Release v1.2.1

Rancher Kubernetes Engine (RKE) is a CNCF-certified Kubernetes distribution that runs entirely within Docker containers. It works on bare-metal and virtualized servers. With RKE, the installation and operation of Kubernetes is both simplified and easily automated, and it’s entirely independent of the operating system and platform you’re running.

Enhancements

• Introduced new Kubernetes versions v1.19.3-rancher1-1, v1.18.10-rancher1-1, and v1.17.13-rancher1-1 to address following CVEs:

1. CVE-2020-8563 - Secret leaks in kube-controller-manager when using vSphere provider
2. CVE-2020-8564 - Docker config secrets leaked when file is malformed and log level >= 4
3. CVE-2020-8566 - Mask Ceph RBD adminSecrets in logs when logLevel >= 4

Security Announcement

Known Major Issues

• In clusters where cloud_provider is configured, and either address or internal_address does not contain a valid IP address (e.g. hostname or FQDN), kube-proxy will fail to start. [#1725]

Kubernetes Versions

Each version of RKE has a specific list of supported Kubernetes versions. If you want to use a different version than listed below, you will need to update Kubernetes using the system images option in your cluster.yml.

New Images in v1.19.3-rancher1-1, v1.18.10-rancher1-1 and v1.17.13-rancher1-1:

Updated Hyperkube Image based on k8s versions

• rancher/hyperkube:v1.19.3-rancher1
• rancher/hyperkube:v1.18.10-rancher1
• rancher/hyperkube:v1.17.13-rancher1