4.18.36

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.36-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-bm
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.41, 4.17.42, 4.17.43, 4.17.44, 4.17.46, 4.17.47, 4.17.48, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.25, 4.18.26, 4.18.27, 4.18.28, 4.18.29, 4.18.30, 4.18.31, 4.18.32, 4.18.5, 4.18.6, 4.18.7, 4.18.8

Loading changelog, this may take a while ...

Changes from 4.18.24

Created: 2026-03-19 17:38:41 +0000 UTC

Image Digest: sha256:7486ca2ec3bce0ee41dd2c03d75e120b6f660929ea50240463937ae1c4b118f7

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.12 to 1.31.14
Kubernetes Tests upgraded from 1.31.10 to 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202509100653-0 to 418.94.202603181125-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:1e1faad2d9167d84e23585c1cea5962301845548043cf09578f943f79ca98016
agent-installer-orchestrator git 81d6bc27 sha256:46cc6ba4ada48ce4928da255d7d0ea9baccb337fc379eaea8c2063581ddb6cc2
apiserver-network-proxy git 2f62712d sha256:a55e88c5d635b90fb57a051f3de5be72c95dc6ff52f7f35c43c7e607895ee6f8
aws-cloud-controller-manager git c3951906 sha256:5b94c5577b5b32daf399f069ba98ad37b6872aedc53b395eb72e314db189620f
aws-ebs-csi-driver git b51cd6b8 sha256:f9a5f406ad4ce6ecadd3e2590848bc4b5de5ab1cb5d0bb753b98188a28c44956
aws-kms-encryption-provider git 088dcaf7 sha256:e00a86c095aa8fb842e4e16b1be65da5fa8c7cb68ac54359fd3145351f4125d9
aws-pod-identity-webhook git f54f9a19 sha256:a28db2438421fe0949a55d72bae4a3420a62802cb6b393cb295433652707aa11
azure-cloud-controller-manager git 9c24d768 sha256:84c811adfae43bd1265fdf0f7048f582dbd671b0a95d5611adef7965e8bd6aff
azure-cloud-node-manager git 9c24d768 sha256:00534ec2823bb58616c955b80cb8fed0fb9193cd2fa3b9b06089c9692c33175b
azure-disk-csi-driver git 6cced666 sha256:fc78ae6ff45a27c111fff14e9d15a2e9982f97577722fe519630a018ebd64a5e
azure-file-csi-driver git 4b34592e sha256:08bd6463f232a07901d5291f750e58489438e593771d3de3f661a6b9639ec281
azure-kms-encryption-provider git c937080f sha256:987f733bf42ad58716951c02183b4f2f4779bb74133c9da26330161e4cd546fb
azure-workload-identity-webhook git f60e4029 sha256:94b28a0da75f383085a88df3d5b3d97b976bd9cccf0defe613085e918c7126d8
baremetal-cluster-api-controllers git 80c3a063 sha256:2b937b631568d3bfa6b22840888949459c10777e452704260327c23bef0cffa2
baremetal-machine-controllers git 1ede6c3f sha256:211bc1cade81979d28be5fffa10026fac5c6006000a4da2b0e68b5ca714deed8
cluster-authentication-operator git 882f8799 sha256:bfe394b58ec6195de8b8420e781b7630d85a412b9112d892fea903f92b783427
cluster-autoscaler-operator git 474ad65c sha256:ce8e3088493b4a72dd766b3b5b4ccb83b7d72d514bbf64063a913dfe961273db
cluster-bootstrap git d1e01954 sha256:e3f1f314ed7b70c58dde895c3accc5d8aa92b8885032dbb10c2c3e0645aa526d
cluster-capi-controllers git 63df38bc sha256:496cab5ab4728254d95c63c2bbe1bd26e9a1cc232758510b675ea359f9e4b916
cluster-capi-operator git 2f2737e1 sha256:3675e79c54cd7414a1f020780bb1bc0cc1239ffb1213369e238401a7607cf02d
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:908eaaf624959bc7645f6d585d160431d1efb070e9a1f37fefed73a3be42b0d3
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:7c527b4e8239a1f4f4e0a851113e7dd633b7dcb9d75b0e7b21c23d26304abcb3
cluster-dns-operator git 7cafd0c7 sha256:ea5c8a93f30e0a4932da5697d22c0da7eda9a7035c0555eb006b6755e62bb2fc
cluster-image-registry-operator git 1e3caa4b sha256:7af9f5c5af9d529840233ef4b519120cc0e3f14c4fe28cc43b0823f2c11d8f89
cluster-kube-cluster-api-operator git 33a1141e sha256:e5325f3bef54c22f95012792b1af808d8e1ad78539ac0bd6edd81fda56a6e2ae
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:5c983016b9ceed0fca1f51bd49c2653243c7e5af91cbf2f478b091db6e028252
cluster-machine-approver git 01d5fbbe sha256:cdd28dfe7132e19af9f013f72cf120d970bc31b6b74693af262f8d2e82a096e1
cluster-olm-operator git 88088e4b sha256:adb9f6f2fd701863c7caed747df43f83d3569ba9388cfa33ea7219ac6a606b11
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:1f23bac0a2a6cfd638e4af679dc787a8790d99c391f6e2ade8087dc477ff765e
cluster-openshift-controller-manager-operator git f1711cf3 sha256:313d1d8ca85e65236a59f058a3316c49436dde691b3a3930d5bc5e3b4b8c8a71
cluster-policy-controller git 5fd85252 sha256:1fbbcb390de2563a0177b92fba1b5a65777366e2dc80e2808b61d87c41b47a2d
cluster-update-keys git 8caab452 sha256:cb1fa875572fa59d9eddcdb391c969fce678f16bcf11c9ab5e3149a94797e2e3
configmap-reloader git e2aaf00a sha256:c23ff7eab2bb9025dfb885a2a695648d33cc1b24d7e480ff56fdae0ef1bd0774
csi-driver-nfs git 32e77590 sha256:a2c31e21ddb6b70466884f317b4ad0acb431220cb841ee2063e57cb6bde46f25
csi-external-attacher git 39b37c06 sha256:2af92f0e90f29d4329e3ad1e235e69bc2397e065bfbc6772d7e073701c7b1363
csi-external-provisioner git 376f0ea0 sha256:74f0afca9374cee2b77efe39503e65207034c9a4a20738a65ed65b62a7fb8863
csi-livenessprobe git 3a977844 sha256:78976f244a2a7101390df281688f339864f3e7eda6531df18225022c768ca0b3
driver-toolkit git 2e139edc sha256:34cc8ad01ba89008f6df06d07d210e6e001b3cfda445127a9388740c542507d7
egress-router-cni git 3193a756 sha256:21b4c9cf268bb7abef7af187cd775d3f74d0bd33626250095428d53b705ee946
etcd git b5a4f8d0 sha256:e29dc9f042f2d0471171a0611070886cb2f7c57338ab7f112613417bcd33b278
gcp-cloud-controller-manager git 6ea23561 sha256:37df9c265224d623ea309d87a400161641366e09117162d1dc4062e6efc8b395
gcp-machine-controllers git b2f858ba sha256:e9debffefe3cb42ae97b244383c060fe120b546b5bcd9d71efc2440a17d9b658
gcp-pd-csi-driver-operator git 7cb8b38c sha256:78861d4efdfa2f7b109402745c586e7e0be2529fa1d9a26b0ad3ddf3e8020953
gcp-workload-identity-federation-webhook git f0a670c7 sha256:6039c0124bfe0608d088f9380a0fc864f7e67d8815f8af0f00000c185b019fbb
ibm-cloud-controller-manager git a33026b1 sha256:c4ac1ab8a08d39ec69e318d1820bff09506cdb330901c5a0c1e680ccbb447f3f
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:53284e11f5db88ec68f5ac7fdd1d42b26e62fde221368f8a1b8f918ed6b38d4f
ibmcloud-machine-controllers git e6eddf85 sha256:70fbe1426e22b7695513905becd482399e450cda06257657d522050c9ef6ab64
ironic-machine-os-downloader git 50ca44fd sha256:d279a26db070d4a243df5391bebfd209488648a89428c9d02a345a7eacfe3cf2
ironic-static-ip-manager git cfbae04f sha256:9b6c87d38bfc523a2a99bc5e492fd23f5075b8f85f93d5163855e9fe278542c5
keepalived-ipfailover git 716eb0ef sha256:51a2902a23dc5bf60dc7f95dd8f494257fa9cf4fbc784fc36f6d16e5286cc64c
kube-metrics-server git 962ccca2 sha256:39c122c726d1bf520dd481350fee5ad940762d5d4c9f8c012db6bf56b0ca8757
kube-rbac-proxy git 5a14ea9d sha256:d12d0dc7eb86bbedf6b2d7689a28fd51f0d928f720e4a6783744304297c661ed
kubevirt-cloud-controller-manager git 3f4542ec sha256:f09a1e83e2b26524881b832bb20cc6a924f360ae377979db74a8b8ad9de26744
libvirt-machine-controllers git a336f0b5 sha256:b4b55da165fc3abad03195b2f10dcff3c539c196bc7b7fa6d6f932512ec06e5e
machine-os-images git ab432836 sha256:086f4f012853d023bbc751b217a382c3664019c606a0e58b54fae2857b034c98
multus-admission-controller git 0d7ea6c7 sha256:bcb08821551e9a5b9f82aa794bcea673279cefb93cb47492e19ccac5e2cf18fe
multus-route-override-cni git 391c1b03 sha256:e3a494212f1ba17f0f0980eef583218330eccb56eadf6b8cb0548c76d99b5014
multus-whereabouts-ipam-cni git 86191ded sha256:0a09f5a3ba4f60cce0145769509bab92553c8075d210af4ac058965d2ae11efa
must-gather git 02e536cc sha256:a2ea85c74215bdd9bbe5e6750d8496e2b249928e9d12e3b877878e274166b69d
network-metrics-daemon git 11e2dec9 sha256:759fb1d5353dbbadd443f38631d977ca3aed9787b873be05cc9660532a252739
network-tools git 47b13549 sha256:be8895a8c39b5934ca537b0395b4abe3ed5bccceb9e64fc6ce4e238dd1bde148
nutanix-cloud-controller-manager git d9fe8f38 sha256:551e92b1063618b3b619aa1fa151c9a98312262eb2903cf86712128ba3d29342
nutanix-machine-controllers git afe324bf sha256:09bf79f7546dc5a59760501476f688af0d63aeab7d73ead2dcf78224ffd7c4b7
oauth-server git 287caff3 sha256:3fdcbf7be3f90bd080ffb2c75b091d7eef03681e0f90912ff6140ee48c177616
openshift-controller-manager git 8ee74406 sha256:c2dd7a03348212e49876f5359f233d893a541ed9b934df390201a05133a06982
openshift-state-metrics git 3cca6fee sha256:96ae39329a45e017d3444b3794dc95126641ca54fe645bb8729b3d501bd47c64
ovirt-csi-driver git 1db726a9 sha256:78aa5be28be7d85f30d68230d193084a2ec6db6e8b67d91b99b9964b7832c3b5
powervs-block-csi-driver-operator git 01fc505a sha256:4dcc3f2648915ed6887ff9db0c8d45b5487e3acdd7eb832ff6e7d579846ed90b
powervs-cloud-controller-manager git 17ae6fba sha256:20fe74ec53cca9cee4ba9d0c065a05b1daacdb2d9a5e68eb0dc871841d88ac27
powervs-machine-controllers git 74e3ece7 sha256:68ac7f6e7d9d54c90309e5f33119cfa3f468a917bb45d1d1d4aba4ac04208100
prom-label-proxy git 35c11369 sha256:28d99dd1c426021eefd6bdbd01594126623f3473f517f194d39e2a063535147a
prometheus-node-exporter git 92e17ff5 sha256:0bccc03fd9ffe278e15c8f4be1db030307e4cd5020b78d711fc62f104fd6a980
rhel-coreos sha256:1c1661c18970ac7e919aeacd1ccbc9876a372ba7b26231bed6a5f13a19f9616f
rhel-coreos-extensions sha256:278800effa48796fe57c6d705d300c69483e81252e6a7fbfaa4959614be73d7c
route-controller-manager git ce6ffa24 sha256:446bedea4916d3c1ee52be94137e484659e9561bd1de95c8189eee279aae984b
service-ca-operator git 30efb529 sha256:812819a9d712b9e345ef5f1404b242c281e2518ad724baebc393ec0fd3b3d263
telemeter git 490612bd sha256:1be9cf7afc785fbde8c9d5403d13569bc7f7fee8a386d2d8842f2b40758ed430
thanos git f1599f65 sha256:bf72297fee61ec9950f6868881ad3e84be8692ca08f084b3d155d93a766c0823
vsphere-csi-driver-operator git 2b241410 sha256:f52b7d31de7697dd95b0addb28b5a270e2e2a8e37543a16696aaadcaf7a14756

agent-installer-api-server

OCPBUGS-74898: Retry incomplete cluster registration in ABI #8817
OCPBUGS-74911: Remove root=/dev/disk/by-label/dm-mpath-root from kargs #8820
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

MGMT-21849: Skip arping for remote IPs not in outgoing NIC’s subnet #1332
Full changelog

agent-installer-utils

OCPBUGS-68243: bump github.com/sirupsen/logrus to v1.9.3 #237
Full changelog

aws-cluster-api-controllers

OCPBUGS-77903: [release-4.18] update go mod dependency for konflux #589
OCPBUGS-61841: UPSTREAM <carry>: revert: Only tag NetworkInterfaces in RunInstances if IAM Allows It #570
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-76582: Fix Cinder, Manila driver metrics #501
OCPBUGS-62664: disable e2e snapshot tests #463
OCPBUGS-63558: Add RBAC ClusterRole and Binding for driver node #454
OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
OCPBUGS-62973: Add withCABundleDaemonSetHook() to AWS EFS operator #447
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-machine-controllers

OCPBUGS-73789: Fix reconciler consistency checks in Update and Exists #166
OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-cluster-api-controllers

OCPBUGS-77905: [release-4.18] update go mod dependency for konflux #362
Full changelog

azure-machine-controllers

OCPBUGS-65882: Set updateDomainCount to one when faultDomainCount is one #175
OCPBUGS-63669: Support datadisks on Stack Hub #167
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-45579: PowerVS: Listen to machineNetwork #9277
OCPBUGS-73784: pkg/asset/manifests/azure: save cidr blocks #10217
OCPBUGS-76598: Increase agent-installer pre-network-manager timeout #10299
OCPBUGS-67203: Update the RHCOS 4.18 bootimage metadata #10294
OCPBUGS-74676: [release-4.18] GCP: skip AI zones #10275
OCPBUGS-69880: Azure UPI ARM template: use storageAccountId #10179
OCPBUGS-68244: [4.18] uplift logrus #10166
OCPBUGS-57590: Mount the user-ca-bundle into ICC #9794
OCPBUGS-63494: Catch gcp destroy cases where the operation is nil #10030
OCPBUGS-52659: [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme #9545
OCPBUGS-65588: Update the RHCOS 4.18 bootimage metadata #10113
OCPBUGS-58504: Refactor removing loadbalancer in OpenStack #9831
OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
OCPBUGS-62810: Update the RHCOS 4.18 bootimage metadata #10014
OCPBUGS-59490: Make swift containers removal not fatal for UPI. #9839
OCPBUGS-61529: Use less permissive access for /var/lib/etcd for SNO #9937
Full changelog

baremetal-operator

OCPBUGS-76988: Unblock BMH direct deletion when detached annotation is present #461
Full changelog

baremetal-runtimecfg

OCPBUGS-60111: Re-add ENABLE_NODEIP_DEBUG env var #364
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-65707: fix(must-gather): do not set node affinity if nodename is set #2145
OCPBUGS-64608: Help with must-gather scheduling through suggesting preferance of nodes #2127
Full changelog

cloud-credential-operator

OCPBUGS-74548: Resolve nil pointer exception in hasResourceTags #968
OCPBUGS-65800: ccoctl azure: retry custom role creation on consistency errors #950
OCPBUGS-65479: ccoctl: use pagination when listing resources in aws #947
OCPBUGS-63548: ccoctl: add public-key-file flag to create-all #938
OCPBUGS-55127: snyk to ignore SNYK-GOLANG-GOLANGORGXNETHTML-9572088 #915
Full changelog

cloud-network-config-controller

OCPBUGS-73750: [release-4.18] Fix pointers without ptr.Deref #199
OCPBUGS-65651: [release-4.18] Fix capacity calculation #193
OCPBUGS-64779: [release-4.18] Change the capacity struct from int to ptrOfInt #189
Full changelog

cluster-autoscaler

OCPBUGS-75925: Fixes histograms becoming empty after loaded from checkpoints #402
Full changelog

cluster-baremetal-operator

OCPBUGS-57590: Mount the user-ca-bundle into ICC #486
OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

OCPBUGS-70315: Add HTTPKeepAliveTimeout to IngressController API #2638
NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers #2625
OCPBUGS-67214: Introduce ClosedClientConnectionPolicy to IngressController API #2618
CNTRLPLANE-1980: Promote streaming list encoding to Default #2598
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2562
CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-config-operator

OCPBUGS-68249: Update logrus to 1.9.3 to address CVE-2025-65637 #464
Full changelog

cluster-etcd-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #1545
OCPBUGS-63451: Ensure revision.json persists on ungraceful shutdown #1503
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1518
Full changelog

cluster-ingress-operator

OCPBUGS-70315: Implement HTTPKeepAliveTimeout tuning option #1333
NO-JIRA: Add new NID team members to OWNERS #1319
OCPBUGS-67214: Implement ClosedClientConnectionPolicy field #1322
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #2031
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1976
OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #906
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #897
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #622
OCPBUGS-76284: Add priority field to prevent early shutdown #612
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #590
Full changelog

cluster-monitoring-operator

OCPBUGS-77274: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2833
OCPBUGS-67168: Add the collection of MTV migration metrics #2774
OCPBUGS-61965: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2723
OCPBUGS-64579: Fix KSM deny-list typo #2731
OCPBUGS-63488: Remove AlertManager endpoints when disabled #2737
OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
OCPBUGS-63410: [release-4.18] allow using remoteWrite[].oauth2.proxyFromEnvironment for cluster-wide proxy #2724
OCPBUGS-63017: test: remove image registry e2e tests #2711
OCPBUGS-61706: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2669
Full changelog

cluster-network-operator

OCPBUGS-74154: whereabouts-config is a reserved name for user interaction. #2884
OCPBUGS-73767: Tweak iptables-alerter to try to avoid crictl bug #2877
OCPBUGS-65704, OCPBUGS-65705: Annotate whereabouts-controller #2842
OCPBUGS-62671: Add drop flows for GARP #2810
Full changelog

cluster-node-tuning-operator

OCPBUGS-75954: PPC: filter out namespaces dir #1465
OCPBUGS-69947: [release-4.18] E2E: skip stalld test checking sched_fifo #1451
OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

cluster-storage-operator

OCPBUGS-62666: Move metrics to vsphere driver #632
Full changelog

cluster-version-operator

OCPBUGS-70182: Unify capitalization when comparing architectures for available updates #1327
NO-ISSUE: hongkai becomes an approver release-4.18 #1286
OCPBUGS-62869: disable metrics auth for hypershift clusters #1242
Full changelog

console

CONSOLE-5011: migrate to yarn berry #16073
NO-JIRA: Bump builder image to v29 #15995
OCPBUGS-65808: Fix PatternFly dark theme colors for charts and form inputs #15951
OCPBUGS-74458: Bump lodash to latest #15965
OCPBUGS-73753: Fix Helm chart installation with CA/TLS certificates #15914
OCPBUGS-73662: Namespace is not persisting when switching to developer view from the topology page of admin page #15910
OCPBUGS-69915: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15868
OCPBUGS-69448: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15855
OCPBUGS-68361: Disallowed Pipelines-plugin Pipelines navigation section #15842
OCPBUGS-65592: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15725
OCPBUGS-65932: Preserve query string in perspective switch + remove dev console folks from reviewers #15761
OCPBUGS-65533: Preserve path on perspective switch #15716
OCPBUGS-64735: Expose prometheus tenancy label path as a proxy #15685
OCPBUGS-64682: limit node log length to 1000 lines #15680
OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
OCPBUGS-63247: fix bug where Roles list was displaying invalid data f… #15619
OCPBUGS-63041: switch to dev perspective for /dev-monitoring #15601
OCPBUGS-44156: bump dompurify to latest #15589
OCPBUGS-62326: /auth/error?error=missing_state&error_type=auth is showing blank page #15544
OCPBUGS-61569: Update CHANGELOG for 4.18 plugin SDK package publish #15516
OCPBUGS-61569: Fix bug with Console provided PatternFly shared modules #15479
OCPBUGS-61697: Remove ancient X-XSS-Protection header #15493
Full changelog

console-operator

OCPBUGS-77861: update go mod dependency for konflux #1113
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-60871: [release-4.18] host-device: Return interface name in result #208
Full changelog

coredns

OCPBUGS-60462: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #152
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-57800: Rebase release-4.18 onto release-1.31 #322
Full changelog

csi-external-resizer

OCPBUGS-62467: Requeue PVC over PV creation #176
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

docker-builder

OCPBUGS-66990: bump buildah to 1.37.7 to fix CVE-2025-52881 #498
OCPBUGS-65655: BuildConfig inline Dockerfile fails with heredoc syntax #486
Full changelog

docker-registry

OCPBUGS-68253: update logrus to v1.9.1 #464
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78278: [release-4.18] update go mod dependency for konflux #265
Full changelog

gcp-pd-csi-driver

OCPBUGS-68258: UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 #89
OCPBUGS-44772: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #83
Full changelog

haproxy-router

OCPBUGS-67214: Add option abortonclose to HAProxy configuration template #703
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-54724: Fix implementation of ContainsCIDR to allow non-equal addresses #2267
OCPBUGS-65553: Update to Kubernetes v1.31.14 #2521
OCPBUGS-65494: Fix Concurrentmap Iteration #2512
OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
CNTRLPLANE-1610: Backport StreamingCollectionEncoding for JSON and protobuf #2483
OCPBUGS-61557: Rebase v1.31.13 #2465
Revert “UPSTREAM: revert<carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.”” #2448
Full changelog

hypershift

OCPBUGS-76532: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7699
OCPBUGS-77368: Fix ignition-server pod restarts #7878
CNTRLPLANE-1708: Backport Customer Global Pull Secret to OpenShift 4.18.z #7354
OCPBUGS-72932: Fix Konflux EC voilation, update deprecated base … #7456
OCPBUGS-69847: test: remove unit tests that depend on network communication [release-4.18] #7406
OCPBUGS-65843: specify SCC annotation for pods in data plane #7267
CNTRLPLANE-1902: Migrate 4.18 pipelines to common pipeline template #7211
OCPBUGS-61700: use csi-resizer image from release provider #7103
OCPBUGS-63638: [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7111
OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
CNTRLPLANE-1424: feat(konflux): tag MCE HO images with latest #6837
OCPBUGS-62816: set default goaway-chance to 0.001 #6950
OCPBUGS-61904: resolve MIRRORED_RELEASE_IMAGE flapping #6858
OCPBUGS-61700: Sync RBAC for expansion support in kubevirt CSI driver #6355
OCPBUGS-61568: [release-4.18] fix(proxy): ensure URLs have scheme before proxy resolution #6793
OCPBUGS-61203: ci: konflux multi-arch images #6867
OCPBUGS-61203: Use the common konflux pipeline and update CLI dockerfile #6832
NO-JIRA: chore(deps): update konflux references #6667
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77207: [release-4.18] standardize build paths #122
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67286: [release-4.18] Fix incomplete vendor/ #140
Full changelog

insights-operator

OCPBUGS-76537: [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1239
OCPBUGS-68263: Update github.com/sirupsen/logrus to v1.9.3 #1205
OCPBUGS-68263: [release-4.18] golanci-lint version update & corresponding fixes (#1045) #1206
OCPBUGS-66396: Add filtering to add other possible pod status to QEMU gatherer #1195
OCPBUGS-66182: QEMU logs are not gathered if there are pending status virt-launcher pods #1189
OCPBUGS-66181: [bugfix] The archive’s records may include files whose names are out of bounds #1188
OCPBUGS-61972: add missing permissions for replicasets and events #1146
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-77789: remove dnf cache from the container images #69
Full changelog

ironic

OCPBUGS-74115: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #795
OCPBUGS-69790: Bump eventlet version to 0.33.1-7 #760
OCPBUGS-65573: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #727
OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

ironic-agent

OCPBUGS-69780: Bump eventlet version to 0.33.1-7 #230
OCPBUGS-68360: Include Test advertised ip reachability before assigning it #226
OCPBUGS-62456: netutils: Use ethtool ioctl to get permanent mac address #206
Full changelog

kube-state-metrics

OCPBUGS-74873: Deduplicate CRS stores #131
Full changelog

kube-storage-version-migrator

OCPBUGS-78273: fix /vendor for hermetic 4.18 #239
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-api-operator

OCPBUGS-78796: [release-4.18] Use resource group when generating default Azure image #1480
OCPBUGS-59387: Enabled 10 concurrent reconciles on GCP #1392
Full changelog

machine-config-operator

OCPBUGS-62692: configure-ovs: work around a Cisco switch issue #5329
OCPBUGS-78056: Prevent unnecessary systemd unit disable #5758
OCPBUGS-74148: enable nodeip-configuration for platform external #5578
OCPBUGS-77777: reduce MCO image size #5738
OCPBUGS-77576: mcd_config_drift not working properly #5726
OCPBUGS-77421: Remove MCD liveness probe #5710
OCPBUGS-74644: After OCL is enabled few phases in MCN are not updating as expected #5605
OCPBUGS-77092: Machine-config controller should not log about non-existent pull-secret changes #5680
OCPBUGS-77041: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5671
OCPBUGS-76560: [release-4.18]: cherry pick to few fixes that needed for missing services and configuration #5653
OCPBUGS-71227: MCP is not correctly degraded when a pivotError happens #5534
OCPBUGS-70336: Remove log exposing kubeconfig #5528
OCPBUGS-62169: Fix - NetworkManager restart or crash renders br-ex unusable #5356
OCPBUGS-65850: Remove –mount directives #5433
OCPBUGS-62294: Make static DNS with DHCP IP work #5311
OCPBUGS-63346: Invalid architecture value found in annotation during 4.19 update #5366
OCPBUGS-60111: Enable debug logging for nodeip-configuration #5220
OCPBUGS-62671: [release-4.18] Networking: reset ovn-remote config and allow ovnkube controller to set it #5325
OCPBUGS-62845: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5341
OCPBUGS-62499: Add /etc/docker/certs.d to template #5320
OCPBUGS-62637: Machine-config controller should actively manage cordon while draining #5322
OCPBUGS-62350: Add mcd_local_unsupported_packages recording rule #5315
OCPBUGS-62321: Add control-plane label for master nodes on legacy clusters #5314
OCPBUGS-61840: Override NMState service definition #5288
Full changelog

machine-image-customization-controller

OCPBUGS-77888: Clean up dnf cache to reduce container image size #168
OCPBUGS-68262: [4.18] Uplift logrus #151
Full changelog

metallb-frr

OCPBUGS-74485: Dockerfile: unpin FRR rpm #121
Full changelog

monitoring-plugin

NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] #818
OCPBUGS-70291: fix: update qs vulnerable dependency #739
OCPBUGS-65958: Fix metrics gaps 4.18 #656
OCPBUGS-64735: allow tenancy access to metrics tag #638
OU-1059: add perspective to action injector #632
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-77853: hermetic 4.18 #276
Full changelog

multus-networkpolicy

OCPBUGS-54939: [release-4.18]: Support default ports value #68
Full changelog

network-interface-bond-cni

OCPBUGS-62793: Use netlinksafe instead of netlink to avoid netlink.ErrDumpInterrupted #99
Full changelog

networking-console-plugin

CNV-76277: Fix name generator with unprofessional names #319
OCPBUGS-63582: Fixed - Extra semicolon observed before Service IP in OCP Console #306
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #170
OCPBUGS-65841: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #155
OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

oauth-proxy

OCPBUGS-61444: Update x/crypto to v0.31.0 #333
Full changelog

oc-mirror

OCPBUGS-66051: Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) #1324
OCPBUGS-65510: removes unintended exec permissions #1312
OCPBUGS-62696: v2/cli: show binary version in output #1286
OCPBUGS-62711: generate the archive only after mirroring #1287
OCPBUGS-62432: changes the warning message of 4.21 #1278
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd

OCPBUGS-62872: set the SElinux type #139
Full changelog

olm-operator-controller

OCPBUGS-62872: set the SElinux type #509
Full changelog

openshift-apiserver

OCPBUGS-74234: Bump library-go for route path validation fix #603
OCPBUGS-69955: Add ValidatingAdmissionPolicy and check for omissions next time. #589
OCPBUGS-66379: pkg/image: conditionally parse raw image manifest #585
OCPBUGS-65842: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #581
Full changelog

openstack-cluster-api-controllers

OCPBUGS-64816: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #371
Full changelog

openstack-machine-api-provider

OCPBUGS-69648: Don’t record event for every reconcile #143
OCPBUGS-76792: Fix make test #159
OCPBUGS-74986: Revendor CAPO #152
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-77714: Remove the collect-profiles info from the microshift kustomization file #1245
OCPBUGS-76924: Remove the collect-profiles job #1231
OCPBUGS-65700: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1156
Full changelog

operator-marketplace

OCPBUGS-73883: Increase default catalog polling interval to 4h (240m) #707
OCPBUGS-68272, OCPBUGS-68273: CVE-2025-65637 fixed in logrus v1.9.3+ #703
OCPBUGS-62218: Remove Expect func so that the test case can use the retry logic #669
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68284: Bump github.com/sirupsen/logrus to v1.8.3 #150
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-78015: Add pperiyasamy to OWNERS for release-4.18 #3045
OCPBUGS-77516: Clear stale conntrack UDP entries for nodePorts #3016
OCPBUGS-77083, OCPBUGS-77106: [release-4.18] combined backport PR for 2 escalations #2987
OCPBUGS-48710: Branch Sync release-4.19 to release-4.18 [02-04-2026] #2970
OCPBUGS-74270: release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync #2943
OCPBUGS-70346: Branch Sync release-4.19 to release-4.18 [01-07-2026] #2922
OCPBUGS-66140: Branch Sync release-4.19 to release-4.18 [12-31-2025] #2916
CORENET-6055, OCPBUGS-48710, OCPBUGS-66360, OCPBUGS-66381, OCPBUGS-66428: Branch Sync release-4.19 to release-4.18 [12-03-2025] #2895
OCPBUGS-68347: Add ricky-rav to OWNERS for release-4.18 #2897
OCPBUGS-64855: Fix stale EIP assignments during failover and controller restart #2849
OCPBUGS-64780: kubevirt: fix bad release of IPs of live migratable pods #2847
OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
OCPBUGS-48710: [release-4.18] DownStream Merge Sync from 4.19 [10-16-2025] #2811
OCPBUGS-62671: Fix EgressIP stale GARP post reboot + pod restart #2775
OCPBUGS-59744, OCPBUGS-61455: [4.18] allow default network -> localnet on the same node for any localnet subnet #2785
OCPBUGS-61748: [release-4.18] DownStream Merge Sync from 4.19 [10-02-2025] #2777
OCPBUGS-59680: [release-4.18] DownStream Merge Sync from 4.19 [09-29-2025] #2768
Full changelog

powervs-block-csi-driver

OCPBUGS-51896: Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 #102
OCPBUGS-70002: Update builder image’s golang version to 1.23 #103
Full changelog

prometheus

OCPBUGS-61706: chore: compute highestTimestamp at queryManager level #267
Full changelog

prometheus-alertmanager

OCPBUGS-74976: Include go-verify-deps expected files in gitignore #114
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77298: backport upstream fix to reconcile resources with inconsistent status #370
OCPBUGS-77398: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #366
OCPBUGS-61965: reconcile workload configurations when a referenced secret/configmap key is updated #347
Full changelog

tests

OCPBUGS-77876: Backport: Remove duplicated graceful termination test from release-4.18 #30702
OCPBUGS-74207: Unrevert TLS tests with fixes #30708
OCPBUGS-69900: Updated the upgrade duration limit to 100 minutes for ppc64le #30628
OCPBUGS-63668: Add imagestream update dryrun test #30436
OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
OCPBUGS-61698: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #30253
OCPBUGS-60511: Bump to latest openshift/kubernetes (v1.31.12) #30230
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-77668: hermetic migration 4.18 #105
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78018: hermetic migration 4.18 #84
OCPBUGS-61651: Fix unit tests #70
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68278: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #156
Full changelog

vsphere-problem-detector

OCPBUGS-70359: Fixed logic for vSphere compute cluster permission #200
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github