What's New in This Guide

This section introduces the documentation updates for release 25.2.2xx.

Release 25.2.201- G46998-02, April 2026

Upgrade, Rollback, and Uninstall Updates

Added a note to indicate that an additional step is required while performing an upgrade from 25.1.2xx to 25.2.2xx in the following sections:

Release 25.2.201- G46998-01, April 2026

General Updates

Updated the Table 1-1 table with the release information in the Oracle Error Correction Policy section.
Updated the release number to 25.2.201 throughout the document.
Updated the preinstalled and additional software versions in the Software Requirements section.
Updated the image tag details in the following sections:
- Pushing the Images to Customer Docker Registry
- Pushing the NRF Images to OCI Docker Registry
Updated the Pushing the Images to Customer Docker Registry, Pushing the NRF Images to OCI Docker Registry, and NRF Customization sections for replacing the ocnrf_configuration_openapi_25.2.201.yaml with ocnrf_configuration_openapi_25.2.201.json as openAPI specification support is transitioned from YAML to JSON.
Added Customization of OpenAPI JSON appendix for updating the OpenAPI servers URLs and select the appropriate server for the required API group.
Updated the Alert Configuration section by removing the content related to updating NRF alerts for CNE 1.8.x and earlier versions and adding content to update NRF alerts for OSO releases.
Added NRF Traffic IP Flow appendix to include the port details for NRF traffic.

Installation Updates

Updated the versions for the following appValidate parameters in the Global Parameters section:
- global.appValidate.minViablePath to 25.1.200
- global.appValidate.minKubernetesVersion to 1.32.0
- global.appValidate.minDbTierVersion to 25.1.200
Removed the ocnrf_dashboard_promha_25.2.201.yaml file from the CSAR package in the following sections as the current dashboard supports configuring both promha and OSO.
- Pushing the Images to Customer Docker Registry
- Pushing the NRF Images to OCI Docker Registry
Added a note in the CNC Console Requirements section to update cnDBTier resources before installing or upgrading the CNC Console.
Updated the cnDBTier parameters table in the cnDBTier Requirement section:
- Removed the global.additionalndbconfigurations.appmysqld.ndb_event buffer_max_alloc parameter because the recommended value is now the default value.
- Modified the recommended value of global.additionalndbconfigurations.ndb.MaxNoOfOrderedIndexes parameter from 3630 to 5120.
- Removed the db-replicationsvc.initiatebackupBeforeGeoRecoveryRestore parameter and replaced it with the global.geoReplicationRecovery.backupFailedSite.enable parameter.
- Modified the default value of the global.api.binlogpurgetimer from NA to 600s and changed the status from Added to Modified.
- Added the following parameters:
  - global.additionalndbconfigurations.ndb.MaxNoOfAttributes
  - global.additionalndbconfigurations.ndb.MaxNoOfUniqueHashIndexes
  - global.additionalndbconfigurations.mgm.TotalSendBufferMemory
  - global.additionalndbconfigurations.ndb.TotalSendBufferMemory
  - global.additionalndbconfigurations.ndb.MaxNoOfTables
  - global.additionalndbconfigurations.api.TotalSendBufferMemory
  - global.additionalndbconfigurations.tcpemptyapi.TotalSendBufferMemory
  - global.additionalndbconfigurations.tcpemptyapi.SendBufferMemory
  - global.additionalndbconfigurations.ndb.ndbdisksize
  - global.additionalndbconfigurations.ndb.ndbbackupdisksize
  - global.additionalndbconfigurations.ndb.datamemory
  - global.additionalndbconfigurations.ndb.retainbackupno
  - global.additionalndbconfigurations.api.ndbdisksize
  - global.ndb.delayPerDataPod
Modified the values of the minimum and maximum CPU or Pod values for the following cnDBTier resources in the cnDBTier Services section:
- Backup Manager Service (db-backup-manager-svc)
- Replication Service - Other
Modified the minimum memory/Pod value for the MGMT (ndbmgmd) service from 8 to 10 in the cnDBTier Services section.
Modified the PVC1 size for the SQL(ndbmysqld) service from 13 to 90 in the cnDBTier Services section.
Modified the minimum ephemeral storage for all the cnDBTier services and cnDBTier Sidecar resources from 90 to 200 in the cnDBTier Services and cnDBTier Sidecars sections.
Modified the maximum value of the ephemeral storage for the db-executor-svc sidecar container from 1 to 2 in the cnDBTier Sidecars section.
Modified the minimum and maximum CPU/Pod value for the db-infra-monitor-svc sidecar container from 0.1 to 0.2 in the cnDBTier Sidecars section.
Added a note in the Service Mesh Sidecar section to highlight the automatic annotation injection for the sidecar.
Modified the default values of the following parameters from IfNotPresent to *imagePullPolicy:
- ingress-gateway.global.debugTools.pullPolicy in the Ingress Gateway Microservice section.
- egress-gateway.global.debugTools.pullPolicy in the Egress Gateway Microservice section.
- alternate-route.global.debugTools.pullPolicy in the Alternate Route Microservice (alternate-route) section.
- appinfo.global.debugTools.pullPolicy in the App Info Microservice (appinfo) section.
- perf-info.global.debugTools.pullPolicy in the Perf Info Microservice (perf-info) section.
Modified the default values of the following parameters:
- global.defaultReplicationStatusOnError from DOWN to UP in the Global Parameters.
- global.overrideReplicationCheck from false to true in the Global Parameters section.
- egress-gateway.podLevelMessageThrottling.enabled from true to false in the Egress Gateway Microservice section.
- egress-gateway.maxReplicas from 19 to 36 in the Egress Gateway Microservice section.
- ingress-gateway.maxReplicas from 27 to 36 in the Ingress Gateway Microservice section.
- nfdiscovery.maxReplicas from 60 to 51 in the NF Discovery Microservice (nfdiscovery) section.
Modified the description of the defaultReplicationStatusOnError parameter in the Global Parameters and App Info Microservice (appinfo) sections.
Modified the description of the egress-gateway.podLevelMessageThrottling.enabled parameter in the Egress Gateway Microservice section.
Modified the description of the overrideReplicationCheck parameter in the following sections:
- Global Parameters
- NF Registration Microservice (nfregistration)
- NF Discovery Microservice (nfdiscovery)
- NF Access Token Microservice(nfaccesstoken)
- NRF Artisan Microservice (nrfartisan)
- NRF Cache Data Microservice (nrfcachedata)
Added the following parameters in the Egress Gateway Microservice section:
- egress-gateway.tlsVersionSupportForKubeApiServer.enabled
- egress-gateway.tlsVersionSupportForKubeApiServer.kubeApiServerTlsVersion
- egress-gateway.tlsVersionSupportForKubeApiServer.cipherSuites
- egress-gateway.addDestHostToHttpReqMetric
- egress-gateway.addDestHostToJettyStatMetric
- egress-gateway.addDestHostToMalformedHeaderContentMetric
- egress-gateway.addDestinationHostToResponseMetric
- egress-gateway.addErrReasonToConnectionFailureMetric
- egress-gateway.addErrorReasonToResponseMetric
- egress-gateway.addHostToConnectionFailureMetric
- egress-gateway.addHostToIncomingConnectionsMetric
- egress-gateway.addHostToIncomingIpTypeMetric
- egress-gateway.addHostToOutgoingConnectionsMetric
- egress-gateway.addHostToOutgoingIpTypeMetric
- egress-gateway.addHostToOutgoingTlsConnectionsMetric
- egress-gateway.addPortToConnectionFailureMetric
Added the following parameters in the Ingress Gateway Microservice section:
- ingress-gateway.ports.actuatorPort
- ingress-gateway.ports.actuatorPortName
- ingress-gateway.ports.containerPort
- ingress-gateway.ports.containerPortName
- ingress-gateway.ports.containersslPort
- ingress-gateway.ports.containersslPortName
- ingress-gateway.ports.containerHttp1Port
- ingress-gateway.ports.containerHttp1PortName
- ingress-gateway.tlsVersionSupportForKubeApiServer.kubeApiServerTlsVersion
- ingress-gateway.tlsVersionSupportForKubeApiServer.enabled
- ingress-gateway.tlsVersionSupportForKubeApiServer.cipherSuites
- ingress-gateway.addHostToOutgoingConnectionsMetric
- ingress-gateway.addHostToIncomingTlsConnectionsMetric
- ingress-gateway.addHostToIncomingIpTypeMetric
- ingress-gateway.addHostToIncomingConnectionsMetric
- ingress-gateway.addErrorReasonToConnectionFailureMetric
- ingress-gateway.addErrReasonToHttpRespMetric
- ingress-gateway.addDestHostToUserAgentConsumerNfTypeMetric
- ingress-gateway.addDestHostToJettyStatMetric
- ingress-gateway.addDestHostToHttpRespMetric
- ingress-gateway.addDestHostToHttpReqMetric
- ingress-gateway.addBackendSvcToOutgoingIpTypeMetric
- ingress-gateway.intraNfService.customExtension.labels
- ingress-gateway.intraNfService.customExtension.annotations
Removed the nfregistration.jetty.dnsRefreshDelay parameter from the NF Registration Microservice (nfregistration) section because this is handled by nfregistration.serviceDiscovery.refreshDelay parameter.
Added the following parameters in the NF Registration Microservice (nfregistration) section:
- nfregistration.serviceDiscovery.cipherSuites
- nfregistration.serviceDiscovery.kubeApiServerTlsVersion
- nfregistration.serviceDiscovery.ipConnectFailureThreshold
- nfregistration.serviceDiscovery.clearCacheOnServiceDiscoveryFailure
- nfregistration.serviceDiscovery.fqdnInMetricsEnabled
- nfregistration.serviceDiscovery.refreshDelay
- nfregistration.serviceDiscovery.timeout
- nfregistration.jetty.commonCpJcMaxPayloadSizeInKB
- nfregistration.jetty.maxRequestsHeaderSize
Renamed the parameter name from nfregistration.maxAttempts to nfregistration.maxDatabaseAttempts in the NF Registration Microservice (nfregistration) section.
Modified the default values of the following parameters in the NF Registration Microservice (nfregistration) section:
- nfregistration.livenessProbe.httpGet.path from /actuator/health/applicationLiveness to /management/health/liveness.
- nfregistration.readinessProbe.httpGet.path from /actuator/health/applicationReadiness to /management/health/readiness.
- nfregistration.startupProbe.httpGet.path from /actuator/health/applicationStartup to /management/health.
- nfregistration.global.hikariPoolSize from 10 to 20.
Removed the nfsubscription.maxInMemorySize parameter from the NF Subscription Microservice (nfsubscription) section because this is handled by nfsubscription.jetty.commonCpJcMaxPayloadSizeInKB parameter.
Removed the nfsubscription.jetty.dnsRefreshDelay parameter from the NF Subscription Microservice (nfsubscription) section because this is handled by nfsubscription.serviceDiscovery.refreshDelay parameter.
Added the following parameters in theNF Subscription Microservice (nfsubscription) section :
- nfsubscription.serviceDiscovery.cipherSuites
- nfsubscription.serviceDiscovery.kubeApiServerTlsVersion
- nfsubscription.serviceDiscovery.ipConnectFailureThreshold
- nfsubscription.serviceDiscovery.clearCacheOnServiceDiscoveryFailure
- nfsubscription.serviceDiscovery.fqdnInMetricsEnabled
- nfsubscription.serviceDiscovery.refreshDelay
- nfsubscription.serviceDiscovery.timeout
- nfsubscription.jetty.commonCpJcMaxPayloadSizeInKB
- nfsubscription.jetty.maxRequestsHeaderSize
Modified the default values of the following parameters in the NF Subscription Microservice (nfsubscription) section:
- nfsubscription.livenessProbe.httpGet.path from /actuator/health/applicationLiveness to /management/health/liveness
- nfsubscription.readinessProbe.httpGet.path from /actuator/health/applicationReadiness to /management/health/readiness
- nfsubscription.startupProbe.httpGet.path from /actuator/health/applicationStartup to /management/health
Removed the nfdiscovery.jetty.maxInMemorySize parameter from the NF Discovery Microservice (nfdiscovery) section because this is handled by nfdiscovery.jetty.commonCpJcMaxPayloadSizeInKB parameter.
Removed the nfdiscovery.jetty.dnsRefreshDelay parameter from the NF Discovery Microservice (nfdiscovery) section because this is handled by nfdiscovery.serviceDiscovery.refreshDelay parameter.
Added the following parameters in the NF Discovery Microservice (nfdiscovery) section:
- nfdiscovery.jetty.commonCpJcMaxPayloadSizeInKB
- nfdiscovery.jetty.maxRequestsHeaderSize
- nfdiscovery.serviceDiscovery.cipherSuites
- nfdiscovery.serviceDiscovery.kubeApiServerTlsVersion
- nfdiscovery.serviceDiscovery.ipConnectFailureThreshold
- nfdiscovery.serviceDiscovery.clearCacheOnServiceDiscoveryFailure
- nfdiscovery.serviceDiscovery.fqdnInMetricsEnabled
- nfdiscovery.serviceDiscovery.refreshDelay
- nfdiscovery.serviceDiscovery.timeout
Modified the default values of the following parameters in the NF Discovery Microservice (nfdiscovery) section:
- nfdiscovery.livenessProbe.httpGet.path from /actuator/health/applicationLiveness to /management/health/liveness
- nfdiscovery.readinessProbe.httpGet.path from /actuator/health/applicationReadiness to /management/health/readiness
- nfdiscovery.startupProbe.httpGet.path from /actuator/health/applicationStartup to /management/health
Removed the nrfauditor.jetty.maxInMemorySize parameter from the NRFAuditor Microservice (nrfauditor) section because this is handled by nrfauditor.jetty.commonCpJcMaxPayloadSizeInKB parameter.
Removed the nrfauditor.jetty.dnsRefreshDelay parameter from the NRFAuditor Microservice (nrfauditor) section because this is handled by nrfauditor.serviceDiscovery.refreshDelay parameter.
Added the following parameters in the NRFAuditor Microservice (nrfauditor) section:
- nrfauditor.serviceDiscovery.cipherSuites
- nrfauditor.serviceDiscovery.kubeApiServerTlsVersion
- nrfauditor.serviceDiscovery.ipConnectFailureThreshold
- nrfauditor.serviceDiscovery.clearCacheOnServiceDiscoveryFailure
- nrfauditor.serviceDiscovery.fqdnInMetricsEnabled
- nrfauditor.serviceDiscovery.refreshDelay
- nrfauditor.serviceDiscovery.timeout
- nrfauditor.jetty.commonCpJcMaxPayloadSizeInKB
- nrfauditor.jetty.maxRequestsHeaderSize
Modified the default values of the following parameters in the NRFAuditor Microservice (nrfauditor) section:
- nrfauditor.livenessProbe.httpGet.path from /actuator/health/applicationLiveness to /management/health/liveness
- nrfauditor.readinessProbe.httpGet.path from /actuator/health/applicationReadiness to /management/health/readiness
- nrfauditor.startupProbe.httpGet.path from /actuator/health/applicationStartup to /management/health
Added the following parameters in the NF Access Token Microservice(nfaccesstoken) section:
- nfaccesstoken.jetty.commonCpJcMaxPayloadSizeInKB
- nfaccesstoken.jetty.maxRequestsHeaderSize
- nfaccesstoken.serviceDiscovery.cipherSuites
- nfaccesstoken.serviceDiscovery.kubeApiServerTlsVersion
- nfaccesstoken.serviceDiscovery.ipConnectFailureThreshold
- nfaccesstoken.serviceDiscovery.clearCacheOnServiceDiscoveryFailure
- nfaccesstoken.serviceDiscovery.fqdnInMetricsEnabled
- nfaccesstoken.serviceDiscovery.refreshDelay
- nfaccesstoken.serviceDiscovery.timeout
Removed the nfaccesstoken.jetty.dnsRefreshDelay parameter from the NF Access Token Microservice(nfaccesstoken) section because this is handled by nfaccesstoken.serviceDiscovery.refreshDelay parameter.
Modified the default values of the following parameters in the NF Access Token Microservice(nfaccesstoken) section:
- nfaccesstoken.livenessProbe.httpGet.path from /actuator/health/applicationLiveness to /management/health/liveness
- nfaccesstoken.readinessProbe.httpGet.path from /actuator/health/applicationReadiness to /management/health/readiness
- nfaccesstoken.startupProbe.httpGet.path from /actuator/health/applicationStartup to /management/health
Removed the nrfartisan.jetty.dnsRefreshDelay parameter from the NRF Artisan Microservice (nrfartisan) section because this is handled by the nrfartisan.serviceDiscovery.refreshDelay parameter.
Added the following parameters in the NRF Artisan Microservice (nrfartisan) section:
- nrfartisan.serviceDiscovery.cipherSuites
- nrfartisan.serviceDiscovery.kubeApiServerTlsVersion
- nrfartisan.serviceDiscovery.ipConnectFailureThreshold
- nrfartisan.serviceDiscovery.clearCacheOnServiceDiscoveryFailure
- nrfartisan.serviceDiscovery.fqdnInMetricsEnabled
- nrfartisan.serviceDiscovery.refreshDelay
- nrfartisan.serviceDiscovery.timeout
- nrfartisan.jetty.commonCpJcMaxPayloadSizeInKB
- nrfartisan.jetty.maxRequestsHeaderSize
Modified the default values of the following parameters in the NRF Artisan Microservice (nrfartisan) section:
- nrfartisan.livenessProbe.httpGet.path from /actuator/health/applicationLiveness to /management/health/liveness
- nrfartisan.readinessProbe.httpGet.path from /actuator/health/applicationReadiness to /management/health/readiness
- nrfartisan.startupProbe.httpGet.path from /actuator/health/applicationStartup to /management/health
Removed the nrfconfiguration.jetty.maxInMemorySize from the NRF Configuration Microservice (nrfconfiguration) section because this is handled by nrfconfiguration.jetty.commonCpJcMaxPayloadSizeInKB parameter.
Removed the nrfconfiguration.jetty.dnsRefreshDelay parameters from the NRF Configuration Microservice (nrfconfiguration) section because this is handled by nrfconfiguration.serviceDiscovery.refreshDelay parameter.
Added the following parameters in the NRF Configuration Microservice (nrfconfiguration) section:
- nrfconfiguration.serviceDiscovery.cipherSuites
- nrfconfiguration.serviceDiscovery.kubeApiServerTlsVersion
- nrfconfiguration.serviceDiscovery.ipConnectFailureThreshold
- nrfconfiguration.serviceDiscovery.clearCacheOnServiceDiscoveryFailure
- nrfconfiguration.serviceDiscovery.fqdnInMetricsEnabled
- nrfconfiguration.serviceDiscovery.refreshDelay
- nrfconfiguration.serviceDiscovery.timeout
- nrfconfiguration.jetty.commonCpJcMaxPayloadSizeInKB
- nrfconfiguration.jetty.maxRequestsHeaderSize
Modified the default values of the following parameters in the NRF Configuration Microservice (nrfconfiguration) section:
- nrfconfiguration.livenessProbe.httpGet.path from /actuator/health/applicationLiveness to /management/health/liveness
- nrfconfiguration.readinessProbe.httpGet.path from /actuator/health/applicationReadiness to /management/health/readiness
- nrfconfiguration.startupProbe.httpGet.path from /actuator/health/applicationStartup to /management/health
Removed the nrfcachedata.maxInMemorySize parameter from the NRF Cache Data Microservice (nrfcachedata) section because this is handled by nrfconfiguration.jetty.commonCpJcMaxPayloadSizeInKB parameter.
Removed the nrfcachedata.jetty.dnsRefreshDelay parameter from the NRF Cache Data Microservice (nrfcachedata) section because this is handled by nrfcachedata.serviceDiscovery.refreshDelay parameter.
Added the following parameters in the NRF Cache Data Microservice (nrfcachedata) section:
- nrfcachedata.serviceDiscovery.cipherSuites
- nrfcachedata.serviceDiscovery.kubeApiServerTlsVersion
- nrfcachedata.serviceDiscovery.ipConnectFailureThreshold
- nrfcachedata.serviceDiscovery.clearCacheOnServiceDiscoveryFailure
- nrfcachedata.serviceDiscovery.fqdnInMetricsEnabled
- nrfcachedata.serviceDiscovery.refreshDelay
- nrfcachedata.serviceDiscovery.timeout
- nrfcachedata.jetty.commonCpJcMaxPayloadSizeInKB
- nrfcachedata.jetty.maxRequestsHeaderSize
Modified the default values of the following parameters in the NRF Cache Data Microservice (nrfcachedata) section:
- nrfcachedata.livenessProbe.httpGet.path from /actuator/health/applicationLiveness to /management/health/liveness
- nrfcachedata.readinessProbe.httpGet.path from /actuator/health/applicationReadiness to /management/health/readiness
- nrfcachedata.startupProbe.httpGet.path from /actuator/health/applicationStartup to /management/health
Added the following parameters in the Ingress Gateway Global Parameters section:
- enableIntraNfK8sSvc
- intraNFCommunicationPort
Modified the default values of the following parameters in the App Info Microservice (appinfo) section:
- appinfo.replicationUri from "http://mysql-cluster-db-monitor-svc.occne-infra:8080/db-tier/status/replication/realtime" to "http://mysql-cluster-db-monitor-svc.nrf-cndb-ns:8080/db-tier/status/replication/realtime"
- appinfo.realtimeDbStatusUri from "http://mysql-cluster-db-monitor-svc.occne-infra:8080/db-tier/status/cluster/local/realtime" to "http://mysql-cluster-db-monitor-svc.nrf-cndb-ns:8080/db-tier/status/cluster/local/realtime"
- appinfo.dbTierVersionUri from "http://mysql-cluster-db-monitor-svc.occne-infra:8080/db-tier/version" to "http://mysql-cluster-db-monitor-svc.nrf-cndb-ns:8080/db-tier/version"
Updated the default value of the perfinfo.overloadManager.ingressGatewayPort parameter from *httpSignalPortRef to *intraNFCommunicationPortRef in the Perf Info Microservice (perf-info) section.

Upgrade, Rollback, and Uninstall Updates

Updated the upgrade paths in the Supported Upgrade Paths section.
Updated the rollback paths in the Supported Rollback Paths section.
Removed the following notes from the Upgrading NRF section because they are no longer supported.
- While performing a cnDBTier upgrade from 24.1.x versions and above, cnDBTier uses the caching_sha2_password authentication plugin for altering the users. Use the following commands for altering the users before cnDBTier upgrade:
```
ALTER USER IF EXISTS 'nrfPrivilegedUsr'@'%' IDENTIFIED WITH
'caching_sha2_password' BY 'nrfPrivilegedPasswd';
ALTER USER IF EXISTS 'nrfApplicationUsr'@'%' IDENTIFIED WITH
'caching_sha2_password' BY 'nrfApplicationPasswd';
```
- Before upgrading NRF to release 24.3.x, in case NRF database contains NF Profiles with dnn attribute and dnn attribute value is not as per 3GPP defined format, NFs should update their NFProfiles with the correct dnn format (as defined in 3GPP TS 23.003 v16.8 Section 9A). For more information about dnn attribute, see Enhancements for dnn NFProfile Attribute and Discovery Query Parameter section in Oracle Communications Cloud Native Core, Network Repository Function User Guide.
Removed the following from the Postupgrade Tasks section:
- content related to Cache Data Microservice which was relevant for install and upgrade for releases that are no longer supported.
- redundant information.
Removed the following note from the Rolling Back NRF section as it is no longer applicable.
While performing a cnDBTier rollback to 24.1.x versions, cnDBTier uses the mysql_native_password authentication plugin for altering the users. Use the following commands for altering the users:
```
ALTER USER IF EXISTS 'nrfPrivilegedUsr'@'%' IDENTIFIED WITH 'mysql_native_password' BY 'nrfPrivilegedPasswd';
ALTER USER IF EXISTS 'nrfApplicationUsr'@'%' IDENTIFIED WITH 'mysql_native_password' BY 'nrfApplicationPasswd';
```
Removed the note related to disabling the Subscription Limit feature before rollback from the Rollback Tasks section as it is no longer supported.
Updated the existing note related to the georedundancy feature in the Rollback Tasks section.
Restructured the Uninstalling NRF chapter.

Fault Recovery Updates

There are no changes made for this section in this release.