24719 Error Please Try Running This Command Again as Rootadministrator

• v1.3.ten
  • Downloads for v1.three.10
    • Client Binaries
    • Server Binaries
  • Changelog since v1.3.9
    • Other notable changes
• v1.3.9
  • Downloads
  • Changelog since v1.three.viii
    • Other notable changes
• v1.three.eight
  • Downloads
  • Changelog since v1.3.7
    • Other notable changes
• v1.3.vii
  • Downloads
  • Changelog since v1.iii.6
    • Other notable changes
• v1.3.half dozen
  • Downloads
  • Changelog since v1.3.v
    • Other notable changes
• v1.3.5
  • Downloads
  • Changelog since v1.3.4
    • Other notable changes
• v1.3.4
  • Downloads
  • Changelog since v1.3.3
    • Other notable changes
• v1.iii.iii
  • Downloads
  • Changelog since v1.three.2
    • Other notable changes
  • Known Issues
• v1.iii.two
  • Downloads
  • Changelog since v1.iii.1
    • Other notable changes
• v1.3.1
  • Downloads
  • Changelog since v1.three.0
    • Other notable changes
• v1.3.0
  • Downloads
  • Highlights
  • Known Bug and Important Steps before Upgrading
    • ThirdPartyResource
    • kubectl
    • kubernetes Core Known Issues
    • Docker runtime Known Issues
    • Rkt runtime Known Issues
  • Provider-specific Notes
  • Previous Releases Included in v1.3.0
• v1.3.0-beta.iii
  • Downloads
  • Changelog since v1.3.0-beta.2
    • Activeness Required
    • Other notable changes
• v1.3.0-beta.2
  • Downloads
  • Changes since v1.iii.0-beta.1
    • Experimental Features
    • Other notable changes
• v1.iii.0-beta.1
  • Downloads
  • Changes since v1.three.0-alpha.five
    • Action Required
    • Other notable changes
• v1.three.0-blastoff.v
  • Downloads
  • Changes since v1.3.0-alpha.4
    • Action Required
    • Other notable changes
• v1.iii.0-alpha.4
  • Downloads
  • Changes since v1.3.0-alpha.3
    • Action Required
    • Other notable changes
• v1.3.0-alpha.3
  • Downloads
  • Changes since v1.3.0-blastoff.ii
    • Activity Required
    • Other notable changes
• v1.3.0-alpha.2
  • Downloads
  • Changes since v1.3.0-blastoff.1
    • Other notable changes
• v1.iii.0-blastoff.one
  • Downloads
  • Changes since v1.2.0
    • Action Required
    • Other notable changes

v1.3.10

Documentation & Examples

Downloads for v1.3.10

filename	sha256 hash
kubernetes.tar.gz	0f61517fbab1feafbe1024da0b88bfe16e61fed7e612285d70e3ecb53ce518cf
kubernetes-src.tar.gz	7b1be0dcc12ae1b0cb1928b770c1025755fd0858ce7520907bacda19e5bfa53f

Customer Binaries

filename	sha256 hash
kubernetes-client-darwin-386.tar.gz	64a7012411a506ff7825e7b9c64b50197917d6f4e1128ea0e7b30a121059da47
kubernetes-client-darwin-amd64.tar.gz	5d85843e643eaebe3e34e48810f4786430b5ecce915144e01ba2d8539aa77364
kubernetes-client-linux-386.tar.gz	06d478c601b1d4aa1fc539e9120adbcbbd2fb370d062516f84a064e465d8eadc
kubernetes-customer-linux-amd64.tar.gz	fe571542482b8ba3ff94b9e5e9657f6ab4fc0feb8971930dc80b7ae2548d669b
kubernetes-client-linux-arm64.tar.gz	176b52d35150ca9f08a7e90e33e2839b7574afe350edf4fafa46745d77bb5aa4
kubernetes-customer-linux-arm.tar.gz	1c3bf4ac1e4eb0e02f785db725efd490beaf06c8acd26d694971ba510b60a94d
kubernetes-customer-linux-ppc64le.tar.gz	172cd0af71fcba7c51e9476732dbe86ba251c03b1d74f912111e4e755be540ce
kubernetes-client-windows-386.tar.gz	f2d2f82d7e285c98d8cc58a8a6e13a1122c9f60bb2c73e4cefe3555f963e56cd
kubernetes-client-windows-amd64.tar.gz	ac0aa2b09dfeb8001e76f3aefe82c7bd2fda5bd0ef744ac3aed966b99c8dc8e5

Server Binaries

filename	sha256 hash
kubernetes-server-linux-amd64.tar.gz	bf0d3924ff84c95c316fcb4b21876cc019bd648ca8ab87fd6b2712ccda30992b
kubernetes-server-linux-arm64.tar.gz	45e88d1c8edc17d7f1deab8d040a769d8647203c465d76763abb1ce445a98773
kubernetes-server-linux-arm.tar.gz	40ac46a265021615637f07d532cd563b4256dcf340a27c594bfd3501fe66b84c
kubernetes-server-linux-ppc64le.tar.gz	faa5075ab3e6688666bbbb274fa55a825513ee082a3b17bcddb5b8f4fd6f9aa0

Changelog since v1.3.9

Other notable changes

• gci: decouple from the built-in kubelet version (#31367, @Amey-D)
• Bump GCE debian image to container-vm-v20161025 (CVE-2016-5195 Dirty… (#35825, @dchen1107)
• Add RELEASE_INFRA_PUSH related code to support pushes from kubernetes/release. (#28922, @david-mcmahon)

v1.3.9

Documentation & Examples

Downloads

binary	sha256 hash
kubernetes.tar.gz	a994c732d2b852bbee55a78601d50d046323021a99b0801aea07dacf64c2c59a

Changelog since v1.three.8

Other notable changes

• Test x509 intermediates correctly (#34524, @liggitt)
• Remove headers that are unnecessary for proxy target (#34076, @mbohlool)

v1.3.8

Documentation & Examples

Downloads

binary	sha256 hash
kubernetes.tar.gz	66cf72d8f07e2f700acfcb11536694e0d904483611ff154f34a8380c63720a8d

Changelog since v1.3.vii

Other notable changes

• AWS: gear up volume device assignment race status (#31090, @justinsb)

v1.3.7

Documentation & Examples

Downloads

binary	sha256 hash
kubernetes.tar.gz	ad18566a09ff87b36107c2ea238fa5e20988d7a62c85df9c8598920679fec4a1

Changelog since v1.3.vi

Other notable changes

• AWS: Add together ap-south-1 to list of known AWS regions (#28428, @justinsb)
• Back porting critical vSphere issues fixes to release 1.three (#31993, @dagnello)
• Back port - Openstack provider allowing more than than one service port for lbaas v2 (#32001, @dagnello)
• Fix a bug in kubelet hostport logic which flushes KUBE-Mark-MASQ iptables chain (#32413, @freehan)
• Fixes the panic that occurs in the federation controller managing director when registering a GKE cluster to the federation. Fixes event #30790. (#30940, @madhusudancs)

v1.3.half dozen

Documentation & Examples

Downloads

binary	sha256 hash
kubernetes.tar.gz	2db7ace2f72a2e162329a6dc969a5a158bb8c5d0f8054c5b1b2b1063aa22020d

Changelog since v1.3.v

Other notable changes

• Addresses vSphere Volume Attach limits (#29881, @dagnello)
• Increase asking timeout based on termination grace period (#31275, @dims)
• Skip safety to detach cheque if node API object no longer exists (#30737, @saad-ali)
• Nodecontroller doesn't flip readiness on pods if kubeletVersion < 1.2.0 (#30828, @bprashanth)
• Update cadvisor to v0.23.9 to fix a problem where attempting to get together container filesystem usage statistics could result in corrupted devicemapper thin puddle storage for Docker. (#30307, @sjenning)

v1.3.5

Documentation & Examples

Downloads

binary	sha256 hash
kubernetes.tar.gz	46be88ce927124f7cef7e280720b42c63051086880b7ebdba298b561dbe19f82

Changelog since v1.iii.iv

Other notable changes

• Update Dashboard UI to version v1.1.ane (#30273, @bryk)
• allow restricting subresource admission (#30001, @deads2k)
• Set up PVC.Condition.Capacity and AccessModes after bounden (#29982, @jsafrane)
• oidc hallmark plugin: don't trim issuer URLs with abaft slashes (#29860, @ericchiang)
• network/cni: Bring up the lo interface for rkt (#29310, @euank)
• Fixing kube-up for CVM masters. (#29140, @maisem)

v1.3.4

Documentation & Examples

Downloads

binary	sha256 hash
kubernetes.tar.gz	818acc1a8ba61cff434d4c0c5aa3d342d06e6907b565cfd8651b8cfcf3f0a1e6

Changelog since v1.iii.iii

Other notable changes

• NetworkPolicy cherry-selection 1.iii (#29556, @caseydavenport)
• Allow mounts to run in parallel for non-attachable volumes (#28939, @saad-ali)
• add enhanced book and mount logging for block devices (#24797, @screeley44)
• kube-upward: increase download timeout for kubernetes.tar.gz (#29426, @justinsb)
• Fix RBAC authorizer of ServiceAccount (#29071, @albatross0)
• Update docker engine-api to dea108d3aa (#29144, @ronnielai)
• Assume volume is discrete if node doesn't exist (#29485, @saad-ali)
• Brand PD E2E Tests Wait for Detach to Prevent Kernel Errors (#29031, @saad-ali)
• Fix "PVC Volume not discrete if pod deleted via namespace deletion" issue (#29077, @saad-ali)
• append an abac rule for $KUBE_USER. (#29164, @cjcullen)

v1.3.three

Documentation & Examples

Downloads

binary	sha256 hash
kubernetes.tar.gz	a92a74a0d3f7d02d01ac2c8dfb5ee2e97b0485819e77b2110eb7c6b7c782478c

Changelog since v1.three.2

Other notable changes

• Removing images with multiple tags (#29316, @ronnielai)
• kubectl: don't brandish an empty listing when trying to get a single resource that isn't found (#28294, @ncdc)
• Fix working_set adding in kubelet (#29154, @vishh)
• Don't delete analogousness when endpoints are empty (#28655, @freehan)
• GCE bring-upwards: Differentiate NODE_TAGS from NODE_INSTANCE_PREFIX (#29141, @zmerlynn)
• Set logrotate config on GCI (#29139, @adityakali)
• Do not query the metadata server to find out if running on GCE. Retry metadata server query for gcr if running on gce. (#28871, @vishh)
• Set GPU resource validation (#28743, @therc)
• Scale kube-proxy conntrack limits past cores (new default behavior) (#28876, @thockin)
• Don't recreate lb deject resources on kcm restart (#29082, @bprashanth)

Known Problems

In that location are a number of known issues that have been plant and are being worked on. Please be aware of them equally you test your workloads.

• PVC Volume non detached if pod deleted via namespace deletion (29051)
• Google Compute Engine PD Detach fails if node no longer exists (29358)
• Mounting (only 'default-token') volume takes a long time when creating a batch of pods (parallelization issue) (28616)
• Error while tearing down pod, "device or resource busy" on service account secret (28750)

v1.three.2

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	f46664d04dc2966c77d8727bba57f57b5f917572	1a5b0639941054585d0432dd5ce3abc7

Changelog since v1.iii.1

Other notable changes

• List all nodes and occupy cidr map before starting allocations (#29062, @bprashanth)
• Ready watch cache filtering (#28968, @liggitt)
• Lock all possible kubecfg files at the starting time of ModifyConfig. (#28232, @cjcullen)

v1.3.one

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	5645b12beda22137204439de8260c62c9925f89b	ae6e9902ec70c1322d9a0a29ef385190

Changelog since v1.3.0

Other notable changes

• Fix lookout man cache filtering (#29046, @liggitt)

v1.iii.0

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	88249c443d438666928379aa7fe865b389ed72ea	9270f001aef8c03ff5db63456ca9eecc

Highlights

• Say-so:
  • Blastoff RBAC authorization API group
• Federation
  • federation api group is now beta
  • Services from all federated clusters are now registered in Cloud DNS (AWS and GCP).
• Stateful Apps:
  • blastoff PetSets manage stateful apps
  • blastoff Init containers provide 1-time setup for stateful containers
• Updating:
  • Retry Pod/RC updates in kubectl rolling-update.
  • End 'kubectl bleed' deleting pods with local storage.
  • Add kubectl rollout condition
• Security/Auth
  • L7 LB controller and disk attach controllers run on master, so nodes practice non need those privileges.
  • Setting TLS1.2 minimum
  • kubectl create secret tls command
  • Webhook Token Authenticator
  • beta PodSecurityPolicy objects limits use of security-sensitive features by pods.
• Kubectl
  • Display line number on JSON errors
  • Add flag -t as shorthand for --tty
• Resource
  • Improved node stability by optionally evicting pods upon memory pressure - Design Doc
  • alpha: NVIDIA GPU support (#24836, @therc)
  • Calculation loadBalancer services and nodeports services to quota system

Known Bug and Important Steps before Upgrading

The following versions of Docker Engine are supported - v1.x, v1.xi Although v1.nine is still compatible, we recommend upgrading to one of the supported versions. All prior versions of docker will non exist supported.

ThirdPartyResource

If y'all employ ThirdPartyResource objects, they have moved from existence namespaced-scoped to be cluster-scoped. Before upgrading to 1.3.0, export and delete any existing ThirdPartyResource objects using a 1.ii.10 client:

kubectl go thirdpartyresource --all-namespaces -o yaml > tprs.yaml kubectl delete -f tprs.yaml

After upgrading to 1.3.0, re-annals the tertiary party resource objects at the root telescopic (using a 1.3 server and client):

kubectl create -f tprs.yaml

kubectl

Kubectl flag --container-port flag is deprecated: it will be removed in the future, delight utilize --target-port instead.

kubernetes Core Known Issues

• Kube Proxy crashes infrequently due to a docker problems (#24000)
  • This issue can exist resolved past restarting docker daemon
• CORS works only in insecure mode (#24086)
• Persistent volume claims gets added incorrectly after being deleted nether stress. Happens very infrequently. (#26082)

Docker runtime Known Issues

• Kernel crash with Aufs storage driver on Debian Jessie (#27885)

  • Consider running the new kubernetes node problem detector to place this (and other) kernel problems automatically.

• File descriptors are leaked in docker v1.11 (#275)

• Additional retentivity overhead per container in docker v1.11 (#21737)

• List of upstream fixes for docker v1.10 identified by RedHat

Rkt runtime Known Bug

• A detailed list of known issues can be found here

More than Instructions coming soon

Provider-specific Notes

• AWS
  • Support for ap-northeast-2 region (Seoul)
  • Allow cantankerous-region image pulling with ECR
  • More reliable kube-up/kube-downwardly
  • Enable ICMP Type three Lawmaking iv for ELBs
  • ARP caching fix
  • Utilize /dev/xvdXX names
  • ELB:
    • ELB proxy protocol support
    • mixed plaintext/encrypted ports back up in ELBs
    • SSL support for ELB listeners
  • Let VPC CIDR to exist specified (experimental)
  • Gear up problems with >2 security groups
• GCP:
  • Enable using gcr.io equally a Docker registry mirror.
  • Brand bigger master root disks in GCE for big clusters.
  • Change default clusterCIDRs from /16 to /14 allowing 1000 Node clusters by default.
  • Allow Debian Jessie on GCE.
  • Node problem detector addon pod detects and reports kernel deadlocks.
• OpenStack
  • Provider added.
• VSphere:
  • Provider updated.

Previous Releases Included in v1.iii.0

• v1.three.0-beta.three
• v1.three.0-beta.2
• v1.iii.0-beta.1
• v1.3.0-alpha.5
• v1.three.0-alpha.iv
• v1.3.0-alpha.3
• v1.3.0-blastoff.two
• v1.3.0-alpha.1

v1.three.0-beta.iii

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	9d18964a294f356bfdc841957dcad8ff35ed909c	ee5fcdf86645135ed132663967876dd6

Changelog since v1.iii.0-beta.2

Action Required

• [kubelet] Let opting out of automatic deject provider detection in kubelet. By default kubelet will auto-notice cloud providers (#28258, @vishh)
• If you apply 1 of the kube-dns replication controller manifest in cluster/saltbase/salt/kube-dns, i.e. cluster/saltbase/salt/kube-dns/{skydns-rc.yaml.base,skydns-rc.yaml.in}, either substitute 1 of __PILLAR__FEDERATIONS__DOMAIN__MAP__ or {{ pillar['federations_domain_map'] }} with the corresponding federation name to domain name value or remove them if yous practice not back up cluster federation at this fourth dimension. If you programme to substitute the parameter with its value, hither is an instance for {{ colonnade['federations_domain_map'] }} (#28132, @madhusudancs)
  • colonnade['federations_domain_map'] = "- --federations=myfederation=federation.test"
  • where myfederation is the name of the federation and federation.test is the domain proper noun registered for the federation.
• federation: Upgrading the groupversion to v1beta1 (#28186, @nikhiljindal)
• Fix Dashboard UI version to v1.one.0 (#27869, @bryk)

Other notable changes

• Build: Add KUBE_GCS_RELEASE_BUCKET_MIRROR choice to push-ci-build.sh (#28172, @zmerlynn)
• Image GC logic should compensate for reserved blocks (#27996, @ronnielai)
• Bump minimum API version for docker to 1.21 (#27208, @yujuhong)
• Calculation lock files for kubeconfig updating (#28034, @krousey)
• federation service controller: fixing the logic to update DNS records (#27999, @quinton-hoole)
• federation: Updating KubeDNS to try finding a local service beginning for federation query (#27708, @nikhiljindal)
• Support journal logs in fluentd-gcp on GCI (#27981, @a-robinson)
• Copy and display source location prominently on Kubernetes instances (#27985, @maisem)
• Federation e2e back up for AWS (#27791, @colhom)
• Re-create and brandish source location prominently on Kubernetes instances (#27840, @zmerlynn)
• AWS/GCE: Spread PetSet volume creation across zones, create GCE volumes in non-master zones (#27553, @justinsb)
• GCE provider: Create TargetPool with 200 instances, then update with balance (#27829, @zmerlynn)
• Add sources to server tarballs. (#27830, @david-mcmahon)
• Retry Pod/RC updates in kubectl rolling-update (#27509, @janetkuo)
• AWS kube-up: Authorize route53 in the IAM policy (#27794, @justinsb)
• Allow conformance tests to run on non-GCE providers (#26932, @aaronlevy)
• AWS kube-up: move to Docker 1.xi.2 (#27676, @justinsb)
• Fixed an effect that Deployment may be scaled down farther than allowed by maxUnavailable when minReadySeconds is fix. (#27728, @janetkuo)

v1.three.0-beta.2

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	9c95762970b943d6c6547f0841c1e5471148b0e3	dc9e8560f24459b2313317b15910bee7

Changes since v1.three.0-beta.1

Experimental Features

• Init containers enable pod authors to perform tasks before their normal containers start. Each init container is started in club, and declining containers will preclude the application from starting. (#23666, @smarterclayton)

Other notable changes

• GCE provider: Limit Filter calls to regexps rather than big blobs (#27741, @zmerlynn)
• Show LASTSEEN, the sorting primal, as the showtime cavalcade in kubectl get result output (#27549, @therc)
• GCI: fix kubectl permission issue #27643 (#27740, @andyzheng0831)
• Add together federation api and cm servers to hyperkube (#27586, @colhom)
• federation: Creating kubeconfig files to be used for creating secrets for clusters on aws and gke (#27332, @nikhiljindal)
• AWS: Enable ICMP Blazon iii Code four for ELBs (#27677, @justinsb)
• Bumped Heapster to v1.1.0. (#27542, @piosz)
  • More details about the release https://github.com/kubernetes/heapster/releases/tag/v1.1.0
• Deleting federation-push.sh (#27400, @nikhiljindal)
• Validate-cluster finishes shortly after at almost ALLOWED_NOTREADY_NODE… (#26778, @gmarek)
• AWS kube-down: Issue warning if VPC not found (#27518, @justinsb)
• gce/kube-down: Parallelize IGM deletion, batch more than (#27302, @zmerlynn)
• Enable dynamic allotment of heapster/eventer cpu asking/limit (#27185, @gmarek)
• 'kubectl describe pv' now shows events (#27431, @jsafrane)
• AWS kube-up: gear up net.ipv4.neigh.default.gc_thresh1=0 to avoid ARP over-caching (#27682, @justinsb)
• AWS volumes: Employ /dev/xvdXX names with EC2 (#27628, @justinsb)
• Add a exam config variable to specify desired Docker version to run on GCI. (#26813, @wonderfly)
• Check for thin_is binary in path for devicemapper when using ThinPoolWatcher and fix uint64 overflow issue for CPU stats (#27591, @dchen1107)
• Modify default value of deleting-pods-burst to i (#27606, @gmarek)
• MESOS: fix race condition in contrib/mesos/pkg/queue/delay (#24916, @jdef)
• including federation binaries in the list of images we push button during release (#27396, @nikhiljindal)
• fix updatePod() of RS and RC controllers (#27415, @caesarxuchao)
• Alter default value of deleting-pods-burst to 1 (#27422, @gmarek)
• A new volume director was introduced in kubelet that synchronizes volume mountain/unmount (and attach/detach, if adhere/detach controller is not enabled). (#26801, @saad-ali)
  • This eliminates the race conditions between the pod cosmos loop and the orphaned volumes loops. It also removes the unmount/disassemble from the syncPod() path and then book clean up never blocks the syncPod loop.

v1.3.0-beta.1

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	2b54995ee8f52d78dc31c3d7291e8dfa5c809fe7	f1022a84c3441cae4ebe1d295470be8f

Changes since v1.three.0-blastoff.5

Action Required

• Fixing logic to generate ExternalHost in genericapiserver (#26796, @nikhiljindal)
• federation: Updating federation-controller-manager to apply underground to get federation-apiserver'south kubeconfig (#26819, @nikhiljindal)

Other notable changes

• federation: fix dns provider initialization issues (#27252, @mfanjie)
• Updating federation upwards scripts to work in not e2e setup (#27260, @nikhiljindal)
• version bump for gci to milestone 53 (#27210, @adityakali)
• kubectl apply: retry applying a patch if a version conflict fault is encountered (#26557, @AdoHe)
• Revert "Wait for arc.getArchive() to consummate before running tests" (#27130, @pwittrock)
• ResourceQuota BestEffort telescopic aligned with Pod level QoS (#26969, @derekwaynecarr)
• The AWS cloudprovider will cache results from DescribeInstances() if the set of nodes hasn't changed (#26900, @therc)
• GCE provider: Log full contents of long operations (#26962, @zmerlynn)
• Fix organisation container detection in kubelet on systemd. (#26586, @derekwaynecarr)
  • This fixed environments where CPU and Retention Accounting were not enabled on the unit of measurement that launched the kubelet or docker from reporting the root cgroup when monitoring usage stats for those components.
• New default horizontalpodautoscaler/v1 generator for kubectl autoscale. (#26775, @piosz)
  • Employ autoscaling/v1 in kubectl by default.
• federation: Adding dnsprovider flags to federation-controller-manager (#27158, @nikhiljindal)
• federation service controller: fixing a bug and so that existing services are created in newly registered clusters (#27028, @mfanjie)
• Rename environment variables (KUBE_)ENABLE_NODE_AUTOSCALER to (KUBE_)ENABLE_CLUSTER_AUTOSCALER. (#27117, @mwielgus)
• support for mounting local-ssds on GCI (#27143, @adityakali)
• AWS: support mixed plaintext/encrypted ports in ELBs via service.beta.kubernetes.io/aws-load-balancer-ssl-ports annotation (#26976, @therc)
• Updating e2e docs with instructions on running federation tests (#27072, @colhom)
• LBaaS v2 Support for Openstack Cloud Provider Plugin (#25987, @dagnello)
• GCI: add together support for network plugin (#27027, @andyzheng0831)
• Bump cAdvisor to v0.23.3 (#27065, @timstclair)
• End 'kubectl drain' deleting pods with local storage. (#26667, @mml)
• Networking e2es: Expect for all nodes to be schedulable in kubeproxy and networking tests (#27008, @zmerlynn)
• modify clientset of service controller to versioned (#26694, @mfanjie)
• Use gcr.io as a Docker registry mirror when setting up a cluster in GCE. (#25841, @ojarjur)
• correction on rbd book object and defaults (#25490, @rootfs)
• Bump GCE debian prototype to container-v1-3-v20160604 (#26851, @zmerlynn)
• Option to enable http2 on client connections. (#25280, @timothysc)
• kubectl get ingress output remove rules (#26684, @AdoHe)
• AWS kube-up: Remove SecurityContextDeny admission controller (to mirror GCE) (#25381, @zquestz)
• Set tertiary party (#25894, @brendandburns)
• AWS Route53 dnsprovider (#26049, @quinton-hoole)
• GCI/Trusty: support the Docker registry mirror (#26745, @andyzheng0831)
• Kubernetes v1.three introduces a new Attach/Detach Controller. This controller manages attaching and detaching of volumes on-behalf of nodes. (#26351, @saad-ali)
  • This ensures that attachment and detachment of volumes is independent of any single nodes' availability. Meaning, if a node or kubelet becomes unavailable for whatever reason, the volumes attached to that node will be detached so they are free to be attached to other nodes.
  • Specifically the new controller watches the API server for scheduled pods. It processes each pod and ensures that any volumes that implement the volume Attacher interface are fastened to the node their pod is scheduled to.
  • When a pod is deleted, the controller waits for the volume to be safely unmounted by kubelet. Information technology does this by waiting for the volume to no longer be present in the nodes Node.Status.VolumesInUse list. If the volume is not safely unmounted by kubelet within a pre-configured duration (3 minutes in Kubernetes v1.3), the controller unilaterally detaches the volume (this prevents volumes from getting stranded on nodes that become unavailable).
  • In lodge to remain backwards compatible, the new controller only manages attach/detach of volumes that are scheduled to nodes that opt-in to controller direction. Nodes running v1.iii or college of Kubernetes opt-in to controller management by default by setting the "volumes.kubernetes.io/controller-managed-adhere-detach" annotation on the Node object on startup. This behavior is gated past a new kubelet flag, "enable-controller-attach-detach," (default truthful).
  • In lodge to safely upgrade an existing Kubernetes cluster without suspension of book attach/detach logic:
    • First upgrade the master to Kubernetes v1.three.
      • This will start the new adhere/detach controller.
      • The new controller will initially ignore volumes for all nodes since they lack the "volumes.kubernetes.io/controller-managed-attach-disassemble" annotation.
    • Then upgrade nodes to Kubernetes v1.3.
      • As nodes are upgraded, they volition automatically, by default, opt-in to adhere/detach controller direction, which volition cause the controller to beginning managing attaches/detaches for volumes that get scheduled to those nodes.
• Added DNS Reverse Tape logic for service IPs (#26226, @ArtfulCoder)
• read gluster log to surface glusterfs plugin errors properly in draw events (#24808, @screeley44)

v1.iii.0-alpha.5

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	724bf5a4437ca9dc75d9297382f47a179e8dc5a6	2a8b4a5297df3007fce69f1e344fd87e

Changes since v1.3.0-alpha.4

Activeness Required

• Add direct serializer (#26251, @caesarxuchao)
• Add a NodeCondition "NetworkUnavailable" to prevent scheduling onto a node until the routes accept been created (#26415, @wojtek-t)
• Add garbage collector into kube-controller-managing director (#26341, @caesarxuchao)
• Add together orphaning finalizer logic to GC (#25599, @caesarxuchao)
• GCI-backed masters mount srv/kubernetes and srv/sshproxy in the right place (#26238, @ihmccreery)
• Updaing QoS policy to exist at the pod level (#14943, @vishh)
• add together CIDR allocator for NodeController (#19242, @mqliang)
• Adding garbage collector controller (#24509, @caesarxuchao)

Other notable changes

• Prepare a bug with pluralization of 3rd party resources (#25374, @brendandburns)
• Run l7 controller on master (#26048, @bprashanth)
• AWS: ELB proxy protocol support via annotation service.beta.kubernetes.io/aws-load-balancer-proxy-protocol (#24569, @williamsandrew)
• kubectl run --restart=Never creates pods (#25253, @soltysh)
• Add LabelSelector to PersistentVolumeClaimSpec (#25917, @pmorie)
• Removed metrics api grouping (#26073, @piosz)
• Fixed check in kubectl autoscale: cpu consumption can be higher than 100%. (#26162, @jszczepkowski)
• Add together support for 3rd party objects to kubectl label (#24882, @brendandburns)
• Motility shell completion generation into 'kubectl completion' command (#23801, @sttts)
• Ready strategic merge diff list diff bug (#26418, @AdoHe)
• Setting TLS1.2 minimum considering TLS1.0 and TLS1.1 are vulnerable (#26169, @victorgp)
• Kubelet: Periodically reporting image pulling progress in log (#26145, @Random-Liu)
• Federation service controller is one key component of federation controller manager, it watches federation service, creates/updates services to all registered clusters, and update DNS records to global DNS server. (#26034, @mfanjie)
• Stabilize map order in kubectl describe (#26046, @timoreimann)
• Google Cloud DNS dnsprovider - replacement for #25389 (#26020, @quinton-hoole)
• Fix system container detection in kubelet on systemd. (#25982, @derekwaynecarr)
  • This stock-still environments where CPU and Memory Accounting were not enabled on the unit
  • that launched the kubelet or docker from reporting the root cgroup when
  • monitoring usage stats for those components.
• Added pods-per-cadre to kubelet. #25762 (#25813, @rrati)
• promote sourceRange into service spec (#25826, @freehan)
• kube-controller-director: Add configure-deject-routes option (#25614, @justinsb)
• kubelet: reading cloudinfo from cadvisor (#21373, @enoodle)
• Disable cAdvisor event storage by default (#24771, @timstclair)
• Remove docker-multinode (#26031, @luxas)
• nodecontroller: Set log message on successful update (#26207, @zmerlynn)
• remove deprecated generated typed clients (#26336, @caesarxuchao)
• Kubenet host-port support through iptables (#25604, @freehan)
• Add metrics support for a GCE PD, EC2 EBS & Azure File volumes (#25852, @vishh)
• Crash-land cAdvisor to v0.23.2 - Run into changelog for details (#25914, @timstclair)
• Alpha version of "Role Based Admission Command" API. (#25634, @ericchiang)
• Add Seccomp API (#25324, @jfrazelle)
• AWS: Gear up long-continuing problems in stringSetToPointers (#26331, @therc)
• Add dnsmasq as a DNS enshroud in kube-dns pod (#26114, @ArtfulCoder)
• routecontroller: Add expect.NonSlidingUntil, utilize information technology (#26301, @zmerlynn)
• Try 2: Bump GCE containerVM to container-v1-iii-v20160517 (Docker i.eleven.1) over again. (#26001, @dchen1107)
• Downward API implementation for resources limits and requests (#24179, @aveshagarwal)
• GCE clusters outset using GCI equally the default Bone prototype for masters (#26197, @wonderfly)
• Add a 'kubectl clusterinfo dump' option (#20672, @brendandburns)
• Fixing heapster memory requirements. (#26109, @Q-Lee)
• Handle federated service name lookups in kube-dns. (#25727, @madhusudancs)
• Support sort-by timestamp in kubectl become (#25600, @janetkuo)
• vSphere Volume Plugin Implementation (#24947, @abithap)
• ResourceQuota controller uses rate limiter to foreclose hot-loops in fault situations (#25748, @derekwaynecarr)
• Fix hyperkube flag parsing (#25512, @colhom)
• Add a kubectl create secret tls command (#24719, @bprashanth)
• Innovate a new add-on pod NodeProblemDetector. (#25986, @Random-Liu)
  • NodeProblemDetector is a DaemonSet running on each node, monitoring node health and reporting
  • node problems as NodeCondition and Event. Currently it already supports kernel log monitoring, and
  • volition support more problem detection in the hereafter. Information technology is enabled past default on gce now.
• Handle cAdvisor partial failures (#25933, @timstclair)
• Use SkyDNS equally a library for a more integrated kube DNS (#23930, @ArtfulCoder)
• Introduce node retentivity pressure condition to scheduler (#25531, @ingvagabund)
• Set detection of docker cgroup on RHEL (#25907, @ncdc)
• Kubelet evicts pods when bachelor memory falls beneath configured eviction thresholds (#25772, @derekwaynecarr)
• Use protobufs by default to communicate with apiserver (still store JSONs in etcd) (#25738, @wojtek-t)
• Implement NetworkPolicy v1beta1 API object / client back up. (#25638, @caseydavenport)
• Just expose top N images in NodeStatus (#25328, @resouer)
• Extend secrets volumes with path control (#25285, @ingvagabund)
• With this PR, kubectl and other RestClient'southward using the AuthProvider framework can make OIDC authenticated requests, and, if at that place is a refresh token nowadays, the tokens will be refreshed as needed. (#25270, @bobbyrullo)
• Make addon-manager cross-platform and use it with hyperkube (#25631, @luxas)
• kubelet: Optionally, have kubelet exit if lock file contention is observed, using --exit-on-lock-contention flag (#25596, @derekparker)
• Bump up glbc version to 0.6.two (#25446, @bprashanth)
• Add together "kubectl gear up prototype" for easier updating container images (for pods or resource with pod templates). (#25509, @janetkuo)
• NodeController doesn't evict Pods if no Nodes are Ready (#25571, @gmarek)
• Incompatible change of kube-upwardly.sh: (#25734, @jszczepkowski)
  • when turning on cluster autoscaler by setting KUBE_ENABLE_NODE_AUTOSCALER=true,
  • KUBE_AUTOSCALER_MIN_NODES and KUBE_AUTOSCALER_MAX_NODES need to be set.
• systemd node spec proposal (#17688, @derekwaynecarr)
• Crash-land GCE ContainerVM to container-v1-three-v20160517 (Docker 1.11.one) (#25843, @zmerlynn)
• AWS: Move enforcement of fastened AWS device limit from kubelet to scheduler (#23254, @jsafrane)
• Refactor persistent volume controller (#24331, @jsafrane)
• Add together support for running GCI on the GCE cloud provider (#25425, @andyzheng0831)
• Implement taints and tolerations (#24134, @kevin-wangzefeng)
• Add together init containers to pods (#23567, @smarterclayton)

v1.3.0-alpha.4

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	758e97e7e50153840379ecd9f8fda1869543539f	4e18ae6a428c99fcc30e2137d7c41854

Changes since v1.three.0-alpha.3

Activity Required

• validate third party resources (#25007, @liggitt)
• Automatically create the kube-organisation namespace (#25196, @luxas)
• Make ThirdPartyResource a root scoped object (#25006, @liggitt)
• marking container-port flag every bit deprecated (#25072, @AdoHe)
• Provide flags to use etcd3 backed storage (#24455, @hongchaodeng)

Other notable changes

• Fix hyperkube's layer caching, and remove --make-symlinks at build fourth dimension (#25693, @luxas)
• AWS: More back up for ap-northeast-2 region (#24464, @matthewrudy)
• Make bigger master root disks in GCE for large clusters (#25670, @gmarek)
• AWS kube-down: don't fail if ELB not in VPC - #23784 (#23785, @ajohnstone)
• Build hyperkube in hack/local-up-cluster instead of separate binaries (#25627, @luxas)
• enable recursive processing in kubectl rollout (#25110, @metral)
• Back up struct,array,piece types when sorting kubectl output (#25022, @zhouhaibing089)
• federated api servers: Calculation a discovery summarizer server (#20358, @nikhiljindal)
• AWS: Allow cantankerous-region prototype pulling with ECR (#24369, @therc)
• Automatically add node labels beta.kubernetes.io/{os,arch} (#23684, @luxas)
• kubectl "rm" will suggest using "delete"; "ps" and "list" will advise "get". (#25181, @janetkuo)
• Add IPv6 address support for pods - does Not include services (#23090, @tgraf)
• Use local disk for ConfigMap volume instead of tmpfs (#25306, @pmorie)
• Blastoff support for scheduling pods on machines with NVIDIA GPUs whose kubelets employ the --experimental-nvidia-gpus flag, using the alpha.kubernetes.io/nvidia-gpu resource (#24836, @therc)
• AWS: SSL back up for ELB listeners through annotations (#23495, @therc)
• Implement kubectl rollout status that tin can be used to watch a deployment's rollout status (#19946, @janetkuo)
• Webhook Token Authenticator (#24902, @cjcullen)
• Update PodSecurityPolicy types and add admission controller that could enforce them (#24600, @pweil-)
• Introducing ScheduledJobs as described in the proposal every bit office of batch/v2alpha1 version (experimental characteristic). (#24970, @soltysh)
• kubectl now supports validation of nested objects with dissimilar ApiGroups (e.one thousand. objects in a List) (#25172, @pwittrock)
• Alter default clusterCIDRs from /16 to /fourteen in GCE configs allowing 1000 Node clusters by default. (#25350, @gmarek)
• Add 'kubectl set up' (#25444, @janetkuo)
• vSphere Deject Provider Implementation (#24703, @dagnello)
• Added JobTemplate, a preliminary step for ScheduledJob and Workflow (#21675, @soltysh)
• Openstack provider (#21737, @zreigz)
• AWS kube-up: Allow VPC CIDR to be specified (experimental) (#23362, @miguelfrde)
• Return "410 Gone" errors via watch stream when using watch cache (#25369, @liggitt)
• GKE provider: Add cluster-ipv4-cidr and capricious flags (#25437, @zmerlynn)
• AWS kube-upwards: Increase timeout waiting for docker start (#25405, @justinsb)
• Sort resource in quota errors to avoid duplicate events (#25161, @derekwaynecarr)
• Brandish line number on JSON errors (#25038, @mfojtik)
• If the cluster node count exceeds the GCE TargetPool maximum (currently 1000), (#25178, @zmerlynn)
  • randomly select which nodes are members of Kubernetes External Load Balancers.
• Analyze supported version skew between masters, nodes, and clients (#25087, @ihmccreery)
• Motility godeps to vendor/ (#24242, @thockin)
• Introduce events flag for describers (#24554, @ingvagabund)
• run kube-addon-manager in a static pod (#23600, @mikedanese)
• Reimplement 'pause' in C - smaller footprint all around (#23009, @uluyol)
• Add subPath to mountain a child dir or file of a volumeMount (#22575, @MikaelCluseau)
• Handle image digests in node condition and image GC (#25088, @ncdc)
• PLEG: reinspect pods that failed prior inspections (#25077, @ncdc)
• Set kubectl create secret/configmap to allow = values (#24989, @derekwaynecarr)
• Upgrade installed packages when building hyperkube to ameliorate the security profile (#25114, @aaronlevy)
• GCI/Trusty: Back up ABAC dominance (#24950, @andyzheng0831)
• fix cinder volume dir umount issue #24717 (#24718, @chengyli)
• Inter pod topological affinity and anti-analogousness implementation (#22985, @kevin-wangzefeng)
• start etcd compactor in background (#25010, @hongchaodeng)
• GCI: Add two GCI specific metadata pairs (#25105, @andyzheng0831)
• Ensure status is not inverse during an update of PV, PVC, HPA objects (#24924, @mqliang)
• GCE: Adopt preconfigured node tags for firewalls, if bachelor (#25148, @a-robinson)
• kubectl rolling-update support for aforementioned epitome (#24645, @jlowdermilk)
• Add an entry to the common salt config to allow Debian jessie on GCE. (#25123, @jlewi)
  • As with the existing Wheezy image on GCE, docker is expected
  • to already be installed in the prototype.
• Marking kube-push.sh as broken (#25095, @ihmccreery)
• AWS: Add support for ap-northeast-two region (Seoul) (#24457, @leokhoa)
• GCI: Update the control to get the prototype (#24987, @andyzheng0831)
• Port-frontwards: employ out and fault streams instead of glog (#17030, @csrwng)
• Promote Pod Hostname & Subdomain to fields (were annotations) (#24362, @ArtfulCoder)
• Validate deletion timestamp doesn't change on update (#24839, @liggitt)
• Add flag -t as shorthand for --tty (#24365, @janetkuo)
• Add support for running clusters on GCI (#24893, @andyzheng0831)
• Switch to ABAC authorization from AllowAll (#24210, @cjcullen)
• Ready DeletingLoadBalancer event generation. (#24833, @a-robinson)

v1.3.0-alpha.3

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	01e0dc68653173614dc99f44875173478f837b38	ae22c35f3a963743d21daa17683e0288

Changes since v1.3.0-alpha.2

Action Required

• Updating go-restful to generate "type":"object" instead of "type":"whatever" in swagger-spec (breaks kubectl ane.1) (#22897, @nikhiljindal)
• Make watch cache treat resourceVersion consequent with uncached sentry (#24008, @liggitt)

Other notable changes

• Trusty: Add together retry in curl commands (#24749, @andyzheng0831)
• Collect and expose runtime's image storage usage via Kubelet'southward /stats/summary endpoint (#23595, @vishh)
• Calculation loadBalancer services to quota system (#24247, @sdminonne)
• Enforce --max-pods in kubelet admission; previously was only enforced in scheduler (#24674, @gmarek)
• All clients under ClientSet share i RateLimiter. (#24166, @gmarek)
• Remove requirement that Endpoints IPs exist IPv4 (#23317, @aanm)
• Prepare unintended change of Service.spec.ports[].nodePort during kubectl apply (#24180, @AdoHe)
• Don't log private SSH key (#24506, @timstclair)
• Incremental improvements to kubelet e2e tests (#24426, @pwittrock)
• Bridge off-cluster traffic into services past masquerading. (#24429, @cjcullen)
• Flush conntrack land for removed/changed UDP Services (#22573, @freehan)
• Allow setting the Host header in a httpGet probe (#24292, @errm)
• Fix goroutine leak in ssh-tunnel healthcheck. (#24487, @cjcullen)
• Prepare gce.getDiskByNameUnknownZone logic. (#24452, @a-robinson)
• Make etcd cache size configurable (#23914, @jsravn)
• Bleed pods created from ReplicaSets in 'kubectl bleed' (#23689, @maclof)
• Brand kubectl edit non convert GV on edits (#23437, @DirectXMan12)
• don't ship kube-registry-proxy and interruption images in tars. (#23605, @mikedanese)
• Do non throw creation errors for containers that fail immediately later on being started (#23894, @vishh)
• Add a client flag to delete "--now" for grace catamenia 0 (#23756, @smarterclayton)
• add together act-equally powers (#23549, @deads2k)
• Build Kubernetes, etcd and flannel for arm64 and ppc64le (#23931, @luxas)
• Honor starting resourceVersion in watch enshroud (#24208, @ncdc)
• Update the pause image to build for arm64 and ppc64le (#23697, @luxas)
• Return more useful error information when a persistent volume fails to mount (#23122, @screeley44)
• Trusty: Avoid unnecessary in-memory temp files (#24144, @andyzheng0831)
• e2e: set up error checking in kubelet stats (#24205, @yujuhong)
• Fixed mounting with containerized kubelet (#23435, @jsafrane)
• Calculation nodeports services to quota (#22154, @sdminonne)
• e2e: adapt kubelet_perf.go to use the new summary metrics API (#24003, @yujuhong)
• kubelet: add together RSS retentiveness to the summary API (#24015, @yujuhong)

v1.3.0-blastoff.2

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	305c8c2af7e99d463dbbe4208ecfe2b50585e796	aadb8d729d855e69212008f8fda628c0

Changes since v1.3.0-alpha.i

Other notable changes

• Make kube2sky and skydns docker images cross-platform (#19376, @luxas)
• Allowing type object in kubectl swagger validation (#24054, @nikhiljindal)
• Fix TerminationMessagePath (#23658, @Random-Liu)
• Trusty: Practice not create the docker-daemon cgroup (#23996, @andyzheng0831)
• Make ConfigMap volume readable as not-root (#23793, @pmorie)
• only include running and pending pods in daemonset should place calculation (#23929, @mikedanese)
• Upgrade to golang 1.six (#22149, @luxas)
• Cross-build hyperkube and debian-iptables for ARM. Besides add a flannel prototype (#21617, @luxas)
• Add a timeout to the sshDialer to forestall indefinite hangs. (#23843, @cjcullen)
• Ensure object returned past volume getCloudProvider incorporates deject config (#23769, @saad-ali)
• Update Dashboard UI addon to v1.0.1 (#23724, @maciaszczykm)
• Add zsh completion for kubectl (#23797, @sttts)
• AWS kube-up: tolerate a lack of ephemeral volumes (#23776, @justinsb)
• duplicate kube-apiserver to federated-apiserver (#23509, @jianhuiz)
• Kubelet: Start using the official docker engine-api (#23506, @Random-Liu)
• Fix so setup-files don't recreate/invalidate certificates that already exist (#23550, @luxas)
• A pod never terminated if a container image registry was unavailable (#23746, @derekwaynecarr)
• Fix jsonpath to handle maps with primal of nonstring types (#23358, @aveshagarwal)
• Trusty: Regional release .tar.gz back up (#23558, @andyzheng0831)
• Add support for tertiary political party objects to kubectl (#18835, @brendandburns)
• Remove unnecessary override of /etc/init.d/docker on containervm paradigm. (#23593, @dchen1107)
• brand docker-checker more robust (#23662, @ArtfulCoder)
• Change kube-proxy & fluentd CPU request to 20m/80m. (#23646, @cjcullen)
• Create a new Deployment in kube-organization for every version. (#23512, @Q-Lee)
• IngressTLS: allow secretName to exist blank for SNI routing (#23500, @tam7t)
• don't sync deployment when pod selector is empty (#23467, @mikedanese)
• AWS: Fix bug with >two security groups (#23340, @justinsb)

v1.three.0-alpha.1

Documentation & Examples

Downloads

binary	sha1 hash	md5 hash
kubernetes.tar.gz	e0041b08e220a4704ea2ad90a6ec7c8f2120c2d3	7bb2df32aea94678f72a8d1f43a12098

Changes since v1.2.0

Action Required

• Disabling swagger ui by default on apiserver. Adding a flag that can enable it (#23025, @nikhiljindal)
• restore ability to run against secured etcd (#21535, @AdoHe)

Other notable changes

• validate that daemonsets don't have empty selectors on creation (#23530, @mikedanese)
• Trusty: Update heapster manifest handling code (#23434, @andyzheng0831)
• Support differentiation of Bone distro in e2e tests (#23466, @andyzheng0831)
• don't sync daemonsets with selectors that match all pods (#23223, @mikedanese)
• Trusty: Avoid reaching GCE custom metadata size limit (#22818, @andyzheng0831)
• Update kubectl assistance for i.2 resources (#23305, @janetkuo)
• Back up addon Deployments, make heapster a deployment with a nanny. (#22893, @Q-Lee)
• Removing URL query param from swagger UI to set the XSS event (#23234, @nikhiljindal)
• Fix hairpin mode (#23325, @MurgaNikolay)
• Bump to container-vm-v20160321 (#23313, @zmerlynn)
• Remove the restart-kube-proxy and restart-apiserver functions (#23180, @roberthbailey)
• Copy annotations back from RS to Deployment on rollback (#23160, @janetkuo)
• Trusty: Support hybrid cluster with nodes on ContainerVM (#23079, @andyzheng0831)
• update expose control description to add deployment (#23246, @AdoHe)
• Add a rate limiter to the GCE cloudprovider (#23019, @alex-mohr)
• Add together a Deployment example for kubectl betrayal. (#23222, @madhusudancs)
• Utilize versioned object when computing patch (#23145, @liggitt)
• kubelet: transport all recevied pods in one update (#23141, @yujuhong)
• Add a SSHKey sync cheque to the master'southward healthz (when using SSHTunnels). (#23167, @cjcullen)
• Validate minimum CPU limits to be >= 10m (#23143, @vishh)
• Fix controller-director race condition issue which crusade endpoints flush during restart (#23035, @xinxiaogang)
• MESOS: forward globally declared cadvisor housekeeping flags (#22974, @jdef)
• Trusty: back up developer workflow on base image (#22960, @andyzheng0831)
• Bumped Heapster to stable version i.0.0 (#22993, @piosz)
• Deprecating --api-version flag (#22410, @nikhiljindal)
• allow resource.version.grouping in kubectl (#22853, @deads2k)
• Utilise SCP to dump logs and parallelize a bit. (#22835, @spxtr)
• update broad option output (#22772, @AdoHe)
• Modify scheduler logic from random to round-robin (#22430, @gmarek)

Please see the Releases Page for older releases.

Release notes of older releases tin can exist found in:

• CHANGELOG-1.ii.physician

mcleishcong1982.blogspot.com

Source: https://github.com/yuxf-leap/k8s/blob/master/CHANGELOG-1.3.md

Share this post