File kubectl.changes of Package kubectl.openSUSE_Leap_15.0_Update
------------------------------------------------------------------- Thu Dec 13 13:36:12 UTC 2018 - alvaro.saurin@suse.com - Updated to a supported version of Go (due to security reasons) ------------------------------------------------------------------- Mon Dec 03 18:08:16 UTC 2018 - opensuse-packaging@opensuse.org - Update to version 1.10.11: * Verify backend upgraded connection * Add/Update CHANGELOG-1.10.md for v1.10.10. * Kubernetes version v1.10.11-beta.0 openapi-spec file updates * Add code for including shutdown nodes * remove retry operation on attach/detach disk * Ensure orphan public IPs deleted * Cherry-pick metadata-agent psp binding * fix openstack provider to handle only Cinder volumes * Improve Azure instance metadata handling * Change GCE LB health check interval from 2s to 8s, unhealthyThreashold to 3 * update coredns image to gcr.io * improve azure disk attachment perf on Linux * Fix parsing timestamp in test * Remove old NAP tests * Skip node cidr mask size check for cloud allocation. * change azure file mount permission to 0777 * Fix DS tests to set their namespaces to empty node selectors so that they keep working with PodNodeSelector plugin. * Add/Update CHANGELOG-1.10.md for v1.10.9. * Grant permissions for batch/job to cluster-autoscaler * Kubernetes version v1.10.10-beta.0 openapi-spec file updates * Always reconcile extended resource capacity after kubelet restart. There are cases that nodes can be recreated (i.e., external_id changes) but still have pods assigned to it. The previous cherry-pick PR https://github.com/kubernetes/kubernetes/pull/66881 doesn't cover this case in 1.10 where we only reconcile with old API node state if the new node has the same external_id. We don't need this fix in 1.11 from which we always reconcile with old API node state. * Don't run limitranger admission plugin on pod update requests * Bump version of fluentd-gcp-scaler * Change the portworx volume attribute SupportsSELinux to false * Add fallbacks for getting node IP from Azure IMDS * fix UnmountDevice failure on Windows * Add unit tests for getting vmss node IP * Get public IP for Azure vmss nodes * Add volume spec to mountedPod in actual state of world * fix bug that defer in infinite loop * Add privileged test pod security policy to local volume provisioner test service account * bazel: update debian-iptables and debian-hyperkube-base * Update to use debian-iptables v10.2 and debian-hyperkube-base 0.10.2 * Install netbase in debian-iptables and debian-hyperkube-base as it is needed by ipvs * Add support of zero nodes in vmss * verify invalid secret/configmap/projected volumes * Add/Update CHANGELOG-1.10.md for v1.10.8. * Kubernetes version v1.10.9-beta.0 openapi-spec file updates * Fix potential panic when getting azure load balancer status * Size http2 buffers to allow concurrent streams * Fix for duplicate revisions created by StatefulSet ------------------------------------------------------------------- Thu Oct 11 10:32:31 UTC 2018 - opensuse-packaging@opensuse.org - Update to version 1.10.8: * Fix running e2e tests with completed kube-system pods * Add Logf message for skipped succeeded pods * Fix comments about default mount propagation * when copy file from host to pod like this: 1.kubectl copy /tmp/test-file test-pod:/ 2.kubectl copy /tmp/test-file test-pod: example 1 will fail, example 2 will cause a panic. This patch fix bugs above. * Don't validate HealthzBindAddress in KubeProxyConfiguration if it's empty * Include unavailable API services in discovery response * attachdetach controller: attach volumes immediately when Pod's PVCs are bound - Use queue to process PVCs on add/update events - Index pods by PVC key then we don't need to iterate to find pods * attachdetach controller: attach volumes immediately when Pod's PVCs are bound - Add integration test for this feature * Double check PVC if not found in syncVolume. * Kubernetes version v1.10.8-beta.0 openapi-spec file updates * Add/Update CHANGELOG-1.10.md for v1.10.7. * allow failed discovery on initial quota controller start * Log real file's name and line * Added test for scheduler informers * Fix scheduler Pod informers to receive events when pods are scheduled by other schedulers. * Fix parameter for fluentd-gcp-scaler * apiserver: forward panic in WithTimeout filter * Bump ip-masq-agent to v2.1.1 - Update debian-iptables image for CVEs. - Change chain name to IP-MASQ to be compatible with the pre-injected masquerade rules. * Fix VMWare VM freezing bug by reverting #51066 * support cross resource group for azure file * Add namespace for (cluster)role(binding) cloud-provider. * Cluster Autoscaler 1.2.3 * Bump versions of components with latest security patches. * Fixed GCE PD tests to wait for pod deletion after usage, and to not force detach PD's from nodes ------------------------------------------------------------------- Wed Aug 29 09:02:27 UTC 2018 - opensuse-packaging@opensuse.org - Update to version 1.10.7: * Report node DNS info with --node-ip * Add missing binaryData field to the ConfigMap Hash * Return vmUUID when renewing nodeinfo in VCP * fix acr sp access issue * Kubernetes version v1.10.7-beta.0 openapi-spec file updates * Add/Update CHANGELOG-1.10.md for v1.10.6. * Bump to k8s.gcr.io/metadata-proxy:v0.1.10 * Detect if GCE PD udev link is wrong and try to correct it * Reconcile extended resource capacity after kubelet restart. * Stub out BackendService check in Ingress upgrade test. * Rework multi-volume test to use StatefulSet * A large set of improvements to the Stackdriver components. * Add NoSchedule and NoExecute tolerations to ip-masq-agent * Fixed vsphere volume plugin unsafe type cast; added unit tests * Support pulling requestheader CA from extension-apiserver-authentication ConfigMap without client CA * Escape illegal characters in remote extra keys * fill in normal restmapping info with the legacy guess * Ignore EIO error in unmount path * Upgrade debian-base to 0.3.1 for CVEs * ensure qemu-ARCH-static binary is world readable and executable * Only register qemu-user-static when necessary. * Bump debian-base to 0.3.2 * Add missing tmpdir path to chmod * Update to use debian-base:0.3.2 * Update to debian-iptables v10.1 and hyperkube-base 0.10.1 * fix an issue in NodeInfo.Clone() * should cast va instead of pv ------------------------------------------------------------------- Wed Aug 1 14:00:52 UTC 2018 - jmassaguerpla@suse.com - Add a conflict with kubernetes-client. Both packages provide kubectl but in kubernetes-client kubectl is a link to hyperkube, from kubernetes-common. ------------------------------------------------------------------- Fri Jul 27 12:48:52 UTC 2018 - opensuse-packaging@opensuse.org - Update to version 1.10.6: * fix IsLikelyNotMountPoint func on Windows * add IsLikelyNotMountPoint test on Windows * Ensure /etc/hosts has a header always - Fix conformance test * Fix issue #63183 that pods on different nodes mount Ceph RBD PVC stuck on ContainerCreating. * apiextensions: fix concurrent map access copying items' ObjectMeta in Unstructured * Disable session affinity for internal kuberntes service * Fix some log issues in flexvolume * Kubernetes version v1.10.6-beta.0 openapi-spec file updates * Add/Update CHANGELOG-1.10.md for v1.10.5. * update cadvisor godeps to v0.29.2 * Remove item from taint manager workqueue on completion * Pass cluster_location argument to Heapster * Fix scheduler config decoding * update NPD version to v0.5.0 for gci * etcd: reuse leases for keys in a time window * Fix UnmountDevice with deleted pod. * Fix cleanup of volume metadata json file. * Add a GPUClusterDowngrade test. * BUGFIX: must use ID, not name, of the node security group when adding rules to it * In case storage class parameters are empty, create a new map for Portworx volume labels * remove format operation in WaitForAttach * Remove optimization from getWork in resourcequota/controller.go * Bug fix: Should allow alias range size equals to max number of pods * 2 * skip nic that are in failing state * add external resource group support for azure disk * fix comments * specify external resource group in ResizeDisk * fix azure disk issue for external resource group * azure: Add validation of resourceGroup option * Reload systemd config files before starting kubelet. * fix smb mount security issue * gc: remove crd and apiservice from ignored resources * Fix RunAsGroup. * set EnableHTTPSTrafficOnly in storageAccount creation * Fix truncating and buffering backends integration. * Update Calico addon yamls to make it work for both 2.x and 3.x. versions. * A few cleanups (remove duplicated env vars & unnecessary comments) on yaml files. * Add a helper function to customize K8s addon yamls and use it to customize Calico addons on GKE. * Remove unnecessary spaces ahead of custom yaml. * Fix pod worker deadlock. * Removes defaulting of CSI fsType to ext4 * Adding generated files * Fix NPD preload. * Make kubelet `ReadLogs` backward compatible. * Compare stateful set updates semantically * Remove patch retry conflict detection * Fix locating resporce-pool for volume provisioning * Reverting commit #56600 as GCE PD is allocated in chunks of GiB instead of GBs * Fixing E2E tests for disk resizing * Return correct error type and HTTP Status code for operation errors * extend timeout to workaround slow arm64 math * re-reorder authorizers (RBAC before Webhook). ------------------------------------------------------------------- Thu Jul 19 11:42:17 UTC 2018 - jmassaguerpla@suse.com - Get the commit id from the obsinfo file. This way this is automatic and we don't have a regression of bsc#1065972 ------------------------------------------------------------------- Mon Jul 16 18:16:49 UTC 2018 - jmassaguerpla@suse.com - initial commit in order to split kubectl package (fix bsc#1097473 and bsc#1101010 and fate#325820) add lintrc filter to avoid conflict with kubernetes-client package which is built in SLE12 but not shipped in SLE12
