# 4.18.0-okd-scos.10 Created: 2025-05-12 16:59:12 +0000 UTC Image Digest: `sha256:f41a770c88f7414ea999aab7a550e24fde04ddb0be89a193b3f7e6c21de7af1b` Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-05-12-045424 ## Changes from 4.18.0-okd-scos.9 ### Components * Kubectl 1.31.1 * Kubernetes upgraded from 1.31.7 to 1.31.8 * Kubernetes Tests upgraded from 1.31.7 to 1.31.8 * CentOS Stream CoreOS upgraded from 418.9.202504250632-0 to 418.9.202504300632-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | | ExternalOIDCWithUIDAndExtraClaimMappings
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) | ### Rebuilt images without code change * stream-coreos `sha256:b7af2e6cd46cfffee7c729a3d44f701c000661ef5a467a4620803eb0db1dc98a` * stream-coreos-extensions `sha256:4bf8b3cb24f02f3adf83f9764edafba133d94652d9503d5b9001105e55f79eb0` ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/c4935a5ec26f04b1f1ef0b5f21c61904d77b6b5a) * [OCPBUGS-55373](https://issues.redhat.com/browse/OCPBUGS-55373): Update eviction policy for Spot VMs from Deallocate to Delete [#139](https://github.com/openshift/machine-api-provider-azure/pull/139) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b8bc2053066bace662f5fece646be7ea76bc3c72...c4935a5ec26f04b1f1ef0b5f21c61904d77b6b5a) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/aade717f963a3603414bdc86d614a7c48676d8cb) * [OCPBUGS-55794](https://issues.redhat.com/browse/OCPBUGS-55794): IBI nmstate unit test fix [#9692](https://github.com/openshift/installer/pull/9692) * [Full changelog](https://github.com/openshift/installer/compare/9357b668a760d53a34f7094840d1e9f773127441...aade717f963a3603414bdc86d614a7c48676d8cb) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/35f7af703663a7459e0bc494e69ed2cc80543d04) * [OCPBUGS-55449](https://issues.redhat.com/browse/OCPBUGS-55449): Get installer image from configMap for node-image command [#2013](https://github.com/openshift/oc/pull/2013) * [OCPBUGS-55647](https://issues.redhat.com/browse/OCPBUGS-55647): Use fedora image in unit tests instead of centos [#2014](https://github.com/openshift/oc/pull/2014) * [Full changelog](https://github.com/openshift/oc/compare/eb9bc9b02fc27a48cceccc0140fc3f8ee1414c64...35f7af703663a7459e0bc494e69ed2cc80543d04) ### [cluster-config-api](https://github.com/openshift/api/tree/d21e7b9699338d2d989fbe43523acf0bc6a9477c) * [OCPBUGS-55792](https://issues.redhat.com/browse/OCPBUGS-55792): [release-4.18] config: add uid and extra claim mappings for external OIDC configuration [#2311](https://github.com/openshift/api/pull/2311) * [OCPBUGS-53221](https://issues.redhat.com/browse/OCPBUGS-53221): Allow spaces in AWS resource tags [#2239](https://github.com/openshift/api/pull/2239) * [Full changelog](https://github.com/openshift/api/compare/d6c84c55a124ab4bd96b1a18c916d3f314f1a95a...d21e7b9699338d2d989fbe43523acf0bc6a9477c) ### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/0ffe0aed115535e9489b6f309ac4d2c6c976adf3) * [OCPBUGS-48478](https://issues.redhat.com/browse/OCPBUGS-48478): [release-4.18] Add openshift node selector annotation [#116](https://github.com/openshift/cluster-olm-operator/pull/116) * [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/6da706d712dda30cec7ff92c5bfb76074df3d5fe...0ffe0aed115535e9489b6f309ac4d2c6c976adf3) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa) * [OCPBUGS-55783](https://issues.redhat.com/browse/OCPBUGS-55783): Samples Operator should sort failing image imports [#638](https://github.com/openshift/cluster-samples-operator/pull/638) * [OCPBUGS-55782](https://issues.redhat.com/browse/OCPBUGS-55782): only update LastTransitionTime if operator status change [#637](https://github.com/openshift/cluster-samples-operator/pull/637) * [OCPBUGS-55781](https://issues.redhat.com/browse/OCPBUGS-55781): Adding filter to clusterOperatorInformerEventHandler [#636](https://github.com/openshift/cluster-samples-operator/pull/636) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/919d51f809c24ba2ab05d898ba165640af2c41af...5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/94c0e705d520b0eeb765f72de2dae2cd6f1159bb) * [OCPBUGS-55359](https://issues.redhat.com/browse/OCPBUGS-55359): install/0000_00_cluster-version-operator_01_admingate_configmap: Add ack-4.18-kube-1.32-api-removals-in-4.19 [#1181](https://github.com/openshift/cluster-version-operator/pull/1181) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/3646a107905b6c9c28cf52c5ae129a1e0d9cc9b4...94c0e705d520b0eeb765f72de2dae2cd6f1159bb) ### [console](https://github.com/openshift/console/tree/f5d9365ad767cc724f1543f7f864297e57639516) * [OCPBUGS-54899](https://issues.redhat.com/browse/OCPBUGS-54899): Fetching taskRuns in PLR details page using PLR UID also [#14961](https://github.com/openshift/console/pull/14961) * [OCPBUGS-54888](https://issues.redhat.com/browse/OCPBUGS-54888): Can't edit deployment (from the private git repository) in RHOCP 4.15 via console [#14959](https://github.com/openshift/console/pull/14959) * [OCPBUGS-45369](https://issues.redhat.com/browse/OCPBUGS-45369): Authenticate user token in openshift Authenticate func [#14664](https://github.com/openshift/console/pull/14664) * [OCPBUGS-55195](https://issues.redhat.com/browse/OCPBUGS-55195): fix bug where operator appears twice [#14984](https://github.com/openshift/console/pull/14984) * [Full changelog](https://github.com/openshift/console/compare/b033fc18dfcd75f68912d986a3832db5d5ffd376...f5d9365ad767cc724f1543f7f864297e57639516) ### [container-networking-plugins, containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins/tree/69c7d1e37a5231c9b38c967011681538f0686bd6) * [OCPBUGS-55354](https://issues.redhat.com/browse/OCPBUGS-55354): Fix dhcp [#186](https://github.com/openshift/containernetworking-plugins/pull/186) * [OCPBUGS-55346](https://issues.redhat.com/browse/OCPBUGS-55346): Check error returned by ipv6 SettleAddresses [#185](https://github.com/openshift/containernetworking-plugins/pull/185) * [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/24a653296bab25b772cf6a573cc26f6f884be4ae...69c7d1e37a5231c9b38c967011681538f0686bd6) ### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/72173bc741f97fa70e52bf9f34df9c23f7612c2d) * [OCPBUGS-55724](https://issues.redhat.com/browse/OCPBUGS-55724): Add configurable option for hardware-related timeout delay [#328](https://github.com/openshift/etcd/pull/328) * [Full changelog](https://github.com/openshift/etcd/compare/98b19154718fd94d4e8ad30824c00ba1de87cb78...72173bc741f97fa70e52bf9f34df9c23f7612c2d) ### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/d060f964d37d5ac94a75897551526703286b7ca1) * UPSTREAM: 127757 : OCPBUGS-55639: scheduler: Improve CSILimits plugi… [#2283](https://github.com/openshift/kubernetes/pull/2283) * [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#2278](https://github.com/openshift/kubernetes/pull/2278) * [Full changelog](https://github.com/openshift/kubernetes/compare/0b8a68191de069deeca944e443a5ead7e0469b41...d060f964d37d5ac94a75897551526703286b7ca1) ### [hypershift](https://github.com/openshift/hypershift/tree/ab02c94ed951d38fbc454e580e838705b52fc393) * [OCPBUGS-55177](https://issues.redhat.com/browse/OCPBUGS-55177): Don't check if olm images exist if guest cluster [#6065](https://github.com/openshift/hypershift/pull/6065) * [OCPBUGS-55230](https://issues.redhat.com/browse/OCPBUGS-55230): Add annotation to configure KAS goaway-chance [#6066](https://github.com/openshift/hypershift/pull/6066) * [OCPBUGS-54865](https://issues.redhat.com/browse/OCPBUGS-54865): KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled [#6020](https://github.com/openshift/hypershift/pull/6020) * [OCPBUGS-54737](https://issues.redhat.com/browse/OCPBUGS-54737): Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests [#6052](https://github.com/openshift/hypershift/pull/6052) * [OCPBUGS-55148](https://issues.redhat.com/browse/OCPBUGS-55148): Update OpenShift apiserver liveness and readiness probe endpoints to livez and readyz [#6059](https://github.com/openshift/hypershift/pull/6059) * [OCPBUGS-54946](https://issues.redhat.com/browse/OCPBUGS-54946), [RHOCPPRIO-433](https://issues.redhat.com/browse/RHOCPPRIO-433): Add validation to avoid conflicts between KubeAPIServer and NamedCertificates SANs [#6091](https://github.com/openshift/hypershift/pull/6091) * [Full changelog](https://github.com/openshift/hypershift/compare/c7d58282055b74c632de9f2c579ccc500ccb1fdd...ab02c94ed951d38fbc454e580e838705b52fc393) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/6964fcc8f8ee7a05410d0daae1369c2ea914f3be) * [OCPBUGS-55364](https://issues.redhat.com/browse/OCPBUGS-55364): Delay determining the hostname to put into ignition [#183](https://github.com/openshift/ironic-agent-image/pull/183) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/cfff1ce89bc4e3cb24995547c6645f21431a9d14...6964fcc8f8ee7a05410d0daae1369c2ea914f3be) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/57836ffd43680785e7a24e794013be9702946c4a) * [OCPBUGS-53427](https://issues.redhat.com/browse/OCPBUGS-53427): pkg/operator/status: Drop kubelet skew guard, add RHEL guard [#4956](https://github.com/openshift/machine-config-operator/pull/4956) * [release 4.18] OCPBUGS-55473: In OCL. Usbguard service fails when we install the usbguard extension [#5018](https://github.com/openshift/machine-config-operator/pull/5018) * [OCPBUGS-54765](https://issues.redhat.com/browse/OCPBUGS-54765): [release-4.18] kubelet-service: narrow down restorecon path [#4978](https://github.com/openshift/machine-config-operator/pull/4978) * [OCPBUGS-55428](https://issues.redhat.com/browse/OCPBUGS-55428): MSBIC should not update windows machinesets [#5012](https://github.com/openshift/machine-config-operator/pull/5012) * [OCPBUGS-55290](https://issues.redhat.com/browse/OCPBUGS-55290): MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists [#5000](https://github.com/openshift/machine-config-operator/pull/5000) * [OCPBUGS-55293](https://issues.redhat.com/browse/OCPBUGS-55293): Fix PollUntilContextTimeout in syncRenderConfig [#5001](https://github.com/openshift/machine-config-operator/pull/5001) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/fe6668121f9136881f41d9ae99c02fe37589182e...57836ffd43680785e7a24e794013be9702946c4a) ### [metallb-frr](https://github.com/openshift/frr/tree/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) * [OCPBUGS-55343](https://issues.redhat.com/browse/OCPBUGS-55343): OpenShift Only: TEMPORARY: pin FRR version to known working rpm [#88](https://github.com/openshift/frr/pull/88) * [Full changelog](https://github.com/openshift/frr/compare/78714ea6d2fd4de722473fa68125bfb09b21e6f8...98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/3dfb2d2c70e60efeb3632f0e8a581648e32597b2) * [OCPBUGS-55270](https://issues.redhat.com/browse/OCPBUGS-55270): Fix whereabouts-reconciler no namespace error [#362](https://github.com/openshift/whereabouts-cni/pull/362) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/74f285c3d6c642d96039067a5e99e8db85b146f9...3dfb2d2c70e60efeb3632f0e8a581648e32597b2) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/9404c2330085c3dd42504f34c608974ffb957d6e) * [CNV-60065](https://issues.redhat.com/browse/CNV-60065): fix cudn input name [#240](https://github.com/openshift/networking-console-plugin/pull/240) * [OCPBUGS-49395](https://issues.redhat.com/browse/OCPBUGS-49395): Add translations [#238](https://github.com/openshift/networking-console-plugin/pull/238) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/08e6a227ea4733adfa9af63ba4ef62269183aa97...9404c2330085c3dd42504f34c608974ffb957d6e) ### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/afe324bf56e0348fb45e5fbb9c832c1587482153) * [OCPBUGS-51861](https://issues.redhat.com/browse/OCPBUGS-51861): fixing CVE-2025-22868 [#96](https://github.com/openshift/machine-api-provider-nutanix/pull/96) * [OCPBUGS-54616](https://issues.redhat.com/browse/OCPBUGS-54616): Fix link-local addresses being added to machine [#101](https://github.com/openshift/machine-api-provider-nutanix/pull/101) * [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/7d0cb735f3e86c0828821cf54f8a40c74d9232aa...afe324bf56e0348fb45e5fbb9c832c1587482153) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/6b0882e21264b4efc463ccb646846037882a5551) * [OCPBUGS-54626](https://issues.redhat.com/browse/OCPBUGS-54626): [release-4.18] cli: return distinct error codes depending on failure (#1125) [#1125](https://github.com/openshift/oc-mirror/pull/1125) * [OCPBUGS-55361](https://issues.redhat.com/browse/OCPBUGS-55361): v2/operator: refactor operator FilteredCollector (#1134) [#1134](https://github.com/openshift/oc-mirror/pull/1134) * [Full changelog](https://github.com/openshift/oc-mirror/compare/222e38394c0d96357ba0179e88aa65956d4112a4...6b0882e21264b4efc463ccb646846037882a5551) ### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/3ea075d56e2f3f25ca520022366797c94897e632) * [OCPBUGS-51225](https://issues.redhat.com/browse/OCPBUGS-51225), [OCPBUGS-51227](https://issues.redhat.com/browse/OCPBUGS-51227), [OCPBUGS-51245](https://issues.redhat.com/browse/OCPBUGS-51245): pin go-jose/v4@v4.0.5 (#3550) [#992](https://github.com/openshift/operator-framework-olm/pull/992) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/cc44b486ea91015a30946029b3a0be3af49ea789...3ea075d56e2f3f25ca520022366797c94897e632) ### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3) * [OCPBUGS-55338](https://issues.redhat.com/browse/OCPBUGS-55338): Added error event for failed ingress to route conversion [#59](https://github.com/openshift/route-controller-manager/pull/59) * [OCPBUGS-13181](https://issues.redhat.com/browse/OCPBUGS-13181): ingress: Reset metrics when ingress is deleted [#49](https://github.com/openshift/route-controller-manager/pull/49) * [Full changelog](https://github.com/openshift/route-controller-manager/compare/87dfd7936fc5264ad972dcbc4eb0380dc5cff0db...ce6ffa24dac3a5f49f70818e1159e40eaf27a6a3) ### [tests](https://github.com/openshift/origin/tree/20fce993cc19331658415b450c970028082561cd) * [OCPBUGS-55267](https://issues.redhat.com/browse/OCPBUGS-55267): Update to Kubernetes v1.31.8 [#29765](https://github.com/openshift/origin/pull/29765) * [OCPBUGS-50628](https://issues.redhat.com/browse/OCPBUGS-50628): [test: networking] Skip isolation test when cgroupv1 nodes are present [#29541](https://github.com/openshift/origin/pull/29541) * [OCPBUGS-55470](https://issues.redhat.com/browse/OCPBUGS-55470): [build] Ensure Git Clone Does Not Run Privileged [#29736](https://github.com/openshift/origin/pull/29736) * Revert "OCPBUGS-55277: backport 4.18" [#29720](https://github.com/openshift/origin/pull/29720) * [Full changelog](https://github.com/openshift/origin/compare/539a8f0fd0517a17279be838a0c202bce140138d...20fce993cc19331658415b450c970028082561cd)