4.18.28

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.28-aarch64

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.18.1, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.2, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.3, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Changes from 4.18.27

Created: 2025-11-06 15:59:23 +0000 UTC

Image Digest: sha256:3c2f5f714540d76571e70b72ec4b7b728651a05d10bc88b0ee5fae6f90a6eafd

Components

Kubectl 1.31.1
Kubernetes 1.31.13
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202511041748-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-api-server git 03ef1905 sha256:3d3910aca9752c222458c6b852f783abf4a92bdd572c1db40bf12983f8f650f1
agent-installer-node-agent git 32a1f2a4 sha256:a68dc0cf16d7d79165d021a16670b7d385393ff0d6da9c7116be4e7fcb3d3889
azure-disk-csi-driver git 6cced666 sha256:677a22254dcc5b2708ddd13e6f5e68ec45910b0f149055f23e65c964c6587b20
azure-file-csi-driver git 4b34592e sha256:e827ef1032029110252837a7c6269ca4c0b83f46a2607c513f8cf18c61950013
baremetal-runtimecfg git 35341068 sha256:5ad10db08cfa0152d3e08d2ce673b46ceea601d7d794f10d022f9ccc75f5f920
container-networking-plugins git e8ca1d70 sha256:529c82525adbc1d19d0ec2d9523dc8a9e88988cba5c5c87984fc1f9fdf410ad0
docker-builder git a5cbc2b1 sha256:7d73ff84bf890c7d3bc0d1287693b4e3d133cc603de3c4a82ad7cdc6fde6e80a
driver-toolkit git 2e139edc sha256:91ef1665ce4c56461e514d46339e44829370980391b89f44a791c1be46edae8e
gcp-pd-csi-driver git 1b8c94ac sha256:1278cc16bc6f0ffa2ba418dd8addfb0683df26118dd3ca45e15224fbbaa5112f
ironic-machine-os-downloader git 50ca44fd sha256:a14e1434efa53e14a2c18140971e70ed9ede7e3e7ed416fd2f2e98d0f26ffca0
keepalived-ipfailover git 716eb0ef sha256:6e856c145fbc88097202baa43370ab3be411e8156ad9a64ec279904dd6b5ccff
libvirt-machine-controllers git a336f0b5 sha256:33244d10ef7f674631ec4e9961fb8a85c1a303d035905215dffb94a6019e9a60
machine-image-customization-controller git d9a71247 sha256:0b99f5c6393063e663251b703bfc591cab6b437f89eb6e08968af7d5bbefbe65
machine-os-images git ab432836 sha256:a3a1d19aed03263ef7a561b536338577975a02102639198f5de51333c41f644d
metallb-frr git 98ccbe64 sha256:25921440cd9cf77c1cb2d2a1afc3f2b84127864e23eaae9900e00763bad62568
monitoring-plugin git fafea6bc sha256:81783642258155f4324fae5b3eda6ff021eaa5cae83ebf4730f8f38e7b381f87
must-gather git 02e536cc sha256:3570d36b52fa837f9544e93a6aada9c359dfeb3f28576c5f0cb01b93103c0696
network-tools git 47b13549 sha256:98f50098afc5dc67a0a8e3e61c63a646571f7004aa8b5d5623f1980df1164920
networking-console-plugin git 15535681 sha256:d3ddcc3889e1b8c6f84d35f6e640bb054315fefa09d87bdf5621fa105e6eda89
rhel-coreos sha256:ed1bea4797e02620ed3a939669de3f020e958ff349132a139307405ac6b49cf2
rhel-coreos-extensions sha256:2459eb9f4283a1706205ee04579bcd3e44753cbc864bcdc3047afe1854e6e918
tools git 4fcb2d07 sha256:8a7e64d5b435811a15c80619d165b3e2813c31e824130a67042488f803108837

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator

OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
Full changelog

aws-machine-controllers

OCPBUGS-63138: client: re-use a single file for building the session instead of randomly named files #146
Full changelog

azure-machine-controllers

OCPBUGS-63669: Support datadisks on Stack Hub #167
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
Full changelog

cluster-baremetal-operator

OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-monitoring-operator

OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
Full changelog

cluster-node-tuning-operator

OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

console

OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

hypershift

OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
Full changelog

ironic

OCPBUGS-62647: Bump sushy to include etag fix #701
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-config-operator

OCPBUGS-62294: Make static DNS with DHCP IP work #5311
Full changelog

oauth-apiserver

OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
Full changelog

tests

OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github