Project: Kubernetes (Orchestration & Management / Scheduling & Orchestration)
File: CHANGELOG-1.3.md

<!-- BEGIN MUNGE: GENERATED_TOC --> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - <!-- END MUNGE: GENERATED_TOC --> <!-- NEW RELEASE NOTES ENTRY --> & filename | sha256 hash -- | -- | `0f61517fbab1feafbe1024da0b88bfe16e61fed7e612285d70e3ecb53ce518cf` | `7b1be0dcc12ae1b0cb1928b770c1025755fd0858ce7520907bacda19e5bfa53f` filename | sha256 hash -- | -- | `64a7012411a506ff7825e7b9c64b50197917d6f4e1128ea0e7b30a121059da47` | `5d85843e643eaebe3e34e48810f4786430b5ecce915144e01ba2d8539aa77364` | `06d478c601b1d4aa1fc539e9120adbcbbd2fb370d062516f84a064e465d8eadc` | `fe571542482b8ba3ff94b9e5e9657f6ab4fc0feb8971930dc80b7ae2548d669b` | `176b52d35150ca9f08a7e90e33e2839b7574afe350edf4fafa46745d77bb5aa4` | `1c3bf4ac1e4eb0e02f785db725efd490beaf06c8acd26d694971ba510b60a94d` | `172cd0af71fcba7c51e9476732dbe86ba251c03b1d74f912111e4e755be540ce` | `f2d2f82d7e285c98d8cc58a8a6e13a1122c9f60bb2c73e4cefe3555f963e56cd` | `ac0aa2b09dfeb8001e76f3aefe82c7bd2fda5bd0ef744ac3aed966b99c8dc8e5` filename | sha256 hash -- | -- | `bf0d3924ff84c95c316fcb4b21876cc019bd648ca8ab87fd6b2712ccda30992b` | `45e88d1c8edc17d7f1deab8d040a769d8647203c465d76763abb1ce445a98773` | `40ac46a265021615637f07d532cd563b4256dcf340a27c594bfd3501fe66b84c` | `faa5075ab3e6688666bbbb274fa55a825513ee082a3b17bcddb5b8f4fd6f9aa0` gci: decouple from the built-in kubelet version (, ) Bump GCE debian image to container-vm-v20161025 (CVE-2016-5195 Dirty (, ) Add RELEASEINFRAPUSH related code to support pushes from kubernetes/release. (, ) & binary | sha256 hash | -- | `a994c732d2b852bbee55a78601d50d046323021a99b0801aea07dacf64c2c59a` Test x509 intermediates correctly (, ) Remove headers that are unnecessary for proxy target (, ) & binary | sha256 hash | -- | `66cf72d8f07e2f700acfcb11536694e0d904483611ff154f34a8380c63720a8d` AWS: fix volume device assignment race condition (, ) & binary | sha256 hash | -- | `ad18566a09ff87b36107c2ea238fa5e20988d7a62c85df9c8598920679fec4a1` AWS: Add ap-south-1 to list of known AWS regions (, ) Back porting critical vSphere bug fixes to release 1.3 (, ) Back port - Openstack provider allowing more than one service port for lbaas v2 (, ) Fix a bug in kubelet hostport logic which flushes KUBE-MARK-MASQ iptables chain (, ) Fixes the panic that occurs in the federation controller manager when registering a GKE cluster to the federation. Fixes issue . (, ) & binary | sha256 hash | -- | `2db7ace2f72a2e162329a6dc969a5a158bb8c5d0f8054c5b1b2b1063aa22020d` Addresses vSphere Volume Attach limits (, ) Increase request timeout based on termination grace period (, ) Skip safe to detach check if node API object no longer exists (, ) Nodecontroller doesn't flip readiness on pods if kubeletVersion < 1.2.0 (, ) Update cadvisor to v0.23.9 to fix a problem where attempting to gather container filesystem usage statistics could result in corrupted devicemapper thin pool storage for Docker. (, ) & binary | sha256 hash | -- | `46be88ce927124f7cef7e280720b42c63051086880b7ebdba298b561dbe19f82` Update Dashboard UI to version v1.1.1 (, ) allow restricting subresource access (, ) Fix PVC.Status.Capacity and AccessModes after binding (, ) oidc authentication plugin: don't trim issuer URLs with trailing slashes (, ) network/cni: Bring up the `lo` interface for rkt (, ) Fixing kube-up for CVM masters. (, ) & binary | sha256 hash | -- | `818acc1a8ba61cff434d4c0c5aa3d342d06e6907b565cfd8651b8cfcf3f0a1e6` NetworkPolicy cherry-pick 1.3 (, ) Allow mounts to run in parallel for non-attachable volumes (, ) add enhanced volume and mount logging for block devices (, ) kube-up: increase download timeout for kubernetes.tar.gz (, ) Fix RBAC authorizer of ServiceAccount (, ) Update docker engine-api to dea108d3aa (, ) Assume volume is detached if node doesn't exist (, ) Make PD E2E Tests Wait for Detach to Prevent Kernel Errors (, ) Fix "PVC Volume not detached if pod deleted via namespace deletion" issue (, ) append an abac rule for

(, ) & binary | sha256 hash | -- | `a92a74a0d3f7d02d01ac2c8dfb5ee2e97b0485819e77b2110eb7c6b7c782478c` Removing images with multiple tags (, ) kubectl: don't display an empty list when trying to get a single resource that isn't found (, ) Fix working_set calculation in kubelet (, ) Don't delete affinity when endpoints are empty (, ) GCE bring-up: Differentiate NODETAGS from NODEINSTANCE_PREFIX (, ) Fix logrotate config on GCI (, ) Do not query the metadata server to find out if running on GCE. Retry metadata server query for gcr if running on gce. (, ) Fix GPU resource validation (, ) Scale kube-proxy conntrack limits by cores (new default behavior) (, ) Don't recreate lb cloud resources on kcm restart (, ) There are a number of known issues that have been found and are being worked on. Please be aware of them as you test your workloads. PVC Volume not detached if pod deleted via namespace deletion () Google Compute Engine PD Detach fails if node no longer exists () Mounting (only 'default-token') volume takes a long time when creating a batch of pods (parallelization issue) () Error while tearing down pod, "device or resource busy" on service account secret () & binary | sha1 hash | md5 hash | | -- | `f46664d04dc2966c77d8727bba57f57b5f917572` | `1a5b0639941054585d0432dd5ce3abc7` List all nodes and occupy cidr map before starting allocations (, ) Fix watch cache filtering (, ) Lock all possible kubecfg files at the beginning of ModifyConfig. (, ) & binary | sha1 hash | md5 hash | | -- | `5645b12beda22137204439de8260c62c9925f89b` | `ae6e9902ec70c1322d9a0a29ef385190` Fix watch cache filtering (, ) & binary | sha1 hash | md5 hash | | -- | `88249c443d438666928379aa7fe865b389ed72ea` | `9270f001aef8c03ff5db63456ca9eecc` Authorization: Alpha* RBAC authorization API group Federation federation api group is now beta* Services from all federated clusters are now registered in Cloud DNS (AWS and GCP). Stateful Apps: alpha* PetSets manage stateful apps alpha* Init containers provide one-time setup for stateful containers Updating: Retry Pod/RC updates in kubectl rolling-update. Stop 'kubectl drain' deleting pods with local storage. Add `kubectl rollout status` Security/Auth L7 LB controller and disk attach controllers run on master, so nodes do not need those privileges. Setting TLS1.2 minimum `kubectl create secret tls` command Webhook Token Authenticator beta* PodSecurityPolicy objects limits use of security-sensitive features by pods. Kubectl Display line number on JSON errors Add flag -t as shorthand for --tty Resources Improved node stability by optionally* evicting pods upon memory pressure - alpha*: NVIDIA GPU support (, ) Adding loadBalancer services and nodeports services to quota system The following versions of Docker Engine are supported - , Although v1.9 is still compatible, we recommend upgrading to one of the supported versions. All prior versions of docker will not be supported. If you use ThirdPartyResource objects, they have moved from being namespaced-scoped to be cluster-scoped. Before upgrading to 1.3.0, export and delete any existing ThirdPartyResource objects using a 1.2.x client: kubectl get thirdpartyresource --all-namespaces -o yaml > tprs.yaml kubectl delete -f tprs.yaml After upgrading to 1.3.0, re-register the third party resource objects at the root scope (using a 1.3 server and client): kubectl create -f tprs.yaml Kubectl flag `--container-port` flag is deprecated: it will be removed in the future, please use `--target-port` instead. Kube Proxy crashes infrequently due to a docker bug () This issue can be resolved by restarting docker daemon CORS works only in insecure mode () Persistent volume claims gets added incorrectly after being deleted under stress. Happens very infrequently. () Kernel crash with Aufs storage driver on Debian Jessie () Consider running the new to identify this (and other) kernel issues automatically. File descriptors are leaked in docker v1.11 () Additional memory overhead per container in docker

() for docker v1.10 identified by RedHat A detailed list of known issues can be found More Instructions coming soon AWS Support for ap-northeast-2 region (Seoul) Allow cross-region image pulling with ECR More reliable kube-up/kube-down Enable ICMP Type 3 Code 4 for ELBs ARP caching fix Use /dev/xvdXX names ELB: ELB proxy protocol support mixed plaintext/encrypted ports support in ELBs SSL support for ELB listeners Allow VPC CIDR to be specified (experimental) Fix problems with >2 security groups GCP: Enable using gcr.io as a Docker registry mirror. Make bigger master root disks in GCE for large clusters. Change default clusterCIDRs from /16 to /14 allowing 1000 Node clusters by default. Allow Debian Jessie on GCE. Node problem detector addon pod detects and reports kernel deadlocks. OpenStack Provider added. VSphere: Provider updated. & binary | sha1 hash | md5 hash | | -- | `9d18964a294f356bfdc841957dcad8ff35ed909c` | `ee5fcdf86645135ed132663967876dd6` , ) If you use one of the kube-dns replication controller manifest in `cluster/saltbase/salt/kube-dns`, i.e. `cluster/saltbase/salt/kube-dns/{skydns-rc.yaml.base,skydns-rc.yaml.in}`, either substitute one of `PILLARFEDERATIONSDOMAINMAP` or `{{ pillar, ) pillar['federationsdomainmap'] = "- --federations=myfederation=federation.test" where `myfederation` is the name of the federation and `federation.test` is the domain name registered for the federation. federation: Upgrading the groupversion to v1beta1 (, ) Set Dashboard UI version to v1.1.0 (, ) Build: Add KUBEGCSRELEASEBUCKETMIRROR option to push-ci-build.sh (, ) Image GC logic should compensate for reserved blocks (, ) Bump minimum API version for docker to 1.21 (, ) Adding lock files for kubeconfig updating (, ) federation service controller: fixing the logic to update DNS records (, ) federation: Updating KubeDNS to try finding a local service first for federation query (, ) Support journal logs in fluentd-gcp on GCI (, ) Copy and display source location prominently on Kubernetes instances (, ) Federation e2e support for AWS (, ) Copy and display source location prominently on Kubernetes instances (, ) AWS/GCE: Spread PetSet volume creation across zones, create GCE volumes in non-master zones (, ) GCE provider: Create TargetPool with 200 instances, then update with rest (, ) Add sources to server tarballs. (, ) Retry Pod/RC updates in kubectl rolling-update (, ) AWS kube-up: Authorize route53 in the IAM policy (, ) Allow conformance tests to run on non-GCE providers (, ) AWS kube-up: move to Docker 1.11.2 (, ) Fixed an issue that Deployment may be scaled down further than allowed by maxUnavailable when minReadySeconds is set. (, ) & binary | sha1 hash | md5 hash | | -- | `9c95762970b943d6c6547f0841c1e5471148b0e3` | `dc9e8560f24459b2313317b15910bee7` Init containers enable pod authors to perform tasks before their normal containers start. Each init container is started in order, and failing containers will prevent the application from starting. (, ) GCE provider: Limit Filter calls to regexps rather than large blobs (, ) Show LASTSEEN, the sorting key, as the first column in `kubectl get event` output (, ) GCI: fix kubectl permission issue (, ) Add federation api and cm servers to hyperkube (, ) federation: Creating kubeconfig files to be used for creating secrets for clusters on aws and gke (, ) AWS: Enable ICMP Type 3 Code 4 for ELBs (, ) Bumped Heapster to v1.1.0. (, ) More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.1.0 Deleting

(, ) Validate-cluster finishes shortly after at most ALLOWEDNOTREADYNODE (, ) AWS kube-down: Issue warning if VPC not found (, ) gce/kube-down: Parallelize IGM deletion, batch more (, ) Enable dynamic allocation of heapster/eventer cpu request/limit (, ) 'kubectl describe pv' now shows events (, ) AWS kube-up: set net.ipv4.neigh.default.gc_thresh1=0 to avoid ARP over-caching (, ) AWS volumes: Use /dev/xvdXX names with EC2 (, ) Add a test config variable to specify desired Docker version to run on GCI. (, ) Check for thin_is binary in path for devicemapper when using ThinPoolWatcher and fix uint64 overflow issue for CPU stats (, ) Change default value of deleting-pods-burst to 1 (, ) MESOS: fix race condition in contrib/mesos/pkg/queue/delay (, ) including federation binaries in the list of images we push during release (, ) fix updatePod() of RS and RC controllers (, ) Change default value of deleting-pods-burst to 1 (, ) A new volume manager was introduced in kubelet that synchronizes volume mount/unmount (and attach/detach, if attach/detach controller is not enabled). (, ) This eliminates the race conditions between the pod creation loop and the orphaned volumes loops. It also removes the unmount/detach from the `syncPod()` path so volume clean up never blocks the `syncPod` loop. & binary | sha1 hash | md5 hash | | -- | `2b54995ee8f52d78dc31c3d7291e8dfa5c809fe7` | `f1022a84c3441cae4ebe1d295470be8f` Fixing logic to generate ExternalHost in genericapiserver (, ) federation: Updating federation-controller-manager to use secret to get federation-apiserver's kubeconfig (, ) federation: fix dns provider initialization issues (, ) Updating federation up scripts to work in non e2e setup (, ) version bump for gci to milestone 53 (, ) kubectl apply: retry applying a patch if a version conflict error is encountered (, ) Revert "Wait for arc.getArchive() to complete before running tests" (, ) ResourceQuota BestEffort scope aligned with Pod level QoS (, ) The AWS cloudprovider will cache results from DescribeInstances() if the set of nodes hasn't changed (, ) GCE provider: Log full contents of long operations (, ) Fix system container detection in kubelet on systemd. (, ) This fixed environments where CPU and Memory Accounting were not enabled on the unit that launched the kubelet or docker from reporting the root cgroup when monitoring usage stats for those components. New default horizontalpodautoscaler/v1 generator for kubectl autoscale. (, ) Use autoscaling/v1 in kubectl by default. federation: Adding dnsprovider flags to federation-controller-manager (, ) federation service controller: fixing a bug so that existing services are created in newly registered clusters (, ) Rename environment variables (KUBE)ENABLENODEAUTOSCALER to (KUBE)ENABLECLUSTERAUTOSCALER. (, ) support for mounting local-ssds on GCI (, ) AWS: support mixed plaintext/encrypted ports in ELBs via service.beta.kubernetes.io/aws-load-balancer-ssl-ports annotation (, ) Updating e2e docs with instructions on running federation tests (, ) LBaaS v2 Support for Openstack Cloud Provider Plugin (, ) GCI: add support for network plugin (, ) Bump cAdvisor to v0.23.3 (, ) Stop 'kubectl drain' deleting pods with local storage. (, ) Networking e2es: Wait for all nodes to be schedulable in kubeproxy and networking tests (, ) change clientset of service controller to versioned (, ) Use gcr.io as a Docker registry mirror when setting up a cluster in GCE. (, ) correction on rbd volume object and defaults (, ) Bump GCE debian image to container-v1-3-v20160604 (, ) Option to enable http2 on client

(, ) kubectl get ingress output remove rules (, ) AWS kube-up: Remove SecurityContextDeny admission controller (to mirror GCE) (, ) Fix third party (, ) AWS Route53 dnsprovider (, ) GCI/Trusty: support the Docker registry mirror (, ) Kubernetes v1.3 introduces a new Attach/Detach Controller. This controller manages attaching and detaching of volumes on-behalf of nodes. (, ) This ensures that attachment and detachment of volumes is independent of any single nodes availability. Meaning, if a node or kubelet becomes unavailable for any reason, the volumes attached to that node will be detached so they are free to be attached to other nodes. Specifically the new controller watches the API server for scheduled pods. It processes each pod and ensures that any volumes that implement the volume Attacher interface are attached to the node their pod is scheduled to. When a pod is deleted, the controller waits for the volume to be safely unmounted by kubelet. It does this by waiting for the volume to no longer be present in the nodes Node.Status.VolumesInUse list. If the volume is not safely unmounted by kubelet within a pre-configured duration (3 minutes in Kubernetes v1.3), the controller unilaterally detaches the volume (this prevents volumes from getting stranded on nodes that become unavailable). In order to remain backwards compatible, the new controller only manages attach/detach of volumes that are scheduled to nodes that opt-in to controller management. Nodes running v1.3 or higher of Kubernetes opt-in to controller management by default by setting the "volumes.kubernetes.io/controller-managed-attach-detach" annotation on the Node object on startup. This behavior is gated by a new kubelet flag, "enable-controller-attach-detach, (default true). In order to safely upgrade an existing Kubernetes cluster without interruption of volume attach/detach logic: First upgrade the master to Kubernetes v1.3. This will start the new attach/detach controller. The new controller will initially ignore volumes for all nodes since they lack the "volumes.kubernetes.io/controller-managed-attach-detach" annotation. Then upgrade nodes to Kubernetes v1.3. As nodes are upgraded, they will automatically, by default, opt-in to attach/detach controller management, which will cause the controller to start managing attaches/detaches for volumes that get scheduled to those nodes. Added DNS Reverse Record logic for service IPs (, ) read gluster log to surface glusterfs plugin errors properly in describe events (, ) & binary | sha1 hash | md5 hash | | -- | `724bf5a4437ca9dc75d9297382f47a179e8dc5a6` | `2a8b4a5297df3007fce69f1e344fd87e` Add direct serializer (, ) Add a NodeCondition "NetworkUnavailable" to prevent scheduling onto a node until the routes have been created (, ) Add garbage collector into kube-controller-manager (, ) Add orphaning finalizer logic to GC (, ) GCI-backed masters mount srv/kubernetes and srv/sshproxy in the right place (, ) Updaing QoS policy to be at the pod level (, ) add CIDR allocator for NodeController (, ) Adding garbage collector controller (, ) Fix a bug with pluralization of third party resources (, ) Run l7 controller on master (, ) AWS: ELB proxy protocol support via annotation service.beta.kubernetes.io/aws-load-balancer-proxy-protocol (, ) kubectl run --restart=Never creates pods (, ) Add LabelSelector to PersistentVolumeClaimSpec (, ) Removed metrics api group (, ) Fixed check in kubectl autoscale: cpu consumption can be higher than 100%. (, ) Add support for 3rd party objects to kubectl label (, ) Move shell completion generation into 'kubectl completion' command (, ) Fix strategic merge diff list diff bug (, ) Setting TLS1.2 minimum because TLS1.0 and

are vulnerable (, ) Kubelet: Periodically reporting image pulling progress in log (, ) Federation service controller is one key component of federation controller manager, it watches federation service, creates/updates services to all registered clusters, and update DNS records to global DNS server. (, ) Stabilize map order in kubectl describe (, ) Google Cloud DNS dnsprovider - replacement for (, ) Fix system container detection in kubelet on systemd. (, ) This fixed environments where CPU and Memory Accounting were not enabled on the unit that launched the kubelet or docker from reporting the root cgroup when monitoring usage stats for those components. Added pods-per-core to kubelet. (, ) promote sourceRange into service spec (, ) kube-controller-manager: Add configure-cloud-routes option (, ) kubelet: reading cloudinfo from cadvisor (, ) Disable cAdvisor event storage by default (, ) Remove docker-multinode (, ) nodecontroller: Fix log message on successful update (, ) remove deprecated generated typed clients (, ) Kubenet host-port support through iptables (, ) Add metrics support for a GCE PD, EC2 EBS & Azure File volumes (, ) Bump cAdvisor to v0.23.2 - See for details (, ) Alpha version of "Role Based Access Control" API. (, ) Add Seccomp API (, ) AWS: Fix long-standing bug in stringSetToPointers (, ) Add dnsmasq as a DNS cache in kube-dns pod (, ) routecontroller: Add wait.NonSlidingUntil, use it (, ) Attempt 2: Bump GCE containerVM to container-v1-3-v20160517 (Docker 1.11.1) again. (, ) Downward API implementation for resources limits and requests (, ) GCE clusters start using GCI as the default OS image for masters (, ) Add a 'kubectl clusterinfo dump' option (, ) Fixing heapster memory requirements. (, ) Handle federated service name lookups in kube-dns. (, ) Support sort-by timestamp in kubectl get (, ) vSphere Volume Plugin Implementation (, ) ResourceQuota controller uses rate limiter to prevent hot-loops in error situations (, ) Fix hyperkube flag parsing (, ) Add a kubectl create secret tls command (, ) Introduce a new add-on pod NodeProblemDetector. (, ) NodeProblemDetector is a DaemonSet running on each node, monitoring node health and reporting node problems as NodeCondition and Event. Currently it already supports kernel log monitoring, and will support more problem detection in the future. It is enabled by default on gce now. Handle cAdvisor partial failures (, ) Use SkyDNS as a library for a more integrated kube DNS (, ) Introduce node memory pressure condition to scheduler (, ) Fix detection of docker cgroup on RHEL (, ) Kubelet evicts pods when available memory falls below configured eviction thresholds (, ) Use protobufs by default to communicate with apiserver (still store JSONs in etcd) (, ) Implement NetworkPolicy v1beta1 API object / client support. (, ) Only expose top N images in `NodeStatus` (, ) Extend secrets volumes with path control (, ) With this PR, kubectl and other RestClient's using the AuthProvider framework can make OIDC authenticated requests, and, if there is a refresh token present, the tokens will be refreshed as needed. (, ) Make addon-manager cross-platform and use it with hyperkube (, ) kubelet: Optionally, have kubelet exit if lock file contention is observed, using --exit-on-lock-contention flag (, ) Bump up glbc version to 0.6.2 (, ) Add "kubectl set image" for easier updating container images (for pods or resources with pod templates). (, ) NodeController doesn't evict Pods if no Nodes are Ready (, ) Incompatible change of kube-up.sh: (, ) When turning on cluster autoscaler by setting KUBEENABLENODEAUTOSCALER=true,KUBEAUTOSCALERMINNODES and KUBEAUTOSCALERMAX_NODES need to be

systemd node spec proposal (, ) Bump GCE ContainerVM to container-v1-3-v20160517 (Docker 1.11.1) (, ) AWS: Move enforcement of attached AWS device limit from kubelet to scheduler (, ) Refactor persistent volume controller (, ) Add support for running GCI on the GCE cloud provider (, ) Implement taints and tolerations (, ) Add init containers to pods (, ) & binary | sha1 hash | md5 hash | | -- | `758e97e7e50153840379ecd9f8fda1869543539f` | `4e18ae6a428c99fcc30e2137d7c41854` validate third party resources (, ) Automatically create the kube-system namespace (, ) Make ThirdPartyResource a root scoped object (, ) mark container-port flag as deprecated (, ) Provide flags to use etcd3 backed storage (, ) Fix hyperkube's layer caching, and remove --make-symlinks at build time (, ) AWS: More support for ap-northeast-2 region (, ) Make bigger master root disks in GCE for large clusters (, ) AWS kube-down: don't fail if ELB not in VPC - (, ) Build hyperkube in hack/local-up-cluster instead of separate binaries (, ) enable recursive processing in kubectl rollout (, ) Support struct,array,slice types when sorting kubectl output (, ) federated api servers: Adding a discovery summarizer server (, ) AWS: Allow cross-region image pulling with ECR (, ) Automatically add node labels beta.kubernetes.io/{os,arch} (, ) kubectl "rm" will suggest using "delete"; "ps" and "list" will suggest "get". (, ) Add IPv6 address support for pods - does NOT include services (, ) Use local disk for ConfigMap volume instead of tmpfs (, ) Alpha support for scheduling pods on machines with NVIDIA GPUs whose kubelets use the `--experimental-nvidia-gpus` flag, using the alpha.kubernetes.io/nvidia-gpu resource (, ) AWS: SSL support for ELB listeners through annotations (, ) Implement `kubectl rollout status` that can be used to watch a deployment's rollout status (, ) Webhook Token Authenticator (, ) Update PodSecurityPolicy types and add admission controller that could enforce them (, ) Introducing ScheduledJobs as described in as part of `batch/v2alpha1` version (experimental feature). (, ) kubectl now supports validation of nested objects with different ApiGroups (e.g. objects in a List) (, ) Change default clusterCIDRs from /16 to /14 in GCE configs allowing 1000 Node clusters by default. (, ) Add 'kubectl set' (, ) vSphere Cloud Provider Implementation (, ) Added JobTemplate, a preliminary step for ScheduledJob and Workflow (, ) Openstack provider (, ) AWS kube-up: Allow VPC CIDR to be specified (experimental) (, ) Return "410 Gone" errors via watch stream when using watch cache (, ) GKE provider: Add cluster-ipv4-cidr and arbitrary flags (, ) AWS kube-up: Increase timeout waiting for docker start (, ) Sort resources in quota errors to avoid duplicate events (, ) Display line number on JSON errors (, ) If the cluster node count exceeds the GCE TargetPool maximum (currently 1000), (, ) randomly select which nodes are members of Kubernetes External Load

Clarify supported version skew between masters, nodes, and clients (, ) Move godeps to vendor/ (, ) Introduce events flag for describers (, ) run kube-addon-manager in a static pod (, ) Reimplement 'pause' in C - smaller footprint all around (, ) Add subPath to mount a child dir or file of a volumeMount (, ) Handle image digests in node status and image GC (, ) PLEG: reinspect pods that failed prior inspections (, ) Fix kubectl create secret/configmap to allow = values (, ) Upgrade installed packages when building hyperkube to improve the security profile (, ) GCI/Trusty: Support ABAC authorization (, ) fix cinder volume dir umount issue (, ) Inter pod topological affinity and anti-affinity implementation (, ) start etcd compactor in background (, ) GCI: Add two GCI specific metadata pairs (, ) Ensure status is not changed during an update of PV, PVC, HPA objects (, ) GCE: Prefer preconfigured node tags for firewalls, if available (, ) kubectl rolling-update support for same image (, ) Add an entry to the salt config to allow Debian jessie on GCE. (, ) As with the existing Wheezy image on GCE, docker is expected to already be installed in the image. Mark kube-push.sh as broken (, ) AWS: Add support for ap-northeast-2 region (Seoul) (, ) GCI: Update the command to get the image (, ) Port-forward: use out and error streams instead of glog (, ) Promote Pod Hostname & Subdomain to fields (were annotations) (, ) Validate deletion timestamp doesn't change on update (, ) Add flag -t as shorthand for --tty (, ) Add support for running clusters on GCI (, ) Switch to ABAC authorization from AllowAll (, ) Fix DeletingLoadBalancer event generation. (, ) & binary | sha1 hash | md5 hash | | -- | `01e0dc68653173614dc99f44875173478f837b38` | `ae22c35f3a963743d21daa17683e0288` Updating go-restful to generate "type":"object" instead of "type":"any" in swagger-spec (breaks kubectl 1.1) (, ) Make watch cache treat resourceVersion consistent with uncached watch (, ) Trusty: Add retry in curl commands (, ) Collect and expose runtime's image storage usage via Kubelet's /stats/summary endpoint (, ) Adding loadBalancer services to quota system (, ) Enforce --max-pods in kubelet admission; previously was only enforced in scheduler (, ) All clients under ClientSet share one RateLimiter. (, ) Remove requirement that Endpoints IPs be IPv4 (, ) Fix unintended change of Service.spec.ports, ) Don't log private SSH key (, ) Incremental improvements to kubelet e2e tests (, ) Bridge off-cluster traffic into services by masquerading. (, ) Flush conntrack state for removed/changed UDP Services (, ) Allow setting the Host header in a httpGet probe (, ) Fix goroutine leak in ssh-tunnel healthcheck. (, ) Fix gce.getDiskByNameUnknownZone logic. (, ) Make etcd cache size configurable (, ) Drain pods created from ReplicaSets in 'kubectl drain' (, ) Make kubectl edit not convert GV on edits (, ) don't ship kube-registry-proxy and pause images in tars. (, ) Do not throw creation errors for containers that fail immediately after being started (, ) Add a client flag to delete "--now" for grace period 0 (, ) add act-as powers (, ) Build Kubernetes, etcd and flannel for arm64 and ppc64le (, ) Honor starting resourceVersion in watch cache (, ) Update the pause image to build for arm64 and ppc64le (, ) Return more useful error information when a persistent volume fails to mount (, ) Trusty: Avoid unnecessary in-memory temp files (, ) e2e: fix error checking in kubelet stats (, ) Fixed mounting with containerized kubelet (, ) Adding nodeports services to quota (, ) e2e: adapt

to use the new summary metrics API (, ) kubelet: add RSS memory to the summary API (, ) & binary | sha1 hash | md5 hash | | -- | `305c8c2af7e99d463dbbe4208ecfe2b50585e796` | `aadb8d729d855e69212008f8fda628c0` Make kube2sky and skydns docker images cross-platform (, ) Allowing type object in kubectl swagger validation (, ) Fix TerminationMessagePath (, ) Trusty: Do not create the docker-daemon cgroup (, ) Make ConfigMap volume readable as non-root (, ) only include running and pending pods in daemonset should place calculation (, ) Upgrade to golang 1.6 (, ) Cross-build hyperkube and debian-iptables for ARM. Also add a flannel image (, ) Add a timeout to the sshDialer to prevent indefinite hangs. (, ) Ensure object returned by volume getCloudProvider incorporates cloud config (, ) Update Dashboard UI addon to v1.0.1 (, ) Add zsh completion for kubectl (, ) AWS kube-up: tolerate a lack of ephemeral volumes (, ) duplicate kube-apiserver to federated-apiserver (, ) Kubelet: Start using the official docker engine-api (, ) Fix so setup-files don't recreate/invalidate certificates that already exist (, ) A pod never terminated if a container image registry was unavailable (, ) Fix jsonpath to handle maps with key of nonstring types (, ) Trusty: Regional release .tar.gz support (, ) Add support for 3rd party objects to kubectl (, ) Remove unnecessary override of /etc/init.d/docker on containervm image. (, ) make docker-checker more robust (, ) Change kube-proxy & fluentd CPU request to 20m/80m. (, ) Create a new Deployment in kube-system for every version. (, ) IngressTLS: allow secretName to be blank for SNI routing (, ) don't sync deployment when pod selector is empty (, ) AWS: Fix problems with >2 security groups (, ) & binary | sha1 hash | md5 hash | | -- | `e0041b08e220a4704ea2ad90a6ec7c8f2120c2d3` | `7bb2df32aea94678f72a8d1f43a12098` Disabling swagger ui by default on apiserver. Adding a flag that can enable it (, ) restore ability to run against secured etcd (, ) validate that daemonsets don't have empty selectors on creation (, ) Trusty: Update heapster manifest handling code (, ) Support differentiation of OS distro in e2e tests (, ) don't sync daemonsets with selectors that match all pods (, ) Trusty: Avoid reaching GCE custom metadata size limit (, ) Update kubectl help for 1.2 resources (, ) Support addon Deployments, make heapster a deployment with a nanny. (, ) Removing URL query param from swagger UI to fix the XSS issue (, ) Fix hairpin mode (, ) Bump to container-vm-v20160321 (, ) Remove the restart-kube-proxy and restart-apiserver functions (, ) Copy annotations back from RS to Deployment on rollback (, ) Trusty: Support hybrid cluster with nodes on ContainerVM (, ) update expose command description to add deployment (, ) Add a rate limiter to the GCE cloudprovider (, ) Add a Deployment example for kubectl expose. (, ) Use versioned object when computing patch (, ) kubelet: send all recevied pods in one update (, ) Add a SSHKey sync check to the master's healthz (when using SSHTunnels). (, ) Validate minimum CPU limits to be >= 10m (, ) Fix controller-manager race condition issue which cause endpoints flush during restart (, ) MESOS: forward globally declared cadvisor housekeeping flags (, ) Trusty: support developer workflow on base image (, ) Bumped Heapster to stable version 1.0.0 (, ) Deprecating --api-version flag (, ) allow resource.version.group in kubectl (, ) Use SCP to dump logs and parallelize a bit. (, ) update wide option output (, ) Change scheduler logic from random to round-robin (, ) Please see the