Conditional Updates are recommended updates associated with known risks.
When no risks apply, the update is recommended – this can be performed by the cluster administrator on both the web console and the OpenShift CLI (oc). When an update is not recommended because a risk might apply, the cluster administrator can view the update from the OpenShift CLI (oc). If the cluster administrator evaluates the potential known risks and decides it is acceptable for the current cluster, they can waive the safety guards and proceed with the update.
Background
The OpenShift update service (OSUS) provides update information to OpenShift Container Platform (OCP) clusters. By default, every OCP cluster connects to the Red Hat hosted OSUS instance for update information. For disconnected or restricted networks, cluster administrators can install their own OSUS.
The OSUS can sometimes remove an update path to protect OpenShift clusters from bugs. This change in update path impacts all OCP clusters for that particular version. This has caused some customer frustration when a bug is only applicable for OCP clusters with specific platforms or configurations.
With OCP 4.10, the OSUS will also provide conditional update recommendations to the Cluster Version Operator (CVO). The CVO evaluates the conditional recommendations and decides if the conditional update is recommended for the cluster or not. For disconnected clusters, it behaves in the same manner as a connected cluster as the conditional updates rely on the local OSUS instance. CVO processing for conditional update recommendations is new in 4.10, so updates from 4.9 to 4.10 will not have access to this new functionality. Updates within 4.10 (z-stream), and updates from 4.10 to future minor releases will be able to benefit from this feature.
The user experience is exactly the same for conditional updates if they are recommended for the cluster. This reduces the frustration of having update paths removed for bugs which do not impact your cluster.
For conditional updates which are not recommended for the cluster, the cluster administrator has convenient access to metadata, such as risk description and documentation links, to evaluate the risk.Note: conditional updates that are not recommended don't show up on the OpenShift web console in 4.10.
Here are some oc CLI examples that show how conditional updates work:
- To list recommended updates, use oc adm upgrade, which will display the presence of any supported but not recommended updates:
$ oc adm upgrade
Cluster version is 4.10.0-fc.1
Upstream is unset, so the cluster will use an appropriate default.
Channel: candidate-4.10 (available channels: candidate-4.10)
Recommended updates:
VERSION IMAGE
4.10.0-rc.5 quay.io/openshift-release-dev/ocp-release@sha256:5ebccbbcbeeb3987f9ee3fa7f593c5e24bdd89efd9c6b2e6d525346e4a235ced
…
4.10.0-fc.4 quay.io/openshift-release-dev/ocp-release@sha256:664ad79f4a5f321c4acd51c737dfce9363e48470dc35732be4b7d156aa7b3936
Additional updates which are not recommended based on your cluster configuration are available, to view those re-run the command with --include-not-recommended.
- To find out about any risks, use the --include-not-recommended:
Upstream is unset, so the cluster will use an appropriate default. Channel: candidate-4.10 (available channels: candidate-4.10)
Recommended updates:
VERSION IMAGE
4.10.0-rc.5 quay.io/openshift-release-dev/ocp-release@sha256:5ebccbbcbeeb3987f9ee3fa7f593c5e24bdd89efd9c6b2e6d525346e4a235ced
…
4.10.0-fc.4 quay.io/openshift-release-dev/ocp-release@sha256:664ad79f4a5f321c4acd51c737dfce9363e48470dc35732be4b7d156aa7b3936
Supported but not recommended updates:
Version: 4.10.0-fc.2
Image: quay.io/openshift-release-dev/ocp-release@sha256:85c6ce1cffe205089c06efe363acb0d369f8df7ad48886f8c309f474007e4faf
Recommended: False
Reason: ModifiedAWSLoadBalancerServiceTags
Message: On AWS clusters for Services in the openshift-ingress namespace… This will not cause issues updating between 4.10 releases. This conditional update is just a demonstration of the conditional update system. https://bugzilla.redhat.com/show_bug.cgi?id=2039339
- Now, let’s update against recommendations with a description of applicable risks:
$ oc adm upgrade --to 4.10.0-fc.2
error: the update 4.10.0-fc.2 is not one of the recommended updates, but is available as a conditional update.To accept the Recommended=False risk and to proceed with update use --allow-not-recommended.
Reason: ModifiedAWSLoadBalancerServiceTags
Message: On AWS clusters for Services in the openshift-ingress namespace… This will not cause issues updating between 4.10 releases. This conditional update is just a demonstration of the conditional update system. https://bugzilla.redhat.com/show_bug.cgi?id=2039339
- To update regardless of any applicable risks, use --allow-not-recommended, which will displays a warning message in case you want to quickly abort:
$ oc adm upgrade --allow-not-recommended --to 4.10.0-fc.2
warning: with --allow-not-recommended you have accepted the risks with 4.10.0-fc.2 and bypassed Recommended=False ModifiedAWSLoadBalancerServiceTags: On AWS clusters for Services in the openshift-ingress namespace…
This will not cause issues updating between 4.10 releases. This conditional update is just a demonstration of the conditional update system. https://bugzilla.redhat.com/show_bug.cgi?id=2039339
Updating to 4.10.0-fc.2
Sobre os autores
Navegue por canal
Automação
Últimas novidades em automação de TI para empresas de tecnologia, equipes e ambientes
Inteligência artificial
Descubra as atualizações nas plataformas que proporcionam aos clientes executar suas cargas de trabalho de IA em qualquer ambiente
Nuvem híbrida aberta
Veja como construímos um futuro mais flexível com a nuvem híbrida
Segurança
Veja as últimas novidades sobre como reduzimos riscos em ambientes e tecnologias
Edge computing
Saiba quais são as atualizações nas plataformas que simplificam as operações na borda
Infraestrutura
Saiba o que há de mais recente na plataforma Linux empresarial líder mundial
Aplicações
Conheça nossas soluções desenvolvidas para ajudar você a superar os desafios mais complexos de aplicações
Programas originais
Veja as histórias divertidas de criadores e líderes em tecnologia empresarial
Produtos
- Red Hat Enterprise Linux
- Red Hat OpenShift
- Red Hat Ansible Automation Platform
- Red Hat Cloud Services
- Veja todos os produtos
Ferramentas
- Treinamento e certificação
- Minha conta
- Suporte ao cliente
- Recursos para desenvolvedores
- Encontre um parceiro
- Red Hat Ecosystem Catalog
- Calculadora de valor Red Hat
- Documentação
Experimente, compre, venda
Comunicação
- Contate o setor de vendas
- Fale com o Atendimento ao Cliente
- Contate o setor de treinamento
- Redes sociais
Sobre a Red Hat
A Red Hat é a líder mundial em soluções empresariais open source como Linux, nuvem, containers e Kubernetes. Fornecemos soluções robustas que facilitam o trabalho em diversas plataformas e ambientes, do datacenter principal até a borda da rede.
Selecione um idioma
Red Hat legal and privacy links
- Sobre a Red Hat
- Oportunidades de emprego
- Eventos
- Escritórios
- Fale com a Red Hat
- Blog da Red Hat
- Diversidade, equidade e inclusão
- Cool Stuff Store
- Red Hat Summit