Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.18.0-okd-scos.ec.3

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.18.0-okd-scos.ec.1 - Success
• 4.17.0-okd-scos.ec.4 (changes) - Success

---

Changes from 4.18.0-okd-scos.ec.1

Created: 2025-02-03 18:58:58 +0000 UTC

Image Digest: sha256:43d52190f8c7b1aa6d91ebc988ad491dc986f79055d81fbff57297934e15a69d

Release 4.18.0-okd-scos.ec.3 was created from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-02-02-055057

Components

• Kubectl 1.31.1
• Kubernetes 1.31.4
• Kubernetes Tests 1.31.1
• CentOS Stream CoreOS upgraded from 418.9.202501200632-0 to 418.9.202501310632-0 (diff)

Rebuilt images without code change

• stream-coreos sha256:71c90cc92da5c92f87675a3b72836dfe9ab11620e8472c87ade94a85a38e07b0
• stream-coreos-extensions sha256:046f5adb4ec2f71d067b0b7b4a135bcdfb03b6977e0b28999be8314c353abe60

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-48609: openstack-manila: update PodDisruptionBudget name #355
• Full changelog

azure-disk-csi-driver

• OCPBUGS-48705: update max data disk count table #96
• OCPBUGS-48682: Rebase to upstream v1.31.1 for OCP 4.18 and downgrade golang to 1.22 #95
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-49599: Envtest: Configure IPv6 service network for API Service #9418
• OCPBUGS-46533: Add note about additional networks using IPv6 #9324
• OCPBUGS-49383: [release-4.18] MGMT-19771: Convert IDS to proper IDMS manifest #9400
• OCPBUGS-49148: [Nutanix] Installation failed with timeout when uploading images to PC #9399
• OCPBUGS-48757: Add new tested azure arm instance type to doc #9390
• OCPBUGS-48671: Find instances by label GCP #9382
• OCPBUGS-48581: Run iscsiadm for agent-based iSCSI installations #9379
• OCPBUGS-48611: Destroy all private cluster backend service resources #9380
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-49604: Address github.com/docker/docker CVE #1967
• Full changelog

cluster-autoscaler

• OCPBUGS-46416: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #333
• OCPBUGS-45146: [release-4.18] VPA: Update OWNERS file #323
• Full changelog

cluster-config-api

• OCPBUGS-48377: Add IdleCloseOnResponse field to IngressControllerSpec #2178
• OCPBUGS-48502: StaticPodOperatorStatus validation should reject downgrades and concurrent node rollouts #2152
• Full changelog

cluster-network-operator

• OCPBUGS-48443: ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs #2627
• (https://issues.redhat.com//browse/SDN-5426): ©UDN CRD: add IPAM section and IPAM.Mode field #2629
• OCPBUGS-48710, SDN-4930: Disable adding/removing the UDN namespace label #2626
• OCPBUGS-48710, SDN-4930: Add host isolation mounts to ovnkube-node #2620
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-49404: E2E: Add test cases to verify PerPodPowerManagement with PPC (#1293) #1293
• use ROLE_WORKER_CNF environment variable to determine mcp name (#1287) #1287
• Full changelog

cluster-samples-operator

• OCPBUGS-48755: add shannon and aroyoredhat as owners #594
• Full changelog

cluster-storage-operator

• OCPBUGS-45738: Remove unecessary resources from the guest cluster #547
• Full changelog

cluster-version-operator

• OCPBUGS-46410: Set openshift.io/required-scc: privileged annotation in version pods #1129
• OCPBUGS-45327: deps: bump golang.org/x/net to 0.31.0 #1116
• Full changelog

console

• OCPBUGS-47803: prefer OpenShift release version in telemetry events #14661
• OCPBUGS-48181: Add ocm url to csp allowlist #14670
• Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

• OCPBUGS-48725: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.18 #174
• OCPBUGS-48723: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.18 #173
• OCPBUGS-48721: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.18 #172
• OCPBUGS-48403: Bring groupsnapshot beta feature to 4.18 #171
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-48586: Do not check for PodCIDR when determining if node is in the default subnetwork. #73
• Full changelog

haproxy-router

• OCPBUGS-49717: Update default_pub_keys.pem to use SHA256 #648
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-48079, OCPBUGS-48515: Fix status ratcheting 4.18 #2175
• OCPBUGS-48403: Bump openshift-eng/openshift-tests-extension to main #2188
• OCPBUGS-49437: Fix Portworx plugin’s CSI translation to copy secret name & namespace #2187
• OCPBUGS-48403: Bring groupsnapshot beta feature to 4.18 #2169
• Full changelog

hypershift

• OCPBUGS-49671: Fix IsProgressing condition in HostedClusters #5513
• OCPBUGS-48689: Add Tenant ID to Azure API & Remove Credentials from CPO #5501
• OCPBUGS-49620: [release-4.18]: fix overwriting PKI operator HCP conditions #5500
• OCPBUGS-48689: Remove client secret references now Workload Identity is supported #5470
• OCPBUGS-48748: correct aro azureFile config and permissions #5459
• OCPBUGS-48689: Implement Workload Identity in Azure for Data Plane Components #5451
• OCPBUGS-48632: Compare contents of user-ca-bundle-config.yaml to the correct configmap #5442
• Full changelog

ironic

• OCPBUGS-45637: Ensure ironic caches node information #615
• Full changelog

machine-config-operator

• OCPBUGS-49606: MCO CO degrades are stuck on until master pool updates complete #4818
• OCPBUGS-48329: Add clarification to invalid maxUnavailable alert #4789
• OCPBUGS-48829: Auto-recover from MC with invalid extension #4805
• OCPBUGS-29201: GCP Custom-DNS: Update services that run on control plane nodes #4802
• Full changelog

monitoring-plugin

• OU-649: fix net/http vulnerable dependency #339
• OU-645: Fix virtualization perspective routes and routing #327
• Full changelog

multus-whereabouts-ipam-cni

• NO-JIRA: fix entrypoint.sh for new SCOS builds #336
• Full changelog

networking-console-plugin

• CNV-55457: Remove project modal #204
• CNV-55234: do not show all namesapces in cudn namespace column #201
• CNV-55129: Disable udn button #200
• OCPBUGS-49367: show MTU and sort on list #199
• CNV-54828: fix udn create button #198
• CNV-55239: Cluster udn through matchlabel #195
• CNV-55085: remove layer configuration #194
• OCPBUGS-48802: fix nad misspelled #193
• OCPBUGS-48703: replace edit with save #187
• CNV-54825: do not allow deleting udns #192
• OCPBUGS-48680: fix service name #186
• CNV-55131: remove the primary name to the udn creation form #182
• CNV-54827: fix select label on ClusterUserDefinedNetwork #176
• OCPBUGS-48562: fix path-to-regex CVE #175
• Full changelog

oc-mirror

• OCPBUGS-48842: CLID-301: add –cache-dir command line option (#1044) #1044
• CLID-303: disables the selected bundle feature (#1046) #1046
• OCPBUGS-48837: Generate ClusterCatalog resources for operator catalogs (#1039) #1039
• OCPBUGS-45059: fixes the delete when catalog mirrored with v1 from disk (oci://) (#1042) #1042
• fixes CVEs upgrading go-git dependency (#1029) #1029
• OCPBUGS-47688: Fix ITMS and IDMS generated when mirror dest contains release namespace (#1026) #1026
• Full changelog

olm-catalogd

• UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) #1673
• Full changelog

olm-operator-controller

• UPSTREAM: <drop>: Separate CA configuration for pulls vs catalogd services (#1673) #1673
• UPSTREAM: <drop>: Add support for SSL env vars to cert pool watcher (#1672) #1672
• UPSTREAM: 1552: Upgrade golang.org/x/net (#1552) #1552
• Full changelog

openshift-apiserver

• OCPBUGS-48633: prevent panic when no image and error are set #484
• OCPBUGS-48633: validate image property isn’t nil before using #485
• OCPBUGS-48633: move on to the next digest/tag during failures #482
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-48644: Fix excessive catalog source snapshots cause severe performance regression #950
• OCPBUGS-48660: Fix concurrent namespace resolution #946
• Full changelog

operator-marketplace

• OCPBUGS-49432: Upgrade golang.org/x/net [release-4.18] #584
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-49736, OCPBUGS-49739: [DownstreamMerge] 1-31-25 #2432
• OCPBUGS-48710: DownStream Merge Sync from 4.19 [01-29-2025] #2430
• OCPBUGS-48710, SDN-4930: Downstream Merge [01-28-2025] #2428
• OCPBUGS-48805: Bump OVN to ovn24.09-24.09.1-10.el9fdp #2424
• NO-JIRA: DownStream Merge Sync from 4.19 [01-27-2025] #2426
• OCPBUGS-48710: DownStream Merge Sync from 4.19 [01-22-2025] #2422
• OCPBUGS-48710: DownStream Merge Sync from 4.19 [01-08-2025] #2413
• Full changelog

powervs-block-csi-driver-operator

• OCPBUGS-44992: bump openshift/api #78
• Full changelog

prometheus

• OCPBUGS-48313: fix(main.go): avoid closing the query engine until it is guaranteed to no longer be in use #242
• Full changelog

tests

• OCPBUGS-49740, SDN-5625: Backport net seg feat gate into udn virt tests #29504
• OCPBUGS-48460, SDN-4930: Increases timeouts for live migration #29518
• OCPBUGS-48460, SDN-4930: Bump UDN pod ready timeout #29514
• OCPBUGS-48460, SDN-4930: increase probe initialDelaySeconds from 1 to 5 #29515
• OCPBUGS-48460, SDN-4930: Bump wait for UDN CR ready timeout #29516
• OCPBUGS-48460, SDN-4930: UDN: wait for moar openshift #29495
• OCPBUGS-48460, SDN-4930: Fix live migration test detecting dualstack #29488
• OCPBUGS-48524: add a monitor test to detect concurrent installer pod or static pod #29480
• OCPBUGS-48389, SDN-4930: Backport UDN fixes from 4.19 into 4.18 #29478
• OCPBUGS-48403: Add new images for group snapshot support #29455
• OCPBUGS-48438: images: Fix layers test to work with manifestlisted imagestreams #29442
• OCPBUGS-48389: virt: add GA placeholder test #29438
• OCPBUGS-48389: virt, udn: primary UDN requires the net seg FG #29412
• Full changelog

thanos

• [release 4.18]: OCPBUGS-48729: CVE 2024 45338 Update golang.org/x/net to v0.33 #157
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-48113: List only linux nodes #280
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.19.0-0.okd-scos-2025-02-04-1954324.19.0-0.okd-scos-2025-02-04-0754324.19.0-0.okd-scos-2025-02-03-1954324.19.0-0.okd-scos-2025-02-03-0754324.19.0-0.okd-scos-2025-02-02-1954324.19.0-0.okd-scos-2025-02-02-075432───4.18.0-0.okd-scos-2025-02-04-2157014.18.0-0.okd-scos-2025-02-04-0957014.18.0-0.okd-scos-2025-02-03-2157014.18.0-0.okd-scos-2025-02-03-0957014.18.0-0.okd-scos-2025-02-02-1750574.18.0-0.okd-scos-2025-02-02-055057───4.17.0-0.okd-scos-2025-02-05-0415584.17.0-0.okd-scos-2025-02-04-1615584.17.0-0.okd-scos-2025-02-04-0415584.17.0-0.okd-scos-2025-02-03-1615584.17.0-0.okd-scos-2025-02-03-0415584.17.0-0.okd-scos-2025-02-02-052429───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-01-28-0547464.15.0-0.okd-2025-01-23-1504044.15.0-0.okd-2024-12-16-1952254.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github