4.18.14

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.14-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Failed (2 retries) periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.18.10, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

4.19.0-rc.2 (changes) - F S S S

Loading changelog, this may take a while ...

Changes from 4.18.1

Created: 2025-05-16 16:14:18 +0000 UTC

Image Digest: sha256:78c0475ba249e03b0ed5b3d3cca619020a2996fb75efb9e7b5a2d5972fbdac7c

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.5 to 1.31.8
Kubernetes Tests upgraded from 1.31.1 to 1.31.8
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202502100215-0 to 418.94.202505151852-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 3f6d1d8b sha256:67ce51307fa2125f69e7df6d0a9d91de48e49f0ce99945baf8a52fa19734a7fe
apiserver-network-proxy git 0e116160 sha256:878fbd175a138d507a09974bc2c1a176432fa49e9c1891382e782b8bfbbce49c
aws-cloud-controller-manager git c3951906 sha256:cab9c82437a2156b843c6e797d63a5aa8babf46dea5c22823762547a676e53ac
aws-ebs-csi-driver git b51cd6b8 sha256:fb56ff7ea623b5efc3432de17409efa4a2da895a7301a35b3a793615d1afdc52
aws-kms-encryption-provider git 088dcaf7 sha256:aa691d4ee37ec85a0e2bcfbfba60f8a8930a794df239f206ed25c233bf8fde66
aws-machine-controllers git 53274f11 sha256:4f66b59374b5691ceb292e0bc5f45256d383bcbb00c020d5f7a087ccf36825bf
azure-cloud-controller-manager git 9c24d768 sha256:b578c23565a81a2ec1a3ceeb4077647db531b011ec018772ca682dd835ac0bd4
azure-cloud-node-manager git 9c24d768 sha256:c768c769bc6cc114e89743a261605e9da4c9abb4bb20d0d2935cd2892694052e
azure-cluster-api-controllers git 987615c8 sha256:01a38f6652959f7d96886175ad1fa45b7231d1d0b3fb1353c2d6604d96971d5c
azure-disk-csi-driver git 6cced666 sha256:2f58c6339242f49541c226fa170ed6746e024099b491e61ad939858a759b91df
azure-file-csi-driver git 4b34592e sha256:0080deb6b75d4f427d11e50b1a097e251bcea28c0d279425b2e46a8810fd6647
baremetal-cluster-api-controllers git 7ec03e94 sha256:f509f6f2c6b41752af0055cb65570cf9eeba1b451d7c87b0a48113967c205dfa
baremetal-machine-controllers git 1ede6c3f sha256:ae55656ff9caa856e1332b299b1923f86c99943eb942382615951d3c74a0daf2
baremetal-runtimecfg git 9e2015c3 sha256:2bb3d567a924a49b89891e0c5ae350eb6e6a3cd47e73684c55081da6d8136178
cluster-autoscaler-operator git 474ad65c sha256:69221f9c28d79527298d1207206fe93309ffa336d58337b567e7577df194eed7
cluster-bootstrap git d1e01954 sha256:0093f7f11f394d7f48862f0c9503c63bfdaa7fa5fcf20291de4ee3f311e6eb90
cluster-capi-controllers git d05a6def sha256:3a1c2e9169c37f558500c8f305999b39457fecec406adca80ce585e5e0380ce3
cluster-capi-operator git 4e26a69d sha256:1fe08dd69098d2ce634e9ce5813538e9abd277b6122bf45e8d628bb69526e6d3
cluster-cloud-controller-manager-operator git 33856906 sha256:0dc0dcbaa60162ca1f02a6bcd4b06cd1c0398c7762b5250b1e55f262cbf26298
cluster-config-operator git 85cb4072 sha256:5f16a8c5c986fd9a140233ef109eff7ec03013fd52bf3bb8d4e59eee411d42f8
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:a9d953b5ec7dd85f6f4a891abe997db1eae48dfe37125813697b44343cf1398c
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:572ae1165f022df2544ea0be71c110737ab959b392850d1537084e1e771cd3a7
cluster-kube-cluster-api-operator git 33a1141e sha256:f78f2812ccc74fc0f8f93f26b957886dc79a19b810a871535b868b42f4cd04f4
cluster-kube-controller-manager-operator git 0fac9aa9 sha256:23531063605fbcea880e3939831160f456f9b116ad4f007686e8c5c0f6561ef8
cluster-kube-scheduler-operator git 6182930d sha256:a06ebf43dc40b2d29bd154583e4b8a66d6a8012174202a6a2ac85d93916b1594
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:842ff24404aa2437c3455877a5e7c0fcc3913d1f58919accc5f1a037a619a003
cluster-machine-approver git 01d5fbbe sha256:489c4f2894f038b9386168db8495f4b8934950e770646afca3e6a67799ecbafb
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:7570dcc1b357b2b91f5420e6d659beee0b04e7565db4c4a7f6a936488bd82789
cluster-openshift-controller-manager-operator git f1711cf3 sha256:cb6e7fa2057f8a40c0da0971cb0f2c02e94a650a132437ebe755f0a404203051
cluster-policy-controller git 5fd85252 sha256:d84831358a5fac7cf37f71d9c6d46bf6f38eea825eab82650ee1866cd12f462f
configmap-reloader git cde5e473 sha256:3ee1d33d117fb7a79abff7fc1e9eff5005a1de2550b4102bc61bf911ca8110ef
coredns git cb1abfae sha256:597376b2fc642fd62565ea4ff11f07c5ba2a26df7eba0aa37a9057b455d2715d
csi-driver-nfs git 32e77590 sha256:83f923042a9ce8ea168594b3fbb34271839955859f3f9b57d932bb32fadd72f0
csi-external-attacher git 39b37c06 sha256:fe0ca4272ef5a9d00fddcdb8dc0d57be0f48a2e88dff4835dce0b11141dd17a4
csi-external-provisioner git 376f0ea0 sha256:6e12190a1bf996242c8f26fa210ef4ec0abe6e9c59c87f74f30d8a28f030a70a
csi-external-resizer git cca3837a sha256:d63ef491facd17ea871e5f8c46dea0b8631e0f57efe3a905e3a263d0fd4cee7b
csi-external-snapshotter git 838d2484 sha256:67964a6f5823b7ddd44408dd20e67fe7a068bff2f20c08034862ab8427a713a4
csi-livenessprobe git 3a977844 sha256:892786371e53098262322e841dd05ac5af02e54ebd1b32a6af7897ff83de896b
csi-node-driver-registrar git c21f5d02 sha256:b98dd701cddf2e71772d7e229a8511b4d114cfb3e9f2f5322ea71c4dfd8733a7
csi-snapshot-controller git 838d2484 sha256:ed691e570e0c37eec0c1983f4340c2ac69b046c73a9906a73a29083194a4862f
csi-snapshot-validation-webhook git 838d2484 sha256:249e1b4326ca55f760a48fece06e0a2504c350341de325ed3b39f98ab2d4e3e8
docker-registry git e36d3655 sha256:c9a8447fdb3bfc5acb5a398b57c4f3f2a710d9c045b0eb0896edabbad963a1e9
driver-toolkit git 2e139edc sha256:4341fad46f04641d4f336ffe51c92ce93ea526c829f7afd8a6670c857f2ada17
egress-router-cni git 3193a756 sha256:91ea287bb9dabb7a2397313c5ee42cd42e6aedc12488a624401040c4451768c4
gcp-cloud-controller-manager git 6ea23561 sha256:bddbfc9c010f78eac793ad2be1d932859fd890f14dc1d087abe8ab24a2de22a8
gcp-cluster-api-controllers git af54f528 sha256:a9591bcfcaf613af8d0f8298ecf091a3dd48c398f5e1fec9ac7edbb3b0d3211f
gcp-pd-csi-driver-operator git 7cb8b38c sha256:3859251c5716db323ae7b6ec82ab82b05b004573f5a5436e2d9e2c69f860f2ef
gcp-workload-identity-federation-webhook git f0a670c7 sha256:039effe6684623578d097c5650ff08edb1b15f6b2ffedfbce408da6b38de3fd5
ibm-cloud-controller-manager git a33026b1 sha256:be40161ac85353f051a6835543967a6bbde4a747c337f89e7a5e0791979ff003
ibm-vpc-block-csi-driver-operator git feae2605 sha256:e45dfea1c5f7900bdca158d6601bbb77e6f7eab8608e189a208aefe9a01698c4
insights-runtime-exporter git 7149f2d5 sha256:9b99d491df51db3276bfa7e2d652c837cd58e69c1f6d0c2dd816e8f2c5d59a6c
insights-runtime-extractor git 7149f2d5 sha256:a6074f6ed9983721b3d6d2b8431353b8c9a0573734b03044a6ae38c773102c95
ironic-machine-os-downloader git 04c22eee sha256:2002d41789ca14128e2a730ce381768a43db71f6fd0b46f685fa22167cf8c4fb
ironic-static-ip-manager git cfbae04f sha256:e3d19319afde7e3a97363b172b25d38d73d9ceaf909c0eca2b2defc23244abdd
keepalived-ipfailover git 716eb0ef sha256:13ed14065c40fd318d424a10fcf1262411ae44bfa437c57fa29af53b12ef0b84
kube-metrics-server git 962ccca2 sha256:8bd646d419b374beee35b90e4c2187f612467211339e3a06e012723a8850cd26
kube-rbac-proxy git 526498ab sha256:5774ae3bffa16560af5a57fd9c12a52373ee9941023de67cce3ccbc4aa8a6356
kube-state-metrics git cb5a9296 sha256:0cf65654c0f455456a3fb818f6f66ff58dab780826be415064a79cf09eb2867c
kube-storage-version-migrator git 50d17147 sha256:c908d2b034ac1ce59393392079905017055cd519511b50c57d136b37f93f051d
kubevirt-cloud-controller-manager git 3f4542ec sha256:010d99eca87b58da183e227a3e507e872077e771b76f9260103703708a32239c
libvirt-machine-controllers git a336f0b5 sha256:8010683d2419fbbfd65e17b165c0c8a77ccc33d15a5c87b02300fefdabdde484
machine-image-customization-controller git e905646a sha256:9f9d68895bf93d1325aa167230d8a60b2c657741e0d45429134a6381d1c31aed
multus-admission-controller git 1b2791b7 sha256:938d773fb14d54f977870c4a26255dd165ca6edc9396123cff3b5727789132e4
multus-networkpolicy git 82c77316 sha256:fa9145f082b5fd30e275a23c8334dfb1a838576a610ee2d95d8bbd2a11b06633
multus-route-override-cni git 391c1b03 sha256:b3884d3a102e6c85d9fe4193796bb0f6300fc11d951865290d7aff2eeddbf3f4
must-gather git c864494e sha256:c7f5cfc815879790ab4d8463204c70bf7bcb39b9bf4b32102d1009ebcf4a6e4a
network-interface-bond-cni git 9506a1ff sha256:adde9788f33fa39a75cdf37af27ea7a87f02dbc723729cc4f8de7861627ffa24
network-metrics-daemon git e4c214c3 sha256:8d36aa6c32ee4cea4530f6ad7b498b211f835bedce80285fa12d5a7784f60072
network-tools git f76635f2 sha256:214235b1f8069c5e5e72917e467f971724d33fc6b56384174a32e9b38adbf5b0
nutanix-cloud-controller-manager git d9fe8f38 sha256:d3e3deb22b38dba7533534df7c497c2a85a679f12cd9b0f84b41f475312970f1
oauth-apiserver git 2575ff41 sha256:689f7ea56e19082a5b9175f58e429fcb2509ba303c1d6ae2977d70b4c3ce9eda
oauth-server git d3527783 sha256:70f1cf87f53e17364593117a5dcff7fd3ca9cdea960a05db4383d0cc33db4f0d
openshift-state-metrics git f5b14702 sha256:69c83d7c7bed505fb7482a2c467d56a107fd97f6d295e3b2f2a7935869c323ec
openstack-cluster-api-controllers git b0f0dc4e sha256:a7e5b2ba51c8c210f45c7fd6d95ed246e32a5c4b053de64d0588941a5e1b2ce4
openstack-machine-api-provider git d914e77e sha256:9042a3c1312d41075ad10d4c1ff250fbb91223fc56b5b8e0c9ac0a460b9c4e33
ovirt-csi-driver git 1db726a9 sha256:7d776353ff4cf0ab9154b577add039eb0b43ca3ec1234c590ac0f6739e79154a
ovirt-csi-driver-operator git 0feae256 sha256:14987da2123ff4334dd923b438a05ae574176a64908bcd3a5b8e1d481e939593
powervs-block-csi-driver git d36aea34 sha256:4a26455e07e52db4bcc8b20fa10eacb5124f644ca81044964eed00a0643b1173
powervs-block-csi-driver-operator git 01fc505a sha256:485a779e549d1c9bc2e67053e00273234948109aea3eb0c44c0f0d02c2b2ea01
powervs-cloud-controller-manager git 17ae6fba sha256:9891a1edd3199925ce46e4c095c18d939862d2f3668d33c99323351bc2dc1c41
prom-label-proxy git d9fe2d8e sha256:8d0575c3f6dba11b22ad11b149f30dead69c23aaa7cdcde90a05af9e55fb8041
prometheus-alertmanager git e513c918 sha256:ef7c09d5fd4199f0ce84ae18dc72cf782947f41dd0dc000143c2c78c972f6326
prometheus-node-exporter git b7efb8c0 sha256:bc928f7342ad3e4856a0fadfc87a0e8c085ee5abb58f5dd67a2035381ad5e6a3
rhel-coreos sha256:88787af2ee0fa6bbd0064d5fc32a7c34f458d32c8c0768db8b52d0d1e298eae2
rhel-coreos-extensions sha256:b378b80c6b56f24bd3843262c42faed4939199162e936393ef3884047aee9094
telemeter git 700802fe sha256:b1a8c0664dc97b506da48ff975a9afb7fe5382c8fa7d5ba9d6063e2be5b1e33a
vsphere-cloud-controller-manager git c414d1f5 sha256:974835a77d2bbd0333c016e3b679a7a294e8d9da2a6010260ce4109e8036a020
vsphere-cluster-api-controllers git d664fe2b sha256:6d325c00cbf0dce46838091a7ba80e755a337e599540a1ccd3a9a43c7c02fd4a
vsphere-csi-driver git cfcad01d sha256:9f9484b5e1f5aed4404a68974ec0a52c35aeeb5c526046ee286c53133d60f0ee
vsphere-csi-driver-syncer git cfcad01d sha256:74496b2de427276f1784669e7bc48f34d67ca6a2be76e2f41e7aa4bf72ca5ed2
vsphere-problem-detector git 7cf7fe24 sha256:9b78001e1a680e2daa079e132423edc845196fea9a335252126900dd218b1f9e

agent-installer-api-server

OCPBUGS-54378: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) #7483
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) #7456
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53721: Bump jwt to 4.5.2 in release-4.18 (#1085) #1085
OCPBUGS-45116: Add retry to mount efi device (#1030) #1030
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#958) #958
MGMT-20227: Skip Motherboard serial if set to “-” (#955) (#957) #955
OCPBUGS-54544: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) #965
OCPBUGS-53713: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) #963
NO-ISSUE: Increase image pull timeout during install (#907) #907
Full changelog

aws-cluster-api-controllers

OCPBUGS-53729: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 #543
OCPBUGS-50556: UPSTREAM: 5339: Bump glog for recent fixes #537
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-54383: Disable remove-not-ready-taint for azure disk csi driver #374
OCPBUGS-49843: Support HCP labels #356
Full changelog

aws-pod-identity-webhook

OCPBUGS-51231: github.com/go-jose/go-jose/v4 v4.0.5 #201
Full changelog

azure-kms-encryption-provider

OCPBUGS-53497: bump golang-jwt v4 #11
Full changelog

azure-machine-controllers

OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
OCPBUGS-54355: Re-reconcile machine on NIC provisioning failure #135
Full changelog

azure-workload-identity-webhook

OCPBUGS-53801: github.com/golang-jwt/jwt/v4 v4.5.2 #31
OCPBUGS-51233: github.com/go-jose/go-jose/v4 v4.0.5 #27
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
OCPBUGS-54947: Fix Load balancer IP setup #9659
OCPBUGS-45564: Align vSphere UPI haproxy config with IPI #9276
OCPBUGS-53453: IBMCloud: Move to IBM TF openshift fork #9592
OCPBUGS-53422: Avoid adding duplicate entries to NO_PROXY #9588
OCPBUGS-52515: Remove error logging when determining image arch #9539
OCPBUGS-52429: Remove tmp directory used for agent pxe files #9536
OCPBUGS-51211: Fixes panic during GCP tags fetch due to unstable network #9513
OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
OCPBUGS-50524: Add cluster:master_nodes metric retrieval in docs #9449
OCPBUGS-49864: handle runtime panic when validating ovnKubernetesConfig #9435
OCPBUGS-49320: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9402
OCPBUGS-50870: PowerVS: destroy dhcp hack #9483
Full changelog

baremetal-operator

OCPBUGS-53324: BMO can expose any secret via BMCEventSubscription CRD #405
OCPBUGS-45250: Remove dataImage finalizer if BMH is missing #389
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
OCPBUGS-49440: Address golang.org/x/* CVEs #1961
Full changelog

cloud-credential-operator

OCPBUGS-53825: update github.com/golang-jwt/jwt #837
OCPBUGS-53345: github.com/golang/glog v1.2.4 #835
OCPBUGS-51550: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #822
OCPBUGS-51237: github.com/go-jose/go-jose/v4 v4.0.5 #824
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-authentication-operator

OCPBUGS-54569: Avoid duplicate OAuth client creation #764
Full changelog

cluster-autoscaler

OCPBUGS-53241: improve replica counting and decrease target size behavior #346
Full changelog

cluster-baremetal-operator

OCPBUGS-53080: Add missing relatedObjects #467
Full changelog

cluster-config-api

OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
OCPBUGS-54784: [release-4.18] Bump openshift/controller-tools to latest commit #2267
OCPBUGS-51295, OCPBUGS-51380: Reject new NodeStatus with revision set #2215
OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
OCPBUGS-51077: [4.18] bump controller-tools dependency to latest downstream commit #2210
Full changelog

cluster-dns-operator

OCPBUGS-52514: [release-4.18] Add runbook_url for CoreDNSErrorsHigh #429
Full changelog

cluster-etcd-operator

OCPBUGS-56110: adjust alerts according to platform #1424
OCPBUGS-53513: fix CVE-2025-30204 #1413
OCPBUGS-55066: increase etcdGRPCRequestsSlow duration #1408
Full changelog

cluster-image-registry-operator

OCPBUGS-51018: ensure that storage names don’t end in dashes #1179
Full changelog

cluster-ingress-operator

NE-1951: Pre-upgrade Admin Gate for Gateway API CRD Management Succession #1196
NE-1952: Pre-upgrade check for Gateway API CRD Management Succession #1193
OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-49898: bindata/alerts/slo: improve burnrate calculation #1808
OCPBUGS-53066: Bump library-go #1828
OCPBUGS-46411: skip generating certs when networkConfig.status.ServiceNetwork is nil #1780
Full changelog

cluster-monitoring-operator

OCPBUGS-55005: chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and set CMO to Upgradeable=false if errors are found #2592
OCPBUGS-53024: Fix opentelemetry metrics to use regexp on label match #2578
OCPBUGS-52565: Bump prometheus-operator to 0.78.2 #2576
OCPBUGS-50706: Add incidents metric to telemetry #2570
Full changelog

cluster-network-operator

OCPBUGS-54717: Add IPv6 NGINX configuration #2683
OCPBUGS-50582, OCPBUGS-52949: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2644
OCPBUGS-52837: frr-k8s: rename validatingwebhook name #2661
OCPBUGS-48305: frr-k8s: align manifests with operator #2657
OCPBUGS-41178: Updating cluster-network-operator-container image to be consistent with ART for 4.18 #2491
OCPBUGS-50625: Cherry-pick RouteAdvertisements support back to 4.18 #2645
Full changelog

cluster-node-tuning-operator

OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) (#1306) #1303
machineconfig: add support for various hugepage sizes. (#1299) #1299
OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
e2e: common way to fetch poolName (#1255) (#1300) #1255
Full changelog

cluster-olm-operator

OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
OCPBUGS-54258: Adding mutex to func createSamples on handler.go #615
OCPBUGS-54351: add rhdmalone to owners #617
Full changelog

cluster-storage-operator

OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #72
Full changelog

cluster-version-operator

OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

console

OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
OCPBUGS-54269: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14905
OCPBUGS-52372: VolumeSnapshots are not displayed in OpenShift Web Console #14833
OCPBUGS-52406: Retain original path when detecting perspective #14834
OCPBUGS-52371: Update the monitoring topic used by the console team #14832
OCPBUGS-52490: enable clicking outside NodeLogs Selects to close them #14843
OCPBUGS-50501: Updating cypress config to have video enabled for the CI results #14831
OCPBUGS-52511: Remove logoutOpenShift method call #14845
OCPBUGS-50609: update the Deployment pod on change in imageStream #14757
OCPBUGS-50648: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14761
OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
OCPBUGS-51180: Linkify OLM operator uninstall message #14789
OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
OCPBUGS-50647: Enable web terminal tests #14758
OCPBUGS-50573: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14755
OCPBUGS-49867: Add support for conditional CSP headers #14720
OCPBUGS-48736: update variable name for plugin name parsing #14696
OCPBUGS-49921: fix run time error when no completed version exists #14743
Full changelog

console-operator

OCPBUGS-52294: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #966
OCPBUGS-49867: Add ConsolePluginContentSecurityPolicy feature gate to… #959
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-55354: Fix dhcp #186
OCPBUGS-55346: Check error returned by ipv6 SettleAddresses #185
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43430: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 #312
Full changelog

docker-builder

OCPBUGS-48071: Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility #464
OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
Full changelog

etcd

OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue #312
ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
Full changelog

gcp-machine-controllers

OCPBUGS-52495: OCPBUGS-52494: Disable shielded VMs for non-UEFI disks #112
Full changelog

gcp-pd-csi-driver

OCPBUGS-44769: Fix RWX mode for hyperdisks #74
Full changelog

haproxy-router

OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
OCPBUGS-49389: Reject All CA-Signed Certs Using SHA1 #649
Full changelog

hyperkube, kube-proxy, pod

UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
: OCPBUGS-54807: skip tests on platform type External #2268
OCPBUGS-53015: Update to Kubernetes v1.31.7 #2248
OCPBUGS-50929: Update to Kubernetes v1.31.6 #2208
Full changelog

hypershift

OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
OCPBUGS-55146: Use 135 for terminationGracePeriodSeconds for v2 KAS #6057
OCPBUGS-54698: Add missing servicemonitors and prometheusrules permissions for non-OVN #6000
OCPBUGS-53404: Set shutdown watch termination grace period on kube-apiserver #5874
OCPBUGS-51810: Fix golang crypto dependency go.mod replacement #5992
OCPBUGS-54814: [release-4.18] add feature set aware feature gates to HO and CPO #6014
OCPBUGS-54624: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5980
OCPBUGS-54630: Sync RBAC for attaching volumes on VM level #5988
OCPBUGS-54627: Use system trust bundle in CPO IDP https client #5981
ARO-15695, OCPBUGS-54625: backport capabilities api #5964
OCPBUGS-54411: Backport PR 5876 to release-4.18 #5936
OCPBUGS-54498: Support hypershift-operator scoping for secretJanitor #5961
OCPBUGS-54609: [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable #5950
NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 #5963
OCPBUGS-53905: bump golang-jwt v4 and v5 #5905
ART-11792: update go mod dependency for konflux #5919
OCPBUGS-51739, OCPBUGS-51810: Bump dependencies to OCP fork in backports #5898
OCPBUGS-53321: Handle multiple mirror entries for source #5890
OCPBUGS-51239: fix(deps): bump go-jose #5858
OCPBUGS-52982: Fix audit-logs container to properly handle SIGTERM #5774
OCPBUGS-52863: stop using dev mode for loggers #5811
OCPBUGS-52878: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5780
OCPBUGS-52516: Make managed-trust-bundle optional #5783
OCPBUGS-52417: [release-4.18] refactor aws identity health check into new controller #5770
OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
OCPBUGS-50696: add region to AWS creds passed to operators managed by CPO #5629
OCPBUGS-51050: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5667
NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 #5640
NO-JIRA: Update dependency mkdocs to v1.6.1 #5638
OCPBUGS-50550: Honor proxy vars in the util insecure http client #5598
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-53913: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #82
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-50565: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 #100
Full changelog

ibmcloud-machine-controllers

OCPBUGS-52872: IBMCloud: MAPI replacing unhealthy CP nodes #62
Full changelog

insights-operator

OCPBUGS-51163: Fix bad IPv6 address (#1074) #1074
OCPBUGS-48790: Add a liveness probe to the extractor container (#1068) #1068
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
METAL-1302: Do not use openstack packages #646
OCPBUGS-52290: Fix runlogwatch script #642
OCPBUGS-50641: Install python3-inotify pkg explicitly #639
Full changelog

ironic-agent

OCPBUGS-55364: Delay determining the hostname to put into ignition #183
METAL-1302: Do not use openstack packages #178
Full changelog

kubevirt-csi-driver

OCPBUGS-54630: Ensure volume stays attached through reboots #55
Full changelog

machine-api-operator

OCPBUGS-52494, OCPBUGS-52496: Updates GCP credentials request #1341
OCPBUGS-52567: add image/read permissions #1342
OCPBUGS-51263: Drop oVirt support #1333
Full changelog

machine-config-operator

OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Update cluster operator’s status condition message #4993
OCPBUGS-53278: In OCL. Cannot install extensions #4945
OCPBUGS-54817: Make mtu-migration run after wait-for-primary-ip #4979
OKD-239: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4955
OCPBUGS-54462: OSUpdateStarted event should only be emitted on actual OS updates #4967
OCPBUGS-51132: [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4869
OCPBUGS-52949: Add ipsec connect wait service #4926
OCPBUGS-53306: Fixing typos for MachineConfigNode #4927
OCPNODE-2276: Set Upgradeable=False when cluster is on cgroup v1 #4921
OCPBUGS-53111: daemon: ensure ostree-finalize-staged is started before rebooting #4918
OCPBUGS-53110: Update ObservedGeneration in KubeletConfig #4917
[release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built #4859
OCPBUGS-50865: Make resolv-prepender env file optional #4855
OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
OCPBUGS-48341: configure-ovs workaround for ovs-if-br-ex bug #4883
OCPBUGS-51015: Enforce VIPs to be collocated at the same host #4865
OCPBUGS-51194: Update cluster-reader ClusterRole permissions #4874
OCPBUGS-50633: Update format verbs for alert logs #4849
OCPBUGS-49774: Correct MachineConfig documentation on sysstat extension support #4829
Full changelog

machine-os-images

OCPBUGS-53141: Change rhcos release browser url #55
OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
OCPBUGS-48305: Use metrics for readiness/liveness probes #76
Full changelog

monitoring-plugin

OU-724: remove deleted image #376
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47470: adds getpodcontext (backport 4.18) #259
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55270: Fix whereabouts-reconciler no namespace error #362
Full changelog

networking-console-plugin

CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Add translations scripts #234
CNV-56436: show ipam lifecycle correctly with new spec #220
CNV-56236: fix cudn modal form titles #219
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
OCPBUGS-47268: fixing CVE-2024-45338 #91
Full changelog

oauth-proxy

OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
Full changelog

oc-mirror

OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
OCPBUGS-51217: Fix CVE-2025-27144 (#1108) #1108
OCPBUGS-54727: Use tag 0.0.3+2 of catalog-filter (#1128) #1128
OCPBUGS-52978: delete: fix typo in –help output (#1121) #1121
OCPBUGS-52960: v2: fix setting version during build (#1118) #1118
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1114) #1114
OCPBUGS-52588: fix: error when no related image was found (#1106) #1106
CLID-325: adds cpu and memory profiling (#1103) #1103
fixes CVE-2024-0406 (#1101) #1101
v2: disable spinners when not running in a tty (#1082) #1082
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1091) #1091
OCPBUGS-49991: fixes bundle related images being skipped (#1074) #1074
v2/cli: always stop local registry and close registry.log (#1090) #1090
OCPBUGS-44103: bump oc fork version (#1089) #1089
OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1079) #1079
OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1075) #1075
Full changelog

olm-catalogd

UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
Full changelog

olm-operator-controller

UPSTREAM: <carry>: fix crdupgradesafety diff when items schema differ (#1863) #1863
Full changelog

openshift-apiserver

OCPBUGS-52312: Skip blocked registry check for registries with mirrors #498
Full changelog

openshift-controller-manager

OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
OCPBUGS-54304: Intermittent authentication issues when accessing OpenShift registry #369
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
OCPBUGS-53108: Ensure that PSA label is latest instead of pinning versions #983
OCPBUGS-53040: add missing pod disruption reasons to isPodDead #981
OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
Full changelog

operator-marketplace

OCPBUGS-53149: Ensure that PSA label is latest instead of pinning versions #601
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
OCPBUGS-54671: EIP no reroute: allow multiple entries for pod to pod and pod to join #2510
OCPBUGS-54187: Update OVN to FDP25.A.1 24.09.2-41. #2495
OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
Full changelog

powervs-machine-controllers

OCPBUGS-54243: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 #111
Full changelog

prometheus

OCPBUGS-54940: Scraping: Bump cache iteration after error to avoid false duplicate detection. #247
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-52565: Bump openshift/prometheus-operator to v0.78.2 #327
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

service-ca-operator

OCPBUGS-44952: [release-4.18] Bump go to 1.22.0 #253
Full changelog

tests

OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Revert “OCPBUGS-55277: backport 4.18” #29720
OCPBUGS-55277: backport 4.18 #29645
OCPBUGS-55110: Backport MetricsCollectionProfiles patches to 4.18 #29561
OCPBUGS-54807: support provider type external #29666
OCPBUGS-54725: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29657
OCPBUGS-53015: bump(k8s): update k8s.io/* dependencies to v1.31.7 #29634
OCPBUGS-52496: use non-fake boot image for patch #29584
OCPBUGS-52579: Use payload pullspec for image info test #29587
OCPBUGS-51295: Rely on unstructured for update status instead of type conversion #29564
OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
OCPBUGS-48389: move initialization of OC to test instead of package level #29472
OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
OCPBUGS-50930: managed services: add known image check for gcp #29547
OCPBUGS-48474: Replace RunHostCmd with Exec function to censor bearer token being exposed #29377
OCPBUGS-49687: Add Readiness Probe to Router Status Tests #29513
Full changelog

thanos

OCPBUGS-52945: Update Go version in go.mod to 1.22.0 #159
Full changelog

vsphere-csi-driver-operator

OCPBUGS-54701: add manifest-topology.yaml for topology related feature and test #303
OCPBUGS-50638: fix panic when vcenter address is incorrect #293
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github