docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

adding link to cve topics under Security heading in relnotes (#1280) 

adding link to cve topics under Security heading in relnotes
This commit is contained in:
Dawn W 2019-07-22 08:02:45 -07:00 committed by Usha Mandya
parent 6564dcda16
commit 74e51e94df
2 changed files with 15 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ee/dtr/release-notes.md
View File

@ -23,6 +23,9 @@ to upgrade your installation to the latest release.
## Version 2.7.0
(2019-7-22)
### Security
Refer to [DTR image vulnerabilities](https://success.docker.com/article/dtr-image-vulnerabilities) for details regarding actions to be taken and any status updates, issues, and recommendations.
### New Features
* **Web Interface**

22
ee/ucp/release-notes.md
View File

@ -25,28 +25,30 @@ upgrade your installation to the latest release.
# Version 3.2
(2019-7-22)
### Security
Refer to [UCP image vulnerabilities](https://success.docker.com/article/ucp-image-vulnerabilities) for details regarding actions to be taken, timeline, and any status updates, issues, and recommendations.
### New features
- Group Managed Service Accounts (gMSA)
On Windows, you can create or update a service using --credential-spec with the config://<config-name> format.
- Group Managed Service Accounts (gMSA).
On Windows, you can create or update a service using ```--credential-spec``` with the ```config://<config-name>``` format.
This passes the gMSA credentials file directly to nodes before a container starts.
- Open Security Controls Assessment Language (OSCAL)
- Open Security Controls Assessment Language (OSCAL).
OSCAL API endpoints have been added in Engine and UCP. These endpoints are enabled by default.
- Container storage interface (CSI)
- Container storage interface (CSI).
Version 1.0 of the CSI specification is now supported for container orchestrators to manage storage plugins.
Note: As of May 2019, none of the
(available CSI drivers)[https://kubernetes-csi.github.io/docs/drivers.html] are production quality and are considered pre-GA.
- Internet Small Computer System Interface (iSCSI)
Note: As of May 2019, none of the [available CSI drivers](https://kubernetes-csi.github.io/docs/drivers.html) are production quality and are considered pre-GA.
- Internet Small Computer System Interface (iSCSI).
Using iSCSI, a storage admin can now provision a UCP cluster with persistent storage from which UCP end
users can request storage resources without needing underlying infrastructure knowledge.
- System for Cross-domain Identity Management (SCIM)
- System for Cross-domain Identity Management (SCIM).
SCIM implementation allows proactive synchronization with UCP and eliminates manual intervention for changing
user status and group membership.
- Support for Pod Security Policies (PSPs) within Kubernetes
- Support for Pod Security Policies (PSPs) within Kubernetes.
Pod Security Policies are enabled by default in UCP 3.2 allowing platform
operators to enforce security controls on what can run on top of Kubernetes. For
more information see
[Using Pod Security](/ee/ucp/kubernetes/pod-security-policies/)
[Using Pod Security](/ee/ucp/kubernetes/pod-security-policies/).
- Client Cert-based Authentication
- Users can now use UCP client bundles for DTR authentication.
- Users can now add their client certificate and key to their local Engine for performing pushes and pulls without logging in.