vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Downloading Red Hat OpenShift 4.7 

Access the [Red Hat OpenShift Infrastructure Providers page](https://cloud.redhat.com/openshift/install/vsphere/user-provisioned).



1. Download the installer.
2. Download the Pull Secret.
3. Download the Red Hat Enterprise Linux CoreOS (RHEL CoreOS) OVA image or download the OVA by using the following code. Replace 4.x and 4.x.3 with the current Red Hat OpenShift version, for example, 4.7. curl -O https://mirror.openshift.com/pub/openshift-v4/dependencies/rhcos/4.x/latest/rhcos-4.x.3-x86_64-vmware.x86_64.ova
4. Download the command-line tools if you want to run the commands from a desktop or outside Bastion host.







 Downloading RHEL 8.0 ISO 

Download the ISO image for the bastion host.



1. Go to the Red Hat [Product downloads](https://access.redhat.com/downloads) page.
2. Click RHEL 8.x Release and select the 8.x version.
3. Download the source ISO images.
4. The ISO file name is rhel-8.x-x86_64-dvd.iso.







 Collecting vCenter Server instance details 

Access the IBM Cloud environment details.



1. Log in to the [IBM Cloud for VMware Solutions console](https://cloud.ibm.com/vmware).
2. Click the IBM Cloud for VMware Solutions instance under Deployed Instances.
3. From the Summary page, collect the vCenter and Active Directory information.
4. Click Infrastructure and select the cluster.
5. Under Network Interfaces, collect the Public and Private VLANs.







 Downloading and installing govc 

The govc command is used to upload the OVF and ISO to a datastore from the jump-server or remote device.
Red Hat OpenShift on IBM Cloud toolkit 4.4.0+20201207 4.4.0+20201210 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.4.0+20201210). 







 Change log for worker node fix pack 4.4.31_1528_openshift, released 21 December 2020 

The following table shows the changes that are in the worker node fix pack update 4.4.31_1528_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.4.29_1527_openshift

 Component Previous Current Description 

 HAProxy db4e6d 9b2dca Image update for [CVE-2020-1971](https://nvd.nist.gov/vuln/detail/CVE-2020-1971) and [CVE-2020-24659](https://nvd.nist.gov/vuln/detail/CVE-2020-24659).
Red Hat OpenShift 4.4.11 4.4.16 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.htmlocp-4-4-16). 
 Red Hat OpenShift on IBM Cloud toolkit v4.4.0+20200615 v4.4.0+20200805 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.4.0+20200805). 
 OpenVPN Operator image v1.0.6 v1.0.7 Updated image for [CVE-2020-12049](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12049). 







 Change log for worker node fix pack 4.4.16_1513_openshift, released 17 August 2020 

The following table shows the changes that are in the worker node fix pack update 4.4.16_1513_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.4.14_1512_openshift

 Component Previous Current Description 

 Red Hat OpenShift 4.4.14 4.4.16 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.htmlocp-4-4-16). 
 RHEL 7 packages N/A N/A Updated worker node images with package updates. 







 Change log for worker node fix pack 4.4.14_1512_openshift, released 3 August 2020 

The following table shows the changes that are in the worker node fix pack update 4.4.14_1512_openshift.
Red Hat OpenShift on IBM Cloud toolkit 4.10.0+20220712 4.10.0+20220822 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.10.0+20220822). 







 Change log for worker node fix pack 4.10.28_1533_openshift, released 29 August 2022 

The following table shows the changes that are in the worker node fix pack 4.10.28_1533_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.10.26_1530_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A Worker node package updates for [CVE-2022-2526](https://nvd.nist.gov/vuln/detail/CVE-2022-2526). 
 Red Hat OpenShift on IBM Cloud. 4.10.26 4.10.28 For more information, see the [change log](https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.htmlocp-4-10-28). 
 HAProxy 6514a2 c1634f [CVE-2022-32206](https://nvd.nist.gov/vuln/detail/CVE-2022-32206), [CVE-2022-32208](https://nvd.nist.gov/vuln/detail/CVE-2022-32208) 







 Change log for worker node fix pack 4.10.26_1530_openshift, released 16 August 2022 

The following table shows the changes that are in the worker node fix pack 4.10.26_1530_openshift.
Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20220816 4.9.0+20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220920). 







 Change log for worker node fix pack 4.9.48_1557_openshift, released 26 September 2022 

The following table shows the changes that are in the worker node fix pack 4.9.48_1557_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.9.47_1555_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A N/A 
 RHEL 8 Packages 4.18.0-372.19.1 4.18.0-372.26.1 N/A 
 Red Hat OpenShift on IBM Cloud. 4.9.47 4.9.48 For more information, see the [change log](https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.htmlocp-4-9-48). 







 Change log for worker node fix pack 4.9.47_1555_openshift, released 12 September 2022 

The following table shows the changes that are in the worker node fix pack 4.9.47_1555_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.9.46_1553_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A N/A 
 Red Hat OpenShift on IBM Cloud.
4.8.55 4.8.57 See the [Red Hat OpenShift on IBM Cloud release notes](https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.htmlocp-4-8-57). 
 Red Hat OpenShift on IBM Cloud Control Plane Operator v4.8.0-20230123 v4.8.0-20230220 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0%2B20230220). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.8.0-20230123 v4.8.0-20230220 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0%2B20230220). 
 Red Hat OpenShift on IBM Cloud toolkit 4.8.0+20230123 4.8.0+20230220 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20230220). 







 Change log for worker node fix pack 4.8.57_1590_openshift, released 27 February 2023 

The following table shows the changes that are in the worker node fix pack 4.8.57_1590_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.8.57_1589_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A N/A
Changes since version 4.7.49_1566_openshift

 Component Previous Current Description 

 Red Hat OpenShift on IBM Cloud. 4.7.49 4.7.50 For more information, see the [change log](https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.htmlocp-4-7-50). 
 RHEL 7 Packages 3.10.0-1160.62.1 3.10.0-1160.66.1 Worker node kernel & package updates for [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032), [CVE-2022-1271](https://nvd.nist.gov/vuln/detail/CVE-2022-1271), [CVE-2022-0492](https://nvd.nist.gov/vuln/detail/CVE-2022-0492). 
 HA proxy 36b0307 468c09 [CVE-2021-3634](https://nvd.nist.gov/vuln/detail/CVE-2021-3634). 







 Change log for worker node fix pack 4.7.49_1566_openshift, released 09 May 2022 

The following table shows the changes that are in the worker node fix pack 4.7.49_1566_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.7.49_1563_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A N/A 
 Red Hat OpenShift on IBM Cloud. N/A N/A N/A
Profiling is enabled by default in Red Hat OpenShift, but the profiling data is sent via healthz port and the port must be protected by RBAC. 
 1.4.2 Ensure that the --bind-address option is set to 127.0.0.1. Verify that the scheduler API service is protected by authentication and authorization. Red Hat OpenShift has different operator than vanilla kubernetes, and configuration for its security differs 
 4.1.3 Ensure that the proxy kubeconfig file permissions are set to 644 or more restrictive. If proxy kubeconfig file exists,ensure that permissions are set to 644 or more restrictive. In Red Hat OpenShift, the file is automatically created by sdn controller in a secure manner. 
 4.1.4 Ensure that the proxy kubeconfig file ownership is set to root:root. If proxy kubeconfig file exists,ensure that ownership is set to root:root In Red Hat OpenShift, the file is automatically created by sdn controller in a secure manner. 







 Minor differences 



Minor difference between the CIS Kubernetes Benchmark and the Red Hat OpenShift Compliance Operator Benchmark

 Section CIS Kubernetes benchmark Compliance Operator benchmark Description 

 1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root. Ensure that the Red Hat OpenShift PKI directory and file ownership is set to root:root. Kubernetes > Red Hat OpenShift 
 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive. Ensure that the Red Hat OpenShift PKI certificate file permissions are set to 644 or more restrictive Kubernetes > Red Hat OpenShift 
 1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 Ensure that the Red Hat OpenShift PKI key file permissions are set to 600 Kubernetes > Red Hat OpenShift 
 1.2.4 Ensure that the --kubelet-https option is set to true Use https for kubelet connections. No option specified for Red Hat OpenShift.
Red Hat OpenShift 4.3.23 4.3.28 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.htmlocp-4-3-28). The update resolves CVE-2020-8555 (see the [IBM security bulletin](https://www.ibm.com/support/pages/node/6249891)). 







 Change log for worker node fix pack 4.3.29_1532_openshift, released 20 July 2020 

The following table shows the changes that are in the worker node fix pack update 4.3.29_1532_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.3.27_1528_openshift

 Component Previous Current Description 

 Master Proxy 2.0.15-afe432 1.8.25-384f42 See the [HAProxy change logs](https://www.haproxy.org/download/1.8/src/CHANGELOG). Fixes a connection leak that happens when HAProxy is under high load. 
 RHEL 7 Packages N/A N/A Updated worker node images with package updates for [CVE-2020-12049](https://nvd.nist.gov/vuln/detail/CVE-2020-12049). 
 Red Hat OpenShift 4.3.27 4.3.29 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.htmlocp-4-3-29). 







 Change log for worker node fix pack 4.3.27_1528_openshift, released 6 July 2020 

The following table shows the changes that are in the worker node fix pack update 4.3.27_1528_openshift.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.6.0-20220411 v4.6.0-20220509 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.6.0+20220509). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20220411 v4.6.0-20220509 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.6.0+20220509). 
 Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20220411 4.6.0+20220509 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.6.0+20220509). 







 Change log for worker node fix pack 4.6.57_1583_openshift, released 23 May 2022 

The following table shows the changes that are in the worker node fix pack 4.6.57_1583_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.6.57_1582_openshift

 Component Previous Current Description
Understanding remote health monitoring 

Virtual Private Cloud

Classic infrastructure

Satellite

Red Hat OpenShift on IBM Cloud clusters are connected to [remote health monitoring](https://docs.openshift.com/container-platform/4.13/support/remote_health_monitoring/about-remote-health-monitoring.html) by default. This means clusters report health and usage data to Red Hat unless you opt out. With connected clusters, IBM Cloud is better positioned to support customers when there are issues specific to Red Hat which impact them. Additionally, remote health reporting gives Red Hat insights into how clusters are impacted by product upgrades. If you do not want to send cluster data to Red Hat, you must opt out.

You can choose from the following options for remote health monitoring.



* Send cluster health and usage data is reported to Red Hat. This is the default behavior. No action needed.
* Do not send cluster health and usage data to Red Hat. Action required to opt out.





 Understanding the impacts of opting out 

Review the impacts of opting out.



* Support cases might take longer until resolution if the issue requires Red Hat involvement.
* Your subscription entitlement information must be manually entered via console.redhat.com without the benefit of automatic usage reporting.







 Opting out of remote health reporting 

To opt out of remote health reporting, you must complete the following steps.



* Modify the global pull secret.
* Update your cluster to use the modified pull secret.



Before proceeding with the opt out steps, ensure that you have access to the cluster as a user with the cluster-admin role.

Clusters in Satellite locations with CoreOS-enabled are currently unable to update the global pull secret within their cluster. We are aware of the issue and are addressing it promptly.



1. Download the global pull secret to your local file system by running the following command from the directory of your choice.

oc extract secret/pull-secret -n openshift-config --to=.
2. Edit the .dockerconfigjson file you downloaded in the previous step to remove the cloud.openshift.com entry.
Red Hat OpenShift 4.5.40 4.5.41 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.htmlocp-4-5-41). 
 Red Hat OpenShift Control Plane Operator v4.5.0-20210608 v4.5.0-20210630 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.5.0+20210630). 
 OpenVPN Operator image v1.3.3 v1.3.4 Updated Ansible operator base image to version 1.8.1 to resolve CVEs. 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.5.0-20210608 v4.5.0-20210630 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.5.0+20210630). 
 Red Hat OpenShift on IBM Cloud toolkit 4.5.0+20210608 4.5.0+20210630 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.5.0+20210630). 







 Change log for worker node fix pack 4.5.41_1545_openshift, released 19 July 2021 

The following table shows the changes that are in the worker node fix pack 4.5.41_1545_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.5.40_1544_openshift

 Component Previous Current Description
4.11.8 4.11.12 See the [Red Hat OpenShift on IBM Cloud release notes](https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.htmlocp-4-11-12). Updated to resolve [CVE-2022-3172](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3172). For more information, see the [Security bulletin](https://www.ibm.com/support/pages/node/6997115). 
 Red Hat OpenShift on IBM Cloud Metrics Server and toolkit v4.11.0-20221004 v4.11.0-20221104 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.11.0+20221104). 







 Change log for worker node fix pack 4.11.12_1531_openshift, released 11 November 2022 

The following table shows the changes that are in the worker node fix pack 4.11.12_1531_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.11.12_1530_openshift

 Component Previous Current Description
You can use the oc adm must-gather tool, or the [Diagnostics and Debug Tool](https://cloud.ibm.com/docs/openshift?topic=openshift-debug-tool) to help gather information. 
 Red Hat OpenShift web console You set up and can configure or disable the Red Hat OpenShift web console. The Red Hat OpenShift web console is set up for you. You can't configure or disable the web console. IBM also provides the [Red Hat OpenShift clusters console](https://cloud.ibm.com/kubernetes/clusters?platformType=openshift) to manage your cluster infrastructure. 
 Authentication An OAuth server is provided, but you configure the token settings and identity provider to control access to the cluster. You also manage RBAC to control user access within the cluster. IBM automatically sets up the OAuth server to use IBM Cloud IAM. You can't change the identity provider. IBM Cloud IAM is also set up to [automatically sync to RBAC](https://cloud.ibm.com/docs/openshift?topic=openshift-iam-service-access-roles) so that you can use IAM to manage access to and within the cluster. 
 Container network for clusters The cluster network operator sets up the SDN container network interface (CNI) plug-in. You can change the CNI plug-in, configure multiple networks, or attach a hardware network such as single root I/O virtualization (SR-IOV). Calico is set up for you. You can't change the CNI plug-in, configure multiple networks, or attach a hardware network. 
 Ingress You can use the Ingress operator to set up one or more HAProxy-based Ingress controllers. You can route traffic to your apps by specifying Route or Ingress resources. When you create a cluster, a default Ingress subdomain is set up for you.
Version 3.11 

Review information about version 3.11 of Red Hat OpenShift on IBM Cloud, released 01 Aug 2019.

Red Hat OpenShift version 3.11 is unsupported as of 6 June 2022. Note that you cannot update a cluster from one major version to another.

Looking for general information about updating clusters, or information on a different version? See [Red Hat OpenShift on IBM Cloud version information](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_versions).



  Release timeline 

The following table includes the expected release timeline for version 3.11. You can use this information for planning purposes, such as to estimate the general time that the version might become unsupported.

Dates that are marked with a dagger (†) are tentative and subject to change.



Release history for Red Hat OpenShift on IBM Cloud version 3.11.

 Supported?   Red Hat OpenShift / Kubernetes version  Release date  Unsupported date 

 Unsupported  3.11 / 1.11                             01 Aug 2019   06 Jun 2022 †
: Red Hat OpenShift [4.3.13_1522_openshift master and 4.3.25_1527_openshift worker node](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4323_1527_master) and [3.11.219_1554_openshift master and 3.11.232_1554_openshift worker node](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_311311219_1554_master) fix pack patch updates.





 18 June 2020 

Ingress ALB change log
: Updated the [ingress-auth image build to 413](https://cloud.ibm.com/docs/containers?topic=containers-cluster-add-ons-changelogkube_ingress_changelog).





 16 June 2020 

New! Virtual Private Cloud Generation 2
: You can now create Red Hat OpenShift clusters in your [Gen 2 Virtual Private Cloud (VPC)](https://cloud.ibm.com/docs/vpc?topic=vpc-getting-started). VPC gives you the security of a private cloud environment with the dynamic scalability of a public cloud. VPC Gen 2 clusters are available for version 4 clusters only.
: For more information, check out the following links.



* [Overview of Classic and VPC infrastructure providers](https://cloud.ibm.com/docs/openshift?topic=openshift-infrastructure_providers)
* [Supported virtual machine flavors for VPC Gen 2 worker nodes](https://cloud.ibm.com/docs/openshift?topic=openshift-planning_worker_nodesvm)



: New VPC Gen 2 commands for the CLI



* [VPC cluster limitations](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_limitationsks_vpc_gen2_limits)
: Red Hat OpenShift [3.11.200_1548_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_311311200_1548).





 22 April 2020 

Image pull secrets
: In clusters that run the latest 4.3 version, the default-icr-io and default-<region>-icr-io image pull secrets in the default project are replaced by a single all-icr-io image pull secret that has credentials to all the public and private regional registry domains.

Private network connection to registry
: For accounts that have VRF and service endpoints enabled, image push and pull traffic to IBM Cloud Container Registry is now on [the private network](https://cloud.ibm.com/docs/openshift?topic=openshift-registrycluster_registry_auth_private).





 20 April 2020 

General availability
: Red Hat OpenShift on IBM Cloud version 4.3 is generally available as of 20 April 2020 at 12:00 UTC. Any beta clusters that you created remain for only 30 days. You can [create a GA cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_tutorial) and then redeploy any apps that you used in any expired beta clusters.

Debugging guide
: Added a [Debugging guide](https://cloud.ibm.com/docs/openshift?topic=openshift-ocp-debug) for default Red Hat OpenShift components such as the console, internal registry, or OperatorHub.

Version change log
: [Patch updates](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4312_1520_master) are available for master fix pack 4.3.12_1520_openshift and worker node fix pack 4.3.10_1518_openshift.





 16 April 2020 

Ingress ALB change log