4.18.39

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.39-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.18-micro Succeeded periodic-ci-openshift-release-main-ci-4.18-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- azure-ovn-upgrade-4.18-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.18-fips-payload-scan
- gcp-ovn-rt-upgrade-4.18-minor Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.18-upgrade-from-stable-4.17-e2e-gcp-ovn-rt-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-ovn-conformance-4.18 Succeeded periodic-ci-openshift-hypershift-release-4.18-periodics-e2e-aws-ovn-conformance
- metal-ipi-ovn-bm Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-bm
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.18-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.18-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.17.14, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.44, 4.17.45, 4.17.46, 4.17.47, 4.17.48, 4.17.49, 4.18.10, 4.18.11, 4.18.12, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.28, 4.18.29, 4.18.31, 4.18.32, 4.18.33, 4.18.34, 4.18.35, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.18.27

Created: 2026-04-30 09:54:05 +0000 UTC

Image Digest: sha256:7f01fc38ab2019240de14a093b1a603ed5817b5fffb4a8029325395b1d071175

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.13 to 1.31.14
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202604240015-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-csr-approver git 81d6bc27 sha256:2e92a5439043792f8d512ea0ecd9612171f497ba1afa4fc55b462c887a5c516b
agent-installer-orchestrator git 81d6bc27 sha256:f871c1e7cd81dd6f177a4290cbcec32ee09af2c98a10c19146877558aea94020
apiserver-network-proxy git 2f62712d sha256:23d6f24aef25c35b4d288e333275131d539bc241504d68ff264405de96896fcf
aws-cloud-controller-manager git c3951906 sha256:59d3b555b33b00cb0d333b1b2ade3875af21c2f04c529df571dabca10a872441
aws-ebs-csi-driver git b51cd6b8 sha256:9e01243bf7a00da75fe69edba19b1c173def5468327d51e5e5eacd3724bf7e36
aws-kms-encryption-provider git 088dcaf7 sha256:5dd3b77ce805dedc3f52a69331250dbc566c3e5e37d4d48bafa8e90d4dfddbfc
aws-pod-identity-webhook git f54f9a19 sha256:9ddb0bdf6323e1248b06a4f0906792daa1e3060d44271becde21e0b21ab596aa
azure-cloud-controller-manager git 9c24d768 sha256:d2b9197371ef70a930dfa3a00927c6329ef5c7a305455d5f4f94344f2a4ef65f
azure-cloud-node-manager git 9c24d768 sha256:a5e6374d4602cedb33e29500a6d69bdc0b9d19ed53d1b98a717fff6b5fc23071
azure-disk-csi-driver git 6cced666 sha256:817ff68d9630147d5fb80e4b575c67e8a4a8a2871adbee092bf5d74694784768
azure-file-csi-driver git 4b34592e sha256:afbf103c58c8ccc1183d3b807fea69b0a8851693d514bb813f57874128f0f66e
azure-kms-encryption-provider git c937080f sha256:b179b98053c20b0765a1521b6b81ea037ac71f008ca5df2524d2ddfccf5449fc
azure-workload-identity-webhook git f60e4029 sha256:9d0167f7d66b7e30169b391889e8bd57f1b7a8d0f8a80888143902bc3b0d2037
baremetal-cluster-api-controllers git 80c3a063 sha256:8e0ddb60e959eabfb3c8ccc7f1a433313ef573b5dd3bb950a1f5ba64fc9f387b
baremetal-machine-controllers git 1ede6c3f sha256:8bf43145e2b49465d4c17a83895efc7d938fc6c61f79654229c800d5cdcac6d3
baremetal-runtimecfg git 35341068 sha256:10810e6228f1f4765a1cb94afc58c02fc621eb133151433f1aefedc30b0844d4
cluster-authentication-operator git 882f8799 sha256:1d86eb15ebaca02a70c6ca85a303eed2572d4f760ac04f2a7af1ef378b0a3e89
cluster-autoscaler-operator git 474ad65c sha256:5059bccab19eac02c9825f677e39528261d1303105a546d14b8bfa43a135c246
cluster-bootstrap git d1e01954 sha256:ca8a45fa13d58c96ac4591b6239df4b5b7f4d426b0d177497b0da82b8492fca3
cluster-capi-controllers git 63df38bc sha256:3d3535bddd309fe34ec0a87ab4b9686c967acb54be74b3b496d385348c4fe54c
cluster-capi-operator git 2f2737e1 sha256:f8083791a884d6f761531ff0eff065c4d7a2b52d2dfcd4689880ec0e4790074e
cluster-control-plane-machine-set-operator git d17bf3a1 sha256:770ce8af393eeb400660241f386e6defc1058e0d4382641dd06aa97c842df380
cluster-csi-snapshot-controller-operator git 6fe70008 sha256:d6c20b6ba5d99eb9b7a4da0bea4838bad81dec0bc83db9d33b4139166b82a1b1
cluster-dns-operator git 7cafd0c7 sha256:dc54217f2218ffaf4a3ef0c24f57ee8aac4810a882c1e5de24c44db6343ddc50
cluster-image-registry-operator git 1e3caa4b sha256:c4b8df243b377286bd8aa8234ecb2b048e946e84016a7b5d0d119bfaa2f507a7
cluster-kube-cluster-api-operator git 33a1141e sha256:08eaa7f6fa047239e975168a9f0d5e5519bb22c7e66d478f34e720c6a0dcfb16
cluster-kube-storage-version-migrator-operator git 59ba356f sha256:e79d73bf16a24eab9b6a89e247631475d59224bb7c513525db771412df877440
cluster-machine-approver git 01d5fbbe sha256:0504b015fa005720d1781c5bfcfcf8e19396fb7b1297cb23dd655eec83f97e3d
cluster-olm-operator git 88088e4b sha256:52f85edd7e59a5af91a3ac70c6afe1a7b6789a2f3ea472dca48bf05e64d533c4
cluster-openshift-apiserver-operator git 0a6f6eb9 sha256:bd55af7312699364e703206911119ee0692ab26dfe871a319807e12e617a46ae
cluster-openshift-controller-manager-operator git f1711cf3 sha256:2a9b4b8ef9eda9fb5ed7981126ef69df1d6bf6ec74f3aa42c0d4d598e78c4490
cluster-policy-controller git 5fd85252 sha256:e7b6e8edff4f6ddc76f10386acf721056ad922e577c21f9e3b26dcf073e00161
cluster-update-keys git 8caab452 sha256:6854b83c536c54bbff04f3d3359c8b2c00697a83b07758ebab8d38f8c0af30cc
configmap-reloader git e2aaf00a sha256:0476ef19e648e812f0d50a64df4e3547f58c090df22e5a70876f2308d2472d01
container-networking-plugins git e8ca1d70 sha256:2fd634433541ea5a98e5d771d35beee4e63f51e418af5322e52f0292a6e74b0c
containernetworking-plugins-microshift git e8ca1d70 sha256:7ebd22fb19b406a24444d4427575931fdbdd620c272adbe7fb074d61180424a9
coredns git 8ca7f02b sha256:dc59b3d720c2e8240087d7bae474b618ad810d163afd2072bb9c95cf83dd71cc
csi-driver-manila git 8857214a sha256:4a0e21ab002f4578a6fe10e17f7b554281451bb0f815cdc6b1a666d1f528ee89
csi-driver-nfs git 32e77590 sha256:639db19c66f09e88aa49b83c82dad1e5a929f4c4734e90f972fa71d64e47a48d
csi-external-attacher git 39b37c06 sha256:39c18ae19dd5ae0dd461d644adaebd54834ff65f683f4ae931f1d4ae4723cdce
csi-external-provisioner git 376f0ea0 sha256:2a61cb9badc4493e85d5af2feff77781e3d1ad904181a813c56a672b14d09bc1
csi-external-resizer git a1423690 sha256:b96f8b41bc973cc75a4f25e2c94329a9858ab66bcf286a04b66c37e717762df5
csi-livenessprobe git 3a977844 sha256:be18cc0f796be7008297e10ce221c7585e5f726fd354c60c9c70367811600747
driver-toolkit git 2e139edc sha256:e7b6f8e33c1d0ea13b6aeeecf55d17c2f36d99e92e6dfe4f3609b4d8e2ecc03c
egress-router-cni git 3193a756 sha256:6619d97e0984d5e448c39a53a1915945360fc63e658e98425d1b84e16206fce3
etcd git b5a4f8d0 sha256:1061b3a117d19a229cce82c71ba1f794cf74a393d8b82e81e297ba70b9f1296a
gcp-cloud-controller-manager git 6ea23561 sha256:718a8433357205e9edc798fc932ac2c9646cf73f337236bd8ddfad83df7120d6
gcp-machine-controllers git b2f858ba sha256:4068d9776e68f99d0d1f76ebc8c718b6fa5dcff842e7e646edfa63dbd7cb829b
gcp-pd-csi-driver-operator git 7cb8b38c sha256:1d74319a501619691fe7cd9c0468e31bff1dc47f8fde14ca905b2a1f4d3f8bd3
gcp-workload-identity-federation-webhook git f0a670c7 sha256:ea24ac03fff16247bd013bbfe459de432f108f8ac2171fec5d020c10b237d614
ibm-cloud-controller-manager git a33026b1 sha256:8d3fd2ebe329539551872b73c8fedbe4a35241e8d6109505dd4a7cab58f5e64c
ibm-vpc-block-csi-driver-operator git 1c7bc07e sha256:22067fb096b93bc2a2f5bc7e9fbd4c24a74cf82b8727fa0e8f52cecdebd004d6
ironic-machine-os-downloader git 50ca44fd sha256:c40e1f3de88dee5af203ccac3afaa4be04a5ec6fe6c820ded143adabff5127f9
ironic-static-ip-manager git cfbae04f sha256:a8f772d94479a27d08c748dbd9c0f8e28c2cda3d3ca578cd8d1a1a25b5ddc614
keepalived-ipfailover git 716eb0ef sha256:220d9bfd07b223abc4a8491f8f3c17af90cae9d38788175ba93d8d4806ce6e64
kube-metrics-server git 962ccca2 sha256:8fb2e3ddf263a1d16df297585f0dc0473f5aec525114f9134f472665193dacc4
kube-rbac-proxy git 5a14ea9d sha256:236b716621a88efd57cdf6f704340fb2faf4583651ecbda524261e0b5a9b39cf
kubevirt-cloud-controller-manager git 3f4542ec sha256:cd0d40e71cce9ca0651ce655d4e49fa0f34dd97d2a59b6120170d7380fa9d8eb
machine-os-images git ab432836 sha256:6f54b61a00f28f2436a9152e0d8aacd6783ece9427d90a20a4e7cb64ac888d20
multus-admission-controller git 0d7ea6c7 sha256:e4271a50406fade2fc91439a6b5f8ec69253437be03ea498bab0a557940180b9
multus-networkpolicy git 3362bbc4 sha256:88ca7dbe4a5ce77e72160d1d5b483abd9ecb2b4b53f0c1ac322d4da0f2d28697
multus-route-override-cni git 391c1b03 sha256:ba5af8727535cb9f8f87cb504adf6beedccb43fb339b1ae377960222142b3942
multus-whereabouts-ipam-cni git 86191ded sha256:cef4f72946addb5c235573c96d0f244e85708fc3d9e6c7554d640492c405a7d5
must-gather git 02e536cc sha256:fca28f63f97962231b0a373f9b0a154aaa48d00a9215a8e9c4d479dc9540a55c
network-interface-bond-cni git e2de9255 sha256:157ed410c32c70f1559c37f6d49629938ab378bdf93d44df988503085fb2fa61
network-metrics-daemon git 11e2dec9 sha256:258b0f1a9924896286ea46384a60b36d5f77325a4d06e74f8fd9d98b2f076f5a
network-tools git 47b13549 sha256:69f864728216a0837219b087148b438a9d030eb1f25982e884f52e3f9857e6e0
nutanix-cloud-controller-manager git d9fe8f38 sha256:a129d9af12fbf4650ffab9d37f79bdca2e9373b229610482421ca8a306c3fb65
nutanix-machine-controllers git afe324bf sha256:a04ab03fbf8c0d37eb0fa2037e3af2025593c55a502324447d477e89bd5537f3
oauth-proxy git 9225edb9 sha256:a4547eeb77fc98793e9389fb93c21c4f08c51250f88b6ec1d8b88347db6427d4
oauth-server git 287caff3 sha256:eb09b805190c688e0fe54e5014f4c7c4085871e64a25f51231d0f633e0f27fee
olm-catalogd git 180aa92c sha256:b8a2a1c648b3189e5446aa5c75b807a94b6ab343b1a47ac8df5a5647f1228168
olm-operator-controller git 48a1e924 sha256:1fdde8637d12a4352fb17f01d7893c83d42625582ee67857493712b28164df96
openshift-controller-manager git 8ee74406 sha256:597dbb47d54a60d34a3029c9c29291cf2182d84238ae1ea4a5de1de40a851d79
openshift-state-metrics git 3cca6fee sha256:873240e2ff139b191d18b68b01c4936c9349757d223aaf1a217c8c6973b6a269
openstack-cinder-csi-driver git 8857214a sha256:a43fcc22f6797086d5f5a28b6cae7ec94d6185aa96d66452f5798535d734f90c
openstack-cloud-controller-manager git 8857214a sha256:8c2ee2688be91999da1ca4c4ce4d0e2446c936fa04a89dfed46ef235c18e767e
ovirt-csi-driver git 1db726a9 sha256:047da507bac58443a323e8238a925438f24f36ea6b296266a291940c95bde86b
powervs-cloud-controller-manager git 17ae6fba sha256:a7c8dfca21beb16ca21048c41406b3d09ac8755dabe722423d7710ae5fdeb0da
powervs-machine-controllers git 74e3ece7 sha256:07b86607dee8af50941a0f5159d6687b406d7c7564841254466018903fc3bdd6
prom-label-proxy git 35c11369 sha256:44045128b6a1d261c04a5da941f1902f19901b8f9bdfd673ff21dcffbcaa4dc0
prometheus git a85013a6 sha256:fcbf24df5b0d292c2b13290922f442123e0c66e5bbe71ca58bc4b1fdf7ff954e
prometheus-node-exporter git 92e17ff5 sha256:47d0243eac36d9306f1c0a269b16e69d339cf96eb54b179cf5a908adf7f7ac20
rhel-coreos sha256:c98b08e3a86fbf9cf86dbc5bfafc3e00270a696924baa56c50baa520e3764d9b
rhel-coreos-extensions sha256:2afb387685ea1bae89085e98b11d8b66d25a5542d456d1e27cbc63c8923fb5a0
route-controller-manager git ce6ffa24 sha256:a23468a82824371460e8038b5b6ec491e9124b6714ffc278c7d59c217073ad47
service-ca-operator git 30efb529 sha256:187f9b0a3870f29230341708af35ab9befe217fb7d5c9c0aa663a365175b3f83
telemeter git 490612bd sha256:8b736b182ef8c9f60924a20476d49901c54ce092b12467a156d6b847d2cdde24
thanos git f1599f65 sha256:a2241967eca065515dd534f100a7879f017bd649f1d06b0ac266e0b0a4e3bc5f
vsphere-csi-driver-operator git 2b241410 sha256:e7172b779fe09e8e763ae896f59c5c9ab1d594e2dce016d9e422b72a18e02b25

agent-installer-api-server

MGMT-23439: Pin gotestsum to v1.12.2 for Go 1.21 compatibility #10019
OCPBUGS-74898: Retry incomplete cluster registration in ABI #8817
OCPBUGS-74911: Remove root=/dev/disk/by-label/dm-mpath-root from kargs #8820
Full changelog

agent-installer-node-agent

MGMT-21849: Skip arping for remote IPs not in outgoing NIC’s subnet #1332
Full changelog

agent-installer-utils

OCPBUGS-68243: bump github.com/sirupsen/logrus to v1.9.3 #237
Full changelog

aws-cluster-api-controllers

OCPBUGS-77903: [release-4.18] update go mod dependency for konflux #589
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-79429: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.18 #531
OCPBUGS-78299: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #524
OCPBUGS-76582: Fix Cinder, Manila driver metrics #501
OCPBUGS-62664: disable e2e snapshot tests #463
OCPBUGS-63558: Add RBAC ClusterRole and Binding for driver node #454
OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

aws-machine-controllers

OCPBUGS-73789: Fix reconciler consistency checks in Update and Exists #166
OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-cluster-api-controllers

OCPBUGS-77905: [release-4.18] update go mod dependency for konflux #362
Full changelog

azure-machine-controllers

OCPBUGS-65882: Set updateDomainCount to one when faultDomainCount is one #175
OCPBUGS-63669: Support datadisks on Stack Hub #167
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-78550: fix wavelength zone name regex #10409
OCPBUGS-45579: PowerVS: Listen to machineNetwork #9277
OCPBUGS-73784: pkg/asset/manifests/azure: save cidr blocks #10217
OCPBUGS-76598: Increase agent-installer pre-network-manager timeout #10299
OCPBUGS-67203: Update the RHCOS 4.18 bootimage metadata #10294
OCPBUGS-74676: [release-4.18] GCP: skip AI zones #10275
OCPBUGS-69880: Azure UPI ARM template: use storageAccountId #10179
OCPBUGS-68244: [4.18] uplift logrus #10166
OCPBUGS-57590: Mount the user-ca-bundle into ICC #9794
OCPBUGS-63494: Catch gcp destroy cases where the operation is nil #10030
OCPBUGS-52659: [release-4.18] CORS-3825: pkg/infrastructure/azure: support nvme #9545
OCPBUGS-65588: Update the RHCOS 4.18 bootimage metadata #10113
OCPBUGS-58504: Refactor removing loadbalancer in OpenStack #9831
OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
Full changelog

baremetal-operator

OCPBUGS-76988: Unblock BMH direct deletion when detached annotation is present #461
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-83872: pkg/cli/admin/upgrade: Tighten force warnings #2165
OCPBUGS-65707: fix(must-gather): do not set node affinity if nodename is set #2145
OCPBUGS-64608: Help with must-gather scheduling through suggesting preferance of nodes #2127
Full changelog

cloud-credential-operator

OCPBUGS-74548: Resolve nil pointer exception in hasResourceTags #968
OCPBUGS-65800: ccoctl azure: retry custom role creation on consistency errors #950
OCPBUGS-65479: ccoctl: use pagination when listing resources in aws #947
OCPBUGS-63548: ccoctl: add public-key-file flag to create-all #938
Full changelog

cloud-network-config-controller

OCPBUGS-73750: [release-4.18] Fix pointers without ptr.Deref #199
OCPBUGS-65651: [release-4.18] Fix capacity calculation #193
OCPBUGS-64779: [release-4.18] Change the capacity struct from int to ptrOfInt #189
Full changelog

cluster-autoscaler

OCPBUGS-78699: allow clusterapi provider to skip paused resources #413
OCPBUGS-75925: Fixes histograms becoming empty after loaded from checkpoints #402
Full changelog

cluster-baremetal-operator

OCPBUGS-81549: Explicitly set the ReadOnlyRootFilesystem flag to false #584
OCPBUGS-78708: Update kubebuilder tools to more latest version #579
OCPBUGS-57590: Mount the user-ca-bundle into ICC #486
OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

OCPBUGS-70315: Add HTTPKeepAliveTimeout to IngressController API #2638
NO-JIRA: [release-4.18] OWNERS: update approvers/reviewers #2625
OCPBUGS-67214: Introduce ClosedClientConnectionPolicy to IngressController API #2618
CNTRLPLANE-1980: Promote streaming list encoding to Default #2598
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2562
CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-config-operator

OCPBUGS-68249: Update logrus to 1.9.3 to address CVE-2025-65637 #464
Full changelog

cluster-etcd-operator

OCPBUGS-78776: [release-4.18] : Prefer to remove members where they have another healthy machine in the same failure domain index #1573
OCPBUGS-76284: Add priority field to prevent early shutdown #1545
OCPBUGS-63451: Ensure revision.json persists on ungraceful shutdown #1503
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1518
Full changelog

cluster-ingress-operator

OCPBUGS-70315: Implement HTTPKeepAliveTimeout tuning option #1333
NO-JIRA: Add new NID team members to OWNERS #1319
OCPBUGS-67214: Implement ClosedClientConnectionPolicy field #1322
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #2031
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #1976
OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-76284: Add priority field to prevent early shutdown #906
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #897
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2843: chore: update OWNERS #622
OCPBUGS-76284: Add priority field to prevent early shutdown #612
OCPBUGS-58412: bump library-go to bring in revision controller revision-ready annotation fix #590
Full changelog

cluster-monitoring-operator

OCPBUGS-77274: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2833
OCPBUGS-67168: Add the collection of MTV migration metrics #2774
OCPBUGS-61965: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2723
OCPBUGS-64579: Fix KSM deny-list typo #2731
OCPBUGS-63488: Remove AlertManager endpoints when disabled #2737
OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
Full changelog

cluster-network-operator

OCPBUGS-84180: fix(hypershift): use net.JoinHostPort for URL construction #2977
OCPBUGS-77151: Add config override for openflow-probe #2965
OCPBUGS-78833: Fix whereabouts-token-watcher DaemonSet improvements #2940
OCPBUGS-74154: whereabouts-config is a reserved name for user interaction. #2884
OCPBUGS-73767: Tweak iptables-alerter to try to avoid crictl bug #2877
OCPBUGS-65704, OCPBUGS-65705: Annotate whereabouts-controller #2842
Full changelog

cluster-node-tuning-operator

OCPBUGS-75954: PPC: filter out namespaces dir #1465
OCPBUGS-69947: [release-4.18] E2E: skip stalld test checking sched_fifo #1451
OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

cluster-storage-operator

OCPBUGS-77627: add vsphere permissions for checking if users is authorized to see metrics #670
Full changelog

cluster-version-operator

OCPBUGS-70182: Unify capitalization when comparing architectures for available updates #1327
NO-ISSUE: hongkai becomes an approver release-4.18 #1286
Full changelog

console

CONSOLE-5011: migrate to yarn berry #16073
NO-JIRA: Bump builder image to v29 #15995
OCPBUGS-65808: Fix PatternFly dark theme colors for charts and form inputs #15951
OCPBUGS-74458: Bump lodash to latest #15965
OCPBUGS-73753: Fix Helm chart installation with CA/TLS certificates #15914
OCPBUGS-73662: Namespace is not persisting when switching to developer view from the topology page of admin page #15910
OCPBUGS-69915: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15868
OCPBUGS-69448: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15855
OCPBUGS-68361: Disallowed Pipelines-plugin Pipelines navigation section #15842
OCPBUGS-65592: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15725
OCPBUGS-65932: Preserve query string in perspective switch + remove dev console folks from reviewers #15761
OCPBUGS-65533: Preserve path on perspective switch #15716
OCPBUGS-64735: Expose prometheus tenancy label path as a proxy #15685
OCPBUGS-64682: limit node log length to 1000 lines #15680
OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
Full changelog

console-operator

OCPBUGS-77861: update go mod dependency for konflux #1113
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

docker-builder

OCPBUGS-66990: bump buildah to 1.37.7 to fix CVE-2025-52881 #498
OCPBUGS-65655: BuildConfig inline Dockerfile fails with heredoc syntax #486
Full changelog

docker-registry

OCPBUGS-68253: update logrus to v1.9.1 #464
Full changelog

gcp-cluster-api-controllers

OCPBUGS-78278: [release-4.18] update go mod dependency for konflux #265
Full changelog

gcp-pd-csi-driver

OCPBUGS-68258: UPSTREAM: 2056: bump github.com/sirupsen/logrus to v1.9.3 #89
OCPBUGS-44772: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #83
Full changelog

haproxy-router

OCPBUGS-67214: Add option abortonclose to HAProxy configuration template #703
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-54724: Fix implementation of ContainsCIDR to allow non-equal addresses #2267
OCPBUGS-65553: Update to Kubernetes v1.31.14 #2521
OCPBUGS-65494: Fix Concurrentmap Iteration #2512
OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
Full changelog

hypershift

OCPBUGS-76532: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7699
OCPBUGS-77368: Fix ignition-server pod restarts #7878
CNTRLPLANE-1708: Backport Customer Global Pull Secret to OpenShift 4.18.z #7354
OCPBUGS-72932: Fix Konflux EC voilation, update deprecated base … #7456
OCPBUGS-69847: test: remove unit tests that depend on network communication [release-4.18] #7406
OCPBUGS-65843: specify SCC annotation for pods in data plane #7267
CNTRLPLANE-1902: Migrate 4.18 pipelines to common pipeline template #7211
OCPBUGS-61700: use csi-resizer image from release provider #7103
OCPBUGS-63638: [release-4.18] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7111
OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77207: [release-4.18] standardize build paths #122
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-67286: [release-4.18] Fix incomplete vendor/ #140
Full changelog

ibmcloud-machine-controllers

OCPBUGS-81647: bump vpc go sdk #91
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #87
Full changelog

insights-operator

OCPBUGS-76963: Extends the time for the extractor liveness probe #1234
OCPBUGS-76537: [release-4.18] [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1239
OCPBUGS-68263: Update github.com/sirupsen/logrus to v1.9.3 #1205
OCPBUGS-68263: [release-4.18] golanci-lint version update & corresponding fixes (#1045) #1206
OCPBUGS-66396: Add filtering to add other possible pod status to QEMU gatherer #1195
OCPBUGS-66182: QEMU logs are not gathered if there are pending status virt-launcher pods #1189
OCPBUGS-66181: [bugfix] The archive’s records may include files whose names are out of bounds #1188
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-77789: remove dnf cache from the container images #69
Full changelog

ironic

OCPBUGS-74407: Update sushy to include DGX B200 credentials fix #832
OCPBUGS-74115: Bump keystonemiddleware version to 10.7.1-0.20260216144200.4c001ba for CVE-2026-22797 fix #795
OCPBUGS-69790: Bump eventlet version to 0.33.1-7 #760
OCPBUGS-65573: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #727
OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

ironic-agent

OCPBUGS-69780: Bump eventlet version to 0.33.1-7 #230
OCPBUGS-68360: Include Test advertised ip reachability before assigning it #226
OCPBUGS-62456: netutils: Use ethtool ioctl to get permanent mac address #206
Full changelog

kube-state-metrics

OCPBUGS-74873: Deduplicate CRS stores #131
Full changelog

kube-storage-version-migrator

OCPBUGS-78273: fix /vendor for hermetic 4.18 #239
Full changelog

kubevirt-csi-driver

OCPBUGS-79362: Add annotation-based fallback for infra VM node ID resolution #86
OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

libvirt-machine-controllers

OCPBUGS-77194: Fix incomplete vendor/ #300
Full changelog

machine-api-operator

OCPBUGS-78795: [release-4.18] : correct aws kms permissions #1478
OCPBUGS-78796: [release-4.18] Use resource group when generating default Azure image #1480
Full changelog

machine-config-operator

OCPBUGS-79483: set default-timeout-stop to 200s globally #5805
OCPBUGS-62692: configure-ovs: work around a Cisco switch issue #5329
OCPBUGS-78056: Prevent unnecessary systemd unit disable #5758
OCPBUGS-74148: enable nodeip-configuration for platform external #5578
OCPBUGS-77777: reduce MCO image size #5738
OCPBUGS-77576: mcd_config_drift not working properly #5726
OCPBUGS-77421: Remove MCD liveness probe #5710
OCPBUGS-74644: After OCL is enabled few phases in MCN are not updating as expected #5605
OCPBUGS-77092: Machine-config controller should not log about non-existent pull-secret changes #5680
OCPBUGS-77041: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5671
OCPBUGS-76560: [release-4.18]: cherry pick to few fixes that needed for missing services and configuration #5653
OCPBUGS-71227: MCP is not correctly degraded when a pivotError happens #5534
OCPBUGS-70336: Remove log exposing kubeconfig #5528
OCPBUGS-62169: Fix - NetworkManager restart or crash renders br-ex unusable #5356
OCPBUGS-65850: Remove –mount directives #5433
OCPBUGS-62294: Make static DNS with DHCP IP work #5311
Full changelog

machine-image-customization-controller

OCPBUGS-82149: Return error when network data Secret lacks nmstate key #174
OCPBUGS-77888: Clean up dnf cache to reduce container image size #168
OCPBUGS-68262: [4.18] Uplift logrus #151
Full changelog

metallb-frr

OCPBUGS-74485: Dockerfile: unpin FRR rpm #121
Full changelog

monitoring-plugin

OU-1241: unset frontend timeout to use the backend configuration #905
OCPBUGS-83374: fix: re encode params when redirecting from graph to query-browser #878
NO-JIRA: fix: pin http-errors to 2.0.1 for hermetic builds #870
OU-993: adding cypress Dockerfiles #861
OU-876: monitoring automated testing backported and adjusted to pf-5 and diff UI #777
NO-JIRA: simplify dockerfile by removing cachito dependencies [release-4.18] #818
OCPBUGS-70291: fix: update qs vulnerable dependency #739
OCPBUGS-65958: Fix metrics gaps 4.18 #656
OCPBUGS-64735: allow tenancy access to metrics tag #638
OU-1059: add perspective to action injector #632
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-77853: hermetic 4.18 #276
Full changelog

networking-console-plugin

OCPBUGS-79449: Bump immutable #390
CNV-76277: Fix name generator with unprofessional names #319
OCPBUGS-63582: Fixed - Extra semicolon observed before Service IP in OCP Console #306
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #170
OCPBUGS-65841: UPSTREAM: <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #155
OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

oc-mirror

OCPBUGS-66051: Remove empty status field from generated IDMS/ITMS files (manual 4.18 backport) #1324
OCPBUGS-65510: removes unintended exec permissions #1312
Full changelog

openshift-apiserver

OCPBUGS-74234: Bump library-go for route path validation fix #603
OCPBUGS-69955: Add ValidatingAdmissionPolicy and check for omissions next time. #589
OCPBUGS-66379: pkg/image: conditionally parse raw image manifest #585
OCPBUGS-65842: UPSTREAM <carry>: bump kubernetes-apiserver to pick up loopback certificate expiration update #581
Full changelog

openstack-cluster-api-controllers

OCPBUGS-64816: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into release-4.18 #371
Full changelog

openstack-machine-api-provider

OCPBUGS-69648: Don’t record event for every reconcile #143
OCPBUGS-76792: Fix make test #159
OCPBUGS-74986: Revendor CAPO #152
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-81473: Fix nil pointer dereference in sortUnpackJobs when sorting non-failed jobs #1273
OCPBUGS-77714: Remove the collect-profiles info from the microshift kustomization file #1245
OCPBUGS-76924: Remove the collect-profiles job #1231
OCPBUGS-65700: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1156
Full changelog

operator-marketplace

OCPBUGS-73883: Increase default catalog polling interval to 4h (240m) #707
OCPBUGS-68272, OCPBUGS-68273: CVE-2025-65637 fixed in logrus v1.9.3+ #703
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68284: Bump github.com/sirupsen/logrus to v1.8.3 #150
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-77151, OCPBUGS-83567: Branch Sync release-4.19 to release-4.18 [04-16-2026] #3143
OCPBUGS-82148: Branch Sync release-4.19 to release-4.18 [04-05-2026] #3117
OCPBUGS-81479: node: fix serviceUpdateNotNeeded nil pointer comparison #3101
OCPBUGS-78015: Add pperiyasamy to OWNERS for release-4.18 #3045
OCPBUGS-77516: Clear stale conntrack UDP entries for nodePorts #3016
OCPBUGS-77083, OCPBUGS-77106: [release-4.18] combined backport PR for 2 escalations #2987
OCPBUGS-48710: Branch Sync release-4.19 to release-4.18 [02-04-2026] #2970
OCPBUGS-74270: release-4.18 fix(localnet, ipamless): Prevent LSP deletion on sync #2943
OCPBUGS-70346: Branch Sync release-4.19 to release-4.18 [01-07-2026] #2922
OCPBUGS-66140: Branch Sync release-4.19 to release-4.18 [12-31-2025] #2916
CORENET-6055, OCPBUGS-48710, OCPBUGS-66360, OCPBUGS-66381, OCPBUGS-66428: Branch Sync release-4.19 to release-4.18 [12-03-2025] #2895
OCPBUGS-68347: Add ricky-rav to OWNERS for release-4.18 #2897
OCPBUGS-64855: Fix stale EIP assignments during failover and controller restart #2849
OCPBUGS-64780: kubevirt: fix bad release of IPs of live migratable pods #2847
OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
Full changelog

powervs-block-csi-driver

OCPBUGS-80317: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #130
OCPBUGS-82774: Fix CVE-2026-35469 by bumping github.com/moby/spdystream to v0.5.1 #124
OCPBUGS-51896: Mitigate CVE-2025-22868 by updating golang.org/x/oauth2 #102
OCPBUGS-70002: Update builder image’s golang version to 1.23 #103
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-80318: Fix CVE-2026-33186 by bumping google.golang.org/grpc to 1.79.3 #111
Full changelog

prometheus-alertmanager

OCPBUGS-74976: Include go-verify-deps expected files in gitignore #114
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77298: backport upstream fix to reconcile resources with inconsistent status #370
OCPBUGS-77398: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #366
OCPBUGS-61965: reconcile workload configurations when a referenced secret/configmap key is updated #347
Full changelog

tests

OCPBUGS-77876: Backport: Remove duplicated graceful termination test from release-4.18 #30702
OCPBUGS-74207: Unrevert TLS tests with fixes #30708
OCPBUGS-69900: Updated the upgrade duration limit to 100 minutes for ppc64le #30628
OCPBUGS-63668: Add imagestream update dryrun test #30436
OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-77668: hermetic migration 4.18 #105
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-78018: hermetic migration 4.18 #84
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68278: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #156
Full changelog

vsphere-problem-detector

OCPBUGS-81556: fix concurrent map writes #215
OCPBUGS-70359: Fixed logic for vSphere compute cluster permission #200
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github