The following sections aggregate the revision histories of each guide by publish date.

Mon Mar 27 2017

Table 1. Install Config
Affected Topic Description of Change

Downgrading OpenShift

Moved the procedure for restoring etcd to the Backup and Restore topic.

Table 2. Admin Guide
Affected Topic Description of Change

Setting Limit Ranges

Added the missing -n demoproject `option to the `oc describe limits example and updated the command’s output.

Backup and Restore

Updated the backup and restore procedure.

Mon Mar 20 2017

Table 3. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Prerequisites

Added Network Time Protocol (NTP) as a prerequisite.

Configuring Authentication and User Agent

Added information on using the htpasswd command to generate hashed passwords for HTPasswd authentication to the HTPasswd section.

Installing a Stand-alone Registry

Added openshift_master_default_subdomain to the openshift_master_default_subdomain file in the Advanced Installation for Stand-alone Registries section.

Table 4. Administrator Solutions
Affected Topic Description of Change

Master and Node Configuration

Added information on using the htpasswd command to generate hashed passwords for HTPasswd authentication to the Making Configuration Changes Using Ansible section.

Table 5. Cluster Administration
Affected Topic Description of Change

Managing Nodes

Added the Setting Maximum Pods Per Node section.

Managing Authorization Policies

Updated the ClusterRole file in the Granting Users Daemonset Permissions section.

Table 6. Developer Guide
Affected Topic Description of Change

Routes

Added comment regarding not supporting password protected key files to the Creating Routes section.

Wed Mar 15 2017

Table 7. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:0512 - OpenShift Container Platform 3.3.1.17 Bug Fix Update.

Tue Mar 14 2017

Table 8. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Prerequisites

Renamed instances of openshift_node_set_node_ip to openshift_set_node_ip, the correct openshift-ansible variable name.

Installing a Cluster → Disconnected Installation

Added information about disconnected installation of the stand-alone registry.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added footnotes to the example file in the Use Amazon S3 as a Storage Back-end section.

Setting up the Registry → Known Issues

Added note recommending moving off NFS for production in the Image Push Errors with Scaled Registry Using Shared NFS Volume section.

Upgrading a Cluster → Performing Manual In-place Cluster Upgrades

Removed a repetitive step within the Updating the Default Image Streams and Templates section.

Upgrading a Cluster → Operating System Updates and Upgrades

Added the procedure for upgrading the operating system.

Table 9. Cluster Administration
Affected Topic Description of Change

Managing Nodes

Renamed instances of openshift_node_set_node_ip to openshift_set_node_ip, the correct openshift-ansible variable name.

Restricting Application Capabilities Using Seccomp

Updated Seccomp references of runtime/default to be docker/default.

Table 10. Developer Guide
Affected Topic Description of Change

Secrets

Added an example YAML file of a secret that will create four files.

Table 11. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → .NET Core

Updated supported version number.

Tue Mar 07 2017

Table 12. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHSA-2017:0448 - ansible and openshift-ansible Security and Bug Fix Update.

Table 13. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Advanced Installation

Updated Before You Begin section to raise minimal Ansible version to 2.2.0.

Provided guidance for preconfigured load balancers for OpenShift Container Platform with high availability.

Redeploying Certificates

Added the Checking Certificate Expirations section.

Table 14. Cluster Administration
Affected Topic Description of Change

Encrypting Hosts with IPsec

Re-added the Encrypting Hosts with IPsec topic and made it specific to the current version of libreswan.

Managing Pods

Added information and arranged the Controlling Egress Traffic section.

Added clarifying details around EgressNetworkPolicy, including that it only affects external traffic (not pod-to-pod traffic) and that you can only have a single EgressNetworkPolicy in a namespace; added additional details about rule ordering and that breaking the rules can result in all egress traffic from the namespace being dropped.

Fri Feb 24 2017

Table 15. Creating Images
Affected Topic Description of Change

Guidelines

Updated the commands in the Support Arbitrary User IDs section to enable root group access in the Dockerfile.

Wed Feb 22 2017

Table 16. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:0289 - OpenShift Container Platform 3.3.1.14 Bug Fix Update.

Thu Feb 16 2017

Table 17. Architecture
Affected Topic Description of Change

Infrastructure Components → Web Console

Removed the Technical Preview note from the JVM Console section.

Core Concepts → Routes

Edited out the ROUTE_LABELS environment variable to allighn with upstream.

Table 18. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster→ Disconnected Installation

Added the cluster image to the Syncing Images section.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added additional URL instructions to the Deploying the Registry Console section.

Setting up the Registry → Securing and Exposing the Registry

Added a step for adding the public route host name in the --hostnames flag.

Setting up a Router → Using the Default HAProxy Router

Added the Filtering Routes to Specific Routers section.

Master and Node Configuration

Fixed the options for creating a configuration file in the Creating New Configuration Files section.

Configuring Persistent Storage → Volume Security

Added details about RunAsAny FSGroup and block device permissions.

Aggregating Container Logs

Fixed example in the Configuring Fluentd to Send Logs to an External Log Aggregator section.

Added a version variable and <tag> to code block example in Deploying the EFK Stack section to display the correct current version to use.

Table 19. Cluster Administration
Affected Topic Description of Change

Managing Pods

Added more information about disabling MAC filtering for the Egress router.

Aggregating Container Logs

Added a requirement that port 9300 be open for Elasticsearch to the Pre-deployment Configuration section.

High Availability

Added a step for deploying the ipfailover router to monitor postgresql listening to the Configuring a Highly-available Service section

Table 20. CLI Reference
Affected Topic Description of Change

Developer CLI Operations

Added additional information about the generator parameter in the Expose section.

Table 21. Developer Guide
Affected Topic Description of Change

Secrets

Corrected an example YAML file and added missing steps.

Using Persistent Volumes

Added a new Volume and Claim Pre-binding section

Service Serving Certificate Secrets

Added a note to the Service Serving Certificate Secrets section clarifying the use of the service DNS name.

Getting Traffic into the Cluster

Added more details about Ingress.

Mon Feb 06 2017

Table 22. Cluster Administration
Affected Topic Description of Change

Handling Out of Resource Errors

Added clarifying details around kubeletArguments in the Example Scenario section.

Table 23. Installation and Configuration
Affected Topic Description of Change

Setting up a Router → Using the Default HAProxy Router

Arranged the topic to create the Creating a Router section, and added a paragraph on router options on creation.

Persistent Storage Examples → Complete Example Using GlusterFS

Clarified that, if using a service, the endpoints name must match the service name.

Configuring Persistent Storage → Persistent Storage Using GlusterFS

Clarified that, if using a service, the endpoints name must match the service name.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added Important box about shutting down Cockpit to the Non-Production Use section.

Installing a Cluster → Host Preparation

Added steps on using yum-config-manager to the host registration steps.

Setting up the Registry → Deploying a Registry on Existing Clusters

Arranged the Securing the Registry Console section to include information on the certificate.

Installing a Cluster → Advanced Install

Added the Configuring a Registry Location section.

Configuring Nuage SDN

Added the Configuring Nuage SDN file.

Tue Jan 31 2017

Table 24. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Host Preparation

Added instructions for installing and using the atomic-openshift-excluder and atomic-openshift-docker-excluder scripts during cluster installations and upgrades.

Installing a Cluster → Quick Installation

Installing a Cluster → Advanced Installation

Upgrading a Cluster → Manual In-place Upgrades

Upgrading a Cluster → Automated In-place Upgrades

Mon Jan 30 2017

Table 25. Installation and Configuration
Affected Topic Description of Change

Setting up the Registry → Securing and Exposing the Registry

Removed references to the deprecated --api-version flag.

Configuring Custom Certificates

Clarified custom certificate configuration locations in the Configuring Custom Certificates section.

Table 26. Developer Guide
Affected Topic Description of Change

Builds

Updated the example Dockerfile path to point to a file, not a directory.

Managing Environment Variables

Removed redundant information and CLI reference material; rearranged sections to match user process.

Thu Jan 26 2017

Table 27. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:0199 - OpenShift Container Platform 3.3.1.11 Bug Fix Update.

Wed Jan 25 2017

Table 28. Architecture
Affected Topic Description of Change

Core Concepts → Pods and Services

Updated Ingress CIDR references to the new default.

Table 29. Installation and Configuration
Affected Topic Description of Change

Working with HTTP Proxies

Added step to Proxying Docker Pull for finding the registry service IP.

Setting up a Router → Using the F5 Router Plug-in

Removed references to the deprecated --credentials option.

Installing a Cluster → Prerequisites

Added information about required ports for Aggregated Logging.

Configuring Global Build Defaults and Overrides

Added notes to explain additional values in the /etc/origin/master/master-config.yaml file in the Manually Setting Global Build Defaults section.

Customizing the Web Console

Added information about setting extension properties.

Table 30. Cluster Administration
Affected Topic Description of Change

Monitoring Routers

Removed references to the deprecated --credentials option.

High Availability

Removed references to the deprecated --credentials option.

Configuring the Cluster to Use Unique External IPs

Added a CAUTION box indicating that external IPs assigned to services of type LoadBalancer will always be in the range of ingressIPNetworkCIDR and updated Ingress CIDR references to the new default.

Table 31. CLI Reference
Affected Topic Description of Change

Administrator CLI Operations

Removed references to the deprecated --credentials option.

Developer CLI Operations

Removed reference to the deprecated oc env command.

Table 32. Developer Guide
Affected Topic Description of Change

Builds

Updated a Note box in the Accessing Build Logs section advising that the build defaults for an administrator can be overridden for non-binary builds by passing --build-loglevel to oc start-build.

Wed Jan 18 2017

Table 33. Architecture
Affected Topic Description of Change

Core Concepts → Containers and Images

New section about init containers.

Table 34. Installation and Configuration
Affected Topic Description of Change

Setting up the Registry → Securing and Exposing the Registry

Added note box about mounting secrets to service accounts.

Mon Jan 16 2017

Table 35. Developer Guide
Affected Topic Description of Change

Managing Images

Added information about the supports annotation on image streams.

Table 36. Installation and Configuration
Affected Topic Description of Change

Configuring Authentication and User Agent

Clarified the difference between /api and /oapi in the User Agent section.

Aggregating Container Logs

Added clarification regarding ConfigMaps and output of oc new-app.

Mon Jan 09 2017

Table 37. Developer Guide
Affected Topic Description of Change

Templates

Updated the oc export all command example.

Builds

Added the FROM Image section.

Builds

Clarified the procedure for running git clone with a self-signed TLS certificate.

Table 38. Installation and Configuration
Affected Topic Description of Change

Working with HTTP Proxies

Added clarifying details about HTTP proxies.

Table 39. Architecture
Affected Topic Description of Change

Additional Concepts → Authorization

Added clarifying details about cluster roles.

Table 40. Cluster Administration
Affected Topic Description of Change

Managing Pods

Added important box about Red Hat OpenStack Platform to the Limiting Pod Access with an Egress Router section.

Managing Authorization Policies

Added clarifying details about cluster roles.

Tue Dec 20 2016

Table 41. Cluster Administration
Affected Topic Description of Change

Backup and Restore

Added to the note with information on host backups over 700 MB.

Table 42. Installation and Configuration
Affected Topic Description of Change

Working with HTTP Proxies

Removed section on configuring Maven with http proxies.

Installing a Cluster → Host Preparation

Updated the path to the latest epel-release package.

Table 43. Creating Images
Affected Topic Description of Change

Guidelines

In the Support Arbitrary User IDs section, updated export LD_PRELOAD=libnss_wrapper.so to be export LD_PRELOAD=/usr/lib64/libnss_wrapper.so to prevent errors from the library not being found.

Table 44. Developer Guide
Affected Topic Description of Change

Deployments → Deployment Strategies

Added an example of custom deploymen to the Custom Strategy section.

Table 45. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → PHP

Added the DOCUMENTROOT environment variable to the PHP Environment Variables table.

Tue Dec 13 2016

Table 46. Installation and Configuration
Affected Topic Description of Change

Configuring Persistent Storage → Persistent Storage Using GCE Persistent Disk

Added a new Multi-zone Configuration section.

Configuring Persistent Storage → Dynamically Provisioning Persistent Volumes

Added clarifying details about multi-zone persistent volume (PV) configuration.

Aggregating Container Logs

Added Configuring Fluentd to Send Logs to an External Log Aggregator section.

Added Note boxes explicitly stating that sending logs directly to an AWS Elasticsearch instance is not supported.

Added F-5 Load Balancer and X-Forwarded-For Enabled to the Troubleshooting Kibana section.

Customizing the Web Console

Added a new Customizing the About Page section.

Table 47. Cluster Administration
Affected Topic Description of Change

Idling Applications

New topic.

Diagnostics Tool

Added Running Diagnostics in a Server Environment and Running Diagnostics in a Client Environment sections.

Table 48. Developer Guide
Affected Topic Description of Change

Application Life Cycle Management

The existing Application Life Cycle Examples (now titled Planning Your Development Process) and Creating New Applications topics have been moved into a new Application Life Cycle Management chapter.

The following new topic has also been added:

Copying Files to or from a Container

Added an Advanced Rsync Features section.

Wed Dec 07 2016

Table 49. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHSA-2016:2915 - OpenShift Container Platform 3.3.1.7 Security and Bug Fix Update.

Mon Dec 05 2016

Table 50. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Prerequisites

Removed Git access as a prerequisite because it is a requirement for development, but not for installing a cluster.

Aggregating Container Logs

Added a NOTE indicating that, as of OpenShift Container Platform 3.3, Fluentd no longer reads historical log files when using the JSON file log driver.

Installing a Cluster → Host Preparation

Added the matches option to the subscription-manager list --available command.

Installing a Cluster → Disconnected Installation

Added the matches option to the subscription-manager list --available command.

Syncing Groups With LDAP

Removed references to filtering UIDAttribute values in configurations.

Table 51. Cluster Administration
Affected Topic Description of Change

Managing Pods

Fixed the syntax of the Example Pod Definition for an Egress Router.

Backup and Restore

Added the Adding New etcd Hosts section.

Table 52. Developer Guide
Affected Topic Description of Change

Templates

Removed an outdated reference regarding support for multiple templates with oc process.

Secrets

Added information about secrets in environment variables.

Mon Nov 21 2016

Table 53. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Updated entry on sysctl support to link to the new dedicated Sysctls topic.

Table 54. Architecture
Affected Topic Description of Change

Additional Concepts → Authorization

Updated to reflect that seven, not six, Security Context Constraints are added to the cluster by default.

Additional Concepts → Persistent Storage

Removed statement indicating that HostPath is for testing only.

Core Concepts → Routes

Clarified how routes claim host names.

Table 55. Installation and Configuration
Affected Topic Description of Change

Aggregating Container Logs

Clarified points around NFS storage.

Setting up the Registry → Deploying a Registry on Existing Clusters

Removed inaccurate example showing how to attach an existing NFS volume to the registry.

Setting up the Registry → Extended Registry Configuration

Described the CloudFront middleware extension.

Table 56. Cluster Administration
Affected Topic Description of Change

Sysctls

New topic on Technology Preview sysctl support.

Managing Security Context Constraints

Updated the output for oc get scc.

Table 57. Developer Guide
Affected Topic Description of Change

Deployments

The previous Deployments topic has been broken up into a chapter with multiple topics:

Thu Nov 17 2016

Table 58. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2016:2801 - OpenShift Container Platform 3.3.1.5 Bug Fix Update.

Tue Nov 15 2016

Table 59. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHSA-2016:2696 - OpenShift Container Platform 3.3.1.4 Security and Bug Fix Update.

Mon Nov 14 2016

Table 60. Installation and Configuration
Affected Topic Description of Change

Aggregating Container Logs

Updated the admin-cert location in an example within the Performing Administrative Elasticsearch Operations section.

Installing a Cluster → Advanced Installation

Added steps to verify the web console.

Advance LDAP Configuration → Setting up SSSD for LDAP Failover

Fixed error in Step 3: Apache Configuration section.

Table 61. Cluster Administration
Affected Topic Description of Change

Troubleshooting OpenShift SDN

Removed references to firewalld, as the installer does not currently support it.

iptables

New topic on how OpenShift Container Platform and iptables interact.

Securing Builds by Strategy

Added jenkinspipeline build strategy role information.

Assigning Unique External IPs for Ingress Traffic

Added a NOTE stating that this feature is only supported in non-cloud deployments.

Overcommiting

Added a Warning box about swap in the Disabling Swap Memory section.

Out of Resource Handling

New topic about memory eviction.

Mon Nov 07 2016

Table 62. Developer Guide
Affected Topic Description of Change

Deployments

Added a new Advanced Deployment Strategies section.

Table 63. CLI Reference
Affected Topic Description of Change

Developer CLI Operations

Added information on oc patch.

Table 64. Installation and Configuration
Affected Topic Description of Change

Upgrading a Cluster → Operating System Updates and Upgrades

New topic on the impacts of operating system updates and upgrades and possible solutions.

Advanced LDAP Configuration → Setting up SSSD for LDAP Failover

Fixed incorrect certificate location in the Phase 3: OpenShift Container Platform Configuration section.

Setting up the Registry → Securing and Exposing the Registry

Added clarification to the Exposing a Non-Secure Registry section.

Wed Nov 02 2016

Table 65. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Updated release notes for RHBA-2016:2084 - OpenShift Container Platform 3.3.1.3 Bug Fix Update to document Technology Preview Features included in the release: scheduled jobs and sysctl support.

Tue Nov 01 2016

Table 66. Installation and Configuration
Affected Topic Description of Change

Installing → Planning

Updated the Sizing Considerations section for clarity.

Table 67. Cluster Administration
Affected Topic Description of Change

Backup and Restore

Added a NOTE box to the Cluster Restore section, indicating that the outlined procedure only works for single-member etcd clusters.

Thu Oct 27 2016

OpenShift Container Platform 3.3.1 release.

Table 68. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2016:2084 - OpenShift Container Platform 3.3.1.3 Bug Fix Update and RHBA-2016:2122 - atomic-openshift-utils Bug Fix Update.

Table 69. Installation and Configuration
Affected Topic Description of Change

Upgrading a Cluster → Performing Automated In-place Cluster Upgrades

Minor updates for clarity, including converting some procedures into numbered steps for easier readability.

Table 70. Developer Guide
Affected Topic Description of Change

Scheduled Jobs

New topic on the Scheduled Jobs feature, which allows you to specifically schedule how the job should be run.

Table 71. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → .NET Core

New topic about using .NET Core with OpenShift Container Platform.

Mon Oct 24 2016

Table 72. Cluster Administration
Affected Topic Description of Change

Configuring Service Accounts

Added a Service Accounts and Secrets heading.

Restricting Application Capabilities Using Seccomp

New topic.

Mon Oct 17 2016

Table 73. Installation and Configuration
Affected Topic Description of Change

Configuring Pipeline Execution

Clarified Jenkins template names.

Loading the Default Image Streams and Templates

Updated information in the Offerings by Subscription Type section on which images are provided by which subscription s.

Installing a Cluster → Advanced Installation

Added more information to the openshift_master_portal_net parameter description in the Configuring Cluster Variables section.

Table 74. Cluster Administration
Affected Topic Description of Change

High Availability

Added the Multiple Highly Available Services In a Network section.

Diagnostics Tool

New topic about the oc adm diagnostics command.

Tue Oct 11 2016

Table 75. Installation and Configuration
Affected Topic Description of Change

Aggregating Container Logs

Fixed error in Deploying the EFK Stack section.

Setting up SSSD for LDAP Failover

Corrected steps in the Certificate Generation section.

Configuring the SDN

Added clarifying details to the Migrating Between SDN Plug-ins section about when to clean up SDN-specific artifacts.

Advanced LDAP Configuration → Setting up SSSD for LDAP Failover

Fixed errors in the Phase 2: Authenticating Proxy Setup section.

Configuring Persistent Storage → Persistent Storage Using Ceph Rados Block Device (RBD)

Updated the persistentVolumeReclaimPolicy setting to retain in the Persistent Volume Object Definition Using Ceph RBD example.

Installing → Advanced Installation

Replaced ansible_sudo with ansible_become.

Table 76. Cluster Administration
Affected Topic Description of Change

Setting Quotas

Added that cpu and requests.cpu are the same value and can be used interchangeably, as with memory and requests.memory.

Table 77. Developer Guide
Affected Topic Description of Change

Copying Files to or from a Container

Added a procedure outlining how oc rsync can be used to copy database archives from an existing database container to a new database container’s persistent volume directory.

Wed Oct 05 2016

Table 78. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added Service Serving Certificate Secrets to Technology Preview Features.

Table 79. Developer Guide
Affected Topic Description of Change

Secrets

Added a Technology Preview note to the Service Serving Certificate Secrets section.

Tue Oct 04 2016

Table 80. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2016:1988 - OpenShift Container Platform 3.3.0.34 Bug Fix Update.

Table 81. Architecture
Affected Topic Description of Change

Core Concepts → Routes

Added a new Route-specific Timeouts section.

Added Router Configuration Parameters.

Table 82. Installation and Configuration
Affected Topic Description of Change

Configuring the SDN

Added clarifying details to the Migrating Between SDN Plug-ins section about when to clean up SDN-specific artifacts.

Advanced LDAP Configuration → Setting up SSSD for LDAP Failover

Fixed errors in the Phase 2: Authenticating Proxy Setup section.

Configuring the SDN

Added that oc get netnamespace can be run to check VNIDs.

Setting up the Registry → Known Issues

Added troubleshooting guidance on Image Pruning Failures.

Installing → Prerequisites

Added information about disabling dnsmasq.

Installing → Advanced Installation

Added example for a multi-master install with etcd on the same hosts.

Configuring Persistent Storage → Persistent Storage Using Ceph Rados Block Device (RBD)

Updated the persistentVolumeReclaimPolicy setting to retain in the Persistent Volume Object Definition Using Ceph RBD example.

Persistent Storage Examples → Binding Persistent Volumes by Labels

Updated the persistentVolumeReclaimPolicy setting to retain in the glusterfs-pv.yaml example, since recycle is not supported in this case.

Persistent Storage Examples → Complete Example Using GlusterFS

Updated the GlusterFS persistent storage example to use NGNIX instead of busybox.

Configuring Persistent Storage → Volume Security

Fixed formatting of the oc get project default -o yaml example output within the SCCs, Defaults, and Allowed Ranges section.

Configuring Persistent Storage → Volume Security

Removed no_root_squash from the NFS example, as it is not a recommended option.

Table 83. Cluster Administration
Affected Topic Description of Change

High Availability

Fixed deprecated commands in the Configuring a Highly-available Routing Service section.

Backup and Restore

Added Prerequisites details and created new sections for Application Data Backup, Application Data Restore, Project Restore, as well as backing up Role Bindings, Service Accounts, Secrets, and Persistent Volume Claims.

Pruning Objects

Added a Note box about the required storage:delete:enabled flag when pruning images.

Table 84. Developer Guide
Affected Topic Description of Change

Builds

Added information on shallow cloning.

Table 85. REST API Reference
Affected Topic Description of Change

Overview

Updated the oc whoami --token command to show the shorter flag of oc whoami --t.

Tue Sep 27 2016

OpenShift Container Platform 3.3 initial release.

Table 86. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for initial release.

Table 87. Architecture
Affected Topic Description of Change

Additional Concepts → Authentication

Added information about OAuth scopes.

Additional Concepts → Authorization

Added a new section about oc policy can-i --list.

Additional Concepts → Authorization

Added a new Seccomp section under Security Context Constraints (SCC) Strategies.

Additional Concepts → Admission Controllers

Added information about the admission plug-in chain.

Additional Concepts → Persistent Storage

Added information about best-fit persistent volume claim (PVC) requests in the Binding section.

Core Concepts → Routes

Updated the Router Configuration Parameters table.

Core Concepts → Builds and Image Streams

Added information on the Pipeline build strategy.

Additional Concepts → Authentication

Added information about grantMethod.

Additional Concepts → Authentication

Added section on using Security Context Constraints for OAuth.

Core Concepts → Routes

Added router configuration parameters.

Additional Concepts → Authentication

Added section on using Security Context Constraints for OAuth.

Core Concepts → Routes

Added router configuration parameters.

Additional Concepts → Authentication

Added the Impersonation section.

Table 88. Installation and Configuration
Affected Topic Description of Change

Configuring the SDN

Added that oc get netnamespace can be run to check VNIDs.

Setting up the Registry → Securing and Exposing the Registry

Added two new sections on Exposing a Secure Registry and Exposing a Non-Secure Registry.

Customizing the Web Console

Added Configuring Navigation Menus section.

Setting up the Registry → Known Issues

Added troubleshooting guidance on Image Pruning Failures.

Master and Node Configuration

Added a Audit Configuration section.

Installing → Prerequisites

Added information about disabling dnsmasq.

Redeploying Certificates

New topic reviewing how to back up and redeploy cluster certificates using the ansible-playbook command.

Installing → Advanced Installation

Added example for a multi-master install with etcd on the same hosts.

Enabling Cluster Metrics

Added capacity planning guidance for OpenShift Container Platform metrics.

Installing → Prerequisites

Updated scale recommendations.

Installing → Advanced Installation

Updated the Multiple Masters Using HAProxy Inventory File example with guidance on applying updated node defaults.

Upgrading → Performing Manual Cluster Upgrades

Updated version numbers for image streams across the Updating the Default Image Streams and Templates section.

Persistent Storage Examples → Binding Persistent Volumes by Labels

Updated the persistentVolumeReclaimPolicy setting to retain in the glusterfs-pv.yaml example, since recycle is not supported in this case.

Persistent Storage Examples → Complete Example Using GlusterFS

Updated the GlusterFS persistent storage example to use NGNIX instead of busybox.

Configuring Pipeline Execution

Corrected instructions for enabling Jenkins auto-provision.

Configuring Routing

Changed "Native Container Routing" topic to "Configuring Routing" and added information about Configuring Route Timeouts.

Aggregating Container Logs

Added clarifying details to the Warning box in the Persistent Elasticsearch Storage section regarding the NFS workaround.

Upgrading → Performing Manual Cluster Upgrades

Added a new Update Your Configuration File section.

Setting up the Registry → Extended Registry Configuration

Emphasized the new mandatory middleware configuration entries.

Deploying a Docker Registry

Extended the registry configuration file example within the Deploying Updated Configuration section to include the blobrepositorycachettl option.

Storage Examples → Binding Persistent Volumes by Labels

New topic providing an end-to-end example for binding persistent volume claims (PVCs) to persistent volumes (PVs) by defining labels in the PV and matching selectors in the PVC.

Persistent Storage Examples → Selector-Label Volume Binding

New topic outlining how to bind persistent volumes claims (PVCs) to persistent volumes (PVs) via selector and label attributes.

Upgrading → Blue-Green Deployments

Added new topic.

Enabling Cluster Metrics

Added additional details to the Accessing Hawkular Metrics Directly section.

Installing → Deploying a Router

Added a new Protecting Against DDoS Attacks section.

Configuring Pipeline Execution

New section.

Installing → Prerequisites

Added that the deserialization cache size can be reduced using a setting in master-config.yaml.

Aggregating Container Logs

Added information about configuration from configmaps, Fluentd, and Curator.

Installing → Deploying a Docker Registry

Edited references to oc secrets add.

Configuring Persistent Storage → Volume Security

Fixed formatting of the oc get project default -o yaml example output within the SCCs, Defaults, and Allowed Ranges section.

Configuring Authentication

Updated OAuth grant strategies information.

Installing → Deploying a Docker Registry

Updated mandatory configuration options for the registry’s configuration file.

Configuring the SDN

Updated migration steps for SDN plug-ins.

Performing Manual Cluster Upgrades

Added a Warning box about excluding roles from reconciliation.

Configuring Authentication

Added OpenID and GitLab challenge options.

Enabling Cluster Metrics

Added a new Metrics Deployer Validations section.

Upgrading → Performing Manual Cluster Upgrades

Added recent image quota restrictions.

Table 89. Administrator Solutions
Affected Topic Description of Change

New guide

First release of the Administrator Solutions guide for OpenShift Container Platform 3.3.

Table 90. Cluster Administration
Affected Topic Description of Change

High Availability

Fixed deprecated commands in the Configuring a Highly-available Routing Service section.

Backup and Restore

Added Prerequisites details and created new sections for Application Data Backup, Application Data Restore, Project Restore, as well as backing up Role Bindings, Service Accounts, Secrets, and Persistent Volume Claims.

Pruning Objects

Added a Note box about the required storage:delete:enabled flag when pruning images.

Cluster Administration → Managing Pods → Limiting the Bandwidth Available to Pods

Added details on limiting the bandwidth available to pods via quality-of-service traffic shaping.

Cluster Administration → Limit Pod Access with Egress Firewall

Added new topic covering how to limit the IP addresses and traffic that a pod can access.

Scoped Tokens

New topic discussing scoped tokens, which are tokens that identify given users, but are limited to certain actions by its scope.

Image Policy

New topic about controlling which images are allowed to run on your cluster using the ImagePolicy admission plug-in.

Setting Multi-Project Quotas

New topic about how to set multi-project quotas.

Monitoring Images

New topic discussing oadm top images and oadm top imagestreams commands.

Managing Nodes

Added a new Rebooting Nodes section.

Pruning Objects

Added --prune-over-size-limit information.

Setting Quotas

Added recent image quota restrictions.

Setting Limit Ranges

Added recent image quota restrictions.

Table 91. CLI Reference
Affected Topic Description of Change

Developer CLI Operations

Added information about the ability to cancel multiple builds.

Table 92. Developer Guide
Affected Topic Description of Change

Templates

Added information about the template message and what it tells users.

Getting Traffic Into The Cluster

New topic describing how to access and direct traffic to the cluster.

Downward API

Added information on consuming container resources using the downward API.

Routes

Added a new Load Balancing for A/B Testing section discussing how the HAProxy router now supports splitting the traffic coming to a route across multiple back end services via weighting.

Managing Images

Updated to show that oc tag -d now matches oc delete istag behavior to better match user expectations.

Deployments

Added information about new deployment procedures including paused deployments, cleanup policy, minReadySeconds, and oc rollout.

Added information about the oc set deployment-hook command.

Builds

Added a Build Run Policy section.

Added a Note box indicating that extended builds is a technology preview feature.

Added new Extended Builds section discussing how S2I (Source-to-Image) introduces a two-image build process.

Added a curl example for webhook invocations within the Webhook Triggers section

Added information on options for the Pipeline build strategy.

Edited references to oc secrets add.

Added information about the ability to cancel multiple builds.

Service Accounts

Edited references to oc secrets add.

Managing Images

Edited references to oc secrets add.

Copying Files to or from a Container

Added Continuous Syncing on File Change section.

Secrets

Added a new Service Serving Certificate Secrets section.

Quotas and Limit Ranges

Added recent image quota restrictions.

Table 93. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → Python

Added the PIP_INDEX_URL environment variable to the Configuration section.

Database Images → MySQL

Updated the Additional MySQL Settings table in the Environment Variables section with new variables.