// Module included in the following assemblies:
// * rosa-release-notes.adoc

:_mod-docs-content-type: REFERENCE
[id="rosa-q2-2024_{context}"]
= Q2 2024

[role="_abstract"]
The following items were added during the second quarter of 2024.

ifdef::openshift-rosa-hcp[]
Approve additional principals for {product-title} clusters::
+
You can approve additional user-roles to connect to your cluster's private API server endpoint. For more information, see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/install_clusters/index#rosa-additional-principals-overview_rosa-hcp-aws-private-creating-cluster[Additional principals on your {product-title} cluster].
endif::openshift-rosa-hcp[]

ROSA CLI update::
+
The ROSA CLI (`rosa`) was updated to a new version. For information about what has changed in this release, see the link:https://github.com/openshift/rosa/releases/tag/v1.2.41[ROSA CLI release notes]. For more information about the ROSA CLI (`rosa`),
ifdef::openshift-rosa[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/cli_tools/#rosa-about_rosa-getting-started-cli[About the ROSA CLI].
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/cli_tools/index#rosa-about_rosa-getting-started-cli[About the ROSA CLI].
endif::openshift-rosa-hcp[]

Approved Access for {product-title} clusters::
+
Red{nbsp}Hat Site Reliability Engineering (SRE) managing and proactively supporting {product-title} clusters will typically not require elevated access to customer clusters as part of the normal operations. In the unlikely event should Red{nbsp}Hat SRE (Site Reliability Engineer) need elevated access, the _Approved Access_ functionality provides an interface for customers to review and _approve_ or _deny_ access requests.
+
Elevated access requests to {product-title} clusters and the corresponding cloud accounts can be created by Red{nbsp}Hat SRE either in response to a customer-initiated support ticket or in response to alerts received by a Red{nbsp}Hat SRE, as part of the standard incident response process. For more information,
ifdef::openshift-rosa[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/support/#approved-access[Approved Access].
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/support/index#approved-access[Approved Access].
endif::openshift-rosa-hcp[]

`rosa` command enhancement::
+
The `rosa describe` command has a new optional argument, `--get-role-policy-bindings`. This new argument allows users to view the policies attached to STS roles assigned to the selected cluster. For more information,
ifdef::openshift-rosa[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/cli_tools/index#rosa-describe-cluster_rosa-managing-objects-cli[describe cluster].
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/cli_tools/index#rosa-describe-cluster_rosa-managing-objects-cli[describe cluster].
endif::openshift-rosa-hcp[]

Expanded customer-managed policy capabilities::
+
You can now attach customer-managed policies to the IAM roles required to run {product-title} clusters. Furthermore, these customer-managed policies, including the permissions attached to those policies, are not modified during cluster or role upgrades. For more information,
ifdef::openshift-rosa[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/introduction_to_rosa/#rosa-aws-customer-managed-policies_rosa-sts-about-iam-resources[Customer-managed policies].
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/introduction_to_rosa/index#rosa-aws-customer-managed-policies_rosa-sts-about-iam-resources[Customer-managed policies].
endif::openshift-rosa-hcp[]

ifdef::openshift-rosa[]
Permission boundaries for the installer role policy::
+
You can apply a policy as a _permissions boundary_ on the {product-title} installer role. The combination of policy and boundary policy limits the maximum permissions for the Amazon Web Services(AWS) Identity and Access Management (IAM) entity role. {product-title} includes a set of three prepared permission boundary policy files, with which you can restrict permissions for the installer role since changing the installer policy itself is not supported. For more information, see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/introduction_to_rosa/index#rosa-sts-aws-requirements-attaching-boundary-policy_rosa-sts-about-iam-resources[Permission boundaries for the installer role].

Cluster delete protection::
+
You can now enable the cluster delete protection option, which helps to prevent you from accidentally deleting a cluster. For more information on using the cluster delete protection option with the ROSA CLI, see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/cli_tools/index#rosa-edit-cluster_rosa-managing-objects-cli[edit cluster]. For more information on using the cluster delete protection option in the UI, see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/install_rosa_classic_clusters/index#rosa-sts-creating-a-cluster-using-defaults-ocm_rosa-sts-creating-a-cluster-quickly[Creating a cluster with the default options using OpenShift Cluster Manager].
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
{product-title} regions added::
+
{product-title} is now available in the following regions:

** Zurich (`eu-central-2`)
** Hong Kong (`ap-east-1`)
** Osaka (`ap-northeast-3`)
** Spain (`eu-south-2`)
** UAE (`me-central-1`)

+
For more information on region availabilities, see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/introduction_to_rosa/index#rosa-sdpolicy-regions-az_rosa-hcp-service-definition[Regions and availability zones].

Added support for external authentication providers::
+
You can now create clusters configured with external authentication providers, such as Microsoft Entra ID and KeyCloak. For more information, see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/install_clusters/index#rosa-hcp-sts-creating-a-cluster-ext-auth[Creating {product-title} clusters with external authentication].
endif::openshift-rosa-hcp[]

Longer cluster names enhancement::
+
You can now specify a cluster name that is longer than 15 characters. For cluster names that are longer than 15 characters, you can customize the domain prefix for the cluster URL by using the `domain-prefix` flag in the ROSA CLI (`rosa`) or by selecting the **Create custom domain prefix** checkbox in the {hybrid-console}. For more information,
ifdef::openshift-rosa[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/cli_tools/index#rosa-create-cluster-command_rosa-managing-objects-cli[create cluster in Managing objects with the ROSA CLI].
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/cli_tools/index#rosa-create-cluster-command_rosa-managing-objects-cli[create cluster in Managing objects with the ROSA CLI].
endif::openshift-rosa-hcp[]

ifdef::openshift-rosa-hcp[]
Additional Security Groups for {product-title}::
+
Starting with ROSA CLI version 1.2.37, you can now use the `--additional-security-group-ids <sec_group_id>` when creating machine pools on {hcp-title} clusters. For more information, see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/cluster_administration/index#creating_machine_pools_cli_rosa-managing-worker-nodes[Creating a machine pool using the ROSA CLI] and the link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/cli_tools/index#rosa-create-machinepool_rosa-managing-objects-cli[create machinepool] section of the ROSA CLI reference.
endif::openshift-rosa-hcp[]

Node management improvements::
+
Now, you can perform specific tasks to make clusters more efficient. You can cordon, uncordon, and drain a specific node. For more information,
ifdef::openshift-rosa[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws_classic_architecture/4/html-single/nodes/#working-with-nodes[Working with nodes].
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/nodes/#working-with-nodes[Working with nodes].
endif::openshift-rosa-hcp[]

ifdef::openshift-rosa-hcp[]
Node drain grace periods::
+
You can now configure node drain grace periods in {hcp-title} clusters with the `rosa` CLI.
+
For more information about configuring node drain grace periods, see link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/cluster_administration/index#rosa-node-drain-grace-period_rosa-managing-worker-nodes[Configuring node drain grace periods in {product-title}].
endif::openshift-rosa-hcp[]