Revision History: Cluster Administration

Securing Builds by Strategy

Added that custom builds are disabled by default.

Managing Security Context Constraints

Added information about preserving labels and annotations, in addition to groups.

Setting Limit Ranges

Added the missing -n demoproject option to the oc describe limits example and updated the command’s output.

Managing Authorization Policies

Updated the ClusterRole file in the Granting Users Daemonset Permissions section.

Managing Nodes

Renamed instances of openshift_node_set_node_ip to openshift_set_node_ip, the correct openshift-ansible variable name.

Monitoring Routers

Removed references to the deprecated --credentials option.

High Availability

Removed references to the deprecated --credentials option.

Managing Authorization Policies

Added clarifying details about cluster roles.

Backup and Restore

Added to the note with information on host backups over 700 MB.

Backup and Restore

Added the Backup and Restore section.

Managing Security Context Constraints

Updated the output for oc get scc.

Backup and Restore

Added a NOTE box to the Cluster Restore section, indicating that the outlined procedure only works for single-member etcd clusters.

Configuring service Accounts

Added a service Accounts and Secrets heading.

High Availability

Added the Multiple Highly Available services In a Network section.

Setting Quotas

Added that cpu and requests.cpu are the same value and can be used interchangeably, as with memory and requests.memory.

High Availability

Fixed deprecated commands in the Configuring a Highly-available Routing service section.

Backup and Restore

Added Prerequisites details and created new sections for Application Data Backup, Application Data Restore, Project Restore, as well as backing up Role Bindings, service Accounts, Secrets, and Persistent Volume Claims.

Pruning Objects

Added a Note box about the required storage:delete:enabled flag when pruning images.

Managing Authorization Policies

Added the Granting Users Daemonset Permissions section.

Managing Projects

Removed an invalid oc edit command.

Backup and Restore

New topic discussing back up (saving state to separate storage) and restore (recreating state from separate storage) at the cluster level.

Managing Nodes

Added details on how to change the node traffic interface.

Managing Security Context Constraints

Added information about required drop capabilities to the Creating New Security Context Constraints section.

Managing Projects

Clarified how to remove self-provisioning capabilities in the Disabling Self-provisioning section.

Managing Projects

Added a Note box in the Limiting Number of Self-Provisioned Projects Per User section with a pointer to the new Managing User and Group Labels section.

Managing Users

Added a new Managing User and Group Labels section.

Managing Projects

Added an Important box to the Limiting Number of Self-Provisioned Projects Per User section about the PROJECT_REQUESTING_USER annotation.

High Availability

Added an Important box to the Configuring IP Failover section about using high availability with AWS.

Troubleshooting OpenShift SDN

Added the TLS Handshake Timeout section.

Setting Quotas

Added examples for long running versus timebound quota.

Securing Builds by Strategy

Updated for build strategy role changes.

Overcommitting

Added the Configuring Masters for Overcommitment section about the ClusterResourceOverride admission controller.

Configuring service Accounts

Fixed callout numbering in the Managed service Accounts example.

Overcommitting

Added instructions on how to make the resource-reserver pod start automatically.

Scheduler

Added a Modifying Scheduler Policy section.

Overcommitting

Updated the Disabling Swap Memory section with options that can help users avoid having to swap and added a Warning box stating that disabling swap memory is not recommended.

Managing Security Context Constraints

Fixed command typos.

High Availability

Added the Dynamically Updating Virtual IPs for a Highly-available service section.

Limit Run-once Pod Duration

New topic on the RunOnceDuration plug-in.

Setting Quotas

Moved the "Resource Quota" topic from the Developer Guide to Cluster Administration, as it involves cluster administration tasks, and renamed it Setting Quotas.

Added reference to the configmaps resource.

Setting Limit Ranges

Moved the "Resource Limits" topic from the Developer Guide to Cluster Administration, as it involves cluster administration tasks, and renamed it Setting Limit Ranges.

Overcommitting

Updated the Reserving Resources for System Processes section to mention the new allocating node resources method.

Allocating Node Resources

New topic on reserving node resources.

Scheduler

Added the Controlling Pod Placement section.

Managing Security Context Constraints

Updated to use oc create serviceaccount commands and service account user names in add-scc-to-user commands.

High Availability

Managing Projects

Added the Limiting Number of Self-Provisioned Projects Per User section.

Managing Authorization Policies

Added new registry roles to output in the Viewing Cluster Policy section.

Managing Projects

Added a Limiting Number of Self-Provisioned Projects Per User section.