Revision History: Installation and Configuration

Aggregating Container Logs

Added to instructions to scale EFK pods when changes are made in the Understanding and Adjusting the Deployment section.

Installation and Configuration → Planning

Added a new section on installing a Single Master and Node on One System.

Configuring Global Build Defaults and Overrides

Added a note on limiting how long pods can run and a link to RunOnceDuration plugin.

Installing a Cluster → Advanced Installation

Clarified required port for VIP and added note that HAProxy router is not for production environments in Multiple Masters Example.

Upgrading a Cluster → Performing Manual In-place Cluster Upgrades

Added a step in Preparing for a Manual Upgrade section to obtain the latest image stream.

Upgrading a Cluster → Performing Automated In-place Cluster Upgrades

Added a step in Preparing for an Automated Upgrade section to obtain the latest image stream.

Aggregating Container Logs

Added the openshift_logging_es_number_of_replicas and openshift_logging_es_number_of_shards variables to the table in Specifying Logging Ansible Variables.

Installing a Cluster → Advanced Installation

Added the Configuring Registry Storage section.

Advanced Installation

Added a note that the default HAProxy load balancer is intended for non-production environments.

Configuring Authentication and User Agent

Added information on manually provisioning a user and identity when using the lookup mapping method for authenticating.

Setting up a Router → Using the F5 Router Plug-in

Removed the deprecated --credentials option from the Setting Up F5 Native Integration section.

Installing a Cluster → Disconnected Installation

Added a note to the Syncing Images section about the need for ose-recycler when using NFS.

Redeploying Certificates

Added a note to the Redeploying Certificates section about certificate expiration.

Setting up a Router → Using the F5 Router Plug-in

Added to the Prerequisites and Supportability section with supportability information.

Setting Up a Router → Using the F5 Router Plug-in

Added an F5 support statement

Securing the Registry

Updated commands for registry installation.

Extended Registry Configuration

Updated commands for registry installation and added steps to use a ConfigMap not secrets to override registry defaults.

Accessing the Registry

Updated commands for registry installation.

Using the Default HAProxy Router

Added information on needing separate DNS entries for routing shards to the Using Router Shards section.

Aggregating Container Logs

Corrected the link to the logging yaml file example in the Specifying Logging Ansible Variables section.

Master and Node Configuration

Expanded openshift_master_audit_config details.

Installing a Cluster → Advanced Installation

Added openshift_master_audit_config details.

Setting up the Registry → Deploying a Registry on Existing Clusters

Removed Technology Preview notice from the Deploying the Registry as a DaemonSet section.

Advanced Installation

Added information on configuring the default ports used by the master API and web console.

Router → Using the Default HAProxy Router

Added new section on how to manually redeploy the router certificates.

Configuring the SDN

Added information about configuring Neutron to the Using Flannel section.

Redeploying Certificates

Added the Redeploying a New etcd CA section.

Installing a Cluster → Disconnected Installation

Added the openshift/hello-openshift dependency to the Syncing Repositories section.

Configuring Authentication and User Agent

Added a note about whitelisting users.

Installing a Cluster → Advanced Installation

Updated ../install_config/install/advanced_install.htmlKnown Issues] to remove yum remove steps and instead link to Uninstalling OpenShift Container Platform.

Setting up the Registry → Securing and Exposing the Registry

Added steps to the Securing the Registry section on configuring your cluster to trust the certificate at the OS level.

Installing a Cluster → Host Preparation

Replaced the deprecated openshift_master_portal_net variable with openshift_portal_net.

Installing a Cluster → Advanced Installation

Replaced the deprecated openshift_master_portal_net variable with openshift_portal_net.

Enabling Controller-managed Attachment and Detachment

New topic on enabling controller-managed attachment and detachment.

Installing a Cluster → Advanced Installation

Added a step to verify that the etcd package is installed, if you installed multiple etcd hosts.

Syncing Groups With LDAP

Added Nested Membership Sync Example.

Configuring Persistent Storage → Persistent Storage Using Azure File

New topic on provisioning a OpenShift Container Platform cluster with persistent storage using Azure File.

Installing a Cluster → Installing a Stand-alone Deployment of OpenShift Container Registry

Updated to use OpenShift Container Registry name and add clarification on the distinction between Atomic Registry.

Configuring Authentication and User Agent

Noted that after making changes to an identity provider, you must restart the master service for the changes to take effect.

Configuring Persistent Storage → Persistent Storage Using Azure Disk

Added the Prerequisites section.

Configuring For Azure

Added the The Azure Configuration File section and some file example fixes.

Working with HTTP Proxies

Added the Using Maven Behind a Proxy section.

Upgrading a Cluster → Overview

Added clarification that nodes and masters are forward and backward compatible across one minor version.

Master and Node Configuration

Added information about openshift_master_audit_config to the Audit Configuration section.

Installing a Cluster → Advanced Installation

Updated the Configuring Schedulability on Masters section to note that masters are automatically marked unschedulable by default by the installer.

Updated the Configuring Node Host Labels section to better describe the special region=infra label and to suggest configuring dedicated infrastructure nodes.

Added a Configuring Deployment Type section.

Redeploying Certificates

Updated for new set of playbooks and options.

Setting up a Router → Using the Default HAProxy Router

Added graphics to the Using Router Shards section.

Setting up a Router → Deploying a Customized HAProxy Router

Expanded details in the Rebuilding Your Router section.

Installing a Cluster → Prerequisites

Specified the UDP for port 4789.

Installing → Advanced Installation

In the Known Issues multiple masters discussion, included the docker-common package in the removal process, following a failed setup play.

Configuring for OpenStack

Added openshift_cloudprovider_openstack_domain_id and openshift_cloudprovider_openstack_domain_name to the list of configurable parameters.

Upgrading a Cluster → Automated In-place Upgrades

Upgrading a Cluster → Manual In-place Upgrades

Upgrading a Cluster → Operating System Updates and Upgrades

Advanced Installation

Added the debug_level parameter to the Configuring Cluster Variables section for setting the default verbosity of journald log messages.

Master and Node Configuration

Added a new section on configuring the verbosity of journald log messages.

Installing a Cluster → Advanced Installation

Added a Configuring Cluster Logging section.

Upgrading a Cluster → Performing Manual In-place Cluster Upgrades

Added a NOTE box about verifying the cluster health before upgrading.

Upgrading a Cluster → Performing Automated In-place Cluster Upgrades

Added a NOTE box about verifying the cluster health before upgrading.

Setting Up a Registry → Extended Registry Configuration

Updated the list of supported registry storage drivers in the Storage section.

Setting Up a Registry → Deploying a Registry on Existing Clusters

Added list of supported registry storage drivers to the Storage for the Registry section.

Redeploying Certificates

Added Registry and Router Certificates section with instructions on redeploying these certificates manually.

Upgrading a Cluster → Blue-Green Deployments

Enhanced and re-organized entire topic for clarity.

Downgrading OpenShift

Moved the procedure for restoring etcd to the Backup and Restore topic.

Setting up a Router → Configuring the HAProxy Router to Use the PROXY Protocol

New topic on configuring the HAProxy router to use the PROXY protocol.

Upgrading a Cluster → Automated In-place Upgrades

Upgrading a Cluster → Manual In-place Upgrades

Upgrading a Cluster → Operating System Updates and Upgrades

Installing a Cluster → Prerequisites

Added Network Time Protocol (NTP) as a prerequisite.

Configuring Authentication and User Agent

Added information on using the htpasswd command to generate hashed passwords for HTPasswd authentication to the HTPasswd section.

Installing a Cluster → Installing on Containerized Hosts

Updated the Installing on Containerized Hosts topic to promote the information on installing on containerized hosts.

Installing a Cluster → Containerized Components

Added paragraph about the rhel7/etcd image with containerized installs.

Installing a Stand-alone Registry

Added openshift_master_default_subdomain to the openshift_master_default_subdomain file in the Advanced Installation for Stand-alone Registries section.

Configuring the SDN

Added information about the flannel_interface variable.

Installing a Cluster → Prerequisites

Renamed instances of openshift_node_set_node_ip to openshift_set_node_ip, the correct openshift-ansible variable name.

Installing a Cluster → Disconnected Installation

Added information about disconnected installation of the stand-alone registry.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added footnotes to the example file in the Use Amazon S3 as a Storage Back-end section.

Setting up the Registry → Known Issues

Added note recommending moving off NFS for production in the Image Push Errors with Scaled Registry Using Shared NFS Volume section.

Setting up a Router → Using the F5 Router Plug-in

Updated the example in the Deploying the F5 Router section to reflect host-network set to false.

Upgrading a Cluster → Performing Manual In-place Cluster Upgrades

Removed a repetitive step within the Updating the Default Image Streams and Templates section.

Upgrading a Cluster → Operating System Updates and Upgrades

Added the procedure for upgrading the operating system.

Configuring Persistent Storage → Persistent Storage Using GlusterFS

Added note about managing volumes using Heketi to the Dedicated Storage Gluster section.

Aggregating Container Logs

Removed the v from 3.4.1 in the Deploying the EFK Stack section.

Enabling Cluster Metrics

Added step to enable view permissions for Hawkular Metrics Deployer Service Account section.

Installing a Cluster → Advanced Installation

Updated Before You Begin section to raise minimal Ansible version to 2.2.0.

Provided guidance for preconfigured loadbalancers for OpenShift Container Platform with high availability.

Setting up a Router → Using the F5 Router Plug-in

Clarified that hostsubnet requires a specific annotation for multi-tenancy to work.

Redeploying Certificates

Added the Checking Certificate Expirations section.

Aggregating Container Logs

Added a Warning admonition recommending the use of the default value for use-journal and added a new Updating Fluentd’s Log Source After a Docker Log Driver Update section.

Installing a Cluster→ Disconnected Installation

Added the cluster image to the Syncing Images section.

Setting up a Router → Using the Default HAProxy Router

Added the Filtering Routes to Specific Routers section.

Setting up a Router → Using the F5 Router Plug-in

Arranged the topic and added a Prerequisites section.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added additional URL instructions to the Deploying the Registry Console section.

Setting up the Registry → Securing and Exposing the Registry

Added a step for adding the public route host name in the --hostnames flag.

Master and Node Configuration

Fixed the options for creating a configuration file in the Creating New Configuration Files section.

Configuring Persistent Storage → Volume Security

Added details about RunAsAny FSGroup and block device permissions.

Fixed example in the Configuring Fluentd to Send Logs to an External Log Aggregator section.

Added a version variable and <tag> to code block example in Deploying the EFK Stack section to display the correct current version to use.

Upgrading a Cluster → Manual In-Place Upgrades

Upgrading a Cluster → Automated In-Place Upgrades

Upgrading a Cluster → Blue-Green Deployments

Upgrading a Cluster → Manual Upgrades

Setting up the Registry → Deploying a Registry on Existing Clusters

Aggregating Container Logs

Enabling Cluster Metrics

Installing a Cluster → Host Preparation

Added steps on using yum-config-manager to the host registration steps.

Installing a Cluster → Advanced Installation

Added the Configuring a Registry Location section.

Setting up the Registry → Deploying a Registry on Existing Clusters

Added Important admonition about shutting down Cockpit to the Non-Production Use section.

Arranged the Securing the Registry Console section to include information on the certificate.

Setting up a Router → Using the Default HAProxy Router

Arranged the topic to create the Creating a Router section, and added a paragraph on router options on creation.

Setting up a Router → Using the F5 Router Plug-in

Added a new Setting Up F5 Native Integration section.

Configuring Nuage SDN

Added the Configuring Nuage SDN topic.

Persistent Storage Examples → Complete Example Using GlusterFS

Added a link to the Complete Example of Dynamic Provisioning Using GlusterFS.

Clarified that, if using a service, the endpoints name must match the service name.

Enabling Cluster Metrics

Updated Cluster Metrics sizing recommendations for the new version of OpenShift Container Platform.

Customizing the Web Console

Removed information about Pipelines being a feature in Technology Preview.

Setting up the Registry → Securing and Exposing the Registry

Removed references to the deprecated --api-version flag.

Configuring Custom Certificates

Clarified custom certificate configuration locations in the Configuring Custom Certificates section.

Working with HTTP Proxies

Added step to Proxying Docker Pull for finding the registry service IP.

Setting up a Router → Using the F5 Router Plug-in

Removed references to the deprecated --credentials option.

Installing a Cluster → Prerequisites

Added information about required ports for Aggregated Logging.

Configuring Global Build Defaults and Overrides

Added notes to explain additional values in the /etc/origin/master/master-config.yaml file in the Manually Setting Global Build Defaults section.

Aggregate Logging Sizing Guidelines

Updated scale testing guidelines.

Customizing the Web Console

Added information about setting extension properties.

Configuring Persistent Storage → Dynamic Provisioning and Creating Storage Classes

Added additional details to the glusterfs-storageclass.yaml file example in the GlusterFS Object Definition section.

Master and Node Configuration

Updated the Audit Configuration section description and added Audit Configuration Parameters.

Installing a Cluster → Prerequisites

Added sizing guidelines for etcd service nodes within the Minimum Hardware Requirements table.

Setting up the Registry → Securing and Exposing the Registry

Added a Note admonition about mounting secrets to service accounts.

Setting up the Registry → Extended Registry Configuration

Updated with new oc rollout commands.

Setting up a Router → Using the Default HAProxy Router

Added the ARP Cache Tuning for Large-scale Clusters section.

Added information about security caveats and ownership claims of host names and subdomains.

Added a new Using Wildcard Routes (for a Subdomain) section.

Adding Hosts to an Existing Cluster

Updated quick installer instructions to use the new scaleup command.

Configuring Authentication and User Agent

Clarified the difference between /api and /oapi in the User Agent section.

Configuring for Azure

New topic on how OpenShift Container Platform can be configured to access an Azure infrastructure, including using Azure disk as persistent storage] for application data.

Configuring Persistent Storage → Persistent Storage Using Azure Disk

New topic on how to provision your OpenShift Container Platform cluster with persistent storage using Azure.

Persistent Storage Examples → Complete Example of Dynamic Provisioning Using GlusterFS

New topic providing an end-to-end example of how to dynamically provision GlusterFS volumes.

Configuring Pipeline Execution

Added information about setting up an external Jenkins server.

Configuring Global Build Defaults and Overrides

Added examples for node selectors in build configurations.

Configuring Persistent Storage → Volume Security

Removed nfsnobody references.

Configuring Global Build Defaults and Overrides

Added image label example to build file examples.

Configuring Pipeline Execution

Noted that for jenkinsPipelineConfig, the autoProvisionEnabled value defaults to true if unspecified.

Aggregating Container Logs

Updated with new oc rollout commands.

Added clarification regarding ConfigMaps and output of oc new-app.

Customizing the Web Console

Added the Configuring Catalog Categories section.