4.18.0-ec.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.0-ec.3-ppc64le

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.17.0, 4.17.1, 4.17.2, 4.17.3, 4.18.0-ec.0, 4.18.0-ec.1, 4.18.0-ec.2

Loading changelog, this may take a while ...

Changes from 4.18.0-ec.2

Created: 2024-10-31 18:22:34 +0000 UTC

Image Digest: sha256:a67abdf194d664a71f2e6695fa5041fa7d3d6168ccbd67806ae72df870c0e602

Release 4.18.0-ec.3 was created from registry.ci.openshift.org/ocp-ppc64le/release-ppc64le:4.18.0-0.nightly-ppc64le-2024-10-28-052434

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.1 to 1.31.2
Kubernetes Tests upgraded from 1.30.0 to 1.31.1
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202410071559-0 to 418.94.202410260038-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
MetricsServer (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
IngressControllerDynamicConfigurationManager (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

gcp-workload-identity-federation-webhook git f0a670c7 sha256:b4007d80a0262b14c7c31305959e069e7c4cf801420b92f1608ace6d4925be4d

Removed images

csi-driver-shared-resource
csi-driver-shared-resource-operator
csi-driver-shared-resource-webhook

Rebuilt images without code change

apiserver-network-proxy git 0e116160 sha256:223d9688395e7b51f07f3726c3371d77b78c70e1409f82968ebd2a1ad9dbc1de
aws-kms-encryption-provider git 088dcaf7 sha256:a3072c53a35e6189f59172e72af69343683c1ce412ac0d1251534c486dc428e4
baremetal-machine-controllers git c34826a6 sha256:b4fe76fbb1321bde166961eeb3d2768524eab1b739e9cb329beed76b7a77610d
baremetal-runtimecfg git 4dac0e7e sha256:14bd4cb5d6b1ee800aaa91eb02ffed841f9870b81130a428d0f55fc56df57389
cloud-network-config-controller git 042d5880 sha256:fecebe99830fa9339a587be3e6543b182af3f756b8baeb19c83d1847960b2f61
cluster-autoscaler-operator git 1a9b7755 sha256:2fe8dcc9681b20ebfa9cc0e0d65e671948de50c1a98e7b29f3cf5e2a068ca57f
cluster-bootstrap git c6db451d sha256:30f4104c3d05edeabfc96db97bb9d0a2067be9e88f267f4bdb2ae93852948319
cluster-capi-controllers git c3641162 sha256:898007b4c048e35537f78e61778e97c0f8812bb9092e38e59f626f5d5719b9ed
cluster-config-operator git 85cb4072 sha256:b2ed8c6a58318fe07e2f8cfa87d90d79ed8b53c661ecc32a482903ad852dbb58
cluster-csi-snapshot-controller-operator git 8122add3 sha256:38d62de8dbd7805ffdde1792c0cd7527e7b522bcf2d8d953b01df520f018dceb
cluster-dns-operator git 208d50c1 sha256:f86676dfbf45504dd8dc5732e94b03818b5dd888db3bc5e82320186b0e77a18e
cluster-kube-controller-manager-operator git e3e3ce7a sha256:81f10cd27c2ccef5d326797a48aaf3fb1204ad5a231753a34bb31c785bbe5337
cluster-kube-scheduler-operator git 56e6c136 sha256:e16d78ff0891e2623c035dbedf23e532a60aa49768959c48285dd9ca20e525c2
cluster-kube-storage-version-migrator-operator git 64010ca0 sha256:f788290a3ee8eb10beeb1252ed72fdd37914451baa55d3f06174b2575d17b9bd
cluster-machine-approver git 31430c7d sha256:396f7d5494ff8d6de20fd315a6c608ba820134dd1545848b8673ea89c01263e9
configmap-reloader git cde5e473 sha256:692b4fb82fa22622ca66078523309757ef3476b7a28c5882b7c375aa78c7903a
container-networking-plugins git 24a65329 sha256:f3e1798c1be7a5abe8479634528ff249e2ede9f01b2fd3a3af649565e9fecf6c
containernetworking-plugins-microshift git 24a65329 sha256:6bf253d040354ae3a55a3781dd248964292c5a9996ede0d86e641eef24022bcb
coredns git cb1abfae sha256:6915a7f1a2e9981f9464714f49f86af922b1f4f109ebbba33ab10ed7b1d14ce8
docker-builder git 3813f976 sha256:468a0014dfa826f310970f409b828e3d99da0cf620c72eb0cddda8a2a04ce65c
driver-toolkit git e7fe5ff9 sha256:3f2c0285f18317432d4d00da46da0f475edbace9c3d81115a8f7cd954f8da81c
egress-router-cni git 3193a756 sha256:7e0e9ade12fc7624cd4ca16a257b123c4d1563778f8e9e2d987e7df22245f629
etcd git fd65559c sha256:6ac08c40813c0060b08bfe5abbe2e4e9f7c4677333e4aba23b2a7335f0b64f3c
gcp-cloud-controller-manager git 7b60fffb sha256:d1643f367184882757990846bcbf454b0760491b6019c21bcbc0135523240990
gcp-cluster-api-controllers git 75403aa1 sha256:d0797db0b2f39e3e70298ef2e11239e58414b7fb1f43ffbab374cb760bb00847
kube-metrics-server git 962ccca2 sha256:da58bb064a669a1e7a5cff8713f5863b6d541724a244b33240b9e66c6a16b760
kube-rbac-proxy git 526498ab sha256:e9c3f2b35401e99d2b2a2f2398d3b6d7409c89c219c91048ba69181592b2b4f4
kube-state-metrics git cb5a9296 sha256:5ca9b2a038dfb4c778632cde8754276eb87261f0a9851fc8c0e4548fd2128908
kube-storage-version-migrator git 50d17147 sha256:37f6b46f81855545fd56074132928b55e543bfa71e9315c9244d882d167e42f9
kubevirt-cloud-controller-manager git 3f4542ec sha256:f6b5f429eb5f2e998aefa419d9681eca040892cb5bb3d210a380c95e224df438
kubevirt-csi-driver git 01e014ae sha256:d6843b75ca012b5aa6afe329bcbaa00e319fe325e9f8c10a18b0c6c947b0f969
libvirt-machine-controllers git a336f0b5 sha256:6929f4f4638a8de49d6224c3836db7b69a5c8c9580acccb4d0c38d8b3017f57c
multus-admission-controller git 1b2791b7 sha256:ec670be6cc70f552eb2bf595e005a34da688b172d0bee54439f949157ea7f3ca
multus-route-override-cni git 391c1b03 sha256:82ff199b17782078ce248a6f165e336de94906d1a64190d51d6726aea5887040
network-interface-bond-cni git 9506a1ff sha256:9a423912ffaa61f0990b14ed761edd81675e28d7bdc0383849875a84732061c4
network-metrics-daemon git e4c214c3 sha256:346c6f6f6f42db0e134023c154fe5d752d9240ef7b3afbb3f7e0c6c3a9c872c9
oauth-proxy git 30f80124 sha256:a9cd9dc0035e0e96869e7f196ff907e1afb24598ca151cc3ab1e6087d3edae98
oauth-server git 821fdfd1 sha256:6151092f9ee0e78b8d053a830abfe134223794f4fa7a6d3fa5b2bfd68220de41
openshift-apiserver git cb676917 sha256:1e9a3e5b266ad5a6f3d9470d34ac6a7127ea7d7bb8f0392332f6ce47590700c1
openshift-state-metrics git f5b14702 sha256:746d2b741414172da0eb36cea9424fe9b13c079d9f013e63aad491c0d4466802
openstack-machine-api-provider git d914e77e sha256:1fcf5c6349610bafebf0d1328a683899dfee1984dcd1affa2ca4c2f9eb40b0b8
ovirt-csi-driver git 1db726a9 sha256:5ffb9c6b416ea5985f0977dd4542efa0c1a6cf5ba68d84fbaa9e6ed0bfd6f614
ovirt-csi-driver-operator git 0feae256 sha256:08e257403051d24024de3b63fdfa9931d9e7336ac338055699d631e96ae1b49c
ovirt-machine-controllers git abb91c84 sha256:5dfde8a8656cfed3e64c9a39adb245d722ce9c7043ed6b3dffbf99c01e6b9973
powervs-block-csi-driver git d36aea34 sha256:b46f339aa331af1b7fc94800f469aa9a1ad18b2a6ccd0d383e7f46bfde3a4f14
powervs-block-csi-driver-operator git 62ff68d7 sha256:6cd6fa1876adcb9805b4df963c971afe051ffecc443d7ce500b9c3fecf57d786
powervs-cloud-controller-manager git 35bf78f8 sha256:cf5079d2e3de5d3edf2eb38becd5e6180281a66763606268234818a18148a9c9
powervs-machine-controllers git b7577434 sha256:3ef1930eaeedbf595beb5f3ed76368e25cd83fb572db45827316fabeb18b4700
prom-label-proxy git d9fe2d8e sha256:c4a10cb77cd8c60f58cbb76a937568902492c5cfc4ba67e3504d9ac96f1883fb
rhel-coreos sha256:48e020bce28cee5c558576bc38a2cc612b955ddb852d1b48fb200b32abb0dac5
rhel-coreos-extensions sha256:27e66f728911575da613a544612dbd9297d9f56e5f05297979c77284a56474b9
service-ca-operator git 1f7d6472 sha256:dfd6dd83d3aeaf2a2a99b92807c2789f748951e29f43c30be676a1e472162b0b
telemeter git 0453f452 sha256:fe7922d7fd46ca48cffdbb81fd58381a610d34431080186e116efb70a2f8831b
thanos git f6f7cc41 sha256:159883474aa1a7624a8a8f8d9adf7c061a48a5ac488465d733a589dd1a62eb44

agent-installer-api-server

NO-ISSUE: Update CI gather script and fix failing to scale nodepool (#6934) #6934
MGMT-19148: Add OLM operator setup jobs finalizing stage (#6933) #6933
Ensure no finalizer is set for BMHs without the infraenv label (#6920) #6920
MGMT-18829: Convert agent-install CRDs to new webhook (#6882) #6882
Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.18 (#6725) #6725
NO-ISSUE: [master] Bump OCP versions: 4.18 (#6910) #6910
MGMT-19129: Migrate assisted-service to Konflux (#6911) #6911
NO-ISSUE: fix ‘object has been modified’ error in kube-api subsystem (#6880) #6880
NO-ISSUE: Pin gocov version (#6902) #6902
OCPBUGS-42525: Disable pprof for agent-based installer (#6889) #6889
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.15, 4.12 (#6891) #6891
OCPBUGS-32857: Fix of go-jose version from 4.x.x to 2.x.x (#6881) #6881
modify default value of MIN_VERSION_FOR_NMSTATE_SERVICE flag to 4.19 (#6887) #6887
MGMT-19054: remove LSO as default for CNV on ARM (#6879) #6879
fix static network for fulliso old flow (#6878) #6878
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.14, 4.16, 4.15 (#6874) #6874
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Dockerfile to use go.uber.org/mock (#911) #911
MGMT-19148: Update assisted-service dependencies. (#936) #936
Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.18 (#917) #917
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.18 (#898) #898
NO-ISSUE: Bump PGX version (#932) #932
NO-ISSUE: Pin gocov version (#924) #924
Full changelog

agent-installer-node-agent

Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.18 (#777) #777
OCPBUGS-43006: Fix bash string comparison during image build (#799) #799
NO-ISSUE: Pin gocov version (#806) #806
NO-ISSUE: Add additional test for GPU cards with multiple PCI functions (#800) #800
MGMT-18923: Add hwdata package, required by the agent to detect GPUs (#796) #796
Full changelog

agent-installer-utils

OCPBUGS-39590: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.18 #36
Full changelog

aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

WRKLDS-1449: Bump k8s api to 1.31.2 #2122
OCPBUGS-28812: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2031
OCPBUGS-39004: CRD type check test fix #2116
OCPBUGS-38838: Re-enable 1.31 kubectl tests #2114
TRT-1867: Revert #2067 “OCPBUGS-39305: log only deprecated api requests” #2112
OCPBUGS-39305: log only deprecated api requests #2067
Full changelog

azure-kms-encryption-provider

OCPBUGS-41118: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.18 #8
Full changelog

baremetal-cluster-api-controllers

Update manifests #23
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

AGENT-1023: support patch in curl_assisted_service #9061
CORS-3283: IBMCloud: Add IBM Cloud CAPI Cluster manifest #9118
MGMT-19151: Add ingress CN to cluster configuration for image-based installer #9128
CORS-3706: allow to install an OCP Nutanix cluster using PC’s existing RHCOS image #9093
OCPBUGS-39585: Add C4 instance validation #9121
OCPBUGS-43520: Limit GCP API firewall rule for internal clusters #9113
OCPBUGS-43567: pkg/asset/installconfig/azure: send full certifcate chain #9117
OCPBUGS-36670: Update SecurityType for Image used by ConfidentialVMs #9101
CORS-3696: Add AWS User Provisioned DNS option to install config #9069
OCPBUGS-43279: Allow custom machine types #9094
AGENT-972, AGENT-973: Agent minimal ISO support for all platforms #9056
OCPBUGS-43518: Power VS: Fix incorrect error handling for AddSecurityGroupRule #9107
OCPBUGS-39231: add chrony.conf file when additional NTP sources are configured #9095
AGENT-966: Reduce dependency from kube-system/cluster-config-v1 when generating the image #9066
OCPBUGS-41834: Add agent installer checks for hosts interface table #9052
OCPBUGS-30292: For agent installer, add RendezvousIP to NO_PROXY #9083
OCPBUGS-36532: Agent installer wait-for, just test connectivity to host #9074
AGENT-988: fix node-joiner integration tests #9100
OCPBUGS-42637: Update RHCOS 4.18 bootimage metadata to 418.94.202410090804-0 #9088
OCPBUGS-36869: Prevent race with provisioning-interface service #8985
OCPBUGS-36236: IBMCloud: Handle pagination for subnets #8668
AGENT-904: Output config-image from node-joiner tool #8321
OCPBUGS-43041: fix slice init length #9072
CORS-3284: IBMCloud: CAPI PreProvisioining #8235
CORS-3472: Ensure that a region contains zones #9087
OCPBUGS-42717: Power VS Ensure Metadata populated for CAPI/private cluster case on PowerVS #8826
OCPBUGS-42789: Update forwarding rules destroy #9075
OCPBUGS-41785: Validate MTU when controlPlanePort uses FixedIPs #9081
MGMT-18292: in order to be able to import openshift installer we need to update assisted service as it requires new hive #9058
Full changelog

baremetal-operator

NO-ISSUE: Merge upstream #381
METAL-1158: Merge upstream #379
Full changelog

cli, cli-artifacts, deployer, tools

OTA-1273: pkg/cli/admin/upgrade/recommend: Add –version option for specific releases #1897
API-1835: gather discovery when using inspect #1901
OCPBUGS-42775: Do not allow new line in user in create user #1899
OCPBUGS-42601: Remove redundant defaulting message in description #1896
AGENT-966: additional rbac policy rules #1895
Full changelog

cloud-credential-operator

OCPBUGS-36644: Only attempt timed token credentials on supported platforms. #771
CCO-571: Add GCP pod identity webhook #758
CCO-595: Upgrade to Kubernetes 1.31 #763
Full changelog

cluster-authentication-operator

OCPBUGS-42932: ensure annotations map exists before mutating it #727
API-1835: adds output-resources to cluster-authentication operator. #720
NO-JIRA: add relatedResources to authentication for collection if operator crashes #722
API-1835: Bump library-go to get WorkloadController SSA #715
API-1835: demonstration mutation recording client #710
API-1835: Set Unknown conditions in WellKnownReadyController #716
API-1835: Migrate WellKnownReadyController to SSA #705
Full changelog

cluster-autoscaler

OCPCLOUD-2733: rebase on upstream 1.31.0 release #319
Full changelog

cluster-baremetal-operator

OCPBUGS-43371: allow all features on platform=none #450
NO-ISSUE: document testing with custom images in README #451
METAL-1145: Enable running CBO from Kubevirt (platform) #448
Full changelog

cluster-capi-operator

NO-JIRA: updated spell and comment #225
OCPCLOUD-2749: mapi2capi conversion pkg negative testing: add missing machine/machineset tests #224
NO-JIRA: Update OWNERS #223
OCPCLOUD-2749: capi2mapi conversion pkg negative testing #222
OCPBUGS-42490: fix: azure: do not deploy CAPI on AzureStackCloud #220
OCPCLOUD-2643: Machinesetsync split reconcile #219
OCPCLOUD-2741: Update dependencies of operator and manifest gen #218
OCPCLOUD-2749: mapi2capi conversion pkg negative testing #215
OCPCLOUD-2643: MachineSetSync controller bootstrap #217
OCPCLOUD-2643: MachineSyncReconciler - split reconciles #212
OCPCLOUD-2206: Generate AzureCluster resource for CAPI cluster #189
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-43157: update goimports targets #370
Full changelog

cluster-config-api

MON-3971: Remove MetricsServer feature gate #1993
NO-JIRA: add requirement for featuregate URL #2073
Last generation only increase #2068
NE-1790: Introduce IngressControllerDynamicConfigurationManager feature gate #2057
Update crd-schema-checker dependency #2062
Ensure custom feature gate mainfest path is passed into generator #2060
OCPNODE-2333: add imagepolicy to payload crds #2036
Full changelog

cluster-control-plane-machine-set-operator

NO-JIRA: Bump cluster-api-actuator-pkg/testutils to latest #329
Full changelog

cluster-etcd-operator

OCPBUGS-17199: Revert pull request https://github.com/openshift/cluster-etcd-operator/issues/1350 #1357
ETCD-686: Remove etcd-backup-server StaticPod approach #1358
OCPBUGS-17199: remove stability check from bootstrap completeness #1350
NO-JIRA: sort imports using goimports #1351
NO-JIRA: update library-go to latest #1349
Full changelog

cluster-image-registry-operator

HOSTEDCP-2019: Use Client Cert Auth for ARO HCP deployments #1131
OCPBUGS-43508: fix proxy config and leader election test flakes #1140
OCPBUGS-38667: pkg/operator: wait for image registry config object cache sync #1138
OCPBUGS-42732: pkg/storage/azure: also check for auth failure error code on deletion #1129
CFE-1129: Added AWS TAGS reconciliation #1121
Full changelog

cluster-ingress-operator

OCPBUGS-43033: e2e/ingress_dns: support both private & public #1153
Full changelog

cluster-kube-apiserver-operator

API-1835: migrate the installer controller to SSA #1756
NO-JIRA: Update “deprecated API in use” alert expressions for 1.31. #1750
OCPBUGS-42083: Don’t rollout revision until three etcd endpoints are listed #1743
Full changelog

cluster-kube-cluster-api-operator

ACM-14824: add ocp chart index.yaml and readme #54
ACM-14308: Add ocp CAPA params #52
Full changelog

cluster-monitoring-operator

MON-4065: [bot] Synchronize versions of the downstream components #2504
OCPBUGS-18007: Add runbook url for TelemeterClientFailures #2506
MON-4060: Bump prometheus-operator to v0.77.2 #2502
OCPBUGS-42671: make config unmarshalling more strict to help detect #2493
OCPBUGS-42148: Fix api doc on Thanos Ruler default retention #2500
MON-3850: Lint CMO tests #2292
MON-4021: feat: add the required utils for automated tests and integration with the docs #2443
NO-JIRA: fix CMO config for Alertmanager e2e tests #2495
Full changelog

cluster-network-operator

OCPBUGS-39189: fix annotation from deployment to pod #2545
NO-JIRA: onv-k, udn: Update UserDefinedNetwork CRD #2517
HOSTEDCP-2035: Set up Azure authentication with cert for ARO HCP #2522
OCPBUGS-42605: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2532
CNF-14971: frr-k8s: allow setting the loglevel from env-overrides #2535
CNF-13671: Adjust frr-k8s metrics #2531
CNF-14199: Align FRR-K8s CRDs #2525
CNF-14251, CNF-14257: multi-networkpolicy: Enable for ipvlan and bond networkds #2518
SDN-5186: Process OVNObservability feature gate #2462
NO-JIRA: OVN-Kubernetes node RBAC tightening #2526
SDN-4930: Adds UDN list/watch to ovnknode rbac #2524
Full changelog

cluster-node-tuning-operator

CNF-14628: e2e: Adjust profile nodeSeletcor on hypershift (#1183) #1183
CNF-13014: Align dockerfile ocp version (#1194) #1194
OCPBUGS-43666: Fix kernel arguments ordering on Intel (#1197) #1197
OCPBUGS-43665: Drop amd_iommu=on from amd tuning (#1198) #1198
NO-JIRA: Fix typo in codegen script (#1199) #1199
Fix linter warnings (#1196) #1196
Bump the latest k8s and OpenShift dependencies (#1195) #1195
CNF-13014: Check for tuned patches before attempting to apply them in the dockerfile script (#1193) #1193
CNF-14090: Add vendor and architecture specific tuning options (#1083) #1083
CNF-13193: Update NTO Hugepages size validation (#1086) #1086
NO-JIRA: Default to username and timestamp for custom NTO push (#1190) #1190
logs: avoid spamming when PerformanceProfile is missing (#1181) #1181
E2E: fix modify node selector to use lowercase (#1185) #1185
Remove upstream TuneD patch (#1151) #1151
Make ocp-tuned-one-shot.service restart on-failure (#1177) #1177
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1163) #1163
NO-JIRA: CI: unblock (#1182) #1182
Full changelog

cluster-olm-operator

NO-ISSUE: (bugfix): prevent discovery errors on unknown GVKs #75
OPRUN-3571: (feature): add clustercatalog controller for managing default clustercatalogs #73
OCPBUGS-42860: degraded co operator #72
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: bump dependencies #598
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1492: Update k8s dependencies to 1.31.1 #368
Full changelog

cluster-policy-controller

OCPBUGS-43380: psalabelsyncer: add image volume type to list #157
WRKLDS-1492: Update k8s dependencies to 1.31.1 #156
Full changelog

cluster-samples-operator

SO-138: Periodic sync of supported OCP samples #583
SO-137: Support updating the library separately for OKD and for OCP. #581
Full changelog

cluster-storage-operator

STOR-1823: Remove shared-resource CSI driver from CSO #509
HOSTEDCP-2033: Add ARO HCP environment vars to CSI deployment #517
OCPBUGS-41365: add KUBE_RBAC_PROXY_CONTROL_PLANE_IMAGE to other neede… #522
NO-JIRA: assets: shared-resource: hypershift: add pull-secret to operator SA #519
OCPBUGS-41365: fix typo CONTROL_PLANE_KUBE_RBAC_PROXY_IMAGE -> KUBE_R… #518
OCPBUGS-41365: add ability to control kube rbac proxy container image… #515
AUTH-482: set required-scc for openshift workloads #516
Full changelog

cluster-update-keys

ART-10934: Move sigstore to release-3 key #63
Full changelog

cluster-version-operator

OCPBUGS-42880: Upgradeable=False should not block a 4.(y+1).z to 4.(y+1).z’ retarget (#1094) #1094
Full changelog

console

CONSOLE-4295: i18n upload/download routine task - sprint 261 #14435
OCPBUGS-43538: add onRowsRendered prop to VirtualizedTable in SDK #14421
OCPBUGS-43084: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14432
OCPBUGS-43799: Debounce tile view searches #14365
OCPBUGS-43640: Show danger status if invalid #14424
OCPBUGS-41358: While upgrading the cluster from UI observed Warning alert:Admission Webhook Warning #14395
OCPBUGS-43652: Filter dropdown doesn’t collapse on second click #14427
OCPBUGS-42985: Update Console dynamic plugin SDK webpack dependency #14300
ODC-7680: Migrate FilterTable to PF5 #14340
OCPBUGS-43409: ‘control plane’ option is missing on ‘filter node type’ list #14412
OCPBUGS-43530: Searching resources with shortname doesn’t work on Search page #14420
OCPBUGS-42796: Do not pass CSV name to operand list page when an exen… #14396
ODC-7655: Migrate SelectVariant.Typeahead SelectInputFields to PF5 #14305
OCPBUGS-43494: Searching volumesnapshot and volumesnaphotclass with label doesn’t work. #14410
CONSOLE-4182: replace DropdownDeprecated in SearchFilterDropdown #14390
ODC-7680: Remove SeriesButton, QueryTable #14363
CONSOLE-4119: Convert deprecated perspective dropdown to select #14328
OCPBUGS-31914: Searching node with label doesn’t work. #14404
OCPBUGS-43039: Broker form view by default throws error in Application name if an application exists #14399
OCPBUGS-43482: add data-test attribute for Pod and Node logs toggle button #14408
ODC-7680: Migrate ResultsList to PF5 #14343
CONSOLE-4256: (deps) update PatternFly to 5.3.0 #14242
CONSOLE-4125: Convert language dropdown deprecated select #14243
ODC-7703: Quick create actions in the masthead toolbar #14345
OCPBUGS-43110: fix id issues with ClipboardCopyButton #14394
CONSOLE-4274: i18n upload/download routine task -sprint 260 #14348
OCPBUGS-38717: Telemetry userPreference results in empty nodes output to the DOM #14291
OCPBUGS-42819: remove invalid resource name check for value ‘~new’ #14380
CONSOLE-4078: Address tech debt in SSHAuthSubform component #14375
CONSOLE-4191: update ContainerDropdown to use PatternFly Select #14362
OCPBUGS-42712: Replace usage of containsNonPrintableCharacters function with isBinary function from ‘istextorbinary’ lib. #14364
ODC-7664: Add subscribe form for Knative EventType #14304
OCPBUGS-42778, OCPBUGS-42850: Add missing plugin names to known plugins #14382
CONSOLE-4263: Add initial Content Security Policy for Console web application #14156
CONSOLE-4236: Migrate Dev > Observe > Dashboard Page #14192
OCPBUGS-41492: show Samples tab when one or more exists #14350
Full changelog

console-operator

NO-JIRA: Update owners file: Update my github username) #936
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43430: Rebase master onto release-1.31 #304
Full changelog

csi-driver-manila-operator, openstack-cinder-csi-driver-operator

HOSTEDCP-2032: Set azure disk & file Secrets Store CSI Volume #309
STOR-1844: remove config/samba/manifests/preview symlink #305
OCPBUGS-42325: Set separate secrets for file and disk config on HyperShift #290
OCPBUGS-43562: Add missing proxy hook for openstack-cinder driver #304
OCPBUGS-43653: Add missing credentials secret hook #307
OSASINFRA-3628: Make guest namespace configurable #294
STOR-1844: update OLM manifests to use stable channel #300
OSASINFRA-3618: Add Cinder CSI support (part 2) #275
OCPBUGS-42939: Correct aws efs csi driver config as removable #293
OCPBUGS-38922: add tag matching to Azure File storage class #272
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into master #147
Full changelog

csi-external-attacher

STOR-2018: Rebase external-attacher to v4.7.0 for OCP 4.18 #80
Full changelog

csi-external-provisioner

STOR-2018: Rebase external-provisioner to upstream v5.1.0 for OCP 4.18 #106
Full changelog

csi-external-resizer

STOR-2018: Rebase external-resizer to upstream v1.12.0 for OCP 4.18 #166
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

STOR-2018: Rebase external-snapshotter to v8.1.0 for OCP 4.18 #164
Full changelog

csi-livenessprobe

STOR-2018: Rebase livenessprobe to v2.14.0 for OCP 4.18 #69
Full changelog

csi-node-driver-registrar

STOR-2018: Rebase node-driver-registrat to v2.12.0 for OCP 4.18 #76
Full changelog

docker-registry

IR-492: metrics: document error codes #415
OCPBUGS-39108: bump docker distribution to fix purgeuploads panic #414
IR-489: export storage read-only errors as metrics #412
Full changelog

gcp-machine-controllers

CORS-3739: Add c4a instance as arm type #94
Full changelog

gcp-pd-csi-driver

STOR-2012: Rebase to upstream v1.14.2 for OCP 4.18 #70
Full changelog

gcp-pd-csi-driver-operator

STOR-2052: Enable storage pools #132
STOR-2052: change disk min size to 6GiB #130
STOR-2052: Add hyperdisk manifest #129
Full changelog

haproxy-router

NE-1815: Enable ALPN for reencrypt routes when DCM is enabled #631
OCPBUGS-26603: Listen for stats connections on v6 addresses when relevant. #633
NE-1811: Rename the allowlist route annotation #564
NO-JIRA: Add grzpiotrowski to the OWNERS file #629
OCPBUGS-41295: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.18 #624
Full changelog

hypershift

HOSTEDCP-967: Drop alpha api and conversion #4977
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys from 1.1.0 to 1.2.0 in the azure-github-dependencies group #4982
HOSTEDCP-1989: Move NTO reconcile logic into their own file #4962
NO-JIRA: chore(deps): update konflux references (main) #4968
HOSTEDCP-2054: [CPO Refactor] Refactor kube-apiserver #4941
NO-JIRA: Add API label #4984
OCPBUGS-43756: update eventuallyDaemonSetRollsOut to only watch ready… #4973
NO-JIRA: Make api module dependencies consistent with main module dependencies #4978
NO-JIRA: Update azure and AKS upstream docs #4966
OCPBUGS-43707: Add crd override for NodePool scale subresource #4970
NO-JIRA: doc/openstack: install operator with --tech-preview-no-upgrade #4976
OCPBUGS-38357: openstack: add option to configure nodepool AZ #4531
HOSTEDCP-1994: Add generic create function for SecretProvider #4960
OCPBUGS-43698: dump: make ControlPlaneComponent’s GKV optional #4965
HOSTEDCP-1472: update TestNodePoolPrevRelease tests to use RFC 1123 nodepool name #4950
HOSTEDCP-1883: Remove hardcoded catalog images in CPO #4612
NO-JIRA: chore(deps): update konflux references #4952
HOSTEDCP-2002: fix typo in doc commands #4951
HOSTEDCP-2018: Reorder Nodepool conditions #4859
NO-JIRA: chore(deps): update capz to v1.17.0 #4808
OCPBUGS-38132: cpo: produce valid oauth config even if idp config is invalid #4955
OCPBUGS-42434: Add Managed Identity Support in Azure HC API behind AROHCPManagedIdentities Feature gate #4811
NO-JIRA: Bump the azure-github-dependencies group with 2 updates #4938
NO-JIRA: Split API into platform files #4944
NO-JIRA: KubeVirt CSI Security and Isolation Documentation #4937
NO-JIRA: chore(deps): update konflux references (main) #4930
HOSTEDCP-2002: Add documentation around crun migration for HCP #4912
HOSTEDCP-1994: Pass Azure Key Vault’s Managed Identity’s Client ID to HO and CPO Deployments #4926
HOSTEDCP-2040: Add README.md for ControlPlaneComponent #4915
HOSTEDCP-2040: [CPO Refactor] Refactor HCCO #4860
HOSTEDCP-1773: Feature gates openshift markers #4918
OCPBUGS-43448: Pass feature flags to clusterpolicy controller #4925
NO-JIRA: chore(deps): update konflux references #4920
HOSTEDCP-1472: add CP with n-2 NP test #4911
OCPBUGS-38132: add ValidIDPConfiguration condition to report IDP config issues #4852
HOSTEDCP-2028: e2e: use TechPreviewNoUpgrade feature set in TestCreateCluster #4902
OCPBUGS-43087: openstack/e2e: re-work nodepool tests #4868
NO-JIRA: Bump the golang-dependencies group with 3 updates #4891
HOSTEDCP-1801: [CPO Refactor] Introduced ControlPlaneComponent CRD #4839
NO-JIRA: chore(deps): update konflux references (main) #4892
NO-JIRA: e2e: rename file to avoid IDE errors #4901
HOSTEDCP-2026: Add support for static control plane operator overrides #4889
HOSTEDCP-1994: Add Secrets Store CSI RBAC Policies for HO and CPO #4878
NO-JIRA: statically link CLI binaries #4871
HOSTEDCP-2025: Allow setting the VPC CIDR when creating AWS infrastructure #4866
HOSTEDCP-1994: Remove infra create MI for Azure NP #4874
OCPBUGS-43064: move resource.k8s.io to v1alpha3 for kube 1.31 #4887
NO-JIRA: cli: add feature-set flag to create cluster #4886
NO-JIRA: Enforce EnsurePSANotPrivileged for 4.18 and later #4875
HOSTEDCP-1994: Create separate secrets for Azure disk and file #4861
NO-JIRA: switch to using ptr instead of pointer #4856
HOSTEDCP-2009: change from NumberOfProbes to ProbeThreshold #4863
OCPBUGS-42873: Do not send traffic to local audit-webhook through konnectivity #4864
OCPBUGS-42783: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4858
CNV-39662: Document HCP KubeVirt GPU device usage #4844
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-43685: UPSTREAM: 1857: Bump github.com/IBM/go-sdk-core/v5 from 5.17.3 to 5.1.7.4 (#1857) - main #91
OCPBUGS-41210: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.18 #85
Full changelog

insights-operator

gather selected clusterroles (#1016) #1016
NO-JIRA: Add gather server error known codes to the checks (#1018) #1018
OCPBUGS-42961: update the filtering of the container logs (#1009) #1009
CCXDEV-14462: [IO Enhancement] collect how many unused MachineConfigs in the cluster (#1007) #1007
Updating build options in order to ensure FIPS compliant build (#1010) #1010
NO-JIRA: container log JSON schema - minor description update (#1012) #1012
OCPBUGS-42675: do not propagate the remote configuration status as an (#1006) #1006
Full changelog

keepalived-ipfailover

OCPBUGS-41231: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.18 #196
Full changelog

kube-proxy

OCPBUGS-43764: Revendor to a patched k/k with our prefer-local-DNS hack #638
Full changelog

machine-api-operator

OCPBUGS-41502: vSphere klog initialization preventing verbose log messages #1300
OCPBUGS-38724: Fix misleading error messages relating to new yaml config #1277
OCPBUGS-43481: fix: health probes paths and updated timing #1299
NO-JIRA: Bump cluster-api-actuator-pkg/testutils, use envtest –index #1297
Full changelog

machine-config-operator

MCO-1314: OCPBUGS-43509: Pick up openshift/kubernetes 1.31 rebase updates #4629
OCPNODE-2333: Implement ImagePolicy CRD #4587
OCPBUGS-38490: Increase connection limit for cluster loadbalancer #4531
OCPBUGS-43428: Soften haproxy timeout for kubeapi probe #4646
NO-ISSUE: pkg/operator/status: Block ClusterVersion updates until multi-arch transitions complete #4637
MCO-1276: Integrate Metric Collection with MCO Daemon #4632
MCO-1326: Decouple BuildController and ImageBuildRequest #4568
NO-ISSUE: Add Rishabh Saini to approvers and reviewers #4644
NO-ISSUE: Add LorbusChris to OWNERS #4643
NO-ISSUE: OWNERS: Add umohnani8 #4641
OCPBUGS-42742: set observed generation and fix pod error detection #4640
COS-2947: Add sysstat extension support #4619
OCPBUGS-43328: remove dra manager state #4639
OCPNODE-2633: templates/*: make crun as the default container runtime #4610
Full changelog

machine-os-images

OCPBUGS-39570: Updating ose-machine-os-images-container image to be consistent with ART for 4.18 #40
Full changelog

metallb-frr

Align upstream 07-10 #67
Full changelog

monitoring-plugin

COO-493: Fix alerts page kebab dropdown #232
OU-506: prefetch dependencies for konflux pipelines #229
OU-507: Add ACM alerting #202
OCPBUGS-42851: Refresh interval button on “Observe -> Metrics” page failed to load for admin/developer console #221
NO-JIRA: Update Konflux references #222
Update Konflux references to 674e70f #220
NO-JIRA: Update Konflux references #211
OU-406: Red Hat Konflux update monitoring-console-plugin-0-3 #210
OU-406: add konflux dockerfile #209
OU-259: Migrate Dev > Observe > Dashboard Page #167
OU-550: Use npm instead of yarn #200
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-43390: Update net-attach-def client library to 1.7.5 for cri-o functionality #256
Full changelog

multus-networkpolicy

Update OWNERS (#63) #63
OCPBUGS-36468: Make sure that policies with no valid peers are enforced (#61) #61
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-33946: Ds merge 10/9/24 #314
Full changelog

must-gather

OCPBUGS-42679: Support gathering IPsec data #458
RFE-5765: Collect etcd object count #435
Full changelog

network-tools

SDN-4085: Enhance Troubleshooting experience with multiple DBs #117
Full changelog

networking-console-plugin

OCPBUGS-43034: Add Route Filter in route list #132
OCPBUGS-43034: Routes list sort by status #130
CNV-49305: fix for virt perspective #127
OCPBUGS-42354: hide routes metrics non-admin users #126
Full changelog

oauth-apiserver

NO-JIRA: apiserver: sanitize the generic config for the chained servers #122
OCPBUGS-39529: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.18 #118
Full changelog

oc-mirror

CLID-230: Rebuild catalog multi-arch images with filtered content (#937) #937
CLID-205: Use same namespace as v1 for release mirroring (#939) #939
clid-253: adds helm images to delete feature (#941) #941
CLID-174: Use io.MultiWriter for the logger - logs to both stdout and working-dir/logs (#940) #940
clid-247 changes the tlsVerify default to true and adds helm tls support (#936) #936
changes the PreserveDigests default to true (#938) #938
CLID-228: Introduces flag –alpha-ctlg-filter and FilteredCollector that filters FBC (#929) #929
OCPBUGS-42428: Fix duplication of binary data in signature config map (#934) #934
clid-170: adds support to helm charts in oc-mirror v2 (#935) #935
CLID-226: Add analysis of OCPSTRAT-1515 in its current state (#926) #926
Full changelog

olm-catalogd

NO-ISSUE: Synchronize From Upstream Repositories #83
NO-ISSUE: Synchronize From Upstream Repositories #82
NO-ISSUE: Synchronize From Upstream Repositories #78
NO-ISSUE: Synchronize From Upstream Repositories #76
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #179
NO-ISSUE: Synchronize From Upstream Repositories #178
NO-ISSUE: Synchronize From Upstream Repositories #177
NO-ISSUE: Synchronize From Upstream Repositories #176
NO-ISSUE: Synchronize From Upstream Repositories #175
NO-ISSUE: Synchronize From Upstream Repositories #174
NO-ISSUE: Synchronize From Upstream Repositories #173
NO-ISSUE: Synchronize From Upstream Repositories #172
NO-ISSUE: Synchronize From Upstream Repositories #171
NO-ISSUE: Synchronize From Upstream Repositories #170
NO-ISSUE: Synchronize From Upstream Repositories #169
NO-ISSUE: Synchronize From Upstream Repositories #168
NO-ISSUE: Synchronize From Upstream Repositories #167
NO-ISSUE: Synchronize From Upstream Repositories #165
NO-ISSUE: Synchronize From Upstream Repositories #164
Full changelog

openshift-controller-manager

OCPBUGS-39432: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.18 #330
WRKLDS-1492: Update k8s dependencies to 1.31.1 #345
NO-JIRA: cleanup root and app OWNERS #341
OCPBUGS-42097: user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies #337
OCPBUGS-42089: updating github.com/containers/image to 5.30.1 to resolve CVE-2024-3727 #340
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into main #324
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-43581: Fix TLS handshake error #884
NO-ISSUE: Synchronize From Upstream Repositories #883
NO-ISSUE: Synchronize From Upstream Repositories #881
NO-ISSUE: Synchronize From Upstream Repositories #879
Full changelog

operator-marketplace

AUTH-482: set required-scc for openshift workloads #578
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-39009, SDN-4930: Downstream Merge Sept 18th #2302
Full changelog

prometheus

NO-JIRA: [bot] Bump openshift/prometheus to v2.55.0 #234
MON-4065: [bot] Bump openshift/prometheus to v2.55.0 #232
OCPBUGS-43378: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #229
Full changelog

prometheus-alertmanager

OCPBUGS-41157: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.18 #95
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-4060: Bump openshift/prometheus-operator to v0.77.2 #311
Full changelog

prometheus-node-exporter

NO-JIRA: update OWNERS files #153
Full changelog

route-controller-manager

OCPBUGS-13181: ingress: Reset metrics when ingress is deleted #49
Full changelog

tests

NO-JIRA: tls registry: don’t store annotation values in violations #29227
OPRUN-3576: Add OLMv1 origin tests #29189
NO-ISSUE: Automated - Update synthetic test data #29159
OPNET-588: On-Prem test for apiserver reachability from the LB #29149
OCPBUGS-42536: Trying to reduce the flakiness of the samples smoke tests #29143
NO-JIRA: managed services: add exception for known images check #29230
MCO-1370: Add boot image configmap test to openshift/origin #29219
NO-JIRA: Additional logging for extract image and binaries #29218
NO-JIRA: managed services: skip JSON patch tests #29216
OCPNODE-2668: fix unexpected not ready #29225
OCPBUGS-43483: auditloganalyzer: check audit log for requests arriving after shutdown #29201
SDN-4930: network_segmentation: allow multiple UDN status conditions #29220
NO-JIRA: Allow extension binary extraction retries #29217
OCPBUGS-43512: New ManagedBootImages test appears to be failing too often #29210
OCPBUGS-42610: filter out pod events during vsphere snapshot options tests #29151
NO-JIRA: update-tls-artifacts: set owner to unknown if unset #29214
NO-JIRA: Changes to run the vertical scaling tests serially #29204
TRT-1575: Add more exceptions for operator degraded cases #29175
NO-JIRA: Add exceptions for various tests failing on managed services clusters #29209
NO-JIRA: feat: update to use pullspec image #29205
API-1835: Add a generation analyzer monitortest #29168
NO-JIRA: fix exec issue on etcd dr suite #29198
ETCD-687: Remove etcd-backup-server StaticPod approach e2e test #29196
NO-JIRA: test/extended/apiserver: test for checking the healthz endpoints for oauth-apiserver #29161
NO-JIRA: a new test for the jsonpatch library #29191
NO-JIRA: Enable external binary registry #29182
OCPBUGS-41787: Ignore infra nodes on tap cni tests #29178
NO-JIRA: prove json patch #29163
WRKLDS-1449: Fix kubernetes-tests version annotation #29188
OCPBUGS-43059: fix: sno issues with alerts and pathological events #29183
OCPEDGE-1266: fix: adding oslat updates and outputting test results to the artifacts #29160
OCPEDGE-1276: fix: adding in a SNO time override for AWS Metal #29144
NO-JIRA: Fix Network segmentation test for detecting timeout #29179
ETCD-664: Add e2e test for scaling when CPMS is disabled #29086
WRKLDS-1431: e2e: migrate DCs to Deployments #28957
TRT-1851: Revert “NO-JIRA: external binary registry” #29173
OCPEDGE-1265: removing rteval from the realtime test suite #29164
WRKLDS-1449: Rebase 1.31.1 #29103
NO-JIRA: external binary registry #29025
API-1789: tls artifacts: list ondisk locations alongside secret/configmaps #29090
NO-JIRA: update recovery tests with rev bumping #29145
NO-JIRA: make exception for invalid MCO changes #29167
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github