What's New in This Guide

Release 25.2.201- G40403-04, August 2026

Installing NSSF
- Updated the Docker-image versions for the NSSF application services, gateways, configuration hooks, Alternate Route, NRF Client, App Info, Perf Info, Config Server, Debug Tool, and Helm Test components.
- Creating Service Account, Role, and RoleBinding
  - Added Kubernetes RBAC permissions to get, list, and watchendpointslices under the discovery.k8s.io API group.
- Configuring Database, Creating Users, and Granting Permissions
  - Corrected the database-listing command from show database; to show databases; in the single-site and multisite procedures.
- Configuring Network Policies
  - Corrected the network-policy verification command from kubectl get <helm-release-name> -n <namespace> to kubectl get networkpolicy -n <namespace>.
Upgrading NSSF
- Supported Upgrade Paths
  - Replaced the statement that upgrades are unsupported with support for upgrading NSSF from 25.2.200 to 25.2.201.
- Upgrade Strategy
  - Added the upgrade and rollback sequence for georedundant deployments.
  - Specified that all NSSF sites must be upgraded before upgrading cnDBTier at each site.
  - Added a ten-minute wait between successive site and cnDBTier upgrade operations.
  - Specified the reverse order for rollback: roll back cnDBTier at all sites before rolling back NSSF.
Rolling Back NSSF
- Supported Rollback Paths
  - Replaced the statement that rollback is unsupported with support for rolling back from 25.2.201 to 25.2.200.
  - Added a caution directing users to the cnDBTier georeplication recovery procedures when database replication channels fail during rollback.

Release 25.2.200- G40403-03, May 2026

Added steps for Configuring Grafana Based on the Use Case (OSO or Non-OSO).

Release 25.2.200- G40403-02, April 2026

Updated details of the following parameters in the NrfClient parameters section:
- healthCheckCount
- healthCheckInterval
- requestTimeout
- errorReasonsForFailure
- gatewayErrorCodes
- serviceRequestType
- primaryNrfRetryCount
- nonPrimaryNrfRetryCount
- alternateNRFRetryCount
- errorReasonsForFailure
- requestTimeout
- gatewayErrorCodes

Release 25.2.200- G40403-01, February 2026

General Updates:
- Updated the Oracle Error Correction Policy.
- Updated the release number to 25.2.200 in the entire document.
- Updated the versions of docker images in the Table 2-11 for release 25.2.200.
- Updated the versions of software and environment setup requirements in Prerequisites section.
- Updated details of the mandatory and additional software in the Software Requirements section.
- Updated Resource Requirement details for NSSF Services, Service Mesh Sidecar, Hooks, and cnDBTier.
- Updated the syntax for FQDN of cnDBTier hosts in Installing Service Mesh Configuration Charts to add the cluster name in both the syntax and the examples.
- Updated the Alert Configuration section to remove the content related to updating NSSF alerts for CNE 1.8.x and previous versions and included the section to update NSSF alerts for OSO releases.
Installation Updates:
- Added the following Global Parameters used for configuring the "Support for Dual Stack" feature:
  - global.deploymentMode
  - global.egressRoutingMode
- Added the following Global Parameters used for configuring the "TLSv1.3 Support for Kubernetes API Communication" feature:
  - global.tlsVersionSupportForKubeApiServer.enabled
  - global.tlsVersionSupportForKubeApiServer.kubeApiServerTlsVersion
  - global.tlsVersionSupportForKubeApiServer.cipherSuites
- Added the following Ingress Gateway Parameters used for configuring the "TLSv1.3 Support for Kubernetes API Communication" feature:
  - ingressgateway.tlsVersionSupportForKubeApiServer.enabled
  - ingressgateway.tlsVersionSupportForKubeApiServer.kubeApiServerTlsVersion
  - ingressgateway.tlsVersionSupportForKubeApiServer.cipherSuites
  - ingressgateway.tlsVersionSupportForKubeApiServer.featureSecrets
- Added the following Egress Gateway Parameters used for configuring the "TLSv1.3 Support for Kubernetes API Communication" feature:
  - egressgateway.tlsVersionSupportForKubeApiServer.enabled
  - egressgateway.tlsVersionSupportForKubeApiServer.kubeApiServerTlsVersion
  - egressgateway.tlsVersionSupportForKubeApiServer.cipherSuites
  - egressgateway.tlsVersionSupportForKubeApiServer.featureSecrets
- Added steps for Verifying and Creating Namespace in an OpenShift Environment.
- Added configuration requirements for ASM Service Mesh integration with cnDBTier in the Installing Service Mesh Configuration Charts section:
  - Detailed new ServiceEntry and DestinationRule configurations required for mysql-connectivity-service and mysql-cluster-db-monitor-svc when istioSidecarInject.mode is set to external.
  - Added instructions for handling custom FQDNs if cnDBTier is installed in a different namespace or with a custom release name.
  - Added guidelines for modifying these rules if istioSidecarInject.mode is set to all or none.
- Updated cnDBTier Requirement to include a verification check for the istioSidecarInject.mode parameter in the cnDBTier custom values file.
Upgrade, Rollback, and Uninstall Updates:
- This release does not support upgrade or rollback.
- Added a note in the Uninstalling NSSF section that NSSF does not automatically remove the entries from the ProvisionDB or StateDB during the uninstall process.