DKP 2.2.2 Release Notes

D2iQ® Konvoy® version 2.2.2 was released on July 7th, 2022.

DOWNLOAD DKP

NOTE: You must be a registered user and logged on to the support portal to download this product. New customers must contact their sales representative or sales@d2iq.com before attempting to download or install DKP.

Release summary

Welcome to D2iQ Kubernetes Platform (DKP) 2.2.2! This release provides new features and enhancements to improve the user experience, fix reported issues, integrate changes from previous releases, and maintains compatibility and support for other packages used in Konvoy.

DKP 2.2.x supports Kubernetes versions between 1.21.0 and 1.22.x. Any cluster you want to attach using DKP 2.2.x must be running a Kubernetes version in this range.

Supported versions

Supported FIPS Manifests

Fixes and Improvements

Added Continuous Deployment(CD)/Gitops to the View role

The CD/Gitops resource was added to the ‘View’ clusterRole, so that users with only this permission can view the CD/Gitops resources.

Fixed containerd vulnerability (COPS-7531)

DKP packages now include updated containerd and FIPS manifests, mitigating a known containerd vulnerability.

Updated Azure support to fix an issue with specifying Additional Tags (COPS-7346)

The Cluster API Azure (CAPZ) support was updated to resolve a race condition that could prevent the creation of additional resource tags.

Updated Traefik Forward Auth to support ‘clusterStorage’ option. (COPS-7344)

The Traefik Forward Auth (TFA) component was updated to support storing of session cookies in-cluster instead of in the browser.

Kiali Platform Application not working properly (COPS-7336)

An installation issue that caused the Kiali platform application to malfunction has been corrected.

Updated Dex CRDS (COPS-7341)

The DEX Custom Resource Definitions used for configuring LDAP have been updated to include the correct syntax.

DKP custom credentials plugin restored (COPS-7343)

The mesosphere/dex-k8s-authenticator docker container now includes the appropriate binaries that allow users to download the referenced ‘konvoy-async-plugin’ after configuring a cluster using an external IDP for authentication.

FIPS Upgrade from 2.1.x to 2.2.x

If upgrading a FIPS cluster, there is a bug in the upgrade of kube-proxy DaemonSet in that it does not get automatically upgraded. To correctly upgrade, run the workaround command shown below:

kubectl set image -n kube-system daemonset.v1.apps/kube-proxy kube-proxy=docker.io/mesosphere/kube-proxy:v1.22.8_fips.0

Component updates

When upgrading to this release, the following services and service components are upgraded to the listed version:

Additional resources

For more information about working with native Kubernetes, see the Kubernetes documentation.

For a full list of attributed 3rd party software, see d2iq.com/legal/3rd.