flags in console static plugin for all the components of this epic #15160
OCPBUGS-36173: Secret key with binary file changes when edited via Console. #15178
OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
Full changelog

console-operator

NETOBSERV-2023, OCPBUGS-60304: Implement a quickstart for netobserv operator #997
OCPBUGS-60081: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1031
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #1027
OCPBUGS-45869: don’t set current clients when no OIDC providers are configured #948
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-56928: bridge: Add option to enable port isolation #203
append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
OCPBUGS-55354: Fix dhcp #186
Full changelog

coredns

append .0 to go.mod version #134
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58835: CARRY: don’t ignore json files #339
Full changelog

docker-builder

OCPBUGS-57758: S2I build cpu limits observed by assemble are limited to 1 cpu #473
Full changelog

docker-registry

IR-526: remove AWS region check #437
OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

OCPBUGS-57112: Updating ose-etcd-container image to be consistent with ART for 4.18 #333
Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
Full changelog

gcp-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #247
Full changelog

gcp-machine-controllers

OCPBUGS-59387: Add max-concurrent-reconciles flag to machine actuator #126
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-60524: podresources: list: use active pods #2413
UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2422
OCPBUGS-57488: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2333
OCPBUGS-57499: UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image #2399
OCPBUGS-44757: Adjust NodeMonitorGracePeriod to 50s #2385
OCPBUGS-59535: Rebase v1.31.11 to 4.18 #2377
OCPBUGS-57887: Update to Kubernetes v1.31.10 #2348
OCPBUGS-57070: UPSTREAM: <carry>: Bump cadvisor version to fix container_fs metrics #2332
OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
Full changelog

hypershift

OCPBUGS-60458: Update PSA from v1beta1 to v1 #6644
CNTRLPLANE-1269: chore(deps): update konflux references #6658
CNTRLPLANE-1205: Add missing mce-2.8 pipeline #6656
OCPBUGS-59503: [release-4.18] Support proxy authentication when user/pass is included in URL #6460
CNTRLPLANE-1229: Move CPO pipeline to hermetic builds #6597
OCPBUGS-57818: Reuse hosted cluster release and metadata providers #6301
OCPBUGS-58126: Don’t use /version for haproxy health checks #6323
OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58741: bump github.com/golang/glog to version v1.2.4 #104
append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55297: [IBM VPC] set offlineExpansion to false in e2e test manifest #144
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51825: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #120
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #119
Full changelog

ibmcloud-machine-controllers

OCPBUGS-47135: CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] #69
Full changelog

insights-operator

feat: add permissions to gather clusterrole (#1113) #1113
feat: copy proxy envs from IO pod to gathering pods (#1105) #1105
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
OCPBUGS-55364: Delay determining the hostname to put into ignition #183
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). #225
append .0 to go.mod version #216
Full changelog

machine-api-operator

OCPBUGS-57057: Updates GCP CredentialsRequest #1376
Full changelog

machine-config-operator

OCPBUGS-57357: Race in configure-ovs.sh affects bonding interface configuration. #5118
OCPBUGS-59929, OPNET-681: Support migration to NMState #5207
OCPBUGS-60034: Add workaround fix for static pod race #5212
OCPBUGS-56751: Support NODEIP_HINT in IPI deployments too #5081
OCPBUGS-55246: kubelet: readonly mounts for criometricsproxy #4998
OCPBUGS-58067: Ensure the build controller restarts on upgrade #5140
OCPBUGS-57328: Do not set cpu system reserve below the default value #5152
OCPBUGS-56624: Give keepalived container chroot cap #5073
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #5138
OCPBUGS-57935: add MachineConfiguration to CO related objects #5134
OCPBUGS-54463: Update desired config in MCN on OCL update #5026
OCPBUGS-57900: MCC complains about v1 MachineOSConfig in default featureset #5131
OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
Full changelog

monitoring-plugin

NO-JIRA: update i18n strings #508
OCPBUGS-60199: feat: add alerting rules tab to dev console #493
OCPBUGS-54314: Fix “Export as CSV” #461
Full changelog

multus-admission-controller

OCPBUGS-58771: Update the github.com/golang/glog module to v1.2.4 #101
append .0 to go.mod version #96
Full changelog

multus-networkpolicy

append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-59697: Prevent accidental IP deallocation in statefulsets #376
OCPBUGS-58360: The node slice controller should only process valid whereabouts confi… #381
OCPBUGS-58360: Add nodeslicecontroller bin to dockerfile #373
append .0 to go.mod version #370
Full changelog

must-gather

OCPBUGS-46437: Separate resources with comma to fix malformed inspect #470
append .0 to go.mod version #491
Full changelog

network-interface-bond-cni

OCPBUGS-58095: Bump github.com/containernetworking/plugins from to 1.7.1 #79
OCPBUGS-57794: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 #74
NO-JIRA: Add ci-operator yaml file #78
Full changelog

network-metrics-daemon

OCPBUGS-58781: Bump github.com/golang/glog to v1.2.4 (#111) #111
OCPBUGS-60174: Replace e2e test image (#120) #120
Full changelog

network-tools

Fix build error #147
Full changelog

networking-console-plugin

OCPBUGS-60178: Fix ingress details #264
OCPBUGS-60124: Fix requiremenets with no value #259
OCPBUGS-57286: Fix pod context #251
CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
Full changelog

oauth-proxy

OCPBUGS-57172: 4.18 kube 1.31 #317
OCPBUGS-58312: fix e2e tests #325
Full changelog

oauth-server

OCPBUGS-57300: Updating oauth-server-container image to be consistent with ART for 4.18 #186
append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-54622: cli/delete: fix workflow mode name output (#1229) #1229
OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1227) #1227
OCPBUGS-59798: Detect images from a Helm Chart with an aliased chart dependency (#1224) #1224
OCPBUGS-59235: [release-4.18] v2/archive: error d2m when no tar files found (#1212) #1212
OCPBUGS-58280: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1206) #1206
OCPBUGS-58272: Fixes the tag when rebuilt catalog by digest only (#1204) #1204
OCPBUGS-57387: v2/archive: fix sanitization of . (#1196) #1196
OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1195) #1195
OCPBUGS-57197: [release-4.18] v2/cli: always remove past archives before m2d (#1176) #1176
OCPBUGS-56486: v2/config: allow delete and mirror words (#1175) #1175
OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1173) #1173
OCPBUGS-56659: v2/archive: print unarchive progress (#1160) #1160
OCPBUGS-54653: delete: continue on errors (#1146) #1146
OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
Full changelog

openshift-apiserver

OCPBUGS-58461: Wire dry run option to Image API server operations #531
OCPBUGS-56609: Fix image reference in TestImageStreamImportQuayIO #514
Full changelog

openshift-controller-manager

OCPBUGS-57949: ignore error failing to find pull/push secrets #399
OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44458: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #365
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-60644: Add NetworkPolicy as a supported kind #1048
OCPBUGS-59421: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1040
OCPBUGS-58882: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1034
OCPBUGS-57427: reduce cache expiry frequency [release-4.19] #1020
OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
Full changelog

operator-marketplace

ART-13123: append .0 to go.mod version #637
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-48710: Update OWNERS file: Add Patryk/Martin as approvers #2700
OCPBUGS-59371: EIP OVN controller: stop pod config flap #2703
OCPBUGS-59531: EgressIP: fix startup syncer #2690
OCPBUGS-59623: Revert “unpin libreswan version” #2678
OCPBUGS-57318, OCPBUGS-58159: DownStream Merge Sync from 4.19 [06-26-2025] #2646
OCPBUGS-46401, OCPBUGS-48710, OCPBUGS-55263: DownStream Merge Sync from 4.19 [05-28-2025] #2593
OCPBUGS-57108: Fix hybrid overlay node subnets collision with cluster subnets #2619
OCPBUGS-57106: Increase InformerSyncTimeout to 60s #2622
OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-60881: extended/machines: add –no-pager to journalctl cmds #30180
OCPBUGS-60927: Wait 30s after the upgrade is complete to validate workloads #30179
NO-JIRA: Update extended/networking OWNERS #30089
OCPBUGS-58461: Backport pr 29834 to release-4.18 #29968
OCPBUGS-60066, OCPBUGS-60067: Don’t check for isNoUpgrade #30053
OCPBUGS-60066, OCPBUGS-60067: Tolerate various expected Upgradeable=False conditions #30048
OCPBUGS-57887: Update to Kubernetes v1.31.10 #29941
OCPBUGS-58366: Make EgressIP helper functions more reliable #29950
OCPBUGS-57081: Do not set the MTU when using NetworkAttachementDefinition #29891
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #29937
OCPBUGS-57329: Fix failed tests of e2e-aws-ovn-tls-13 #29911
OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-58861: [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 #62
Full changelog

vsphere-problem-detector

OCPBUGS-60784: Check for number of FailureDomain-s in GetVCenter() #189
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github