Chapter 36. Revision History: Cluster Administration

Managing Security Context Constraints

Added a new Example Security Context Constraints Settings section.

Managing Security Context Constraints

Noted the importance of -z flag usage when granting access to service accounts.

Configuring Service Accounts

Noted the importance of -z flag usage when granting access to service accounts.

Managing Nodes

Replaced outdated oadm manage-node --evacuate commands with oc adm drain commands.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Managing Nodes

Added new section on Resetting Docker Storage to free up space on nodes.

Monitoring and Debugging Routers

Added new section on Viewing Statistics.

Handling Out of Resource Errors

Adjusted the math in the Example Scenario.

Garbage Collection

Added clarifying details about the default behavior of garbage collection.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Manging Nodes

Added new section on Resetting Docker Storage to free up space on nodes.

Monitoring and Debugging Routers

Added new section on Viewing Statistics.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Manging Nodes

Added new section on Resetting Docker Storage to free up space on nodes.

Monitoring and Debugging Routers

Added new section on Viewing Statistics.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Manging Nodes

Added new section on Resetting Docker Storage to free up space on nodes.

Monitoring and Debugging Routers

Added new section on Viewing Statistics.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Manging Nodes

Added new section on Resetting Docker Storage to free up space on nodes.

Monitoring and Debugging Routers

Added new section on Viewing Statistics.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Manging Nodes

Added new section on Resetting Docker Storage to free up space on nodes.

Monitoring and Debugging Routers

Added new section on Viewing Statistics.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Manging Nodes

Added new section on Resetting Docker Storage to free up space on nodes.

Monitoring and Debugging Routers

Added new section on Viewing Statistics.

Service Accounts

Changed serviceaccounts to serviceaccount in the User Names and Groups section.

Backup and Restore

Added a new Registry Certificates Backup section.

Managing Networking

Added more information to the VMWare vSphere section.

Opaque Integer Resources

Moved information on opaque integer resources to Administrator Guide

Setting Limit Ranges

Added link to information on how CPU and memory are calculated.

Image Policy

Added note clarifying the need for the image prefix to set the default registry string in the Configuring the ImagePolicy Admission Plug-in section.

Pruning Objects

Added valid units of measurement for --keep-younger-than.

Troubleshooting OpenShift SDN

Changed the Further Help section to Finding Network Issues Using the Diagnostics Tool and added information about the Diagnostic Tool.

Troubleshooting OpenShift SDN

Corrected vxlan0 to vxlan_sys_4789 in the Debugging Local Networking section.

Managing Networking

Added admonition to the Using an Egress Router to Allow External Resources to Recognize Pod Traffic section about Amazon AWS not working with the egress router.

Garbage Collection

Changed the image-gc-high-threshold default value to 85 from 90.

High Availability

Added verbiage clarifying the example outlined in the Configuring a Highly-available Service section.

Setting Quotas

Updated the references to quota and limit ranges, as they are now listed on the Quota page.

Setting Limit Ranges

Updated the references to quota and limit ranges, as they are now listed on the Quota page.

Managing Security Context Constraints

Updated the Add an SCC to a User, Group, or Project section to add notes on granting SCC access and clarify project access.

Cluster Administration Setting Quotas

Removed unsupported limits.storage parameter.

Scheduler

Updated default scheduler policy in the Scheduler Policy section.

Managing Security Context Constraints

Added a warning about pod creation on behalf of a user within the Grant Access to the Privileged SCC section.

Managing Networking

Added important box to the Using an Egress Router to Allow External Resources to Recognize Pod Traffic section.

Garbage Collection

Updated the default value for the maximum-dead-containers setting in the Container Garbage Collection section.

Backup and Restore

Restored and updated steps for adding an etcd member.

High Availability

Removed numbering and added a title to Deploy IP Failover Pod in the Configuring a Highly-available Service section.

Securing Builds by Strategy

Added that custom builds are disabled by default.

Managing Nodes

Fixed markup error in the examples in the Setting Maximum Pods Per Node section.

Managing Networking

Created the Managing Networking topic and added the Enabling Multicast and Enabling NetworkPolicy sections.

Managing Security Context Constraints

Added information about preserving labels and annotations, in addition to groups.

High Availability

In the Check and Notify Scripts section, added that the defaultMode for the mounted configMap files must allow execution.

In the Check and Notify Scripts section, added that when using the oc adm ipfailover command, the user check script overrides the default.

Added new options to oc adm ipfailover to configure the check and notify scripts and to control the period of time the check script runs.

Troubleshooting OpenShift SDN

Added that the ipf-debug.sh script can be used for debugging IP failover problems.