# 4.18.0-okd-scos.3

Created: 2025-03-07 16:35:07 +0000 UTC

Image Digest: `sha256:d74ade7b8c381ef12bf9a77291f4f864e4c282df35d5299419efbee5cc6ead8b`

Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-04-193655


## Changes from 4.18.0-okd-scos.ec.3

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.4 to 1.31.6
* Kubernetes Tests upgraded from 1.31.1 to 1.31.6
* CentOS Stream CoreOS upgraded from 418.9.202501310632-0 to 418.9.202503040632-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| NetworkSegmentation <br/> (37 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |
| PersistentIPsForVirtualization <br/> (12 tests)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled| Enabled| Enabled| Enabled |


### Removed images

* ovirt-machine-controllers


### Rebuilt images without code change

* stream-coreos `sha256:e563baf4606cb73b4831635a94a17f2219afb5e713f9732ac85a1842a5e4d984`
* stream-coreos-extensions `sha256:61f686a5060c15e7dcd0cc8a4d77e9424153b5829eec54fed8b980e9b529a461`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/8bb42ac9fd9624f86c97c4422bd5f982251e5d91)

* [OCPBUGS-45116](https://issues.redhat.com/browse/OCPBUGS-45116): Add retry to mount efi device (#1030) [#1030](https://github.com/openshift/assisted-installer/pull/1030)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/5348c85cd03dddf1852873c6bb2f08aff3b0630e...8bb42ac9fd9624f86c97c4422bd5f982251e5d91)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/593c9c284e43fd00095cfdf3f55b9017f4104663)

* NO-ISSUE: Increase image pull timeout during install (#907) [#907](https://github.com/openshift/assisted-installer-agent/pull/907)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/51a74acb3f2e56bbeb1ffbe33cb3c5cf808a2512...593c9c284e43fd00095cfdf3f55b9017f4104663)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/b3446080be1c2898ee039030c346020fa6c1ed13)

* [OCPBUGS-50556](https://issues.redhat.com/browse/OCPBUGS-50556): UPSTREAM: 5339: Bump glog for recent fixes [#537](https://github.com/openshift/cluster-api-provider-aws/pull/537)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/6bd77fcce0c87571305edf5f1f28f1182ed25096...b3446080be1c2898ee039030c346020fa6c1ed13)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/a95f8b365dda90ca1cb9d85a13c84670f6200cff)

* [OCPBUGS-49843](https://issues.redhat.com/browse/OCPBUGS-49843): Support HCP labels [#356](https://github.com/openshift/csi-operator/pull/356)
* [Full changelog](https://github.com/openshift/csi-operator/compare/9432fd3e2cb63bc282f2d0b1ac8ab8f6691b49ab...a95f8b365dda90ca1cb9d85a13c84670f6200cff)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/62f62f7a0bb3d836e238588527627684018e229b)

* [OCPBUGS-48659](https://issues.redhat.com/browse/OCPBUGS-48659): dynamically setting the amount of fault domains [#125](https://github.com/openshift/machine-api-provider-azure/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/e2405dcd1e737899d1e1ba7c36b8c80262b7d65c...62f62f7a0bb3d836e238588527627684018e229b)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/50deebb4a117c2309b38f96551d0278409437dd6)

* [OCPBUGS-49885](https://issues.redhat.com/browse/OCPBUGS-49885): [Nutanix] Install multi-NICs cluster failed with failureDomains [#9440](https://github.com/openshift/installer/pull/9440)
* [OCPBUGS-50524](https://issues.redhat.com/browse/OCPBUGS-50524): Add cluster:master_nodes metric retrieval in docs [#9449](https://github.com/openshift/installer/pull/9449)
* [OCPBUGS-49864](https://issues.redhat.com/browse/OCPBUGS-49864): handle runtime panic when validating ovnKubernetesConfig [#9435](https://github.com/openshift/installer/pull/9435)
* [OCPBUGS-49320](https://issues.redhat.com/browse/OCPBUGS-49320): pkg/gcp/destroy: add waits to prevent leaks during heavy load [#9402](https://github.com/openshift/installer/pull/9402)
* [OCPBUGS-50870](https://issues.redhat.com/browse/OCPBUGS-50870): PowerVS: destroy dhcp hack [#9483](https://github.com/openshift/installer/pull/9483)
* [OCPBUGS-50877](https://issues.redhat.com/browse/OCPBUGS-50877): correct typo [#9485](https://github.com/openshift/installer/pull/9485)
* [OCPBUGS-49792](https://issues.redhat.com/browse/OCPBUGS-49792): aws/edge/byovpc: subnets tag kube cluster tag to shared [#9430](https://github.com/openshift/installer/pull/9430)
* [OCPBUGS-49842](https://issues.redhat.com/browse/OCPBUGS-49842): Disable IP Forwarding for CAPG Machines [#9434](https://github.com/openshift/installer/pull/9434)
* [OCPBUGS-46548](https://issues.redhat.com/browse/OCPBUGS-46548): Update RHCOS 4.18 bootimage metadata to 418.94.202501221327-0 [#9437](https://github.com/openshift/installer/pull/9437)
* [OCPBUGS-49735](https://issues.redhat.com/browse/OCPBUGS-49735): aws/byo-ip added required permission ec2:ReleaseAddress [#9426](https://github.com/openshift/installer/pull/9426)
* [Full changelog](https://github.com/openshift/installer/compare/f1621a112f46ebdad3d2dc429464d6e075573679...50deebb4a117c2309b38f96551d0278409437dd6)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/3d9304e76903b639b6d06e3b00d655e1ad5dbb9b)

* [OCPBUGS-49699](https://issues.redhat.com/browse/OCPBUGS-49699): Handle HFC for non-redfish HW [#393](https://github.com/openshift/baremetal-operator/pull/393)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/044448aafa024c114b2ddba7afd4db9de845c82a...3d9304e76903b639b6d06e3b00d655e1ad5dbb9b)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64)

* [OCPBUGS-49440](https://issues.redhat.com/browse/OCPBUGS-49440): Address `golang.org/x/*` CVEs [#1961](https://github.com/openshift/oc/pull/1961)
* [OCPBUGS-48714](https://issues.redhat.com/browse/OCPBUGS-48714): monitor should not exit for temp api disconnect [#1963](https://github.com/openshift/oc/pull/1963)
* [Full changelog](https://github.com/openshift/oc/compare/36c93092776f8d964b4d09fa4c4f299d1ab55a08...eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/d1e019545aee3250920a01a5f5c465c570de573c)

* [OCPBUGS-49770](https://issues.redhat.com/browse/OCPBUGS-49770): bootstrap API server should terminate only after API is HA [#113](https://github.com/openshift/cluster-bootstrap/pull/113)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/c6db451da03b8883063e88d28d7962b605f65153...d1e019545aee3250920a01a5f5c465c570de573c)


### [cluster-config-api](https://github.com/openshift/api/tree/b1bd7c10b2fd113e4983d1e19463c62148568ac1)

* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): [release-4.18] Add the option to test ratcheting validations within integration tests [#2217](https://github.com/openshift/api/pull/2217)
* [OCPBUGS-51077](https://issues.redhat.com/browse/OCPBUGS-51077): [4.18] bump controller-tools dependency to latest downstream commit [#2210](https://github.com/openshift/api/pull/2210)
* [OCPBUGS-49751](https://issues.redhat.com/browse/OCPBUGS-49751): ipam, virt: graduate persistent ips feature gate to GA [#2140](https://github.com/openshift/api/pull/2140)
* [OCPBUGS-49809](https://issues.redhat.com/browse/OCPBUGS-49809), [SDN-5297](https://issues.redhat.com/browse/SDN-5297), [SDN-5403](https://issues.redhat.com/browse/SDN-5403): [release-4.18] Graduate `UserDefinedNetworks` to GA [#2127](https://github.com/openshift/api/pull/2127)
* [OCPBUGS-49780](https://issues.redhat.com/browse/OCPBUGS-49780): Use BASE_REF env var to pull the release version for sippy data [#2191](https://github.com/openshift/api/pull/2191)
* [Full changelog](https://github.com/openshift/api/compare/d15841be6bdeeb556cac490a084cb3ffb2aee215...b1bd7c10b2fd113e4983d1e19463c62148568ac1)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/6fe700087e8be6513285edd18f461790fecc65c3)

* [OCPBUGS-49843](https://issues.redhat.com/browse/OCPBUGS-49843): Support HCP labels [#227](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/227)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/46902b494ed0a608a48d2a04faf6e4ed2f9a6a5b...6fe700087e8be6513285edd18f461790fecc65c3)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/26f6cb2494275fb713edbb535c3fe1d02fde94de)

* [OCPBUGS-49772](https://issues.redhat.com/browse/OCPBUGS-49772): Bump library-go for static pod controller apply fixes. [#1395](https://github.com/openshift/cluster-etcd-operator/pull/1395)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/b9f78653cf1435be9f4e208813f0e2e8c3ca54a6...26f6cb2494275fb713edbb535c3fe1d02fde94de)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/33197688ad59aed5cd6d51c34cb114944125b6a7)

* [OCPBUGS-51018](https://issues.redhat.com/browse/OCPBUGS-51018): ensure that storage names don't end in dashes [#1179](https://github.com/openshift/cluster-image-registry-operator/pull/1179)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/00882ba691a356151e29a9052ab0f82c24a7f9fb...33197688ad59aed5cd6d51c34cb114944125b6a7)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/a730e8a7af570d3921cd44c1468f38a250a6e647)

* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add e2e tests for IdleConnectionTerminationPolicy [#1194](https://github.com/openshift/cluster-ingress-operator/pull/1194)
* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleConnectionTerminationPolicy [#1188](https://github.com/openshift/cluster-ingress-operator/pull/1188)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/8be174945db79b0660bd0fd21ed279ab7b6aafbf...a730e8a7af570d3921cd44c1468f38a250a6e647)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f)

* [OCPBUGS-46411](https://issues.redhat.com/browse/OCPBUGS-46411): skip generating certs when networkConfig.status.ServiceNetwork is nil [#1780](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1780)
* [OCPBUGS-50479](https://issues.redhat.com/browse/OCPBUGS-50479): Increase waitForFallbackDegradedConditionTimeout [#1798](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1798)
* [OCPBUGS-49773](https://issues.redhat.com/browse/OCPBUGS-49773): Bump library-go for static pod controller apply fixes. [#1796](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1796)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/4babb3f18c19d2bef584a8389f34b8428cf52b9c...087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/0fac9aa9a20b3c843e0e832a2849db6a7e3441c1)

* [OCPBUGS-49777](https://issues.redhat.com/browse/OCPBUGS-49777): Bump library-go for static pod controller apply fixes. [#832](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/832)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/ce2c021f23f5d178da6ea35d98a229137e5a81c4...0fac9aa9a20b3c843e0e832a2849db6a7e3441c1)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/6182930dde5ec8dd22bd50481e8b369ce673484c)

* [OCPBUGS-49776](https://issues.redhat.com/browse/OCPBUGS-49776): Bump library-go for static pod controller apply fixes. [#559](https://github.com/openshift/cluster-kube-scheduler-operator/pull/559)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/e4c772cd344e538342a4e1cd91635b387e1c18ba...6182930dde5ec8dd22bd50481e8b369ce673484c)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/cad5e40c4c21a8d1d638c20ed23529aa05ab0824)

* [OCPBUGS-50625](https://issues.redhat.com/browse/OCPBUGS-50625): Cherry-pick RouteAdvertisements support back to 4.18 [#2645](https://github.com/openshift/cluster-network-operator/pull/2645)
* [OCPBUGS-49589](https://issues.redhat.com/browse/OCPBUGS-49589): Update egressfirewall CRD to be consistent with ovn-kubernetes repo [#2631](https://github.com/openshift/cluster-network-operator/pull/2631)
* [OCPBUGS-49736](https://issues.redhat.com/browse/OCPBUGS-49736): Fix UDN and CUDN hostSubnet validation [#2637](https://github.com/openshift/cluster-network-operator/pull/2637)
* [OCPBUGS-49670](https://issues.redhat.com/browse/OCPBUGS-49670): OVNK should be able to annotate network ID on NADs [#2635](https://github.com/openshift/cluster-network-operator/pull/2635)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/4616940d5e04f53b5bed811449b89acf2bb11514...cad5e40c4c21a8d1d638c20ed23529aa05ab0824)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/2f872e4323528d8ec14c1361d27fb72707c308f1)

* [OCPBUGS-51088](https://issues.redhat.com/browse/OCPBUGS-51088): E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) [#1298](https://github.com/openshift/cluster-node-tuning-operator/pull/1298)
* e2e: common way to fetch poolName (#1255) (#1300) [#1255](https://github.com/openshift/cluster-node-tuning-operator/pull/1255)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b707be66f55efc54a9b348cd7f4b5fdcf5a58679...2f872e4323528d8ec14c1361d27fb72707c308f1)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534)

* [OCPBUGS-49749](https://issues.redhat.com/browse/OCPBUGS-49749): Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups [#613](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/613)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/9da25f01f448cf603993f2e311e9b779f300690e...0a6f6eb9efec43dfd3c8570b7a08a3d00afc5534)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/65d06444110f8044a84ccf4f977ee9520f2bdf89)

* [OCPBUGS-51320](https://issues.redhat.com/browse/OCPBUGS-51320): fix Vsphere cluster Storage operator in Unavailable state [#558](https://github.com/openshift/cluster-storage-operator/pull/558)
* [OCPBUGS-49843](https://issues.redhat.com/browse/OCPBUGS-49843): Support HCP labels [#552](https://github.com/openshift/cluster-storage-operator/pull/552)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/d0086059867b069dbc9eec2ae84d79c2119b5b4c...65d06444110f8044a84ccf4f977ee9520f2bdf89)


### [console](https://github.com/openshift/console/tree/ec6ec6de15dae6d7dc573e00594ed7c1252e640c)

* [OCPBUGS-51086](https://issues.redhat.com/browse/OCPBUGS-51086): Show Observe section without PROMETHEUS and MONITORING flags [#14784](https://github.com/openshift/console/pull/14784)
* [OCPBUGS-48798](https://issues.redhat.com/browse/OCPBUGS-48798): Pipeline visualisation shows all tasks as Failed and after that goes to Running state [#14698](https://github.com/openshift/console/pull/14698)
* [OCPBUGS-51180](https://issues.redhat.com/browse/OCPBUGS-51180): Linkify OLM operator uninstall message [#14789](https://github.com/openshift/console/pull/14789)
* [OCPBUGS-51149](https://issues.redhat.com/browse/OCPBUGS-51149): Do not load CSRs if user does not have permissions [#14787](https://github.com/openshift/console/pull/14787)
* [OCPBUGS-50647](https://issues.redhat.com/browse/OCPBUGS-50647): Enable web terminal tests [#14758](https://github.com/openshift/console/pull/14758)
* [OCPBUGS-50573](https://issues.redhat.com/browse/OCPBUGS-50573): Render refresh popover after adding CSP directive to the ConsolePlugin CR [#14755](https://github.com/openshift/console/pull/14755)
* [OCPBUGS-49867](https://issues.redhat.com/browse/OCPBUGS-49867): Add support for conditional CSP headers [#14720](https://github.com/openshift/console/pull/14720)
* [OCPBUGS-48736](https://issues.redhat.com/browse/OCPBUGS-48736): update variable name for plugin name parsing [#14696](https://github.com/openshift/console/pull/14696)
* [OCPBUGS-49921](https://issues.redhat.com/browse/OCPBUGS-49921): fix run time error when no completed version exists [#14743](https://github.com/openshift/console/pull/14743)
* [OCPBUGS-49920](https://issues.redhat.com/browse/OCPBUGS-49920): fix bug where Search filter dropdown label isn't i18n [#14724](https://github.com/openshift/console/pull/14724)
* [OCPBUGS-48200](https://issues.redhat.com/browse/OCPBUGS-48200): 'create a Project' button on Getting started page doesn't work [#14672](https://github.com/openshift/console/pull/14672)
* [Full changelog](https://github.com/openshift/console/compare/7bb8f0d706d0a4c86750adb82bc02791f1fa6002...ec6ec6de15dae6d7dc573e00594ed7c1252e640c)


### [console-operator](https://github.com/openshift/console-operator/tree/49cd98bc72f18eefd6baf36b69fedaf305720ed5)

* [OCPBUGS-49867](https://issues.redhat.com/browse/OCPBUGS-49867): Add ConsolePluginContentSecurityPolicy feature gate to… [#959](https://github.com/openshift/console-operator/pull/959)
* [Full changelog](https://github.com/openshift/console-operator/compare/18590a15d7ba5447b10be371681424e09ccacdf8...49cd98bc72f18eefd6baf36b69fedaf305720ed5)


### [docker-builder](https://github.com/openshift/builder/tree/6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8)

* [OCPBUGS-46580](https://issues.redhat.com/browse/OCPBUGS-46580): buildah dependency bump to 1.37.6 [#453](https://github.com/openshift/builder/pull/453)
* [Full changelog](https://github.com/openshift/builder/compare/336d783e6fb6d10c32b4e386523325751c33b3ee...6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8)


### [docker-registry](https://github.com/openshift/image-registry/tree/e36d3655ba8c33cff1afaa9f816ae2399f4cd42f)

* [OCPBUGS-49693](https://issues.redhat.com/browse/OCPBUGS-49693): bump docker distribution [#421](https://github.com/openshift/image-registry/pull/421)
* [Full changelog](https://github.com/openshift/image-registry/compare/8def65e61ff3afa5a16396045418ff306f72243e...e36d3655ba8c33cff1afaa9f816ae2399f4cd42f)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/afac40f734a0440eb0983d7308e86aea9a04bbe9)

* [ETCD-708](https://issues.redhat.com/browse/ETCD-708): Rebase etcd 3.5.18 openshift 4.18 [#307](https://github.com/openshift/etcd/pull/307)
* [Full changelog](https://github.com/openshift/etcd/compare/914783cae63a13b90971c65e28c3349c1ecb7dfb...afac40f734a0440eb0983d7308e86aea9a04bbe9)


### [haproxy-router](https://github.com/openshift/router/tree/d8058949aaf91dcdea050c58e6a34ef5f6670c67)

* [OCPBUGS-48377](https://issues.redhat.com/browse/OCPBUGS-48377): Add support for IdleCloseTerminationPolicy [#647](https://github.com/openshift/router/pull/647)
* [OCPBUGS-49389](https://issues.redhat.com/browse/OCPBUGS-49389): Reject All CA-Signed Certs Using SHA1 [#649](https://github.com/openshift/router/pull/649)
* [Full changelog](https://github.com/openshift/router/compare/061909a4c397c048e6def163fda5d227c75f176b...d8058949aaf91dcdea050c58e6a34ef5f6670c67)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/6020cf5333bdeb77f95fa33f8272e5251ea28edc)

* [OCPBUGS-50929](https://issues.redhat.com/browse/OCPBUGS-50929): Update to Kubernetes v1.31.6 [#2208](https://github.com/openshift/kubernetes/pull/2208)
* [OCPBUGS-49841](https://issues.redhat.com/browse/OCPBUGS-49841): Don't retry storage calls with side effects. [#2197](https://github.com/openshift/kubernetes/pull/2197)
* [OCPBUGS-48552](https://issues.redhat.com/browse/OCPBUGS-48552): Update to Kubernetes 1.31.5 [#2176](https://github.com/openshift/kubernetes/pull/2176)
* [OCPBUGS-49782](https://issues.redhat.com/browse/OCPBUGS-49782): OCPBUGS-39305: UPSTREAM: &lt;carry&gt;: log only deprecated api requests [#2195](https://github.com/openshift/kubernetes/pull/2195)
* [OCPBUGS-49749](https://issues.redhat.com/browse/OCPBUGS-49749): UPSTREAM: &lt;carry&gt;: disable etcd readiness checks by default [#2193](https://github.com/openshift/kubernetes/pull/2193)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e18ecb4c7c8e2d8ca398f0ecdf76119d9f471cf3...6020cf5333bdeb77f95fa33f8272e5251ea28edc)


### [hypershift](https://github.com/openshift/hypershift/tree/495ab4b643f4a217ccd5cfdbafe5ccb9033a031f)

* [OCPBUGS-51375](https://issues.redhat.com/browse/OCPBUGS-51375): use registryOverrides when automaitcally retrieving catalog images for hosted control plane [#5723](https://github.com/openshift/hypershift/pull/5723)
* [OCPBUGS-50696](https://issues.redhat.com/browse/OCPBUGS-50696): add region to AWS creds passed to operators managed by CPO [#5629](https://github.com/openshift/hypershift/pull/5629)
* [OCPBUGS-51050](https://issues.redhat.com/browse/OCPBUGS-51050): Add HostedCluster additional trustbundles to konnectivity-https-proxy [#5667](https://github.com/openshift/hypershift/pull/5667)
* NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 [#5640](https://github.com/openshift/hypershift/pull/5640)
* NO-JIRA: Update dependency mkdocs to v1.6.1 [#5638](https://github.com/openshift/hypershift/pull/5638)
* [OCPBUGS-50550](https://issues.redhat.com/browse/OCPBUGS-50550): Honor proxy vars in the util insecure http client [#5598](https://github.com/openshift/hypershift/pull/5598)
* [OCPBUGS-49698](https://issues.redhat.com/browse/OCPBUGS-49698): Konnectivity: add agent readiness [#5521](https://github.com/openshift/hypershift/pull/5521)
* [OCPBUGS-45600](https://issues.redhat.com/browse/OCPBUGS-45600): override OpenShiftPodSecurityAdmission featue gate to false for HCP components [#5585](https://github.com/openshift/hypershift/pull/5585)
* [OCPBUGS-49827](https://issues.redhat.com/browse/OCPBUGS-49827): Duplicate hostDevices.name when hostDevices.deviceName has multiple types. [#5557](https://github.com/openshift/hypershift/pull/5557)
* [OCPBUGS-49904](https://issues.redhat.com/browse/OCPBUGS-49904): Use /livez for kubernetes scheduler liveness probe [#5567](https://github.com/openshift/hypershift/pull/5567)
* [OCPBUGS-45600](https://issues.redhat.com/browse/OCPBUGS-45600): enforce privileged PSA by default [#5566](https://github.com/openshift/hypershift/pull/5566)
* [OCPBUGS-49819](https://issues.redhat.com/browse/OCPBUGS-49819): Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO [#5548](https://github.com/openshift/hypershift/pull/5548)
* [OCPBUGS-48689](https://issues.redhat.com/browse/OCPBUGS-48689): Remove Credentials from the Azure API [#5530](https://github.com/openshift/hypershift/pull/5530)
* [Full changelog](https://github.com/openshift/hypershift/compare/05039f3446362d68dca2d032898f55f91976928e...495ab4b643f4a217ccd5cfdbafe5ccb9033a031f)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/2ba764f9a38c27f82a9198472c584fa633c8f2cd)

* [OCPBUGS-50565](https://issues.redhat.com/browse/OCPBUGS-50565): Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 [#100](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/100)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/ef05fb5528638fa81cec911cebb7333d5f1d21df...2ba764f9a38c27f82a9198472c584fa633c8f2cd)


### [insights-operator](https://github.com/openshift/insights-operator/tree/8a9746e4b1bbe139d162ecc894041495059dac4a)

* [OCPBUGS-48790](https://issues.redhat.com/browse/OCPBUGS-48790): Add a liveness probe to the extractor container (#1068) [#1068](https://github.com/openshift/insights-operator/pull/1068)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5c8b7154a3afb0e7eed60480bed41bbb45b413f1...8a9746e4b1bbe139d162ecc894041495059dac4a)


### [ironic](https://github.com/openshift/ironic-image/tree/afb7947613cac32c5c136e1757d7f21d0b034dd9)

* [OCPBUGS-50641](https://issues.redhat.com/browse/OCPBUGS-50641): Install python3-inotify pkg explicitly [#639](https://github.com/openshift/ironic-image/pull/639)
* [OCPBUGS-49982](https://issues.redhat.com/browse/OCPBUGS-49982): Fix runlogwatch failure if LOG_DIR does not exist [#636](https://github.com/openshift/ironic-image/pull/636)
* [OCPBUGS-49765](https://issues.redhat.com/browse/OCPBUGS-49765): Drop quiet option of grep to avoid race condition with pipefail [#632](https://github.com/openshift/ironic-image/pull/632)
* [OCPBUGS-49755](https://issues.redhat.com/browse/OCPBUGS-49755): Use pynotify instead of inotify-tools [#630](https://github.com/openshift/ironic-image/pull/630)
* [Full changelog](https://github.com/openshift/ironic-image/compare/3ed02cb9ec6171a279808b1eb09d1fa7b0db98f5...afb7947613cac32c5c136e1757d7f21d0b034dd9)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/1df65ace03159ae05671e4f565eefcf844192192)

* [OCPBUGS-51263](https://issues.redhat.com/browse/OCPBUGS-51263): Drop oVirt support [#1333](https://github.com/openshift/machine-api-operator/pull/1333)
* [CORS-3741](https://issues.redhat.com/browse/CORS-3741): [Nutanix] support multi-subnets in Machine providerSpec [#1301](https://github.com/openshift/machine-api-operator/pull/1301)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/227a54168e409e577e78f369c31d8b3858f6b86b...1df65ace03159ae05671e4f565eefcf844192192)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/de723aa6d0723ecc150f332c5e49d75c00a30d5d)

* [OCPBUGS-48809](https://issues.redhat.com/browse/OCPBUGS-48809): Enable nmstate-configuration on all platforms [#4804](https://github.com/openshift/machine-config-operator/pull/4804)
* [OCPBUGS-48296](https://issues.redhat.com/browse/OCPBUGS-48296): Update machine-config-daemon-pull.service to use custom policy for Podman &lt; 4.4.1 [#4788](https://github.com/openshift/machine-config-operator/pull/4788)
* [OCPBUGS-48341](https://issues.redhat.com/browse/OCPBUGS-48341): configure-ovs workaround for ovs-if-br-ex bug [#4883](https://github.com/openshift/machine-config-operator/pull/4883)
* [OCPBUGS-51015](https://issues.redhat.com/browse/OCPBUGS-51015): Enforce VIPs to be collocated at the same host [#4865](https://github.com/openshift/machine-config-operator/pull/4865)
* [OCPBUGS-51194](https://issues.redhat.com/browse/OCPBUGS-51194): Update cluster-reader ClusterRole permissions [#4874](https://github.com/openshift/machine-config-operator/pull/4874)
* [OCPBUGS-50633](https://issues.redhat.com/browse/OCPBUGS-50633): Update format verbs for alert logs [#4849](https://github.com/openshift/machine-config-operator/pull/4849)
* [OCPBUGS-49774](https://issues.redhat.com/browse/OCPBUGS-49774): Correct MachineConfig documentation on sysstat extension support [#4829](https://github.com/openshift/machine-config-operator/pull/4829)
* [OCPBUGS-49433](https://issues.redhat.com/browse/OCPBUGS-49433): create /run/nodeip-configuration before use [#4813](https://github.com/openshift/machine-config-operator/pull/4813)
* [OCPBUGS-46032](https://issues.redhat.com/browse/OCPBUGS-46032): Update the storage.conf configuration file template [#4751](https://github.com/openshift/machine-config-operator/pull/4751)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/d6090f11285d3b9a9262290f17bc3f90eb3dd8e5...de723aa6d0723ecc150f332c5e49d75c00a30d5d)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723)

* [OCPBUGS-51266](https://issues.redhat.com/browse/OCPBUGS-51266): Decompress pxe file only if it's a valid compressed file [#52](https://github.com/openshift/machine-os-images/pull/52)
* [OCPBUGS-45456](https://issues.redhat.com/browse/OCPBUGS-45456): Fix shellcheck [#47](https://github.com/openshift/machine-os-images/pull/47)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/f57df5207bc9bde0a9bea650d51f6ae859a12282...ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/d9f7f31c78c4f4eeee734936cd814ab0542e4ad0)

* [CNV-56436](https://issues.redhat.com/browse/CNV-56436): show ipam lifecycle correctly with new spec [#220](https://github.com/openshift/networking-console-plugin/pull/220)
* [CNV-56236](https://issues.redhat.com/browse/CNV-56236): fix cudn modal form titles [#219](https://github.com/openshift/networking-console-plugin/pull/219)
* [CNV-56336](https://issues.redhat.com/browse/CNV-56336): fix ipam lifecycle with new spec [#213](https://github.com/openshift/networking-console-plugin/pull/213)
* [CNV-56076](https://issues.redhat.com/browse/CNV-56076): create cudn from empty state [#211](https://github.com/openshift/networking-console-plugin/pull/211)
* Fix nads with no label [#207](https://github.com/openshift/networking-console-plugin/pull/207)
* [OCPBUGS-49681](https://issues.redhat.com/browse/OCPBUGS-49681): Fix weight width [#205](https://github.com/openshift/networking-console-plugin/pull/205)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/9f60c8a135fbc130c516ed25da80156a539327e7...d9f7f31c78c4f4eeee734936cd814ab0542e4ad0)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/7d0cb735f3e86c0828821cf54f8a40c74d9232aa)

* [OCPBUGS-47268](https://issues.redhat.com/browse/OCPBUGS-47268): fixing CVE-2024-45338 [#91](https://github.com/openshift/machine-api-provider-nutanix/pull/91)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/9c2ff5e75240902a64b13aabbd39c0ae7b970473...7d0cb735f3e86c0828821cf54f8a40c74d9232aa)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/2575ff417406ea6680aff0de6efb524dbbe2b8d2)

* [OCPBUGS-49847](https://issues.redhat.com/browse/OCPBUGS-49847): Prevent storage layer retries for methods with side effects. [#129](https://github.com/openshift/oauth-apiserver/pull/129)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/afe74a0a2f6b4044b6c71feb3bee72ac9380cade...2575ff417406ea6680aff0de6efb524dbbe2b8d2)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/cbd44ad9f0e433d32ff16a2691c6278298afe89a)

* [OCPBUGS-48332](https://issues.redhat.com/browse/OCPBUGS-48332): Update dependencies to address CVE-2024-24786 [#312](https://github.com/openshift/oauth-proxy/pull/312)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/2957f139b4a9982163e4ee76fdc7c532669b6b9f...cbd44ad9f0e433d32ff16a2691c6278298afe89a)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e8ad40cd953a5d8017770a779c7fe7a37492d819)

* fixes CVE-2024-0406 (#1101) [#1101](https://github.com/openshift/oc-mirror/pull/1101)
* v2: disable spinners when not running in a tty (#1082) [#1082](https://github.com/openshift/oc-mirror/pull/1082)
* [OCPBUGS-49990](https://issues.redhat.com/browse/OCPBUGS-49990): v2/release: error out for kubevirt/graph image errors (#1081) [#1081](https://github.com/openshift/oc-mirror/pull/1081)
* [OCPBUGS-50963](https://issues.redhat.com/browse/OCPBUGS-50963): v2: don't clean cluster resources on dry-run mode (#1091) [#1091](https://github.com/openshift/oc-mirror/pull/1091)
* [OCPBUGS-49991](https://issues.redhat.com/browse/OCPBUGS-49991): fixes bundle related images being skipped (#1074) [#1074](https://github.com/openshift/oc-mirror/pull/1074)
* v2/cli: always stop local registry and close registry.log (#1090) [#1090](https://github.com/openshift/oc-mirror/pull/1090)
* [OCPBUGS-44103](https://issues.redhat.com/browse/OCPBUGS-44103): bump oc fork version (#1089) [#1089](https://github.com/openshift/oc-mirror/pull/1089)
* [OCPBUGS-50685](https://issues.redhat.com/browse/OCPBUGS-50685): fixes the code to make the spinner trigger after semaphore is released (#1079) [#1079](https://github.com/openshift/oc-mirror/pull/1079)
* [OCPBUGS-50503](https://issues.redhat.com/browse/OCPBUGS-50503): oc-mirror fails with error `unknown image: reference name is empty` (#1075) [#1075](https://github.com/openshift/oc-mirror/pull/1075)
* [OCPBUGS-49899](https://issues.redhat.com/browse/OCPBUGS-49899): v2/cli: share common flag options (#1067) [#1067](https://github.com/openshift/oc-mirror/pull/1067)
* [OCPBUGS-49723](https://issues.redhat.com/browse/OCPBUGS-49723): v2/clusterresources: remove ClusterCatalog namespace (#1059) [#1059](https://github.com/openshift/oc-mirror/pull/1059)
* [OCPBUGS-49798](https://issues.redhat.com/browse/OCPBUGS-49798): exposes the parallel-layers flag (#1066) [#1066](https://github.com/openshift/oc-mirror/pull/1066)
* [OCPBUGS-49730](https://issues.redhat.com/browse/OCPBUGS-49730): fixes the infinite loop when no images to mirror (#1064) [#1064](https://github.com/openshift/oc-mirror/pull/1064)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/eb818d4c5bea5ac4d42242bac3b2ef11005eb5ad...e8ad40cd953a5d8017770a779c7fe7a37492d819)


### [olm-catalogd](https://github.com/openshift/operator-framework-catalogd/tree/fa0280c39bd3e20e3e2c3a3c6277051a4f81ba5b)

* UPSTREAM: 502: Upgrade golang.org/x/net (#502) [#502](https://github.com/openshift/operator-framework-catalogd/pull/502)
* UPSTREAM: &lt;drop&gt;: Separate CA configuration for pulls vs catalogd services (#1673) [#1673](https://github.com/openshift/operator-framework-catalogd/pull/1673)
* UPSTREAM: &lt;drop&gt;: Revert "UPSTREAM: &lt;drop&gt;: Separate CA configuration for pulls vs catalogd services (#1673)" [#1673](https://github.com/openshift/operator-framework-catalogd/pull/1673)
* [Full changelog](https://github.com/openshift/operator-framework-catalogd/compare/ab7ec240dd7675d7fb0416487adf9d7e096d6421...fa0280c39bd3e20e3e2c3a3c6277051a4f81ba5b)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/481e275e3316037c9d6eec441ec7a5e9d85f4f90)

* UPSTREAM: &lt;drop&gt;: Separate CA configuration for pulls vs catalogd services (#1673) [#1673](https://github.com/openshift/operator-framework-operator-controller/pull/1673)
* UPSTREAM: &lt;drop&gt;: Add support for SSL env vars to cert pool watcher (#1672) [#1672](https://github.com/openshift/operator-framework-operator-controller/pull/1672)
* UPSTREAM: &lt;drop&gt;: Revert "Add support for SSL env vars to cert pool watcher (#1672)" [#1672](https://github.com/openshift/operator-framework-operator-controller/pull/1672)
* UPSTREAM: &lt;drop&gt;: Revert "Separate CA configuration for pulls vs catalogd services (#1673)" [#1673](https://github.com/openshift/operator-framework-operator-controller/pull/1673)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/859b4d2ed92e29ef3a380f65066ecc4511cec6ef...481e275e3316037c9d6eec441ec7a5e9d85f4f90)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/73d65dbb875ed0302360eabdeaf11658752d1499)

* [OCPBUGS-49848](https://issues.redhat.com/browse/OCPBUGS-49848): Prevent storage layer retries for methods with side effects. [#496](https://github.com/openshift/openshift-apiserver/pull/496)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/775f6a1596b3971526db52a70e11d70e044896d5...73d65dbb875ed0302360eabdeaf11658752d1499)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/877b6fd3d425043a1bd45b5d24ecebb69f5544c4)

* [OCPBUGS-50830](https://issues.redhat.com/browse/OCPBUGS-50830), [OCPBUGS-50832](https://issues.redhat.com/browse/OCPBUGS-50832), [OCPBUGS-50836](https://issues.redhat.com/browse/OCPBUGS-50836): Bump github.com/distribution/distribution/v3 [#965](https://github.com/openshift/operator-framework-olm/pull/965)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/182471a8d72ee38d2ff82ce44db6903e66c4b22b...877b6fd3d425043a1bd45b5d24ecebb69f5544c4)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/799f96146c2056a50ae8252a87c03de1cc698f13)

* [OCPBUGS-48710](https://issues.redhat.com/browse/OCPBUGS-48710): DownStream Merge Sync from 4.19 [02-13-2025] [#2470](https://github.com/openshift/ovn-kubernetes/pull/2470)
* [OCPBUGS-50513](https://issues.redhat.com/browse/OCPBUGS-50513), [OCPBUGS-50514](https://issues.redhat.com/browse/OCPBUGS-50514): Downstream Merge 7th Feb 2025 [#2449](https://github.com/openshift/ovn-kubernetes/pull/2449)
* [OCPBUGS-49851](https://issues.redhat.com/browse/OCPBUGS-49851): Bump OVN to 24.09.2-14 for FDP-1131 [#2448](https://github.com/openshift/ovn-kubernetes/pull/2448)
* [OCPBUGS-48337](https://issues.redhat.com/browse/OCPBUGS-48337), [OCPBUGS-49821](https://issues.redhat.com/browse/OCPBUGS-49821), [OCPBUGS-49856](https://issues.redhat.com/browse/OCPBUGS-49856), [OCPBUGS-49857](https://issues.redhat.com/browse/OCPBUGS-49857): [DownstreamMerge] 2-4-25 [#2447](https://github.com/openshift/ovn-kubernetes/pull/2447)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/5086614cde9fbec2cce4c8184ea407adaef5c2a3...799f96146c2056a50ae8252a87c03de1cc698f13)


### [tests](https://github.com/openshift/origin/tree/06834b652e82f05e955b64bc90a8a5eebd795d22)

* [OCPBUGS-50929](https://issues.redhat.com/browse/OCPBUGS-50929): Update to Kubernetes v1.31.6 [#29548](https://github.com/openshift/origin/pull/29548)
* [OCPBUGS-48389](https://issues.redhat.com/browse/OCPBUGS-48389): move initialization of OC to test instead of package level [#29472](https://github.com/openshift/origin/pull/29472)
* [OCPBUGS-50921](https://issues.redhat.com/browse/OCPBUGS-50921): managed services: add hcp crd to unstable list [#29545](https://github.com/openshift/origin/pull/29545)
* [OCPBUGS-50930](https://issues.redhat.com/browse/OCPBUGS-50930): managed services: add known image check for gcp [#29547](https://github.com/openshift/origin/pull/29547)
* [OCPBUGS-48474](https://issues.redhat.com/browse/OCPBUGS-48474): Replace RunHostCmd with Exec function to censor bearer token being exposed [#29377](https://github.com/openshift/origin/pull/29377)
* [OCPBUGS-49687](https://issues.redhat.com/browse/OCPBUGS-49687): Add Readiness Probe to Router Status Tests [#29513](https://github.com/openshift/origin/pull/29513)
* [OCPBUGS-49821](https://issues.redhat.com/browse/OCPBUGS-49821): Allows for backwards compatibility with upcoming network name change [#29527](https://github.com/openshift/origin/pull/29527)
* [OCPBUGS-48403](https://issues.redhat.com/browse/OCPBUGS-48403): Bring groupsnapshot beta feature to 4.18 [#29427](https://github.com/openshift/origin/pull/29427)
* [Full changelog](https://github.com/openshift/origin/compare/4b725c23bcff735e5c257c56afd08e8b10c4b541...06834b652e82f05e955b64bc90a8a5eebd795d22)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/b8ed572d70acddd695a769fac3d1ba93f168fd05)

* [OCPBUGS-50638](https://issues.redhat.com/browse/OCPBUGS-50638): fix panic when vcenter address is incorrect [#293](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/293)
* [OCPBUGS-49863](https://issues.redhat.com/browse/OCPBUGS-49863): Set reconcile-sync to 10 minute for ListVolume [#290](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/290)
* [OCPBUGS-48706](https://issues.redhat.com/browse/OCPBUGS-48706): Escape backslash in vCenter username [#282](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/282)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/73b303ebfdbb31da4879b1ae534cadbb16225135...b8ed572d70acddd695a769fac3d1ba93f168fd05)