4.18.0-okd-scos.1

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.18.0-okd-scos.1

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
- upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

4.18.0-okd-scos.ec.3 - Failed Success
4.18.0-okd-scos.0 (changes) - Failed Success
4.17.0-okd-scos.ec.4 (changes) - Success
4.17.0-okd-scos.3 (changes) - Failed Success

Changes from 4.18.0-okd-scos.ec.3

Created: 2025-02-14 00:08:24 +0000 UTC

Image Digest: sha256:5fcf4a21131ec035c255e33a3e7494aaebad7efd906a55830d204a66c68e66df

Release 4.18.0-okd-scos.1 was created from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-02-13-070311

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.4 to 1.31.5
Kubernetes Tests 1.31.1
CentOS Stream CoreOS upgraded from 418.9.202501310632-0 to 418.9.202502120632-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
NetworkSegmentation (37 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PersistentIPsForVirtualization (12 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

stream-coreos sha256:88ef88189a13debfebab6c0aebcd7f3d5d3e56c584bcfcd5e0952242f17fddf1
stream-coreos-extensions sha256:49902df4773fab56a30c25e2a83a9ea3465766f188dcca340c19b825dd31bfa8

azure-machine-controllers

OCPBUGS-48659: dynamically setting the amount of fault domains #125
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-49792: aws/edge/byovpc: subnets tag kube cluster tag to shared #9430
OCPBUGS-49842: Disable IP Forwarding for CAPG Machines #9434
OCPBUGS-46548: Update RHCOS 4.18 bootimage metadata to 418.94.202501221327-0 #9437
OCPBUGS-49735: aws/byo-ip added required permission ec2:ReleaseAddress #9426
Full changelog

baremetal-operator

OCPBUGS-49699: Handle HFC for non-redfish HW #393
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-48714: monitor should not exit for temp api disconnect #1963
Full changelog

cluster-bootstrap

OCPBUGS-49770: bootstrap API server should terminate only after API is HA #113
Full changelog

cluster-config-api

OCPBUGS-49751: ipam, virt: graduate persistent ips feature gate to GA #2140
OCPBUGS-49809, SDN-5297, SDN-5403: [release-4.18] Graduate UserDefinedNetworks to GA #2127
OCPBUGS-49780: Use BASE_REF env var to pull the release version for sippy data #2191
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-49843: Support HCP labels #227
Full changelog

cluster-etcd-operator

OCPBUGS-49772: Bump library-go for static pod controller apply fixes. #1395
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-50479: Increase waitForFallbackDegradedConditionTimeout #1798
OCPBUGS-49773: Bump library-go for static pod controller apply fixes. #1796
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-49777: Bump library-go for static pod controller apply fixes. #832
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-49776: Bump library-go for static pod controller apply fixes. #559
Full changelog

cluster-network-operator

OCPBUGS-49589: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2631
OCPBUGS-49736: Fix UDN and CUDN hostSubnet validation #2637
OCPBUGS-49670: OVNK should be able to annotate network ID on NADs #2635
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #613
Full changelog

cluster-storage-operator

OCPBUGS-49843: Support HCP labels #552
Full changelog

console

OCPBUGS-49920: fix bug where Search filter dropdown label isn’t i18n #14724
OCPBUGS-48200: ‘create a Project’ button on Getting started page doesn’t work #14672
Full changelog

docker-registry

OCPBUGS-49693: bump docker distribution #421
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-49841: Don’t retry storage calls with side effects. #2197
OCPBUGS-48552: Update to Kubernetes 1.31.5 #2176
OCPBUGS-49782: OCPBUGS-39305: UPSTREAM: <carry>: log only deprecated api requests #2195
OCPBUGS-49749: UPSTREAM: <carry>: disable etcd readiness checks by default #2193
Full changelog

hypershift

OCPBUGS-50550: Honor proxy vars in the util insecure http client #5598
OCPBUGS-49698: Konnectivity: add agent readiness #5521
OCPBUGS-45600: override OpenShiftPodSecurityAdmission featue gate to false for HCP components #5585
OCPBUGS-49827: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5557
OCPBUGS-49904: Use /livez for kubernetes scheduler liveness probe #5567
OCPBUGS-45600: enforce privileged PSA by default #5566
OCPBUGS-49819: Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5548
OCPBUGS-48689: Remove Credentials from the Azure API #5530
Full changelog

ironic

OCPBUGS-49982: Fix runlogwatch failure if LOG_DIR does not exist #636
OCPBUGS-49765: Drop quiet option of grep to avoid race condition with pipefail #632
OCPBUGS-49755: Use pynotify instead of inotify-tools #630
Full changelog

machine-config-operator

OCPBUGS-49774: Correct MachineConfig documentation on sysstat extension support #4829
OCPBUGS-49433: create /run/nodeip-configuration before use #4813
OCPBUGS-46032: Update the storage.conf configuration file template #4751
Full changelog

networking-console-plugin

CNV-56336: fix ipam lifecycle with new spec #213
CNV-56076: create cudn from empty state #211
Fix nads with no label #207
OCPBUGS-49681: Fix weight width #205
Full changelog

oauth-apiserver

OCPBUGS-49847: Prevent storage layer retries for methods with side effects. #129
Full changelog

oc-mirror

OCPBUGS-49899: v2/cli: share common flag options (#1067) #1067
OCPBUGS-49723: v2/clusterresources: remove ClusterCatalog namespace (#1059) #1059
OCPBUGS-49798: exposes the parallel-layers flag (#1066) #1066
OCPBUGS-49730: fixes the infinite loop when no images to mirror (#1064) #1064
Full changelog

olm-catalogd

UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) #1673
UPSTREAM: <drop>: Revert “UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673)” #1673
Full changelog

olm-operator-controller

UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) #1673
UPSTREAM: <drop>: Add support for SSL env vars to cert pool watcher (#1672) #1672
UPSTREAM: <drop>: Revert “Add support for SSL env vars to cert pool watcher (#1672)” #1672
UPSTREAM: <drop>: Revert “Separate CA configuration for pulls vs catalogd services (#1673)” #1673
Full changelog

openshift-apiserver

OCPBUGS-49848: Prevent storage layer retries for methods with side effects. #496
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-50513, OCPBUGS-50514: Downstream Merge 7th Feb 2025 #2449
OCPBUGS-49851: Bump OVN to 24.09.2-14 for FDP-1131 #2448
OCPBUGS-48337, OCPBUGS-49821, OCPBUGS-49856, OCPBUGS-49857: [DownstreamMerge] 2-4-25 #2447
Full changelog

tests

OCPBUGS-48474: Replace RunHostCmd with Exec function to censor bearer token being exposed #29377
OCPBUGS-49687: Add Readiness Probe to Router Status Tests #29513
OCPBUGS-49821: Allows for backwards compatibility with upcoming network name change #29527
OCPBUGS-48403: Bring groupsnapshot beta feature to 4.18 #29427
Full changelog

vsphere-csi-driver-operator

OCPBUGS-49863: Set reconcile-sync to 10 minute for ListVolume #290
OCPBUGS-48706: Escape backslash in vCenter username #282
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github