4.18.24

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.24-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.28, 4.17.29, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.18.11, 4.18.12, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.3

Created: 2025-09-11 20:32:05 +0000 UTC

Image Digest: sha256:2db093f063ad5310fa4e5ed2d2eda4bad5215c47092b72d1cfafbcfdbf1f4dd2

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.6 to 1.31.12
Kubernetes Tests upgraded from 1.31.1 to 1.31.10
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202502250906-0 to 418.94.202509100653-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-machine-controllers

Rebuilt images without code change

aws-cloud-controller-manager git c3951906 sha256:b4726a04cff370257998a7cc9207cf0cc4e6a4dc60644e081a41ccd5a0dc1954
aws-ebs-csi-driver git b51cd6b8 sha256:bd577cf6f20139451082f414f357ae153198d67b0cf8d9e49ca3c94097e294ec
aws-kms-encryption-provider git 088dcaf7 sha256:7ad7c7f55a4275865903041d614f3fd967ff84f0c9c065e561493f01e2ed7f06
aws-machine-controllers git 53274f11 sha256:ba21f8bd08bb290d28a63f69e47ea2b4e5143c71521e1a77e1d27ba5344529a2
azure-cloud-controller-manager git 9c24d768 sha256:fe95dddcbb6ad985f1abf71bedc9105fbaee775b7bf0bf3530f6f7f465ea2b85
azure-cloud-node-manager git 9c24d768 sha256:baacd8597aff346f78ba94011b60955c608f51bed276b0742ccee9cd41db6a9b
azure-disk-csi-driver git 6cced666 sha256:ce97ea05de2f950133ae08adcb37a30469e72108aad2ba29b80c8951583d8f8b
azure-file-csi-driver git 4b34592e sha256:d533a43023d362686ad83189478fde88a409c11ce75e80575d1a22a727db555d
baremetal-machine-controllers git 1ede6c3f sha256:dfb125d11cb811134851f61508d8059d0adac3c6d590fa7c2bada4dbdad4a0ea
cluster-autoscaler-operator git 474ad65c sha256:0b16345d88483bdbc0f206bfadeda44c599f2f99be5ca2d8d26bd17498aefa09
cluster-bootstrap git d1e01954 sha256:6a0e4b376850f122b96e292a82fc0274c13bee53677cffc2a74c0f36f23f5502
cluster-config-operator git 85cb4072 sha256:77f72e84b49008577795a8a04de6db0f13e446bff73d3f8af80a5c6a3eafbcb4
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:4fbf24ac95601cc94e3bdb7bc05eeb6eda8175d03c655384c3acf61e2110169a
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:d22d102a41f921439cbaa35fdfc0fb02ac9f0327814307bb5affe1ae0d650117
cluster-kube-cluster-api-operator git 33a1141e sha256:c42319f16ad8a0ee806b72f2fce0bb006cef32bf7f846f1a73d769ee7363ec2e
cluster-kube-scheduler-operator git 6182930d sha256:99b477c11a483a0132e2ebd3ad841ecb7c8c40418c5d4148a639f211af8a3051
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:741c78b15b9ba9546e0e7c604340c1dad1300984abf5bb5dcfeef4e26f68d72c
cluster-machine-approver git 01d5fbbe sha256:1e4071388f80bc934bfa4a9d88a017f471ec5994bc00d123c749f8492cc9422e
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:c3b95206d3d2e0fd6597e1942a2413a4f22f4fc330d8f364b3984357fb9dac53
cluster-openshift-controller-manager-operator git f1711cf3 sha256:b9c5e92578611b73960d270c323c920981a88555b1fe2d2a3757f63b37c2bd7b
cluster-policy-controller git 5fd85252 sha256:0be6bb6e904e00eef654187a91d076e754e271ee4ed37376059e6df14808bd79
csi-driver-nfs git 32e77590 sha256:7c93e80da2c9ba7b1b3fe5fe7da0ebe23a9fa48fb2540652254a4bc53555fb72
csi-external-attacher git 39b37c06 sha256:fec70700a877f04261c7b436a07c005f350a2d3f98266e5c776c2497827ff4a8
csi-external-provisioner git 376f0ea0 sha256:a7affde9de724bf12977a94092d6fbde9d4402d09435593aafbdc9a8ef6bed55
csi-external-resizer git cca3837a sha256:6fd4da763ae227ef820cb7d1f29672daea1fa393135fe8bd15f290f65544b57a
csi-external-snapshotter git 838d2484 sha256:74c2591df740a749c17d46b2b16ad4d2269113ae6d3addfccb2e87abd79e1d03
csi-livenessprobe git 3a977844 sha256:beb0eceb6c4e500c2fdec6d6e134c27a43412e18a689200a7dd8fdd2b11de34b
csi-node-driver-registrar git c21f5d02 sha256:551607ee7db3f2c2c4dfe871b878d1b2fbdede38509970ff3360e8c17765301a
csi-snapshot-controller git 838d2484 sha256:7c16eee7d59491d224693ad415252a917a02172f5dc7c43bc4362cb874fcd69c
csi-snapshot-validation-webhook git 838d2484 sha256:01673573a2233bbde40cff5ba1b69757393f0438698b9d80642f17305e2956ef
driver-toolkit git 2e139edc sha256:daf9c36c34f10270ee946b5053f33560f27d711ae018172c962d7656132c5a32
egress-router-cni git 3193a756 sha256:a5651deff75744b1ac61dcfaf58cb14ee0f86fd1e2d0098726bdb68c0f2d2dde
gcp-cloud-controller-manager git 6ea23561 sha256:de236731891f7dfa8ed0e2a23e9097c8470fa352c133cfe01238893f298d2ddd
gcp-pd-csi-driver-operator git 7cb8b38c sha256:4e2dc512358da664c3670f772d973593d65125083c207a9e8c14d3773bfc8ad9
gcp-workload-identity-federation-webhook git f0a670c7 sha256:7a1a0fda0a4111d46ed0e6cfe219d2aaa41173d2bd3622e141cc1e4aae802322
ibm-cloud-controller-manager git a33026b1 sha256:aff97fc1670b0f61751afd1b9041c6c8f64bba14312aac745914ca2b550e3d2c
insights-runtime-exporter git 7149f2d5 sha256:b5191f4b74be8b0a3696c5a4002631d48cb0913a63236653fc21a5b204639b58
insights-runtime-extractor git 7149f2d5 sha256:07878efa1db534354c57d53aaee36fdee6ffa8b4b70640b2283936ff03d699bf
ironic-static-ip-manager git cfbae04f sha256:14bf68257b9fb084390ae9a3daf12d0a840aabceb0835f988ff595ccbf0dfd5a
keepalived-ipfailover git 716eb0ef sha256:a93686b39effc60d65777de16343550aa32e9dd4db0b2e7a4a754b1d2ffde210
kube-metrics-server git 962ccca2 sha256:04fdc2103033d8e7fe6caa325c8c3fc1891ca97b93af1f36ce798b5e054ce311
kube-state-metrics git cb5a9296 sha256:defa9836b4b042382846f8c426c2f128b7f8164dbf003e85a398d5839b066c18
kubevirt-cloud-controller-manager git 3f4542ec sha256:7b221c502e1e278603797782e8dc9bfa8f01dd48ca147eb87a5012b55c94b886
libvirt-machine-controllers git a336f0b5 sha256:e74f314329efd4753ad80ebccb4be620940891444680334c0f358a35e529070d
multus-route-override-cni git 391c1b03 sha256:702522f272dcd02ef1c2f5f1e5d79cdf1553c95f5a6845df6f3d7bbc41b39afb
nutanix-cloud-controller-manager git d9fe8f38 sha256:1919d99ef9c78ec8a80972877a90cc29d561a4c36f1204d81ecf19e0e20fe301
oauth-apiserver git 2575ff41 sha256:3cc381e14ab1c69bb7b8aad5107fe359d18a833c8fba10b0538ff1d82f136952
openstack-machine-api-provider git d914e77e sha256:6dd49618c048f528797a5d3a554eeb816aee6e4f00d2dca93e8895c1c616e1fe
ovirt-csi-driver git 1db726a9 sha256:20a7168b9b01880606f8835ef8502d596d5a50fcc9a79dfd160bb90794c675a1
ovirt-csi-driver-operator git 0feae256 sha256:31389d14348bbca6cd44f3aa01e677dd5a50fb77a30cc5b386fc5d92ce3331d7
powervs-block-csi-driver git d36aea34 sha256:4d0dca582af5804bdd9726e3688f244571c3bcf031d04f2e2b8291192edbe049
powervs-block-csi-driver-operator git 01fc505a sha256:246d27dec1cbf7c6d0f37aab82ee2a4818b1240b43084a9e1d348c7c21c7a643
powervs-cloud-controller-manager git 17ae6fba sha256:7d4f5fb2ab159fd80a98eb61d0905fb87073728a1ef165a60760cbeccae3bed7
rhel-coreos sha256:06078dcc5ea8f5131c092574e4dd1fe94d9e73c627f593d2e06487f348bf2766
rhel-coreos-extensions sha256:5fdbbb5d45437afd5afef69c8389d560b98447c0c2167156e6cc9fc47df860b5
vsphere-cloud-controller-manager git c414d1f5 sha256:7a4ecd4447c07a18513e971809e60c11e7c7932f2dca9d21fc81419a21b1c424
vsphere-csi-driver git cfcad01d sha256:2ad23da069e0ba34affa6f0ea9577289b1460b534130a5e0a594fb1a47b87168
vsphere-csi-driver-syncer git cfcad01d sha256:7b22bcb98a3aa3451cc3419760a91da8f92a93616e6694c2e125787489a47415

agent-installer-api-server

OCPBUGS-58635, OCPBUGS-58640: Bump glog to v1.2.5 in release-4.18 (#7877) #7877
OCPBUGS-56596: Include AdditionalTrustBundlePolicy in installConfig (#7751) #7751
OCPBUGS-47627: dnsmasq service on OCP SNO fails to read /etc/resolv.conf file during system startup (#7257) #7257
OCPBUGS-54378: Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) #7483
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) #7456
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58650: Bump glog pkg to 1.2.4 (#1181) #1181
OCPBUGS-53721: Bump jwt to 4.5.2 in release-4.18 (#1085) #1085
Full changelog

agent-installer-node-agent

OCPBUGS-58655, OCPBUGS-58660: Bump glog to v1.2.5 in release-4.18 (#1069) #1069
OCPBUGS-52994: Update to latest ghw version (#958) #958
MGMT-20227: Skip Motherboard serial if set to “-” (#955) (#957) #955
OCPBUGS-54544: Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) #965
OCPBUGS-53713: Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) #963
Full changelog

agent-installer-utils

append .0 to go.mod version #109
Full changelog

apiserver-network-proxy

append .0 to go.mod version. #81
Full changelog

aws-cluster-api-controllers

OCPBUGS-58670, OCPBUGS-58675: bump github.com/golang/glog to v1.2.5 #556
OCPBUGS-56434: Update manifests to use v1 admissionregistration group #554
OCPBUGS-53729: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 #543
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-55053: Correct ASH driver inject env config #381
OCPBUGS-54453: Enable required driver services #375
OCPBUGS-60596: Bump library-go to fix assignment to nil map issue #421
OCPBUGS-60203: Remove stale conditions #413
OCPBUGS-54383: Disable remove-not-ready-taint for azure disk csi driver #374
Full changelog

aws-pod-identity-webhook

OCPBUGS-51231: github.com/go-jose/go-jose/v4 v4.0.5 #201
Full changelog

azure-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #348
Full changelog

azure-kms-encryption-provider

OCPBUGS-53497: bump golang-jwt v4 #11
Full changelog

azure-machine-controllers

OCPBUGS-56167: [release-4.18] Update virtualmachines service to armcompute/v5 SDK #145
OCPBUGS-56654: Fix failure when attempting to modify immutable availabilitySet #153
OCPBUGS-55373: Update eviction policy for Spot VMs from Deallocate to Delete #139
OCPBUGS-54355: Re-reconcile machine on NIC provisioning failure #135
Full changelog

azure-workload-identity-webhook

OCPBUGS-53801: github.com/golang-jwt/jwt/v4 v4.5.2 #31
OCPBUGS-51233: github.com/go-jose/go-jose/v4 v4.0.5 #27
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #51
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-61178: Refine check for supported SNO platforms #9923
OCPBUGS-60592: baremetal: always set external v6 URL on dualstack #9895
OCPBUGS-54598: Update the RHCOS 4.18 bootimage metadata #9900
OCPBUGS-56177, OCPBUGS-59155, OCPBUGS-59158: Migrate AWS SDK to V2 to support MX-Central Region #9709
OCPBUGS-58321: allow to deploy single nodes with UPI #9824
OCPBUGS-54744: Filter out excess CA certs when adding node #9647
OCPBUGS-58264: vSphere - remove unit tests using nip.io #9813
OCPBUGS-56797: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9747
OCPBUGS-57139: ensure ctrplane nodes can access bootstrap MCS #9772
OCPBUGS-57220: sort zone slices extracted from map of byo subnets #9774
OCPBUGS-56864: Update Control Plane replica validation for Single Node OpenShift #9758
OCPBUGS-50690: vsphere - check if host is powered down or on standby before uploading template #9468
OCPBUGS-53142: PowerVS: COS eu-es hack #9626
OCPBUGS-50840: Fix panic when there are no available IPs #9479
OCPBUGS-55794: IBI nmstate unit test fix #9692
OCPBUGS-54947: Fix Load balancer IP setup #9659
OCPBUGS-45564: Align vSphere UPI haproxy config with IPI #9276
OCPBUGS-53453: IBMCloud: Move to IBM TF openshift fork #9592
OCPBUGS-53422: Avoid adding duplicate entries to NO_PROXY #9588
OCPBUGS-52515: Remove error logging when determining image arch #9539
OCPBUGS-52429: Remove tmp directory used for agent pxe files #9536
OCPBUGS-51211: Fixes panic during GCP tags fetch due to unstable network #9513
OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
Full changelog

baremetal-operator

OCPBUGS-56766: Make firmware update handle only a subset of Spec.Updates #421
OCPBUGS-56431: Redfish: correctly handle missing system ID #417
OCPBUGS-53324: BMO can expose any secret via BMCEventSubscription CRD #405
OCPBUGS-45250: Remove dataImage finalizer if BMH is missing #389
Full changelog

baremetal-runtimecfg

OCPBUGS-59280: Bump logrus version #354
OCPBUGS-57782: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #351
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-58233: Return error in case of error #2054
OCPBUGS-57507: avoid transfering permissions when copying artifacts from node-joiner pod #2039
OCPBUGS-56240: Adding sos.conf file for default sos config into the tools image #2021
OCPBUGS-55449: Get installer image from configMap for node-image command #2013
OCPBUGS-55647: Use fedora image in unit tests instead of centos #2014
Full changelog

cloud-credential-operator

OCPBUGS-60971: ccoctl: aws to use proper issuer url on subsequent runs #907
OCPBUGS-60618: ccoctl azure dnszone-resource-group-name now optional #899
OCPBUGS-58680: github.com/golang/glog v1.2.5 #891
OCPBUGS-58247: ccoctl: only add owned tag to azure resources on create #882
OCPBUGS-56979: Azure: resolve nil pointer exception when role assignment exists #869
OCPBUGS-54827: Render: configure proxy on bootstrap static pod #862
OCPBUGS-53825: update github.com/golang-jwt/jwt #837
OCPBUGS-53345: github.com/golang/glog v1.2.4 #835
OCPBUGS-51550: Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected #822
OCPBUGS-51237: github.com/go-jose/go-jose/v4 v4.0.5 #824
Full changelog

cloud-network-config-controller

OCPBUGS-56156: Increase API call timeout to 30 second #170
Full changelog

cluster-authentication-operator

OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #754
OCPBUGS-54569: Avoid duplicate OAuth client creation #764
Full changelog

cluster-autoscaler

OCPBUGS-60908: revert openshift replica fix #375
OCPBUGS-60235: fix checkpoint gc of unknown recommenders #368
OCPBUGS-59260: Fix cool down status condition to trigger scale down #361
OCPBUGS-53241: improve replica counting and decrease target size behavior #346
Full changelog

cluster-baremetal-operator

OCPBUGS-60586: Remove webhookport (9447) as HostPort #501
OCPBUGS-58315: Bump github.com/go-errors/errors to v1.5.1 #492
OCPBUGS-53080: Add missing relatedObjects #467
Full changelog

cluster-capi-controllers

OCPBUGS-56434: Update manifests to leverage v1 admissionregistration group #241
Full changelog

cluster-capi-operator

OCPBUGS-56919: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #308
OCPBUGS-56434: Should not use v1beta1 of the AdmissionRegistration API group #298
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-60015: Add Service using common resource templating #405
OCPBUGS-60015: Update service selector to match deployment label #403
Full changelog

cluster-config-api

OCPBUGS-52347: Add CEL validation for RegistrySources in Image API #2218
OCPBUGS-60904: MachineOSConfig name should match MachineConfigPool #2458
Update crd-schema.json to release 1.33 branch #2459
: add OnClusterBuilds to default config #2365
Merge #2316
OCPBUGS-56183: Add IPsec API for NAT-T UDP encapsulation support #2331
OCPBUGS-55792: [release-4.18] config: add uid and extra claim mappings for external OIDC configuration #2311
OCPBUGS-53221: Allow spaces in AWS resource tags #2239
OCPBUGS-54784: [release-4.18] Bump openshift/controller-tools to latest commit #2267
OCPBUGS-51295, OCPBUGS-51380: Reject new NodeStatus with revision set #2215
OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
Full changelog

cluster-dns-operator

OCPBUGS-52514: [release-4.18] Add runbook_url for CoreDNSErrorsHigh #429
Full changelog

cluster-etcd-operator

OCPBUGS-61235: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1478
OCPBUGS-59992: fix ordering on bootstrap IP selection #1458
OCPBUGS-59803: add missing ports to svc and pod spec #1455
OCPBUGS-56834: etcd pod containers do not start when tls min version is 1.3 #1428
OCPBUGS-56110: adjust alerts according to platform #1424
OCPBUGS-53513: fix CVE-2025-30204 #1413
OCPBUGS-55066: increase etcdGRPCRequestsSlow duration #1408
Full changelog

cluster-image-registry-operator

OCPBUGS-53873: bump github.com/golang-jwt/jwt #1217
OCPBUGS-51606: bump golang.org/x/oauth2 #1208
Full changelog

cluster-ingress-operator

NE-1951: Pre-upgrade Admin Gate for Gateway API CRD Management Succession #1196
NE-1952: Pre-upgrade check for Gateway API CRD Management Succession #1193
OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-61039: Set goaway chance to 0.001 #1912
OCPBUGS-60176: Add missing service ports to apiserver service #1888
OCPBUGS-56030: bump library-go to bring in updated audit policies #1843
OCPBUGS-49898: bindata/alerts/slo: improve burnrate calculation #1808
OCPBUGS-53066: Bump library-go #1828
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60131: Missing endpoint slices for open ports the operator uses #852
Full changelog

cluster-monitoring-operator

OCPBUGS-59962: operator: increase wait time till degraded to max 4 times 5m #2633
OCPBUGS-56251: set upgradable false when alertmanager v1 is specified #2591
OCPBUGS-55005: chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and set CMO to Upgradeable=false if errors are found #2592
OCPBUGS-53024: Fix opentelemetry metrics to use regexp on label match #2578
OCPBUGS-52565: Bump prometheus-operator to 0.78.2 #2576
OCPBUGS-50706: Add incidents metric to telemetry #2570
Full changelog

cluster-network-operator

OCPBUGS-60984: Update CNO reviewers/approvers #2766
OCPBUGS-60795: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2782
OCPBUGS-47651: Re-disable metrics server #2622
OCPBUGS-58047: Add cert-rotation script into cno #2702
OCPBUGS-56183: Implement IPsec NAT-Traversal encapsulation option #2711
OCPBUGS-54717: Add IPv6 NGINX configuration #2683
OCPBUGS-50582, OCPBUGS-52949: Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods #2644
OCPBUGS-52837: frr-k8s: rename validatingwebhook name #2661
OCPBUGS-48305: frr-k8s: align manifests with operator #2657
OCPBUGS-41178: Updating cluster-network-operator-container image to be consistent with ART for 4.18 #2491
Full changelog

cluster-node-tuning-operator

OCPBUGS-61078: e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1388) #1388
E2E: skip stalld test case checking sched_fifo (#1387) #1387
e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) #1355
: OCPBUGS-57947: kernelPageSize + hugepages combinations validation ³⁄₃ #1343
: OCPBUGS-57947: Support hugepage size selection for ARM-based clusters ²⁄₃ #1342
OCPBUGS-57947: CNF-18142: Add kernel page size field ¹⁄₃ #1341
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) (#1306) #1303
machineconfig: add support for various hugepage sizes. (#1299) #1299
OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
e2e: common way to fetch poolName (#1255) (#1300) #1255
Full changelog

cluster-olm-operator

OCPBUGS-57767: fix olm.maxOpenShiftVersion float parsing #125
OCPBUGS-48478: [release-4.18] Add openshift node selector annotation #116
Full changelog

cluster-samples-operator

OCPBUGS-55783: Samples Operator should sort failing image imports #638
OCPBUGS-55782: only update LastTransitionTime if operator status change #637
OCPBUGS-55781: Adding filter to clusterOperatorInformerEventHandler #636
OCPBUGS-54258: Adding mutex to func createSamples on handler.go #615
OCPBUGS-54351: add rhdmalone to owners #617
Full changelog

cluster-storage-operator

OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #72
Full changelog

cluster-version-operator

OCPBUGS-58450: Failing=Unknown upon long CO updating #1211
OCPBUGS-60222: CVO protects /metrics with authorization #1223
OCPBUGS-55359: install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 #1181
Full changelog

configmap-reloader

append .0 to go.mod version #69
Full changelog

console

OCPBUGS-60236: Make sure CSP violations are only reported to telemetry once per day per browser #15453
NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish #15456
OCPBUGS-50983: Store Topology sidebar alert in the localStorage #15431
OCPBUGS-54660: Added patternfly/react-topology to shared module list of dynamic plugin sdk #15371
OCPBUGS-50570: Fix regression where plugins were not tracking CSP violation status a… #14754
OCPBUGS-60140: Recognize Detached BMH status #15362
OCPBUGS-54660: Add BaseNode in topology folder into Dynamic Plugin SDK #15369
: OCPBUGS-60278: Fix i18n string for event stream #15403
OCPBUGS-54660: Expose OdcBaseNode through the dynamic plugin SDK #15370
OCPBUGS-54660: Expose topology components and utils via plugin SDK internal package #14777
OCPBUGS-58364: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15272
OCPBUGS-59778: add data-test attrs to console plugins table #15327
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15330
OCPBUGS-59501: Add the Origin header to the HeaderBlacklist in the co… #15295
OCPBUGS-59443: Not able to launch terminal window from OCP web console due to console plugin conflicts #15290
OCPBUGS-59446: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15292
OCPBUGS-58457: fix bug where / in console.tab/horizontalNav href brea… #15250
OCPBUGS-58203: OpenShift console PVC clone cannot use B as the unit #15215
OCPBUGS-58317: Implement sessions in openshift authenticator #15237
OCPBUGS-58088: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15202
OCPBUGS-58089: Getting “Oh no something went wrong” error message in web console. #15203
OCPBUGS-57931: Add the ability to launch multiple modals with useModal hook #15196
OCPBUGS-57580: Update vSphere configuration form to support CM YAML f… #15191
OCPBUGS-57743: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15188
OCPBUGS-57209: Add flags in console static plugin for all the components of this epic #15160
OCPBUGS-36173: Secret key with binary file changes when edited via Console. #15178
OCPBUGS-57181: Fix ‘/metrics’ endpoint token review to handle interna… #15153
OCPBUGS-57353: fix VirtualizedTable runtime error if sortColumn is no… #15173
OCPBUGS-57093: Add all files to vendor regardless of gitignore #15131
OCPBUGS-56774: [knative] Self-provisioner user can not access or create event sources via ODC #15095
OCPBUGS-56862: Sample segment sessions #15103
OCPBUGS-56757: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15093
OCPBUGS-54337: Debug pod logs are not accessible when debugging a node via OpenShift Console #14942
OCPBUGS-56255: remove 60 day alert from cluster update modal #15055
OCPBUGS-55991: Remove the devconsole backend common internet proxy and replace it with dedicated ones #15043
OCPBUGS-53172: Include init containers in readiness count if ready and started is true #14884
OCPBUGS-54899: Fetching taskRuns in PLR details page using PLR UID also #14961
OCPBUGS-54888: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14959
OCPBUGS-45369: Authenticate user token in openshift Authenticate func #14664
OCPBUGS-55195: fix bug where operator appears twice #14984
OCPBUGS-54269: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14905
OCPBUGS-52372: VolumeSnapshots are not displayed in OpenShift Web Console #14833
OCPBUGS-52406: Retain original path when detecting perspective #14834
OCPBUGS-52371: Update the monitoring topic used by the console team #14832
OCPBUGS-52490: enable clicking outside NodeLogs Selects to close them #14843
OCPBUGS-50501: Updating cypress config to have video enabled for the CI results #14831
OCPBUGS-52511: Remove logoutOpenShift method call #14845
OCPBUGS-50609: update the Deployment pod on change in imageStream #14757
OCPBUGS-50648: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14761
OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
OCPBUGS-51180: Linkify OLM operator uninstall message #14789
OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

NETOBSERV-2023, OCPBUGS-60304: Implement a quickstart for netobserv operator #997
OCPBUGS-60081: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1031
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #1027
OCPBUGS-45869: don’t set current clients when no OIDC providers are configured #948
OCPBUGS-52294: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #966
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-56928: bridge: Add option to enable port isolation #203
append .0 to go.mod version #196
: OCPBUGS-56928: Add a new firewall ingress-policy “isolated” #191
OCPBUGS-55354: Fix dhcp #186
OCPBUGS-55346: Check error returned by ipv6 SettleAddresses #185
Full changelog

coredns

append .0 to go.mod version #134
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58835: CARRY: don’t ignore json files #339
OCPBUGS-43430: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 #312
Full changelog

docker-builder

OCPBUGS-57758: S2I build cpu limits observed by assemble are limited to 1 cpu #473
OCPBUGS-48071: Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility #464
OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
Full changelog

docker-registry

IR-526: remove AWS region check #437
OCPBUGS-53657: bump jwt and oauth dependencies #430
Full changelog

etcd

OCPBUGS-57112: Updating ose-etcd-container image to be consistent with ART for 4.18 #333
Revert “ETCD-727: Rebase etcd 3.5.21 openshift 4.18” #332
ETCD-727: Rebase etcd 3.5.21 openshift 4.18 #325
OCPBUGS-55724: Add configurable option for hardware-related timeout delay #328
DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue #312
ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
Full changelog

gcp-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #247
Full changelog

gcp-machine-controllers

OCPBUGS-59387: Add max-concurrent-reconciles flag to machine actuator #126
OCPBUGS-52495: OCPBUGS-52494: Disable shielded VMs for non-UEFI disks #112
Full changelog

gcp-pd-csi-driver

OCPBUGS-44769: Fix RWX mode for hyperdisks #74
Full changelog

haproxy-router

OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-60511: Bump to v1.31.12 #2440
OCPBUGS-60524: podresources: list: use active pods #2413
UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2422
OCPBUGS-57488: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2333
OCPBUGS-57499: UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image #2399
OCPBUGS-44757: Adjust NodeMonitorGracePeriod to 50s #2385
OCPBUGS-59535: Rebase v1.31.11 to 4.18 #2377
OCPBUGS-57887: Update to Kubernetes v1.31.10 #2348
OCPBUGS-57070: UPSTREAM: <carry>: Bump cadvisor version to fix container_fs metrics #2332
OCPBUGS-57219: kubelet: fix a stall on startup from waiting too long for a stat call #2324
OCPBUGS-56835: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2316
OCPBUGS-56384: Propagate error when creating CustomResourceStorage instead of panicking #2303
OCPBUGS-56438: Update to Kubernetes v1.31.9 #2307
OCPBUGS-56192: UPSTREAM: 131236: RWX tests should create RWX volumes #2300
UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… #2283
OCPBUGS-55267: Update to Kubernetes v1.31.8 #2278
: OCPBUGS-54807: skip tests on platform type External #2268
OCPBUGS-53015: Update to Kubernetes v1.31.7 #2248
Full changelog

hypershift

OCPBUGS-57142: [release-4.18] HCP payload doesn’t respect multiple mirrors #6672
OCPBUGS-60485: feat(validations): add wildcard support to DNS SAN conflict detection #6649
OCPBUGS-60148: Always compress and encode payload in token secret for inplace upgrades #6721
OCPBUGS-60923: MCE 2.8 konflux for hcp-cli #6700
CNTRLPLANE-1333: New API to support specifying cluster-autoscaler flags #6641
OCPBUGS-60458: Update PSA from v1beta1 to v1 #6644
CNTRLPLANE-1269: chore(deps): update konflux references #6658
CNTRLPLANE-1205: Add missing mce-2.8 pipeline #6656
OCPBUGS-59503: [release-4.18] Support proxy authentication when user/pass is included in URL #6460
CNTRLPLANE-1229: Move CPO pipeline to hermetic builds #6597
OCPBUGS-57818: Reuse hosted cluster release and metadata providers #6301
OCPBUGS-58126: Don’t use /version for haproxy health checks #6323
OCPBUGS-57273: Add proxy variables for the MCD Pod #6247
OCPBUGS-56166, OCPBUGS-56955: Fix CatalogSource images check when unauthorized #6237
OCPBUGS-56166, OCPBUGS-56955: Add support for registry root entry only in the IDMS/ICSP #6163
OCPBUGS-56627: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6186
CNTRLPLANE-917: Konflux build pipeline service account migration #6084
OCPBUGS-56524: switch admissionregistration API to v1 #6172
OCPBUGS-55177: Don’t check if olm images exist if guest cluster #6065
OCPBUGS-55230: Add annotation to configure KAS goaway-chance #6066
OCPBUGS-54865: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #6020
OCPBUGS-54737: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #6052
OCPBUGS-55148: Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz #6059
OCPBUGS-54946, RHOCPPRIO-433: Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs #6091
OCPBUGS-55146: Use 135 for terminationGracePeriodSeconds for v2 KAS #6057
OCPBUGS-54698: Add missing servicemonitors and prometheusrules permissions for non-OVN #6000
OCPBUGS-53404: Set shutdown watch termination grace period on kube-apiserver #5874
OCPBUGS-51810: Fix golang crypto dependency go.mod replacement #5992
OCPBUGS-54814: [release-4.18] add feature set aware feature gates to HO and CPO #6014
OCPBUGS-54624: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5980
OCPBUGS-54630: Sync RBAC for attaching volumes on VM level #5988
OCPBUGS-54627: Use system trust bundle in CPO IDP https client #5981
ARO-15695, OCPBUGS-54625: backport capabilities api #5964
OCPBUGS-54411: Backport PR 5876 to release-4.18 #5936
OCPBUGS-54498: Support hypershift-operator scoping for secretJanitor #5961
OCPBUGS-54609: [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable #5950
NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 #5963
OCPBUGS-53905: bump golang-jwt v4 and v5 #5905
ART-11792: update go mod dependency for konflux #5919
OCPBUGS-51739, OCPBUGS-51810: Bump dependencies to OCP fork in backports #5898
OCPBUGS-53321: Handle multiple mirror entries for source #5890
OCPBUGS-51239: fix(deps): bump go-jose #5858
OCPBUGS-52982: Fix audit-logs container to properly handle SIGTERM #5774
OCPBUGS-52863: stop using dev mode for loggers #5811
OCPBUGS-52878: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5780
OCPBUGS-52516: Make managed-trust-bundle optional #5783
OCPBUGS-52417: [release-4.18] refactor aws identity health check into new controller #5770
OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58741: bump github.com/golang/glog to version v1.2.4 #104
append .0 to go.mod version #96
OCPBUGS-55283: tech debt: rework vendor patches #89
OCPBUGS-53913: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #82
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55297: [IBM VPC] set offlineExpansion to false in e2e test manifest #144
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51825: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #120
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #119
Full changelog

ibmcloud-machine-controllers

OCPBUGS-47135: CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] #69
OCPBUGS-52872: IBMCloud: MAPI replacing unhealthy CP nodes #62
Full changelog

insights-operator

avoid possible Go panic when searching existing conditions (#1124) #1124
fix: incorrect anonymization of domains (#1115) #1115
feat: add permissions to gather clusterrole (#1113) #1113
feat: copy proxy envs from IO pod to gathering pods (#1105) #1105
OCPBUGS-51163: Fix bad IPv6 address (#1074) #1074
Full changelog

ironic

OCPBUGS-55938: Extract files one-by-one in logwatch #657
METAL-1302: Do not use openstack packages #646
OCPBUGS-52290: Fix runlogwatch script #642
Full changelog

ironic-agent

OCPBUGS-56097: collect the entire journal from the host #189
OCPBUGS-55364: Delay determining the hostname to put into ignition #183
METAL-1302: Do not use openstack packages #178
Full changelog

ironic-machine-os-downloader

append .0 to go.mod version #103
Full changelog

kube-rbac-proxy

OCPBUGS-60930: fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 #125
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). #225
append .0 to go.mod version #216
Full changelog

kubevirt-csi-driver

OCPBUGS-54630: Ensure volume stays attached through reboots #55
Full changelog

machine-api-operator

OCPBUGS-57057: Updates GCP CredentialsRequest #1376
OCPBUGS-52494, OCPBUGS-52496: Updates GCP credentials request #1341
OCPBUGS-52567: add image/read permissions #1342
OCPBUGS-51263: Drop oVirt support #1333
Full changelog

machine-config-operator

OCPBUGS-57357: Race in configure-ovs.sh affects bonding interface configuration. #5118
OCPBUGS-59929, OPNET-681: Support migration to NMState #5207
OCPBUGS-60034: Add workaround fix for static pod race #5212
OCPBUGS-56751: Support NODEIP_HINT in IPI deployments too #5081
OCPBUGS-55246: kubelet: readonly mounts for criometricsproxy #4998
OCPBUGS-58067: Ensure the build controller restarts on upgrade #5140
OCPBUGS-57328: Do not set cpu system reserve below the default value #5152
OCPBUGS-56624: Give keepalived container chroot cap #5073
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #5138
OCPBUGS-57935: add MachineConfiguration to CO related objects #5134
OCPBUGS-54463: Update desired config in MCN on OCL update #5026
OCPBUGS-57900: MCC complains about v1 MachineOSConfig in default featureset #5131
OCPBUGS-56900: Fix dynamic-system-reserved-calc.sh when only true parameter is used #5095
OCPBUGS-56517: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #5065
OCPBUGS-56585: scope MCD node listers to current node #5068
OCPBUGS-56867: Only update boot disks during GCP boot image updates #5089
OCPBUGS-56823: Boot Image Controller should not degrade when golden configmap is slow to update #5085
OCPBUGS-56703: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5078
Merge #5025
OCPBUGS-56401: Add hot loop detection in the boot image controller #5062
OCPBUGS-55638: OCPBUGS-55637: Add admin_acks handling in the MCO #5027
OCPBUGS-56217: Compare the osImageURLs for OS validation check #5052
OCPBUGS-56170: error from generateAndValidateRenderedMachineConfig function can be misleading #5049
OCPBUGS-55383: Leverage shared node.env for both AWS providerID and hostname units #5008
OCPBUGS-53427: pkg/operator/status: Drop kubelet skew guard, add RHEL guard #4956
[release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension #5018
OCPBUGS-54765: [release-4.18] kubelet-service: narrow down restorecon path #4978
OCPBUGS-55428: MSBIC should not update windows machinesets #5012
OCPBUGS-55290: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #5000
OCPBUGS-55293: Fix PollUntilContextTimeout in syncRenderConfig #5001
Update cluster operator’s status condition message #4993
OCPBUGS-53278: In OCL. Cannot install extensions #4945
OCPBUGS-54817: Make mtu-migration run after wait-for-primary-ip #4979
OKD-239: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4955
OCPBUGS-54462: OSUpdateStarted event should only be emitted on actual OS updates #4967
OCPBUGS-51132: [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4869
OCPBUGS-52949: Add ipsec connect wait service #4926
OCPBUGS-53306: Fixing typos for MachineConfigNode #4927
OCPNODE-2276: Set Upgradeable=False when cluster is on cgroup v1 #4921
OCPBUGS-53111: daemon: ensure ostree-finalize-staged is started before rebooting #4918
OCPBUGS-53110: Update ObservedGeneration in KubeletConfig #4917
[release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built #4859
OCPBUGS-50865: Make resolv-prepender env file optional #4855
OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
Full changelog

machine-image-customization-controller

append .0 to go.mod version #134
Full changelog

machine-os-images

OCPBUGS-53141: Change rhcos release browser url #55
OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
Full changelog

metallb-frr

OCPBUGS-55343: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #88
OCPBUGS-48305: Use metrics for readiness/liveness probes #76
Full changelog

monitoring-plugin

NO-JIRA: update i18n strings #508
OCPBUGS-60199: feat: add alerting rules tab to dev console #493
OCPBUGS-54314: Fix “Export as CSV” #461
OU-724: remove deleted image #376
Full changelog

multus-admission-controller

OCPBUGS-58771: Update the github.com/golang/glog module to v1.2.4 #101
append .0 to go.mod version #96
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-47470: adds getpodcontext (backport 4.18) #259
Full changelog

multus-networkpolicy

append .0 to go.mod version #70
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-59697: Prevent accidental IP deallocation in statefulsets #376
OCPBUGS-58360: The node slice controller should only process valid whereabouts confi… #381
OCPBUGS-58360: Add nodeslicecontroller bin to dockerfile #373
append .0 to go.mod version #370
OCPBUGS-55270: Fix whereabouts-reconciler no namespace error #362
Full changelog

must-gather

OCPBUGS-46437: Separate resources with comma to fix malformed inspect #470
append .0 to go.mod version #491
Full changelog

network-interface-bond-cni

OCPBUGS-58095: Bump github.com/containernetworking/plugins from to 1.7.1 #79
OCPBUGS-57794: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 #74
NO-JIRA: Add ci-operator yaml file #78
Full changelog

network-metrics-daemon

OCPBUGS-58781: Bump github.com/golang/glog to v1.2.4 (#111) #111
OCPBUGS-60174: Replace e2e test image (#120) #120
Full changelog

network-tools

Fix build error #147
Full changelog

networking-console-plugin

OCPBUGS-60178: Fix ingress details #264
OCPBUGS-60124: Fix requiremenets with no value #259
OCPBUGS-57286: Fix pod context #251
CNV-60065: fix cudn input name #240
OCPBUGS-49395: Add translations #238
Add translations scripts #234
Full changelog

nutanix-machine-controllers

OCPBUGS-51861: fixing CVE-2025-22868 #96
OCPBUGS-54616: Fix link-local addresses being added to machine #101
OCPBUGS-47268: fixing CVE-2024-45338 #91
Full changelog

oauth-proxy

OCPBUGS-57172: 4.18 kube 1.31 #317
OCPBUGS-58312: fix e2e tests #325
OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
Full changelog

oauth-server

OCPBUGS-57300: Updating oauth-server-container image to be consistent with ART for 4.18 #186
append .0 to go.mod version #179
Full changelog

oc-mirror

OCPBUGS-54622: cli/delete: fix workflow mode name output (#1229) #1229
OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1227) #1227
OCPBUGS-59798: Detect images from a Helm Chart with an aliased chart dependency (#1224) #1224
OCPBUGS-59235: [release-4.18] v2/archive: error d2m when no tar files found (#1212) #1212
OCPBUGS-58280: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1206) #1206
OCPBUGS-58272: Fixes the tag when rebuilt catalog by digest only (#1204) #1204
OCPBUGS-57387: v2/archive: fix sanitization of . (#1196) #1196
OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1195) #1195
OCPBUGS-57197: [release-4.18] v2/cli: always remove past archives before m2d (#1176) #1176
OCPBUGS-56486: v2/config: allow delete and mirror words (#1175) #1175
OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1173) #1173
OCPBUGS-56659: v2/archive: print unarchive progress (#1160) #1160
OCPBUGS-54653: delete: continue on errors (#1146) #1146
OCPBUGS-56043: Fix mirroring images with tag&digest in charts (#1142) #1142
OCPBUGS-54626: [release-4.18] cli: return distinct error codes depending on failure (#1125) #1125
OCPBUGS-55361: v2/operator: refactor operator FilteredCollector (#1134) #1134
OCPBUGS-51217: Fix CVE-2025-27144 (#1108) #1108
OCPBUGS-54727: Use tag 0.0.3+2 of catalog-filter (#1128) #1128
OCPBUGS-52978: delete: fix typo in –help output (#1121) #1121
OCPBUGS-52960: v2: fix setting version during build (#1118) #1118
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1114) #1114
OCPBUGS-52588: fix: error when no related image was found (#1106) #1106
CLID-325: adds cpu and memory profiling (#1103) #1103
fixes CVE-2024-0406 (#1101) #1101
v2: disable spinners when not running in a tty (#1082) #1082
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
Full changelog

olm-catalogd

UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
Full changelog

olm-operator-controller

UPSTREAM: <carry>: fix crdupgradesafety diff when items schema differ (#1863) #1863
Full changelog

openshift-apiserver

OCPBUGS-58461: Wire dry run option to Image API server operations #531
OCPBUGS-56609: Fix image reference in TestImageStreamImportQuayIO #514
OCPBUGS-52312: Skip blocked registry check for registries with mirrors #498
Full changelog

openshift-controller-manager

OCPBUGS-61002: legacy image pull secret rollback controller #411
OCPBUGS-57949: ignore error failing to find pull/push secrets #399
OCPBUGS-57344: Set node-pullsecrets volume to read-only to protect image pull credentials #392
OCPBUGS-55699: Empty proxy variables are causing issues during the build #377
OCPBUGS-54304: Intermittent authentication issues when accessing OpenShift registry #369
Full changelog

openshift-state-metrics

append .0 to go.mod version #123
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44458: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #365
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-61364: [4.18] e2e stability fixes #1080
OCPBUGS-60644: Add NetworkPolicy as a supported kind #1048
OCPBUGS-59421: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1040
OCPBUGS-58882: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1034
OCPBUGS-57427: reduce cache expiry frequency [release-4.19] #1020
OCPBUGS-57314: operatorgroup: ensure clusterroleselectors in clusterrole aggregation rules are sorted #1017
OCPBUGS-56098: fix(olm): improve error logging for missing olm.managed label (#3558) #1001
OCPBUGS-51225, OCPBUGS-51227, OCPBUGS-51245: pin go-jose/v4@v4.0.5 (#3550) #992
OCPBUGS-53108: Ensure that PSA label is latest instead of pinning versions #983
OCPBUGS-53040: add missing pod disruption reasons to isPodDead #981
OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
Full changelog

operator-marketplace

ART-13123: append .0 to go.mod version #637
OCPBUGS-53149: Ensure that PSA label is latest instead of pinning versions #601
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-48710: Update OWNERS file: Add Patryk/Martin as approvers #2700
OCPBUGS-59371: EIP OVN controller: stop pod config flap #2703
OCPBUGS-59531: EgressIP: fix startup syncer #2690
OCPBUGS-59623: Revert “unpin libreswan version” #2678
OCPBUGS-57318, OCPBUGS-58159: DownStream Merge Sync from 4.19 [06-26-2025] #2646
OCPBUGS-46401, OCPBUGS-48710, OCPBUGS-55263: DownStream Merge Sync from 4.19 [05-28-2025] #2593
OCPBUGS-57108: Fix hybrid overlay node subnets collision with cluster subnets #2619
OCPBUGS-57106: Increase InformerSyncTimeout to 60s #2622
OCPBUGS-55016: DownStream Merge Sync from 4.19 [05-08-2025] #2555
OCPBUGS-54671: EIP no reroute: allow multiple entries for pod to pod and pod to join #2510
OCPBUGS-54187: Update OVN to FDP25.A.1 24.09.2-41. #2495
OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
Full changelog

powervs-machine-controllers

OCPBUGS-61163: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #125
OCPBUGS-54243: Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 #111
Full changelog

prom-label-proxy

append .0 to go.mod version #380
Full changelog

prometheus

OCPBUGS-56732: BACKPORT: fix promtool analyze block shows metric name with 0 cardinality #253
OCPBUGS-54940: Scraping: Bump cache iteration after error to avoid false duplicate detection. #247
Full changelog

prometheus-alertmanager

append .0 to go.mod version #101
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-58194: Fix: One Alertmanager Config failing blocks all others #335
OCPBUGS-52565: Bump openshift/prometheus-operator to v0.78.2 #327
Full changelog

prometheus-node-exporter

append .0 to go.mod version #166
Full changelog

route-controller-manager

OCPBUGS-55338: Added error event for failed ingress to route conversion #59
Full changelog

service-ca-operator

OCPBUGS-44952: [release-4.18] Bump go to 1.22.0 #253
Full changelog

telemeter

append .0 to go.mod version #561
Full changelog

tests

OCPBUGS-60662: images/tests: Remove rteval #30135
OCPBUGS-60881: Exclude RHEL nodes in verifying that nodes have no unexpected reboots test #30170
OCPBUGS-60881: extended/machines: add –no-pager to journalctl cmds #30180
OCPBUGS-60927: Wait 30s after the upgrade is complete to validate workloads #30179
NO-JIRA: Update extended/networking OWNERS #30089
OCPBUGS-58461: Backport pr 29834 to release-4.18 #29968
OCPBUGS-60066, OCPBUGS-60067: Don’t check for isNoUpgrade #30053
OCPBUGS-60066, OCPBUGS-60067: Tolerate various expected Upgradeable=False conditions #30048
OCPBUGS-57887: Update to Kubernetes v1.31.10 #29941
OCPBUGS-58366: Make EgressIP helper functions more reliable #29950
OCPBUGS-57081: Do not set the MTU when using NetworkAttachementDefinition #29891
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #29937
OCPBUGS-57329: Fix failed tests of e2e-aws-ovn-tls-13 #29911
OCPBUGS-56995: Fix bearer token exposure in exit condition as well #29882
OCPBUGS-56438: Update to Kubernetes v1.31.9 #29871
OCPBUGS-56867: Only update boot disks during GCP boot image updates tests #29894
OCPBUGS-55277: backport watch count tracking fixes to 4.18 #29725
OCPBUGS-55667: aws/edge: prevent test using unschedulable nodes #29750
OCPBUGS-55267: Update to Kubernetes v1.31.8 #29765
OCPBUGS-50628: [test: networking] Skip isolation test when cgroupv1 nodes are present #29541
OCPBUGS-55470: [build] Ensure Git Clone Does Not Run Privileged #29736
Revert “OCPBUGS-55277: backport 4.18” #29720
OCPBUGS-55277: backport 4.18 #29645
OCPBUGS-55110: Backport MetricsCollectionProfiles patches to 4.18 #29561
OCPBUGS-54807: support provider type external #29666
OCPBUGS-54725: Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com #29657
OCPBUGS-53015: bump(k8s): update k8s.io/* dependencies to v1.31.7 #29634
OCPBUGS-52496: use non-fake boot image for patch #29584
OCPBUGS-52579: Use payload pullspec for image info test #29587
OCPBUGS-51295: Rely on unstructured for update status instead of type conversion #29564
OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
OCPBUGS-48389: move initialization of OC to test instead of package level #29472
OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
OCPBUGS-50930: managed services: add known image check for gcp #29547
Full changelog

thanos

OCPBUGS-52945: Update Go version in go.mod to 1.22.0 #159
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-58861: [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 #62
Full changelog

vsphere-csi-driver-operator

OCPBUGS-54701: add manifest-topology.yaml for topology related feature and test #303
Full changelog

vsphere-problem-detector

OCPBUGS-60784: Check for number of FailureDomain-s in GetVCenter() #189
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github