Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.18.0-okd-scos.3

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.18.0-okd-scos.ec.3 - Success
• 4.18.0-okd-scos.2 (changes) - Success
• 4.18.0-okd-scos.1 (changes) - Success
• 4.17.0-okd-scos.ec.4 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.18.0-okd-scos.ec.3

Created: 2025-03-07 16:35:07 +0000 UTC

Image Digest: sha256:d74ade7b8c381ef12bf9a77291f4f864e4c282df35d5299419efbee5cc6ead8b

Release 4.18.0-okd-scos.3 was created from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-04-193655

Components

• Kubectl 1.31.1
• Kubernetes upgraded from 1.31.4 to 1.31.6
• Kubernetes Tests upgraded from 1.31.1 to 1.31.6
• CentOS Stream CoreOS upgraded from 418.9.202501310632-0 to 418.9.202503040632-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
NetworkSegmentation (37 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PersistentIPsForVirtualization (12 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Removed images

• ovirt-machine-controllers

Rebuilt images without code change

• stream-coreos sha256:e563baf4606cb73b4831635a94a17f2219afb5e713f9732ac85a1842a5e4d984
• stream-coreos-extensions sha256:61f686a5060c15e7dcd0cc8a4d77e9424153b5829eec54fed8b980e9b529a461

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-45116: Add retry to mount efi device (#1030) #1030
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Increase image pull timeout during install (#907) #907
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-50556: UPSTREAM: 5339: Bump glog for recent fixes #537
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-49843: Support HCP labels #356
• Full changelog

azure-machine-controllers

• OCPBUGS-48659: dynamically setting the amount of fault domains #125
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
• OCPBUGS-50524: Add cluster:master_nodes metric retrieval in docs #9449
• OCPBUGS-49864: handle runtime panic when validating ovnKubernetesConfig #9435
• OCPBUGS-49320: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9402
• OCPBUGS-50870: PowerVS: destroy dhcp hack #9483
• OCPBUGS-50877: correct typo #9485
• OCPBUGS-49792: aws/edge/byovpc: subnets tag kube cluster tag to shared #9430
• OCPBUGS-49842: Disable IP Forwarding for CAPG Machines #9434
• OCPBUGS-46548: Update RHCOS 4.18 bootimage metadata to 418.94.202501221327-0 #9437
• OCPBUGS-49735: aws/byo-ip added required permission ec2:ReleaseAddress #9426
• Full changelog

baremetal-operator

• OCPBUGS-49699: Handle HFC for non-redfish HW #393
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-49440: Address golang.org/x/* CVEs #1961
• OCPBUGS-48714: monitor should not exit for temp api disconnect #1963
• Full changelog

cluster-bootstrap

• OCPBUGS-49770: bootstrap API server should terminate only after API is HA #113
• Full changelog

cluster-config-api

• OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
• OCPBUGS-51077: [4.18] bump controller-tools dependency to latest downstream commit #2210
• OCPBUGS-49751: ipam, virt: graduate persistent ips feature gate to GA #2140
• OCPBUGS-49809, SDN-5297, SDN-5403: [release-4.18] Graduate UserDefinedNetworks to GA #2127
• OCPBUGS-49780: Use BASE_REF env var to pull the release version for sippy data #2191
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-49843: Support HCP labels #227
• Full changelog

cluster-etcd-operator

• OCPBUGS-49772: Bump library-go for static pod controller apply fixes. #1395
• Full changelog

cluster-image-registry-operator

• OCPBUGS-51018: ensure that storage names don’t end in dashes #1179
• Full changelog

cluster-ingress-operator

• OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
• OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-46411: skip generating certs when networkConfig.status.ServiceNetwork is nil #1780
• OCPBUGS-50479: Increase waitForFallbackDegradedConditionTimeout #1798
• OCPBUGS-49773: Bump library-go for static pod controller apply fixes. #1796
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-49777: Bump library-go for static pod controller apply fixes. #832
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-49776: Bump library-go for static pod controller apply fixes. #559
• Full changelog

cluster-network-operator

• OCPBUGS-50625: Cherry-pick RouteAdvertisements support back to 4.18 #2645
• OCPBUGS-49589: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2631
• OCPBUGS-49736: Fix UDN and CUDN hostSubnet validation #2637
• OCPBUGS-49670: OVNK should be able to annotate network ID on NADs #2635
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
• e2e: common way to fetch poolName (#1255) (#1300) #1255
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-49749: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #613
• Full changelog

cluster-storage-operator

• OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
• OCPBUGS-49843: Support HCP labels #552
• Full changelog

console

• OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
• OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
• OCPBUGS-51180: Linkify OLM operator uninstall message #14789
• OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
• OCPBUGS-50647: Enable web terminal tests #14758
• OCPBUGS-50573: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14755
• OCPBUGS-49867: Add support for conditional CSP headers #14720
• OCPBUGS-48736: update variable name for plugin name parsing #14696
• OCPBUGS-49921: fix run time error when no completed version exists #14743
• OCPBUGS-49920: fix bug where Search filter dropdown label isn’t i18n #14724
• OCPBUGS-48200: ‘create a Project’ button on Getting started page doesn’t work #14672
• Full changelog

console-operator

• OCPBUGS-49867: Add ConsolePluginContentSecurityPolicy feature gate to… #959
• Full changelog

docker-builder

• OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
• Full changelog

docker-registry

• OCPBUGS-49693: bump docker distribution #421
• Full changelog

etcd, installer-etcd-artifacts

• ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
• Full changelog

haproxy-router

• OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
• OCPBUGS-49389: Reject All CA-Signed Certs Using SHA1 #649
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-50929: Update to Kubernetes v1.31.6 #2208
• OCPBUGS-49841: Don’t retry storage calls with side effects. #2197
• OCPBUGS-48552: Update to Kubernetes 1.31.5 #2176
• OCPBUGS-49782: OCPBUGS-39305: UPSTREAM: <carry>: log only deprecated api requests #2195
• OCPBUGS-49749: UPSTREAM: <carry>: disable etcd readiness checks by default #2193
• Full changelog

hypershift

• OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
• OCPBUGS-50696: add region to AWS creds passed to operators managed by CPO #5629
• OCPBUGS-51050: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5667
• NO-JIRA: Update dependency mkdocs-mermaid2-plugin to v1.2.1 #5640
• NO-JIRA: Update dependency mkdocs to v1.6.1 #5638
• OCPBUGS-50550: Honor proxy vars in the util insecure http client #5598
• OCPBUGS-49698: Konnectivity: add agent readiness #5521
• OCPBUGS-45600: override OpenShiftPodSecurityAdmission featue gate to false for HCP components #5585
• OCPBUGS-49827: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5557
• OCPBUGS-49904: Use /livez for kubernetes scheduler liveness probe #5567
• OCPBUGS-45600: enforce privileged PSA by default #5566
• OCPBUGS-49819: Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5548
• OCPBUGS-48689: Remove Credentials from the Azure API #5530
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-50565: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 #100
• Full changelog

insights-operator

• OCPBUGS-48790: Add a liveness probe to the extractor container (#1068) #1068
• Full changelog

ironic

• OCPBUGS-50641: Install python3-inotify pkg explicitly #639
• OCPBUGS-49982: Fix runlogwatch failure if LOG_DIR does not exist #636
• OCPBUGS-49765: Drop quiet option of grep to avoid race condition with pipefail #632
• OCPBUGS-49755: Use pynotify instead of inotify-tools #630
• Full changelog

machine-api-operator

• OCPBUGS-51263: Drop oVirt support #1333
• CORS-3741: [Nutanix] support multi-subnets in Machine providerSpec #1301
• Full changelog

machine-config-operator

• OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
• OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
• OCPBUGS-48341: configure-ovs workaround for ovs-if-br-ex bug #4883
• OCPBUGS-51015: Enforce VIPs to be collocated at the same host #4865
• OCPBUGS-51194: Update cluster-reader ClusterRole permissions #4874
• OCPBUGS-50633: Update format verbs for alert logs #4849
• OCPBUGS-49774: Correct MachineConfig documentation on sysstat extension support #4829
• OCPBUGS-49433: create /run/nodeip-configuration before use #4813
• OCPBUGS-46032: Update the storage.conf configuration file template #4751
• Full changelog

machine-os-images

• OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
• OCPBUGS-45456: Fix shellcheck #47
• Full changelog

networking-console-plugin

• CNV-56436: show ipam lifecycle correctly with new spec #220
• CNV-56236: fix cudn modal form titles #219
• CNV-56336: fix ipam lifecycle with new spec #213
• CNV-56076: create cudn from empty state #211
• Fix nads with no label #207
• OCPBUGS-49681: Fix weight width #205
• Full changelog

nutanix-machine-controllers

• OCPBUGS-47268: fixing CVE-2024-45338 #91
• Full changelog

oauth-apiserver

• OCPBUGS-49847: Prevent storage layer retries for methods with side effects. #129
• Full changelog

oauth-proxy

• OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
• Full changelog

oc-mirror

• fixes CVE-2024-0406 (#1101) #1101
• v2: disable spinners when not running in a tty (#1082) #1082
• OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
• OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1091) #1091
• OCPBUGS-49991: fixes bundle related images being skipped (#1074) #1074
• v2/cli: always stop local registry and close registry.log (#1090) #1090
• OCPBUGS-44103: bump oc fork version (#1089) #1089
• OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1079) #1079
• OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1075) #1075
• OCPBUGS-49899: v2/cli: share common flag options (#1067) #1067
• OCPBUGS-49723: v2/clusterresources: remove ClusterCatalog namespace (#1059) #1059
• OCPBUGS-49798: exposes the parallel-layers flag (#1066) #1066
• OCPBUGS-49730: fixes the infinite loop when no images to mirror (#1064) #1064
• Full changelog

olm-catalogd

• UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
• UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) #1673
• UPSTREAM: <drop>: Revert “UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673)” #1673
• Full changelog

olm-operator-controller

• UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) #1673
• UPSTREAM: <drop>: Add support for SSL env vars to cert pool watcher (#1672) #1672
• UPSTREAM: <drop>: Revert “Add support for SSL env vars to cert pool watcher (#1672)” #1672
• UPSTREAM: <drop>: Revert “Separate CA configuration for pulls vs catalogd services (#1673)” #1673
• Full changelog

openshift-apiserver

• OCPBUGS-49848: Prevent storage layer retries for methods with side effects. #496
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
• OCPBUGS-50513, OCPBUGS-50514: Downstream Merge 7th Feb 2025 #2449
• OCPBUGS-49851: Bump OVN to 24.09.2-14 for FDP-1131 #2448
• OCPBUGS-48337, OCPBUGS-49821, OCPBUGS-49856, OCPBUGS-49857: [DownstreamMerge] 2-4-25 #2447
• Full changelog

tests

• OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
• OCPBUGS-48389: move initialization of OC to test instead of package level #29472
• OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
• OCPBUGS-50930: managed services: add known image check for gcp #29547
• OCPBUGS-48474: Replace RunHostCmd with Exec function to censor bearer token being exposed #29377
• OCPBUGS-49687: Add Readiness Probe to Router Status Tests #29513
• OCPBUGS-49821: Allows for backwards compatibility with upcoming network name change #29527
• OCPBUGS-48403: Bring groupsnapshot beta feature to 4.18 #29427
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-50638: fix panic when vcenter address is incorrect #293
• OCPBUGS-49863: Set reconcile-sync to 10 minute for ListVolume #290
• OCPBUGS-48706: Escape backslash in vCenter username #282
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.19.0-0.okd-scos-2025-03-14-1507334.19.0-0.okd-scos-2025-03-14-0307334.19.0-0.okd-scos-2025-03-13-1507334.19.0-0.okd-scos-2025-03-13-0307334.19.0-0.okd-scos-2025-03-12-1507334.19.0-0.okd-scos-2025-03-12-0307334.19.0-0.okd-scos-2025-03-11-1507334.19.0-0.okd-scos-2025-03-11-030733───4.18.0-0.okd-scos-2025-03-14-0737034.18.0-0.okd-scos-2025-03-13-1937024.18.0-0.okd-scos-2025-03-13-0737014.18.0-0.okd-scos-2025-03-12-1937004.18.0-0.okd-scos-2025-03-12-0736594.18.0-0.okd-scos-2025-03-11-193658───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-03-13-2041304.15.0-0.okd-2025-02-12-1007064.15.0-0.okd-2025-01-28-0547464.15.0-0.okd-2025-01-23-1504044.15.0-0.okd-2024-12-16-1952254.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github