The release notes provide a list of useful topics and links for DC/OS.
Breaking Changes
Removed /marathon endpoint on masters in favor of /service/marathon. Services such as Marathon-LB now require a JSON WebToken to access the Marathon API. For more information, see the documentation.
Manual modifications of Admin Router config are no longer supported. If you require a custom certificate, you must run HAProxy in front of Admin Router.
Network Time Protocol (NTP) must be enabled on all nodes for clock synchronization. For more information, see the documentation.
When upgrading from 1.7 to 1.8, you must upgrade all master nodes before proceeding. The master nodes will be unusable until upgrade completes. This changed behavior is because we have upgraded the ZooKeeper security. For more information, see the documentation.
What’s New
Apache Mesos 1.0 and Marathon 1.3 integrated
Apache Mesos 1.0 CHANGELOG.
Marathon 1.3 release notes.
Container Orchestration
Services (“Built-In” Marathon)
Marathon is not just one container orchestrator out of many that we support; it is our default way to run things on DC/OS, supporting the full range of DC/OS features. In this release we’ll have a major change in the Services tab in DC/OS. The native DC/OS Marathon instance UI is now fully integrated with the DC/OS UI. You can access it from the Services tab on the DC/OS UI. The new fully integrated UI no longer shows a list of frameworks, but shows an embedded Marathon. This means that all of your services and applications are in one place.
For more information, see the documentation.
Jobs – Ability to run scheduled jobs on DC/OS Preview
There is now built-in support of running scheduled jobs. We created a new Apache Mesos framework called Metronome. Metronome is integrated natively with DC/OS and is available from the Jobs tab on the DC/OS UI. You can create and administer scheduled jobs directly from the Jobs tab. Similar to the Services tab for long-running applications, you can manage all of your Jobs from one centralized place. You can set up jobs with a scheduler by using the cron format.
Additionally, you can specify attributes like the time zone or a starting deadline. We also have a JSON view mode which allows you to specify everything in one file to easily copy and paste it. We will constantly improve and extend the given functionality. Metronome will likely replace Chronos as our DC/OS job framework. If you still need Chronos, you can get it from the DC/OS Universe.
For more information, see the documentation.
DC/OS Universal container runtime Experimental
The Universal container runtime extends the Mesos containerizer to support provisioning Docker and AppC container images. This means that you can use both the Mesos containerizer and other container image types in DC/OS. You can still use the Docker container runtime directly with DC/OS, but the Universal container runtime supports running Docker images independent of the Docker Engine, which allows for better integration with Mesos.
The Universal container runtime offers the following advantages:
Removes your dependency on the Docker daemon: With previous versions of Docker, if the Docker daemon was not responsive, a restart to the daemon caused all containers to stop on the host. In addition, Docker must be installed on each of your agent nodes in order to use the Docker containerizer. This means that in order to use the Docker containerizer you need to upgrade Docker on the agent nodes each time a new version of Docker comes out.
The Universal container runtime is more stable and allows deployment at scale.
The Universal container runtime offers features not available in the Docker containerizer, such as GPU and CNI support.
The Universal container runtime allows you to take advantage of continuing innovation within both the Mesos and DC/OS, including features such as IP per container, strict container isolation and more.
Note: The Universal container runtime is in the experimental phase. We encourage you to try it out and let us know what you think.
For more information, see the documentation.
Networking Services
Improved Load Balanced VIP Availability and Reachability metrics for troubleshooting
IP per Container with VxLAN based Virtual Networks Preview
DC/OS comes with built-in support for Virtual Networks leveraging the Container Network Interface (CNI) standard, and one default Virtual Network named dcos. Any container that attaches to a Virtual Network receives its own dedicated IP. This allows users to run workloads that are not friendly to dynamically assigned ports and would rather bind to the ports in their existing app configuration. Now, with dedicated IP/Container, workloads are free to bind to any port as every container has access to the entire available port range.
For more information, see the documentation.
DNS Based Service Addresses for Load Balanced Virtual IPs Preview
DC/OS 1.8 introduces DNS Named Service Addresses for VIPs. With DNS Named VIPs, clients connect with a service address instead of an IP address. Due to the way DNS Named VIPs are generated in DC/OS, the risk of collision associated with IP VIPs does not exist. This means that administrators do not need to carefully manage DNS Named VIPs to avoid collision. This also means DNS Named VIPs can be automatically created at the time of service installation.
For more information, see the documentation.
Network Isolation of Virtual Network Subnets Experimental
DC/OS now supports the creation of multiple virtual networks at install time and will associate non-overlapping subnets with each of the virtual networks. Further, DC/OS users can program Network Isolation rules across DC/OS agent nodes to ensure that traffic across Virtual Network subnets is isolated.
For more information, see the documentation.
CLI
Binary CLIs for Linux, Windows, and Mac
Installing the DC/OS CLI is easier than ever. We’ve replaced the install script with a simple binary CLI.
For more information, see the documentation.
Download CLI binaries from DC/OS UI
Download the CLI binaries directly from the DC/OS UI. For more information, see the documentation.
Package Management Service Preview
Easy to deploy offline Universe. For more information, see the documentation.
Security and Governance Services
Security Event Audit Logging (Enterprise Only)
Support for importing LDAP Groups (Enterprise Only)
System components run as non-root (Enterprise Only)
Secrets management service (Enterprise Only) Preview
Secure important values like private keys, credentials, and database passwords. For more information, see the documentation.
SSO with SAML/OpenID Connect (Enterprise Only) Experimental
Enterprise DC/OS integrates Identity Providers that support LDAP v3 Interface (including Microsoft Active Directory) and SAML based identity providers such that you can import users external to DC/OS from your existing User Directory and manage authorization on those users and user groups within DC/OS.
For more information, see the documentation.
Cluster-wide encryption with PKI using built-in CA (Enterprise Only) Preview
Enterprise DC/OS is designed to run securely on-premises and in the cloud. To ensure cluster security, Enterprise DC/OS supports encrypted communication between DC/OS system components. This is achieved by ensuring that DC/OS runs with a Certificate Authority that issues CA certificates (CA.crt) for each system component on the masters and agents installed at bootstrap time. This mechanism ensures all communication between the various services within DC/OS cluster are over secure SSL/TLS channels.
For more information, see the documentation.
Service Accounts for secure service mutual authentication (Enterprise Only) Preview
Enterprise DC/OS supports the authentication of services to the Mesos master. For more information, see the documentation.
Comprehensive intra-cluster authentication and authorization controls (Mesos, Marathon, ZooKeeper) (Enterprise Only) Preview
Enterprise DC/OS can be configured to enable or require TLS/SSL encryption. For more information, see the documentation.
Fine-grained container level authorization controls to set-up a secure multi business group cluster access (Enterprise Only) Preview
Enterprise DC/OS supports fine-grained workload isolation to enable multiple business groups within an organization to run containers and workloads within a shared cluster but still be guaranteed that there is security isolation in addition to the performance isolation provided by Linux cgroups between different workloads. Workload security isolation is performed by DC/OS Authorization modules on every node that make checks against the DC/OS IAM Service to verify that each user/service is authorized to perform each requested action.
Mesos HTTP Authentication and Authorization
Marathon HTTP Authentication and Authorization
ZooKeeper Authentication and Authorization
For more information, see the documentation.
Search/Bind and Client Certificate based authentication for LDAP/AD (Enterprise Only) Preview
If your organization has user records stored in a directory server supporting LDAP, you can configure Enterprise DC/OS to check user credentials against it. This allows you to avoid having to recreate your user accounts within DC/OS.
For more information, see the documentation.
Identity and Access Management Service (Enterprise Only)
Enterprise DC/OS includes a built-in Identity and Access Management (IAM) Service that allows our users to create Users and Groups and assign various Authorization permissions to each user and group. Enterprise DC/OS supports following types of Users and Groups:
Local User Accounts
Local Service Accounts
Local Groups
External LDAP Users
External LDAP Groups (only for importing into local group)
External SAML Users
External OAuth Users
Enterprise DC/OS IAM Service also includes support for authorization controls that can be assigned to each of the above accounts. As of DC/OS 1.8, users/services can be given specific permissions in the form “‘Subject’ can perform ‘Action’ on ‘Object’” where ‘Object’ can be an API endpoint to a particular DC/OS Service to a Marathon Application group and ‘Action’ enumerates the set of actions that are possible on the Object such as “Create, Read, Update or Delete”.
For more information, see the documentation.
DC/OS Data services
Scheduler authentication for all services. (Enterprise Only)
TLS/SSL support for all frameworks. (Enterprise Only)
Non-root user config (except Cassandra).
Binary CLIs for all services.
Kafka Service Preview
DC/OS Universe has an updated DC/OS Kafka Service. The updated DC/OS Kafka Service now supports configuring ZK service for Apache Kafka.
For more information, see the documentation.
Confluent Kafka Service Preview
DC/OS Universe has a DC/OS Confluent Platform Service that is based on the DC/OS Kafka Service. Confluent offers support for the DC/OS Confluent Platform Service on Enterprise DC/OS.
For more information, see the Universe documentation.
Cassandra Service Preview
DC/OS Universe has an updated DC/OS Cassandra Service. The updated DC/OS Cassandra Service now supports multi-datacenter Cassandra ring topologies, and backup and restore with Azure Storage.
For more information, see the documentation.
Datastax Enterprise (DSE) Service Preview
DC/OS Universe has a DC/OS DataStax Enterprise Service that is based on the DC/OS Cassandra Service. DataStax offers support for the DC/OS DataStax Enterprise Service on Enterprise DC/OS.
For more information, see the Universe documentation.
HDFS Service Experimental
DC/OS Universe now has a new DC/OS HDFS Service. This new DC/OS HDFS Service is an entirely new implementation sharing no code with the previous DC/OS HDFS Services. DC/OS HDFS Service can be deployed with a single command. Multiple instances of the DC/OS HDFS Service can be deployed to a single DC/OS cluster. Configuration of a DC/OS HDFS Service can updated at runtime without service interruption. DC/OS HDFS Service instances reserve all resources including CPU, Memory, Disk and Network Ports.
For more information, see the documentation.
Spark Service
DC/OS Universe has an updated version of Apache Spark based on 1.6.2. In addition to all the of features of Apache Spark 1.6.2, the DC/OS Spark Service supports Kerberos and SSL with secure HDFS clusters. Latest stable Spark with coarse-grained scheduler.
For more information, see the documentation.
Developer Agility
Preview New Artifactory Package. For more information, see the documentation.
Preview New GitLab Package. For more information, see the documentation.
Updated Jenkins packages. For more information, see the documentation.
Enhanced Cloud Templates
Preview You can use customized Amazon Machine Images (AMI) based on CentOS 7 or CoreOS to launch DC/OS with the advanced templates. For more information, see the documentation.
You can create custom advanced templates for DC/OS and then deploy and run DC/OS from your own private S3 bucket. For more information, see the documentation.
Improved UI & CLI improvements
See the CLI release notes.
Minor releases
1.8.8 – Feb 10, 2017
New and changed features
Marathon 1.3.9 release notes.
Apache Mesos 1.0.3 CHANGELOG.
Fixed issues DC/OS
DC/OS UI
DCOS-9310 – Default memory for jobs is too low.
DCOS-11482 – Jobs UI wipes “artifacts” part from the JSON job descriptor.
DCOS-11559 – Switching from Bridge to Host Networking leaves portDefinitions that can cause conflicts with Marathon-LB.
DCOS-11599 – Jobs attributes are stripped out and not available in UI.
DCOS-11781 – Zeppelin package is missing from Universe in UI.
DCOS-11887 – Cron example in the Jobs UI is wrong.
DCOS-11984 – Error destroying a service.
DCOS-12724 – UI filters tabs based on incorrect adminrouter permissions.
DCOS-13243 – Unable to revert Marathon app configuration to older version or switch between versions in the UI.
DCOS-13530 – Label keys in the service create form are converted to uppercase.
DCOS-13692 – DC/OS UI server connection errors because of 10s timeout for the Universe, and 2s timeout everywhere else.
Networking Services
DCOS-10809 – DNS unavailable during DC/OS upgrade.
DCOS-11704 – Agent node does not report virtual network logging errors.
DCOS-12706 – LIBPROCESS_PORT must be explicitly set with Marathon (and other DC/OS services).
DCOS-12742 – Cosmos HTTPS listening on all interfaces regardless of permission.
DCOS-13192 – Virtual network agent modules have dependency on the Docker daemon at startup.
DCOS-13193 – EDNS issues.
DCOS-13211 – Cosmos admin and http ports are accessible from all interfaces in DC/OS.
DCOS-13430 – Virtual network service crashes after installing Marathon-LB.
Security and Governance Services
DCOS-13589 – LDAP group import: error when we don’t receive exactly one search result.
DCOS-12731 – Reset-superuser AttributeError upon invocation.
DCOS-12730 – Bootstrap Tree schema out of sync with last upgrade bump.
DCOS-12729 – Upgrade fails for resource ID validation errors.
DCOS-12727 – User can see “directory” and “directory2”, even though permission is for “directory”.
DCOS-12726 – Jobs authn/z is still enabled in disabled security mode.
DCOS-12725 – System doesn’t stop or warn when you delete the last user in the ‘Superuser’ group.
DCOS-12328 – Lowercase environment variable that draws its value from a secret is converted to all uppercase.
DCOS-13448 – Not all DC/OS services have explicit file descriptor limits.
Fixed issues Marathon
MARATHON-1309 – App groups are not structured properly for upgrades.
DCOS-11560 – ZooKeeper Connection Timeout is not configurable.
Fixed issues Mesos
MESOS-6621 – Nodes continuously restarting, cannot recover.
MESOS-6917 – Segfault when the executor sets an invalid UUID when sending a status update.
1.8.7 – Nov 14, 2016
New and changed features
Marathon 1.3.6.
Fixed issues:
DCOS-9705 – Marathon authn/z is not actually disabled in security disabled mode. (Enterprise Only)
DCOS-9773 – DC/OS GUI: early request termination (after 2 seconds) can often result in false negatives. (Enterprise Only)
DCOS-10696 – HTTP requests to Marathon time out. (Enterprise Only)
DCOS-10871 – Admin Router’s JWT validation does not respect the expiration claim. The issue is not present in DC/OS 1.7. (Enterprise Only)
DCOS-10874 – 100% CPU usage with Enterprise DC/OS 1.8.5 with Exhibitor, Vault, and Secrets. (Enterprise Only)
DCOS-10959 – Update 1.8 Java to 8u112.
DCOS-11002 – Azure OIDC login fails. (Enterprise Only)
DCOS-11027 – Network performance improvements for 1,000 node clusters.
DCOS-11060 – Can’t grant non-superuser access to job group. (Enterprise Only)
DCOS-11151 – Secrets broken if secrets and vault leading masters aren’t on the same machine. (Enterprise Only)
DCOS-11260 – In some situations, Marathon fails to elect a leader during ZooKeeper restart.
Warning: constraint validation change: Constraint validation in Marathon is significantly improved with Marathon 1.3.x. Previously acceptable values for regular expressions, such as LIKE and UNLIKE, may no longer pass validation since they are not valid regular expressions. Where possible, Marathon will correct the regular expression (specifically * to .*); however, when this is not possible, the constraint will be removed and a warning will be logged for the affected app IDs.
Known issues and limitations:
DCOS-11000 – ZooKeeper data is destroyed when the storage backend is lost.
DCOS-11404 – Unable to resolve .mesos domains for a short time period during upgrades from DC/OS 1.7 to 1.8. For more information, see the documentation.
1.8.6 – Oct 19, 2016
Fixed issues:
DCOS-10626: Fix cases in which DC/OS Marathon, Package Service, or Jobs could not restart. (Enterprise Only)
DCOS-450 – Fixed race condition in diagnostics service.
1.8.5 – Oct 13, 2016
New and changed features:
DCOS-8154 – Enterprise Marathon is upgraded to support secure Enterprise DC/OS clusters. (Enterprise Only)
Fixed issues:
CORE-632 – Fixes for logrotation in Mesos.
DCOS-10057 – Destroy services button in the DC/OS UI no longer hangs when users do not have correct permissions.
DCOS-9165 – Strict security mode is now supported. For more information, see documentation. (Enterprise Only)
DCOS-9430 – A JWT is no longer required to access the Mesos HTTP API in permissive security mode. (Enterprise Only)
DCOS-9805 – DC/OS GUI: user/group deletion may “freeze” the GUI.
DCOS-9966 – Improved error messages are printed for NTP service startup check.
DCOS-10203 – All /service endpoints become inaccessible 5 days after cluster install.
HTTP Proxy is now fixed. For more information, see the documentation.
Known issues and limitations:
DCOS-9705 – Marathon authn/z is still enabled in security-disabled mode.
DCOS-9706 – Marathon should allow anonymous requests in permissive mode.
1.8.4 – Sept 15, 2016
New and changed features:
DCOS-9173 – The upgrade documentation is updated with instructions for workaround. (Enterprise Only)
New simplified hashed-password procedure for custom installation. For more information, see the documentation. (Enterprise Only)
DCOS-8848 – Experimental support for unified containerizer in DC/OS.
DOCS-1113 – dcos jobs command is now available in the CLI. For more information, see the documentation.
DCOS-9029 – You can now administer Enterprise DC/OS security by using the dcos-enterprise-cli Universe package. For more information, see the documentation.
DCOS-9166 – You can now install DC/OS in security disabled mode. (Enterprise Only)
Fixed issues:
DCOS-8208 – If you are using the CloudFormation templates to install, you will not be able to configure your ZooKeeper credentials. If you do not want to use the default credentials that DC/OS supplies, you must install via command line on each VPC instance.
DCOS-8456 – security: strict and security: disabled modes have not yet been tested exhaustively. To avoid issues in the early access release, use the security: permissive mode. As security: permissive is the default, no action is necessary. (Enterprise Only)
DCOS-8536 – DC/OS does not currently prevent the deletion of the last user with the dcos: superuser permission. (Enterprise Only)
DCOS-8768 – The self-signed certificates used by Enterprise DC/OS to achieve TLS encryption do not include the host name. As a result, you cannot use the --cacert option in cURL commands and instead must use the -k flag. (Enterprise Only)
DCOS-9029- Enterprise based security-enabled CLI is coming soon. (Enterprise Only)
DCOS-9090 Marathon-LB does not install with default options on an auth-enabled DC/OS cluster. For a workaround, see the documentation.
DCOS-7872 – The Secret Store may unexpectedly become sealed. (Enterprise Only)
DCOS-9048 – The Secrets Store may fail to initialize. To resolve this issue, SSH into the master and issue the following command to restart the services: sudo systemctl restart dcos-vault dcos-secrets. (Enterprise Only)
DCOS-8214 – In multi-master configurations, only one Secrets Store will initialize. (Enterprise Only)
DCOS-9151 – Improved the creation of secrets and service accounts. (Enterprise Only)
DCOS-9273 – Added external master IPs to Admin Router certs. (Enterprise Only)
DCOS-9637 – Now reports the correct URL for AWS templates.
DCOS-9104 – Task count and resources are correct in the UI.
DCOS-9617 – The UID of remote users is shown in the UI.
DCOS-9540 – Secrets service now listens on localhost only. (Enterprise Only)
DCOS-9191 – Added DNS for discoverable services to the UI.
DCOS-9162 – Enabled Kill and Scale for locked services.
Known issues and limitations:
DCOS-9706 – In permissive mode Marathon cannot operate anonymously. (Enterprise Only)
DCOS-9705 – After upgrading from 1.7 to 1.8 Marathon ACLs are not disabled. (Enterprise Only)
DCOS-9665 – Support for Enterprise DC/OS Azure templates is coming soon. (Enterprise Only)
DCOS-8889 – Certificates are removed from the DC/OS UI for scalability. (Enterprise Only)
DCOS-9277 – Disabled HTTP2 in Admin Router. (Enterprise Only)
DCOS-4298 – Time synchronization of hosts is now required. For more information, see the system requirements.(Enterprise Only)
DCOS-9783 – Package service broken with java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty. The workaround is to restart the Package service (dcos-cosmos.service).
DCOS-9804 – The Enterprise DC/OS CLI returns a spurious error message: Failed to execute script dcos-security.
1.8.3 – Sept 6, 2016
New and changed features
You can generate custom AWS Advanced templates from the custom installer file (dcos_generate_config.sh --aws-cloudformation) and a configuration file (config.yaml). Only a subset of the configuration file options are allowed (e.g. resolvers and exhibitor_backend cannot be changed). For more information, see the documentation.
New version of the Jobs component (Metronome 0.1.9).
To clarify the location of the installed files, the DC/OS installer refers to genconf/ instead of /genconf/.
CentOS AMIs are updated to include a fix for a Docker 1.11.2 bug, which caused Docker to not start.
DC/OS can now be built using older Docker versions.
Mesos-DNS 0.5.3-rc2.
New custom installer option (--set-superuser-password-hash) will append the hashed password directly to config.yaml. (Enterprise Only)
Now you can now enter a password directly in a prompt. The previous methods (--set-superuser-password-hash and --hash-password) required you to enter a password on the command line, which meant that it was stored in places such as ~/.bash_history. For more information, see the documentation. (Enterprise Only)
Updated DC/OS UI.
Marathon 1.3.0-RC6 release notes
Updated the DC/OS Diagnostics component (dcos-3dt.service) with numerous bug fixes
BUILD_DIR is no longer printed when you run the custom installer (dcos_generate_config.sh)
The custom DC/OS installer has been refactored and reworked.
gen_resolvconf.py will attempt to renameresolv.conf, but if that fails it will fall back to writing directly.
Client certificates are not recreated every time a DC/OS internal service starts. Instead existing certificates are used when possible. (Enterprise Only)
Fixed issues
DCOS-326 – Azure downloads URL is fixed.
Bug fixes to the mesos-overlay-modules
Bug fixes to the Virtual Network Service component (dcos-navstar.service).
Bug fixes for the Vault (dcos-vault) component. (Enterprise Only)
Bug fixes for the Secrets (dcos-secrets) component. Multi-Master initialization still has bugs, but more fixes are coming soon. (Enterprise Only)
Bug fixes for the Admin Router Reloader (dcos-adminrouter-reload.service) component which create separate reload services for masters and agents. (Enterprise Only)
Bug fixes for the Bouncer (dcos-bouncer.service) component, including: (Enterprise Only)
DCOS-9348 – Bouncer LDAP client: non-TLS will probably fail w/ an AttributeError
DCOS-9409 – Bouncer LDAP test endpoint: 500 due to BouncerLDAPSearchNoResultError
DCOS-9433 – Bouncer LDAP client: KeyError: ‘dn’ when processing Active Directory’s search result
DCOS-9349 – Bouncer LDAP tests: cover non-TLS connection
DCOS-9452 – Bouncer LDAP client: filter search results and account for search references
DCOS-9474 – Bouncer LDAP client: allow user/group search base to be an empty string
DCOS-8835 – Bouncer LDAP module: log ldap3 Tls obj str
DCOS-9008 – Bouncer LDAP client: make unbind() more resilient
DCOS-8117 – Get secrets and bouncer into ee without list + small fixes
Bug fix for dcos_audit_logging so that Enterprise DC/OS Mesos Modules properly write info to the logs. (Enterprise Only)
Known issues and limitations
DCOS-9610 – CLI: add cmd for starting SSO in browser, wait for auth token to be pasted
Secrets in Multi-Master initialization has bugs, but more fixes are coming soon. (Enterprise Only)
DCOS-9560 – Deletion of nested secrets results in strange result. (Enterprise Only)
1.8.2 – August 25, 2016
New and changed features
Marathon 1.3.0-RC5
CentOS 7 AMI builder scripts
Updated Cosmos API for DC/OS services
Added a flag to the custom installer, --cli-telemetry-disabled, to disable the CLI basic telemetry. For more information, see the documentation.
Improved handling of /etc/resolv.conf around systemd-networkd
Moved REX-Ray out of the agent advertised port range
The preflight port check is different for masters and agents
Removed SPDY and HTTP/2 from admin router (the NGINX and OpenResty is broken)
Always enable EBS optimization for AWS clusters (EbsOptimized)
Fold dcos-vol-discovery-{priv,pub}-agent.service into the appropriate dcos-mesos-slave service, making it easier to change the resources on a host and reset the agent
Marathon and Jobs (Metronome) run as non-root
Switch to /etc/os-release for OS Detection
Switch to argparse’s default help for dcos_generate_config.sh
General internal code cleanup and technical debt fixes
Tighten permissions on the ZooKeeper ZNode /zookeeper (Enterprise Only)
Updated Mesos security modules to fix some bugs (Enterprise Only)
Added dockercfg remove hook configuration (dcos_remove_dockercfg_enable) (Enterprise Only)
Ability to enable or disable Mesos security audit logging (Enterprise Only)
Remove the unused dcos_scheduler internal service account
Add tests for DC/OS LDAP features
Fixed issues
Named VIPS with 2 or more ports in use.
dcos-adminrouter-reload.service
DC/OS Diagnostics component (dcos-3dt.service) checking of timer units which exit non-zero (found the dcos-adminrouter-reload bug).
1.8.1 – August 2016
Fixed issues
Over 1350 other fixes and enhancements to DC/OS and DC/OS Services, including:
DCOS-5701 – Unable to use LDAP due to lack of search bind. (Enterprise Only)
DCOS-7415 – Unable to fetch /v2/tasks as plaintext for Marathon 0.15.3 in some cases.
DCOS-7422 – Improved reconnect logic in the case of root Marathon / Mesos master disconnections.
DCOS-7810 – Invalid IDs inside of nested groups leading to unexpected blocked deployments.
DCOS-7926 – Improved Marathon performance while deploying thousands of tasks.
DCOS-8128 – Improved Marathon task recovery in the case of some network events.
DCOS-8370 – Apps should not be able to share the same service port on a single host.
DCOS-8730 – Admin Router does not respect ports provided by external proxy.
MARATHON-888 – Improved handling of orphaned containers after master failover.
MARATHON-956 – Improved Marathon performance to prevent occurrence of “futures timed out” errors.
Known issues and limitations
DCOS-270 – Docker version 1.12.x is not supported.
DCOS-8975 – Port mapping for virtual networks is not displayed correctly.
DCOS-9092 – Insecure certificate warning.
(Enterprise Only)
DCOS-8214 – In multi-master configurations, only one Secrets Store will initialize. To work around this issue, you must manually copy the keys to the other masters, using the following procedure. (Enterprise Only)
Identify the master with the functional Secrets Store and obtain its public IP address.
SSH into the master with the functional Secrets Store.
Issue the following command to copy the keys securely from the current master to each master with a nonfunctional Secret Store: $ scp /var/lib/dcos/secrets/vault/default/* <ip-nonfunctional-master>:~ Tip: You will need to issue this command multiple times, once for each nonfunctional master, filling in the IP of the nonfunctional master each time.
SSH into each nonfunctional master and issue the following command: $ sudo cp -vf *.pub *.key /var/lib/dcos/secrets/vault/default/
DCOS-8208 – If you are using the CloudFormation templates to install, you will not be able to configure your ZooKeeper credentials. If you do not want to use the default credentials that DC/OS supplies, you must install via command line on each VPC instance.
DCOS-8456 – security: strict and security: disabled modes have not yet been tested exhaustively. To avoid issues in the early access release, use the security: permissive mode. As security: permissive is the default, no action is necessary. (Enterprise Only)
DCOS-8536 – DC/OS does not currently prevent the deletion of the last user with the dcos: superuser permission. (Enterprise Only)
DCOS-8768 – The self-signed certificates used by Enterprise DC/OS to achieve TLS encryption do not include the host name. As a result, you cannot use the --cacert option in cURL commands and instead must use the -k flag. (Enterprise Only)
DCOS-9029- Enterprise based security-enabled CLI is coming soon. (Enterprise Only)
DCOS-9090 Marathon-LB does not install with default options on an auth-enabled DC/OS cluster. For a workaround, see the documentation.
DCOS-7872 – The Secret Store may unexpectedly become sealed. (Enterprise Only)
DCOS-9048 – The Secrets Store may fail to initialize. To resolve this issue, SSH into the master and issue the following command to restart the services: sudo systemctl restart dcos-vault dcos-secrets. (Enterprise Only)
The post Release Notes appeared first on Mesosphere DC/OS Documentation.