4.18.28

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.28-s390x

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.17.11, 4.17.12, 4.17.13, 4.17.14, 4.17.15, 4.17.16, 4.17.17, 4.17.18, 4.17.19, 4.17.20, 4.17.21, 4.17.22, 4.17.23, 4.17.24, 4.17.25, 4.17.26, 4.17.27, 4.17.28, 4.17.29, 4.17.30, 4.17.31, 4.17.32, 4.17.33, 4.17.34, 4.17.35, 4.17.36, 4.17.37, 4.17.38, 4.17.39, 4.17.40, 4.17.41, 4.17.42, 4.17.43, 4.18.1, 4.18.10, 4.18.11, 4.18.12, 4.18.13, 4.18.14, 4.18.15, 4.18.16, 4.18.17, 4.18.18, 4.18.19, 4.18.2, 4.18.20, 4.18.21, 4.18.22, 4.18.23, 4.18.24, 4.18.25, 4.18.26, 4.18.27, 4.18.3, 4.18.4, 4.18.5, 4.18.6, 4.18.7, 4.18.8, 4.18.9

Changes from 4.18.27

Created: 2025-11-06 15:56:30 +0000 UTC

Image Digest: sha256:985f33fc3e0120187c7a888caba5535996e7b0003a57fbba083ad32d38794169

Components

Kubectl 1.31.1
Kubernetes 1.31.13
Kubernetes Tests 1.31.12
Red Hat Enterprise Linux CoreOS upgraded from 418.94.202510230424-0 to 418.94.202511041748-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StreamingCollectionEncodingToProtobuf (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-api-server git 03ef1905 sha256:9a47cb3958c8ce5b9a1f03a3789b01c89275f330b139a016b63146806259a1be
agent-installer-node-agent git 32a1f2a4 sha256:8969167678291a604d4d4f3ced9038c60d1a97b68692a307d0541c0b2d11a149
baremetal-runtimecfg git 35341068 sha256:5e0bde646544ab985426be60723993899743e76e7cc5943ea28980c02dbbadff
container-networking-plugins git e8ca1d70 sha256:7d220e86802f7e5a8fa26e11daaf51463a792e437dc31172374288c54d7cb857
docker-builder git a5cbc2b1 sha256:4e1912626a056f6ed5778e0a04b38d961bb4015da277b61a2c0ca521e9178e45
driver-toolkit git 2e139edc sha256:28db339b08f9e9bc259269f523db89c4478eb6013cbcb5b5864b050e72408a10
keepalived-ipfailover git 716eb0ef sha256:0e321e3b1ef6c1eb77ec1920071ffea65096c4d5f81642659b4b43b6bc8374c7
libvirt-machine-controllers git a336f0b5 sha256:39846bedfd1f9a0160bdd77b3b03fe51c0b7d50a4b21951d020afcb5d84f09b8
machine-os-images git ab432836 sha256:7873de30e22936a53381b345381d0e1fa79932ab64ce3f897afa430e89ff0dd2
metallb-frr git 98ccbe64 sha256:fac7872b5e3d8b5d61c7b45efc9c1abd540c17aab0a1ea9b98d9cba74c6657dc
monitoring-plugin git fafea6bc sha256:fe18697f7e2fa6929c9bac93dcb16a73b913509cff641739e8b27b5a5e870314
must-gather git 02e536cc sha256:90dfcf65fb71452cca8897117e6009cbf2310343bba0d5778e8e0925b36366b4
network-tools git 47b13549 sha256:429aed3a15992de5775dca53521ca6d0277ac0c289c15e87e3343817f24c6747
networking-console-plugin git 15535681 sha256:e9b77b91ddda29a6f750bc11757c12fc99f0d8f46363eeb44deefddb721efdb5
rhel-coreos sha256:e7b067e755d1d15535abbeff432053535d2a6c32f09c1837f4637491dea8b008
rhel-coreos-extensions sha256:8babe8e97a786faea45740f1884a481d3145deef151a64501944ca941de93e49
tools git 4fcb2d07 sha256:7cc3eba81a6536e46ee18b4a75d2aaf733549e46b7afeeb0659cf6830754db4c

aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-61773: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2456 #2475
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-53235: Validation for API and Ingress VIPs when using user-managed load balancer #10046
Full changelog

cluster-baremetal-operator

OCPBUGS-63439: Always have a service for ironic-api port #514
OCPBUGS-63469: Allow provisioningIP when network disabled #515
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63166: ccm: disable unused secure-serving port and webhook #421
Full changelog

cluster-config-api

CNTRLPLANE-1610: Add feature gates for StreamingCollectionEncoding #2528
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-63119: SCC: add hostmount-anyuid-v2 #1937
Full changelog

cluster-monitoring-operator

OCPBUGS-62852: Add mcd_local_unsupported_packages metric from MCO to telemetry 4.18 #2702
Full changelog

cluster-node-tuning-operator

OCPBUGS-63450: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1417
Full changelog

cluster-samples-operator

OCPBUGS-63511: references to github.com/sclorg/django-ex.git now also refer to the branch #657
Full changelog

console

OCPBUGS-63657: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15654
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-63574: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #190
Full changelog

csi-node-driver-registrar

OCPBUGS-63324: update log level verbosity to not clutter logs #89
Full changelog

hypershift

OCPBUGS-63034: [release-4.18] Update DNS names for ovn-kubernetes cp metrics #7025
OCPBUGS-63369: Make the hypershift CLI binary FIPS-compliant #7093
OCPBUGS-62808: Fix driver-config ConfigMap content flapping due to random ordering #6944 #6947
Full changelog

kubevirt-csi-driver

OCPBUGS-63670: Add awels as an approver in 4.18 branch #73
OCPBUGS-61700: Implement volume expansion #71
Full changelog

machine-config-operator

OCPBUGS-62294: Make static DNS with DHCP IP work #5311
Full changelog

oauth-apiserver

OCPBUGS-63050: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #149
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-63407: Use 127.0.0.1 for healtz http-endpoints #450
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-63459: Branch Sync release-4.19 to release-4.18 [10-22-2025] #2825
OCPBUGS-63716: Skip Pending pods in EgressIP status updates #2836
Full changelog

tests

OCPBUGS-63712: Migrate OCP-32383 to upstream #30443
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github