Kubernetes 1.13.0 alpha 1 釋出，容器編排工具

摘要： Kubernetes 1.13.0 alpha 1 釋出了，Kubernetes  是一個開源的、用於管理雲平臺中多個主機上的容器化的應用，Kubernetes 的目標是讓部署容器化的應用簡單並且高效，Kubernetes 提供了應用部署、規劃、更新與維護的一種機制。 此次更...

Kubernetes 1.13.0 alpha 1 釋出了，Kubernetes  是一個開源的、用於管理雲平臺中多個主機上的容器化的應用，Kubernetes 的目標是讓部署容器化的應用簡單並且高效，Kubernetes 提供了應用部署、規劃、更新與維護的一種機制。

此次更新內容如下：

Action Required

• kube-apiserver: the deprecated--etcd-quorum-read flag has been removed, and quorum reads are always enabled when fetching data from etcd. (ofollow,noindex" target="_blank">#69527 , @liggitt )

• Moved staging/src/k8s.io/client-go/tools/bootstrap to staging/src/k8s… (#67356 , @yliaog )

• [action required] kubeadm: Thev1alpha2 config API has been removed. (#69055 , @fabriziopandini )

• Please convert yourv1alpha2 configuration files to v1alpha3 using the

• kubeadm config migrate command of kubeadm v1.12.x

Other notable changes

• Refactor factory_test.go to use a fake k8s client. (#69412 , @tossmilestone )

• kubeadm: fix a case where fetching a kubernetesVersion from the internet still happened even if some commands don't need it. (#69645 , @neolit123 )

• Add tolerations for Stackdriver Logging and Metadata Agents. (#69737 , @qingling128 )

• Fix a bug in the scheduler that could cause the scheduler to go to an infinite loop when all nodes in a zone are removed. (#69758 , @bsalamat )

• Dry-run is promoted to Beta and will be enabled by default. (#69644 , @apelisse )

• kubectl get priorityclass now prints value column by default. (#69431 , @Huang-Wei )

• Added a new container based image for running e2e tests (#69368 , @dims )

• Remove the deprecated --google-json-key flag from kubelet. (#69354 , @yujuhong )

• kube-apiserver: fixesprocMount field incorrectly being marked as required in openapi schema (#69694 , @jessfraz )

• TheLC_ALL and LC_MESSAGES env vars can now be used to set desired locale for kubectl while keeping LANG unchanged. (#69500 , @m1kola )

• Add ability to control primary GID of containers through Pod Spec and PodSecurityPolicy (#67802 , @krmayankk )

• NodeLifecycleController: Now node lease renewal is treated as the heartbeat signal from the node, in addition to NodeStatus Update. (#69241 , @wangzhen127 )

• [GCE] Enable by default audit logging truncating backend. (#68288 , @loburm )

• Enable insertId generation, and update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s. This help reduce log duplication and guarantee log order. (#68920 , @qingling128 )

• Move NodeInfo utils into pkg/scheduler/cache. (#69495 , @wgliang )

• adds dynamic shared informers to write generic, non-generated controllers (#69308 , @p0lyn0mial )

• Move CacheComparer to pkg/scheduler/internal/cache/comparer. (#69317 , @wgliang )

• Updating OWNERS list for vSphere Cloud Provider. (#69187 , @SandeepPissay )

• The default storage class annotation for the storage addons has been changed to use the GA variant (#68345 , @smelchior )

• Upgrade to etcd 3.3 client (#69322 , @jpbetz )

• fix GetVolumeLimits log flushing issue (#69558 , @andyzhangx )

• It is now possible to use named ports in thekubectl port-forward command (#69477 , @m1kola )

• kubeadm: fix a possible scenario where kubeadm can pull much newer control-plane images (#69301 , @neolit123 )

• test/e2e/e2e.test: (#69105 , @pohly ) * -viper-config can be used to set also the options defined by command line flags * the default config file is "e2e.yaml/toml/json/..." and the test starts when no such config is found (as before) but if -viper-config is used, the config file must exist * -viper-config can be used to select a file with full path, with or without file suffix * the csiImageVersion/Registry flags were renamed to storage.csi.imageVersion/Registry

• Move FakeCache to pkg/scheduler/internal/cache/fake. (#69318 , @wgliang )

• The "kubectl cp" command now supports path shortcuts (../) in remote paths. (#65189 , @juanvallejo )

• Fixed subpath in containerized kubelet. (#69565 , @jsafrane )

• The runtimeHandler field on the RuntimeClass resource now accepts the empty string. (#69550 , @tallclair )

• Kubelet can now parse PEM file containing both TLS certificate and key in arbitrary order. Previously key was always required to be first. (#69536 , @awly )

• Scheduling conformance tests related to daemonsets should set the annotation that relaxes node selection restrictions, if any are set. This ensures conformance tests can run on a wider array of clusters. (#68793 , @aveshagarwal )

• Replace Parallelize with function ParallelizeUntil and formally deprecate the Parallelize. (#68403 , @wgliang )

• Move scheduler cache interface and implementation to pkg/scheduler/internal/cache. (#68968 , @wgliang )

• Update to use go1.11.1 (#69386 , @cblecker )

• Any external provider should be aware the cloud-provider interface should be imported from :- (#68310 , @cheftako )

• cloudprovider "k8s.io/cloud-provider"

• kubeadm: Fix a crash if the etcd local alpha phase is called when the configuration contains an external etcd cluster (#69420 , @ereslibre )

• kubeadm now allows mixing of init/cluster and join configuration in a single YAML file (although a warning gets printed in this case). (#69426 , @rosti )

• Code-gen: Remove lowercasing for project imports (#68484 , @jsturtevant )

• Fix client cert setup in delegating authentication logic (#69430 , DirectXMan12" rel="nofollow,noindex" target="_blank">@DirectXMan12 )

• service.beta.kubernetes.io/aws-load-balancer-internal now supports true and false values, previously it only supported non-empty strings (#69436 , @mcrute )

• OpenAPI spec and API reference now reflect dryRun query parameter for POST/PUT/PATCH operations (#69359 , @roycaihw )

• kubeadm: Add av1beta1 API. (#69289 , @fabriziopandini )

• kube-apiserver has removed support for theetcd2 storage backend (deprecated since v1.9). Existing clusters must migrate etcd v2 data to etcd v3 storage before upgrading to v1.13. (#69310 , @liggitt )

• List operations against the API now return internal server errors instead of partially complete lists when a value cannot be transformed from storage. The updated behavior is consistent with all other operations that require transforming data from storage such as watch and get. (#69399 , @mikedanese )

• kubectl wait now supports condition value checks other than true using --for condition=available=false (#69295 , @deads2k )

• CCM server will not listen insecurely if secure port is specified (#68982 , @aruneli )

• Bump cluster-proportional-autoscaler to 1.3.0 (#69338 , @MrHohn )

• Rebase docker image on scratch.

• fix inconsistency in windows kernel proxy when updating HNS policy. (#68923 , @delulu )

• Fixes the sample-apiserver so that its BanFlunder admission plugin can be used. (#68417 , @MikeSpreitzer )

• Fixed CSIDriver API object to allow missing fields. (#69331 , @jsafrane )

• Bump addon-manager to v8.8 (#69337 , @MrHohn )

• Rebase docker image on debian-base:0.3.2.

• Update defaultbackend image to 1.5. Users should concentrate on updating scripts to the new version. (#69120 , @aledbf )

• Bump Dashboard version to v1.10.0 (#68450 , @jeefy )

• Fixed panic on iSCSI volume tear down. (#69140 , @jsafrane )

• Update defaultbackend to v1.5 (#69334 , @bowei )

• Remove unused chaosclient. (#68409 , @wgliang )

• Enable AttachVolumeLimit feature (#69225 , @gnufied )

• Update crictl to v1.12.0 (#69033 , @feiskyer )

• Wait for pod failed event in subpath test. (#69300 , @mrunalp )

• [GCP] Added env variables to control CPU requests of kube-controller-manager and kube-scheduler. (#68823 , @loburm )

• Bump up pod short start timeout to 2 minutes. (#69291 , @mrunalp )

• Use the mounted "/var/run/secrets/kubernetes.io/serviceaccount/token" as the token file for running in-cluster based e2e testing. (#69273 , @dims )

• apiservice availability related to networking glitches are corrected faster (#68678 , @deads2k )

• extract volume attachment status checking operation as a common function when attaching a CSI volume (#68931 , @mlmhl )

• PodSecurityPolicy objects now support aMayRunAs rule for fsGroup and supplementalGroups options. This allows specifying ranges of allowed GIDs for pods/containers without forcing a default GID the way MustRunAs does. This means that a container to which such a policy applies to won't use any fsGroup/supplementalGroup GID if not explicitly specified, yet a specified GID must still fall in the GID range according to the policy. (#65135 , @stlaz )

• Images for cloud-controller-manager, kube-apiserver, kube-controller-manager, and kube-scheduler now contain a minimal /etc/nsswitch.conf and should respect /etc/hosts for lookups (#69238 , @BenTheElder )

• add deprecation warning for all cloud providers (#69171 , @andrewsykim )

• IPVS proxier mode now support connection based graceful termination. (#66012 , @Lion-Wei )

• Fix panic in kubectl rollout commands (#69150 , @soltysh )

• Add fallbacks to ARM API when getting empty node IP from Azure IMDS (#69077 , @feiskyer )

• Deduplicate PATH items when reading plugins. (#69089 , @soltysh )

• Adds permissions for startup of an on-cluster kube-controller-manager (#69062 , @dghubble )

• Fixes issue [#68899 ](https://github.com/kubernetes/kubernetes/issues/68899 ) where pods might schedule on an unschedulable node. (#68984 , @k82cn )

• Returns error if NodeGetInfo fails. (#68979 , @xing-yang )

• Pod disruption budgets shouldn't be checked for terminal pods while evicting (#68892 , @ravisantoshgudimetla )

• Fix scheduler crashes when Prioritize Map function returns error. (#68563 , @DylanBLE )

• kubeadm: create control plane with ClusterFirstWithHostNet DNS policy (#68890 , @andrewrynhard )

• Reduced excessive logging from fluentd-gcp-scaler. (#68837 , @x13n )

• adds dynamic lister (#68748 , @p0lyn0mial )

• kubectl: add the --no-headers flag tokubectl top ... (#67890 , @WanLinghao )

• Restrict redirect following from the apiserver to same-host redirects, and ignore redirects in some cases. (#66516 , @tallclair )

• Fixed pod cleanup when /var/lib/kubelet is a symlink. (#68741 , @jsafrane )

• Add "only_cpu_and_memory" GET parameter to /stats/summary http handler in kubelet. If parameter is true then only cpu and memory will be present in response. (#67829 , @krzysztof-jastrzebski )

• Start synchronizing pods after network is ready. (#68752 , @krzysztof-jastrzebski )

• kubectl has gained new --profile and --profile-output options to output go profiles (#68681 , @dlespiau )

• Provides FSGroup capability on FlexVolume driver. It allows to disable the VolumeOwnership operation when volume is mounted (#68680 , @benoitf )

• Apply _netdev mount option on bind mount (#68626 , @gnufied )

• fix UnmountDevice failure on Windows (#68608 , @andyzhangx )

• Allows changing nodeName in endpoint update. (#68575 , @prameshj )

• kube-apiserver would return 400 Bad Request when it couldn't decode a json patch. (#68346 , @CaoShuFeng )

• kube-apiserver would return 422 Unprocessable Entity when a json patch couldn't be applied to one object.

• remove unused ReplicasetControllerOptions (#68121 , @dixudx )

• Pass signals to fluentd process (#68064 , @gianrubio )

• Flex drivers by default do not produce metrics. Flex plugins can enable metrics collection by setting the capability 'supportsMetrics' to true. Make sure the file system can support fs stat to produce metrics in this case. (#67508 , @brahmaroutu )

• Use monotonically increasing generation to prevent scheduler equivalence cache race. (#67308 , @cofyc )

• Fix kubelet service file permission warning (#66669 , @daixiang0 )

• Add prometheus metric for scheduling throughput. (#64526 , @misterikkit )

• Get public IP for Azure vmss nodes. (#68498 , @feiskyer )

• test/integration: add a basic test for covering CronJobs (#66937 , @mortent )

• Make service environment variables optional (#68754 , @bradhoekstra )

更新日誌

下載地址：