| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 78245b2357a5eeafd193d28f86655327edce7bbc4da142c826eba5f5c05a624cd30b2551f63da37f38e9ca3fcf6990d77a3a068cbfc9075ff19fcdb235db9acb |
| kubernetes-src.tar.gz | 880c5a8b16215bc58b307922474703048020b38be1d41672425cd07bdcf0626a88f04a080eac13ebb63c42214454420063289ba147d0a6cdf8dc3fe942382964 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-386.tar.gz | 0f804c77ef6122b4b6586a507179fe0f1a383752342b3e5575e09223fdda9731acd89631ad236969e19ba1016adb28cfdb62f5b7a2b594bd68c780a5066cf370 |
| kubernetes-client-darwin-amd64.tar.gz | 0bdbd8003bcbecb4494b4778411e7d057067e78a99a7e8e8e45a3982cbe476dab822bccdeb73b989dfc5222ab8a09554f25dfb1f3d48622a1db3a45088799e49 |
| kubernetes-client-linux-386.tar.gz | 522795df77ff8543251232863cb36fe2d501671e04a5279a112aa3ffa784de93f3f567af50fffa5367fd27793e595b3e6b8c66b0cfbc99ecadbfbb279fe9e9c1 |
| kubernetes-client-linux-amd64.tar.gz | b6481bae237e6971f7b9cc039d3b7e62d49ddd48d52dd979432fa0318a8e3e5bf1677298ffee5c3d9af07e32c50eb94948509218302f8ba966abcc27e391b282 |
| kubernetes-client-linux-arm.tar.gz | 45b8fa2557bb742a8ce16e0a69fa64fe898509418c6f9099a24bf1ab20c7d5de61f2e79f2de46c660c53eec78c45d5606a5ae5144f1f47dca54d71d353566596 |
| kubernetes-client-linux-arm64.tar.gz | 475b823a5e2c4c6e1bc49f35fbef45d1fc6e6279f5335762bad05d0f695fd033a3a81bd90ea854d8ee2c9b41f12b22f10606a2c058ea178f0b07ddb418a69499 |
| kubernetes-client-linux-ppc64le.tar.gz | bc289b249051e9918f8f842bb98bf4d0b8951709fe5b65c2185f04b78213ec0099973f3459ffb062342a0a01739f3919758bb2724566c5e24cb30546af68fad8 |
| kubernetes-client-linux-s390x.tar.gz | 0935e0ad23a61d570de087e72f22bc3da2a34c19bb5aea0ab342f91655b4a02ba781448c35b837e0174fcd1b5d9cfb5550a1b9271c10f67a93975088df737337 |
| kubernetes-client-windows-386.tar.gz | 4833425ff040983b841722a00edd2cfa56f85099658ae04890c4e2262931e3c74d7276f3e95a74fbdd6934f32bca41297e72209ffaa1c6192bc9b6866d78582e |
| kubernetes-client-windows-amd64.tar.gz | 156a5328834055f7b9732c762cc917cfdbf2d2fc67dd80ba89ae7dcb9c2e7d271fc4fe2b2074f98fc308f2282138b10c86becaf6ed235de0d0d3e66a6d419c5a |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 9435be5cced10252954be579408e2a253eb51dd7b649417f1e91679bce33f6ff735f1c24687994a133155b19453fbcfff4555938134001961ece419b746ecefe |
| kubernetes-server-linux-arm.tar.gz | 8dc3d4a0c09830831efd77fdf193ed9ccc1247bd981b4811192cac38cf5ffd04042575632d4259af933959e6e774b10ac2f9e3a79903629f36dad616dd99b5d5 |
| kubernetes-server-linux-arm64.tar.gz | f2549f87f21ea44c5d776a706c59bb2ea61d7f2cca304850aa6ad5b09c4486b16ae1be19ab9f9166a2f9f9d2ffbef6d38676c54104d424a855ce445ca6252607 |
| kubernetes-server-linux-ppc64le.tar.gz | 0c0671eaf7cf7262c95411930311bb4610f89583431738149f0ee7f8f6a55b094322fc6717db1cdd496944c66216305ac4a5e3ea782ab1c2817e23a4bc32ff9f |
| kubernetes-server-linux-s390x.tar.gz | ff24909b0b044924d241d6aeac9e9b4f0696c0ca7e973d56a874b02b613a45d00c30c5709326d3ad02f0e30742c1aa412e40a061e4c38631c1a538801273e565 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 235b1c4348b5779ca71a5f63121ff6a162db02bb24b4d815ec73412afedbe0ce5f969a40569e709017fbaf8f51e952d6fbe740ab3daf5d6fc932d8fac3f74c07 |
| kubernetes-node-linux-arm.tar.gz | cd23813419a74983bdd3a3104e20684e947ef7302dcfa1802132439b21e7621ad129621c633094e74a50c2ef57a83685f425b345898e7f501f7b0b639d8ba215 |
| kubernetes-node-linux-arm64.tar.gz | fb6283dae828f8d9275a05c6a4ea27bc1136e8e8253b5ddac52c8254813b11e8e4373038bf145a51d9680bb14dc276f8c7852e87d553cead5811550bf21eab5a |
| kubernetes-node-linux-ppc64le.tar.gz | f910922d422b65f6b6a8d7762a23048991695496c0fc07c3dc4f1a81e32d250d592851a2f5b19588f7ed65281495d4187e8ab61cb4711102f2d0c8766267bf5b |
| kubernetes-node-linux-s390x.tar.gz | d895fed57caf038afe0087ff44d2adfdd8955d18135adad9935952702e9abf2bc07289e1a7545b30f4d9f7ab154c642b4c08d74070c66f5c917196cbb37b9692 |
| kubernetes-node-windows-amd64.tar.gz | 4bc09e54935d2cb4d2bad7db06831d040cc03906d8934575932ed6eab5f0bc9ab67cdb2720c919c89d8b29388bb61f228c10167c9bc9eec46bbdc10c6381500e |
- ACTION REQUIRED: The Node.Status.Volumes.Attached.DevicePath fields is deprecated for CSI volumes and will be unset in a future release (#71095, @msau42)
- Raw block volume support is promoted to beta, and enabled by default. This is accessible via the
volumeDevicescontainer field in pod specs, and thevolumeModefield in persistent volume and persistent volume claims definitions. (#71167, @msau42) - Fix a scheduler panic due to internal cache inconsistency (#71063, @Huang-Wei)
- Fix a potential bug that scheduler preempts unnecessary pods. (#70898, @Huang-Wei)
- The API server encryption configuration file format has graduated to stable and moved to
apiVersion: apiserver.config.k8s.io/v1andkind: EncryptionConfiguration. (#67383, @stlaz) - kubelet now supports
log-fileoption to write logs directly to a specific file (#70917, @dims) - kubeadm now supports the
--image-repositoryflag for customizing what registry to pull images from (#71135, @luxas) - timeouts set in ListOptions for clients will also be respected locally (#70998, @deads2k)
- IPVS proxier now set net/ipv4/vs/conn_reuse_mode to 0 by default, which will highly improve IPVS proxier performance. (#71114, @Lion-Wei)
- StatefulSet is supported in
kubectl autoscalecommand (#71103, @Pingan2017) - Report kube-scheduler unhealthy if leader election is deadlocked. (#71085, @bsalamat)
- apiserver: fixes handling and logging of panics in REST handlers (#71076, @liggitt)
- kube-apiserver now serves OpenAPI specs for registered CRDs with defined validation schemata. Kubectl will validate client-side using those. (#67205, @roycaihw)
- kubelets are no longer allowed to delete their own Node API object. Prior to 1.11, in rare circumstances related to cloudprovider node ID changes, kubelets would attempt to delete/recreate their Node object at startup. Kubelets older than 1.11 are not supported running against a v1.13+ API server. If an unsupported legacy kubelet encounters this situation, a cluster admin can remove the Node object: (#71021, @liggitt)
*
kubectl delete node/<nodeName>- or grant self-deletion permission explicitly:
kubectl create clusterrole self-deleting-nodes --verb=delete --resource=nodeskubectl create clusterrolebinding self-deleting-nodes --clusterrole=self-deleting-nodes --group=system:nodes
- or grant self-deletion permission explicitly:
- Kubernetes v1.13 moves support for Container Storage Interface to GA. As part of this move Kubernetes now supports CSI v1.0.0 and drops support for CSI 0.3 and older releases. Older CSI drivers must be updated to CSI 1.0 in order to work with Kubernetes 1.13+. (#71020, @saad-ali)
- Remove deprecated kubectl command aliases 'run-container' (#70728, @Pingan2017)
- kubeadm: enable strict unmarshaling of YAML configuration files and show warnings for unknown and duplicate fields. (#70901, @neolit123)
- For kube-up and derived configurations, CoreDNS will honor master taints, for consistency with kube-dns behavior. (#70868, @justinsb)
- CoreDNS is now version 1.2.6 (#70799, @rajansandeep)
- kubeadm: Use
advertise-client-urlsinstead oflisten-client-urlsas andetcd-serversoptions for apiserver. (#69827, @tomkukral) - Add option to create CSRs instead of certificates for kubeadm init phase certs and kubeadm alpha certs renew (#70809, @liztio)
- Add a kubelet socket which serves an grpc service containing the devices used by containers on the node. (#70508, @dashpole)
- kube-apiserver: the
NodeRestrictionadmission plugin now prevents kubelets from modifyingNodelabels prefixed withnode-restriction.kubernetes.io/. Thenode-restriction.kubernetes.io/label prefix is reserved for cluster administrators to use for labelingNodeobjects to target workloads to nodes in a way that kubelets cannot modify or spoof. (#68267, @liggitt)- kubelet: it is now deprecated to use the
--node-labelsflag to setkubernetes.io/andk8s.io/-prefixed labels other than the following labels:kubernetes.io/hostnamekubernetes.io/instance-typekubernetes.io/oskubernetes.io/archbeta.kubernetes.io/instance-typebeta.kubernetes.io/osbeta.kubernetes.io/archfailure-domain.kubernetes.io/zonefailure-domain.kubernetes.io/regionfailure-domain.beta.kubernetes.io/zonefailure-domain.beta.kubernetes.io/region[*.]kubelet.kubernetes.io/*[*.]node.kubernetes.io/*
- Setting other
kubernetes.io/- andk8s.io/-prefixed labels using the--node-labelsflag will produce a warning in v1.13, and be disallowed in v1.15. Setting labels that are not prefixed withkubernetes.io/ork8s.io/is still permitted.
- kubelet: it is now deprecated to use the
- Adds DynamicAuditing feature which allows for the configuration of audit webhooks through the use of an AuditSink API object. (#67257, @pbarker)
- The Kubelet plugin registration mechanism used by device plugins and CSI plugins is now GA (#70559, @vladimirvivien)
- CSIPersistentVolume feature, i.e. PersistentVolumes with CSIPersistentVolumeSource, is GA. (#69929, @jsafrane)
- CSIPersistentVolume feature gate is now deprecated and will be removed according to deprecation policy.
- kubectl: support multiple arguments for cordon/uncordon and drain (#68655, @goodluckbot)
- The kube-apiserver's healthz now takes in an optional query parameter which allows you to disable health checks from causing healthz failures. (#70676, @logicalhan)
- client-go: fixes sending oversized data frames to spdystreams in remotecommand.NewSPDYExecutor (#70999, @liggitt)
- kube-controller-manager no longer removes ownerReferences from ResourceQuota objects (#70035, @liggitt)
- Introduces support for running a nodelocal dns cache. It is disabled by default, can be enabled by setting KUBE_ENABLE_NODELOCAL_DNS=true (#70555, @prameshj)
- An ip address is required for the cache instance to listen for requests on, default is a link local ip address of value 169.254.20.10
- Fix dry-run output in kubectl apply --prune (#69344, @zegl)
- kubectl run now generates apps/v1 deployments by default (#71006, @liggitt)
kubeadm resetnow outputs instructions about manual iptables rules cleanup. (#70874, @rdodev)- Recognize newer docker versions without -ce/-ee suffix: 18.09.0 (#71001, @thomas-riccardi)
- "unfinished_work_microseconds" is added to the workqueue metrics; it can be used to detect stuck worker threads. (kube-controller-manager runs many workqueues.) (#70884, @lavalamp)
- add readiness gates in extended output for pods (#70775, @freehan)
- add
Readycolumn and improve human-readable output of Deployments and StatefulSets (#70466, @Pingan2017) - Kubeadm now respects the custom image registry configuration across joins and upgrades. Kubeadm passes the custom registry to the kubelet for a custom pause container. (#70603, @chuckha)
- kubeadm: deprecate the DynamicKubeletConfig feature gate. The functionality is still accessible by using the kubeadm alpha kubelet enable-dynamic command. (#70849, @yagonobre)
- Add
kubelet_container_log_size_bytesmetric representing the log file size of a container. (#70749, @brancz) - kubeadm: remove the AuditPolicyConfiguration feature gate (#70807, @Klaven)
- Kubeadm: attributes for join --control-plane workflow are now grouped into a dedicated JoinControlPlane struct (#70870, @fabriziopandini)
- Addon configuration is introduced in the kubeadm config API, while feature flag CoreDNS is now deprecated. (#70024, @fabriziopandini)
- Fixes ability for admin/edit/view users to see controller revisions, needed for kubectl rollout commands (#70699, @liggitt)
- kubeadm pre-pulls Etcd image only if external Etcd is not used and (#70743, @bart0sh)
- --etcd-upgrade=false is not specified
- Add support for CRD conversion webhook (#67006, @mbohlool)
- Delete node lease if the corresponding node is deleted (#70034, @wangzhen127)
- In a future release the kubectl convert command will be deprecated. (#70820, @seans3)
- kubeadm: UnifiedControlPlaneImage is replaced by UseHyperKubeImage boolean value. (#70793, @rosti)
- kubeadm v1beta1 API: InitConfiguration.APIEndpoint has been renamed to .LocalAPIEndpoint (#70761, @luxas)
- Breaking change: CSINodeInfo split into Spec and Status. New fields Available and VolumePluginMechanism added to CSINodeInfo csi-api object. CSIDriverInfo no longer deleted on Driver uninstallation, instead Available flag is set to false. (#70515, @davidz627)
- GCERegionalPersistentDisk feature is GA now! (#70716, @jingxu97)
- Add secure port 10259 to the kube-scheduler (enabled by default) and deprecate old insecure port 10251. Without further flags self-signed certs are created on startup in memory. (#69663, @sttts)
--feature-gatesargument has been removed from thekubeadm joincommand. Feature gates will be retrieved from the cluster configuration during the join process. (#70755, @ereslibre)- [kubeadm] Updates version of CoreDNS to 1.2.6 (#70796, @detiber)
- kubelet: When node lease feature is enabled, kubelet reports node status to api server only if there is some change or it didn't report over last report interval. (#69753, @wangzhen127)
- Self hosted is no longer supported in the standard workflow. The feature flags have been removed and your self hosted cluster is no longer able to upgrade via kubeadm. (#69878, @Klaven)
- vSphereVolume implements Raw Block Volume Support (#68761, @fanzhangio)
- [GCE] Filter out spammy audit logs from cluster autoscaler. (#70696, @loburm)
- CRD supports multi-version Schema, Subresources and AdditionalPrintColumns (NOTE that CRDs created prior to 1.13 populated the top-level additionalPrinterColumns field by default. To apply an update that changes to per-version additionalPrinterColumns, the top-level additionalPrinterColumns field must be explicitly set to null). (#70211, @roycaihw)
- Fixes a bug in previous releases where a pod could be placed inside another pod's cgroup when specifying --cgroup-root (#70678, @dashpole)
- Upgrade golang.org/x/net image to release-branch.go1.10 (#70663, @wenjiaswe)
- New addon in addon manager that automatically installs CSI CRDs if CSIDriverRegistry or CSINodeInfo feature gates are true. (#70193, @saad-ali)
- delegated authorization can now allow unrestricted access for
system:masterslike the main kube-apiserver (#70671, @deads2k) - Update to use go1.11.2 (#70665, @cblecker)
- Add dns capabilities for Windows CNI plugins: (#67435, @feiskyer)
- "dns" {
- "servers": ["10.0.0.10"],
- "searches": ["default.svc.cluster.local","svc.cluster.local","cluster.local"],
- "options": []
- }
- The VolumeScheduling feature is GA. The VolumeScheduling feature gate is deprecated and will be removed in a future release. (#70673, @msau42)
- Go clients created from a kubeconfig that specifies a TokenFile now periodically reload the token from the specified file. (#70606, @mikedanese)
- kubeadm: validate kubeconfig files in case of external CA mode. (#70537, @yagonobre)
- kube-apiserver:
--audit-webhook-versionand--audit-log-versionnow default toaudit.k8s.io/v1if unspecified (#70476, @charrywanganthony) - kubeadm: timeoutForControlPlane is introduced as part of the API Server config, that controls the timeout for the wait for control plane to be up. Default value is 4 minutes. (#70480, @rosti)
- kubeadm: The writable config file option for extra volumes is renamed to readOnly with a reversed meaning. With readOnly defaulted to false (as in pod specs). (#70495, @rosti)
- remove retry operation on attach/detach azure disk (#70568, @andyzhangx)
- Fix CSI volume limits not showing up in node's capacity and allocatable (#70540, @gnufied)
- Flex volume plugins now support expandvolume (to increase underlying volume capacity) and expanfs (resize filesystem) commands that Flex plugin authors can implement to support expanding in use Flex PersistentVolumes (#67851, @aniket-s-kulkarni)
- kubeadm: Control plane component configs are separated into ClusterConfiguration sub-structs. (#70371, @rosti)
- The
MountPropagationfeature is unconditionally enabled in v1.13, and can no longer be disabled. (#68230, @bertinatto) - add azure UltraSSD, StandardSSD disk type support (#70477, @andyzhangx)
- The OwnerReferencesPermissionEnforcement admission plugin now checks authorization for the correct scope (namespaced or cluster-scoped) of the owner resource type. Previously, it always checked permissions at the same scope as the child resource. (#70389, @caesarxuchao)
- Ensure orphan public IPs on Azure deleted when service recreated with the same name. (#70463, @feiskyer)
kubectl applycan now change a deployment strategy from rollout to recreate without explicitly clearing the rollout-related fields (#70436, @liggitt)- Fix cloud-controller-manager crash when using OpenStack provider and PersistentVolume initializing controller (#70459, @mvladev)
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 1d50cfd34306ace7354516125c45f8c546bba3ca5081af2b21969b535967d302821c06e7d4d590ba05f3e1e89ba56cc3d890b2e5bf2e07456532ac28e7c6c4a8 |
| kubernetes-src.tar.gz | bf097b99d7b9af15bc1d592ee3782da1e811d8eb68dc9ae9d287589ce9174d3743beaf51422283c42ad03775e43839954bdeb44b1aa5707f73eebabed0cc199e |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-386.tar.gz | 77778ae2887eda52ee716fb0e843c17b2705b1284a67cdf53f91292eb7f1055ef942be1ae0eac25ad9f4c9062c802fd57943e57578113f875f0d1f8a227bbb25 |
| kubernetes-client-darwin-amd64.tar.gz | b3399767df12b71ee4b7b30126bd8001a0c1396161eb7535d797fd5847c55bccc18fb475f1639c3bf8e5f5c484a61025108c01e35f71417a405e75580c3990f6 |
| kubernetes-client-linux-386.tar.gz | 5ef0d318ff8da28c332ae25164e5a441272d2ee8ef2ac26438a47fe3e7e645ed0b132325243f3f33c93a8681431a117f6207893f0e5270738aacfee16d8bbd32 |
| kubernetes-client-linux-amd64.tar.gz | 1f429eae5b0b1e39b1d4d30e3220a82d0ae6672a6f4b34a05246c3efc131a236f79e5876d7a98c56d98fbf243b96cfd8db5d1ab73905df9e000d7af2b710fcf3 |
| kubernetes-client-linux-arm.tar.gz | 5583aecdc9b4a54a4aa904fc1de66400f50628969e31b5a63ab1d3b6628e3c547a9cef9c2bc9e53a0eeb0155fa0f745f7ee47e92166ce66d0c79199ff20c41de |
| kubernetes-client-linux-arm64.tar.gz | 2453b9100c06b11e8c424d59cfd1c5e111c22b596191a9cfb0b330d198abecd982e19eb2ac38d91c3d1ef226c9533c4f9a210b88295029985739e86363905de5 |
| kubernetes-client-linux-ppc64le.tar.gz | 4991ec4c19a82d50caed78bc8db51e7cdcd1f2896dfcaa45d84f347a72fe7ee0d0280c897af54afec93f548d2ce247cf70d2b439024752ff701b80b67c385913 |
| kubernetes-client-linux-s390x.tar.gz | c55f2802afb2e5d261bb26b6c396df8ebe6b95913ddab1e124cf177f59a00524a26cc9dd74cbf06cc7a6a2207ccba2d3a8585f20a37485214d9b1bebb27fdde7 |
| kubernetes-client-windows-386.tar.gz | df78465267e35ef078c3c0fd33f8898a9df26fbf411df3ed3283fbdc2e79380693abe2a2815d5a4d53742135db4b5a0a480ce301817ede5c0674b12ac9c9bac9 |
| kubernetes-client-windows-amd64.tar.gz | 5b93fdaaa931ef8e24196e53c484f91ef9e50b7d11e1053ccb61b2d6bdc8164767dd1d885cdc4949fdb7ed05cfbc7c9f7cc3468ad7affc22f849836b311d855f |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 922a93ce677e686e594c11db75e1969c995b23062bba511bff4a43d3a530e21e1d15cbe9b38d06af407de5a6c141f3b10cf24f50b848ed6b36e701249cece2c3 |
| kubernetes-server-linux-arm.tar.gz | 5dd550b58dedf25df020e66f1526e80c50b46d2df3ddd241bd02b6ebf10308599e7739917cbd9a3d2d3e787078d1271c4e3333f7f343a8a754ac5c08dedba0c9 |
| kubernetes-server-linux-arm64.tar.gz | 3e1037e71d85a74cd5d40dd836bd442b2dcc457f8ccc8247e4537f3deca6f99d6805857c44b4fd69a7655308a3b0b4be43faaf74017cc3e26e8ba81e84968f33 |
| kubernetes-server-linux-ppc64le.tar.gz | a89c46b558613ad09efe44a81574ad18157a787d1e9c5d09c98d3911b499573cd9b9845b7a7526d4de5b93887267bedd96d043f79799552639b2168d3fea49ab |
| kubernetes-server-linux-s390x.tar.gz | 47a68668e38ac1b8cb801f4bff3b15060cd88801f446ebfbf06125dbc9aef52be79faa94acee65af46b93512af6f15c1f9f598324a368b82996f5a0f9aca0d14 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 74d5d46ac6ba336fa8aaf55d0a15860f6ebde2ff58d377ca93063593da12fbd4c758fe92c6b3285df0e4cc23c354ce5802ae3f7c38ad4e63f9d1eeaef41f2f2b |
| kubernetes-node-linux-arm.tar.gz | 90372cb5270ffe6179d5d7efd3fff6aa029f73853805038fef1a6f92683399d692aee7790eacc3a59681f66e2bd21b76c3abd87bef6404382782ec82fb726d59 |
| kubernetes-node-linux-arm64.tar.gz | 09693303a1a8489d9599d32f7fbf549d18f31eb53671fa2ed342fe5089f2fba9322d8c52088b141da2414bb2b7f8352634cf84f0c72f3a58afd057629c3e8e5b |
| kubernetes-node-linux-ppc64le.tar.gz | cbdb3b9ffd9be524ec0b38d72b0545b6dd1b3b789747f41a661fd7cbeffe942eb592c7e928a61e26152e7402b4894f5a74aad09cf2243d726b3b311d41cb0674 |
| kubernetes-node-linux-s390x.tar.gz | fc296b386bc03bf10773559118cd4a3d5be3d4c296f09748507fac812a1c791b435881b2ae425846632404f7f53f3f3bf54fc582fb8aa4895310186371dbacfd |
| kubernetes-node-windows-amd64.tar.gz | ae79c62fcb0654a62606d65cf131188d93e4a10787a862e7b0363269942df19543b55fd119ec6ff73578b24db7774235611956103fe5e153eddf450750c4bbee |
- kubelet --system-reserved and --kube-reserved are supported now on Windows nodes (#69960, @feiskyer)
- CSI drivers now have access to mountOptions defined on the storage class when attaching volumes. (#67898, @bswartz)
- The
kubectl plugin listcommand will now display discovered plugin paths in the same order as they are found in a user's PATH variable. (#70443, @juanvallejo) - Handle Windows named pipes in host mounts. (#69484, @ddebroy)
- kubeadm: Multiple API server endpoints support upon join is removed as it is now redundant. (#69812, @rosti)
- OpenAPI spec marks delete request's body parameter as optional (#70032, @iamneha)
- kube-controller-manager and cloud-controller-manager now hold generated serving certificates in-memory unless a writeable location is specified with --cert-dir (#69884, @liggitt)
- Scheduler only activates unschedulable pods if node's scheduling related properties change. (#70366, @mlmhl)
- --api-audiences now defaults to the --service-account-issuer if the issuer is provided but the API audience is not. (#70308, @mikedanese)
- Refactor scheduler_test.go to use a fake k8s client. (#70290, @tossmilestone)
kubectl rollout undonow returns errors when attempting to rollback a deployment to a non-existent revision (#70039, @liggitt)kubectl rollout undono longer uses the deprecated extensions/v1beta1 rollback API, which means that Events are no longer emitted when rolling back a deployment
-
- The builtin system:csi-external-provisioner and system:csi-external-attacher cluster roles (#69868, @pohly)
- are deprecated and will not be updated for deployments of CSI sidecar container versions >= 0.4.
- Deployments with the current CSI sidecar containers have to provide their own RBAC
- definitions. The reason is that the rules depend on how the sidecar containers are used,
- which is defined by the deployment.
- The builtin system:csi-external-provisioner and system:csi-external-attacher cluster roles (#69868, @pohly)
- Use debian-base instead of busybox as base image for server images (#70245, @ixdy)
- add support for projected volume in describe function (#70158, @WanLinghao)
- Speedup process lookup in /proc (#66367, @cpuguy83)
- Kubeadm reset now clean up custom etcd data path (#70003, @yagonobre)
- We changed when the
metadata.generationof a custom resource (CR) increments. (#69059, @caesarxuchao)- If the CR participates the spec/status convention, the metadata.generation of the CR increments when there is any change, except for the changes to the metadata or the changes to the status.
- If the CR does not participate the spec/status convention, the metadata.generation of the CR increments when there is any change to the CR, except for changes to the metadata.
- A CR is considered to participate the spec/status convention if and only if the "CustomResourceSubresources" feature gate is turned on and the CRD has
.spec.subresources.status={}.
- Improve Azure instance metadata handling by adding caches. (#70353, @feiskyer)
- adding cn-northwest-1 for AWS China Ningxia region (#70155, @pahud)
- "kubectl get" no longer exits before printing all of its results if an error is found (#70311, @juanvallejo)
- kubeadm now automatically creates a new stacked etcd member when joining a new control plane node (does not applies to external etcd) (#69486, @fabriziopandini)
- Critical pod annotation is deprecated. Pod priority should be used instead to mark pods as critical. (#70298, @bsalamat)
- Display the usage of ephemeral-storage when using
kubectl describe node(#70268, @Pingan2017) - Added functionality to enable br_netfilter and ip_forward for debian packages to improve kubeadm support for CRI runtime besides Docker. (#70152, @ashwanikhemani)
- Add regions ap-northeast-3 and eu-west-3 to the list of well known AWS regions. (#70252, @nckturner)
- Remove kube-controller-manager flag '--insecure-experimental-approve-all-kubelet-csrs-for-group'(deprecated in v1.7) (#69209, @Pingan2017)
- GCE/GKE load balancer health check default interval changes from 2 seconds to 8 seconds, unhealthyThreshold to 3. (#70099, @grayluck)
- Health check parameters are configurable to be bigger than default values.
- The kubectl wait command must handle when a watch returns an error vs closing by printing out the error and retrying the watch. (#69389, @smarterclayton)
- Updates to use debian-iptables v11.0, debian-hyperkube-base 0.12.0, and kube-addon-manager:v8.9. (#70209, @ixdy)
- Fixed patch/update operations on multi-version custom resources (#70087, @liggitt)
- When
--rotate-server-certificatesis enabled, kubelet will no longer request a new certificate on startup if the current certificate on disk is satisfactory. (#69991, @agunnerson-ibm) - Add scheduler benchmark tests for PodAffinity and NodeAffinity. (#69898, @Huang-Wei)
- fix azure disk attachment error on Linux (#70002, @andyzhangx)
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | cbe7ef29c7e7bbed82e173289f5f84d7a85ee4965cc5b7ccd16cf8236a3b8171bb8f52011d00ea4dd1119cfeee32a3326260e968038431f2834f194e84f6f070 |
| kubernetes-src.tar.gz | 8b0b8e1b635cd849c2974d755fe174f0ce8fe8c690721d8ac6312683bbd2ca2c6f7eada38e4e470d3a0172138b10a994fa3bebc01abd76d835431660247e8a71 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-386.tar.gz | fca661a5001e7f368374d0805f20910be24baa485bf4ae5d993185b974f70ff7241497e7a130658dca69abf335fd581c0f5be22de4f9937f32e9fb20fbd0f1e9 |
| kubernetes-client-darwin-amd64.tar.gz | d31dfea475981c7f7b758c7f201aa5b866db48d87942c79d0a12d464b7cdf501dba2255282c72b53928ccac215282fc8c0a9069a7443e9683bbf39a59814d8c3 |
| kubernetes-client-linux-386.tar.gz | fecf8362c572fff48952fd2748ddcb9d375462cb484670cda4fda1387eb692713be0a323e93746bb1845a4ef3b15df288430c8b4a5e4f2892c388bb84a66ec9a |
| kubernetes-client-linux-amd64.tar.gz | 136cb82ac94bcd791d56e997a948a7e1bee4af03bcc69ce9c835895cdda75524f5916756c778ff8aa693624289824eaee4aff1e62a6d95d18f9b69a7473a3fe9 |
| kubernetes-client-linux-arm.tar.gz | e561c37895edef44614ecd59f497d393275ee62455b6269b169a891873d661d46cbf68e6148447f142ebdddb45bd5c01f6927d8463e2e1c4072358fec205e53e |
| kubernetes-client-linux-arm64.tar.gz | c0d5eb49763e8bf50b5e8e3785c7889fecbd8bf7c0b3c18250fa894a1c5e58a14f796f7526279dbf41d5d47e69114d39e37a62403ff4abb1cc0cd20bd48c1c5a |
| kubernetes-client-linux-ppc64le.tar.gz | a5a8c150af163e7c726662eeddfc3de8e43f123daaa100b8e82c9bc786313a5ce8135cbaadd41ebbb6c2307aeebdadf43fc84037a5ac9d3c5d6e9052b7fc615b |
| kubernetes-client-linux-s390x.tar.gz | fd162e0244e107f1892d79029f3452cdba84d8616ad1b15eebe197afb3b536328cd8cba9c73c0ce1cd8ac6faed9e0a4613d487bf07b45341fadf0d940062bafa |
| kubernetes-client-windows-386.tar.gz | e01fedec8f700e037bc43cb13bc916b85601cd1c9361a0f63fd27092640f89d2faaff4a6157638af8af52538c5f7fa75d9c7674477a45e0215fd505095a62f21 |
| kubernetes-client-windows-amd64.tar.gz | d2601efcfa6a4ba8a017e9cac571fb454b21b7700a7b3f8e2fbabdd5301545ef2459da93eca3684c1aa73ea6a6d87bae0e27fffc8b05ed93729004ebbb9e3879 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 4dda298d44bc309f250c067e9282eea37903838a140cf5abf6f861dca624d5a055ba1c43129454ae9abc8350f1fffb224677e34ef4268f7eb43c96fe48b28d78 |
| kubernetes-server-linux-arm.tar.gz | e9c3bdf60272399bc6f85a15bbc55cd69db389c223b275661ddcab4ae8c3afcd2171ec3c35a53df2420376f8c6294af791776e16dc07a27438aaa3220d6c94a3 |
| kubernetes-server-linux-arm64.tar.gz | d0a1701a34365f939799b6ea676129acdcfa1582bcf50e82a9751d9aafc73ebffd0fc0365fe352755caa9a2b791c4195d7eb04fbb1ce660f107cb5257d57a967 |
| kubernetes-server-linux-ppc64le.tar.gz | 1a23473960aaaa639e796020741b63c11dad8a93903926e80c871814b8209166ef06f5205172cd9b2438f8c8e9c9fb50b96d983f56737ab252530112f816b2d6 |
| kubernetes-server-linux-s390x.tar.gz | 293d0eb93e2ed641d0c1e26d58423670c04c307dddb034a9fc252043abe5694f63e772d4dfe2bf505fc0b68c41f9d87800d867b87c7697dd6249b11c0efbc580 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | e3cba71c2b2d151cdcc44937c1bea083ee0ceb829e7feb25cd37edd4d0bd7adac0a166144bd33f9aa616d730785d52c3fee70f0db272d892e79c38eb544cfd22 |
| kubernetes-node-linux-arm.tar.gz | 28d7f1cf4fecdc72da7f5f19836cc06bb08182f8e8fb1641dc01e9299247905e305b04c676efa9afbdb8b1ed649542148406b110b75b1e87c1daca7ffed6018c |
| kubernetes-node-linux-arm64.tar.gz | cfe22b11502cd857f0e277e7c1af08e6202f7ffc36f852c6154159bdd67bb330ffd18e5f768cf6968f0524aa80ffba6b7012207831ba94dec4084f1ce38a5289 |
| kubernetes-node-linux-ppc64le.tar.gz | 195a6785c49af419361a8901c99bb6613a6578a8eac5e8f08ec28077645be18c6d04c9afc2839d07de27b15595584f6dff5e5f9e78001fc2c6a3249e99b82247 |
| kubernetes-node-linux-s390x.tar.gz | 51f5b5ed47b50f5188d9e2f57b03555492d3e490494842247fa04fe81ea350c6694a52caa46ea50578ca07e48212f4f714b8614d8b1eb8924b424eaed73a8d24 |
| kubernetes-node-windows-amd64.tar.gz | d2690d57cd485c0c7ebe425464ad59f2c7722870abd6f264ea7fae65a4e403c89446373ba9cd23cd43e8316902637aa9e0b23d571b0ac890c35ff8e9c3ff3c3b |
- Corrected family type (inet6) for ipsets in ipv6-only clusters (#68436, @uablrek)
- Corrects check for non-Azure managed nodes with the Azure cloud provider (#70135, @marc-sensenich)
- Windows runtime endpoints is now switched to 'npipe:////./pipe/dockershim' from 'tcp://localhost:3735'. (#69516, @feiskyer)
- The caBundle and service fields in admission webhook API objects now correctly indicate they are optional (#70138, @liggitt)
- The --service-account-api-audiences on kube-apiserver is deprecated in favor of --api-audiences. (#70105, @mikedanese)
- kubeadm: fix unnecessary upgrades caused by undefined order of Volumes and VolumeMounts in manifests (#70027, @bart0sh)
- kubeadm: Implemented preflight check to ensure that number of CPUs (#70048, @bart0sh)
- on the master node is not less than required.
- Reduce memory utilization of admission webhook metrics by removing resource related labels. (#69895, @jpbetz)
- kubeadm: Introduce config print init/join-defaults that deprecate config print-defaults by decoupling init and join configs. (#69617, @rosti)
- Images based on debian-base no longer include the libsystemd0 package. This should have no user-facing impact. (#69995, @ixdy)
- Additionally, the addon-manager image is updated to use kubectl v1.11.3.
- fix 'kubeadm upgrade' infinite loop waiting for pod restart (#69886, @bart0sh)
- add more logging for azure disk diagnostics (#70012, @andyzhangx)
- Fluentd: concatenate long logs (#68012, @desaintmartin)
- CoreDNS is now the default DNS server in kube-up deployments. (#69883, @chrisohaver)
- Optimizes calculating stats when only CPU and Memory stats are returned from Kubelet stats/summary http endpoint. (#68841, @krzysztof-jastrzebski)
- kubeadm: Fix node join taints. (#69846, @andrewrynhard)
- Opt out of chowning and chmoding from kubectl cp. (#69573, @bjhaid)
- support Azure premium file for azure file plugin (#69718, @andyzhangx)
TaintBasedEvictionsfeature is promoted to beta. (#69824, @Huang-Wei)- improves memory use and performance when processing large numbers of pods containing tolerations (#65350, @liggitt)
- Add dynamic audit configuration api (#67547, @pbarker)
- Promote resource limits priority function to beta (#69437, @ravisantoshgudimetla)
- Fix cluster autoscaler addon permissions so it can access batch/job. (#69858, @losipiuk)
- change default azure file mount permission to 0777 (#69854, @andyzhangx)
- kubeadm: JoinConfiguration now houses the discovery options in a nested Discovery structure, which in turn has a couple of other nested structures to house more specific options (BootstrapTokenDiscovery and FileDiscovery) (#67763, @rosti)
- Fix tests to use fsync instead of sync (#69755, @mrunalp)
- kube-proxy argument
hostname-overridecan be used to override hostname defined in the configuration file (#69340, @stevesloka) - kube-apiserver: the
--deserialization-cache-sizeflag is no longer used, is deprecated, and will be removed in a future release (#69842, @liggitt) - Add support for JSON patch in fake client (#69330, @vaikas-google)
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 9f8a34b54a22ea4d7925c2f8d0e0cb2e2005486b1ed89e594bc0100ec7202fc247b89c5cbde5dc50c1f9d9f27e4f92aa0ca71fdffb9d079f63751bb1859d5bb4 |
| kubernetes-src.tar.gz | a27a7c254d3677c823bd6fd1d0d5f9b1e78ccf807837173669a0079b0812a23444d646d80c2433c167ae50bf1a0e2a4b1d7cbd7457a505fc666464b069bd1e5f |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-386.tar.gz | d77d33c6d6357b99089f65e1c9ec3cabdcf526ec56e87bdee6b09a8c1b1f1b8f6f0ed6d32f2d3b352391da848afc945e5bb6bfc4c05d90fb4ba429e2d2c3ec0f |
| kubernetes-client-darwin-amd64.tar.gz | 5b4a586defa2ba0ea7c8893dedfe48cae52a2cd324bcb311a3877e27493abb6cb76550e8201a9cac488cde9f83e0d30e6569b95641e8098fd9ec5df9c9e027b2 |
| kubernetes-client-linux-386.tar.gz | d50572fbb716393004ad2984a15043d2dfadedd16ae03a73fc85653266ae389071fd2c993923fbe9ea7fbd6b8cbeb6680ef147245e20f334969184d4b571509b |
| kubernetes-client-linux-amd64.tar.gz | 12ab709e574228f170a2ee2686e18dcbfcf59f64599b2ab9047c2ed63f4bd23d6c9fc48104431c9fa616e0ba30041e1c44fb3994ab54c5c98c0c4a94c5ea4b80 |
| kubernetes-client-linux-arm.tar.gz | 3a8c75b62cf9e6476417246d4aaeda5a13b74bc073444fc3649198b9d5dc1e7a62aa6b914c7da5a42bcd6164a8f63aa8b256b3579979b6465afe5aa5533ce501 |
| kubernetes-client-linux-arm64.tar.gz | 0f5b5956850f11a826d59d226b6a22645ca1f63893cd33c17dfe004bd316f2704d800beb0b9c91a204efc125241825243c9e89b86c01e523bd07636ef925772e |
| kubernetes-client-linux-ppc64le.tar.gz | 06c60dd2e4e8d1ab45474a5b85345b4f644d0c1c66e167596c6c91bd607f957b68121fdb7efed362cb6799e7bcf14752b01f8bea0c929deb85311180f11469be |
| kubernetes-client-linux-s390x.tar.gz | 4630e9e523beb02d8d3900c71b3306561c2d119d588399c93d578184eb1a53601ceefe15a600740c13d565eaf24a679f17e371e2b19a70f77bbceab84acb58b3 |
| kubernetes-client-windows-386.tar.gz | 0c0fcc9c492aceb00ff7fd3c10ba228c7bb10d6139b75ceecd8f85532797c5dc1162b39d94ebae5fa6b4c26f2b2a81630371617426f7537d9d11456943c7d50c |
| kubernetes-client-windows-amd64.tar.gz | 3548a6d8618c6c7c8042ae8c3eb69654314392c46f839de24ab72d9faa79993a6cf989f6ac619e418e817300081742c9928c8c2dd82cffc74f7c0e532e42288d |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 9dbf2343ef9539b7d4d73949bcd9eef6f46ece59e97fa3390a0e695d0cb2eacbbbae17e3ed53432a8018f55e6db2421a58739aacbc163776d8b2fe774ad62c34 |
| kubernetes-server-linux-arm.tar.gz | a985f3c302246df9bff4b927a2596d209c19fb2f245aa5cb5de189b6a9d247d6fd0234edd45968a691f1a2714a0b72ffba2df1aebf361ba1a3461ab7e5fda2ff |
| kubernetes-server-linux-arm64.tar.gz | 80d20df07e6a29b7aedccbd4e26c1c0565b2a1c3146e1a5bb2ebd2e8cf9ab063db137389a498fd6a6c3c42da43486186af6f65fba399b332e4cae134badd7ab0 |
| kubernetes-server-linux-ppc64le.tar.gz | 7d45ed3aa8b36e9e666b334ff3ed3de238caea34b4a92b5e1a61a6e7223ae8581bafff43a5b72447a43e118ad4b2c5c15aa0d6faab9a6a72a8fcf99abf340a1e |
| kubernetes-server-linux-s390x.tar.gz | 30698478fab2fe7daccac97917b0b21b018c194ec39b005728f8cddf77f889aa3e1a520e0d1d681f9d8b7889a887aa6eb98c33cb04a8bf52b9a40bb8589aa34f |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 4497d14ac81677b43f0b75a457890c1f3bb8745a39875f58d53c734bec1947c37388228e0c952ca87f22d74af101a9263546db07bf1a021d59cba3cea1d5e5b9 |
| kubernetes-node-linux-arm.tar.gz | a3b0357db50e0dec7b0474816fec287388adabc76cc309a40dee9bc73771c951e4526a06145a8b332d72e5999dabb5e467d00d7c47035559a79e56f863def2f7 |
| kubernetes-node-linux-arm64.tar.gz | 43af8ec4c5f2a1e2baa8cd13817e127fb6a3576dd811a30c4cc5f04d8a9a8bb2267eb5c42e0a895cf2ec0e3260b73c818249296c957625f4048e13102606680a |
| kubernetes-node-linux-ppc64le.tar.gz | 840354219b3e59ed05b5b44cbbf4d45ccc4c0d74044e28c8a557ca75d12e509b091eb10d9bed81e300cb484b0a0f735424383c8b266fbb3e2aa7a2d50dceaf9e |
| kubernetes-node-linux-s390x.tar.gz | 796ca2e6855bd942a9a63d93f847ae62c5ee74195e041b60b89ee7d0e5a75643a8809bfaa36898daa176bccf140a8e5e858f5cb74e457d8bbb0a650600628ceb |
| kubernetes-node-windows-amd64.tar.gz | 96d666e8446d09088bdcb440559035118dce07a2d9f5718856192fd807b61840d2d6cee2a808eb13f2e947784300edc1ac41ade14dc3536c044e4d08982f0fdd |
- kube-apiserver: the deprecated
--etcd-quorum-readflag has been removed, and quorum reads are always enabled when fetching data from etcd. (#69527, @liggitt) - Moved staging/src/k8s.io/client-go/tools/bootstrap to staging/src/k8s… (#67356, @yliaog)
- [action required] kubeadm: The
v1alpha2config API has been removed. (#69055, @fabriziopandini)- Please convert your
v1alpha2configuration files tov1alpha3using the kubeadm config migratecommand of kubeadm v1.12.x
- Please convert your
- Refactor factory_test.go to use a fake k8s client. (#69412, @tossmilestone)
- kubeadm: fix a case where fetching a kubernetesVersion from the internet still happened even if some commands don't need it. (#69645, @neolit123)
- Add tolerations for Stackdriver Logging and Metadata Agents. (#69737, @qingling128)
- Fix a bug in the scheduler that could cause the scheduler to go to an infinite loop when all nodes in a zone are removed. (#69758, @bsalamat)
- Dry-run is promoted to Beta and will be enabled by default. (#69644, @apelisse)
kubectl get priorityclassnow prints value column by default. (#69431, @Huang-Wei)- Added a new container based image for running e2e tests (#69368, @dims)
- Remove the deprecated --google-json-key flag from kubelet. (#69354, @yujuhong)
- kube-apiserver: fixes
procMountfield incorrectly being marked as required in openapi schema (#69694, @jessfraz) - The
LC_ALLandLC_MESSAGESenv vars can now be used to set desired locale forkubectlwhile keepingLANGunchanged. (#69500, @m1kola) - Add ability to control primary GID of containers through Pod Spec and PodSecurityPolicy (#67802, @krmayankk)
- NodeLifecycleController: Now node lease renewal is treated as the heartbeat signal from the node, in addition to NodeStatus Update. (#69241, @wangzhen127)
- [GCE] Enable by default audit logging truncating backend. (#68288, @loburm)
- Enable insertId generation, and update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s. This help reduce log duplication and guarantee log order. (#68920, @qingling128)
- Move NodeInfo utils into pkg/scheduler/cache. (#69495, @wgliang)
- adds dynamic shared informers to write generic, non-generated controllers (#69308, @p0lyn0mial)
- Move CacheComparer to pkg/scheduler/internal/cache/comparer. (#69317, @wgliang)
- Updating OWNERS list for vSphere Cloud Provider. (#69187, @SandeepPissay)
- The default storage class annotation for the storage addons has been changed to use the GA variant (#68345, @smelchior)
- Upgrade to etcd 3.3 client (#69322, @jpbetz)
- fix GetVolumeLimits log flushing issue (#69558, @andyzhangx)
- It is now possible to use named ports in the
kubectl port-forwardcommand (#69477, @m1kola) - kubeadm: fix a possible scenario where kubeadm can pull much newer control-plane images (#69301, @neolit123)
- test/e2e/e2e.test: (#69105, @pohly) * -viper-config can be used to set also the options defined by command line flags * the default config file is "e2e.yaml/toml/json/..." and the test starts when no such config is found (as before) but if -viper-config is used, the config file must exist * -viper-config can be used to select a file with full path, with or without file suffix * the csiImageVersion/Registry flags were renamed to storage.csi.imageVersion/Registry
- Move FakeCache to pkg/scheduler/internal/cache/fake. (#69318, @wgliang)
- The "kubectl cp" command now supports path shortcuts (../) in remote paths. (#65189, @juanvallejo)
- Fixed subpath in containerized kubelet. (#69565, @jsafrane)
- The runtimeHandler field on the RuntimeClass resource now accepts the empty string. (#69550, @tallclair)
- Kubelet can now parse PEM file containing both TLS certificate and key in arbitrary order. Previously key was always required to be first. (#69536, @awly)
- Scheduling conformance tests related to daemonsets should set the annotation that relaxes node selection restrictions, if any are set. This ensures conformance tests can run on a wider array of clusters. (#68793, @aveshagarwal)
- Replace Parallelize with function ParallelizeUntil and formally deprecate the Parallelize. (#68403, @wgliang)
- Move scheduler cache interface and implementation to pkg/scheduler/internal/cache. (#68968, @wgliang)
- Update to use go1.11.1 (#69386, @cblecker)
- Any external provider should be aware the cloud-provider interface should be imported from :- (#68310, @cheftako)
- cloudprovider "k8s.io/cloud-provider"
- kubeadm: Fix a crash if the etcd local alpha phase is called when the configuration contains an external etcd cluster (#69420, @ereslibre)
- kubeadm now allows mixing of init/cluster and join configuration in a single YAML file (although a warning gets printed in this case). (#69426, @rosti)
- Code-gen: Remove lowercasing for project imports (#68484, @jsturtevant)
- Fix client cert setup in delegating authentication logic (#69430, @DirectXMan12)
- service.beta.kubernetes.io/aws-load-balancer-internal now supports true and false values, previously it only supported non-empty strings (#69436, @mcrute)
- OpenAPI spec and API reference now reflect dryRun query parameter for POST/PUT/PATCH operations (#69359, @roycaihw)
- kubeadm: Add a
v1beta1API. (#69289, @fabriziopandini) - kube-apiserver has removed support for the
etcd2storage backend (deprecated since v1.9). Existing clusters must migrate etcd v2 data to etcd v3 storage before upgrading to v1.13. (#69310, @liggitt) - List operations against the API now return internal server errors instead of partially complete lists when a value cannot be transformed from storage. The updated behavior is consistent with all other operations that require transforming data from storage such as watch and get. (#69399, @mikedanese)
kubectl waitnow supports condition value checks other than true using--for condition=available=false(#69295, @deads2k)- CCM server will not listen insecurely if secure port is specified (#68982, @aruneli)
- Bump cluster-proportional-autoscaler to 1.3.0 (#69338, @MrHohn)
-
- Rebase docker image on scratch.
-
- fix inconsistency in windows kernel proxy when updating HNS policy. (#68923, @delulu)
- Fixes the sample-apiserver so that its BanFlunder admission plugin can be used. (#68417, @MikeSpreitzer)
- Fixed CSIDriver API object to allow missing fields. (#69331, @jsafrane)
- Bump addon-manager to v8.8 (#69337, @MrHohn)
-
- Rebase docker image on debian-base:0.3.2.
-
- Update defaultbackend image to 1.5. Users should concentrate on updating scripts to the new version. (#69120, @aledbf)
- Bump Dashboard version to v1.10.0 (#68450, @jeefy)
- Fixed panic on iSCSI volume tear down. (#69140, @jsafrane)
- Update defaultbackend to v1.5 (#69334, @bowei)
- Remove unused chaosclient. (#68409, @wgliang)
- Enable AttachVolumeLimit feature (#69225, @gnufied)
- Update crictl to v1.12.0 (#69033, @feiskyer)
- Wait for pod failed event in subpath test. (#69300, @mrunalp)
- [GCP] Added env variables to control CPU requests of kube-controller-manager and kube-scheduler. (#68823, @loburm)
- Bump up pod short start timeout to 2 minutes. (#69291, @mrunalp)
- Use the mounted "/var/run/secrets/kubernetes.io/serviceaccount/token" as the token file for running in-cluster based e2e testing. (#69273, @dims)
- apiservice availability related to networking glitches are corrected faster (#68678, @deads2k)
- extract volume attachment status checking operation as a common function when attaching a CSI volume (#68931, @mlmhl)
- PodSecurityPolicy objects now support a
MayRunAsrule forfsGroupandsupplementalGroupsoptions. This allows specifying ranges of allowed GIDs for pods/containers without forcing a default GID the wayMustRunAsdoes. This means that a container to which such a policy applies to won't use any fsGroup/supplementalGroup GID if not explicitly specified, yet a specified GID must still fall in the GID range according to the policy. (#65135, @stlaz) - Images for cloud-controller-manager, kube-apiserver, kube-controller-manager, and kube-scheduler now contain a minimal /etc/nsswitch.conf and should respect /etc/hosts for lookups (#69238, @BenTheElder)
- add deprecation warning for all cloud providers (#69171, @andrewsykim)
- IPVS proxier mode now support connection based graceful termination. (#66012, @Lion-Wei)
- Fix panic in kubectl rollout commands (#69150, @soltysh)
- Add fallbacks to ARM API when getting empty node IP from Azure IMDS (#69077, @feiskyer)
- Deduplicate PATH items when reading plugins. (#69089, @soltysh)
- Adds permissions for startup of an on-cluster kube-controller-manager (#69062, @dghubble)
- Fixes issue [#68899](kubernetes#68899) where pods might schedule on an unschedulable node. (#68984, @k82cn)
- Returns error if NodeGetInfo fails. (#68979, @xing-yang)
- Pod disruption budgets shouldn't be checked for terminal pods while evicting (#68892, @ravisantoshgudimetla)
- Fix scheduler crashes when Prioritize Map function returns error. (#68563, @DylanBLE)
- kubeadm: create control plane with ClusterFirstWithHostNet DNS policy (#68890, @andrewrynhard)
- Reduced excessive logging from fluentd-gcp-scaler. (#68837, @x13n)
- adds dynamic lister (#68748, @p0lyn0mial)
- kubectl: add the --no-headers flag to
kubectl top ...(#67890, @WanLinghao) - Restrict redirect following from the apiserver to same-host redirects, and ignore redirects in some cases. (#66516, @tallclair)
- Fixed pod cleanup when /var/lib/kubelet is a symlink. (#68741, @jsafrane)
- Add "only_cpu_and_memory" GET parameter to /stats/summary http handler in kubelet. If parameter is true then only cpu and memory will be present in response. (#67829, @krzysztof-jastrzebski)
- Start synchronizing pods after network is ready. (#68752, @krzysztof-jastrzebski)
- kubectl has gained new --profile and --profile-output options to output go profiles (#68681, @dlespiau)
- Provides FSGroup capability on FlexVolume driver. It allows to disable the VolumeOwnership operation when volume is mounted (#68680, @benoitf)
- Apply _netdev mount option on bind mount (#68626, @gnufied)
- fix UnmountDevice failure on Windows (#68608, @andyzhangx)
- Allows changing nodeName in endpoint update. (#68575, @prameshj)
- kube-apiserver would return 400 Bad Request when it couldn't decode a json patch. (#68346, @CaoShuFeng)
- kube-apiserver would return 422 Unprocessable Entity when a json patch couldn't be applied to one object.
- remove unused ReplicasetControllerOptions (#68121, @dixudx)
- Pass signals to fluentd process (#68064, @gianrubio)
- Flex drivers by default do not produce metrics. Flex plugins can enable metrics collection by setting the capability 'supportsMetrics' to true. Make sure the file system can support fs stat to produce metrics in this case. (#67508, @brahmaroutu)
- Use monotonically increasing generation to prevent scheduler equivalence cache race. (#67308, @cofyc)
- Fix kubelet service file permission warning (#66669, @daixiang0)
- Add prometheus metric for scheduling throughput. (#64526, @misterikkit)
- Get public IP for Azure vmss nodes. (#68498, @feiskyer)
- test/integration: add a basic test for covering CronJobs (#66937, @mortent)
- Make service environment variables optional (#68754, @bradhoekstra)