gnelson/ocp-docs-suggestions-1k-pr huggingface dataset:
Original: * Before this update, during an upgrade of the {pipelines-title} version, automatic updates were enabled for the Chains component, even if you disabled them before. With this update, the setting for automatic updates for the Chains component does not change during a version upgrade.
Revised: * Before this update, during an upgrade of the {pipelines-title} version, automatic updates were enabled for the Chains component, even if previously disabled. With this update, the automatic updates setting for the Chains component does not change during a version upgrade.
Original: * Before this update, if you used the `buildah` task shipped in the `openshift-pipelines` namespace and specified an entitlement secret, {pipelines-shortname} logged a `permission denied` error. By default, the task expected `ReadWrite` permissions on all directories. However, it used the entitlement secret as a volume and this secret was mounted with `ReadOnly` permissions. With this update, the expected permissions are corrected and you can use the `buildah` task successfully without a permission error.
Revised: * Before this update, if you used the `buildah` task, which was shipped in the `openshift-pipelines` namespace and specified an entitlement secret, {pipelines-shortname} logged a `permission denied` error. By default, the task expected `ReadWrite` permissions on all directories; however, the task used the entitlement secret as a volume and this secret was mounted with `ReadOnly` permissions. With this update, the expected permissions are corrected and you can use the `buildah` task successfully without a permission error.
Original: * Before this update, during an upgrade of the {pipelines-title} version, automatic updates were enabled for the Chains component, even if previously disabled. With this update, the setting for automatic updates setting for the Chains component does not change during a version upgrade.
Revised: * Before this update, automatic updates were enabled for the Chains component during an upgrade of the {pipelines-title} version,  even if you had previously disabled the automatic updates . With this update, the automatic updates setting for the Chains component does not change during a version upgrade.
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
Revised: fips: true # <1>
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
Revised: <1> Specify whether to enable or disable the FIPS mode. If you do not specify `true` or `false`, `false` is selected automatically. If the FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and instead use the cryptography modules that are provided with {op-system}.
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
Revised: <2> Specify the location of the key that is required to decrypt the device. You cannot change this value.
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
Revised: . Choose the appropriate method to create Butane configuration files for the control plane and compute nodes:
** For installations on DASD-type disks, create a file named `main-storage.bu` by using the following Butane configuration for a control plane node with disk encryption, for example:
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
Revised: fips: true # <1>
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
Revised: <1> Specify whether to enable or disable the FIPS mode. If you do not specify `true` or `false`, `false` is selected automatically. If the FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and instead use the cryptography modules that are provided with {op-system}.
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
Revised: <2> Specify the location of the key that is required to decrypt the device. You cannot change this value.
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
Revised: ** For installations on FCP-type disks, create a file named `main-storage.bu` by using the following Butane configuration for a control plane node with disk encryption, for example:
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
ifndef::ibm-z-kvm[]
fips: true <3>
kernel_arguments: <4>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
fips: true <2>
kernel_arguments: <3>
endif::ibm-z-kvm[]
- rd.luks.key=/etc/luks/cex.key
Revised: fips: true # <1>
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
ifndef::ibm-z-kvm[]
fips: true <3>
kernel_arguments: <4>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
fips: true <2>
kernel_arguments: <3>
endif::ibm-z-kvm[]
- rd.luks.key=/etc/luks/cex.key
<1> The `pbkdf` option is only required if FIPS mode is enabled. Omit the entry if FIPS is disabled.
ifndef::ibm-z-kvm[]
<2> For installations on DASD-type disks, replace with `device: /dev/disk/by-label/root`.
<3> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<4> Specifies the location of the pass key that is required to decrypt the device.
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
<2> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<3> Specifies the location of the pass key that is required to decrypt the device.
ifndef::ibm-z-kvm[]
coreos.inst.install_dev=/dev/disk/by-id/scsi-<serial_number> \// <1>
coreos.inst.ignition_url=http://<http_server>/master.ign \// <2>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <3>
Revised: coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \ <2>
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
ifndef::ibm-z-kvm[]
fips: true <3>
kernel_arguments: <4>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
fips: true <2>
kernel_arguments: <3>
endif::ibm-z-kvm[]
- rd.luks.key=/etc/luks/cex.key
<1> The `pbkdf` option is only required if FIPS mode is enabled. Omit the entry if FIPS is disabled.
ifndef::ibm-z-kvm[]
<2> For installations on DASD-type disks, replace with `device: /dev/disk/by-label/root`.
<3> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<4> Specifies the location of the pass key that is required to decrypt the device.
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
<2> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<3> Specifies the location of the pass key that is required to decrypt the device.
ifndef::ibm-z-kvm[]
coreos.inst.install_dev=/dev/disk/by-id/scsi-<serial_number> \// <1>
coreos.inst.ignition_url=http://<http_server>/master.ign \// <2>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <3>
rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000 // <4>
ifdef::ibm-z[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type or FCP-type disks.
endif::ibm-z[]
ifdef::ibm-z-lpar[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type, FCP-type, or NVMe-type disks.
endif::ibm-z-lpar[]
<2> Specifies the location of the Ignition config file. Use `master.ign` or `worker.ign`. Only HTTP and HTTPS protocols are supported.
<3> Specifies the location of the `rootfs` artifact for the `kernel` and `initramfs` you are booting. Only HTTP and HTTPS protocols are supported.
<4> Specifies the root device. For installations on DASD-type disks, replace with `rd.dasd=0.0.xxxx` to specify the DASD device.
Revised: <1> Specify the location of the Ignition configuration file. Use `master.ign` or `worker.ign`. You can only use HTTP and HTTPS protocols.
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
ifndef::ibm-z-kvm[]
fips: true <3>
kernel_arguments: <4>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
fips: true <2>
kernel_arguments: <3>
endif::ibm-z-kvm[]
- rd.luks.key=/etc/luks/cex.key
<1> The `pbkdf` option is only required if FIPS mode is enabled. Omit the entry if FIPS is disabled.
ifndef::ibm-z-kvm[]
<2> For installations on DASD-type disks, replace with `device: /dev/disk/by-label/root`.
<3> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<4> Specifies the location of the pass key that is required to decrypt the device.
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
<2> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<3> Specifies the location of the pass key that is required to decrypt the device.
ifndef::ibm-z-kvm[]
coreos.inst.install_dev=/dev/disk/by-id/scsi-<serial_number> \// <1>
coreos.inst.ignition_url=http://<http_server>/master.ign \// <2>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <3>
rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000 // <4>
ifdef::ibm-z[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type or FCP-type disks.
endif::ibm-z[]
ifdef::ibm-z-lpar[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type, FCP-type, or NVMe-type disks.
endif::ibm-z-lpar[]
<2> Specifies the location of the Ignition config file. Use `master.ign` or `worker.ign`. Only HTTP and HTTPS protocols are supported.
<3> Specifies the location of the `rootfs` artifact for the `kernel` and `initramfs` you are booting. Only HTTP and HTTPS protocols are supported.
<4> Specifies the root device. For installations on DASD-type disks, replace with `rd.dasd=0.0.xxxx` to specify the DASD device.
Revised: <2> Specify the location of the `rootfs` artifact for the `kernel` and `initramfs` that you want to boot. You can use only HTTP and HTTPS protocols.
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
ifndef::ibm-z-kvm[]
fips: true <3>
kernel_arguments: <4>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
fips: true <2>
kernel_arguments: <3>
endif::ibm-z-kvm[]
- rd.luks.key=/etc/luks/cex.key
<1> The `pbkdf` option is only required if FIPS mode is enabled. Omit the entry if FIPS is disabled.
ifndef::ibm-z-kvm[]
<2> For installations on DASD-type disks, replace with `device: /dev/disk/by-label/root`.
<3> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<4> Specifies the location of the pass key that is required to decrypt the device.
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
<2> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<3> Specifies the location of the pass key that is required to decrypt the device.
ifndef::ibm-z-kvm[]
coreos.inst.install_dev=/dev/disk/by-id/scsi-<serial_number> \// <1>
coreos.inst.ignition_url=http://<http_server>/master.ign \// <2>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <3>
rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000 // <4>
ifdef::ibm-z[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type or FCP-type disks.
endif::ibm-z[]
ifdef::ibm-z-lpar[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type, FCP-type, or NVMe-type disks.
endif::ibm-z-lpar[]
<2> Specifies the location of the Ignition config file. Use `master.ign` or `worker.ign`. Only HTTP and HTTPS protocols are supported.
<3> Specifies the location of the `rootfs` artifact for the `kernel` and `initramfs` you are booting. Only HTTP and HTTPS protocols are supported.
<4> Specifies the root device. For installations on DASD-type disks, replace with `rd.dasd=0.0.xxxx` to specify the DASD device.
ifdef::ibm-z-kvm[]
coreos.inst.ignition_url=http://<http_server>/master.ign \// <1>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <2>
rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000
Revised: rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000 <4>
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
ifndef::ibm-z-kvm[]
fips: true <3>
kernel_arguments: <4>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
fips: true <2>
kernel_arguments: <3>
endif::ibm-z-kvm[]
- rd.luks.key=/etc/luks/cex.key
<1> The `pbkdf` option is only required if FIPS mode is enabled. Omit the entry if FIPS is disabled.
ifndef::ibm-z-kvm[]
<2> For installations on DASD-type disks, replace with `device: /dev/disk/by-label/root`.
<3> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<4> Specifies the location of the pass key that is required to decrypt the device.
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
<2> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<3> Specifies the location of the pass key that is required to decrypt the device.
ifndef::ibm-z-kvm[]
coreos.inst.install_dev=/dev/disk/by-id/scsi-<serial_number> \// <1>
coreos.inst.ignition_url=http://<http_server>/master.ign \// <2>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <3>
rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000 // <4>
ifdef::ibm-z[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type or FCP-type disks.
endif::ibm-z[]
ifdef::ibm-z-lpar[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type, FCP-type, or NVMe-type disks.
endif::ibm-z-lpar[]
<2> Specifies the location of the Ignition config file. Use `master.ign` or `worker.ign`. Only HTTP and HTTPS protocols are supported.
<3> Specifies the location of the `rootfs` artifact for the `kernel` and `initramfs` you are booting. Only HTTP and HTTPS protocols are supported.
<4> Specifies the root device. For installations on DASD-type disks, replace with `rd.dasd=0.0.xxxx` to specify the DASD device.
ifdef::ibm-z-kvm[]
coreos.inst.ignition_url=http://<http_server>/master.ign \// <1>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <2>
rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000
<1> Specifies the location of the Ignition config file. Use `master.ign` or `worker.ign`. Only HTTP and HTTPS protocols are supported.
<2> Specifies the location of the `rootfs` artifact for the `kernel` and `initramfs` you are booting. Only HTTP and HTTPS protocols are supported.

Revised: <2> Specify the location of the Ignition configuration file. Use `master.ign` or `worker.ign`. You can use only HTTP and HTTPS protocols.
Original: storage:
- cex:
enabled: true
options: <1>
- --pbkdf
- pbkdf2
ifndef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root <2>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
device: /dev/disk/by-partlabel/root
label: luks-root
name: root
wipe_volume: true
ifndef::ibm-z-kvm[]
fips: true <3>
kernel_arguments: <4>
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
fips: true <2>
kernel_arguments: <3>
endif::ibm-z-kvm[]
- rd.luks.key=/etc/luks/cex.key
<1> The `pbkdf` option is only required if FIPS mode is enabled. Omit the entry if FIPS is disabled.
ifndef::ibm-z-kvm[]
<2> For installations on DASD-type disks, replace with `device: /dev/disk/by-label/root`.
<3> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<4> Specifies the location of the pass key that is required to decrypt the device.
endif::ibm-z-kvm[]
ifdef::ibm-z-kvm[]
<2> Specifies whether to enable or disable FIPS mode. By default, FIPS mode is not enabled. If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.
<3> Specifies the location of the pass key that is required to decrypt the device.
ifndef::ibm-z-kvm[]
coreos.inst.install_dev=/dev/disk/by-id/scsi-<serial_number> \// <1>
coreos.inst.ignition_url=http://<http_server>/master.ign \// <2>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <3>
rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000 // <4>
ifdef::ibm-z[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type or FCP-type disks.
endif::ibm-z[]
ifdef::ibm-z-lpar[]
<1> Specifies a unique fully qualified path depending on disk type. This can be DASD-type, FCP-type, or NVMe-type disks.
endif::ibm-z-lpar[]
<2> Specifies the location of the Ignition config file. Use `master.ign` or `worker.ign`. Only HTTP and HTTPS protocols are supported.
<3> Specifies the location of the `rootfs` artifact for the `kernel` and `initramfs` you are booting. Only HTTP and HTTPS protocols are supported.
<4> Specifies the root device. For installations on DASD-type disks, replace with `rd.dasd=0.0.xxxx` to specify the DASD device.
ifdef::ibm-z-kvm[]
coreos.inst.ignition_url=http://<http_server>/master.ign \// <1>
coreos.live.rootfs_url=http://<http_server>/rhcos-<version>-live-rootfs.<architecture>.img \// <2>
rd.zfcp=0.0.5677,0x600606680g7f0056,0x034F000000000000
<1> Specifies the location of the Ignition config file. Use `master.ign` or `worker.ign`. Only HTTP and HTTPS protocols are supported.
<2> Specifies the location of the `rootfs` artifact for the `kernel` and `initramfs` you are booting. Only HTTP and HTTPS protocols are supported.

Revised: <3> Specify the location of the `rootfs` artifact for the `kernel` and `initramfs` that you want to boot. You can use only HTTP and HTTPS protocols.