4.18.28

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.28-ppc64le

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.18.1, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.2, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.3, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Changes from 4.18.27

Created: 2025-11-06 15:57:58 +0000 UTC

Image Digest: sha256:b943c890bb6a7f3a39ee63f457f54131f98c099876b5a3a50fd57728612bd968

Components

Kubectl 1.31.1
Kubernetes 1.31.13
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202511041748-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-api-server git 03ef1905 sha256:64fc9412aac028705bc1a41991d93ec597ec4d47df2b17eedaf959b1f6bcc6c4
agent-installer-node-agent git 32a1f2a4 sha256:334a6c82ad409669c4e7c405bb0dca23ca522de2e3ab6d13e276cae422bdb49e
baremetal-runtimecfg git 35341068 sha256:f1e2ad0e42569ee1bd68d3e4c26efd879d64fb4ac77cc9cdaec42052e32f9917
container-networking-plugins git e8ca1d70 sha256:a9a952724f2dde2134c16ccf3693a90477ecd027e03d4506fb097e5871e904f9
csi-driver-nfs git 32e77590 sha256:4e656784ed58cb2c01d21fe56c2d483f227d34a4dce341c653a48fc5c4e44e40
docker-builder git a5cbc2b1 sha256:7df18bbfc16e6535cb056454597da122de03e25e63b369d12ea224630766a5d3
driver-toolkit git 2e139edc sha256:96344807f7e36f836c73916b499df131c0d9de6bde278391d6537ae22f7c5b2b
gcp-pd-csi-driver git 1b8c94ac sha256:472109325c34cbd6ed2134bcb84bfbbdcf5977e900c5ddcdce33da3f68784370
keepalived-ipfailover git 716eb0ef sha256:cf0eeb291a36237e8cb6dc903a5e92598eea589cf58a1672107e6d9b97b8ede8
libvirt-machine-controllers git a336f0b5 sha256:ae09406ab9b6a9ff928beaf3768c97121c75561dae190b04231114afe0cf86fe
machine-os-images git ab432836 sha256:9a878c86650541282356e31eb03fbb0aa81a4485671437bfdc040ca9d334d912
metallb-frr git 98ccbe64 sha256:e263c352bf14f4bc8be69ea7bec6f0b6fd9d3e63f8b2a53705c308b396cf4161
monitoring-plugin git fafea6bc sha256:64b50c1059817a3c41cc22916637f5383d47600bb8e0f0913c0219b91515f413
must-gather git 02e536cc sha256:b4ced92120ab114ad377776ea2aa5586ca2e3e77b044e3434b12409459b32086
network-tools git 47b13549 sha256:467deceb7fb99d1def1623a00b322dac77f5cd2db1175646ab10ab4740c1f55c
networking-console-plugin git 15535681 sha256:5e544d81cdc2bdfe415fe6eb60735b3ff97b297f19918042c3b33a042a0ca79c
powervs-block-csi-driver git d36aea34 sha256:a6a1cced585c06feb7737ec3cd1e4b49dd2c415e5da46b5fd12e46e42fa6ca95
rhel-coreos sha256:16e16a510218f3cf0c2f0b96bfaf8d4a4c73e2fcaad8369c7b91d8d7374a97fb
rhel-coreos-extensions sha256:d92f4b3411c471453bd376e38743b8592b9a1a11cc0dde3b77f57a39d6351865
tools git 4fcb2d07 sha256:c7aa2a1f01fc7e65c15d2e744a2c4f8e696c5fee3a33c7e6773b4c86d148b879

aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
Full changelog

cluster-baremetal-operator

OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-monitoring-operator

OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
Full changelog

cluster-node-tuning-operator

OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

console

OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
Full changelog

csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

hypershift

OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-config-operator

OCPBUGS-62294: Make static DNS with DHCP IP work #5311
Full changelog

oauth-apiserver

OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
Full changelog

tests

OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github