# 4.18.0-okd-scos.5

Created: 2025-03-21 20:46:34 +0000 UTC

Image Digest: `sha256:2fcf0247f6ae48ea21c168f33782385d3752a12d0917e76b35223c4e6a702e91`

Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-21-070558


## Changes from 4.18.0-okd-scos.3

### Components

* Kubectl 1.31.1
* Kubernetes 1.31.6
* Kubernetes Tests 1.31.6
* CentOS Stream CoreOS upgraded from 418.9.202503040632-0 to 418.9.202503200632-0


### Rebuilt images without code change

* stream-coreos `sha256:58ff82fa021afc822aa53019ab7c99cb561bc690be70d3efdb410377b57887bf`
* stream-coreos-extensions `sha256:81a25237c100b92fba92f8c42d7fa4a48b65a8250c621ec733288e969b89765e`


### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/f54f9a19adb43b395a880ca046aed0841466c28d)

* [OCPBUGS-51231](https://issues.redhat.com/browse/OCPBUGS-51231): github.com/go-jose/go-jose/v4 v4.0.5 [#201](https://github.com/openshift/aws-pod-identity-webhook/pull/201)
* [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/5c43fe8e6c86c24f467070a8e5965a83c24f4360...f54f9a19adb43b395a880ca046aed0841466c28d)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/d1dc8abd956e571e79dde6496d8bb4ca9aaadd83)

* [OCPBUGS-51233](https://issues.redhat.com/browse/OCPBUGS-51233): github.com/go-jose/go-jose/v4 v4.0.5 [#27](https://github.com/openshift/azure-workload-identity/pull/27)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/344c5dc56d6b7b1297db1b19eaa121bdbe0cec5b...d1dc8abd956e571e79dde6496d8bb4ca9aaadd83)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/e5ebf3caca66f0f486ed5c6ef84d196d5093e591)

* [OCPBUGS-52515](https://issues.redhat.com/browse/OCPBUGS-52515): Remove error logging when determining image arch [#9539](https://github.com/openshift/installer/pull/9539)
* [OCPBUGS-52429](https://issues.redhat.com/browse/OCPBUGS-52429): Remove tmp directory used for agent pxe files [#9536](https://github.com/openshift/installer/pull/9536)
* [OCPBUGS-51211](https://issues.redhat.com/browse/OCPBUGS-51211): Fixes panic during GCP tags fetch due to unstable network [#9513](https://github.com/openshift/installer/pull/9513)
* [Full changelog](https://github.com/openshift/installer/compare/50deebb4a117c2309b38f96551d0278409437dd6...e5ebf3caca66f0f486ed5c6ef84d196d5093e591)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/20646c92b5f1c2a7b49fe12effee0b3c74df8058)

* [OCPBUGS-45250](https://issues.redhat.com/browse/OCPBUGS-45250): Remove dataImage finalizer if BMH is missing [#389](https://github.com/openshift/baremetal-operator/pull/389)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/3d9304e76903b639b6d06e3b00d655e1ad5dbb9b...20646c92b5f1c2a7b49fe12effee0b3c74df8058)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/7785eb495aa92843e88c968a5c9a4a49aa7cf16d)

* [OCPBUGS-51550](https://issues.redhat.com/browse/OCPBUGS-51550): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#822](https://github.com/openshift/cloud-credential-operator/pull/822)
* [OCPBUGS-51237](https://issues.redhat.com/browse/OCPBUGS-51237): github.com/go-jose/go-jose/v4 v4.0.5 [#824](https://github.com/openshift/cloud-credential-operator/pull/824)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/020f8b841abf6284642cd182d95611b79c2f3a19...7785eb495aa92843e88c968a5c9a4a49aa7cf16d)


### [cluster-config-api](https://github.com/openshift/api/tree/e7f23be12279d3c245c013c234f967e5ccb426e2)

* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295), [OCPBUGS-51380](https://issues.redhat.com/browse/OCPBUGS-51380): Reject new NodeStatus with revision set [#2215](https://github.com/openshift/api/pull/2215)
* [Full changelog](https://github.com/openshift/api/compare/b1bd7c10b2fd113e4983d1e19463c62148568ac1...e7f23be12279d3c245c013c234f967e5ccb426e2)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/7cafd0c7dca2edb154b8444602b600b5901afeba)

* [OCPBUGS-52514](https://issues.redhat.com/browse/OCPBUGS-52514): [release-4.18] Add runbook_url for CoreDNSErrorsHigh [#429](https://github.com/openshift/cluster-dns-operator/pull/429)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/208d50c1a5e0aaeb991366daa749abdffa803224...7cafd0c7dca2edb154b8444602b600b5901afeba)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/b0222ed2054e3ff7b87f4f90d72b42b6cf2b53a7)

* [NE-1952](https://issues.redhat.com/browse/NE-1952): Pre-upgrade check for Gateway API CRD Management Succession [#1193](https://github.com/openshift/cluster-ingress-operator/pull/1193)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/a730e8a7af570d3921cd44c1468f38a250a6e647...b0222ed2054e3ff7b87f4f90d72b42b6cf2b53a7)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/2800e3ef7f19e8238046a9a80562d010a53b138f)

* [OCPBUGS-53024](https://issues.redhat.com/browse/OCPBUGS-53024): Fix opentelemetry metrics to use regexp on label match [#2578](https://github.com/openshift/cluster-monitoring-operator/pull/2578)
* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump prometheus-operator to 0.78.2 [#2576](https://github.com/openshift/cluster-monitoring-operator/pull/2576)
* [OCPBUGS-50706](https://issues.redhat.com/browse/OCPBUGS-50706): Add incidents metric to telemetry [#2570](https://github.com/openshift/cluster-monitoring-operator/pull/2570)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/9852f98d559a7153213164e3518ffd6576b47b87...2800e3ef7f19e8238046a9a80562d010a53b138f)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8cbda2ddf6aef578ea40f224c1281c2a6ee262c4)

* [OCPBUGS-52837](https://issues.redhat.com/browse/OCPBUGS-52837): frr-k8s: rename validatingwebhook name [#2661](https://github.com/openshift/cluster-network-operator/pull/2661)
* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): frr-k8s: align manifests with operator [#2657](https://github.com/openshift/cluster-network-operator/pull/2657)
* [OCPBUGS-41178](https://issues.redhat.com/browse/OCPBUGS-41178): Updating cluster-network-operator-container image to be consistent with ART for 4.18 [#2491](https://github.com/openshift/cluster-network-operator/pull/2491)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/cad5e40c4c21a8d1d638c20ed23529aa05ab0824...8cbda2ddf6aef578ea40f224c1281c2a6ee262c4)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/c004ea7ea486e983d296311ca2b40cc9a431c394)

* [OCPBUGS-52352](https://issues.redhat.com/browse/OCPBUGS-52352): Treat all aarch64 platforms as equals in tuned (#1303) (#1306) [#1303](https://github.com/openshift/cluster-node-tuning-operator/pull/1303)
* machineconfig: add support for various hugepage sizes. (#1299) [#1299](https://github.com/openshift/cluster-node-tuning-operator/pull/1299)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2f872e4323528d8ec14c1361d27fb72707c308f1...c004ea7ea486e983d296311ca2b40cc9a431c394)


### [console](https://github.com/openshift/console/tree/14c0cfd94cd67ba673b15acb31fad40066f898fd)

* [OCPBUGS-52372](https://issues.redhat.com/browse/OCPBUGS-52372): VolumeSnapshots are not displayed in OpenShift Web Console [#14833](https://github.com/openshift/console/pull/14833)
* [OCPBUGS-52406](https://issues.redhat.com/browse/OCPBUGS-52406): Retain original path when detecting perspective [#14834](https://github.com/openshift/console/pull/14834)
* [OCPBUGS-52371](https://issues.redhat.com/browse/OCPBUGS-52371): Update the monitoring topic used by the console team [#14832](https://github.com/openshift/console/pull/14832)
* [OCPBUGS-52490](https://issues.redhat.com/browse/OCPBUGS-52490): enable clicking outside NodeLogs Selects to close them [#14843](https://github.com/openshift/console/pull/14843)
* [OCPBUGS-50501](https://issues.redhat.com/browse/OCPBUGS-50501): Updating cypress config to have video enabled for the CI results [#14831](https://github.com/openshift/console/pull/14831)
* [OCPBUGS-52511](https://issues.redhat.com/browse/OCPBUGS-52511): Remove logoutOpenShift method call [#14845](https://github.com/openshift/console/pull/14845)
* [OCPBUGS-50609](https://issues.redhat.com/browse/OCPBUGS-50609): update the Deployment pod on change in imageStream [#14757](https://github.com/openshift/console/pull/14757)
* [OCPBUGS-50648](https://issues.redhat.com/browse/OCPBUGS-50648): add support for "OpenShift Virtualization Engine" valid subscription filter on OperatorHub [#14761](https://github.com/openshift/console/pull/14761)
* [Full changelog](https://github.com/openshift/console/compare/ec6ec6de15dae6d7dc573e00594ed7c1252e640c...14c0cfd94cd67ba673b15acb31fad40066f898fd)


### [console-operator](https://github.com/openshift/console-operator/tree/10a0cc293e61b8125ebec8c9c98ede22a0824d06)

* [OCPBUGS-52294](https://issues.redhat.com/browse/OCPBUGS-52294): Custom route TLS should be optional when IngressController's DefaultCertificate is set [#966](https://github.com/openshift/console-operator/pull/966)
* [Full changelog](https://github.com/openshift/console-operator/compare/49cd98bc72f18eefd6baf36b69fedaf305720ed5...10a0cc293e61b8125ebec8c9c98ede22a0824d06)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/b52ca7e89560678f3420aac02cfdb11febcfae67)

* [OCPBUGS-43430](https://issues.redhat.com/browse/OCPBUGS-43430): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 [#312](https://github.com/openshift/cloud-provider-openstack/pull/312)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/90891d4634af0fe61393de5ad5b448eb5d070f48...b52ca7e89560678f3420aac02cfdb11febcfae67)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/98b19154718fd94d4e8ad30824c00ba1de87cb78)

* DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue [#312](https://github.com/openshift/etcd/pull/312)
* [Full changelog](https://github.com/openshift/etcd/compare/afac40f734a0440eb0983d7308e86aea9a04bbe9...98b19154718fd94d4e8ad30824c00ba1de87cb78)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/01f6b419357a539389704fcec9872997f808e540)

* [OCPBUGS-52495](https://issues.redhat.com/browse/OCPBUGS-52495): OCPBUGS-52494:  Disable shielded VMs for non-UEFI disks [#112](https://github.com/openshift/machine-api-provider-gcp/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a3716418ec55c5767f4dab86991ffad6161031e9...01f6b419357a539389704fcec9872997f808e540)


### [hypershift](https://github.com/openshift/hypershift/tree/81ff5061471f5565de908e96e2a90119ad8b0550)

* [OCPBUGS-51239](https://issues.redhat.com/browse/OCPBUGS-51239): fix(deps): bump go-jose [#5858](https://github.com/openshift/hypershift/pull/5858)
* [OCPBUGS-52982](https://issues.redhat.com/browse/OCPBUGS-52982): Fix audit-logs container to properly handle SIGTERM [#5774](https://github.com/openshift/hypershift/pull/5774)
* [OCPBUGS-52863](https://issues.redhat.com/browse/OCPBUGS-52863): stop using dev mode for loggers [#5811](https://github.com/openshift/hypershift/pull/5811)
* [OCPBUGS-52878](https://issues.redhat.com/browse/OCPBUGS-52878): Kubernetes API Server apply-bootstrap container does not respect SIGTERM [#5780](https://github.com/openshift/hypershift/pull/5780)
* [OCPBUGS-52516](https://issues.redhat.com/browse/OCPBUGS-52516): Make managed-trust-bundle optional [#5783](https://github.com/openshift/hypershift/pull/5783)
* [OCPBUGS-52417](https://issues.redhat.com/browse/OCPBUGS-52417): [release-4.18] refactor aws identity health check into new controller [#5770](https://github.com/openshift/hypershift/pull/5770)
* [Full changelog](https://github.com/openshift/hypershift/compare/495ab4b643f4a217ccd5cfdbafe5ccb9033a031f...81ff5061471f5565de908e96e2a90119ad8b0550)


### [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud/tree/3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)

* [OCPBUGS-52872](https://issues.redhat.com/browse/OCPBUGS-52872): IBMCloud: MAPI replacing unhealthy CP nodes [#62](https://github.com/openshift/machine-api-provider-ibmcloud/pull/62)
* [Full changelog](https://github.com/openshift/machine-api-provider-ibmcloud/compare/0fdb727264afaa7f02c8bd602f3769427e520300...3ffdea64f170ec98ddcaa3bc72a289bddc5b0a9f)


### [ironic](https://github.com/openshift/ironic-image/tree/bc0800a6d184c4253ee18d7e8f68aecebe1b3393)

* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#646](https://github.com/openshift/ironic-image/pull/646)
* [OCPBUGS-52290](https://issues.redhat.com/browse/OCPBUGS-52290): Fix runlogwatch script [#642](https://github.com/openshift/ironic-image/pull/642)
* [Full changelog](https://github.com/openshift/ironic-image/compare/afb7947613cac32c5c136e1757d7f21d0b034dd9...bc0800a6d184c4253ee18d7e8f68aecebe1b3393)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/cfff1ce89bc4e3cb24995547c6645f21431a9d14)

* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#178](https://github.com/openshift/ironic-agent-image/pull/178)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/a26fffeb4d36b22951095e20988f1757044e8d2a...cfff1ce89bc4e3cb24995547c6645f21431a9d14)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/99889497d1290c20663621a52eee8d5b685935df)

* [OCPBUGS-52494](https://issues.redhat.com/browse/OCPBUGS-52494), [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): Updates GCP credentials request [#1341](https://github.com/openshift/machine-api-operator/pull/1341)
* [OCPBUGS-52567](https://issues.redhat.com/browse/OCPBUGS-52567): add image/read permissions [#1342](https://github.com/openshift/machine-api-operator/pull/1342)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/1df65ace03159ae05671e4f565eefcf844192192...99889497d1290c20663621a52eee8d5b685935df)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/46eed2bde29dc49aeac37903c3d0df0c7b07583d)

* [OCPNODE-2276](https://issues.redhat.com/browse/OCPNODE-2276): Set `Upgradeable=False` when cluster is on cgroup `v1` [#4921](https://github.com/openshift/machine-config-operator/pull/4921)
* [OCPBUGS-53111](https://issues.redhat.com/browse/OCPBUGS-53111): daemon: ensure ostree-finalize-staged is started before rebooting [#4918](https://github.com/openshift/machine-config-operator/pull/4918)
* [OCPBUGS-53110](https://issues.redhat.com/browse/OCPBUGS-53110): Update ObservedGeneration in KubeletConfig [#4917](https://github.com/openshift/machine-config-operator/pull/4917)
* [release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built [#4859](https://github.com/openshift/machine-config-operator/pull/4859)
* [OCPBUGS-50865](https://issues.redhat.com/browse/OCPBUGS-50865): Make resolv-prepender env file optional [#4855](https://github.com/openshift/machine-config-operator/pull/4855)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/de723aa6d0723ecc150f332c5e49d75c00a30d5d...46eed2bde29dc49aeac37903c3d0df0c7b07583d)


### [metallb-frr](https://github.com/openshift/frr/tree/78714ea6d2fd4de722473fa68125bfb09b21e6f8)

* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): Use metrics for readiness/liveness probes [#76](https://github.com/openshift/frr/pull/76)
* [Full changelog](https://github.com/openshift/frr/compare/1ad8f2e711d33fd0416b8e2b8d26a413d26b38e2...78714ea6d2fd4de722473fa68125bfb09b21e6f8)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)

* [OCPBUGS-47470](https://issues.redhat.com/browse/OCPBUGS-47470): adds getpodcontext (backport 4.18) [#259](https://github.com/openshift/multus-cni/pull/259)
* [Full changelog](https://github.com/openshift/multus-cni/compare/69733b264233684deb30defbc357a1ecf03c0d02...21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c6ec6e36092ff22d2a248deec06b32cb3257d621)

* [OCPBUGS-52969](https://issues.redhat.com/browse/OCPBUGS-52969): remove TechPreview mentions of v2 in --help (#1114) [#1114](https://github.com/openshift/oc-mirror/pull/1114)
* [OCPBUGS-52588](https://issues.redhat.com/browse/OCPBUGS-52588): fix: error when no related image was found (#1106) [#1106](https://github.com/openshift/oc-mirror/pull/1106)
* [CLID-325](https://issues.redhat.com/browse/CLID-325): adds cpu and memory profiling (#1103) [#1103](https://github.com/openshift/oc-mirror/pull/1103)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/e8ad40cd953a5d8017770a779c7fe7a37492d819...c6ec6e36092ff22d2a248deec06b32cb3257d621)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/1872fbf5967acd6485589c339ac8cb6bd156ad72)

* [OCPBUGS-52312](https://issues.redhat.com/browse/OCPBUGS-52312): Skip blocked registry check for registries with mirrors [#498](https://github.com/openshift/openshift-apiserver/pull/498)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/73d65dbb875ed0302360eabdeaf11658752d1499...1872fbf5967acd6485589c339ac8cb6bd156ad72)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cc44b486ea91015a30946029b3a0be3af49ea789)

* [OCPBUGS-53108](https://issues.redhat.com/browse/OCPBUGS-53108): Ensure that PSA label is latest instead of pinning versions [#983](https://github.com/openshift/operator-framework-olm/pull/983)
* [OCPBUGS-53040](https://issues.redhat.com/browse/OCPBUGS-53040): add missing pod disruption reasons to isPodDead [#981](https://github.com/openshift/operator-framework-olm/pull/981)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/877b6fd3d425043a1bd45b5d24ecebb69f5544c4...cc44b486ea91015a30946029b3a0be3af49ea789)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/9ee02a6318a9578ece5e6a89dffea4f7e18cc15a)

* [OCPBUGS-53149](https://issues.redhat.com/browse/OCPBUGS-53149): Ensure that PSA label is latest instead of pinning versions [#601](https://github.com/operator-framework/operator-marketplace/pull/601)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a1e906724ed6d88161f8faaa90e4fe447689725...9ee02a6318a9578ece5e6a89dffea4f7e18cc15a)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/74987748a60f14816975fa1070ce485393a38f64)

* [OCPBUGS-52565](https://issues.redhat.com/browse/OCPBUGS-52565): Bump openshift/prometheus-operator to v0.78.2 [#327](https://github.com/openshift/prometheus-operator/pull/327)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/ede3c1406e70f359c76c1403a2b14bc60ad386bf...74987748a60f14816975fa1070ce485393a38f64)


### [tests](https://github.com/openshift/origin/tree/68b6d984eccbfe3ffd58099f618632ac48915a5b)

* [OCPBUGS-52579](https://issues.redhat.com/browse/OCPBUGS-52579): Use payload pullspec for image info test [#29587](https://github.com/openshift/origin/pull/29587)
* [OCPBUGS-51295](https://issues.redhat.com/browse/OCPBUGS-51295): Rely on unstructured for update status instead of type conversion [#29564](https://github.com/openshift/origin/pull/29564)
* [Full changelog](https://github.com/openshift/origin/compare/06834b652e82f05e955b64bc90a8a5eebd795d22...68b6d984eccbfe3ffd58099f618632ac48915a5b)


### [thanos](https://github.com/openshift/thanos/tree/f1599f65c5fd652150821ae954d563747a649b53)

* [OCPBUGS-52945](https://issues.redhat.com/browse/OCPBUGS-52945): Update Go version in go.mod to 1.22.0 [#159](https://github.com/openshift/thanos/pull/159)
* [Full changelog](https://github.com/openshift/thanos/compare/314589cf9b4e86507634ab3406deb08402fa7af9...f1599f65c5fd652150821ae954d563747a649b53)