From 76a43be812f7a70ef7c4f2e1e98fa0f60a6e6991 Mon Sep 17 00:00:00 2001 From: Pavan Chilukuri Date: Thu, 7 Feb 2019 21:03:16 -0600 Subject: [PATCH 01/18] Added a command for getting the service When you use `docker service ls`, it won't show you the list of services. Instead use `docker stack services getstartedlab` to show the service that was created and thereby getting the Service ID of it. --- get-started/part3.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/get-started/part3.md b/get-started/part3.md index c9baf3cc60..dcadb483cf 100644 --- a/get-started/part3.md +++ b/get-started/part3.md @@ -132,7 +132,13 @@ docker stack deploy -c docker-compose.yml getstartedlab Our single service stack is running 5 container instances of our deployed image on one host. Let's investigate. -Get the service ID for the one service in our application: +To get the services for a service stack, get the service ID for the one service in our application: +```shell +docker stack services getstartedlab +``` + + +If you are using **Kubernetes**, get the service ID for the one service in our application: ```shell docker service ls From 873cef75264ce08b12e75a614296a697f8bb6364 Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Tue, 12 Feb 2019 10:50:01 -0500 Subject: [PATCH 02/18] Add --skip-cloud-provider option --- datacenter/ucp/3.0/reference/cli/install.md | 1 + 1 file changed, 1 insertion(+) diff --git a/datacenter/ucp/3.0/reference/cli/install.md b/datacenter/ucp/3.0/reference/cli/install.md index 79ee12a366..ba18153f97 100644 --- a/datacenter/ucp/3.0/reference/cli/install.md +++ b/datacenter/ucp/3.0/reference/cli/install.md @@ -66,6 +66,7 @@ command. | `--pod-cidr` | Kubernetes cluster IP pool for the pods to allocated IPs from (Default: 192.168.0.0/16) | | `--cloud-provider` | The cloud provider for the cluster | +| `--skip-cloud-provider` | Disables checks that rely on detecting the cloud provider (if any) on which the cluster is currently running. | | `--dns` | Set custom DNS servers for the UCP containers | | `--dns-opt` | Set DNS options for the UCP containers | | `--dns-search` | Set custom DNS search domains for the UCP containers | From 70e2dba3650ca5f0f870754d14506155ce20e493 Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Tue, 12 Feb 2019 10:52:07 -0500 Subject: [PATCH 03/18] Update install.md --- reference/ucp/3.1/cli/install.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/reference/ucp/3.1/cli/install.md b/reference/ucp/3.1/cli/install.md index 355ec80ed1..07fa61f07f 100644 --- a/reference/ucp/3.1/cli/install.md +++ b/reference/ucp/3.1/cli/install.md @@ -57,7 +57,8 @@ command. | `--cni-installer-url` | Deprecated feature. A URL pointing to a Kubernetes YAML file to be used as an installer for the CNI plugin of the cluster. If specified, the default CNI plugin is not installed. If the URL uses the HTTPS scheme, no certificate verification is performed. | | `--unmanaged-cni` | flag to indicate if cni provider is calico and managed by UCP (calico is the default CNI provider). The default value is "true" when using the default Calico CNI. | | `--pod-cidr` | Kubernetes cluster IP pool for the pods to allocated IPs from (Default: `192.168.0.0/16`) | -| `--cloud-provider` | The cloud provider for the cluster | +| `--cloud-provider` | The cloud provider for the cluster +| `--skip-cloud-provider` | Disables checks that rely on detecting the cloud provider (if any) on which the cluster is currently running. | | `--dns` | Set custom DNS servers for the UCP containers | | `--dns-opt` | Set DNS options for the UCP containers | | `--dns-search` | Set custom DNS search domains for the UCP containers | From 8ce1ede66e7be31d375437c53d6a843fc70344dc Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Tue, 12 Feb 2019 12:52:55 -0500 Subject: [PATCH 04/18] Updates to include additional input https://github.com/docker/docs-private/pull/956/files --- datacenter/ucp/3.0/reference/cli/install.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/datacenter/ucp/3.0/reference/cli/install.md b/datacenter/ucp/3.0/reference/cli/install.md index ba18153f97..2c562d90b8 100644 --- a/datacenter/ucp/3.0/reference/cli/install.md +++ b/datacenter/ucp/3.0/reference/cli/install.md @@ -63,7 +63,6 @@ command. | `--swarm-port` | Port for the Docker Swarm manager. Used for backwards compatibility | | `--swarm-grpc-port` | Port for communication between nodes | | `--cni-installer-url` | A URL pointing to a Kubernetes YAML file to be used as an installer for the CNI plugin of the cluster. If specified, the default CNI plugin is not installed. If the URL uses the HTTPS scheme, no certificate verification is performed. | - | `--pod-cidr` | Kubernetes cluster IP pool for the pods to allocated IPs from (Default: 192.168.0.0/16) | | `--cloud-provider` | The cloud provider for the cluster | | `--skip-cloud-provider` | Disables checks that rely on detecting the cloud provider (if any) on which the cluster is currently running. | @@ -81,7 +80,8 @@ command. | `--swarm-experimental` | Enable Docker Swarm experimental features. Used for backwards compatibility | | `--disable-tracking` | Disable anonymous tracking and analytics | | `--disable-usage` | Disable anonymous usage reporting | -| `--external-server-cert` | Use the certificates in the `ucp-controller-server-certs` volume instead of generating self-signed certs during installation | +| `--external-server-cert` | Use the certificates in the `ucp-controller-server-certs` volume instead of generating self-signed certs during installation +| | `--preserve-certs` | Don't generate certificates if they already exist | | `--binpack` | Set the Docker Swarm scheduler to binpack mode. Used for backwards compatibility | | `--random` | Set the Docker Swarm scheduler to random mode. Used for backwards compatibility | From 092cfaf71dfddfad066c8fff018c4191880c3fb4 Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Tue, 12 Feb 2019 13:50:22 -0500 Subject: [PATCH 05/18] Alphabetized and (hopefully) fixed table spacing error --- reference/ucp/3.1/cli/install.md | 67 ++++++++++++++++---------------- 1 file changed, 34 insertions(+), 33 deletions(-) diff --git a/reference/ucp/3.1/cli/install.md b/reference/ucp/3.1/cli/install.md index 07fa61f07f..25b10a29f3 100644 --- a/reference/ucp/3.1/cli/install.md +++ b/reference/ucp/3.1/cli/install.md @@ -42,42 +42,43 @@ command. | Option | Description | |:-------------------------|:------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| `--debug, D` | Enable debug mode | -| `--jsonlog` | Produce json formatted output for easier parsing | -| `--interactive, i` | Run in interactive mode and prompt for configuration values | -| `--admin-username` | The UCP administrator username | | `--admin-password` | The UCP administrator password | -| `--san` | Add subject alternative names to certificates (e.g. --san www1.acme.com --san www2.acme.com) | | `--unmanaged-cni` | This determines who manages the CNI plugin, using `true` or `false`. The default is `false`. The `true` value installs UCP without a managed CNI plugin. UCP and the Kubernetes components will be running but pod to pod networking will not function until a CNI plugin is manually installed. This will impact some functionality of UCP until a CNI plugin is running. | -| `--host-address` | The network address to advertise to other nodes. Format: IP address or network interface name | -| `--data-path-addr` | Address or interface to use for data path traffic. Format: IP address or network interface name | -| `--controller-port` | Port for the web UI and API | -| `--kube-apiserver-port` | Port for the Kubernetes API server (default: 6443) | -| `--swarm-port` | Port for the Docker Swarm manager. Used for backwards compatibility | -| `--swarm-grpc-port` | Port for communication between nodes | +| `--admin-username` | The UCP administrator username | +| `--binpack` | Set the Docker Swarm scheduler to binpack mode. Used for backwards compatibility | +| `--cloud-provider` | The cloud provider for the cluster | `--cni-installer-url` | Deprecated feature. A URL pointing to a Kubernetes YAML file to be used as an installer for the CNI plugin of the cluster. If specified, the default CNI plugin is not installed. If the URL uses the HTTPS scheme, no certificate verification is performed. | -| `--unmanaged-cni` | flag to indicate if cni provider is calico and managed by UCP (calico is the default CNI provider). The default value is "true" when using the default Calico CNI. | -| `--pod-cidr` | Kubernetes cluster IP pool for the pods to allocated IPs from (Default: `192.168.0.0/16`) | -| `--cloud-provider` | The cloud provider for the cluster -| `--skip-cloud-provider` | Disables checks that rely on detecting the cloud provider (if any) on which the cluster is currently running. | -| `--dns` | Set custom DNS servers for the UCP containers | -| `--dns-opt` | Set DNS options for the UCP containers | -| `--dns-search` | Set custom DNS search domains for the UCP containers | -| `--unlock-key` | The unlock key for this swarm-mode cluster, if one exists. | -| `--existing-config` | Use the latest existing UCP config during this installation. The install fails if a config is not found. | -| `--force-minimums` | Force the install/upgrade even if the system doesn't meet the minimum requirements. | -| `--pull` | Pull UCP images: `always`, when `missing`, or `never` | -| `--registry-username` | Username to use when pulling images | -| `--registry-password` | Password to use when pulling images | -| `--kv-timeout` | Timeout in milliseconds for the key-value store | -| `--kv-snapshot-count` | Number of changes between key-value store snapshots | -| `--swarm-experimental` | Enable Docker Swarm experimental features. Used for backwards compatibility | +| `--controller-port` | Port for the web UI and API +| `--data-path-addr` | Address or interface to use for data path traffic. Format: IP address or network interface name +| `--debug, D` | Enable debug mode | | `--disable-tracking` | Disable anonymous tracking and analytics | | `--disable-usage` | Disable anonymous usage reporting | -| `--external-server-cert` | Use the certificates in the `ucp-controller-server-certs` volume instead of generating self-signed certs during installation | -| `--preserve-certs` | Don't generate certificates if they already exist | -| `--binpack` | Set the Docker Swarm scheduler to binpack mode. Used for backwards compatibility | -| `--random` | Set the Docker Swarm scheduler to random mode. Used for backwards compatibility | -| `--external-service-lb` | Set the external service load balancer reported in the UI | +| `--dns` | Set custom DNS servers for the UCP containers | +| `--dns-opt` | Set DNS options for the UCP containers | +| `--dns-search` | Set custom DNS search domains for the UCP containers | | `--enable-profiling` | Enable performance profiling | -| `--license` | Add a license: e.g.` --license "$(cat license.lic)" ` | +| `--existing-config` | Use the latest existing UCP config during this installation. The install fails if a config is not found. | +| `--external-server-cert` | Use the certificates in the `ucp-controller-server-certs` volume instead of generating self-signed certs during installation | +| `--external-service-lb` | Set the external service load balancer reported in the UI | | `--force-insecure-tcp` | Force install to continue even with unauthenticated Docker Engine ports | +| `--force-minimums` | Force the install/upgrade even if the system doesn't meet the minimum requirements. | +| `--host-address` | The network address to advertise to other nodes. Format: IP address or network interface name | +| `--interactive, i` | Run in interactive mode and prompt for configuration values | +| `--jsonlog` | Produce json formatted output for easier parsing | +| `--kube-apiserver-port` | Port for the Kubernetes API server (default: 6443) | +| `--kv-snapshot-count` | Number of changes between key-value store snapshots | +| `--kv-timeout` | Timeout in milliseconds for the key-value store | +| `--license` | Add a license: e.g.` --license "$(cat license.lic)" ` | +| `--pod-cidr` | Kubernetes cluster IP pool for the pods to allocated IPs from (Default: `192.168.0.0/16`) | +| `--preserve-certs` | Don't generate certificates if they already exist | +| `--pull` | Pull UCP images: `always`, when `missing`, or `never` | +| `--random` | Set the Docker Swarm scheduler to random mode. Used for backwards compatibility | +| `--registry-username` | Username to use when pulling images | +| `--registry-password` | Password to use when pulling images | +| `--san` | Add subject alternative names to certificates (e.g. --san www1.acme.com --san www2.acme.com) | +| `--skip-cloud-provider` | Disables checks that rely on detecting the cloud provider (if any) on which the cluster is currently running. | +| `--swarm-experimental` | Enable Docker Swarm experimental features. Used for backwards compatibility | +| `--swarm-port` | Port for the Docker Swarm manager. Used for backwards compatibility | +| `--swarm-grpc-port` | Port for communication between nodes | +| `--unlock-key` | The unlock key for this swarm-mode cluster, if one exists. | +| `--unmanaged-cni` | flag to indicate if cni provider is calico and managed by UCP (calico is the default CNI provider). The default value is "true" when using the default Calico CNI. | +| `--unmanaged-cni` | This determines who manages the CNI plugin, using `true` or `false`. The default is `false`. The `true` value installs UCP without a managed CNI plugin. UCP and the Kubernetes components will be running but pod to pod networking will not function until a CNI plugin is manually installed. This will impact some functionality of UCP until a CNI plugin is running. | From 6aa9d772a15c53686282a7225eb090ad61508292 Mon Sep 17 00:00:00 2001 From: Maria Bermudez Date: Wed, 13 Feb 2019 16:25:22 -0800 Subject: [PATCH 06/18] Fixes 8034 --- _data/glossary.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_data/glossary.yaml b/_data/glossary.yaml index d42732b086..ddc581405c 100644 --- a/_data/glossary.yaml +++ b/_data/glossary.yaml @@ -32,7 +32,7 @@ collection: | nodes, services, containers, volumes, networks, and secrets. [Learn how to manage collections](/datacenter/ucp/2.2/guides/access-control/manage-access-with-collections/). Compose: | [Compose](https://github.com/docker/compose) is a tool for defining and - running complex applications with Docker. With compose, you define a + running complex applications with Docker. With Compose, you define a multi-container application in a single file, then spin your application up in a single command which does everything that needs to be done to get it running. From 7ee7214028164212a9ed8c1cfa2f6acee33790f9 Mon Sep 17 00:00:00 2001 From: Maria Bermudez Date: Wed, 13 Feb 2019 18:03:47 -0800 Subject: [PATCH 07/18] Incorporate suggested content addition --- get-started/part3.md | 26 ++++++++++++++++++++++++-- 1 file changed, 24 insertions(+), 2 deletions(-) diff --git a/get-started/part3.md b/get-started/part3.md index dcadb483cf..9f6068f335 100644 --- a/get-started/part3.md +++ b/get-started/part3.md @@ -149,18 +149,28 @@ named it the same as shown in this example, the name is `getstartedlab_web`. The service ID is listed as well, along with the number of replicas, image name, and exposed ports. +You can also run `docker stack services`, followed by the name of +your stack. The following example command lets you view all the services associated with the +`getstartedlab` stack: + +```bash +docker stack services getstartedlab +ID NAME MODE REPLICAS IMAGE PORTS +bqpve1djnk0x getstartedlab_web replicated 5/5 username/repo:tag *:4000->80/tcp +``` + A single container running in a service is called a **task**. Tasks are given unique IDs that numerically increment, up to the number of `replicas` you defined in `docker-compose.yml`. List the tasks for your service: -```shell +```bash docker service ps getstartedlab_web ``` Tasks also show up if you just list all the containers on your system, though that is not filtered by service: -```shell +```bash docker container ls -q ``` @@ -174,6 +184,18 @@ load-balancing; with each request, one of the 5 tasks is chosen, in a round-robin fashion, to respond. The container IDs match your output from the previous command (`docker container ls -q`). +Additionally, you can run `docker stack ps` to view all tasks of a stack. + +```bash +docker stack ps getstartedlab +ID NAME IMAGE NODE DESIRED STATE CURRENT STATE ERROR PORTS +uwiaw67sc0eh getstartedlab_web.1 username/repo:tag docker-desktop Running Running 9 minutes ago +sk50xbhmcae7 getstartedlab_web.2 username/repo:tag docker-desktop Running Running 9 minutes ago +c4uuw5i6h02j getstartedlab_web.3 username/repo:tag docker-desktop Running Running 9 minutes ago +0dyb70ixu25s getstartedlab_web.4 username/repo:tag docker-desktop Running Running 9 minutes ago +aocrb88ap8b0 getstartedlab_web.5 username/repo:tag docker-desktop Running Running 9 minutes ago +``` + > Running Windows 10? > > Windows 10 PowerShell should already have `curl` available, but if not you can From ee821c590f580bc74527ada144f8bd17d98eaeee Mon Sep 17 00:00:00 2001 From: Maria Bermudez Date: Wed, 13 Feb 2019 18:10:50 -0800 Subject: [PATCH 08/18] Final cleanup --- get-started/part3.md | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/get-started/part3.md b/get-started/part3.md index 9f6068f335..ac8504b5fa 100644 --- a/get-started/part3.md +++ b/get-started/part3.md @@ -132,13 +132,7 @@ docker stack deploy -c docker-compose.yml getstartedlab Our single service stack is running 5 container instances of our deployed image on one host. Let's investigate. -To get the services for a service stack, get the service ID for the one service in our application: -```shell -docker stack services getstartedlab -``` - - -If you are using **Kubernetes**, get the service ID for the one service in our application: +Get the service ID for the one service in our application: ```shell docker service ls @@ -149,7 +143,7 @@ named it the same as shown in this example, the name is `getstartedlab_web`. The service ID is listed as well, along with the number of replicas, image name, and exposed ports. -You can also run `docker stack services`, followed by the name of +Alternatively, you can run `docker stack services`, followed by the name of your stack. The following example command lets you view all the services associated with the `getstartedlab` stack: @@ -184,7 +178,7 @@ load-balancing; with each request, one of the 5 tasks is chosen, in a round-robin fashion, to respond. The container IDs match your output from the previous command (`docker container ls -q`). -Additionally, you can run `docker stack ps` to view all tasks of a stack. +To view all tasks of a stack, you can run `docker stack ps` followed by your app name: ```bash docker stack ps getstartedlab From f07b26ef952b5b2af0cf1239d8dfc622d30ea9fd Mon Sep 17 00:00:00 2001 From: Trapier Marshall Date: Thu, 14 Feb 2019 09:24:11 -0500 Subject: [PATCH 09/18] calico rr: s/notes/nodes/ --- ee/ucp/admin/configure/deploy-route-reflectors.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ee/ucp/admin/configure/deploy-route-reflectors.md b/ee/ucp/admin/configure/deploy-route-reflectors.md index d4978db9e5..ca8f6090ed 100644 --- a/ee/ucp/admin/configure/deploy-route-reflectors.md +++ b/ee/ucp/admin/configure/deploy-route-reflectors.md @@ -27,7 +27,7 @@ workloads. If Route Reflectors are running on a same node as other workloads, swarm ingress and NodePorts might not work in these workloads. -## Choose dedicated notes +## Choose dedicated nodes Start by tainting the nodes, so that no other workload runs there. Configure your CLI with a UCP client bundle, and for each dedicated node, run: From e0a60f4a224fec89496900d4a0d699c5dabc97c0 Mon Sep 17 00:00:00 2001 From: Denis Date: Thu, 14 Feb 2019 18:26:50 +0300 Subject: [PATCH 10/18] Update year for Docker for Windows edge releases --- docker-for-windows/edge-release-notes.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docker-for-windows/edge-release-notes.md b/docker-for-windows/edge-release-notes.md index bb858238f3..e4a32f6ac0 100644 --- a/docker-for-windows/edge-release-notes.md +++ b/docker-for-windows/edge-release-notes.md @@ -16,7 +16,7 @@ notes](release-notes) are also available. (Following the CE release model, releases, and download stable and edge product installers at [Download Docker for Windows](install.md#download-docker-for-windows). -## Edge Releases of 2018 +## Edge Releases of 2019 ### Docker Community Edition 2.0.2.0 2019-02-06 @@ -54,6 +54,8 @@ for Windows](install.md#download-docker-for-windows). - Quit will not check if service is running anymore - Fix UI lock when changing kubernetes state +## Edge Releases of 2018 + ### Docker Community Edition 2.0.0.0-win82 2018-12-07 [Download](https://download.docker.com/win/edge/29268/Docker%20for%20Windows%20Installer.exe) From 6518c426fe163b6add02bd538bba6434cb9d7c9e Mon Sep 17 00:00:00 2001 From: Denis Date: Thu, 14 Feb 2019 18:31:21 +0300 Subject: [PATCH 11/18] Update year for Docker for Mac edge releases --- docker-for-mac/edge-release-notes.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docker-for-mac/edge-release-notes.md b/docker-for-mac/edge-release-notes.md index 0a3b05ee9c..ba5998adfe 100644 --- a/docker-for-mac/edge-release-notes.md +++ b/docker-for-mac/edge-release-notes.md @@ -16,7 +16,7 @@ notes](release-notes) are also available. (Following the CE release model, releases, and download stable and edge product installers at [Download Docker for Mac](install.md#download-docker-for-mac). -## Edge Releases of 2018 +## Edge Releases of 2019 ### Docker Community Edition 2.0.2.0 2019-02-06 @@ -55,6 +55,8 @@ for Mac](install.md#download-docker-for-mac). - Rename Docker for Mac to Docker Desktop - Partially open services ports if possible. [docker/for-mac#3438](https://github.com/docker/for-mac/issues/3438) +## Edge Releases of 2018 + ### Docker Community Edition 2.0.0.0-mac82 2018-12-07 [Download](https://download.docker.com/mac/edge/29268/Docker.dmg) From 09f7b5754a0e133d53e8832b79ed4d1fe0737358 Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Thu, 14 Feb 2019 12:38:44 -0500 Subject: [PATCH 12/18] Added missing info for 3.1.3 --- ee/ucp/release-notes.md | 1 + 1 file changed, 1 insertion(+) diff --git a/ee/ucp/release-notes.md b/ee/ucp/release-notes.md index 1f23ab557f..f0bbd6b31f 100644 --- a/ee/ucp/release-notes.md +++ b/ee/ucp/release-notes.md @@ -39,6 +39,7 @@ upgrade your installation to the latest release. * Added support for the limit arg in `docker ps`. (docker/orca#15812) * Fixed an issue with ucp-proxy health check. (docker/orca#15814, docker/orca#15813, docker/orca#16021, docker/orca#15811) * Fixed an issue with manual creation of a **ClusterRoleBinding** or **RoleBinding** for `User` or `Group` subjects requiring the ID of the user, organization, or team. (docker/orca#14935) + * Fixed an issue in which Kube Rolebindings only worked on UCP User ID and not UCP username. (docker/orca#14935) ### Known issue * By default, Kubelet begins deleting images, starting with the oldest unused images, after exceeding 85% disk space utilization. This causes an issue in an air-gapped environment. (docker/orca#16082) From 1e096d09b79d5114a53a08bffa51230a714b7c10 Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Thu, 14 Feb 2019 13:56:33 -0500 Subject: [PATCH 13/18] Update part3.md --- get-started/part3.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/get-started/part3.md b/get-started/part3.md index ac8504b5fa..28ec86e5ca 100644 --- a/get-started/part3.md +++ b/get-started/part3.md @@ -144,7 +144,7 @@ named it the same as shown in this example, the name is replicas, image name, and exposed ports. Alternatively, you can run `docker stack services`, followed by the name of -your stack. The following example command lets you view all the services associated with the +your stack. The following example command lets you view all services associated with the `getstartedlab` stack: ```bash @@ -178,7 +178,7 @@ load-balancing; with each request, one of the 5 tasks is chosen, in a round-robin fashion, to respond. The container IDs match your output from the previous command (`docker container ls -q`). -To view all tasks of a stack, you can run `docker stack ps` followed by your app name: +To view all tasks of a stack, you can run `docker stack ps` followed by your app name, as shown in the following example: ```bash docker stack ps getstartedlab From d23a678c4ad4762d672392cb95e5f4b99f394989 Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Thu, 14 Feb 2019 19:37:48 -0500 Subject: [PATCH 14/18] Wording updates --- reference/ucp/3.1/cli/install.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/reference/ucp/3.1/cli/install.md b/reference/ucp/3.1/cli/install.md index 25b10a29f3..7a45b9468d 100644 --- a/reference/ucp/3.1/cli/install.md +++ b/reference/ucp/3.1/cli/install.md @@ -80,5 +80,4 @@ command. | `--swarm-port` | Port for the Docker Swarm manager. Used for backwards compatibility | | `--swarm-grpc-port` | Port for communication between nodes | | `--unlock-key` | The unlock key for this swarm-mode cluster, if one exists. | -| `--unmanaged-cni` | flag to indicate if cni provider is calico and managed by UCP (calico is the default CNI provider). The default value is "true" when using the default Calico CNI. | -| `--unmanaged-cni` | This determines who manages the CNI plugin, using `true` or `false`. The default is `false`. The `true` value installs UCP without a managed CNI plugin. UCP and the Kubernetes components will be running but pod to pod networking will not function until a CNI plugin is manually installed. This will impact some functionality of UCP until a CNI plugin is running. | +| `--unmanaged-cni` | Indicates that the CNI plugin for Kubernetes networking is managed by UCP. The default value if `false` and the default managed CNI plugin is Calico. When set to `true`, UCP does not deploy or manage the lifecycle of the default CNI plugin - the CNI plugin is deployed and managed independently of UCP. Note that when `unmanaged-cni=true`, networking in the cluster will not function for Kubernetes until a CNI plugin is deployed. | From d52f9f5fdf165f747337c5d0a3bde47c72cab54e Mon Sep 17 00:00:00 2001 From: paigehargrave Date: Thu, 14 Feb 2019 20:04:05 -0500 Subject: [PATCH 15/18] Update install.md --- reference/ucp/3.1/cli/install.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/reference/ucp/3.1/cli/install.md b/reference/ucp/3.1/cli/install.md index 7a45b9468d..5528f1cdc3 100644 --- a/reference/ucp/3.1/cli/install.md +++ b/reference/ucp/3.1/cli/install.md @@ -80,4 +80,4 @@ command. | `--swarm-port` | Port for the Docker Swarm manager. Used for backwards compatibility | | `--swarm-grpc-port` | Port for communication between nodes | | `--unlock-key` | The unlock key for this swarm-mode cluster, if one exists. | -| `--unmanaged-cni` | Indicates that the CNI plugin for Kubernetes networking is managed by UCP. The default value if `false` and the default managed CNI plugin is Calico. When set to `true`, UCP does not deploy or manage the lifecycle of the default CNI plugin - the CNI plugin is deployed and managed independently of UCP. Note that when `unmanaged-cni=true`, networking in the cluster will not function for Kubernetes until a CNI plugin is deployed. | +| `--unmanaged-cni` |The default value of `false` indicates that Kubernetes networking is managed by UCP with its default managed CNI plugin, Calico. When set to `true`, UCP does not deploy or manage the lifecycle of the default CNI plugin - the CNI plugin is deployed and managed independently of UCP. Note that when `unmanaged-cni=true`, networking in the cluster will not function for Kubernetes until a CNI plugin is deployed. | From 27ef7a8b7372af2b79e900c52581c3651d823648 Mon Sep 17 00:00:00 2001 From: Maria Bermudez Date: Thu, 14 Feb 2019 17:11:17 -0800 Subject: [PATCH 16/18] Reorder relnotes according to version numbers --- engine/release-notes.md | 46 ++++++++++++++++++++--------------------- 1 file changed, 23 insertions(+), 23 deletions(-) diff --git a/engine/release-notes.md b/engine/release-notes.md index 54dd92e75a..246f966617 100644 --- a/engine/release-notes.md +++ b/engine/release-notes.md @@ -235,6 +235,8 @@ For more information on the list of deprecated flags and APIs, have a look at th In this release, Docker has also removed support for TLS < 1.2 [moby/moby#37660](https://github.com/moby/moby/pull/37660), Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/docker-ce-packaging/pull/255) / [docker-ce-packaging#254](https://github.com/docker/docker-ce-packaging/pull/254), and Debian 8 "Jessie" [docker-ce-packaging#255](https://github.com/docker/docker-ce-packaging/pull/255) / [docker-ce-packaging#254](https://github.com/docker/docker-ce-packaging/pull/254). +## Older Docker Engine EE Release notes + ### 18.03.1-ee-6 2019-02-11 @@ -255,29 +257,6 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * Fix resource leak on `docker logs --follow` [moby/moby#37576](https://github.com/moby/moby/pull/37576) * Mask proxy credentials from URL when displayed in system info (docker/escalation#879) -### 17.06.2-ee-19 - -2019-02-11 - -### Security fixes for Docker Engine - Enterprise -* Update `runc` to address a critical vulnerability that allows specially-crafted containers to gain administrative privileges on the host. [CVE-2019-5736](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736) -* Ubuntu 14.04 customers using a 3.13 kernel will need to upgrade to a supported Ubuntu 4.x kernel - -### 17.06.2-ee-18 -2019-01-09 - -### Security fixes -* Upgraded Go language to 1.10.6 to resolve CVE-2018-16873, CVE-2018-16874, and CVE-2018-16875. -* Added `/proc/asound` to masked paths -* Fixed authz plugin for 0-length content and path validation. - -### Fixes for Docker Engine EE -* Disable kmem accounting in runc on RHEL/CentOS (docker/escalation#614, docker/escalation#692) -* Fix resource leak on `docker logs --follow` [moby/moby#37576](https://github.com/moby/moby/pull/37576) -* Mask proxy credentials from URL when displayed in system info (docker/escalation#879) - - -## Older Docker Engine EE Release notes ### 18.03.1-ee-4 @@ -422,6 +401,27 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d + Support for `--chown` with `COPY` and `ADD` in `Dockerfile`. + Added functionality for the `docker logs` command to include the output of multiple logging drivers. +### 17.06.2-ee-19 + +2019-02-11 + +### Security fixes for Docker Engine - Enterprise +* Update `runc` to address a critical vulnerability that allows specially-crafted containers to gain administrative privileges on the host. [CVE-2019-5736](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736) +* Ubuntu 14.04 customers using a 3.13 kernel will need to upgrade to a supported Ubuntu 4.x kernel + +### 17.06.2-ee-18 +2019-01-09 + +### Security fixes +* Upgraded Go language to 1.10.6 to resolve CVE-2018-16873, CVE-2018-16874, and CVE-2018-16875. +* Added `/proc/asound` to masked paths +* Fixed authz plugin for 0-length content and path validation. + +### Fixes for Docker Engine EE +* Disable kmem accounting in runc on RHEL/CentOS (docker/escalation#614, docker/escalation#692) +* Fix resource leak on `docker logs --follow` [moby/moby#37576](https://github.com/moby/moby/pull/37576) +* Mask proxy credentials from URL when displayed in system info (docker/escalation#879) + ### 17.06.2-ee-17 2018-10-25 From df3e485ffa97d8fc08f1fbbbffca598f3b199e49 Mon Sep 17 00:00:00 2001 From: Maria Bermudez Date: Thu, 14 Feb 2019 17:55:16 -0800 Subject: [PATCH 17/18] Revert "Merge pull request #8256 from docker/engine-relnotes" This reverts commit fcad3317029b6cf281737d1e61f1d63dc4bd0fa5, reversing changes made to 4451bbb8656b27ace9e18a9e0cb0c175ccc76696. --- engine/release-notes.md | 46 ++++++++++++++++++++--------------------- 1 file changed, 23 insertions(+), 23 deletions(-) diff --git a/engine/release-notes.md b/engine/release-notes.md index 246f966617..54dd92e75a 100644 --- a/engine/release-notes.md +++ b/engine/release-notes.md @@ -235,8 +235,6 @@ For more information on the list of deprecated flags and APIs, have a look at th In this release, Docker has also removed support for TLS < 1.2 [moby/moby#37660](https://github.com/moby/moby/pull/37660), Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/docker-ce-packaging/pull/255) / [docker-ce-packaging#254](https://github.com/docker/docker-ce-packaging/pull/254), and Debian 8 "Jessie" [docker-ce-packaging#255](https://github.com/docker/docker-ce-packaging/pull/255) / [docker-ce-packaging#254](https://github.com/docker/docker-ce-packaging/pull/254). -## Older Docker Engine EE Release notes - ### 18.03.1-ee-6 2019-02-11 @@ -257,6 +255,29 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * Fix resource leak on `docker logs --follow` [moby/moby#37576](https://github.com/moby/moby/pull/37576) * Mask proxy credentials from URL when displayed in system info (docker/escalation#879) +### 17.06.2-ee-19 + +2019-02-11 + +### Security fixes for Docker Engine - Enterprise +* Update `runc` to address a critical vulnerability that allows specially-crafted containers to gain administrative privileges on the host. [CVE-2019-5736](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736) +* Ubuntu 14.04 customers using a 3.13 kernel will need to upgrade to a supported Ubuntu 4.x kernel + +### 17.06.2-ee-18 +2019-01-09 + +### Security fixes +* Upgraded Go language to 1.10.6 to resolve CVE-2018-16873, CVE-2018-16874, and CVE-2018-16875. +* Added `/proc/asound` to masked paths +* Fixed authz plugin for 0-length content and path validation. + +### Fixes for Docker Engine EE +* Disable kmem accounting in runc on RHEL/CentOS (docker/escalation#614, docker/escalation#692) +* Fix resource leak on `docker logs --follow` [moby/moby#37576](https://github.com/moby/moby/pull/37576) +* Mask proxy credentials from URL when displayed in system info (docker/escalation#879) + + +## Older Docker Engine EE Release notes ### 18.03.1-ee-4 @@ -401,27 +422,6 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d + Support for `--chown` with `COPY` and `ADD` in `Dockerfile`. + Added functionality for the `docker logs` command to include the output of multiple logging drivers. -### 17.06.2-ee-19 - -2019-02-11 - -### Security fixes for Docker Engine - Enterprise -* Update `runc` to address a critical vulnerability that allows specially-crafted containers to gain administrative privileges on the host. [CVE-2019-5736](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736) -* Ubuntu 14.04 customers using a 3.13 kernel will need to upgrade to a supported Ubuntu 4.x kernel - -### 17.06.2-ee-18 -2019-01-09 - -### Security fixes -* Upgraded Go language to 1.10.6 to resolve CVE-2018-16873, CVE-2018-16874, and CVE-2018-16875. -* Added `/proc/asound` to masked paths -* Fixed authz plugin for 0-length content and path validation. - -### Fixes for Docker Engine EE -* Disable kmem accounting in runc on RHEL/CentOS (docker/escalation#614, docker/escalation#692) -* Fix resource leak on `docker logs --follow` [moby/moby#37576](https://github.com/moby/moby/pull/37576) -* Mask proxy credentials from URL when displayed in system info (docker/escalation#879) - ### 17.06.2-ee-17 2018-10-25 From 8c7075545d5c37e1456099d2245cd18bfa964faa Mon Sep 17 00:00:00 2001 From: Maria Bermudez Date: Thu, 14 Feb 2019 18:05:37 -0800 Subject: [PATCH 18/18] Fix headings for version numbers for TOC generation --- engine/release-notes.md | 108 ++++++++++++++++++++-------------------- 1 file changed, 54 insertions(+), 54 deletions(-) diff --git a/engine/release-notes.md b/engine/release-notes.md index 54dd92e75a..afbd910d5e 100644 --- a/engine/release-notes.md +++ b/engine/release-notes.md @@ -235,14 +235,14 @@ For more information on the list of deprecated flags and APIs, have a look at th In this release, Docker has also removed support for TLS < 1.2 [moby/moby#37660](https://github.com/moby/moby/pull/37660), Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/docker-ce-packaging/pull/255) / [docker-ce-packaging#254](https://github.com/docker/docker-ce-packaging/pull/254), and Debian 8 "Jessie" [docker-ce-packaging#255](https://github.com/docker/docker-ce-packaging/pull/255) / [docker-ce-packaging#254](https://github.com/docker/docker-ce-packaging/pull/254). -### 18.03.1-ee-6 +## 18.03.1-ee-6 2019-02-11 ### Security fixes for Docker Engine - Enterprise * Update `runc` to address a critical vulnerability that allows specially-crafted containers to gain administrative privileges on the host. [CVE-2019-5736](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736) * Ubuntu 14.04 customers using a 3.13 kernel will need to upgrade to a supported Ubuntu 4.x kernel -### 18.03.1-ee-5 +## 18.03.1-ee-5 2019-01-09 ### Security fixes @@ -255,7 +255,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * Fix resource leak on `docker logs --follow` [moby/moby#37576](https://github.com/moby/moby/pull/37576) * Mask proxy credentials from URL when displayed in system info (docker/escalation#879) -### 17.06.2-ee-19 +## 17.06.2-ee-19 2019-02-11 @@ -263,7 +263,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * Update `runc` to address a critical vulnerability that allows specially-crafted containers to gain administrative privileges on the host. [CVE-2019-5736](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736) * Ubuntu 14.04 customers using a 3.13 kernel will need to upgrade to a supported Ubuntu 4.x kernel -### 17.06.2-ee-18 +## 17.06.2-ee-18 2019-01-09 ### Security fixes @@ -279,7 +279,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d ## Older Docker Engine EE Release notes -### 18.03.1-ee-4 +## 18.03.1-ee-4 2018-10-25 @@ -306,7 +306,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * Fixed the logic used for skipping over running tasks. [docker/swarmkit#2724](https://github.com/docker/swarmkit/pull/2724) * Addressed unassigned task leak when a service is removed. [docker/swarmkit#2709](https://github.com/docker/swarmkit/pull/2709) - ### 18.03.1-ee-3 + ## 18.03.1-ee-3 2018-08-30 #### Builder @@ -358,7 +358,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * Fixed the logic used for skipping over running tasks. [docker/swarmkit#2724](https://github.com/docker/swarmkit/pull/2724) * Addressed unassigned task leak when a service is removed. [docker/swarmkit#2709](https://github.com/docker/swarmkit/pull/2709) -### 18.03.1-ee-3 +## 18.03.1-ee-3 2018-08-30 #### Builder @@ -385,7 +385,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * Clean up tasks in dirty list for which the service has been deleted. [docker/swarmkit#2694](https://github.com/docker/swarmkit/pull/2694) * Propagate the provided external CA certificate to the external CA object in swarm. [docker/cli#1178](https://github.com/docker/cli/pull/1178) -### 18.03.1-ee-2 +## 18.03.1-ee-2 2018-07-10 > #### Important notes about this release @@ -398,7 +398,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d + Add /proc/acpi to masked paths [(CVE-2018-10892)](https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-10892). [moby/moby#37404](https://github.com/moby/moby/pull/37404) -### 18.03.1-ee-1 +## 18.03.1-ee-1 2018-06-27 > #### Important notes about this release @@ -422,7 +422,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d + Support for `--chown` with `COPY` and `ADD` in `Dockerfile`. + Added functionality for the `docker logs` command to include the output of multiple logging drivers. -### 17.06.2-ee-17 +## 17.06.2-ee-17 2018-10-25 #### Networking @@ -441,7 +441,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * Fixed leaking task resources. [docker/swarmkit#2755](https://github.com/docker/swarmkit/pull/2755) * Fixed deadlock in dispatcher that could cause node to crash. [docker/swarmkit#2753](https://github.com/docker/swarmkit/pull/2753) -### 17.06.2-ee-16 +## 17.06.2-ee-16 2018-07-26 #### Client @@ -467,7 +467,7 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * RoleManager will remove deleted nodes from the cluster membership. [docker/swarmkit#2607](https://github.com/docker/swarmkit/pull/2607) - Fix unassigned task leak when service is removed. [docker/swarmkit#2708](https://github.com/docker/swarmkit/pull/2708) -### 17.06.2-ee-15 +## 17.06.2-ee-15 2018-07-10 #### Runtime @@ -493,21 +493,21 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d - Fix `docker stack deploy --prune` with empty name removes all swarm services. [moby/moby#36776](https://github.com/moby/moby/issues/36776) -### 17.06.2-ee-13 +## 17.06.2-ee-13 2018-06-04 #### Networking - Fix attachable containers that may leave DNS state when exiting. [docker/libnetwork#2175](https://github.com/docker/libnetwork/pull/2175) -### 17.06.2-ee-12 +## 17.06.2-ee-12 2018-05-29 #### Networking - Fix to allow service update with no connection loss. [docker/libnetwork#2157](https://github.com/docker/libnetwork/pull/2157) -### 17.06.2-ee-11 +## 17.06.2-ee-11 2018-05-17 #### Client @@ -532,14 +532,14 @@ Ubuntu 14.04 "Trusty Tahr" [docker-ce-packaging#255](https://github.com/docker/d * When all Swarm managers are stopped at the same time, the swarm might end up in a split-brain scenario. [Learn more](https://success.docker.com/article/KB000759). -### 17.06.2-ee-10 +## 17.06.2-ee-10 2018-04-27 #### Runtime * Fix version output to not have `-dev`. -### 17.06.2-ee-9 +## 17.06.2-ee-9 2018-04-26 #### Runtime @@ -553,7 +553,7 @@ split-brain scenario. [Learn more](https://success.docker.com/article/KB000759). - Increase raft ElectionTick to 10xHeartbeatTick. [docker/swarmkit#2564](https://github.com/docker/swarmkit/pull/2564) - Adding logic to restore networks in order. [docker/swarmkit#2584](https://github.com/docker/swarmkit/pull/2584) -### 17.06.2-ee-8 +## 17.06.2-ee-8 2018-04-17 #### Runtime @@ -576,7 +576,7 @@ split-brain scenario. [Learn more](https://success.docker.com/article/KB000759). workaround, wait for leader election to complete before issuing commands to the cluster. -### 17.06.2-ee-7 +## 17.06.2-ee-7 2018-03-19 #### Important notes about this release @@ -627,7 +627,7 @@ split-brain scenario. [Learn more](https://success.docker.com/article/KB000759). - Synchronize Dispatcher.Stop() with incoming rpcs [docker/swarmkit#2524](https://github.com/docker/swarmkit/pull/2524) - Fix IP overlap with empty EndpointSpec [docker/swarmkit#2511](https://github.com/docker/swarmkit/pull/2511) -### 17.06.2-ee-6 +## 17.06.2-ee-6 2017-11-27 #### Runtime @@ -644,7 +644,7 @@ split-brain scenario. [Learn more](https://success.docker.com/article/KB000759). * Only shut down old tasks on success [docker/swarmkit#2308](https://github.com/docker/swarmkit/pull/2308) * Error on cluster spec name change [docker/swarmkit#2436](https://github.com/docker/swarmkit/pull/2436) -### 17.06.2-ee-5 +## 17.06.2-ee-5 2017-11-02 #### Important notes about this release @@ -694,7 +694,7 @@ split-brain scenario. [Learn more](https://success.docker.com/article/KB000759). * Docker may experience IP exhaustion if many tasks are assigned to a single overlay network, for example if many services are attached to that network or because services on the network are scaled to many replicas. The problem may also manifest when tasks are rescheduled because of node failures. In case of node failure, Docker currently waits 24h to release overlay IP addresses. The problem can be diagnosed by looking for `failed to allocate network IP for task` messages in the Docker logs. * SELinux enablement is not supported for containers on IBM Z on RHEL because of missing Red Hat package. -### 17.06.2-ee-4 +## 17.06.2-ee-4 2017-10-12 #### Client @@ -713,14 +713,14 @@ split-brain scenario. [Learn more](https://success.docker.com/article/KB000759). * Serialize IP allocation [docker/libnetwork#1788](https://github.com/docker/libnetwork/pull/1788) -### 17.06.2-ee-3 +## 17.06.2-ee-3 2017-09-22 #### Swarm mode - Increase max message size to allow larger snapshots [docker/swarmkit#131](https://github.com/docker/swarmkit/pull/131) -### 17.06.1-ee-2 +## 17.06.1-ee-2 2017-08-24 #### Client @@ -740,7 +740,7 @@ split-brain scenario. [Learn more](https://success.docker.com/article/KB000759). - Ignore PullOptions for running tasks [#2351](https://github.com/docker/swarmkit/pull/2351) -### 17.06.1-ee-1 +## 17.06.1-ee-1 2017-08-16 #### Important notes about this release @@ -1016,7 +1016,7 @@ not reachable until one of these 2 conditions happens: As a workaround, send at least a packet out from each container like (ping, GARP, etc). -### Docker EE 17.03.2-ee-8 +## Docker EE 17.03.2-ee-8 2017-12-13 * Handle cleanup DNS for attachable container to prevent leak in name resolution [docker/libnetwork#1999](https://github.com/docker/libnetwork/pull/1999) @@ -1031,7 +1031,7 @@ As a workaround, send at least a packet out from each container like * Don't abort when setting `may_detach_mounts` [moby/moby#35172](https://github.com/moby/moby/pull/35172) * Protect health monitor channel to prevent engine panic [moby/moby#35482](https://github.com/moby/moby/pull/35482) -### Docker EE 17.03.2-ee-7 +## Docker EE 17.03.2-ee-7 2017-10-04 * Fix logic in network resource reaping to prevent memory leak [docker/libnetwork#1944](https://github.com/docker/libnetwork/pull/1944) [docker/libnetwork#1960](https://github.com/docker/libnetwork/pull/1960) @@ -1250,7 +1250,7 @@ As a workaround, send at least a packet out from each container like ## 18.03.1-ce 2018-04-26 -### Docker EE 17.03.2-ee-6 +## Docker EE 17.03.2-ee-6 2017-08-24 * Fix daemon panic on docker image push [moby/moby#33105](https://github.com/moby/moby/pull/33105) @@ -1260,7 +1260,7 @@ As a workaround, send at least a packet out from each container like * Lock goroutine to OS thread while changing NS [docker/libnetwork#1911](https://github.com/docker/libnetwork/pull/1911) * Ignore PullOptions for running tasks [docker/swarmkit#2351](https://github.com/docker/swarmkit/pull/2351) -### Docker EE 17.03.2-ee-5 +## Docker EE 17.03.2-ee-5 20 Jul 2017 * Add more locking to storage drivers [#31136](https://github.com/moby/moby/pull/31136) @@ -1280,7 +1280,7 @@ As a workaround, send at least a packet out from each container like * Fix issue where slow/dead `docker logs` clients can block the container [#33897](https://github.com/moby/moby/pull/33897) * Fix potential panic on Windows when running as a service [#32244](https://github.com/moby/moby/pull/32244) -### Docker EE 17.03.2-ee-4 +## Docker EE 17.03.2-ee-4 2017-06-01 Refer to the [detailed list](https://github.com/moby/moby/releases/tag/v17.03.2-ce) of all changes since the release of Docker EE 17.03.1-ee-3 @@ -1288,19 +1288,19 @@ Refer to the [detailed list](https://github.com/moby/moby/releases/tag/v17.03.2- **Note**: This release includes a fix for potential data loss under certain circumstances with the local (built-in) volume driver. -### Docker EE 17.03.1-ee-3 +## Docker EE 17.03.1-ee-3 2017-03-30 * Fix an issue with the SELinux policy for Oracle Linux [#31501](https://github.com/docker/docker/pull/31501) -### Docker EE 17.03.1-ee-2 +## Docker EE 17.03.1-ee-2 2017-03-28 * Fix issue with swarm CA timeouts [#2063](https://github.com/docker/swarmkit/pull/2063) [#2064](https://github.com/docker/swarmkit/pull/2064/files) Refer to the [detailed list](https://github.com/moby/moby/releases/tag/v17.03.1-ce) of all changes since the release of Docker EE 17.03.0-ee-1 -### Docker EE 17.03.0-ee-1 (2 Mar 2017) +## Docker EE 17.03.0-ee-1 (2 Mar 2017) Initial Docker EE release, based on Docker CE 17.03.0 @@ -1308,7 +1308,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 ## Older Docker Engine CE Release notes -### 18.03.1-ce +## 18.03.1-ce 2018-04-26 #### Client @@ -1346,7 +1346,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 * Allow for larger preset property values, do not override [docker/libnetwork#2124](https://github.com/docker/libnetwork/pull/2124) * Prevent panics on concurrent reads/writes when calling `changeNodeState` [docker/libnetwork#2136](https://github.com/docker/libnetwork/pull/2136) -### 18.03.0-ce +## 18.03.0-ce 2018-03-21 #### Builder @@ -1464,7 +1464,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 + Add swarm types to bash completion event type filter [docker/cli#888](https://github.com/docker/cli/pull/888) - Fix issue where network inspect does not show Created time for networks in swarm scope [moby/moby#36095](https://github.com/moby/moby/pull/36095) -### 17.12.1-ce +## 17.12.1-ce 2018-02-27 #### Client @@ -1505,7 +1505,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 #### Swarm * Remove watchMiss from swarm mode [docker/libnetwork#2047](https://github.com/docker/libnetwork/pull/2047) -### 17.12.0-ce +## 17.12.0-ce 2017-12-27 #### Known Issues @@ -1608,7 +1608,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 * Pass Version to engine static builds [docker/docker-ce-packaging#70](https://github.com/docker/docker-ce-packaging/pull/70) + Added support for aarch64 on Debian (stretch/jessie) and Ubuntu Zesty or newer [docker/docker-ce-packaging#35](https://github.com/docker/docker-ce-packaging/pull/35) -### 17.09.1-ce +## 17.09.1-ce 2017-12-07 #### Builder @@ -1652,7 +1652,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 - Provide custom gRPC dialer to override default proxy dialer [docker/swarmkit/#2457](https://github.com/docker/swarmkit/pull/2457) - Avoids recursive readlock on swarm info [moby/moby#35388](https://github.com/moby/moby/pull/35388) -### 17.09.0-ce +## 17.09.0-ce 2017-09-26 #### Builder @@ -1717,7 +1717,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 + Remove deprecated `--enable-api-cors` daemon flag [moby/moby#34821](https://github.com/moby/moby/pull/34821) -### 17.06.2-ce +## 17.06.2-ce 2017-09-05 #### Client @@ -1733,7 +1733,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 - Ignore PullOptions for running tasks [docker/swarmkit#2351](https://github.com/docker/swarmkit/pull/2351) -### 17.06.1-ce +## 17.06.1-ce 2017-08-15 #### Builder @@ -1789,7 +1789,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 * Cluster update and memory issue fixes [#114](https://github.com/docker/docker-ce/pull/114) * Changing get network request to return predefined network in swarm [#150](https://github.com/docker/docker-ce/pull/150) -### 17.06.0-ce +## 17.06.0-ce 2017-06-28 > **Note**: Docker 17.06.0 has an issue in the image builder causing a change in the behavior @@ -1894,7 +1894,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 * Disable legacy registry (v1) by default [#33629](https://github.com/moby/moby/pull/33629) -### 17.03.2-ce +## 17.03.2-ce 2017-05-29 ## 17.03.3-ce @@ -1927,7 +1927,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 - Fix a case where tasks could get killed unexpectedly [#33118](https://github.com/moby/moby/pull/33118) - Fix an issue preventing to deploy services if the registry cannot be reached despite the needed images being locally present [#33117](https://github.com/moby/moby/pull/33117) -### 17.03.1-ce +## 17.03.1-ce 2017-03-27 #### Remote API (v1.27) & Client @@ -1960,7 +1960,7 @@ Initial Docker EE release, based on Docker CE 17.03.0 * Cleanup HCS on restore [#31503](https://github.com/docker/docker/pull/31503) -### 17.03.0-ce +## 17.03.0-ce 2017-03-01 **IMPORTANT**: Starting with this release, Docker is on a monthly release cycle and uses a @@ -2009,7 +2009,7 @@ Upgrading from Docker 1.13.1 to 17.03.0 is expected to be simple and low-risk. ## Edge releases -### 18.05.0-ce +## 18.05.0-ce 2018-05-09 #### Builder @@ -2080,7 +2080,7 @@ Upgrading from Docker 1.13.1 to 17.03.0 is expected to be simple and low-risk. * Expose swarmkit's Raft tuning parameters in engine config. [moby/moby#36726](https://github.com/moby/moby/pull/36726) * Make internal/test/daemon.Daemon swarm aware. [moby/moby#36826](https://github.com/moby/moby/pull/36826) -### 18.04.0-ce +## 18.04.0-ce 2018-04-10 #### Builder @@ -2162,7 +2162,7 @@ Upgrading from Docker 1.13.1 to 17.03.0 is expected to be simple and low-risk. - Fix agent logging race. [docker/swarmkit#2578](https://github.com/docker/swarmkit/pull/2578) * Adding logic to restore networks in order. [docker/swarmkit#2571](https://github.com/docker/swarmkit/pull/2571) -### 18.02.0-ce +## 18.02.0-ce 2018-02-07 #### Builder @@ -2228,7 +2228,7 @@ Upgrading from Docker 1.13.1 to 17.03.0 is expected to be simple and low-risk. * Update runc to fix hang during start and exec [moby/moby#36097](https://github.com/moby/moby/pull/36097) - Fix "--node-generic-resource" singular/plural [moby/moby#36125](https://github.com/moby/moby/pull/36125) -### 18.01.0-ce +## 18.01.0-ce 2018-01-10 #### Builder @@ -2286,7 +2286,7 @@ Upgrading from Docker 1.13.1 to 17.03.0 is expected to be simple and low-risk. - Fix published ports not being updated if a service has the same number of host-mode published ports with Published Port 0 [docker/swarmkit#2376](https://github.com/docker/swarmkit/pull/2376) * Make the task termination order deterministic [docker/swarmkit#2265](https://github.com/docker/swarmkit/pull/2265) -### 17.11.0-ce +## 17.11.0-ce 2017-11-20 > **Important**: Docker CE 17.11 is the first Docker release based on @@ -2359,7 +2359,7 @@ running, un-managed, on the system. + Build packages for Debian 10 (Buster) [docker/docker-ce-packaging#50](https://github.com/docker/docker-ce-packaging/pull/50) + Build packages for Ubuntu 17.10 (Artful) [docker/docker-ce-packaging#55](https://github.com/docker/docker-ce-packaging/pull/55) -### 17.10.0-ce +## 17.10.0-ce 2017-10-17 > **Important**: Starting with this release, `docker service create`, `docker service update`, @@ -2409,7 +2409,7 @@ use `--detach` to keep the old behaviour. - Do not filter nodes if logdriver is set to `none` [docker/swarmkit#2396](https://github.com/docker/swarmkit/pull/2396) + Adding ipam options to ipam driver requests [docker/swarmkit#2324](https://github.com/docker/swarmkit/pull/2324) -### 17.07.0-ce +## 17.07.0-ce 2017-08-29 #### API & Client @@ -2472,7 +2472,7 @@ use `--detach` to keep the old behaviour. * Fix error during service creation if a network with the same name exists both as "local" and "swarm" scoped network [docker/cli#184](https://github.com/docker/cli/pull/184) * (experimental) Add support for plugins on swarm [moby/moby#33575](https://github.com/moby/moby/pull/33575) -### 17.05.0-ce +## 17.05.0-ce 2017-05-04 #### Builder @@ -2559,7 +2559,7 @@ use `--detach` to keep the old behaviour. - Deprecate `--api-enable-cors` daemon flag. This flag was marked deprecated in Docker 1.6.0 but not listed in deprecated features [#32352](https://github.com/docker/docker/pull/32352) - Remove Ubuntu 12.04 (Precise Pangolin) as supported platform. Ubuntu 12.04 is EOL, and no longer receives updates [#32520](https://github.com/docker/docker/pull/32520) -### 17.04.0-ce +## 17.04.0-ce 2017-04-05 #### Builder