# 4.18.0-okd-scos.9

Created: 2025-04-25 19:17:27 +0000 UTC

Image Digest: `sha256:eff959d1bd896664ddd02262b7a8f06fd6a183787bcf395b33af933ad9d5b771`

Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-04-25-090715


## Changes from 4.18.0-okd-scos.7

### Components

* Kubectl 1.31.1
* Kubernetes 1.31.7
* Kubernetes Tests 1.31.7
* CentOS Stream CoreOS upgraded from 418.9.202503240632-0 to 418.9.202504250632-0


### Rebuilt images without code change

* [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator) git [6182930d](https://github.com/openshift/cluster-kube-scheduler-operator/commit/6182930dde5ec8dd22bd50481e8b369ce673484c) `sha256:0ca09c618cf76d675b0074a796e2394b949f3fed519d87d6fdb9aaf71f8c8df7`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [3193a756](https://github.com/openshift/egress-router-cni/commit/3193a756d60e14f7139992e2e42b7036955652e7) `sha256:e57012fb29940596180385d25ccd481cc15ffb4f835799b5f14335be148d1d2e`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [01f6b419](https://github.com/openshift/machine-api-provider-gcp/commit/01f6b419357a539389704fcec9872997f808e540) `sha256:1bd038b73ff9031b84e59f2258dca173fcab02ff108759bfb8f485b440a117b0`
* [network-tools](https://github.com/openshift/network-tools) git [f76635f2](https://github.com/openshift/network-tools/commit/f76635f2dcfc14dd70e25cc3771c9ef59ef2a30f) `sha256:3189f507c43de36a27bad399f3eb534a5cd3e498910cdbb1e370840ca3722ba2`
* [operator-framework-tools](https://github.com/openshift/operator-framework-olm) git [cc44b486](https://github.com/openshift/operator-framework-olm/commit/cc44b486ea91015a30946029b3a0be3af49ea789) `sha256:f55b49267058ea0fc02fc7bcaffff1461446bfd457fa6f55c63c27dd322bb315`
* [operator-lifecycle-manager](https://github.com/openshift/operator-framework-olm) git [cc44b486](https://github.com/openshift/operator-framework-olm/commit/cc44b486ea91015a30946029b3a0be3af49ea789) `sha256:c1f1ee42475764ed05dd2a6a123c3f739f0713a379b77d8ca59e0fc1b34dc194`
* [operator-registry](https://github.com/openshift/operator-framework-olm) git [cc44b486](https://github.com/openshift/operator-framework-olm/commit/cc44b486ea91015a30946029b3a0be3af49ea789) `sha256:56b543b741d3a2fb42958b8ba755ce31b75dc55ab60063679f309f42793b101b`
* stream-coreos `sha256:25b9506034d42ba147b4c794e5d322162c658556ea85377ec4fa5ea547b8628a`
* stream-coreos-extensions `sha256:b3616fff6d5126b32e831d350a0c53e2c0ce02c4fc7b23d810ad445162614716`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/92575979cc7d65303169444f2afce22d36f918ce)

* [OCPBUGS-53721](https://issues.redhat.com/browse/OCPBUGS-53721): Bump jwt to 4.5.2 in release-4.18 (#1085) [#1085](https://github.com/openshift/assisted-installer/pull/1085)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/8bb42ac9fd9624f86c97c4422bd5f982251e5d91...92575979cc7d65303169444f2afce22d36f918ce)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/615411a4df7a54c536871533d7af22f666b4e2ab)

* [OCPBUGS-52994](https://issues.redhat.com/browse/OCPBUGS-52994): Update to latest ghw version (#958) [#958](https://github.com/openshift/assisted-installer-agent/pull/958)
* [MGMT-20227](https://issues.redhat.com/browse/MGMT-20227): Skip Motherboard serial if set to "-" (#955) (#957) [#955](https://github.com/openshift/assisted-installer-agent/pull/955)
* [OCPBUGS-54544](https://issues.redhat.com/browse/OCPBUGS-54544): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) [#965](https://github.com/openshift/assisted-installer-agent/pull/965)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e1670941fc948d9f3da739d0aa6878f8a33f6275...615411a4df7a54c536871533d7af22f666b4e2ab)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cdc9d6499cd5020d96811fd02bde14d4d06786cc)

* [OCPBUGS-54383](https://issues.redhat.com/browse/OCPBUGS-54383): Disable remove-not-ready-taint for azure disk csi driver [#374](https://github.com/openshift/csi-operator/pull/374)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a95f8b365dda90ca1cb9d85a13c84670f6200cff...cdc9d6499cd5020d96811fd02bde14d4d06786cc)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/c937080f51cec58650daa15805be548d09310c64)

* [OCPBUGS-53497](https://issues.redhat.com/browse/OCPBUGS-53497): bump golang-jwt v4 [#11](https://github.com/openshift/azure-kubernetes-kms/pull/11)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...c937080f51cec58650daa15805be548d09310c64)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/9357b668a760d53a34f7094840d1e9f773127441)

* [OCPBUGS-54947](https://issues.redhat.com/browse/OCPBUGS-54947): Fix Load balancer IP setup [#9659](https://github.com/openshift/installer/pull/9659)
* [OCPBUGS-45564](https://issues.redhat.com/browse/OCPBUGS-45564): Align vSphere UPI haproxy config with IPI [#9276](https://github.com/openshift/installer/pull/9276)
* [Full changelog](https://github.com/openshift/installer/compare/d765baafafd7093c4a68e4cf96c9affb3839a109...9357b668a760d53a34f7094840d1e9f773127441)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c)

* [OCPBUGS-54569](https://issues.redhat.com/browse/OCPBUGS-54569): Avoid duplicate OAuth client creation [#764](https://github.com/openshift/cluster-authentication-operator/pull/764)
* [OCPBUGS-45051](https://issues.redhat.com/browse/OCPBUGS-45051): [4.18] bump library-go to bring in workload-conditions fix [#743](https://github.com/openshift/cluster-authentication-operator/pull/743)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/75c7842973cbeccaf98ec4f8102093f688278eca...4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d1afaf45d6a03a38614ebca0289dd4b9b489c5f1)

* [OCPBUGS-53241](https://issues.redhat.com/browse/OCPBUGS-53241): improve replica counting and decrease target size behavior [#346](https://github.com/openshift/kubernetes-autoscaler/pull/346)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4674e81c349b841a139af8a5b5041722ec2f7b2f...d1afaf45d6a03a38614ebca0289dd4b9b489c5f1)


### [cluster-config-api](https://github.com/openshift/api/tree/d6c84c55a124ab4bd96b1a18c916d3f314f1a95a)

* [OCPBUGS-54784](https://issues.redhat.com/browse/OCPBUGS-54784): [release-4.18] Bump openshift/controller-tools to latest commit [#2267](https://github.com/openshift/api/pull/2267)
* [Full changelog](https://github.com/openshift/api/compare/e7f23be12279d3c245c013c234f967e5ccb426e2...d6c84c55a124ab4bd96b1a18c916d3f314f1a95a)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/b355afe20310c9b2ae45f712980907c70d855bd8)

* [OCPBUGS-53513](https://issues.redhat.com/browse/OCPBUGS-53513): fix CVE-2025-30204 [#1413](https://github.com/openshift/cluster-etcd-operator/pull/1413)
* [OCPBUGS-55066](https://issues.redhat.com/browse/OCPBUGS-55066): increase etcdGRPCRequestsSlow duration [#1408](https://github.com/openshift/cluster-etcd-operator/pull/1408)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/26f6cb2494275fb713edbb535c3fe1d02fde94de...b355afe20310c9b2ae45f712980907c70d855bd8)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ad0e7bf6fb078047e58a923fa057293c0e5535ac)

* [OCPBUGS-49898](https://issues.redhat.com/browse/OCPBUGS-49898): bindata/alerts/slo: improve burnrate calculation [#1808](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1808)
* [OCPBUGS-53066](https://issues.redhat.com/browse/OCPBUGS-53066): Bump library-go [#1828](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1828)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f...ad0e7bf6fb078047e58a923fa057293c0e5535ac)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/4482c5f2cae50a25d67cae3ad74fbbc13ce0673a)

* [OCPBUGS-55005](https://issues.redhat.com/browse/OCPBUGS-55005): chore: introduce context-rich anb case sensitive unmarshaller for the monitoring and  set CMO to Upgradeable=false if errors are found [#2592](https://github.com/openshift/cluster-monitoring-operator/pull/2592)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/2800e3ef7f19e8238046a9a80562d010a53b138f...4482c5f2cae50a25d67cae3ad74fbbc13ce0673a)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/692029cc58e9facfc31601e13b2d3097f4f37325)

* [OCPBUGS-54717](https://issues.redhat.com/browse/OCPBUGS-54717): Add IPv6 NGINX configuration [#2683](https://github.com/openshift/cluster-network-operator/pull/2683)
* [OCPBUGS-50582](https://issues.redhat.com/browse/OCPBUGS-50582), [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Unexpected Behavior During Cluster Upgrade for the ovn-ipsec-host pods [#2644](https://github.com/openshift/cluster-network-operator/pull/2644)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/8cbda2ddf6aef578ea40f224c1281c2a6ee262c4...692029cc58e9facfc31601e13b2d3097f4f37325)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/919d51f809c24ba2ab05d898ba165640af2c41af)

* [OCPBUGS-54258](https://issues.redhat.com/browse/OCPBUGS-54258): Adding mutex to func createSamples on handler.go [#615](https://github.com/openshift/cluster-samples-operator/pull/615)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/118d1f1a7929c09d22ad1d3ab2a9fd984236bbfd...919d51f809c24ba2ab05d898ba165640af2c41af)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/8caab452b91df0d77ab052b1833a4d54a1374634)

* NO-JIRA: Updating openshift-ci-release-key for 2 years [#72](https://github.com/openshift/cluster-update-keys/pull/72)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...8caab452b91df0d77ab052b1833a4d54a1374634)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/0b8a68191de069deeca944e443a5ead7e0469b41)

* : OCPBUGS-54807: skip tests on platform type External [#2268](https://github.com/openshift/kubernetes/pull/2268)
* [Full changelog](https://github.com/openshift/kubernetes/compare/97471c6ac55733da63e4db6680889897a5915ca7...0b8a68191de069deeca944e443a5ead7e0469b41)


### [hypershift](https://github.com/openshift/hypershift/tree/c7d58282055b74c632de9f2c579ccc500ccb1fdd)

* [OCPBUGS-55146](https://issues.redhat.com/browse/OCPBUGS-55146): Use 135 for terminationGracePeriodSeconds for v2 KAS [#6057](https://github.com/openshift/hypershift/pull/6057)
* [OCPBUGS-54698](https://issues.redhat.com/browse/OCPBUGS-54698): Add missing servicemonitors and prometheusrules permissions for non-OVN [#6000](https://github.com/openshift/hypershift/pull/6000)
* [OCPBUGS-53404](https://issues.redhat.com/browse/OCPBUGS-53404): Set shutdown watch termination grace period on kube-apiserver [#5874](https://github.com/openshift/hypershift/pull/5874)
* [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Fix golang crypto dependency go.mod replacement [#5992](https://github.com/openshift/hypershift/pull/5992)
* [OCPBUGS-54814](https://issues.redhat.com/browse/OCPBUGS-54814): [release-4.18] add feature set aware feature gates to HO and CPO [#6014](https://github.com/openshift/hypershift/pull/6014)
* [OCPBUGS-54624](https://issues.redhat.com/browse/OCPBUGS-54624): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5980](https://github.com/openshift/hypershift/pull/5980)
* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Sync RBAC for attaching volumes on VM level [#5988](https://github.com/openshift/hypershift/pull/5988)
* [OCPBUGS-54627](https://issues.redhat.com/browse/OCPBUGS-54627): Use system trust bundle in CPO IDP https client [#5981](https://github.com/openshift/hypershift/pull/5981)
* [ARO-15695](https://issues.redhat.com/browse/ARO-15695), [OCPBUGS-54625](https://issues.redhat.com/browse/OCPBUGS-54625): backport capabilities api [#5964](https://github.com/openshift/hypershift/pull/5964)
* [OCPBUGS-54411](https://issues.redhat.com/browse/OCPBUGS-54411): Backport PR 5876 to release-4.18 [#5936](https://github.com/openshift/hypershift/pull/5936)
* [OCPBUGS-54498](https://issues.redhat.com/browse/OCPBUGS-54498): Support hypershift-operator scoping for secretJanitor [#5961](https://github.com/openshift/hypershift/pull/5961)
* [Full changelog](https://github.com/openshift/hypershift/compare/000eda5b26f5e84c5a766cf4e25d5331f41d8540...c7d58282055b74c632de9f2c579ccc500ccb1fdd)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/88d2a3f091a37c720915d5eeeace22e2794027d6)

* [OCPBUGS-53913](https://issues.redhat.com/browse/OCPBUGS-53913): bump github.com/golang-jwt/jwt/v4 to v4.5.2 [#82](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/82)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/59a8340c20192b70c5d597555554856d3712aee9...88d2a3f091a37c720915d5eeeace22e2794027d6)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7f9ed155f7361fb0a16f666fd53111cfb16d4cca)

* [OCPBUGS-51163](https://issues.redhat.com/browse/OCPBUGS-51163): Fix bad IPv6 address (#1074) [#1074](https://github.com/openshift/insights-operator/pull/1074)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8a9746e4b1bbe139d162ecc894041495059dac4a...7f9ed155f7361fb0a16f666fd53111cfb16d4cca)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/2111495e6d03f1bfe0702996fdd1355ca21b78cf)

* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Ensure volume stays attached through reboots [#55](https://github.com/openshift/kubevirt-csi-driver/pull/55)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ba2234bd5974a6f9dae6d7f9caec56485351db0a...2111495e6d03f1bfe0702996fdd1355ca21b78cf)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/fe6668121f9136881f41d9ae99c02fe37589182e)

* Update cluster operator's status condition message [#4993](https://github.com/openshift/machine-config-operator/pull/4993)
* [OCPBUGS-53278](https://issues.redhat.com/browse/OCPBUGS-53278): In OCL. Cannot install extensions [#4945](https://github.com/openshift/machine-config-operator/pull/4945)
* [OCPBUGS-54817](https://issues.redhat.com/browse/OCPBUGS-54817): Make mtu-migration run after wait-for-primary-ip [#4979](https://github.com/openshift/machine-config-operator/pull/4979)
* [OKD-239](https://issues.redhat.com/browse/OKD-239): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4955](https://github.com/openshift/machine-config-operator/pull/4955)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/85ff8f1f6f6017bace77fed7638d489c957d507a...fe6668121f9136881f41d9ae99c02fe37589182e)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/08e6a227ea4733adfa9af63ba4ef62269183aa97)

* Add translations scripts [#234](https://github.com/openshift/networking-console-plugin/pull/234)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/d9f7f31c78c4f4eeee734936cd814ab0542e4ad0...08e6a227ea4733adfa9af63ba4ef62269183aa97)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/222e38394c0d96357ba0179e88aa65956d4112a4)

* [OCPBUGS-51217](https://issues.redhat.com/browse/OCPBUGS-51217): Fix CVE-2025-27144 (#1108) [#1108](https://github.com/openshift/oc-mirror/pull/1108)
* [OCPBUGS-54727](https://issues.redhat.com/browse/OCPBUGS-54727): Use tag 0.0.3+2 of catalog-filter (#1128) [#1128](https://github.com/openshift/oc-mirror/pull/1128)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/214b61095a1b1992d55cef98d9cb7045dd6ba18a...222e38394c0d96357ba0179e88aa65956d4112a4)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/0f550074f2a2cb26ea3176158d0631d295f49941)

* UPSTREAM: <carry>: fix crdupgradesafety diff when items schema differ (#1863) [#1863](https://github.com/openshift/operator-framework-operator-controller/pull/1863)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/481e275e3316037c9d6eec441ec7a5e9d85f4f90...0f550074f2a2cb26ea3176158d0631d295f49941)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/09261dc5c16b81bf98f44fab62d26838d5a28f8e)

* [OCPBUGS-54671](https://issues.redhat.com/browse/OCPBUGS-54671): EIP no reroute: allow multiple entries for pod to pod and pod to join [#2510](https://github.com/openshift/ovn-kubernetes/pull/2510)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4af08abc39c013bf3f0a493afd3c50d8f7f07805...09261dc5c16b81bf98f44fab62d26838d5a28f8e)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/10ac06f57bface0b3481e111c4e1d5b7f52db7f4)

* [OCPBUGS-54243](https://issues.redhat.com/browse/OCPBUGS-54243): Fix for  CVE-2024-51744 in github.com/golang-jwt/jwt/v4 [#111](https://github.com/openshift/machine-api-provider-powervs/pull/111)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/e253fa30d99bb7ed00c1f27ca3d810fa682a1901...10ac06f57bface0b3481e111c4e1d5b7f52db7f4)


### [prometheus](https://github.com/openshift/prometheus/tree/1c5695f0e725ce1a979ed11df74c9e62841ff67e)

* [OCPBUGS-54940](https://issues.redhat.com/browse/OCPBUGS-54940): Scraping: Bump cache iteration after error to avoid false duplicate detection. [#247](https://github.com/openshift/prometheus/pull/247)
* [Full changelog](https://github.com/openshift/prometheus/compare/8de8eb11dfe734331762bc8d4839ec3b47084743...1c5695f0e725ce1a979ed11df74c9e62841ff67e)


### [tests](https://github.com/openshift/origin/tree/539a8f0fd0517a17279be838a0c202bce140138d)

* [OCPBUGS-55277](https://issues.redhat.com/browse/OCPBUGS-55277): backport 4.18 [#29645](https://github.com/openshift/origin/pull/29645)
* [OCPBUGS-55110](https://issues.redhat.com/browse/OCPBUGS-55110): Backport `MetricsCollectionProfiles` patches to 4.18 [#29561](https://github.com/openshift/origin/pull/29561)
* [OCPBUGS-54807](https://issues.redhat.com/browse/OCPBUGS-54807): support provider type external [#29666](https://github.com/openshift/origin/pull/29666)
* [OCPBUGS-54725](https://issues.redhat.com/browse/OCPBUGS-54725): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29657](https://github.com/openshift/origin/pull/29657)
* [Full changelog](https://github.com/openshift/origin/compare/f9e1b11f94e82a14f6d7f888862e7f1960fa4b36...539a8f0fd0517a17279be838a0c202bce140138d)