Skip to content
This repository has been archived by the owner on Jan 11, 2023. It is now read-only.

Releases: Azure/acs-engine

v0.13.0

13 Feb 23:52
@jackfrancis jackfrancis
v0.13.0
4d00356
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.13.0

KUBERNETES SECURITY 🔐

FEATURES: 🌈

BUGS FIXED: 🐞

DEV IMPROVEMENTS/CHORES: 🔧

Assets 8
Loading

v0.12.5

01 Feb 01:34
@jackfrancis jackfrancis
v0.12.5
9fa6a69
Compare
Choose a tag to compare
v0.12.5

CHANGES since v0.12.4: 🌈🐞🔧

This patch release adds retries and resilience to etcd provisioning implementation.

Assets 8
Loading

v0.11.1

30 Jan 18:45
@jackfrancis jackfrancis
v0.11.1
07adc87
Compare
Choose a tag to compare
v0.11.1

CHANGES since v0.11.0: 🌈🐞🔧

This patch release includes a fix to persistently mount /var/lib/cni for Kubernetes hosts.

Assets 8
Loading

v0.12.4

23 Jan 01:21
@CecileRobertMichon CecileRobertMichon
v0.12.4
069d9e4
Compare
Choose a tag to compare
v0.12.4

CHANGES since v0.12.3: 🌈🐞🔧

This patch release fixes backward compatibility for upgrade.

Assets 8
Loading

v0.12.3

22 Jan 19:32
@jackfrancis jackfrancis
v0.12.3
030e5dc
Compare
Choose a tag to compare
v0.12.3

CHANGES since v0.12.2: 🌈🐞🔧

This patch release introduces Kubernetes v1.8.7.

Assets 8
Loading

v0.12.2

19 Jan 20:40
@jackfrancis jackfrancis
v0.12.2
7d19218
Compare
Choose a tag to compare
v0.12.2

This patch fixes JSON validation errors during template generation for Kubernetes.

CHANGES since v0.12.1: 🌈🐞🔧

Assets 8
Loading

v0.12.1

18 Jan 21:14
@jackfrancis jackfrancis
v0.12.1
93589b4
Compare
Choose a tag to compare
v0.12.1

This patch fixes a Kubernetes regression in heapster behavior due to recently disabled read-only kubelet port.

CHANGES since v0.12.0: 🌈🐞🔧

Assets 8
Loading

v0.12.0

16 Jan 19:28
@jackfrancis jackfrancis
v0.12.0
1d33229
Compare
Choose a tag to compare
v0.12.0

Secure Kubernetes

This is the first minor release that includes "breaking" security hardening additions. Specifically, we are now shipping etcd v3 w/ TLS communications enforced between both client/server (k8s cluster and etcd API, and between etcd peer nodes themselves. This is an important cluster security story, but its current implementation does not provide automatic backwards-compatible cluster operations for clusters deployed with prior versions of acs-engine. In practice this means upgrade operations against preëxisting clusters will not work with v0.12.0.

Also, etcdctl commands requiring auth (e.g., etcdctl cluster-health) now require sudo privileges to properly establish communications with the protected private key.

On that note we'll be calling out security-related items going forward!

Generic Kubernetes Configuration Interfaces

This release introduces generic configuration interfaces for Kubernetes cluster deployments for the kubelet, controller-manager, and apiserver run-time components. These conveniences (1) allow for more explicit configuration declarations, where appropriate, and more importantly (2) enable user-provided configuration values for the various Kubernetes components without changing acs-engine code (where acs-engine itself does not enforce an opinionated requirement).

This change also includes some breaking changes for existing kubernetesConfig property usage patterns using the vlabs api model paradigm:

  • HardEvictionThreshold, NodeStatusUpdateFrequency, and NonMasqueradeCidr properties have been moved to the new kubernetesConfig.kubeletConfig configuration object. E.g.:
"kubernetesConfig": {
    <...>
    "kubeletConfig": {
        "--eviction-hard": "memory.available<250Mi,nodefs.available<20%,nodefs.inodesFree<10%",
        "--node-status-update-frequency": "1m",
        "--non-masquerade-cidr": "10.0.0.0/8"
    }
    <...>
}
  • CtrlMgrNodeMonitorGracePeriod, CtrlMgrPodEvictionTimeout, and CtrlMgrRouteReconciliationPeriod properties have been moved to the new kubernetesConfig.controllerManagerConfig configuration object. E.g.:
"kubernetesConfig": {
    <...>
    "controllerManagerConfig": {
          "--node-monitor-grace-period": "40s",
          "--pod-eviction-timeout": "5m0s",
          "--route-reconciliation-period": "10s"
    }
    <...>
}

KUBERNETES SECURITY 🔐

FEATURES: 🌈

BUGS FIXED: 🐞

DEV IMPROVEMENTS/CHORES: 🔧

Assets 8
Loading

v0.11.0

15 Dec 23:47
@jackfrancis jackfrancis
v0.11.0
cda9631
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.11.0

Native Azure Kubernetes Networking

Today we are announcing General Availability of the Azure CNI Networking plugin for Kubernetes clusters. New clusters created via acs-engine will now use Azure CNI by default. Azure CNI natively attaches your containers to an Azure Virtual Network.

FEATURES: 🌈

BUGS FIXED: 🐞

DEV IMPROVEMENTS/CHORES: 🔧

Assets 8
Loading

v0.10.0

05 Dec 20:13
@jackfrancis jackfrancis
v0.10.0
7f3e25c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.10.0

FEATURES: 🌈:

BUGS FIXED: 🐞

DEV IMPROVEMENTS/CHORES: 🔧

Assets 8
Loading