Release Release v1.1.3 · kubernetes/kubernetes

Documentation

Security fix: Validates pod.spec.nodeName and container name to prevent path traversals of the kubelet API through the pods/log subresource
- Pod log location must validate container if provided (#17953, @fabianofranz)
- Validate pod spec.nodeName (#17985, @liggitt)
Create mirror pod before running a static pod so that the API can be informed before calling plugins. (#17602, @alexhersh)
Fixes crash when proxy is run with --cleanup-iptables=true. (#18200, @thockin)
Fixed forbidden window enforcement in horizontal pod autoscaler. (#18204, @jszczepkowski)
add semver parsing of gitversion to pkg/version and actually validate semver in node controller rather than prefix checking (#18179, @mikedanese)
kubelet: report NodeReady last in status list (#17975, @aaronlevy)
Change "experimental" to "beta" in annotations (#18187, @thockin)
Update cadvisor deps to v0.19.3.2 (#18224, @vishh)

binary	hash alg	hash
`kubernetes.tar.gz`	md5	`78a5314657faaa8ee256af3bc5ba790c`
`kubernetes.tar.gz`	sha1	`69b98da1b4e4a06362a71b1ff1783670bc2dbd13`