4.18.26

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.26-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.16, 4.17.17, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.18.10, 4.18.12, 4.18.13, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.20, 4.18.21, 4.18.22, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

4.19.16 (changes) - Failed
4.19.0-0.ci-2025-10-11-105224 (changes) - Pending
4.19.0-0.ci-2025-10-11-045224 (changes) - Success
4.19.0-0.ci-2025-10-10-225224 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.18.19

Created: 2025-10-10 13:47:23 +0000 UTC

Image Digest: sha256:dcd5fce7701d1e568ffb1065800a4aa34c911910400209224e702b951412171d

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.9 to 1.31.13
Kubernetes Tests upgraded from 1.31.9 to 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202506251005-0 to 418.94.202510081222-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

agent-installer-utils git 0e41f7d5 sha256:d451b74b841cc953f67b98ae9bc9b6fcb40d5ee9a5a789a4b8d4fac57e2b3eed
apiserver-network-proxy git 2f62712d sha256:0dcf390fc040ef7d47866326982ebe6f51f6804ec9c9681efd4be51f5794e355
aws-cloud-controller-manager git c3951906 sha256:3d9e5dd089409536589a99081d40d90561e21454a69bf5252547708995725df2
aws-ebs-csi-driver git b51cd6b8 sha256:6d85625b9cbfd80248a6b65d48a1ae20ba74de065a11ac96ca19ce53af566c6a
aws-kms-encryption-provider git 088dcaf7 sha256:d8b4c6681814a99eac001036b7ac035531e18f9dfcae27fc539dad889f819fcd
aws-machine-controllers git 53274f11 sha256:5e89da56e3a3554984865c528cf2a807264d5c0477f3b6196b14fd9746e94ec7
aws-pod-identity-webhook git f54f9a19 sha256:44575f9aeee113828dbb2887310a4b5a869b996d6c1cbf7208328d702499000b
azure-cloud-controller-manager git 9c24d768 sha256:d02ef1cbb1f0bdf4d6bbe56e5d79a591d68d098ce61b289913a65dd14eec352f
azure-cloud-node-manager git 9c24d768 sha256:d4c634ab4733051978f3b93ca358e5824bd1e26f04b23128be4e7441db331e0b
azure-disk-csi-driver git 6cced666 sha256:52a636f504f6c90bafd2cc76063f851d660802ec7eaa4891f0e2794c89182490
azure-file-csi-driver git 4b34592e sha256:e70447cdefa18116dcba6383982afd52460a9944031c33b052ae60e765a5125f
azure-kms-encryption-provider git c937080f sha256:9be4f0f0265f16262af5ea551a2ad721f16c539bc5b70848b12cf4e904483dc1
azure-workload-identity-webhook git f60e4029 sha256:4233a38bd6a4a467684ee1f6fc5ffceb8d9477ff742e6c9e2b5c4f7971c76b84
baremetal-machine-controllers git 1ede6c3f sha256:f03a7479a9d746c278e5eaaf7971337cfe2f4fc87e934bf6eb139329635f96d4
cloud-network-config-controller git beacfbc2 sha256:8d76ab9a5160469e48fc48164600cb0b70a6954d7ac8f1cb404dc08881a76945
cluster-autoscaler-operator git 474ad65c sha256:0c37ce4d1897fb3acf2d45aa613440fcc65af373cb232bcd52ba3128932894e5
cluster-bootstrap git d1e01954 sha256:7c3b0ec269219a721d6de1e44733875499e94d808a6791799fc71950e1369510
cluster-capi-operator git 2f2737e1 sha256:add45cc86653a5c8c17fc0c0a2ac766936d73c8b7335815cbd6aedca3cd67ca8
cluster-config-operator git 85cb4072 sha256:7feced51fb076d7ddc6ba60153785d5ac292ca369f4ed7c424fc74a91d1321ea
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:9f91d33961cc21b4daff49caf960385371e960218feaa0bb020866e2901b31ac
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:2fb6912a6c20a5ff43fc5cba1f0eb37dfd73a8ae5b902e57a4548fae6d6ba2ca
cluster-dns-operator git 7cafd0c7 sha256:ce399f575770fa59436b2bbdb27f9c2ee5264d2df23e2304f499d18c0c451874
cluster-image-registry-operator git 1e3caa4b sha256:95fc8705b93819aec4628ab4239da4993567f752938098bfbd21c33c67514dfd
cluster-ingress-operator git d967a73c sha256:25c5ce5f7f55e889461bc87c491e7eed9bc0088f0ffd8c9e7afaf7de095ebc66
cluster-kube-cluster-api-operator git 33a1141e sha256:1142b8c934a2093019771226b172055e98cc5f12b7e0dab8187df4306bed25d9
cluster-kube-scheduler-operator git 6182930d sha256:d6672a2f795584bdb715cb6e63e42151c9e5c70cc92b37b818874af02ecde70c
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:be675dbbcc1e54559d20840da5c90deaa5b39c807998a5f737f612de9bf9332d
cluster-machine-approver git 01d5fbbe sha256:91c0b74c66c6d71048fb802a6f388f78eefcea4229b0ed48ee787e158fbcbb76
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:e28816756bf6a7f381e1fab5ca98de548d4f1485fac107c25482fc86988f20ba
cluster-openshift-controller-manager-operator git f1711cf3 sha256:ba2ab74ea4e69cf474709160864550781d65a1a302ca6b15303855ef1d0c121a
cluster-policy-controller git 5fd85252 sha256:8223acdd859a71e118ed48788a81467d26497412880220485b97f77f4708d2c0
cluster-samples-operator git 5cdbe18d sha256:42346aa49263c1623348322054753da60f4eb66ea1c5dd58a9853c3c424b8ad4
cluster-storage-operator git 65d06444 sha256:1d81b571d57f07eb8611f0cedd3700380dbdcaf7d4beb5ea2f7a7a0b7b54b506
cluster-update-keys git 8caab452 sha256:e7f942ba9fa6c0af64a19f88025406fe45bcb68f18315a342449e38c3258d985
configmap-reloader git e2aaf00a sha256:2efa8ef7edacba925794bd80700c650269ebc2fe7c23590eecd30347cfe2f600
csi-driver-nfs git 32e77590 sha256:8b1f72530d1618fd703524d06bdb79a4687bcf616e00b8e0c2fbd19fc98573b6
csi-external-attacher git 39b37c06 sha256:aaed8c8fde4bf26fdc9d42bea71b481f39f1cc4c5d4e2ff98b0337789424bcb5
csi-external-provisioner git 376f0ea0 sha256:876fdb9deaa22222d20923726bf70b5a13803f1f1902ecd07fced4972bd97049
csi-external-snapshotter git 838d2484 sha256:33f3e1a8ae71fdaa5fc56617e8af3019fb15746b3065848b52faadad85c84bf4
csi-livenessprobe git 3a977844 sha256:72bdd3bda587631748d9fce0b29c2ba708ed7398274acacf96c80ef014db28c6
csi-node-driver-registrar git c21f5d02 sha256:897ad54d23f400623339c3b23d9928b9f5baa010b549ab632d8daab32ed5dc86
csi-snapshot-controller git 838d2484 sha256:6771ff316058a27d66103d16d0c8c2f10afb96970026025668aa09d0b9fde5bb
csi-snapshot-validation-webhook git 838d2484 sha256:9a9e28475221c08b2c4e5e33572320d4796b33461110d36758dfe8cf32c11961
docker-builder git a5cbc2b1 sha256:7093f1c4c31453062b617deefd52d5b816a68e312a0fd43951331337068c23d1
driver-toolkit git 2e139edc sha256:395240fccde662231f804229a9a26d915397e26fac39b751b60b7c62d2d1149b
egress-router-cni git 3193a756 sha256:8a0375b7042d63c18ff0827d83771681ec9466bdb45cf97ecf32e40b0692a8a8
gcp-cloud-controller-manager git 6ea23561 sha256:8ea1e6bbe81cf82e200896a8afa6e8096d8d1365e3c3075e6e350ec58020f486
gcp-pd-csi-driver git 1b8c94ac sha256:fca944a30fd9876c820aa43599a3eaa95d6beb2e1d43a3d5ffe101eee73808e7
gcp-pd-csi-driver-operator git 7cb8b38c sha256:b4f51c2f25af01ee85a143edf7081276416bf1435c64ce2fb737f4d2cf40d037
gcp-workload-identity-federation-webhook git f0a670c7 sha256:143975c992aa1f76e99eff7b3c6d9ce89a6a28cbdb28f795d247f597954cab62
haproxy-router git d8058949 sha256:e1eb49c0c126c193cd035f844746edd98c6c674fdfa6b822d078d4a491b4834d
ibm-cloud-controller-manager git a33026b1 sha256:76165ec2b3238cb437b69e06b12dd40b28f9db7d96a1ca1e87e2a494b9e7db5a
insights-runtime-exporter git 7149f2d5 sha256:827e43628b6dc37263b45b17b3312ff4e0315d3fafb6a8f477a6da1321d97bdd
insights-runtime-extractor git 7149f2d5 sha256:809a793b56d5fe2d670883ade901ca4c6bfe28a7bbdc672e07d3ff072ff2e91e
ironic git 9161a5fd sha256:7a155b9568ca4b8a2ac2204cbd1374789f4cdcb39416fd75e8fc104511026597
ironic-agent git b79bddef sha256:dc52fc7de9a5040816cb66b95b2fd99662a3a75ab0e7e60e7f58108c2dd4e186
ironic-machine-os-downloader git 50ca44fd sha256:90631d5543ca86259472d1e5aaaa0375f6978f217ec082f22a13aa2d48706a0f
ironic-static-ip-manager git cfbae04f sha256:92a574834f01932a9ca55bdc438179e30ebf38c9f903cfcca654ffb536a95ef7
keepalived-ipfailover git 716eb0ef sha256:3b0561a80561d95854d5f364f8cd6c3458d27cfb798bf93e09ffcfab97609216
kube-metrics-server git 962ccca2 sha256:7bf345790d6a8561d13dacb34c0460635327bc4aded0c06926aa91cb4dc4dff1
kube-state-metrics git cb5a9296 sha256:652215fe0c62d957eb4389e668e8fa9a7d23f407d616f24876304a65327efc34
kubevirt-cloud-controller-manager git 3f4542ec sha256:c2a0cbfef14d08054ca917d19b4aae304c45da10369903b06227417821dc850a
kubevirt-csi-driver git 2111495e sha256:fe506197c7838de4f2d3bea6cceb261dede60f0e8b72c06823b56ad576b4acad
libvirt-machine-controllers git a336f0b5 sha256:54858503dbbc3202a3f04e9d89d4ab18d7d4436aa646282fa218c64dbea55c44
machine-image-customization-controller git d9a71247 sha256:417ceaba6503e12b01356f4cfa57dfef4171b5d26bececd18ba0945cea71286e
machine-os-images git ab432836 sha256:b3dd9a1f72013d82276b39f96ab47fa4fb9e535b7e3a752126fe02b207eea26d
metallb-frr git 98ccbe64 sha256:b6a657aa5a51ab20d21cf4fceff6b4941ce8d579cf509bd7f030a453afba2a39
multus-cni git 21fb8e05 sha256:46b468d507804ad543988fbc39d2a024c34ecb8a3c7c2e84ae608177888f6f6a
multus-cni-microshift git 21fb8e05 sha256:7e0b9f3848cc2808b262855cc1d33c513306d77f2468da4c45b0b8dd388242aa
multus-route-override-cni git 391c1b03 sha256:32f73495472a325f471565c73a6013e2533f01b8ecc889874495b96bf173a002
network-tools git 47b13549 sha256:41ef29756535fb13e4483ca4daedae698d461a5745aa8f6f35a4a119b837c55f
nutanix-cloud-controller-manager git d9fe8f38 sha256:05cb16edb44301a6ef5f62dbdd12414029d6a88c21bb9ff27f87b7a73465f03a
nutanix-machine-controllers git afe324bf sha256:994de6ec679cd81cf10cf6b62f506bf7465dea34d33307518ab98469c012a0ee
oauth-apiserver git 2575ff41 sha256:115bb0e3a2332aecd72943e059ac5ce92083e50236bfb6d45ee142c7ecb8f747
olm-catalogd git 9f981b3e sha256:06bfd255b7b6652ff619e4be8b70aacfa2b4f53e784ba6eed1b4fcffa1c7c175
openshift-state-metrics git 3cca6fee sha256:1b4ded12e671f0082a24cb385a66c6e56eab78d55b43bd3fefada697a172a65f
openstack-cluster-api-controllers git ce2c2d17 sha256:99a129587f932e5024cb9ace5d97b0416d9f4654e1db0f1bb75c8958ff004e98
openstack-machine-api-provider git d914e77e sha256:6c9f9f8a5c67f85abfd7a16b38608f52e2e8373160e1a26f2de83a509fbc1642
operator-marketplace git c06a810b sha256:8f8e310e070cb0c5394522604fc4cade8e5bfb031e2d0f35739211763c9e0514
ovirt-csi-driver git 1db726a9 sha256:dcac370e01fba59008a758c4a8a9959279fa342bd117887fe603474c91b2025c
ovirt-csi-driver-operator git 0feae256 sha256:9b024151810decc408d62b705cc943dd3a1bdc5bf869a73a72be309d90dd1b18
powervs-block-csi-driver git d36aea34 sha256:38a716f1621141dadefbf9d0cab2120fa0b275ea16c5198b9f14219bceec3e51
powervs-block-csi-driver-operator git 01fc505a sha256:f29e4324c9c7e76239ca74276b762efdbb3e9f8af5647147b3d18b44466a0da0
powervs-cloud-controller-manager git 17ae6fba sha256:a9c872c9ac1077e536f93d9e7b9d73ec20276038f47f8d91b7ffb964aff7c34a
prom-label-proxy git 35c11369 sha256:121f14f1c73308787ccf9e95d16d26c3bff954780cba4adf94e7ebdf463bc652
prometheus-alertmanager git a4320675 sha256:4122f6a81891ca40187ebcc8e98a1331953720dd1718253c84be0a4c276685b6
prometheus-node-exporter git 92e17ff5 sha256:84effa3f6fd6c600a76e08daa5b2ebdc6c52f228b693e87d9c25666c18626c17
rhel-coreos sha256:4e309dd906392e783a404b92dfd4fa4c32d74e2804ee37d1fb8a00c9355d5978
rhel-coreos-extensions sha256:7033f46996eddcbad8c8b8aeb18e601bdeef3d04bd7f79cd194db5e6346a7fc4
route-controller-manager git ce6ffa24 sha256:75037e7a2602a589e5c91b59a021f3ff9d451868aff2b196f2ef71be6bf71440
service-ca-operator git 30efb529 sha256:4519833d863edb9decbfc3a3a50a6fb55bea133e46be24d4be83b57ef96bf3e9
telemeter git 490612bd sha256:f1374f320a6851a73145d5f81300ed2c7cbc0c8d41df10d0338a66575c94b207
thanos git f1599f65 sha256:4c8cdb1708290dba397c22092555aef10fdf37ce9dbe9f453f35ae6a4c1d703b
vsphere-cloud-controller-manager git c414d1f5 sha256:4cb0ec6a2811406c0c50b71231a465ffe99d5bc9b44d438becac9ad7bef361d2
vsphere-csi-driver git cfcad01d sha256:2084268bf2649cf2b08669b0ebef57d822121c7fbeb983445451478cc713ab5b
vsphere-csi-driver-operator git 2b241410 sha256:6f7416a2854c9e77d8a6924b2f02464c5ebbbc29ff2ba9f04c5612a29f59b4aa
vsphere-csi-driver-syncer git cfcad01d sha256:eb9cafeb37d7e8d1aa5a9c4312ea9ab44c6633d257883e0d2a52eb574aa03924

agent-installer-api-server

NO-ISSUE: pin gotestsum to v1.12.3 (#8018) #8018
OCPBUGS-58635, OCPBUGS-58640: Bump glog to v1.2.5 in release-4.18 (#7877) #7877
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-58650: Bump glog pkg to 1.2.4 (#1181) #1181
Full changelog

agent-installer-node-agent

OCPBUGS-58655, OCPBUGS-58660: Bump glog to v1.2.5 in release-4.18 (#1069) #1069
Full changelog

aws-cluster-api-controllers

OCPBUGS-61841: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #570
OCPBUGS-58670, OCPBUGS-58675: bump github.com/golang/glog to v1.2.5 #556
OCPBUGS-56434: Update manifests to use v1 admissionregistration group #554
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-55053: Correct ASH driver inject env config #381
OCPBUGS-54453: Enable required driver services #375
OCPBUGS-60596: Bump library-go to fix assignment to nil map issue #421
OCPBUGS-60203: Remove stale conditions #413
Full changelog

azure-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #348
Full changelog

azure-machine-controllers

OCPBUGS-56167: [release-4.18] Update virtualmachines service to armcompute/v5 SDK #145
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #51
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-59490: Make swift containers removal not fatal for UPI. #9839
OCPBUGS-61529: Use less permissive access for /var/lib/etcd for SNO #9937
OCPBUGS-61178: Refine check for supported SNO platforms #9923
OCPBUGS-60592: baremetal: always set external v6 URL on dualstack #9895
OCPBUGS-54598: Update the RHCOS 4.18 bootimage metadata #9900
OCPBUGS-56177, OCPBUGS-59155, OCPBUGS-59158: Migrate AWS SDK to V2 to support MX-Central Region #9709
OCPBUGS-58321: allow to deploy single nodes with UPI #9824
OCPBUGS-54744: Filter out excess CA certs when adding node #9647
OCPBUGS-58264: vSphere - remove unit tests using nip.io #9813
Full changelog

baremetal-operator

OCPBUGS-56766: Make firmware update handle only a subset of Spec.Updates #421
Full changelog

baremetal-runtimecfg

OCPBUGS-59280: Bump logrus version #354
OCPBUGS-57782: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #351
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-58233: Return error in case of error #2054
Full changelog

cloud-credential-operator

OCPBUGS-55127: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #915
OCPBUGS-60971: ccoctl: aws to use proper issuer url on subsequent runs #907
OCPBUGS-60618: ccoctl azure dnszone-resource-group-name now optional #899
OCPBUGS-58680: github.com/golang/glog v1.2.5 #891
OCPBUGS-58247: ccoctl: only add owned tag to azure resources on create #882
Full changelog

cluster-authentication-operator

OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #754
Full changelog

cluster-autoscaler

OCPBUGS-60908: revert openshift replica fix #375
OCPBUGS-60235: fix checkpoint gc of unknown recommenders #368
OCPBUGS-59260: Fix cool down status condition to trigger scale down #361
Full changelog

cluster-baremetal-operator

OCPBUGS-60586: Remove webhookport (9447) as HostPort #501
OCPBUGS-58315: Bump github.com/go-errors/errors to v1.5.1 #492
Full changelog

cluster-capi-controllers

OCPBUGS-56434: Update manifests to leverage v1 admissionregistration group #241
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-60015: Add Service using common resource templating #405
OCPBUGS-60015: Update service selector to match deployment label #403
Full changelog

cluster-config-api

OCPBUGS-52347: Add CEL validation for RegistrySources in Image API #2218
OCPBUGS-60904: MachineOSConfig name should match MachineConfigPool #2458
Update crd-schema.json to release 1.33 branch #2459
: add OnClusterBuilds to default config #2365
Full changelog

cluster-etcd-operator

OCPBUGS-61235: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1478
OCPBUGS-59992: fix ordering on bootstrap IP selection #1458
OCPBUGS-59803: add missing ports to svc and pod spec #1455
OCPBUGS-56834: etcd pod containers do not start when tls min version is 1.3 #1428
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-61039: Set goaway chance to 0.001 #1912
OCPBUGS-60176: Add missing service ports to apiserver service #1888
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60131: Missing endpoint slices for open ports the operator uses #852
Full changelog

cluster-monitoring-operator

OCPBUGS-61706: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2669
OCPBUGS-59962: operator: increase wait time till degraded to max 4 times 5m #2633
Full changelog

cluster-network-operator

OCPBUGS-60984: Update CNO reviewers/approvers #2766
OCPBUGS-60795: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2782
OCPBUGS-47651: Re-disable metrics server #2622
Full changelog

cluster-node-tuning-operator

OCPBUGS-61078: e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1388) #1388
E2E: skip stalld test case checking sched_fifo (#1387) #1387
e2e: arm: Add arm kernelPageSize e2e testing suite (#1355) #1355
Full changelog

cluster-olm-operator

OCPBUGS-57767: fix olm.maxOpenShiftVersion float parsing #125
Full changelog

cluster-version-operator

OCPBUGS-58450: Failing=Unknown upon long CO updating #1211
OCPBUGS-60222: CVO protects /metrics with authorization #1223
Full changelog

console

OCPBUGS-62326: /auth/error?error=missing_state&error_type=auth is showing blank page #15544
OCPBUGS-61569: Update CHANGELOG for 4.18 plugin SDK package publish #15516
OCPBUGS-61569: Fix bug with Console provided PatternFly shared modules #15479
OCPBUGS-61697: Remove ancient X-XSS-Protection header #15493
OCPBUGS-60236: Make sure CSP violations are only reported to telemetry once per day per browser #15453
NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish #15456
OCPBUGS-50983: Store Topology sidebar alert in the localStorage #15431
OCPBUGS-54660: Added patternfly/react-topology to shared module list of dynamic plugin sdk #15371
OCPBUGS-50570: Fix regression where plugins were not tracking CSP violation status a… #14754
OCPBUGS-60140: Recognize Detached BMH status #15362
OCPBUGS-54660: Add BaseNode in topology folder into Dynamic Plugin SDK #15369
: OCPBUGS-60278: Fix i18n string for event stream #15403
OCPBUGS-54660: Expose OdcBaseNode through the dynamic plugin SDK #15370
OCPBUGS-54660: Expose topology components and utils via plugin SDK internal package #14777
OCPBUGS-58364: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15272
OCPBUGS-59778: add data-test attrs to console plugins table #15327
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15330
OCPBUGS-59501: Add the Origin header to the HeaderBlacklist in the co… #15295
OCPBUGS-59443: Not able to launch terminal window from OCP web console due to console plugin conflicts #15290
OCPBUGS-59446: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15292
OCPBUGS-58457: fix bug where / in console.tab/horizontalNav href brea… #15250
OCPBUGS-58203: OpenShift console PVC clone cannot use B as the unit #15215
OCPBUGS-58317: Implement sessions in openshift authenticator #15237
OCPBUGS-58088: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15202
OCPBUGS-58089: Getting “Oh no something went wrong” error message in web console. #15203
OCPBUGS-57931: Add the ability to launch multiple modals with useModal hook #15196
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

NETOBSERV-2023, OCPBUGS-60304: Implement a quickstart for netobserv operator #997
OCPBUGS-60081: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1031
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #1027
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-60871: [release-4.18] host-device: Return interface name in result #208
OCPBUGS-56928: bridge: Add option to enable port isolation #203
Full changelog

coredns

OCPBUGS-60462: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #152
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-57800: Rebase release-4.18 onto release-1.31 #322
OCPBUGS-58835: CARRY: don’t ignore json files #339
Full changelog

csi-external-resizer

OCPBUGS-62467: Requeue PVC over PV creation #176
Full changelog

docker-registry

IR-526: remove AWS region check #437
Full changelog

etcd

OCPBUGS-57112: Updating ose-etcd-container image to be consistent with ART for 4.18 #333
Full changelog

gcp-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #247
Full changelog

gcp-machine-controllers

OCPBUGS-59387: Add max-concurrent-reconciles flag to machine actuator #126
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-61557: Rebase v1.31.13 #2465
Revert “UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.”” #2448
OCPBUGS-60511: Bump to v1.31.12 #2440
OCPBUGS-60524: podresources: list: use active pods #2413
UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2422
OCPBUGS-57488: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2333
OCPBUGS-57499: UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image #2399
OCPBUGS-44757: Adjust NodeMonitorGracePeriod to 50s #2385
OCPBUGS-59535: Rebase v1.31.11 to 4.18 #2377
OCPBUGS-57887: Update to Kubernetes v1.31.10 #2348
Full changelog

hypershift

OCPBUGS-62816: set default goaway-chance to 0.001 #6950
OCPBUGS-61904: resolve MIRRORED_RELEASE_IMAGE flapping #6858
OCPBUGS-61700: Sync RBAC for expansion support in kubevirt CSI driver #6355
OCPBUGS-61568: [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution #6793
OCPBUGS-61203: ci: konflux multi-arch images #6867
OCPBUGS-61203: Use the common konflux pipeline and update CLI dockerfile #6832
NO-JIRA: chore(deps): update konflux references #6667
OCPBUGS-57142: [release-4.18] HCP payload doesn’t respect multiple mirrors #6672
OCPBUGS-60485: feat(validations): add wildcard support to DNS SAN conflict detection #6649
OCPBUGS-60148: Always compress and encode payload in token secret for inplace upgrades #6721
OCPBUGS-60923: MCE 2.8 konflux for hcp-cli #6700
CNTRLPLANE-1333: New API to support specifying cluster-autoscaler flags #6641
OCPBUGS-60458: Update PSA from v1beta1 to v1 #6644
CNTRLPLANE-1269: chore(deps): update konflux references #6658
CNTRLPLANE-1205: Add missing mce-2.8 pipeline #6656
OCPBUGS-59503: [release-4.18] Support proxy authentication when user/pass is included in URL #6460
CNTRLPLANE-1229: Move CPO pipeline to hermetic builds #6597
OCPBUGS-57818: Reuse hosted cluster release and metadata providers #6301
OCPBUGS-58126: Don’t use /version for haproxy health checks #6323
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-58741: bump github.com/golang/glog to version v1.2.4 #104
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55297: [IBM VPC] set offlineExpansion to false in e2e test manifest #144
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51825: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #120
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #119
Full changelog

ibmcloud-machine-controllers

OCPBUGS-47135: CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] #69
Full changelog

insights-operator

OCPBUGS-61656: virt launcher logs gatherer (#1135) #1135
avoid possible Go panic when searching existing conditions (#1124) #1124
fix: incorrect anonymization of domains (#1115) #1115
feat: add permissions to gather clusterrole (#1113) #1113
feat: copy proxy envs from IO pod to gathering pods (#1105) #1105
Full changelog

kube-rbac-proxy

OCPBUGS-60930: fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 #125
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). #225
Full changelog

machine-api-operator

OCPBUGS-59387: Enabled 10 concurrent reconciles on GCP #1392
Full changelog

machine-config-operator

OCPBUGS-62499: Add /etc/docker/certs.d to template #5320
OCPBUGS-62637: Machine-config controller should actively manage cordon while draining #5322
OCPBUGS-62350: Add mcd_local_unsupported_packages recording rule #5315
OCPBUGS-62321: Add control-plane label for master nodes on legacy clusters #5314
OCPBUGS-61840: Override NMState service definition #5288
OCPBUGS-57357: Race in configure-ovs.sh affects bonding interface configuration. #5118
OCPBUGS-59929, OPNET-681: Support migration to NMState #5207
OCPBUGS-60034: Add workaround fix for static pod race #5212
OCPBUGS-56751: Support NODEIP_HINT in IPI deployments too #5081
OCPBUGS-55246: kubelet: readonly mounts for criometricsproxy #4998
OCPBUGS-58067: Ensure the build controller restarts on upgrade #5140
OCPBUGS-57328: Do not set cpu system reserve below the default value #5152
OCPBUGS-56624: Give keepalived container chroot cap #5073
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #5138
OCPBUGS-57935: add MachineConfiguration to CO related objects #5134
Full changelog

monitoring-plugin

NO-JIRA: update i18n strings #508
OCPBUGS-60199: feat: add alerting rules tab to dev console #493
OCPBUGS-54314: Fix “Export as CSV” #461
Full changelog

multus-admission-controller

OCPBUGS-58771: Update the github.com/golang/glog module to v1.2.4 #101
Full changelog

multus-networkpolicy

OCPBUGS-54939: [release-4.18]: Support default ports value #68
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-59697: Prevent accidental IP deallocation in statefulsets #376
OCPBUGS-58360: The node slice controller should only process valid whereabouts confi… #381
OCPBUGS-58360: Add nodeslicecontroller bin to dockerfile #373
Full changelog

must-gather

OCPBUGS-46437: Separate resources with comma to fix malformed inspect #470
Full changelog

network-interface-bond-cni

OCPBUGS-62793: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #99
OCPBUGS-58095: Bump github.com/containernetworking/plugins from to 1.7.1 #79
Full changelog

network-metrics-daemon

OCPBUGS-58781: Bump github.com/golang/glog to v1.2.4 (#111) #111
OCPBUGS-60174: Replace e2e test image (#120) #120
Full changelog

networking-console-plugin

OCPBUGS-60178: Fix ingress details #264
OCPBUGS-60124: Fix requiremenets with no value #259
OCPBUGS-57286: Fix pod context #251
Full changelog

oauth-proxy

OCPBUGS-61444: Update x/crypto to v0.31.0 #333
OCPBUGS-57172: 4.18 kube 1.31 #317
OCPBUGS-58312: fix e2e tests #325
Full changelog

oauth-server

OCPBUGS-57300: Updating oauth-server-container image to be consistent with ART for 4.18 #186
Full changelog

oc-mirror

OCPBUGS-62696: v2/cli: show binary version in output #1286
OCPBUGS-62711: generate the archive only after mirroring #1287
OCPBUGS-62432: changes the warning message of 4.21 #1278
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-58461: Wire dry run option to Image API server operations #531
OCPBUGS-56609: Fix image reference in TestImageStreamImportQuayIO #514
Full changelog

openshift-controller-manager

OCPBUGS-61002: legacy image pull secret rollback controller #411
OCPBUGS-57949: ignore error failing to find pull/push secrets #399
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-61364: [4.18] e2e stability fixes #1080
OCPBUGS-60644: Add NetworkPolicy as a supported kind #1048
OCPBUGS-59421: 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs #1040
OCPBUGS-58882: Reduce Frequency of Update Requests for Copied CSVs (#3597) #1034
OCPBUGS-57427: reduce cache expiry frequency [release-4.19] #1020
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-59744, OCPBUGS-61455: [4.18] allow default network -> localnet on the same node for any localnet subnet #2785
OCPBUGS-61748: [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] #2777
OCPBUGS-59680: [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] #2768
OCPBUGS-48710: Update OWNERS file: Add Patryk/Martin as approvers #2700
OCPBUGS-59371: EIP OVN controller: stop pod config flap #2703
OCPBUGS-59531: EgressIP: fix startup syncer #2690
OCPBUGS-59623: Revert “unpin libreswan version” #2678
OCPBUGS-57318, OCPBUGS-58159: DownStream Merge Sync from 4.19 [06-26-2025] #2646
OCPBUGS-46401, OCPBUGS-48710, OCPBUGS-55263: DownStream Merge Sync from 4.19 [05-28-2025] #2593
Full changelog

powervs-machine-controllers

OCPBUGS-61163: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #125
Full changelog

prometheus

OCPBUGS-61706: chore: compute highestTimestamp at queryManager level #267
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-58194: Fix: One Alertmanager Config failing blocks all others #335
Full changelog

tests

OCPBUGS-61698: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30253
OCPBUGS-60511: Bump to latest openshift/kubernetes (v1.31.12) #30230
OCPBUGS-60662: images/tests: Remove rteval #30135
OCPBUGS-60881: Exclude RHEL nodes in verifying that nodes have no unexpected reboots test #30170
OCPBUGS-60881: extended/machines: add –no-pager to journalctl cmds #30180
OCPBUGS-60927: Wait 30s after the upgrade is complete to validate workloads #30179
NO-JIRA: Update extended/networking OWNERS #30089
OCPBUGS-58461: Backport pr 29834 to release-4.18 #29968
OCPBUGS-60066, OCPBUGS-60067: Don’t check for isNoUpgrade #30053
OCPBUGS-60066, OCPBUGS-60067: Tolerate various expected Upgradeable=False conditions #30048
OCPBUGS-57887: Update to Kubernetes v1.31.10 #29941
OCPBUGS-58366: Make EgressIP helper functions more reliable #29950
OCPBUGS-57081: Do not set the MTU when using NetworkAttachementDefinition #29891
OCPBUGS-58044: Boot image controller should correctly handle marketplace boot images #29937
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61651: Fix unit tests #70
OCPBUGS-58861: [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 #62
Full changelog

vsphere-problem-detector

OCPBUGS-60784: Check for number of FailureDomain-s in GetVCenter() #189
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github