From e7cfd915c00ad4567d1eff22d63149e00270ec15 Mon Sep 17 00:00:00 2001 From: Alexandros Mavrogiannis Date: Wed, 13 Dec 2017 21:41:41 +0100 Subject: [PATCH] Add more known issues to 3.0 beta notes (#349) --- datacenter/ucp/3.0/guides/release-notes.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/datacenter/ucp/3.0/guides/release-notes.md b/datacenter/ucp/3.0/guides/release-notes.md index 8a61d5bd82..7fbdba5d19 100644 --- a/datacenter/ucp/3.0/guides/release-notes.md +++ b/datacenter/ucp/3.0/guides/release-notes.md @@ -40,6 +40,14 @@ advantage of the added features. an iptables incompatibility. * UCP 3.0 requires more resources to run than UCP 2.2 and is unlikely to work correctly on nodes with less than 4GB of total memory. +* The kubernetes SPDY operations such as `kubectl logs` or `kubectl exec` are +not possible when using the client bundle feature. As a workaround, you may +change all references from `:443` to `:6443` in the `kube.yml` and `env.sh` +files of a user client bundle. +* The default service account of each namespace currently has no permissions, +while all other service accounts have admin-level permissions and are usable +only by admin users. Admins should create custom service accounts for workloads +intended to use the service account feature. * Security hardening of Kubernetes managed by Docker EE is not fully complete. Only use this release for testing and validation in controlled environments with trusted users. Apps that rely on the default Kubernetes service account may not