# 4.18.28
Created: 2025-11-06 15:57:58 +0000 UTC
Image Digest: `sha256:b943c890bb6a7f3a39ee63f457f54131f98c099876b5a3a50fd57728612bd968`
## Changes from 4.18.27
### Components
* Kubectl 1.31.1
* Kubernetes 1.31.13
* Kubernetes Tests 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202511041748-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| StreamingCollectionEncodingToJSON
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| StreamingCollectionEncodingToProtobuf
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
### Rebuilt images without code change
* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [03ef1905](https://github.com/openshift/assisted-service/commit/03ef19051b8561514d37ec691652647cdd2f260c) `sha256:64fc9412aac028705bc1a41991d93ec597ec4d47df2b17eedaf959b1f6bcc6c4`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [32a1f2a4](https://github.com/openshift/assisted-installer-agent/commit/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb) `sha256:334a6c82ad409669c4e7c405bb0dca23ca522de2e3ab6d13e276cae422bdb49e`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [35341068](https://github.com/openshift/baremetal-runtimecfg/commit/353410688340dadb583668215e13e2d6cc90e272) `sha256:f1e2ad0e42569ee1bd68d3e4c26efd879d64fb4ac77cc9cdaec42052e32f9917`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [e8ca1d70](https://github.com/openshift/containernetworking-plugins/commit/e8ca1d70c43f33cd0e75c776e2a24afbec61b46c) `sha256:a9a952724f2dde2134c16ccf3693a90477ecd027e03d4506fb097e5871e904f9`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [32e77590](https://github.com/openshift/csi-driver-nfs/commit/32e775900642ab9c3560a06219104d7c38f8461c) `sha256:4e656784ed58cb2c01d21fe56c2d483f227d34a4dce341c653a48fc5c4e44e40`
* [docker-builder](https://github.com/openshift/builder) git [a5cbc2b1](https://github.com/openshift/builder/commit/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f) `sha256:7df18bbfc16e6535cb056454597da122de03e25e63b369d12ea224630766a5d3`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:96344807f7e36f836c73916b499df131c0d9de6bde278391d6537ae22f7c5b2b`
* [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver) git [1b8c94ac](https://github.com/openshift/gcp-pd-csi-driver/commit/1b8c94ac55d8602ba6669325ade654ae47ea74cf) `sha256:472109325c34cbd6ed2134bcb84bfbbdcf5977e900c5ddcdce33da3f68784370`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:cf0eeb291a36237e8cb6dc903a5e92598eea589cf58a1672107e6d9b97b8ede8`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:ae09406ab9b6a9ff928beaf3768c97121c75561dae190b04231114afe0cf86fe`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:9a878c86650541282356e31eb03fbb0aa81a4485671437bfdc040ca9d334d912`
* [metallb-frr](https://github.com/openshift/frr) git [98ccbe64](https://github.com/openshift/frr/commit/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) `sha256:e263c352bf14f4bc8be69ea7bec6f0b6fd9d3e63f8b2a53705c308b396cf4161`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fafea6bc](https://github.com/openshift/monitoring-plugin/commit/fafea6bc427827c137eb312d9a8d31ad2893114e) `sha256:64b50c1059817a3c41cc22916637f5383d47600bb8e0f0913c0219b91515f413`
* [must-gather](https://github.com/openshift/must-gather) git [02e536cc](https://github.com/openshift/must-gather/commit/02e536cc7b3a6632da0643ab78f8dd6570e7f122) `sha256:b4ced92120ab114ad377776ea2aa5586ca2e3e77b044e3434b12409459b32086`
* [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:467deceb7fb99d1def1623a00b322dac77f5cd2db1175646ab10ab4740c1f55c`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [15535681](https://github.com/openshift/networking-console-plugin/commit/15535681de838e97e0a137fb0cc7123746019b08) `sha256:5e544d81cdc2bdfe415fe6eb60735b3ff97b297f19918042c3b33a042a0ca79c`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [d36aea34](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/d36aea34452210f988f74e93e0640318f3db1938) `sha256:a6a1cced585c06feb7737ec3cd1e4b49dd2c415e5da46b5fd12e46e42fa6ca95`
* rhel-coreos `sha256:16e16a510218f3cf0c2f0b96bfaf8d4a4c73e2fcaad8369c7b91d8d7374a97fb`
* rhel-coreos-extensions `sha256:d92f4b3411c471453bd376e38743b8592b9a1a11cc0dde3b77f57a39d6351865`
* [tools](https://github.com/openshift/oc) git [4fcb2d07](https://github.com/openshift/oc/commit/4fcb2d07875f05d881ac90af73723db0ae5b1d6e) `sha256:c7aa2a1f01fc7e65c15d2e744a2c4f8e696c5fee3a33c7e6773b4c86d148b879`
### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/56747b62f392bf1b0da64649aa2285f6a524c435)
* [OCPBUGS-61773](https://issues.redhat.com/browse/OCPBUGS-61773): UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 [#2475](https://github.com/openshift/kubernetes/pull/2475)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0ee04c7e38c5c04c6ca854ce4a095d58d3ea6c53...56747b62f392bf1b0da64649aa2285f6a524c435)
### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/d4d4b15b3121e69b12a66435b8fae3ea081321d1)
* [OCPBUGS-53235](https://issues.redhat.com/browse/OCPBUGS-53235): Validation for API and Ingress VIPs when using user-managed load balancer [#10046](https://github.com/openshift/installer/pull/10046)
* [Full changelog](https://github.com/openshift/installer/compare/4ef0aa88f4afa77181d9edafa075f2f6cbb44743...d4d4b15b3121e69b12a66435b8fae3ea081321d1)
### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/555fab9f8c12da6ebdadaeaf6134df22902a42e9)
* [OCPBUGS-63439](https://issues.redhat.com/browse/OCPBUGS-63439): Always have a service for ironic-api port [#514](https://github.com/openshift/cluster-baremetal-operator/pull/514)
* [OCPBUGS-63469](https://issues.redhat.com/browse/OCPBUGS-63469): Allow provisioningIP when network disabled [#515](https://github.com/openshift/cluster-baremetal-operator/pull/515)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6bff75babbad0d352e2b0ee6db0416d3cf19c0e...555fab9f8c12da6ebdadaeaf6134df22902a42e9)
### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/8abb067318de3cc68967a0f24627c26912242524)
* [OCPBUGS-63166](https://issues.redhat.com/browse/OCPBUGS-63166): ccm: disable unused secure-serving port and webhook [#421](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/421)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1f8672a663e5c0ad873eb9c3760ed430c7369fa5...8abb067318de3cc68967a0f24627c26912242524)
### [cluster-config-api](https://github.com/openshift/api/tree/98e18dae8c7a82a4075c65ca0d357c9bf31cfb7c)
* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Add feature gates for StreamingCollectionEncoding [#2528](https://github.com/openshift/api/pull/2528)
* [Full changelog](https://github.com/openshift/api/compare/e16f6cc860949caf863e79bd838491cdcb6e9641...98e18dae8c7a82a4075c65ca0d357c9bf31cfb7c)
### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/bac8a7c99c2e8562a05b784c8fe4f8ecd91eecdf)
* [OCPBUGS-63119](https://issues.redhat.com/browse/OCPBUGS-63119): SCC: add hostmount-anyuid-v2 [#1937](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1937)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b6ad4b065b9f9677f0b33d625f9ae9dc36ccc3fc...bac8a7c99c2e8562a05b784c8fe4f8ecd91eecdf)
### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e8683f7f2fd30b45bfd8a94ca5c70c37029c1363)
* [OCPBUGS-62852](https://issues.redhat.com/browse/OCPBUGS-62852): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 [#2702](https://github.com/openshift/cluster-monitoring-operator/pull/2702)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/75efec0f49b35d12e1f2c0d4e9e585729bbd68b1...e8683f7f2fd30b45bfd8a94ca5c70c37029c1363)
### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eb5caaf6e854e26dbf249862eac1b0a902325ad8)
* [OCPBUGS-63450](https://issues.redhat.com/browse/OCPBUGS-63450): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1417](https://github.com/openshift/cluster-node-tuning-operator/pull/1417)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a56352c7bda47c69fe34c3d9189071430b71fc94...eb5caaf6e854e26dbf249862eac1b0a902325ad8)
### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bc725fd43d29758ad8f704044ccc8abb6926ad84)
* [OCPBUGS-63511](https://issues.redhat.com/browse/OCPBUGS-63511): references to github.com/sclorg/django-ex.git now also refer to the branch [#657](https://github.com/openshift/cluster-samples-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa...bc725fd43d29758ad8f704044ccc8abb6926ad84)
### [console](https://github.com/openshift/console/tree/fbb9a4ec3bf61a9ecdd6fcc722d7bfc68a9fb515)
* [OCPBUGS-63657](https://issues.redhat.com/browse/OCPBUGS-63657): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15654](https://github.com/openshift/console/pull/15654)
* [Full changelog](https://github.com/openshift/console/compare/924130a79f8dd519f741bf7017055d8313e1927c...fbb9a4ec3bf61a9ecdd6fcc722d7bfc68a9fb515)
### [csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cf56e3a4c83edceae052175f2331c4089d22f52c)
* [OCPBUGS-63407](https://issues.redhat.com/browse/OCPBUGS-63407): Use 127.0.0.1 for healtz http-endpoints [#450](https://github.com/openshift/csi-operator/pull/450)
* [Full changelog](https://github.com/openshift/csi-operator/compare/2ff53ccbf0da1bad9db98bc128a3a164cf1c25b7...cf56e3a4c83edceae052175f2331c4089d22f52c)
### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/8ddbcd381bf5317c1d1a93db3b5760681a33cb27)
* [OCPBUGS-63574](https://issues.redhat.com/browse/OCPBUGS-63574): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#190](https://github.com/openshift/csi-external-snapshotter/pull/190)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/838d2484157f076bbb81f1b584898aec6f051c2f...8ddbcd381bf5317c1d1a93db3b5760681a33cb27)
### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)
* [OCPBUGS-63324](https://issues.redhat.com/browse/OCPBUGS-63324): update log level verbosity to not clutter logs [#89](https://github.com/openshift/csi-node-driver-registrar/pull/89)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/c21f5d02b498e9e49d94818f4ad3eaaae77ca161...ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)
### [hypershift](https://github.com/openshift/hypershift/tree/5a73548bacc7b5d6904cca1bd68175a31cee4a25)
* [OCPBUGS-63034](https://issues.redhat.com/browse/OCPBUGS-63034): [release-4.18] Update DNS names for ovn-kubernetes cp metrics [#7025](https://github.com/openshift/hypershift/pull/7025)
* [OCPBUGS-63369](https://issues.redhat.com/browse/OCPBUGS-63369): Make the hypershift CLI binary FIPS-compliant [#7093](https://github.com/openshift/hypershift/pull/7093)
* [OCPBUGS-62808](https://issues.redhat.com/browse/OCPBUGS-62808): Fix driver-config ConfigMap content flapping due to random ordering #6944 [#6947](https://github.com/openshift/hypershift/pull/6947)
* [Full changelog](https://github.com/openshift/hypershift/compare/03122e61f5ab834d937b9b909626113c7dae56e6...5a73548bacc7b5d6904cca1bd68175a31cee4a25)
### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/09f4797657654ce788ea3a1077fd7cf7ce96fb5a)
* [OCPBUGS-63670](https://issues.redhat.com/browse/OCPBUGS-63670): Add awels as an approver in 4.18 branch [#73](https://github.com/openshift/kubevirt-csi-driver/pull/73)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Implement volume expansion [#71](https://github.com/openshift/kubevirt-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/2111495e6d03f1bfe0702996fdd1355ca21b78cf...09f4797657654ce788ea3a1077fd7cf7ce96fb5a)
### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/bb2aa85171d93b2df952ed802a8cb200164e666f)
* [OCPBUGS-62294](https://issues.redhat.com/browse/OCPBUGS-62294): Make static DNS with DHCP IP work [#5311](https://github.com/openshift/machine-config-operator/pull/5311)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6027b8f9bec4175d8a4059c1f8a86569731ddafb...bb2aa85171d93b2df952ed802a8cb200164e666f)
### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e54edaa6a6b3dd09831d24654835b54c1bdd089f)
* [OCPBUGS-63050](https://issues.redhat.com/browse/OCPBUGS-63050): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#149](https://github.com/openshift/oauth-apiserver/pull/149)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/2575ff417406ea6680aff0de6efb524dbbe2b8d2...e54edaa6a6b3dd09831d24654835b54c1bdd089f)
### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/2fe096327a6da6602c509d108ea0ed4a599a7eb3)
* [OCPBUGS-63459](https://issues.redhat.com/browse/OCPBUGS-63459): Branch Sync release-4.19 to release-4.18 [10-22-2025] [#2825](https://github.com/openshift/ovn-kubernetes/pull/2825)
* [OCPBUGS-63716](https://issues.redhat.com/browse/OCPBUGS-63716): Skip Pending pods in EgressIP status updates [#2836](https://github.com/openshift/ovn-kubernetes/pull/2836)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7bb7a9e71737d4d2d7e00f693080df3fc4d735db...2fe096327a6da6602c509d108ea0ed4a599a7eb3)
### [tests](https://github.com/openshift/origin/tree/408d767f503d45acdaf996fc854ffc94d1c614df)
* [OCPBUGS-63712](https://issues.redhat.com/browse/OCPBUGS-63712): Migrate OCP-32383 to upstream [#30443](https://github.com/openshift/origin/pull/30443)
* [Full changelog](https://github.com/openshift/origin/compare/7aabb3cc677fc0a44376d88ebb9847d7fe3f9ee8...408d767f503d45acdaf996fc854ffc94d1c614df)