4.18.20

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.20-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Failed (3 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Pending (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Pending (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.18.10, 4.18.12, 4.18.13, 4.18.15, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

4.19.4 (changes) - Failed

Loading changelog, this may take a while ...

Changes from 4.18.1

Created: 2025-07-11 09:05:04 +0000 UTC

Image Digest: sha256:5e06105a6ba80d04eb5d8d3f9a672fb743ce4710876d99a375c2d9f7b7eaa783

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.5 to 1.31.10
Kubernetes Tests upgraded from 1.31.1 to 1.31.9
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202502100215-0 to 418.94.202507091512-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

aws-cloud-controller-manager git c3951906 sha256:3cb7ffffc4e9f85cbfe5417833bd1a7d9eab6090c3313be86b6c604eb28df22b
aws-ebs-csi-driver git b51cd6b8 sha256:956d15db419434edbf857601dc19e958ad459604e867159e8b028b7d7de126eb
aws-kms-encryption-provider git 088dcaf7 sha256:a4e97661fc95e862f4caca8875e52254e0cc163dbe3abe2f513b3903faab6594
aws-machine-controllers git 53274f11 sha256:b6113958f2eb93eadc6f4693b6b77431628c84cf01edc2e63498ae90d56b8425
azure-cloud-controller-manager git 9c24d768 sha256:d10558e2e9c14837c211cc4b18c4cd1421d79155f22df4a659809ad214993d7c
azure-cloud-node-manager git 9c24d768 sha256:42a43a06e7e6693e57e69b4226038f4ddd247498379bb8ab23ae493c4d1cbe44
azure-cluster-api-controllers git 987615c8 sha256:15c5d867494d717d57a864a50fae406d9223c52ed7e9921c9b356f3c2d763708
azure-disk-csi-driver git 6cced666 sha256:6b671ba54bee4729e5d9ee11b5d8b9a97498badc266b2741b26df8211e3cfb95
azure-file-csi-driver git 4b34592e sha256:b39b00f124fb956f43adf4115fd41fe43f07cf7319f879f6c5e3ba75bb28f0fa
baremetal-cluster-api-controllers git 7ec03e94 sha256:4cf0151647275618225c2a131ac54856500f9311dbcb11eb648b6a636d06b904
baremetal-machine-controllers git 1ede6c3f sha256:be2f0d7370381e1775d1796349374d97f87cfa6fe3183a04b504870287aeae7d
baremetal-runtimecfg git 9e2015c3 sha256:26385abcd49cada800f1e4297c1ac4d06b5e75d6b7cd20d1c51f52a9e4a78fde
cluster-autoscaler-operator git 474ad65c sha256:5011d721c43e09c4cfe9937df1ecbbba0ed341910898199708cd2008f36a9b21
cluster-bootstrap git d1e01954 sha256:c7becf5c1b0bcb21f4f56aa277b50885c5e2e657b6fb75d6209617cbc17a190b
cluster-cloud-controller-manager-operator git 33856906 sha256:c156be9bcf2f601ec53865480d738d287a113cd05c1a7c89587711a09774dfd5
cluster-config-operator git 85cb4072 sha256:29271bab5e4b6aa6f2caceb6ff104254ff65c4635291783613b639c6b9961994
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:78faf0dd6a5c3700501b3bcf1dd02203b57181c4e7ef2901a67df751d9d50e94
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:1acda048a7fea3772eba19925be345ef94cf0a61361ae5cd73fddd078698a08a
cluster-kube-cluster-api-operator git 33a1141e sha256:e5256175da90fa72fdcc51b2a4016447ecda324c7aae4027c3e4a0ee8b57c191
cluster-kube-controller-manager-operator git 0fac9aa9 sha256:60804b439ca12c2828f4cc859493b3d6779476886c47c853aa1c378916fbe973
cluster-kube-scheduler-operator git 6182930d sha256:f39683c4c87d179198477690033e41294f8fd6ea7bd70d7f111acc47fdf12c0b
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:d3e09ca1b7d54f4b23b7e3745cdb7b3f13213dc5eaccddce94de97325f2ef843
cluster-machine-approver git 01d5fbbe sha256:9726af5d554d5f0ba420d7d58885568f6b3cc742ecb20388f9e36f82ae4da5bf
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:3bbefef641833e05eb0a24f2dd64a7502bb6dac6d57093865a33a47236f0c512
cluster-openshift-controller-manager-operator git f1711cf3 sha256:982f7d720374a9c3df6f406e96d40efb7c28469cd2715b17bbba45384c2bfaa8
cluster-policy-controller git 5fd85252 sha256:b4be1eb818835c4b77019738446997e5195e45317306ebc090b8cd4c4023ac6f
csi-driver-nfs git 32e77590 sha256:16d45f6804a520fde6b83395d0ef5bf71cc7cb5dd404326cfdee7981fd062e9a
csi-external-attacher git 39b37c06 sha256:1ee03e3887cd433a584bfc13a0c4d7ad9e2cf9b55ad238d7fdd55e35c43f279a
csi-external-provisioner git 376f0ea0 sha256:1e041da627d7d6535e0077d58db2d47630d1a17a50c25ed508a12f8b665b55b7
csi-external-resizer git cca3837a sha256:265fa9cae404122ad5817a012feafd84295bbebd4afe743a23fb3d5ebaab005a
csi-external-snapshotter git 838d2484 sha256:db9c08092dbf0eaf0d285997da9f80916ad60ad503bced0597d935f06bde691b
csi-livenessprobe git 3a977844 sha256:e85054348a53a38269e59b9c0c8d95cd804d7c893742225b4f01dcf6e2907b73
csi-node-driver-registrar git c21f5d02 sha256:33ca399904c9b4f33da04cbf16aeafdf4394b7e0b619ca3d1d1b4c2dc61057d9
csi-snapshot-controller git 838d2484 sha256:81370ac82bf024f4196b42a1052641ff8b2eab2f32c54a5c5a3a7f5b4b7fd351
csi-snapshot-validation-webhook git 838d2484 sha256:625a6655b72cf85cba7e1e83275e2bc574044b0af418604f0633ca91a5c52a0b
driver-toolkit git 2e139edc sha256:178febf2c4e882715dcaa441cd5e2c6f4685bd1347c29e500a80648fb3bf79fc
egress-router-cni git 3193a756 sha256:8bbc67976b1243199c371bb63bc05b07cfddcc2520928a12391064e6de66f44e
gcp-cloud-controller-manager git 6ea23561 sha256:c55d86999c1bc3f415e1da0be1537e32f13effc0d4358415d97b7444b93779f1
gcp-cluster-api-controllers git af54f528 sha256:ae13cf5c17c1ff9a01662abf1cac7f0c2f0a3c68492bf4f31e9bc0d8c30a3bfc
gcp-pd-csi-driver-operator git 7cb8b38c sha256:8eef93c83d7d4c2643e0ce62026c371e483d71e7c0fa76f3eb3473bba6c9c793
gcp-workload-identity-federation-webhook git f0a670c7 sha256:e0f4fc42888019d2562c4b967a5d993f36ae148b1e126d325ace54cf1bc42432
ibm-cloud-controller-manager git a33026b1 sha256:660766d54bb79b9ba358c3d4e8e80c5328968b7d4ca9e08417fce034835b9f90
insights-runtime-exporter git 7149f2d5 sha256:42ad8420741b6e7f0623ef66024cf8d952da3f65923862bec8fa70ad489a854b
insights-runtime-extractor git 7149f2d5 sha256:a760a9ce4d10096446f9f399b3f0528af9a25e2981c0655627bbeea12b9b7c87
ironic-static-ip-manager git cfbae04f sha256:9a6305275c62a8e75d8014d6f2fad9793cada1af1d110cc9fe3966db1572268e
keepalived-ipfailover git 716eb0ef sha256:4f70e657337b762e4eb40bea9712bb7d58cfe1dcb3e1ce9a9a31a838b9c9213b
kube-metrics-server git 962ccca2 sha256:f84e06ba632894c73f4e80959404228fe46c3e5aa85cbd7fac6ea47fb4283cb4
kube-rbac-proxy git 526498ab sha256:ecf83d82182b1a9754af5df44df2f4945e413cf583c9ebbbad63f9bc47e2e8cd
kube-state-metrics git cb5a9296 sha256:bbec45b7ecec9978bee662082ecb6a65e4808db696b0b8f6803cbc6a8a322dcf
kubevirt-cloud-controller-manager git 3f4542ec sha256:05cadeaa6f291103d60376ec0ed627e29bc60274f01e26bc5531b8d5ccb08b43
libvirt-machine-controllers git a336f0b5 sha256:45349ec4f9a928f647ef1c1e48b8df4945817b170326c844415720e877241c4b
multus-route-override-cni git 391c1b03 sha256:d32f5f1f56d1a4a1436dd40ead03f19cd91883d35a503b4a18ecbf413a85ef55
network-metrics-daemon git e4c214c3 sha256:37f06be6f490be545191e09d210bcd315676f901eb7d1feb6aded9cdebbfc11b
nutanix-cloud-controller-manager git d9fe8f38 sha256:a02a7b88d529b90eec3332d00ea9c26cdb3909c8060c7a27c0d38e9bf48c5be1
oauth-apiserver git 2575ff41 sha256:1efbfa53b4c731cc7991142d7ba287e4e96b62565cd116b3bdd5a6f8df4f0900
openstack-machine-api-provider git d914e77e sha256:ebcfb0b38caa4daf45d0d5cbd6882f6d6c47ddc06c3d1460f5cb441e77bb6a48
ovirt-csi-driver git 1db726a9 sha256:b88cb44575b14fe19cacdb738f2eb19f13b0706265fcc15b58db33ce354c8897
ovirt-csi-driver-operator git 0feae256 sha256:5b10e115398f1e10aed9148df1e82329737621cfe2a528203b3646fc3ab2ddb9
powervs-block-csi-driver git d36aea34 sha256:31e6486378f23ed600eb8234bc63bd5ccd4139ee60be86d0bda697a7f9c6829b
powervs-block-csi-driver-operator git 01fc505a sha256:de16865e71477a6061eefe2acdbff900440930cf943c0bfceb3b9eeb1978c004
powervs-cloud-controller-manager git 17ae6fba sha256:51d8987737a3b2905f04e5808fbcbc79f8128a3e7cfc06bc7c1cbe0871010fdb
rhel-coreos sha256:b1385b4141f66a9d06b693f9a73178ad79d58bf8176bead5f254bc29bb2afdc0
rhel-coreos-extensions sha256:501bc524d8e57cee1205491f035f7c513b8b659c37959cff43543ed632796e18
vsphere-cloud-controller-manager git c414d1f5 sha256:e47b83a8645ef18d6e3a9bcd097c193a579f5061161e8c264832eb2514a48daa
vsphere-cluster-api-controllers git d664fe2b sha256:27d64b5bf0d7cec75a2b9dec9c964d1677d59233632e8aedd0f7da734a0fabd4
vsphere-csi-driver git cfcad01d sha256:321f419911140c2ae183f0ec40491e563b53f1450c3e49af7a1240b7661f3228
vsphere-csi-driver-syncer git cfcad01d sha256:37e5c060dfe71334efc0ffff75da16d8a49ea2956810544228978d8704f60ed3
vsphere-problem-detector git 7cf7fe24 sha256:40f1382dca12a9fd6920ff0a75b1d26b439a6ecb92a957e6eee6c9c558ad9138

agent-installer-api-server

OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
OCPBUGS-54378: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) #7483
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) #7456
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-53721: Bump jwt to 4.5.2 in release-4.18 (#1085) #1085
OCPBUGS-45116: Add retry to mount efi device (#1030) #1030
Full changelog

agent-installer-node-agent

OCPBUGS-52994: Update to latest ghw version (#958) #958
MGMT-20227: Skip Motherboard serial if set to “-” (#955) (#957) #955
OCPBUGS-54544: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) #965
OCPBUGS-53713: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) #963
NO-ISSUE: Increase image pull timeout during install (#907) #907
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-56434: Update manifests to use v1 admissionregistration group #554
OCPBUGS-53729: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 #543
OCPBUGS-50556: UPSTREAM: 5339: Bump glog for recent fixes #537
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-54383: Disable remove-not-ready-taint for azure disk csi driver #374
OCPBUGS-49843: Support HCP labels #356
Full changelog

aws-pod-identity-webhook

OCPBUGS-51231: github.com/go-jose/go-jose/v4 v4.0.5 #201
Full changelog

azure-kms-encryption-provider

OCPBUGS-53497: bump golang-jwt v4 #11
Full changelog

azure-machine-controllers

OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
OCPBUGS-54355: Re-reconcile machine on NIC provisioning failure #135
Full changelog

azure-workload-identity-webhook

OCPBUGS-53801: github.com/golang-jwt/jwt/v4 v4.5.2 #31
OCPBUGS-51233: github.com/go-jose/go-jose/v4 v4.0.5 #27
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-58321: allow to deploy single nodes with UPI #9824
OCPBUGS-54744: Filter out excess CA certs when adding node #9647
OCPBUGS-58264: vSphere - remove unit tests using nip.io #9813
OCPBUGS-56797: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9747
OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
OCPBUGS-54947: Fix Load balancer IP setup #9659
OCPBUGS-45564: Align vSphere UPI haproxy config with IPI #9276
OCPBUGS-53453: IBMCloud: Move to IBM TF openshift fork #9592
OCPBUGS-53422: Avoid adding duplicate entries to NO_PROXY #9588
OCPBUGS-52515: Remove error logging when determining image arch #9539
OCPBUGS-52429: Remove tmp directory used for agent pxe files #9536
OCPBUGS-51211: Fixes panic during GCP tags fetch due to unstable network #9513
OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
OCPBUGS-50524: Add cluster:master_nodes metric retrieval in docs #9449
OCPBUGS-49864: handle runtime panic when validating ovnKubernetesConfig #9435
OCPBUGS-49320: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9402
OCPBUGS-50870: PowerVS: destroy dhcp hack #9483
Full changelog

baremetal-operator

OCPBUGS-56431: Redfish: correctly handle missing system ID #417
OCPBUGS-53324: BMO can expose any secret via BMCEventSubscription CRD #405
OCPBUGS-45250: Remove dataImage finalizer if BMH is missing #389
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-58233: Return error in case of error #2054
OCPBUGS-57507: avoid transfering permissions when copying artifacts from node-joiner pod #2039
OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
OCPBUGS-49440: Address golang.org/x/* CVEs #1961
Full changelog

cloud-credential-operator

OCPBUGS-58247: ccoctl: only add owned tag to azure resources on create #882
OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
OCPBUGS-53825: update github.com/golang-jwt/jwt #837
OCPBUGS-53345: github.com/golang/glog v1.2.4 #835
OCPBUGS-51550: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #822
OCPBUGS-51237: github.com/go-jose/go-jose/v4 v4.0.5 #824
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-authentication-operator

OCPBUGS-54569: Avoid duplicate OAuth client creation #764
Full changelog

cluster-autoscaler

OCPBUGS-53241: improve replica counting and decrease target size behavior #346
Full changelog

cluster-baremetal-operator

OCPBUGS-53080: Add missing relatedObjects #467
Full changelog

cluster-capi-controllers

OCPBUGS-56434: Update manifests to leverage v1 admissionregistration group #241
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-config-api

Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
OCPBUGS-54784: [release-4.18] Bump openshift/controller-tools to latest commit #2267
OCPBUGS-51295, OCPBUGS-51380: Reject new NodeStatus with revision set #2215
OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
OCPBUGS-51077: [4.18] bump controller-tools dependency to latest downstream commit #2210
Full changelog

cluster-dns-operator

OCPBUGS-52514: [release-4.18] Add runbook_url for CoreDNSErrorsHigh #429
Full changelog

cluster-etcd-operator

OCPBUGS-56834: etcd pod containers do not start when tls min version is 1.3 #1428
OCPBUGS-56110: adjust alerts according to platform #1424
OCPBUGS-53513: fix CVE-2025-30204 #1413
OCPBUGS-55066: increase etcdGRPCRequestsSlow duration #1408
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
OCPBUGS-51018: ensure that storage names don’t end in dashes #1179
Full changelog

cluster-ingress-operator

NE-1951: Pre-upgrade Admin Gate for Gateway API CRD Management Succession #1196
NE-1952: Pre-upgrade check for Gateway API CRD Management Succession #1193
OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
OCPBUGS-49898: bindata/alerts/slo: improve burnrate calculation #1808
OCPBUGS-53066: Bump library-go #1828
OCPBUGS-46411: skip generating certs when networkConfig.status.ServiceNetwork is nil #1780
Full changelog

cluster-monitoring-operator

OCPBUGS-56251: set upgradable false when alertmanager v1 is specified #2591
OCPBUGS-55005: chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and set CMO to Upgradeable=false if errors are found #2592
OCPBUGS-53024: Fix opentelemetry metrics to use regexp on label match #2578
OCPBUGS-52565: Bump prometheus-operator to 0.78.2 #2576
OCPBUGS-50706: Add incidents metric to telemetry #2570
Full changelog

cluster-network-operator

OCPBUGS-58047: Add cert-rotation script into cno #2702
OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
OCPBUGS-54717: Add IPv6 NGINX configuration #2683
OCPBUGS-50582, OCPBUGS-52949: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2644
OCPBUGS-52837: frr-k8s: rename validatingwebhook name #2661
OCPBUGS-48305: frr-k8s: align manifests with operator #2657
OCPBUGS-41178: Updating cluster-network-operator-container image to be consistent with ART for 4.18 #2491
OCPBUGS-50625: Cherry-pick RouteAdvertisements support back to 4.18 #2645
Full changelog

cluster-node-tuning-operator

e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) #1355
: OCPBUGS-57947: kernelPageSize + hugepages combinations validation ³⁄₃ #1343
: OCPBUGS-57947: Support hugepage size selection for ARM-based clusters ²⁄₃ #1342
OCPBUGS-57947: CNF-18142: Add kernel page size field ¹⁄₃ #1341
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) (#1306) #1303
machineconfig: add support for various hugepage sizes. (#1299) #1299
OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
e2e: common way to fetch poolName (#1255) (#1300) #1255
Full changelog

cluster-olm-operator

OCPBUGS-57767: fix olm.maxOpenShiftVersion float parsing #125
OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
OCPBUGS-54258: Adding mutex to func createSamples on handler.go #615
OCPBUGS-54351: add rhdmalone to owners #617
Full changelog

cluster-storage-operator

OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #72
Full changelog

cluster-version-operator

OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-58317: Implement sessions in openshift authenticator #15237
OCPBUGS-58088: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15202
OCPBUGS-58089: Getting “Oh no something went wrong” error message in web console. #15203
OCPBUGS-57931: Add the ability to launch multiple modals with useModal hook #15196
OCPBUGS-57580: Update vSphere configuration form to support CM YAML f… #15191
OCPBUGS-57743: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15188
OCPBUGS-57209: Add flags in console static plugin for all the components of this epic #15160
OCPBUGS-36173: Secret key with binary file changes when edited via Console. #15178
OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
OCPBUGS-54269: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14905
OCPBUGS-52372: VolumeSnapshots are not displayed in OpenShift Web Console #14833
OCPBUGS-52406: Retain original path when detecting perspective #14834
OCPBUGS-52371: Update the monitoring topic used by the console team #14832
OCPBUGS-52490: enable clicking outside NodeLogs Selects to close them #14843
OCPBUGS-50501: Updating cypress config to have video enabled for the CI results #14831
OCPBUGS-52511: Remove logoutOpenShift method call #14845
OCPBUGS-50609: update the Deployment pod on change in imageStream #14757
OCPBUGS-50648: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14761
OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
OCPBUGS-51180: Linkify OLM operator uninstall message #14789
OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
OCPBUGS-50647: Enable web terminal tests #14758
OCPBUGS-50573: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14755
OCPBUGS-49867: Add support for conditional CSP headers #14720
OCPBUGS-48736: update variable name for plugin name parsing #14696
OCPBUGS-49921: fix run time error when no completed version exists #14743
Full changelog

console-operator

OCPBUGS-45869: don’t set current clients when no OIDC providers are configured #948
OCPBUGS-52294: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #966
OCPBUGS-49867: Add ConsolePluginContentSecurityPolicy feature gate to… #959
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-56928: bridge: Add option to enable port isolation #203
append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
OCPBUGS-55354: Fix dhcp #186
OCPBUGS-55346: Check error returned by ipv6 SettleAddresses #185
Full changelog

coredns

append .0 to go.mod version #134
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58835: CARRY: don’t ignore json files #339
OCPBUGS-43430: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 #312
Full changelog

docker-builder

OCPBUGS-57758: S2I build cpu limits observed by assemble are limited to 1 cpu #473
OCPBUGS-48071: Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility #464
OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
Full changelog

docker-registry

OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue #312
ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
Full changelog

gcp-machine-controllers

OCPBUGS-52495: OCPBUGS-52494: Disable shielded VMs for non-UEFI disks #112
Full changelog

gcp-pd-csi-driver

OCPBUGS-44769: Fix RWX mode for hyperdisks #74
Full changelog

haproxy-router

OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
OCPBUGS-49389: Reject All CA-Signed Certs Using SHA1 #649
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-57887: Update to Kubernetes v1.31.10 #2348
OCPBUGS-57070: UPSTREAM: <carry>: Bump cadvisor version to fix container_fs metrics #2332
OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
: OCPBUGS-54807: skip tests on platform type External #2268
OCPBUGS-53015: Update to Kubernetes v1.31.7 #2248
OCPBUGS-50929: Update to Kubernetes v1.31.6 #2208
Full changelog

hypershift

OCPBUGS-57818: Reuse hosted cluster release and metadata providers #6301
OCPBUGS-58126: Don’t use /version for haproxy health checks #6323
OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
OCPBUGS-55146: Use 135 for terminationGracePeriodSeconds for v2 KAS #6057
OCPBUGS-54698: Add missing servicemonitors and prometheusrules permissions for non-OVN #6000
OCPBUGS-53404: Set shutdown watch termination grace period on kube-apiserver #5874
OCPBUGS-51810: Fix golang crypto dependency go.mod replacement #5992
OCPBUGS-54814: [release-4.18] add feature set aware feature gates to HO and CPO #6014
OCPBUGS-54624: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5980
OCPBUGS-54630: Sync RBAC for attaching volumes on VM level #5988
OCPBUGS-54627: Use system trust bundle in CPO IDP https client #5981
ARO-15695, OCPBUGS-54625: backport capabilities api #5964
OCPBUGS-54411: Backport PR 5876 to release-4.18 #5936
OCPBUGS-54498: Support hypershift-operator scoping for secretJanitor #5961
OCPBUGS-54609: [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable #5950
NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 #5963
OCPBUGS-53905: bump golang-jwt v4 and v5 #5905
ART-11792: update go mod dependency for konflux #5919
OCPBUGS-51739, OCPBUGS-51810: Bump dependencies to OCP fork in backports #5898
OCPBUGS-53321: Handle multiple mirror entries for source #5890
OCPBUGS-51239: fix(deps): bump go-jose #5858
OCPBUGS-52982: Fix audit-logs container to properly handle SIGTERM #5774
OCPBUGS-52863: stop using dev mode for loggers #5811
OCPBUGS-52878: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5780
OCPBUGS-52516: Make managed-trust-bundle optional #5783
OCPBUGS-52417: [release-4.18] refactor aws identity health check into new controller #5770
OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
OCPBUGS-50696: add region to AWS creds passed to operators managed by CPO #5629
OCPBUGS-51050: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5667
NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 #5640
NO-JIRA: Update dependency mkdocs to v1.6.1 #5638
OCPBUGS-50550: Honor proxy vars in the util insecure http client #5598
Full changelog

ibm-vpc-block-csi-driver

append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
OCPBUGS-53913: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #82
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55297: [IBM VPC] set offlineExpansion to false in e2e test manifest #144
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-50565: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 #100
Full changelog

ibmcloud-machine-controllers

OCPBUGS-52872: IBMCloud: MAPI replacing unhealthy CP nodes #62
Full changelog

insights-operator

OCPBUGS-51163: Fix bad IPv6 address (#1074) #1074
OCPBUGS-48790: Add a liveness probe to the extractor container (#1068) #1068
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
METAL-1302: Do not use openstack packages #646
OCPBUGS-52290: Fix runlogwatch script #642
OCPBUGS-50641: Install python3-inotify pkg explicitly #639
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
OCPBUGS-55364: Delay determining the hostname to put into ignition #183
METAL-1302: Do not use openstack packages #178
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-storage-version-migrator

append .0 to go.mod version #216
Full changelog

kubevirt-csi-driver

OCPBUGS-54630: Ensure volume stays attached through reboots #55
Full changelog

machine-api-operator

OCPBUGS-57057: Updates GCP CredentialsRequest #1376
OCPBUGS-52494, OCPBUGS-52496: Updates GCP credentials request #1341
OCPBUGS-52567: add image/read permissions #1342
OCPBUGS-51263: Drop oVirt support #1333
Full changelog

machine-config-operator

OCPBUGS-55246: kubelet: readonly mounts for criometricsproxy #4998
OCPBUGS-58067: Ensure the build controller restarts on upgrade #5140
OCPBUGS-57328: Do not set cpu system reserve below the default value #5152
OCPBUGS-56624: Give keepalived container chroot cap #5073
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #5138
OCPBUGS-57935: add MachineConfiguration to CO related objects #5134
OCPBUGS-54463: Update desired config in MCN on OCL update #5026
OCPBUGS-57900: MCC complains about v1 MachineOSConfig in default featureset #5131
OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Update cluster operator’s status condition message #4993
OCPBUGS-53278: In OCL. Cannot install extensions #4945
OCPBUGS-54817: Make mtu-migration run after wait-for-primary-ip #4979
OKD-239: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4955
OCPBUGS-54462: OSUpdateStarted event should only be emitted on actual OS updates #4967
OCPBUGS-51132: [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4869
OCPBUGS-52949: Add ipsec connect wait service #4926
OCPBUGS-53306: Fixing typos for MachineConfigNode #4927
OCPNODE-2276: Set Upgradeable=False when cluster is on cgroup v1 #4921
OCPBUGS-53111: daemon: ensure ostree-finalize-staged is started before rebooting #4918
OCPBUGS-53110: Update ObservedGeneration in KubeletConfig #4917
[release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built #4859
OCPBUGS-50865: Make resolv-prepender env file optional #4855
OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
OCPBUGS-48341: configure-ovs workaround for ovs-if-br-ex bug #4883
OCPBUGS-51015: Enforce VIPs to be collocated at the same host #4865
OCPBUGS-51194: Update cluster-reader ClusterRole permissions #4874
OCPBUGS-50633: Update format verbs for alert logs #4849
OCPBUGS-49774: Correct MachineConfig documentation on sysstat extension support #4829
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

machine-os-images

OCPBUGS-53141: Change rhcos release browser url #55
OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
OCPBUGS-48305: Use metrics for readiness/liveness probes #76
Full changelog

monitoring-plugin

OU-724: remove deleted image #376
Full changelog

multus-admission-controller

append .0 to go.mod version #96
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47470: adds getpodcontext (backport 4.18) #259
Full changelog

multus-networkpolicy

append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

append .0 to go.mod version #370
OCPBUGS-55270: Fix whereabouts-reconciler no namespace error #362
Full changelog

must-gather

append .0 to go.mod version #491
Full changelog

network-interface-bond-cni

OCPBUGS-58095: Bump github.com/containernetworking/plugins from to 1.7.1 #79
OCPBUGS-57794: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 #74
NO-JIRA: Add ci-operator yaml file #78
Full changelog

network-tools

Fix build error #147
Full changelog

networking-console-plugin

OCPBUGS-57286: Fix pod context #251
CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Add translations scripts #234
CNV-56436: show ipam lifecycle correctly with new spec #220
CNV-56236: fix cudn modal form titles #219
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
OCPBUGS-47268: fixing CVE-2024-45338 #91
Full changelog

oauth-proxy

OCPBUGS-58312: fix e2e tests #325
OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
Full changelog

oauth-server

append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-58272: Fixes the tag when rebuilt catalog by digest only (#1204) #1204
OCPBUGS-57387: v2/archive: fix sanitization of . (#1196) #1196
OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1195) #1195
OCPBUGS-57197: [release-4.18] v2/cli: always remove past archives before m2d (#1176) #1176
OCPBUGS-56486: v2/config: allow delete and mirror words (#1175) #1175
OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1173) #1173
OCPBUGS-56659: v2/archive: print unarchive progress (#1160) #1160
OCPBUGS-54653: delete: continue on errors (#1146) #1146
OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
OCPBUGS-51217: Fix CVE-2025-27144 (#1108) #1108
OCPBUGS-54727: Use tag 0.0.3+2 of catalog-filter (#1128) #1128
OCPBUGS-52978: delete: fix typo in –help output (#1121) #1121
OCPBUGS-52960: v2: fix setting version during build (#1118) #1118
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1114) #1114
OCPBUGS-52588: fix: error when no related image was found (#1106) #1106
CLID-325: adds cpu and memory profiling (#1103) #1103
fixes CVE-2024-0406 (#1101) #1101
v2: disable spinners when not running in a tty (#1082) #1082
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1091) #1091
OCPBUGS-49991: fixes bundle related images being skipped (#1074) #1074
v2/cli: always stop local registry and close registry.log (#1090) #1090
OCPBUGS-44103: bump oc fork version (#1089) #1089
OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1079) #1079
OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1075) #1075
Full changelog

olm-catalogd

UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
Full changelog

olm-operator-controller

UPSTREAM: <carry>: fix crdupgradesafety diff when items schema differ (#1863) #1863
Full changelog

openshift-apiserver

OCPBUGS-56609: Fix image reference in TestImageStreamImportQuayIO #514
OCPBUGS-52312: Skip blocked registry check for registries with mirrors #498
Full changelog

openshift-controller-manager

OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
OCPBUGS-54304: Intermittent authentication issues when accessing OpenShift registry #369
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44458: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #365
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-57427: reduce cache expiry frequency [release-4.19] #1020
OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
OCPBUGS-53108: Ensure that PSA label is latest instead of pinning versions #983
OCPBUGS-53040: add missing pod disruption reasons to isPodDead #981
OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
Full changelog

operator-marketplace

ART-13123: append .0 to go.mod version #637
OCPBUGS-53149: Ensure that PSA label is latest instead of pinning versions #601
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-57318, OCPBUGS-58159: DownStream Merge Sync from 4.19 [06-26-2025] #2646
OCPBUGS-46401, OCPBUGS-48710, OCPBUGS-55263: DownStream Merge Sync from 4.19 [05-28-2025] #2593
OCPBUGS-57108: Fix hybrid overlay node subnets collision with cluster subnets #2619
OCPBUGS-57106: Increase InformerSyncTimeout to 60s #2622
OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
OCPBUGS-54671: EIP no reroute: allow multiple entries for pod to pod and pod to join #2510
OCPBUGS-54187: Update OVN to FDP25.A.1 24.09.2-41. #2495
OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
Full changelog

powervs-machine-controllers

OCPBUGS-54243: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 #111
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
OCPBUGS-54940: Scraping: Bump cache iteration after error to avoid false duplicate detection. #247
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-52565: Bump openshift/prometheus-operator to v0.78.2 #327
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

service-ca-operator

OCPBUGS-44952: [release-4.18] Bump go to 1.22.0 #253
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-58366: Make EgressIP helper functions more reliable #29950
OCPBUGS-57081: Do not set the MTU when using NetworkAttachementDefinition #29891
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #29937
OCPBUGS-57329: Fix failed tests of e2e-aws-ovn-tls-13 #29911
OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Revert “OCPBUGS-55277: backport 4.18” #29720
OCPBUGS-55277: backport 4.18 #29645
OCPBUGS-55110: Backport MetricsCollectionProfiles patches to 4.18 #29561
OCPBUGS-54807: support provider type external #29666
OCPBUGS-54725: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29657
OCPBUGS-53015: bump(k8s): update k8s.io/* dependencies to v1.31.7 #29634
OCPBUGS-52496: use non-fake boot image for patch #29584
OCPBUGS-52579: Use payload pullspec for image info test #29587
OCPBUGS-51295: Rely on unstructured for update status instead of type conversion #29564
OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
OCPBUGS-48389: move initialization of OC to test instead of package level #29472
OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
OCPBUGS-50930: managed services: add known image check for gcp #29547
OCPBUGS-48474: Replace RunHostCmd with Exec function to censor bearer token being exposed #29377
OCPBUGS-49687: Add Readiness Probe to Router Status Tests #29513
Full changelog

thanos

OCPBUGS-52945: Update Go version in go.mod to 1.22.0 #159
Full changelog

vsphere-csi-driver-operator

OCPBUGS-54701: add manifest-topology.yaml for topology related feature and test #303
OCPBUGS-50638: fix panic when vcenter address is incorrect #293
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github