# 4.18.28 Created: 2025-11-06 15:59:23 +0000 UTC Image Digest: `sha256:3c2f5f714540d76571e70b72ec4b7b728651a05d10bc88b0ee5fae6f90a6eafd` ## Changes from 4.18.27 ### Components * Kubectl 1.31.1 * Kubernetes 1.31.13 * Kubernetes Tests 1.31.12 * Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202511041748-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | | StreamingCollectionEncodingToJSON
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) | | StreamingCollectionEncodingToProtobuf
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) | ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [03ef1905](https://github.com/openshift/assisted-service/commit/03ef19051b8561514d37ec691652647cdd2f260c) `sha256:3d3910aca9752c222458c6b852f783abf4a92bdd572c1db40bf12983f8f650f1` * [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [32a1f2a4](https://github.com/openshift/assisted-installer-agent/commit/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb) `sha256:a68dc0cf16d7d79165d021a16670b7d385393ff0d6da9c7116be4e7fcb3d3889` * [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver) git [6cced666](https://github.com/openshift/azure-disk-csi-driver/commit/6cced6667a8e896c191bd678f740d2b7e0629538) `sha256:677a22254dcc5b2708ddd13e6f5e68ec45910b0f149055f23e65c964c6587b20` * [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [4b34592e](https://github.com/openshift/azure-file-csi-driver/commit/4b34592e8ea0a3f5cc937457a6fc79c1a6ac95cd) `sha256:e827ef1032029110252837a7c6269ca4c0b83f46a2607c513f8cf18c61950013` * [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [35341068](https://github.com/openshift/baremetal-runtimecfg/commit/353410688340dadb583668215e13e2d6cc90e272) `sha256:5ad10db08cfa0152d3e08d2ce673b46ceea601d7d794f10d022f9ccc75f5f920` * [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [e8ca1d70](https://github.com/openshift/containernetworking-plugins/commit/e8ca1d70c43f33cd0e75c776e2a24afbec61b46c) `sha256:529c82525adbc1d19d0ec2d9523dc8a9e88988cba5c5c87984fc1f9fdf410ad0` * [docker-builder](https://github.com/openshift/builder) git [a5cbc2b1](https://github.com/openshift/builder/commit/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f) `sha256:7d73ff84bf890c7d3bc0d1287693b4e3d133cc603de3c4a82ad7cdc6fde6e80a` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:91ef1665ce4c56461e514d46339e44829370980391b89f44a791c1be46edae8e` * [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1b8c94ac](https://github.com/openshift/gcp-pd-csi-driver/commit/1b8c94ac55d8602ba6669325ade654ae47ea74cf) `sha256:1278cc16bc6f0ffa2ba418dd8addfb0683df26118dd3ca45e15224fbbaa5112f` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [50ca44fd](https://github.com/openshift/ironic-rhcos-downloader/commit/50ca44fd48943433d502e8bcff3804f5cac7cb5a) `sha256:a14e1434efa53e14a2c18140971e70ed9ede7e3e7ed416fd2f2e98d0f26ffca0` * [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:6e856c145fbc88097202baa43370ab3be411e8156ad9a64ec279904dd6b5ccff` * [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:33244d10ef7f674631ec4e9961fb8a85c1a303d035905215dffb94a6019e9a60` * [machine-image-customization-controller](https://github.com/openshift/image-customization-controller) git [d9a71247](https://github.com/openshift/image-customization-controller/commit/d9a71247dafd469182d4bd13ef227c9be82a1e32) `sha256:0b99f5c6393063e663251b703bfc591cab6b437f89eb6e08968af7d5bbefbe65` * [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:a3a1d19aed03263ef7a561b536338577975a02102639198f5de51333c41f644d` * [metallb-frr](https://github.com/openshift/frr) git [98ccbe64](https://github.com/openshift/frr/commit/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) `sha256:25921440cd9cf77c1cb2d2a1afc3f2b84127864e23eaae9900e00763bad62568` * [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fafea6bc](https://github.com/openshift/monitoring-plugin/commit/fafea6bc427827c137eb312d9a8d31ad2893114e) `sha256:81783642258155f4324fae5b3eda6ff021eaa5cae83ebf4730f8f38e7b381f87` * [must-gather](https://github.com/openshift/must-gather) git [02e536cc](https://github.com/openshift/must-gather/commit/02e536cc7b3a6632da0643ab78f8dd6570e7f122) `sha256:3570d36b52fa837f9544e93a6aada9c359dfeb3f28576c5f0cb01b93103c0696` * [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:98f50098afc5dc67a0a8e3e61c63a646571f7004aa8b5d5623f1980df1164920` * [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [15535681](https://github.com/openshift/networking-console-plugin/commit/15535681de838e97e0a137fb0cc7123746019b08) `sha256:d3ddcc3889e1b8c6f84d35f6e640bb054315fefa09d87bdf5621fa105e6eda89` * rhel-coreos `sha256:ed1bea4797e02620ed3a939669de3f020e958ff349132a139307405ac6b49cf2` * rhel-coreos-extensions `sha256:2459eb9f4283a1706205ee04579bcd3e44753cbc864bcdc3047afe1854e6e918` * [tools](https://github.com/openshift/oc) git [4fcb2d07](https://github.com/openshift/oc/commit/4fcb2d07875f05d881ac90af73723db0ae5b1d6e) `sha256:8a7e64d5b435811a15c80619d165b3e2813c31e824130a67042488f803108837` ### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cf56e3a4c83edceae052175f2331c4089d22f52c) * [OCPBUGS-63407](https://issues.redhat.com/browse/OCPBUGS-63407): Use 127.0.0.1 for healtz http-endpoints [#450](https://github.com/openshift/csi-operator/pull/450) * [Full changelog](https://github.com/openshift/csi-operator/compare/2ff53ccbf0da1bad9db98bc128a3a164cf1c25b7...cf56e3a4c83edceae052175f2331c4089d22f52c) ### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/96389ffa2b20a310888dd3163956fa978ab1ca71) * [OCPBUGS-63138](https://issues.redhat.com/browse/OCPBUGS-63138): client: re-use a single file for building the session instead of randomly named files [#146](https://github.com/openshift/machine-api-provider-aws/pull/146) * [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/53274f11f0780d9a96af1c349ac1ed1a4c0f3a08...96389ffa2b20a310888dd3163956fa978ab1ca71) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/9d90e7e5503c3cb70da051f3dd29f8761013b7e5) * [OCPBUGS-63669](https://issues.redhat.com/browse/OCPBUGS-63669): Support datadisks on Stack Hub [#167](https://github.com/openshift/machine-api-provider-azure/pull/167) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/457dead4a58293dec7fb7854e14640c10cf69278...9d90e7e5503c3cb70da051f3dd29f8761013b7e5) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/d4d4b15b3121e69b12a66435b8fae3ea081321d1) * [OCPBUGS-53235](https://issues.redhat.com/browse/OCPBUGS-53235): Validation for API and Ingress VIPs when using user-managed load balancer [#10046](https://github.com/openshift/installer/pull/10046) * [Full changelog](https://github.com/openshift/installer/compare/4ef0aa88f4afa77181d9edafa075f2f6cbb44743...d4d4b15b3121e69b12a66435b8fae3ea081321d1) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/555fab9f8c12da6ebdadaeaf6134df22902a42e9) * [OCPBUGS-63439](https://issues.redhat.com/browse/OCPBUGS-63439): Always have a service for ironic-api port [#514](https://github.com/openshift/cluster-baremetal-operator/pull/514) * [OCPBUGS-63469](https://issues.redhat.com/browse/OCPBUGS-63469): Allow provisioningIP when network disabled [#515](https://github.com/openshift/cluster-baremetal-operator/pull/515) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6bff75babbad0d352e2b0ee6db0416d3cf19c0e...555fab9f8c12da6ebdadaeaf6134df22902a42e9) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/8abb067318de3cc68967a0f24627c26912242524) * [OCPBUGS-63166](https://issues.redhat.com/browse/OCPBUGS-63166): ccm: disable unused secure-serving port and webhook [#421](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/421) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1f8672a663e5c0ad873eb9c3760ed430c7369fa5...8abb067318de3cc68967a0f24627c26912242524) ### [cluster-config-api](https://github.com/openshift/api/tree/98e18dae8c7a82a4075c65ca0d357c9bf31cfb7c) * [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Add feature gates for StreamingCollectionEncoding [#2528](https://github.com/openshift/api/pull/2528) * [Full changelog](https://github.com/openshift/api/compare/e16f6cc860949caf863e79bd838491cdcb6e9641...98e18dae8c7a82a4075c65ca0d357c9bf31cfb7c) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/bac8a7c99c2e8562a05b784c8fe4f8ecd91eecdf) * [OCPBUGS-63119](https://issues.redhat.com/browse/OCPBUGS-63119): SCC: add hostmount-anyuid-v2 [#1937](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1937) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b6ad4b065b9f9677f0b33d625f9ae9dc36ccc3fc...bac8a7c99c2e8562a05b784c8fe4f8ecd91eecdf) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e8683f7f2fd30b45bfd8a94ca5c70c37029c1363) * [OCPBUGS-62852](https://issues.redhat.com/browse/OCPBUGS-62852): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 [#2702](https://github.com/openshift/cluster-monitoring-operator/pull/2702) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/75efec0f49b35d12e1f2c0d4e9e585729bbd68b1...e8683f7f2fd30b45bfd8a94ca5c70c37029c1363) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eb5caaf6e854e26dbf249862eac1b0a902325ad8) * [OCPBUGS-63450](https://issues.redhat.com/browse/OCPBUGS-63450): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1417](https://github.com/openshift/cluster-node-tuning-operator/pull/1417) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a56352c7bda47c69fe34c3d9189071430b71fc94...eb5caaf6e854e26dbf249862eac1b0a902325ad8) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bc725fd43d29758ad8f704044ccc8abb6926ad84) * [OCPBUGS-63511](https://issues.redhat.com/browse/OCPBUGS-63511): references to github.com/sclorg/django-ex.git now also refer to the branch [#657](https://github.com/openshift/cluster-samples-operator/pull/657) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa...bc725fd43d29758ad8f704044ccc8abb6926ad84) ### [console](https://github.com/openshift/console/tree/fbb9a4ec3bf61a9ecdd6fcc722d7bfc68a9fb515) * [OCPBUGS-63657](https://issues.redhat.com/browse/OCPBUGS-63657): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15654](https://github.com/openshift/console/pull/15654) * [Full changelog](https://github.com/openshift/console/compare/924130a79f8dd519f741bf7017055d8313e1927c...fbb9a4ec3bf61a9ecdd6fcc722d7bfc68a9fb515) ### [csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/56747b62f392bf1b0da64649aa2285f6a524c435) * [OCPBUGS-61773](https://issues.redhat.com/browse/OCPBUGS-61773): UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 [#2475](https://github.com/openshift/kubernetes/pull/2475) * [Full changelog](https://github.com/openshift/kubernetes/compare/0ee04c7e38c5c04c6ca854ce4a095d58d3ea6c53...56747b62f392bf1b0da64649aa2285f6a524c435) ### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/8ddbcd381bf5317c1d1a93db3b5760681a33cb27) * [OCPBUGS-63574](https://issues.redhat.com/browse/OCPBUGS-63574): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#190](https://github.com/openshift/csi-external-snapshotter/pull/190) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/838d2484157f076bbb81f1b584898aec6f051c2f...8ddbcd381bf5317c1d1a93db3b5760681a33cb27) ### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c) * [OCPBUGS-63324](https://issues.redhat.com/browse/OCPBUGS-63324): update log level verbosity to not clutter logs [#89](https://github.com/openshift/csi-node-driver-registrar/pull/89) * [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/c21f5d02b498e9e49d94818f4ad3eaaae77ca161...ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c) ### [hypershift](https://github.com/openshift/hypershift/tree/5a73548bacc7b5d6904cca1bd68175a31cee4a25) * [OCPBUGS-63034](https://issues.redhat.com/browse/OCPBUGS-63034): [release-4.18] Update DNS names for ovn-kubernetes cp metrics [#7025](https://github.com/openshift/hypershift/pull/7025) * [OCPBUGS-63369](https://issues.redhat.com/browse/OCPBUGS-63369): Make the hypershift CLI binary FIPS-compliant [#7093](https://github.com/openshift/hypershift/pull/7093) * [OCPBUGS-62808](https://issues.redhat.com/browse/OCPBUGS-62808): Fix driver-config ConfigMap content flapping due to random ordering #6944 [#6947](https://github.com/openshift/hypershift/pull/6947) * [Full changelog](https://github.com/openshift/hypershift/compare/03122e61f5ab834d937b9b909626113c7dae56e6...5a73548bacc7b5d6904cca1bd68175a31cee4a25) ### [ironic](https://github.com/openshift/ironic-image/tree/cd4755924baecf3b87f87c348c2568dec88434fd) * [OCPBUGS-62647](https://issues.redhat.com/browse/OCPBUGS-62647): Bump sushy to include etag fix [#701](https://github.com/openshift/ironic-image/pull/701) * [Full changelog](https://github.com/openshift/ironic-image/compare/9161a5fdb75042856bd40eec31bdba7b7c07d4a2...cd4755924baecf3b87f87c348c2568dec88434fd) ### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/09f4797657654ce788ea3a1077fd7cf7ce96fb5a) * [OCPBUGS-63670](https://issues.redhat.com/browse/OCPBUGS-63670): Add awels as an approver in 4.18 branch [#73](https://github.com/openshift/kubevirt-csi-driver/pull/73) * [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Implement volume expansion [#71](https://github.com/openshift/kubevirt-csi-driver/pull/71) * [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/2111495e6d03f1bfe0702996fdd1355ca21b78cf...09f4797657654ce788ea3a1077fd7cf7ce96fb5a) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/bb2aa85171d93b2df952ed802a8cb200164e666f) * [OCPBUGS-62294](https://issues.redhat.com/browse/OCPBUGS-62294): Make static DNS with DHCP IP work [#5311](https://github.com/openshift/machine-config-operator/pull/5311) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/6027b8f9bec4175d8a4059c1f8a86569731ddafb...bb2aa85171d93b2df952ed802a8cb200164e666f) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e54edaa6a6b3dd09831d24654835b54c1bdd089f) * [OCPBUGS-63050](https://issues.redhat.com/browse/OCPBUGS-63050): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#149](https://github.com/openshift/oauth-apiserver/pull/149) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/2575ff417406ea6680aff0de6efb524dbbe2b8d2...e54edaa6a6b3dd09831d24654835b54c1bdd089f) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/2fe096327a6da6602c509d108ea0ed4a599a7eb3) * [OCPBUGS-63459](https://issues.redhat.com/browse/OCPBUGS-63459): Branch Sync release-4.19 to release-4.18 [10-22-2025] [#2825](https://github.com/openshift/ovn-kubernetes/pull/2825) * [OCPBUGS-63716](https://issues.redhat.com/browse/OCPBUGS-63716): Skip Pending pods in EgressIP status updates [#2836](https://github.com/openshift/ovn-kubernetes/pull/2836) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7bb7a9e71737d4d2d7e00f693080df3fc4d735db...2fe096327a6da6602c509d108ea0ed4a599a7eb3) ### [tests](https://github.com/openshift/origin/tree/408d767f503d45acdaf996fc854ffc94d1c614df) * [OCPBUGS-63712](https://issues.redhat.com/browse/OCPBUGS-63712): Migrate OCP-32383 to upstream [#30443](https://github.com/openshift/origin/pull/30443) * [Full changelog](https://github.com/openshift/origin/compare/7aabb3cc677fc0a44376d88ebb9847d7fe3f9ee8...408d767f503d45acdaf996fc854ffc94d1c614df)