3.3.3

(2020-09-15)

Components

Component

Version

MKE

3.3.3

Kubernetes

1.18.8

Calico

3.14.1

Calico for Windows

3.12.1

Interlock

3.2.0

Interlock NGINX proxy

1.17.10

Istio Ingress

1.4.10

CoreDNS

1.7.0

etcd

3.4.3

CSI Attacher

2.1.1

CSI Provisioner

1.4.0

CSI Snapshotter

1.2.2

CSI Resizer

0.4.0

CSI Node Driver Registrar

1.2.0

CSI Liveness Probe

1.1.0

What’s new

  • MKE now supports Mirantis Container Cloud. For more information, refer to Mirantis Container Cloud documentation.

  • Updated our version of Kubernetes to 1.18.8 (ENGORC-7822).

Bug fixes

  • We fixed an issue that caused SAML ACS and Metadata URL endpoints to redirect to a missing /enzi/v0 (ENGORC-7842).

  • We fixed an issue whereby SAML Authbenication Endpoint could be used to forcibly log users out (ENGORC-7739).

  • We fixed an issue whereby Interlock failed to enforce the MKE RBAC on the Interlock certificate and key file lables com.docker.lb.ssl_key and com.docker.lb.ssl_cert (ENGORC-7741).

  • We fixed an issue whereby MKE component containers were continuing to use the default Docker bridge network (ENGORCS-7617).

  • We added logic to allow the UI to surface the form field validation errors, thus fixing an issue in which the Auth Login settings were producing unactionable errors (ENGORC-7352).

Known issues

  • Whenever 100 or more Windows nodes are running in Kubernetes mode, within 48 hours a small portion of those nodes may become unavailable with heartbeat failure or kubelet is unhealthy error messages.

    Workaround: Run docker swarm leave and then docker swarm join <swarm-token> on the affected Windows nodes.

    Mirantis recommends that you refrain from upgrading to 3.3.3 if you are running Kubernetes deployments on Windows at the aforementioned scale.

    MKE clusters running only Linux nodes are unaffected.