Prepare for 3.3.3 release

rjeberhard · rjeberhard · commit 1b8d73462dc8 · 2021-10-29T14:27:55.000-04:00
diff --git a/documentation/3.3/content/_index.md b/documentation/3.3/content/_index.md
@@ -30,8 +30,8 @@ using the operator to deploy and run a WebLogic domain container-packaged web ap
 ***
 #### Current production release
 
-The [current release of the operator](https://github.com/oracle/weblogic-kubernetes-operator/releases) is 3.3.2.
-This release was published on September 24, 2021. See the [operator prerequisites]({{< relref "/userguide/prerequisites/introduction.md" >}}) and [supported environments]({{< relref "/userguide/platforms/environments.md" >}}).
+The [current release of the operator](https://github.com/oracle/weblogic-kubernetes-operator/releases) is {{< latestVersion >}}.
+This release was published on TBD, 2021. See the [operator prerequisites]({{< relref "/userguide/prerequisites/introduction.md" >}}) and [supported environments]({{< relref "/userguide/platforms/environments.md" >}}).
 
 ***
 
@@ -41,7 +41,7 @@ See the [Release Notes]({{< relref "release-notes.md" >}})  for recent changes t
 
 #### Operator earlier versions
 
-Documentation for prior releases of the operator: [2.5.0](https://oracle.github.io/weblogic-kubernetes-operator/2.5/), [2.6.0](https://oracle.github.io/weblogic-kubernetes-operator/2.6/), [3.0.x](https://oracle.github.io/weblogic-kubernetes-operator/3.0/), and [3.1.x](https://oracle.github.io/weblogic-kubernetes-operator/3.1/).
+Documentation for prior releases of the operator: [2.5.0](https://oracle.github.io/weblogic-kubernetes-operator/2.5/), [2.6.0](https://oracle.github.io/weblogic-kubernetes-operator/2.6/), [3.0.x](https://oracle.github.io/weblogic-kubernetes-operator/3.0/), [3.1.x](https://oracle.github.io/weblogic-kubernetes-operator/3.1/), and [3.2.x](https://oracle.github.io/weblogic-kubernetes-operator/3.2/).
 
 #### Backward compatibility guidelines
 
diff --git a/documentation/3.3/content/faq/namespace-management.md b/documentation/3.3/content/faq/namespace-management.md
@@ -45,7 +45,7 @@ elkIntegrationEnabled: false
 externalDebugHttpPort: 30999
 externalRestEnabled: false
 externalRestHttpsPort: 31001
-image: ghcr.io/oracle/weblogic-kubernetes-operator:3.3.2
+image: ghcr.io/oracle/weblogic-kubernetes-operator:{{< latestVersion >}}
 imagePullPolicy: IfNotPresent
 internalDebugHttpPort: 30999
 javaLoggingLevel: INFO
diff --git a/documentation/3.3/content/faq/oci-lb.md b/documentation/3.3/content/faq/oci-lb.md
@@ -7,14 +7,14 @@ description: "If you are running your Kubernetes cluster on Oracle Container Eng
 for Kubernetes (OKE), then you can have OCI automatically
 provision load balancers for you by creating a `Service` of type
 `LoadBalancer` instead of (or in addition to) installing an
-ingress controller like Traefik or Voyager."
+ingress controller like Traefik."
 ---
 
 If you are running your Kubernetes cluster on Oracle Container Engine
 for Kubernetes (commonly known as OKE), then you can have OCI automatically
 provision load balancers for you by creating a `Service` of type
 `LoadBalancer` instead of (or in addition to) installing an
-ingress controller like Traefik or Voyager.
+ingress controller like Traefik.
 
 OKE Kubernetes worker nodes typically do not have public IP addresses.
 This means that the `NodePort` services created by the operator are
diff --git a/documentation/3.3/content/faq/security-validation.md b/documentation/3.3/content/faq/security-validation.md
@@ -22,7 +22,19 @@ Warnings may be at the level of the JDK, or that SSL is not enabled. Some warnin
 
 - For Model in Image, supply model files with the recommended changes in its image's `modelHome` directory or use [runtime updates]({{< relref "/userguide/managing-domains/model-in-image/runtime-updates.md" >}}).
 
+
+> Msg ID: 090985
+>
+> Description: Production Mode is enabled but the the file or directory /u01/oracle/user_projects/domains/domain/bin/setDomainEnv.sh is insecure since its permission is not a minimum of umask 027.
+>
+> SOLUTION: Change the file or directory permission to at most allow only write by owner, read by group.
+>
+> Description:  The file or directory SerializedSystemIni.dat is insecure since its permission is not a minimum of umask 027.
+>
+> SOLUTION: Change the file or directory permission to at most allow only write by owner, read by group.
+
+When the [WebLogic Image Tool](https://oracle.github.io/weblogic-image-tool/) (WIT) creates a [Domain Home in Image](https://oracle.github.io/weblogic-kubernetes-operator/userguide/managing-domains/choosing-a-model/), you can specify the `--target OpenShift` option so that when WIT creates the domain, it sets the correct permissions in the domain home. When no `--target` option is specified, then the domain home directory has a umask of 027.
+
 {{% notice note %}}
 For information about handling file permission warnings on the OpenShift Kubernetes Platform, see the [OpenShift chapter]({{<relref "/security/openshift.md">}}) in the Security section.
 {{% /notice %}}
-
diff --git a/documentation/3.3/content/quickstart/get-images.md b/documentation/3.3/content/quickstart/get-images.md
@@ -10,7 +10,7 @@ weight: 3
 1. Pull the operator image:
 
     ```shell
-    $ docker pull ghcr.io/oracle/weblogic-kubernetes-operator:3.3.2
+    $ docker pull ghcr.io/oracle/weblogic-kubernetes-operator:{{< latestVersion >}}
     ```
 
 1. Pull the Traefik ingress controller image:
diff --git a/documentation/3.3/content/quickstart/install.md b/documentation/3.3/content/quickstart/install.md
@@ -50,7 +50,7 @@ $ helm install traefik-operator traefik/traefik \
     ```shell
     $ helm install sample-weblogic-operator kubernetes/charts/weblogic-operator \
       --namespace sample-weblogic-operator-ns \
-      --set image=ghcr.io/oracle/weblogic-kubernetes-operator:3.3.2 \
+      --set image=ghcr.io/oracle/weblogic-kubernetes-operator:{{< latestVersion >}} \
       --set serviceAccount=sample-weblogic-operator-sa \
       --set "enableClusterRoleBinding=true" \
       --set "domainNamespaceSelectionStrategy=LabelSelector" \
diff --git a/documentation/3.3/content/release-notes.md b/documentation/3.3/content/release-notes.md
@@ -8,6 +8,7 @@ draft: false
 
 | Date | Version | Introduces backward incompatibilities? | Change - See also, [Change log](#change-log). |
 | --- | --- | --- | --- |
+| TBD, 2021 | v3.3.3 | no | Resolved an issue related to WebLogic cluster replication with Istio 1.10 and resolved several issues related to introspector failure, retry, and status. |
 | September 24, 2021 | v3.3.2 | no | Istio 1.10 support, enhanced liveness and readiness probe customization to support customizing failure thresholds, and additional validations. |
 | August 23, 2021 | v3.3.1 | no | Resolved an issue related to managed Coherence cluster formation when using Istio and another issue related to Secret and ConfigMap validation. |
 | July 20, 2021 | v3.3.0 | no | Auxiliary image support. |
@@ -45,6 +46,11 @@ draft: false
 
 ### Change log
 
+#### Operator 3.3.3
+
+* Resolved an issue related to WebLogic cluster replication when using Istio 1.10 ([#2582](https://github.com/oracle/weblogic-kubernetes-operator/pull/2582)).
+* Resolved several issues related to introspector failure, retry, and status ([#2564](https://github.com/oracle/weblogic-kubernetes-operator/pull/2564), [#2571](https://github.com/oracle/weblogic-kubernetes-operator/pull/2571), [#2578](https://github.com/oracle/weblogic-kubernetes-operator/pull/2578), [#2580](https://github.com/oracle/weblogic-kubernetes-operator/pull/2580)).
+
 #### Operator 3.3.2
 
 * Support for the networking changes included with Istio 1.10 ([#2538](https://github.com/oracle/weblogic-kubernetes-operator/pull/2538)).
diff --git a/documentation/3.3/content/samples/azure-kubernetes-service/_index.md b/documentation/3.3/content/samples/azure-kubernetes-service/_index.md
@@ -26,6 +26,10 @@ Azure Kubernetes Service makes it simple to deploy a managed Kubernetes cluster
 
 To learn more, see the [What is Azure Kubernetes Service?](https://docs.microsoft.com/en-us/azure/aks/intro-kubernetes).
 
+See [Supported platforms]({{< relref "userguide/platforms/environments.md" >}})
+for general operator prerequisites
+and operator support limitations that are specific to AKS.
+
 #### Domain home source types
 
 This sample demonstrates running the WebLogic cluster on AKS using two domain home types. The instructions for each are self-contained and independent. This section lists the domain home source types recommended for use with AKS, along with some benefits of each. For complete details on domain home source types, see [Choose a domain home source type]({{< relref "/userguide/managing-domains/choosing-a-model/_index.md" >}}).
diff --git a/documentation/3.3/content/samples/azure-kubernetes-service/domain-on-pv.md b/documentation/3.3/content/samples/azure-kubernetes-service/domain-on-pv.md
@@ -29,7 +29,7 @@ This sample demonstrates how to use the [WebLogic Kubernetes Operator](/weblogic
 Clone the [WebLogic Kubernetes Operator repository](https://github.com/oracle/weblogic-kubernetes-operator) to your machine. We will use several scripts in this repository to create a WebLogic domain. This sample was tested with v3.1.1, but should work with the latest release.
 
 ```shell
-$ git clone --branch v3.3.2 https://github.com/oracle/weblogic-kubernetes-operator.git
+$ git clone --branch v{{< latestVersion >}} https://github.com/oracle/weblogic-kubernetes-operator.git
 ```
 
 {{% notice info %}} The following sections of the sample instructions will guide you, step-by-step, through the process of setting up a WebLogic cluster on AKS - remaining as close as possible to a native Kubernetes experience. This lets you understand and customize each step. If you wish to have a more automated experience that abstracts some lower level details, you can skip to the [Automation](#automation) section.
diff --git a/documentation/3.3/content/samples/azure-kubernetes-service/model-in-image.md b/documentation/3.3/content/samples/azure-kubernetes-service/model-in-image.md
@@ -30,7 +30,7 @@ This sample demonstrates how to use the [WebLogic Kubernetes Operator](/weblogic
 Clone the [WebLogic Kubernetes Operator repository](https://github.com/oracle/weblogic-kubernetes-operator) to your machine. We will use several scripts in this repository to create a WebLogic domain. This sample was tested with v3.1.1, but should work with the latest release.
 
 ```shell
-$ git clone --branch v3.3.2 https://github.com/oracle/weblogic-kubernetes-operator.git
+$ git clone --branch v{{< latestVersion >}} https://github.com/oracle/weblogic-kubernetes-operator.git
 ```
 ```shell
 $ cd weblogic-kubernetes-operator
diff --git a/documentation/3.3/content/samples/domains/model-in-image/prerequisites.md b/documentation/3.3/content/samples/domains/model-in-image/prerequisites.md
@@ -23,7 +23,7 @@ weight: 1
    $ cd /tmp
    ```
    ```shell
-   $ git clone --branch v3.3.2 https://github.com/oracle/weblogic-kubernetes-operator.git
+   $ git clone --branch v{{< latestVersion >}} https://github.com/oracle/weblogic-kubernetes-operator.git
    ```
 
    > **Note**: We will refer to the top directory of the operator source tree as `/tmp/weblogic-kubernetes-operator`; however, you can use a different location.
diff --git a/documentation/3.3/content/samples/ingress/_index.md b/documentation/3.3/content/samples/ingress/_index.md
@@ -6,17 +6,16 @@ description: "Ingress controllers and load balancer sample scripts."
 ---
 
 
-The WebLogic Kubernetes Operator supports NGINX, Traefik, Voyager, and Apache. We provide samples that demonstrate how to install and configure each one.
+The WebLogic Kubernetes Operator supports NGINX, Traefik, and Apache. We provide samples that demonstrate how to install and configure each one.
 
 {{% notice note %}}
-For production environments, we recommend NGINX, Voyager, Traefik (2.2.1 or later) ingress controllers, Apache, or the load balancer provided by your cloud provider.
+For production environments, we recommend NGINX, Traefik (2.2.1 or later) ingress controllers, Apache, or the load balancer provided by your cloud provider.
 {{% /notice %}}
 
 
 The samples are located in following folders:
 
 * [Traefik](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/traefik/README.md)
-* [Voyager](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/voyager/README.md)
 * [NGINX](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/nginx/README.md)
 * Apache-samples/[custom-sample](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/apache-samples/custom-sample/README.md)
 * Apache-samples/[default-sample](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/apache-samples/default-sample/README.md)
diff --git a/documentation/3.3/content/samples/tanzu-kubernetes-service/_index.md b/documentation/3.3/content/samples/tanzu-kubernetes-service/_index.md
@@ -32,6 +32,10 @@ This sample assumes the following prerequisite environment setup:
 * [kubectl](https://kubernetes-io-vnext-staging.netlify.com/docs/tasks/tools/install-kubectl/); use `kubectl version` to test if `kubectl` works.  This document was tested with version v1.18.6.
 * [Helm](https://helm.sh/docs/intro/install/) version 3.1 or later; use `helm version` to check the `helm` version.  This document was tested with version v3.2.1.
 
+See [Supported platforms]({{< relref "userguide/platforms/environments" >}})
+for general operator prerequisites
+and operator support limitations that are specific to Tanzu.
+
 ##### Create a Tanzu Kubernetes cluster
 
 Create the Kubernetes cluster using the TKG CLI. See the [Tanzu documentation](https://docs.vmware.com/en/VMware-Tanzu-Kubernetes-Grid/1.2/vmware-tanzu-kubernetes-grid-12/GUID-index.html) to set up your Kubernetes cluster.
@@ -63,7 +67,7 @@ Kubernetes Operators use [Helm](https://helm.sh/) to manage Kubernetes applicati
 Clone the repository.
 
 ```shell
-$ git clone --branch v3.3.2 https://github.com/oracle/weblogic-kubernetes-operator.git
+$ git clone --branch v{{< latestVersion >}} https://github.com/oracle/weblogic-kubernetes-operator.git
 ```
 ```shell
 $ cd weblogic-kubernetes-operator
diff --git a/documentation/3.3/content/security/openshift.md b/documentation/3.3/content/security/openshift.md
@@ -113,9 +113,12 @@ For additional information about OpenShift requirements and the operator,
 see [OpenShift]({{<relref  "/userguide/platforms/environments#openshift">}}).
 {{% /notice %}}
 
-#### Using a dedicated namespace
+#### Use a dedicated namespace
 
 When the user that installs an individual instance of the operator does not have the required privileges to create resources at the Kubernetes cluster level, a dedicated namespace can be used for the operator instance and all the WebLogic domains that it manages. For more details about the `dedicated` setting, please refer to [Operator Helm configuration values]({{< relref "/userguide/managing-operators/using-helm#operator-helm-configuration-values" >}}).
 
 #### Set the Helm chart property `kubernetesPlatorm` to `OpenShift`
 Beginning with operator version 3.3.2, set the operator `kubernetesPlatform` Helm chart property to `OpenShift`. This property accommodates OpenShift security requirements. For more information, see [Operator Helm configuration values]({{<relref "/userguide/managing-operators/using-helm#operator-helm-configuration-values">}}).
+
+#### With WIT, set the `target` parameter to `OpenShift`
+When using the [WebLogic Image Tool](https://oracle.github.io/weblogic-image-tool/) (WIT), `create`, `rebase`, or `update` command, to create a [Domain in Image](https://oracle.github.io/weblogic-kubernetes-operator/userguide/managing-domains/choosing-a-model/) domain home, you can specify the `--target` parameter for the target Kubernetes environment. Its value can be either `Default` or `OpenShift`. The `OpenShift` option changes the domain directory files such that the group permissions for those files will be the same as the user permissions (group writable, in most cases). If you do not supply the OS group and user setting with `--chown`, then the `Default` setting for this option is changed from `oracle:oracle` to `oracle:root` to be in line with the expectations of an OpenShift environment.
diff --git a/documentation/3.3/content/userguide/introduction/architecture.md b/documentation/3.3/content/userguide/introduction/architecture.md
@@ -37,7 +37,7 @@ The operator consists of the following parts:
 The operator is packaged in a [container image](https://github.com/orgs/oracle/packages/container/package/weblogic-kubernetes-operator) which you can access using the following `docker pull` commands:  
 
 ```shell
-$ docker pull ghcr.io/oracle/weblogic-kubernetes-operator:3.3.2
+$ docker pull ghcr.io/oracle/weblogic-kubernetes-operator:{{< latestVersion >}}
 ```
 
 For more details on acquiring the operator image and prerequisites for installing the operator, consult the [Quick Start guide]({{< relref "/quickstart/_index.md" >}}).
diff --git a/documentation/3.3/content/userguide/managing-domains/domain-lifecycle/restarting.md b/documentation/3.3/content/userguide/managing-domains/domain-lifecycle/restarting.md
@@ -185,7 +185,7 @@ d. Update the `image` field of the Domain YAML file, specifying the new image na
      ```yaml
      domain:
        spec:
-         image: ghcr.io/oracle/weblogic-updated:3.3.2
+         image: ghcr.io/oracle/weblogic-updated:{{< latestVersion >}}
      ```
 e. The operator will now initiate a rolling restart, which will apply the updated image, for all the servers in the domain.
 
diff --git a/documentation/3.3/content/userguide/managing-domains/ingress/_index.md b/documentation/3.3/content/userguide/managing-domains/ingress/_index.md
@@ -7,7 +7,7 @@ pre = "<b> </b>"
 
 Ingresses are one approach provided by Kubernetes to configure load balancers.
 Depending on the version of Kubernetes you are using, and your cloud provider, you may need to use Ingresses.
-For more information about Ingresses, see [the Ingress documentation](https://kubernetes.io/docs/concepts/services-networking/ingress/).  
+For more information about Ingresses, see the [Kubernetes Ingress](https://kubernetes.io/docs/concepts/services-networking/ingress/) documentation.
 
 #### WebLogic clusters as backends of an Ingress
 
@@ -34,7 +34,7 @@ The service, `serviceName` and `servicePort`, of a WebLogic cluster will be used
 object and the load balancer will route traffic to the WebLogic Servers within the cluster based on the rules.
 
 {{% notice note %}}
-Most common ingress controllers, for example Traefik, Voyager, and NGINX,
+Most common ingress controllers, for example Traefik and NGINX,
 understand that there are zero or more actual pods behind the service, and they actually
 build their backend list and route requests to those backends directly, not through the service.  This means that
 requests are properly balanced across the pods, according to the load balancing algorithm
@@ -56,25 +56,21 @@ additional pods become ready, or pods enter a non-ready state.
 
       * Use the Helm chart [ingress-per-domain](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/ingress-per-domain).  
 
-        Each ingress provider supports a number of annotations in Ingress resources. This Helm chart allows you to define the routing rules without dealing with the detailed provider-specific annotations. Currently we support two ingress providers: Traefik and Voyager.
+        Each ingress provider supports a number of annotations in Ingress resources. This Helm chart allows you to define the routing rules without dealing with the detailed provider-specific annotations.
 
-     * Create the Ingress resource manually from a YAML file.  
+      * Create the Ingress resource manually from a YAML file.
 
         Manually create an Ingress YAML file and then apply it to the Kubernetes cluster.
 
-#### Guide and samples for Traefik, Voyager/HAProxy, and NGINX
+#### Guide and samples for Traefik and NGINX
 
 Information about how to install and configure these ingress controllers to load balance WebLogic clusters is provided here:
 
  - [Traefik guide](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/traefik/README.md)
- - [Voyager guide](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/voyager/README.md)
  - [NGINX guide](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/nginx/README.md)
 
  {{% notice note %}}
- For production environments, we recommend NGINX, Voyager, Traefik (2.2.1 or later) ingress controllers, Apache, or the load balancer provided by your cloud provider.
+ For production environments, we recommend NGINX, Traefik (2.2.1 or later) ingress controllers, Apache, or the load balancer provided by your cloud provider.
  {{% /notice %}}
 
-Samples are also provided for these two ingress controllers, showing how to manage multiple WebLogic clusters as the backends, using different routing rules, host-routing and path-routing; and TLS termination:
-
-- [Traefik samples](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/traefik/samples)
-- [Voyager samples](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/voyager/samples)
+Samples are also provided for the Traefik ingress controller, showing how to manage multiple WebLogic clusters as the backends, using different routing rules, host-routing and path-routing; and TLS termination: [Traefik samples](https://github.com/oracle/weblogic-kubernetes-operator/blob/main/kubernetes/samples/charts/traefik/samples).
diff --git a/documentation/3.3/content/userguide/managing-operators/installation.md b/documentation/3.3/content/userguide/managing-operators/installation.md
@@ -119,7 +119,7 @@ the `helm upgrade` command requires that you supply a new Helm chart and image.
 ```shell
 $ helm upgrade \
   --reuse-values \
-  --set image=ghcr.io/oracle/weblogic-kubernetes-operator:3.3.2 \
+  --set image=ghcr.io/oracle/weblogic-kubernetes-operator:{{< latestVersion >}} \
   --namespace weblogic-operator-namespace \
   --wait \
   weblogic-operator \
diff --git a/documentation/3.3/content/userguide/managing-operators/using-helm.md b/documentation/3.3/content/userguide/managing-operators/using-helm.md
@@ -112,7 +112,7 @@ kubernetesPlatform: OpenShift
 ##### `image`
 Specifies the container image containing the operator code.
 
-Defaults to `ghcr.io/oracle/weblogic-kubernetes-operator:3.3.2`.
+Defaults to `ghcr.io/oracle/weblogic-kubernetes-operator:{{< latestVersion >}}`.
 
 Example:
 ```yaml
diff --git a/documentation/3.3/content/userguide/platforms/environments.md b/documentation/3.3/content/userguide/platforms/environments.md
diff --git a/documentation/3.3/content/userguide/prerequisites/introduction.md b/documentation/3.3/content/userguide/prerequisites/introduction.md
diff --git a/documentation/3.3/layouts/shortcodes/latestVersion.html b/documentation/3.3/layouts/shortcodes/latestVersion.html
diff --git a/documentation/3.3/static/images/logo.png b/documentation/3.3/static/images/logo.png
diff --git a/documentation/3.3/themes/hugo-theme-learn/layouts/partials/logo.html b/documentation/3.3/themes/hugo-theme-learn/layouts/partials/logo.html
