OA63032: NEW FUNCTION - validate RHCOS installer binary versions, support for private CA certificate

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• NEW FUNCTION
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All IBM Foundation for Red Hat OpenShift     *
  *                 (HHRH110) users,                             *
  ****************************************************************
  For IBM Foundation for Red Hat OpenShift (HHRH110) users,
  installation of Red Hat CoreOS Installer is limited to
  versions 4.10.3 and 4.10.16.
  
  For IBM Foundation for Red Hat OpenShift (HHRH110) users,
  support is added to install a private CA certificate, if
  provided on the workflow, enabling the zCX bootloader to create
  an https connection to a private web server for downloading the
  Red Hat CoreOS installer binaries.
  
  Updates to information in the comprehensive collection of
  content for zCX Foundation for Red Hat OpenShift in IBM Docs:
  https://www.ibm.com/docs/en/zcxrhos/1.1.0
  
  zCX Foundation for Red Hat OpenShift 1.1.0
  Installing a cluster with zCX on IBM Z
  Installing RHCOS and starting the OpenShift Container Platform
   bootstrap process
  Procedure
  2. Obtain the Red Hat Enterprise Linux CoreOS (RHCOS) kernel,
     initramfs, and rootfs files from the RHCOS image mirror.
     zCX for OpenShift supports the following RHCOS versions:
     4.10.3 and 4.10.16.
  
  7. Start the zCX for OpenShift bootstrap appliance instance
     using the z/OS Start command. For example, start the OCPBOOT
     zCX for OpenShift instance with the OCPBOOT job name as
     follows:
  
     $ s GLZ,JOBNAME=OCPBOOT,CONF='global/zcx_instances/OCPBOOT
         /start.json'
  
     zCX for OpenShift validates that the SHA256 values of the
     provided kernel and initramfs files are one of the supported
     releases documented in step 2. The instance boot will be
     terminated if the provided files do not match one of the
     supported releases.
  
  KEYWORDS: zCX/K
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ08946

Modules/Macros

• AZDGB1BL
  

Fix information

• Fixed component name

  ZCX SERVER

• Fixed component ID

  5752SCCDE

Applicable component levels

• R7C0 PSY UJ08946

     UP22/08/10 P F208

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.