Skip to content

Latest commit

 

History

History
626 lines (541 loc) · 85.3 KB

CHANGELOG-1.13.md

File metadata and controls

626 lines (541 loc) · 85.3 KB
Raw

v1.13.0-beta.2

Documentation

Downloads for v1.13.0-beta.2

filename sha512 hash
kubernetes.tar.gz e8607473e2b3946a3655fa895c2b7dee74818b4c2701047fee5343ab6b2f2aa3d97b19b11c7e7aeaca322a95bf99cbb5a7dafca187922fd40eaf24daaaf3bc8d
kubernetes-src.tar.gz 6ca15ad729a82b41587e1dbbd4e9ad5447e202e8e7ee8c01c411090031ee3feb83f0cc65e211e8634a01e7c52d5f1f7b47cd2ac601708542227853f312401e8f

Client Binaries

filename sha512 hash
kubernetes-client-darwin-386.tar.gz 5727218280ea7c68350aa5cf04e3d3c346f97d462e3f60f5196e27358f71841e19523b277a5b8fe9cea4b8fa323c54a820ae1956937922bcb24524612435e699
kubernetes-client-darwin-amd64.tar.gz 3e3975a41da08135dc654a40acb86ce862b1f56a9361e0c38c9c99c5b5bcad970f2271ae9a17e03c3d6e13ed03176e5e80313b39a8a02680a3b6d806e33f3a1b
kubernetes-client-linux-386.tar.gz 26cfa99fbe09b20ebe3d2aebb4d08f0f9f2661d5533b94daf6c8354701b1e4ddb8981c10323073c0d06e52eeb0f68839726b684e4e2222b1be7b940ff6017c72
kubernetes-client-linux-amd64.tar.gz 42204953b02af81bb5f695c957aca9fa382609447ada5e3a9701da3e8bbd54923084e0b28dd5be455f39ec0dd5c4bf4e81704542d1ce64d7292c17f0a9b04a32
kubernetes-client-linux-arm.tar.gz c680c94699b0b319b654a4c1c0a9b7fc387c44fb22744f30049142b17c3fabd3ba5358904cf8d5ccb077d0fb96d0360d222616980a13f91fc4a64ba2afce35b8
kubernetes-client-linux-arm64.tar.gz aa997b3428979ba2652fd251c4c5ece87043472ebe2ee15d8a179e69ddbefd47e8030e9392c4f6659b8207fcfb45b2effb69d9736af7c6c82f4217c5e3ac89e1
kubernetes-client-linux-ppc64le.tar.gz 684dfc462d84d3902e322535997e57f7874003ab17c41508c057bc7c6220062cf57d0486086d28940d9b4c0e8b5ebead5d4a64ad6e23895ecd2f8841844a8527
kubernetes-client-linux-s390x.tar.gz ff98b3a23dfe436a12843eb388be9568cbc29c9328648a1d166518aac40841bd8d855916918259cd92a0cc465e376ab1cb4c7b2b92c1eee454a76495772dc7e1
kubernetes-client-windows-386.tar.gz 6897a0f59fb409526dae9c86680702f3d2a1dc68d145504ed2e98b05d8f1dcc9b6a977c1af17277775b64501c86d5392e2f052aded8aec0c0640d6e78f609b87
kubernetes-client-windows-amd64.tar.gz 6ed67eecb2b79ace8d428cbd4d07ef7d52ba4e5b3b44eb59d46aff99a7a862f158573b4c2678cbdd31ba060a0acd695fa2d8a29ad0c4e22516622c23d017c5cb

Server Binaries

filename sha512 hash
kubernetes-server-linux-amd64.tar.gz 351292b217c1c49b5c0241da11b4be0929a5d1645bec7dd05051930df8a70090b130d3ceef2482657db16dd6e4f71013075bcd727e741b497143bc6db67c134a
kubernetes-server-linux-arm.tar.gz 88f166a7b5a3f9d9c19a5b911adb6e8e4cac1a3323b83d681f13aaf7bb285b0d016b147b4168c886efeccb3d9052c7512c1f61f7a0f59e2ba324e2827f802712
kubernetes-server-linux-arm64.tar.gz fb4868a939eca18de17e0b606d1ab127712e277e01c02ffa96138a53973cd583bfc28cf9c2967906896740665fdb02ed53f01ef4341cad9718a8770779d99431
kubernetes-server-linux-ppc64le.tar.gz 47a4e8e96c1e8a8cc37eabd19194b9d174fa93c3feaf1384895f89c5c6836511eb9f4ff3c91dd84c05398b7d0ce2d49fd5b43ddb518b7b9ed706f224a48b18fa
kubernetes-server-linux-s390x.tar.gz 4e0823d1da55a71f001fcb07511a7b3416641ea93bfbd56b1e1e435c0a78bafbcecc873ba43808985b66b01464cbf9b60e9ad057ec78fea5080de8a5f7684bab

Node Binaries

filename sha512 hash
kubernetes-node-linux-amd64.tar.gz e21964063b80f52e387cd35826f3081ad0a3b62608d182e008b8b76f572442905e4b0625839d3ff28a353f1d686f8dbd15104e6b27126e3c6a579704b2106154
kubernetes-node-linux-arm.tar.gz cb665911af59a1cf86e5d66a4cdc134dc412e9e479dd89fa0bbbaeb8324eb87d090ffb0985e31bb12b5e063bfe8c045ac797931cfb856287b05f63b53b26a524
kubernetes-node-linux-arm64.tar.gz c172126829aea38e2238af6b62035abad6ed08d041175b0bf99792b7c608a0b27dd7f80b5ad301843cbdfee7ed2825aee9ea52d69752759a79e1148529ad1999
kubernetes-node-linux-ppc64le.tar.gz 0367940078ea9b4d46778b8406840fd2925f612304b5fa5b675fc07d5457bea524ebaf0378691af27f97d0c0fe39fffc6ad75f6db10139f377e52d0d3888252a
kubernetes-node-linux-s390x.tar.gz 74382ed862ae099b91ce6056b85b7ee4f075fbdb4e737a8448c92e20fe3a0717047a138c23e13b0a8bda3e457f4299f412ca31768e8c87e57c9faf95b7f9adda
kubernetes-node-windows-amd64.tar.gz 9164c4eae920c727965caae046e1b2daabf4822e2dee2260697b22e5208a0d8c6e7ce152a5df7852e8203d4771e6dc6bf9f63159324facb1ab81ea8f212b55fb

Changelog since v1.13.0-beta.1

Other notable changes

  • Fix missing flags in kube-apiserver --help. (#70204, @imjching)
  • kubeadm init correctly uses --node-name and --cri-socket when --config option is also used (#71323, @bart0sh)
  • API server flag --experimental-encryption-provider-config was renamed to --encryption-provider-config. The old flag is accepted with a warning but will be removed in 1.14. (#71206, @stlaz)
  • Fix missing flags in *-controller-manager --help. (#71298, @stewart-yu)
  • Clear pod binding cache on bind error to make sure stale pod binding cache will not be used. (#71212, @cofyc)
  • kubeadm: always pass spec.nodeName as --hostname-override for kube-proxy (#71283, @Klaven)
  • kubeadm join correctly uses --node-name and --cri-socket when --config option is also used (#71270, @bart0sh)
  • apiserver can be configured to reject requests that cannot be audit-logged. (#65763, @x13n)
  • Kubelet Device Plugin Registration directory changed from from {kubelet_root_dir}/plugins/ to {kubelet_root_dir}/plugins_registry/. Any drivers (CSI or device plugin) that were using the old path must be updated to work with this version. (#70494, @RenaudWasTaken)
  • When the BoundServiceAccountTokenVolumes Alpha feature is enabled, ServiceAccount volumes now use a projected volume source and their names have the prefix "kube-api-access". (#69848, @mikedanese)

v1.13.0-beta.1

Documentation

Downloads for v1.13.0-beta.1

filename sha512 hash
kubernetes.tar.gz 78245b2357a5eeafd193d28f86655327edce7bbc4da142c826eba5f5c05a624cd30b2551f63da37f38e9ca3fcf6990d77a3a068cbfc9075ff19fcdb235db9acb
kubernetes-src.tar.gz 880c5a8b16215bc58b307922474703048020b38be1d41672425cd07bdcf0626a88f04a080eac13ebb63c42214454420063289ba147d0a6cdf8dc3fe942382964

Client Binaries

filename sha512 hash
kubernetes-client-darwin-386.tar.gz 0f804c77ef6122b4b6586a507179fe0f1a383752342b3e5575e09223fdda9731acd89631ad236969e19ba1016adb28cfdb62f5b7a2b594bd68c780a5066cf370
kubernetes-client-darwin-amd64.tar.gz 0bdbd8003bcbecb4494b4778411e7d057067e78a99a7e8e8e45a3982cbe476dab822bccdeb73b989dfc5222ab8a09554f25dfb1f3d48622a1db3a45088799e49
kubernetes-client-linux-386.tar.gz 522795df77ff8543251232863cb36fe2d501671e04a5279a112aa3ffa784de93f3f567af50fffa5367fd27793e595b3e6b8c66b0cfbc99ecadbfbb279fe9e9c1
kubernetes-client-linux-amd64.tar.gz b6481bae237e6971f7b9cc039d3b7e62d49ddd48d52dd979432fa0318a8e3e5bf1677298ffee5c3d9af07e32c50eb94948509218302f8ba966abcc27e391b282
kubernetes-client-linux-arm.tar.gz 45b8fa2557bb742a8ce16e0a69fa64fe898509418c6f9099a24bf1ab20c7d5de61f2e79f2de46c660c53eec78c45d5606a5ae5144f1f47dca54d71d353566596
kubernetes-client-linux-arm64.tar.gz 475b823a5e2c4c6e1bc49f35fbef45d1fc6e6279f5335762bad05d0f695fd033a3a81bd90ea854d8ee2c9b41f12b22f10606a2c058ea178f0b07ddb418a69499
kubernetes-client-linux-ppc64le.tar.gz bc289b249051e9918f8f842bb98bf4d0b8951709fe5b65c2185f04b78213ec0099973f3459ffb062342a0a01739f3919758bb2724566c5e24cb30546af68fad8
kubernetes-client-linux-s390x.tar.gz 0935e0ad23a61d570de087e72f22bc3da2a34c19bb5aea0ab342f91655b4a02ba781448c35b837e0174fcd1b5d9cfb5550a1b9271c10f67a93975088df737337
kubernetes-client-windows-386.tar.gz 4833425ff040983b841722a00edd2cfa56f85099658ae04890c4e2262931e3c74d7276f3e95a74fbdd6934f32bca41297e72209ffaa1c6192bc9b6866d78582e
kubernetes-client-windows-amd64.tar.gz 156a5328834055f7b9732c762cc917cfdbf2d2fc67dd80ba89ae7dcb9c2e7d271fc4fe2b2074f98fc308f2282138b10c86becaf6ed235de0d0d3e66a6d419c5a

Server Binaries

filename sha512 hash
kubernetes-server-linux-amd64.tar.gz 9435be5cced10252954be579408e2a253eb51dd7b649417f1e91679bce33f6ff735f1c24687994a133155b19453fbcfff4555938134001961ece419b746ecefe
kubernetes-server-linux-arm.tar.gz 8dc3d4a0c09830831efd77fdf193ed9ccc1247bd981b4811192cac38cf5ffd04042575632d4259af933959e6e774b10ac2f9e3a79903629f36dad616dd99b5d5
kubernetes-server-linux-arm64.tar.gz f2549f87f21ea44c5d776a706c59bb2ea61d7f2cca304850aa6ad5b09c4486b16ae1be19ab9f9166a2f9f9d2ffbef6d38676c54104d424a855ce445ca6252607
kubernetes-server-linux-ppc64le.tar.gz 0c0671eaf7cf7262c95411930311bb4610f89583431738149f0ee7f8f6a55b094322fc6717db1cdd496944c66216305ac4a5e3ea782ab1c2817e23a4bc32ff9f
kubernetes-server-linux-s390x.tar.gz ff24909b0b044924d241d6aeac9e9b4f0696c0ca7e973d56a874b02b613a45d00c30c5709326d3ad02f0e30742c1aa412e40a061e4c38631c1a538801273e565

Node Binaries

filename sha512 hash
kubernetes-node-linux-amd64.tar.gz 235b1c4348b5779ca71a5f63121ff6a162db02bb24b4d815ec73412afedbe0ce5f969a40569e709017fbaf8f51e952d6fbe740ab3daf5d6fc932d8fac3f74c07
kubernetes-node-linux-arm.tar.gz cd23813419a74983bdd3a3104e20684e947ef7302dcfa1802132439b21e7621ad129621c633094e74a50c2ef57a83685f425b345898e7f501f7b0b639d8ba215
kubernetes-node-linux-arm64.tar.gz fb6283dae828f8d9275a05c6a4ea27bc1136e8e8253b5ddac52c8254813b11e8e4373038bf145a51d9680bb14dc276f8c7852e87d553cead5811550bf21eab5a
kubernetes-node-linux-ppc64le.tar.gz f910922d422b65f6b6a8d7762a23048991695496c0fc07c3dc4f1a81e32d250d592851a2f5b19588f7ed65281495d4187e8ab61cb4711102f2d0c8766267bf5b
kubernetes-node-linux-s390x.tar.gz d895fed57caf038afe0087ff44d2adfdd8955d18135adad9935952702e9abf2bc07289e1a7545b30f4d9f7ab154c642b4c08d74070c66f5c917196cbb37b9692
kubernetes-node-windows-amd64.tar.gz 4bc09e54935d2cb4d2bad7db06831d040cc03906d8934575932ed6eab5f0bc9ab67cdb2720c919c89d8b29388bb61f228c10167c9bc9eec46bbdc10c6381500e

Changelog since v1.13.0-alpha.3

Action Required

  • ACTION REQUIRED: The Node.Status.Volumes.Attached.DevicePath fields is deprecated for CSI volumes and will be unset in a future release (#71095, @msau42)

Other notable changes

  • Raw block volume support is promoted to beta, and enabled by default. This is accessible via the volumeDevices container field in pod specs, and the volumeMode field in persistent volume and persistent volume claims definitions. (#71167, @msau42)
  • Fix a scheduler panic due to internal cache inconsistency (#71063, @Huang-Wei)
  • Fix a potential bug that scheduler preempts unnecessary pods. (#70898, @Huang-Wei)
  • The API server encryption configuration file format has graduated to stable and moved to apiVersion: apiserver.config.k8s.io/v1 and kind: EncryptionConfiguration. (#67383, @stlaz)
  • kubelet now supports log-file option to write logs directly to a specific file (#70917, @dims)
  • kubeadm now supports the --image-repository flag for customizing what registry to pull images from (#71135, @luxas)
  • timeouts set in ListOptions for clients will also be respected locally (#70998, @deads2k)
  • IPVS proxier now set net/ipv4/vs/conn_reuse_mode to 0 by default, which will highly improve IPVS proxier performance. (#71114, @Lion-Wei)
  • StatefulSet is supported in kubectl autoscale command (#71103, @Pingan2017)
  • Report kube-scheduler unhealthy if leader election is deadlocked. (#71085, @bsalamat)
  • apiserver: fixes handling and logging of panics in REST handlers (#71076, @liggitt)
  • kubelets are no longer allowed to delete their own Node API object. Prior to 1.11, in rare circumstances related to cloudprovider node ID changes, kubelets would attempt to delete/recreate their Node object at startup. Kubelets older than 1.11 are not supported running against a v1.13+ API server. If an unsupported legacy kubelet encounters this situation, a cluster admin can remove the Node object: (#71021, @liggitt) * kubectl delete node/<nodeName>
    • or grant self-deletion permission explicitly:
      • kubectl create clusterrole self-deleting-nodes --verb=delete --resource=nodes
      • kubectl create clusterrolebinding self-deleting-nodes --clusterrole=self-deleting-nodes --group=system:nodes
  • Kubernetes v1.13 moves support for Container Storage Interface to GA. As part of this move Kubernetes now supports CSI v1.0.0 and drops support for CSI 0.3 and older releases. Older CSI drivers must be updated to CSI 1.0 in order to work with Kubernetes 1.13+. (#71020, @saad-ali)
  • Remove deprecated kubectl command aliases 'run-container' (#70728, @Pingan2017)
  • kubeadm: enable strict unmarshaling of YAML configuration files and show warnings for unknown and duplicate fields. (#70901, @neolit123)
  • For kube-up and derived configurations, CoreDNS will honor master taints, for consistency with kube-dns behavior. (#70868, @justinsb)
  • CoreDNS is now version 1.2.6 (#70799, @rajansandeep)
  • kubeadm: Use advertise-client-urls instead of listen-client-urls as and etcd-servers options for apiserver. (#69827, @tomkukral)
  • Add option to create CSRs instead of certificates for kubeadm init phase certs and kubeadm alpha certs renew (#70809, @liztio)
  • Add a kubelet socket which serves an grpc service containing the devices used by containers on the node. (#70508, @dashpole)
  • kube-apiserver: the NodeRestriction admission plugin now prevents kubelets from modifying Node labels prefixed with node-restriction.kubernetes.io/. The node-restriction.kubernetes.io/ label prefix is reserved for cluster administrators to use for labeling Node objects to target workloads to nodes in a way that kubelets cannot modify or spoof. (#68267, @liggitt)
    • kubelet: it is now deprecated to use the --node-labels flag to set kubernetes.io/ and k8s.io/-prefixed labels other than the following labels:
      • kubernetes.io/hostname
      • kubernetes.io/instance-type
      • kubernetes.io/os
      • kubernetes.io/arch
      • beta.kubernetes.io/instance-type
      • beta.kubernetes.io/os
      • beta.kubernetes.io/arch
      • failure-domain.kubernetes.io/zone
      • failure-domain.kubernetes.io/region
      • failure-domain.beta.kubernetes.io/zone
      • failure-domain.beta.kubernetes.io/region
      • [*.]kubelet.kubernetes.io/*
      • [*.]node.kubernetes.io/*
    • Setting other kubernetes.io/- and k8s.io/-prefixed labels using the --node-labels flag will produce a warning in v1.13, and be disallowed in v1.15. Setting labels that are not prefixed with kubernetes.io/ or k8s.io/ is still permitted.
  • Adds DynamicAuditing feature which allows for the configuration of audit webhooks through the use of an AuditSink API object. (#67257, @pbarker)
  • The Kubelet plugin registration mechanism used by device plugins and CSI plugins is now GA (#70559, @vladimirvivien)
  • CSIPersistentVolume feature, i.e. PersistentVolumes with CSIPersistentVolumeSource, is GA. (#69929, @jsafrane)
    • CSIPersistentVolume feature gate is now deprecated and will be removed according to deprecation policy.
  • kubectl: support multiple arguments for cordon/uncordon and drain (#68655, @goodluckbot)
  • The kube-apiserver's healthz now takes in an optional query parameter which allows you to disable health checks from causing healthz failures. (#70676, @logicalhan)
  • client-go: fixes sending oversized data frames to spdystreams in remotecommand.NewSPDYExecutor (#70999, @liggitt)
  • kube-controller-manager no longer removes ownerReferences from ResourceQuota objects (#70035, @liggitt)
  • Introduces support for running a nodelocal dns cache. It is disabled by default, can be enabled by setting KUBE_ENABLE_NODELOCAL_DNS=true (#70555, @prameshj)
    • An ip address is required for the cache instance to listen for requests on, default is a link local ip address of value 169.254.20.10
  • Fix dry-run output in kubectl apply --prune (#69344, @zegl)
  • kubectl run now generates apps/v1 deployments by default (#71006, @liggitt)
  • kubeadm reset now outputs instructions about manual iptables rules cleanup. (#70874, @rdodev)
  • Recognize newer docker versions without -ce/-ee suffix: 18.09.0 (#71001, @thomas-riccardi)
  • "unfinished_work_microseconds" is added to the workqueue metrics; it can be used to detect stuck worker threads. (kube-controller-manager runs many workqueues.) (#70884, @lavalamp)
  • add readiness gates in extended output for pods (#70775, @freehan)
  • add Ready column and improve human-readable output of Deployments and StatefulSets (#70466, @Pingan2017)
  • Kubeadm now respects the custom image registry configuration across joins and upgrades. Kubeadm passes the custom registry to the kubelet for a custom pause container. (#70603, @chuckha)
  • kubeadm: deprecate the DynamicKubeletConfig feature gate. The functionality is still accessible by using the kubeadm alpha kubelet enable-dynamic command. (#70849, @yagonobre)
  • Add kubelet_container_log_size_bytes metric representing the log file size of a container. (#70749, @brancz)
  • kubeadm: remove the AuditPolicyConfiguration feature gate (#70807, @Klaven)
  • Kubeadm: attributes for join --control-plane workflow are now grouped into a dedicated JoinControlPlane struct (#70870, @fabriziopandini)
  • Addon configuration is introduced in the kubeadm config API, while feature flag CoreDNS is now deprecated. (#70024, @fabriziopandini)
  • Fixes ability for admin/edit/view users to see controller revisions, needed for kubectl rollout commands (#70699, @liggitt)
  • kubeadm pre-pulls Etcd image only if external Etcd is not used and (#70743, @bart0sh)
    • --etcd-upgrade=false is not specified
  • Add support for CRD conversion webhook (#67006, @mbohlool)
  • Delete node lease if the corresponding node is deleted (#70034, @wangzhen127)
  • In a future release the kubectl convert command will be deprecated. (#70820, @seans3)
  • kubeadm: UnifiedControlPlaneImage is replaced by UseHyperKubeImage boolean value. (#70793, @rosti)
  • kubeadm v1beta1 API: InitConfiguration.APIEndpoint has been renamed to .LocalAPIEndpoint (#70761, @luxas)
  • Breaking change: CSINodeInfo split into Spec and Status. New fields Available and VolumePluginMechanism added to CSINodeInfo csi-api object. CSIDriverInfo no longer deleted on Driver uninstallation, instead Available flag is set to false. (#70515, @davidz627)
  • GCERegionalPersistentDisk feature is GA now! (#70716, @jingxu97)
  • Add secure port 10259 to the kube-scheduler (enabled by default) and deprecate old insecure port 10251. Without further flags self-signed certs are created on startup in memory. (#69663, @sttts)
  • --feature-gates argument has been removed from the kubeadm join command. Feature gates will be retrieved from the cluster configuration during the join process. (#70755, @ereslibre)
  • [kubeadm] Updates version of CoreDNS to 1.2.6 (#70796, @detiber)
  • kubelet: When node lease feature is enabled, kubelet reports node status to api server only if there is some change or it didn't report over last report interval. (#69753, @wangzhen127)
  • Self hosted is no longer supported in the standard workflow. The feature flags have been removed and your self hosted cluster is no longer able to upgrade via kubeadm. (#69878, @Klaven)
  • vSphereVolume implements Raw Block Volume Support (#68761, @fanzhangio)
  • [GCE] Filter out spammy audit logs from cluster autoscaler. (#70696, @loburm)
  • CRD supports multi-version Schema, Subresources and AdditionalPrintColumns (NOTE that CRDs created prior to 1.13 populated the top-level additionalPrinterColumns field by default. To apply an update that changes to per-version additionalPrinterColumns, the top-level additionalPrinterColumns field must be explicitly set to null). (#70211, @roycaihw)
  • Fixes a bug in previous releases where a pod could be placed inside another pod's cgroup when specifying --cgroup-root (#70678, @dashpole)
  • Upgrade golang.org/x/net image to release-branch.go1.10 (#70663, @wenjiaswe)
  • New addon in addon manager that automatically installs CSI CRDs if CSIDriverRegistry or CSINodeInfo feature gates are true. (#70193, @saad-ali)
  • delegated authorization can now allow unrestricted access for system:masters like the main kube-apiserver (#70671, @deads2k)
  • Update to use go1.11.2 (#70665, @cblecker)
  • Add dns capabilities for Windows CNI plugins: (#67435, @feiskyer)
    • "dns" {
    • "servers": ["10.0.0.10"],
    • "searches": ["default.svc.cluster.local","svc.cluster.local","cluster.local"],
    • "options": []
    • }
  • The VolumeScheduling feature is GA. The VolumeScheduling feature gate is deprecated and will be removed in a future release. (#70673, @msau42)
  • Go clients created from a kubeconfig that specifies a TokenFile now periodically reload the token from the specified file. (#70606, @mikedanese)
  • kubeadm: validate kubeconfig files in case of external CA mode. (#70537, @yagonobre)
  • kube-apiserver: --audit-webhook-version and --audit-log-version now default to audit.k8s.io/v1 if unspecified (#70476, @charrywanganthony)
  • kubeadm: timeoutForControlPlane is introduced as part of the API Server config, that controls the timeout for the wait for control plane to be up. Default value is 4 minutes. (#70480, @rosti)
  • kubeadm: The writable config file option for extra volumes is renamed to readOnly with a reversed meaning. With readOnly defaulted to false (as in pod specs). (#70495, @rosti)
  • remove retry operation on attach/detach azure disk (#70568, @andyzhangx)
  • Fix CSI volume limits not showing up in node's capacity and allocatable (#70540, @gnufied)
  • Flex volume plugins now support expandvolume (to increase underlying volume capacity) and expanfs (resize filesystem) commands that Flex plugin authors can implement to support expanding in use Flex PersistentVolumes (#67851, @aniket-s-kulkarni)
  • kubeadm: Control plane component configs are separated into ClusterConfiguration sub-structs. (#70371, @rosti)
  • The MountPropagation feature is unconditionally enabled in v1.13, and can no longer be disabled. (#68230, @bertinatto)
  • add azure UltraSSD, StandardSSD disk type support (#70477, @andyzhangx)
  • The OwnerReferencesPermissionEnforcement admission plugin now checks authorization for the correct scope (namespaced or cluster-scoped) of the owner resource type. Previously, it always checked permissions at the same scope as the child resource. (#70389, @caesarxuchao)
  • Ensure orphan public IPs on Azure deleted when service recreated with the same name. (#70463, @feiskyer)
  • kubectl apply can now change a deployment strategy from rollout to recreate without explicitly clearing the rollout-related fields (#70436, @liggitt)
  • Fix cloud-controller-manager crash when using OpenStack provider and PersistentVolume initializing controller (#70459, @mvladev)

v1.13.0-alpha.3

Documentation

Downloads for v1.13.0-alpha.3

filename sha512 hash
kubernetes.tar.gz 1d50cfd34306ace7354516125c45f8c546bba3ca5081af2b21969b535967d302821c06e7d4d590ba05f3e1e89ba56cc3d890b2e5bf2e07456532ac28e7c6c4a8
kubernetes-src.tar.gz bf097b99d7b9af15bc1d592ee3782da1e811d8eb68dc9ae9d287589ce9174d3743beaf51422283c42ad03775e43839954bdeb44b1aa5707f73eebabed0cc199e

Client Binaries

filename sha512 hash
kubernetes-client-darwin-386.tar.gz 77778ae2887eda52ee716fb0e843c17b2705b1284a67cdf53f91292eb7f1055ef942be1ae0eac25ad9f4c9062c802fd57943e57578113f875f0d1f8a227bbb25
kubernetes-client-darwin-amd64.tar.gz b3399767df12b71ee4b7b30126bd8001a0c1396161eb7535d797fd5847c55bccc18fb475f1639c3bf8e5f5c484a61025108c01e35f71417a405e75580c3990f6
kubernetes-client-linux-386.tar.gz 5ef0d318ff8da28c332ae25164e5a441272d2ee8ef2ac26438a47fe3e7e645ed0b132325243f3f33c93a8681431a117f6207893f0e5270738aacfee16d8bbd32
kubernetes-client-linux-amd64.tar.gz 1f429eae5b0b1e39b1d4d30e3220a82d0ae6672a6f4b34a05246c3efc131a236f79e5876d7a98c56d98fbf243b96cfd8db5d1ab73905df9e000d7af2b710fcf3
kubernetes-client-linux-arm.tar.gz 5583aecdc9b4a54a4aa904fc1de66400f50628969e31b5a63ab1d3b6628e3c547a9cef9c2bc9e53a0eeb0155fa0f745f7ee47e92166ce66d0c79199ff20c41de
kubernetes-client-linux-arm64.tar.gz 2453b9100c06b11e8c424d59cfd1c5e111c22b596191a9cfb0b330d198abecd982e19eb2ac38d91c3d1ef226c9533c4f9a210b88295029985739e86363905de5
kubernetes-client-linux-ppc64le.tar.gz 4991ec4c19a82d50caed78bc8db51e7cdcd1f2896dfcaa45d84f347a72fe7ee0d0280c897af54afec93f548d2ce247cf70d2b439024752ff701b80b67c385913
kubernetes-client-linux-s390x.tar.gz c55f2802afb2e5d261bb26b6c396df8ebe6b95913ddab1e124cf177f59a00524a26cc9dd74cbf06cc7a6a2207ccba2d3a8585f20a37485214d9b1bebb27fdde7
kubernetes-client-windows-386.tar.gz df78465267e35ef078c3c0fd33f8898a9df26fbf411df3ed3283fbdc2e79380693abe2a2815d5a4d53742135db4b5a0a480ce301817ede5c0674b12ac9c9bac9
kubernetes-client-windows-amd64.tar.gz 5b93fdaaa931ef8e24196e53c484f91ef9e50b7d11e1053ccb61b2d6bdc8164767dd1d885cdc4949fdb7ed05cfbc7c9f7cc3468ad7affc22f849836b311d855f

Server Binaries

filename sha512 hash
kubernetes-server-linux-amd64.tar.gz 922a93ce677e686e594c11db75e1969c995b23062bba511bff4a43d3a530e21e1d15cbe9b38d06af407de5a6c141f3b10cf24f50b848ed6b36e701249cece2c3
kubernetes-server-linux-arm.tar.gz 5dd550b58dedf25df020e66f1526e80c50b46d2df3ddd241bd02b6ebf10308599e7739917cbd9a3d2d3e787078d1271c4e3333f7f343a8a754ac5c08dedba0c9
kubernetes-server-linux-arm64.tar.gz 3e1037e71d85a74cd5d40dd836bd442b2dcc457f8ccc8247e4537f3deca6f99d6805857c44b4fd69a7655308a3b0b4be43faaf74017cc3e26e8ba81e84968f33
kubernetes-server-linux-ppc64le.tar.gz a89c46b558613ad09efe44a81574ad18157a787d1e9c5d09c98d3911b499573cd9b9845b7a7526d4de5b93887267bedd96d043f79799552639b2168d3fea49ab
kubernetes-server-linux-s390x.tar.gz 47a68668e38ac1b8cb801f4bff3b15060cd88801f446ebfbf06125dbc9aef52be79faa94acee65af46b93512af6f15c1f9f598324a368b82996f5a0f9aca0d14

Node Binaries

filename sha512 hash
kubernetes-node-linux-amd64.tar.gz 74d5d46ac6ba336fa8aaf55d0a15860f6ebde2ff58d377ca93063593da12fbd4c758fe92c6b3285df0e4cc23c354ce5802ae3f7c38ad4e63f9d1eeaef41f2f2b
kubernetes-node-linux-arm.tar.gz 90372cb5270ffe6179d5d7efd3fff6aa029f73853805038fef1a6f92683399d692aee7790eacc3a59681f66e2bd21b76c3abd87bef6404382782ec82fb726d59
kubernetes-node-linux-arm64.tar.gz 09693303a1a8489d9599d32f7fbf549d18f31eb53671fa2ed342fe5089f2fba9322d8c52088b141da2414bb2b7f8352634cf84f0c72f3a58afd057629c3e8e5b
kubernetes-node-linux-ppc64le.tar.gz cbdb3b9ffd9be524ec0b38d72b0545b6dd1b3b789747f41a661fd7cbeffe942eb592c7e928a61e26152e7402b4894f5a74aad09cf2243d726b3b311d41cb0674
kubernetes-node-linux-s390x.tar.gz fc296b386bc03bf10773559118cd4a3d5be3d4c296f09748507fac812a1c791b435881b2ae425846632404f7f53f3f3bf54fc582fb8aa4895310186371dbacfd
kubernetes-node-windows-amd64.tar.gz ae79c62fcb0654a62606d65cf131188d93e4a10787a862e7b0363269942df19543b55fd119ec6ff73578b24db7774235611956103fe5e153eddf450750c4bbee

Changelog since v1.13.0-alpha.2

Other notable changes

  • kubelet --system-reserved and --kube-reserved are supported now on Windows nodes (#69960, @feiskyer)
  • CSI drivers now have access to mountOptions defined on the storage class when attaching volumes. (#67898, @bswartz)
  • The kubectl plugin list command will now display discovered plugin paths in the same order as they are found in a user's PATH variable. (#70443, @juanvallejo)
  • Handle Windows named pipes in host mounts. (#69484, @ddebroy)
  • kubeadm: Multiple API server endpoints support upon join is removed as it is now redundant. (#69812, @rosti)
  • OpenAPI spec marks delete request's body parameter as optional (#70032, @iamneha)
  • kube-controller-manager and cloud-controller-manager now hold generated serving certificates in-memory unless a writeable location is specified with --cert-dir (#69884, @liggitt)
  • Scheduler only activates unschedulable pods if node's scheduling related properties change. (#70366, @mlmhl)
  • --api-audiences now defaults to the --service-account-issuer if the issuer is provided but the API audience is not. (#70308, @mikedanese)
  • Refactor scheduler_test.go to use a fake k8s client. (#70290, @tossmilestone)
  • kubectl rollout undo now returns errors when attempting to rollback a deployment to a non-existent revision (#70039, @liggitt)
    • kubectl rollout undo no longer uses the deprecated extensions/v1beta1 rollback API, which means that Events are no longer emitted when rolling back a deployment
    • The builtin system:csi-external-provisioner and system:csi-external-attacher cluster roles (#69868, @pohly)
      • are deprecated and will not be updated for deployments of CSI sidecar container versions >= 0.4.
      • Deployments with the current CSI sidecar containers have to provide their own RBAC
      • definitions. The reason is that the rules depend on how the sidecar containers are used,
      • which is defined by the deployment.
  • Use debian-base instead of busybox as base image for server images (#70245, @ixdy)
  • add support for projected volume in describe function (#70158, @WanLinghao)
  • Speedup process lookup in /proc (#66367, @cpuguy83)
  • Kubeadm reset now clean up custom etcd data path (#70003, @yagonobre)
  • We changed when the metadata.generation of a custom resource (CR) increments. (#69059, @caesarxuchao)
    • If the CR participates the spec/status convention, the metadata.generation of the CR increments when there is any change, except for the changes to the metadata or the changes to the status.
    • If the CR does not participate the spec/status convention, the metadata.generation of the CR increments when there is any change to the CR, except for changes to the metadata.
    • A CR is considered to participate the spec/status convention if and only if the "CustomResourceSubresources" feature gate is turned on and the CRD has .spec.subresources.status={}.
  • Improve Azure instance metadata handling by adding caches. (#70353, @feiskyer)
  • adding cn-northwest-1 for AWS China Ningxia region (#70155, @pahud)
  • "kubectl get" no longer exits before printing all of its results if an error is found (#70311, @juanvallejo)
  • kubeadm now automatically creates a new stacked etcd member when joining a new control plane node (does not applies to external etcd) (#69486, @fabriziopandini)
  • Critical pod annotation is deprecated. Pod priority should be used instead to mark pods as critical. (#70298, @bsalamat)
  • Display the usage of ephemeral-storage when using kubectl describe node (#70268, @Pingan2017)
  • Added functionality to enable br_netfilter and ip_forward for debian packages to improve kubeadm support for CRI runtime besides Docker. (#70152, @ashwanikhemani)
  • Add regions ap-northeast-3 and eu-west-3 to the list of well known AWS regions. (#70252, @nckturner)
  • Remove kube-controller-manager flag '--insecure-experimental-approve-all-kubelet-csrs-for-group'(deprecated in v1.7) (#69209, @Pingan2017)
  • GCE/GKE load balancer health check default interval changes from 2 seconds to 8 seconds, unhealthyThreshold to 3. (#70099, @grayluck)
    • Health check parameters are configurable to be bigger than default values.
  • The kubectl wait command must handle when a watch returns an error vs closing by printing out the error and retrying the watch. (#69389, @smarterclayton)
  • Updates to use debian-iptables v11.0, debian-hyperkube-base 0.12.0, and kube-addon-manager:v8.9. (#70209, @ixdy)
  • Fixed patch/update operations on multi-version custom resources (#70087, @liggitt)
  • When --rotate-server-certificates is enabled, kubelet will no longer request a new certificate on startup if the current certificate on disk is satisfactory. (#69991, @agunnerson-ibm)
    • Support for passing unknown provider names to the E2E test binaries is going to be deprecated. Use --provider=skeleton (no ssh access) or --provider=local (local cluster with ssh) instead. (#70141, @pohly)
  • Add scheduler benchmark tests for PodAffinity and NodeAffinity. (#69898, @Huang-Wei)
  • fix azure disk attachment error on Linux (#70002, @andyzhangx)

v1.13.0-alpha.2

Documentation

Downloads for v1.13.0-alpha.2

filename sha512 hash
kubernetes.tar.gz cbe7ef29c7e7bbed82e173289f5f84d7a85ee4965cc5b7ccd16cf8236a3b8171bb8f52011d00ea4dd1119cfeee32a3326260e968038431f2834f194e84f6f070
kubernetes-src.tar.gz 8b0b8e1b635cd849c2974d755fe174f0ce8fe8c690721d8ac6312683bbd2ca2c6f7eada38e4e470d3a0172138b10a994fa3bebc01abd76d835431660247e8a71

Client Binaries

filename sha512 hash
kubernetes-client-darwin-386.tar.gz fca661a5001e7f368374d0805f20910be24baa485bf4ae5d993185b974f70ff7241497e7a130658dca69abf335fd581c0f5be22de4f9937f32e9fb20fbd0f1e9
kubernetes-client-darwin-amd64.tar.gz d31dfea475981c7f7b758c7f201aa5b866db48d87942c79d0a12d464b7cdf501dba2255282c72b53928ccac215282fc8c0a9069a7443e9683bbf39a59814d8c3
kubernetes-client-linux-386.tar.gz fecf8362c572fff48952fd2748ddcb9d375462cb484670cda4fda1387eb692713be0a323e93746bb1845a4ef3b15df288430c8b4a5e4f2892c388bb84a66ec9a
kubernetes-client-linux-amd64.tar.gz 136cb82ac94bcd791d56e997a948a7e1bee4af03bcc69ce9c835895cdda75524f5916756c778ff8aa693624289824eaee4aff1e62a6d95d18f9b69a7473a3fe9
kubernetes-client-linux-arm.tar.gz e561c37895edef44614ecd59f497d393275ee62455b6269b169a891873d661d46cbf68e6148447f142ebdddb45bd5c01f6927d8463e2e1c4072358fec205e53e
kubernetes-client-linux-arm64.tar.gz c0d5eb49763e8bf50b5e8e3785c7889fecbd8bf7c0b3c18250fa894a1c5e58a14f796f7526279dbf41d5d47e69114d39e37a62403ff4abb1cc0cd20bd48c1c5a
kubernetes-client-linux-ppc64le.tar.gz a5a8c150af163e7c726662eeddfc3de8e43f123daaa100b8e82c9bc786313a5ce8135cbaadd41ebbb6c2307aeebdadf43fc84037a5ac9d3c5d6e9052b7fc615b
kubernetes-client-linux-s390x.tar.gz fd162e0244e107f1892d79029f3452cdba84d8616ad1b15eebe197afb3b536328cd8cba9c73c0ce1cd8ac6faed9e0a4613d487bf07b45341fadf0d940062bafa
kubernetes-client-windows-386.tar.gz e01fedec8f700e037bc43cb13bc916b85601cd1c9361a0f63fd27092640f89d2faaff4a6157638af8af52538c5f7fa75d9c7674477a45e0215fd505095a62f21
kubernetes-client-windows-amd64.tar.gz d2601efcfa6a4ba8a017e9cac571fb454b21b7700a7b3f8e2fbabdd5301545ef2459da93eca3684c1aa73ea6a6d87bae0e27fffc8b05ed93729004ebbb9e3879

Server Binaries

filename sha512 hash
kubernetes-server-linux-amd64.tar.gz 4dda298d44bc309f250c067e9282eea37903838a140cf5abf6f861dca624d5a055ba1c43129454ae9abc8350f1fffb224677e34ef4268f7eb43c96fe48b28d78
kubernetes-server-linux-arm.tar.gz e9c3bdf60272399bc6f85a15bbc55cd69db389c223b275661ddcab4ae8c3afcd2171ec3c35a53df2420376f8c6294af791776e16dc07a27438aaa3220d6c94a3
kubernetes-server-linux-arm64.tar.gz d0a1701a34365f939799b6ea676129acdcfa1582bcf50e82a9751d9aafc73ebffd0fc0365fe352755caa9a2b791c4195d7eb04fbb1ce660f107cb5257d57a967
kubernetes-server-linux-ppc64le.tar.gz 1a23473960aaaa639e796020741b63c11dad8a93903926e80c871814b8209166ef06f5205172cd9b2438f8c8e9c9fb50b96d983f56737ab252530112f816b2d6
kubernetes-server-linux-s390x.tar.gz 293d0eb93e2ed641d0c1e26d58423670c04c307dddb034a9fc252043abe5694f63e772d4dfe2bf505fc0b68c41f9d87800d867b87c7697dd6249b11c0efbc580

Node Binaries

filename sha512 hash
kubernetes-node-linux-amd64.tar.gz e3cba71c2b2d151cdcc44937c1bea083ee0ceb829e7feb25cd37edd4d0bd7adac0a166144bd33f9aa616d730785d52c3fee70f0db272d892e79c38eb544cfd22
kubernetes-node-linux-arm.tar.gz 28d7f1cf4fecdc72da7f5f19836cc06bb08182f8e8fb1641dc01e9299247905e305b04c676efa9afbdb8b1ed649542148406b110b75b1e87c1daca7ffed6018c
kubernetes-node-linux-arm64.tar.gz cfe22b11502cd857f0e277e7c1af08e6202f7ffc36f852c6154159bdd67bb330ffd18e5f768cf6968f0524aa80ffba6b7012207831ba94dec4084f1ce38a5289
kubernetes-node-linux-ppc64le.tar.gz 195a6785c49af419361a8901c99bb6613a6578a8eac5e8f08ec28077645be18c6d04c9afc2839d07de27b15595584f6dff5e5f9e78001fc2c6a3249e99b82247
kubernetes-node-linux-s390x.tar.gz 51f5b5ed47b50f5188d9e2f57b03555492d3e490494842247fa04fe81ea350c6694a52caa46ea50578ca07e48212f4f714b8614d8b1eb8924b424eaed73a8d24
kubernetes-node-windows-amd64.tar.gz d2690d57cd485c0c7ebe425464ad59f2c7722870abd6f264ea7fae65a4e403c89446373ba9cd23cd43e8316902637aa9e0b23d571b0ac890c35ff8e9c3ff3c3b

Changelog since v1.13.0-alpha.1

Other notable changes

  • Corrected family type (inet6) for ipsets in ipv6-only clusters (#68436, @uablrek)
  • Corrects check for non-Azure managed nodes with the Azure cloud provider (#70135, @marc-sensenich)
  • Windows runtime endpoints is now switched to 'npipe:////./pipe/dockershim' from 'tcp://localhost:3735'. (#69516, @feiskyer)
  • The caBundle and service fields in admission webhook API objects now correctly indicate they are optional (#70138, @liggitt)
  • The --service-account-api-audiences on kube-apiserver is deprecated in favor of --api-audiences. (#70105, @mikedanese)
  • kubeadm: fix unnecessary upgrades caused by undefined order of Volumes and VolumeMounts in manifests (#70027, @bart0sh)
  • kubeadm: Implemented preflight check to ensure that number of CPUs (#70048, @bart0sh)
    • on the master node is not less than required.
  • Reduce memory utilization of admission webhook metrics by removing resource related labels. (#69895, @jpbetz)
  • kubeadm: Introduce config print init/join-defaults that deprecate config print-defaults by decoupling init and join configs. (#69617, @rosti)
  • Images based on debian-base no longer include the libsystemd0 package. This should have no user-facing impact. (#69995, @ixdy)
    • Additionally, the addon-manager image is updated to use kubectl v1.11.3.
  • fix 'kubeadm upgrade' infinite loop waiting for pod restart (#69886, @bart0sh)
  • add more logging for azure disk diagnostics (#70012, @andyzhangx)
  • Fluentd: concatenate long logs (#68012, @desaintmartin)
  • CoreDNS is now the default DNS server in kube-up deployments. (#69883, @chrisohaver)
  • Optimizes calculating stats when only CPU and Memory stats are returned from Kubelet stats/summary http endpoint. (#68841, @krzysztof-jastrzebski)
  • kubeadm: Fix node join taints. (#69846, @andrewrynhard)
  • Opt out of chowning and chmoding from kubectl cp. (#69573, @bjhaid)
  • support Azure premium file for azure file plugin (#69718, @andyzhangx)
  • TaintBasedEvictions feature is promoted to beta. (#69824, @Huang-Wei)
  • improves memory use and performance when processing large numbers of pods containing tolerations (#65350, @liggitt)
  • Add dynamic audit configuration api (#67547, @pbarker)
  • Promote resource limits priority function to beta (#69437, @ravisantoshgudimetla)
  • Fix cluster autoscaler addon permissions so it can access batch/job. (#69858, @losipiuk)
  • change default azure file mount permission to 0777 (#69854, @andyzhangx)
  • kubeadm: JoinConfiguration now houses the discovery options in a nested Discovery structure, which in turn has a couple of other nested structures to house more specific options (BootstrapTokenDiscovery and FileDiscovery) (#67763, @rosti)
  • Fix tests to use fsync instead of sync (#69755, @mrunalp)
  • kube-proxy argument hostname-override can be used to override hostname defined in the configuration file (#69340, @stevesloka)
  • kube-apiserver: the --deserialization-cache-size flag is no longer used, is deprecated, and will be removed in a future release (#69842, @liggitt)
  • Add support for JSON patch in fake client (#69330, @vaikas-google)

v1.13.0-alpha.1

Documentation

Downloads for v1.13.0-alpha.1

filename sha512 hash
kubernetes.tar.gz 9f8a34b54a22ea4d7925c2f8d0e0cb2e2005486b1ed89e594bc0100ec7202fc247b89c5cbde5dc50c1f9d9f27e4f92aa0ca71fdffb9d079f63751bb1859d5bb4
kubernetes-src.tar.gz a27a7c254d3677c823bd6fd1d0d5f9b1e78ccf807837173669a0079b0812a23444d646d80c2433c167ae50bf1a0e2a4b1d7cbd7457a505fc666464b069bd1e5f

Client Binaries

filename sha512 hash
kubernetes-client-darwin-386.tar.gz d77d33c6d6357b99089f65e1c9ec3cabdcf526ec56e87bdee6b09a8c1b1f1b8f6f0ed6d32f2d3b352391da848afc945e5bb6bfc4c05d90fb4ba429e2d2c3ec0f
kubernetes-client-darwin-amd64.tar.gz 5b4a586defa2ba0ea7c8893dedfe48cae52a2cd324bcb311a3877e27493abb6cb76550e8201a9cac488cde9f83e0d30e6569b95641e8098fd9ec5df9c9e027b2
kubernetes-client-linux-386.tar.gz d50572fbb716393004ad2984a15043d2dfadedd16ae03a73fc85653266ae389071fd2c993923fbe9ea7fbd6b8cbeb6680ef147245e20f334969184d4b571509b
kubernetes-client-linux-amd64.tar.gz 12ab709e574228f170a2ee2686e18dcbfcf59f64599b2ab9047c2ed63f4bd23d6c9fc48104431c9fa616e0ba30041e1c44fb3994ab54c5c98c0c4a94c5ea4b80
kubernetes-client-linux-arm.tar.gz 3a8c75b62cf9e6476417246d4aaeda5a13b74bc073444fc3649198b9d5dc1e7a62aa6b914c7da5a42bcd6164a8f63aa8b256b3579979b6465afe5aa5533ce501
kubernetes-client-linux-arm64.tar.gz 0f5b5956850f11a826d59d226b6a22645ca1f63893cd33c17dfe004bd316f2704d800beb0b9c91a204efc125241825243c9e89b86c01e523bd07636ef925772e
kubernetes-client-linux-ppc64le.tar.gz 06c60dd2e4e8d1ab45474a5b85345b4f644d0c1c66e167596c6c91bd607f957b68121fdb7efed362cb6799e7bcf14752b01f8bea0c929deb85311180f11469be
kubernetes-client-linux-s390x.tar.gz 4630e9e523beb02d8d3900c71b3306561c2d119d588399c93d578184eb1a53601ceefe15a600740c13d565eaf24a679f17e371e2b19a70f77bbceab84acb58b3
kubernetes-client-windows-386.tar.gz 0c0fcc9c492aceb00ff7fd3c10ba228c7bb10d6139b75ceecd8f85532797c5dc1162b39d94ebae5fa6b4c26f2b2a81630371617426f7537d9d11456943c7d50c
kubernetes-client-windows-amd64.tar.gz 3548a6d8618c6c7c8042ae8c3eb69654314392c46f839de24ab72d9faa79993a6cf989f6ac619e418e817300081742c9928c8c2dd82cffc74f7c0e532e42288d

Server Binaries

filename sha512 hash
kubernetes-server-linux-amd64.tar.gz 9dbf2343ef9539b7d4d73949bcd9eef6f46ece59e97fa3390a0e695d0cb2eacbbbae17e3ed53432a8018f55e6db2421a58739aacbc163776d8b2fe774ad62c34
kubernetes-server-linux-arm.tar.gz a985f3c302246df9bff4b927a2596d209c19fb2f245aa5cb5de189b6a9d247d6fd0234edd45968a691f1a2714a0b72ffba2df1aebf361ba1a3461ab7e5fda2ff
kubernetes-server-linux-arm64.tar.gz 80d20df07e6a29b7aedccbd4e26c1c0565b2a1c3146e1a5bb2ebd2e8cf9ab063db137389a498fd6a6c3c42da43486186af6f65fba399b332e4cae134badd7ab0
kubernetes-server-linux-ppc64le.tar.gz 7d45ed3aa8b36e9e666b334ff3ed3de238caea34b4a92b5e1a61a6e7223ae8581bafff43a5b72447a43e118ad4b2c5c15aa0d6faab9a6a72a8fcf99abf340a1e
kubernetes-server-linux-s390x.tar.gz 30698478fab2fe7daccac97917b0b21b018c194ec39b005728f8cddf77f889aa3e1a520e0d1d681f9d8b7889a887aa6eb98c33cb04a8bf52b9a40bb8589aa34f

Node Binaries

filename sha512 hash
kubernetes-node-linux-amd64.tar.gz 4497d14ac81677b43f0b75a457890c1f3bb8745a39875f58d53c734bec1947c37388228e0c952ca87f22d74af101a9263546db07bf1a021d59cba3cea1d5e5b9
kubernetes-node-linux-arm.tar.gz a3b0357db50e0dec7b0474816fec287388adabc76cc309a40dee9bc73771c951e4526a06145a8b332d72e5999dabb5e467d00d7c47035559a79e56f863def2f7
kubernetes-node-linux-arm64.tar.gz 43af8ec4c5f2a1e2baa8cd13817e127fb6a3576dd811a30c4cc5f04d8a9a8bb2267eb5c42e0a895cf2ec0e3260b73c818249296c957625f4048e13102606680a
kubernetes-node-linux-ppc64le.tar.gz 840354219b3e59ed05b5b44cbbf4d45ccc4c0d74044e28c8a557ca75d12e509b091eb10d9bed81e300cb484b0a0f735424383c8b266fbb3e2aa7a2d50dceaf9e
kubernetes-node-linux-s390x.tar.gz 796ca2e6855bd942a9a63d93f847ae62c5ee74195e041b60b89ee7d0e5a75643a8809bfaa36898daa176bccf140a8e5e858f5cb74e457d8bbb0a650600628ceb
kubernetes-node-windows-amd64.tar.gz 96d666e8446d09088bdcb440559035118dce07a2d9f5718856192fd807b61840d2d6cee2a808eb13f2e947784300edc1ac41ade14dc3536c044e4d08982f0fdd

Changelog since v1.12.0

Action Required

  • kube-apiserver: the deprecated --etcd-quorum-read flag has been removed, and quorum reads are always enabled when fetching data from etcd. (#69527, @liggitt)
  • Moved staging/src/k8s.io/client-go/tools/bootstrap to staging/src/k8s… (#67356, @yliaog)
  • [action required] kubeadm: The v1alpha2 config API has been removed. (#69055, @fabriziopandini)
    • Please convert your v1alpha2 configuration files to v1alpha3 using the
    • kubeadm config migrate command of kubeadm v1.12.x

Other notable changes

  • Refactor factory_test.go to use a fake k8s client. (#69412, @tossmilestone)
  • kubeadm: fix a case where fetching a kubernetesVersion from the internet still happened even if some commands don't need it. (#69645, @neolit123)
  • Add tolerations for Stackdriver Logging and Metadata Agents. (#69737, @qingling128)
  • Fix a bug in the scheduler that could cause the scheduler to go to an infinite loop when all nodes in a zone are removed. (#69758, @bsalamat)
  • Dry-run is promoted to Beta and will be enabled by default. (#69644, @apelisse)
  • kubectl get priorityclass now prints value column by default. (#69431, @Huang-Wei)
  • Added a new container based image for running e2e tests (#69368, @dims)
  • Remove the deprecated --google-json-key flag from kubelet. (#69354, @yujuhong)
  • kube-apiserver: fixes procMount field incorrectly being marked as required in openapi schema (#69694, @jessfraz)
  • The LC_ALL and LC_MESSAGES env vars can now be used to set desired locale for kubectl while keeping LANG unchanged. (#69500, @m1kola)
  • Add ability to control primary GID of containers through Pod Spec and PodSecurityPolicy (#67802, @krmayankk)
  • NodeLifecycleController: Now node lease renewal is treated as the heartbeat signal from the node, in addition to NodeStatus Update. (#69241, @wangzhen127)
  • [GCE] Enable by default audit logging truncating backend. (#68288, @loburm)
  • Enable insertId generation, and update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s. This help reduce log duplication and guarantee log order. (#68920, @qingling128)
  • Move NodeInfo utils into pkg/scheduler/cache. (#69495, @wgliang)
  • adds dynamic shared informers to write generic, non-generated controllers (#69308, @p0lyn0mial)
  • Move CacheComparer to pkg/scheduler/internal/cache/comparer. (#69317, @wgliang)
  • Updating OWNERS list for vSphere Cloud Provider. (#69187, @SandeepPissay)
  • The default storage class annotation for the storage addons has been changed to use the GA variant (#68345, @smelchior)
  • Upgrade to etcd 3.3 client (#69322, @jpbetz)
  • fix GetVolumeLimits log flushing issue (#69558, @andyzhangx)
  • It is now possible to use named ports in the kubectl port-forward command (#69477, @m1kola)
  • kubeadm: fix a possible scenario where kubeadm can pull much newer control-plane images (#69301, @neolit123)
  • test/e2e/e2e.test: (#69105, @pohly) * -viper-config can be used to set also the options defined by command line flags * the default config file is "e2e.yaml/toml/json/..." and the test starts when no such config is found (as before) but if -viper-config is used, the config file must exist * -viper-config can be used to select a file with full path, with or without file suffix * the csiImageVersion/Registry flags were renamed to storage.csi.imageVersion/Registry
  • Move FakeCache to pkg/scheduler/internal/cache/fake. (#69318, @wgliang)
  • The "kubectl cp" command now supports path shortcuts (../) in remote paths. (#65189, @juanvallejo)
  • Fixed subpath in containerized kubelet. (#69565, @jsafrane)
  • The runtimeHandler field on the RuntimeClass resource now accepts the empty string. (#69550, @tallclair)
  • Kubelet can now parse PEM file containing both TLS certificate and key in arbitrary order. Previously key was always required to be first. (#69536, @awly)
  • Scheduling conformance tests related to daemonsets should set the annotation that relaxes node selection restrictions, if any are set. This ensures conformance tests can run on a wider array of clusters. (#68793, @aveshagarwal)
  • Replace Parallelize with function ParallelizeUntil and formally deprecate the Parallelize. (#68403, @wgliang)
  • Move scheduler cache interface and implementation to pkg/scheduler/internal/cache. (#68968, @wgliang)
  • Update to use go1.11.1 (#69386, @cblecker)
  • Any external provider should be aware the cloud-provider interface should be imported from :- (#68310, @cheftako)
    • cloudprovider "k8s.io/cloud-provider"
  • kubeadm: Fix a crash if the etcd local alpha phase is called when the configuration contains an external etcd cluster (#69420, @ereslibre)
  • kubeadm now allows mixing of init/cluster and join configuration in a single YAML file (although a warning gets printed in this case). (#69426, @rosti)
  • Code-gen: Remove lowercasing for project imports (#68484, @jsturtevant)
  • Fix client cert setup in delegating authentication logic (#69430, @DirectXMan12)
  • service.beta.kubernetes.io/aws-load-balancer-internal now supports true and false values, previously it only supported non-empty strings (#69436, @mcrute)
  • OpenAPI spec and API reference now reflect dryRun query parameter for POST/PUT/PATCH operations (#69359, @roycaihw)
  • kubeadm: Add a v1beta1 API. (#69289, @fabriziopandini)
  • kube-apiserver has removed support for the etcd2 storage backend (deprecated since v1.9). Existing clusters must migrate etcd v2 data to etcd v3 storage before upgrading to v1.13. (#69310, @liggitt)
  • List operations against the API now return internal server errors instead of partially complete lists when a value cannot be transformed from storage. The updated behavior is consistent with all other operations that require transforming data from storage such as watch and get. (#69399, @mikedanese)
  • kubectl wait now supports condition value checks other than true using --for condition=available=false (#69295, @deads2k)
  • CCM server will not listen insecurely if secure port is specified (#68982, @aruneli)
  • Bump cluster-proportional-autoscaler to 1.3.0 (#69338, @MrHohn)
      • Rebase docker image on scratch.
  • fix inconsistency in windows kernel proxy when updating HNS policy. (#68923, @delulu)
  • Fixes the sample-apiserver so that its BanFlunder admission plugin can be used. (#68417, @MikeSpreitzer)
  • Fixed CSIDriver API object to allow missing fields. (#69331, @jsafrane)
  • Bump addon-manager to v8.8 (#69337, @MrHohn)
      • Rebase docker image on debian-base:0.3.2.
  • Update defaultbackend image to 1.5. Users should concentrate on updating scripts to the new version. (#69120, @aledbf)
  • Bump Dashboard version to v1.10.0 (#68450, @jeefy)
  • Fixed panic on iSCSI volume tear down. (#69140, @jsafrane)
  • Update defaultbackend to v1.5 (#69334, @bowei)
  • Remove unused chaosclient. (#68409, @wgliang)
  • Enable AttachVolumeLimit feature (#69225, @gnufied)
  • Update crictl to v1.12.0 (#69033, @feiskyer)
  • Wait for pod failed event in subpath test. (#69300, @mrunalp)
  • [GCP] Added env variables to control CPU requests of kube-controller-manager and kube-scheduler. (#68823, @loburm)
  • Bump up pod short start timeout to 2 minutes. (#69291, @mrunalp)
  • Use the mounted "/var/run/secrets/kubernetes.io/serviceaccount/token" as the token file for running in-cluster based e2e testing. (#69273, @dims)
  • apiservice availability related to networking glitches are corrected faster (#68678, @deads2k)
  • extract volume attachment status checking operation as a common function when attaching a CSI volume (#68931, @mlmhl)
  • PodSecurityPolicy objects now support a MayRunAs rule for fsGroup and supplementalGroups options. This allows specifying ranges of allowed GIDs for pods/containers without forcing a default GID the way MustRunAs does. This means that a container to which such a policy applies to won't use any fsGroup/supplementalGroup GID if not explicitly specified, yet a specified GID must still fall in the GID range according to the policy. (#65135, @stlaz)
  • Images for cloud-controller-manager, kube-apiserver, kube-controller-manager, and kube-scheduler now contain a minimal /etc/nsswitch.conf and should respect /etc/hosts for lookups (#69238, @BenTheElder)
  • add deprecation warning for all cloud providers (#69171, @andrewsykim)
  • IPVS proxier mode now support connection based graceful termination. (#66012, @Lion-Wei)
  • Fix panic in kubectl rollout commands (#69150, @soltysh)
  • Add fallbacks to ARM API when getting empty node IP from Azure IMDS (#69077, @feiskyer)
  • Deduplicate PATH items when reading plugins. (#69089, @soltysh)
  • Adds permissions for startup of an on-cluster kube-controller-manager (#69062, @dghubble)
  • Fixes issue [#68899](kubernetes#68899) where pods might schedule on an unschedulable node. (#68984, @k82cn)
  • Returns error if NodeGetInfo fails. (#68979, @xing-yang)
  • Pod disruption budgets shouldn't be checked for terminal pods while evicting (#68892, @ravisantoshgudimetla)
  • Fix scheduler crashes when Prioritize Map function returns error. (#68563, @DylanBLE)
  • kubeadm: create control plane with ClusterFirstWithHostNet DNS policy (#68890, @andrewrynhard)
  • Reduced excessive logging from fluentd-gcp-scaler. (#68837, @x13n)
  • adds dynamic lister (#68748, @p0lyn0mial)
  • kubectl: add the --no-headers flag to kubectl top ... (#67890, @WanLinghao)
  • Restrict redirect following from the apiserver to same-host redirects, and ignore redirects in some cases. (#66516, @tallclair)
  • Fixed pod cleanup when /var/lib/kubelet is a symlink. (#68741, @jsafrane)
  • Add "only_cpu_and_memory" GET parameter to /stats/summary http handler in kubelet. If parameter is true then only cpu and memory will be present in response. (#67829, @krzysztof-jastrzebski)
  • Start synchronizing pods after network is ready. (#68752, @krzysztof-jastrzebski)
  • kubectl has gained new --profile and --profile-output options to output go profiles (#68681, @dlespiau)
  • Provides FSGroup capability on FlexVolume driver. It allows to disable the VolumeOwnership operation when volume is mounted (#68680, @benoitf)
  • Apply _netdev mount option on bind mount (#68626, @gnufied)
  • fix UnmountDevice failure on Windows (#68608, @andyzhangx)
  • Allows changing nodeName in endpoint update. (#68575, @prameshj)
  • kube-apiserver would return 400 Bad Request when it couldn't decode a json patch. (#68346, @CaoShuFeng)
    • kube-apiserver would return 422 Unprocessable Entity when a json patch couldn't be applied to one object.
  • remove unused ReplicasetControllerOptions (#68121, @dixudx)
  • Pass signals to fluentd process (#68064, @gianrubio)
  • Flex drivers by default do not produce metrics. Flex plugins can enable metrics collection by setting the capability 'supportsMetrics' to true. Make sure the file system can support fs stat to produce metrics in this case. (#67508, @brahmaroutu)
  • Use monotonically increasing generation to prevent scheduler equivalence cache race. (#67308, @cofyc)
  • Fix kubelet service file permission warning (#66669, @daixiang0)
  • Add prometheus metric for scheduling throughput. (#64526, @misterikkit)
  • Get public IP for Azure vmss nodes. (#68498, @feiskyer)
  • test/integration: add a basic test for covering CronJobs (#66937, @mortent)
  • Make service environment variables optional (#68754, @bradhoekstra)