Chapter 34. Revision History: Cluster Administration

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Monitoring and Debugging Routers

Added new section on Viewing Statistics.

Manging Nodes

Added new section on Resetting Docker Storage to free up space on nodes.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Setting Limit Ranges

Added link to information on how CPU and memory are calculated.

Image Policy

Added note clarifying the need for the image prefix to set the default registry string in the Configuring the ImagePolicy Admission Plug-in section.

Pruning Objects

Added valid units of measurement for --keep-younger-than.

Troubleshooting OpenShift SDN

Changed the Further Help section to Finding Network Issues Using the Diagnostics Tool and added information about the Diagnostic Tool.

Troubleshooting OpenShift SDN

Corrected vxlan0 to vxlan_sys_4789 in the Debugging Local Networking section.

High Availability

Added verbiage clarifying the example outlined in the Configuring a Highly-available Service section.

Setting Quotas

Updated the references to quota and limit ranges, as they are now listed on the Quota page.

Setting Limit Ranges

Updated the references to quota and limit ranges, as they are now listed on the Quota page.

Managing Security Context Constraints

Updated the Add an SCC to a User, Group, or Project section to add notes on granting SCC access and clarify project access.

Cluster Administration → Setting Quotas

Removed unsupported limits.storage parameter.

Scheduler

Updated default scheduler policy in the Scheduler Policy section.

Managing Security Context Constraints

Added a warning about pod creation on behalf of a user within the Grant Access to the Privileged SCC section.

Garbage Collection

Updated the default value for the maximum-dead-containers setting in the Container Garbage Collection section.

Backup and Restore

Restored and updated steps for adding an etcd member.

High Availability

Removed numbering and added a title to Deploy IP Failover Pod in the Configuring a Highly-available Service section.

Securing Builds by Strategy

Added that custom builds are disabled by default.

Managing Security Context Constraints

Added information about preserving labels and annotations, in addition to groups.

Managing Nodes

Fixed markup error in the examples in the Setting Maximum Pods Per Node section.

Setting Limit Ranges

Added the missing -n demoproject option to the oc describe limits example and updated the command’s output.

Backup and Restore

Updated the backup and restore procedure.

Managing Nodes

Added the Setting Maximum Pods Per Node section.

Managing Authorization Policies

Updated the ClusterRole file in the Granting Users Daemonset Permissions section.

Managing Nodes

Renamed instances of openshift_node_set_node_ip to openshift_set_node_ip, the correct openshift-ansible variable name.

Restricting Application Capabilities Using Seccomp

Updated Seccomp references of runtime/default to be docker/default.

Encrypting Hosts with IPsec

Re-added the Encrypting Hosts with IPsec topic and made it specific to the current version of libreswan.

Managing Pods

Added information and arranged the Controlling Egress Traffic section.

Managing Pods

Added more information about disabling MAC filtering for the Egress router.

Aggregating Container Logs

Added a requirement that port 9300 be open for Elasticsearch to the Pre-deployment Configuration section.

High Availability

Added a step for deploying the ipfailover router to monitor postgresql listening to the Configuring a Highly-available Service section

Troubleshooting OpenShift SDN

Updated OpenShift SDN information.

Handling Out of Resource Errors

Added clarifying details around kubeletArguments in the Example Scenario section.

Monitoring Routers

Removed references to the deprecated --credentials option.

High Availability

Removed references to the deprecated --credentials option.

Pruning Objects

Added a NOTE box to the Pruning Images section explaining that pruning images with the --namespace flag does not remove images.

Configuring the Cluster to Use Unique External IPs

Added a CAUTION box indicating that external IPs assigned to services of type LoadBalancer will always be in the range of ingressIPNetworkCIDR and updated Ingress CIDR references to the new default.

Managing Pods

Added clarifying details around EgressNetworkPolicy, including that it only affects external traffic (not pod-to-pod traffic) and that you can only have a single EgressNetworkPolicy in a namespace; added additional details about rule ordering and that breaking the rules can result in all egress traffic from the namespace being dropped.

Managing Pods

Updated the EgressNetworkPolicy example in the Configuring Pod Access Limits section.

Added a new Setting Pod Disruption Budgets section, which allows the specification of safety constraints on pods during operations.

Setting Quotas

Added information for the requests.storage value and a storage-consumption.yaml example.

Setting Limit Ranges

Updated the PVC limit range within the Limit Range Object Definition example.

Added the PersistentVolumeClaim Limits section.

Pruning Objects

Added a new Image Pruning Problems section, which describes possible issues with image pruning and how to avoid them with more generic tag naming.

Handling Out of Resource Errors

Added information about disk-based eviction.