Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.18.0-okd-scos.4

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.18.0-okd-scos.ec.3 - Success
• 4.18.0-okd-scos.3 (changes) - Success
• 4.18.0-okd-scos.2 (changes) - Success
• 4.17.0-okd-scos.ec.4 (changes) - Success

Upgrades to:

• 4.18.0-okd-scos.6 (changes) - Success
• 4.18.0-okd-scos.5 (changes) - Failed Success

---

Loading changelog, this may take a while ...

Changes from 4.18.0-okd-scos.ec.3

Created: 2025-03-15 02:37:21 +0000 UTC

Image Digest: sha256:1fd37714fc0216d5f40197f841f2083df9d1008ae64567cbc50d5c761fb6de80

Release 4.18.0-okd-scos.4 was created from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-14-073703

Components

• Kubectl 1.31.1
• Kubernetes upgraded from 1.31.4 to 1.31.6
• Kubernetes Tests upgraded from 1.31.1 to 1.31.6
• CentOS Stream CoreOS upgraded from 418.9.202501310632-0 to 418.9.202503140633-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
NetworkSegmentation (37 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PersistentIPsForVirtualization (12 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Removed images

• ovirt-machine-controllers

Rebuilt images without code change

• stream-coreos sha256:073b0d42818f032b1aa55b1f41598634eaf3bb72e3f34848331aadeccccaa04d
• stream-coreos-extensions sha256:950b469535fae344ce30a018291173190d95a8bb840df79f1ea89b15da00d963

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-45116: Add retry to mount efi device (#1030) #1030
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Increase image pull timeout during install (#907) #907
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-50556: UPSTREAM: 5339: Bump glog for recent fixes #537
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-49843: Support HCP labels #356
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-51231: github.com/go-jose/go-jose/v4 v4.0.5 #201
• Full changelog

azure-machine-controllers

• OCPBUGS-48659: dynamically setting the amount of fault domains #125
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
• OCPBUGS-50524: Add cluster:master_nodes metric retrieval in docs #9449
• OCPBUGS-49864: handle runtime panic when validating ovnKubernetesConfig #9435
• OCPBUGS-49320: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9402
• OCPBUGS-50870: PowerVS: destroy dhcp hack #9483
• OCPBUGS-50877: correct typo #9485
• OCPBUGS-49792: aws/edge/byovpc: subnets tag kube cluster tag to shared #9430
• OCPBUGS-49842: Disable IP Forwarding for CAPG Machines #9434
• OCPBUGS-46548: Update RHCOS 4.18 bootimage metadata to 418.94.202501221327-0 #9437
• OCPBUGS-49735: aws/byo-ip added required permission ec2:ReleaseAddress #9426
• Full changelog

baremetal-operator

• OCPBUGS-45250: Remove dataImage finalizer if BMH is missing #389
• OCPBUGS-49699: Handle HFC for non-redfish HW #393
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-49440: Address golang.org/x/* CVEs #1961
• OCPBUGS-48714: monitor should not exit for temp api disconnect #1963
• Full changelog

cloud-credential-operator

• OCPBUGS-51237: github.com/go-jose/go-jose/v4 v4.0.5 #824
• Full changelog

cluster-bootstrap

• OCPBUGS-49770: bootstrap API server should terminate only after API is HA #113
• Full changelog

cluster-config-api

• OCPBUGS-51295, OCPBUGS-51380: Reject new NodeStatus with revision set #2215
• OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
• OCPBUGS-51077: [4.18] bump controller-tools dependency to latest downstream commit #2210
• OCPBUGS-49751: ipam, virt: graduate persistent ips feature gate to GA #2140
• OCPBUGS-49809, SDN-5297, SDN-5403: [release-4.18] Graduate UserDefinedNetworks to GA #2127
• OCPBUGS-49780: Use BASE_REF env var to pull the release version for sippy data #2191
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-49843: Support HCP labels #227
• Full changelog

cluster-dns-operator

• OCPBUGS-52514: [release-4.18] Add runbook_url for CoreDNSErrorsHigh #429
• Full changelog

cluster-etcd-operator

• OCPBUGS-49772: Bump library-go for static pod controller apply fixes. #1395
• Full changelog

cluster-image-registry-operator

• OCPBUGS-51018: ensure that storage names don’t end in dashes #1179
• Full changelog

cluster-ingress-operator

• OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
• OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-46411: skip generating certs when networkConfig.status.ServiceNetwork is nil #1780
• OCPBUGS-50479: Increase waitForFallbackDegradedConditionTimeout #1798
• OCPBUGS-49773: Bump library-go for static pod controller apply fixes. #1796
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-49777: Bump library-go for static pod controller apply fixes. #832
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-49776: Bump library-go for static pod controller apply fixes. #559
• Full changelog

cluster-monitoring-operator

• OCPBUGS-52565: Bump prometheus-operator to 0.78.2 #2576
• OCPBUGS-50706: Add incidents metric to telemetry #2570
• Full changelog

cluster-network-operator

• OCPBUGS-48305: frr-k8s: align manifests with operator #2657
• OCPBUGS-41178: Updating cluster-network-operator-container image to be consistent with ART for 4.18 #2491
• OCPBUGS-50625: Cherry-pick RouteAdvertisements support back to 4.18 #2645
• OCPBUGS-49589: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2631
• OCPBUGS-49736: Fix UDN and CUDN hostSubnet validation #2637
• OCPBUGS-49670: OVNK should be able to annotate network ID on NADs #2635
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) (#1306) #1303
• machineconfig: add support for various hugepage sizes. (#1299) #1299
• OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
• e2e: common way to fetch poolName (#1255) (#1300) #1255
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #613
• Full changelog

cluster-storage-operator

• OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
• OCPBUGS-49843: Support HCP labels #552
• Full changelog

console

• OCPBUGS-52371: Update the monitoring topic used by the console team #14832
• OCPBUGS-52490: enable clicking outside NodeLogs Selects to close them #14843
• OCPBUGS-50501: Updating cypress config to have video enabled for the CI results #14831
• OCPBUGS-52511: Remove logoutOpenShift method call #14845
• OCPBUGS-50609: update the Deployment pod on change in imageStream #14757
• OCPBUGS-50648: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14761
• OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
• OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
• OCPBUGS-51180: Linkify OLM operator uninstall message #14789
• OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
• OCPBUGS-50647: Enable web terminal tests #14758
• OCPBUGS-50573: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14755
• OCPBUGS-49867: Add support for conditional CSP headers #14720
• OCPBUGS-48736: update variable name for plugin name parsing #14696
• OCPBUGS-49921: fix run time error when no completed version exists #14743
• OCPBUGS-49920: fix bug where Search filter dropdown label isn’t i18n #14724
• OCPBUGS-48200: ‘create a Project’ button on Getting started page doesn’t work #14672
• Full changelog

console-operator

• OCPBUGS-52294: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #966
• OCPBUGS-49867: Add ConsolePluginContentSecurityPolicy feature gate to… #959
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-43430: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 #312
• Full changelog

docker-builder

• OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
• Full changelog

docker-registry

• OCPBUGS-49693: bump docker distribution #421
• Full changelog

etcd, installer-etcd-artifacts

• DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue #312
• ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
• Full changelog

haproxy-router

• OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
• OCPBUGS-49389: Reject All CA-Signed Certs Using SHA1 #649
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-50929: Update to Kubernetes v1.31.6 #2208
• OCPBUGS-49841: Don’t retry storage calls with side effects. #2197
• OCPBUGS-48552: Update to Kubernetes 1.31.5 #2176
• OCPBUGS-49782: OCPBUGS-39305: UPSTREAM: <carry>: log only deprecated api requests #2195
• OCPBUGS-49749: UPSTREAM: <carry>: disable etcd readiness checks by default #2193
• Full changelog

hypershift

• OCPBUGS-52863: stop using dev mode for loggers #5811
• OCPBUGS-52878: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5780
• OCPBUGS-52516: Make managed-trust-bundle optional #5783
• OCPBUGS-52417: [release-4.18] refactor aws identity health check into new controller #5770
• OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
• OCPBUGS-50696: add region to AWS creds passed to operators managed by CPO #5629
• OCPBUGS-51050: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5667
• NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 #5640
• NO-JIRA: Update dependency mkdocs to v1.6.1 #5638
• OCPBUGS-50550: Honor proxy vars in the util insecure http client #5598
• OCPBUGS-49698: Konnectivity: add agent readiness #5521
• OCPBUGS-45600: override OpenShiftPodSecurityAdmission featue gate to false for HCP components #5585
• OCPBUGS-49827: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5557
• OCPBUGS-49904: Use /livez for kubernetes scheduler liveness probe #5567
• OCPBUGS-45600: enforce privileged PSA by default #5566
• OCPBUGS-49819: Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5548
• OCPBUGS-48689: Remove Credentials from the Azure API #5530
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-50565: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 #100
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-52872: IBMCloud: MAPI replacing unhealthy CP nodes #62
• Full changelog

insights-operator

• OCPBUGS-48790: Add a liveness probe to the extractor container (#1068) #1068
• Full changelog

ironic

• OCPBUGS-52290: Fix runlogwatch script #642
• OCPBUGS-50641: Install python3-inotify pkg explicitly #639
• OCPBUGS-49982: Fix runlogwatch failure if LOG_DIR does not exist #636
• OCPBUGS-49765: Drop quiet option of grep to avoid race condition with pipefail #632
• OCPBUGS-49755: Use pynotify instead of inotify-tools #630
• Full changelog

machine-api-operator

• OCPBUGS-52494, OCPBUGS-52496: Updates GCP credentials request #1341
• OCPBUGS-52567: add image/read permissions #1342
• OCPBUGS-51263: Drop oVirt support #1333
• CORS-3741: [Nutanix] support multi-subnets in Machine providerSpec #1301
• Full changelog

machine-config-operator

• [release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built #4859
• OCPBUGS-50865: Make resolv-prepender env file optional #4855
• OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
• OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
• OCPBUGS-48341: configure-ovs workaround for ovs-if-br-ex bug #4883
• OCPBUGS-51015: Enforce VIPs to be collocated at the same host #4865
• OCPBUGS-51194: Update cluster-reader ClusterRole permissions #4874
• OCPBUGS-50633: Update format verbs for alert logs #4849
• OCPBUGS-49774: Correct MachineConfig documentation on sysstat extension support #4829
• OCPBUGS-49433: create /run/nodeip-configuration before use #4813
• OCPBUGS-46032: Update the storage.conf configuration file template #4751
• Full changelog

machine-os-images

• OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
• OCPBUGS-45456: Fix shellcheck #47
• Full changelog

networking-console-plugin

• CNV-56436: show ipam lifecycle correctly with new spec #220
• CNV-56236: fix cudn modal form titles #219
• CNV-56336: fix ipam lifecycle with new spec #213
• CNV-56076: create cudn from empty state #211
• Fix nads with no label #207
• OCPBUGS-49681: Fix weight width #205
• Full changelog

nutanix-machine-controllers

• OCPBUGS-47268: fixing CVE-2024-45338 #91
• Full changelog

oauth-apiserver

• OCPBUGS-49847: Prevent storage layer retries for methods with side effects. #129
• Full changelog

oauth-proxy

• OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
• Full changelog

oc-mirror

• OCPBUGS-52588: fix: error when no related image was found (#1106) #1106
• CLID-325: adds cpu and memory profiling (#1103) #1103
• fixes CVE-2024-0406 (#1101) #1101
• v2: disable spinners when not running in a tty (#1082) #1082
• OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
• OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1091) #1091
• OCPBUGS-49991: fixes bundle related images being skipped (#1074) #1074
• v2/cli: always stop local registry and close registry.log (#1090) #1090
• OCPBUGS-44103: bump oc fork version (#1089) #1089
• OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1079) #1079
• OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1075) #1075
• OCPBUGS-49899: v2/cli: share common flag options (#1067) #1067
• OCPBUGS-49723: v2/clusterresources: remove ClusterCatalog namespace (#1059) #1059
• OCPBUGS-49798: exposes the parallel-layers flag (#1066) #1066
• OCPBUGS-49730: fixes the infinite loop when no images to mirror (#1064) #1064
• Full changelog

olm-catalogd

• UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
• UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) #1673
• UPSTREAM: <drop>: Revert “UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673)” #1673
• Full changelog

olm-operator-controller

• UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) #1673
• UPSTREAM: <drop>: Add support for SSL env vars to cert pool watcher (#1672) #1672
• UPSTREAM: <drop>: Revert “Add support for SSL env vars to cert pool watcher (#1672)” #1672
• UPSTREAM: <drop>: Revert “Separate CA configuration for pulls vs catalogd services (#1673)” #1673
• Full changelog

openshift-apiserver

• OCPBUGS-49848: Prevent storage layer retries for methods with side effects. #496
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-53040: add missing pod disruption reasons to isPodDead #981
• OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
• OCPBUGS-50513, OCPBUGS-50514: Downstream Merge 7th Feb 2025 #2449
• OCPBUGS-49851: Bump OVN to 24.09.2-14 for FDP-1131 #2448
• OCPBUGS-48337, OCPBUGS-49821, OCPBUGS-49856, OCPBUGS-49857: [DownstreamMerge] 2-4-25 #2447
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-52565: Bump openshift/prometheus-operator to v0.78.2 #327
• Full changelog

tests

• OCPBUGS-52579: Use payload pullspec for image info test #29587
• OCPBUGS-51295: Rely on unstructured for update status instead of type conversion #29564
• OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
• OCPBUGS-48389: move initialization of OC to test instead of package level #29472
• OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
• OCPBUGS-50930: managed services: add known image check for gcp #29547
• OCPBUGS-48474: Replace RunHostCmd with Exec function to censor bearer token being exposed #29377
• OCPBUGS-49687: Add Readiness Probe to Router Status Tests #29513
• OCPBUGS-49821: Allows for backwards compatibility with upcoming network name change #29527
• OCPBUGS-48403: Bring groupsnapshot beta feature to 4.18 #29427
• Full changelog

thanos

• OCPBUGS-52945: Update Go version in go.mod to 1.22.0 #159
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-50638: fix panic when vcenter address is incorrect #293
• OCPBUGS-49863: Set reconcile-sync to 10 minute for ListVolume #290
• OCPBUGS-48706: Escape backslash in vCenter username #282
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.19.0-0.okd-scos-2025-04-01-0551514.19.0-0.okd-scos-2025-03-31-1751504.19.0-0.okd-scos-2025-03-31-0551494.19.0-0.okd-scos-2025-03-30-1751484.19.0-0.okd-scos-2025-03-30-0551474.19.0-0.okd-scos-2025-03-29-175146───4.18.0-0.okd-scos-2025-04-01-0145544.18.0-0.okd-scos-2025-03-31-1345544.18.0-0.okd-scos-2025-03-31-0145544.18.0-0.okd-scos-2025-03-29-1015314.18.0-0.okd-scos-2025-03-28-221531───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2025-03-25-1331074.15.0-0.okd-2025-03-13-2041304.15.0-0.okd-2025-02-12-1007064.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.19.0-okd-scos.ec.64.19.0-okd-scos.ec.54.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github