4.18.44

Manual Override Applied

This release was manually Accepted.

Reason: Manually accepted by ART - ART-20029

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.44-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Failed (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Failed (2 retries) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-ovn-single-node-upgrade-4.18-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
  - Attempt 1 Failed
  - Attempt 2 Failed
- aws-ovn-upgrade-4.18-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- azure-ovn-upgrade-4.18-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit Failed (2 retries) periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
  - Attempt 1 Failed
  - Attempt 2 Failed
- gcp-ovn-rt-upgrade-4.18-minor Failed (1 retry) periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- hypershift-ovn-conformance-4.18 Pending periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-ipv6 Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
  - Attempt 1 Failed
  - Attempt 2 Failed
- microshift-ovn-conformance-parallel Failed (1 retry) periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
  - Attempt 1 Failed
  - Attempt 2 Failed
- microshift-ovn-conformance-serial Failed (1 retry) periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

Untested upgrades: 4.17.14, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.50, 4.17.51, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.23, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.31, 4.18.32, 4.18.33, 4.18.34, 4.18.35, 4.18.36, 4.18.37, 4.18.38, 4.18.39, 4.18.4, 4.18.40, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

4.18.43 (changes) - S F F S F F F F F S S F F F F
4.18.42 (changes) - Success Failed
4.18.41 (changes) - Success Failed
4.18.30 - Failed Failed
4.18.24 (changes) - Success Failed
4.18.22 (changes) - Failed Failed
4.18.3 (changes) - Success Failed
4.18.2 (changes) - Failed Failed
4.18.1 (changes) - Success Failed
4.17.54 (changes) - F F F F S S F F F F
4.17.53 (changes) - Failed Failed
4.17.52 (changes) - Success Failed
4.17.49 (changes) - Success Failed
4.17.35 (changes) - Failed Failed
4.17.15 (changes) - Failed Failed
4.17.13 (changes) - Failed Failed
4.17.12 (changes) - Failed Failed
4.17.11 (changes) - Failed Failed

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.30

Created: 2026-06-11 12:29:56 +0000 UTC

Image Digest: sha256:2a7a95814b1b307813552472d18ef7aee7930748f707d730c4e816bdced1dac9

Components

Kubectl 1.31.1
Kubernetes 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202512022246-0 to 418.94.202606051320-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:ad878a3d4424e61c84e2cef92b2b1ba20b5502f214e2dcd0d0e18df9f70f39e6
agent-installer-orchestrator git 81d6bc27 sha256:dbabf9512414b7a822525d6ed10900a888544b4bad45fdcc9fde816814acdf30
apiserver-network-proxy git 2f62712d sha256:4ded20c38b7c18609e5e02aeff44a53794db8c9d183ef55e65910da9c9891f51
aws-cloud-controller-manager git c3951906 sha256:4f1f5ad555af4f35a7b30f68f190d7387f1adf1ac05423dc0e5e11c4d50271ae
aws-pod-identity-webhook git f54f9a19 sha256:dd2911b11ebf2c9e03dd23a6547dbcda60b1aa3237ffe9dff516593192c8959f
azure-cloud-controller-manager git 9c24d768 sha256:92347de385258ddef1be0dfb2a75d54d02fe40687b32a481ea43d0913ccdb805
azure-cloud-node-manager git 9c24d768 sha256:9b8c60c7b9c4b5e587cc2dabb665e320a9c3a7511f4702315178ee02c19396b8
azure-kms-encryption-provider git c937080f sha256:29319c83c1b32de57d726a33b713a3744fafc02506156648e84a64afcd151b9d
azure-machine-controllers git 2fdaa544 sha256:e65ca3447be7d16b39d36332c5235ec2e96fdf70cd501ccd24e6d02c305a2a6b
azure-workload-identity-webhook git f60e4029 sha256:dda7aa1a252fbd164c8dc9fd40b225369d3bb5c40ca69b890741128cf122fe7d
baremetal-cluster-api-controllers git 80c3a063 sha256:898bc7a63c93f4739dd1f91123a248b94dc5c7d365c8ae472d6e882e9cbf7e5d
baremetal-machine-controllers git 1ede6c3f sha256:63f686198f613883c388b397d91268315a574a77260a435d6fc04aa5bbc73e7f
baremetal-runtimecfg git 35341068 sha256:af0cc2f3c8a4c65ee558e41bca2370fed306a14d7e1539880182c46734c33133
cluster-autoscaler-operator git 474ad65c sha256:363d9ce54143696e482d94db04c8e96322f7fb8c727a3c4ab85d66a126a79662
cluster-bootstrap git d1e01954 sha256:b48ff8f826f113d14e9933359ca91dfe16496a3d0f8915452d248d56d58afc50
cluster-cloud-controller-manager-operator git 8abb0673 sha256:50413f9aed799d338128e3416d0d3903f0d970f23bb184f891ca6a7a2767ded5
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:b2088dbe4b8fe286ead5711976022788e15218a3665c9edc2450b535a0d9a44a
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:50deaa490a76c6049d4fae64539d211eae5a1476e74d7f076e1bb7910c894f83
cluster-dns-operator git 7cafd0c7 sha256:fe5a6577a90ba58064646a99fa8ff2853cfb25153b99abcbad261c8382c770e6
cluster-image-registry-operator git 1e3caa4b sha256:8f1490303679e2a0a3de75e3b6226862a09ebc605ecbe241b364e3e1bd0e7e19
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:b58364bc43c67ca70d3905984660598a1d8ea439d4f2e9606089e9fcce284106
cluster-machine-approver git 01d5fbbe sha256:ede4b5dbeeb9959b24a2ecd826b1cb67b8be1e826c5b6db7e2cc869abb44ebb1
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:5a59ed413f3f1442d7bc974867a62db0dc0faaef6ba599fdb0b2b4a1eea5a786
cluster-openshift-controller-manager-operator git f1711cf3 sha256:aad2ee6fdc5a78cc7bdba54a2b85eb6262c228c46c0669e8b213bc5e2de6a50d
cluster-policy-controller git 5fd85252 sha256:555396da44ac07ba761ee2ebb6f00918bd7edcc58e6f0ae76816402b990c1e7e
cluster-samples-operator git bc725fd4 sha256:234db4d1dd2ae69b25ffc649356211f99c17656c6985ff2b41deb9d17d818a6c
cluster-update-keys git 8caab452 sha256:dccbe44ab1594c0613845146113fa16387e3e257e25f30a9c80ce77508bf7fd3
configmap-reloader git e2aaf00a sha256:904fe02bdfec386a5e612805e27918e156ecffcadd5b64df98bf83eee398ab3a
coredns git 8ca7f02b sha256:785340c0173176e7544ff0f1432b123613a7ea5fa76715562266f2bbcefbf859
csi-external-resizer git a1423690 sha256:66999f9c676afce4d74029aa7af5efa9f02934ce90be32ad567fc6b07c5d15d9
csi-livenessprobe git 3a977844 sha256:95438531744d4826026a0caf884d8502f80bad0a883e5977f9792e78f5441700
csi-node-driver-registrar git ef93f0be sha256:07e9af4c0d6b21f818f11f6a47870b6f0f5bcbaa19920432d56c265c1dd07665
driver-toolkit git 2e139edc sha256:fb8dc6150ccb18ffd8bf2b5d14907f3db88bfce22a5ed168b4ef6064e1c2134c
egress-router-cni git 3193a756 sha256:350b75d9cbd494b8a8cdeeca04e57e8ad28501b2722aa871a23916fe9a246ab6
etcd git b5a4f8d0 sha256:ee0b887ca318f0a9b0cf275a082ee5215468b0f8249de745e14641b982f7215c
gcp-cloud-controller-manager git 6ea23561 sha256:6c2c87e89eca27299fcf18b40427a8ac137150e78f702f5c1a12f4704f08b4b8
gcp-machine-controllers git b2f858ba sha256:6d2e501dbd0141688bd1f2d72f1d9985610664646bb022537087905ddbb2d5fe
gcp-workload-identity-federation-webhook git f0a670c7 sha256:e60e4e0baacd87f6690e4960806f8019622ab3364fc04f80794b4929bcc9d249
ibm-cloud-controller-manager git a33026b1 sha256:4bb120cb81f9e4e6674ec760520afa508191291d438112c87c3c43337104a499
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:a2913ecb432b0bf425b12e60166f2f0bb7a35efc1cc1ffaf0e9ae699b5385e4c
ironic-machine-os-downloader git 50ca44fd sha256:92190bfba17fbbf407359da2dab6dcfff5d5ec1609715375448c1c57a3bc3ffd
ironic-static-ip-manager git cfbae04f sha256:7354c65f0adee6fbc5908696447a07a688b0db6aa1cf98b01da8481e69423057
keepalived-ipfailover git 716eb0ef sha256:236e732f1f785af56dd7feefd6bafd5e0fd81e1d21a1a9f8dfa83f49da3962a0
kube-rbac-proxy git 5a14ea9d sha256:fd3a35b6cb67c0efb61d0cddbf6965e0de7f7f8d069652b048b858eac8aef4b9
kubevirt-cloud-controller-manager git 3f4542ec sha256:8b7a59b6e37815c8c341849ae37f24f0333e0938bc842862bdabc412d8dedae0
machine-os-images git ab432836 sha256:fb244e013d91b417ec6068068c02468558d4e8086c193670fb1466cf4d19c67e
multus-admission-controller git 0d7ea6c7 sha256:2e22f5705c106456d834d58f7e7c2d1bc9ad81438e7592882d5f1a0a6ae7db6e
multus-networkpolicy git 3362bbc4 sha256:7ffe17441da02b33808dec15ef4a09664bb27364502aa6ae29a558d6f6e1bbdd
multus-route-override-cni git 391c1b03 sha256:581944a4c36b858d98c57746f899270e493dfb7086a06c5991d08b4d38d296a8
multus-whereabouts-ipam-cni git 86191ded sha256:2fb6f2af9ff7aedba4865909a33feb62906908bc45dd4cd4bc876fef9438c645
network-interface-bond-cni git e2de9255 sha256:9e4a00e55f1739230b38876720e49871db04c88626a0adc0116376295850f771
network-metrics-daemon git 11e2dec9 sha256:cb64084f1412f5467a99c8abb5e6e5fede22960d7d0453438bb50f5212c11e84
network-tools git 47b13549 sha256:57bae92bf672456eec22364e6624dc1e3848fe3a2ebf327b4aa78e96c8b434de
nutanix-cloud-controller-manager git d9fe8f38 sha256:f8e48495a229cabf438758f3c6bd9a26d5b4d1d484906d6cc48e7ee1c8376357
nutanix-machine-controllers git afe324bf sha256:c28104e90046a41fc3c71dcbe6a2008d3ea651e28e7354159d8d0520fcd08ebf
oauth-proxy git 9225edb9 sha256:d917b3022de15bd698060c7ae64720d1194af348d73f13e80915bbdf87274de2
oauth-server git 287caff3 sha256:f6753185fc2b858f46acf08c57915bb8506649d8af7636d16da72df9fab4b361
olm-catalogd git 180aa92c sha256:5fae42b9ac87b13cf434cdf9c015cc7fcc23ae5cee117a1a26013ab4f59c8d2b
openshift-controller-manager git 8ee74406 sha256:f35914fa9d49ba49021b52e4939678a80e59f339ece4b4a88445fbbd635b9506
openshift-state-metrics git 3cca6fee sha256:9dd548f43928d04a8f08992b4ae49110bdc980a6536eee360d3b67574af63053
powervs-machine-controllers git 74e3ece7 sha256:79f60858d7ae6e64a507ac3758290a64672e3009cbf0556f6501e8b87977f48a
prom-label-proxy git 35c11369 sha256:047531e75ef4b70439b0c100645c8dc294b7c0d5b333c0b7ac50a7be13a9b5d9
prometheus-node-exporter git 92e17ff5 sha256:d29a64d0d5881ff0076ae9011ed1da461ea760e7a44cd2fa4a2f3211dc9551eb
rhel-coreos sha256:0c75c2070fbbf149dafecdfc7ffc551b1cdfb633c51402a7844ac6d17cabfaf3
rhel-coreos-extensions sha256:a315234e50d4fe04139edadbe7975b185cc7e7fab0e52b7775fc088ff0714272
service-ca-operator git 30efb529 sha256:a5d14595ff0e6925bd23cee92fd62ca4b0bcd84e6c2cd9a36807be53ae81e33d
thanos git f1599f65 sha256:91a1bfd20a8a59b59d16e92a9d45e393d11cc64904ae3915ece7c60490b18790

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10019
OCPBUGS-74898: Retry incomplete cluster registration in ABI #8817
OCPBUGS-74911: Remove root=/dev/disk/by-label/dm-mpath-root from kargs #8820
Full changelog

agent-installer-node-agent

MGMT-21849: Skip arping for remote IPs not in outgoing NIC’s subnet #1332
Full changelog

agent-installer-utils

OCPBUGS-68243: bump github.com/sirupsen/logrus to v1.9.3 #237
Full changelog

aws-cluster-api-controllers

OCPBUGS-77903: [release-4.18] update go mod dependency for konflux #589
Full changelog

aws-ebs-csi-driver

OCPBUGS-86167: UPSTREAM: 2367: cleanup: make verify should ignore copyright year #321
OCPBUGS-80206: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 #313
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80308: Bump google.golang.org/grpc #542
OCPBUGS-79429: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 #531
OCPBUGS-78299: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #524
OCPBUGS-76582: Fix Cinder, Manila driver metrics #501
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-kms-encryption-provider

OCPBUGS-80184: Bump google.golang.org/grpc to v1.79.3 #43
Full changelog

aws-machine-controllers

OCPBUGS-73789: Fix reconciler consistency checks in Update and Exists #166
Full changelog

azure-cluster-api-controllers

OCPBUGS-80212: Bump google.golang.org/grpc to v1.79.3 #390
OCPBUGS-77905: [release-4.18] update go mod dependency for konflux #362
Full changelog

azure-disk-csi-driver

OCPBUGS-80213: Address CVE-2026-33186 #142
OCPBUGS-78037: add instantAccessDurationMinutes parameter to enable IA snapshots for PremiumV2/UltraSSD disks #130
Full changelog

azure-file-csi-driver

OCPBUGS-80216: Address CVE-2026-33186 #133
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-78550: fix wavelength zone name regex #10409
OCPBUGS-45579: PowerVS: Listen to machineNetwork #9277
OCPBUGS-73784: pkg/asset/manifests/azure: save cidr blocks #10217
OCPBUGS-76598: Increase agent-installer pre-network-manager timeout #10299
OCPBUGS-67203: Update the RHCOS 4.18 bootimage metadata #10294
OCPBUGS-74676: [release-4.18] GCP: skip AI zones #10275
OCPBUGS-69880: Azure UPI ARM template: use storageAccountId #10179
OCPBUGS-68244: [4.18] uplift logrus #10166
OCPBUGS-57590: Mount the user-ca-bundle into ICC #9794
OCPBUGS-63494: Catch gcp destroy cases where the operation is nil #10030
Full changelog

baremetal-operator

OCPBUGS-76988: Unblock BMH direct deletion when detached annotation is present #461
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-83872: pkg/cli/admin/upgrade: Tighten force warnings #2165
Full changelog

cloud-credential-operator

OCPBUGS-74548: Resolve nil pointer exception in hasResourceTags #968
Full changelog

cloud-network-config-controller

OCPBUGS-73750: [release-4.18] Fix pointers without ptr.Deref #199
Full changelog

cluster-authentication-operator

OCPBUGS-75897: set appropriate rolling update settings #835
Full changelog

cluster-autoscaler

OCPBUGS-78699: allow clusterapi provider to skip paused resources #413
OCPBUGS-75925: Fixes histograms becoming empty after loaded from checkpoints #402
Full changelog

cluster-baremetal-operator

OCPBUGS-81549: Explicitly set the ReadOnlyRootFilesystem flag to false #584
OCPBUGS-78708: Update kubebuilder tools to more latest version #579
OCPBUGS-57590: Mount the user-ca-bundle into ICC #486
Full changelog

cluster-capi-controllers

OCPBUGS-80220: Bump google.golang.org/grpc to v1.79.3 #297
Full changelog

cluster-capi-operator

OCPBUGS-80224: Bump google.golang.org/grpc to v1.79.3 #566
NO-JIRA: Allow sustaining engineering to self serve dependency updates #558
Full changelog

cluster-config-api

OCPBUGS-70315: Add HTTPKeepAliveTimeout to IngressController API #2638
NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers #2625
OCPBUGS-67214: Introduce ClosedClientConnectionPolicy to IngressController API #2618
CNTRLPLANE-1980: Promote streaming list encoding to Default #2598
Full changelog

cluster-config-operator

OCPBUGS-68249: Update logrus to 1.9.3 to address CVE-2025-65637 #464
Full changelog

cluster-etcd-operator

OCPBUGS-78776: [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index #1573
OCPBUGS-76284: Add priority field to prevent early shutdown #1545
OCPBUGS-63451: Ensure revision.json persists on ungraceful shutdown #1503
Full changelog

cluster-ingress-operator

OCPBUGS-70315: Implement HTTPKeepAliveTimeout tuning option #1333
NO-JIRA: Add new NID team members to OWNERS #1319
OCPBUGS-67214: Implement ClosedClientConnectionPolicy field #1322
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #2031
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-80231: Bump google.golang.org/grpc to v1.79.3 #77
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #906
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #622
OCPBUGS-76284: Add priority field to prevent early shutdown #612
Full changelog

cluster-monitoring-operator

OCPBUGS-77274: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2833
OCPBUGS-67168: Add the collection of MTV migration metrics #2774
Full changelog

cluster-network-operator

OCPBUGS-85443: Remove duplicated openssl parameter #3006
OCPBUGS-84869: wait for patch port to apply drop garp flows #2988
OCPBUGS-84180: fix(hypershift): use net.JoinHostPort for URL construction #2977
OCPBUGS-77151: Add config override for openflow-probe #2965
OCPBUGS-78833: Fix whereabouts-token-watcher DaemonSet improvements #2940
OCPBUGS-74154: whereabouts-config is a reserved name for user interaction. #2884
OCPBUGS-73767: Tweak iptables-alerter to try to avoid crictl bug #2877
Full changelog

cluster-node-tuning-operator

OCPBUGS-75954: PPC: filter out namespaces dir #1465
OCPBUGS-69947: [release-4.18] E2E: skip stalld test checking sched_fifo #1451
Full changelog

cluster-olm-operator

OCPBUGS-80239: Bump google.golang.org/grpc to v1.79.3 #200
Full changelog

cluster-storage-operator

OCPBUGS-87556: remove oVirt code from CSO 4.18 #707
OCPBUGS-77627: add vsphere permissions for checking if users is authorized to see metrics #670
Full changelog

cluster-version-operator

OCPBUGS-70182: Unify capitalization when comparing architectures for available updates #1327
NO-ISSUE: hongkai becomes an approver release-4.18 #1286
Full changelog

console

NO-JIRA: enable multi-architecture yarn builds #16421
CONSOLE-5011: migrate to yarn berry #16073
NO-JIRA: Bump builder image to v29 #15995
OCPBUGS-65808: Fix PatternFly dark theme colors for charts and form inputs #15951
OCPBUGS-74458: Bump lodash to latest #15965
OCPBUGS-73753: Fix Helm chart installation with CA/TLS certificates #15914
OCPBUGS-73662: Namespace is not persisting when switching to developer view from the topology page of admin page #15910
OCPBUGS-69915: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15868
OCPBUGS-69448: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15855
OCPBUGS-68361: Disallowed Pipelines-plugin Pipelines navigation section #15842
Full changelog

console-operator

OCPBUGS-77861: update go mod dependency for konflux #1113
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-85672: CI Build root image tag sync with ART #236
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-80309: Bump google.golang.org/grpc #387
Full changelog

csi-driver-nfs

OCPBUGS-80254: Replace google.golang.org/grpc with github.com/openshift-sustaining/grpc-go v1.71.3-sec.1 to avoid go version bump and fix CVE-2026-33186 #180
Full changelog

csi-external-attacher

OCPBUGS-80255: Bump google.golang.org/grpc to v1.79.3 #105
Full changelog

csi-external-provisioner

OCPBUGS-80256: Bump google.golang.org/grpc #130
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-80258, OCPBUGS-80261, OCPBUGS-80262: Bump google.golang.org/grpc to v1.79.3 #211
Full changelog

docker-builder

OCPBUGS-66990: bump buildah to 1.37.7 to fix CVE-2025-52881 #498
Full changelog

docker-registry

OCPBUGS-68253: update logrus to v1.9.1 #464
Full changelog

gcp-cluster-api-controllers

OCPBUGS-80270: Bump google.golang.org/grpc to v1.79.3 #290
OCPBUGS-78278: [release-4.18] update go mod dependency for konflux #265
Full changelog

gcp-pd-csi-driver

OCPBUGS-80274: Bump google.golang.org/grpc to v1.71.3-sec.1 in release-4.18 #112
OCPBUGS-68258: UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 #89
OCPBUGS-44772: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #83
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-80273: Replace google.golang.org/grpc with fork #187
Full changelog

haproxy-router

OCPBUGS-80275: Bump google.golang.org/grpc to v1.79.3 #768
OCPBUGS-67214: Add option abortonclose to HAProxy configuration template #703
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-54724: Fix implementation of ContainsCIDR to allow non-equal addresses #2267
Full changelog

hypershift

NO-JIRA: remove path filter from control-plane-operator pipelines #8665
OCPBUGS-80278: fix CVE-2026-33186 by replacing grpc-go #8515
OCPBUGS-84180: fix(cno): use brackets only for IPv6 in server URL #8346
OCPBUGS-76532: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7699
OCPBUGS-77368: Fix ignition-server pod restarts #7878
CNTRLPLANE-1708: Backport Customer Global Pull Secret to OpenShift 4.18.z #7354
OCPBUGS-72932: Fix Konflux EC voilation, update deprecated base … #7456
OCPBUGS-69847: test: remove unit tests that depend on network communication [release-4.18] #7406
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-80280: Bump google.golang.org/grpc to v1.79.3 #143
OCPBUGS-77207: [release-4.18] standardize build paths #122
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67286: [release-4.18] Fix incomplete vendor/ #140
Full changelog

ibmcloud-machine-controllers

OCPBUGS-81647: bump vpc go sdk #91
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #87
Full changelog

insights-operator

OCPBUGS-80283: Bump google.golang.org/grpc to v1.79.3 #1283
OCPBUGS-76963: Extends the time for the extractor liveness probe #1234
OCPBUGS-76537: [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1239
OCPBUGS-68263: Update github.com/sirupsen/logrus to v1.9.3 #1205
OCPBUGS-68263: [release-4.18] golanci-lint version update & corresponding fixes (#1045) #1206
OCPBUGS-66396: Add filtering to add other possible pod status to QEMU gatherer #1195
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-77789: remove dnf cache from the container images #69
Full changelog

ironic

OCPBUGS-76459: Bump pyasn1 to 0.5.1-4 #826
OCPBUGS-74407: Update sushy to include DGX B200 credentials fix #832
OCPBUGS-74115: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #795
OCPBUGS-69790: Bump eventlet version to 0.33.1-7 #760
Full changelog

ironic-agent

OCPBUGS-69780: Bump eventlet version to 0.33.1-7 #230
OCPBUGS-68360: Include Test advertised ip reachability before assigning it #226
OCPBUGS-62456: netutils: Use ethtool ioctl to get permanent mac address #206
Full changelog

kube-metrics-server

OCPBUGS-80190: Bump google.golang.org/grpc to v1.79.3 #64
Full changelog

kube-state-metrics

OCPBUGS-74873: Deduplicate CRS stores #131
Full changelog

kube-storage-version-migrator

OCPBUGS-78273: fix /vendor for hermetic 4.18 #239
Full changelog

kubevirt-csi-driver

OCPBUGS-79362: Add annotation-based fallback for infra VM node ID resolution #86
Full changelog

libvirt-machine-controllers

OCPBUGS-77194: Fix incomplete vendor/ #300
Full changelog

machine-api-operator

OCPBUGS-78795: [release-4.18] : correct aws kms permissions #1478
OCPBUGS-78796: [release-4.18] Use resource group when generating default Azure image #1480
Full changelog

machine-config-operator

OCPBUGS-86845: Apply password only if changes exist #6113
OCPBUGS-86695: use –delete-if-present for karg removal #6102
OCPBUGS-86844: Fix ssh and password rollbacks #6096
OCPBUGS-86692: Fix re-cordon detection #6101
OCPBUGS-86300: Add terminationMessagePolicy to build pod containers #6074
OCPBUGS-86021: Fix units rollback if update failure #6052
OCPBUGS-79483: set default-timeout-stop to 200s globally #5805
OCPBUGS-62692: configure-ovs: work around a Cisco switch issue #5329
OCPBUGS-78056: Prevent unnecessary systemd unit disable #5758
OCPBUGS-74148: enable nodeip-configuration for platform external #5578
OCPBUGS-77777: reduce MCO image size #5738
OCPBUGS-77576: mcd_config_drift not working properly #5726
OCPBUGS-77421: Remove MCD liveness probe #5710
OCPBUGS-74644: After OCL is enabled few phases in MCN are not updating as expected #5605
OCPBUGS-77092: Machine-config controller should not log about non-existent pull-secret changes #5680
OCPBUGS-77041: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5671
OCPBUGS-76560: [release-4.18]: cherry pick to few fixes that needed for missing services and configuration #5653
OCPBUGS-71227: MCP is not correctly degraded when a pivotError happens #5534
OCPBUGS-70336: Remove log exposing kubeconfig #5528
Full changelog

machine-image-customization-controller

OCPBUGS-82149: Return error when network data Secret lacks nmstate key #174
OCPBUGS-77888: Clean up dnf cache to reduce container image size #168
OCPBUGS-68262: [4.18] Uplift logrus #151
Full changelog

metallb-frr

OCPBUGS-74485: Dockerfile: unpin FRR rpm #121
Full changelog

monitoring-plugin

OCPBUGS-79448: immutable bump: fix for CVE-2026-29063 #922
OU-1241: unset frontend timeout to use the backend configuration #905
OCPBUGS-83374: fix: re encode params when redirecting from graph to query-browser #878
NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds #870
OU-993: adding cypress Dockerfiles #861
OU-876: monitoring automated testing backported and adjusted to pf-5 and diff UI #777
NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] #818
OCPBUGS-70291: fix: update qs vulnerable dependency #739
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-85249: Fix server url in kubeconfig #298
NO-ISSUE: [release-4.18] Bump Go to 1.22 and fix CI build root image #291
OCPBUGS-77853: hermetic 4.18 #276
Full changelog

must-gather

OCPBUGS-86019: Collect object size with the object count #547
Full changelog

networking-console-plugin

OCPBUGS-41880: Retain namespace selection between network policies tabs #424
OCPBUGS-87000: Update Dockerfile.art to 4.22 build image #426
OCPBUGS-83382: Fix CVE 2026 34043 serialize javascript 4.18 #413
[release-4:18] OCPBUGS-85067: Migration from yarn to npm #412
OCPBUGS-81606: Fix CVE-2026-CVE-2026-4800 in lodash #401
OCPBUGS-79449: Bump immutable #390
CNV-76277: Fix name generator with unprofessional names #319
OCPBUGS-63582: Fixed - Extra semicolon observed before Service IP in OCP Console #306
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #170
Full changelog

oc-mirror

OCPBUGS-66051: Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) #1324
Full changelog

olm-operator-controller

OCPBUGS-80304: Update grpc-go to v1.71.3-sec.1 to fix CVE-2026-33186 #735
Full changelog

openshift-apiserver

OCPBUGS-74234: Bump library-go for route path validation fix #603
OCPBUGS-69955: Add ValidatingAdmissionPolicy and check for omissions next time. #589
OCPBUGS-66379: pkg/image: conditionally parse raw image manifest #585
Full changelog

openstack-cluster-api-controllers

OCPBUGS-64816: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #371
Full changelog

openstack-machine-api-provider

OCPBUGS-69648: Don’t record event for every reconcile #143
OCPBUGS-76792: Fix make test #159
OCPBUGS-74986: Revendor CAPO #152
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-80311, OCPBUGS-80312, OCPBUGS-80313: Fix CVE-2026-33186 with openshift-sustaining/grpc-go v1.71.3-sec.1 [release-4.18] #1314
OCPBUGS-81473: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1273
OCPBUGS-77714: Remove the collect-profiles info from the microshift kustomization file #1245
OCPBUGS-76924: Remove the collect-profiles job #1231
Full changelog

operator-marketplace

OCPBUGS-73883: Increase default catalog polling interval to 4h (240m) #707
OCPBUGS-68272, OCPBUGS-68273: CVE-2025-65637 fixed in logrus v1.9.3+ #703
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-86230: Branch Sync release-4.19 to release-4.18 [05-19-2026] #3197
OCPBUGS-74399, OCPBUGS-85434: Branch Sync release-4.19 to release-4.18 [05-12-2026] #3184
OCPBUGS-77151, OCPBUGS-83567: Branch Sync release-4.19 to release-4.18 [04-16-2026] #3143
OCPBUGS-82148: Branch Sync release-4.19 to release-4.18 [04-05-2026] #3117
OCPBUGS-81479: node: fix serviceUpdateNotNeeded nil pointer comparison #3101
OCPBUGS-78015: Add pperiyasamy to OWNERS for release-4.18 #3045
OCPBUGS-77516: Clear stale conntrack UDP entries for nodePorts #3016
OCPBUGS-77083, OCPBUGS-77106: [release-4.18] combined backport PR for 2 escalations #2987
OCPBUGS-48710: Branch Sync release-4.19 to release-4.18 [02-04-2026] #2970
OCPBUGS-74270: release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync #2943
OCPBUGS-70346: Branch Sync release-4.19 to release-4.18 [01-07-2026] #2922
OCPBUGS-66140: Branch Sync release-4.19 to release-4.18 [12-31-2025] #2916
CORENET-6055, OCPBUGS-48710, OCPBUGS-66360, OCPBUGS-66381, OCPBUGS-66428: Branch Sync release-4.19 to release-4.18 [12-03-2025] #2895
OCPBUGS-68347: Add ricky-rav to OWNERS for release-4.18 #2897
Full changelog

powervs-block-csi-driver

OCPBUGS-80317: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #130
OCPBUGS-82774: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #124
OCPBUGS-51896: Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 #102
OCPBUGS-70002: Update builder image’s golang version to 1.23 #103
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-80318: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #111
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80319: Replace google.golang.org/grpc with openshift-sustaining fork v1.71.3-sec.1 to v1.79.3 to fix CVE-2026-33186 #99
Full changelog

prometheus

OCPBUGS-80320: Bump google.golang.org/grpc to v1.79.3 #308
Full changelog

prometheus-alertmanager

OCPBUGS-74976: Include go-verify-deps expected files in gitignore #114
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77298: backport upstream fix to reconcile resources with inconsistent status #370
OCPBUGS-77398: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #366
Full changelog

route-controller-manager

OCPBUGS-80199: Bump google.golang.org/grpc to v1.79.3 #85
Full changelog

telemeter

OCPBUGS-80333: Bump google.golang.org/grpc to v1.79.3 #599
OCPBUGS-81804: [release-4.18] Fix CVE-2026-34986 #596
Full changelog

tests

OCPBUGS-77876: Backport: Remove duplicated graceful termination test from release-4.18 #30702
OCPBUGS-74207: Unrevert TLS tests with fixes #30708
OCPBUGS-69900: Updated the upgrade duration limit to 100 minutes for ppc64le #30628
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-77668: hermetic migration 4.18 #105
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-80340: Bump google.golang.org/grpc to v1.79.3 #104
OCPBUGS-78018: hermetic migration 4.18 #84
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-80343: Bump google.golang.org/grpc to v1.79.3 #176
OCPBUGS-68278: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #156
Full changelog

vsphere-csi-driver-operator

OCPBUGS-81673: Fix password escaping #342
Full changelog

vsphere-problem-detector

OCPBUGS-81556: fix concurrent map writes #215
OCPBUGS-70359: Fixed logic for vSphere compute cluster permission #200
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github