# 4.18.0-okd-scos.8

Created: 2025-04-13 05:51:00 +0000 UTC

Image Digest: `sha256:de900611bc63fa24420d5e94f3647e4d650de89fe54302444e1ab26a4b1c81c6`

Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-04-12-155543


## Changes from 4.18.0-okd-scos.6

### Components

* Kubectl 1.31.1
* Kubernetes upgraded from 1.31.6 to 1.31.7
* Kubernetes Tests upgraded from 1.31.6 to 1.31.7
* CentOS Stream CoreOS upgraded from 418.9.202503240632-0 to 418.9.202504111553-0


### Rebuilt images without code change

* stream-coreos `sha256:0e0e1c3d5c712b67c0247acc0d22f761c3cd05aec3cd092146c4ac29184697a0`
* stream-coreos-extensions `sha256:1cccc442b590969f93febeb17648769b0a0690ceab6a3b464d660c7633715d44`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/9346359925bec817c0a193f5ff59b9c5a6616594)

* [OCPBUGS-54378](https://issues.redhat.com/browse/OCPBUGS-54378): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) [#7483](https://github.com/openshift/assisted-service/pull/7483)
* [Full changelog](https://github.com/openshift/assisted-service/compare/0680d3c7161f1472544d8ca8c63c56e3a814fa37...9346359925bec817c0a193f5ff59b9c5a6616594)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/92575979cc7d65303169444f2afce22d36f918ce)

* [OCPBUGS-53721](https://issues.redhat.com/browse/OCPBUGS-53721): Bump jwt to 4.5.2 in release-4.18 (#1085) [#1085](https://github.com/openshift/assisted-installer/pull/1085)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/8bb42ac9fd9624f86c97c4422bd5f982251e5d91...92575979cc7d65303169444f2afce22d36f918ce)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/3aeceb7ef080394626083fcdc0597e6e2ba0d30f)

* [OCPBUGS-54544](https://issues.redhat.com/browse/OCPBUGS-54544): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) [#965](https://github.com/openshift/assisted-installer-agent/pull/965)
* [OCPBUGS-53713](https://issues.redhat.com/browse/OCPBUGS-53713): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) [#963](https://github.com/openshift/assisted-installer-agent/pull/963)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/593c9c284e43fd00095cfdf3f55b9017f4104663...3aeceb7ef080394626083fcdc0597e6e2ba0d30f)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9)

* [OCPBUGS-53729](https://issues.redhat.com/browse/OCPBUGS-53729): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 [#543](https://github.com/openshift/cluster-api-provider-aws/pull/543)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b3446080be1c2898ee039030c346020fa6c1ed13...59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cdc9d6499cd5020d96811fd02bde14d4d06786cc)

* [OCPBUGS-54383](https://issues.redhat.com/browse/OCPBUGS-54383): Disable remove-not-ready-taint for azure disk csi driver [#374](https://github.com/openshift/csi-operator/pull/374)
* [Full changelog](https://github.com/openshift/csi-operator/compare/a95f8b365dda90ca1cb9d85a13c84670f6200cff...cdc9d6499cd5020d96811fd02bde14d4d06786cc)


### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/c937080f51cec58650daa15805be548d09310c64)

* [OCPBUGS-53497](https://issues.redhat.com/browse/OCPBUGS-53497): bump golang-jwt v4 [#11](https://github.com/openshift/azure-kubernetes-kms/pull/11)
* [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...c937080f51cec58650daa15805be548d09310c64)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/b8bc2053066bace662f5fece646be7ea76bc3c72)

* [OCPBUGS-54355](https://issues.redhat.com/browse/OCPBUGS-54355): Re-reconcile machine on NIC provisioning failure [#135](https://github.com/openshift/machine-api-provider-azure/pull/135)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/62f62f7a0bb3d836e238588527627684018e229b...b8bc2053066bace662f5fece646be7ea76bc3c72)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/f60e4029d64de202e81d2cd114f8a90dc0a1878e)

* [OCPBUGS-53801](https://issues.redhat.com/browse/OCPBUGS-53801): github.com/golang-jwt/jwt/v4 v4.5.2 [#31](https://github.com/openshift/azure-workload-identity/pull/31)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/d1dc8abd956e571e79dde6496d8bb4ca9aaadd83...f60e4029d64de202e81d2cd114f8a90dc0a1878e)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/6a2129deda9eec5f432e1428b59250bd9e12837f)

* [OCPBUGS-45564](https://issues.redhat.com/browse/OCPBUGS-45564): Align vSphere UPI haproxy config with IPI [#9276](https://github.com/openshift/installer/pull/9276)
* [OCPBUGS-53453](https://issues.redhat.com/browse/OCPBUGS-53453): IBMCloud: Move to IBM TF openshift fork [#9592](https://github.com/openshift/installer/pull/9592)
* [Full changelog](https://github.com/openshift/installer/compare/6223837ba6a997b8cef88795a90717f9546286bb...6a2129deda9eec5f432e1428b59250bd9e12837f)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/001d949830b89ce846e674701cac386db465a6f5)

* [OCPBUGS-53324](https://issues.redhat.com/browse/OCPBUGS-53324): BMO can expose any secret via BMCEventSubscription CRD [#405](https://github.com/openshift/baremetal-operator/pull/405)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/20646c92b5f1c2a7b49fe12effee0b3c74df8058...001d949830b89ce846e674701cac386db465a6f5)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/ce6f538dfe49e534886321899dbbe2b4b65fc2c7)

* [OCPBUGS-53825](https://issues.redhat.com/browse/OCPBUGS-53825): update github.com/golang-jwt/jwt [#837](https://github.com/openshift/cloud-credential-operator/pull/837)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/fe3500a441cb852ecb8c65e82d363b7ea6db4f94...ce6f538dfe49e534886321899dbbe2b4b65fc2c7)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c)

* [OCPBUGS-54569](https://issues.redhat.com/browse/OCPBUGS-54569): Avoid duplicate OAuth client creation [#764](https://github.com/openshift/cluster-authentication-operator/pull/764)
* [OCPBUGS-45051](https://issues.redhat.com/browse/OCPBUGS-45051): [4.18] bump library-go to bring in workload-conditions fix [#743](https://github.com/openshift/cluster-authentication-operator/pull/743)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/75c7842973cbeccaf98ec4f8102093f688278eca...4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d1afaf45d6a03a38614ebca0289dd4b9b489c5f1)

* [OCPBUGS-53241](https://issues.redhat.com/browse/OCPBUGS-53241): improve replica counting and decrease target size behavior [#346](https://github.com/openshift/kubernetes-autoscaler/pull/346)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4674e81c349b841a139af8a5b5041722ec2f7b2f...d1afaf45d6a03a38614ebca0289dd4b9b489c5f1)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e30ce1d8ca759e861e5094e8b3665d1da6d3474f)

* [OCPBUGS-53080](https://issues.redhat.com/browse/OCPBUGS-53080): Add missing relatedObjects [#467](https://github.com/openshift/cluster-baremetal-operator/pull/467)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/dfc6c062e17a22923547188cf893509524931a7f...e30ce1d8ca759e861e5094e8b3665d1da6d3474f)


### [cluster-config-api](https://github.com/openshift/api/tree/d6c84c55a124ab4bd96b1a18c916d3f314f1a95a)

* [OCPBUGS-54784](https://issues.redhat.com/browse/OCPBUGS-54784): [release-4.18] Bump openshift/controller-tools to latest commit [#2267](https://github.com/openshift/api/pull/2267)
* [Full changelog](https://github.com/openshift/api/compare/e7f23be12279d3c245c013c234f967e5ccb426e2...d6c84c55a124ab4bd96b1a18c916d3f314f1a95a)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ad0e7bf6fb078047e58a923fa057293c0e5535ac)

* [OCPBUGS-49898](https://issues.redhat.com/browse/OCPBUGS-49898): bindata/alerts/slo: improve burnrate calculation [#1808](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1808)
* [OCPBUGS-53066](https://issues.redhat.com/browse/OCPBUGS-53066): Bump library-go [#1828](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1828)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f...ad0e7bf6fb078047e58a923fa057293c0e5535ac)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/118d1f1a7929c09d22ad1d3ab2a9fd984236bbfd)

* [OCPBUGS-54351](https://issues.redhat.com/browse/OCPBUGS-54351): add rhdmalone to owners [#617](https://github.com/openshift/cluster-samples-operator/pull/617)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/de85e478a2f3dcc712ce5f02b56279cb116357f5...118d1f1a7929c09d22ad1d3ab2a9fd984236bbfd)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/8caab452b91df0d77ab052b1833a4d54a1374634)

* NO-JIRA: Updating openshift-ci-release-key for 2 years [#72](https://github.com/openshift/cluster-update-keys/pull/72)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...8caab452b91df0d77ab052b1833a4d54a1374634)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/1b8c94ac55d8602ba6669325ade654ae47ea74cf)

* [OCPBUGS-44769](https://issues.redhat.com/browse/OCPBUGS-44769): Fix RWX mode for hyperdisks [#74](https://github.com/openshift/gcp-pd-csi-driver/pull/74)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/14fa4d9a2c2c66ee796035e01b39aa0f6f4cf7a5...1b8c94ac55d8602ba6669325ade654ae47ea74cf)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/97471c6ac55733da63e4db6680889897a5915ca7)

* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): Update to Kubernetes v1.31.7 [#2248](https://github.com/openshift/kubernetes/pull/2248)
* [Full changelog](https://github.com/openshift/kubernetes/compare/6020cf5333bdeb77f95fa33f8272e5251ea28edc...97471c6ac55733da63e4db6680889897a5915ca7)


### [hypershift](https://github.com/openshift/hypershift/tree/b2b45bcc0db499e0eb2f78767bcff1d281bf9f34)

* [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Fix golang crypto dependency go.mod replacement [#5992](https://github.com/openshift/hypershift/pull/5992)
* [OCPBUGS-54814](https://issues.redhat.com/browse/OCPBUGS-54814): [release-4.18] add feature set aware feature gates to HO and CPO [#6014](https://github.com/openshift/hypershift/pull/6014)
* [OCPBUGS-54624](https://issues.redhat.com/browse/OCPBUGS-54624): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5980](https://github.com/openshift/hypershift/pull/5980)
* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Sync RBAC for attaching volumes on VM level [#5988](https://github.com/openshift/hypershift/pull/5988)
* [OCPBUGS-54627](https://issues.redhat.com/browse/OCPBUGS-54627): Use system trust bundle in CPO IDP https client [#5981](https://github.com/openshift/hypershift/pull/5981)
* [ARO-15695](https://issues.redhat.com/browse/ARO-15695), [OCPBUGS-54625](https://issues.redhat.com/browse/OCPBUGS-54625): backport capabilities api [#5964](https://github.com/openshift/hypershift/pull/5964)
* [OCPBUGS-54411](https://issues.redhat.com/browse/OCPBUGS-54411): Backport PR 5876 to release-4.18 [#5936](https://github.com/openshift/hypershift/pull/5936)
* [OCPBUGS-54498](https://issues.redhat.com/browse/OCPBUGS-54498): Support hypershift-operator scoping for secretJanitor [#5961](https://github.com/openshift/hypershift/pull/5961)
* [OCPBUGS-54609](https://issues.redhat.com/browse/OCPBUGS-54609): [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable [#5950](https://github.com/openshift/hypershift/pull/5950)
* NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 [#5963](https://github.com/openshift/hypershift/pull/5963)
* [OCPBUGS-53905](https://issues.redhat.com/browse/OCPBUGS-53905): bump golang-jwt v4 and v5 [#5905](https://github.com/openshift/hypershift/pull/5905)
* [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5919](https://github.com/openshift/hypershift/pull/5919)
* [Full changelog](https://github.com/openshift/hypershift/compare/2ceb38f92bd249d83b3c9f21e9d888a65ace0868...b2b45bcc0db499e0eb2f78767bcff1d281bf9f34)


### [insights-operator](https://github.com/openshift/insights-operator/tree/7f9ed155f7361fb0a16f666fd53111cfb16d4cca)

* [OCPBUGS-51163](https://issues.redhat.com/browse/OCPBUGS-51163): Fix bad IPv6 address (#1074) [#1074](https://github.com/openshift/insights-operator/pull/1074)
* [Full changelog](https://github.com/openshift/insights-operator/compare/8a9746e4b1bbe139d162ecc894041495059dac4a...7f9ed155f7361fb0a16f666fd53111cfb16d4cca)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/2111495e6d03f1bfe0702996fdd1355ca21b78cf)

* [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Ensure volume stays attached through reboots [#55](https://github.com/openshift/kubevirt-csi-driver/pull/55)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ba2234bd5974a6f9dae6d7f9caec56485351db0a...2111495e6d03f1bfe0702996fdd1355ca21b78cf)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/20f26604558b44f4bdc105e52246ddec7898e020)

* [OKD-239](https://issues.redhat.com/browse/OKD-239): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4955](https://github.com/openshift/machine-config-operator/pull/4955)
* [OCPBUGS-54462](https://issues.redhat.com/browse/OCPBUGS-54462): OSUpdateStarted event should only be emitted on actual OS updates [#4967](https://github.com/openshift/machine-config-operator/pull/4967)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/28740b628797734ed26d4b4926530f6d41d4ce6b...20f26604558b44f4bdc105e52246ddec7898e020)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/eb6123bd41269ccc6f5abddadfbc8e3af4481e09)

* [OU-724](https://issues.redhat.com/browse/OU-724): remove deleted image [#376](https://github.com/openshift/monitoring-plugin/pull/376)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a5a82997a17cdcee03e9a4a58ac42c694d4174aa...eb6123bd41269ccc6f5abddadfbc8e3af4481e09)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/eafda94b0dfae255df38d41749912dd0c0988cf3)

* [OCPBUGS-54727](https://issues.redhat.com/browse/OCPBUGS-54727): Use tag 0.0.3+2 of catalog-filter (#1128) [#1128](https://github.com/openshift/oc-mirror/pull/1128)
* [OCPBUGS-52978](https://issues.redhat.com/browse/OCPBUGS-52978): delete: fix typo in --help output (#1121) [#1121](https://github.com/openshift/oc-mirror/pull/1121)
* [OCPBUGS-52960](https://issues.redhat.com/browse/OCPBUGS-52960): v2: fix setting version during build (#1118) [#1118](https://github.com/openshift/oc-mirror/pull/1118)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c6ec6e36092ff22d2a248deec06b32cb3257d621...eafda94b0dfae255df38d41749912dd0c0988cf3)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/eec49c5b91ec801640e973743b46a55689f5eb40)

* [OCPBUGS-54304](https://issues.redhat.com/browse/OCPBUGS-54304): Intermittent authentication issues when accessing OpenShift registry [#369](https://github.com/openshift/openshift-controller-manager/pull/369)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/5bfc8081a65ea3e0d23306c0398143a9987d659e...eec49c5b91ec801640e973743b46a55689f5eb40)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/09261dc5c16b81bf98f44fab62d26838d5a28f8e)

* [OCPBUGS-54671](https://issues.redhat.com/browse/OCPBUGS-54671): EIP no reroute: allow multiple entries for pod to pod and pod to join [#2510](https://github.com/openshift/ovn-kubernetes/pull/2510)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4af08abc39c013bf3f0a493afd3c50d8f7f07805...09261dc5c16b81bf98f44fab62d26838d5a28f8e)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/10ac06f57bface0b3481e111c4e1d5b7f52db7f4)

* [OCPBUGS-54243](https://issues.redhat.com/browse/OCPBUGS-54243): Fix for  CVE-2024-51744 in github.com/golang-jwt/jwt/v4 [#111](https://github.com/openshift/machine-api-provider-powervs/pull/111)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/e253fa30d99bb7ed00c1f27ca3d810fa682a1901...10ac06f57bface0b3481e111c4e1d5b7f52db7f4)


### [tests](https://github.com/openshift/origin/tree/bf5bfee23b3007f91723eb1f24054a222240d65f)

* [OCPBUGS-54807](https://issues.redhat.com/browse/OCPBUGS-54807): support provider type external [#29666](https://github.com/openshift/origin/pull/29666)
* [OCPBUGS-54725](https://issues.redhat.com/browse/OCPBUGS-54725): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29657](https://github.com/openshift/origin/pull/29657)
* [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): bump(k8s): update k8s.io/* dependencies to v1.31.7 [#29634](https://github.com/openshift/origin/pull/29634)
* [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): use non-fake boot image for patch [#29584](https://github.com/openshift/origin/pull/29584)
* [Full changelog](https://github.com/openshift/origin/compare/68b6d984eccbfe3ffd58099f618632ac48915a5b...bf5bfee23b3007f91723eb1f24054a222240d65f)