This is the 3.11 release of OpenShift Origin.

Backwards Compatibility

• auth: The auth reconcile command is now deprecated as its functionality is part of the server #20177
  • The CLI command is now identical to the upstream auth reconcile and no longer updates roles
• auth: The cluster-reader RBAC role is now an aggregated role to simplify adding new permissions #20279
• cli: oc patch is now consistent with the kubectl patch command #20665
• cli: oc types is now deprecated - use oc api-resources instead #21000
• security: If the scheduler.alpha.kubernetes.io/node-selector annotion is set on a namespace, openshift.io/node-selector is now ignored #21058
• server: The openshift start node functionality and openshift start have been removed - the Kubelet must now be started directly #20344, #20717
  • By using the Kubelet directly we make nodes easier to manage and more consistent with the upstream.
  • Future releases will remove other parts of openshift start master.

Changes

Roadmap for the v3.11 release

v3.11.0 (2018-10-10) Full Changelog

API

• build: Allow dashes to be used in the environment variable names in builds #20738
• image: Return information about image layers that are associated with an image stream to improve registry performance #19969, #20643
• security: Promote sysctl annotations to fields in SecurityContextConstraints #20151

Component updates

• Updated to Kubernetes v1.11.0-62-gd4cacc0 + patches
  • 62943: set updated replicas in statefulsets #20347
  • 64378: Don't reset global timeout on each for loop iteration #20452
  • 64426: Clean up fake mounters. #20117
  • 64447: Add block volume support to internal provisioners #20058
  • 64541: Add more kubectl auth reconcile flags #20281
  • 64860:checkLimitsForResolvConf for the pod create and update events instead of checking period #20070
  • 64879: Add block volume support to Cinder volume plugin #20270

Features

• build: Support ConfigMaps as sources in build definitions - allows you to have config from the build #19655, #20064
• cli: Add oc image append which can add a new layer or change metadata on a Docker image against a remote registry #20027
• cli: Add oc image extract to extract all or part of an image to disk from any platform #20466
• cli: Support SSPI (Kerberos authentication) on Windows for the command line #11371
• cli: Include the kubectl binary in release output #20932, #20958, #20900
• network: Support automatic and highly available egress IPs for applications , , , ,

Bugs

• auth: Add namespaced servicebrokers, serviceclasses and serviceplans to admin/edit/view ClusterRoles #20852
• auth: Update GitLab IDP to support OIDC #19997
• auth: Use the upstream RBAC roles for reconciliation #20638
• build: Ensure OOMKilled reason from pods are reported on build status #20297
• build: Move deployer and build binaries into oc #20011 #20008
• build: Remove false alarm warning for repo binary input on oc start-build #20100
• cli: Allow patching configapi using oc patch #20642
• cli: Honor 'oc edit' output format

Release SHA256 Checksums

The latest artifacts are always located at https://artifacts-openshift-release-3-11.svc.ci.openshift.org/zips/

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  CHECKSUM
4b0f07428ba854174c58d2e38287e5402964c9a9355f6c359d1242efd0990da3  openshift-origin-client-tools-v3.11.0-0cbc58b-linux-64bit.tar.gz
9bfcd70df56d902b2cd39dea06e73f4c5451ef9e2ad0e8d6d5b27a92af8503fc  openshift-origin-server-v3.11.0-0cbc58b-linux-64bit.tar.gz
75d58500aec1a2cee9473dfa826c81199669dbc0f49806e31a13626b5e4cfcf0  openshift-origin-client-tools-v3.11.0-0cbc58b-mac.zip
cdb84cc0000d0f0983120f903b2cad7114527ce2a9c4eb1988986eda7b877bfa  openshift-origin-client-tools-v3.11.0-0cbc58b-windows.zip