Skip to content

Latest commit

 

History

History
137 lines (123 loc) · 5.57 KB

cs_versions_addons.md

File metadata and controls

137 lines (123 loc) · 5.57 KB
copyright lastupdated keywords subcollection
years
2014, 2019
2019-04-16
kubernetes, iks, nginx, ingress controller
containers

{:new_window: target="_blank"} {:shortdesc: .shortdesc} {:screen: .screen} {:pre: .pre} {:table: .aria-labeledby="caption"} {:codeblock: .codeblock} {:tip: .tip} {:note: .note} {:important: .important} {:deprecated: .deprecated} {:download: .download}

Cluster add-ons changelog

Your {{site.data.keyword.containerlong}} cluster comes with add-ons that are updated automatically by IBM. You can also disable automatic updates for some add-ons and manually update them separately from the master and worker nodes. Refer to the tables in the following sections for a summary of changes for each version. {: shortdesc}

Ingress ALB add-on changelog

{: #alb_changelog}

View build version changes for the Ingress application load balancer (ALB) add-on in your {{site.data.keyword.containerlong_notm}} clusters. {:shortdesc}

When the Ingress ALB add-on is updated, the nginx-ingress and ingress-auth containers in all ALB pods are updated to the latest build version. By default, automatic updates to the add-on are enabled, but you can disable automatic updates and manually update the add-on. For more information, see Updating the Ingress application load balancer.

Refer to the following table for a summary of changes for each build of the Ingress ALB add-on.

Changelog for the Ingress application load balancer add-on
`nginx-ingress` / `ingress-auth` build Release date Non-disruptive changes Disruptive changes
411 / 315 15 Apr 2019 Updates the value of the {{site.data.keyword.appid_full}} cookie expiration so that it matches the value of the access token expiration. -
411 / 306 22 Mar 2019 Updates the Go version to 1.12.1. -
410 / 305 18 Mar 2019
  • Fixes vulnerabilities for image scans.
  • Improves logging for {{site.data.keyword.appid_full_notm}}.
 -
408 / 304 05 Mar 2019 - Fixes bugs in the authorization integration related to logout functionality, token expiration, and the `OAuth` authorization callback. These fixes are implemented only if you enabled {{site.data.keyword.appid_full_notm}} authorization by using the [`appid-auth`](/docs/containers?topic=containers-ingress_annotation#appid-auth) annotation. To implement these fixes, additional headers are added, which increases the total header size. Depending on the size of your own headers and the total size of responses, you might need to adjust any [proxy buffer annotations](/docs/containers?topic=containers-ingress_annotation#proxy-buffer) that you use.
406 / 301 19 Feb 2019
  • Updates the Go version to 1.11.5.
  • Fixes vulnerabilities for image scans.
 -
404 / 300 31 Jan 2019 Updates the Go version to 1.11.4. -
403 / 295 23 Jan 2019
  • Updates the NGINX version of ALBs to 1.15.2.
  • IBM-provided TLS certificates are now automatically renewed 37 days before they expire instead of 7 days.
  • Adds {{site.data.keyword.appid_full_notm}} logout functionality: If the `/logout` prefix exists in an {{site.data.keyword.appid_full_notm}} path, cookies are removed and the user is sent back to the login page.
  • Adds a header to {{site.data.keyword.appid_full_notm}} requests for internal tracking purposes.
  • Updates the {{site.data.keyword.appid_short_notm}} location directive so that the `app-id` annotation can be used in conjunction with the `proxy-buffers`, `proxy-buffer-size`, and `proxy-busy-buffer-size` annotations.
  • Fixes a bug so that informational logs are not labeled as errors.
 Disables TLS 1.0 and 1.1 by default. If the clients that connect to your apps support TLS 1.2, no action is required. If you still have legacy clients that require TLS 1.0 or 1.1 support, manually enable the required TLS versions by following [these steps](/docs/containers?topic=containers-ingress#ssl_protocols_ciphers). For more information about how to see the TLS versions that your clients use to access your apps, see this [{{site.data.keyword.Bluemix_notm}} Blog post](https://www.ibm.com/blogs/bluemix/2018/11/ibm-cloud-kubernetes-service-alb-update-tls-1-0-and-1-1-disabled-by-default/).
393 / 291 09 Jan 2019 Adds support for multiple {{site.data.keyword.appid_full_notm}} instances. -
393 / 282 29 Nov 2018 Improves performance for {{site.data.keyword.appid_full_notm}}. -
384 / 246 14 Nov 2018 Improves logging and logout features for {{site.data.keyword.appid_full_notm}}. Replaces the self-signed certificate for `*.containers.mybluemix.net` with the LetsEncrypt signed certificate that is automatically generated for and used by the cluster. The `*.containers.mybluemix.net` self-signed certificate is removed.
350 / 192 05 Nov 2018 Adds support for enabling and disabling automatic updates of the Ingress ALB add-on. -