Refactor factory_test.go to use a fake k8s client. (#69412, @tossmilestone)
kubeadm: fix a case where fetching a kubernetesVersion from the internet still happened even if some commands don't need it. (#69645, @neolit123)
Add tolerations for Stackdriver Logging and Metadata Agents. (#69737, @qingling128)
Fix a bug in the scheduler that could cause the scheduler to go to an infinite loop when all nodes in a zone are removed. (#69758, @bsalamat)
Dry-run is promoted to Beta and will be enabled by default. (#69644, @apelisse)
kubectl get priorityclass now prints value column by default. (#69431, @Huang-Wei)
Added a new container based image for running e2e tests (#69368, @dims)
Remove the deprecated --google-json-key flag from kubelet. (#69354, @yujuhong)
kube-apiserver: fixes procMount field incorrectly being marked as required in openapi schema (#69694, @jessfraz)
The LC_ALL and LC_MESSAGES env vars can now be used to set desired locale for kubectl while keeping LANGunchanged. (#69500, @m1kola)
Add ability to control primary GID of containers through Pod Spec and PodSecurityPolicy (#67802, @krmayankk)
NodeLifecycleController:
Now node lease renewal is treated as the heartbeat signal from the
node, in addition to NodeStatus Update. (#69241, @wangzhen127)
[GCE] Enable by default audit logging truncating backend. (#68288, @loburm)
Enable
insertId generation, and update Stackdriver Logging Agent image to
0.5-1.5.36-1-k8s. This help reduce log duplication and guarantee log
order. (#68920, @qingling128)
Move NodeInfo utils into pkg/scheduler/cache. (#69495, @wgliang)
adds dynamic shared informers to write generic, non-generated controllers (#69308, @p0lyn0mial)
Move CacheComparer to pkg/scheduler/internal/cache/comparer. (#69317, @wgliang)
Updating OWNERS list for vSphere Cloud Provider. (#69187, @SandeepPissay)
The default storage class annotation for the storage addons has been changed to use the GA variant (#68345, @smelchior)
Upgrade to etcd 3.3 client (#69322, @jpbetz)
fix GetVolumeLimits log flushing issue (#69558, @andyzhangx)
It is now possible to use named ports in the kubectl port-forward command (#69477, @m1kola)
kubeadm: fix a possible scenario where kubeadm can pull much newer control-plane images (#69301, @neolit123)
test/e2e/e2e.test: (#69105, @pohly)
* -viper-config can be used to set also the options defined by command
line flags * the default config file is "e2e.yaml/toml/json/..." and the
test starts when no such config is found (as before) but if
-viper-config is used, the config file must exist * -viper-config can be
used to select a file with full path, with or without file suffix * the
csiImageVersion/Registry flags were renamed to
storage.csi.imageVersion/Registry
Move FakeCache to pkg/scheduler/internal/cache/fake. (#69318, @wgliang)
The "kubectl cp" command now supports path shortcuts (../) in remote paths. (#65189, @juanvallejo)
Fixed subpath in containerized kubelet. (#69565, @jsafrane)
The runtimeHandler field on the RuntimeClass resource now accepts the empty string. (#69550, @tallclair)
Kubelet
can now parse PEM file containing both TLS certificate and key in
arbitrary order. Previously key was always required to be first. (#69536, @awly)
Scheduling
conformance tests related to daemonsets should set the annotation that
relaxes node selection restrictions, if any are set. This ensures
conformance tests can run on a wider array of clusters. (#68793, @aveshagarwal)
Replace Parallelize with function ParallelizeUntil and formally deprecate the Parallelize. (#68403, @wgliang)
Move scheduler cache interface and implementation to pkg/scheduler/internal/cache. (#68968, @wgliang)
Update to use go1.11.1 (#69386, @cblecker)
Any external provider should be aware the cloud-provider interface should be imported from :- (#68310, @cheftako)
kubeadm: Fix a crash if the etcd local alpha phase is called when the configuration contains an external etcd cluster (#69420, @ereslibre)
kubeadm
now allows mixing of init/cluster and join configuration in a single
YAML file (although a warning gets printed in this case). (#69426, @rosti)
Code-gen: Remove lowercasing for project imports (#68484, @jsturtevant)
Fix client cert setup in delegating authentication logic (#69430, @DirectXMan12)
service.beta.kubernetes.io/aws-load-balancer-internal
now supports true and false values, previously it only supported
non-empty strings (#69436, @mcrute)
OpenAPI spec and API reference now reflect dryRun query parameter for POST/PUT/PATCH operations (#69359, @roycaihw)
kubeadm: Add a v1beta1 API. (#69289, @fabriziopandini)
kube-apiserver has removed support for the etcd2 storage
backend (deprecated since v1.9). Existing clusters must migrate etcd v2
data to etcd v3 storage before upgrading to v1.13. (#69310, @liggitt)
List
operations against the API now return internal server errors instead of
partially complete lists when a value cannot be transformed from
storage. The updated behavior is consistent with all other operations
that require transforming data from storage such as watch and get. (#69399, @mikedanese)
kubectl wait now supports condition value checks other than true using --for condition=available=false (#69295, @deads2k)
CCM server will not listen insecurely if secure port is specified (#68982, @aruneli)
Bump cluster-proportional-autoscaler to 1.3.0 (#69338, @MrHohn)
fix inconsistency in windows kernel proxy when updating HNS policy. (#68923, @delulu)
Fixes the sample-apiserver so that its BanFlunder admission plugin can be used. (#68417, @MikeSpreitzer)
Fixed CSIDriver API object to allow missing fields. (#69331, @jsafrane)
Bump addon-manager to v8.8 (#69337, @MrHohn)
Update defaultbackend image to 1.5. Users should concentrate on updating scripts to the new version. (#69120, @aledbf)
Bump Dashboard version to v1.10.0 (#68450, @jeefy)
Fixed panic on iSCSI volume tear down. (#69140, @jsafrane)
Update defaultbackend to v1.5 (#69334, @bowei)
Remove unused chaosclient. (#68409, @wgliang)
Enable AttachVolumeLimit feature (#69225, @gnufied)
Update crictl to v1.12.0 (#69033, @feiskyer)
Wait for pod failed event in subpath test. (#69300, @mrunalp)
[GCP] Added env variables to control CPU requests of kube-controller-manager and kube-scheduler. (#68823, @loburm)
Bump up pod short start timeout to 2 minutes. (#69291, @mrunalp)
Use
the mounted "/var/run/secrets/kubernetes.io/serviceaccount/token" as
the token file for running in-cluster based e2e testing. (#69273, @dims)
apiservice availability related to networking glitches are corrected faster (#68678, @deads2k)
extract volume attachment status checking operation as a common function when attaching a CSI volume (#68931, @mlmhl)
PodSecurityPolicy objects now support a MayRunAs rule for fsGroup and supplementalGroups options. This allows specifying ranges of allowed GIDs for pods/containers without forcing a default GID the way MustRunAs does.
This means that a container to which such a policy applies to won't use
any fsGroup/supplementalGroup GID if not explicitly specified, yet a
specified GID must still fall in the GID range according to the policy. (#65135, @stlaz)
Images
for cloud-controller-manager, kube-apiserver, kube-controller-manager,
and kube-scheduler now contain a minimal /etc/nsswitch.conf and should
respect /etc/hosts for lookups (#69238, @BenTheElder)
add deprecation warning for all cloud providers (#69171, @andrewsykim)
IPVS proxier mode now support connection based graceful termination. (#66012, @Lion-Wei)
Fix panic in kubectl rollout commands (#69150, @soltysh)
Add fallbacks to ARM API when getting empty node IP from Azure IMDS (#69077, @feiskyer)
Deduplicate PATH items when reading plugins. (#69089, @soltysh)
Adds permissions for startup of an on-cluster kube-controller-manager (#69062, @dghubble)
Fixes issue [#68899](https://github.com/kubernetes/kubernetes/issues/68899) where pods might schedule on an unschedulable node. (#68984, @k82cn)
Returns error if NodeGetInfo fails. (#68979, @xing-yang)
Pod disruption budgets shouldn't be checked for terminal pods while evicting (#68892, @ravisantoshgudimetla)
Fix scheduler crashes when Prioritize Map function returns error. (#68563, @DylanBLE)
kubeadm: create control plane with ClusterFirstWithHostNet DNS policy (#68890, @andrewrynhard)
Reduced excessive logging from fluentd-gcp-scaler. (#68837, @x13n)
adds dynamic lister (#68748, @p0lyn0mial)
kubectl: add the --no-headers flag to kubectl top ... (#67890, @WanLinghao)
Restrict redirect following from the apiserver to same-host redirects, and ignore redirects in some cases. (#66516, @tallclair)
Fixed pod cleanup when /var/lib/kubelet is a symlink. (#68741, @jsafrane)
Add
"only_cpu_and_memory" GET parameter to /stats/summary http handler in
kubelet. If parameter is true then only cpu and memory will be present
in response. (#67829, @krzysztof-jastrzebski)
Start synchronizing pods after network is ready. (#68752, @krzysztof-jastrzebski)
kubectl has gained new --profile and --profile-output options to output go profiles (#68681, @dlespiau)
Provides FSGroup capability on FlexVolume driver. It allows to disable the VolumeOwnership operation when volume is mounted (#68680, @benoitf)
Apply _netdev mount option on bind mount (#68626, @gnufied)
fix UnmountDevice failure on Windows (#68608, @andyzhangx)
Allows changing nodeName in endpoint update. (#68575, @prameshj)
kube-apiserver would return 400 Bad Request when it couldn't decode a json patch. (#68346, @CaoShuFeng)
remove unused ReplicasetControllerOptions (#68121, @dixudx)
Pass signals to fluentd process (#68064, @gianrubio)
Flex
drivers by default do not produce metrics. Flex plugins can enable
metrics collection by setting the capability 'supportsMetrics' to true.
Make sure the file system can support fs stat to produce metrics in this
case. (#67508, @brahmaroutu)
Use monotonically increasing generation to prevent scheduler equivalence cache race. (#67308, @cofyc)
Fix kubelet service file permission warning (#66669, @daixiang0)
Add prometheus metric for scheduling throughput. (#64526, @misterikkit)
Get public IP for Azure vmss nodes. (#68498, @feiskyer)
test/integration: add a basic test for covering CronJobs (#66937, @mortent)
Make service environment variables optional (#68754, @bradhoekstra)
