# 4.18.28

Created: 2025-11-06 15:56:30 +0000 UTC

Image Digest: `sha256:985f33fc3e0120187c7a888caba5535996e7b0003a57fbba083ad32d38794169`


## Changes from 4.18.27

### Components

* Kubectl 1.31.1
* Kubernetes 1.31.13
* Kubernetes Tests 1.31.12
* Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202511041748-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| StreamingCollectionEncodingToJSON <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| StreamingCollectionEncodingToProtobuf <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [03ef1905](https://github.com/openshift/assisted-service/commit/03ef19051b8561514d37ec691652647cdd2f260c) `sha256:9a47cb3958c8ce5b9a1f03a3789b01c89275f330b139a016b63146806259a1be`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [32a1f2a4](https://github.com/openshift/assisted-installer-agent/commit/32a1f2a4c87eb63ebac848a5edb6c73c5a66dfbb) `sha256:8969167678291a604d4d4f3ced9038c60d1a97b68692a307d0541c0b2d11a149`
* [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg) git [35341068](https://github.com/openshift/baremetal-runtimecfg/commit/353410688340dadb583668215e13e2d6cc90e272) `sha256:5e0bde646544ab985426be60723993899743e76e7cc5943ea28980c02dbbadff`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [e8ca1d70](https://github.com/openshift/containernetworking-plugins/commit/e8ca1d70c43f33cd0e75c776e2a24afbec61b46c) `sha256:7d220e86802f7e5a8fa26e11daaf51463a792e437dc31172374288c54d7cb857`
* [docker-builder](https://github.com/openshift/builder) git [a5cbc2b1](https://github.com/openshift/builder/commit/a5cbc2b1862e9fbf2bb0ca52ec54ce85e67f1d7f) `sha256:4e1912626a056f6ed5778e0a04b38d961bb4015da277b61a2c0ca521e9178e45`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [2e139edc](https://github.com/openshift/driver-toolkit/commit/2e139edc4aeefbbc41536eeeedc91f317f0835fd) `sha256:28db339b08f9e9bc259269f523db89c4478eb6013cbcb5b5864b050e72408a10`
* [keepalived-ipfailover](https://github.com/openshift/images) git [716eb0ef](https://github.com/openshift/images/commit/716eb0efe8473796868c0d5a5574349f15129a6a) `sha256:0e321e3b1ef6c1eb77ec1920071ffea65096c4d5f81642659b4b43b6bc8374c7`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:39846bedfd1f9a0160bdd77b3b03fe51c0b7d50a4b21951d020afcb5d84f09b8`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [ab432836](https://github.com/openshift/machine-os-images/commit/ab43283689560737ad32566dd59e0d3d77fee4e1) `sha256:7873de30e22936a53381b345381d0e1fa79932ab64ce3f897afa430e89ff0dd2`
* [metallb-frr](https://github.com/openshift/frr) git [98ccbe64](https://github.com/openshift/frr/commit/98ccbe64c9b76aabb6a7bb2ff8cf61cc8e6d9f91) `sha256:fac7872b5e3d8b5d61c7b45efc9c1abd540c17aab0a1ea9b98d9cba74c6657dc`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [fafea6bc](https://github.com/openshift/monitoring-plugin/commit/fafea6bc427827c137eb312d9a8d31ad2893114e) `sha256:fe18697f7e2fa6929c9bac93dcb16a73b913509cff641739e8b27b5a5e870314`
* [must-gather](https://github.com/openshift/must-gather) git [02e536cc](https://github.com/openshift/must-gather/commit/02e536cc7b3a6632da0643ab78f8dd6570e7f122) `sha256:90dfcf65fb71452cca8897117e6009cbf2310343bba0d5778e8e0925b36366b4`
* [network-tools](https://github.com/openshift/network-tools) git [47b13549](https://github.com/openshift/network-tools/commit/47b13549115a59d82dbf4c61f9160432608cb9d8) `sha256:429aed3a15992de5775dca53521ca6d0277ac0c289c15e87e3343817f24c6747`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [15535681](https://github.com/openshift/networking-console-plugin/commit/15535681de838e97e0a137fb0cc7123746019b08) `sha256:e9b77b91ddda29a6f750bc11757c12fc99f0d8f46363eeb44deefddb721efdb5`
* rhel-coreos `sha256:e7b067e755d1d15535abbeff432053535d2a6c32f09c1837f4637491dea8b008`
* rhel-coreos-extensions `sha256:8babe8e97a786faea45740f1884a481d3145deef151a64501944ca941de93e49`
* [tools](https://github.com/openshift/oc) git [4fcb2d07](https://github.com/openshift/oc/commit/4fcb2d07875f05d881ac90af73723db0ae5b1d6e) `sha256:7cc3eba81a6536e46ee18b4a75d2aaf733549e46b7afeeb0659cf6830754db4c`


### [aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/56747b62f392bf1b0da64649aa2285f6a524c435)

* [OCPBUGS-61773](https://issues.redhat.com/browse/OCPBUGS-61773): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write #2456 [#2475](https://github.com/openshift/kubernetes/pull/2475)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0ee04c7e38c5c04c6ca854ce4a095d58d3ea6c53...56747b62f392bf1b0da64649aa2285f6a524c435)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/d4d4b15b3121e69b12a66435b8fae3ea081321d1)

* [OCPBUGS-53235](https://issues.redhat.com/browse/OCPBUGS-53235): Validation for API and Ingress VIPs when using user-managed load balancer [#10046](https://github.com/openshift/installer/pull/10046)
* [Full changelog](https://github.com/openshift/installer/compare/4ef0aa88f4afa77181d9edafa075f2f6cbb44743...d4d4b15b3121e69b12a66435b8fae3ea081321d1)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/555fab9f8c12da6ebdadaeaf6134df22902a42e9)

* [OCPBUGS-63439](https://issues.redhat.com/browse/OCPBUGS-63439): Always have a service for ironic-api port [#514](https://github.com/openshift/cluster-baremetal-operator/pull/514)
* [OCPBUGS-63469](https://issues.redhat.com/browse/OCPBUGS-63469): Allow provisioningIP when network disabled [#515](https://github.com/openshift/cluster-baremetal-operator/pull/515)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/c6bff75babbad0d352e2b0ee6db0416d3cf19c0e...555fab9f8c12da6ebdadaeaf6134df22902a42e9)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/8abb067318de3cc68967a0f24627c26912242524)

* [OCPBUGS-63166](https://issues.redhat.com/browse/OCPBUGS-63166): ccm: disable unused secure-serving port and webhook [#421](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/421)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/1f8672a663e5c0ad873eb9c3760ed430c7369fa5...8abb067318de3cc68967a0f24627c26912242524)


### [cluster-config-api](https://github.com/openshift/api/tree/98e18dae8c7a82a4075c65ca0d357c9bf31cfb7c)

* [CNTRLPLANE-1610](https://issues.redhat.com/browse/CNTRLPLANE-1610): Add feature gates for StreamingCollectionEncoding [#2528](https://github.com/openshift/api/pull/2528)
* [Full changelog](https://github.com/openshift/api/compare/e16f6cc860949caf863e79bd838491cdcb6e9641...98e18dae8c7a82a4075c65ca0d357c9bf31cfb7c)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/bac8a7c99c2e8562a05b784c8fe4f8ecd91eecdf)

* [OCPBUGS-63119](https://issues.redhat.com/browse/OCPBUGS-63119): SCC: add hostmount-anyuid-v2 [#1937](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1937)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/b6ad4b065b9f9677f0b33d625f9ae9dc36ccc3fc...bac8a7c99c2e8562a05b784c8fe4f8ecd91eecdf)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/e8683f7f2fd30b45bfd8a94ca5c70c37029c1363)

* [OCPBUGS-62852](https://issues.redhat.com/browse/OCPBUGS-62852): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 [#2702](https://github.com/openshift/cluster-monitoring-operator/pull/2702)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/75efec0f49b35d12e1f2c0d4e9e585729bbd68b1...e8683f7f2fd30b45bfd8a94ca5c70c37029c1363)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/eb5caaf6e854e26dbf249862eac1b0a902325ad8)

* [OCPBUGS-63450](https://issues.redhat.com/browse/OCPBUGS-63450): Do not cause kubelet failed dependency by ocp-tuned-one-shot.service [#1417](https://github.com/openshift/cluster-node-tuning-operator/pull/1417)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a56352c7bda47c69fe34c3d9189071430b71fc94...eb5caaf6e854e26dbf249862eac1b0a902325ad8)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/bc725fd43d29758ad8f704044ccc8abb6926ad84)

* [OCPBUGS-63511](https://issues.redhat.com/browse/OCPBUGS-63511): references to github.com/sclorg/django-ex.git now also refer to the branch [#657](https://github.com/openshift/cluster-samples-operator/pull/657)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/5cdbe18d6dcf2ad4db3f0c2e10c20b67749384fa...bc725fd43d29758ad8f704044ccc8abb6926ad84)


### [console](https://github.com/openshift/console/tree/fbb9a4ec3bf61a9ecdd6fcc722d7bfc68a9fb515)

* [OCPBUGS-63657](https://issues.redhat.com/browse/OCPBUGS-63657): Remove required flag from 'console.flag/model' pipelines-plugin extension [#15654](https://github.com/openshift/console/pull/15654)
* [Full changelog](https://github.com/openshift/console/compare/924130a79f8dd519f741bf7017055d8313e1927c...fbb9a4ec3bf61a9ecdd6fcc722d7bfc68a9fb515)


### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/8ddbcd381bf5317c1d1a93db3b5760681a33cb27)

* [OCPBUGS-63574](https://issues.redhat.com/browse/OCPBUGS-63574): UPSTREAM: 1303: Fix requeueing snapshot content after deletion error [#190](https://github.com/openshift/csi-external-snapshotter/pull/190)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/838d2484157f076bbb81f1b584898aec6f051c2f...8ddbcd381bf5317c1d1a93db3b5760681a33cb27)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)

* [OCPBUGS-63324](https://issues.redhat.com/browse/OCPBUGS-63324): update log level verbosity to not clutter logs [#89](https://github.com/openshift/csi-node-driver-registrar/pull/89)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/c21f5d02b498e9e49d94818f4ad3eaaae77ca161...ef93f0be8c1056f8ed3b2bd2efc1264e3dc2fb3c)


### [hypershift](https://github.com/openshift/hypershift/tree/5a73548bacc7b5d6904cca1bd68175a31cee4a25)

* [OCPBUGS-63034](https://issues.redhat.com/browse/OCPBUGS-63034): [release-4.18] Update DNS names for ovn-kubernetes cp metrics [#7025](https://github.com/openshift/hypershift/pull/7025)
* [OCPBUGS-63369](https://issues.redhat.com/browse/OCPBUGS-63369): Make the hypershift CLI binary FIPS-compliant [#7093](https://github.com/openshift/hypershift/pull/7093)
* [OCPBUGS-62808](https://issues.redhat.com/browse/OCPBUGS-62808): Fix driver-config ConfigMap content flapping due to random ordering #6944 [#6947](https://github.com/openshift/hypershift/pull/6947)
* [Full changelog](https://github.com/openshift/hypershift/compare/03122e61f5ab834d937b9b909626113c7dae56e6...5a73548bacc7b5d6904cca1bd68175a31cee4a25)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/09f4797657654ce788ea3a1077fd7cf7ce96fb5a)

* [OCPBUGS-63670](https://issues.redhat.com/browse/OCPBUGS-63670): Add awels as an approver in 4.18 branch [#73](https://github.com/openshift/kubevirt-csi-driver/pull/73)
* [OCPBUGS-61700](https://issues.redhat.com/browse/OCPBUGS-61700): Implement volume expansion [#71](https://github.com/openshift/kubevirt-csi-driver/pull/71)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/2111495e6d03f1bfe0702996fdd1355ca21b78cf...09f4797657654ce788ea3a1077fd7cf7ce96fb5a)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/bb2aa85171d93b2df952ed802a8cb200164e666f)

* [OCPBUGS-62294](https://issues.redhat.com/browse/OCPBUGS-62294): Make static DNS with DHCP IP work [#5311](https://github.com/openshift/machine-config-operator/pull/5311)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/6027b8f9bec4175d8a4059c1f8a86569731ddafb...bb2aa85171d93b2df952ed802a8cb200164e666f)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/e54edaa6a6b3dd09831d24654835b54c1bdd089f)

* [OCPBUGS-63050](https://issues.redhat.com/browse/OCPBUGS-63050): (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission [#149](https://github.com/openshift/oauth-apiserver/pull/149)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/2575ff417406ea6680aff0de6efb524dbbe2b8d2...e54edaa6a6b3dd09831d24654835b54c1bdd089f)


### [openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/cf56e3a4c83edceae052175f2331c4089d22f52c)

* [OCPBUGS-63407](https://issues.redhat.com/browse/OCPBUGS-63407): Use 127.0.0.1 for healtz http-endpoints [#450](https://github.com/openshift/csi-operator/pull/450)
* [Full changelog](https://github.com/openshift/csi-operator/compare/2ff53ccbf0da1bad9db98bc128a3a164cf1c25b7...cf56e3a4c83edceae052175f2331c4089d22f52c)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/2fe096327a6da6602c509d108ea0ed4a599a7eb3)

* [OCPBUGS-63459](https://issues.redhat.com/browse/OCPBUGS-63459): Branch Sync release-4.19 to release-4.18 [10-22-2025] [#2825](https://github.com/openshift/ovn-kubernetes/pull/2825)
* [OCPBUGS-63716](https://issues.redhat.com/browse/OCPBUGS-63716): Skip Pending pods in EgressIP status updates [#2836](https://github.com/openshift/ovn-kubernetes/pull/2836)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/7bb7a9e71737d4d2d7e00f693080df3fc4d735db...2fe096327a6da6602c509d108ea0ed4a599a7eb3)


### [tests](https://github.com/openshift/origin/tree/408d767f503d45acdaf996fc854ffc94d1c614df)

* [OCPBUGS-63712](https://issues.redhat.com/browse/OCPBUGS-63712): Migrate OCP-32383 to upstream [#30443](https://github.com/openshift/origin/pull/30443)
* [Full changelog](https://github.com/openshift/origin/compare/7aabb3cc677fc0a44376d88ebb9847d7fe3f9ee8...408d767f503d45acdaf996fc854ffc94d1c614df)