Release notes for kops 1.9 series

Significant changes

• RBAC is now the default authorization mode for new clusters. Existing clusters will not be changed. Pass --authorization=AlwaysAllow to kops create cluster for the legacy authorization behaviour.

• Federation support has been removed from kops, reflecting the removal of federation upstream and refocusing on multicluster efforts.

Required Actions

None known at this time

Highlighted changes

(to follow)

Full change list

From kops 1.8.1 to 1.9.0

• Add list of PRs for 1.8.0 release @justinsb #3995
• Promote alpha channel to stable @justinsb #3996
• Release notes for 1.8.0 @justinsb #3999
• Put stable channel back to jessie for 1.9 / 1.10 @justinsb #4002
• Add missing permissions for NLB creation @aledbf #3976
• Fix filepath concatenation @justinsb #3973
• toolbox dump now dumps instances in alphabetical order @justinsb #3978
• SSH keys - be lazier about keystore creation @justinsb #3933
• Update aws-sdk-go to v1.10.34 @rdrgmnzs #3885
• Update bazel / gazelle @justinsb #4000
• When using private DNS add ELB name to the api certificate @vainu-arto #3941
• Fixed minor typo in 1.8-NOTES.md file @sellers #4013
• Minor update to docs/getting_started/aws.md @ysim #4008
• Fix libcgroup dependency typo @wannabesrevenge #4030
• Spelling fix in instancegroups.go error msg @sneako #4024
• Include roles in toolbox dump structured output @justinsb #3934
• Fix URL for Docker 17.03.2 on Debian Stretch @blakebarnett #4014
• Fix spurious shared InternetGateway renaming @rifelpet #4020
• Documentation fix for watchIngress flag in externalDns ClusterSpec @krogon-dp #4048
• Bastion output line @gambol99 #4053
• Downgrade Flannel in Canal deployment to v0.9.0 @KashifSaadat #4047
• Let a user set a hostnameOverride when the cloud provider is aws. @rdrgmnzs #3809
• Add additionalNetworkCIDRs to support VPCs with multiple CIDRs in AWS @rdrgmnzs #3898
• updating goimports @chrislovecnm #3947
• implement security group task @zengchen1024 #4016
• Implement security group rule task @zengchen1024 #4017
• Update Weave Net to version 2.1.3 @bboreham #3944
• Fix Flannel nonMasqueradeCIDR @mikesplain #3952
• Remove world read permissions on sensitive key files. @KashifSaadat #4022
• Update gazelle @justinsb #4065
• Allow additional SGs to be added to API loadbalancer @almariah #4036
• [Add-on][kube-state-metrics] Bump version @tuannvm #4045
• add kube-ingress-aws-controller + skipper addons @szuecs #3983
• Bump flannel packaging version @justinsb #4064
• Bump weave version in bootstrapchannelbuilder @bboreham,@justinsb #4062
• Adding DescribeTags to masters @robinpercy #4051
• Fix node counts @ihoegen #4026
• Fix minor typo @kintoandar #4070
• Gazelle updates @chrislovecnm #4067
• apt-get: specify unattended installation @justinsb #4082
• files task: fix potential nil pointer error @justinsb #4081
• protokube: fix logging / logic around cluster-id @justinsb #4080
• protokube: better discovery of local address @justinsb #4078
• Refactor protokube hosts file into its own package @justinsb #4076
• assetstore: extract tar files to a temp directory @justinsb #4075
• Support for hostPort when using canal @rajivm #4063
• validation: don't require subnet CIDRs on baremetal @justinsb #4079
• Use default subnet when creating IG @justinsb #3987
• Return apierrors NotFound when object not found @justinsb #3981
• Copy dnsprovider into our code, implement route53 batching @justinsb #3860
• Remove nodeup templating @justinsb #3924
• nodeup: create kubeconfig under admin or root @justinsb #4077
• add imagePullProgressDeadline to kubelet config @izakp #4046
• Refactor: separate out SSHCredentials from Keyset stores @justinsb #3832
• Adds permissions for ELB and NLB req'd by 1.9 @geojaz #4095
• work on using files assets @chrislovecnm #3254
• fixing bazel @chrislovecnm #4098
• Add support for Amazon VPC CNI plugin @aledbf #3997
• Support for OIDC 'username-prefix' and 'groups-prefix' flags @xoen #4085
• make it go to f @rcuza #4102
• Add Dashboard v1.8.1 @maciaszczykm #4101
• fixing goimports formatting @chrislovecnm #4096
• Refactor CAStore to use API types @justinsb #3833
• Fix code comment on PhaseSecurity @justinsb #4106
• Add --subnets and --utility-subnets to kops create cluster @meringu #4061
• Update ottoyiu/k8s-ec2-srcdst docker image @aledbf #4109
• Refactor: clean up SecretStore to not use KeystoreItem @justinsb #3834
• Avoid ListSecrets call in nodeup @justinsb #3835
• Remove use of deprecated create-if-missing functions @justinsb #3836
• updating bazel files @chrislovecnm #4117
• added instance types for f1 family @peterwhitesell #4116
• Update code-of-conduct.md @spiffxp #4122
• Refactor VFS CA store to reuse keyset from clientset @justinsb #3837
• Add audit log format flag for api server @audip #4060
• Use bundles when loading keysets @justinsb #3838
• Fix null pointer issues when custom PROTOKUBE_IMAGE is specified. @KashifSaadat #4120
• Fix documentation of shared resource tags in kops > 1.8 @tsupertramp #4126
• Force nodeup to use the bundle @justinsb #3839
• Remove labels.yaml @spiffxp #4136
• Added a clarification/warning note about exporting full specs @geojaz #4151
• Moved paragraph relating to runtimeConfig @steveruckdashel #4125
• Add support for cn-northwest-1. @leeeboo #4148
• fixing lifecycle type for network in security phase @chrislovecnm #4155
• Implement mirroring for API CAStore @justinsb #3840
• Documentation Cleanup @rifelpet #4165
• Openapi updates @chrislovecnm #4167
• Add roundtrip tests for certs & private keys @justinsb #4172
• Adding CNI v0.6.0 which is required for Kubernetes 1.9 @chrislovecnm #4175
• Remove Romana preview notice from networking docs @rwiggins #4187
• Improving bazel make targets, adding a target for kops cli, bumping go_rules version @chrislovecnm #4170
• removing inactive approvers @chrislovecnm #4176
• Adding override for setting etcd version @chrislovecnm #4179
• Initial implementation of bundle command @justinsb #4193
• Add experimental kube-discovery @justinsb #4194
• Updating Manifest documentation @chrislovecnm #4177
• Updating docs README.md file @chrislovecnm #4178
• Golang 1.9 @chrislovecnm #4168
• adding missed lifecycles in elb code @chrislovecnm #4154
• Bump alpha channel for meltdown/spectre @justinsb #4204
• kube-discovery: deduplicate multicast responses @justinsb #4214
• Add makefile target for kube-discovery image @justinsb #4213
• nodeup: don't warn during distro detection @justinsb #4215
• gce: mounter asset has moved @justinsb #4216
• Adding cve updates for spectre and meltdown @chrislovecnm #4211
• Suggest tweaks to meltdown advisory @justinsb #4220
• kops validate cluster can output YAML or JSON @chrislovecnm #4107
• GCE: Don't set bucket-level permissions @justinsb #4221
• cloudConfig.elbSecurityGroup under wrong L3 heading @steveruckdashel #4226
• Update state and cloudLabels docs, fix --target description @rifelpet #4227
• Makefile command "apimachinery" run @wannabesrevenge #4241
• VFS: Support io.WriterTo interface @justinsb #4217
• Expose the --fail-swap-on flag for kubelet @wannabesrevenge #4239
• Cloudformation @tdeshetler #4244
• Update binary installation commands for macOS to use curl alone @hopkinsth #4260
• Slight changes to commands. @darron #4259
• Add SubnetType Tag to Subnets @KashifSaadat #4198
• kOps Replace Force @gambol99 #4275
• docs: upgrade.md: drop DrainAndValidateRollingUpdate note @dkeitel #4282
• Bump alpha channel @justinsb #4285
• Validate IG MaxSize is not less than MinSize. @mikesplain #4278
• Removing duplicate AMI entry from Documentation @AlexLast #4223
• Move net mode log after it is known in create @nebril #4294
• Implement ability to update Load Balancer subnets @KashifSaadat #4281
• Update list of AdmissionControllers for k8s 1.9 @blakebarnett #4299
• bazel 0.9.0 running make bazel-build updates @blakebarnett #4298
• Upgrade to calico v2.6.6 @blakebarnett #4297
• Update bazelbuild/rules_go to 0.9.0 @ixdy #4304
• Copy alpha channel to stable @justinsb #4284
• Stick with jessie for 1.9 clusters @justinsb #4309
• Use jessie for 1.10 as well, to unblock queue @justinsb #4310
• Bump kopeio-networking to 1.0.20180120 @justinsb #4306
• Promote alpha channel image to stable @justinsb #4325
• Update aws-sdk-go to 1.12.57 @leeeboo #4234
• Don't specify require-kubeconfig from 1.10 @justinsb #4308
• Fix ASG scaling by adding in ec2:DescribeRegions permission to the nodes IAM role @mikn #4320
• fix config file name in aws-china.md @qqshfox #4321
• Fix the buildImage command typo @mingyuanzhu #4319
• ReadTree: clarify that returns only files @justinsb #4315
• Add missing BUILD.bazel for util/pkg/slice @justinsb #4318
• bazel: expose version as in Makefile @justinsb #4333
• Add license to get_workspace_status & move to .sh @mikesplain #4337
• Ensure GCE disk name does not start with a number @justinsb #4317
• GCE: Dial down logging @justinsb #4335
• Don't autobuild protobuf files @justinsb #4329
• Handle NotFound error when creating instance group @georgebuckerfield #4305
• GCE: Don't require SSH public key @justinsb #4334
• AWS LaunchConfiguration error handling fix @justinsb #4341
• GCE: Get default project from gcloud CLI @justinsb #4332
• When kops searches for AMI by name, if > 1 are returned, uses the latest. @denniswebb #4338
• Enable metrics for AutoScalingGroups @johanneswuerbach #4342
• Update bastion.md @metaflow #4344
• Allow image override for etcd @ottoyiu #4245
• Switching the default for kops to create a cluster with RBAC enabled. @chrislovecnm #4184
• Fix rootVolumeType accepts all volume types @int128 #4270
• Interactive cli opt @mrballcb #4166
• Bump kubernetes dashboard version to 1.8.1 @stuffandthings #4130
• Use 0.9.0 release of nginx-ingress-controller @cap10morgan #4027
• VFS: Fix bug in CopyTree when dest does not exist @justinsb #4316
• VFS: Recognize file:// paths @justinsb #4346
• exec target command, but still pipe it to tee @justinsb #4286
• Improve S3 url parsing for vfsPath to support more naming conventions @ottoyiu #4246
• Update single-to-multi-master.md @jeyglk #4359
• Fix broken links for Usage instructions in addons.md @Rcluoyi #4361
• update go version and ldflags @oilbeater #4349
• Feature/extra terraform config @iMartyn #4336
• Update terraform.md @perryao #4201
• Extend examples of subnet parameter @dictvm #4199
• Update route-related IAM permissions for Romana @cgilmour #4365
• update image go version @oilbeater #4366
• Fix ccm startup wrt dns controller (set dnsPolicy to Default and host… @wlan0 #4367
• modify check require-kubeconfig kube version @zhangxiaoyu-zidif #4357
• Update kopeio-networking to 1.0.20180203 @justinsb #4374
• Remove federation support @justinsb #4379
• Documentation spelling/grammar fixes. @lucasreed #4372
• Update gazelle @justinsb #4378
• Explicitly set go version in bazel build @justinsb #4376
• Update submodule dependencies for k8s 1.9 @justinsb #4377
• bazel: declare golang 1.9.3 @justinsb #4380
• Fix drain command for rolling-updates @KashifSaadat #4387
• Add mac build for travis @mikesplain #4388
• add support for changing the weave peer connection limit @polarbizzle #4398
• Update versions for romana container images @cgilmour #4405
• Bump alpha channel to new image @justinsb #4411
• Update Weave Net to version 2.2.0 @errordeveloper #4413
• Bump weave version to 2.2.0 @justinsb #4421
• upup: Make RenderTerraform handle an error from AddOutputVariableArray @kkaneda #4406
• Add notes for 1.8.1 release @justinsb #4423
• master node requires DescribeRegions when using a bucket from another… @sstarcher #4409
• Pick up etcd version changes for a rolling update on master nodes @KashifSaadat #4371
• API audit doc changes @shavo007 #4427
• fix a typo in tool_template.go @yank1 #4426
• Updating Makefile to the correct versions for the 1.8.1 release @chrislovecnm #4432
• Update BUILD files to account for some recent changes @mikesplain #4431
• Use dep to maintain vendor directory @justinsb #4382
• Update upgrade.md @jar349 #4433
• Update Cluster Autoscaler image and Reduce the Delta between autoscaler docs @StevenACoffman #4182
• Fix wrong backticks markdown. @Antiarchitect #4436
• Add live-restore flag to docker config @marciorodrigues87 #4169
• Fixing problems in dev build script example @chrislovecnm #4438
• Add max-requests-inflight parameter @ihoegen #4395
• Updates for x1 instance family @manabusakai #4437
• Fix instange groups docs @klaus993 #4440
• Kubernetes Calico TLS @gambol99 #4240
• Add to aws-china.md to prevent Etag not match the HASH of file. @leeeboo #4384
• add storageclasses permissions for cluster-autoscaler:v1.1.0 @mikesimos #4456
• Fixing ExistsAndWarnIfChanges so that it will allow a user to pass @chrislovecnm #4459
• updating bazel BUILD file @chrislovecnm #4457
• Lifecycle overrides @chrislovecnm #4445
• Remove submodules @chrislovecnm #4435
• Updating variables to use Camel Case @chrislovecnm #4467
• Updating missed BUILD files for gazelle @chrislovecnm #4468
• Fixing deleting of shared IGW and DHCPOptions @chrislovecnm #4460
• Support updating autoscaling metrics @justinsb #4469
• Convert registry to k8s.gcr.io @thockin #4137
• Updating kops version when using bazel @chrislovecnm #4475
• Update apimachinery & ensure we always run goimports @justinsb #4473
• Update kube-dns to 1.14.8 @justinsb #4478
• kube-dns: turn off negcache @justinsb #4479
• Initial support for standalone etcd-manager backups @justinsb #4465
• Require kops 1.7.1 (with the CVE fix), recommend kops 1.8.1 @justinsb #3592
• Build docker images through bazel @justinsb #3561
• Update ingress versions and fix to quay registry @mikesplain #4485
• Update AWS Logo In Docs @christopherhein #4481
• Change FeatureGates to omitempty under KubeProxyConfig @argais #4500
• Use k8s.gcr.io alias only for 1.10 @christopherhein,@justinsb #4494
• Fix -ldflags incompatibility in go1.10 @tvi #4502
• Adding additional tags and shared to various AWS components @chrislovecnm #4489
• Bazel docker, cross builds and uploading to s3 @mikesplain #4477
• Verify bazel files @chrislovecnm #4504
• Build protokube tar in bazel @justinsb #4510
• Add cidr-allocator-type flag to kcm and ccm @justinsb #4512
• Bazel follow up @mikesplain #4515
• dns-controller: support digitalocean @andrewsykim #4508
• Add Instance Group Suspend Processes @mikesplain #3829
• DockerConfig Order @gambol99 #4505
• Fix bazel deprecation notice @mikesplain #4518
• Experimental kops set cluster command @justinsb #4381
• docker: Adds hosts configuration option @jaipradeesh #4497
• Fixing verify bazel @chrislovecnm #4522
• Fix snake case @chrislovecnm #4520
• VFS: WriteFile takes an io.ReadSeeker @justinsb #4493
• Update rules go @mikesplain #4530
• Add node monitor flags @so0k #4525
• Clarify few things in Running an existing VPC @syndbg #4519
• Set the default docker for kubernetes 1.9 to 17.03.2 @zacblazic #4443
• Add option for using existing EIP's @sethpollack #4302
• Etcd TLS Peer & CLient Auth @gambol99 #4010
• Fix suspicious space in struct tag value @tvi #4535
• Add support for bastion aws user-data @duboisf #4452
• Moving from one IG w multiple AZs to one IG per AZ @Globegitter #4528
• Make addon specification into an object @polarbizzle,@justinsb #4538
• Fixing integration tests @chrislovecnm #4539
• Increase key size in GeneratePrivateKey() to 3072 @snelson-pp #4354
• Kube-proxy API to accept cpu: limit, memory: request and limit @horaceheaven #4476
• Expose Felix metrics @atopuzov #4529
• Add (proposed) roadmap for etcd @justinsb #4474
• Update Calico and Canal to use calico node v2.6.7 @tmjd,@justinsb #4447
• Update aws-sdk-go to v1.12.79 @justinsb #4541
• Add route53 max changeset batch size flag @pwillie #4496
• Add kubernetes 1.9.3 into alpha & stable channels @justinsb #4542
• custom ca new implementation of #2924 @mad01 #4526
• Cherry pick to update apimachinery for 1.9 release @chrislovecnm #4556
• Verify apimachinery @chrislovecnm #4555
• Updates for Bazel tests and cleaning up go sdk @chrislovecnm #4554
• Kube Proxy IPVS Kernel Module @gambol99 #4550
• Bumping gazelle version on bazel scripts @chrislovecnm #4561
• Bind the kubelet to the local ipv4 address @dezmodue #4417
• Recognize AWS Availability Zone EU-WEST-2C @KashifSaadat #4558
• removing old target in Makefile for copying the deps @chrislovecnm #4563
• Update find logic for newly shared objects @justinsb #4572
• Updating bazel kops versions so that it matches the Makefile @chrislovecnm #4583
• Add comprehensive horizontal pod autoscaling documentation @itskingori #3942
• Adding support for new Paris region @naveensrinivasan #4552
• Update Compatibility Matrix @mikesplain #4580
• Typo fix "NAT Gateways" -> "NAT gateways" @AdamDang #4576
• Force bazel builds to be pure. @mikesplain #4602
• Update getting_started/aws.md @sanketjpatel #4605
• Typo delete duplicated word @AdamDang #4600
• Typo fix "kubernetes"->"Kubernetes" @AdamDang #4577
• Fix distroless error @mikesplain #4597
• fix docs regarding security group tagging @mariusv #4594
• Create readme.ES.md @UlisesTJ #4592
• Bazel: Add more pure builds @mikesplain #4616
• Tag nat gateways @mikesplain #4606
• Typo fix "failes"->"fails" @AdamDang #4610
• Typo delete duplicated "a a" @AdamDang #4609
• Fix-typo-in-toolbox_template.go @yank1 #4613
• Add cluster name environment variable @rocktavious #4560
• Typo fix "etcd manager"->"etcd-manager" @AdamDang #4628
• Typo fix "provides"->"provide" @AdamDang #4622
• Typo instance group ->"InstanceGroup" @AdamDang #4621
• Typo "official"->"official" @AdamDang #4637
• Typo delete duplicated "our", fix "reacheable"->"reachable" @AdamDang #4636
• Fixed typo, us-central should be eu-central @peterkuiper #4631
• Typo fix "need"->"needs", delete duplicated "." @AdamDang #4626
• Typo delete duplicated "is ", "utilty"->"utility" @AdamDang #4638
• Typo fix "previouslly"->"previously" @AdamDang #4625
• Updating comment so we do not have gofmt issues with go 1.9 and go 1.10 @chrislovecnm #4635
• Creating the keyset.yaml file if it does not exist @chrislovecnm #4582
• Reduce log levels: parsing pem block @justinsb #4646
• Updating K8s API calls to use CoreV1 kops node adapter @chrislovecnm #4644
• Typo fix "Kubernetes 1.9"->"Kubernetes v1.9" @AdamDang #4624
• Protokube Channel and RBAC @gambol99 #4651
• Add AWS x1e instances to the instance type supported by kops @ChienHuey,@justinsb #4593
• Updating verify scripts so that output is highlighted @chrislovecnm #4633
• keypair integration test: print diffs @justinsb #4648
• Updating to use CoreV1 in unit tests @chrislovecnm #4645
• Move ssh key functions to pkg/pki @justinsb #4653
• typo: anmed -> named @justinsb #4652
• Keypair: tweak Render logic @justinsb #4649
• Create lifecycle test against AWS mocks @justinsb #4569
• New images for alpha channel: 4.4.121 kernel @justinsb #4657
• alpha channel: k8s 1.7.13 & 1.8.8 @justinsb #4658
• alpha: bump to latest (64) COS image for GCE @justinsb #4659
• Promote alpha channel to stable @justinsb #4656
• Misc task code cleanups @justinsb #4660
• Add README to say what cloudmock is @justinsb #4655
• Bump alpha channels for CVE @mikesplain #4666
• More mocks - sufficient for privatecalico to roundtrip @justinsb #4654
• Typo fix "DNS wil be"->"DNS will be" @AdamDang #4667
• Unset certain environment variables before testing @rifelpet #4595
• Fix a mistake in componentconfig.go @AdamDang #4670
• Update status.go @AdamDang #4676
• Fix names of CloudFormation-created AutoScalingGroups @gwkunze #4669
• Fix error accompanying note in node_api_adapter.go @AdamDang #4671
• Update instancegroups.go @AdamDang #4681
• Fix routetable detection @justinsb #4661
• Define KeysetFormat type, embed into keyset @justinsb #4650
• Typo fix "command"->"command" @AdamDang #4682
• fix 'confimap'->'configmap' @muhongwei #4686
• Correct spelling mistake @muhongwei #4685
• [Calico] Fix delay setting up ip routes in new nodes @felipejfc #4589
• Typo fix in route53-mapper/README.md @AdamDang #4706
• Typo fix in kube-ingress-aws-controller/README.md @AdamDang #4707
• Centos: add selinux package dependencies @justinsb #4715
• Fix boilerplate scripts @justinsb #4713
• Add more logging around ELB attribute modification @justinsb #4705
• Move AWS resources into its own subpackage @justinsb #4708
• Fix shared network objects @justinsb #4711
• Don't tag shared VPCs @justinsb #4710
• Update boilerplate year @justinsb #4714
• cloudmock: fix locking around vpcs and subnets @justinsb #4704
• Typo fix in README.md @AdamDang #4716
• Fix kubeScheduler.usePolicyConfigMap - missing namespace flag @waldman #4726
• Improve logic around VPC detection @justinsb #4709
• cloudmock: fix prefix for RouteTableAssociation @justinsb #4712
• Validation: start to differentiate between validation failure and errors during validation @justinsb #4732
• Update kopeio-networking to 1.0.20180319 @justinsb #4731
• Validation: clean up unused node status functions @justinsb #4733
• Validation: Take a cluster object, not just the name @justinsb #4734
• Move DNS validation into validation @justinsb #4735
• Mount the iptables lock file @justinsb #4742
• add system:masters group to admin user in static token file @erks #4575
• Validation: simplify output rendering @justinsb #4736
• mockec2: more missing locking @justinsb #4743
• Validation: treat as error if insufficient nodes @justinsb #4703
• Fixed typos @szemek #4739
• Don't use ELB DNS name for internal ELBs @justinsb #4748
• use the primary cert from the ca cert bundle @polarbizzle #4744
• Release 1.9.0-alpha.2 @justinsb #4750
• Update instance_groups.md @AdamDang #4751
• Update cluster_upgrades_and_migrations.md @AdamDang #4756
• Update getting_started/aws.md @kmaris #4755
• Update networking.md @AdamDang #4754
• Update README.md @AdamDang #4752
• Bump stable/alpha channels to 1.9.0-alpha.2 @mikesplain #4757
• fix function comment error @jonyhy96 #4769
• Update addon_manager.md @AdamDang #4774
• fix some grammar mistakes @jonyhy96 #4773
• fix a grammar mistake @jonyhy96 #4771
• Validation: don't expect bastion nodes to join @justinsb #4775
• fix some grammar mistakes @jonyhy96 #4772
• intersectTags: return nil if comparing against nil @justinsb #4780
• Deletion: check if VPC is shared @justinsb #4776
• Add deletion to lifecycle test @justinsb #4777
• ElasticIP: Collect tags @justinsb #4782
• ElasticIP: Always tag @justinsb #4779
• Move routetable detection to new logic @justinsb #4778
• SecurityGroups: ensure owned security groups are tagged @justinsb #4785
• Tag InternetGateways with consistent tags @justinsb #4788
• Tag ElasticIP when owned @justinsb #4781
• Make sure volumes are tagged @justinsb #4784
• SecurityGroup deletion: recognize shared tags @justinsb #4786
• ElasticIP tags for cloudformation & terraform @justinsb #4789
• Add support for instance monitoring @vendrov #4695
• Check tags in lifecycle tests @justinsb #4787
• Support for auth plugins in channels @atopuzov #4765
• Dashboard : Fix CrashLoopBackOff (from K8S >= 1.8.10) @schweizerbolzonello #4783
• etcd-quorum-read flag: explicitly default to off for v2 @justinsb #4792
• ElasticIP deletion: Honor shared tags @justinsb #4790
• NAT gateway deletion: honor shared tag @justinsb #4791
• Add simple sanity check for 4758 @justinsb #4794
• Add Cilium as CNI plugin @nebril #4224
• Warn on VPC AdditionalCIDR changes @justinsb #4796
• kops release 1.9.0 alpha.3 @justinsb #4802
• fix some grammar mistakes @jonyhy96 #4803
• fix some grammar mistakes @jonyhy96 #4804
• kops toolbox dump: Add Subnets to dump @justinsb #4806
• apimachinery run to update generated files for EtcdQuorumRead flag @KashifSaadat #4810
• Bump channels to 1.9.0-alpha.3 @mikesplain #4812
• Typo fix defailt->default @AdamDang #4811
• correct some small mistake @sunlintong #4820
• fix a grammar mistake @jonyhy96 #4829
• resolve conflict @sunlintong #4841
• Bump ingress-nginx version to 0.12.0 @tossmilestone #4840
• Add AfterFiles dependencies to File tasks @louismunro #4760
• Update addon.go @AdamDang #4846
• typo fix @jonyhy96 #4845
• protokube: match device /root/dev/X as /dev/X @justinsb #4849
• Fix toolbox dump bug: store subnet in resource @justinsb #4848
• Add VPC to kops toolbox dump @justinsb #4805
• Typo fix in err messages @AdamDang #4850
• Export kubernetes client metrics from dns-controller. @tomwilkie #4612
• AWS: etcd volume provisioned IOPS support @sergeylanzman #4852
• digitalocean: external cloud controller addon @andrewsykim #4698
• Docs/update kube ingress aws controller security group walkthrough @Jberlinsky #4843
• digitalocean: nodeup & protokube support @andrewsykim #4697
• Add DigitalOcean VFS @andrewsykim #4858
• implement network task for OpenStack platform @zengchen1024 #4830
• Add metrics-server addon @itskingori #4581
• Validation around IOPS fields @sergeylanzman #4859
• add output support to terraform & cloudformation for iops volume @sergeylanzman #4860
• add network builder @zengchen1024 #4842
• update basic-requirements.md @sunlintong #4864
• Typo fix in err message @AdamDang #4870
• two spell mistake @sunlintong #4865
• Typo fix in error message @AdamDang #4869
• implement router task for OpenStack platform @zengchen1024 #4868
• add proxy mode flag to kube-proxy @sergeylanzman #4863
• Release 1.9.0-beta.1 @justinsb #4871
• spell dependencies --> dependencies @sunlintong #4861
• Implement vfs with AlibabaCloud OSS @ihac,@xh4n3 #4719
• Adding Mike and myself as reviewers @robinpercy #4874
• Fix some info errors @AdamDang #4876
• Typo fix in info message @AdamDang #4872
• Fixes port collision between dns-controller metrics and gossip. @tvi #4878
• removed sed from command to get AMI images @roffe #4888
• spell correct @sunlintong #4887
• correct spell in the code and the relative doc @sunlintong #4886
• Don't enable dns-controller prometheus metrics by default @justinsb #4892
• Document the ports we use, to avoid conflicts @justinsb #4891
• update download_config.md @sunlintong #4885
• fix spell mistakes in cluster_spec.md @sunlintong #4884
• update two file @sunlintong #4883
• digitalocean: support multiple droplets @andrewsykim #4881
• digitalocean: add kubelet hostname override @andrewsykim #4880
• typo fix @jonyhy96 #4879
• fix go vet error from util/pkg/vfs/ossfs.go @andrewsykim #4898
• Fix LDFLAGS for all future go1.10.* versions @mikesplain #4896
• digitalocean: dns operations should be idempotent @andrewsykim #4882
• coreos/containeros: restart kops-configuration service after docker drop-in is loaded @andrewsykim #4894
• update vsphere-development-status.md @sunlintong #4905
• three spell mistakes @sunlintong #4904
• add String method for OSSFS to fix go vet issue @xh4n3 #4901
• three spell mistakes @sunlintong #4902
• Release 1.9.0-beta.2 @justinsb #4907
• Updating API Machinery @chrislovecnm #4911
• protokube: also check for device symlinks @andrewsykim #4915
• digitalocean: list/delete resources @andrewsykim #4916
• Update channels to 1.9.0-beta.2 @mikesplain #4933
• Fix typo in api_updates @mikesplain #4932
• Typo fix an->and @AdamDang #4930
• Add go 1.10 testing to travis CI @tvi #4926
• digitalocean: use pagination for all list requests @andrewsykim #4923
• Fix spelling @inthecloud247 #4939
• Fix grammar mistake @mahuihuang #4936
• Update the recommended Ubuntu Image @ofersadgat #4934
• Typo fix dont'->don't @AdamDang #4929
• Update rules go and use more recent debian snapshot @mikesplain #4948
• fix typo @mahuihuang #4943
• digitalocean: external cloud controller manager avoid circular dependencies @andrewsykim #4947
• implement subnet task for OpenStack platform @zengchen1024 #4945
• Add warning about google cloud repository versions @tombull #4944
• fix version of kube-router at v0.1.0 @andrewsykim #4935
• Configurable log level for calico @edmeister #4928
• addons/cluster-autoscaler: Added healthchecks. @jpds #4925
• addons/cluster-autoscaler: Annotate for Prometheus by default. @jpds #4922
• Feature/4920 add authorization mode flag @chrisz100 #4924
• Add configurable dnsmasq params to KubeDNS @jamesmcminn96 #4919
• Update kube-dns to 1.14.9 @sergeylanzman #4851
• Avoid collisions in IAM ids @justinsb #4952
• Disable locksmithd on CoreOS if UpdatePolicy set @KashifSaadat #4909
• Pod Security Policies @gambol99 #3498
• Fix etcd Keypair change showing on every kops update when TLS enabled @KashifSaadat #4957
• Only do etcd backups on main @justinsb #4959
• Bump Weave Net to 2.3.0 @brb #4954
• Ignore shared-ownership tags on volumes @justinsb #4960