Product Change Notices

Support for containerd

Released: Dec 16, 2022

Kubernetes community has removed dockershim from clusters of version 1.24, in which Docker runtime is no longer supported. Starting from version 1.23, CCE clusters allow you to use containerd as the runtime. CCE is still compatible with Docker by now, but will remove the support for Docker in clusters of version 1.27. You are advised to use containerd when creating a node and change the runtime of existing nodes to containerd.

For details about the differences between containerd and Docker, see Container Engine.

Service Account Token Security Improvement

Released: Nov 24, 2022

In Kubernetes clusters v1.21 or later, pods will not automatically mount permanent tokens. You can obtain tokens using TokenRequest API and mount them to the pod using the projected volume.

Such tokens are valid for a fixed period (one hour by default). Before expiration, kubelet refreshes the tokens to ensure that the pods always use valid tokens. This feature is enabled by default in Kubernetes clusters v1.21 and later. If you use a Kubernetes client of a to-be-outdated version, the certificate reloading may fail.

For details, see Service Account Token Security Improvement.

Upgrading Helm V2 to Helm V3

Released: Aug 30, 2022

The open source Helm on which the charts in the CCE console depend has upgraded from V2 to V3. From now on, CCE will automatically convert Helm V2 releases in your clusters to Helm V3 ones. Some Helm V2 functions have better implementations in Helm V3, but may be incompatible with the original ones. You need to check the differences between Helm V3 and Helm V2 and perform adaptation verification as described in Differences Between Helm v2 and Helm v3 and Adaptation Solutions.

If switching to Helm V3 is hard for now, you can manage and deploy Helm V2 releases through the Helm client in the background. For details, see Deploying an Application Through the Helm v2 Client. To better run your services deployed in CCE with sufficient O&M support, you are advised to switch to the Helm V3 before December 30, 2022.

Optimized Key Authentication of everest Add-On

Released: Feb 2, 2021

In version 1.2.0 of the everest add-on, key authentication is optimized when OBS is used. After the everest add-on is upgraded from a version earlier than 1.2.0 to 1.2.0 or later, you need to restart all workloads that use OBS in the cluster. Otherwise, workloads may not be able to use OBS.