# 4.18.0-okd-scos.6

Created: 2025-03-28 17:47:59 +0000 UTC

Image Digest: `sha256:ce51c2b9ae983b5268a302843001018e033a33d65bc3c0cd4a15ea1b5ebe9c60`

Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-28-101531


## Changes from 4.18.0-okd-scos.4

### Components

* Kubectl 1.31.1
* Kubernetes 1.31.6
* Kubernetes Tests 1.31.6
* CentOS Stream CoreOS upgraded from 418.9.202503140633-0 to 418.9.202503240632-0


### Rebuilt images without code change

* stream-coreos `sha256:f244306780196aba09f60b2651a8880b5266b61d01d7f07d0d4f8e4f158ae930`
* stream-coreos-extensions `sha256:ce1494192042a8bb0e45d15b016cc9cc57fcf8cc10b03147b7fe15662f2907cf`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/0680d3c7161f1472544d8ca8c63c56e3a814fa37)

* [MGMT-20183](https://issues.redhat.com/browse/MGMT-20183): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) [#7456](https://github.com/openshift/assisted-service/pull/7456)
* [Full changelog](https://github.com/openshift/assisted-service/compare/e5a400590fed00f895a08245ef70df00ae97f28f...0680d3c7161f1472544d8ca8c63c56e3a814fa37)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/d1dc8abd956e571e79dde6496d8bb4ca9aaadd83)

* [OCPBUGS-51233](https://issues.redhat.com/browse/OCPBUGS-51233): github.com/go-jose/go-jose/v4 v4.0.5 [#27](https://github.com/openshift/azure-workload-identity/pull/27)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/344c5dc56d6b7b1297db1b19eaa121bdbe0cec5b...d1dc8abd956e571e79dde6496d8bb4ca9aaadd83)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/6223837ba6a997b8cef88795a90717f9546286bb)

* [OCPBUGS-53422](https://issues.redhat.com/browse/OCPBUGS-53422): Avoid adding duplicate entries to NO_PROXY [#9588](https://github.com/openshift/installer/pull/9588)
* [OCPBUGS-52515](https://issues.redhat.com/browse/OCPBUGS-52515): Remove error logging when determining image arch [#9539](https://github.com/openshift/installer/pull/9539)
* [OCPBUGS-52429](https://issues.redhat.com/browse/OCPBUGS-52429): Remove tmp directory used for agent pxe files [#9536](https://github.com/openshift/installer/pull/9536)
* [OCPBUGS-51211](https://issues.redhat.com/browse/OCPBUGS-51211): Fixes panic during GCP tags fetch due to unstable network [#9513](https://github.com/openshift/installer/pull/9513)
* [Full changelog](https://github.com/openshift/installer/compare/50deebb4a117c2309b38f96551d0278409437dd6...6223837ba6a997b8cef88795a90717f9546286bb)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/fe3500a441cb852ecb8c65e82d363b7ea6db4f94)

* [OCPBUGS-53345](https://issues.redhat.com/browse/OCPBUGS-53345): github.com/golang/glog v1.2.4 [#835](https://github.com/openshift/cloud-credential-operator/pull/835)
* [OCPBUGS-51550](https://issues.redhat.com/browse/OCPBUGS-51550): Ignore SNYK-GOLANG-GOLANGORGXOAUTH2JWS-8749594 due to not being affected [#822](https://github.com/openshift/cloud-credential-operator/pull/822)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/0152c3a444e1f459b4063056b3470bb3d2895d8d...fe3500a441cb852ecb8c65e82d363b7ea6db4f94)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d967a73c5f7da76783ee1af093f21817e7681e1d)

* [NE-1951](https://issues.redhat.com/browse/NE-1951): Pre-upgrade Admin Gate for Gateway API CRD Management Succession [#1196](https://github.com/openshift/cluster-ingress-operator/pull/1196)
* [NE-1952](https://issues.redhat.com/browse/NE-1952): Pre-upgrade check for Gateway API CRD Management Succession [#1193](https://github.com/openshift/cluster-ingress-operator/pull/1193)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/a730e8a7af570d3921cd44c1468f38a250a6e647...d967a73c5f7da76783ee1af093f21817e7681e1d)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/2800e3ef7f19e8238046a9a80562d010a53b138f)

* [OCPBUGS-53024](https://issues.redhat.com/browse/OCPBUGS-53024): Fix opentelemetry metrics to use regexp on label match [#2578](https://github.com/openshift/cluster-monitoring-operator/pull/2578)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/efa77395b69d0916bbf9a756e52f60a9b9d655d5...2800e3ef7f19e8238046a9a80562d010a53b138f)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8cbda2ddf6aef578ea40f224c1281c2a6ee262c4)

* [OCPBUGS-52837](https://issues.redhat.com/browse/OCPBUGS-52837): frr-k8s: rename validatingwebhook name [#2661](https://github.com/openshift/cluster-network-operator/pull/2661)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/5d380cb3a88d78ac5c6f3d8dd8188d06ac6da1b4...8cbda2ddf6aef578ea40f224c1281c2a6ee262c4)


### [console](https://github.com/openshift/console/tree/b033fc18dfcd75f68912d986a3832db5d5ffd376)

* [OCPBUGS-54269](https://issues.redhat.com/browse/OCPBUGS-54269): fix bug where /k8s/all-namespaces/volumesnapshots 404s [#14905](https://github.com/openshift/console/pull/14905)
* [OCPBUGS-52372](https://issues.redhat.com/browse/OCPBUGS-52372): VolumeSnapshots are not displayed in OpenShift Web Console [#14833](https://github.com/openshift/console/pull/14833)
* [OCPBUGS-52406](https://issues.redhat.com/browse/OCPBUGS-52406): Retain original path when detecting perspective [#14834](https://github.com/openshift/console/pull/14834)
* [Full changelog](https://github.com/openshift/console/compare/15cc829fa8f9c42c6d25f5fbe5e4fb11ea519093...b033fc18dfcd75f68912d986a3832db5d5ffd376)


### [docker-builder](https://github.com/openshift/builder/tree/62f644bcf0b0010f51765b48a7dab28426ae2933)

* [OCPBUGS-48071](https://issues.redhat.com/browse/OCPBUGS-48071): Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility [#464](https://github.com/openshift/builder/pull/464)
* [Full changelog](https://github.com/openshift/builder/compare/6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8...62f644bcf0b0010f51765b48a7dab28426ae2933)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/01f6b419357a539389704fcec9872997f808e540)

* [OCPBUGS-52495](https://issues.redhat.com/browse/OCPBUGS-52495): OCPBUGS-52494:  Disable shielded VMs for non-UEFI disks [#112](https://github.com/openshift/machine-api-provider-gcp/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/a3716418ec55c5767f4dab86991ffad6161031e9...01f6b419357a539389704fcec9872997f808e540)


### [hypershift](https://github.com/openshift/hypershift/tree/2ceb38f92bd249d83b3c9f21e9d888a65ace0868)

* [OCPBUGS-51739](https://issues.redhat.com/browse/OCPBUGS-51739), [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Bump dependencies to OCP fork in backports [#5898](https://github.com/openshift/hypershift/pull/5898)
* [OCPBUGS-53321](https://issues.redhat.com/browse/OCPBUGS-53321): Handle multiple mirror entries for source [#5890](https://github.com/openshift/hypershift/pull/5890)
* [OCPBUGS-51239](https://issues.redhat.com/browse/OCPBUGS-51239): fix(deps): bump go-jose [#5858](https://github.com/openshift/hypershift/pull/5858)
* [OCPBUGS-52982](https://issues.redhat.com/browse/OCPBUGS-52982): Fix audit-logs container to properly handle SIGTERM [#5774](https://github.com/openshift/hypershift/pull/5774)
* [Full changelog](https://github.com/openshift/hypershift/compare/77952bed2c91d448705d775a0dbd99c77cdde4f4...2ceb38f92bd249d83b3c9f21e9d888a65ace0868)


### [ironic](https://github.com/openshift/ironic-image/tree/bc0800a6d184c4253ee18d7e8f68aecebe1b3393)

* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#646](https://github.com/openshift/ironic-image/pull/646)
* [Full changelog](https://github.com/openshift/ironic-image/compare/b288ebe9daaed7501d80fe85501dcebe4848362f...bc0800a6d184c4253ee18d7e8f68aecebe1b3393)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/cfff1ce89bc4e3cb24995547c6645f21431a9d14)

* [METAL-1302](https://issues.redhat.com/browse/METAL-1302): Do not use openstack packages [#178](https://github.com/openshift/ironic-agent-image/pull/178)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/a26fffeb4d36b22951095e20988f1757044e8d2a...cfff1ce89bc4e3cb24995547c6645f21431a9d14)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/28740b628797734ed26d4b4926530f6d41d4ce6b)

* [OCPBUGS-51132](https://issues.redhat.com/browse/OCPBUGS-51132): [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc [#4869](https://github.com/openshift/machine-config-operator/pull/4869)
* [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Add ipsec connect wait service [#4926](https://github.com/openshift/machine-config-operator/pull/4926)
* [OCPBUGS-53306](https://issues.redhat.com/browse/OCPBUGS-53306): Fixing typos for MachineConfigNode [#4927](https://github.com/openshift/machine-config-operator/pull/4927)
* [OCPNODE-2276](https://issues.redhat.com/browse/OCPNODE-2276): Set `Upgradeable=False` when cluster is on cgroup `v1` [#4921](https://github.com/openshift/machine-config-operator/pull/4921)
* [OCPBUGS-53111](https://issues.redhat.com/browse/OCPBUGS-53111): daemon: ensure ostree-finalize-staged is started before rebooting [#4918](https://github.com/openshift/machine-config-operator/pull/4918)
* [OCPBUGS-53110](https://issues.redhat.com/browse/OCPBUGS-53110): Update ObservedGeneration in KubeletConfig [#4917](https://github.com/openshift/machine-config-operator/pull/4917)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/9f18ef9ca8a4aff64948a11967d50d4c60606f82...28740b628797734ed26d4b4926530f6d41d4ce6b)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ab43283689560737ad32566dd59e0d3d77fee4e1)

* [OCPBUGS-53141](https://issues.redhat.com/browse/OCPBUGS-53141): Change rhcos release browser url [#55](https://github.com/openshift/machine-os-images/pull/55)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723...ab43283689560737ad32566dd59e0d3d77fee4e1)


### [metallb-frr](https://github.com/openshift/frr/tree/78714ea6d2fd4de722473fa68125bfb09b21e6f8)

* [OCPBUGS-48305](https://issues.redhat.com/browse/OCPBUGS-48305): Use metrics for readiness/liveness probes [#76](https://github.com/openshift/frr/pull/76)
* [Full changelog](https://github.com/openshift/frr/compare/1ad8f2e711d33fd0416b8e2b8d26a413d26b38e2...78714ea6d2fd4de722473fa68125bfb09b21e6f8)


### [multus-cni, multus-cni-microshift](https://github.com/openshift/multus-cni/tree/21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)

* [OCPBUGS-47470](https://issues.redhat.com/browse/OCPBUGS-47470): adds getpodcontext (backport 4.18) [#259](https://github.com/openshift/multus-cni/pull/259)
* [Full changelog](https://github.com/openshift/multus-cni/compare/69733b264233684deb30defbc357a1ecf03c0d02...21fb8e05e5de697bbb4ec3c7ca685b0518aca82d)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/c6ec6e36092ff22d2a248deec06b32cb3257d621)

* [OCPBUGS-52969](https://issues.redhat.com/browse/OCPBUGS-52969): remove TechPreview mentions of v2 in --help (#1114) [#1114](https://github.com/openshift/oc-mirror/pull/1114)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/2022f4987e3cb28152e1260b940c61343c462b5d...c6ec6e36092ff22d2a248deec06b32cb3257d621)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/1872fbf5967acd6485589c339ac8cb6bd156ad72)

* [OCPBUGS-52312](https://issues.redhat.com/browse/OCPBUGS-52312): Skip blocked registry check for registries with mirrors [#498](https://github.com/openshift/openshift-apiserver/pull/498)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/73d65dbb875ed0302360eabdeaf11658752d1499...1872fbf5967acd6485589c339ac8cb6bd156ad72)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/cc44b486ea91015a30946029b3a0be3af49ea789)

* [OCPBUGS-53108](https://issues.redhat.com/browse/OCPBUGS-53108): Ensure that PSA label is latest instead of pinning versions [#983](https://github.com/openshift/operator-framework-olm/pull/983)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/802665ed8c0a1b62165353151da210addbfe0c73...cc44b486ea91015a30946029b3a0be3af49ea789)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/9ee02a6318a9578ece5e6a89dffea4f7e18cc15a)

* [OCPBUGS-53149](https://issues.redhat.com/browse/OCPBUGS-53149): Ensure that PSA label is latest instead of pinning versions [#601](https://github.com/operator-framework/operator-marketplace/pull/601)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/5a1e906724ed6d88161f8faaa90e4fe447689725...9ee02a6318a9578ece5e6a89dffea4f7e18cc15a)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/4af08abc39c013bf3f0a493afd3c50d8f7f07805)

* [OCPBUGS-54187](https://issues.redhat.com/browse/OCPBUGS-54187): Update OVN to FDP25.A.1 24.09.2-41. [#2495](https://github.com/openshift/ovn-kubernetes/pull/2495)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/799f96146c2056a50ae8252a87c03de1cc698f13...4af08abc39c013bf3f0a493afd3c50d8f7f07805)