2019-03-06

Upgrade Kubernetes components

#kubernetes  #k8s  #upgrade 

We are in the process of upgrading our staging Kubernetes clusters components to the latest stable releases. Production clusters will follow in 1 to 2 weeks (to be announced) after we have confirmed there are no issues with our customer’s workloads.

ComponentOld versionNew versionChangelog
cert-managerv0.5.0v0.6.2https://github.com/jetstack/cert-manager/releases
cluster-autoscalerv1.2.Xv1.3.6https://github.com/kubernetes/autoscaler/releases
k8s-dashboardseveralv1.10.1https://github.com/kubernetes/dashboard/releases
external-dnsv0.5.6v0.5.11https://github.com/kubernetes-incubator/external-dns/releases
fluentd-kubernetes-daemonsetv1.3.2v1.3.3https://github.com/fluent/fluentd-kubernetes-daemonset/blob/master/README.md
kube2iam0.10.40.10.6https://github.com/jtblin/kube2iam/releases
nginx-ingress-controller0.19.00.23.0https://github.com/kubernetes/ingress-nginx/releases
dexv2.10.0v2.15.0https://github.com/dexidp/dex/releases
keycloack-proxyv2.2.2v2.3.0https://github.com/keycloak/keycloak-gatekeeper/releases
prometheus-operatorv0.25.0v0.29.0https://github.com/coreos/prometheus-operator/releases
alertmanagerv0.15.2v0.16.1https://github.com/prometheus/alertmanager/releases
prometheusv2.4.3v2.7.1https://github.com/prometheus/prometheus/releases
grafana5.3.46.0.0https://github.com/grafana/grafana/releases

Main improvements

cert-manager

  • Multiple bug-fixes
  • Introduced ACME ‘Order’ and ‘Challenge’ CRDs

cluster-autoscaler

  • Multiple bug-fixes
  • Update AWS EC2 instance type catalog

k8s-dashboard

  • Consolidate version among clusters

external-dns

  • Multiple bug-fixes
  • Allow AWS batching to fully sync on each run

nginx-ingress-controller

  • Multiple bug-fixes and security fixes
  • New kubectl plugin Alpha
  • NGINX 1.15.9

dex

  • Multiple bug-fixes and security fixes
  • New connector: Bitbucket Cloud

alertmanager

  • Multiple bug-fixes
  • Add support for grouping by all labels
  • Deprecate API v1

prometheus

  • Multiple bug-fixes and security fixes

grafana

  • Multiple bug-fixes and security fixes
  • Explore: A new query focused workflow for ad-hoc data exploration and troubleshooting

Breaking changes

nginx-ingress-controller

  • Annotation nginx.ingress.kubernetes.io/rewrite-target has changed and will not behave as expected if you don’t update them.

Refer to https://kubernetes.github.io/ingress-nginx/examples/rewrite/#rewrite-target on how to change it.

  • Annotations nginx.ingress.kubernetes.io/add-base-url and nginx.ingress.kubernetes.io/base-url-scheme were removed.

  • By default do not trust any client to extract true client IP address from X-Forwarded-For header using realip module (use-forwarded-headers: “false”)