Shulou(Shulou.com)06/02 Report--

The fourth online training of "how to build CI/CD production Line" will be broadcast on Wednesday night. If you enter http://live.vhall.com/729465809, you can book and register for free!

March 26th, Rancher 2.2 official GA, by far the most important product version of Rancher Labs, creative new features in Rancher 2.2, including automatic etcd backup and recovery for disaster preparedness and recovery, multi-tenant application directories to improve privacy for sensitive projects, high availability Global DNS capabilities for applications across multiple clusters, etc. It will greatly simplify the configuration and management of enterprise Kubernetes by IT operators, and at the same time give enterprise IT developers more control over their applications.

In the past 20 days, the R & D and testing team of Rancher Labs conducted a large number of tests on the performance, stability and security of Rancher 2.2, repaired the important issue mentioned by users in the open source community in GitHub, and officially released Rancher 2.2.2 this week. This is the first version of 2.2.x with a stable tag, which means that it is a stable version officially recommended by Rancher for all users in the production environment!

Rancher 2.2 feature highlight

Rancher Global DNS

Users can deploy the application to any number of clusters, and Rancher Global DNS will automatically configure and maintain external DNS records corresponding to the IP address of the application's Kubernetes Ingress, thus completing the automatic addition or change of DNS records. Rancher version 2.2 GA supports Route53, AliDNS, and CloudFlare.

Etcd automatic backup and recovery for disaster recovery and recovery

Rancher performs scheduled and temporary backups of etcd from Rancher UI/API or Kubernetes API to local storage, NFS, or any S3-compatible object library. When an unexpected situation occurs, users can simply and quickly restore these backups directly to the cluster through UI.

Advanced monitoring of Kubernetes multi-cluster and multi-tenant

Rancher 2.2 is the only solution in the industry that supports Prometheus and Grafana in a multi-cluster, multi-tenant environment. The integrated Prometheus and Grafana allow users to monitor everything from cluster nodes in each project to Pod through simple UI operations.

Deployment and management of a single application across multiple Kubernetes clusters

Users can seamlessly deploy an application to any number of Kubernetes clusters for unified management, upgrade, rollback and version control, and can be used out of the box with the CI/CD system or any other automatic configuration program.

Multi-tenant application directory

Cluster-and project-specific configurations are provided for application directories, and users can finely isolate application directories by cluster or project.

Focus on Rancher 2.2.2

Rancher CVE-2019-11202 repair

We found a problem: the default administrator account created when Rancher first started will be recreated on subsequent restarts of Rancher, even if the Rancher administrator explicitly deletes the account. This poses a security risk because the account is recreated with the default user name and password of Rancher. Therefore, * * users can use these default account passwords to gain administrator access to Rancher Server.

This issue affects the following versions of Rancher:v2.0.0-v2.0.13,v2.1.0-v2.1.8 and v2.2.0-2.2.1.

A fix for CVE-2019-11202 is now available in Rancher v2.2.2. In Rancher v2.2.2, Rancher will not recreate an administrator account when it is restarted. Fixes for versions v2.1.x and v2.0.x will be released shortly. Don't worry, however, all versions of Rancher can be protected from this vulnerability by disabling the default administrator account rather than deleting it completely.

Rotate cluster certificates through UI

In Rancher 2.2.2, users can complete the cluster certificate rotation through the UI operation! In Rancher 2. 0 and 2. 1, the automatically generated certificate for the Rancher configuration cluster is valid for 1 year. This means that if you created a Rancher configuration cluster about a year ago, you need to rotate the certificate after 1 year, otherwise the cluster will enter an error state when the certificate expires. Now, 2.2.2% of users can rotate on UI, eliminating the need for cumbersome operations in the past.

The Rancher R & D team will also provide back-end port solutions for Rancher 2.0 and 2.1 users as soon as possible, so that 2.0 and 2.1 users can also rotate certificates on existing clusters.

Experimental support for Kubernetes v1.14.1

Experimental support for Kubernetes v1.14.1 is implemented in Rancher v2.2.2. This also provides a way for us to support Windows in later updates. Last month, the latest version of Kubernetes, v1.14, was the first version of Kubernetes to officially provide production-level support for Windows nodes.

Performance improvement of UI and API

In Rancher v2.2.2, the personalities of both UI and API have been greatly optimized. The load time required for API calls to project-related resources (especially pod) is greatly reduced, and the page is available in a very short time.

Other fixes or updates

Fixed an issue where node templates could not be added to the AWS China region.

For stability reasons, project-level monitoring has been temporarily removed and will be re-added in the next release; cluster-level monitoring is not affected by this.

Fixed possible failure of publishing catalog templates due to certificate errors.

Fixed possible expiration of self-signed certificates used to communicate with stand-alone Rancher servers.

Fixed an issue where Rancher configuration cluster status was incorrectly extracted in clusters with prefix patches.

Conclusion

For more information on problem fixes, upgrades, rollbacks, etc., in Rancher v2.2.2, please refer to the complete Release Note of Rancher v2.2.2 on GitHub:

Https://github.com/rancher/rancher/releases/tag/v2.2.2

If Rancher subscription customers have any questions about Rancher 2.2.2 or want to smoothly upgrade the existing Rancher version, please let the Rancher Support team know through the Rancher Technical support Portal.

TRY IT! TRY IT NOW!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.