# 4.18.0-okd-scos.8 Created: 2025-04-13 05:51:00 +0000 UTC Image Digest: `sha256:de900611bc63fa24420d5e94f3647e4d650de89fe54302444e1ab26a4b1c81c6` Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-04-12-155543 ## Changes from 4.18.0-okd-scos.7 ### Components * Kubectl 1.31.1 * Kubernetes 1.31.7 * Kubernetes Tests 1.31.7 * CentOS Stream CoreOS upgraded from 418.9.202503240632-0 to 418.9.202504111553-0 ### Rebuilt images without code change * stream-coreos `sha256:0e0e1c3d5c712b67c0247acc0d22f761c3cd05aec3cd092146c4ac29184697a0` * stream-coreos-extensions `sha256:1cccc442b590969f93febeb17648769b0a0690ceab6a3b464d660c7633715d44` ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/92575979cc7d65303169444f2afce22d36f918ce) * [OCPBUGS-53721](https://issues.redhat.com/browse/OCPBUGS-53721): Bump jwt to 4.5.2 in release-4.18 (#1085) [#1085](https://github.com/openshift/assisted-installer/pull/1085) * [Full changelog](https://github.com/openshift/assisted-installer/compare/8bb42ac9fd9624f86c97c4422bd5f982251e5d91...92575979cc7d65303169444f2afce22d36f918ce) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/3aeceb7ef080394626083fcdc0597e6e2ba0d30f) * [OCPBUGS-54544](https://issues.redhat.com/browse/OCPBUGS-54544): Bump github.com/go-jose/go-jose/v4 to v4.0.5 in release-4.18 (#965) [#965](https://github.com/openshift/assisted-installer-agent/pull/965) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e1670941fc948d9f3da739d0aa6878f8a33f6275...3aeceb7ef080394626083fcdc0597e6e2ba0d30f) ### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cdc9d6499cd5020d96811fd02bde14d4d06786cc) * [OCPBUGS-54383](https://issues.redhat.com/browse/OCPBUGS-54383): Disable remove-not-ready-taint for azure disk csi driver [#374](https://github.com/openshift/csi-operator/pull/374) * [Full changelog](https://github.com/openshift/csi-operator/compare/a95f8b365dda90ca1cb9d85a13c84670f6200cff...cdc9d6499cd5020d96811fd02bde14d4d06786cc) ### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/c937080f51cec58650daa15805be548d09310c64) * [OCPBUGS-53497](https://issues.redhat.com/browse/OCPBUGS-53497): bump golang-jwt v4 [#11](https://github.com/openshift/azure-kubernetes-kms/pull/11) * [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/d4fb1b6db34b00c12f27003f09ca8e7218ece54e...c937080f51cec58650daa15805be548d09310c64) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/6a2129deda9eec5f432e1428b59250bd9e12837f) * [OCPBUGS-45564](https://issues.redhat.com/browse/OCPBUGS-45564): Align vSphere UPI haproxy config with IPI [#9276](https://github.com/openshift/installer/pull/9276) * [Full changelog](https://github.com/openshift/installer/compare/d765baafafd7093c4a68e4cf96c9affb3839a109...6a2129deda9eec5f432e1428b59250bd9e12837f) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c) * [OCPBUGS-54569](https://issues.redhat.com/browse/OCPBUGS-54569): Avoid duplicate OAuth client creation [#764](https://github.com/openshift/cluster-authentication-operator/pull/764) * [OCPBUGS-45051](https://issues.redhat.com/browse/OCPBUGS-45051): [4.18] bump library-go to bring in workload-conditions fix [#743](https://github.com/openshift/cluster-authentication-operator/pull/743) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/75c7842973cbeccaf98ec4f8102093f688278eca...4a9bc4f13e359f2e550adeb7cad5e25ea4ff321c) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d1afaf45d6a03a38614ebca0289dd4b9b489c5f1) * [OCPBUGS-53241](https://issues.redhat.com/browse/OCPBUGS-53241): improve replica counting and decrease target size behavior [#346](https://github.com/openshift/kubernetes-autoscaler/pull/346) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/4674e81c349b841a139af8a5b5041722ec2f7b2f...d1afaf45d6a03a38614ebca0289dd4b9b489c5f1) ### [cluster-config-api](https://github.com/openshift/api/tree/d6c84c55a124ab4bd96b1a18c916d3f314f1a95a) * [OCPBUGS-54784](https://issues.redhat.com/browse/OCPBUGS-54784): [release-4.18] Bump openshift/controller-tools to latest commit [#2267](https://github.com/openshift/api/pull/2267) * [Full changelog](https://github.com/openshift/api/compare/e7f23be12279d3c245c013c234f967e5ccb426e2...d6c84c55a124ab4bd96b1a18c916d3f314f1a95a) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/ad0e7bf6fb078047e58a923fa057293c0e5535ac) * [OCPBUGS-49898](https://issues.redhat.com/browse/OCPBUGS-49898): bindata/alerts/slo: improve burnrate calculation [#1808](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1808) * [OCPBUGS-53066](https://issues.redhat.com/browse/OCPBUGS-53066): Bump library-go [#1828](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1828) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/087c72f1e261fb7c42fe6fc5d73a1f70d3c76d2f...ad0e7bf6fb078047e58a923fa057293c0e5535ac) ### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/8caab452b91df0d77ab052b1833a4d54a1374634) * NO-JIRA: Updating openshift-ci-release-key for 2 years [#72](https://github.com/openshift/cluster-update-keys/pull/72) * [Full changelog](https://github.com/openshift/cluster-update-keys/compare/d44fca585d081a72cb2c67734556a27bbfc9470e...8caab452b91df0d77ab052b1833a4d54a1374634) ### [hypershift](https://github.com/openshift/hypershift/tree/b2b45bcc0db499e0eb2f78767bcff1d281bf9f34) * [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Fix golang crypto dependency go.mod replacement [#5992](https://github.com/openshift/hypershift/pull/5992) * [OCPBUGS-54814](https://issues.redhat.com/browse/OCPBUGS-54814): [release-4.18] add feature set aware feature gates to HO and CPO [#6014](https://github.com/openshift/hypershift/pull/6014) * [OCPBUGS-54624](https://issues.redhat.com/browse/OCPBUGS-54624): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5980](https://github.com/openshift/hypershift/pull/5980) * [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Sync RBAC for attaching volumes on VM level [#5988](https://github.com/openshift/hypershift/pull/5988) * [OCPBUGS-54627](https://issues.redhat.com/browse/OCPBUGS-54627): Use system trust bundle in CPO IDP https client [#5981](https://github.com/openshift/hypershift/pull/5981) * [ARO-15695](https://issues.redhat.com/browse/ARO-15695), [OCPBUGS-54625](https://issues.redhat.com/browse/OCPBUGS-54625): backport capabilities api [#5964](https://github.com/openshift/hypershift/pull/5964) * [OCPBUGS-54411](https://issues.redhat.com/browse/OCPBUGS-54411): Backport PR 5876 to release-4.18 [#5936](https://github.com/openshift/hypershift/pull/5936) * [OCPBUGS-54498](https://issues.redhat.com/browse/OCPBUGS-54498): Support hypershift-operator scoping for secretJanitor [#5961](https://github.com/openshift/hypershift/pull/5961) * [Full changelog](https://github.com/openshift/hypershift/compare/000eda5b26f5e84c5a766cf4e25d5331f41d8540...b2b45bcc0db499e0eb2f78767bcff1d281bf9f34) ### [insights-operator](https://github.com/openshift/insights-operator/tree/7f9ed155f7361fb0a16f666fd53111cfb16d4cca) * [OCPBUGS-51163](https://issues.redhat.com/browse/OCPBUGS-51163): Fix bad IPv6 address (#1074) [#1074](https://github.com/openshift/insights-operator/pull/1074) * [Full changelog](https://github.com/openshift/insights-operator/compare/8a9746e4b1bbe139d162ecc894041495059dac4a...7f9ed155f7361fb0a16f666fd53111cfb16d4cca) ### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/2111495e6d03f1bfe0702996fdd1355ca21b78cf) * [OCPBUGS-54630](https://issues.redhat.com/browse/OCPBUGS-54630): Ensure volume stays attached through reboots [#55](https://github.com/openshift/kubevirt-csi-driver/pull/55) * [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/ba2234bd5974a6f9dae6d7f9caec56485351db0a...2111495e6d03f1bfe0702996fdd1355ca21b78cf) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/20f26604558b44f4bdc105e52246ddec7898e020) * [OKD-239](https://issues.redhat.com/browse/OKD-239): Consolidate OpenStack and PowerVS hostname handling into mco-hostname script [#4955](https://github.com/openshift/machine-config-operator/pull/4955) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/85ff8f1f6f6017bace77fed7638d489c957d507a...20f26604558b44f4bdc105e52246ddec7898e020) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/eafda94b0dfae255df38d41749912dd0c0988cf3) * [OCPBUGS-54727](https://issues.redhat.com/browse/OCPBUGS-54727): Use tag 0.0.3+2 of catalog-filter (#1128) [#1128](https://github.com/openshift/oc-mirror/pull/1128) * [Full changelog](https://github.com/openshift/oc-mirror/compare/214b61095a1b1992d55cef98d9cb7045dd6ba18a...eafda94b0dfae255df38d41749912dd0c0988cf3) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/09261dc5c16b81bf98f44fab62d26838d5a28f8e) * [OCPBUGS-54671](https://issues.redhat.com/browse/OCPBUGS-54671): EIP no reroute: allow multiple entries for pod to pod and pod to join [#2510](https://github.com/openshift/ovn-kubernetes/pull/2510) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/4af08abc39c013bf3f0a493afd3c50d8f7f07805...09261dc5c16b81bf98f44fab62d26838d5a28f8e) ### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/10ac06f57bface0b3481e111c4e1d5b7f52db7f4) * [OCPBUGS-54243](https://issues.redhat.com/browse/OCPBUGS-54243): Fix for CVE-2024-51744 in github.com/golang-jwt/jwt/v4 [#111](https://github.com/openshift/machine-api-provider-powervs/pull/111) * [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/e253fa30d99bb7ed00c1f27ca3d810fa682a1901...10ac06f57bface0b3481e111c4e1d5b7f52db7f4) ### [tests](https://github.com/openshift/origin/tree/bf5bfee23b3007f91723eb1f24054a222240d65f) * [OCPBUGS-54807](https://issues.redhat.com/browse/OCPBUGS-54807): support provider type external [#29666](https://github.com/openshift/origin/pull/29666) * [OCPBUGS-54725](https://issues.redhat.com/browse/OCPBUGS-54725): Fix egress firewall tests by updating the URL from docs.openshift.com to redhat.com [#29657](https://github.com/openshift/origin/pull/29657) * [Full changelog](https://github.com/openshift/origin/compare/f9e1b11f94e82a14f6d7f888862e7f1960fa4b36...bf5bfee23b3007f91723eb1f24054a222240d65f)