×

The following sections aggregate the revision histories of each guide by publish date.

Wed Mar 07 2018

Table 1. Installation and Configuration
Affected Topic Description of Change

Aggregating Container Logs

Added to instructions to scale EFK pods when changes are made in the Understanding and Adjusting the Deployment section.

Thu Aug 31 2017

Table 2. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:1828 - OpenShift Container Platform 3.3.1.46 Bug Fix Update.

Fri Aug 25 2017

Table 3. Installation and Configuration
Affected Topic Description of Change

Setting up the Registry → Deploying a Registry on Existing Clusters

Removed Technology Preview notice from the Deploying the Registry as a DaemonSet section.

Table 4. Developer Guide
Affected Topic Description of Change

Using Daemonsets

Removed Technology Preview notice.

Tue Aug 08 2017

Table 5. Installation and Configuration
Affected Topic Description of Change

Router → Using the Default HAProxy Router

Added new section on how to manually redeploy the router certificates.

Configuring the SDN

Added information about configuring Neutron to the Using Flannel section.

Fri Jul 28 2017

Table 6. Installation and Configuration
Affected Topic Description of Change

Redeploying Certificates

Added the Redeploying a New etcd CA section.

Thu Jul 27 2017

Table 7. CLI Reference
Affected Topic Description of Change

Administrator CLI Operations

Updated oadm commands to use oc adm instead.

Developer CLI Operations

Get Started with the CLI

Table 8. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Disconnected Installation

Added the openshift/hello-openshift dependency to the Syncing Repositories section.

Configuring Authentication and User Agent

Added a note about whitelisting users.

Installing a Cluster → Advanced Installation

Updated ../install_config/install/advanced_install.htmlKnown Issues] to remove yum remove steps and instead link to Uninstalling OpenShift Container Platform.

Setting up the Registry → Securing and Exposing the Registry

Added steps to the Securing the Registry section on configuring your cluster to trust the certificate at the OS level.

Table 9. Cluster Administration
Affected Topic Description of Change

Setting Quotas

Updated the references to quota and limit ranges, as they are now listed on the Quota page.

Setting Limit Ranges

Updated the references to quota and limit ranges, as they are now listed on the Quota page.

Setting Quotas

Removed unsupported options from the Compute Resources Managed by Quota table.

Tue Jul 18 2017

Table 10. Architecture
Affected Topic Description of Change

Additional Concepts → Persistent Storage

Added details about the ReadWriteOnce access mode enforcement limitation and workaround instructions.

Table 11. Cluster Administration
Affected Topic Description of Change

Managing Security Context Constraints

Updated the Add an SCC to a User, Group, or Project section to add notes on granting SCC access and clarify project access.

Wed Jul 12 2017

Table 12. Release Notes
Affected Topic Description of Change

Overview

Clarified that "client" referred to the oc client.

Table 13. CLI Reference
Affected Topic Description of Change

Administrator CLI Operations

Added more information about the openshift binary.

Table 14. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Host Preparation

Replaced the deprecated openshift_master_portal_net variable with openshift_portal_net.

Installing a Cluster → Advanced Installation

Replaced the deprecated openshift_master_portal_net variable with openshift_portal_net.

Table 15. Developer Guide
Affected Topic Description of Change

Developer Guide → Integrating External Services

Added updatePeriodSeconds and intervalSeconds to the Consume a Service example with definitions.

Developer Guide → Deployment Stratecties

Added updatePeriodSeconds and intervalSeconds to the Rolling Deployment example with definitions.

Wed Jul 05 2017

Table 16. Developer Guide
Affected Topic Description of Change

Downward API

Updated annotation formatting in the Using the Volume Plug-in section.

Developer Guide → Build

Removed section added in error.

Thu Jun 29 2017

Table 17. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:1666 - atomic-openshift-utils Bug Fix and Enhancement Update.

Thu Jun 22 2017

Table 18. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:1492 - OpenShift Container Platform 3.3.1.38 Bug Fix Update.

Added issued dates for all Asynchronous Errata Updates. (BZ#1463721)

Tue Jun 20 2017

Table 19. Admin Solutions
Affected Topic Description of Change

Certificate Management

New topic about certificate management procedures.

Wed June 14 2017

Tue Jun 13 2017

Table 20. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Advanced Installation

Added a step to verify that the etcd package is installed, if you installed multiple etcd hosts.

Wed May 31 2017

Table 21. Installation and Configuration
Affected Topic Description of Change

Syncing Groups With LDAP

Added Nested Membership Sync Example.

Installing a Cluster → Installing a Stand-alone Deployment of OpenShift Container Registry

Updated to use OpenShift Container Registry name and add clarification on the distinction between Atomic Registry.

Thu May 25 2017

Table 22. Architecture
Affected Topic Description of Change

Core Concepts → Containers and Images

Added the Image Version Tag Policy section.

Table 23. Installation and Configuration
Affected Topic Description of Change

Configuring Authentication and User Agent

Noted that after making changes to an identity provider, you must restart the master service for the changes to take effect.

Table 24. Cluster Administration
Affected Topic Description of Change

Managing Security Context Constraints

Added a warning about pod creation on behalf of a user within the Grant Access to the Privileged SCC section.

Thu May 18 2017

Table 25. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:1235 - OpenShift Container Platform 3.3.1.25 Bug Fix Update.

Mon May 15 2017

Table 26. Cluster Administration
Affected Topic Description of Change

Backup and Restore

Restored and updated steps for adding an etcd member.

Table 27. Installation and Configuration
Affected Topic Description of Change

Upgrading a Cluster → Overview

Added clarification that nodes and masters are forward and backward compatible across one minor version.

Master and Node Configuration

Added information about openshift_master_audit_config to the Audit Configuration section.

Tue May 09 2017

Table 28. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Advanced Installation

Updated the Configuring Schedulability on Masters section to note that masters are automatically marked unschedulable by default by the installer.

Updated the Configuring Node Host Labels section to better describe the special region=infra label and to suggest configuring dedicated infrastructure nodes.

Added a Configuring Deployment Type section.

Tue May 02 2017

Table 29. Cluster Administration
Affected Topic Description of Change

Securing Builds by Strategy

Added that custom builds are disabled by default.

Table 30. Architecture
Affected Topic Description of Change

Additional Concepts → F5 BIG-IP® Router Plug-in

Removed information about integration with HAProxy router.

Tue Apr 25 2017

Table 31. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:0989 - OpenShift Container Platform 3.3.1.19 Bug Fix Update and RHBA-2017:1129 - OpenShift Container Platform 3.3.1.20 Bug Fix Update.

Table 32. Installation and Configuration
Affected Topic Description of Change

Redeploying Certificates

Updated for new set of playbooks and options.

Wed Apr 12 2017

Table 33. Cluster Administration
Affected Topic Description of Change

Managing Security Context Constraints

Added information about preserving labels and annotations, in addition to groups.

Managing Nodes

Fixed markup error in the examples in the Setting Maximum Pods Per Node section.

Table 34. Using Images
Affected Topic Description of Change

MariaDB

Added MariaDB section.

Table 35. Architecture
Affected Topic Description of Change

Core Concepts → Routes

Updated router customization details.

Table 36. Installation and Configuration
Affected Topic Description of Change

Setting up a Router → Using the Default HAProxy Router

Added graphics to the Using Router Shards section.

Setting up a Router → Deploying a Customized HAProxy Router

Expanded details in the Rebuilding Your Router section.

Installing a Cluster → Prerequisites

Specified the UDP for port 4789.

Installing → Advanced Installation

In the Known Issues multiple masters discussion, included the docker-common package in the removal process, following a failed setup play.

Configuring for OpenStack

Added openshift_cloudprovider_openstack_domain_id and openshift_cloudprovider_openstack_domain_name to the list of configurable parameters.

Thu Apr 06 2017

Table 37. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:0855 - OpenShift Container Platform 3.3.1.17-4 Bug Fix Update.

Wed Apr 05 2017

Table 38. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → .NET Core

Added .NET Core supported environment variables and added information about templates.

Tue Mar 14 2017

Affected Topic Description of Change

Source-to-Image (S2I) → .NET Core

Updated supported version number.

Tue Dec 20 2016

Affected Topic Description of Change

Source-to-Image (S2I) → PHP

Added the DOCUMENTROOT environment variable to the PHP Environment Variables table.

Thu Oct 27 2016

OpenShift Container Platform 3.3.1 release.

Affected Topic Description of Change

Source-to-Image (S2I) → .NET Core

New topic about using .NET Core with OpenShift Container Platform.

Tue Sep 27 2016

OpenShift Container Platform 3.3 initial release.

Affected Topic Description of Change

Source-to-Image (S2I) → Python

Added the PIP_INDEX_URL environment variable to the Configuration section.

Database Images → MySQL

Updated the Additional MySQL Settings table in the Environment Variables section with new variables.

Mon Apr 03 2017

Table 39. Installation and Configuration
Affected Topic Description of Change

Advanced Installation

Added the debug_level parameter to the Configuring Cluster Variables section for setting the default verbosity of journald log messages.

Master and Node Configuration

Added a new section on configuring the verbosity of journald log messages.

Setting Up a Registry → Extended Registry Configuration

Updated the list of supported registry storage drivers in the Storage section.

Setting Up a Registry → Deploying a Registry on Existing Clusters

Added list of supported registry storage drivers to the Storage for the Registry section.

Redeploying Certificates

Added Registry and Router Certificates section with instructions on redeploying these certificates manually.

Table 40. Developer Guide
Affected Topic Description of Change

Secrets

Added more details to the Service Serving Certificate Secrets section.

Quotas and Limit Ranges

Removed "m" as a valid suffix for memory in the Compute Resources section.

Mon Mar 27 2017

Table 41. Installation and Configuration
Affected Topic Description of Change

Downgrading OpenShift

Moved the procedure for restoring etcd to the Backup and Restore topic.

Setting up a Router → Configuring the HAProxy Router to Use the PROXY Protocol

New topic on configuring the HAProxy router to use the PROXY protocol.

Table 42. Cluster Administration
Affected Topic Description of Change

Setting Limit Ranges

Added the missing -n demoproject option to the oc describe limits example and updated the command’s output.

Backup and Restore

Updated the backup and restore procedure.

Mon Mar 20 2017

Table 43. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Prerequisites

Added Network Time Protocol (NTP) as a prerequisite.

Configuring Authentication and User Agent

Added information on using the htpasswd command to generate hashed passwords for HTPasswd authentication to the HTPasswd section.

Installing a Stand-alone Registry

Added openshift_master_default_subdomain to the openshift_master_default_subdomain file in the Advanced Installation for Stand-alone Registries section.

Table 44. Administrator Solutions
Affected Topic Description of Change

Master and Node Configuration

Added information on using the htpasswd command to generate hashed passwords for HTPasswd authentication to the Making Configuration Changes Using Ansible section.

Table 45. Cluster Administration
Affected Topic Description of Change

Managing Nodes

Added the Setting Maximum Pods Per Node section.

Managing Authorization Policies

Updated the ClusterRole file in the Granting Users Daemonset Permissions section.

Table 46. Developer Guide
Affected Topic Description of Change

Routes

Added comment regarding not supporting password protected key files to the Creating Routes section.

Wed Mar 15 2017

Table 47. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:0512 - OpenShift Container Platform 3.3.1.17 Bug Fix Update.

Tue Mar 14 2017

Table 48. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Prerequisites

Renamed instances of openshift_node_set_node_ip to openshift_set_node_ip, the correct openshift-ansible variable name.

Installing a Cluster → Disconnected Installation

Added information about disconnected installation of the stand-alone registry.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added footnotes to the example file in the Use Amazon S3 as a Storage Back-end section.

Setting up the Registry → Known Issues

Added note recommending moving off NFS for production in the Image Push Errors with Scaled Registry Using Shared NFS Volume section.

Upgrading a Cluster → Performing Manual In-place Cluster Upgrades

Removed a repetitive step within the Updating the Default Image Streams and Templates section.

Upgrading a Cluster → Operating System Updates and Upgrades

Added the procedure for upgrading the operating system.

Table 49. Cluster Administration
Affected Topic Description of Change

Managing Nodes

Renamed instances of openshift_node_set_node_ip to openshift_set_node_ip, the correct openshift-ansible variable name.

Restricting Application Capabilities Using Seccomp

Updated Seccomp references of runtime/default to be docker/default.

Table 50. Developer Guide
Affected Topic Description of Change

Secrets

Added an example YAML file of a secret that will create four files.

Table 51. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → .NET Core

Updated supported version number.

Tue Mar 07 2017

Table 52. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHSA-2017:0448 - ansible and openshift-ansible Security and Bug Fix Update.

Table 53. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Advanced Installation

Updated Before You Begin section to raise minimal Ansible version to 2.2.0.

Provided guidance for preconfigured load balancers for OpenShift Container Platform with high availability.

Redeploying Certificates

Added the Checking Certificate Expirations section.

Table 54. Cluster Administration
Affected Topic Description of Change

Encrypting Hosts with IPsec

Re-added the Encrypting Hosts with IPsec topic and made it specific to the current version of libreswan.

Managing Pods

Added information and arranged the Controlling Egress Traffic section.

Added clarifying details around EgressNetworkPolicy, including that it only affects external traffic (not pod-to-pod traffic) and that you can only have a single EgressNetworkPolicy in a namespace; added additional details about rule ordering and that breaking the rules can result in all egress traffic from the namespace being dropped.

Fri Feb 24 2017

Table 55. Creating Images
Affected Topic Description of Change

Guidelines

Updated the commands in the Support Arbitrary User IDs section to enable root group access in the Dockerfile.

Wed Feb 22 2017

Table 56. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:0289 - OpenShift Container Platform 3.3.1.14 Bug Fix Update.

Thu Feb 16 2017

Table 57. Architecture
Affected Topic Description of Change

Infrastructure Components → Web Console

Removed the Technical Preview note from the JVM Console section.

Core Concepts → Routes

Edited out the ROUTE_LABELS environment variable to allighn with upstream.

Table 58. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster→ Disconnected Installation

Added the cluster image to the Syncing Images section.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added additional URL instructions to the Deploying the Registry Console section.

Setting up the Registry → Securing and Exposing the Registry

Added a step for adding the public route host name in the --hostnames flag.

Setting up a Router → Using the Default HAProxy Router

Added the Filtering Routes to Specific Routers section.

Master and Node Configuration

Fixed the options for creating a configuration file in the Creating New Configuration Files section.

Configuring Persistent Storage → Volume Security

Added details about RunAsAny FSGroup and block device permissions.

Aggregating Container Logs

Fixed example in the Configuring Fluentd to Send Logs to an External Log Aggregator section.

Added a version variable and <tag> to code block example in Deploying the EFK Stack section to display the correct current version to use.

Table 59. Cluster Administration
Affected Topic Description of Change

Managing Pods

Added more information about disabling MAC filtering for the Egress router.

Aggregating Container Logs

Added a requirement that port 9300 be open for Elasticsearch to the Pre-deployment Configuration section.

High Availability

Added a step for deploying the ipfailover router to monitor postgresql listening to the Configuring a Highly-available Service section

Table 60. CLI Reference
Affected Topic Description of Change

Developer CLI Operations

Added additional information about the generator parameter in the Expose section.

Table 61. Developer Guide
Affected Topic Description of Change

Secrets

Corrected an example YAML file and added missing steps.

Using Persistent Volumes

Added a new Volume and Claim Pre-binding section

Service Serving Certificate Secrets

Added a note to the Service Serving Certificate Secrets section clarifying the use of the service DNS name.

Getting Traffic into the Cluster

Added more details about Ingress.

Mon Feb 06 2017

Table 62. Cluster Administration
Affected Topic Description of Change

Handling Out of Resource Errors

Added clarifying details around kubeletArguments in the Example Scenario section.

Table 63. Installation and Configuration
Affected Topic Description of Change

Setting up a Router → Using the Default HAProxy Router

Arranged the topic to create the Creating a Router section, and added a paragraph on router options on creation.

Persistent Storage Examples → Complete Example Using GlusterFS

Clarified that, if using a service, the endpoints name must match the service name.

Configuring Persistent Storage → Persistent Storage Using GlusterFS

Clarified that, if using a service, the endpoints name must match the service name.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added Important box about shutting down Cockpit to the Non-Production Use section.

Installing a Cluster → Host Preparation

Added steps on using yum-config-manager to the host registration steps.

Setting up the Registry → Deploying a Registry on Existing Clusters

Arranged the Securing the Registry Console section to include information on the certificate.

Installing a Cluster → Advanced Install

Added the Configuring a Registry Location section.

Configuring Nuage SDN

Added the Configuring Nuage SDN file.

Tue Jan 31 2017

Table 64. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Host Preparation

Added instructions for installing and using the atomic-openshift-excluder and atomic-openshift-docker-excluder scripts during cluster installations and upgrades.

Installing a Cluster → Quick Installation

Installing a Cluster → Advanced Installation

Upgrading a Cluster → Manual In-place Upgrades

Upgrading a Cluster → Automated In-place Upgrades

Mon Jan 30 2017

Table 65. Installation and Configuration
Affected Topic Description of Change

Setting up the Registry → Securing and Exposing the Registry

Removed references to the deprecated --api-version flag.

Configuring Custom Certificates

Clarified custom certificate configuration locations in the Configuring Custom Certificates section.

Table 66. Developer Guide
Affected Topic Description of Change

Builds

Updated the example Dockerfile path to point to a file, not a directory.

Managing Environment Variables

Removed redundant information and CLI reference material; rearranged sections to match user process.

Thu Jan 26 2017

Table 67. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2017:0199 - OpenShift Container Platform 3.3.1.11 Bug Fix Update.

Wed Jan 25 2017

Table 68. Architecture
Affected Topic Description of Change

Core Concepts → Pods and Services

Updated Ingress CIDR references to the new default.

Table 69. Installation and Configuration
Affected Topic Description of Change

Working with HTTP Proxies

Added step to Proxying Docker Pull for finding the registry service IP.

Setting up a Router → Using the F5 Router Plug-in

Removed references to the deprecated --credentials option.

Installing a Cluster → Prerequisites

Added information about required ports for Aggregated Logging.

Configuring Global Build Defaults and Overrides

Added notes to explain additional values in the /etc/origin/master/master-config.yaml file in the Manually Setting Global Build Defaults section.

Customizing the Web Console

Added information about setting extension properties.

Table 70. Cluster Administration
Affected Topic Description of Change

Monitoring Routers

Removed references to the deprecated --credentials option.

High Availability

Removed references to the deprecated --credentials option.

Configuring the Cluster to Use Unique External IPs

Added a CAUTION box indicating that external IPs assigned to services of type LoadBalancer will always be in the range of ingressIPNetworkCIDR and updated Ingress CIDR references to the new default.

Table 71. CLI Reference
Affected Topic Description of Change

Administrator CLI Operations

Removed references to the deprecated --credentials option.

Developer CLI Operations

Removed reference to the deprecated oc env command.

Table 72. Developer Guide
Affected Topic Description of Change

Builds

Updated a Note box in the Accessing Build Logs section advising that the build defaults for an administrator can be overridden for non-binary builds by passing --build-loglevel to oc start-build.

Wed Jan 18 2017

Table 73. Architecture
Affected Topic Description of Change

Core Concepts → Containers and Images

New section about init containers.

Table 74. Installation and Configuration
Affected Topic Description of Change

Setting up the Registry → Securing and Exposing the Registry

Added note box about mounting secrets to service accounts.

Mon Jan 16 2017

Table 75. Developer Guide
Affected Topic Description of Change

Managing Images

Added information about the supports annotation on image streams.

Table 76. Installation and Configuration
Affected Topic Description of Change

Configuring Authentication and User Agent

Clarified the difference between /api and /oapi in the User Agent section.

Aggregating Container Logs

Added clarification regarding ConfigMaps and output of oc new-app.

Mon Jan 09 2017

Table 77. Developer Guide
Affected Topic Description of Change

Templates

Updated the oc export all command example.

Builds

Added the FROM Image section.

Builds

Clarified the procedure for running git clone with a self-signed TLS certificate.

Table 78. Installation and Configuration
Affected Topic Description of Change

Working with HTTP Proxies

Added clarifying details about HTTP proxies.

Table 79. Architecture
Affected Topic Description of Change

Additional Concepts → Authorization

Added clarifying details about cluster roles.

Table 80. Cluster Administration
Affected Topic Description of Change

Managing Pods

Added important box about Red Hat OpenStack Platform to the Limiting Pod Access with an Egress Router section.

Managing Authorization Policies

Added clarifying details about cluster roles.

Tue Dec 20 2016

Table 81. Cluster Administration
Affected Topic Description of Change

Backup and Restore

Added to the note with information on host backups over 700 MB.

Table 82. Installation and Configuration
Affected Topic Description of Change

Working with HTTP Proxies

Removed section on configuring Maven with http proxies.

Installing a Cluster → Host Preparation

Updated the path to the latest epel-release package.

Table 83. Creating Images
Affected Topic Description of Change

Guidelines

In the Support Arbitrary User IDs section, updated export LD_PRELOAD=libnss_wrapper.so to be export LD_PRELOAD=/usr/lib64/libnss_wrapper.so to prevent errors from the library not being found.

Table 84. Developer Guide
Affected Topic Description of Change

Deployments → Deployment Strategies

Added an example of custom deploymen to the Custom Strategy section.

Table 85. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → PHP

Added the DOCUMENTROOT environment variable to the PHP Environment Variables table.

Tue Dec 13 2016

Table 86. Installation and Configuration
Affected Topic Description of Change

Configuring Persistent Storage → Persistent Storage Using GCE Persistent Disk

Added a new Multi-zone Configuration section.

Configuring Persistent Storage → Dynamically Provisioning Persistent Volumes

Added clarifying details about multi-zone persistent volume (PV) configuration.

Aggregating Container Logs

Added Configuring Fluentd to Send Logs to an External Log Aggregator section.

Added Note boxes explicitly stating that sending logs directly to an AWS Elasticsearch instance is not supported.

Added F-5 Load Balancer and X-Forwarded-For Enabled to the Troubleshooting Kibana section.

Customizing the Web Console

Added a new Customizing the About Page section.

Table 87. Cluster Administration
Affected Topic Description of Change

Idling Applications

New topic.

Diagnostics Tool

Added Running Diagnostics in a Server Environment and Running Diagnostics in a Client Environment sections.

Table 88. Developer Guide
Affected Topic Description of Change

Application Life Cycle Management

The existing Application Life Cycle Examples (now titled Planning Your Development Process) and Creating New Applications topics have been moved into a new Application Life Cycle Management chapter.

The following new topic has also been added:

Copying Files to or from a Container

Added an Advanced Rsync Features section.

Wed Dec 07 2016

Table 89. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHSA-2016:2915 - OpenShift Container Platform 3.3.1.7 Security and Bug Fix Update.

Mon Dec 05 2016

Table 90. Installation and Configuration
Affected Topic Description of Change

Installing a Cluster → Prerequisites

Removed Git access as a prerequisite because it is a requirement for development, but not for installing a cluster.

Aggregating Container Logs

Added a NOTE indicating that, as of OpenShift Container Platform 3.3, Fluentd no longer reads historical log files when using the JSON file log driver.

Installing a Cluster → Host Preparation

Added the matches option to the subscription-manager list --available command.

Installing a Cluster → Disconnected Installation

Added the matches option to the subscription-manager list --available command.

Syncing Groups With LDAP

Removed references to filtering UIDAttribute values in configurations.

Table 91. Cluster Administration
Affected Topic Description of Change

Managing Pods

Fixed the syntax of the Example Pod Definition for an Egress Router.

Backup and Restore

Added the Backup and Restore section.

Table 92. Developer Guide
Affected Topic Description of Change

Templates

Removed an outdated reference regarding support for multiple templates with oc process.

Secrets

Added information about secrets in environment variables.

Mon Nov 21 2016

Table 93. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Updated entry on sysctl support to link to the new dedicated Sysctls topic.

Table 94. Architecture
Affected Topic Description of Change

Additional Concepts → Authorization

Updated to reflect that seven, not six, Security Context Constraints are added to the cluster by default.

Additional Concepts → Persistent Storage

Removed statement indicating that HostPath is for testing only.

Core Concepts → Routes

Clarified how routes claim host names.

Table 95. Installation and Configuration
Affected Topic Description of Change

Aggregating Container Logs

Clarified points around NFS storage.

Setting up the Registry → Deploying a Registry on Existing Clusters

Removed inaccurate example showing how to attach an existing NFS volume to the registry.

Setting up the Registry → Extended Registry Configuration

Described the CloudFront middleware extension.

Table 96. Cluster Administration
Affected Topic Description of Change

Sysctls

New topic on Technology Preview sysctl support.

Managing Security Context Constraints

Updated the output for oc get scc.

Table 97. Developer Guide
Affected Topic Description of Change

Deployments

The previous Deployments topic has been broken up into a chapter with multiple topics:

Thu Nov 17 2016

Table 98. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2016:2801 - OpenShift Container Platform 3.3.1.5 Bug Fix Update.

Tue Nov 15 2016

Table 99. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHSA-2016:2696 - OpenShift Container Platform 3.3.1.4 Security and Bug Fix Update.

Mon Nov 14 2016

Table 100. Installation and Configuration
Affected Topic Description of Change

Aggregating Container Logs

Updated the admin-cert location in an example within the Performing Administrative Elasticsearch Operations section.

Installing a Cluster → Advanced Installation

Added steps to verify the web console.

Table 101. Cluster Administration
Affected Topic Description of Change

Troubleshooting OpenShift SDN

Removed references to firewalld, as the installer does not currently support it.

iptables

New topic on how OpenShift Container Platform and iptables interact.

Securing Builds by Strategy

Added jenkinspipeline build strategy role information.

Assigning Unique External IPs for Ingress Traffic

Added a NOTE stating that this feature is only supported in non-cloud deployments.

Overcommiting

Added a Warning box about swap in the Disabling Swap Memory section.

Out of Resource Handling

New topic about memory eviction.

Mon Nov 07 2016

Table 102. Developer Guide
Affected Topic Description of Change

Deployments

Added a new Advanced Deployment Strategies section.

Table 103. CLI Reference
Affected Topic Description of Change

Developer CLI Operations

Added information on oc patch.

Table 104. Installation and Configuration
Affected Topic Description of Change

Upgrading a Cluster → Operating System Updates and Upgrades

New topic on the impacts of operating system updates and upgrades and possible solutions.

Setting up the Registry → Securing and Exposing the Registry

Added clarification to the Exposing a Non-Secure Registry section.

Wed Nov 02 2016

Table 105. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Updated release notes for RHBA-2016:2084 - OpenShift Container Platform 3.3.1.3 Bug Fix Update to document Technology Preview Features included in the release: scheduled jobs and sysctl support.

Tue Nov 01 2016

Table 106. Installation and Configuration
Affected Topic Description of Change

Installing → Planning

Updated the Sizing Considerations section for clarity.

Table 107. Cluster Administration
Affected Topic Description of Change

Backup and Restore

Added a NOTE box to the Cluster Restore section, indicating that the outlined procedure only works for single-member etcd clusters.

Thu Oct 27 2016

OpenShift Container Platform 3.3.1 release.

Table 108. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2016:2084 - OpenShift Container Platform 3.3.1.3 Bug Fix Update and RHBA-2016:2122 - atomic-openshift-utils Bug Fix Update.

Table 109. Installation and Configuration
Affected Topic Description of Change

Upgrading a Cluster → Performing Automated In-place Cluster Upgrades

Minor updates for clarity, including converting some procedures into numbered steps for easier readability.

Table 110. Developer Guide
Affected Topic Description of Change

Scheduled Jobs

New topic on the Scheduled Jobs feature, which allows you to specifically schedule how the job should be run.

Table 111. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → .NET Core

New topic about using .NET Core with OpenShift Container Platform.

Mon Oct 24 2016

Table 112. Cluster Administration
Affected Topic Description of Change

Configuring Service Accounts

Added a Service Accounts and Secrets heading.

Restricting Application Capabilities Using Seccomp

New topic.

Mon Oct 17 2016

Table 113. Installation and Configuration
Affected Topic Description of Change

Configuring Pipeline Execution

Clarified Jenkins template names.

Loading the Default Image Streams and Templates

Updated information in the Offerings by Subscription Type section on which images are provided by which subscription s.

Installing a Cluster → Advanced Installation

Added more information to the openshift_master_portal_net parameter description in the Configuring Cluster Variables section.

Table 114. Cluster Administration
Affected Topic Description of Change

High Availability

Added the Multiple Highly Available Services In a Network section.

Diagnostics Tool

New topic about the oc adm diagnostics command.

Tue Oct 11 2016

Table 115. Installation and Configuration
Affected Topic Description of Change

Aggregating Container Logs

Fixed error in Deploying the EFK Stack section.

Configuring the SDN

Added clarifying details to the Migrating Between SDN Plug-ins section about when to clean up SDN-specific artifacts.

Configuring Persistent Storage → Persistent Storage Using Ceph Rados Block Device (RBD)

Updated the persistentVolumeReclaimPolicy setting to retain in the Persistent Volume Object Definition Using Ceph RBD example.

Installing → Advanced Installation

Replaced ansible_sudo with ansible_become.

Table 116. Cluster Administration
Affected Topic Description of Change

Setting Quotas

Added that cpu and requests.cpu are the same value and can be used interchangeably, as with memory and requests.memory.

Table 117. Developer Guide
Affected Topic Description of Change

Copying Files to or from a Container

Added a procedure outlining how oc rsync can be used to copy database archives from an existing database container to a new database container’s persistent volume directory.

Wed Oct 05 2016

Table 118. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added Service Serving Certificate Secrets to Technology Preview Features.

Table 119. Developer Guide
Affected Topic Description of Change

Secrets

Added a Technology Preview note to the Service Serving Certificate Secrets section.

Tue Oct 04 2016

Table 120. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for RHBA-2016:1988 - OpenShift Container Platform 3.3.0.34 Bug Fix Update.

Table 121. Architecture
Affected Topic Description of Change

Core Concepts → Routes

Added a new Route-specific Timeouts section.

Added Router Configuration Parameters.

Table 122. Installation and Configuration
Affected Topic Description of Change

Configuring the SDN

Added clarifying details to the Migrating Between SDN Plug-ins section about when to clean up SDN-specific artifacts.

Configuring the SDN

Added that oc get netnamespace can be run to check VNIDs.

Setting up the Registry → Known Issues

Added troubleshooting guidance on Image Pruning Failures.

Installing → Prerequisites

Added information about disabling dnsmasq.

Installing → Advanced Installation

Added example for a multi-master install with etcd on the same hosts.

Configuring Persistent Storage → Persistent Storage Using Ceph Rados Block Device (RBD)

Updated the persistentVolumeReclaimPolicy setting to retain in the Persistent Volume Object Definition Using Ceph RBD example.

Persistent Storage Examples → Binding Persistent Volumes by Labels

Updated the persistentVolumeReclaimPolicy setting to retain in the glusterfs-pv.yaml example, since recycle is not supported in this case.

Persistent Storage Examples → Complete Example Using GlusterFS

Updated the GlusterFS persistent storage example to use NGNIX instead of busybox.

Configuring Persistent Storage → Volume Security

Fixed formatting of the oc get project default -o yaml example output within the SCCs, Defaults, and Allowed Ranges section.

Configuring Persistent Storage → Volume Security

Removed no_root_squash from the NFS example, as it is not a recommended option.

Table 123. Cluster Administration
Affected Topic Description of Change

High Availability

Fixed deprecated commands in the Configuring a Highly-available Routing Service section.

Backup and Restore

Added Prerequisites details and created new sections for Application Data Backup, Application Data Restore, Project Restore, as well as backing up Role Bindings, Service Accounts, Secrets, and Persistent Volume Claims.

Pruning Objects

Added a Note box about the required storage:delete:enabled flag when pruning images.

Table 124. Developer Guide
Affected Topic Description of Change

Builds

Added information on shallow cloning.

Table 125. REST API Reference
Affected Topic Description of Change

Overview

Updated the oc whoami --token command to show the shorter flag of oc whoami --t.

Tue Sep 27 2016

OpenShift Container Platform 3.3 initial release.

Table 126. Release Notes
Affected Topic Description of Change

OpenShift Container Platform 3.3 Release Notes

Added release notes for initial release.

Table 127. Architecture
Affected Topic Description of Change

Additional Concepts → Authentication

Added information about OAuth scopes.

Additional Concepts → Authorization

Added a new section about oc policy can-i --list.

Additional Concepts → Authorization

Added a new Seccomp section under Security Context Constraints (SCC) Strategies.

Additional Concepts → Admission Controllers

Added information about the admission plug-in chain.

Additional Concepts → Persistent Storage

Added information about best-fit persistent volume claim (PVC) requests in the Binding section.

Core Concepts → Routes

Updated the Router Configuration Parameters table.

Core Concepts → Builds and Image Streams

Added information on the Pipeline build strategy.

Additional Concepts → Authentication

Added information about grantMethod.

Additional Concepts → Authentication

Added section on using Security Context Constraints for OAuth.

Core Concepts → Routes

Added router configuration parameters.

Additional Concepts → Authentication

Added section on using Security Context Constraints for OAuth.

Core Concepts → Routes

Added router configuration parameters.

Additional Concepts → Authentication

Added the Impersonation section.

Table 128. Installation and Configuration
Affected Topic Description of Change

Configuring the SDN

Added that oc get netnamespace can be run to check VNIDs.

Setting up the Registry → Securing and Exposing the Registry

Added two new sections on Exposing a Secure Registry and Exposing a Non-Secure Registry.

Customizing the Web Console

Added Configuring Navigation Menus section.

Setting up the Registry → Known Issues

Added troubleshooting guidance on Image Pruning Failures.

Master and Node Configuration

Added a Audit Configuration section.

Installing → Prerequisites

Added information about disabling dnsmasq.

Redeploying Certificates

New topic reviewing how to back up and redeploy cluster certificates using the ansible-playbook command.

Installing → Advanced Installation

Added example for a multi-master install with etcd on the same hosts.

Enabling Cluster Metrics

Added capacity planning guidance for OpenShift Container Platform metrics.

Installing → Prerequisites

Updated scale recommendations.

Installing → Advanced Installation

Updated the Multiple Masters Using HAProxy Inventory File example with guidance on applying updated node defaults.

Upgrading → Performing Manual Cluster Upgrades

Updated version numbers for image streams across the Updating the Default Image Streams and Templates section.

Persistent Storage Examples → Binding Persistent Volumes by Labels

Updated the persistentVolumeReclaimPolicy setting to retain in the glusterfs-pv.yaml example, since recycle is not supported in this case.

Persistent Storage Examples → Complete Example Using GlusterFS

Updated the GlusterFS persistent storage example to use NGNIX instead of busybox.

Configuring Pipeline Execution

Corrected instructions for enabling Jenkins auto-provision.

Configuring Routing

Changed "Native Container Routing" topic to "Configuring Routing" and added information about Configuring Route Timeouts.

Aggregating Container Logs

Added clarifying details to the Warning box in the Persistent Elasticsearch Storage section regarding the NFS workaround.

Upgrading → Performing Manual Cluster Upgrades

Added a new Update Your Configuration File section.

Setting up the Registry → Extended Registry Configuration

Emphasized the new mandatory middleware configuration entries.

Deploying a Docker Registry

Extended the registry configuration file example within the Deploying Updated Configuration section to include the blobrepositorycachettl option.

Storage Examples → Binding Persistent Volumes by Labels

New topic providing an end-to-end example for binding persistent volume claims (PVCs) to persistent volumes (PVs) by defining labels in the PV and matching selectors in the PVC.

Persistent Storage Examples → Selector-Label Volume Binding

New topic outlining how to bind persistent volumes claims (PVCs) to persistent volumes (PVs) via selector and label attributes.

Upgrading → Blue-Green Deployments

Added new topic.

Enabling Cluster Metrics

Added additional details to the Accessing Hawkular Metrics Directly section.

Installing → Deploying a Router

Added a new Protecting Against DDoS Attacks section.

Configuring Pipeline Execution

New section.

Installing → Prerequisites

Added that the deserialization cache size can be reduced using a setting in master-config.yaml.

Aggregating Container Logs

Added information about configuration from configmaps, Fluentd, and Curator.

Installing → Deploying a Docker Registry

Edited references to oc secrets add.

Configuring Persistent Storage → Volume Security

Fixed formatting of the oc get project default -o yaml example output within the SCCs, Defaults, and Allowed Ranges section.

Configuring Authentication

Updated OAuth grant strategies information.

Installing → Deploying a Docker Registry

Updated mandatory configuration options for the registry’s configuration file.

Configuring the SDN

Updated migration steps for SDN plug-ins.

Performing Manual Cluster Upgrades

Added a Warning box about excluding roles from reconciliation.

Configuring Authentication

Added OpenID and GitLab challenge options.

Enabling Cluster Metrics

Added a new Metrics Deployer Validations section.

Upgrading → Performing Manual Cluster Upgrades

Added recent image quota restrictions.

Table 129. Administrator Solutions
Affected Topic Description of Change

New guide

First release of the Administrator Solutions guide for OpenShift Container Platform 3.3.

Table 130. Cluster Administration
Affected Topic Description of Change

High Availability

Fixed deprecated commands in the Configuring a Highly-available Routing Service section.

Backup and Restore

Added Prerequisites details and created new sections for Application Data Backup, Application Data Restore, Project Restore, as well as backing up Role Bindings, Service Accounts, Secrets, and Persistent Volume Claims.

Pruning Objects

Added a Note box about the required storage:delete:enabled flag when pruning images.

Cluster Administration → Managing Pods → Limiting the Bandwidth Available to Pods

Added details on limiting the bandwidth available to pods via quality-of-service traffic shaping.

Cluster Administration → Limit Pod Access with Egress Firewall

Added new topic covering how to limit the IP addresses and traffic that a pod can access.

Scoped Tokens

New topic discussing scoped tokens, which are tokens that identify given users, but are limited to certain actions by its scope.

Image Policy

New topic about controlling which images are allowed to run on your cluster using the ImagePolicy admission plug-in.

Setting Multi-Project Quotas

New topic about how to set multi-project quotas.

Monitoring Images

New topic discussing oadm top images and oadm top imagestreams commands.

Managing Nodes

Added a new Rebooting Nodes section.

Pruning Objects

Added --prune-over-size-limit information.

Setting Quotas

Added recent image quota restrictions.

Setting Limit Ranges

Added recent image quota restrictions.

Table 131. CLI Reference
Affected Topic Description of Change

Developer CLI Operations

Added information about the ability to cancel multiple builds.

Table 132. Developer Guide
Affected Topic Description of Change

Templates

Added information about the template message and what it tells users.

Getting Traffic Into The Cluster

New topic describing how to access and direct traffic to the cluster.

Downward API

Added information on consuming container resources using the downward API.

Routes

Added a new Load Balancing for A/B Testing section discussing how the HAProxy router now supports splitting the traffic coming to a route across multiple back end services via weighting.

Managing Images

Updated to show that oc tag -d now matches oc delete istag behavior to better match user expectations.

Deployments

Added information about new deployment procedures including paused deployments, cleanup policy, minReadySeconds, and oc rollout.

Added information about the oc set deployment-hook command.

Builds

Added a Build Run Policy section.

Added a Note box indicating that extended builds is a technology preview feature.

Added new Extended Builds section discussing how S2I (Source-to-Image) introduces a two-image build process.

Added a curl example for webhook invocations within the Webhook Triggers section

Added information on options for the Pipeline build strategy.

Edited references to oc secrets add.

Added information about the ability to cancel multiple builds.

Service Accounts

Edited references to oc secrets add.

Managing Images

Edited references to oc secrets add.

Copying Files to or from a Container

Added Continuous Syncing on File Change section.

Secrets

Added a new Service Serving Certificate Secrets section.

Quotas and Limit Ranges

Added recent image quota restrictions.

Table 133. Using Images
Affected Topic Description of Change

Source-to-Image (S2I) → Python

Added the PIP_INDEX_URL environment variable to the Configuration section.

Database Images → MySQL

Updated the Additional MySQL Settings table in the Environment Variables section with new variables.