This is a clone of issue OCPBUGS-59934. The following is the description of the original issue:
—
This is a clone of issue OCPBUGS-59872. The following is the description of the original issue:
—
Across 4.18.z through 4.12.z both OVS and OVN versions in the ovn-kubernetes container are pinned to specific patch versions this means that everytime there's a CVE fix in either of these components the ovn-kubernetes image eventually runs into image grading issues.

Please unpin both openvswitch and ovn versions so that patch versions of their respective minor versions are applied as soon as they ship in FDP.