4.18.25

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.25-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded (2 retries) release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded (2 retries) release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Failed (2 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded (1 retries) periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.35, 4.17.36, 4.17.37, 4.18.10, 4.18.11, 4.18.13, 4.18.14, 4.18.16, 4.18.17, 4.18.19, 4.18.20, 4.18.21, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.18

Created: 2025-09-25 15:03:00 +0000 UTC

Image Digest: sha256:ba6f0f2eca65cd386a5109ddbbdb3bab9bb9801e32de56ef34f80e634a7787be

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.9 to 1.31.13
Kubernetes Tests upgraded from 1.31.9 to 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202506121335-0 to 418.94.202509241235-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

agent-installer-utils git 0e41f7d5 sha256:edb2d87d63019541a5e457aedcd75c47638f717007649383ade7f34305d941de
apiserver-network-proxy git 2f62712d sha256:4035c6cb33959e682ca201c8f58b487624fdbbf0e98b2a08a9c8b043d5466f1e
aws-cloud-controller-manager git c3951906 sha256:04c432667ba99cfcb39325572082b69e5ba4f5b3a7201081267ddde640934664
aws-ebs-csi-driver git b51cd6b8 sha256:de96b1f387e4519341ed1c1716ce281855ff8cdb3c16ef5b2679cdc9f7750ced
aws-kms-encryption-provider git 088dcaf7 sha256:33dc1925a2272d24e36da6e8ea0bac94bdbc5aa864067ef89ca65d79ec17b0fe
aws-machine-controllers git 53274f11 sha256:84e3ed2be6b4fc8ae0947fa088bdfe680ce855fd0a662d13873ba274c2bc0370
aws-pod-identity-webhook git f54f9a19 sha256:e3c6f580c36223f610d047013327cec44e3f43cf11ef4ea2a385e92a3d7c3906
azure-cloud-controller-manager git 9c24d768 sha256:7117219f46fb8bf8de024dba4dd4555213c3c6ad8ce870749161b98239617b52
azure-cloud-node-manager git 9c24d768 sha256:6a7b87ea9f556a7ae51fbdd7abb4724f9fa025c439c283a7ae143042fea823b8
azure-disk-csi-driver git 6cced666 sha256:580436c37851ccb8511ad0bd03f4e975e899cbafa4ab82e8285a0e7a968a94be
azure-file-csi-driver git 4b34592e sha256:38eba09d0099585d4d4318e444a2ad827087b415232b3ae5351741422bcea2fc
azure-kms-encryption-provider git c937080f sha256:62440d1af2553297b44a7ec2017612d9505783b4b2784f084966db40dc2b3e38
azure-workload-identity-webhook git f60e4029 sha256:3a11d2551fe38026be36606c06f70b619c32bfdf24cf8ab22fd070e4f07cc8cc
baremetal-machine-controllers git 1ede6c3f sha256:93007f7b53058f9079892585c0b9ec24e84e4a1160f3281dfcc7dd8c15dd4495
cloud-network-config-controller git beacfbc2 sha256:838fb29d1937e1fcb2712e2912f31e43bb8cb232e1a74c1ba5b0aabe1db24c17
cluster-autoscaler-operator git 474ad65c sha256:6f547c00317910e3dd789bb16cc2a04e545f737570d484481408a4d3303d5732
cluster-bootstrap git d1e01954 sha256:5ccb09371ca051e6836364d97acfccb2cdd3f93baf9be23ffc2c2b16d5d205a4
cluster-capi-operator git 2f2737e1 sha256:86e383f7723035550e0f7a5f24ab70a22fdcb1b5cc0e3a2b3b0ba0d97f175918
cluster-config-operator git 85cb4072 sha256:aa10afc83b17b0d76fcff8963f51e62ae851f145cd6c27f61a0604e0c713fe3a
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:90c5ef075961ab090e3854d470bb6659737ee76ac96637e6d0dd62080e38e26e
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:b05bf4bdb9af40d949fa343ad1fd1d79d032d0bd0eb188ed33fbdceeb5056ce0
cluster-dns-operator git 7cafd0c7 sha256:d5ad9f2d4b8cf9205c5aa91b1eb9abafc2a638c7bd4b3f971f3d6b9a4df7318f
cluster-image-registry-operator git 1e3caa4b sha256:c78b39674bd52b55017e08466030e88727f76514fbfa4e1918541697374881b3
cluster-ingress-operator git d967a73c sha256:805f1bf09553ecf2e9d735c881539c011947eee7bf4c977b074e2d0396b9d99a
cluster-kube-cluster-api-operator git 33a1141e sha256:fcbcfb26fac2bbfae4ac90e63313614edda23bf26d6821061b4ee8cd2576d0bc
cluster-kube-scheduler-operator git 6182930d sha256:f81582ec6e6cc159d578a2d70ce7c8a4db8eb0172334226c9123770d7d2a1642
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:1b9e086347802546d8040d17296f434edf088305103b874c900beee3a3575c34
cluster-machine-approver git 01d5fbbe sha256:c2bffa697d52826e0ba76ddc30a78f44b274be22ee87af8d1a9d1c8337162be9
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:9ef76839c19a20a0e01cdd2b9fd53ae31937d6f478b2c2343679099985fe9e47
cluster-openshift-controller-manager-operator git f1711cf3 sha256:2f425875bda87dc167d613efc88c56256e48364b73174d1392f7d23301baec0b
cluster-policy-controller git 5fd85252 sha256:19291a8938541dd95496e6f04aad7abf914ea2c8d076c1f149a12368682f85d4
cluster-samples-operator git 5cdbe18d sha256:1efcdfb7891b86be5263a5d794628d16a717a5f8cb447168f40e18482eb29ab5
cluster-storage-operator git 65d06444 sha256:d8df789ec16971dc14423860f7b20b9ee27d926e4e5be632714cadc15e7f9b32
cluster-update-keys git 8caab452 sha256:f8b6f946077e502f4bc2d0bd0590cc85fcf405f68fea99a47be727d5fffe42f3
configmap-reloader git e2aaf00a sha256:3905aea84446913c964a8db65be6dfe3a075423b2ade85fa77716f4bad742a6a
coredns git eb75d9b4 sha256:def4bc41ba62687d8c9a68b6f74c39240f651ec7a039a78a6535233581f430a7
csi-driver-nfs git 32e77590 sha256:875ca6816a8aa81b837afffa42cc10710abe9c94edd7e90cfef0723aa9a9c3a9
csi-external-attacher git 39b37c06 sha256:9d9a92fcbd55d858a29d71a1c3de84e9e54fcda14b133d77927dfa5e481cd26c
csi-external-provisioner git 376f0ea0 sha256:259bcf080eb040af978ae5cb6b9ecdb23cb30070a46dc2e9eaad8f39dd0ea3b4
csi-external-resizer git cca3837a sha256:9631ca611a761ba23809c6f0b4286d3507df81057ebf7c3a316a780dd3a238f5
csi-external-snapshotter git 838d2484 sha256:32ba38ea67c3cc901f2168fd8741d04c38d41eebe99a13aab0e308f7a3d19e2d
csi-livenessprobe git 3a977844 sha256:14f4c10817737e35e427b12960465d4925250a3216e20cd9c8703e384d82072a
csi-node-driver-registrar git c21f5d02 sha256:02a63915677f55be53239c2d39112a24c8fb76569418b4cf143784d7d4978a98
csi-snapshot-controller git 838d2484 sha256:eeb8312c455dd728870a6332c7e36e9068f6031127ce3e481a9a1131da527265
csi-snapshot-validation-webhook git 838d2484 sha256:f3080f054ac81700072bb6a5310777dc5a5a6997a16898405cdab6df8446af16
driver-toolkit git 2e139edc sha256:733e470b7b1a5d7f508defdc02566203cce885a0927fc2f90537ce6de7d9cf4f
egress-router-cni git 3193a756 sha256:fbde693d384ae08cdaf9126a9a6359bb5515793f63108ef216cbddf1c995af3e
gcp-cloud-controller-manager git 6ea23561 sha256:eb6ac433b67505d34fb9d43b9247c38d94468fcf4acf6b9fef277673b2941e4f
gcp-pd-csi-driver git 1b8c94ac sha256:2a28202489fb0a4ba57fdec457474da3dd3cecf14755740b3cf67928b4ee939a
gcp-pd-csi-driver-operator git 7cb8b38c sha256:13d43bfe6638266a6703a47d5be6c2452bd2d8cc3acf29cbf3888849124b4869
gcp-workload-identity-federation-webhook git f0a670c7 sha256:da3e0a21b6330970a5d1789ff829fbcf1f4b32efb315da5e9a6637d4d9f23c0d
haproxy-router git d8058949 sha256:776b1203d0e4c0522ff38ffceeddfbad096e187b4d4c927f3ad89bac5f40d5c8
ibm-cloud-controller-manager git a33026b1 sha256:878645410828ebefff915ae80a3498f0367c544aca3088638cfd1a1058a7c37c
insights-runtime-exporter git 7149f2d5 sha256:1fb85473f6877b7eb73aa7f0cece13af18a09ea84b184f3e6efd6fcd9e886c1a
insights-runtime-extractor git 7149f2d5 sha256:2a10f5a8a5cc8b82f7795ea6386d19fe36ecfbaa23d78b8af94c9c05dae7d02b
ironic git 9161a5fd sha256:9194105082756eb8e777ad6a75b709664683668132e73bff5b090cd7180bbf57
ironic-agent git b79bddef sha256:e9965e3df2e4d45c5fb0787339b482fc36ccc78481ce5859a3507c0d1fdd7eb8
ironic-machine-os-downloader git 50ca44fd sha256:4693d955c459ebadc3979759160a3ad563a40b7d7f9a7ef986ee7889de37daa9
ironic-static-ip-manager git cfbae04f sha256:e2e86501d5d1bdfcd1402efeb8a76e337ab7c718949357cd8655c70cbf0fe203
keepalived-ipfailover git 716eb0ef sha256:021e5a36e42198ec424c7ad20f8747e56d00285a6f2f2da15d06781f223bb876
kube-metrics-server git 962ccca2 sha256:aa8586795f9801090b8f01a74743474c41b5987eefc3a9b2c58f937098a1704f
kube-state-metrics git cb5a9296 sha256:aba459a30191b49c89c71863fd4ec15776092b818c6f5fa44e233824dea4c6cf
kubevirt-cloud-controller-manager git 3f4542ec sha256:f6ceabb6ad4cdb620c2ecbb8a5a4202c8e64a435e029973d3af80ca1c5d5aa9e
kubevirt-csi-driver git 2111495e sha256:4819145b72238594478a39b4d8eb45c65cc001d8be1f0fd9ffe65099c33e33c7
libvirt-machine-controllers git a336f0b5 sha256:cb2984c28f53a959e0c2de091f8db5b138b676a20a46168004b45b9e4a9ab7ee
machine-api-operator git 6261ac9a sha256:e7015eb7a0d62afeba6f2f0dbd57a8ef24b8477b00f66a6789ccf97b78271e9a
machine-image-customization-controller git d9a71247 sha256:88fddc251462b103acd4ce3fad1e6dc4ef90e730074ca22c713f48b06325a47b
machine-os-images git ab432836 sha256:df14cba862b81b4842a862e3d07f174fdd54335e2276e89bff69d3e0cfe3637e
metallb-frr git 98ccbe64 sha256:405bb865c9ffb24c593a51eb97b7902838f0abc76ef7261136df2786a953a33c
multus-cni git 21fb8e05 sha256:bd0854905c4929cfbb163b57dd290d4a74e65d11c01d86b5e1e177a0c246106e
multus-cni-microshift git 21fb8e05 sha256:bed28d0c0111b591907ed1903636b3f9e98476ec4b2c19c3366cc36e8c5d600a
multus-networkpolicy git 5f37d0c8 sha256:5b43f2fe1940768ae1393b0aeafcf815de0d3e30d1b23d7e30d579a3617280be
multus-route-override-cni git 391c1b03 sha256:0b95ed8eaa90077acc5910504a338c0b5eea8a9b6632868366d72d48a4b6f2c4
network-tools git 47b13549 sha256:ada697e1b92e6f86714183c33341498d94eb391581ced5113ee1e3278e0d048b
nutanix-cloud-controller-manager git d9fe8f38 sha256:8b973d1bdb432b7a53121470cada86f8dec67937c402d62eab44e363bf4e4cbd
nutanix-machine-controllers git afe324bf sha256:39ca2961be00a64b2b1bd5d2647cea9972dcc6dc27808d26fac3402e01147872
oauth-apiserver git 2575ff41 sha256:a10f1f5c782b4f4fb9c364625daf34791903749d4149eb87291c70598b16b404
olm-catalogd git 9f981b3e sha256:76a6a279901a441ec7d5e67c384c86cd72feaa38e08365ec1eed45fb11b5099f
openshift-state-metrics git 3cca6fee sha256:982ec135c928d7c2904347f7727077c3d45b4c124557f6b3cb7dfca5ffa2e145
openstack-machine-api-provider git d914e77e sha256:05f109c931489ef0747a48abe9138eb32c0da389042b8ab625fa935c5e013b69
operator-marketplace git c06a810b sha256:c265fd635e36ef28c00f961a9969135e715f43af7f42455c9bde03a6b95ddc3e
ovirt-csi-driver git 1db726a9 sha256:f56269a150f4fa9a1befa2322cbff6987fab9d057c47ce9e22e349c57ed9ada5
ovirt-csi-driver-operator git 0feae256 sha256:9d796f981ddcc15d0e399f72991eef54933ac737c38323f66a4f4b5f2719c836
powervs-block-csi-driver git d36aea34 sha256:53cfbbddd9b4b73dc46c7c16b4b01211e2d04f2ddad16607baf5c7e08e3c9190
powervs-block-csi-driver-operator git 01fc505a sha256:46be8d78844b327070148dc5381af89dda5c2e3994b93e7b7e82bdec70e8916d
powervs-cloud-controller-manager git 17ae6fba sha256:b96dc3e37e8104e1b439619a5d5e031e42cf0877f88e9c8e0ccc2c0e2777483d
prom-label-proxy git 35c11369 sha256:61f170d009db78c5df2e61a5de6cbd57283366bb46168eea3b0cca5f005bbf59
prometheus-alertmanager git a4320675 sha256:755d2dc7bc83f2e1c10e6a0a70dd9acdd6bc282ad4ae973794d262a785e9f6d6
prometheus-node-exporter git 92e17ff5 sha256:66366501aac86a6d898d235d0b96dbe7679a2e142e8c615524f0bdc3ddd68b21
rhel-coreos sha256:4431f570d3d5dbb6157357bd67ce446399eaf6a7fab484350d14b5b290a438ec
rhel-coreos-extensions sha256:0a48e4a7c19679f4837c375c0b781789e856c3a882af354b7bb51f16986d9dbc
route-controller-manager git ce6ffa24 sha256:da8d1dd8c084774a49a88aef98ef62c56592a46d75830ed0d3e5e363859e3b08
service-ca-operator git 30efb529 sha256:97de153ac76971fa69d4af7166c63416fbe37d759deb7833340c1c39d418b745
telemeter git 490612bd sha256:ce0ff00581505232eae7c6725b65f09e2a81f94b2af66aa60af7a1e101a1a705
thanos git f1599f65 sha256:d24c4db9f6f0e9fb8ffdf9dd2b08101c37316b989e6709d13783e7d6d3baef73
vsphere-cloud-controller-manager git c414d1f5 sha256:2d048ba4f4c784040fb8448d988f4cc28780ea696c12f6b21814cbce9e6c52e1
vsphere-csi-driver git cfcad01d sha256:601a001f8e7ac290cab0eede5fff7fbd23100bc92c2e8068c7e1dfa85cbc8c00
vsphere-csi-driver-operator git 2b241410 sha256:7c349bac6253b33ef299566d78e22aea174c8431cae2591d56ba22d389c01bc5
vsphere-csi-driver-syncer git cfcad01d sha256:3dd0132eff8900273dbfe86c5be49afd8101cefcde67bdc4ad586b02a8caf342

agent-installer-api-server

NO-ISSUE: pin gotestsum to v1.12.3 (#8018) #8018
OCPBUGS-58635, OCPBUGS-58640: Bump glog to v1.2.5 in release-4.18 (#7877) #7877
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58650: Bump glog pkg to 1.2.4 (#1181) #1181
Full changelog

agent-installer-node-agent

OCPBUGS-58655, OCPBUGS-58660: Bump glog to v1.2.5 in release-4.18 (#1069) #1069
Full changelog

aws-cluster-api-controllers

OCPBUGS-61841: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #570
OCPBUGS-58670, OCPBUGS-58675: bump github.com/golang/glog to v1.2.5 #556
OCPBUGS-56434: Update manifests to use v1 admissionregistration group #554
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-55053: Correct ASH driver inject env config #381
OCPBUGS-54453: Enable required driver services #375
OCPBUGS-60596: Bump library-go to fix assignment to nil map issue #421
OCPBUGS-60203: Remove stale conditions #413
Full changelog

azure-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #348
Full changelog

azure-machine-controllers

OCPBUGS-56167: [release-4.18] Update virtualmachines service to armcompute/v5 SDK #145
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #51
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-59490: Make swift containers removal not fatal for UPI. #9839
OCPBUGS-61529: Use less permissive access for /var/lib/etcd for SNO #9937
OCPBUGS-61178: Refine check for supported SNO platforms #9923
OCPBUGS-60592: baremetal: always set external v6 URL on dualstack #9895
OCPBUGS-54598: Update the RHCOS 4.18 bootimage metadata #9900
OCPBUGS-56177, OCPBUGS-59155, OCPBUGS-59158: Migrate AWS SDK to V2 to support MX-Central Region #9709
OCPBUGS-58321: allow to deploy single nodes with UPI #9824
OCPBUGS-54744: Filter out excess CA certs when adding node #9647
OCPBUGS-58264: vSphere - remove unit tests using nip.io #9813
OCPBUGS-56797: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9747
Full changelog

baremetal-operator

OCPBUGS-56766: Make firmware update handle only a subset of Spec.Updates #421
Full changelog

baremetal-runtimecfg

OCPBUGS-59280: Bump logrus version #354
OCPBUGS-57782: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #351
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-58233: Return error in case of error #2054
OCPBUGS-57507: avoid transfering permissions when copying artifacts from node-joiner pod #2039
Full changelog

cloud-credential-operator

OCPBUGS-55127: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #915
OCPBUGS-60971: ccoctl: aws to use proper issuer url on subsequent runs #907
OCPBUGS-60618: ccoctl azure dnszone-resource-group-name now optional #899
OCPBUGS-58680: github.com/golang/glog v1.2.5 #891
OCPBUGS-58247: ccoctl: only add owned tag to azure resources on create #882
Full changelog

cluster-authentication-operator

OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #754
Full changelog

cluster-autoscaler

OCPBUGS-60908: revert openshift replica fix #375
OCPBUGS-60235: fix checkpoint gc of unknown recommenders #368
OCPBUGS-59260: Fix cool down status condition to trigger scale down #361
Full changelog

cluster-baremetal-operator

OCPBUGS-60586: Remove webhookport (9447) as HostPort #501
OCPBUGS-58315: Bump github.com/go-errors/errors to v1.5.1 #492
Full changelog

cluster-capi-controllers

OCPBUGS-56434: Update manifests to leverage v1 admissionregistration group #241
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-60015: Add Service using common resource templating #405
OCPBUGS-60015: Update service selector to match deployment label #403
Full changelog

cluster-config-api

OCPBUGS-52347: Add CEL validation for RegistrySources in Image API #2218
OCPBUGS-60904: MachineOSConfig name should match MachineConfigPool #2458
Update crd-schema.json to release 1.33 branch #2459
: add OnClusterBuilds to default config #2365
Full changelog

cluster-etcd-operator

OCPBUGS-61235: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1478
OCPBUGS-59992: fix ordering on bootstrap IP selection #1458
OCPBUGS-59803: add missing ports to svc and pod spec #1455
OCPBUGS-56834: etcd pod containers do not start when tls min version is 1.3 #1428
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-61039: Set goaway chance to 0.001 #1912
OCPBUGS-60176: Add missing service ports to apiserver service #1888
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60131: Missing endpoint slices for open ports the operator uses #852
Full changelog

cluster-monitoring-operator

OCPBUGS-61706: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2669
OCPBUGS-59962: operator: increase wait time till degraded to max 4 times 5m #2633
OCPBUGS-56251: set upgradable false when alertmanager v1 is specified #2591
Full changelog

cluster-network-operator

OCPBUGS-60984: Update CNO reviewers/approvers #2766
OCPBUGS-60795: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2782
OCPBUGS-47651: Re-disable metrics server #2622
OCPBUGS-58047: Add cert-rotation script into cno #2702
Full changelog

cluster-node-tuning-operator

OCPBUGS-61078: e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1388) #1388
E2E: skip stalld test case checking sched_fifo (#1387) #1387
e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) #1355
: OCPBUGS-57947: kernelPageSize + hugepages combinations validation ³⁄₃ #1343
: OCPBUGS-57947: Support hugepage size selection for ARM-based clusters ²⁄₃ #1342
OCPBUGS-57947: CNF-18142: Add kernel page size field ¹⁄₃ #1341
Full changelog

cluster-olm-operator

OCPBUGS-57767: fix olm.maxOpenShiftVersion float parsing #125
Full changelog

cluster-version-operator

OCPBUGS-58450: Failing=Unknown upon long CO updating #1211
OCPBUGS-60222: CVO protects /metrics with authorization #1223
Full changelog

console

OCPBUGS-61569: Update CHANGELOG for 4.18 plugin SDK package publish #15516
OCPBUGS-61569: Fix bug with Console provided PatternFly shared modules #15479
OCPBUGS-61697: Remove ancient X-XSS-Protection header #15493
OCPBUGS-60236: Make sure CSP violations are only reported to telemetry once per day per browser #15453
NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish #15456
OCPBUGS-50983: Store Topology sidebar alert in the localStorage #15431
OCPBUGS-54660: Added patternfly/react-topology to shared module list of dynamic plugin sdk #15371
OCPBUGS-50570: Fix regression where plugins were not tracking CSP violation status a… #14754
OCPBUGS-60140: Recognize Detached BMH status #15362
OCPBUGS-54660: Add BaseNode in topology folder into Dynamic Plugin SDK #15369
: OCPBUGS-60278: Fix i18n string for event stream #15403
OCPBUGS-54660: Expose OdcBaseNode through the dynamic plugin SDK #15370
OCPBUGS-54660: Expose topology components and utils via plugin SDK internal package #14777
OCPBUGS-58364: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15272
OCPBUGS-59778: add data-test attrs to console plugins table #15327
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15330
OCPBUGS-59501: Add the Origin header to the HeaderBlacklist in the co… #15295
OCPBUGS-59443: Not able to launch terminal window from OCP web console due to console plugin conflicts #15290
OCPBUGS-59446: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15292
OCPBUGS-58457: fix bug where / in console.tab/horizontalNav href brea… #15250
OCPBUGS-58203: OpenShift console PVC clone cannot use B as the unit #15215
OCPBUGS-58317: Implement sessions in openshift authenticator #15237
OCPBUGS-58088: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15202
OCPBUGS-58089: Getting “Oh no something went wrong” error message in web console. #15203
OCPBUGS-57931: Add the ability to launch multiple modals with useModal hook #15196
OCPBUGS-57580: Update vSphere configuration form to support CM YAML f… #15191
OCPBUGS-57743: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15188
OCPBUGS-57209: Add flags in console static plugin for all the components of this epic #15160
OCPBUGS-36173: Secret key with binary file changes when edited via Console. #15178
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

NETOBSERV-2023, OCPBUGS-60304: Implement a quickstart for netobserv operator #997
OCPBUGS-60081: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1031
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #1027
OCPBUGS-45869: don’t set current clients when no OIDC providers are configured #948
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-60871: [release-4.18] host-device: Return interface name in result #208
OCPBUGS-56928: bridge: Add option to enable port isolation #203
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-58835: CARRY: don’t ignore json files #339
Full changelog

docker-builder

OCPBUGS-57758: S2I build cpu limits observed by assemble are limited to 1 cpu #473
Full changelog

docker-registry

IR-526: remove AWS region check #437
Full changelog

etcd

OCPBUGS-57112: Updating ose-etcd-container image to be consistent with ART for 4.18 #333
Full changelog

gcp-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #247
Full changelog

gcp-machine-controllers

OCPBUGS-59387: Add max-concurrent-reconciles flag to machine actuator #126
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-61557: Rebase v1.31.13 #2465
Revert “UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.”” #2448
OCPBUGS-60511: Bump to v1.31.12 #2440
OCPBUGS-60524: podresources: list: use active pods #2413
UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2422
OCPBUGS-57488: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2333
OCPBUGS-57499: UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image #2399
OCPBUGS-44757: Adjust NodeMonitorGracePeriod to 50s #2385
OCPBUGS-59535: Rebase v1.31.11 to 4.18 #2377
OCPBUGS-57887: Update to Kubernetes v1.31.10 #2348
OCPBUGS-57070: UPSTREAM: <carry>: Bump cadvisor version to fix container_fs metrics #2332
Full changelog

hypershift

OCPBUGS-61568: [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution #6793
OCPBUGS-61203: ci: konflux multi-arch images #6867
OCPBUGS-61203: Use the common konflux pipeline and update CLI dockerfile #6832
NO-JIRA: chore(deps): update konflux references #6667
OCPBUGS-57142: [release-4.18] HCP payload doesn’t respect multiple mirrors #6672
OCPBUGS-60485: feat(validations): add wildcard support to DNS SAN conflict detection #6649
OCPBUGS-60148: Always compress and encode payload in token secret for inplace upgrades #6721
OCPBUGS-60923: MCE 2.8 konflux for hcp-cli #6700
CNTRLPLANE-1333: New API to support specifying cluster-autoscaler flags #6641
OCPBUGS-60458: Update PSA from v1beta1 to v1 #6644
CNTRLPLANE-1269: chore(deps): update konflux references #6658
CNTRLPLANE-1205: Add missing mce-2.8 pipeline #6656
OCPBUGS-59503: [release-4.18] Support proxy authentication when user/pass is included in URL #6460
CNTRLPLANE-1229: Move CPO pipeline to hermetic builds #6597
OCPBUGS-57818: Reuse hosted cluster release and metadata providers #6301
OCPBUGS-58126: Don’t use /version for haproxy health checks #6323
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58741: bump github.com/golang/glog to version v1.2.4 #104
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55297: [IBM VPC] set offlineExpansion to false in e2e test manifest #144
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51825: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #120
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #119
Full changelog

ibmcloud-machine-controllers

OCPBUGS-47135: CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] #69
Full changelog

insights-operator

OCPBUGS-61656: virt launcher logs gatherer (#1135) #1135
avoid possible Go panic when searching existing conditions (#1124) #1124
fix: incorrect anonymization of domains (#1115) #1115
feat: add permissions to gather clusterrole (#1113) #1113
feat: copy proxy envs from IO pod to gathering pods (#1105) #1105
Full changelog

kube-rbac-proxy

OCPBUGS-60930: fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 #125
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). #225
Full changelog

machine-config-operator

OCPBUGS-61840: Override NMState service definition #5288
OCPBUGS-57357: Race in configure-ovs.sh affects bonding interface configuration. #5118
OCPBUGS-59929, OPNET-681: Support migration to NMState #5207
OCPBUGS-60034: Add workaround fix for static pod race #5212
OCPBUGS-56751: Support NODEIP_HINT in IPI deployments too #5081
OCPBUGS-55246: kubelet: readonly mounts for criometricsproxy #4998
OCPBUGS-58067: Ensure the build controller restarts on upgrade #5140
OCPBUGS-57328: Do not set cpu system reserve below the default value #5152
OCPBUGS-56624: Give keepalived container chroot cap #5073
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #5138
OCPBUGS-57935: add MachineConfiguration to CO related objects #5134
OCPBUGS-54463: Update desired config in MCN on OCL update #5026
OCPBUGS-57900: MCC complains about v1 MachineOSConfig in default featureset #5131
Full changelog

monitoring-plugin

NO-JIRA: update i18n strings #508
OCPBUGS-60199: feat: add alerting rules tab to dev console #493
OCPBUGS-54314: Fix “Export as CSV” #461
Full changelog

multus-admission-controller

OCPBUGS-58771: Update the github.com/golang/glog module to v1.2.4 #101
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-59697: Prevent accidental IP deallocation in statefulsets #376
OCPBUGS-58360: The node slice controller should only process valid whereabouts confi… #381
OCPBUGS-58360: Add nodeslicecontroller bin to dockerfile #373
Full changelog

must-gather

OCPBUGS-46437: Separate resources with comma to fix malformed inspect #470
Full changelog

network-interface-bond-cni

OCPBUGS-58095: Bump github.com/containernetworking/plugins from to 1.7.1 #79
OCPBUGS-57794: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.18 #74
NO-JIRA: Add ci-operator yaml file #78
Full changelog

network-metrics-daemon

OCPBUGS-58781: Bump github.com/golang/glog to v1.2.4 (#111) #111
OCPBUGS-60174: Replace e2e test image (#120) #120
Full changelog

networking-console-plugin

OCPBUGS-60178: Fix ingress details #264
OCPBUGS-60124: Fix requiremenets with no value #259
OCPBUGS-57286: Fix pod context #251
Full changelog

oauth-proxy

OCPBUGS-57172: 4.18 kube 1.31 #317
OCPBUGS-58312: fix e2e tests #325
Full changelog

oauth-server

OCPBUGS-57300: Updating oauth-server-container image to be consistent with ART for 4.18 #186
Full changelog

oc-mirror

Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1268) #1268
OCPBUGS-54622: cli/delete: fix workflow mode name output (#1229) #1229
OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1227) #1227
OCPBUGS-59798: Detect images from a Helm Chart with an aliased chart dependency (#1224) #1224
OCPBUGS-59235: [release-4.18] v2/archive: error d2m when no tar files found (#1212) #1212
OCPBUGS-58280: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1206) #1206
OCPBUGS-58272: Fixes the tag when rebuilt catalog by digest only (#1204) #1204
OCPBUGS-57387: v2/archive: fix sanitization of . (#1196) #1196
OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1195) #1195
OCPBUGS-57197: [release-4.18] v2/cli: always remove past archives before m2d (#1176) #1176
OCPBUGS-56486: v2/config: allow delete and mirror words (#1175) #1175
OCPBUGS-55701: v2/imgbuilder: use –authfile when set (#1173) #1173
Full changelog

openshift-apiserver

OCPBUGS-58461: Wire dry run option to Image API server operations #531
OCPBUGS-56609: Fix image reference in TestImageStreamImportQuayIO #514
Full changelog

openshift-controller-manager

OCPBUGS-61002: legacy image pull secret rollback controller #411
OCPBUGS-57949: ignore error failing to find pull/push secrets #399
Full changelog

openstack-cluster-api-controllers

OCPBUGS-44458: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #365
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-61364: [4.18] e2e stability fixes #1080
OCPBUGS-60644: Add NetworkPolicy as a supported kind #1048
OCPBUGS-59421: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1040
OCPBUGS-58882: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1034
OCPBUGS-57427: reduce cache expiry frequency [release-4.19] #1020
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-48710: Update OWNERS file: Add Patryk/Martin as approvers #2700
OCPBUGS-59371: EIP OVN controller: stop pod config flap #2703
OCPBUGS-59531: EgressIP: fix startup syncer #2690
OCPBUGS-59623: Revert “unpin libreswan version” #2678
OCPBUGS-57318, OCPBUGS-58159: DownStream Merge Sync from 4.19 [06-26-2025] #2646
OCPBUGS-46401, OCPBUGS-48710, OCPBUGS-55263: DownStream Merge Sync from 4.19 [05-28-2025] #2593
OCPBUGS-57108: Fix hybrid overlay node subnets collision with cluster subnets #2619
OCPBUGS-57106: Increase InformerSyncTimeout to 60s #2622
Full changelog

powervs-machine-controllers

OCPBUGS-61163: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #125
Full changelog

prometheus

OCPBUGS-61706: chore: compute highestTimestamp at queryManager level #267
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-58194: Fix: One Alertmanager Config failing blocks all others #335
Full changelog

tests

OCPBUGS-61698: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30253
OCPBUGS-60511: Bump to latest openshift/kubernetes (v1.31.12) #30230
OCPBUGS-60662: images/tests: Remove rteval #30135
OCPBUGS-60881: Exclude RHEL nodes in verifying that nodes have no unexpected reboots test #30170
OCPBUGS-60881: extended/machines: add –no-pager to journalctl cmds #30180
OCPBUGS-60927: Wait 30s after the upgrade is complete to validate workloads #30179
NO-JIRA: Update extended/networking OWNERS #30089
OCPBUGS-58461: Backport pr 29834 to release-4.18 #29968
OCPBUGS-60066, OCPBUGS-60067: Don’t check for isNoUpgrade #30053
OCPBUGS-60066, OCPBUGS-60067: Tolerate various expected Upgradeable=False conditions #30048
OCPBUGS-57887: Update to Kubernetes v1.31.10 #29941
OCPBUGS-58366: Make EgressIP helper functions more reliable #29950
OCPBUGS-57081: Do not set the MTU when using NetworkAttachementDefinition #29891
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #29937
OCPBUGS-57329: Fix failed tests of e2e-aws-ovn-tls-13 #29911
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61651: Fix unit tests #70
OCPBUGS-58861: [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 #62
Full changelog

vsphere-problem-detector

OCPBUGS-60784: Check for number of FailureDomain-s in GetVCenter() #189
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github