4.18.29

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.29-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded (1 retries) periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-master-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-techpreview-serial
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-master-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-master-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.38, 4.17.40, 4.17.41, 4.18.10, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.21

Created: 2025-11-20 13:49:30 +0000 UTC

Image Digest: sha256:8c885ea0b3c5124989f0a9b93eba98eb9fca6bbd0262772d85d90bf713a4d572

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.10 to 1.31.13
Kubernetes Tests upgraded from 1.31.10 to 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202507221927-0 to 418.94.202511170715-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)		Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:cb3ec61f9a932a9ad13bdeb44bcf9477a8d5f728151d7f19ed3ef7d4b02b3a82
agent-installer-orchestrator git 81d6bc27 sha256:a0bfb9a269b7afd9579cac60ec7afbe0ab7f4492904a20f598954c69089ce343
agent-installer-utils git 0e41f7d5 sha256:a34f4a14ed3865399dbbc8ea9f685dfa368a8957973e6ef719c458b43d02e238
apiserver-network-proxy git 2f62712d sha256:0ef9d286956b0d41666750f76140e1c12156207622442d5d174a7f5867e0f924
aws-cloud-controller-manager git c3951906 sha256:a4e27059ba58b0b59f614a79a7480f9de71a4aaa67087fed1d693fb0d2fab13b
aws-ebs-csi-driver git b51cd6b8 sha256:8e9afd9f3d7b0b28542f9b89135f775193a60f26c62404895fefbc5b046d078c
aws-kms-encryption-provider git 088dcaf7 sha256:7fc0b972c9bd1b177164797961d9d63c14c07c44e654c6a5d8dd9d692d371490
aws-pod-identity-webhook git f54f9a19 sha256:06d8f75b4d269359a8776ad8da9ee2d54e5b03dab18ca81f4f028fee1cdc90fd
azure-cloud-controller-manager git 9c24d768 sha256:cfaa8f3c11198770da9d4a2ecc8b70ad8db7baa04b28f5a3242718d6097dad64
azure-cloud-node-manager git 9c24d768 sha256:44212d87a370b8ea5f5ea22d4cdd447c2d237155c668dbd0435728369c0be06b
azure-disk-csi-driver git 6cced666 sha256:d878f56a00516a1e2f308202200c0e3c68833b7791f534809ac17fae7587071a
azure-file-csi-driver git 4b34592e sha256:8b4c1c57681b0e9e260bd97689a0efc97558b879693cd9d2cd9826115f5da7eb
azure-kms-encryption-provider git c937080f sha256:18be00069bae893ec0e20fc959749628ee2d42df73c2bdb6aaefead06fee3941
azure-workload-identity-webhook git f60e4029 sha256:c6a3ab1875d35550458c7ffe459fe37e67fbac26f49876e11a3e237df3f9c1f0
baremetal-machine-controllers git 1ede6c3f sha256:2f96d8336aa5f137709599375bf49b7ba87dbb22f64c85350803f980c0f1140b
cluster-autoscaler-operator git 474ad65c sha256:72bbe2c638872937108f647950ab8ad35c0428ca8ecc6a39a8314aace7d95078
cluster-bootstrap git d1e01954 sha256:05eefe0c5cd13e6ba78c2875f6c89594f09d792e46b28e1dc05531cf9a8f9c83
cluster-capi-controllers git 63df38bc sha256:0ce57231f7b59550805d07f3d93b9918d7715b02f6a932b8f17426b95038769d
cluster-capi-operator git 2f2737e1 sha256:0c7229587d2686b8ed0acab8df8da5d297367492951318148bd2308f826bc56c
cluster-config-operator git 85cb4072 sha256:3b8d91a25eeb9f02041e947adb3487da3e7ab8449d3d2ad015827e7954df7b34
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:fd3e9f8f00a59bda7483ec7dc8a0ed602f9ca30e3d72b22072dbdf2819da3f61
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:10e57ca7611f79710f05777dc6a8f31c7e04eb09da4d8d793a5acfbf0e4692d7
cluster-dns-operator git 7cafd0c7 sha256:3c1edf52f70bf9b1d1457e0c4111bc79cdaa1edd659ddbdb9d8176eff8b46956
cluster-image-registry-operator git 1e3caa4b sha256:aa24edce3d740f84c40018e94cdbf2bc7375268d13d57c2d664e43a46ccea3fc
cluster-ingress-operator git d967a73c sha256:831f30660844091d6154e2674d3a9da6f34271bf8a2c40b56f7416066318742b
cluster-kube-cluster-api-operator git 33a1141e sha256:8b6f04bbdc17321a324f3b0ebfaf425fffcd0b8f1d3999669db3446f013fe0e4
cluster-kube-scheduler-operator git 6182930d sha256:f042fa25014f3d37f3ea967d21f361d2a11833ae18f2c750318101b25d2497ce
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:75d996f6147edb88c09fd1a052099de66638590d7d03a735006244bc9e19f898
cluster-machine-approver git 01d5fbbe sha256:8cc27777e72233024fe84ee1faa168aec715a0b24912a3ce70715ddccba328df
cluster-olm-operator git 88088e4b sha256:86af77350cfe6fd69280157e4162aa0147873d9431c641ae4ad3e881ff768a73
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:8375671da86aa527ee7e291d86971b0baa823ffc7663b5a983084456e76c0f59
cluster-openshift-controller-manager-operator git f1711cf3 sha256:8eabac819f289e29d75c7ab172d8124554849a47f0b00770928c3eb19a5a31c4
cluster-policy-controller git 5fd85252 sha256:d64c13fe7663a0b4ae61d103b1b7598adcf317a01826f296bcb66b1a2de83c96
cluster-update-keys git 8caab452 sha256:1262b0c768720a765e562581f0ea04a8021be4805f18aa4779d9b5d599456212
configmap-reloader git e2aaf00a sha256:190f9853ef0494951aa3a2f4e41955131d4615e22750646ab251c6f26007beba
csi-driver-nfs git 32e77590 sha256:a15dd7e0cf2f82bf61203cd94bef14d8465f50063ee2b16797912a199c2a6847
csi-external-attacher git 39b37c06 sha256:cd6c78aff1beadb0f8d9d1ae13bec426ff890563c5e5fc194c84a5164662d7cf
csi-external-provisioner git 376f0ea0 sha256:e939654289a5a4969ce5e6a755ae8794cf31bc673868134d7dd57d284b30d5e8
csi-livenessprobe git 3a977844 sha256:aabf6f316cc7e67fcbd6e85f406e2c31c868a508e7c6b361a72f6bb2f5746322
docker-builder git a5cbc2b1 sha256:31aa3c746438e79d97c5978e8a01d5294af45fd3e331d58d9a50adaee75080a2
driver-toolkit git 2e139edc sha256:f42e7516800b6a17e858dbecabe7bada9b8df093cce5dd98541bd96887b85dea
egress-router-cni git 3193a756 sha256:cfde59e48cd5dee3721f34d249cb119cc3259fd857965d34f9c7ed83b0c363a1
gcp-cloud-controller-manager git 6ea23561 sha256:db93378cfc53c568d2f0f2f6a62ec90e918df9d7394a701fc47f83102d83a4a7
gcp-pd-csi-driver git 1b8c94ac sha256:b984e6412d4780f872054fa634835e547070a28dee502404de5e0256a3b8c456
gcp-pd-csi-driver-operator git 7cb8b38c sha256:091e87ebeee8bdc0337ea7f1862bc78b6eb8e93fb142bfe0811895c80054b0ac
gcp-workload-identity-federation-webhook git f0a670c7 sha256:e9d34a70fb09824c852bca57579725c7be70d1a399ab1093a3ec493544060f00
haproxy-router git d8058949 sha256:2b3d313c599852b3543ee5c3a62691bd2d1bbad12c2e1c610cd71a1dec6eea32
ibm-cloud-controller-manager git a33026b1 sha256:a9fdc95449485c1d9b52c365a19ff90b016860a64fe2a11578da53fc04e73851
ibm-vpc-block-csi-driver git c7d883c5 sha256:1a297b97c0d257a00debee8d6f106bfee52412d5d1c8ea061d66a2e18b9f8284
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:ace2dd5982b2e69a27fe31b387c5ac8eff4c51e65561b80c13937c4c14dc9941
insights-runtime-exporter git 7149f2d5 sha256:170ce0bd71053828c2438a7d5bd64b3cdb9ad6e17db805a946533776fa787d3c
insights-runtime-extractor git 7149f2d5 sha256:e4bc710c31e2912762aac015c43f4470dc188ccc4bf02a6c466e83588aab68ac
ironic-agent git b79bddef sha256:72daaa1ab5784a446d223897557ecdfacfdc33e702bdd5e1ef645a9c25d3049e
ironic-machine-os-downloader git 50ca44fd sha256:a1b19f433d644fc7cc0ccf3aa9b58c415f6fb57072c1e5e5c9bebc34e0337bbf
ironic-static-ip-manager git cfbae04f sha256:6bec1870e6ba0c4777523e702dea8a0866988327535d7637c8458d73ff32c1d5
keepalived-ipfailover git 716eb0ef sha256:f2fa0287535f7ad6d1cdaaddd077c0286c9930f25ccaed77c3da94c57f610343
kube-metrics-server git 962ccca2 sha256:0824d9b793abc22c69ad35697e1bd3e725f07be0485f504d710ea1e8632d06ad
kube-state-metrics git cb5a9296 sha256:2f41e33fa119d569ba903ae6b18ec7cf1626d8c24da6f8acf9bcbafef2f043ae
kubevirt-cloud-controller-manager git 3f4542ec sha256:8c27163cf2eb0d6dd300a9992053a3b1a70d98266f6bb5582fd42c5604a7b173
libvirt-machine-controllers git a336f0b5 sha256:33103394379e5e3f7571bced05a03bcdd59f67d1f4b2cf98393174843808485c
machine-image-customization-controller git d9a71247 sha256:abf2bcdc45716543d53b82784a1ef8c0b083a382acea6046125b8e4b612f2b81
machine-os-images git ab432836 sha256:8269c79a022ecfd6f2cd53a552f7d483b0adf036e4a5185a99f17dff12025105
metallb-frr git 98ccbe64 sha256:11d83fb97d5191861531c5463f84d0852f4383c00e851c32378f35ec3b242f94
multus-cni git 21fb8e05 sha256:9014f384de5f9a0b7418d5869ad349abb9588d16bd09ed650a163c045315dbff
multus-cni-microshift git 21fb8e05 sha256:e45a823c96517d642e654ff09c07f01f87a24adb900946fa1b76ede88c803b28
multus-route-override-cni git 391c1b03 sha256:9432c13d76bd4ba4eb9197c050cf88c0d701fa2055eeb59257e2e23901f9fdff
network-tools git 47b13549 sha256:d3dccb38d6932c068249b6c185c4f1e4551d8c8a89f6e1e420038e389cc738fc
nutanix-cloud-controller-manager git d9fe8f38 sha256:464b343ad3823ee7389049b3749c5e8240adb64dbe34761b913ffbb4c449c1e6
nutanix-machine-controllers git afe324bf sha256:1696f2e31ebfc53b460c7acd04f85aeeb5e94ef1f8f64a3b11f61a8edd655b95
oauth-server git 287caff3 sha256:8860e00f858d1bca98344f21b5a5c4acc43c9c6eca8216582514021f0ab3cf7b
openshift-apiserver git 5d7a65ba sha256:df606f3b71d4376d1a2108c09f0d3dab455fc30bcb67c60e91590c105e9025bf
openshift-state-metrics git 3cca6fee sha256:ee8240dce6c308012c91feac525db3c5df2d91c631d071881b61f0528929e904
openstack-cluster-api-controllers git ce2c2d17 sha256:e2e5a3fe81d9e672af511475c0c41c802cc73da99d4dc89f20637b1c6bcdbeb3
openstack-machine-api-provider git d914e77e sha256:1b244ded434a431616d62e3b9dfe39d7c65e267829cde15ecba10fe9797346bd
ovirt-csi-driver git 1db726a9 sha256:5c8cb05499a796972e09560d7b5c29d7a9791af62e93f77c9ca1b71ab5c8073b
ovirt-csi-driver-operator git 0feae256 sha256:77c3f9f95d57f079bcd4f49a07028f0f86869922f0d0f9f3ba6cafb319afeb7b
powervs-block-csi-driver git d36aea34 sha256:9ea4ca749a55aa4545fc02709600ab019fd761bac252fb3f281665f34413e56d
powervs-block-csi-driver-operator git 01fc505a sha256:af5e4b2b5bddd4311ca5cf9c78af52d935b2bafe6c8dabf50d7f555a245849a1
powervs-cloud-controller-manager git 17ae6fba sha256:be930a5614fea81a96b910b4b2d1f2c17a217bf2fbc10ab4b4037501e578a2a5
prom-label-proxy git 35c11369 sha256:7c84b5ebe858246af77fb40b85b6ea917fa2a4a651b740cd3320d461164d0ef8
prometheus-alertmanager git a4320675 sha256:91795c7ae050c24ea79ae91b18a4e39a1a527b046deecf7fc795c22caf0b3f59
prometheus-node-exporter git 92e17ff5 sha256:df4cf41b98aaa1978e682187fd6d8e934d70cea9b500033fec197ffcb5c75ab6
rhel-coreos sha256:bacca9583660340dd9e15ce647bdd062ca1af24ac4345962d2420d3ab87a2c89
rhel-coreos-extensions sha256:73196dfff57f86946d1ad24874872984a674fbda24f20d01689a3d4162d06833
route-controller-manager git ce6ffa24 sha256:c416b201d480bddb5a4960ec42f4740761a1335001cf84ba5ae19ad6857771b1
service-ca-operator git 30efb529 sha256:8139ed65c0a0a4b0f253b715c11cc52be027efe8a4774da9ccce35c78ef439da
telemeter git 490612bd sha256:445efcbc0255b904e1584fe9be9a513c1a9784088e35dd0abbdff5cae0961861
thanos git f1599f65 sha256:a9a6271d3a19d3ceff897d9d414271723a984d7c45b94aa521b2c8aa20e95983
vsphere-cloud-controller-manager git c414d1f5 sha256:cf30a53005c912dba6fd9cea2b308cf5a10951f8dbd714ba4076c5c9e78a9ac7
vsphere-csi-driver git cfcad01d sha256:2c0817314050673c9479e039d1d90fede08c76fd714001bca675acdf8eb0484c
vsphere-csi-driver-operator git 2b241410 sha256:cd76515d418bdae97fd0481a5c6da8773ca7b80d3389c28d0c4222d7b9971a51
vsphere-csi-driver-syncer git cfcad01d sha256:c086bac21b24e8fb820777aa5a75f665635a30534d0acb2c34fba408604adb85

agent-installer-api-server

NO-ISSUE: pin gotestsum to v1.12.3 (#8018) #8018
OCPBUGS-58635, OCPBUGS-58640: Bump glog to v1.2.5 in release-4.18 (#7877) #7877
Full changelog

agent-installer-node-agent

OCPBUGS-58655, OCPBUGS-58660: Bump glog to v1.2.5 in release-4.18 (#1069) #1069
Full changelog

aws-cluster-api-controllers

OCPBUGS-61841: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #570
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-62664: disable e2e snapshot tests #463
OCPBUGS-63558: Add RBAC ClusterRole and Binding for driver node #454
OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
OCPBUGS-62973: Add withCABundleDaemonSetHook() to AWS EFS operator #447
OCPBUGS-55053: Correct ASH driver inject env config #381
OCPBUGS-54453: Enable required driver services #375
OCPBUGS-60596: Bump library-go to fix assignment to nil map issue #421
OCPBUGS-60203: Remove stale conditions #413
Full changelog

aws-machine-controllers

OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #348
Full changelog

azure-machine-controllers

OCPBUGS-63669: Support datadisks on Stack Hub #167
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #51
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-58504: Refactor removing loadbalancer in OpenStack #9831
OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
OCPBUGS-62810: Update the RHCOS 4.18 bootimage metadata #10014
OCPBUGS-59490: Make swift containers removal not fatal for UPI. #9839
OCPBUGS-61529: Use less permissive access for /var/lib/etcd for SNO #9937
OCPBUGS-61178: Refine check for supported SNO platforms #9923
OCPBUGS-60592: baremetal: always set external v6 URL on dualstack #9895
OCPBUGS-54598: Update the RHCOS 4.18 bootimage metadata #9900
OCPBUGS-56177, OCPBUGS-59155, OCPBUGS-59158: Migrate AWS SDK to V2 to support MX-Central Region #9709
Full changelog

baremetal-operator

OCPBUGS-56766: Make firmware update handle only a subset of Spec.Updates #421
Full changelog

baremetal-runtimecfg

OCPBUGS-60111: Re-add ENABLE_NODEIP_DEBUG env var #364
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-64608: Help with must-gather scheduling through suggesting preferance of nodes #2127
Full changelog

cloud-credential-operator

OCPBUGS-63548: ccoctl: add public-key-file flag to create-all #938
OCPBUGS-55127: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #915
OCPBUGS-60971: ccoctl: aws to use proper issuer url on subsequent runs #907
OCPBUGS-60618: ccoctl azure dnszone-resource-group-name now optional #899
OCPBUGS-58680: github.com/golang/glog v1.2.5 #891
Full changelog

cloud-network-config-controller

OCPBUGS-64779: [release-4.18] Change the capacity struct from int to ptrOfInt #189
Full changelog

cluster-authentication-operator

OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #754
Full changelog

cluster-autoscaler

OCPBUGS-60908: revert openshift replica fix #375
OCPBUGS-60235: fix checkpoint gc of unknown recommenders #368
Full changelog

cluster-baremetal-operator

OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
OCPBUGS-60586: Remove webhookport (9447) as HostPort #501
OCPBUGS-58315: Bump github.com/go-errors/errors to v1.5.1 #492
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
OCPBUGS-60015: Add Service using common resource templating #405
OCPBUGS-60015: Update service selector to match deployment label #403
Full changelog

cluster-config-api

NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2562
CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
OCPBUGS-52347: Add CEL validation for RegistrySources in Image API #2218
OCPBUGS-60904: MachineOSConfig name should match MachineConfigPool #2458
Update crd-schema.json to release 1.33 branch #2459
Full changelog

cluster-etcd-operator

OCPBUGS-61235: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1478
OCPBUGS-59992: fix ordering on bootstrap IP selection #1458
OCPBUGS-59803: add missing ports to svc and pod spec #1455
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
OCPBUGS-61039: Set goaway chance to 0.001 #1912
OCPBUGS-60176: Add missing service ports to apiserver service #1888
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-60131: Missing endpoint slices for open ports the operator uses #852
Full changelog

cluster-monitoring-operator

OCPBUGS-61965: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2723
OCPBUGS-64579: Fix KSM deny-list typo #2731
OCPBUGS-63488: Remove AlertManager endpoints when disabled #2737
OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
OCPBUGS-63410: [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy #2724
OCPBUGS-63017: test: remove image registry e2e tests #2711
OCPBUGS-61706: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2669
OCPBUGS-59962: operator: increase wait time till degraded to max 4 times 5m #2633
Full changelog

cluster-network-operator

OCPBUGS-62671: Add drop flows for GARP #2810
OCPBUGS-60984: Update CNO reviewers/approvers #2766
OCPBUGS-60795: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2782
OCPBUGS-47651: Re-disable metrics server #2622
Full changelog

cluster-node-tuning-operator

OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

cluster-storage-operator

OCPBUGS-62666: Move metrics to vsphere driver #632
Full changelog

cluster-version-operator

OCPBUGS-62869: disable metrics auth for hypershift clusters #1242
OCPBUGS-58450: Failing=Unknown upon long CO updating #1211
OCPBUGS-60222: CVO protects /metrics with authorization #1223
Full changelog

console

OCPBUGS-65533: Preserve path on perspective switch #15716
OCPBUGS-64735: Expose prometheus tenancy label path as a proxy #15685
OCPBUGS-64682: limit node log length to 1000 lines #15680
OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
OCPBUGS-63247: fix bug where Roles list was displaying invalid data f… #15619
OCPBUGS-63041: switch to dev perspective for /dev-monitoring #15601
OCPBUGS-44156: bump dompurify to latest #15589
OCPBUGS-62326: /auth/error?error=missing_state&error_type=auth is showing blank page #15544
OCPBUGS-61569: Update CHANGELOG for 4.18 plugin SDK package publish #15516
OCPBUGS-61569: Fix bug with Console provided PatternFly shared modules #15479
OCPBUGS-61697: Remove ancient X-XSS-Protection header #15493
OCPBUGS-60236: Make sure CSP violations are only reported to telemetry once per day per browser #15453
NO-JIRA: Update CHANGELOG for latest 4.18 plugin SDK package publish #15456
OCPBUGS-50983: Store Topology sidebar alert in the localStorage #15431
OCPBUGS-54660: Added patternfly/react-topology to shared module list of dynamic plugin sdk #15371
OCPBUGS-50570: Fix regression where plugins were not tracking CSP violation status a… #14754
OCPBUGS-60140: Recognize Detached BMH status #15362
OCPBUGS-54660: Add BaseNode in topology folder into Dynamic Plugin SDK #15369
: OCPBUGS-60278: Fix i18n string for event stream #15403
OCPBUGS-54660: Expose OdcBaseNode through the dynamic plugin SDK #15370
OCPBUGS-54660: Expose topology components and utils via plugin SDK internal package #14777
OCPBUGS-58364: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15272
OCPBUGS-59778: add data-test attrs to console plugins table #15327
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #15330
Full changelog

console-operator

NETOBSERV-2023, OCPBUGS-60304: Implement a quickstart for netobserv operator #997
OCPBUGS-60081: Fetch synced CM for the CertificateAuthority issuer + Wire synced OIDC Auth CM to Console #1031
OCPBUGS-59786: Update the golang.org/x/crypto/ssh to 0.31.0 in the openshift-console image #1027
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-60871: [release-4.18] host-device: Return interface name in result #208
Full changelog

coredns

OCPBUGS-60462: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #152
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-57800: Rebase release-4.18 onto release-1.31 #322
Full changelog

csi-external-resizer

OCPBUGS-62467: Requeue PVC over PV creation #176
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

docker-registry

IR-526: remove AWS region check #437
Full changelog

etcd

OCPBUGS-57112: Updating ose-etcd-container image to be consistent with ART for 4.18 #333
Full changelog

gcp-cluster-api-controllers

OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #247
Full changelog

gcp-machine-controllers

OCPBUGS-59387: Add max-concurrent-reconciles flag to machine actuator #126
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-65494: Fix Concurrentmap Iteration #2512
OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
CNTRLPLANE-1610: Backport StreamingCollectionEncoding for JSON and protobuf #2483
OCPBUGS-61557: Rebase v1.31.13 #2465
Revert “UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.”” #2448
OCPBUGS-60511: Bump to v1.31.12 #2440
OCPBUGS-60524: podresources: list: use active pods #2413
UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2422
OCPBUGS-57488: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2333
OCPBUGS-57499: UPSTREAM:131579: fix(kubelet): acquire imageRecordsLock when removing image #2399
OCPBUGS-44757: Adjust NodeMonitorGracePeriod to 50s #2385
OCPBUGS-59535: Rebase v1.31.11 to 4.18 #2377
Full changelog

hypershift

CNTRLPLANE-1902: Migrate 4.18 pipelines to common pipeline template #7211
OCPBUGS-61700: use csi-resizer image from release provider #7103
OCPBUGS-63638: [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7111
OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
CNTRLPLANE-1424: feat(konflux): tag MCE HO images with latest #6837
OCPBUGS-62816: set default goaway-chance to 0.001 #6950
OCPBUGS-61904: resolve MIRRORED_RELEASE_IMAGE flapping #6858
OCPBUGS-61700: Sync RBAC for expansion support in kubevirt CSI driver #6355
OCPBUGS-61568: [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution #6793
OCPBUGS-61203: ci: konflux multi-arch images #6867
OCPBUGS-61203: Use the common konflux pipeline and update CLI dockerfile #6832
NO-JIRA: chore(deps): update konflux references #6667
OCPBUGS-57142: [release-4.18] HCP payload doesn’t respect multiple mirrors #6672
OCPBUGS-60485: feat(validations): add wildcard support to DNS SAN conflict detection #6649
OCPBUGS-60148: Always compress and encode payload in token secret for inplace upgrades #6721
OCPBUGS-60923: MCE 2.8 konflux for hcp-cli #6700
CNTRLPLANE-1333: New API to support specifying cluster-autoscaler flags #6641
OCPBUGS-60458: Update PSA from v1beta1 to v1 #6644
CNTRLPLANE-1269: chore(deps): update konflux references #6658
CNTRLPLANE-1205: Add missing mce-2.8 pipeline #6656
OCPBUGS-59503: [release-4.18] Support proxy authentication when user/pass is included in URL #6460
CNTRLPLANE-1229: Move CPO pipeline to hermetic builds #6597
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-51825: CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork #120
OCPBUGS-58861: Update manifests to remove reliance on admission registration v1beta1 #119
Full changelog

ibmcloud-machine-controllers

OCPBUGS-47135: CVE-2024-45338 ose-ibmcloud-machine-controllers-container: Non-linear parsing of case-insensitive content in golang.org/x/net/html [openshift-4.18] #69
Full changelog

insights-operator

OCPBUGS-61972: add missing permissions for replicasets and events #1146
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic

OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

kube-rbac-proxy

OCPBUGS-60930: fix(go.mod): bump golang.org/x/crypto/ssh to 0.31.0 #125
Full changelog

kube-storage-version-migrator

NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-18). #225
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-api-operator

OCPBUGS-59387: Enabled 10 concurrent reconciles on GCP #1392
Full changelog

machine-config-operator

OCPBUGS-62294: Make static DNS with DHCP IP work #5311
OCPBUGS-63346: Invalid architecture value found in annotation during 4.19 update #5366
OCPBUGS-60111: Enable debug logging for nodeip-configuration #5220
OCPBUGS-62671: [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it #5325
OCPBUGS-62845: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5341
OCPBUGS-62499: Add /etc/docker/certs.d to template #5320
OCPBUGS-62637: Machine-config controller should actively manage cordon while draining #5322
OCPBUGS-62350: Add mcd_local_unsupported_packages recording rule #5315
OCPBUGS-62321: Add control-plane label for master nodes on legacy clusters #5314
OCPBUGS-61840: Override NMState service definition #5288
OCPBUGS-57357: Race in configure-ovs.sh affects bonding interface configuration. #5118
OCPBUGS-59929, OPNET-681: Support migration to NMState #5207
OCPBUGS-60034: Add workaround fix for static pod race #5212
OCPBUGS-56751: Support NODEIP_HINT in IPI deployments too #5081
Full changelog

monitoring-plugin

OCPBUGS-64735: allow tenancy access to metrics tag #638
OU-1059: add perspective to action injector #632
NO-JIRA: update i18n strings #508
OCPBUGS-60199: feat: add alerting rules tab to dev console #493
Full changelog

multus-admission-controller

OCPBUGS-58771: Update the github.com/golang/glog module to v1.2.4 #101
Full changelog

multus-networkpolicy

OCPBUGS-54939: [release-4.18]: Support default ports value #68
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-59697: Prevent accidental IP deallocation in statefulsets #376
OCPBUGS-58360: The node slice controller should only process valid whereabouts confi… #381
OCPBUGS-58360: Add nodeslicecontroller bin to dockerfile #373
Full changelog

must-gather

OCPBUGS-46437: Separate resources with comma to fix malformed inspect #470
Full changelog

network-interface-bond-cni

OCPBUGS-62793: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #99
Full changelog

network-metrics-daemon

OCPBUGS-58781: Bump github.com/golang/glog to v1.2.4 (#111) #111
OCPBUGS-60174: Replace e2e test image (#120) #120
Full changelog

networking-console-plugin

OCPBUGS-60178: Fix ingress details #264
OCPBUGS-60124: Fix requiremenets with no value #259
Full changelog

oauth-apiserver

OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

oauth-proxy

OCPBUGS-61444: Update x/crypto to v0.31.0 #333
Full changelog

oc-mirror

OCPBUGS-65510: removes unintended exec permissions #1312
OCPBUGS-62696: v2/cli: show binary version in output #1286
OCPBUGS-62711: generate the archive only after mirroring #1287
OCPBUGS-62432: changes the warning message of 4.21 #1278
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd

OCPBUGS-62872: set the SElinux type #139
Full changelog

olm-operator-controller

OCPBUGS-62872: set the SElinux type #509
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-controller-manager

OCPBUGS-61002: legacy image pull secret rollback controller #411
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-65700: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1156
OCPBUGS-61364: [4.18] e2e stability fixes #1080
OCPBUGS-60644: Add NetworkPolicy as a supported kind #1048
Full changelog

operator-marketplace

OCPBUGS-62218: Remove Expect func so that the test case can use the retry logic #669
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-64855: Fix stale EIP assignments during failover and controller restart #2849
OCPBUGS-64780: kubevirt: fix bad release of IPs of live migratable pods #2847
OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
OCPBUGS-48710: [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] #2811
OCPBUGS-62671: Fix EgressIP stale GARP post reboot + pod restart #2775
OCPBUGS-59744, OCPBUGS-61455: [4.18] allow default network -> localnet on the same node for any localnet subnet #2785
OCPBUGS-61748: [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] #2777
OCPBUGS-59680: [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] #2768
OCPBUGS-48710: Update OWNERS file: Add Patryk/Martin as approvers #2700
OCPBUGS-59371: EIP OVN controller: stop pod config flap #2703
OCPBUGS-59531: EgressIP: fix startup syncer #2690
Full changelog

powervs-machine-controllers

OCPBUGS-61163: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #125
Full changelog

prometheus

OCPBUGS-61706: chore: compute highestTimestamp at queryManager level #267
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-61965: reconcile workload configurations when a referenced secret/configmap key is updated #347
OCPBUGS-58194: Fix: One Alertmanager Config failing blocks all others #335
Full changelog

tests

OCPBUGS-63668: Add imagestream update dryrun test #30436
OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
OCPBUGS-61698: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30253
OCPBUGS-60511: Bump to latest openshift/kubernetes (v1.31.12) #30230
OCPBUGS-60662: images/tests: Remove rteval #30135
OCPBUGS-60881: Exclude RHEL nodes in verifying that nodes have no unexpected reboots test #30170
OCPBUGS-60881: extended/machines: add –no-pager to journalctl cmds #30180
OCPBUGS-60927: Wait 30s after the upgrade is complete to validate workloads #30179
NO-JIRA: Update extended/networking OWNERS #30089
OCPBUGS-58461: Backport pr 29834 to release-4.18 #29968
OCPBUGS-60066, OCPBUGS-60067: Don’t check for isNoUpgrade #30053
OCPBUGS-60066, OCPBUGS-60067: Tolerate various expected Upgradeable=False conditions #30048
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-61651: Fix unit tests #70
OCPBUGS-58861: [release-4.18] Update manifests to remove reliance on admissionregistration v1beta1 #62
Full changelog

vsphere-problem-detector

OCPBUGS-60784: Check for number of FailureDomain-s in GetVCenter() #189
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github