4.18.20

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.20-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Failed release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Failed release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Failed (3 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.18.10, 4.18.12, 4.18.13, 4.18.15, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.11

Created: 2025-07-11 09:05:04 +0000 UTC

Image Digest: sha256:5e06105a6ba80d04eb5d8d3f9a672fb743ce4710876d99a375c2d9f7b7eaa783

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.7 to 1.31.10
Kubernetes Tests upgraded from 1.31.7 to 1.31.9
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202504231329-0 to 418.94.202507091512-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-csr-approver git 92575979 sha256:05178b289d9c86de6c3ee9e917a0d1dc98ae1a3329a2ae680cc89e73396be44d
agent-installer-node-agent git 615411a4 sha256:e00a8a96c8265541e9b2414567d3fc47b9541ef51a4cb09505c971e10e8ff331
agent-installer-orchestrator git 92575979 sha256:8a1d7131365840bc9ff81b2f1174dfe3242857bf52033d8fb53fc51b729a8fd6
aws-cloud-controller-manager git c3951906 sha256:3cb7ffffc4e9f85cbfe5417833bd1a7d9eab6090c3313be86b6c604eb28df22b
aws-ebs-csi-driver git b51cd6b8 sha256:956d15db419434edbf857601dc19e958ad459604e867159e8b028b7d7de126eb
aws-ebs-csi-driver-operator git cdc9d649 sha256:a3f443de86620608328066b24c1dec511f8406bda2144c5363fd09de31dfd5bf
aws-kms-encryption-provider git 088dcaf7 sha256:a4e97661fc95e862f4caca8875e52254e0cc163dbe3abe2f513b3903faab6594
aws-machine-controllers git 53274f11 sha256:b6113958f2eb93eadc6f4693b6b77431628c84cf01edc2e63498ae90d56b8425
aws-pod-identity-webhook git f54f9a19 sha256:004fe016e139e9cb84c96195ec7b92ccfde782b9825bc089198a14f5b1108f46
azure-cloud-controller-manager git 9c24d768 sha256:d10558e2e9c14837c211cc4b18c4cd1421d79155f22df4a659809ad214993d7c
azure-cloud-node-manager git 9c24d768 sha256:42a43a06e7e6693e57e69b4226038f4ddd247498379bb8ab23ae493c4d1cbe44
azure-cluster-api-controllers git 987615c8 sha256:15c5d867494d717d57a864a50fae406d9223c52ed7e9921c9b356f3c2d763708
azure-disk-csi-driver git 6cced666 sha256:6b671ba54bee4729e5d9ee11b5d8b9a97498badc266b2741b26df8211e3cfb95
azure-disk-csi-driver-operator git cdc9d649 sha256:86646c459cefa92571b3dc80b36df8c856a721e5d0d85d03c98eadade76a5943
azure-file-csi-driver git 4b34592e sha256:b39b00f124fb956f43adf4115fd41fe43f07cf7319f879f6c5e3ba75bb28f0fa
azure-file-csi-driver-operator git cdc9d649 sha256:af4ae191caa331143f8efe988d030bc05f1683d89e371bee4c68a6419f1ac91c
azure-kms-encryption-provider git c937080f sha256:455312fbbda63deead56b7c19f590f01531b812bb00c94e0b356effa7bae5031
azure-workload-identity-webhook git f60e4029 sha256:fe1c66aeedc67326256b3071127850ebe6d4aa1ee9527f4a53cd5c2fc40990a6
baremetal-cluster-api-controllers git 7ec03e94 sha256:4cf0151647275618225c2a131ac54856500f9311dbcb11eb648b6a636d06b904
baremetal-machine-controllers git 1ede6c3f sha256:be2f0d7370381e1775d1796349374d97f87cfa6fe3183a04b504870287aeae7d
baremetal-runtimecfg git 9e2015c3 sha256:26385abcd49cada800f1e4297c1ac4d06b5e75d6b7cd20d1c51f52a9e4a78fde
cluster-authentication-operator git 4a9bc4f1 sha256:ea7e6e618810061e631d2e178e739ee89af879e3fa656925a52265f47c163df2
cluster-autoscaler git d1afaf45 sha256:2b46178221d703c96a18bb701390d05987df3d585f7d1803e91bbac9ea08d719
cluster-autoscaler-operator git 474ad65c sha256:5011d721c43e09c4cfe9937df1ecbbba0ed341910898199708cd2008f36a9b21
cluster-baremetal-operator git e30ce1d8 sha256:bf1e69a69de8cf33d6173375291d1ac758866a0c3259df3d024e87c11d8dbb77
cluster-bootstrap git d1e01954 sha256:c7becf5c1b0bcb21f4f56aa277b50885c5e2e657b6fb75d6209617cbc17a190b
cluster-cloud-controller-manager-operator git 33856906 sha256:c156be9bcf2f601ec53865480d738d287a113cd05c1a7c89587711a09774dfd5
cluster-config-operator git 85cb4072 sha256:29271bab5e4b6aa6f2caceb6ff104254ff65c4635291783613b639c6b9961994
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:78faf0dd6a5c3700501b3bcf1dd02203b57181c4e7ef2901a67df751d9d50e94
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:1acda048a7fea3772eba19925be345ef94cf0a61361ae5cd73fddd078698a08a
cluster-dns-operator git 7cafd0c7 sha256:459352a3b619d16d0839a0d8ee4b3f572b14d726c17d7df01242a9547b83cc0a
cluster-ingress-operator git d967a73c sha256:f4f21d2526cb1c7c760025ba63593c7d1aedd7c1329c39ce5d8da87599a9e1e9
cluster-kube-cluster-api-operator git 33a1141e sha256:e5256175da90fa72fdcc51b2a4016447ecda324c7aae4027c3e4a0ee8b57c191
cluster-kube-controller-manager-operator git 0fac9aa9 sha256:60804b439ca12c2828f4cc859493b3d6779476886c47c853aa1c378916fbe973
cluster-kube-scheduler-operator git 6182930d sha256:f39683c4c87d179198477690033e41294f8fd6ea7bd70d7f111acc47fdf12c0b
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:d3e09ca1b7d54f4b23b7e3745cdb7b3f13213dc5eaccddce94de97325f2ef843
cluster-machine-approver git 01d5fbbe sha256:9726af5d554d5f0ba420d7d58885568f6b3cc742ecb20388f9e36f82ae4da5bf
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:3bbefef641833e05eb0a24f2dd64a7502bb6dac6d57093865a33a47236f0c512
cluster-openshift-controller-manager-operator git f1711cf3 sha256:982f7d720374a9c3df6f406e96d40efb7c28469cd2715b17bbba45384c2bfaa8
cluster-policy-controller git 5fd85252 sha256:b4be1eb818835c4b77019738446997e5195e45317306ebc090b8cd4c4023ac6f
cluster-storage-operator git 65d06444 sha256:96b413dfd3b553544020e0fe5acb971d1d1314606a7a2792e69dbf587fd638cb
cluster-update-keys git 8caab452 sha256:226bc7c5e2c71c5f089f9e7c30e1fcf68bc0a8112e7bc3f4cbb671537368fafb
csi-driver-manila-operator git cdc9d649 sha256:856ff4f00446ace044298ccf9e9ecc156bc95f54fb615115cdf4eacfaebaf5fe
csi-driver-nfs git 32e77590 sha256:16d45f6804a520fde6b83395d0ef5bf71cc7cb5dd404326cfdee7981fd062e9a
csi-external-attacher git 39b37c06 sha256:1ee03e3887cd433a584bfc13a0c4d7ad9e2cf9b55ad238d7fdd55e35c43f279a
csi-external-provisioner git 376f0ea0 sha256:1e041da627d7d6535e0077d58db2d47630d1a17a50c25ed508a12f8b665b55b7
csi-external-resizer git cca3837a sha256:265fa9cae404122ad5817a012feafd84295bbebd4afe743a23fb3d5ebaab005a
csi-external-snapshotter git 838d2484 sha256:db9c08092dbf0eaf0d285997da9f80916ad60ad503bced0597d935f06bde691b
csi-livenessprobe git 3a977844 sha256:e85054348a53a38269e59b9c0c8d95cd804d7c893742225b4f01dcf6e2907b73
csi-node-driver-registrar git c21f5d02 sha256:33ca399904c9b4f33da04cbf16aeafdf4394b7e0b619ca3d1d1b4c2dc61057d9
csi-snapshot-controller git 838d2484 sha256:81370ac82bf024f4196b42a1052641ff8b2eab2f32c54a5c5a3a7f5b4b7fd351
csi-snapshot-validation-webhook git 838d2484 sha256:625a6655b72cf85cba7e1e83275e2bc574044b0af418604f0633ca91a5c52a0b
driver-toolkit git 2e139edc sha256:178febf2c4e882715dcaa441cd5e2c6f4685bd1347c29e500a80648fb3bf79fc
egress-router-cni git 3193a756 sha256:8bbc67976b1243199c371bb63bc05b07cfddcc2520928a12391064e6de66f44e
gcp-cloud-controller-manager git 6ea23561 sha256:c55d86999c1bc3f415e1da0be1537e32f13effc0d4358415d97b7444b93779f1
gcp-cluster-api-controllers git af54f528 sha256:ae13cf5c17c1ff9a01662abf1cac7f0c2f0a3c68492bf4f31e9bc0d8c30a3bfc
gcp-machine-controllers git 01f6b419 sha256:d2685a6d84cda3b3019b52496ba20697600362237906bb62b5b27ecfe6dca0f5
gcp-pd-csi-driver git 1b8c94ac sha256:ebca3e6990b58c91e2fb014da4a460ec581fad2b181ee466a151998289089670
gcp-pd-csi-driver-operator git 7cb8b38c sha256:8eef93c83d7d4c2643e0ce62026c371e483d71e7c0fa76f3eb3473bba6c9c793
gcp-workload-identity-federation-webhook git f0a670c7 sha256:e0f4fc42888019d2562c4b967a5d993f36ae148b1e126d325ace54cf1bc42432
haproxy-router git d8058949 sha256:b1aad44581de5468c88f409ddc8597ce6790965867e6ce7448aabd21f87d3e63
ibm-cloud-controller-manager git a33026b1 sha256:660766d54bb79b9ba358c3d4e8e80c5328968b7d4ca9e08417fce034835b9f90
ibmcloud-cluster-api-controllers git 2ba764f9 sha256:c4b7dc30d19e5386be19be9cf6bd823cde555a5d38d05afea8784c4889bbb2ea
ibmcloud-machine-controllers git 3ffdea64 sha256:62dd73ca1f67b25751d59410019f2e5e279cb9ed5d6d3bdd31a90d7f657aeb4b
insights-operator git 7f9ed155 sha256:da6eb674d2c13417950a845e490fd53724856046e44e474d10cce8472198a61f
insights-runtime-exporter git 7149f2d5 sha256:42ad8420741b6e7f0623ef66024cf8d952da3f65923862bec8fa70ad489a854b
insights-runtime-extractor git 7149f2d5 sha256:a760a9ce4d10096446f9f399b3f0528af9a25e2981c0655627bbeea12b9b7c87
ironic-static-ip-manager git cfbae04f sha256:9a6305275c62a8e75d8014d6f2fad9793cada1af1d110cc9fe3966db1572268e
keepalived-ipfailover git 716eb0ef sha256:4f70e657337b762e4eb40bea9712bb7d58cfe1dcb3e1ce9a9a31a838b9c9213b
kube-metrics-server git 962ccca2 sha256:f84e06ba632894c73f4e80959404228fe46c3e5aa85cbd7fac6ea47fb4283cb4
kube-rbac-proxy git 526498ab sha256:ecf83d82182b1a9754af5df44df2f4945e413cf583c9ebbbad63f9bc47e2e8cd
kube-state-metrics git cb5a9296 sha256:bbec45b7ecec9978bee662082ecb6a65e4808db696b0b8f6803cbc6a8a322dcf
kubevirt-cloud-controller-manager git 3f4542ec sha256:05cadeaa6f291103d60376ec0ed627e29bc60274f01e26bc5531b8d5ccb08b43
kubevirt-csi-driver git 2111495e sha256:5055871a00607029a6708f1c4b214a38672f02774d93f43a86f5a9d66f67a263
libvirt-machine-controllers git a336f0b5 sha256:45349ec4f9a928f647ef1c1e48b8df4945817b170326c844415720e877241c4b
machine-os-images git ab432836 sha256:c5fce452d1cb03bf9e04d6a06e1ac1bc434aaf9a3241435f76e28c9959afc133
monitoring-plugin git eb6123bd sha256:154e5d6a9718c36ccef54ec327115124f672e542164067ba240776343636da09
multus-cni git 21fb8e05 sha256:c80a90453a9f534479e4148d13804c88958dd1f51bfbdcd74f0c6a9bfac0e9ed
multus-cni-microshift git 21fb8e05 sha256:1109090ebe36287360064786279731940b4f398193da21a16dddbb22663bf8dd
multus-route-override-cni git 391c1b03 sha256:d32f5f1f56d1a4a1436dd40ead03f19cd91883d35a503b4a18ecbf413a85ef55
network-metrics-daemon git e4c214c3 sha256:37f06be6f490be545191e09d210bcd315676f901eb7d1feb6aded9cdebbfc11b
nutanix-cloud-controller-manager git d9fe8f38 sha256:a02a7b88d529b90eec3332d00ea9c26cdb3909c8060c7a27c0d38e9bf48c5be1
oauth-apiserver git 2575ff41 sha256:1efbfa53b4c731cc7991142d7ba287e4e96b62565cd116b3bdd5a6f8df4f0900
openstack-cinder-csi-driver-operator git cdc9d649 sha256:c66f109176a1257aa22649c909d210bf9ac32a43cfd92e053a4f8e96669df92e
openstack-machine-api-provider git d914e77e sha256:ebcfb0b38caa4daf45d0d5cbd6882f6d6c47ddc06c3d1460f5cb441e77bb6a48
ovirt-csi-driver git 1db726a9 sha256:b88cb44575b14fe19cacdb738f2eb19f13b0706265fcc15b58db33ce354c8897
ovirt-csi-driver-operator git 0feae256 sha256:5b10e115398f1e10aed9148df1e82329737621cfe2a528203b3646fc3ab2ddb9
powervs-block-csi-driver git d36aea34 sha256:31e6486378f23ed600eb8234bc63bd5ccd4139ee60be86d0bda697a7f9c6829b
powervs-block-csi-driver-operator git 01fc505a sha256:de16865e71477a6061eefe2acdbff900440930cf943c0bfceb3b9eeb1978c004
powervs-cloud-controller-manager git 17ae6fba sha256:51d8987737a3b2905f04e5808fbcbc79f8128a3e7cfc06bc7c1cbe0871010fdb
powervs-machine-controllers git 10ac06f5 sha256:eb743beb28901397dcd5bf78fa5ecdbc1d1ba29860585a594a25ec1a6830c68e
prometheus-config-reloader git 74987748 sha256:a49a47663c5eddccbd0c991862b4d819de2023d2a78871b52bc930c02a571703
prometheus-operator git 74987748 sha256:d179edc2a16a125a180e2dca4fd74d9a35980edceab24427341b0684f9591eea
prometheus-operator-admission-webhook git 74987748 sha256:acfe7ca202b6657371c7bbe10b7263f86c8b220f378bf0b12a8db976796c9568
rhel-coreos sha256:b1385b4141f66a9d06b693f9a73178ad79d58bf8176bead5f254bc29bb2afdc0
rhel-coreos-extensions sha256:501bc524d8e57cee1205491f035f7c513b8b659c37959cff43543ed632796e18
service-ca-operator git 30efb529 sha256:5def6fc6c9053175996bc3533493cac3e670ee4f92ba2c3d7c92b3e6998c405a
thanos git f1599f65 sha256:db7aab8826bbbe5ecfece13080ad1f535cabdb66e9c97b626bb6c3ba05201aa7
vsphere-cloud-controller-manager git c414d1f5 sha256:e47b83a8645ef18d6e3a9bcd097c193a579f5061161e8c264832eb2514a48daa
vsphere-cluster-api-controllers git d664fe2b sha256:27d64b5bf0d7cec75a2b9dec9c964d1677d59233632e8aedd0f7da734a0fabd4
vsphere-csi-driver git cfcad01d sha256:321f419911140c2ae183f0ec40491e563b53f1450c3e49af7a1240b7661f3228
vsphere-csi-driver-operator git 2b241410 sha256:976af8eefad5b858e45f9d37e175b90f79bb5d6c274073fec15152c085305c65
vsphere-csi-driver-syncer git cfcad01d sha256:37e5c060dfe71334efc0ffff75da16d8a49ea2956810544228978d8704f60ed3
vsphere-problem-detector git 7cf7fe24 sha256:40f1382dca12a9fd6920ff0a75b1d26b439a6ecb92a957e6eee6c9c558ad9138

agent-installer-api-server

OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-56434: Update manifests to use v1 admissionregistration group #554
Full changelog

azure-machine-controllers

OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-58321: allow to deploy single nodes with UPI #9824
OCPBUGS-54744: Filter out excess CA certs when adding node #9647
OCPBUGS-58264: vSphere - remove unit tests using nip.io #9813
OCPBUGS-56797: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9747
OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
Full changelog

baremetal-operator

OCPBUGS-56431: Redfish: correctly handle missing system ID #417
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-58233: Return error in case of error #2054
OCPBUGS-57507: avoid transfering permissions when copying artifacts from node-joiner pod #2039
OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
Full changelog

cloud-credential-operator

OCPBUGS-58247: ccoctl: only add owned tag to azure resources on create #882
OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-capi-controllers

OCPBUGS-56434: Update manifests to leverage v1 admissionregistration group #241
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-config-api

Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
Full changelog

cluster-etcd-operator

OCPBUGS-56834: etcd pod containers do not start when tls min version is 1.3 #1428
OCPBUGS-56110: adjust alerts according to platform #1424
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
Full changelog

cluster-monitoring-operator

OCPBUGS-56251: set upgradable false when alertmanager v1 is specified #2591
Full changelog

cluster-network-operator

OCPBUGS-58047: Add cert-rotation script into cno #2702
OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
Full changelog

cluster-node-tuning-operator

e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) #1355
: OCPBUGS-57947: kernelPageSize + hugepages combinations validation ³⁄₃ #1343
: OCPBUGS-57947: Support hugepage size selection for ARM-based clusters ²⁄₃ #1342
OCPBUGS-57947: CNF-18142: Add kernel page size field ¹⁄₃ #1341
Full changelog

cluster-olm-operator

OCPBUGS-57767: fix olm.maxOpenShiftVersion float parsing #125
OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
Full changelog

cluster-version-operator

OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-58317: Implement sessions in openshift authenticator #15237
OCPBUGS-58088: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15202
OCPBUGS-58089: Getting “Oh no something went wrong” error message in web console. #15203
OCPBUGS-57931: Add the ability to launch multiple modals with useModal hook #15196
OCPBUGS-57580: Update vSphere configuration form to support CM YAML f… #15191
OCPBUGS-57743: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15188
OCPBUGS-57209: Add flags in console static plugin for all the components of this epic #15160
OCPBUGS-36173: Secret key with binary file changes when edited via Console. #15178
OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
Full changelog

console-operator

OCPBUGS-45869: don’t set current clients when no OIDC providers are configured #948
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-56928: bridge: Add option to enable port isolation #203
append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
OCPBUGS-55354: Fix dhcp #186
Full changelog

coredns

append .0 to go.mod version #134
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58835: CARRY: don’t ignore json files #339
Full changelog

docker-builder

OCPBUGS-57758: S2I build cpu limits observed by assemble are limited to 1 cpu #473
Full changelog

docker-registry

OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-57887: Update to Kubernetes v1.31.10 #2348
OCPBUGS-57070: UPSTREAM: <carry>: Bump cadvisor version to fix container_fs metrics #2332
OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
Full changelog

hypershift

OCPBUGS-57818: Reuse hosted cluster release and metadata providers #6301
OCPBUGS-58126: Don’t use /version for haproxy health checks #6323
OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
Full changelog

ibm-vpc-block-csi-driver

append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55297: [IBM VPC] set offlineExpansion to false in e2e test manifest #144
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
OCPBUGS-55364: Delay determining the hostname to put into ignition #183
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-storage-version-migrator

append .0 to go.mod version #216
Full changelog

machine-api-operator

OCPBUGS-57057: Updates GCP CredentialsRequest #1376
Full changelog

machine-config-operator

OCPBUGS-55246: kubelet: readonly mounts for criometricsproxy #4998
OCPBUGS-58067: Ensure the build controller restarts on upgrade #5140
OCPBUGS-57328: Do not set cpu system reserve below the default value #5152
OCPBUGS-56624: Give keepalived container chroot cap #5073
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #5138
OCPBUGS-57935: add MachineConfiguration to CO related objects #5134
OCPBUGS-54463: Update desired config in MCN on OCL update #5026
OCPBUGS-57900: MCC complains about v1 MachineOSConfig in default featureset #5131
OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
Full changelog

multus-admission-controller

append .0 to go.mod version #96
Full changelog

multus-networkpolicy

append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

append .0 to go.mod version #370
Full changelog

must-gather

append .0 to go.mod version #491
Full changelog

network-interface-bond-cni

OCPBUGS-58095: Bump github.com/containernetworking/plugins from to 1.7.1 #79
OCPBUGS-57794: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 #74
NO-JIRA: Add ci-operator yaml file #78
Full changelog

network-tools

Fix build error #147
Full changelog

networking-console-plugin

OCPBUGS-57286: Fix pod context #251
CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
Full changelog

oauth-proxy

OCPBUGS-58312: fix e2e tests #325
Full changelog

oauth-server

append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-58272: Fixes the tag when rebuilt catalog by digest only (#1204) #1204
OCPBUGS-57387: v2/archive: fix sanitization of . (#1196) #1196
OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1195) #1195
OCPBUGS-57197: [release-4.18] v2/cli: always remove past archives before m2d (#1176) #1176
OCPBUGS-56486: v2/config: allow delete and mirror words (#1175) #1175
OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1173) #1173
OCPBUGS-56659: v2/archive: print unarchive progress (#1160) #1160
OCPBUGS-54653: delete: continue on errors (#1146) #1146
OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
Full changelog

openshift-apiserver

OCPBUGS-56609: Fix image reference in TestImageStreamImportQuayIO #514
Full changelog

openshift-controller-manager

OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44458: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #365
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-57427: reduce cache expiry frequency [release-4.19] #1020
OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
Full changelog

operator-marketplace

ART-13123: append .0 to go.mod version #637
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-57318, OCPBUGS-58159: DownStream Merge Sync from 4.19 [06-26-2025] #2646
OCPBUGS-46401, OCPBUGS-48710, OCPBUGS-55263: DownStream Merge Sync from 4.19 [05-28-2025] #2593
OCPBUGS-57108: Fix hybrid overlay node subnets collision with cluster subnets #2619
OCPBUGS-57106: Increase InformerSyncTimeout to 60s #2622
OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-58366: Make EgressIP helper functions more reliable #29950
OCPBUGS-57081: Do not set the MTU when using NetworkAttachementDefinition #29891
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #29937
OCPBUGS-57329: Fix failed tests of e2e-aws-ovn-tls-13 #29911
OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github