2.48.0

Released on 21 Sep 2020

New Features

  • The property container.disable_publish_all_ports has been added to the Native Scheduler spec to disable publishing all exposed container ports that are not explicitly bound by the container.ports property.
  • The property container.oom_kill_disable has been added to the Native Scheduler spec to disable the kernel OOM killer for the specified container.

Changes

  • The Replicated shared filesystem initContainer will now delete its own pod when the shared filesystem fails to mount.
  • An hourly task has been added to clean up Replicated utility containers that have existed for more than one hour.
  • Time spent pulling and pushing the Programmable Preflight Check image to the On-Prem Registry will no longer count towards the timeout on the Swarm Scheduler.
  • Weave Net has been upgraded to version 2.7.0.

Bug Fixes

  • Fixed an issue that would allow expired airgap licenses to be installed.
  • A lock has been added to prevent multiple instances of the Port Available Native Scheduler preflight check to run at the same time, which would cause the second to report a failure.
  • Fixed an issue that would cause control plane pods to fail with ImagePullBackoff on Replicated Embedded Kubernetes primary nodes added to an airgapped cluster with the node-join script.
  • Fixed an issue that would cause the Replicated Embedded Kubernetes installation script to fail silently when the Docker cgroups driver was preconfigured. The script will now continue without reconfiguring the cgroups driver.
  • Fixed an issue that could cause Swarm Programmable Test Procedures to fail when the app is first installed because the image did not exist yet in the On-Prem Registry.
  • Fixed an issue that could cause Swarm and Native Preflight Checks to fail when the application is first installed because the On-Prem Registry is restarting.
  • Fixed an issue that could cause restoring with the Replicated CLI to fail due to not waiting long enough for remote Operators to connect to the primary.
  • All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.

2.47.0

Released on 1 Aug 2020

New Features

Changes

  • An initiative has been made to move to a more inclusive vocabulary. This includes moving away from the master/slave terminology in favor of the terms primary/secondary when appropriate.
  • All Debian based Docker images have been upgraded from Debian 9 “Stretch” to Debian 10 “Buster”.
  • All Alpine Linux based Docker images have been upgraded from version 3.11 to version 3.12.
  • Replicated Embedded Kubernetes will use systemd as the cgroup driver for Docker and Kubelet on new installs.
  • Certain errors encountered during the prune phase after starting the application will be logged as errors rather than propagated to the application status when using Replicated Embedded Kubernetes .
  • Increased the CPU and memory requests for the weave-net DaemonSet deployed with Replicated Embedded Kubernetes.
  • Image pull concurrency within Replicated daemon is now capped at 4 concurrent image pulls to improve stability.

Bug Fixes

  • Fixed an issue where Docker 17.03 and 17.06 would fail to install due to the removal of the dockerproject.org apt and yum repos.
  • Fixed an issue that would cause the Replicated Operator to fail to reconnect when the host certificates were changed.
  • Fixed an issue with the Swarm scheduler that caused Support Bundles to remain on the filesystem indefinitely. Support Bundles older than 1 hour should be deleted by Replicated.
  • Fixed an issue that would cause the Premkit container to crash when a private key was included in the PEM certificate file.

2.46.2

Released on 22 Jul 2020

Notes

  • This release is currently only available for the Kubernetes scheduler.

Bug Fixes

  • Fixed an issue that could cause the Replicated container to fail to start when Replicated is upgraded from a previous version and Kubernetes is configured to use a custom service subnet.

2.46.1

Released on 15 Jul 2020

Notes

  • This release is currently only available for the Swarm and Native schedulers.

Bug Fixes

  • Fixed an issue that would cause airgapped installations to fail on older versions of Docker including 1.13.1.

2.46.0

Released on 9 Jul 2020

New Features

Changes

Bug Fixes

  • Fixed an issue that could cause a Replicated Embedded Kubernetes Control Plane node to come back as worker nodes when rejoining the cluster.
  • Fixed an issue on Native and Swarm airgapped installations that could cause the Support Bundle to fail on secondary nodes due to failures to push the Support Bundle image to the on-prem registry.
  • Fixed an issue on the Native Scheduler that could cause the Operator to disconnect and fail to reconnect after generating a support bundle.
  • Fixed an issue that could cause the Support Bundle docker.container-exec task to fail with the error “Exec command is already running”.
  • Fixed an issue that could cause Kubernetes API server certificates to be generated with incorrect SANs on secondary nodes after changing the API server load balancer and using a non-standard service CIDR.
  • Fixed an issue that would cause the Kubernetes Ceph dashboard to be inaccessible on servers with IPv6 disabled.
  • All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.

2.45.1

Released on 29 Jun 2020

Notes

  • This release is currently only available for the Kubernetes scheduler.

Bug Fixes

  • Fixed an issue that would cause the Kubernetes API server certificates to be generated with incorrect SANs when installed using an alternate Kubernetes Service CIDR.

2.45.0

Released on 17 Jun 2020

New Features

  • Support for managing HTTP proxy configuration in the console has been added for the Swarm and Kubernetes schedulers.
  • The RemoveImportSettingsFrom property has been added to /etc/replicated.conf. If set to true, Replicated will remove the ImportSettingsFrom file after use.

Changes

  • Public Docker images are now hosted on Docker Hub rather than Quay.io. This includes replicated/replicated, replicated/replicated-ui and replicated/replicated-operator.
  • The Replicated install scripts will no longer prompt for the public and private address on upgrades or when these addresses are already configured.
  • The Weave Pod network CIDR is now added to the NO_PROXY list of addresses when installing Replicated Embedded Kubernetes with an HTTP proxy.

Bug Fixes

  • Replicated will now prevent restoring a snapshot over a previously installed application, which would cause Replicated to get into a bad state.
  • Fixed an error that prevented the application from restarting after changing HTTP proxy configuration in the console on the Native Scheduler.
  • Fixed an issue that could cause Replicated Embedded Kubernetes to falsely report the application as started on initial installation.
  • Fixed an issue with the Native Scheduler that could prevent the Replicated Operator from disconnecting when the connection to the master is no longer active.
  • Fixed an issue that could cause liveness and readiness probes to fail when Replicated Embedded Kubernetes is installed and configured to use an HTTP proxy.
  • Fixed an issue that could cause the Replicated install scripts to fail when the Docker CLI is installed but not the Docker Daemon.
  • All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.

2.44.2

Released on 5 Jun 2020

Bug Fixes

  • Fixed a bug in setting snapshot configuration.

2.44.1

Released on 2 Jun 2020

New Features

  • Support for Ubuntu 20.04 LTS (Focal Fossa) has been added to the Native and Swarm schedulers.
  • NodeLocal DNSCache can now be enabled, to work around a bug resulting in DNS lookup delays of 5 or more seconds, by passing the nodelocal-dnscache flag to the Kubernetes install scripts.

Changes

  • The node join scripts generated on the /cluster page of the Admin Console will set the HTTP proxy if configured.
  • The Native scheduler will no longer remove application containers with the –force flag.
  • The default version of etcd bundled with Replicated Embedded Kubernetes has been upgraded from 3.3 to 3.4.
  • The container.stop_timeout property will now be passed to the container run command via the –stop-timeout flag in addition to the container stop command –time flag.

Bug Fixes

  • Fixed an issue in the Native scheduler that could cause application containers to be removed abruptly without sending a termination signal.
  • Fixed an issue that caused the Support Bundle to fail to collect when the Support Bundle Collect Spec is too long.
  • Fixed an issue that caused image layers from previous versions of the application to remain on disk in the Replicated Embedded Registry database after upgrade.
  • The Kubernetes install scripts will use UTC rather than the system time when creating the registry storage bucket.
  • The Kubernetes install scripts will now fail if there is a failure to create the registry storage bucket.
  • Fixed an issue in the Native scheduler that in some cases caused the Premkit container to fail with error “open /var/lib/replicated/secrets/premkit.crt: is a directory”.

2.44.0

Released on 22 May 2020

New Features

  • All Kubernetes Component Docker container images installed by the Replicated Embedded Kubernetes installer are now scanned and patched prior to each Replicated release.
  • Files can now be omitted from the Replicated Support Bundle using the files property of the meta.redact spec.

Changes

  • The Docker version on Native and Swarm installs will now default to 19.03.8.
  • Replicated Docker dependencies have been updated to version 19.03.8.
  • The swarm-default-address-pool flag has been added to the Swarm quick install scripts. This flag is used to specify the default subnet pools for global scope networks. The value is passed to the swarm init command via the --default-addr-pool flag.
  • The replication level of the Rook and Ceph storage pools used by Replicated Embedded Kubernetes will be set hourly. Previously the replication level was only set after changes to the cluster size.
  • Secrets will now be encrypted before being stored in the database using AES-GCM encryption with a per-installation 192-bit key generated at installation time.
  • When the Replicated database is corrupted it will automatically attempt to repair itself on next start.
  • The Docker Version Custom Preflight Check no longer requires a maximum version.
  • The LdapCopyAuthFrom template function now accepts the ServerType parameter to return the LDAP server type.
  • Metrics reporting has been disabled for the audit logging service on both Kubernetes and Swarm installations.
  • Task logs are now stored in the Replicated temp directory instead of the database.

Bug Fixes

  • Memory and disk space Custom Preflight Checks now properly differentiate between SI and binary units.
  • Fixed scaling of RGW metadata pools for clustered Kubernetes installations.
  • Fixed an issue that could cause Replicated to prompt the user to dismiss Preflight Checks twice on initial installation.
  • The Replicated container process will now respond to signals from the service manager and attempt to shut down in a clean manner.
  • Certain error messages encountered during app updates will now be shown in modals because they were previously rendered too quickly to be seen.
  • Improvements have been made to properly reflect the Pod deployment status on the Cluster page of the Replicated Embedded Kubernetes Admin Console.
  • Fixed an issue that prevented the end-user from changing the Kubernetes API load balancer address on Replicated Embedded Kubernetes airgapped installations.
  • Fixed an issue that caused Replicated Embedded Kubernetes installations to fail due to failed registry pushes when in airgapped mode and an HTTP proxy is configured.
  • Fixed an issue that caused Replicated Embedded Kubernetes installations to fail due to failed creation of the registry S3 bucket when in airgapped mode and an HTTP proxy is configured.
  • The Replicated statsd-graphite container will now be restarted on Native installations when the application is upgraded allowing for changes in port configuration to take effect.
  • The Replicated statsd-graphite container will now log to stdout and stderr.
  • Fixed an issue that could cause Replicated Embedded Kubernetes to crash when a pod takes too long to start.
  • Silenced noisy logs when querying the /ping endpoint of the Replicated UI service with a console password set.
  • Fixed Docker installation scripts on CentOS 6, RHEL 6 and Fedora 30.
  • Fixed discrepancy in number of audit log events returned by search and CSV export.
  • The shutdown service on Replicated Embedded Kubernetes will ensure the Replicated pod is not bound to the node that is being shutdown.
  • All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.