3.4.10

(2022-06-21)

Components

Component

Version

MKE

3.4.10

Kubernetes

1.20.15

Calico

3.19.3

Calico for Windows

3.19.3

Interlock

3.3.5

Interlock NGINX proxy

1.21.6

Istio Ingress

1.4.10

CoreDNS

1.9.2

RethinkDB

2.3.6

etcd

3.4.16

Alpine Linux

3.16

What’s new

  • [FIELD-4787] The uninstall-ucp command now includes the --no-purge-secret option, which prevents MKE from removing MKE-related Swarm secrets as part of an MKE uninstall.

Addressed issues

  • [FIELD-4820, FIELD-4893] Fixed an issue wherein the output of the docker ps and docker inspect MKE endpoints included duplicate port entries.

  • [FIELD-4868] Fixed an issue wherein MKE could report an incorrect healthy container count.

  • [FIELD-4788] Fixed an issue wherein MKE failed to uninstall when running in Swarm-only mode.

  • [FIELD-4757] Fixed an issue with the MKE web UI wherein the logs did not display for Pods with multiple containers.

  • [FIELD-4271] Fixed an issue with the MKE web UI wherein various columns could not be sorted in the Nodes and Containers tables.

  • [FIELD-4200] Fixed an issue wherein the DOCKER-INGRESS chain could get lost when firewalld is running.

  • [MKE-8538] Fixed an issue wherein only limited support dumps were available on Windows nodes.

  • [MKE-8886] Fixed an issue with the MKE web UI wherein a RethinkDB error banner contained a broken link to the product documentation.

  • [FIELD-2778] Fixed an issue wherein Windows nodes that were added to an MKE cluster with docker swarm join using a manager token were demoted to worker nodes in the cluster.

  • [FIELD-4873] Fixed an issue with MKE clusters running on Ubuntu 20.04 wherein MKE failed to encrypt traffic when IPSec was enabled.

Security information

Updated to the following middleware component versions to resolve vulnerabilities in MKE:

  • Interlock 3.3.5 [MKE-8900, MKE-8876]

  • containerd 1.5.10 [MKE-8788]

  • CoreDNS 1.9.2 [MKE-8906]

  • Rebuilt curl without openLDAP 2.5.11 libraries [MKE-8905]

  • Ubuntu 22.04 [MKE-8905]

  • Golang 1.18.2 [MKE-8881]

  • Kubernetes 1.20.15 [MKE-8899]

  • Alpine Linux 3.16 [MKE-8933]

Deprecations

  • [MKE-8902] Kube gMSA and Kube-on-compose are removed from MKE in this release.

  • [MKE-8901] Istio Ingress is deprecated.