Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.18.0-okd-scos.3

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.18.0-okd-scos.ec.3 (changes) - Success
• 4.18.0-okd-scos.2 - Success
• 4.18.0-okd-scos.1 (changes) - Success
• 4.17.0-okd-scos.ec.4 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.18.0-okd-scos.2

Created: 2025-03-07 16:35:07 +0000 UTC

Image Digest: sha256:d74ade7b8c381ef12bf9a77291f4f864e4c282df35d5299419efbee5cc6ead8b

Release 4.18.0-okd-scos.3 was created from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-04-193655

Components

• Kubectl 1.31.1
• Kubernetes 1.31.6
• Kubernetes Tests upgraded from 1.31.1 to 1.31.6
• CentOS Stream CoreOS upgraded from 418.9.202502240632-0 to 418.9.202503040632-0 (diff)

Removed images

• ovirt-machine-controllers

Rebuilt images without code change

• stream-coreos sha256:e563baf4606cb73b4831635a94a17f2219afb5e713f9732ac85a1842a5e4d984
• stream-coreos-extensions sha256:61f686a5060c15e7dcd0cc8a4d77e9424153b5829eec54fed8b980e9b529a461

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-45116: Add retry to mount efi device (#1030) #1030
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Increase image pull timeout during install (#907) #907
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-50556: UPSTREAM: 5339: Bump glog for recent fixes #537
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-49843: Support HCP labels #356
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
• OCPBUGS-50524: Add cluster:master_nodes metric retrieval in docs #9449
• OCPBUGS-49864: handle runtime panic when validating ovnKubernetesConfig #9435
• OCPBUGS-49320: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9402
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-49440: Address golang.org/x/* CVEs #1961
• Full changelog

cluster-config-api

• OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
• OCPBUGS-51077: [4.18] bump controller-tools dependency to latest downstream commit #2210
• Full changelog

cluster-ingress-operator

• OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
• OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-46411: skip generating certs when networkConfig.status.ServiceNetwork is nil #1780
• Full changelog

cluster-network-operator

• OCPBUGS-50625: Cherry-pick RouteAdvertisements support back to 4.18 #2645
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
• e2e: common way to fetch poolName (#1255) (#1300) #1255
• Full changelog

cluster-storage-operator

• OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
• Full changelog

console

• OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
• OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
• OCPBUGS-51180: Linkify OLM operator uninstall message #14789
• OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
• OCPBUGS-50647: Enable web terminal tests #14758
• OCPBUGS-50573: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14755
• OCPBUGS-49867: Add support for conditional CSP headers #14720
• OCPBUGS-48736: update variable name for plugin name parsing #14696
• OCPBUGS-49921: fix run time error when no completed version exists #14743
• Full changelog

console-operator

• OCPBUGS-49867: Add ConsolePluginContentSecurityPolicy feature gate to… #959
• Full changelog

docker-builder

• OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
• Full changelog

etcd, installer-etcd-artifacts

• ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
• Full changelog

haproxy-router

• OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
• OCPBUGS-49389: Reject All CA-Signed Certs Using SHA1 #649
• Full changelog

hypershift

• OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
• OCPBUGS-50696: add region to AWS creds passed to operators managed by CPO #5629
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-50565: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 #100
• Full changelog

insights-operator

• OCPBUGS-48790: Add a liveness probe to the extractor container (#1068) #1068
• Full changelog

machine-api-operator

• OCPBUGS-51263: Drop oVirt support #1333
• CORS-3741: [Nutanix] support multi-subnets in Machine providerSpec #1301
• Full changelog

machine-config-operator

• OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
• OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
• OCPBUGS-48341: configure-ovs workaround for ovs-if-br-ex bug #4883
• OCPBUGS-51015: Enforce VIPs to be collocated at the same host #4865
• OCPBUGS-51194: Update cluster-reader ClusterRole permissions #4874
• OCPBUGS-50633: Update format verbs for alert logs #4849
• Full changelog

machine-os-images

• OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
• OCPBUGS-45456: Fix shellcheck #47
• Full changelog

nutanix-machine-controllers

• OCPBUGS-47268: fixing CVE-2024-45338 #91
• Full changelog

oauth-proxy

• OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
• Full changelog

oc-mirror

• fixes CVE-2024-0406 (#1101) #1101
• v2: disable spinners when not running in a tty (#1082) #1082
• OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
• OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1091) #1091
• OCPBUGS-49991: fixes bundle related images being skipped (#1074) #1074
• v2/cli: always stop local registry and close registry.log (#1090) #1090
• OCPBUGS-44103: bump oc fork version (#1089) #1089
• OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1079) #1079
• OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1075) #1075
• Full changelog

olm-catalogd

• UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
• Full changelog

tests

• OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
• OCPBUGS-48389: move initialization of OC to test instead of package level #29472
• OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
• OCPBUGS-50930: managed services: add known image check for gcp #29547
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-50638: fix panic when vcenter address is incorrect #293
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.19.0-0.okd-scos-2025-03-12-1507334.19.0-0.okd-scos-2025-03-12-0307334.19.0-0.okd-scos-2025-03-11-1507334.19.0-0.okd-scos-2025-03-11-0307334.19.0-0.okd-scos-2025-03-10-1507334.19.0-0.okd-scos-2025-03-10-030733───4.18.0-0.okd-scos-2025-03-12-1937004.18.0-0.okd-scos-2025-03-12-0736594.18.0-0.okd-scos-2025-03-11-1936584.18.0-0.okd-scos-2025-03-11-0736574.18.0-0.okd-scos-2025-03-10-1936564.18.0-0.okd-scos-2025-03-10-073655───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-02-12-1007064.15.0-0.okd-2025-01-28-0547464.15.0-0.okd-2025-01-23-1504044.15.0-0.okd-2024-12-16-1952254.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github