4.18.28

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.28-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.17, 4.17.18, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.18.10, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.4, 4.18.5, 4.18.6, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.27

Created: 2025-11-06 15:54:47 +0000 UTC

Image Digest: sha256:98c80d92a2ef8d44ee625b229b77b7bfdb1b06cbfe0d4df9e2ca2cba904467f7

Components

Kubectl 1.31.1
Kubernetes 1.31.13
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202511041748-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-api-server git 03ef1905 sha256:a08f08b91e19f6d0b8326272dcf967599aab7dd630ae15e818a917bc6fe9a1dd
agent-installer-node-agent git 32a1f2a4 sha256:52d9570d380c39a331fee729396514e3c8a7e9e6522471c2fc49b56a338990f8
azure-disk-csi-driver git 6cced666 sha256:6526eda46595a77edede1f48a33b046e35dbcc39bc8a362aab9544b9979bf90c
azure-file-csi-driver git 4b34592e sha256:2a934670530316b84ccc8562e91c32df028ab95780142dd706eae750954398b7
baremetal-runtimecfg git 35341068 sha256:0e5c0acdd03dc840d7345ae397feaf6147a32a8fef89a0ac2ddc8d14b068c9ff
container-networking-plugins git e8ca1d70 sha256:0d866f93bed16cfebd8019ad6b89a4dd4abedfc20ee5d28d7edad045e7df0fda
csi-driver-nfs git 32e77590 sha256:2e8e7bdb9db0feed98f96e6542cc2e8bb4cb33dc1dc3d61c1df092cdbde4db06
docker-builder git a5cbc2b1 sha256:d00e4a8d28cc3d2d3fb5373755d14d8b28eac162507662675fae2c82047ff869
driver-toolkit git 2e139edc sha256:673cb0c159ef713fa3756a8808533c840370105733d9a47cfe63b201f3e193ba
gcp-pd-csi-driver git 1b8c94ac sha256:dc737e45c5fb285e5e07a2da206c0361db34abac6715ca6d245bccdd22c6f726
ironic-machine-os-downloader git 50ca44fd sha256:16633b0c52c5133b692c8b75af2f3f644cf70d678ce8d656647e647c504c1a81
keepalived-ipfailover git 716eb0ef sha256:0247eac32c117b5ee2fbd09f694d7ce28e9000b5b9237f33f658ea020d5a8827
libvirt-machine-controllers git a336f0b5 sha256:0335711cbdf908bd36d15b90cd2d015a848b7b67d4f85a00863b7f48a34ba28a
machine-image-customization-controller git d9a71247 sha256:a89d97b3f48e9dee1e20c913897b81185cd0af7f09b7dd3b58d18852f4220cbf
machine-os-images git ab432836 sha256:82395dbf9c54f869b1bab1ad4ff27253704dfdb48cbdba5049aba2e6464eb5b9
metallb-frr git 98ccbe64 sha256:4629a2d090ecc0b613a9e6b50601fd2cdb99cb2e511f1fed6d335106f2789baf
monitoring-plugin git fafea6bc sha256:30948d73ae763e995468b7e0767b855425ccbbbef13667a2fd3ba06b3c40a165
must-gather git 02e536cc sha256:5e70580b9f50a9a93e6340b82beeaf8498b83f2f90bf0d17375bad26e2ccb8ed
network-tools git 47b13549 sha256:3abf628c1fc1326f2508f490b6a6f9a4ee3da73dd14ecd8c138ac54e6c31ddd3
networking-console-plugin git 15535681 sha256:25b69045d961dc26719bc4cbb3a854737938b6e97375c04197e9cbc932541b17
powervs-block-csi-driver git d36aea34 sha256:cba7ad10fb39b7441100637b3a829ede02aa3a1e70b79e16e0b4da49f071f3ea
rhel-coreos sha256:411b8fa606f0f605401f0a4477f7f5a3e640d42bd145fdc09b8a78272f8e6baf
rhel-coreos-extensions sha256:72b0a0c9efb387b7bc098327fb451c359aa613f41cd90a7651d11588dee986a5
tools git 4fcb2d07 sha256:fdcfa264ad6a1a653f17399845e605dbc99e8f391cfdd940fd684819d6e91001
vsphere-csi-driver git cfcad01d sha256:21a891e2bef32460f4b97e591644b09d138de811855f8c896d05a9d51dbb6651

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
Full changelog

aws-machine-controllers

OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-machine-controllers

OCPBUGS-63669: Support datadisks on Stack Hub #167
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
Full changelog

cluster-baremetal-operator

OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-monitoring-operator

OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
Full changelog

cluster-node-tuning-operator

OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

console

OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
Full changelog

hypershift

OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
Full changelog

ironic

OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-config-operator

OCPBUGS-62294: Make static DNS with DHCP IP work #5311
Full changelog

oauth-apiserver

OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
Full changelog

tests

OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github