anchor.diff:  To upgrade an existing {product-title} 3.2 or 3.3 cluster to this latest release, use the
   automated upgrade playbook. See
   xref:../install_config/upgrading/automated_upgrades.adoc#running-the-upgrade-playbook-directly[Performing Automated In-place Cluster Upgrades] for instructions.
  +
  +[[ocp-3-3-1-3-technology-preview]]
  +==== Technology Preview Features
  +
  +Scheduled Jobs::
  +Scheduled jobs build upon the xref:../dev_guide/jobs.html#dev-guide-jobs[job]
  +object by allowing you to specifically schedule how the job should be run. See
  +xref:../dev_guide/scheduled_jobs.adoc#dev-guide-scheduled-jobs[Scheduled Jobs]
  +for more details.
  +
  +Sysctl Support::
  +Namespaced sysctl settings can now be exposed via Kubernetes, allowing users to
  +modify kernel parameters at runtime for namespaces within a container. Only
  +sysctls that are namespaced can be set independently on pods; if a sysctl is not
  +namespaced (called _node-level_), it cannot be set within {product-title}.
  +
  +{product-title} whitelists a subset of namespaced sysctls for use in pods:
  +
  +- `*kernel.shm_rmid_forced*`
  +- `*net.ipv4.ip_local_port_range*`
  +
  +These whitelisted sysctls are considered _safe_ and supported because they
  +cannot be misused to influence other containers, for example by blocking
  +resources like memory outside of the pods' defined memory limits. If a
  +namespaced sysctl is not whitelisted, it is considered _unsafe_ and not
  +supported.
  +
  +[IMPORTANT]
  +====
  +The `*net.ipv4.tcp_syncookiesnet.ipv4.tcp_syncookies*` sysctl has been
  +whitelisted upstream because it has been namespaced in kernels >= 4.6. However,
  +it is not yet supported in {product-title} 3.3 as it is not yet namespaced in
  +RHEL 7 kernels. See
  +link:https://bugzilla.redhat.com/show_bug.cgi?id=1373119#c9[BZ#1373119] for
  +details.
  +====
  +
  +You can use annotations to set safe sysctls on pods, for example:
  +
  +----
  +apiVersion: v1
  +kind: Pod
  +metadata:
  +  name: safe-sysctl-example
  +  annotations:
  +    security.alpha.kubernetes.io/sysctls: kernel.shm_rmid_forced=1
  +----
  +
  +If you want to use unsafe (and unsupported) namespaced sysctls, cluster
  +administrators must enable them individually on nodes:
  +
  +. Use the `*kubeletArguments*` field in the *_/etc/origin/node/node-config.yaml_*
  +file, as described in
  +xref:../admin_guide/manage_nodes.adoc#configuring-node-resources[Configuring Node Resources], to set the desired unsafe sysctls:
  ++
  +----
  +kubeletArguments:
  +  experimental-allowed-unsafe-sysctls:
  +    - "kernel.msg*,net.ipv4.route.min_pmtu"
  +----
  +
  +. Restart the node service to apply the changes:
  ++
  +----
  +# systemctl restart atomic-openshift-node
  +----
  +
  +. Users can then set the unsafe sysctls in pods using annotations, for example:
  ++
  +----
  +apiVersion: v1
  +kind: Pod
  +metadata:
  +  name: unsafe-sysctl-example
  +  annotations:
  +    security.alpha.kubernetes.io/unsafe-sysctls: net.ipv4.route.min_pmtu=1000,kernel.msgmax=1 2 3
  +----
  +
  +See link:http://kubernetes.io/docs/admin/sysctls/[Kubernetes documentation] for
  +more details on safe and unsafe sysctl usage. {product-title} documentation will
  +be updated in an upcoming revision for more information on this feature.
   
   [[ocp-3-3-1-3-bug-fixes]]
   ==== Bug Fixes
  
positive.code: xref:../install_config/upgrading/automated_upgrades.adoc#running-the-upgrade-playbook-directly[Performing Automated In-place Cluster Upgrades] for instructions.
  
  [[ocp-3-3-1-3]]
  === RHBA-2016:2084 - {product-title} 3.3.1.3 Bug Fix Update
  
  {product-title} release 3.3.1.3 is now available. The list of packages included
  in the update are documented in the
  
negative.code: 3.4 release. Official image streams and templates will be shipped with the 3.4
  release.
  
  Space precluded documenting all of the bug fixes for this release in their
  advisories. See the following sections for notes on upgrading and details on the
  xref:ocp-33-technology-preview[Technology Preview] features and bug fixes
  included in this release.
  
  [[ocp-3-3-1-3-upgrading]]
  ==== Upgrading
  