3.3.4

3.3.4

(2020-11-12)

Components

Component

Version

MKE

3.3.4

Kubernetes

1.18.10

Calico

3.14.1

Calico for Windows

3.12.1

Interlock

3.2.0

Interlock NGINX proxy

1.17.10

Istio Ingress

1.4.10

CoreDNS

1.7.0

etcd

3.4.3

CSI Attacher

2.1.1

CSI Provisioner

1.4.0

CSI Snapshotter

1.2.2

CSI Resizer

0.4.0

CSI Node Driver Registrar

1.2.0

CSI Liveness Probe

1.1.0

What’s new

  • Updated our version of Kubernetes to 1.18.10 (ENGORC-7894).

  • Upgraded Golang to 1.15.2 (ENGORC-7900).

  • Warnings have been added to the bootstrapper installaion process to indicate when the configured Kubernetes Pod/Service CIDR ranges intersect with the default Docker/Swarm network address pools (ENGORC-7776, FIELD-2761).

  • Added the allow_repos MKE configuration, to allow user-specified repos to bypass content trust check (useful for those who want to run dtr backup or dtr upgrade with content trust enabled) (FIELD-1710).

Bug fixes

  • Fixed a network communications issue with Kubernetes on Windows workloads that only affected Windows nodes with MKE 3.3.3 installed. Following an upgrade to MKE 3.3.4, the issue can be cleared by removing the ucp-bridge network from affected Windows nodes:

    docker network rm ucp-bridge
    

    (ENGORC-7930)

  • Fixed an issue wherein the MKE agent did not reconcile the etcd certificate secret tied to MKE node certificates (for Kubernetes compose API deployment) upon renewal of the certificates following their default three-month expiration (ENGORC-7849, FIELD-2323).

  • Fixed an issue wherein the You are currently using the latest version of MKE. message would display even when there is an available upgrade (ENGORC-7807).

  • Fixed an issue wherein the MKE upgrade GUI referenced the docker/ucp package location and not the mirantis/ucp package location (ENGORC-7806).

  • Fixed an UI issue that resulted in the display of a blank Admin Settings page whenever Docker content trust is not enabled (ENGORC-2914).