From a2f97b80db6a8bc6df3a86fd75cc45977ed020bb Mon Sep 17 00:00:00 2001 From: kaitlynmichael Date: Thu, 6 Jan 2022 14:26:25 -0600 Subject: [PATCH 1/7] intrepid release notes --- .../release-notes/k8s-6-2-8-10-2022-01.md | 128 ++++++++++++++++++ 1 file changed, 128 insertions(+) create mode 100644 content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md diff --git a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md new file mode 100644 index 00000000000..5ac3d26a8fa --- /dev/null +++ b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md @@ -0,0 +1,128 @@ +--- +Title: Redis Enterprise for Kubernetes Release Notes 6.2.8-10 (January 2022) +linktitle: 6.2.8-10 (January 2022) +description: Support for RS 6.2.8, certificate management, and Redis upgrade policy. +weight: 66 +alwaysopen: false +categories: ["Platforms"] +aliases: [ + /kubernetes/release-notes/k8s-6-2-8-10-2022-01.md, + /kubernetes/release-notes/k8s-6-2-8-10-2022-01/, ] +--- +## Overview + +The Redis Enterprise [K8s 6.2.8-10](https://github.com/RedisLabs/redis-enterprise-k8s-docs/releases/tag/v6.2.8-10) release provides support for the [Redis Enterprise Software release 6.2.8]({{}}) and includes several enhancements and bug fixes. + +The key new features, bug fixes, and known limitations are described below. + +## Images + +This release includes the following container images: + +* **Redis Enterprise**: `redislabs/redis:6.2.8-53` or `redislabs/redis:6.2.8-53.rhel7-openshift` +* **Operator**: `redislabs/operator:6.2.8-10` +* **Services Rigger**: `redislabs/k8s-controller:6.2.8-10` or `redislabs/services-manager:6.2.8-10` (on the Red Hat registry) + +## Feature improvements + +* Istio gateway/virtual services are supported as ingress controllers. Note that for Active-Active databases, the operator doesn't create ingress rules, and those should be manually configured (RED-64020) +* Support for K8s 1.22 (EKS, kOps, GKE) and OpenShift 4.9 (RED-64016) +* Support for pod termination grace period customization in the REC (advanced use case) (RED-67217) +* Improved security granularity of SCC configuration steps in documentation (RED-67321) +* Changed behavior when two databases with the same name are created on the cluster. The operator avoids creating a service for them to prevent possible corruption (RED-64535) +* Improved documentation about changing cluster credentials when using Hashicorp Vault (RED-65304) + +## Fixed bugs + +* Upgraded Go dependencies marked as vulnerable (RED-63858, RED-68651) +* Avoided flooding operator logs with deprecation notices on K8s 1.21 (RED-67544) +* Fixed log collector utility issues running on Microsoft Windows (RED-67682) +* Fixed excessive updates to the RS cluster when using Windows line endings for TLS certificates (RED-67874) + +## Known limitations + +### Long cluster names cause routes to be rejected (RED-25871) + +A cluster name longer than 20 characters will result in a rejected route configuration because the host part of the domain name will exceed 63 characters. The workaround is to limit cluster name to 20 characters or less. + +### Cluster CR (REC) errors are not reported after invalid updates (RED-25542) + +A cluster CR specification error is not reported if two or more invalid CR resources are updated in sequence. + +### An unreachable cluster has status running (RED-32805) + +When a cluster is in an unreachable state, the state is still `running` instead of being reported as an error. + +### Readiness probe incorrect on failures (RED-39300) + +STS Readiness probe does not mark a node as "not ready" when running `rladmin status` on node failure. + +### Role missing on replica sets (RED-39002) + +The `redis-enterprise-operator` role is missing permission on replica sets. + +### Private registries are not supported on OpenShift 3.11 (RED-38579) + +OpenShift 3.11 does not support DockerHub private registries. This is a known OpenShift issue. + +### Internal DNS and Kubernetes DNS may have conflicts (RED-37462) + +DNS conflicts are possible between the cluster `mdns_server` and the K8s DNS. This only impacts DNS resolution from within cluster nodes for Kubernetes DNS names. + +### 5.4.10 negatively impacts 5.4.6 (RED-37233) + +Kubernetes-based 5.4.10 deployments seem to negatively impact existing 5.4.6 deployments that share a Kubernetes cluster. + +### Node CPU usage is reported instead of pod CPU usage (RED-36884) + +In Kubernetes, the node CPU usage we report on is the usage of the Kubernetes worker node hosting the REC pod. + +### Clusters must be named "rec" in OLM-based deployments (RED-39825) + +In OLM-deployed operators, the deployment of the cluster will fail if the name is not "rec". When the operator is deployed via the OLM, the security context constraints (scc) are bound to a specific service account name (i.e., "rec"). The workaround is to name the cluster "rec". + +### REC clusters fail to start on Kubernetes clusters with unsynchronized clocks (RED-47254) + +When REC clusters are deployed on Kubernetes clusters with unsynchronized clocks, the REC cluster does not start correctly. The fix is to use NTP to synchronize the underlying K8s nodes. + +### Deleting an OpenShift project with an REC deployed may hang (RED-47192) + +When a REC cluster is deployed in a project (namespace) and has REDB resources, the +REDB resources must be deleted first before the REC can be deleted. As such, until the +REDB resources are deleted, the project deletion will hang. The fix is to delete the +REDB resources first and the REC second. Afterwards, you may delete the project. + +### REC extraLabels are not applied to PVCs on K8s versions 1.15 or older (RED-51921) + +In K8s 1.15 or older, the PVC labels come from the match selectors and not the +PVC templates. As such, these versions can not support PVC labels. If this feature +is required, the only fix is to upgrade the K8s cluster to a newer version. + +### Hashicorp Vault integration - no support for Gesher (RED-55080) + +There is no workaround at this time + +### REC might report error states on initial startup (RED-61707) + +There is no workaround at this time except to ignore the errors. + +### PVC size issues when using decimal value in spec (RED-62132) + +The workaround for this issue is to make sure you use integer values for the PVC size. + +## Compatibility Notes + +See [Supported Kubernetes distributions]({{< relref "/kubernetes/reference/supported_k8s_distributions.md" >}}) for the full list of supported distributions. + +### Now supported + +This release adds support for the following: + +* K8s 1.22 for GKE, AKS, and kOps +* OpenShift 4.9 (uses K8s 1.22) + +### No longer supported + +This release removes support for the following: + +* Rancher 2.4 (previously deprecated) \ No newline at end of file From fb7de153933b62eb1f677c34b7ad70b5bc6c4cc7 Mon Sep 17 00:00:00 2001 From: kaitlynmichael Date: Thu, 6 Jan 2022 14:35:57 -0600 Subject: [PATCH 2/7] major changes desc and changed eks to aks --- content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md index 5ac3d26a8fa..87a11237448 100644 --- a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md +++ b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md @@ -1,7 +1,7 @@ --- Title: Redis Enterprise for Kubernetes Release Notes 6.2.8-10 (January 2022) linktitle: 6.2.8-10 (January 2022) -description: Support for RS 6.2.8, certificate management, and Redis upgrade policy. +description: Support for Istio as ingress controller, K8s 1.22 (AKS, kOps, GKE), OpenShift 4.9. weight: 66 alwaysopen: false categories: ["Platforms"] @@ -26,7 +26,7 @@ This release includes the following container images: ## Feature improvements * Istio gateway/virtual services are supported as ingress controllers. Note that for Active-Active databases, the operator doesn't create ingress rules, and those should be manually configured (RED-64020) -* Support for K8s 1.22 (EKS, kOps, GKE) and OpenShift 4.9 (RED-64016) +* Support for K8s 1.22 (AKS, kOps, GKE) and OpenShift 4.9 (RED-64016) * Support for pod termination grace period customization in the REC (advanced use case) (RED-67217) * Improved security granularity of SCC configuration steps in documentation (RED-67321) * Changed behavior when two databases with the same name are created on the cluster. The operator avoids creating a service for them to prevent possible corruption (RED-64535) From 5f50d29ca9b45c28009f06e7656e3ff9c58fc718 Mon Sep 17 00:00:00 2001 From: Kaitlyn Michael <76962844+kaitlynmichael@users.noreply.github.com> Date: Thu, 6 Jan 2022 16:26:40 -0600 Subject: [PATCH 3/7] Update content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md Co-authored-by: Rachel Elledge <86307637+rrelledge@users.noreply.github.com> --- content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md index 87a11237448..6f0ba97bdce 100644 --- a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md +++ b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md @@ -95,7 +95,7 @@ REDB resources first and the REC second. Afterwards, you may delete the project. ### REC extraLabels are not applied to PVCs on K8s versions 1.15 or older (RED-51921) In K8s 1.15 or older, the PVC labels come from the match selectors and not the -PVC templates. As such, these versions can not support PVC labels. If this feature +PVC templates. As such, these versions cannot support PVC labels. If this feature is required, the only fix is to upgrade the K8s cluster to a newer version. ### Hashicorp Vault integration - no support for Gesher (RED-55080) From 890e74dec0e76b7a58543cae7d7176afd1738ac4 Mon Sep 17 00:00:00 2001 From: kaitlynmichael Date: Mon, 10 Jan 2022 09:04:43 -0600 Subject: [PATCH 4/7] update supported distros --- .../kubernetes/reference/supported_k8s_distributions.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/content/kubernetes/reference/supported_k8s_distributions.md b/content/kubernetes/reference/supported_k8s_distributions.md index a5694b1dc5b..5cb8809821c 100644 --- a/content/kubernetes/reference/supported_k8s_distributions.md +++ b/content/kubernetes/reference/supported_k8s_distributions.md @@ -26,23 +26,28 @@ Each release of the Redis Enterprise operator is thoroughly tested against a set | OpenShift 4.6 (K8s 1.19) | supported | | OpenShift 4.7 (K8s 1.20) | supported | | OpenShift 4.8 (K8s 1.21) | supported | +| OpenShift 4.9 (K8s 1.22) | supported | | KOPS vanilla 1.18 | supported | | KOPS vanilla 1.19 | supported | | KOPS vanilla 1.20 | supported | | KOPS vanilla 1.21 | supported | +| KOPS vanilla 1.22 | supported | | GKE 1.19 | supported | | GKE 1.20 | supported | | GKE 1.21 | supported | -| Rancher 2.4 (K8s 1.17) | deprecated | -| Rancher 2.4 (K8s 1.18) | deprecated | +| GKE 1.22 | supported | | Rancher 2.5 (K8s 1.17) | supported | | Rancher 2.5 (K8s 1.18) | supported | | Rancher 2.5 (K8s 1.19) | supported | | Rancher 2.5 (K8s 1.20) | supported | | VMWare TKGI** 1.10 (K8s 1.19) | supported | | AKS 1.19 | supported | +| AKS 1.20 | supported | | AKS 1.21 | supported | +| AKS 1.22 | supported | | EKS 1.18 | supported | +| EKS 1.19 | supported | +| EKS 1.20 | supported | | EKS 1.21 | supported | \* No longer supported by the vendor From 8646d8c98b15f186448198331a67a52f00224657 Mon Sep 17 00:00:00 2001 From: kaitlynmichael Date: Mon, 10 Jan 2022 09:06:48 -0600 Subject: [PATCH 5/7] took out broken link --- content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md index 6f0ba97bdce..8746a9db54b 100644 --- a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md +++ b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md @@ -11,7 +11,7 @@ aliases: [ --- ## Overview -The Redis Enterprise [K8s 6.2.8-10](https://github.com/RedisLabs/redis-enterprise-k8s-docs/releases/tag/v6.2.8-10) release provides support for the [Redis Enterprise Software release 6.2.8]({{}}) and includes several enhancements and bug fixes. +The Redis Enterprise K8s 6.2.8-10 release provides support for the [Redis Enterprise Software release 6.2.8]({{}}) and includes several enhancements and bug fixes. The key new features, bug fixes, and known limitations are described below. From f1a7ea760000dbe5899659c8ff0fd83434526b8d Mon Sep 17 00:00:00 2001 From: kaitlynmichael Date: Mon, 10 Jan 2022 09:08:46 -0600 Subject: [PATCH 6/7] add istio version --- content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md index 8746a9db54b..aeb8df7b43c 100644 --- a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md +++ b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md @@ -25,7 +25,7 @@ This release includes the following container images: ## Feature improvements -* Istio gateway/virtual services are supported as ingress controllers. Note that for Active-Active databases, the operator doesn't create ingress rules, and those should be manually configured (RED-64020) +* Istio (version 1.12.0) gateway/virtual services are supported as ingress controllers. Note that for Active-Active databases, the operator doesn't create ingress rules, and those should be manually configured (RED-64020) * Support for K8s 1.22 (AKS, kOps, GKE) and OpenShift 4.9 (RED-64016) * Support for pod termination grace period customization in the REC (advanced use case) (RED-67217) * Improved security granularity of SCC configuration steps in documentation (RED-67321) From 9bd05da27aefa6dd53c93f947a1ca16a228794b8 Mon Sep 17 00:00:00 2001 From: kaitlynmichael Date: Mon, 10 Jan 2022 09:10:24 -0600 Subject: [PATCH 7/7] reword istio verison blurb --- content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md index aeb8df7b43c..0577fbc1f55 100644 --- a/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md +++ b/content/kubernetes/release-notes/k8s-6-2-8-10-2022-01.md @@ -25,7 +25,7 @@ This release includes the following container images: ## Feature improvements -* Istio (version 1.12.0) gateway/virtual services are supported as ingress controllers. Note that for Active-Active databases, the operator doesn't create ingress rules, and those should be manually configured (RED-64020) +* Istio gateway/virtual services are supported as ingress controllers. Note that for Active-Active databases, the operator doesn't create ingress rules, and those should be manually configured. The version of Istio that was tested is Istio 1.12.0 (RED-64020) * Support for K8s 1.22 (AKS, kOps, GKE) and OpenShift 4.9 (RED-64016) * Support for pod termination grace period customization in the REC (advanced use case) (RED-67217) * Improved security granularity of SCC configuration steps in documentation (RED-67321)