4.18.0-ec.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.0-ec.3-s390x

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.17.0, 4.17.1, 4.17.2, 4.17.3, 4.18.0-ec.0, 4.18.0-ec.1, 4.18.0-ec.2

Changes from 4.18.0-ec.2

Created: 2024-10-31 18:24:44 +0000 UTC

Image Digest: sha256:6233d2712050154e376db37e176471b1232e58520dbcbd8cd3dafdf5212cd1ef

Release 4.18.0-ec.3 was created from registry.ci.openshift.org/ocp-s390x/release-s390x:4.18.0-0.nightly-s390x-2024-10-28-052434

Components

Kubectl 1.31.1
Kubernetes upgraded from 1.31.1 to 1.31.2
Kubernetes Tests upgraded from 1.30.0 to 1.31.1
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202410071559-0 to 418.94.202410260038-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
MetricsServer (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
IngressControllerDynamicConfigurationManager (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

gcp-workload-identity-federation-webhook git f0a670c7 sha256:fe09c9cf867885ebbc2199fd6f31ea174e6ab14a640b7b24903020bb5e256dd2

Removed images

csi-driver-shared-resource
csi-driver-shared-resource-operator
csi-driver-shared-resource-webhook

Rebuilt images without code change

apiserver-network-proxy git 0e116160 sha256:f797c6a052a2f9c813b89a27b1671acfa956522359d8bb29ff910a2ea018b014
aws-kms-encryption-provider git 088dcaf7 sha256:ca37fb0a08ae18579c1d2443d57e29a918c11446b81cb9e695406cc8a73d4be6
baremetal-machine-controllers git c34826a6 sha256:c65da6f9adf61f39f4ef3f7e951887fd28538135244e4f801e09d6a98b4eef02
baremetal-runtimecfg git 4dac0e7e sha256:6a93a4740245ae9e17ec4747b66ee8a830f7715f558fe7f149ea4eef37f8a542
cloud-network-config-controller git 042d5880 sha256:3602836380efe4b08d7509a427ee9ef03d1f9be8f670a1fefb13eeaf45b1be61
cluster-autoscaler-operator git 1a9b7755 sha256:6e3295d34391427ebc0ce2e873385e692852d0edbae8d94e392137686e788b2b
cluster-bootstrap git c6db451d sha256:445a8225255bf6ce94204559622771272f0d6d4f0c23ba0e3db0d04f6eafbe39
cluster-capi-controllers git c3641162 sha256:7489dc2ab7995c2abd55c3475233c8994c6959675d3f5724610bfa882637a406
cluster-config-operator git 85cb4072 sha256:ea774699259dc3e995d796d9774afea6e28f8d9cdc80d148ab38187461e15b02
cluster-csi-snapshot-controller-operator git 8122add3 sha256:27d87d79a91ed7700f49de60c985fdc8f464c106cd38982c62f96a6a75524829
cluster-dns-operator git 208d50c1 sha256:02d5bae012dd6849183e6880f3e446b216d1e2fc9b1b51ca47da2f8af9eb32d7
cluster-kube-controller-manager-operator git e3e3ce7a sha256:36dfdd186912cafb96248d5a2ab20add99f89d3723272c95c522756bb7e7228c
cluster-kube-scheduler-operator git 56e6c136 sha256:15d1b1b04cd3afc7424b7036523d04d7f4e3615b6e5c605a52cf7d22ba3d5688
cluster-kube-storage-version-migrator-operator git 64010ca0 sha256:87a1bcfcf58be4b27f706d5b87eedbad3306a6cfc1f87b52850b8b7f898b1068
cluster-machine-approver git 31430c7d sha256:5b82fb1e43e05aa5007cfff6d5def6ed8dbc1c7b206224dfb5bab7310f0a503d
configmap-reloader git cde5e473 sha256:cb16402c5449109d31d9f3e1080d51f054e01c115dd46b0a214b5bafc18374f4
container-networking-plugins git 24a65329 sha256:858901ef3bf573cd6a8f1fc232b9e2c1a860bc4fdb2b7619da83889a798aba2c
containernetworking-plugins-microshift git 24a65329 sha256:de38cbda505c388c54c0c6201c9ce0be25a09998ac55f45da9b14f55a381a5c9
coredns git cb1abfae sha256:42d1de0acf7d670240c3907c7c45c83b84a3125debe9827297dcd5b3c88f79da
docker-builder git 3813f976 sha256:d9b1b732917d5087b1fe5d9b186f0a8e2ec3a0b2959f64ef6de54d3305c277d8
driver-toolkit git e7fe5ff9 sha256:82aaa3094c4af38afb574f0851406729c2fe8e9f2285b0334f54eb9e7436cc4f
egress-router-cni git 3193a756 sha256:8f8b775bcf0e1823e26ac9edda61b693465448f5fa5bf98733279e8af8a166b8
etcd git fd65559c sha256:3b2d95ccacefd69460e971375d56391efbd588e6db350ceba675f12d8793b1b3
ibm-cloud-controller-manager git a33026b1 sha256:a9ee95ef015dc3fe26d2ec60b19bfaffcb6da0bec28b48092ed347711f0b9b8a
ibm-vpc-block-csi-driver git 59a8340c sha256:c91b7d8f8b60be56b9ebde859a53a3d278f0d54cecb05ea3011b89cc3e01d53a
ibm-vpc-block-csi-driver-operator git 6fddbfee sha256:49671c46b46593c2ebdc291ff5899a3362d7bd87644724a9cd9d90ad3eb3c261
ibmcloud-machine-controllers git 0fdb7272 sha256:0bb70647404a48059cb7efb0d00507ec1362c5b9d7090191403428aab352b980
kube-metrics-server git 962ccca2 sha256:34938b6968e7b321d5fe1e744880fe75fbd478ae1f4f94977ed67c5c8a2583ef
kube-rbac-proxy git 526498ab sha256:b35320d862482434640103850301b8313093512a49641e3dcdbdf39210b0af28
kube-state-metrics git cb5a9296 sha256:3098dd965825877088f8901c6eee5d3914e74d09838acf1412f699bbabadf4a1
kube-storage-version-migrator git 50d17147 sha256:1ef8845650424cd572a9a14254b098ab28ead30350cd283626500b3a8ddab0cc
kubevirt-cloud-controller-manager git 3f4542ec sha256:08d7b412a9379e9ece930f409b003ec74e25a6c3121be9eb842dabb17f5c90bc
kubevirt-csi-driver git 01e014ae sha256:9475d4539351a61147cfa23ac8922e770208c8cf6b13fe758260ef9eeb178827
libvirt-machine-controllers git a336f0b5 sha256:91621f6c3df7f0c0348ca66d47b6c51620cdf712b1e6da06d2c28464bdf6f207
multus-admission-controller git 1b2791b7 sha256:bb4856bac1993067adbbd50da79e06885e3c7b0e68ff187efc5536a45fd8b396
multus-route-override-cni git 391c1b03 sha256:b892cb2bfdc7dce0951e72f34bfc7357ab2d4dfd4f7590cdcb514135c621b209
network-interface-bond-cni git 9506a1ff sha256:9511b75565643ad7526af81e9cd7c6b45843624b963f4580ecb6bb69d3509b39
network-metrics-daemon git e4c214c3 sha256:ecb47108da6277a4df142f028a96a87c29c3d20d85fd15cbe254e7048a32959e
oauth-proxy git 30f80124 sha256:785cfa372be4cd2fdfcfa84eb47e3017c63118c193f9231ee6d1ffad5876f63b
oauth-server git 821fdfd1 sha256:4325df81fa5594fbd398358011866ed8808eca51f443c55b638240cc73a02437
openshift-apiserver git cb676917 sha256:0051ce74d16bd2d28c848c995c86403ba851cf2df411072cbe623cddfd319c9e
openshift-state-metrics git f5b14702 sha256:13554400768f71b86c772e2de85eaa8171e2948cfd61d0eacceef8545f2a5c4d
openstack-machine-api-provider git d914e77e sha256:021ed1f36afbc7619fd7c9ebc687dc5c1510789c9b227dbfd486b15292cc2781
ovirt-csi-driver git 1db726a9 sha256:24061afb208f20f058fdc5f959effba5299a4887cbef92cb86c592cf4c171e04
ovirt-csi-driver-operator git 0feae256 sha256:79a03aa138ba4df74d07103adc4de883689a4580976c7d6655ee4d241c0cd1b6
ovirt-machine-controllers git abb91c84 sha256:e271ca6c30d7de07f5f07a9ee317d9af498eedb40e1e185b853c160c9c6af925
prom-label-proxy git d9fe2d8e sha256:7db2300ab537520e97880d1c86ee1ff3378ee070f876ea5d225bd43fa8ba7758
rhel-coreos sha256:86ad807fa0a39bd2774b2407753d08afd85e55b70ebe7f2b9c7745f7af0864d9
rhel-coreos-extensions sha256:9b4b79753ec55f7a3b708fd06333983eb15e820fae8c18df4cee243c592de765
service-ca-operator git 1f7d6472 sha256:b04669c1a59ea44866e62f4831816560ad5a7ed1bd1fc5a2864a4e5cfbbdb4e1
telemeter git 0453f452 sha256:68d8d62e4e42d2ce70ec4c2875a34dc5750a12aa579805f71f4f653b55b19560
thanos git f6f7cc41 sha256:d98daf88909b1ad0e8d4cba99bd5f7e00c0bd97c20f85296051139e11b23236a

agent-installer-api-server

NO-ISSUE: Update CI gather script and fix failing to scale nodepool (#6934) #6934
MGMT-19148: Add OLM operator setup jobs finalizing stage (#6933) #6933
Ensure no finalizer is set for BMHs without the infraenv label (#6920) #6920
MGMT-18829: Convert agent-install CRDs to new webhook (#6882) #6882
Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.18 (#6725) #6725
NO-ISSUE: [master] Bump OCP versions: 4.18 (#6910) #6910
MGMT-19129: Migrate assisted-service to Konflux (#6911) #6911
NO-ISSUE: fix ‘object has been modified’ error in kube-api subsystem (#6880) #6880
NO-ISSUE: Pin gocov version (#6902) #6902
OCPBUGS-42525: Disable pprof for agent-based installer (#6889) #6889
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.15, 4.12 (#6891) #6891
OCPBUGS-32857: Fix of go-jose version from 4.x.x to 2.x.x (#6881) #6881
modify default value of MIN_VERSION_FOR_NMSTATE_SERVICE flag to 4.19 (#6887) #6887
MGMT-19054: remove LSO as default for CNV on ARM (#6879) #6879
fix static network for fulliso old flow (#6878) #6878
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.14, 4.16, 4.15 (#6874) #6874
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Dockerfile to use go.uber.org/mock (#911) #911
MGMT-19148: Update assisted-service dependencies. (#936) #936
Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.18 (#917) #917
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.18 (#898) #898
NO-ISSUE: Bump PGX version (#932) #932
NO-ISSUE: Pin gocov version (#924) #924
Full changelog

agent-installer-node-agent

Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.18 (#777) #777
OCPBUGS-43006: Fix bash string comparison during image build (#799) #799
NO-ISSUE: Pin gocov version (#806) #806
NO-ISSUE: Add additional test for GPU cards with multiple PCI functions (#800) #800
MGMT-18923: Add hwdata package, required by the agent to detect GPUs (#796) #796
Full changelog

agent-installer-utils

OCPBUGS-39590: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.18 #36
Full changelog

aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

WRKLDS-1449: Bump k8s api to 1.31.2 #2122
OCPBUGS-28812: UPSTREAM: <carry>: kubelet/cm: fix bug where kubelet restarts from missing cpuset cgroup #2031
OCPBUGS-39004: CRD type check test fix #2116
OCPBUGS-38838: Re-enable 1.31 kubectl tests #2114
TRT-1867: Revert #2067 “OCPBUGS-39305: log only deprecated api requests” #2112
OCPBUGS-39305: log only deprecated api requests #2067
Full changelog

azure-kms-encryption-provider

OCPBUGS-41118: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.18 #8
Full changelog

baremetal-cluster-api-controllers

Update manifests #23
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

AGENT-1023: support patch in curl_assisted_service #9061
CORS-3283: IBMCloud: Add IBM Cloud CAPI Cluster manifest #9118
MGMT-19151: Add ingress CN to cluster configuration for image-based installer #9128
CORS-3706: allow to install an OCP Nutanix cluster using PC’s existing RHCOS image #9093
OCPBUGS-39585: Add C4 instance validation #9121
OCPBUGS-43520: Limit GCP API firewall rule for internal clusters #9113
OCPBUGS-43567: pkg/asset/installconfig/azure: send full certifcate chain #9117
OCPBUGS-36670: Update SecurityType for Image used by ConfidentialVMs #9101
CORS-3696: Add AWS User Provisioned DNS option to install config #9069
OCPBUGS-43279: Allow custom machine types #9094
AGENT-972, AGENT-973: Agent minimal ISO support for all platforms #9056
OCPBUGS-43518: Power VS: Fix incorrect error handling for AddSecurityGroupRule #9107
OCPBUGS-39231: add chrony.conf file when additional NTP sources are configured #9095
AGENT-966: Reduce dependency from kube-system/cluster-config-v1 when generating the image #9066
OCPBUGS-41834: Add agent installer checks for hosts interface table #9052
OCPBUGS-30292: For agent installer, add RendezvousIP to NO_PROXY #9083
OCPBUGS-36532: Agent installer wait-for, just test connectivity to host #9074
AGENT-988: fix node-joiner integration tests #9100
OCPBUGS-42637: Update RHCOS 4.18 bootimage metadata to 418.94.202410090804-0 #9088
OCPBUGS-36869: Prevent race with provisioning-interface service #8985
OCPBUGS-36236: IBMCloud: Handle pagination for subnets #8668
AGENT-904: Output config-image from node-joiner tool #8321
OCPBUGS-43041: fix slice init length #9072
CORS-3284: IBMCloud: CAPI PreProvisioining #8235
CORS-3472: Ensure that a region contains zones #9087
OCPBUGS-42717: Power VS Ensure Metadata populated for CAPI/private cluster case on PowerVS #8826
OCPBUGS-42789: Update forwarding rules destroy #9075
OCPBUGS-41785: Validate MTU when controlPlanePort uses FixedIPs #9081
MGMT-18292: in order to be able to import openshift installer we need to update assisted service as it requires new hive #9058
Full changelog

baremetal-operator

NO-ISSUE: Merge upstream #381
METAL-1158: Merge upstream #379
Full changelog

cli, cli-artifacts, deployer, tools

OTA-1273: pkg/cli/admin/upgrade/recommend: Add –version option for specific releases #1897
API-1835: gather discovery when using inspect #1901
OCPBUGS-42775: Do not allow new line in user in create user #1899
OCPBUGS-42601: Remove redundant defaulting message in description #1896
AGENT-966: additional rbac policy rules #1895
Full changelog

cloud-credential-operator

OCPBUGS-36644: Only attempt timed token credentials on supported platforms. #771
CCO-571: Add GCP pod identity webhook #758
CCO-595: Upgrade to Kubernetes 1.31 #763
Full changelog

cluster-authentication-operator

OCPBUGS-42932: ensure annotations map exists before mutating it #727
API-1835: adds output-resources to cluster-authentication operator. #720
NO-JIRA: add relatedResources to authentication for collection if operator crashes #722
API-1835: Bump library-go to get WorkloadController SSA #715
API-1835: demonstration mutation recording client #710
API-1835: Set Unknown conditions in WellKnownReadyController #716
API-1835: Migrate WellKnownReadyController to SSA #705
Full changelog

cluster-autoscaler

OCPCLOUD-2733: rebase on upstream 1.31.0 release #319
Full changelog

cluster-baremetal-operator

OCPBUGS-43371: allow all features on platform=none #450
NO-ISSUE: document testing with custom images in README #451
METAL-1145: Enable running CBO from Kubevirt (platform) #448
Full changelog

cluster-capi-operator

NO-JIRA: updated spell and comment #225
OCPCLOUD-2749: mapi2capi conversion pkg negative testing: add missing machine/machineset tests #224
NO-JIRA: Update OWNERS #223
OCPCLOUD-2749: capi2mapi conversion pkg negative testing #222
OCPBUGS-42490: fix: azure: do not deploy CAPI on AzureStackCloud #220
OCPCLOUD-2643: Machinesetsync split reconcile #219
OCPCLOUD-2741: Update dependencies of operator and manifest gen #218
OCPCLOUD-2749: mapi2capi conversion pkg negative testing #215
OCPCLOUD-2643: MachineSetSync controller bootstrap #217
OCPCLOUD-2643: MachineSyncReconciler - split reconciles #212
OCPCLOUD-2206: Generate AzureCluster resource for CAPI cluster #189
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-43157: update goimports targets #370
Full changelog

cluster-config-api

MON-3971: Remove MetricsServer feature gate #1993
NO-JIRA: add requirement for featuregate URL #2073
Last generation only increase #2068
NE-1790: Introduce IngressControllerDynamicConfigurationManager feature gate #2057
Update crd-schema-checker dependency #2062
Ensure custom feature gate mainfest path is passed into generator #2060
OCPNODE-2333: add imagepolicy to payload crds #2036
Full changelog

cluster-control-plane-machine-set-operator

NO-JIRA: Bump cluster-api-actuator-pkg/testutils to latest #329
Full changelog

cluster-etcd-operator

OCPBUGS-17199: Revert pull request https://github.com/openshift/cluster-etcd-operator/issues/1350 #1357
ETCD-686: Remove etcd-backup-server StaticPod approach #1358
OCPBUGS-17199: remove stability check from bootstrap completeness #1350
NO-JIRA: sort imports using goimports #1351
NO-JIRA: update library-go to latest #1349
Full changelog

cluster-image-registry-operator

HOSTEDCP-2019: Use Client Cert Auth for ARO HCP deployments #1131
OCPBUGS-43508: fix proxy config and leader election test flakes #1140
OCPBUGS-38667: pkg/operator: wait for image registry config object cache sync #1138
OCPBUGS-42732: pkg/storage/azure: also check for auth failure error code on deletion #1129
CFE-1129: Added AWS TAGS reconciliation #1121
Full changelog

cluster-ingress-operator

OCPBUGS-43033: e2e/ingress_dns: support both private & public #1153
Full changelog

cluster-kube-apiserver-operator

API-1835: migrate the installer controller to SSA #1756
NO-JIRA: Update “deprecated API in use” alert expressions for 1.31. #1750
OCPBUGS-42083: Don’t rollout revision until three etcd endpoints are listed #1743
Full changelog

cluster-kube-cluster-api-operator

ACM-14824: add ocp chart index.yaml and readme #54
ACM-14308: Add ocp CAPA params #52
Full changelog

cluster-monitoring-operator

MON-4065: [bot] Synchronize versions of the downstream components #2504
OCPBUGS-18007: Add runbook url for TelemeterClientFailures #2506
MON-4060: Bump prometheus-operator to v0.77.2 #2502
OCPBUGS-42671: make config unmarshalling more strict to help detect #2493
OCPBUGS-42148: Fix api doc on Thanos Ruler default retention #2500
MON-3850: Lint CMO tests #2292
MON-4021: feat: add the required utils for automated tests and integration with the docs #2443
NO-JIRA: fix CMO config for Alertmanager e2e tests #2495
Full changelog

cluster-network-operator

OCPBUGS-39189: fix annotation from deployment to pod #2545
NO-JIRA: onv-k, udn: Update UserDefinedNetwork CRD #2517
HOSTEDCP-2035: Set up Azure authentication with cert for ARO HCP #2522
OCPBUGS-42605: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2532
CNF-14971: frr-k8s: allow setting the loglevel from env-overrides #2535
CNF-13671: Adjust frr-k8s metrics #2531
CNF-14199: Align FRR-K8s CRDs #2525
CNF-14251, CNF-14257: multi-networkpolicy: Enable for ipvlan and bond networkds #2518
SDN-5186: Process OVNObservability feature gate #2462
NO-JIRA: OVN-Kubernetes node RBAC tightening #2526
SDN-4930: Adds UDN list/watch to ovnknode rbac #2524
Full changelog

cluster-node-tuning-operator

CNF-14628: e2e: Adjust profile nodeSeletcor on hypershift (#1183) #1183
CNF-13014: Align dockerfile ocp version (#1194) #1194
OCPBUGS-43666: Fix kernel arguments ordering on Intel (#1197) #1197
OCPBUGS-43665: Drop amd_iommu=on from amd tuning (#1198) #1198
NO-JIRA: Fix typo in codegen script (#1199) #1199
Fix linter warnings (#1196) #1196
Bump the latest k8s and OpenShift dependencies (#1195) #1195
CNF-13014: Check for tuned patches before attempting to apply them in the dockerfile script (#1193) #1193
CNF-14090: Add vendor and architecture specific tuning options (#1083) #1083
CNF-13193: Update NTO Hugepages size validation (#1086) #1086
NO-JIRA: Default to username and timestamp for custom NTO push (#1190) #1190
logs: avoid spamming when PerformanceProfile is missing (#1181) #1181
E2E: fix modify node selector to use lowercase (#1185) #1185
Remove upstream TuneD patch (#1151) #1151
Make ocp-tuned-one-shot.service restart on-failure (#1177) #1177
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1163) #1163
NO-JIRA: CI: unblock (#1182) #1182
Full changelog

cluster-olm-operator

NO-ISSUE: (bugfix): prevent discovery errors on unknown GVKs #75
OPRUN-3571: (feature): add clustercatalog controller for managing default clustercatalogs #73
OCPBUGS-42860: degraded co operator #72
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: bump dependencies #598
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1492: Update k8s dependencies to 1.31.1 #368
Full changelog

cluster-policy-controller

OCPBUGS-43380: psalabelsyncer: add image volume type to list #157
WRKLDS-1492: Update k8s dependencies to 1.31.1 #156
Full changelog

cluster-samples-operator

SO-138: Periodic sync of supported OCP samples #583
SO-137: Support updating the library separately for OKD and for OCP. #581
Full changelog

cluster-storage-operator

STOR-1823: Remove shared-resource CSI driver from CSO #509
HOSTEDCP-2033: Add ARO HCP environment vars to CSI deployment #517
OCPBUGS-41365: add KUBE_RBAC_PROXY_CONTROL_PLANE_IMAGE to other neede… #522
NO-JIRA: assets: shared-resource: hypershift: add pull-secret to operator SA #519
OCPBUGS-41365: fix typo CONTROL_PLANE_KUBE_RBAC_PROXY_IMAGE -> KUBE_R… #518
OCPBUGS-41365: add ability to control kube rbac proxy container image… #515
AUTH-482: set required-scc for openshift workloads #516
Full changelog

cluster-update-keys

ART-10934: Move sigstore to release-3 key #63
Full changelog

cluster-version-operator

OCPBUGS-42880: Upgradeable=False should not block a 4.(y+1).z to 4.(y+1).z’ retarget (#1094) #1094
Full changelog

console

CONSOLE-4295: i18n upload/download routine task - sprint 261 #14435
OCPBUGS-43538: add onRowsRendered prop to VirtualizedTable in SDK #14421
OCPBUGS-43084: While accessing the node terminal from UI observed ‘Warning alert:Admission Webhook Warning` #14432
OCPBUGS-43799: Debounce tile view searches #14365
OCPBUGS-43640: Show danger status if invalid #14424
OCPBUGS-41358: While upgrading the cluster from UI observed Warning alert:Admission Webhook Warning #14395
OCPBUGS-43652: Filter dropdown doesn’t collapse on second click #14427
OCPBUGS-42985: Update Console dynamic plugin SDK webpack dependency #14300
ODC-7680: Migrate FilterTable to PF5 #14340
OCPBUGS-43409: ‘control plane’ option is missing on ‘filter node type’ list #14412
OCPBUGS-43530: Searching resources with shortname doesn’t work on Search page #14420
OCPBUGS-42796: Do not pass CSV name to operand list page when an exen… #14396
ODC-7655: Migrate SelectVariant.Typeahead SelectInputFields to PF5 #14305
OCPBUGS-43494: Searching volumesnapshot and volumesnaphotclass with label doesn’t work. #14410
CONSOLE-4182: replace DropdownDeprecated in SearchFilterDropdown #14390
ODC-7680: Remove SeriesButton, QueryTable #14363
CONSOLE-4119: Convert deprecated perspective dropdown to select #14328
OCPBUGS-31914: Searching node with label doesn’t work. #14404
OCPBUGS-43039: Broker form view by default throws error in Application name if an application exists #14399
OCPBUGS-43482: add data-test attribute for Pod and Node logs toggle button #14408
ODC-7680: Migrate ResultsList to PF5 #14343
CONSOLE-4256: (deps) update PatternFly to 5.3.0 #14242
CONSOLE-4125: Convert language dropdown deprecated select #14243
ODC-7703: Quick create actions in the masthead toolbar #14345
OCPBUGS-43110: fix id issues with ClipboardCopyButton #14394
CONSOLE-4274: i18n upload/download routine task -sprint 260 #14348
OCPBUGS-38717: Telemetry userPreference results in empty nodes output to the DOM #14291
OCPBUGS-42819: remove invalid resource name check for value ‘~new’ #14380
CONSOLE-4078: Address tech debt in SSHAuthSubform component #14375
CONSOLE-4191: update ContainerDropdown to use PatternFly Select #14362
OCPBUGS-42712: Replace usage of containsNonPrintableCharacters function with isBinary function from ‘istextorbinary’ lib. #14364
ODC-7664: Add subscribe form for Knative EventType #14304
OCPBUGS-42778, OCPBUGS-42850: Add missing plugin names to known plugins #14382
CONSOLE-4263: Add initial Content Security Policy for Console web application #14156
CONSOLE-4236: Migrate Dev > Observe > Dashboard Page #14192
OCPBUGS-41492: show Samples tab when one or more exists #14350
Full changelog

console-operator

NO-JIRA: Update owners file: Update my github username) #936
Full changelog

csi-external-attacher

STOR-2018: Rebase external-attacher to v4.7.0 for OCP 4.18 #80
Full changelog

csi-external-provisioner

STOR-2018: Rebase external-provisioner to upstream v5.1.0 for OCP 4.18 #106
Full changelog

csi-external-resizer

STOR-2018: Rebase external-resizer to upstream v1.12.0 for OCP 4.18 #166
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

STOR-2018: Rebase external-snapshotter to v8.1.0 for OCP 4.18 #164
Full changelog

csi-livenessprobe

STOR-2018: Rebase livenessprobe to v2.14.0 for OCP 4.18 #69
Full changelog

csi-node-driver-registrar

STOR-2018: Rebase node-driver-registrat to v2.12.0 for OCP 4.18 #76
Full changelog

docker-registry

IR-492: metrics: document error codes #415
OCPBUGS-39108: bump docker distribution to fix purgeuploads panic #414
IR-489: export storage read-only errors as metrics #412
Full changelog

haproxy-router

NE-1815: Enable ALPN for reencrypt routes when DCM is enabled #631
OCPBUGS-26603: Listen for stats connections on v6 addresses when relevant. #633
NE-1811: Rename the allowlist route annotation #564
NO-JIRA: Add grzpiotrowski to the OWNERS file #629
OCPBUGS-41295: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.18 #624
Full changelog

hypershift

HOSTEDCP-967: Drop alpha api and conversion #4977
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys from 1.1.0 to 1.2.0 in the azure-github-dependencies group #4982
HOSTEDCP-1989: Move NTO reconcile logic into their own file #4962
NO-JIRA: chore(deps): update konflux references (main) #4968
HOSTEDCP-2054: [CPO Refactor] Refactor kube-apiserver #4941
NO-JIRA: Add API label #4984
OCPBUGS-43756: update eventuallyDaemonSetRollsOut to only watch ready… #4973
NO-JIRA: Make api module dependencies consistent with main module dependencies #4978
NO-JIRA: Update azure and AKS upstream docs #4966
OCPBUGS-43707: Add crd override for NodePool scale subresource #4970
NO-JIRA: doc/openstack: install operator with --tech-preview-no-upgrade #4976
OCPBUGS-38357: openstack: add option to configure nodepool AZ #4531
HOSTEDCP-1994: Add generic create function for SecretProvider #4960
OCPBUGS-43698: dump: make ControlPlaneComponent’s GKV optional #4965
HOSTEDCP-1472: update TestNodePoolPrevRelease tests to use RFC 1123 nodepool name #4950
HOSTEDCP-1883: Remove hardcoded catalog images in CPO #4612
NO-JIRA: chore(deps): update konflux references #4952
HOSTEDCP-2002: fix typo in doc commands #4951
HOSTEDCP-2018: Reorder Nodepool conditions #4859
NO-JIRA: chore(deps): update capz to v1.17.0 #4808
OCPBUGS-38132: cpo: produce valid oauth config even if idp config is invalid #4955
OCPBUGS-42434: Add Managed Identity Support in Azure HC API behind AROHCPManagedIdentities Feature gate #4811
NO-JIRA: Bump the azure-github-dependencies group with 2 updates #4938
NO-JIRA: Split API into platform files #4944
NO-JIRA: KubeVirt CSI Security and Isolation Documentation #4937
NO-JIRA: chore(deps): update konflux references (main) #4930
HOSTEDCP-2002: Add documentation around crun migration for HCP #4912
HOSTEDCP-1994: Pass Azure Key Vault’s Managed Identity’s Client ID to HO and CPO Deployments #4926
HOSTEDCP-2040: Add README.md for ControlPlaneComponent #4915
HOSTEDCP-2040: [CPO Refactor] Refactor HCCO #4860
HOSTEDCP-1773: Feature gates openshift markers #4918
OCPBUGS-43448: Pass feature flags to clusterpolicy controller #4925
NO-JIRA: chore(deps): update konflux references #4920
HOSTEDCP-1472: add CP with n-2 NP test #4911
OCPBUGS-38132: add ValidIDPConfiguration condition to report IDP config issues #4852
HOSTEDCP-2028: e2e: use TechPreviewNoUpgrade feature set in TestCreateCluster #4902
OCPBUGS-43087: openstack/e2e: re-work nodepool tests #4868
NO-JIRA: Bump the golang-dependencies group with 3 updates #4891
HOSTEDCP-1801: [CPO Refactor] Introduced ControlPlaneComponent CRD #4839
NO-JIRA: chore(deps): update konflux references (main) #4892
NO-JIRA: e2e: rename file to avoid IDE errors #4901
HOSTEDCP-2026: Add support for static control plane operator overrides #4889
HOSTEDCP-1994: Add Secrets Store CSI RBAC Policies for HO and CPO #4878
NO-JIRA: statically link CLI binaries #4871
HOSTEDCP-2025: Allow setting the VPC CIDR when creating AWS infrastructure #4866
HOSTEDCP-1994: Remove infra create MI for Azure NP #4874
OCPBUGS-43064: move resource.k8s.io to v1alpha3 for kube 1.31 #4887
NO-JIRA: cli: add feature-set flag to create cluster #4886
NO-JIRA: Enforce EnsurePSANotPrivileged for 4.18 and later #4875
HOSTEDCP-1994: Create separate secrets for Azure disk and file #4861
NO-JIRA: switch to using ptr instead of pointer #4856
HOSTEDCP-2009: change from NumberOfProbes to ProbeThreshold #4863
OCPBUGS-42873: Do not send traffic to local audit-webhook through konnectivity #4864
OCPBUGS-42783: Use guest DNS resolution in Konnectivity HTTPS proxy by default #4858
CNV-39662: Document HCP KubeVirt GPU device usage #4844
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-43685: UPSTREAM: 1857: Bump github.com/IBM/go-sdk-core/v5 from 5.17.3 to 5.1.7.4 (#1857) - main #91
OCPBUGS-41210: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.18 #85
Full changelog

insights-operator

gather selected clusterroles (#1016) #1016
NO-JIRA: Add gather server error known codes to the checks (#1018) #1018
OCPBUGS-42961: update the filtering of the container logs (#1009) #1009
CCXDEV-14462: [IO Enhancement] collect how many unused MachineConfigs in the cluster (#1007) #1007
Updating build options in order to ensure FIPS compliant build (#1010) #1010
NO-JIRA: container log JSON schema - minor description update (#1012) #1012
OCPBUGS-42675: do not propagate the remote configuration status as an (#1006) #1006
Full changelog

keepalived-ipfailover

OCPBUGS-41231: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.18 #196
Full changelog

kube-proxy

OCPBUGS-43764: Revendor to a patched k/k with our prefer-local-DNS hack #638
Full changelog

machine-api-operator

OCPBUGS-41502: vSphere klog initialization preventing verbose log messages #1300
OCPBUGS-38724: Fix misleading error messages relating to new yaml config #1277
OCPBUGS-43481: fix: health probes paths and updated timing #1299
NO-JIRA: Bump cluster-api-actuator-pkg/testutils, use envtest –index #1297
Full changelog

machine-config-operator

MCO-1314: OCPBUGS-43509: Pick up openshift/kubernetes 1.31 rebase updates #4629
OCPNODE-2333: Implement ImagePolicy CRD #4587
OCPBUGS-38490: Increase connection limit for cluster loadbalancer #4531
OCPBUGS-43428: Soften haproxy timeout for kubeapi probe #4646
NO-ISSUE: pkg/operator/status: Block ClusterVersion updates until multi-arch transitions complete #4637
MCO-1276: Integrate Metric Collection with MCO Daemon #4632
MCO-1326: Decouple BuildController and ImageBuildRequest #4568
NO-ISSUE: Add Rishabh Saini to approvers and reviewers #4644
NO-ISSUE: Add LorbusChris to OWNERS #4643
NO-ISSUE: OWNERS: Add umohnani8 #4641
OCPBUGS-42742: set observed generation and fix pod error detection #4640
COS-2947: Add sysstat extension support #4619
OCPBUGS-43328: remove dra manager state #4639
OCPNODE-2633: templates/*: make crun as the default container runtime #4610
Full changelog

machine-os-images

OCPBUGS-39570: Updating ose-machine-os-images-container image to be consistent with ART for 4.18 #40
Full changelog

metallb-frr

Align upstream 07-10 #67
Full changelog

monitoring-plugin

COO-493: Fix alerts page kebab dropdown #232
OU-506: prefetch dependencies for konflux pipelines #229
OU-507: Add ACM alerting #202
OCPBUGS-42851: Refresh interval button on “Observe -> Metrics” page failed to load for admin/developer console #221
NO-JIRA: Update Konflux references #222
Update Konflux references to 674e70f #220
NO-JIRA: Update Konflux references #211
OU-406: Red Hat Konflux update monitoring-console-plugin-0-3 #210
OU-406: add konflux dockerfile #209
OU-259: Migrate Dev > Observe > Dashboard Page #167
OU-550: Use npm instead of yarn #200
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-43390: Update net-attach-def client library to 1.7.5 for cri-o functionality #256
Full changelog

multus-networkpolicy

Update OWNERS (#63) #63
OCPBUGS-36468: Make sure that policies with no valid peers are enforced (#61) #61
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-33946: Ds merge 10/9/24 #314
Full changelog

must-gather

OCPBUGS-42679: Support gathering IPsec data #458
RFE-5765: Collect etcd object count #435
Full changelog

network-tools

SDN-4085: Enhance Troubleshooting experience with multiple DBs #117
Full changelog

networking-console-plugin

OCPBUGS-43034: Add Route Filter in route list #132
OCPBUGS-43034: Routes list sort by status #130
CNV-49305: fix for virt perspective #127
OCPBUGS-42354: hide routes metrics non-admin users #126
Full changelog

oauth-apiserver

NO-JIRA: apiserver: sanitize the generic config for the chained servers #122
OCPBUGS-39529: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.18 #118
Full changelog

oc-mirror

CLID-230: Rebuild catalog multi-arch images with filtered content (#937) #937
CLID-205: Use same namespace as v1 for release mirroring (#939) #939
clid-253: adds helm images to delete feature (#941) #941
CLID-174: Use io.MultiWriter for the logger - logs to both stdout and working-dir/logs (#940) #940
clid-247 changes the tlsVerify default to true and adds helm tls support (#936) #936
changes the PreserveDigests default to true (#938) #938
CLID-228: Introduces flag –alpha-ctlg-filter and FilteredCollector that filters FBC (#929) #929
OCPBUGS-42428: Fix duplication of binary data in signature config map (#934) #934
clid-170: adds support to helm charts in oc-mirror v2 (#935) #935
CLID-226: Add analysis of OCPSTRAT-1515 in its current state (#926) #926
Full changelog

olm-catalogd

NO-ISSUE: Synchronize From Upstream Repositories #83
NO-ISSUE: Synchronize From Upstream Repositories #82
NO-ISSUE: Synchronize From Upstream Repositories #78
NO-ISSUE: Synchronize From Upstream Repositories #76
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #179
NO-ISSUE: Synchronize From Upstream Repositories #178
NO-ISSUE: Synchronize From Upstream Repositories #177
NO-ISSUE: Synchronize From Upstream Repositories #176
NO-ISSUE: Synchronize From Upstream Repositories #175
NO-ISSUE: Synchronize From Upstream Repositories #174
NO-ISSUE: Synchronize From Upstream Repositories #173
NO-ISSUE: Synchronize From Upstream Repositories #172
NO-ISSUE: Synchronize From Upstream Repositories #171
NO-ISSUE: Synchronize From Upstream Repositories #170
NO-ISSUE: Synchronize From Upstream Repositories #169
NO-ISSUE: Synchronize From Upstream Repositories #168
NO-ISSUE: Synchronize From Upstream Repositories #167
NO-ISSUE: Synchronize From Upstream Repositories #165
NO-ISSUE: Synchronize From Upstream Repositories #164
Full changelog

openshift-controller-manager

OCPBUGS-39432: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.18 #330
WRKLDS-1492: Update k8s dependencies to 1.31.1 #345
NO-JIRA: cleanup root and app OWNERS #341
OCPBUGS-42097: user system:serviceaccount:openshift-infra:serviceaccount-pull-secrets-controller in ns/openshift-infra must not produce too many applies #337
OCPBUGS-42089: updating github.com/containers/image to 5.30.1 to resolve CVE-2024-3727 #340
Full changelog

openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-43430: Rebase master onto release-1.31 #304
Full changelog

openstack-cinder-csi-driver-operator

HOSTEDCP-2032: Set azure disk & file Secrets Store CSI Volume #309
STOR-1844: remove config/samba/manifests/preview symlink #305
OCPBUGS-42325: Set separate secrets for file and disk config on HyperShift #290
OCPBUGS-43562: Add missing proxy hook for openstack-cinder driver #304
OCPBUGS-43653: Add missing credentials secret hook #307
OSASINFRA-3628: Make guest namespace configurable #294
STOR-1844: update OLM manifests to use stable channel #300
OSASINFRA-3618: Add Cinder CSI support (part 2) #275
OCPBUGS-42939: Correct aws efs csi driver config as removable #293
OCPBUGS-38922: add tag matching to Azure File storage class #272
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into main #324
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-43581: Fix TLS handshake error #884
NO-ISSUE: Synchronize From Upstream Repositories #883
NO-ISSUE: Synchronize From Upstream Repositories #881
NO-ISSUE: Synchronize From Upstream Repositories #879
Full changelog

operator-marketplace

AUTH-482: set required-scc for openshift workloads #578
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-39009, SDN-4930: Downstream Merge Sept 18th #2302
Full changelog

prometheus

NO-JIRA: [bot] Bump openshift/prometheus to v2.55.0 #234
MON-4065: [bot] Bump openshift/prometheus to v2.55.0 #232
OCPBUGS-43378: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #229
Full changelog

prometheus-alertmanager

OCPBUGS-41157: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.18 #95
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-4060: Bump openshift/prometheus-operator to v0.77.2 #311
Full changelog

prometheus-node-exporter

NO-JIRA: update OWNERS files #153
Full changelog

route-controller-manager

OCPBUGS-13181: ingress: Reset metrics when ingress is deleted #49
Full changelog

tests

NO-JIRA: tls registry: don’t store annotation values in violations #29227
OPRUN-3576: Add OLMv1 origin tests #29189
NO-ISSUE: Automated - Update synthetic test data #29159
OPNET-588: On-Prem test for apiserver reachability from the LB #29149
OCPBUGS-42536: Trying to reduce the flakiness of the samples smoke tests #29143
NO-JIRA: managed services: add exception for known images check #29230
MCO-1370: Add boot image configmap test to openshift/origin #29219
NO-JIRA: Additional logging for extract image and binaries #29218
NO-JIRA: managed services: skip JSON patch tests #29216
OCPNODE-2668: fix unexpected not ready #29225
OCPBUGS-43483: auditloganalyzer: check audit log for requests arriving after shutdown #29201
SDN-4930: network_segmentation: allow multiple UDN status conditions #29220
NO-JIRA: Allow extension binary extraction retries #29217
OCPBUGS-43512: New ManagedBootImages test appears to be failing too often #29210
OCPBUGS-42610: filter out pod events during vsphere snapshot options tests #29151
NO-JIRA: update-tls-artifacts: set owner to unknown if unset #29214
NO-JIRA: Changes to run the vertical scaling tests serially #29204
TRT-1575: Add more exceptions for operator degraded cases #29175
NO-JIRA: Add exceptions for various tests failing on managed services clusters #29209
NO-JIRA: feat: update to use pullspec image #29205
API-1835: Add a generation analyzer monitortest #29168
NO-JIRA: fix exec issue on etcd dr suite #29198
ETCD-687: Remove etcd-backup-server StaticPod approach e2e test #29196
NO-JIRA: test/extended/apiserver: test for checking the healthz endpoints for oauth-apiserver #29161
NO-JIRA: a new test for the jsonpatch library #29191
NO-JIRA: Enable external binary registry #29182
OCPBUGS-41787: Ignore infra nodes on tap cni tests #29178
NO-JIRA: prove json patch #29163
WRKLDS-1449: Fix kubernetes-tests version annotation #29188
OCPBUGS-43059: fix: sno issues with alerts and pathological events #29183
OCPEDGE-1266: fix: adding oslat updates and outputting test results to the artifacts #29160
OCPEDGE-1276: fix: adding in a SNO time override for AWS Metal #29144
NO-JIRA: Fix Network segmentation test for detecting timeout #29179
ETCD-664: Add e2e test for scaling when CPMS is disabled #29086
WRKLDS-1431: e2e: migrate DCs to Deployments #28957
TRT-1851: Revert “NO-JIRA: external binary registry” #29173
OCPEDGE-1265: removing rteval from the realtime test suite #29164
WRKLDS-1449: Rebase 1.31.1 #29103
NO-JIRA: external binary registry #29025
API-1789: tls artifacts: list ondisk locations alongside secret/configmaps #29090
NO-JIRA: update recovery tests with rev bumping #29145
NO-JIRA: make exception for invalid MCO changes #29167
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github