Skip to content

release-notes.md

Latest commit

 

History

History
352 lines (272 loc) · 12.3 KB

release-notes.md

File metadata and controls

352 lines (272 loc) · 12.3 KB

RELEASE NOTES

2026-01-23

  • Add support for DNS provider deSEC
  • Fix copy of oc and kubectl CLIs
  • Fix bug when undefining VMs without storage
  • Fix bug when parsing GitHub organizations/teams
  • Disable SecureBoot
  • Enable boot menu
  • Fix Mangle ignition config error with openshift_version = "stable"
  • Build only RHEL10 images by default

2026-01-09

  • Bump OpenShift Version to stable - it will automatically install the stable version.
  • Red Hat Enterprise Linux 10
  • Auto-detected stable openshift version
    • Removed following variables: opm_dest, coreos_version, coreos_file, coreos_image_location openshift_client_version, opm_version
  • Fix issue #333 - Improve ssh-keyget command
  • Remove redhat_subscription_pool, not needed anymore
  • Cleanup: Remove pipeline/ directory
  • Update to ansible-automation-platform-2.6
  • Add cloudflare_api_token support ( Issue #86 )
  • Update proxy doc
  • Add docs about how to change ssh port on rhel ( Issue #292 )
  • Update Hetzner Firewall documentation - added IPv6 ( Issue #291 )
  • Added pre-check routines to avoid failing at a later time
    • all parameters which are required have to be provided, otherwise the playbook will fail early.
  • Removed blocker for installation of OpenShift 4.12 with IPv6 enabled. Installation is now completing without issues.
  • Switch from k8s.gcr.io to registry.k8s.io ( Issue #305 )
  • Update the entire ansible execution environment ( Issue #323 ) quay.io/redhat-emea-ssa-team/hetzner-ocp4-ansible-ee:202601022229
  • Added process to create qcow2 image using Red Hat Insights Image Builder, through the ansible-image-builder role
    • Added new process to documentation
    • Implements #328
  • Updated process to use ansible-navigator
  • Updated EE to have image_builder collection and guestfs-tools installed

2025-04-10

  • Fixed the issue that nfs storage creation did not work with CentOS 10

2025-04-04

  • Add support for CentOS 10
  • Use latest version of hetzner-ocp4-ansible-ee
  • Use module community.general.lvol instead of community.general.system.lvol (which no longer seems to be available)
  • Add troubleshooting section and table of content to README.md
  • Bump OpenShift version to 4.18.3
  • Update execution env.

2024-09-28

  • Added gandi as option to docs and example-cluster.yml
  • Bump OpenShift Version to 4.16.13
  • Correct Jinja Code for IDP Management.
  • Allow faster rebuild if the machine is already in rescue mode
  • Allow naming of the VG and to set the raid level.

2023-12-27

  • Bump OpenShift version to 4.14.6
  • Improve & Fix ( #294 ) air-gapped documentation
  • Improve RHEL 9 bare metal installation ( #302 )
  • Fixed #296 unable to renew certificate if already expired
  • Fixed issue #295 - web-terminal add-on

2023-06-22

  • Bump OpenShift version to 4.13.3
  • Add support of
    • CentOS Stream 9 base
  • Remove support of CentOS 8 and Rocky 8
  • Added new option fips to allow FIPS enabled cluster setups
  • Add Debian 11 support for root server
  • Make oc-mirror binary an opt-in
  • Introduce ansible-vault for credentials

2023-04-14

  • Bump OpenShift version to 4.12.10
  • Fixed #249 Hetzner DNS Provider: Let's Encrypt DNS Record Fails w/ multiple Hetzner DNS Zones: "HTTP Error 422: Unprocessable Entity"
  • Fixed #241 Hetzner DNS Api not idempotent - playbook cannot be rerun
  • Added RHEL 9 installation nodes
  • Fixed #264 rhcos variant has been removed; use openshift variant instead: https://coreos.github.io/butane/upgrading-openshift/
  • Fixed #246 Use relative DNS records for Gandi
  • Fixed #265 Looks like ./ansible/99-destroy-cluster.yml doesn't work well anymore.

2022-12-17

  • Bump openshift version to 4.11.12
  • Update ansible-automation-platform to 2.3
  • Fixed problem with ansible_python_interpreter during 00-provision-hetzner.yml
  • Added new option hetzner_size_of_libvirt_images
  • Added new option redhat_subscription_activationkey, redhat_subscription_org_id, redhat_subscription_pool to handle Red Hat entitlement during 01-prepare-host.yml
  • Introduce artifacts_dir
  • Change ssh public key and kubeconfig handling to support remote execution
  • Handling reboot after new kernel is installed
  • Added support for remote execution (execute playbooks on your laptop)
  • Added install_config_capabilities configuration
  • Added Gandi as a DNS provider
  • Added instructions for RHEL9 image creation
  • Added Rocky Linux 9 support

2022-06-19

  • Bump OpenShift Version to 4.10

  • Rewrite playbooks to run in ansible-navigator New useage:

    • Install ansible navigator & configure ssh

    • Run playbooks: ansible-navigator run -m stdout ./ansible/setup.yml

  • Build ansible execution environment: quay.io/redhat-emea-ssa-team/hetzner-ocp4-ansible-ee:master

2022-02-16

  • Introduce ansible-lint pre-commit hook and fix eveything
  • Remove CentOS 8 support and add CentOS Stream 8 - updated docs too
  • Fixed issue #200 - added -F to qemu-img cmd
  • Double check lvm device for instance (idempotent)
  • Update air-gapped docs (added mirror registry)
  • Update doc: add vm config notice for acs install

2021-12-17

  • Bump OpenShift Version to 4.9.5
  • Refactor DigitalOcean DNS provider
    • Added IPv6 support
    • Switch to ansible galaxy module Please run ./ansible/setup.yml or ./ansible/01-prepare-host.yml to install ansible galaxy module. Or via: ansible-galaxy collection install community.digitalocean
  • Fixed Issue #185 : IPv6 Single Stack - NFS exports only for IPv4 -> installation fail / not completed
  • Fixed Issue #197 : public_ip & listen_address did not work as expected
  • Add support for different vm storage backend (lvm & qcow2)
  • Added api. to /etc/hosts to be more independent from public DNS
  • Added openshift console and oauth url to internal dns entries
  • Update documentation
    • Redesign the variables table
    • Added link to virt cheatsheet
  • Bump OKD version to 4.8 & OPM to 1.19 (docs only)

2021-07-27

  • Bump OpenShift version to 4.8.2
  • Added TransIP dns provider with #177
  • Added Rocky basis installation with #181
  • Added IPv6 support #182
  • Tested and documented single node installation #176
  • Fixed NFS provisioning #175

2021-04-09

  • Bump OpenShift Version to 4.7.0
  • Add opm installation
  • Add dns provider: hetzner
  • Use absolute path to oc binary
  • Fixed some typos
  • Adds the NTP Add-On

2020-12-28

  • Add support of 3 node compact cluster (Fixed issue #158 )
  • Bump OpenShift version to 4.6.8
  • Fixed issue #147 - Add recommended hetzner firewall documentation
  • Add support for add-ons (post_install_add_ons)
  • Clean DNS provider handling and dependencies managment
  • Added an option to make masters un/schedulable
  • Fixed issue #162 Stop Cluster - Check openshift-4-loadbalancer-demo2.service FAILS
  • Fixed issue #156 - podman command in readme.md not showing stats
  • Fixed issue #152 Set installconfig.networking.machineNetwork in install-config.yaml
  • Do not use kubeconfig directly anymore because of #149
  • Fixed issue qemu-img: Unable to initialize gcrypt #160
  • Cleanup OS dependencies
    • Cleanup DNS provider dependencies - only install dependencies if needed
    • Cleanup DNS provider dependencies - only install dependencies if needed
    • Add missing package (RHEL8)
    • Remove pip install and use rpm's if possible
  • Remove RHEL 7 support (fixed issue #153)
  • Fixed issue #146 - BUG in ansible-playbook ansible/setup - failed: iptables: No chain/target/match by that name.
  • Introduce openshift_mirror variable - setup your own openshift mirror to get rid of connections problems.

2020-11-04

Bump OpenShift version to 4.6

SDN plugin defaults to OVNKubernetes

cluster.yaml support sdn_plugin_name variable. Valid values are OVNKubernetes and OpenShiftSDN

Add Azure DNS Support

dns_provider: [route53|cloudflare|gcp|azure]
# Azure
azure_client_id: client_id
azure_secret: key
azure_subscription_id: subscription_id
azure_tenant: tenant_id
azure_resource_group: dns_zone_resource_group

Add okd4 support

cluster.yml example:

image_pull_secret: '{"auths":{"fake":{"auth": "bar"}}}'

openshift_version: 4.5.0-0.okd-2020-10-15-235428
openshift_location: https://github.com/openshift/okd/releases/download/{{ openshift_version }}
coreos_version: 32.20201004.3.0
coreos_download_url: https://builds.coreos.fedoraproject.org/prod/streams/stable/builds/32.20201004.3.0/x86_64/fedora-coreos-32.20201004.3.0-qemu.x86_64.qcow2.xz
coreos_csum_str: 5a4f80e85b66d3c7a0d5789d3f4f65d30a57871b6fe49dc791e490763f1eacdb

Thanks to @sandrich for contribution.

Fixes

  • Fixed #123 useage of letsencrypt_account_email & cloudflare_account_email
  • add mode (0644) for ignition file
  • Update auth_htpasswd example with know password - because of #133
  • Add work-a-round for ansible/ansible#71420
  • Fixed #125 Fresh centos 8.2 -- firewalld reload failed because "FirewallD is not running"

2020-09-24

Update

README.md

Added

docs/auth_passwd.md

images/auth_passwd.png

2020-07-30

Bump OpenShift Version to 4.5.2

feat(autostart): add autostart option for VMs

Added option vm_autostart default (false).

Added docs/pci-passthrough.md

Big fixes

  • fix(typo): correctly name identity_providers
  • Cleanup post install tag name use post-install instead of postinstall
  • Use --kubeconfig instead of --config
  • Fixed #116 - LE certificate is not configured after fresh installation.
  • Add daemon_reload to systemctl service installation
  • Update ansible repo for RHEL
  • Update docs/air-gapped.md
  • Add draft tekton pipeline to test hetzner-ocp4

2020-07-03

Use GitHub as a possible IdP

You can now use GitHub as an IdP. In order to configure GitHub you have to add a new OAuth App.

As a redirectUrl please set https://<your_public_domain>/oauth2callback/GitHub

Be sure to only add one of of organizations or teams since the teams option already includes the information about the specific organizations.

Add dns_provider: none

With dns_provider: none the playbooks will not create public dns entries. (It will skip letsencrypt too) Please create public dns entries if you want to access your cluster.

Add public_ip option

Override for public ip entries. defaults to hostvars['localhost']['ansible_default_ipv4']['address'].

Update Centos8

  • Configure firewalld
  • Fixed host prep (Add missing packages & documentation)

Bugfixes

  • Fix #100 - Compute nodes doesn't join at intallation
  • Fix #101 by automating coreos crc
  • Fix typos
  • Fix(permissions): make all binaries are executable
  • fix(sudoer): fix sudoers in cluster-example.yml

Added some docs:

2020-04-18

Use RBAC instead of changing SCC member for NFS provisioner

Instead of

oc adm policy add-scc-to-user hostmount-anyuid \
    -n openshift-nfs-provisioner \
    -z nfs-client-provisioner

create a role and a binding:

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: scc-hostmount-anyuid
  namespace: "openshift-nfs-provisioner"
rules:
- apiGroups:
  - security.openshift.io
  resourceNames:
  - hostmount-anyuid
  resources:
  - securitycontextconstraints
  verbs:
  - use
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: sa-to-scc-hostmount-anyuid
  namespace: "openshift-nfs-provisioner"
subjects:
  - kind: ServiceAccount
    name: nfs-client-provisioner
roleRef:
  kind: Role
  name: scc-hostmount-anyuid
  apiGroup: rbac.authorization.k8s.io

2020-04-01

Update air-gapped docs

Add REGISTRY_COMPATIBILITY_SCHEMA1_ENABLED=true to air-gapped registry. That solve some skopeo copy problemes.

Support for disabling automatic Let's Encrypt certificates for apps and api

Add varialbe letsencrypt_disabled: true to cluster yaml to disable Let's Encrypt certificates. Variable defaults to true.

Added release notes doc

Just simple doc to track new features and fixes.