<commit_before>---
title: UCP release notes
description: Release notes for Docker Universal Control Plane. Learn more about the
  changes introduced in the latest versions.
keywords: UCP, release notes
toc_min: 1
toc_max: 2
redirect_from:
  - /datacenter/ucp/2.2/guides/release-notes/
  - /datacenter/ucp/3.0/guides/release-notes/
---

Here you can learn about new features, bug fixes, breaking changes, and
known issues for the latest UCP version.
You can then use [the upgrade instructions](admin/install/upgrade.md) to
upgrade your installation to the latest release.

* [Version 3.1](#version-31)
* [Version 3.0](#version-30)
* [Version 2.2](#version-22)

# Version 3.1

## 3.1.2 (2018-12-13)

### Authentication and Authorization
* SAML Single Logout is now supported in UCP.
* Identity Provider initiated SAML Single Signon is now supported in UCP.  The admin can 
enable this feature in Admin Settings -> SAML Settings.

### UI
* Added instrumentation to all the Kubernetes resource types.

### Bug Fixes
* Core
  * Significantly reduced database load in environments with a lot of concurrent 
  and repeated API requests by the same user. (docker/escalation#911)
  * UCP backend will now complain when a service is created/updated if the
   `com.docker.lb.network` label is not correctly specified. (#15015) 
  * LDAP group member attribute is now case insensitive. (docker/escalation#917)
* Interlock
  * Interlock headers can now be hidden. (docker/escalation#833)
  * (FIXME) Pending  https://github.com/docker/orca/pull/15459 docker/escalation/issues/871
  * (FIXME) Pending docker/interlock#169. docker/interlock#206  that addresses escalation/920

## 3.1.1 (2018-12-04)

* To address CVE-2018-1002105, a critical security issue in the Kubernetes API Server, Docker is using Kubernetes 1.11.5 for UCP 3.1.1.

## 3.1.0 (2018-11-08)

## Bug Fixes

* Swarm placement constraint warning banner no longer shows up for `ucp-auth` services (#14539)
* "update out of sequence" error messages no longer appear when changing admin settings (#7093)
* Kubernetes namespace status appears in the web interface (#14526)
* UCP Kubernetes compose components always run on managers (#14208)
* `docker network ls --filter id=<id>` now works with a UCP client bundle (#14840)
* Collection deletes are correctly blocked if there is a node in the collection (#13704)

## New Features

### Kubernetes

* Kubernetes is updated to version 1.11.2.
* Kubernetes native RBAC feature manages access control for Kubernetes resources. Users can now create roles for Kubernetes APIs using Kubernetes `Role` and `ClusterRole` objects in the Kubernetes API. They can also grant permissions to users and service accounts with the `RoleBinding` and `ClusterRoleBinding` objects. The web interface for Kubernetes RBAC reflects these changes. Your old Kubernetes grants and roles will be automatically migrated during the UCP upgrade.

### Logging

Admins can now enable audit logging in the UCP config. This logs all incoming user-initiated requests in the `ucp-controller` logs. Admins can choose whether to log only metadata for incoming requests or the full request body as well. For more information, see [Create UCP audit logs](https://docs.docker.com/ee/ucp/admin/configure/create-audit-logs/).<commit_msg>Update release-notes.md<commit_after>---
title: UCP release notes
description: Release notes for Docker Universal Control Plane. Learn more about the
  changes introduced in the latest versions.
keywords: UCP, release notes
toc_min: 1
toc_max: 2
redirect_from:
  - /datacenter/ucp/2.2/guides/release-notes/
  - /datacenter/ucp/3.0/guides/release-notes/
---

Here you can learn about new features, bug fixes, breaking changes, and
known issues for the latest UCP version.
You can then use [the upgrade instructions](admin/install/upgrade.md) to
upgrade your installation to the latest release.

* [Version 3.1](#version-31)
* [Version 3.0](#version-30)
* [Version 2.2](#version-22)

# Version 3.1

## 3.1.2 (2018-12-13)

### Authentication and Authorization
* SAML Single Logout is now supported in UCP.
* Identity Provider initiated SAML Single Signon is now supported in UCP.  The admin can 
enable this feature in Admin Settings -> SAML Settings.

### Bug Fixes
* Core
  * Significantly reduced database load in environments with a lot of concurrent 
  and repeated API requests by the same user. (docker/escalation#911)
  * UCP backend will now complain when a service is created/updated if the
   `com.docker.lb.network` label is not correctly specified. (docker/orca#15015) 
  * LDAP group member attribute is now case insensitive. (docker/escalation#917)
* Interlock
  * Interlock headers can now be hidden. (escalation#833)
  * Now upgrading Interlock will also upgrade interlock proxy and interlock extension as well (escalation/871)
  * Added support for 'VIP' backend mode, in which the Interlock proxy connects to the backend service's Virtual IP instead of load-balancing directly to each task IP. (docker/interlock#206) (escalation/920)

## 3.1.1 (2018-12-04)

* To address CVE-2018-1002105, a critical security issue in the Kubernetes API Server, Docker is using Kubernetes 1.11.5 for UCP 3.1.1.

## 3.1.0 (2018-11-08)

## Bug Fixes

* Swarm placement constraint warning banner no longer shows up for `ucp-auth` services (#14539)
* "update out of sequence" error messages no longer appear when changing admin settings (#7093)
* Kubernetes namespace status appears in the web interface (#14526)
* UCP Kubernetes compose components always run on managers (#14208)
* `docker network ls --filter id=<id>` now works with a UCP client bundle (#14840)
* Collection deletes are correctly blocked if there is a node in the collection (#13704)

## New Features

### Kubernetes

* Kubernetes is updated to version 1.11.2.
* Kubernetes native RBAC feature manages access control for Kubernetes resources. Users can now create roles for Kubernetes APIs using Kubernetes `Role` and `ClusterRole` objects in the Kubernetes API. They can also grant permissions to users and service accounts with the `RoleBinding` and `ClusterRoleBinding` objects. The web interface for Kubernetes RBAC reflects these changes. Your old Kubernetes grants and roles will be automatically migrated during the UCP upgrade.

### Logging

Admins can now enable audit logging in the UCP config. This logs all incoming user-initiated requests in the `ucp-controller` logs. Admins can choose whether to log only metadata for incoming requests or the full request body as well. For more information, see [Create UCP audit logs](https://docs.docker.com/ee/ucp/admin/configure/create-audit-logs/).
{'fraction_non_alphanumeric': 0.07993989481592788, 'fraction_numerical': 0.03936889556724268, 'mean_word_length': 4.406986190089358, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 7, 'https://': 3, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4297210', 'n_tokens_mistral': 2072, 'n_tokens_neox': 1802, 'n_words': 844}