ROX-30773: Release notes for 4.9

[kcarmichael08]

Version(s): 4.9

Issue

Link to docs preview

QE review: ACS has no QE, approved by SMEs

• QE has approved this change.

Additional information:

[openshift-ci-robot]

@kcarmichael08: This pull request references ROX-30773 which is a valid jira issue.

Details

In response to this:

Version(s): 4.9

Issue

Link to docs preview:

QE review:

• QE has approved this change.

Additional information:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[ocpdocs-previewbot]

🤖 Mon Oct 27 19:23:15 - Prow CI generated the docs preview:
https://100158--ocpdocs-pr.netlify.app
Complete list of updated preview URLs: artifacts/updated_preview_urls.txt

[openshift-ci-robot]

@kcarmichael08: This pull request references ROX-30773 which is a valid jira issue.

Details

In response to this:

Version(s): 4.9

Issue

Link to docs preview

QE review:

• QE has approved this change.

Additional information:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[mclasmeier]

IMHO we need more in the release notes about the new admission controller config stuff.

Also, in the "deprecated features" section we list a couple of roxctl options, but we are not listing the now newly deprecated Helm chart and SecuredCluster CR fields.

[mclasmeier]

Aren't these two separate topics?

Like, we have the new failure policy stuff on the one hand and the new configuration style for enforcement on the other hand?

I don't really see it so that the second bullet point belongs to "Admission controller failure setting enhancements". @clickboo

[clickboo]

Aren't these two separate topics?

Like, we have the new failure policy stuff on the one hand and the new configuration style for enforcement on the other hand?

I don't really see it so that the second bullet point belongs to "Admission controller failure setting enhancements". @clickboo

Agree. The title can be changed to Admission Controller Configuration Enhancements and it would be fine.

[openshift-ci]

@kcarmichael08: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[kcarmichael08]

/cherrypick rhacs-docs-4.9

[openshift-cherrypick-robot]

@kcarmichael08: #100158 failed to apply on top of branch "rhacs-docs-4.9":

Applying: Release notes for 4.9
.git/rebase-apply/patch:570: trailing whitespace.
** `admissionControl.failurePolicy`: Determines the action that the cluster should take when an error or timeout happens with the admission controller. If the timeout seconds have been reached and the failure policy is `Ignore`, the API server "fails open" or accepts the create or update request. If the timeout seconds have been reached and the failure policy is `Fail`, the API server rejects the create or update request. 
.git/rebase-apply/patch:660: trailing whitespace.
With this release, the expiration time for cluster registration secrets (CRSes) is changed from a default value of 1 year to a default value of 1 hour. Additionally, you can configure the time period by using the `--valid-until` or `--valid-for` flags with the `roxctl central crs` command. 
.git/rebase-apply/patch:696: trailing whitespace.
With this release, Sensor uses significantly less memory than earlier releases in clusters with large numbers of processes that listen for connections. In extreme-scale environments, for example, clusters with greater than 10 million open ports, Sensor's memory footprint related to open connections, endpoints, and process tracking is reduced by roughly 50%. This improvement helps prevent out-of-memory (OOM) kills. For moderate workloads, such as a few thousand open ports, memory savings typically range between 10 to 15%, depending on workload characteristics. 
.git/rebase-apply/patch:732: trailing whitespace.
* Compliance menus: 
.git/rebase-apply/patch:744: trailing whitespace.
Policy documentation was restructured, simplified, and enhanced. Comprehensive information was added to provide an overview of policy evaluation, structure, and enforcement. Reference information was split out into a separate section. Additionally, documentation errors were corrected. 
warning: squelched 8 whitespace errors
warning: 13 lines add whitespace errors.
Using index info to reconstruct a base tree...
M	_topic_maps/_topic_map.yml
M	modules/common-attributes.adoc
M	release_notes/48-release-notes.adoc
Falling back to patching base and 3-way merge...
CONFLICT (modify/delete): release_notes/48-release-notes.adoc deleted in Release notes for 4.9 and modified in HEAD. Version HEAD of release_notes/48-release-notes.adoc left in tree.
Auto-merging modules/common-attributes.adoc
Auto-merging _topic_maps/_topic_map.yml
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config advice.mergeConflict false"
Patch failed at 0001 Release notes for 4.9

Details

In response to this:

/cherrypick rhacs-docs-4.9

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.