| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 6d6c61bb4d3372d56b7a429b5b8b5adbfb0aaddd65283d169bb719b8aca7c270db34f4699c4efee364565414770f9870c77a74a958725a8258f4bca271582e4c |
| kubernetes-src.tar.gz | 9878c454c5b482621a7ddeab2ab3290fdafd0cfb3d580b261081ba3943b19b13e54aaa3a80ba68d7cbfa46864e51baedc686ab2a5271da6948493cc7ad730e2c |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-386.tar.gz | 67c9d4d97db40ee94a5e021642eeea006dfd66f0c50ccd0d833c52d2bc4156fb044bb481b77e235db330e34ef580d42d8f1b366420abbab0b62c1cfe59f168a3 |
| kubernetes-client-darwin-amd64.tar.gz | 9a1494c082af52186620d1cd1b02f8a8f4af7e676e2ec217f41cf2915bd6fb1717e2c65e42c84ca842a542526f23edaa5ea378932b37f628611d00b08e9ff102 |
| kubernetes-client-linux-386.tar.gz | 9de6254a6a267ea283b6118d9da079f072e73ba377e81a361943f6d42baa5dd1b668b20f6909b697cbb5163930e9e497a08b16aa1d3e13feaf5be37047bcf83e |
| kubernetes-client-linux-amd64.tar.gz | a93d028c3adda047864b36f314752fbe4745bb6ad8f37574cc124eb1453bad07e3790dac4cc230e3ee2d3f6e9fb8c75d16860454acb3a6049400bb46489f7c51 |
| kubernetes-client-linux-arm.tar.gz | 5ca7feea1c4a33cf92f0ee79a92daee4876b43c626346dcc701bb7d6b956c0050f2ed6be1f2ba31756bf3b651da354bbad511cc3ce6c6349c12bcde41c8aec87 |
| kubernetes-client-linux-arm64.tar.gz | d6a63efa140a1c2cde43252e9f917a02752e90628b51ca28ec7118245cd00da03b83f1bd920d0f1da789b8a0f3c73f41fbc9710c7bddcc24e6ac401966180cc5 |
| kubernetes-client-linux-ppc64le.tar.gz | cdb805bc7bae052a0585b88c5e7980bd8bf9f32a840728455c18f4f01e03cda823bede2145772c4338e95c1a9b258bba7b8154714457fdb72114ac482eca122e |
| kubernetes-client-linux-s390x.tar.gz | a9ff545cad6a42dbcdf9f91214c15e2ebee2df20579b7f62ec07397eca792f20ee550841759d9d38c0affdb3071ad4a0a741c8641955eb222a5535dd8fb2d3e4 |
| kubernetes-client-windows-386.tar.gz | eb3e4dbbb1dc6829bfa320853b695e61f4daafdff4aaa1f4ffb2e4be4b3f2e0c78f385a8a370811cb379f85d5e48a9b55608747592c771d4cbffd446a586cc6d |
| kubernetes-client-windows-amd64.tar.gz | ad0087ef7a0da961d3f22eab2ddab302be2190df5a2150046f7162dfc5072aa1866449a1aafc1c3db65246c392ec47bda20f2b4e7f750e895106fa9cbe1c80f8 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 8f4878dfbe7e6abc30516bd801bb5c07873b4a80d8bc560e5b5593e0c1d64be2fa662a5f10dd93c947cfb1cfb7336db995a3f2b5c5cc3b259c929f058f27e222 |
| kubernetes-server-linux-arm.tar.gz | 3e5745bffbfb3551b4d4962b7ab6524c9b71f55860a91992dd0495266c56b740061f6b0711882e931ead456b14e4bfc9f08c4115a81553c1cfa2aa1cbd769d52 |
| kubernetes-server-linux-arm64.tar.gz | ed00c196e6e229229b6523e7c3a201e00805304ad72c54bf7d0fc456d1791404bacf5120317f9a833b0bfddf70f4318d8ac274e3d94b80de0567dfea136b0b13 |
| kubernetes-server-linux-ppc64le.tar.gz | 57b5cc144fc4f3bfa6217e0d5494e4a4367f0c0d3504721d4343ff009f00fef1212150d0f1925fe0710eb335c526720e8a5c6fd54d27739b75cc91a06f27df94 |
| kubernetes-server-linux-s390x.tar.gz | 6f6d2b61a11e30199997582487f7e4f967771e0367d7f471043e0b9b373d463c5d7370ac3a8e5bbf4761e98e0ab19564f74aa7bf2c8443c9dd53397836d4db9b |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 0c1b9dbb630a3bc47a835f9bfd9259d464abae8a30b0824a73b20892b013ed60d7e4989f48172b122bcc87e08bdd1af9ca9e790ae768b17e1dff190ae8f11b69 |
| kubernetes-node-linux-arm.tar.gz | 191087e26632dcc80991530b79bcda49bd4d0a131689ef48164a0bdb30e0a52ca69aa9a1ad42165707669287b8fd09afd407e556803d15b8c66739359a2b13b5 |
| kubernetes-node-linux-arm64.tar.gz | f0f58aa8f9ad0ac0a1ee29d318ebb4d14f0bef4cba1fee9081ee2bfb6b41245108bd849470529668a93dcf8b41e53a319bd80ee0bd46ef02b844a995ffcc68e8 |
| kubernetes-node-linux-ppc64le.tar.gz | bf574c4a46731ebc273910176ab67b2455b021972de3aeeb2a2b04af2a1079243728f151b9f06298b84832425ce600e54d8c13eec58598b284b44b21beaf73eb |
| kubernetes-node-linux-s390x.tar.gz | 5a5d2ece704178a630dc228b51229b8598eb45bf3eaeae75b1475f249922c6a10b93220fd0f3f29d279ee0ceb34e8537a5b197b9454c4171adcc81facc80c3b6 |
| kubernetes-node-windows-amd64.tar.gz | 22fc9a7eb0e8244d51fd11f6d90f44e973983cb21692724c919493a235d2f9b1f22788fbfe8abaec9c52a98385767d2f0dd0bfebbc39c9e23c1047ebdaeb87cb |
- Graduate ScheduleDaemonSetPods to GA. (feature gate will be removed in 1.18) action required. (#82795, @draveness)
- kube-scheduler: emits a warning when a malformed component config file is used with v1alpha1. (#84129, @obitech)
- add azure disk encryption(SSE+CMK) support (#84605, @andyzhangx)
- The certificate signer no longer accepts ca.key passwords via the CFSSL_CA_PK_PASSWORD environment variable. This capability was not prompted by user request, never advertised, and recommended against in the security audit. (#84677, @mikedanese)
- Reduce default NodeStatusReportFrequency to 5 minutes. With this change, periodic node status updates will be send every 5m if node status doesn't change (otherwise they are still send with 10s). (#84007, @wojtek-t)
- Bump NodeProblemDetector version to v0.8.0 to reduce forced NodeStatus updates frequency to 5 minutes.
- CSI Topology feature is GA. The CSINodeInfo feature gate is deprecated and will be removed in a future release. The storage.k8s.io/v1beta1 CSINode object is deprecated and will be removed in a future release. (#83474, @msau42)
- Only validate duplication of the RequestedToCapacityRatio custom priority and allow other custom predicates/priorities (#84646, @liu-cong)
- Added kubelet serving certificate metric
server_rotation_secondswhich is a histogram reporting the age of a just rotated serving certificate in seconds. (#84534, @sambdavidson) - During namespace deletion some controllers create event and log spam because they do not recognize namespace deletion as a terminal state. (#84123, @smarterclayton)
- Removed Alpha feature
MountContainers(#84365, @codenrhoden) - People can see the right log and note. (#84637, @zhipengzuo)
- Ensure the KUBE-MARK-DROP chain in kube-proxy mode=iptables. The chain is ensured for both ipv4 and ipv6 in dual-stack operation. (#84422, @aojea)
- deprecate cleanup-ipvs flag (#83832, @gongguan)
- Scheduler Policy API has a new recommended apiVersion "apiVersion: kubescheduler.config.k8s.io/v1" which is consistent with the scheduler API group "kubescheduler.config.k8s.io". It holds the same API as the old apiVersion "apiVersion: v1". (#83578, @Huang-Wei)
- Fixed a bug in the single-numa-policy of the TopologyManager. Previously, best-effort pods would result in a terminated state with a TopologyAffinity error. Now they will run as expected. (#83777, @lmdaly)
- local: support local filesystem volume with block resource reconstruction (#84218, @cofyc)
- Fix the bug that EndpointSlice for masters wasn't created after enabling EndpointSlice feature on a pre-existing cluster. (#84421, @tnqn)
- kubelet: a configuration file specified via
--configis now loaded with strict deserialization, which fails if the config file contains duplicate or unknown fields. This protects against accidentally running with config files that are malformed, mis-indented, or have typos in field names, and getting unexpected behavior. (#83204, @obitech) - kubeadm now propagates proxy environment variables to kube-proxy (#84559, @yastij)
- Reload apiserver SNI certificates from disk every minute (#84303, @jackkleeman)
- sourcesReady provides the readiness of kubelet configuration sources such as apiserver update readiness. (#81344, @zouyee)
- Update Azure SDK versions to v35.0.0 (#84543, @andyzhangx)
- Fixed EndpointSlice port name validation to match Endpoint port name validation (allowing port names longer than 15 characters) (#84481, @robscott)
- Scheduler now reports metrics on cache size including nodes, pods, and assumed pods (#83508, @damemi)
- kube-proxy: emits a warning when a malformed component config file is used with v1alpha1. (#84143, @phenixblue)
- Update default etcd server version to 3.4.3 (#84329, @jingyih)
- Scheduler policy configs can no longer be declared multiple times (#83963, @damemi)
- This PR sets the --cluster-dns flag value to kube-dns service IP whether or not NodeLocal DNSCache is enabled. NodeLocal DNSCache will listen on both the link-local as well as the service IP. (#84383, @prameshj)
- Remove prometheus cluster monitoring addon from kube-up (#83442, @serathius)
- update the latest validated version of Docker to 19.03 (#84476, @neolit123)
- kubeadm: always mount the kube-controller-manager hostPath volume that is given by the --flex-volume-plugin-dir flag. (#84468, @neolit123)
- Introduce x-kubernetes-map-type annotation as a CRD API extension. Enables this particular validation for server-side apply. (#84113, @enxebre)
- kube-scheduler now fallbacks to emitting events using core/v1 Events when events.k8s.io/v1beta1 is disabled. (#83692, @yastij)
- Migrate controller-manager and scheduler to EndpointsLeases leader election. (#84084, @wojtek-t)
- User can now use component config to configure NodeLabel plugin for the scheduler framework. (#84297, @liu-cong)
- local: support local volume block mode reconstruction (#84173, @cofyc)
- Fixed kubectl endpointslice output for get requests (#82603, @robscott)
- set config.BindAddress to IPv4 address "127.0.0.1" if not specified (#83822, @zouyee)
- CSI detach timeout increased from 10 seconds to 2 minutes (#84321, @cduchesne)
- Update etcd client side to v3.4.3 (#83987, @wenjiaswe)
- Deprecated prometheus request meta-metrics have been removed (http_request_duration_microseconds, http_request_duration_microseconds_sum, http_request_duration_microseconds_count, http_request_size_bytes, http_request_size_bytes_sum, http_request_size_bytes_count, http_requests_total, http_response_size_bytes, http_response_size_bytes_sum, http_response_size_bytes_count) due to removal from the prometheus client library. Prometheus http request meta-metrics are now generated from promhttp.InstrumentMetricHandler instead.
- The built-in system:csi-external-provisioner and system:csi-external-attacher cluster roles are removed as of 1.17 release (#84282, @tedyu)
- Pod labels can no longer be updated through the pod/status updates by nodes. (#84260, @tallclair)
- Reload apiserver serving certificate from disk every minute (#84200, @jackkleeman)
- Adds FQDN addressType support for EndpointSlice. (#84091, @robscott)
- Add permit_wait_duration_seconds metric for scheduler. (#84011, @liu-cong)
- Optimize inter-pod affinity preferredDuringSchedulingIgnoredDuringExecution type, up to 4x in some cases. (#84264, @ahg-g)
- When a namespace is being deleted and spec.finalizers are still being processed, stop returning a 409 conflict error and instead return the object as we would during metadata.finalizer processing. (#84122, @smarterclayton)
- client-ca bundles for the all generic-apiserver based servers will dynamically reload from disk on content changes (#83579, @deads2k)
- Reduced frequency of DescribeVolumes calls of AWS API when attaching/detaching a volume. (#84181, @jsafrane)
- Add a metric to track number of scheduler binding and prioritizing goroutines (#83535, @wgliang)
- Fix kubelet metrics gathering on non-English Windows hosts (#84156, @wawa0210)
- A new
kubelet_preemptionsmetric is reported from Kubelets to track the number of preemptions occuring over time, and which resource is triggering those preemptions. (#84120, @smarterclayton)
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | dfdb758b21a3dbd820063cb2ba4b4a19e5e1e03fdb95856bf9c99c2c436bbc2c259cd9ac233f0388b5c3690f2c78680362130e045442f4da5b8b94c3013bdc72 |
| kubernetes-src.tar.gz | 1718547ef5baf7ab6514bafff05451fc9d2f0db0b74f094b4d9004e949ef86ed246abf538fabe221e1adbe5aabc39b831c5d332d1aca8d65d58050092b8bcc8c |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-386.tar.gz | 207b281b7da796faa34beaf0c8f7e70f9685b132c2838a12e0c8f2084627e2c98890379cc84eff851349d74ec0a273c1f8967085e1c6471acfa1d5fcf251b1cb |
| kubernetes-client-darwin-amd64.tar.gz | b0c19de40aa4210c0f06e1864779d60a69b75a443042f448746a0cd8cae680a7f4fab2dc7f3c61a31bde39ef9f490224be9559d6b15225cb7502b281c9968e51 |
| kubernetes-client-linux-386.tar.gz | e8149e6373b48ab97b844b5450be12ec4bb86c869cdf71f98b78b88a9a9ef535df443241bf385fa4588dbe44abd0771b08a2af64dcdd6b891a4d3001cee9ac95 |
| kubernetes-client-linux-amd64.tar.gz | d4176dfd049ffa1e59b7c4efd4d4189463153fa6cf53d5fc43c953983b74cbd75af9b8a0f7c13f86c5c3a3bb75ec453a676a931a38acaf32eb3ab98001d8f168 |
| kubernetes-client-linux-arm.tar.gz | d6de12989c091e78ad95d7e01274936a28ca74219196c27775d00665c9fb98fa1e485652c395114d3ed09534932390035e6d5c7c14d5753614929ecaf90baa2e |
| kubernetes-client-linux-arm64.tar.gz | 2f62aeaa39d7b7ab0840bd6c845d73e6135357edbbf93046c1fbd52d02a8c19377787ec016af2db74f236c82b71c1f9f704b650ee689876138f0da828a61951b |
| kubernetes-client-linux-ppc64le.tar.gz | 895fd028e409cca1667a08ba6d1b32517b23b796530eecef7c1a4783287b45ff826e692d7a4ca103979f5b3a2e8d6550c1df5b3144aa686fe7fed7122b2ef051 |
| kubernetes-client-linux-s390x.tar.gz | 50fe03594da3c90932e83d0befad9053ef1fb72f4af1a5c139455c8acc6c10adec522efe80195013f88a3b40b0371ff7de85544c3c3d770fea37cff727ff5147 |
| kubernetes-client-windows-386.tar.gz | 3e32d47078da5d3d31c4b854c01e081a437fab2c01c7e7be291262b029046acaf96efa6529383b3410b53bc2973ec82c6fe7b4eb4193d15eda4abb73210cecf6 |
| kubernetes-client-windows-amd64.tar.gz | 42ec1f3273ea070cedcf65bbb76ebf05a24aca5ed55af4b17889fb1be3df99b4e4c023099994cbec572968c297a4671ce4a966c9dacc3c8385a380741d067f2b |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 0b1fe1eca603579f70c13509dff32dcb8383ee340b8fc6b8edf23cdaf1f86cf9c8d710380a9350de8b516c5c742eb10e28c97cadf7afa57532bd663c88cad96f |
| kubernetes-server-linux-arm.tar.gz | ac1a804dd8980281afe12a116ffaf4ed9fc1066c3a531f3a6ced14f021c69d60ff7120bfbfe159cd93898b937c4c3baddce4429dd7933654f0a6f6bcbeed8fab |
| kubernetes-server-linux-arm64.tar.gz | e34daf4c37ab5c2f52a116ed4ca0f7b52c0d0b5863d027550241b03f9019dcb6dd7d16df7c6ec7a43a86737b16015c19a2a75a19173c2dd9ee574b5f08098881 |
| kubernetes-server-linux-ppc64le.tar.gz | 9c285800beecc53cf5293604270cbcc5ba6245ddf4dfe0c0ec9a1359ed3771d7e1939c2496b2c24bf4cc541e8b29408ec66c24804b321612331c553b55c2c3c8 |
| kubernetes-server-linux-s390x.tar.gz | ea883497e80fdb2182342a2bae0382c7d38b0273cae6f8a5ee05d149669134d9b50613184e1fc289d7ce999c172f455f76b08e40cc014a33fc2c9c6491eee9c1 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 450197a746a52c3129f97e50b4b69bf2d1e94290be72f1ae143e36bb0fd76b2175cc917ae47389feb0163ae108a752929ac4fa8f90b8dee21f0be5e198c847a5 |
| kubernetes-node-linux-arm.tar.gz | c10c6ea591a15dc873afb01a7aa1916188e411ba57201f436d6d96cd2bad8cbb4e3bccc743759e3ce6d93e0f13c026ae5d646684611fe11134ba05321522f78c |
| kubernetes-node-linux-arm64.tar.gz | 47764435a9367571f7de12d54f0aff7d615fc50383230c6fba08475dc33be60d2912dd2ee5c3f083a450866281c1df90663b1737f2d8293a73b48720aeda6a8b |
| kubernetes-node-linux-ppc64le.tar.gz | 48d2694450f4b94e8ff76e95ef102670d4a4c933010afadf7a019db73d966462a07ff222f9b48510f5dd3ac8f9076e31646d490ec0c1425d4be7b8475cd11cd6 |
| kubernetes-node-linux-s390x.tar.gz | 20e712415af7304ecb55e9c2c2f29dda3af4a78f5833499c1f51a492c929a4590717d60fce537fb81c70784a6ca1503f7e731e1779cbc59673f69a03f7533bc0 |
| kubernetes-node-windows-amd64.tar.gz | 2e88bf26e1293dd733cf1bfe1f0f2dcfb5c482687cf52690488e943a0922a5c9565dd9ce000af76597e0bf1ac8f42ce12044c0ec5e3564db5c2f6a409e9efdb6 |
- Graduate TaintNodesByCondition to GA in 1.17. (feature gate will be removed in 1.18) action required (#82703, @draveness)
- TaintNodesByCondition was graduated to GA, CheckNodeMemoryPressure, CheckNodePIDPressure, CheckNodeDiskPressure, CheckNodeCondition were accidentally removed since 1.12, the replacement is to use CheckNodeUnschedulablePred (#84152, @draveness)
- filter plugin for cloud provider storage predicate (#84148, @gongguan)
- Fixed binding of block PersistentVolumes / PersistentVolumeClaims when BlockVolume feature is off. (#84049, @jsafrane)
- Updated kube-proxy ipvs README with correct grep argument to list loaded ipvs modules (#83677, @pete911)
- Add data cache flushing during unmount device for GCE-PD driver in Windows Server. (#83591, @jingxu97)
- Adds a metric apiserver_request_error_total to kube-apiserver. This metric tallies the number of request_errors encountered by verb, group, version, resource, subresource, scope, component, and code. (#83427, @logicalhan)
- Refactor scheduler's framework permit API. (#83756, @hex108)
- The kubectl's api-resource command now has a
--sort-byflag to sort resources by name or kind. (#81971, @laddng) - Update to use go1.12.12 (#84064, @cblecker)
- Update to Ingress-GCE v1.6.1 (#84018, @rramkumar1)
- Update Cluster Autoscaler version to 1.16.2 (CA release docs: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.16.2) (#84038, @losipiuk)
- When scaling down a ReplicaSet, delete doubled up replicas first, where a "doubled up replica" is defined as one that is on the same node as an active replica belonging to a related ReplicaSet. ReplicaSets are considered "related" if they have a common controller (typically a Deployment). (#80004, @Miciah)
- Promote WatchBookmark feature to GA. (#83195, @wojtek-t)
- With WatchBookmark feature, clients are able to request watch events with BOOKMARK type. Clients should not assume bookmarks are returned at any specific interval, nor may they assume the server will send any BOOKMARK event during a session.
- kubeadm no longer removes /etc/cni/net.d as it does not install it. Users should remove files from it manually or rely on the component that created them (#83950, @yastij)
- kubeadm: enhance certs check-expiration to show the expiration info of related CAs (#83932, @SataQiu)
- Add incoming pods metrics to scheduler queue. (#83577, @liu-cong)
- An end-user may choose to request logs without confirming the identity of the backing kubelet. This feature can be disabled by setting the
AllowInsecureBackendProxyfeature-gate to false. (#83419, @deads2k) - Switched intstr.Type to sized integer to follow API guidelines and improve compatibility with proto libraries (#83956, @liggitt)
- Fix handling tombstones in pod-disruption-budged controller. (#83951, @zouyee)
- client-go: improved allocation behavior of the delaying workqueue when handling objects with far-future ready times. (#83945, @barkbay)
- Added the
crictlWindows binaries as well as the Linux 32bit binary to the release archives (#83944, @saschagrunert) - Fixed an issue with informers missing an
Addedevent if a recently deleted object was immediately recreated at the same time the informer dropped a watch and relisted. (#83911, @matte21) - Allow dynamically set glog logging level of kube-scheduler (#83910, @mrkm4ntr)
- clean duplicate GetPodServiceMemberships function (#83902, @gongguan)
- Add information from Lease object corresponding to a given Node to kubectl describe node output (#83899, @wojtek-t)
- Gives the right error message when using
kubectl deletea wrong resource. (#83825, @zhouya0) - The userspace mode of kube-proxy no longer confusingly logs messages about deleting endpoints that it is actually adding. (#83644, @danwinship)
- Add latency and request count metrics for scheduler framework. (#83569, @liu-cong)
- ETCD version monitor metrics are now marked as with the ALPHA stability level. (#83283, @RainbowMango)
- Significant kube-proxy performance improvements when using Endpoint Slices at scale. (#83206, @robscott)
- Upgrade default etcd server version to 3.3.17 (#83804, @jpbetz)
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 37583337b992d9a5ebe5a4677e08c13617b8b9db9ee8f049773b624351c00acacf02daca2f87a357aaa75edcc3a4db2c64e6a7da502a6153d06e228ff6be6006 |
| kubernetes-src.tar.gz | a44fee5be20c7fb64c58d0a69377074db05ec6889892c93ce970406cb393a1fde60a75612e74802cb2e0085b6357183c1f30e4b322dacf6f30597ab5fd5948f9 |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-386.tar.gz | 4aa92894eeaedb022e5409e08784ce1bd34ba268032ef93ad4c438b6ed9f1a210222f5f4a4fc68198d71e167c78bb7695459e4c99059898e1e0cf7c1ae70080c |
| kubernetes-client-darwin-amd64.tar.gz | 1815a3bdd1c13782026fced8720201dea2e518dc56a43e2b53f89341108f03ec0b5ea6efadd8460ab1715b65ae52f9bdd49066f716573e0d76ff3036e193b8d3 |
| kubernetes-client-linux-386.tar.gz | 9a470907d6203e69c996f8db3cc257af23f9b35236ee2d5a87d22cd6056eef4f07671cd5711ec4999c1edd93385c4f7e5d6d0b8096404e88414a1ed83b58de4f |
| kubernetes-client-linux-amd64.tar.gz | 011d44cf35c841d331a5a0d88b8a5deb7781fa678702ac6402050d096e72396dc76ccaa67a371273bc428612536357c19306d250bd47db4ac5147ff8cc5e1296 |
| kubernetes-client-linux-arm.tar.gz | 1f45d9a9852d2b0a0420b0a26b3add9031d7d691c55660d60580614e6ab6e2d732017832ed3f737f8a43db088e91b64edf12298675be6d128775dce3e4d0ddbe |
| kubernetes-client-linux-arm64.tar.gz | e355f69caed044e5e27efe7ae42027e799a87ec647810fbadf644d147de2f6bd478e338ebb211044a9e6483d32f3534cc40d7b4d735d16d3b6c55e7975515f20 |
| kubernetes-client-linux-ppc64le.tar.gz | 355e0d8c5f241bc2303c38447c241ff8f5151af51aeacf15fa2b96e2721ecc011b5aec84c3f93a26aad86aa29179d16054e34d45bff2824c1abbf1deb571f0f5 |
| kubernetes-client-linux-s390x.tar.gz | 7cdfc6cde7922290b46f291a168519f4c923fee97968399940164a8a7d8592701b262b30fa299c13f025c70f46f5d32c17a9699f0bf3e5bd55ab4811f01f59ed |
| kubernetes-client-windows-386.tar.gz | 7170da100b2d1d8700990c4175c7d048347b8dcc71e0ceb6c01728f5e6266dd0d5766e5206820d9e54d243ffa73abd5dd72715d6984598655f6160d43cb45a15 |
| kubernetes-client-windows-amd64.tar.gz | 74484b5c841e1c57c9baf88b84a9cbf3b9865527a8723815cbe8e7384805c80d971126c0b54d52e446d55b04e209984461ec8a8eff4c58aaa50397db0111cca5 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 3fb3c5da6e45b32e8d89d4914f0b04cf95242cb0e4ea70b06a665c2975d8b6bbff6206e1f8769f49836b9dc12fb0946cc1986e475945413aff053661941f622b |
| kubernetes-server-linux-arm.tar.gz | ff71c9a3f81f2e43d541b9b043e5f43fd30972c2b0ae5d9f3992f76effdcab2d027835844109ee3b501e365994f97aa5b6528a9d23db8ec3f05af6cb6d0e01d0 |
| kubernetes-server-linux-arm64.tar.gz | 26b9fce5ed930ad3eea5eeab3bec3b009f65837139f7da3644aacdcccda654fe542b03e1c4280950ca561f624ef24da01acff23e3f3b72d1001d794c8d6aa230 |
| kubernetes-server-linux-ppc64le.tar.gz | ad980f5efe83da1f2a202035eb1cff44ea72692fc3fc5f7d23fd8fc3b80a6797dbb263cc240d8fd2cde80a786b48352127f52c0a1db02e9d09a44440c1704406 |
| kubernetes-server-linux-s390x.tar.gz | 8e1ab7abd4c13c3d4211e5dd1be63ecd482691fd2cb7b2d3492bb2a02003ec33abe0a7b26e4e93f9586c5fc6fddbfbb559c4c28dcdc65564aeadceb2bc543a7d |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | c0928e414e439ba63321ce770a04ea332a4cc93ec87dd9d222fe3f5a593995111a6c0a60a413018d59367df6b4d0ab6f64904551f29f5c94ea406c68cc43b3b3 |
| kubernetes-node-linux-arm.tar.gz | 990a253ba49203348a587ca4d4acf7c25ff47a97b39519dfc7d5bdc2f3ea4713930e17dc6b9ff02a2a6ae2e84011d05d4471dfbfe1ab0627c102f9aa2205114d |
| kubernetes-node-linux-arm64.tar.gz | 79381ad17eefc679fb549126eba23ffa65e625d0e1fec459dd54823897947b17a0e7ef6f446dc9e54f16b3e4995e4a084146dcf895e994813233953a3795e3a3 |
| kubernetes-node-linux-ppc64le.tar.gz | 7cfea9b9fa27dcc2024260e19d5e74db2175b491093c8906721d99c94b46af1c2b3ad91fe0fb799de639191fcb0e8ceab1b67bb260d615825002a3239c7b3ed0 |
| kubernetes-node-linux-s390x.tar.gz | 590bc2afd835a4a236a4a2ab2cde416aae9efdec14c34355a54b671d89308f3729f5af076139cc9c78e323666565ba1fa441149b681fc6addcab133205a3c41f |
| kubernetes-node-windows-amd64.tar.gz | 4c15c7c30de0f9d921b534433332b14eb685ad8a3a416315def1cc1064b802227ea4b556bc53a68d75be898b49acadee8317a2355635a69d1c4d305d890e5009 |
- Expand scheduler priority functions and scheduling framework plugins' node score range to [0, 100]. action required. Note: this change is internal and does not affect extender and RequestedToCapacityRatio custom priority, which are still expected to provide a [0, 10] range. (#83522, @draveness)
- action required: kubeadm: when adding extra apiserver authorization-modes, the defaults "Node,RBAC" are no longer prepended in the resulting static Pod manifests and a full override is allowed. (#82616, @ghouscht)
- ACTION REQUIRED: kubeadm: properly enable kubelet client certificate rotation on primary control-plane nodes, created using "kubeadm init". A side effect of this change is that for external CA users, kubeadm now requires "bootstrap-kubelet.conf" instead of "kubelet.conf" during "kubeadm init" and its phases. (#83339, @neolit123)
- Action Required:
kubeadm.k8s.io/v1beta1has been deprecated, you should update your config to use newer non-deprecated API versions. (#83276, @Klaven)
- [migration phase 1] PodFitsHostPorts as filter plugin (#83659, @wgliang)
- [migration phase 1] PodFitsResources as framework plugin (#83650, @wgliang)
- Fixed attachment of AWS volumes that have just been detached. (#83567, @jsafrane)
- [migration phase 1] PodMatchNodeSelector/NodAffinity as filter plugin (#83660, @wgliang)
- Upgrade to etcd client 3.3.17 to fix bug where etcd client does not parse IPv6 addresses correctly when members are joining, and to fix bug where failover on multi-member etcd cluster fails certificate check on DNS mismatch (#83801, @jpbetz)
- Fixed panic when accessing CustomResources of a CRD with x-kubernetes-int-or-string. (#83787, @sttts)
- Change
pod_preemption_victimsmetric from Gauge to Histogram. (#83603, @Tabrizian) - Expose SharedInformerFactory in the framework handle (#83663, @draveness)
- Add more tracing steps in generic_scheduler (#83539, @wgliang)
- [migration phase 1] PodFitsHost as filter plugin (#83662, @wgliang)
- The topology manager aligns resources for pods of all QoS classes with respect to NUMA locality, not just Guaranteed QoS pods. (#83492, @ConnorDoyle)
- Fix unsafe JSON construction in a number of locations in the codebase (#81158, @zouyee)
- Fixed a bug in the single-numa-node policy of the TopologyManager. Previously, pods that only requested CPU resources and did not request any third-party devices would fail to launch with a TopologyAffinity error. Now they will launch successfully. (#83697, @klueska)
- Add per-pod scheduling metrics across 1 or more schedule attempts. (#83674, @liu-cong)
- Fix validation message to mention bytes, not characters. (#80880, @DirectXMan12)
- external facing APIs in pluginregistration and deviceplugin packages are now available under k8s.io/kubelet/pkg/apis/ (#83551, @dims)
- Fix error where metrics related to dynamic kubelet config isn't registered (#83184, @odinuge)
- The VolumeSubpathEnvExpansion feature is graduating to GA. The
VolumeSubpathEnvExpansionfeature gate is unconditionally enabled, and will be removed in v1.19. (#82578, @kevtaylor) - Openstack: Do not delete managed LB in case of security group reconciliation errors (#82264, @multi-io)
- The mutating and validating admission webhook plugins now read configuration from the admissionregistration.k8s.io/v1 API. (#80883, @liggitt)
- kubeadm: implemented structured output of 'kubeadm token list' in JSON, YAML, Go template and JsonPath formats (#78764, @bart0sh)
- kube-proxy: a configuration file specified via
--configis now loaded with strict deserialization, which fails if the config file contains duplicate or unknown fields. This protects against accidentally running with config files that are malformed, mis-indented, or have typos in field names, and getting unexpected behavior. (#82927, @obitech) - Add "podInitialBackoffDurationSeconds" and "podMaxBackoffDurationSeconds" to the scheduler config API (#81263, @draveness)
- Authentication token cache size is increased (from 4k to 32k) to support clusters with many nodes or many namespaces with active service accounts. (#83643, @lavalamp)
- Bumps the minimum version of Go required for building Kubernetes to 1.12.4. (#83596, @jktomer)
- kube-proxy iptables probabilities are now more granular and will result in better distribution beyond 319 endpoints. (#83599, @robscott)
- Fixed the bug that deleted services were processed by EndpointSliceController repeatedly even their cleanup were successful. (#82996, @tnqn)
- If a bad flag is supplied to a kubectl command, only a tip to run --help is printed, instead of the usage menu. Usage menu is printed upon running
kubectl command --help. (#82423, @sallyom) - If container fails because ContainerCannotRun, do not utilize the FallbackToLogsOnError TerminationMessagePolicy, as it masks more useful logs. (#81280, @yqwang-ms)
- Fixed cleanup of raw block devices after kubelet restart. (#83451, @jsafrane)
- Commands like
kubectl applynow return errors if schema-invalid annotations are specified, rather than silently dropping the entire annotations section. (#83552, @liggitt) - Expose kubernetes client in the scheduling framework handle. (#82432, @draveness)
- kubeadm: fix wrong default value for the "upgrade node --certificate-renewal" flag. (#83528, @neolit123)
- IP validates if a string is a valid IP address (#83104, @zouyee)
- The
--certificate-authorityflag now correctly overrides existing skip TLS or CA data settings in the kubeconfig file (#83547, @liggitt) - hyperkube will now be available in a new github repository and will not be included in the kubernetes release from 1.17 onwards (#83454, @dims)
- more complete and accurate logging of stack backtraces in E2E failures (#82176, @pohly)
- Kubeadm: add support for 127.0.0.1 as advertise address. kubeadm will automatically replace this value with matching global unicast IP address on the loopback interface. (#83475, @fabriziopandini)
- Rename PluginContext to CycleState in the scheduling framework (#83430, @draveness)
- kube-scheduler: a configuration file specified via
--configis now loaded with strict deserialization, which fails if the config file contains duplicate or unknown fields. This protects against accidentally running with config files that are malformed, mis-indented, or have typos in field names, and getting unexpected behavior. (#83030, @obitech) - Significant kube-proxy performance improvements for non UDP ports. (#83208, @robscott)
- Fixes a flaw (CVE-2019-11253) in json/yaml decoding where large or malformed documents could consume excessive server resources. Request bodies for normal API requests (create/delete/update/patch operations of regular resources) are now limited to 3MB. (#83261, @liggitt)
| filename | sha512 hash |
|---|---|
| kubernetes.tar.gz | 40985964b5f4b1e1eb448a8ca61ae5fe05b76cf4e97a4a6b0df0f7933071239ed8c3a6753d8ed8ba0c963694c0f94cce2b5976ddcc0386018cdc66337d80d006 |
| kubernetes-src.tar.gz | 475dfeb8544804dcc206f2284205fb1ee0bcb73169419be5e548ff91ffe6a35cea7e94039af562baee15933bef3afaa7ff10185e40926c7baa60d5936bcc9c1b |
| filename | sha512 hash |
|---|---|
| kubernetes-client-darwin-386.tar.gz | 3f894661ed9b6ed3e75b6882e6c3e4858325f3b7c5c83cb8f7f632a8c8f30dd96a7dd277e4676a8a2ab598fe68da6473f414b494c63bfb4ed386a20dad7ae11a |
| kubernetes-client-darwin-amd64.tar.gz | f3070d79b0835fdc0791bbc31a334d8b46bf1bbb02f389c871b31063417598d17dd464532df420f2fa0dbbbb9f8cc0730a7ca4e19af09f873e0777d1e296f20c |
| kubernetes-client-linux-386.tar.gz | 64e8961fa32a18a780e40b753772c6794c90a6dd5834388fd67564bb36f5301ea82377893f51e7c7c7247f91ca813e59f5f293522a166341339c2e5d34ac3f28 |
| kubernetes-client-linux-amd64.tar.gz | d7ba0f5f4c879d8dcd4404a7c18768190f82985425ab394ddc832ee71c407d0ac517181a24fd5ca2ebfd948c6fa63d095a43c30cf195c9b9637e1a762a2d8d2f |
| kubernetes-client-linux-arm.tar.gz | 36fc47ee9530ee8a89d64d4be6b78b09831d0838a01b63d2a824a9e7dd0c2127ef1b49f539d16ba1248fbf40a7eb507b968b18c59080e7b80a7a573138218e36 |
| kubernetes-client-linux-arm64.tar.gz | a0a8fba0f4424f0a1cb7bad21244f47f98ba717165eaa49558c2612e1949a1b34027e23ccbd44959b391b6d9f82046c5bc07eb7d773603b678bbc0e5bf54502c |
| kubernetes-client-linux-ppc64le.tar.gz | eaae9ed0cc8c17f27cff31d92c95c11343b9f383de27e335c83bfdf236e6da6ab55a9d89b3e0b087be159d6b64de21827ca19c861ecfb6471b394ea3720bcb61 |
| kubernetes-client-linux-s390x.tar.gz | 994cf2dc42d20d36956a51b98dde31a00eae3bd853f7be4fbc32f48fec7b323a47ea5d841f31d2ca41036d27fbfaa3be4f2286654711245accf01c3be81f540c |
| kubernetes-client-windows-386.tar.gz | 68ebe4abea5a174eb189caea567e24e87cca57e7fbc9f8ec344aafbaf48c892d52d179fef67f9825be0eb93f5577f7573873b946e688de78c442c798a5b426bc |
| kubernetes-client-windows-amd64.tar.gz | f29cd3caf5b40622366eae87e8abb47bea507f275257279587b507a00a858de87bcfa56894ae8cd6ba754688fd5cdf093ce6c4e0d0fd1e21ca487a3a8a9fd9f9 |
| filename | sha512 hash |
|---|---|
| kubernetes-server-linux-amd64.tar.gz | 93e560e8572c6a593583d20a35185b93d04c950e6b1980a7b40ca5798958d184724ddebd1fa9377cfe87be4d11169bdba2a9f7fa192690f9edae04779aaf93a4 |
| kubernetes-server-linux-arm.tar.gz | fe2af93336280e1251f97afecbdfb7416fd9dd7d08b3e5539abeea8ccaf7114cac399e832fa52359d2bc63ec9f8703ae3bca340db85f9b764816f4c36e4eefee |
| kubernetes-server-linux-arm64.tar.gz | efc32c8477efda554d8e82d6e52728f58e706d3d53d1072099b3297c310632e8adece6030427154287d5525e74158c0b44a33421b3dd0ffb57372d63768e82ec |
| kubernetes-server-linux-ppc64le.tar.gz | bda4fce6f5be7d0102ff265e0ba10e4dab776caeba1cebdf57db9891a34b4974fa57ac014aa6eca2dcfc1b64e9f67c8168e18026ae30c72ba61205d180f6e8ff |
| kubernetes-server-linux-s390x.tar.gz | 655c7157176f4f972c80877d73b0e390aaff455a5dcd046b469eb0f07d18ea1aaef447f90127be699e74518072ea1605652798fa431eb6ac7ee4e4fd85676362 |
| filename | sha512 hash |
|---|---|
| kubernetes-node-linux-amd64.tar.gz | 1ec25c0350973ed06f657f2b613eb07308a9a4f0af7e72ebc5730c3c8d39ce3139a567acc7a224bebbe4e3496633b6053082b7172e2ce76b228c4b697f03f3d1 |
| kubernetes-node-linux-arm.tar.gz | c65ac3db834596bcb9e81ffa5b94493244385073a232e9f7853759bce2b96a8199f79081d2f00a1b5502d53dc1e82a89afa97ffdb83994f67ebc261de9fb62b9 |
| kubernetes-node-linux-arm64.tar.gz | 0de8af66269db1ef7513f92811ec52a780abb3c9c49c0a4de9337eb987119bb583d03327c55353b4375d233e1a07a382cc91bdbf9477cf66e3f9e7fb0090499e |
| kubernetes-node-linux-ppc64le.tar.gz | adb43c68cd5d1d52f254a14d80bb66667bfc8b367176ff2ed242184cf0b5accd3206bcbd42dec3f132bf1a230193812ae3e7a0c48f68634cb5f67538385e142a |
| kubernetes-node-linux-s390x.tar.gz | 1c834cfc06b9ba4a6da3bca2d504b734c935436546bc9304c7933e256dba849d665d34e82f48180f3975a907d37fec5ffb929923352ff63e1d3ff84143eea65b |
| kubernetes-node-windows-amd64.tar.gz | 6fc54fd17ebb65a6bd3d4efe93a713cc2aaea54599ddd3d73d01e93d6484087271b3ca65ed7a5861090356224140776a9606c10873b6b106bc9a6634c25b1677 |
- The deprecated feature gates
GCERegionalPersistentDisk,EnableAggregatedDiscoveryTimeoutandPersistentLocalVolumesare now unconditionally enabled and can no longer be specified in component invocations. (#82472, @draveness) - ACTION REQUIRED: (#81668, @darshanime)
- Deprecate the default service IP CIDR. The previous default was
10.0.0.0/24which will be removed in 6 months/2 releases. Cluster admins must specify their own desired value, by using--service-cluster-ip-rangeon kube-apiserver.
- Deprecate the default service IP CIDR. The previous default was
- Remove deprecated "include-uninitialized" flag. action required (#80337, @draveness)
- Bump version of event-exporter to 0.3.1, to switch it to protobuf. (#83396, @loburm)
- kubeadm: use the --service-cluster-ip-range flag to init or use the ServiceSubnet field in the kubeadm config to pass a comma separated list of Service CIDRs. (#82473, @Arvinderpal)
- Remove MaxPriority in the scheduler API, please use MaxNodeScore or MaxExtenderPriority instead. (#83386, @draveness)
- Fixes a goroutine leak in kube-apiserver when a request times out. (#83333, @lavalamp)
- Some scheduler extender API fields are moved from
pkg/scheduler/apitopkg/scheduler/apis/extender/v1. (#83262, @Huang-Wei) - Fix aggressive VM calls for Azure VMSS (#83102, @feiskyer)
- Update Azure load balancer to prevent orphaned public IP addresses (#82890, @chewong)
- Use online nodes instead of possible nodes when discovering available NUMA nodes (#83196, @zouyee)
- Fix typos in
certificates.k8s.io/v1beta1KeyUsage constant names:UsageContentCommittmentbecomesUsageContentCommitmentandUsageNetscapSGCbecomesUsageNetscapeSGC. (#82511, @abursavich) - Fixes the bug in informer-gen that it produces incorrect code if a type has nonNamespaced tag set. (#80458, @tatsuhiro-t)
- Update to go 1.12.10 (#83139, @cblecker)
- Update crictl to v1.16.1. (#82856, @Random-Liu)
- Reduces the number of calls made to the Azure API when requesting the instance view of a virtual machine scale set node. (#82496, @hasheddan)
- Consolidate ScoreWithNormalizePlugin into the ScorePlugin interface (#83042, @draveness)
- On AWS nodes with multiple network interfaces, kubelet should now more reliably report the same primary node IP. (#80747, @danwinship)
- Fixes kube-proxy bug accessing self nodeip:port on windows (#83027, @liggitt)
- Resolves bottleneck in internal API server communication that can cause increased goroutines and degrade API Server performance (#80465, @answer1991)
- The deprecated mondo
kubernetes-testtarball is no longer built. Users running Kubernetes e2e tests should use thekubernetes-test-portableandkubernetes-test-{OS}-{ARCH}tarballs instead. (#83093, @ixdy) - Improved performance of kube-proxy with EndpointSlice enabled with more efficient sorting. (#83035, @robscott)
- New APIs to allow adding/removing pods from pre-calculated prefilter state in the scheduling framework (#82912, @ahg-g)
- Conformance tests may now include disruptive tests. If you are running tests against a live cluster, consider skipping those tests tagged as
Disruptiveto avoid non-test workloads being impacted. Be aware, skipping any conformance tests (even disruptive ones) will make the results ineligible for consideration for the CNCF Certified Kubernetes program. (#82664, @johnSchnake) - Resolves regression generating informers for packages whose names contain
.characters (#82410, @nikhita) - Added metrics 'authentication_latency_seconds' that can be used to understand the latency of authentication. (#82409, @RainbowMango)
- kube-dns add-on: (#82347, @pjbgf)
-
- All containers are now being executed under more restrictive privileges.
-
- Most of the containers now run as non-root user and has the root filesystem set as read-only.
-
- The remaining container running as root only has the minimum Linux capabilities it requires to run.
-
- Privilege escalation has been disabled for all containers.
-
- k8s dockerconfigjson secrets are now compatible with docker config desktop authentication credentials files (#82148, @bbourbie)
- Use ipv4 in wincat port forward. (#83036, @liyanhui1228)
- Added Clone method to the scheduling framework's PluginContext and ContextData. (#82951, @ahg-g)
- Bump metrics-server to v0.3.5 (#83015, @olagacek)
- dashboard: disable the dashboard Deployment on non-Linux nodes. This step is required to support Windows worker nodes. (#82975, @wawa0210)
- Fix possible fd leak and closing of dirs when using openstack (#82873, @odinuge)
- PersistentVolumeLabel admission plugin, responsible for labeling
PersistentVolumeswith topology labels, now does not overwrite existing labels on PVs that were dynamically provisioned. It trusts the dynamic provisioning that it provided the correct labels to thePersistentVolume, saving one potentially expensive cloud API call.PersistentVolumescreated manually by users are labelled by the admission plugin in the same way as before. (#82830, @jsafrane) - Fixes a panic in kube-controller-manager cleaning up bootstrap tokens (#82887, @tedyu)
- Fixed a scheduler panic when using PodAffinity. (#82841, @Huang-Wei)
- Modified the scheduling framework's Filter API. (#82842, @ahg-g)
- Fix panic in kubelet when running IPv4/IPv6 dual-stack mode with a CNI plugin (#82508, @aanm)
- Kubernetes no longer monitors firewalld. On systems using firewalld for firewall (#81517, @danwinship)
- maintenance, kube-proxy will take slightly longer to recover from disruptive
- firewalld operations that delete kube-proxy's iptables rules.
- Added cloud operation count metrics to azure cloud controller manager. (#82574, @kkmsft)
- Report non-confusing error for negative storage size in PVC spec. (#82759, @sttts)
- When registering with a 1.17+ API server, MutatingWebhookConfiguration and ValidatingWebhookConfiguration objects can now request that only
v1AdmissionReview requests be sent to them. Previously, webhooks were required to support receivingv1beta1AdmissionReview requests as well for compatibility with API servers <= 1.15. (#82707, @liggitt) * When registering with a 1.17+ API server, a CustomResourceDefinition conversion webhook can now request that onlyv1ConversionReview requests be sent to them. Previously, conversion webhooks were required to support receivingv1beta1ConversionReview requests as well for compatibility with API servers <= 1.15. - Resolves issue with /readyz and /livez not including etcd and kms health checks (#82713, @logicalhan)
- fix: azure disk detach failure if node not exists (#82640, @andyzhangx)
- Single static pod files and pod files from http endpoints cannot be larger than 10 MB. HTTP probe payloads are now truncated to 10KB. (#82669, @rphillips)
- Restores compatibility with <=1.15.x custom resources by not publishing OpenAPI for non-structural custom resource definitions (#82653, @liggitt)
- Take the context as the first argument of Schedule. (#82119, @wgliang)
- Fixes regression in logging spurious stack traces when proxied connections are closed by the backend (#82588, @liggitt)
- Correct a reference to a not/no longer used kustomize subcommand in the documentation (#82535, @demobox)
- Limit the body length of exec readiness/liveness probes. remote CRIs and Docker shim read a max of 16MB output of which the exec probe itself inspects 10kb. (#82514, @dims)
- fixed an issue that the correct PluginConfig.Args is not passed to the corresponding PluginFactory in kube-scheduler when multiple PluginConfig items are defined. (#82483, @everpeace)
- Adding TerminationGracePeriodSeconds to the test framework API (#82170, @vivekbagade)
- /test/e2e/framework: Adds a flag "non-blocking-taints" which allows tests to run in environments with tainted nodes. String value should be a comma-separated list. (#81043, @johnSchnake)