Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.18.0-okd-scos.4

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.18.0-okd-scos.ec.3 (changes) - Success
• 4.18.0-okd-scos.3 (changes) - Success
• 4.18.0-okd-scos.2 - Success
• 4.17.0-okd-scos.ec.4 (changes) - Success

Upgrades to:

• 4.18.0-okd-scos.6 (changes) - Success
• 4.18.0-okd-scos.5 (changes) - Failed Success

---

Loading changelog, this may take a while ...

Changes from 4.18.0-okd-scos.2

Created: 2025-03-15 02:37:21 +0000 UTC

Image Digest: sha256:1fd37714fc0216d5f40197f841f2083df9d1008ae64567cbc50d5c761fb6de80

Release 4.18.0-okd-scos.4 was created from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-03-14-073703

Components

• Kubectl 1.31.1
• Kubernetes 1.31.6
• Kubernetes Tests upgraded from 1.31.1 to 1.31.6
• CentOS Stream CoreOS upgraded from 418.9.202502240632-0 to 418.9.202503140633-0 (diff)

Removed images

• ovirt-machine-controllers

Rebuilt images without code change

• stream-coreos sha256:073b0d42818f032b1aa55b1f41598634eaf3bb72e3f34848331aadeccccaa04d
• stream-coreos-extensions sha256:950b469535fae344ce30a018291173190d95a8bb840df79f1ea89b15da00d963

agent-installer-csr-approver, agent-installer-orchestrator

• OCPBUGS-45116: Add retry to mount efi device (#1030) #1030
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Increase image pull timeout during install (#907) #907
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-50556: UPSTREAM: 5339: Bump glog for recent fixes #537
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-49843: Support HCP labels #356
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-51231: github.com/go-jose/go-jose/v4 v4.0.5 #201
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-49885: [Nutanix] Install multi-NICs cluster failed with failureDomains #9440
• OCPBUGS-50524: Add cluster:master_nodes metric retrieval in docs #9449
• OCPBUGS-49864: handle runtime panic when validating ovnKubernetesConfig #9435
• OCPBUGS-49320: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9402
• Full changelog

baremetal-operator

• OCPBUGS-45250: Remove dataImage finalizer if BMH is missing #389
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-49440: Address golang.org/x/* CVEs #1961
• Full changelog

cloud-credential-operator

• OCPBUGS-51237: github.com/go-jose/go-jose/v4 v4.0.5 #824
• Full changelog

cluster-config-api

• OCPBUGS-51295, OCPBUGS-51380: Reject new NodeStatus with revision set #2215
• OCPBUGS-51295: [release-4.18] Add the option to test ratcheting validations within integration tests #2217
• OCPBUGS-51077: [4.18] bump controller-tools dependency to latest downstream commit #2210
• Full changelog

cluster-dns-operator

• OCPBUGS-52514: [release-4.18] Add runbook_url for CoreDNSErrorsHigh #429
• Full changelog

cluster-ingress-operator

• OCPBUGS-48377: Add e2e tests for IdleConnectionTerminationPolicy #1194
• OCPBUGS-48377: Add support for IdleConnectionTerminationPolicy #1188
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-46411: skip generating certs when networkConfig.status.ServiceNetwork is nil #1780
• Full changelog

cluster-monitoring-operator

• OCPBUGS-52565: Bump prometheus-operator to 0.78.2 #2576
• OCPBUGS-50706: Add incidents metric to telemetry #2570
• Full changelog

cluster-network-operator

• OCPBUGS-48305: frr-k8s: align manifests with operator #2657
• OCPBUGS-41178: Updating cluster-network-operator-container image to be consistent with ART for 4.18 #2491
• OCPBUGS-50625: Cherry-pick RouteAdvertisements support back to 4.18 #2645
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) (#1306) #1303
• machineconfig: add support for various hugepage sizes. (#1299) #1299
• OCPBUGS-51088: E2E: Add configuration tests related to align cpus by uncorecache feature (#1298) #1298
• e2e: common way to fetch poolName (#1255) (#1300) #1255
• Full changelog

cluster-storage-operator

• OCPBUGS-51320: fix Vsphere cluster Storage operator in Unavailable state #558
• Full changelog

console

• OCPBUGS-52371: Update the monitoring topic used by the console team #14832
• OCPBUGS-52490: enable clicking outside NodeLogs Selects to close them #14843
• OCPBUGS-50501: Updating cypress config to have video enabled for the CI results #14831
• OCPBUGS-52511: Remove logoutOpenShift method call #14845
• OCPBUGS-50609: update the Deployment pod on change in imageStream #14757
• OCPBUGS-50648: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14761
• OCPBUGS-51086: Show Observe section without PROMETHEUS and MONITORING flags #14784
• OCPBUGS-48798: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14698
• OCPBUGS-51180: Linkify OLM operator uninstall message #14789
• OCPBUGS-51149: Do not load CSRs if user does not have permissions #14787
• OCPBUGS-50647: Enable web terminal tests #14758
• OCPBUGS-50573: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14755
• OCPBUGS-49867: Add support for conditional CSP headers #14720
• OCPBUGS-48736: update variable name for plugin name parsing #14696
• OCPBUGS-49921: fix run time error when no completed version exists #14743
• Full changelog

console-operator

• OCPBUGS-52294: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #966
• OCPBUGS-49867: Add ConsolePluginContentSecurityPolicy feature gate to… #959
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-43430: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.18 #312
• Full changelog

docker-builder

• OCPBUGS-46580: buildah dependency bump to 1.37.6 #453
• Full changelog

etcd, installer-etcd-artifacts

• DOWNSTREAM: <carry>: OCPBUGS-51971: fix a compaction induce latency issue #312
• ETCD-708: Rebase etcd 3.5.18 openshift 4.18 #307
• Full changelog

haproxy-router

• OCPBUGS-48377: Add support for IdleCloseTerminationPolicy #647
• OCPBUGS-49389: Reject All CA-Signed Certs Using SHA1 #649
• Full changelog

hypershift

• OCPBUGS-52863: stop using dev mode for loggers #5811
• OCPBUGS-52878: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5780
• OCPBUGS-52516: Make managed-trust-bundle optional #5783
• OCPBUGS-52417: [release-4.18] refactor aws identity health check into new controller #5770
• OCPBUGS-51375: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5723
• OCPBUGS-50696: add region to AWS creds passed to operators managed by CPO #5629
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-50565: Fix for CVE-2024-45338 in golang.org/x/net/html in release-4.18 #100
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-52872: IBMCloud: MAPI replacing unhealthy CP nodes #62
• Full changelog

insights-operator

• OCPBUGS-48790: Add a liveness probe to the extractor container (#1068) #1068
• Full changelog

ironic

• OCPBUGS-52290: Fix runlogwatch script #642
• Full changelog

machine-api-operator

• OCPBUGS-52494, OCPBUGS-52496: Updates GCP credentials request #1341
• OCPBUGS-52567: add image/read permissions #1342
• OCPBUGS-51263: Drop oVirt support #1333
• CORS-3741: [Nutanix] support multi-subnets in Machine providerSpec #1301
• Full changelog

machine-config-operator

• [release 4.18] OCPBUGS-50954: In OCL, MCPs are reporting Updating=false while the image is being built #4859
• OCPBUGS-50865: Make resolv-prepender env file optional #4855
• OCPBUGS-48809: Enable nmstate-configuration on all platforms #4804
• OCPBUGS-48296: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4788
• OCPBUGS-48341: configure-ovs workaround for ovs-if-br-ex bug #4883
• OCPBUGS-51015: Enforce VIPs to be collocated at the same host #4865
• OCPBUGS-51194: Update cluster-reader ClusterRole permissions #4874
• OCPBUGS-50633: Update format verbs for alert logs #4849
• Full changelog

machine-os-images

• OCPBUGS-51266: Decompress pxe file only if it’s a valid compressed file #52
• OCPBUGS-45456: Fix shellcheck #47
• Full changelog

nutanix-machine-controllers

• OCPBUGS-47268: fixing CVE-2024-45338 #91
• Full changelog

oauth-proxy

• OCPBUGS-48332: Update dependencies to address CVE-2024-24786 #312
• Full changelog

oc-mirror

• OCPBUGS-52588: fix: error when no related image was found (#1106) #1106
• CLID-325: adds cpu and memory profiling (#1103) #1103
• fixes CVE-2024-0406 (#1101) #1101
• v2: disable spinners when not running in a tty (#1082) #1082
• OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1081) #1081
• OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1091) #1091
• OCPBUGS-49991: fixes bundle related images being skipped (#1074) #1074
• v2/cli: always stop local registry and close registry.log (#1090) #1090
• OCPBUGS-44103: bump oc fork version (#1089) #1089
• OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1079) #1079
• OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1075) #1075
• Full changelog

olm-catalogd

• UPSTREAM: 502: Upgrade golang.org/x/net (#502) #502
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-53040: add missing pod disruption reasons to isPodDead #981
• OCPBUGS-50830, OCPBUGS-50832, OCPBUGS-50836: Bump github.com/distribution/distribution/v3 #965
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-48710: DownStream Merge Sync from 4.19 [02-13-2025] #2470
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• OCPBUGS-52565: Bump openshift/prometheus-operator to v0.78.2 #327
• Full changelog

tests

• OCPBUGS-52579: Use payload pullspec for image info test #29587
• OCPBUGS-51295: Rely on unstructured for update status instead of type conversion #29564
• OCPBUGS-50929: Update to Kubernetes v1.31.6 #29548
• OCPBUGS-48389: move initialization of OC to test instead of package level #29472
• OCPBUGS-50921: managed services: add hcp crd to unstable list #29545
• OCPBUGS-50930: managed services: add known image check for gcp #29547
• Full changelog

thanos

• OCPBUGS-52945: Update Go version in go.mod to 1.22.0 #159
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-50638: fix panic when vcenter address is incorrect #293
• Full changelog

---

View changelog in Markdown or change previous release: 4.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.19.0-0.okd-scos-2025-03-31-1751504.19.0-0.okd-scos-2025-03-31-0551494.19.0-0.okd-scos-2025-03-30-1751484.19.0-0.okd-scos-2025-03-30-0551474.19.0-0.okd-scos-2025-03-29-1751464.19.0-0.okd-scos-2025-03-29-055146───4.18.0-0.okd-scos-2025-03-31-1345544.18.0-0.okd-scos-2025-03-31-0145544.18.0-0.okd-scos-2025-03-29-1015314.18.0-0.okd-scos-2025-03-28-2215314.18.0-0.okd-scos-2025-03-28-1015314.18.0-0.okd-scos-2025-03-26-222313───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2025-03-25-1331074.15.0-0.okd-2025-03-13-2041304.15.0-0.okd-2025-02-12-1007064.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.19.0-okd-scos.ec.64.19.0-okd-scos.ec.54.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712

Source code for this page located on github