Due to upgrade issues with the Envoy gateway and the offline installation environments, upgrading to MKE 4k 4.1.3 is not recommended. These issues are fixed in the 4.1.4 release. For version 4.1.3, Mirantis only supports fresh installations.
Addressed issues#
Issues addressed in the MKE 4k 4.1.3 release include:
Upgrades and Migration#
- Improvements to the MKE 3.x to 4.x upgrade path, including organization and team name sanitization.
- Fix made to registry flag handling during non-airgapped upgrades.
- Addition of migration support for custom TLS during the 4.1.3 upgrade
Reliability#
- Improvements in mkectl robustness when handling environments with low permitted SSH sessions.
- Enhancements to etcd maintenance resiliency whenever members are unreachable.
- Addition of admission webhooks, to prevent accidental deletion of owned
ClusterDeploymentobjects. - Upgrades are only supported from MKE 3.7.15+ and 3.8.x. Attempts to upgrade from any other source MKE 3.x versions are rejected.
Networking#
- Removal of the deprecated kube-router CNI.
- Provision to ensure that calico-node is fully removed before felixconfig deletion.
- Fixed issues with
AWSClusterStaticIdentitynamespace selection and apply conflicts.
Miscellaneous#
- Resolved issues with
ucpauthznamespace for child clusters. - Resolved issues with embedded binary cleanup in temporary directories.
- Improvements to validation for OIDC settings and support bundle triggers.