# 4.18.0-okd-scos.7 Created: 2025-04-04 21:09:02 +0000 UTC Image Digest: `sha256:3452c1c7fe454cca717a422073e39e47417bac43b4da0ac16aa146aa4bb55802` Promoted from registry.ci.openshift.org/origin/release-scos:4.18.0-0.okd-scos-2025-04-04-114452 ## Changes from 4.18.0-okd-scos.5 ### Components * Kubectl 1.31.1 * Kubernetes upgraded from 1.31.6 to 1.31.7 * Kubernetes Tests upgraded from 1.31.6 to 1.31.7 * CentOS Stream CoreOS upgraded from 418.9.202503200632-0 to 418.9.202503240632-0 ### Rebuilt images without code change * stream-coreos `sha256:f244306780196aba09f60b2651a8880b5266b61d01d7f07d0d4f8e4f158ae930` * stream-coreos-extensions `sha256:ce1494192042a8bb0e45d15b016cc9cc57fcf8cc10b03147b7fe15662f2907cf` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/9346359925bec817c0a193f5ff59b9c5a6616594) * [OCPBUGS-54378](https://issues.redhat.com/browse/OCPBUGS-54378): Bump go-jwt to 4.5.2 to fix CVE-30204 (#7483) [#7483](https://github.com/openshift/assisted-service/pull/7483) * [MGMT-20183](https://issues.redhat.com/browse/MGMT-20183): CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7456) [#7456](https://github.com/openshift/assisted-service/pull/7456) * [Full changelog](https://github.com/openshift/assisted-service/compare/e5a400590fed00f895a08245ef70df00ae97f28f...9346359925bec817c0a193f5ff59b9c5a6616594) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/e1670941fc948d9f3da739d0aa6878f8a33f6275) * [OCPBUGS-53713](https://issues.redhat.com/browse/OCPBUGS-53713): Bump golang-jwt/jwt/v4 to 4.5.2 in release-4.18 (#963) [#963](https://github.com/openshift/assisted-installer-agent/pull/963) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/593c9c284e43fd00095cfdf3f55b9017f4104663...e1670941fc948d9f3da739d0aa6878f8a33f6275) ### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9) * [OCPBUGS-53729](https://issues.redhat.com/browse/OCPBUGS-53729): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.7.2 (9283e64) into release-4.18 [#543](https://github.com/openshift/cluster-api-provider-aws/pull/543) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b3446080be1c2898ee039030c346020fa6c1ed13...59febef163d2b3d9ea791e8cfa81f8f3e06ed7b9) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/b8bc2053066bace662f5fece646be7ea76bc3c72) * [OCPBUGS-54355](https://issues.redhat.com/browse/OCPBUGS-54355): Re-reconcile machine on NIC provisioning failure [#135](https://github.com/openshift/machine-api-provider-azure/pull/135) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/62f62f7a0bb3d836e238588527627684018e229b...b8bc2053066bace662f5fece646be7ea76bc3c72) ### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/f60e4029d64de202e81d2cd114f8a90dc0a1878e) * [OCPBUGS-53801](https://issues.redhat.com/browse/OCPBUGS-53801): github.com/golang-jwt/jwt/v4 v4.5.2 [#31](https://github.com/openshift/azure-workload-identity/pull/31) * [Full changelog](https://github.com/openshift/azure-workload-identity/compare/d1dc8abd956e571e79dde6496d8bb4ca9aaadd83...f60e4029d64de202e81d2cd114f8a90dc0a1878e) ### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/d765baafafd7093c4a68e4cf96c9affb3839a109) * [OCPBUGS-53453](https://issues.redhat.com/browse/OCPBUGS-53453): IBMCloud: Move to IBM TF openshift fork [#9592](https://github.com/openshift/installer/pull/9592) * [OCPBUGS-53422](https://issues.redhat.com/browse/OCPBUGS-53422): Avoid adding duplicate entries to NO_PROXY [#9588](https://github.com/openshift/installer/pull/9588) * [Full changelog](https://github.com/openshift/installer/compare/e5ebf3caca66f0f486ed5c6ef84d196d5093e591...d765baafafd7093c4a68e4cf96c9affb3839a109) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/001d949830b89ce846e674701cac386db465a6f5) * [OCPBUGS-53324](https://issues.redhat.com/browse/OCPBUGS-53324): BMO can expose any secret via BMCEventSubscription CRD [#405](https://github.com/openshift/baremetal-operator/pull/405) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/20646c92b5f1c2a7b49fe12effee0b3c74df8058...001d949830b89ce846e674701cac386db465a6f5) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/ce6f538dfe49e534886321899dbbe2b4b65fc2c7) * [OCPBUGS-53825](https://issues.redhat.com/browse/OCPBUGS-53825): update github.com/golang-jwt/jwt [#837](https://github.com/openshift/cloud-credential-operator/pull/837) * [OCPBUGS-53345](https://issues.redhat.com/browse/OCPBUGS-53345): github.com/golang/glog v1.2.4 [#835](https://github.com/openshift/cloud-credential-operator/pull/835) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/7785eb495aa92843e88c968a5c9a4a49aa7cf16d...ce6f538dfe49e534886321899dbbe2b4b65fc2c7) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e30ce1d8ca759e861e5094e8b3665d1da6d3474f) * [OCPBUGS-53080](https://issues.redhat.com/browse/OCPBUGS-53080): Add missing relatedObjects [#467](https://github.com/openshift/cluster-baremetal-operator/pull/467) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/dfc6c062e17a22923547188cf893509524931a7f...e30ce1d8ca759e861e5094e8b3665d1da6d3474f) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/d967a73c5f7da76783ee1af093f21817e7681e1d) * [NE-1951](https://issues.redhat.com/browse/NE-1951): Pre-upgrade Admin Gate for Gateway API CRD Management Succession [#1196](https://github.com/openshift/cluster-ingress-operator/pull/1196) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b0222ed2054e3ff7b87f4f90d72b42b6cf2b53a7...d967a73c5f7da76783ee1af093f21817e7681e1d) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/118d1f1a7929c09d22ad1d3ab2a9fd984236bbfd) * [OCPBUGS-54351](https://issues.redhat.com/browse/OCPBUGS-54351): add rhdmalone to owners [#617](https://github.com/openshift/cluster-samples-operator/pull/617) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/de85e478a2f3dcc712ce5f02b56279cb116357f5...118d1f1a7929c09d22ad1d3ab2a9fd984236bbfd) ### [console](https://github.com/openshift/console/tree/b033fc18dfcd75f68912d986a3832db5d5ffd376) * [OCPBUGS-54269](https://issues.redhat.com/browse/OCPBUGS-54269): fix bug where /k8s/all-namespaces/volumesnapshots 404s [#14905](https://github.com/openshift/console/pull/14905) * [Full changelog](https://github.com/openshift/console/compare/14c0cfd94cd67ba673b15acb31fad40066f898fd...b033fc18dfcd75f68912d986a3832db5d5ffd376) ### [docker-builder](https://github.com/openshift/builder/tree/62f644bcf0b0010f51765b48a7dab28426ae2933) * [OCPBUGS-48071](https://issues.redhat.com/browse/OCPBUGS-48071): Upgrade Kubernetes to 1.30.2 and Golang to 1.22 for compatibility [#464](https://github.com/openshift/builder/pull/464) * [Full changelog](https://github.com/openshift/builder/compare/6a5ec2a8c8e6cf0d348bee762706c0e24d5517d8...62f644bcf0b0010f51765b48a7dab28426ae2933) ### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/1b8c94ac55d8602ba6669325ade654ae47ea74cf) * [OCPBUGS-44769](https://issues.redhat.com/browse/OCPBUGS-44769): Fix RWX mode for hyperdisks [#74](https://github.com/openshift/gcp-pd-csi-driver/pull/74) * [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/14fa4d9a2c2c66ee796035e01b39aa0f6f4cf7a5...1b8c94ac55d8602ba6669325ade654ae47ea74cf) ### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/97471c6ac55733da63e4db6680889897a5915ca7) * [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): Update to Kubernetes v1.31.7 [#2248](https://github.com/openshift/kubernetes/pull/2248) * [Full changelog](https://github.com/openshift/kubernetes/compare/6020cf5333bdeb77f95fa33f8272e5251ea28edc...97471c6ac55733da63e4db6680889897a5915ca7) ### [hypershift](https://github.com/openshift/hypershift/tree/000eda5b26f5e84c5a766cf4e25d5331f41d8540) * [OCPBUGS-54609](https://issues.redhat.com/browse/OCPBUGS-54609): [release-4.18] fix(api): Adjust CRD validation rules to account for ignition server disable [#5950](https://github.com/openshift/hypershift/pull/5950) * NO-JIRA: Red Hat Konflux update control-plane-operator-4-18 [#5963](https://github.com/openshift/hypershift/pull/5963) * [OCPBUGS-53905](https://issues.redhat.com/browse/OCPBUGS-53905): bump golang-jwt v4 and v5 [#5905](https://github.com/openshift/hypershift/pull/5905) * [ART-11792](https://issues.redhat.com/browse/ART-11792): update go mod dependency for konflux [#5919](https://github.com/openshift/hypershift/pull/5919) * [OCPBUGS-51739](https://issues.redhat.com/browse/OCPBUGS-51739), [OCPBUGS-51810](https://issues.redhat.com/browse/OCPBUGS-51810): Bump dependencies to OCP fork in backports [#5898](https://github.com/openshift/hypershift/pull/5898) * [OCPBUGS-53321](https://issues.redhat.com/browse/OCPBUGS-53321): Handle multiple mirror entries for source [#5890](https://github.com/openshift/hypershift/pull/5890) * [Full changelog](https://github.com/openshift/hypershift/compare/81ff5061471f5565de908e96e2a90119ad8b0550...000eda5b26f5e84c5a766cf4e25d5331f41d8540) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/85ff8f1f6f6017bace77fed7638d489c957d507a) * [OCPBUGS-54462](https://issues.redhat.com/browse/OCPBUGS-54462): OSUpdateStarted event should only be emitted on actual OS updates [#4967](https://github.com/openshift/machine-config-operator/pull/4967) * [OCPBUGS-51132](https://issues.redhat.com/browse/OCPBUGS-51132): [release-4.18] /etc/crio/crio.conf.d/00-default should contain runtime_root for runc [#4869](https://github.com/openshift/machine-config-operator/pull/4869) * [OCPBUGS-52949](https://issues.redhat.com/browse/OCPBUGS-52949): Add ipsec connect wait service [#4926](https://github.com/openshift/machine-config-operator/pull/4926) * [OCPBUGS-53306](https://issues.redhat.com/browse/OCPBUGS-53306): Fixing typos for MachineConfigNode [#4927](https://github.com/openshift/machine-config-operator/pull/4927) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/46eed2bde29dc49aeac37903c3d0df0c7b07583d...85ff8f1f6f6017bace77fed7638d489c957d507a) ### [machine-os-images](https://github.com/openshift/machine-os-images/tree/ab43283689560737ad32566dd59e0d3d77fee4e1) * [OCPBUGS-53141](https://issues.redhat.com/browse/OCPBUGS-53141): Change rhcos release browser url [#55](https://github.com/openshift/machine-os-images/pull/55) * [Full changelog](https://github.com/openshift/machine-os-images/compare/ccdaa71f2165dd277f8a2e3ddc8bdaa2f5200723...ab43283689560737ad32566dd59e0d3d77fee4e1) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/eb6123bd41269ccc6f5abddadfbc8e3af4481e09) * [OU-724](https://issues.redhat.com/browse/OU-724): remove deleted image [#376](https://github.com/openshift/monitoring-plugin/pull/376) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/a5a82997a17cdcee03e9a4a58ac42c694d4174aa...eb6123bd41269ccc6f5abddadfbc8e3af4481e09) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/214b61095a1b1992d55cef98d9cb7045dd6ba18a) * [OCPBUGS-52978](https://issues.redhat.com/browse/OCPBUGS-52978): delete: fix typo in --help output (#1121) [#1121](https://github.com/openshift/oc-mirror/pull/1121) * [OCPBUGS-52960](https://issues.redhat.com/browse/OCPBUGS-52960): v2: fix setting version during build (#1118) [#1118](https://github.com/openshift/oc-mirror/pull/1118) * [Full changelog](https://github.com/openshift/oc-mirror/compare/c6ec6e36092ff22d2a248deec06b32cb3257d621...214b61095a1b1992d55cef98d9cb7045dd6ba18a) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/eec49c5b91ec801640e973743b46a55689f5eb40) * [OCPBUGS-54304](https://issues.redhat.com/browse/OCPBUGS-54304): Intermittent authentication issues when accessing OpenShift registry [#369](https://github.com/openshift/openshift-controller-manager/pull/369) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/5bfc8081a65ea3e0d23306c0398143a9987d659e...eec49c5b91ec801640e973743b46a55689f5eb40) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/4af08abc39c013bf3f0a493afd3c50d8f7f07805) * [OCPBUGS-54187](https://issues.redhat.com/browse/OCPBUGS-54187): Update OVN to FDP25.A.1 24.09.2-41. [#2495](https://github.com/openshift/ovn-kubernetes/pull/2495) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/799f96146c2056a50ae8252a87c03de1cc698f13...4af08abc39c013bf3f0a493afd3c50d8f7f07805) ### [tests](https://github.com/openshift/origin/tree/f9e1b11f94e82a14f6d7f888862e7f1960fa4b36) * [OCPBUGS-53015](https://issues.redhat.com/browse/OCPBUGS-53015): bump(k8s): update k8s.io/* dependencies to v1.31.7 [#29634](https://github.com/openshift/origin/pull/29634) * [OCPBUGS-52496](https://issues.redhat.com/browse/OCPBUGS-52496): use non-fake boot image for patch [#29584](https://github.com/openshift/origin/pull/29584) * [Full changelog](https://github.com/openshift/origin/compare/68b6d984eccbfe3ffd58099f618632ac48915a5b...f9e1b11f94e82a14f6d7f888862e7f1960fa4b36)