Bump kubernetes from 19.15.0b1 to 20.11.0a1 in /tests

[dependabot]

Bumps kubernetes from 19.15.0b1 to 20.11.0a1.

Release notes

Sourced from kubernetes's releases.

Kubernetes Python Client v20.11.0 Alpha 1 Release

Getting started:

pip install --pre --upgrade kubernetes

Or from source, download attached zip file, then

unzip client-python-v20.11.0a1.zip
cd client-python-v20.11.0a1
python setup.py install

Then follow examples in https://github.com/kubernetes-client/python/tree/release-20.0/examples

Changelog: https://github.com/kubernetes-client/python/blob/release-20.0/CHANGELOG.md

Kubernetes Python Client v19.15.0 Stable Release

Getting started:

pip install kubernetes==19.15.0

Or from source, download attached zip file, then

unzip client-python-19.15.0.zip
cd client-python-19.15.0
python setup.py install

Then follow examples in https://github.com/kubernetes-client/python/tree/release-19.0/examples.

Changelog: https://github.com/kubernetes-client/python/blob/release-19.0/CHANGELOG.md

Changelog

Sourced from kubernetes's changelog.

v20.11.0a1

Kubernetes API Version: v1.20.11

API Change

• We have added a new Priority & Fairness rule that exempts all probes (/readyz, /healthz, /livez) to prevent restarting of "healthy" kube-apiserver instance(s) by kubelet. (kubernetes/kubernetes#101112, @​tkashem) [SIG API Machinery]
• Fixes using server-side apply with APIService resources (kubernetes/kubernetes#100714, @​kevindelgado) [SIG API Machinery, Apps and Testing]
• Regenerate protobuf code to fix CVE-2021-3121 (kubernetes/kubernetes#100501, @​joelsmith) [SIG API Machinery, Apps, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Storage]
• Kubernetes is now built using go1.15.8 (kubernetes/kubernetes#98962, @​cpanato) [SIG Cloud Provider, Instrumentation, Release and Testing]
• TokenRequest and TokenRequestProjection features have been promoted to GA. This feature allows generating service account tokens that are not visible in Secret objects and are tied to the lifetime of a Pod object. See https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection for details on configuring and using this feature. The TokenRequest and TokenRequestProjection feature gates will be removed in v1.21.
  • kubeadm's kube-apiserver Pod manifest now includes the following flags by default "--service-account-key-file", "--service-account-signing-key-file", "--service-account-issuer". (kubernetes/kubernetes#93258, @​zshihang) [SIG API Machinery, Auth, Cluster Lifecycle, Storage and Testing]
• A new nofuzz go build tag now disables gofuzz support. Release binaries enable this. (kubernetes/kubernetes#92491, @​BenTheElder) [SIG API Machinery]
• Add WindowsContainerResources and Annotations to CRI-API UpdateContainerResourcesRequest (kubernetes/kubernetes#95741, @​katiewasnothere) [SIG Node]
• Add a serving and terminating condition to the EndpointSlice API. serving tracks the readiness of endpoints regardless of their terminating state. This is distinct from ready since ready is only true when pods are not terminating. terminating is true when an endpoint is terminating. For pods this is any endpoint with a deletion timestamp. (kubernetes/kubernetes#92968, @​andrewsykim) [SIG Apps and Network]
• Add dual-stack Services (alpha). This is a BREAKING CHANGE to an alpha API. It changes the dual-stack API wrt Service from a single ipFamily field to 3 fields: ipFamilyPolicy (SingleStack, PreferDualStack, RequireDualStack), ipFamilies (a list of families assigned), and clusterIPs (inclusive of clusterIP). Most users do not need to set anything at all, defaulting will handle it for them. Services are single-stack unless the user asks for dual-stack. This is all gated by the "IPv6DualStack" feature gate. (kubernetes/kubernetes#91824, @​khenidak) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
• Add support for hugepages to downward API (kubernetes/kubernetes#86102, @​derekwaynecarr) [SIG API Machinery, Apps, CLI, Network, Node, Scheduling and Testing]
• Adds kubelet alpha feature, GracefulNodeShutdown which makes kubelet aware of node system shutdowns and result in graceful termination of pods during a system shutdown. (kubernetes/kubernetes#96129, @​bobbypage) [SIG Node]
• AppProtocol is now GA for Endpoints and Services. The ServiceAppProtocol feature gate will be deprecated in 1.21. (kubernetes/kubernetes#96327, @​robscott) [SIG Apps and Network]
• Automatic allocation of NodePorts for services with type LoadBalancer can now be disabled by setting the (new) parameter Service.spec.allocateLoadBalancerNodePorts=false. The default is to allocate NodePorts for services with type LoadBalancer which is the existing behavior. (kubernetes/kubernetes#92744, @​uablrek) [SIG Apps and Network]
• Certain fields on Service objects will be automatically cleared when changing the service's type to a mode that does not need those fields. For example, changing from type=LoadBalancer to type=ClusterIP will clear the NodePort assignments, rather than forcing the user to clear them. (kubernetes/kubernetes#95196, @​thockin) [SIG API Machinery, Apps, Network and Testing]
• Document that ServiceTopology feature is required to use service.spec.topologyKeys. (kubernetes/kubernetes#96528, @​andrewsykim) [SIG Apps]
• EndpointSlice has a new NodeName field guarded by the EndpointSliceNodeName feature gate.
  • EndpointSlice topology field will be deprecated in an upcoming release.
  • EndpointSlice "IP" address type is formally removed after being deprecated in Kubernetes 1.17.
  • The discovery.k8s.io/v1alpha1 API is deprecated and will be removed in Kubernetes 1.21. (kubernetes/kubernetes#96440, @​robscott) [SIG API Machinery, Apps and Network]
• External facing API podresources is now available under k8s.io/kubelet/pkg/apis/ (kubernetes/kubernetes#92632, @​RenaudWasTaken) [SIG Node and Testing]
• Fewer candidates are enumerated for preemption to improve performance in large clusters. (kubernetes/kubernetes#94814, @​adtac)
• Fix conversions for custom metrics. (kubernetes/kubernetes#94481, @​wojtek-t) [SIG API Machinery and Instrumentation]
• GPU metrics provided by kubelet are now disabled by default. (kubernetes/kubernetes#95184, @​RenaudWasTaken)
• If BoundServiceAccountTokenVolume is enabled, cluster admins can use metric serviceaccount_stale_tokens_total to monitor workloads that are depending on the extended tokens. If there are no such workloads, turn off extended tokens by starting kube-apiserver with flag --service-account-extend-token-expiration=false (kubernetes/kubernetes#96273, @​zshihang) [SIG API Machinery and Auth]
• Introduce alpha support for exec-based container registry credential provider plugins in the kubelet. (kubernetes/kubernetes#94196, @​andrewsykim) [SIG Node and Release]
• Introduces a metric source for HPAs which allows scaling based on container resource usage. (kubernetes/kubernetes#90691, @​arjunrn) [SIG API Machinery, Apps, Autoscaling and CLI]
• Kube-apiserver now deletes expired kube-apiserver Lease objects:
  • The feature is under feature gate APIServerIdentity.
  • A flag is added to kube-apiserver: identity-lease-garbage-collection-check-period-seconds (kubernetes/kubernetes#95895, @​roycaihw) [SIG API Machinery, Apps, Auth and Testing]
• Kube-controller-manager: volume plugins can be restricted from contacting local and loopback addresses by setting --volume-host-allow-local-loopback=false, or from contacting specific CIDR ranges by setting --volume-host-cidr-denylist (for example, --volume-host-cidr-denylist=127.0.0.1/28,feed::/16) (kubernetes/kubernetes#91785, @​mattcary) [SIG API Machinery, Apps, Auth, CLI, Network, Node, Storage and Testing]
• Migrate scheduler, controller-manager and cloud-controller-manager to use LeaseLock (kubernetes/kubernetes#94603, @​wojtek-t) [SIG API Machinery, Apps, Cloud Provider and Scheduling]
• Modify DNS-1123 error messages to indicate that RFC 1123 is not followed exactly (kubernetes/kubernetes#94182, @​mattfenwick) [SIG API Machinery, Apps, Auth, Network and Node]
• Move configurable fsgroup change policy for pods to beta (kubernetes/kubernetes#96376, @​gnufied) [SIG Apps and Storage]
• New flag is introduced, i.e. --topology-manager-scope=container|pod.

... (truncated)

Commits

• d3b71ba Merge pull request #1609 from yliaog/automated-release-of-20.11.0a1-upstream-...
• 334b16f added 1.20.11 alpha release to README
• 6b738d8 generated client change
• c3b2dd1 update changelog
• ba9c60f update version constants for 20.11.0a1 release
• 6b43a8a Merge pull request #1607 from roycaihw/auto-update-changelog
• b230fc0 Update k8s API version if the old client was a snapshot
• e0e60fa Merge pull request #1602 from roycaihw/handle-no-master-change
• 0296039 Add comments about what git add . does
• 4fb04c0 Only collect release notes from tmp output file if the file is non-empty
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[lucacome]

@dependabot rebase