Release-notes - Replicated Release Notes

2.38.3

Released on 3 Sep 2019

Notes

This release is currently only available for the Kubernetes scheduler.

Bug Fixes

Fixed an issue with shared filesystem volumes that could cause volume mounts to fail. Affected Pods would write data to the container layer causing data to be isolated to the Pod and lost when the Pod terminates.

2.38.2

Released on 21 Aug 2019

Notes

This release is currently only available for the Kubernetes scheduler.

Changes

Replicated Embedded Kubernetes has been upgraded to 1.15.3.

2.38.1

Released on 14 Aug 2019

Changes

Replicated Embedded Kubernetes has been upgraded to 1.15.2.

Bug Fixes

Fixed an issue where an app release’s required status would not sync after replicated first downloaded the release.
All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.

2.38.0

Released on 24 Jul 2019

New Features

Replicated Embedded Kubernetes has been upgraded to Kubernetes 1.15.0.
It is now possible to upload airgap bundles directly to the server from the Admin Console UI on the /releases page. Previously a user had to copy the file manually via SSH or FTP.

Changes

Replicated will no longer warn in preflight checks when the Docker patch version is greater than the version expected.
Replicated with the Kubernetes scheduler now prunes objects of all resource types from older releases. Previously Replicated would not prune ConfigMaps, Secrets, and CustomResources.
The version of Weave installed with Replicated Embedded Kubernetes has changed from 2.5.1 to 2.5.2.
The version of Rook installed with Replicated Embedded Kubernetes has changed from 1.0.0 to 1.0.3.
The version of Contour installed with Replicated Embedded Kubernetes has changed from 0.11.0 to 0.13.0 and the version of Envoy has changed from 1.9.1 to 1.10.0.
The version of Docker installed with Replicated Embedded Kubernetes has changed from 18.06.3 to 18.09.7.

Bug Fixes

Fixed an issue that could result in a required release being bypassed when multiple releases are queued for installation.
Fixed an issue that caused an an application to fail to deploy when empty files are included of the type “scheduler-kubernetes”.
Fixed an issue that may cause the “replicated” container to crash on when a timeout occurs when collecting a V1 Support Bundle.
Fixed an issue that would cause the “replicated-operator” container to use excessive resources when an application container is in a restart loop.
Added error handling for unexpected responses from the Replicated API.
Fixed an issue that could prevent programmable test procedures from running in high availability mode on the Kubernetes scheduler.
Added a timeout to the Job responsible for syncing airgapped bundle files across all masters on high availability Kubernetes installations.
Fixed an issue that could cause the Statsd metrics to stop reporting in Replicated if the container DNS changes.
Fixed an issue that would prevent Swarm Compose YAML from referencing license field values via template functions, resulting in an error when installing a license.
The Replicated UI will now show the error returned by the Kubernetes API server when attempting to apply invalid YAML that results in a 422 response.
Replicated will no longer attempt to delete and re-create PersistentVolumeClaims when the Kubernetes API returns a 422 error for an apply operation.
Replicated will no longer perform a full Provisioning API identity re-sync when the POST /v1/reset route is not implemented and the identity.enable_reset_request property of the YAML is set to false.
Fixed an issue that prevented Kubernetes applications with DaemonSets from stopping.
Fixed DNS failures when running Replicated Embedded Kubernetes on Ubuntu 18 with systemd-resolver enabled.
Fixed a Cross-Site Scripting vulnerability on the 404 Not Found route in the Auditlog API.
All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.

2.37.2

Released on 24 Jun 2019

Bug Fixes

This release contains bug fixes.

2.37.1

Released on 24 Jun 2019

Bug Fixes

Fixed an issue that prevented Replicated from starting after upgrades due to a failure to decode task objects in the local database.

2.37.0

Released on 20 Jun 2019

New Features

Improved support for deploying CustomResourceDefinitions with Replicated Embedded Kubernetes.

Changes

The base image of the Replicated containers has been changed from Alpine to Debian Stretch Slim.

Bug Fixes

Improved resiliency of multi-master airgapped Replicated Embedded Kubernetes installations following the loss of a master node.
Fixed an issue when running with the Swarm scheduler that would result in image pull failures when docker hub images are included in the compose spec.
Fixed an issue that could cause the support bundle to timeout when collecting Swarm logs due to Docker issue https://github.com/moby/moby/issues/38640.
Docker 18.06.1 will now be installed on Ubuntu 14.04 in order to fix an issue with Docker on some 3.X kernels. Previously 18.06.2 was installed.
Fixed an issue with multi-line ExecStart commands in /etc/systemd/system/docker.service.d/replicated-registry.conf, which may be created to allow local registries to run with http on airgapped Replicated Embedded Kubernetes installations.
Upgraded vulnerable npm packages including fstream, marked, sshpk, and tar.
All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.

2.36.0

Released on 28 May 2019

New Features

A Provisioning API POST /v1/reset method has been added that will be triggered when the end-user changes LDAP configuration in the Admin Console. A full re-sync from the LDAP server will follow this message.
Added the CLI command replicatedctl task ls --all to list all tasks.
Added the CLI command replicatedctl snapshot list-files to list all files in a snapshot.

Changes

The version of Rook bundled with Replicated Embedded Kubernetes has been upgraded to 1.0 with Ceph Nautilus v14. This improves resiliency of the cluster when nodes are lost in HA mode as well as after reboot in all modes.
A Replicated Embedded Kubernetes operator deployment has been added to the default namespace to manage cluster storage and nodes.
TLS 1.0 and TLS 1.1 are now disabled on the Retraced API service endpoint.
The CLI command replicatedctl task ls is now ordered by created date descending.
DaemonAuthenticationPassword is no longer present in the params export in the support bundle.
Default license field values are now included in the application airgap bundle and will be saved on installation of the release.

Bug Fixes

Fixed an issue that would prevent CPU and memory graphs from reloading on the dashboard on an application update without reloading the browser window.
Fixed an issue that could cause the snapshot server to become unresponsive in some situations requiring a restart of the Replicated container.
Fixed an issue that could cause application updates to fail due to duplicate update tasks running in parallel.
Fixed an issue that resulted in empty support bundles when a collect timeout occurs.
Fixed a race condition that could cause an automated installation to fail to start the application with an error indicating that not enough nodes are connected.
Fixed an issue that will force the Statsd container to restart when upgraded from the release 2.32.2. Graphs were not visible on the dashboard in this release due to a known issue.
Fixed an issue that would prevent application upgrades of airgapped installations when a new license field is added and used in a container when condition when running with the Native scheduler.
Fixed an issue that prevented some special characters from being included in the DaemonAuthenticationPassword field of the replicated.conf file.
All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.

2.35.1

Released on 1 May 2019

Bug Fixes

The yaml configuration for the Contour Ingress controller included with Replicated Embedded Kubernetes has been updated to be compatible with Contour v0.11.0.

2.35.0

Released on 30 Apr 2019

Changes

The version of Kubernetes bundled with Replicated Embedded Kubernetes has been upgraded from 1.13.0 to 1.13.5 for Replicated versions >= 2.31.0. Airgapped installations of Replicated 2.31.0 to 2.34.1 will continue to install the 1.13.0 version of Kubernetes they were bundled with.
The Contour ingress controller bundled with Replicated Embedded Kubernetes has been upgraded from v0.8.0 with Envoy 1.7.0 to v0.11.0 with Envoy 1.9.1.
The Weave CNI plugin bundled with Replicated Embedded Kubernetes has been upgraded from 2.5.0 to 2.5.1.
Replicated Embedded Kubernetes will now delete and re-create objects that cannot be updated due to changes to immutable fields.
Replicated Native will now allow application containers to log to Journald when configured globally in Docker. It will continue to hardcode the JSON File logging driver when configured for any other drivers.
Replicated Swarm will now run all services specified in a Programmable Preflight or Test Procedure Compose Spec. Replicated will only watch and collect output from the service with name specified in the Preflight or Test Procedure command.
Kubernetes node join tokens generated from the UI or CLI will now have a TTL set to 30 minutes. Previously, these were not set to expire.
The PKI bundle nonce for the Replicated Embedded Kubernetes master join script will now have a TTL of 30 minutes. The TTL was previously set to 10 minutes.

Bug Fixes

Content-Security-Policy, X-Frame-Options, and X-XSS-Protection headers have been added to the On-Prem Admin Console to prevent XSS attacks and clickjacking.
Pulling images will no longer count against the timeout when running Programmable Preflight Checks or Test Procedures on the Native scheduler, preventing command timeout errors.
Fixed an issue that prevented an application from starting when a Swarm service was included in “replicated” mode with replicas set to zero.
Fixed an issue that resulted in a 404 error when running the replicatedctl snapshot restore command when using Replicated Embedded Kubernetes.
Fixed an issue with the Native scheduler that prevented the Replicated Operator from reconnecting after a disconnection, requiring an Operator restart.
The Replicated Embedded Kubernetes install script will ensure a properly configured storage class is present every time it is run.
The Native easy install scripts will no longer re-prompt the user with a Firewalld warning.
Fixed an issue that caused Swarm auto-upgrades to revert HTTP_PROXY and NO_PROXY settings.
The Swarm airgapped “Add Node” modal in the On-Prem Admin Console now correctly references the script included in airgapped bundles.
Custom certificates uploaded to airgapped Replicated Embedded Kubernetes installations will no longer be overwritten when upgrading Replicated from versions prior to 2.34.
Fixed a bug that allowed multiple snapshot restores to run in parallel, resulting in failed snapshots.
All known CVEs with fixes have been patched in all images distributed by Replicated at the time of the release. For more information see this article.