DKP 2.8.0 Customer Incidents and Resolved Issues

The following resolved incidents are fixed or corrected in this release.

Improved Error Message when Pre-provisioned KIB Jobs Fail

Previously, during the installation of a pre-provisioned cluster, it could be difficult to determine why provisioning of the cluster nodes failed. The error handling of the Konvoy Image Builder (KIB) jobs that provision the nodes has been improved to aid in troubleshooting.

D2IQ-99310

Dex GRPC Endpoint Disabled

Previously, DKP enabled the GRPC endpoint on Dex but it was not used by any other components in the system. The endpoint is now disabled by default.

D2IQ-99912

Dex DA Certificate Expiration Causes the UI to be Unreachable

A misconfiguration of the Dex certificate authority (CA) issuer and the dex-client-tls certificate resulted in the dex-client-tls certificate being invalid after approximately 90 days.
When the certificate becomes invalid, the DKP UI is no longer accessible and displays an “Internal Server Error - Failed to Retrieve Connector List” message.

The problem has been corrected and a helpful error message added. In the meantime, if you experience this issue, contact support for a workaround.

D2IQ-100649

CAPA AMIs are Not Available for the Kubernetes Version used in DKP 2.8.0

AWS AMIs for some Kubernetes versions may not be available. We recommend using Konvoy Image Builder (KIB) to create a custom AMI.

Do not use the upstream values as defaults for the --ami-* flags.
If you specify any of these flags for AMI ID lookup, specify all of them: --ami-base-os, --ami-format, and --ami-owner.

D2IQ-100175