-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Revert revert LKE Changelog v1.54.0 (#6640)
* edit a moved guide to new section * Revert "Revert "LKE v1.54.0 Release Notes (#6630)" (#6633)" This reverts commit 22b4838.
- Loading branch information
1 parent
66b52ba
commit 3120a14
Showing
1 changed file
with
24 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
--- | ||
title: Linode Kubernetes Engine v1.54.0 | ||
date: 2023-09-26 | ||
version: 1.54.0 | ||
--- | ||
|
||
|
||
### Changed | ||
|
||
- Upgraded clusters using Kubernetes 1.26 to patch version 1.26.9 | ||
|
||
### Added | ||
|
||
- Kubernetes 1.27 is now available on LKE. Review the [Kubernetes changelog](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md) and [blog post](https://kubernetes.io/blog/2023/03/17/upcoming-changes-in-kubernetes-v1-27/). | ||
|
||
Kubernetes 1.27 locks the `LegacyServiceAccountTokenNoAutoGeneration` feature gate that enables the token controller to automatically create API server access tokens for Kubernetes service accounts. After upgrading to 1.27, customers may notice a warning message regarding these legacy tokens: | ||
|
||
``` | ||
Warning: Use tokens from the TokenRequest API or manually created secret-based tokens instead of autogenerated secret-based tokens. | ||
``` | ||
To fix this issue, remove any auto-generated secrets of type `kubernetes.io/service-account-token` in the `kube-system` namespace with `kubectl delete secrets -n kube-system --field-selector="type==kubernetes.io/service-account-token"` and regenerate the cluster's Kubeconfig. See the Kubernetes Cluster Regenerate ([(POST /lke/clusters/{clusterId}/regenerate](/docs/api/linode-kubernetes-engine-lke/#kubernetes-cluster-regenerate)) endpoint. | ||
Customers with service accounts outside of `kube-system` need to delete the auto-generated service account tokens in their respective namespaces. |