Chapter 34. Revision History: Cluster Administration

Red Hat OpenShift Documentation Team 3.3 :experimental:

34.1. Thu Jul 27 2017

Affected Topic	Description of Change
Setting Quotas	Updated the references to quota and limit ranges, as they are now listed on the Quota page.
Setting Limit Ranges	Updated the references to quota and limit ranges, as they are now listed on the Quota page.
Setting Quotas	Removed unsupported options from the Compute Resources Managed by Quota table.

34.2. Tue Jul 18 2017

Affected Topic	Description of Change
Managing Security Context Constraints	Updated the Add an SCC to a User, Group, or Project section to add notes on granting SCC access and clarify project access.

34.3. Thu May 25 2017

Affected Topic	Description of Change
Managing Security Context Constraints	Added a warning about pod creation on behalf of a user within the Grant Access to the Privileged SCC section.

34.4. Mon May 15 2017

Affected Topic	Description of Change
Backup and Restore	Restored and updated steps for adding an etcd member.

34.5. Tue May 02 2017

Affected Topic	Description of Change
Securing Builds by Strategy	Added that custom builds are disabled by default.

34.6. Wed Apr 12 2017

Affected Topic	Description of Change
Managing Security Context Constraints	Added information about preserving labels and annotations, in addition to groups.
Managing Nodes	Fixed markup error in the examples in the Setting Maximum Pods Per Node section.

34.7. Mon Mar 27 2017

Affected Topic	Description of Change
Setting Limit Ranges	Added the missing `-n demoproject` option to the `oc describe` limits example and updated the command’s output.
Backup and Restore	Updated the backup and restore procedure.

34.8. Mon Mar 20 2017

Affected Topic	Description of Change
Managing Nodes	Added the Setting Maximum Pods Per Node section.
Managing Authorization Policies	Updated the ClusterRole file in the Granting Users Daemonset Permissions section.

34.9. Tue Mar 14 2017

Affected Topic	Description of Change
Managing Nodes	Renamed instances of `openshift_node_set_node_ip` to `openshift_set_node_ip`, the correct `openshift-ansible` variable name.
Restricting Application Capabilities Using Seccomp	Updated Seccomp references of `runtime/default` to be `docker/default`.

34.10. Tue Mar 07 2017

Affected Topic	Description of Change
Encrypting Hosts with IPsec	Re-added the Encrypting Hosts with IPsec topic and made it specific to the current version of libreswan.
Managing Pods	Added information and arranged the Controlling Egress Traffic section.
Managing Pods	Added clarifying details around `EgressNetworkPolicy`, including that it only affects external traffic (not pod-to-pod traffic) and that you can only have a single `EgressNetworkPolicy` in a namespace; added additional details about rule ordering and that breaking the rules can result in all egress traffic from the namespace being dropped.

34.11. Thu Feb 16 2017

Affected Topic	Description of Change
Managing Pods	Added more information about disabling MAC filtering for the Egress router.
Aggregating Container Logs	Added a requirement that port 9300 be open for Elasticsearch to the Pre-deployment Configuration section.
High Availability	Added a step for deploying the ipfailover router to monitor postgresql listening to the Configuring a Highly-available Service section

34.12. Mon Feb 06 2017

Affected Topic	Description of Change
Handling Out of Resource Errors	Added clarifying details around `kubeletArguments` in the Example Scenario section.

34.13. Wed Jan 25 2017

Affected Topic	Description of Change
Monitoring Routers	Removed references to the deprecated `--credentials` option.
High Availability	Removed references to the deprecated `--credentials` option.
Configuring the Cluster to Use Unique External IPs	Added a CAUTION box indicating that external IPs assigned to services of type `LoadBalancer` will always be in the range of `ingressIPNetworkCIDR` and updated Ingress CIDR references to the new default.

34.14. Mon Jan 09 2017

Affected Topic	Description of Change
Managing Pods	Added important box about Red Hat OpenStack Platform to the Limiting Pod Access with an Egress Router section.
Managing Authorization Policies	Added clarifying details about cluster roles.

34.15. Tue Dec 20 2016

Affected Topic	Description of Change
Backup and Restore	Added to the note with information on host backups over 700 MB.

34.16. Tue Dec 13 2016

Affected Topic	Description of Change
Idling Applications	New topic.
Diagnostics Tool	Added Running Diagnostics in a Server Environment and Running Diagnostics in a Client Environment sections.

34.17. Mon Dec 05 2016

Affected Topic	Description of Change
Managing Pods	Fixed the syntax of the Example Pod Definition for an Egress Router.
Backup and Restore	Added the Backup and Restore section.

34.18. Mon Nov 21 2016

Affected Topic	Description of Change
Sysctls	New topic on Technology Preview sysctl support.
Managing Security Context Constraints	Updated the output for `oc get scc`.

34.19. Mon Nov 14 2016

Affected Topic	Description of Change
Troubleshooting OpenShift SDN	Removed references to `firewalld`, as the installer does not currently support it.
iptables	New topic on how OpenShift Container Platform and iptables interact.
Securing Builds by Strategy	Added `jenkinspipeline` build strategy role information.
Assigning Unique External IPs for Ingress Traffic	Added a NOTE stating that this feature is only supported in non-cloud deployments.
Overcommiting	Added a Warning box about swap in the Disabling Swap Memory section.
Out of Resource Handling	New topic about memory eviction.

34.20. Tue Nov 01 2016

Affected Topic	Description of Change
Backup and Restore	Added a NOTE box to the Cluster Restore section, indicating that the outlined procedure only works for single-member etcd clusters.

34.21. Mon Oct 24 2016

Affected Topic	Description of Change
Configuring Service Accounts	Added a Service Accounts and Secrets heading.
Restricting Application Capabilities Using Seccomp	New topic.

34.22. Mon Oct 17 2016

Affected Topic	Description of Change
High Availability	Added the Multiple Highly Available Services In a Network section.
Diagnostics Tool	New topic about the `oc adm diagnostics` command.

34.23. Tue Oct 11 2016

Affected Topic	Description of Change
Setting Quotas	Added that `cpu` and `requests.cpu` are the same value and can be used interchangeably, as with `memory` and `requests.memory`.

34.24. Tue Oct 04 2016

Affected Topic	Description of Change
High Availability	Fixed deprecated commands in the Configuring a Highly-available Routing Service section.
Backup and Restore	Added Prerequisites details and created new sections for Application Data Backup, Application Data Restore, Project Restore, as well as backing up Role Bindings, Service Accounts, Secrets, and Persistent Volume Claims.
Pruning Objects	Added a Note box about the required `storage:delete:enabled` flag when pruning images.

34.25. Tue Sep 27 2016

OpenShift Container Platform 3.3 initial release.

Affected Topic	Description of Change
High Availability	Fixed deprecated commands in the Configuring a Highly-available Routing Service section.
Backup and Restore	Added Prerequisites details and created new sections for Application Data Backup, Application Data Restore, Project Restore, as well as backing up Role Bindings, Service Accounts, Secrets, and Persistent Volume Claims.
Pruning Objects	Added a Note box about the required `storage:delete:enabled` flag when pruning images.
Cluster Administration → Managing Pods → Limiting the Bandwidth Available to Pods	Added details on limiting the bandwidth available to pods via quality-of-service traffic shaping.
Cluster Administration → Limit Pod Access with Egress Firewall	Added new topic covering how to limit the IP addresses and traffic that a pod can access.
Scoped Tokens	New topic discussing scoped tokens, which are tokens that identify given users, but are limited to certain actions by its scope.
Image Policy	New topic about controlling which images are allowed to run on your cluster using the ImagePolicy admission plug-in.
Setting Multi-Project Quotas	New topic about how to set multi-project quotas.
Monitoring Images	New topic discussing `oadm top images` and `oadm top imagestreams` commands.
Managing Nodes	Added a new Rebooting Nodes section.
Pruning Objects	Added `--prune-over-size-limit` information.
Setting Quotas	Added recent image quota restrictions.
Setting Limit Ranges	Added recent image quota restrictions.

Where did the comment section go?

Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.