v1.1.4

This is a feature and bug fix release on top of OpenShift Origin v1.1.x.

API Changes

• oc rsh now launches /bin/sh, not /bin/bash. To have the old behavior, run oc rsh NAME -- /bin/bash

Features

Upstream components

• Updated Kubernetes to v1.2.0 pre-beta.0 62e5743
• Updated etcd to v2.2.5

Command-line usability

• Add oc create service account to make it easier to create a new service account
• Add a new "oc debug" command that makes it easy to get a shell in a misbehaving pod - clones the exact environment of the running deployment config, replication controller, or pod, but replaces the run command with a shell.
• Add a command for updating deployment and build config triggers - oc set trigger
• Add a command for updating liveness and readiness probes on deployment config - oc set probe
• Display more information about liveness and readiness probes in the oc status and oc describe commands
• Improve oc describe deploymentconfig/NAME to show more useful info
• Allow build configuration environment variables to be set with oc set env bc/NAME, like deployment configs
• oc status will now warn when a build config is missing one or more of the image streams it depends on

Web Console

• More detailed pod status on all pages
• Better status and alert messages
• Show events on more objects and allow the events table to be filtered and sorted
• Improve Dockerfile build keyword highlighting when editing builds
• Display more accurate information about routes based on which addresses the router exposed them under

Administration

• Support service accounts on router and registry
  • The router can now be created without specifying --credentials and it will use the router service account in the current namespace
  • The registry will also use a service account if --credentials is not provided. Otherwise, it will set the values from the --credentials file as environment on the generated deployment config.
• Add support for security context constraints in oc describe
• Increase the default HostSubnetLength value for OpenShift SDN to 9 (allowing 512 nodes by default) and broaden the default ClusterNetworkCIDR to 10.128.0.0/14 to allow 512 pods each for those 512 nodes.
• Increase the default MaxPodsPerNode setting to 110 to reflect updated capacity.
• Allow extended user attributes to be set by an authenticating proxy
• The diagnostics command has graduated from experimental and now appears as oadm diagnostics
• The HAProxy router allows the public HTTP and HTTPS ports it serves on to be overriden
• The FSGroup for the namespace is now enforced and defaulted on all pods created, and the user in the container should be a member of that group.

Bug fixes

• Fixes to dynamic provisioners to prevent creating multiple volumes for one claim
• Host value should be written to rejected route status by the routers
• Use the correct HOME directory on Windows in the CLI
• Rolling deployments with no surge and a maxUnavailable less than 100% will now preserve at least one pod during a rolling update (if scale is > 1)
• If a node is started and Docker is not available or would likely fail to connect, print more information to help a user debug why.
• Remove invalid flags from oc, oadm, and openshift binary bash tab-completion scripts
• oc new-app could fail when Docker environment variables were set but Docker was not available
• Increase binary build timeout from 1 minute to 5 minutes to allow pods to schedule more effectively
• On some Linux kernel versions, HAProxy could lose track of some connections that were pending on its socket while a graceful reload was happening. Setting the DROP_SYN_DURING_RESTART environment variable on the HAProxy router to 1 will drop SYN packets while HAProxy is in the process of reloading, ensuring the client retries the connection. Future kernel versions will remove the need for this workaround.
• Rapid router reloads could cause temporary unavailability of some routes - now wait for reload until the new HAProxy process is completely started
• If an image import failed, oc import-image would sometimes be unable to reimport another image.
• oc apply was broken when passed a List of objects, so commands like oadm registry -o yaml | oc apply -f - would fail.

Release SHA256 checksums

c6f16a023b5c685932b0a525e09d086de7253610c135e492e35b3f255f3b190c  openshift-origin-client-tools-v1.1.4-3941102-linux-32bit.tar.gz
da1061193596ca760dd1fea15858a44122e5524c2cba057275257e234d1999bd  openshift-origin-client-tools-v1.1.4-3941102-linux-64bit.tar.gz
a8f4d1fe1e8ab555d4072f1b3f8efcdae472dc53795262906c9671d5294bfb24  openshift-origin-client-tools-v1.1.4-3941102-mac.zip
b05877aab75004cc30181f25960cfc3c09b5336678fc1cbad80c51848ed15a0f  openshift-origin-client-tools-v1.1.4-3941102-windows.zip
fd183fbcdcfa12f28f69bf5b23dd2a5006c316906a88655d01286d6547b69280  openshift-origin-server-v1.1.4-3941102-linux-64bit.tar.gz