Skip to content

v2.3.0

Compare
Choose a tag to compare
@mattymo mattymo released this 26 Oct 21:01
· 5645 commits to master since this release

This release includes the following changes.

Major changes:

  • Full RBAC support
  • New addon: istio
  • etcd scaling
  • All network plugins are deployed with CNI as daemonsets
  • Experimental kubeadm support
  • Container and file downloads are consolidated

Component versions:

  • Kubernetes v1.8.1
  • Docker 1.13.1
  • etcd v3.2.4
  • Rkt v1.21.0 (optional)
  • Calico v2.5.0
  • Weave 2.0.4
  • Flannel v0.8.0

Security

  • RBAC is enabled and may affect upgrades.

Known issues

  • CoreOS with Canal on GCE does not work. It works fine on any other platform.
  • Vault deployment mode does not work with kubeadm (but can still be used for etcd certificates).

Action items for users upgrading to v2.3.0

  • If you switch to kubeadm deployment mode, all pods in kube-system namespace will get restarted. All other pods will have their service account tokens reset because of the necessary certificate regeneration. Delete the relevant secret for the ServiceAccount and restart the pods to restore functionality.

Additional notes

  • Kubeadm can be enabled by setting kubeadm_enabled: true. Both new and existing clusters can be switched to kubeadm mode.