

Release notes for kops 1.9 series ¶

Significant changes ¶

RBAC is now the default authorization mode for new clusters. Existing clusters will not be changed. Pass --authorization=AlwaysAllow to kops create cluster for the legacy authorization behaviour.
Federation support has been removed from kops, reflecting the removal of federation upstream and refocusing on multicluster efforts.

Required Actions ¶

None known at this time

Highlighted changes ¶

(to follow)

Full change list ¶

From kops 1.8.1 to 1.9.0 ¶

Add list of PRs for 1.8.0 release @justinsb #3995
Promote alpha channel to stable @justinsb #3996
Release notes for 1.8.0 @justinsb #3999
Put stable channel back to jessie for 1.9 / 1.10 @justinsb #4002
Add missing permissions for NLB creation @aledbf #3976
Fix filepath concatenation @justinsb #3973
toolbox dump now dumps instances in alphabetical order @justinsb #3978
SSH keys - be lazier about keystore creation @justinsb #3933
Update aws-sdk-go to v1.10.34 @rdrgmnzs #3885
Update bazel / gazelle @justinsb #4000
When using private DNS add ELB name to the api certificate @vainu-arto #3941
Fixed minor typo in 1.8-NOTES.md file @sellers #4013
Minor update to docs/getting_started/aws.md @ysim #4008
Fix libcgroup dependency typo @wannabesrevenge #4030
Spelling fix in instancegroups.go error msg @sneako #4024
Include roles in toolbox dump structured output @justinsb #3934
Fix URL for Docker 17.03.2 on Debian Stretch @blakebarnett #4014
Fix spurious shared InternetGateway renaming @rifelpet #4020
Documentation fix for watchIngress flag in externalDns ClusterSpec @krogon-dp #4048
Bastion output line @gambol99 #4053
Downgrade Flannel in Canal deployment to v0.9.0 @KashifSaadat #4047
Let a user set a hostnameOverride when the cloud provider is aws. @rdrgmnzs #3809
Add additionalNetworkCIDRs to support VPCs with multiple CIDRs in AWS @rdrgmnzs #3898
updating goimports @chrislovecnm #3947
implement security group task @zengchen1024 #4016
Implement security group rule task @zengchen1024 #4017
Update Weave Net to version 2.1.3 @bboreham #3944
Fix Flannel nonMasqueradeCIDR @mikesplain #3952
Remove world read permissions on sensitive key files. @KashifSaadat #4022
Update gazelle @justinsb #4065
Allow additional SGs to be added to API loadbalancer @almariah #4036
[Add-on][kube-state-metrics] Bump version @tuannvm #4045
add kube-ingress-aws-controller + skipper addons @szuecs #3983
Bump flannel packaging version @justinsb #4064
Bump weave version in bootstrapchannelbuilder @bboreham,@justinsb #4062
Adding DescribeTags to masters @robinpercy #4051
Fix node counts @ihoegen #4026
Fix minor typo @kintoandar #4070
Gazelle updates @chrislovecnm #4067
apt-get: specify unattended installation @justinsb #4082
files task: fix potential nil pointer error @justinsb #4081
protokube: fix logging / logic around cluster-id @justinsb #4080
protokube: better discovery of local address @justinsb #4078
Refactor protokube hosts file into its own package @justinsb #4076
assetstore: extract tar files to a temp directory @justinsb #4075
Support for hostPort when using canal @rajivm #4063
validation: don't require subnet CIDRs on baremetal @justinsb #4079
Use default subnet when creating IG @justinsb #3987
Return apierrors NotFound when object not found @justinsb #3981
Copy dnsprovider into our code, implement route53 batching @justinsb #3860
Remove nodeup templating @justinsb #3924
nodeup: create kubeconfig under admin or root @justinsb #4077
add imagePullProgressDeadline to kubelet config @izakp #4046
Refactor: separate out SSHCredentials from Keyset stores @justinsb #3832
Adds permissions for ELB and NLB req'd by 1.9 @geojaz #4095
work on using files assets @chrislovecnm #3254
fixing bazel @chrislovecnm #4098
Add support for Amazon VPC CNI plugin @aledbf #3997
Support for OIDC 'username-prefix' and 'groups-prefix' flags @xoen #4085
make it go to f @rcuza #4102
Add Dashboard v1.8.1 @maciaszczykm #4101
fixing goimports formatting @chrislovecnm #4096
Refactor CAStore to use API types @justinsb #3833
Fix code comment on PhaseSecurity @justinsb #4106
Add --subnets and --utility-subnets to kops create cluster @meringu #4061
Update ottoyiu/k8s-ec2-srcdst docker image @aledbf #4109
Refactor: clean up SecretStore to not use KeystoreItem @justinsb #3834
Avoid ListSecrets call in nodeup @justinsb #3835
Remove use of deprecated create-if-missing functions @justinsb #3836
updating bazel files @chrislovecnm #4117
added instance types for f1 family @peterwhitesell #4116
Update code-of-conduct.md @spiffxp #4122
Refactor VFS CA store to reuse keyset from clientset @justinsb #3837
Add audit log format flag for api server @audip #4060
Use bundles when loading keysets @justinsb #3838
Fix null pointer issues when custom PROTOKUBE_IMAGE is specified. @KashifSaadat #4120
Fix documentation of shared resource tags in kops > 1.8 @tsupertramp #4126
Force nodeup to use the bundle @justinsb #3839
Remove labels.yaml @spiffxp #4136
Added a clarification/warning note about exporting full specs @geojaz #4151
Moved paragraph relating to runtimeConfig @steveruckdashel #4125
Add support for cn-northwest-1. @leeeboo #4148
fixing lifecycle type for network in security phase @chrislovecnm #4155
Implement mirroring for API CAStore @justinsb #3840
Documentation Cleanup @rifelpet #4165
Openapi updates @chrislovecnm #4167
Add roundtrip tests for certs & private keys @justinsb #4172
Adding CNI v0.6.0 which is required for Kubernetes 1.9 @chrislovecnm #4175
Remove Romana preview notice from networking docs @rwiggins #4187
Improving bazel make targets, adding a target for kops cli, bumping go_rules version @chrislovecnm #4170
removing inactive approvers @chrislovecnm #4176
Adding override for setting etcd version @chrislovecnm #4179
Initial implementation of bundle command @justinsb #4193
Add experimental kube-discovery @justinsb #4194
Updating Manifest documentation @chrislovecnm #4177
Updating docs README.md file @chrislovecnm #4178
Golang 1.9 @chrislovecnm #4168
adding missed lifecycles in elb code @chrislovecnm #4154
Bump alpha channel for meltdown/spectre @justinsb #4204
kube-discovery: deduplicate multicast responses @justinsb #4214
Add makefile target for kube-discovery image @justinsb #4213
nodeup: don't warn during distro detection @justinsb #4215
gce: mounter asset has moved @justinsb #4216
Adding cve updates for spectre and meltdown @chrislovecnm #4211
Suggest tweaks to meltdown advisory @justinsb #4220
kops validate cluster can output YAML or JSON @chrislovecnm #4107
GCE: Don't set bucket-level permissions @justinsb #4221
cloudConfig.elbSecurityGroup under wrong L3 heading @steveruckdashel #4226
Update state and cloudLabels docs, fix --target description @rifelpet #4227
Makefile command "apimachinery" run @wannabesrevenge #4241
VFS: Support io.WriterTo interface @justinsb #4217
Expose the --fail-swap-on flag for kubelet @wannabesrevenge #4239
Cloudformation @tdeshetler #4244
Update binary installation commands for macOS to use curl alone @hopkinsth #4260
Slight changes to commands. @darron #4259
Add SubnetType Tag to Subnets @KashifSaadat #4198
Kops Replace Force @gambol99 #4275
docs: upgrade.md: drop DrainAndValidateRollingUpdate note @dkeitel #4282
Bump alpha channel @justinsb #4285
Validate IG MaxSize is not less than MinSize. @mikesplain #4278
Removing duplicate AMI entry from Documentation @AlexLast #4223
Move net mode log after it is known in create @nebril #4294
Implement ability to update Load Balancer subnets @KashifSaadat #4281
Update list of AdmissionControllers for k8s 1.9 @blakebarnett #4299
bazel 0.9.0 running make bazel-build updates @blakebarnett #4298
Upgrade to calico v2.6.6 @blakebarnett #4297
Update bazelbuild/rules_go to 0.9.0 @ixdy #4304
Copy alpha channel to stable @justinsb #4284
Stick with jessie for 1.9 clusters @justinsb #4309
Use jessie for 1.10 as well, to unblock queue @justinsb #4310
Bump kopeio-networking to 1.0.20180120 @justinsb #4306
Promote alpha channel image to stable @justinsb #4325
Update aws-sdk-go to 1.12.57 @leeeboo #4234
Don't specify require-kubeconfig from 1.10 @justinsb #4308
Fix ASG scaling by adding in ec2:DescribeRegions permission to the nodes IAM role @mikn #4320
fix config file name in aws-china.md @qqshfox #4321
Fix the buildImage command typo @mingyuanzhu #4319
ReadTree: clarify that returns only files @justinsb #4315
Add missing BUILD.bazel for util/pkg/slice @justinsb #4318
bazel: expose version as in Makefile @justinsb #4333
Add license to get_workspace_status & move to .sh @mikesplain #4337
Ensure GCE disk name does not start with a number @justinsb #4317
GCE: Dial down logging @justinsb #4335
Don't autobuild protobuf files @justinsb #4329
Handle NotFound error when creating instance group @georgebuckerfield #4305
GCE: Don't require SSH public key @justinsb #4334
AWS LaunchConfiguration error handling fix @justinsb #4341
GCE: Get default project from gcloud CLI @justinsb #4332
When kops searches for AMI by name, if > 1 are returned, uses the latest. @denniswebb #4338
Enable metrics for AutoScalingGroups @johanneswuerbach #4342
Update bastion.md @metaflow #4344
Allow image override for etcd @ottoyiu #4245
Switching the default for kops to create a cluster with RBAC enabled. @chrislovecnm #4184
Fix rootVolumeType accepts all volume types @int128 #4270
Interactive cli opt @mrballcb #4166
Bump kubernetes dashboard version to 1.8.1 @stuffandthings #4130
Use 0.9.0 release of nginx-ingress-controller @cap10morgan #4027
VFS: Fix bug in CopyTree when dest does not exist @justinsb #4316
VFS: Recognize file:// paths @justinsb #4346
exec target command, but still pipe it to tee @justinsb #4286
Improve S3 url parsing for vfsPath to support more naming conventions @ottoyiu #4246
Update single-to-multi-master.md @jeyglk #4359
Fix broken links for Usage instructions in addons.md @Rcluoyi #4361
update go version and ldflags @oilbeater #4349
Feature/extra terraform config @iMartyn #4336
Update terraform.md @perryao #4201
Extend examples of subnet parameter @dictvm #4199
Update route-related IAM permissions for Romana @cgilmour #4365
update image go version @oilbeater #4366
Fix ccm startup wrt dns controller (set dnsPolicy to Default and host… @wlan0 #4367
modify check require-kubeconfig kube version @zhangxiaoyu-zidif #4357
Update kopeio-networking to 1.0.20180203 @justinsb #4374
Remove federation support @justinsb #4379
Documentation spelling/grammar fixes. @lucasreed #4372
Update gazelle @justinsb #4378
Explicitly set go version in bazel build @justinsb #4376
Update submodule dependencies for k8s 1.9 @justinsb #4377
bazel: declare golang 1.9.3 @justinsb #4380
Fix drain command for rolling-updates @KashifSaadat #4387
Add mac build for travis @mikesplain #4388
add support for changing the weave peer connection limit @polarbizzle #4398
Update versions for romana container images @cgilmour #4405
Bump alpha channel to new image @justinsb #4411
Update Weave Net to version 2.2.0 @errordeveloper #4413
Bump weave version to 2.2.0 @justinsb #4421
upup: Make RenderTerraform handle an error from AddOutputVariableArray @kkaneda #4406
Add notes for 1.8.1 release @justinsb #4423
master node requires DescribeRegions when using a bucket from another… @sstarcher #4409
Pick up etcd version changes for a rolling update on master nodes @KashifSaadat #4371
API audit doc changes @shavo007 #4427
fix a typo in tool_template.go @yank1 #4426
Updating Makefile to the correct versions for the 1.8.1 release @chrislovecnm #4432
Update BUILD files to account for some recent changes @mikesplain #4431
Use dep to maintain vendor directory @justinsb #4382
Update upgrade.md @jar349 #4433
Update Cluster Autoscaler image and Reduce the Delta between autoscaler docs @StevenACoffman #4182
Fix wrong backticks markdown. @Antiarchitect #4436
Add live-restore flag to docker config @marciorodrigues87 #4169
Fixing problems in dev build script example @chrislovecnm #4438
Add max-requests-inflight parameter @ihoegen #4395
Updates for x1 instance family @manabusakai #4437
Fix instange groups docs @klaus993 #4440
Kubernetes Calico TLS @gambol99 #4240
Add to aws-china.md to prevent Etag not match the HASH of file. @leeeboo #4384
add storageclasses permissions for cluster-autoscaler:v1.1.0 @mikesimos #4456
Fixing ExistsAndWarnIfChanges so that it will allow a user to pass @chrislovecnm #4459
updating bazel BUILD file @chrislovecnm #4457
Lifecycle overrides @chrislovecnm #4445
Remove submodules @chrislovecnm #4435
Updating variables to use Camel Case @chrislovecnm #4467
Updating missed BUILD files for gazelle @chrislovecnm #4468
Fixing deleting of shared IGW and DHCPOptions @chrislovecnm #4460
Support updating autoscaling metrics @justinsb #4469
Convert registry to k8s.gcr.io @thockin #4137
Updating kops version when using bazel @chrislovecnm #4475
Update apimachinery & ensure we always run goimports @justinsb #4473
Update kube-dns to 1.14.8 @justinsb #4478
kube-dns: turn off negcache @justinsb #4479
Initial support for standalone etcd-manager backups @justinsb #4465
Require kops 1.7.1 (with the CVE fix), recommend kops 1.8.1 @justinsb #3592
Build docker images through bazel @justinsb #3561
Update ingress versions and fix to quay registry @mikesplain #4485
Update AWS Logo In Docs @christopherhein #4481
Change FeatureGates to omitempty under KubeProxyConfig @argais #4500
Use k8s.gcr.io alias only for 1.10 @christopherhein,@justinsb #4494
Fix -ldflags incompatibility in go1.10 @tvi #4502
Adding additional tags and shared to various AWS components @chrislovecnm #4489
Bazel docker, cross builds and uploading to s3 @mikesplain #4477
Verify bazel files @chrislovecnm #4504
Build protokube tar in bazel @justinsb #4510
Add cidr-allocator-type flag to kcm and ccm @justinsb #4512
Bazel follow up @mikesplain #4515
dns-controller: support digitalocean @andrewsykim #4508
Add Instance Group Suspend Processes @mikesplain #3829
DockerConfig Order @gambol99 #4505
Fix bazel deprecation notice @mikesplain #4518
Experimental kops set cluster command @justinsb #4381
docker: Adds hosts configuration option @jaipradeesh #4497
Fixing verify bazel @chrislovecnm #4522
Fix snake case @chrislovecnm #4520
VFS: WriteFile takes an io.ReadSeeker @justinsb #4493
Update rules go @mikesplain #4530
Add node monitor flags @so0k #4525
Clarify few things in Running an existing VPC @syndbg #4519
Set the default docker for kubernetes 1.9 to 17.03.2 @zacblazic #4443
Add option for using existing EIP's @sethpollack #4302
Etcd TLS Peer & CLient Auth @gambol99 #4010
Fix suspicious space in struct tag value @tvi #4535
Add support for bastion aws user-data @duboisf #4452
Moving from one IG w multiple AZs to one IG per AZ @Globegitter #4528
Make addon specification into an object @polarbizzle,@justinsb #4538
Fixing integration tests @chrislovecnm #4539
Increase key size in GeneratePrivateKey() to 3072 @snelson-pp #4354
Kube-proxy API to accept cpu: limit, memory: request and limit @horaceheaven #4476
Expose Felix metrics @atopuzov #4529
Add (proposed) roadmap for etcd @justinsb #4474
Update Calico and Canal to use calico node v2.6.7 @tmjd,@justinsb #4447
Update aws-sdk-go to v1.12.79 @justinsb #4541
Add route53 max changeset batch size flag @pwillie #4496
Add kubernetes 1.9.3 into alpha & stable channels @justinsb #4542
custom ca new implementation of #2924 @mad01 #4526
Cherry pick to update apimachinery for 1.9 release @chrislovecnm #4556
Verify apimachinery @chrislovecnm #4555
Updates for Bazel tests and cleaning up go sdk @chrislovecnm #4554
Kube Proxy IPVS Kernel Module @gambol99 #4550
Bumping gazelle version on bazel scripts @chrislovecnm #4561
Bind the kubelet to the local ipv4 address @dezmodue #4417
Recognize AWS Availability Zone EU-WEST-2C @KashifSaadat #4558
removing old target in Makefile for copying the deps @chrislovecnm #4563
Update find logic for newly shared objects @justinsb #4572
Updating bazel kops versions so that it matches the Makefile @chrislovecnm #4583
Add comprehensive horizontal pod autoscaling documentation @itskingori #3942
Adding support for new Paris region @naveensrinivasan #4552
Update Compatibility Matrix @mikesplain #4580
Typo fix "NAT Gateways" -> "NAT gateways" @AdamDang #4576
Force bazel builds to be pure. @mikesplain #4602
Update getting_started/aws.md @sanketjpatel #4605
Typo delete duplicated word @AdamDang #4600
Typo fix "kubernetes"->"Kubernetes" @AdamDang #4577
Fix distroless error @mikesplain #4597
fix docs regarding security group tagging @mariusv #4594
Create readme.ES.md @UlisesTJ #4592
Bazel: Add more pure builds @mikesplain #4616
Tag nat gateways @mikesplain #4606
Typo fix "failes"->"fails" @AdamDang #4610
Typo delete duplicated "a a" @AdamDang #4609
Fix-typo-in-toolbox_template.go @yank1 #4613
Add cluster name environment variable @rocktavious #4560
Typo fix "etcd manager"->"etcd-manager" @AdamDang #4628
Typo fix "provides"->"provide" @AdamDang #4622
Typo instance group ->"InstanceGroup" @AdamDang #4621
Typo "official"->"official" @AdamDang #4637
Typo delete duplicated "our", fix "reacheable"->"reachable" @AdamDang #4636
Fixed typo, us-central should be eu-central @peterkuiper #4631
Typo fix "need"->"needs", delete duplicated "." @AdamDang #4626
Typo delete duplicated "is ", "utilty"->"utility" @AdamDang #4638
Typo fix "previouslly"->"previously" @AdamDang #4625
Updating comment so we do not have gofmt issues with go 1.9 and go 1.10 @chrislovecnm #4635
Creating the keyset.yaml file if it does not exist @chrislovecnm #4582
Reduce log levels: parsing pem block @justinsb #4646
Updating K8s API calls to use CoreV1 kops node adapter @chrislovecnm #4644
Typo fix "Kubernetes 1.9"->"Kubernetes v1.9" @AdamDang #4624
Protokube Channel and RBAC @gambol99 #4651
Add AWS x1e instances to the instance type supported by kops @ChienHuey,@justinsb #4593
Updating verify scripts so that output is highlighted @chrislovecnm #4633
keypair integration test: print diffs @justinsb #4648
Updating to use CoreV1 in unit tests @chrislovecnm #4645
Move ssh key functions to pkg/pki @justinsb #4653
typo: anmed -> named @justinsb #4652
Keypair: tweak Render logic @justinsb #4649
Create lifecycle test against AWS mocks @justinsb #4569
New images for alpha channel: 4.4.121 kernel @justinsb #4657
alpha channel: k8s 1.7.13 & 1.8.8 @justinsb #4658
alpha: bump to latest (64) COS image for GCE @justinsb #4659
Promote alpha channel to stable @justinsb #4656
Misc task code cleanups @justinsb #4660
Add README to say what cloudmock is @justinsb #4655
Bump alpha channels for CVE @mikesplain #4666
More mocks - sufficient for privatecalico to roundtrip @justinsb #4654
Typo fix "DNS wil be"->"DNS will be" @AdamDang #4667
Unset certain environment variables before testing @rifelpet #4595
Fix a mistake in componentconfig.go @AdamDang #4670
Update status.go @AdamDang #4676
Fix names of CloudFormation-created AutoScalingGroups @gwkunze #4669
Fix error accompanying note in node_api_adapter.go @AdamDang #4671
Update instancegroups.go @AdamDang #4681
Fix routetable detection @justinsb #4661
Define KeysetFormat type, embed into keyset @justinsb #4650
Typo fix "command"->"command" @AdamDang #4682
fix 'confimap'->'configmap' @muhongwei #4686
Correct spelling mistake @muhongwei #4685
[Calico] Fix delay setting up ip routes in new nodes @felipejfc #4589
Typo fix in route53-mapper/README.md @AdamDang #4706
Typo fix in kube-ingress-aws-controller/README.md @AdamDang #4707
Centos: add selinux package dependencies @justinsb #4715
Fix boilerplate scripts @justinsb #4713
Add more logging around ELB attribute modification @justinsb #4705
Move AWS resources into its own subpackage @justinsb #4708
Fix shared network objects @justinsb #4711
Don't tag shared VPCs @justinsb #4710
Update boilerplate year @justinsb #4714
cloudmock: fix locking around vpcs and subnets @justinsb #4704
Typo fix in README.md @AdamDang #4716
Fix kubeScheduler.usePolicyConfigMap - missing namespace flag @waldman #4726
Improve logic around VPC detection @justinsb #4709
cloudmock: fix prefix for RouteTableAssociation @justinsb #4712
Validation: start to differentiate between validation failure and errors during validation @justinsb #4732
Update kopeio-networking to 1.0.20180319 @justinsb #4731
Validation: clean up unused node status functions @justinsb #4733
Validation: Take a cluster object, not just the name @justinsb #4734
Move DNS validation into validation @justinsb #4735
Mount the iptables lock file @justinsb #4742
add system:masters group to admin user in static token file @erks #4575
Validation: simplify output rendering @justinsb #4736
mockec2: more missing locking @justinsb #4743
Validation: treat as error if insufficient nodes @justinsb #4703
Fixed typos @szemek #4739
Don't use ELB DNS name for internal ELBs @justinsb #4748
use the primary cert from the ca cert bundle @polarbizzle #4744
Release 1.9.0-alpha.2 @justinsb #4750
Update instance_groups.md @AdamDang #4751
Update cluster_upgrades_and_migrations.md @AdamDang #4756
Update getting_started/aws.md @kmaris #4755
Update networking.md @AdamDang #4754
Update README.md @AdamDang #4752
Bump stable/alpha channels to 1.9.0-alpha.2 @mikesplain #4757
fix function comment error @jonyhy96 #4769
Update addon_manager.md @AdamDang #4774
fix some grammar mistakes @jonyhy96 #4773
fix a grammar mistake @jonyhy96 #4771
Validation: don't expect bastion nodes to join @justinsb #4775
fix some grammar mistakes @jonyhy96 #4772
intersectTags: return nil if comparing against nil @justinsb #4780
Deletion: check if VPC is shared @justinsb #4776
Add deletion to lifecycle test @justinsb #4777
ElasticIP: Collect tags @justinsb #4782
ElasticIP: Always tag @justinsb #4779
Move routetable detection to new logic @justinsb #4778
SecurityGroups: ensure owned security groups are tagged @justinsb #4785
Tag InternetGateways with consistent tags @justinsb #4788
Tag ElasticIP when owned @justinsb #4781
Make sure volumes are tagged @justinsb #4784
SecurityGroup deletion: recognize shared tags @justinsb #4786
ElasticIP tags for cloudformation & terraform @justinsb #4789
Add support for instance monitoring @vendrov #4695
Check tags in lifecycle tests @justinsb #4787
Support for auth plugins in channels @atopuzov #4765
Dashboard : Fix CrashLoopBackOff (from K8S >= 1.8.10) @schweizerbolzonello #4783
etcd-quorum-read flag: explicitly default to off for v2 @justinsb #4792
ElasticIP deletion: Honor shared tags @justinsb #4790
NAT gateway deletion: honor shared tag @justinsb #4791
Add simple sanity check for 4758 @justinsb #4794
Add Cilium as CNI plugin @nebril #4224
Warn on VPC AdditionalCIDR changes @justinsb #4796
kops release 1.9.0 alpha.3 @justinsb #4802
fix some grammar mistakes @jonyhy96 #4803
fix some grammar mistakes @jonyhy96 #4804
kops toolbox dump: Add Subnets to dump @justinsb #4806
apimachinery run to update generated files for EtcdQuorumRead flag @KashifSaadat #4810
Bump channels to 1.9.0-alpha.3 @mikesplain #4812
Typo fix defailt->default @AdamDang #4811
correct some small mistake @sunlintong #4820
fix a grammar mistake @jonyhy96 #4829
resolve conflict @sunlintong #4841
Bump ingress-nginx version to 0.12.0 @tossmilestone #4840
Add AfterFiles dependencies to File tasks @louismunro #4760
Update addon.go @AdamDang #4846
typo fix @jonyhy96 #4845
protokube: match device /root/dev/X as /dev/X @justinsb #4849
Fix toolbox dump bug: store subnet in resource @justinsb #4848
Add VPC to kops toolbox dump @justinsb #4805
Typo fix in err messages @AdamDang #4850
Export kubernetes client metrics from dns-controller. @tomwilkie #4612
AWS: etcd volume provisioned IOPS support @sergeylanzman #4852
digitalocean: external cloud controller addon @andrewsykim #4698
Docs/update kube ingress aws controller security group walkthrough @Jberlinsky #4843
digitalocean: nodeup & protokube support @andrewsykim #4697
Add DigitalOcean VFS @andrewsykim #4858
implement network task for OpenStack platform @zengchen1024 #4830
Add metrics-server addon @itskingori #4581
Validation around IOPS fields @sergeylanzman #4859
add output support to terraform & cloudformation for iops volume @sergeylanzman #4860
add network builder @zengchen1024 #4842
update basic-requirements.md @sunlintong #4864
Typo fix in err message @AdamDang #4870
two spell mistake @sunlintong #4865
Typo fix in error message @AdamDang #4869
implement router task for OpenStack platform @zengchen1024 #4868
add proxy mode flag to kube-proxy @sergeylanzman #4863
Release 1.9.0-beta.1 @justinsb #4871
spell dependencies --> dependencies @sunlintong #4861
Implement vfs with AlibabaCloud OSS @ihac,@xh4n3 #4719
Adding Mike and myself as reviewers @robinpercy #4874
Fix some info errors @AdamDang #4876
Typo fix in info message @AdamDang #4872
Fixes port collision between dns-controller metrics and gossip. @tvi #4878
removed sed from command to get AMI images @roffe #4888
spell correct @sunlintong #4887
correct spell in the code and the relative doc @sunlintong #4886
Don't enable dns-controller prometheus metrics by default @justinsb #4892
Document the ports we use, to avoid conflicts @justinsb #4891
update download_config.md @sunlintong #4885
fix spell mistakes in cluster_spec.md @sunlintong #4884
update two file @sunlintong #4883
digitalocean: support multiple droplets @andrewsykim #4881
digitalocean: add kubelet hostname override @andrewsykim #4880
typo fix @jonyhy96 #4879
fix go vet error from util/pkg/vfs/ossfs.go @andrewsykim #4898
Fix LDFLAGS for all future go1.10.* versions @mikesplain #4896
digitalocean: dns operations should be idempotent @andrewsykim #4882
coreos/containeros: restart kops-configuration service after docker drop-in is loaded @andrewsykim #4894
update vsphere-development-status.md @sunlintong #4905
three spell mistakes @sunlintong #4904
add String method for OSSFS to fix go vet issue @xh4n3 #4901
three spell mistakes @sunlintong #4902
Release 1.9.0-beta.2 @justinsb #4907
Updating API Machinery @chrislovecnm #4911
protokube: also check for device symlinks @andrewsykim #4915
digitalocean: list/delete resources @andrewsykim #4916
Update channels to 1.9.0-beta.2 @mikesplain #4933
Fix typo in api_updates @mikesplain #4932
Typo fix an->and @AdamDang #4930
Add go 1.10 testing to travis CI @tvi #4926
digitalocean: use pagination for all list requests @andrewsykim #4923
Fix spelling @inthecloud247 #4939
Fix grammar mistake @mahuihuang #4936
Update the recommended Ubuntu Image @ofersadgat #4934
Typo fix dont'->don't @AdamDang #4929
Update rules go and use more recent debian snapshot @mikesplain #4948
fix typo @mahuihuang #4943
digitalocean: external cloud controller manager avoid circular dependencies @andrewsykim #4947
implement subnet task for OpenStack platform @zengchen1024 #4945
Add warning about google cloud repository versions @tombull #4944
fix version of kube-router at v0.1.0 @andrewsykim #4935
Configurable log level for calico @edmeister #4928
addons/cluster-autoscaler: Added healthchecks. @jpds #4925
addons/cluster-autoscaler: Annotate for Prometheus by default. @jpds #4922
Feature/4920 add authorization mode flag @chrisz100 #4924
Add configurable dnsmasq params to KubeDNS @jamesmcminn96 #4919
Update kube-dns to 1.14.9 @sergeylanzman #4851
Avoid collisions in IAM ids @justinsb #4952
Disable locksmithd on CoreOS if UpdatePolicy set @KashifSaadat #4909
Pod Security Policies @gambol99 #3498
Fix etcd Keypair change showing on every kops update when TLS enabled @KashifSaadat #4957
Only do etcd backups on main @justinsb #4959
Bump Weave Net to 2.3.0 @brb #4954
Ignore shared-ownership tags on volumes @justinsb #4960