Significant changes

Required Actions

Highlighted changes

Full change list

From kops 1.8.1 to 1.9.0

Add list of PRs for 1.8.0 release #3995
Promote alpha channel to stable #3996
Release notes for 1.8.0 #3999
Put stable channel back to jessie for 1.9 / 1.10 #4002
Add missing permissions for NLB creation #3976
Fix filepath concatenation #3973
toolbox dump now dumps instances in alphabetical order #3978
SSH keys - be lazier about keystore creation #3933
Update aws-sdk-go to v1.10.34 #3885
Update bazel / gazelle #4000
When using private DNS add ELB name to the api certificate #3941
Fixed minor typo in 1.8-NOTES.md file #4013
Minor update to docs/getting_started/aws.md #4008
Fix libcgroup dependency typo #4030
Spelling fix in instancegroups.go error msg #4024
Include roles in toolbox dump structured output #3934
Fix URL for Docker 17.03.2 on Debian Stretch #4014
Fix spurious shared InternetGateway renaming #4020
Documentation fix for watchIngress flag in externalDns ClusterSpec #4048
Bastion output line #4053
Downgrade Flannel in Canal deployment to v0.9.0 #4047
Let a user set a hostnameOverride when the cloud provider is aws. #3809
Add additionalNetworkCIDRs to support VPCs with multiple CIDRs in AWS #3898
updating goimports #3947
implement security group task #4016
Implement security group rule task #4017
Update Weave Net to version 2.1.3 #3944
Fix Flannel nonMasqueradeCIDR #3952
Remove world read permissions on sensitive key files. #4022
Update gazelle #4065
Allow additional SGs to be added to API loadbalancer #4036
[Add-on][kube-state-metrics] Bump version #4045
add kube-ingress-aws-controller + skipper addons #3983
Bump flannel packaging version #4064
Bump weave version in bootstrapchannelbuilder ,@justinsb
Adding DescribeTags to masters @robinpercy
Fix node counts @ihoegen
Fix minor typo @kintoandar
Gazelle updates @chrislovecnm
apt-get: specify unattended installation @justinsb
files task: fix potential nil pointer error @justinsb
protokube: fix logging / logic around cluster-id @justinsb
protokube: better discovery of local address @justinsb
Refactor protokube hosts file into its own package @justinsb
assetstore: extract tar files to a temp directory @justinsb
Support for hostPort when using canal @rajivm
validation: don’t require subnet CIDRs on baremetal @justinsb
Use default subnet when creating IG @justinsb
Return apierrors NotFound when object not found @justinsb
Copy dnsprovider into our code, implement route53 batching @justinsb
Remove nodeup templating @justinsb
nodeup: create kubeconfig under admin or root @justinsb
add imagePullProgressDeadline to kubelet config @izakp
Refactor: separate out SSHCredentials from Keyset stores @justinsb
Adds permissions for ELB and NLB req’d by 1.9 @geojaz
work on using files assets @chrislovecnm
fixing bazel @chrislovecnm
Add support for Amazon VPC CNI plugin @aledbf
Support for OIDC ‘username-prefix’ and ‘groups-prefix’ flags @xoen
make it go to f @rcuza
Add Dashboard v1.8.1 @maciaszczykm
fixing goimports formatting @chrislovecnm
Refactor CAStore to use API types @justinsb
Fix code comment on PhaseSecurity @justinsb
Add —subnets and —utility-subnets to kops create cluster @meringu
Update ottoyiu/k8s-ec2-srcdst docker image @aledbf
Refactor: clean up SecretStore to not use KeystoreItem @justinsb
Avoid ListSecrets call in nodeup @justinsb
Remove use of deprecated create-if-missing functions @justinsb
updating bazel files @chrislovecnm
added instance types for f1 family @peterwhitesell
Update code-of-conduct.md @spiffxp
Refactor VFS CA store to reuse keyset from clientset @justinsb
Add audit log format flag for api server @audip
Use bundles when loading keysets @justinsb
Fix null pointer issues when custom PROTOKUBE_IMAGE is specified. @KashifSaadat
Fix documentation of shared resource tags in kops > 1.8 @tsupertramp
Force nodeup to use the bundle @justinsb
Remove labels.yaml @spiffxp
Added a clarification/warning note about exporting full specs @geojaz
Moved paragraph relating to runtimeConfig @steveruckdashel
Add support for cn-northwest-1. @leeeboo
fixing lifecycle type for network in security phase @chrislovecnm
Implement mirroring for API CAStore @justinsb
Documentation Cleanup @rifelpet
Openapi updates @chrislovecnm
Add roundtrip tests for certs & private keys @justinsb
Adding CNI v0.6.0 which is required for Kubernetes 1.9 @chrislovecnm
Remove Romana preview notice from networking docs @rwiggins
Improving bazel make targets, adding a target for kops cli, bumping go_rules version @chrislovecnm
removing inactive approvers @chrislovecnm
Adding override for setting etcd version @chrislovecnm
Initial implementation of bundle command @justinsb
Add experimental kube-discovery @justinsb
Updating Manifest documentation @chrislovecnm
Updating docs README.md file @chrislovecnm
Golang 1.9 @chrislovecnm
adding missed lifecycles in elb code @chrislovecnm
Bump alpha channel for meltdown/spectre @justinsb
kube-discovery: deduplicate multicast responses @justinsb
Add makefile target for kube-discovery image @justinsb
nodeup: don’t warn during distro detection @justinsb
gce: mounter asset has moved @justinsb
Adding cve updates for spectre and meltdown @chrislovecnm
Suggest tweaks to meltdown advisory @justinsb
kops validate cluster can output YAML or JSON @chrislovecnm
GCE: Don’t set bucket-level permissions @justinsb
cloudConfig.elbSecurityGroup under wrong L3 heading @steveruckdashel
Update state and cloudLabels docs, fix —target description @rifelpet
Makefile command “apimachinery” run @wannabesrevenge
VFS: Support io.WriterTo interface @justinsb
Expose the —fail-swap-on flag for kubelet @wannabesrevenge
Cloudformation @tdeshetler
Update binary installation commands for macOS to use curl alone @hopkinsth
Slight changes to commands. @darron
Add SubnetType Tag to Subnets @KashifSaadat
kOps Replace Force @gambol99
docs: upgrade.md: drop DrainAndValidateRollingUpdate note @dkeitel
Bump alpha channel @justinsb
Validate IG MaxSize is not less than MinSize. @mikesplain
Removing duplicate AMI entry from Documentation @AlexLast
Move net mode log after it is known in create @nebril
Implement ability to update Load Balancer subnets @KashifSaadat
Update list of AdmissionControllers for k8s 1.9 @blakebarnett
bazel 0.9.0 running updates @blakebarnett
Upgrade to calico v2.6.6 @blakebarnett
Update bazelbuild/rules_go to 0.9.0 @ixdy
Copy alpha channel to stable @justinsb
Stick with jessie for 1.9 clusters @justinsb
Use jessie for 1.10 as well, to unblock queue @justinsb
Bump kopeio-networking to 1.0.20180120 @justinsb
Promote alpha channel image to stable @justinsb
Update aws-sdk-go to 1.12.57 @leeeboo
Don’t specify require-kubeconfig from 1.10 @justinsb
Fix ASG scaling by adding in ec2:DescribeRegions permission to the nodes IAM role @mikn
fix config file name in aws-china.md @qqshfox
Fix the buildImage command typo @mingyuanzhu
ReadTree: clarify that returns only files @justinsb
Add missing BUILD.bazel for util/pkg/slice @justinsb
bazel: expose version as in Makefile @justinsb
Add license to get_workspace_status & move to .sh @mikesplain
Ensure GCE disk name does not start with a number @justinsb
GCE: Dial down logging @justinsb
Don’t autobuild protobuf files @justinsb
Handle NotFound error when creating instance group @georgebuckerfield
GCE: Don’t require SSH public key @justinsb
AWS LaunchConfiguration error handling fix @justinsb
GCE: Get default project from gcloud CLI @justinsb
When kops searches for AMI by name, if > 1 are returned, uses the latest. @denniswebb
Enable metrics for AutoScalingGroups @johanneswuerbach
Update bastion.md @metaflow
Allow image override for etcd @ottoyiu
Switching the default for kops to create a cluster with RBAC enabled. @chrislovecnm
Fix rootVolumeType accepts all volume types @int128
Interactive cli opt @mrballcb
Bump kubernetes dashboard version to 1.8.1 @stuffandthings
Use 0.9.0 release of nginx-ingress-controller @cap10morgan
VFS: Recognize file:// paths @justinsb
exec target command, but still pipe it to tee @justinsb
Improve S3 url parsing for vfsPath to support more naming conventions @ottoyiu
Update single-to-multi-master.md @jeyglk
Fix broken links for Usage instructions in addons.md @Rcluoyi
update go version and ldflags @oilbeater
Feature/extra terraform config @iMartyn
Update terraform.md @perryao
Extend examples of subnet parameter @dictvm
Update route-related IAM permissions for Romana @cgilmour
update image go version @oilbeater
Fix ccm startup wrt dns controller (set dnsPolicy to Default and host… @wlan0
modify check require-kubeconfig kube version @zhangxiaoyu-zidif
Update kopeio-networking to 1.0.20180203 @justinsb
Remove federation support @justinsb
Documentation spelling/grammar fixes. @lucasreed
Update gazelle @justinsb
Explicitly set go version in bazel build @justinsb
Update submodule dependencies for k8s 1.9 @justinsb
bazel: declare golang 1.9.3 @justinsb
Fix drain command for rolling-updates @KashifSaadat
Add mac build for travis @mikesplain
add support for changing the weave peer connection limit @polarbizzle
Update versions for romana container images @cgilmour
Bump alpha channel to new image @justinsb
Update Weave Net to version 2.2.0 @errordeveloper
Bump weave version to 2.2.0 @justinsb
upup: Make RenderTerraform handle an error from AddOutputVariableArray @kkaneda
Add notes for 1.8.1 release @justinsb
master node requires DescribeRegions when using a bucket from another… @sstarcher
Pick up etcd version changes for a rolling update on master nodes @KashifSaadat
API audit doc changes @shavo007
fix a typo in tool_template.go @yank1
Updating Makefile to the correct versions for the 1.8.1 release @chrislovecnm
Update BUILD files to account for some recent changes @mikesplain
Use dep to maintain vendor directory @justinsb
Update upgrade.md @jar349
Update Cluster Autoscaler image and Reduce the Delta between autoscaler docs @StevenACoffman
Fix wrong backticks markdown. @Antiarchitect
Add live-restore flag to docker config @marciorodrigues87
Fixing problems in dev build script example @chrislovecnm
Add max-requests-inflight parameter @ihoegen
Updates for x1 instance family @manabusakai
Fix instange groups docs @klaus993
Kubernetes Calico TLS @gambol99
Add to aws-china.md to prevent Etag not match the HASH of file. @leeeboo
add storageclasses permissions for cluster-autoscaler:v1.1.0 @mikesimos
Fixing ExistsAndWarnIfChanges so that it will allow a user to pass @chrislovecnm
updating bazel BUILD file @chrislovecnm
Lifecycle overrides @chrislovecnm
Remove submodules @chrislovecnm
Updating variables to use Camel Case @chrislovecnm
Updating missed BUILD files for gazelle @chrislovecnm
Fixing deleting of shared IGW and DHCPOptions @chrislovecnm
Support updating autoscaling metrics @justinsb
Convert registry to k8s.gcr.io @thockin
Updating kops version when using bazel @chrislovecnm
Update apimachinery & ensure we always run goimports @justinsb
Update kube-dns to 1.14.8 @justinsb
kube-dns: turn off negcache @justinsb
Initial support for standalone etcd-manager backups @justinsb
Require kops 1.7.1 (with the CVE fix), recommend kops 1.8.1 @justinsb
Build docker images through bazel @justinsb
Update ingress versions and fix to quay registry @mikesplain
Update AWS Logo In Docs @christopherhein
Change FeatureGates to omitempty under KubeProxyConfig @argais
Use k8s.gcr.io alias only for 1.10 @christopherhein, #4494
Fix -ldflags incompatibility in go1.10 #4502
Adding additional tags and shared to various AWS components #4489
Bazel docker, cross builds and uploading to s3 #4477
Verify bazel files #4504
Build protokube tar in bazel #4510
Add cidr-allocator-type flag to kcm and ccm #4512
Bazel follow up #4515
dns-controller: support digitalocean #4508
Add Instance Group Suspend Processes #3829
DockerConfig Order #4505
Fix bazel deprecation notice #4518
Experimental kops set cluster command #4381
docker: Adds hosts configuration option #4497
Fixing verify bazel #4522
Fix snake case #4520
VFS: WriteFile takes an io.ReadSeeker #4493
Update rules go #4530
Add node monitor flags #4525
Clarify few things in Running an existing VPC #4519
Set the default docker for kubernetes 1.9 to 17.03.2 #4443
Add option for using existing EIP’s #4302
Etcd TLS Peer & CLient Auth #4010
Fix suspicious space in struct tag value #4535
Add support for bastion aws user-data #4452
Moving from one IG w multiple AZs to one IG per AZ #4528
Make addon specification into an object ,@justinsb
Fixing integration tests @chrislovecnm
Increase key size in GeneratePrivateKey() to 3072 @snelson-pp
Kube-proxy API to accept cpu: limit, memory: request and limit @horaceheaven
Expose Felix metrics @atopuzov
Add (proposed) roadmap for etcd @justinsb
Update Calico and Canal to use calico node v2.6.7 @tmjd, #4447
Update aws-sdk-go to v1.12.79 #4541
Add route53 max changeset batch size flag #4496
Add kubernetes 1.9.3 into alpha & stable channels #4542
custom ca new implementation of #2924 #4526
Cherry pick to update apimachinery for 1.9 release #4556
Verify apimachinery #4555
Updates for Bazel tests and cleaning up go sdk #4554
Kube Proxy IPVS Kernel Module #4550
Bumping gazelle version on bazel scripts #4561
Bind the kubelet to the local ipv4 address #4417
Recognize AWS Availability Zone EU-WEST-2C #4558
removing old target in Makefile for copying the deps #4563
Update find logic for newly shared objects #4572
Updating bazel kops versions so that it matches the Makefile #4583
Add comprehensive horizontal pod autoscaling documentation #3942
Adding support for new Paris region #4552
Update Compatibility Matrix #4580
Typo fix “NAT Gateways” -> “NAT gateways” #4576
Force bazel builds to be pure. #4602
Update getting_started/aws.md #4605
Typo delete duplicated word #4600
Typo fix “kubernetes”->”Kubernetes” #4577
Fix distroless error #4597
fix docs regarding security group tagging #4594
Create readme.ES.md #4592
Bazel: Add more pure builds #4616
Tag nat gateways #4606
Typo fix “failes”->”fails” #4610
Typo delete duplicated “a a” #4609
Fix-typo-in-toolbox_template.go #4613
Add cluster name environment variable #4560
Typo fix “etcd manager”->”etcd-manager” #4628
Typo fix “provides”->”provide” #4622
Typo instance group ->”InstanceGroup” #4621
Typo “official”->”official” #4637
Typo delete duplicated “our”, fix “reacheable”->”reachable” #4636
Fixed typo, us-central should be eu-central #4631
Typo fix “need”->”needs”, delete duplicated “.” #4626
Typo delete duplicated “is “, “utilty”->”utility” #4638
Typo fix “previouslly”->”previously” #4625
Updating comment so we do not have gofmt issues with go 1.9 and go 1.10 #4635
Creating the keyset.yaml file if it does not exist #4582
Reduce log levels: parsing pem block #4646
Updating K8s API calls to use CoreV1 kops node adapter #4644
Typo fix “Kubernetes 1.9”->”Kubernetes v1.9” #4624
Protokube Channel and RBAC #4651
Add AWS x1e instances to the instance type supported by kops ,@justinsb
Updating verify scripts so that output is highlighted @chrislovecnm
keypair integration test: print diffs @justinsb
Updating to use CoreV1 in unit tests @chrislovecnm
Move ssh key functions to pkg/pki @justinsb
typo: anmed -> named @justinsb
Keypair: tweak Render logic @justinsb
Create lifecycle test against AWS mocks @justinsb
New images for alpha channel: 4.4.121 kernel @justinsb
alpha channel: k8s 1.7.13 & 1.8.8 @justinsb
alpha: bump to latest (64) COS image for GCE @justinsb
Promote alpha channel to stable @justinsb
Misc task code cleanups @justinsb
Add README to say what cloudmock is @justinsb
Bump alpha channels for CVE @mikesplain
More mocks - sufficient for privatecalico to roundtrip @justinsb
Typo fix “DNS wil be”->”DNS will be” @AdamDang
Unset certain environment variables before testing @rifelpet
Fix a mistake in componentconfig.go @AdamDang
Fix names of CloudFormation-created AutoScalingGroups @gwkunze
Fix error accompanying note in node_api_adapter.go @AdamDang
Update instancegroups.go @AdamDang
Fix routetable detection @justinsb
Define KeysetFormat type, embed into keyset @justinsb
Typo fix “command”->”command” @AdamDang
fix ‘confimap’->’configmap’ @muhongwei
Correct spelling mistake @muhongwei
[Calico] Fix delay setting up ip routes in new nodes @felipejfc
Typo fix in route53-mapper/README.md @AdamDang
Typo fix in kube-ingress-aws-controller/README.md @AdamDang
Centos: add selinux package dependencies @justinsb
Fix boilerplate scripts @justinsb
Add more logging around ELB attribute modification @justinsb
Move AWS resources into its own subpackage @justinsb
Fix shared network objects @justinsb
Don’t tag shared VPCs @justinsb
Update boilerplate year @justinsb
cloudmock: fix locking around vpcs and subnets @justinsb
Typo fix in README.md @AdamDang
Fix kubeScheduler.usePolicyConfigMap - missing namespace flag @waldman
Improve logic around VPC detection @justinsb
cloudmock: fix prefix for RouteTableAssociation @justinsb
Validation: start to differentiate between validation failure and errors during validation @justinsb
Update kopeio-networking to 1.0.20180319 @justinsb
Validation: clean up unused node status functions @justinsb
Validation: Take a cluster object, not just the name @justinsb
Move DNS validation into validation @justinsb
Mount the iptables lock file @justinsb
add system:masters group to admin user in static token file @erks
Validation: simplify output rendering @justinsb
mockec2: more missing locking @justinsb
Validation: treat as error if insufficient nodes @justinsb
Fixed typos @szemek
Don’t use ELB DNS name for internal ELBs @justinsb
use the primary cert from the ca cert bundle @polarbizzle
Release 1.9.0-alpha.2 @justinsb
Update instance_groups.md @AdamDang
Update cluster_upgrades_and_migrations.md @AdamDang
Update getting_started/aws.md @kmaris
Update networking.md @AdamDang
Update README.md @AdamDang
Bump stable/alpha channels to 1.9.0-alpha.2 @mikesplain
fix function comment error @jonyhy96
Update addon_manager.md @AdamDang
fix some grammar mistakes @jonyhy96
fix a grammar mistake @jonyhy96
Validation: don’t expect bastion nodes to join @justinsb
fix some grammar mistakes @jonyhy96
intersectTags: return nil if comparing against nil @justinsb
Deletion: check if VPC is shared @justinsb
Add deletion to lifecycle test @justinsb
ElasticIP: Collect tags @justinsb
ElasticIP: Always tag @justinsb
Move routetable detection to new logic @justinsb
SecurityGroups: ensure owned security groups are tagged @justinsb
Tag InternetGateways with consistent tags @justinsb
Tag ElasticIP when owned @justinsb
Make sure volumes are tagged @justinsb
SecurityGroup deletion: recognize shared tags @justinsb
ElasticIP tags for cloudformation & terraform @justinsb
Add support for instance monitoring @vendrov
Check tags in lifecycle tests @justinsb
Support for auth plugins in channels @atopuzov
Dashboard : Fix CrashLoopBackOff (from K8S >= 1.8.10) @schweizerbolzonello
etcd-quorum-read flag: explicitly default to off for v2 @justinsb
ElasticIP deletion: Honor shared tags @justinsb
NAT gateway deletion: honor shared tag @justinsb
Add simple sanity check for 4758 @justinsb
Add Cilium as CNI plugin @nebril
Warn on VPC AdditionalCIDR changes @justinsb
kops release 1.9.0 alpha.3 @justinsb
fix some grammar mistakes @jonyhy96
fix some grammar mistakes @jonyhy96
kops toolbox dump: Add Subnets to dump @justinsb
apimachinery run to update generated files for EtcdQuorumRead flag @KashifSaadat
Bump channels to 1.9.0-alpha.3 @mikesplain
Typo fix defailt->default @AdamDang
correct some small mistake @sunlintong
fix a grammar mistake @jonyhy96
resolve conflict @sunlintong
Bump ingress-nginx version to 0.12.0 @tossmilestone
Add AfterFiles dependencies to File tasks @louismunro
Update addon.go @AdamDang
typo fix @jonyhy96
protokube: match device /root/dev/X as /dev/X @justinsb
Fix toolbox dump bug: store subnet in resource @justinsb
Add VPC to kops toolbox dump @justinsb
Typo fix in err messages @AdamDang
Export kubernetes client metrics from dns-controller. @tomwilkie
AWS: etcd volume provisioned IOPS support @sergeylanzman
digitalocean: external cloud controller addon @andrewsykim
Docs/update kube ingress aws controller security group walkthrough @Jberlinsky
digitalocean: nodeup & protokube support @andrewsykim
Add DigitalOcean VFS @andrewsykim
implement network task for OpenStack platform @zengchen1024
Add metrics-server addon @itskingori
Validation around IOPS fields @sergeylanzman
add output support to terraform & cloudformation for iops volume @sergeylanzman
add network builder @zengchen1024
update basic-requirements.md @sunlintong
Typo fix in err message @AdamDang
two spell mistake @sunlintong
Typo fix in error message @AdamDang
implement router task for OpenStack platform @zengchen1024
add proxy mode flag to kube-proxy @sergeylanzman
Release 1.9.0-beta.1 @justinsb
spell dependencies —> dependencies @sunlintong
Implement vfs with AlibabaCloud OSS @ihac, #4719
Adding Mike and myself as reviewers #4874
Fix some info errors #4876
Typo fix in info message #4872
Fixes port collision between dns-controller metrics and gossip. #4878
removed sed from command to get AMI images #4888
spell correct #4887
correct spell in the code and the relative doc #4886
Don’t enable dns-controller prometheus metrics by default #4892
Document the ports we use, to avoid conflicts #4891
update download_config.md #4885
fix spell mistakes in cluster_spec.md #4884
update two file #4883
digitalocean: support multiple droplets #4881
digitalocean: add kubelet hostname override #4880
typo fix #4879
fix go vet error from util/pkg/vfs/ossfs.go #4898
Fix LDFLAGS for all future go1.10.* versions #4896
digitalocean: dns operations should be idempotent #4882
coreos/containeros: restart kops-configuration service after docker drop-in is loaded #4894
update vsphere-development-status.md #4905
three spell mistakes #4904
add String method for OSSFS to fix go vet issue #4901
three spell mistakes #4902
Release 1.9.0-beta.2 #4907
Updating API Machinery #4911
protokube: also check for device symlinks #4915
digitalocean: list/delete resources #4916
Update channels to 1.9.0-beta.2 #4933
Fix typo in api_updates #4932
Typo fix an->and #4930
Add go 1.10 testing to travis CI #4926
digitalocean: use pagination for all list requests #4923
Fix spelling #4939
Fix grammar mistake #4936
Update the recommended Ubuntu Image #4934
Typo fix dont’->don’t #4929
Update rules go and use more recent debian snapshot #4948
fix typo #4943
digitalocean: external cloud controller manager avoid circular dependencies #4947
implement subnet task for OpenStack platform #4945
Add warning about google cloud repository versions #4944
fix version of kube-router at v0.1.0 #4935
Configurable log level for calico #4928
addons/cluster-autoscaler: Added healthchecks. #4925
addons/cluster-autoscaler: Annotate for Prometheus by default. #4922
Feature/4920 add authorization mode flag #4924
Add configurable dnsmasq params to KubeDNS #4919
Update kube-dns to 1.14.9 #4851
Avoid collisions in IAM ids #4952
Disable locksmithd on CoreOS if UpdatePolicy set #4909
Pod Security Policies #3498
Fix etcd Keypair change showing on every kops update when TLS enabled #4957
Only do etcd backups on main #4959
Bump Weave Net to 2.3.0 #4954
Ignore shared-ownership tags on volumes #4960