4.18.16

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.16-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.23, 4.17.25, 4.17.26, 4.17.28, 4.17.29, 4.18.10, 4.18.12, 4.18.4, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

4.19.0-rc.4 (changes) - F S S F S S F

Loading changelog, this may take a while ...

Changes from 4.18.2

Created: 2025-05-29 14:10:55 +0000 UTC

Image Digest: sha256:0dac222584991f89a123d85e8c3055f0056e5876fc209b8d4bea7a59e7504d59

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.6 to 1.31.8
Kubernetes Tests upgraded from 1.31.1 to 1.31.8
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202502250906-0 to 418.94.202505271651-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 3f6d1d8b sha256:05e0292f71325147d5b9009f660b1b533a00f757d57251e26cfa5527429dc79b
apiserver-network-proxy git 0e116160 sha256:fa73b75d8ee0f432781903756b987599464f25bc75f4c39ea538c00229596578
aws-cloud-controller-manager git c3951906 sha256:abd44bf7153578b8fd52ff8c2150b3a6f8d729e072d7cdebd947b2b01fca7515
aws-ebs-csi-driver git b51cd6b8 sha256:1d0a1e72ba2c204cab2c4937a07d0b1ac387eb84ced03129250ee2b1035f0485
aws-kms-encryption-provider git 088dcaf7 sha256:31865d831511aead0aaa5f7353ea98a330d9f835586f8f6583dca96ff63fd9c3
aws-machine-controllers git 53274f11 sha256:7ef1422f37870225e422f881c6b684643bd56fc004f68aff8d45db5365c253ce
azure-cloud-controller-manager git 9c24d768 sha256:b3f9b6f6197e14eca86294d8083bfab99a9149ce246bd1a478f858567a7b0f89
azure-cloud-node-manager git 9c24d768 sha256:1065d9de71c2fa417a9e9355fdceb67ae48a02ad4b3894f9749e7b858b68a9ea
azure-cluster-api-controllers git 987615c8 sha256:6b74c2b6621d3385838cf410ee8a3a76fab83d0e30c09793a48ab44614abe10e
azure-disk-csi-driver git 6cced666 sha256:341cf7ac74aeb1408f18a36cab273f82613b1b549169a87642dfbe4c9cf61fbd
azure-file-csi-driver git 4b34592e sha256:60752e6152609541fe41b4c4a1efed4be92fd7407c1b3616946a7f6cae9ce7ba
baremetal-cluster-api-controllers git 7ec03e94 sha256:85a9b63e48a9c48acade36f8ad1b61574d25c9547936ddfeb0860219acfa2444
baremetal-machine-controllers git 1ede6c3f sha256:45620cd46ceaf2c82b186262807804c13360109d6c0eb384baa69e86e81597ef
baremetal-runtimecfg git 9e2015c3 sha256:5fc52373a523667a90f1aa5ce548956ebe53bbd3aafa7a88d67d604dea784cf9
cluster-autoscaler-operator git 474ad65c sha256:475b094de78a84ae955401eef6f6bc4fb0427df0e4efb57f1f6d8b76a12680c7
cluster-bootstrap git d1e01954 sha256:b5a5c9a2d7ed4debe168b169966ae6d5996137714a36ecdc00d0c72c98c66499
cluster-capi-controllers git d05a6def sha256:c762f6de1af69c0fd35aea7041ac91c077874c63af4cb4989b59ffaf57d6b9f1
cluster-cloud-controller-manager-operator git 33856906 sha256:cf386c4285d2c3e06c8948da4ef15fa373fffc08b7c58b91d2a71c921139e9c4
cluster-config-operator git 85cb4072 sha256:832f11b904b38822c8aeebcf961ddd2d70c89e91f596fbe1b023ee8ac8fb14da
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:05e6be3d35542eaee854d90981a8efe819312b05edd7b84770956d434b4b6bc5
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:c84be6c962b32dea69ef1b7cce0d4825c9018c60517dd64b54751e894096a879
cluster-kube-cluster-api-operator git 33a1141e sha256:5c5fd8b67d02e3d9bbe877f486db96bfab13a09c6e56af4711c0d4c2d214b057
cluster-kube-controller-manager-operator git 0fac9aa9 sha256:c30cde774cd4baa02f3799d7361954f8faa7b0a1cb30d71e3e374c9f3bdef624
cluster-kube-scheduler-operator git 6182930d sha256:bb8765cef23ca4b57014119db091bf795ff845f9ae24e22223440f17208ff2c9
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:33000a7a0f6932f0a6470963b3252fb782388728608d7bbc3cee0da3e89ac097
cluster-machine-approver git 01d5fbbe sha256:fa57b6b6b48ed80a76d31072a6a4352506d9b6ee8c63f27f6788e6ad4565bf5a
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:4226a66b9ad0c5da5bdacd497636a0268fb16737edccf604be8800d1184779b7
cluster-openshift-controller-manager-operator git f1711cf3 sha256:7ba8ca606b4523a55a140f48343b7736d677e87b1244a78a0c8e7cdb7cfe1c8c
cluster-policy-controller git 5fd85252 sha256:937c53efec4b7078eb6d399f652baaed421c276cd1cd09f2b2430cc55a028841
configmap-reloader git cde5e473 sha256:df7be49488d6465f3eb3f7ef5a52a25dc3583b761b5f07f75829068c56fc4f0c
coredns git cb1abfae sha256:335c394763e4d0874aa9c6cf60abac57ba1189f3a25b12261436c7e9fba8c9bd
csi-driver-nfs git 32e77590 sha256:fe38d1f44dd384355322f2068ff56fc9920d586c8f434c67d91049142ade318b
csi-external-attacher git 39b37c06 sha256:dc18921ff1d95232196e34e96eb771a44ec909b14bf61c9aa3c04d5d2f893546
csi-external-provisioner git 376f0ea0 sha256:5c5ad5f5de923052a9a41431787c9609f03a57311b909df02c1575f4585431ec
csi-external-resizer git cca3837a sha256:0a33e1992195a009605d410968d6aadb004890f8b70a0dc2b899ce0fded5eac2
csi-external-snapshotter git 838d2484 sha256:49d5805835583a7184e827378fc3fe115d57548b9a9897e234fd7e41e9c2fba9
csi-livenessprobe git 3a977844 sha256:2d5c6da1d964c1b577762f542147e266603c6fcd0f6c0cedccdba0333573ebf8
csi-node-driver-registrar git c21f5d02 sha256:29acccecb5bce099bf3a23db70c7a8a0d63e3ad11b6ccf96a4f83e90936b265f
csi-snapshot-controller git 838d2484 sha256:5f2ac55e9c2012fc9a5037464e8ef242ac599de4fd2fab1926f51a11e4b9171c
csi-snapshot-validation-webhook git 838d2484 sha256:1fec8ef641d52c3f5e289a9e1f4fce8a662dbe509bc0ce7cf2e8127a10e7cf94
docker-registry git e36d3655 sha256:c70108534a52d1b553f4331034a92774b856d38a0b7240be82445a43161b409b
driver-toolkit git 2e139edc sha256:7d0234b52e232a849c2081aaa8be60c44a4ac3929b6156b1fcfbbc104f7a5881
egress-router-cni git 3193a756 sha256:7df0591840d11fab900284faed28ae111c811b3eeefa47d4defdfdf65fd988a9
gcp-cloud-controller-manager git 6ea23561 sha256:7bf1c5d3ed32fcefc2311d70d7757e0f123471e5ca83e2b52c3ed5f27a3ebcb6
gcp-cluster-api-controllers git af54f528 sha256:1d36ccefbb1880647e7debcf78c8a8cca050b7cff8c2133d90bdd220b0c49c56
gcp-pd-csi-driver-operator git 7cb8b38c sha256:65a97581ec0a5ac47285b6306ceb169efa174512d35df89783cd9909c0b55ae1
gcp-workload-identity-federation-webhook git f0a670c7 sha256:bed6a9768a772aff616b821c334def2740591bc5d0e8f104bbf0a480800216d4
ibm-cloud-controller-manager git a33026b1 sha256:eb5b81b2104fca847709336f740a2e8a325feb906680a471750f60807200c076
ibm-vpc-block-csi-driver-operator git feae2605 sha256:273bf7f764262afb5bf7fd85bb3f471c8369ad1373383a5f13039e7af25eeba0
ibmcloud-cluster-api-controllers git 2ba764f9 sha256:5b7e796625db6ac8d4af3020729ef29205e5678163ffb696c82575eb3e222e7b
insights-runtime-exporter git 7149f2d5 sha256:77cc53899fdef27b469633eed3f96a8f46cfe045db226152b8a479389ec65ddb
insights-runtime-extractor git 7149f2d5 sha256:05c85cd3af97f68e393c35928d312b48a87f61bc6525d734b825b19faa99bdc2
ironic-machine-os-downloader git 04c22eee sha256:75228b82831d9a233b89e557d180d8091e8a1a1ee482dfc5a4390a221785003f
ironic-static-ip-manager git cfbae04f sha256:f0d5907e2d00141e7221fb04a444cd3f95422a19bc1fd3987ab3fd8d6a5570b7
keepalived-ipfailover git 716eb0ef sha256:4ded3fa2100f6c18990c01b383acfe6909d131a12291eb3094c879da31b82345
kube-metrics-server git 962ccca2 sha256:ab413795aeeff284ddf09100f2e54b57f4a2ae8c926debd38859e6e61a479422
kube-rbac-proxy git 526498ab sha256:61bcf4eb286aed402e5db1c10efbce58816db1f67ef7c0464d201a9cb001a24e
kube-state-metrics git cb5a9296 sha256:b06f3d2f1fab8ecd07f93bfc1b65fd0140b2d0657d60acc80e881b3a2b99e08e
kube-storage-version-migrator git 50d17147 sha256:d387dcf9662946f220aa511e0fecd0c74c9fd88bb316d5be0e154cd938590b72
kubevirt-cloud-controller-manager git 3f4542ec sha256:7370936065655cebda2ca68d33684344c9c8d7d06e08725cd9e8276b37b5c500
libvirt-machine-controllers git a336f0b5 sha256:6942ba1d657d833d4cf3308eb3b8559110e055942f1dffa32ac2a1432d4d6297
machine-image-customization-controller git e905646a sha256:9253ee92e7a83158b248b27ad2010d072703727ce1d7645c4730c01303e057e0
multus-admission-controller git 1b2791b7 sha256:2d49f21dd2e1896ccb89f016732287d6cbe366fb533754b701b99b0f4a6740a6
multus-networkpolicy git 82c77316 sha256:53b4557de5180e287335c73ba46f8b00a95127d47e36b4b7abafa102e8808bb3
multus-route-override-cni git 391c1b03 sha256:e1d5d18f88ed189ad8a8cb1722008610656400ac935c8e6be4ef278e8869d508
must-gather git c864494e sha256:6db79d3394f5a814607de98c51e25216eb755bb3322b44eadc493297d7143fdd
network-interface-bond-cni git 9506a1ff sha256:352982390a97c1529a576fa525ff77a5d841e5a487eb814dc0da8c5c35205cdc
network-metrics-daemon git e4c214c3 sha256:f9f238ebb277c327d77c8875c712702145f510a867b873dc59a07e686d5fcad4
network-tools git f76635f2 sha256:e574855560df289ef3164cffc449ef8dfe905b8e6ad7b5566e079c3a46ebaed1
nutanix-cloud-controller-manager git d9fe8f38 sha256:2a5c415485eb0bb69754ad49fbcb412cc4027f9794edd3a1d74632c86b79c280
oauth-apiserver git 2575ff41 sha256:3f1d87bdea1fe16781d205cea454a6fa45b20b644f5839b82caca0d2a3f532b9
oauth-server git d3527783 sha256:e8adaf8180749bcf5a295ea81c07028084d94de5df97c26b21587ee3a42a7bda
openshift-state-metrics git f5b14702 sha256:de81738a3092280b16df8f414b08d1e361d2b888cf87b85553b38480ab46f364
openstack-cluster-api-controllers git b0f0dc4e sha256:8973058724c7478c7a46437829285f01b25fcac09dd09c391fcfb47719c706d1
openstack-machine-api-provider git d914e77e sha256:681890e55af1e6038ecde2865c6030dd44879505f0d1ac5e5a4f2ee6a28b023d
ovirt-csi-driver git 1db726a9 sha256:9dcd45b57c735cfe04bbba1f75db3106c274552173534b9f2bdf93c4e27016d4
ovirt-csi-driver-operator git 0feae256 sha256:cf77528e4b78c4c3dc86ab13d8254cbaa81ed55761059305a5156871249ab94d
powervs-block-csi-driver git d36aea34 sha256:afd4cc0342927478df2f5f90244b3894659e615b5ba83e6915cb61d3256ad4bf
powervs-block-csi-driver-operator git 01fc505a sha256:d3db7daefcaed7c0f10117a0dbe85d9b9ca1dd573688f0b97d2dce4f30a67c13
powervs-cloud-controller-manager git 17ae6fba sha256:01f3130bf53c8d0b512f2780489b21f2e0d095c6190b92eb70f22137cbb6441d
prom-label-proxy git d9fe2d8e sha256:2c2dbd7c4200ceac113e1556e425ae885b349240f4583090622384a2573b23ac
prometheus-alertmanager git e513c918 sha256:0b2ed01b04076cb6dbf7aada26e1a035aabc0779e653570b4bafbf891b63c055
prometheus-node-exporter git b7efb8c0 sha256:8e6e8c5fc525d8086d46066eaf3b73f5b4294aa5b27663efa720c5f2b5bd4860
rhel-coreos sha256:6d80575484a36c877afb9ba79597a0d08de4e046b548215a28bfd143658d723f
rhel-coreos-extensions sha256:abc5467ae16d478391c4da226e6b8eaf63f4fe633006e09fc1b0315534804b5f
telemeter git 700802fe sha256:d143a05ab50e1b464ac4de4d58fc9a87c6c04bcf6621d31ea92f07dbd589f544
vsphere-cloud-controller-manager git c414d1f5 sha256:c44d537dd9089e0bced9515cad07ed87eb8c149fa85def123458bd924c02e65f
vsphere-cluster-api-controllers git d664fe2b sha256:a0bf4e9eb70f2b1763e1d179127cae799a3a74efe34cf8aea24e71d4d149e0ed
vsphere-csi-driver git cfcad01d sha256:a6edb57d467f8bc21c290753feb53dc8a40ac9271a60efe4206cd3b957693217
vsphere-csi-driver-syncer git cfcad01d sha256:053aadcdbbe7bdb1c55480dba75bf425c9900916c2432d43d0c73e1fdbb46c33
vsphere-problem-detector git 7cf7fe24 sha256:70e15982a24713489bbb0e1e7438bed1c2e33fa65aed8bc78734b5d46769c133

agent-installer-api-server

OCPBUGS-54378: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) #7483
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) #7456
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53721: Bump jwt to 4.5.2 in release-4.18 (#1085) #1085
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#958) #958
MGMT-20227: Skip Motherboard serial if set to “-” (#955) (#957) #955
OCPBUGS-54544: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) #965
OCPBUGS-53713: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) #963
Full changelog

aws-cluster-api-controllers

OCPBUGS-53729: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 #543
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-54383: Disable remove-not-ready-taint for azure disk csi driver #374
Full changelog

aws-pod-identity-webhook

OCPBUGS-51231: github.com/go-jose/go-jose/v4 v4.0.5 #201
Full changelog

azure-kms-encryption-provider

OCPBUGS-53497: bump golang-jwt v4 #11
Full changelog

azure-machine-controllers

OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
OCPBUGS-54355: Re-reconcile machine on NIC provisioning failure #135
Full changelog

azure-workload-identity-webhook

OCPBUGS-53801: github.com/golang-jwt/jwt/v4 v4.5.2 #31
OCPBUGS-51233: github.com/go-jose/go-jose/v4 v4.0.5 #27
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
OCPBUGS-54947: Fix Load balancer IP setup #9659
OCPBUGS-45564: Align vSphere UPI haproxy config with IPI #9276
OCPBUGS-53453: IBMCloud: Move to IBM TF openshift fork #9592
OCPBUGS-53422: Avoid adding duplicate entries to NO_PROXY #9588
OCPBUGS-52515: Remove error logging when determining image arch #9539
OCPBUGS-52429: Remove tmp directory used for agent pxe files #9536
OCPBUGS-51211: Fixes panic during GCP tags fetch due to unstable network #9513
OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
Full changelog

baremetal-operator

OCPBUGS-56431: Redfish: correctly handle missing system ID #417
OCPBUGS-53324: BMO can expose any secret via BMCEventSubscription CRD #405
OCPBUGS-45250: Remove dataImage finalizer if BMH is missing #389
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
Full changelog

cloud-credential-operator

OCPBUGS-53825: update github.com/golang-jwt/jwt #837
OCPBUGS-53345: github.com/golang/glog v1.2.4 #835
OCPBUGS-51550: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #822
OCPBUGS-51237: github.com/go-jose/go-jose/v4 v4.0.5 #824
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-authentication-operator

OCPBUGS-54569: Avoid duplicate OAuth client creation #764
Full changelog

cluster-autoscaler

OCPBUGS-53241: improve replica counting and decrease target size behavior #346
Full changelog

cluster-baremetal-operator

OCPBUGS-53080: Add missing relatedObjects #467
Full changelog

cluster-capi-operator

OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-config-api

Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
OCPBUGS-54784: [release-4.18] Bump openshift/controller-tools to latest commit #2267
OCPBUGS-51295, OCPBUGS-51380: Reject new NodeStatus with revision set #2215
OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
Full changelog

cluster-dns-operator

OCPBUGS-52514: [release-4.18] Add runbook_url for CoreDNSErrorsHigh #429
Full changelog

cluster-etcd-operator

OCPBUGS-56110: adjust alerts according to platform #1424
OCPBUGS-53513: fix CVE-2025-30204 #1413
OCPBUGS-55066: increase etcdGRPCRequestsSlow duration #1408
Full changelog

cluster-image-registry-operator

OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-ingress-operator

NE-1951: Pre-upgrade Admin Gate for Gateway API CRD Management Succession #1196
NE-1952: Pre-upgrade check for Gateway API CRD Management Succession #1193
OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
OCPBUGS-49898: bindata/alerts/slo: improve burnrate calculation #1808
OCPBUGS-53066: Bump library-go #1828
Full changelog

cluster-monitoring-operator

OCPBUGS-55005: chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and set CMO to Upgradeable=false if errors are found #2592
OCPBUGS-53024: Fix opentelemetry metrics to use regexp on label match #2578
OCPBUGS-52565: Bump prometheus-operator to 0.78.2 #2576
OCPBUGS-50706: Add incidents metric to telemetry #2570
Full changelog

cluster-network-operator

OCPBUGS-54717: Add IPv6 NGINX configuration #2683
OCPBUGS-50582, OCPBUGS-52949: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2644
OCPBUGS-52837: frr-k8s: rename validatingwebhook name #2661
OCPBUGS-48305: frr-k8s: align manifests with operator #2657
OCPBUGS-41178: Updating cluster-network-operator-container image to be consistent with ART for 4.18 #2491
Full changelog

cluster-node-tuning-operator

OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) (#1306) #1303
machineconfig: add support for various hugepage sizes. (#1299) #1299
OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
e2e: common way to fetch poolName (#1255) (#1300) #1255
Full changelog

cluster-olm-operator

OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
OCPBUGS-54258: Adding mutex to func createSamples on handler.go #615
OCPBUGS-54351: add rhdmalone to owners #617
Full changelog

cluster-storage-operator

OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #72
Full changelog

cluster-version-operator

OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

console

OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
OCPBUGS-54269: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14905
OCPBUGS-52372: VolumeSnapshots are not displayed in OpenShift Web Console #14833
OCPBUGS-52406: Retain original path when detecting perspective #14834
OCPBUGS-52371: Update the monitoring topic used by the console team #14832
OCPBUGS-52490: enable clicking outside NodeLogs Selects to close them #14843
OCPBUGS-50501: Updating cypress config to have video enabled for the CI results #14831
OCPBUGS-52511: Remove logoutOpenShift method call #14845
OCPBUGS-50609: update the Deployment pod on change in imageStream #14757
OCPBUGS-50648: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14761
OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
OCPBUGS-51180: Linkify OLM operator uninstall message #14789
OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
Full changelog

console-operator

OCPBUGS-52294: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #966
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-55354: Fix dhcp #186
OCPBUGS-55346: Check error returned by ipv6 SettleAddresses #185
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43430: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 #312
Full changelog

docker-builder

OCPBUGS-48071: Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility #464
OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
Full changelog

etcd

OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue #312
ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
Full changelog

gcp-machine-controllers

OCPBUGS-52495: OCPBUGS-52494: Disable shielded VMs for non-UEFI disks #112
Full changelog

gcp-pd-csi-driver

OCPBUGS-44769: Fix RWX mode for hyperdisks #74
Full changelog

haproxy-router

OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
: OCPBUGS-54807: skip tests on platform type External #2268
OCPBUGS-53015: Update to Kubernetes v1.31.7 #2248
Full changelog

hypershift

OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
OCPBUGS-55146: Use 135 for terminationGracePeriodSeconds for v2 KAS #6057
OCPBUGS-54698: Add missing servicemonitors and prometheusrules permissions for non-OVN #6000
OCPBUGS-53404: Set shutdown watch termination grace period on kube-apiserver #5874
OCPBUGS-51810: Fix golang crypto dependency go.mod replacement #5992
OCPBUGS-54814: [release-4.18] add feature set aware feature gates to HO and CPO #6014
OCPBUGS-54624: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5980
OCPBUGS-54630: Sync RBAC for attaching volumes on VM level #5988
OCPBUGS-54627: Use system trust bundle in CPO IDP https client #5981
ARO-15695, OCPBUGS-54625: backport capabilities api #5964
OCPBUGS-54411: Backport PR 5876 to release-4.18 #5936
OCPBUGS-54498: Support hypershift-operator scoping for secretJanitor #5961
OCPBUGS-54609: [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable #5950
NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 #5963
OCPBUGS-53905: bump golang-jwt v4 and v5 #5905
ART-11792: update go mod dependency for konflux #5919
OCPBUGS-51739, OCPBUGS-51810: Bump dependencies to OCP fork in backports #5898
OCPBUGS-53321: Handle multiple mirror entries for source #5890
OCPBUGS-51239: fix(deps): bump go-jose #5858
OCPBUGS-52982: Fix audit-logs container to properly handle SIGTERM #5774
OCPBUGS-52863: stop using dev mode for loggers #5811
OCPBUGS-52878: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5780
OCPBUGS-52516: Make managed-trust-bundle optional #5783
OCPBUGS-52417: [release-4.18] refactor aws identity health check into new controller #5770
OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-53913: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #82
Full changelog

ibmcloud-machine-controllers

OCPBUGS-52872: IBMCloud: MAPI replacing unhealthy CP nodes #62
Full changelog

insights-operator

OCPBUGS-51163: Fix bad IPv6 address (#1074) #1074
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
METAL-1302: Do not use openstack packages #646
OCPBUGS-52290: Fix runlogwatch script #642
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
OCPBUGS-55364: Delay determining the hostname to put into ignition #183
METAL-1302: Do not use openstack packages #178
Full changelog

kubevirt-csi-driver

OCPBUGS-54630: Ensure volume stays attached through reboots #55
Full changelog

machine-api-operator

OCPBUGS-52494, OCPBUGS-52496: Updates GCP credentials request #1341
OCPBUGS-52567: add image/read permissions #1342
OCPBUGS-51263: Drop oVirt support #1333
Full changelog

machine-config-operator

Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Update cluster operator’s status condition message #4993
OCPBUGS-53278: In OCL. Cannot install extensions #4945
OCPBUGS-54817: Make mtu-migration run after wait-for-primary-ip #4979
OKD-239: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4955
OCPBUGS-54462: OSUpdateStarted event should only be emitted on actual OS updates #4967
OCPBUGS-51132: [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4869
OCPBUGS-52949: Add ipsec connect wait service #4926
OCPBUGS-53306: Fixing typos for MachineConfigNode #4927
OCPNODE-2276: Set Upgradeable=False when cluster is on cgroup v1 #4921
OCPBUGS-53111: daemon: ensure ostree-finalize-staged is started before rebooting #4918
OCPBUGS-53110: Update ObservedGeneration in KubeletConfig #4917
[release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built #4859
OCPBUGS-50865: Make resolv-prepender env file optional #4855
OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
OCPBUGS-48341: configure-ovs workaround for ovs-if-br-ex bug #4883
OCPBUGS-51015: Enforce VIPs to be collocated at the same host #4865
OCPBUGS-51194: Update cluster-reader ClusterRole permissions #4874
Full changelog

machine-os-images

OCPBUGS-53141: Change rhcos release browser url #55
OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
OCPBUGS-48305: Use metrics for readiness/liveness probes #76
Full changelog

monitoring-plugin

OU-724: remove deleted image #376
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47470: adds getpodcontext (backport 4.18) #259
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-55270: Fix whereabouts-reconciler no namespace error #362
Full changelog

networking-console-plugin

CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Add translations scripts #234
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
OCPBUGS-47268: fixing CVE-2024-45338 #91
Full changelog

oauth-proxy

OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
Full changelog

oc-mirror

OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
OCPBUGS-51217: Fix CVE-2025-27144 (#1108) #1108
OCPBUGS-54727: Use tag 0.0.3+2 of catalog-filter (#1128) #1128
OCPBUGS-52978: delete: fix typo in –help output (#1121) #1121
OCPBUGS-52960: v2: fix setting version during build (#1118) #1118
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1114) #1114
OCPBUGS-52588: fix: error when no related image was found (#1106) #1106
CLID-325: adds cpu and memory profiling (#1103) #1103
fixes CVE-2024-0406 (#1101) #1101
v2: disable spinners when not running in a tty (#1082) #1082
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
Full changelog

olm-catalogd

UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
Full changelog

olm-operator-controller

UPSTREAM: <carry>: fix crdupgradesafety diff when items schema differ (#1863) #1863
Full changelog

openshift-apiserver

OCPBUGS-52312: Skip blocked registry check for registries with mirrors #498
Full changelog

openshift-controller-manager

OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
OCPBUGS-54304: Intermittent authentication issues when accessing OpenShift registry #369
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
OCPBUGS-53108: Ensure that PSA label is latest instead of pinning versions #983
OCPBUGS-53040: add missing pod disruption reasons to isPodDead #981
OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
Full changelog

operator-marketplace

OCPBUGS-53149: Ensure that PSA label is latest instead of pinning versions #601
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
OCPBUGS-54671: EIP no reroute: allow multiple entries for pod to pod and pod to join #2510
OCPBUGS-54187: Update OVN to FDP25.A.1 24.09.2-41. #2495
OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
Full changelog

powervs-machine-controllers

OCPBUGS-54243: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 #111
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
OCPBUGS-54940: Scraping: Bump cache iteration after error to avoid false duplicate detection. #247
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-52565: Bump openshift/prometheus-operator to v0.78.2 #327
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

service-ca-operator

OCPBUGS-44952: [release-4.18] Bump go to 1.22.0 #253
Full changelog

tests

OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Revert “OCPBUGS-55277: backport 4.18” #29720
OCPBUGS-55277: backport 4.18 #29645
OCPBUGS-55110: Backport MetricsCollectionProfiles patches to 4.18 #29561
OCPBUGS-54807: support provider type external #29666
OCPBUGS-54725: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29657
OCPBUGS-53015: bump(k8s): update k8s.io/* dependencies to v1.31.7 #29634
OCPBUGS-52496: use non-fake boot image for patch #29584
OCPBUGS-52579: Use payload pullspec for image info test #29587
OCPBUGS-51295: Rely on unstructured for update status instead of type conversion #29564
OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
OCPBUGS-48389: move initialization of OC to test instead of package level #29472
OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
OCPBUGS-50930: managed services: add known image check for gcp #29547
Full changelog

thanos

OCPBUGS-52945: Update Go version in go.mod to 1.22.0 #159
Full changelog

vsphere-csi-driver-operator

OCPBUGS-54701: add manifest-topology.yaml for topology related feature and test #303
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github