Release Notes¶
Considerations
Upgrading from one MKE minor version to another minor version can result in the downgrading of MKE middleware components. For more information, refer to the middleware versioning tables in the release notes of both the source and target MKE versions.
In MKE 3.7.0 - 3.7.1, performance issues may occur with both cri-dockerd and dockerd due to the manner in which cri-dockerd handles container and ImageFSInfo statistics.
MKE 3.7.22
Patch release for MKE 3.7 introducing the following key features:
Addition of CoreDNS ConfigMap persist configuration setting.
Ability to disable/re-enable client bundle generation and use.
MKE 3.7.21
The MKE 3.7.21 patch release focuses on CVE mitigation.
MKE 3.7.20
The MKE 3.7.20 patch release focuses on bug fixes and CVE mitigation.
MKE 3.7.19
The MKE 3.7.19 patch release focuses on bug fixes and CVE mitigation.
MKE 3.7.18
The MKE 3.7.18 patch release focuses exclusively on CVE mitigation.
MKE 3.7.17
Patch release for MKE 3.7 introducing the following key features:
Added the ingress_extra_args.default_backend_service MKE configuration setting for NGINX Ingress Controller.
Added ability to specify SAML proxy at installation.
MKE 3.7.16
The MKE 3.7.16 patch release focuses exclusively on CVE mitigation.
MKE 3.7.15
Patch release for MKE 3.7 introducing the following key features:
Ability to enable cAdvisor through API call
New flag for collecting metrics during support bundle generation
Hypervisor Looker dashboard information added to telemetry
MKE 3.7.14
The MKE 3.7.14 patch release focuses exclusively on CVE mitigation.
MKE 3.7.13
The MKE 3.7.13 patch release focuses exclusively on CVE mitigation.
MKE 3.7.12
Patch release for MKE 3.7 introducing the following key features:
Addition of external cloud provider support for AWS
GracefulNodeShutdown settings now configurable
MKE 3.7.11
The MKE 3.7.11 patch release focuses exclusively on CVE mitigation.
MKE 3.7.10
Patch release for MKE 3.7 introducing the following key features:
Support for NodeLocalDNS 1.23.1
Support for Kubelet node configurations
node-exporter port now configurable
MKE 3.7.9
The MKE 3.7.9 patch release focuses exclusively on CVE mitigation.
MKE 3.7.8
Patch release for MKE 3.7 introducing the following key features:
Addition of Kubernetes log retention configuration parameters
Customizability of audit log policies
Support for scheduling of etcd cluster cleanup and defragmentation
Inclusion of Docker events in MKE support bundle
MKE 3.7.7
The MKE 3.7.7 patch release focuses exclusively on CVE mitigation.
MKE 3.7.6
Patch release for MKE 3.7 introducing the following key features:
Kubernetes for GMSA now supported
Addition of ucp-cadvisor container level metrics component
MKE 3.7.5
Patch release for MKE 3.7 introducing the following key features:
etcd alarms are exposed through Prometheus metrics
Augmented validation for etcd storage quota
Improved handling of larger sized etcd instances
All errors now returned from pre upgrade checks
Minimum Docker storage requirement now part of pre upgrade checks
MKE 3.7.4 (discontinued)
MKE 3.7.4 was discontinued shortly after release due to issues encountered when upgrading to it from previous versions of the product.
MKE 3.7.3
The MKE 3.7.3 patch release focuses exclusively on CVE resolution.
MKE 3.7.2
Patch release for MKE 3.7 introducing the following key features:
Prometheus metrics scraped from Linux workers
Performance improvement to MKE image tagging API
MKE 3.7.1
Initial MKE 3.7.1 release introducing the following key features:
Support bundle metrics additions for new MKE 3.7 features
Added ability to filter organizations by name in MKE web UI
Increased Docker and Kubernetes CIS benchmark compliance
MetalLB supports MKE-specific loglevel
Improved Kubernetes role creation error handling in MKE web UI
Increased SAML proxy feedback detail
Upgrade verifies that cluster nodes have minimum required MCR
kube-proxy now binds only to localhost
Enablement of read-only rootfs for specific containers
Support for cgroup v2
Added MKE web UI capability to add OS constraints to swarm services
Added ability to set support bundle collection windows
Added ability to set line limit of log files in support bundles
Addition of search function to Grants > Swarm in MKE web UI
MKE 3.7.0
Initial MKE 3.7.0 release introducing the following key features:
ZeroOps: certificate management
ZeroOps: upgrade rollback
ZeroOps: metrics
Prometheus memory resources
etcd event cleanup
Ingress startup options: TLS, TCP/UDP, HTTP/HTTPS
Additional NGINX Ingress Controller options
Setting for NGINX Ingress Controller default ports
MetalLB
Lameduck configuration options
Multus CNI
SAML proxy
Addition of referral chasing LDAP parameter
Kubernetes update to version 1.27.4
Go update to version 1.20.5.
RethinkDB update to version 2.4.3