Release notes for kops 1.9 series

Significant changes

RBAC is now the default authorization mode for new clusters. Existing clusters will not be changed. Pass --authorization=AlwaysAllow to kops create cluster for the legacy authorization behaviour.
Federation support has been removed from kops, reflecting the removal of federation upstream and refocusing on multicluster efforts.

Required Actions

None known at this time

Highlighted changes

(to follow)

Full change list

From kops 1.8.1 to 1.9.0

Add list of PRs for 1.8.0 release @justinsb #3995
Promote alpha channel to stable @justinsb #3996
Release notes for 1.8.0 @justinsb #3999
Put stable channel back to jessie for 1.9 / 1.10 @justinsb #4002
Add missing permissions for NLB creation @aledbf #3976
Fix filepath concatenation @justinsb #3973
toolbox dump now dumps instances in alphabetical order @justinsb #3978
SSH keys - be lazier about keystore creation @justinsb #3933
Update aws-sdk-go to v1.10.34 @rdrgmnzs #3885
Update bazel / gazelle @justinsb #4000
When using private DNS add ELB name to the api certificate @vainu-arto #3941
Fixed minor typo in 1.8-NOTES.md file @sellers #4013
Minor update to docs/getting_started/aws.md @ysim #4008
Fix libcgroup dependency typo @wannabesrevenge #4030
Spelling fix in instancegroups.go error msg @sneako #4024
Include roles in toolbox dump structured output @justinsb #3934
Fix URL for Docker 17.03.2 on Debian Stretch @blakebarnett #4014
Fix spurious shared InternetGateway renaming @rifelpet #4020
Documentation fix for watchIngress flag in externalDns ClusterSpec @krogon-dp #4048
Bastion output line @gambol99 #4053
Downgrade Flannel in Canal deployment to v0.9.0 @KashifSaadat #4047
Let a user set a hostnameOverride when the cloud provider is aws. @rdrgmnzs #3809
Add additionalNetworkCIDRs to support VPCs with multiple CIDRs in AWS @rdrgmnzs #3898
updating goimports @chrislovecnm #3947
implement security group task @zengchen1024 #4016
Implement security group rule task @zengchen1024 #4017
Update Weave Net to version 2.1.3 @bboreham #3944
Fix Flannel nonMasqueradeCIDR @mikesplain #3952
Remove world read permissions on sensitive key files. @KashifSaadat #4022
Update gazelle @justinsb #4065
Allow additional SGs to be added to API loadbalancer @almariah #4036
[Add-on][kube-state-metrics] Bump version @tuannvm #4045
add kube-ingress-aws-controller + skipper addons @szuecs #3983
Bump flannel packaging version @justinsb #4064
Bump weave version in bootstrapchannelbuilder @bboreham,@justinsb #4062
Adding DescribeTags to masters @robinpercy #4051
Fix node counts @ihoegen #4026
Fix minor typo @kintoandar #4070
Gazelle updates @chrislovecnm #4067
apt-get: specify unattended installation @justinsb #4082
files task: fix potential nil pointer error @justinsb #4081
protokube: fix logging / logic around cluster-id @justinsb #4080
protokube: better discovery of local address @justinsb #4078
Refactor protokube hosts file into its own package @justinsb #4076
assetstore: extract tar files to a temp directory @justinsb #4075
Support for hostPort when using canal @rajivm #4063
validation: don’t require subnet CIDRs on baremetal @justinsb #4079
Use default subnet when creating IG @justinsb #3987
Return apierrors NotFound when object not found @justinsb #3981
Copy dnsprovider into our code, implement route53 batching @justinsb #3860
Remove nodeup templating @justinsb #3924
nodeup: create kubeconfig under admin or root @justinsb #4077
add imagePullProgressDeadline to kubelet config @izakp #4046
Refactor: separate out SSHCredentials from Keyset stores @justinsb #3832
Adds permissions for ELB and NLB req’d by 1.9 @geojaz #4095
work on using files assets @chrislovecnm #3254
fixing bazel @chrislovecnm #4098
Add support for Amazon VPC CNI plugin @aledbf #3997
Support for OIDC ‘username-prefix’ and ‘groups-prefix’ flags @xoen #4085
make it go to f @rcuza #4102
Add Dashboard v1.8.1 @maciaszczykm #4101
fixing goimports formatting @chrislovecnm #4096
Refactor CAStore to use API types @justinsb #3833
Fix code comment on PhaseSecurity @justinsb #4106
Add —subnets and —utility-subnets to kops create cluster @meringu #4061
Update ottoyiu/k8s-ec2-srcdst docker image @aledbf #4109
Refactor: clean up SecretStore to not use KeystoreItem @justinsb #3834
Avoid ListSecrets call in nodeup @justinsb #3835
Remove use of deprecated create-if-missing functions @justinsb #3836
updating bazel files @chrislovecnm #4117
added instance types for f1 family @peterwhitesell #4116
Update code-of-conduct.md @spiffxp #4122
Refactor VFS CA store to reuse keyset from clientset @justinsb #3837
Add audit log format flag for api server @audip #4060
Use bundles when loading keysets @justinsb #3838
Fix null pointer issues when custom PROTOKUBE_IMAGE is specified. @KashifSaadat #4120
Fix documentation of shared resource tags in kops > 1.8 @tsupertramp #4126
Force nodeup to use the bundle @justinsb #3839
Remove labels.yaml @spiffxp #4136
Added a clarification/warning note about exporting full specs @geojaz #4151
Moved paragraph relating to runtimeConfig @steveruckdashel #4125
Add support for cn-northwest-1. @leeeboo #4148
fixing lifecycle type for network in security phase @chrislovecnm #4155
Implement mirroring for API CAStore @justinsb #3840
Documentation Cleanup @rifelpet #4165
Openapi updates @chrislovecnm #4167
Add roundtrip tests for certs & private keys @justinsb #4172
Adding CNI v0.6.0 which is required for Kubernetes 1.9 @chrislovecnm #4175
Remove Romana preview notice from networking docs @rwiggins #4187
Improving bazel make targets, adding a target for kops cli, bumping go_rules version @chrislovecnm #4170
removing inactive approvers @chrislovecnm #4176
Adding override for setting etcd version @chrislovecnm #4179
Initial implementation of bundle command @justinsb #4193
Add experimental kube-discovery @justinsb #4194
Updating Manifest documentation @chrislovecnm #4177
Updating docs README.md file @chrislovecnm #4178
Golang 1.9 @chrislovecnm #4168
adding missed lifecycles in elb code @chrislovecnm #4154
Bump alpha channel for meltdown/spectre @justinsb #4204
kube-discovery: deduplicate multicast responses @justinsb #4214
Add makefile target for kube-discovery image @justinsb #4213
nodeup: don’t warn during distro detection @justinsb #4215
gce: mounter asset has moved @justinsb #4216
Adding cve updates for spectre and meltdown @chrislovecnm #4211
Suggest tweaks to meltdown advisory @justinsb #4220
kops validate cluster can output YAML or JSON @chrislovecnm #4107
GCE: Don’t set bucket-level permissions @justinsb #4221
cloudConfig.elbSecurityGroup under wrong L3 heading @steveruckdashel #4226
Update state and cloudLabels docs, fix —target description @rifelpet #4227
Makefile command “apimachinery” run @wannabesrevenge #4241
VFS: Support io.WriterTo interface @justinsb #4217
Expose the —fail-swap-on flag for kubelet @wannabesrevenge #4239
Cloudformation @tdeshetler #4244
Update binary installation commands for macOS to use curl alone @hopkinsth #4260
Slight changes to commands. @darron #4259
Add SubnetType Tag to Subnets @KashifSaadat #4198
kOps Replace Force @gambol99 #4275
docs: upgrade.md: drop DrainAndValidateRollingUpdate note @dkeitel #4282
Bump alpha channel @justinsb #4285
Validate IG MaxSize is not less than MinSize. @mikesplain #4278
Removing duplicate AMI entry from Documentation @AlexLast #4223
Move net mode log after it is known in create @nebril #4294
Implement ability to update Load Balancer subnets @KashifSaadat #4281
Update list of AdmissionControllers for k8s 1.9 @blakebarnett #4299
bazel 0.9.0 running make bazel-build updates @blakebarnett #4298
Upgrade to calico v2.6.6 @blakebarnett #4297
Update bazelbuild/rules_go to 0.9.0 @ixdy #4304
Copy alpha channel to stable @justinsb #4284
Stick with jessie for 1.9 clusters @justinsb #4309
Use jessie for 1.10 as well, to unblock queue @justinsb #4310
Bump kopeio-networking to 1.0.20180120 @justinsb #4306
Promote alpha channel image to stable @justinsb #4325
Update aws-sdk-go to 1.12.57 @leeeboo #4234
Don’t specify require-kubeconfig from 1.10 @justinsb #4308
Fix ASG scaling by adding in ec2:DescribeRegions permission to the nodes IAM role @mikn #4320
fix config file name in aws-china.md @qqshfox #4321
Fix the buildImage command typo @mingyuanzhu #4319
ReadTree: clarify that returns only files @justinsb #4315
Add missing BUILD.bazel for util/pkg/slice @justinsb #4318
bazel: expose version as in Makefile @justinsb #4333
Add license to get_workspace_status & move to .sh @mikesplain #4337
Ensure GCE disk name does not start with a number @justinsb #4317
GCE: Dial down logging @justinsb #4335
Don’t autobuild protobuf files @justinsb #4329
Handle NotFound error when creating instance group @georgebuckerfield #4305
GCE: Don’t require SSH public key @justinsb #4334
AWS LaunchConfiguration error handling fix @justinsb #4341
GCE: Get default project from gcloud CLI @justinsb #4332
When kops searches for AMI by name, if > 1 are returned, uses the latest. @denniswebb #4338
Enable metrics for AutoScalingGroups @johanneswuerbach #4342
Update bastion.md @metaflow #4344
Allow image override for etcd @ottoyiu #4245
Switching the default for kops to create a cluster with RBAC enabled. @chrislovecnm #4184
Fix rootVolumeType accepts all volume types @int128 #4270
Interactive cli opt @mrballcb #4166
Bump kubernetes dashboard version to 1.8.1 @stuffandthings #4130
Use 0.9.0 release of nginx-ingress-controller @cap10morgan #4027
VFS: Fix bug in CopyTree when dest does not exist @justinsb #4316
VFS: Recognize file:// paths @justinsb #4346
exec target command, but still pipe it to tee @justinsb #4286
Improve S3 url parsing for vfsPath to support more naming conventions @ottoyiu #4246
Update single-to-multi-master.md @jeyglk #4359
Fix broken links for Usage instructions in addons.md @Rcluoyi #4361
update go version and ldflags @oilbeater #4349
Feature/extra terraform config @iMartyn #4336
Update terraform.md @perryao #4201
Extend examples of subnet parameter @dictvm #4199
Update route-related IAM permissions for Romana @cgilmour #4365
update image go version @oilbeater #4366
Fix ccm startup wrt dns controller (set dnsPolicy to Default and host… @wlan0 #4367
modify check require-kubeconfig kube version @zhangxiaoyu-zidif #4357
Update kopeio-networking to 1.0.20180203 @justinsb #4374
Remove federation support @justinsb #4379
Documentation spelling/grammar fixes. @lucasreed #4372
Update gazelle @justinsb #4378
Explicitly set go version in bazel build @justinsb #4376
Update submodule dependencies for k8s 1.9 @justinsb #4377
bazel: declare golang 1.9.3 @justinsb #4380
Fix drain command for rolling-updates @KashifSaadat #4387
Add mac build for travis @mikesplain #4388
add support for changing the weave peer connection limit @polarbizzle #4398
Update versions for romana container images @cgilmour #4405
Bump alpha channel to new image @justinsb #4411
Update Weave Net to version 2.2.0 @errordeveloper #4413
Bump weave version to 2.2.0 @justinsb #4421
upup: Make RenderTerraform handle an error from AddOutputVariableArray @kkaneda #4406
Add notes for 1.8.1 release @justinsb #4423
master node requires DescribeRegions when using a bucket from another… @sstarcher #4409
Pick up etcd version changes for a rolling update on master nodes @KashifSaadat #4371
API audit doc changes @shavo007 #4427
fix a typo in tool_template.go @yank1 #4426
Updating Makefile to the correct versions for the 1.8.1 release @chrislovecnm #4432
Update BUILD files to account for some recent changes @mikesplain #4431
Use dep to maintain vendor directory @justinsb #4382
Update upgrade.md @jar349 #4433
Update Cluster Autoscaler image and Reduce the Delta between autoscaler docs @StevenACoffman #4182
Fix wrong backticks markdown. @Antiarchitect #4436
Add live-restore flag to docker config @marciorodrigues87 #4169
Fixing problems in dev build script example @chrislovecnm #4438
Add max-requests-inflight parameter @ihoegen #4395
Updates for x1 instance family @manabusakai #4437
Fix instange groups docs @klaus993 #4440
Kubernetes Calico TLS @gambol99 #4240
Add to aws-china.md to prevent Etag not match the HASH of file. @leeeboo #4384
add storageclasses permissions for cluster-autoscaler:v1.1.0 @mikesimos #4456
Fixing ExistsAndWarnIfChanges so that it will allow a user to pass @chrislovecnm #4459
updating bazel BUILD file @chrislovecnm #4457
Lifecycle overrides @chrislovecnm #4445
Remove submodules @chrislovecnm #4435
Updating variables to use Camel Case @chrislovecnm #4467
Updating missed BUILD files for gazelle @chrislovecnm #4468
Fixing deleting of shared IGW and DHCPOptions @chrislovecnm #4460
Support updating autoscaling metrics @justinsb #4469
Convert registry to k8s.gcr.io @thockin #4137
Updating kops version when using bazel @chrislovecnm #4475
Update apimachinery & ensure we always run goimports @justinsb #4473
Update kube-dns to 1.14.8 @justinsb #4478
kube-dns: turn off negcache @justinsb #4479
Initial support for standalone etcd-manager backups @justinsb #4465
Require kops 1.7.1 (with the CVE fix), recommend kops 1.8.1 @justinsb #3592
Build docker images through bazel @justinsb #3561
Update ingress versions and fix to quay registry @mikesplain #4485
Update AWS Logo In Docs @christopherhein #4481
Change FeatureGates to omitempty under KubeProxyConfig @argais #4500
Use k8s.gcr.io alias only for 1.10 @christopherhein,@justinsb #4494
Fix -ldflags incompatibility in go1.10 @tvi #4502
Adding additional tags and shared to various AWS components @chrislovecnm #4489
Bazel docker, cross builds and uploading to s3 @mikesplain #4477
Verify bazel files @chrislovecnm #4504
Build protokube tar in bazel @justinsb #4510
Add cidr-allocator-type flag to kcm and ccm @justinsb #4512
Bazel follow up @mikesplain #4515
dns-controller: support digitalocean @andrewsykim #4508
Add Instance Group Suspend Processes @mikesplain #3829
DockerConfig Order @gambol99 #4505
Fix bazel deprecation notice @mikesplain #4518
Experimental kops set cluster command @justinsb #4381
docker: Adds hosts configuration option @jaipradeesh #4497
Fixing verify bazel @chrislovecnm #4522
Fix snake case @chrislovecnm #4520
VFS: WriteFile takes an io.ReadSeeker @justinsb #4493
Update rules go @mikesplain #4530
Add node monitor flags @so0k #4525
Clarify few things in Running an existing VPC @syndbg #4519
Set the default docker for kubernetes 1.9 to 17.03.2 @zacblazic #4443
Add option for using existing EIP’s @sethpollack #4302
Etcd TLS Peer & CLient Auth @gambol99 #4010
Fix suspicious space in struct tag value @tvi #4535
Add support for bastion aws user-data @duboisf #4452
Moving from one IG w multiple AZs to one IG per AZ @Globegitter #4528
Make addon specification into an object @polarbizzle,@justinsb #4538
Fixing integration tests @chrislovecnm #4539
Increase key size in GeneratePrivateKey() to 3072 @snelson-pp #4354
Kube-proxy API to accept cpu: limit, memory: request and limit @horaceheaven #4476
Expose Felix metrics @atopuzov #4529
Add (proposed) roadmap for etcd @justinsb #4474
Update Calico and Canal to use calico node v2.6.7 @tmjd,@justinsb #4447
Update aws-sdk-go to v1.12.79 @justinsb #4541
Add route53 max changeset batch size flag @pwillie #4496
Add kubernetes 1.9.3 into alpha & stable channels @justinsb #4542
custom ca new implementation of #2924 @mad01 #4526
Cherry pick to update apimachinery for 1.9 release @chrislovecnm #4556
Verify apimachinery @chrislovecnm #4555
Updates for Bazel tests and cleaning up go sdk @chrislovecnm #4554
Kube Proxy IPVS Kernel Module @gambol99 #4550
Bumping gazelle version on bazel scripts @chrislovecnm #4561
Bind the kubelet to the local ipv4 address @dezmodue #4417
Recognize AWS Availability Zone EU-WEST-2C @KashifSaadat #4558
removing old target in Makefile for copying the deps @chrislovecnm #4563
Update find logic for newly shared objects @justinsb #4572
Updating bazel kops versions so that it matches the Makefile @chrislovecnm #4583
Add comprehensive horizontal pod autoscaling documentation @itskingori #3942
Adding support for new Paris region @naveensrinivasan #4552
Update Compatibility Matrix @mikesplain #4580
Typo fix “NAT Gateways” -> “NAT gateways” @AdamDang #4576
Force bazel builds to be pure. @mikesplain #4602
Update getting_started/aws.md @sanketjpatel #4605
Typo delete duplicated word @AdamDang #4600
Typo fix “kubernetes”->”Kubernetes” @AdamDang #4577
Fix distroless error @mikesplain #4597
fix docs regarding security group tagging @mariusv #4594
Create readme.ES.md @UlisesTJ #4592
Bazel: Add more pure builds @mikesplain #4616
Tag nat gateways @mikesplain #4606
Typo fix “failes”->”fails” @AdamDang #4610
Typo delete duplicated “a a” @AdamDang #4609
Fix-typo-in-toolbox_template.go @yank1 #4613
Add cluster name environment variable @rocktavious #4560
Typo fix “etcd manager”->”etcd-manager” @AdamDang #4628
Typo fix “provides”->”provide” @AdamDang #4622
Typo instance group ->”InstanceGroup” @AdamDang #4621
Typo “official”->”official” @AdamDang #4637
Typo delete duplicated “our”, fix “reacheable”->”reachable” @AdamDang #4636
Fixed typo, us-central should be eu-central @peterkuiper #4631
Typo fix “need”->”needs”, delete duplicated “.” @AdamDang #4626
Typo delete duplicated “is “, “utilty”->”utility” @AdamDang #4638
Typo fix “previouslly”->”previously” @AdamDang #4625
Updating comment so we do not have gofmt issues with go 1.9 and go 1.10 @chrislovecnm #4635
Creating the keyset.yaml file if it does not exist @chrislovecnm #4582
Reduce log levels: parsing pem block @justinsb #4646
Updating K8s API calls to use CoreV1 kops node adapter @chrislovecnm #4644
Typo fix “Kubernetes 1.9”->”Kubernetes v1.9” @AdamDang #4624
Protokube Channel and RBAC @gambol99 #4651
Add AWS x1e instances to the instance type supported by kops @ChienHuey,@justinsb #4593
Updating verify scripts so that output is highlighted @chrislovecnm #4633
keypair integration test: print diffs @justinsb #4648
Updating to use CoreV1 in unit tests @chrislovecnm #4645
Move ssh key functions to pkg/pki @justinsb #4653
typo: anmed -> named @justinsb #4652
Keypair: tweak Render logic @justinsb #4649
Create lifecycle test against AWS mocks @justinsb #4569
New images for alpha channel: 4.4.121 kernel @justinsb #4657
alpha channel: k8s 1.7.13 & 1.8.8 @justinsb #4658
alpha: bump to latest (64) COS image for GCE @justinsb #4659
Promote alpha channel to stable @justinsb #4656
Misc task code cleanups @justinsb #4660
Add README to say what cloudmock is @justinsb #4655
Bump alpha channels for CVE @mikesplain #4666
More mocks - sufficient for privatecalico to roundtrip @justinsb #4654
Typo fix “DNS wil be”->”DNS will be” @AdamDang #4667
Unset certain environment variables before testing @rifelpet #4595
Fix a mistake in componentconfig.go @AdamDang #4670
Update status.go @AdamDang #4676
Fix names of CloudFormation-created AutoScalingGroups @gwkunze #4669
Fix error accompanying note in node_api_adapter.go @AdamDang #4671
Update instancegroups.go @AdamDang #4681
Fix routetable detection @justinsb #4661
Define KeysetFormat type, embed into keyset @justinsb #4650
Typo fix “command”->”command” @AdamDang #4682
fix ‘confimap’->’configmap’ @muhongwei #4686
Correct spelling mistake @muhongwei #4685
[Calico] Fix delay setting up ip routes in new nodes @felipejfc #4589
Typo fix in route53-mapper/README.md @AdamDang #4706
Typo fix in kube-ingress-aws-controller/README.md @AdamDang #4707
Centos: add selinux package dependencies @justinsb #4715
Fix boilerplate scripts @justinsb #4713
Add more logging around ELB attribute modification @justinsb #4705
Move AWS resources into its own subpackage @justinsb #4708
Fix shared network objects @justinsb #4711
Don’t tag shared VPCs @justinsb #4710
Update boilerplate year @justinsb #4714
cloudmock: fix locking around vpcs and subnets @justinsb #4704
Typo fix in README.md @AdamDang #4716
Fix kubeScheduler.usePolicyConfigMap - missing namespace flag @waldman #4726
Improve logic around VPC detection @justinsb #4709
cloudmock: fix prefix for RouteTableAssociation @justinsb #4712
Validation: start to differentiate between validation failure and errors during validation @justinsb #4732
Update kopeio-networking to 1.0.20180319 @justinsb #4731
Validation: clean up unused node status functions @justinsb #4733
Validation: Take a cluster object, not just the name @justinsb #4734
Move DNS validation into validation @justinsb #4735
Mount the iptables lock file @justinsb #4742
add system:masters group to admin user in static token file @erks #4575
Validation: simplify output rendering @justinsb #4736
mockec2: more missing locking @justinsb #4743
Validation: treat as error if insufficient nodes @justinsb #4703
Fixed typos @szemek #4739
Don’t use ELB DNS name for internal ELBs @justinsb #4748
use the primary cert from the ca cert bundle @polarbizzle #4744
Release 1.9.0-alpha.2 @justinsb #4750
Update instance_groups.md @AdamDang #4751
Update cluster_upgrades_and_migrations.md @AdamDang #4756
Update getting_started/aws.md @kmaris #4755
Update networking.md @AdamDang #4754
Update README.md @AdamDang #4752
Bump stable/alpha channels to 1.9.0-alpha.2 @mikesplain #4757
fix function comment error @jonyhy96 #4769
Update addon_manager.md @AdamDang #4774
fix some grammar mistakes @jonyhy96 #4773
fix a grammar mistake @jonyhy96 #4771
Validation: don’t expect bastion nodes to join @justinsb #4775
fix some grammar mistakes @jonyhy96 #4772
intersectTags: return nil if comparing against nil @justinsb #4780
Deletion: check if VPC is shared @justinsb #4776
Add deletion to lifecycle test @justinsb #4777
ElasticIP: Collect tags @justinsb #4782
ElasticIP: Always tag @justinsb #4779
Move routetable detection to new logic @justinsb #4778
SecurityGroups: ensure owned security groups are tagged @justinsb #4785
Tag InternetGateways with consistent tags @justinsb #4788
Tag ElasticIP when owned @justinsb #4781
Make sure volumes are tagged @justinsb #4784
SecurityGroup deletion: recognize shared tags @justinsb #4786
ElasticIP tags for cloudformation & terraform @justinsb #4789
Add support for instance monitoring @vendrov #4695
Check tags in lifecycle tests @justinsb #4787
Support for auth plugins in channels @atopuzov #4765
Dashboard : Fix CrashLoopBackOff (from K8S >= 1.8.10) @schweizerbolzonello #4783
etcd-quorum-read flag: explicitly default to off for v2 @justinsb #4792
ElasticIP deletion: Honor shared tags @justinsb #4790
NAT gateway deletion: honor shared tag @justinsb #4791
Add simple sanity check for 4758 @justinsb #4794
Add Cilium as CNI plugin @nebril #4224
Warn on VPC AdditionalCIDR changes @justinsb #4796
kops release 1.9.0 alpha.3 @justinsb #4802
fix some grammar mistakes @jonyhy96 #4803
fix some grammar mistakes @jonyhy96 #4804
kops toolbox dump: Add Subnets to dump @justinsb #4806
apimachinery run to update generated files for EtcdQuorumRead flag @KashifSaadat #4810
Bump channels to 1.9.0-alpha.3 @mikesplain #4812
Typo fix defailt->default @AdamDang #4811
correct some small mistake @sunlintong #4820
fix a grammar mistake @jonyhy96 #4829
resolve conflict @sunlintong #4841
Bump ingress-nginx version to 0.12.0 @tossmilestone #4840
Add AfterFiles dependencies to File tasks @louismunro #4760
Update addon.go @AdamDang #4846
typo fix @jonyhy96 #4845
protokube: match device /root/dev/X as /dev/X @justinsb #4849
Fix toolbox dump bug: store subnet in resource @justinsb #4848
Add VPC to kops toolbox dump @justinsb #4805
Typo fix in err messages @AdamDang #4850
Export kubernetes client metrics from dns-controller. @tomwilkie #4612
AWS: etcd volume provisioned IOPS support @sergeylanzman #4852
digitalocean: external cloud controller addon @andrewsykim #4698
Docs/update kube ingress aws controller security group walkthrough @Jberlinsky #4843
digitalocean: nodeup & protokube support @andrewsykim #4697
Add DigitalOcean VFS @andrewsykim #4858
implement network task for OpenStack platform @zengchen1024 #4830
Add metrics-server addon @itskingori #4581
Validation around IOPS fields @sergeylanzman #4859
add output support to terraform & cloudformation for iops volume @sergeylanzman #4860
add network builder @zengchen1024 #4842
update basic-requirements.md @sunlintong #4864
Typo fix in err message @AdamDang #4870
two spell mistake @sunlintong #4865
Typo fix in error message @AdamDang #4869
implement router task for OpenStack platform @zengchen1024 #4868
add proxy mode flag to kube-proxy @sergeylanzman #4863
Release 1.9.0-beta.1 @justinsb #4871
spell dependencies —> dependencies @sunlintong #4861
Implement vfs with AlibabaCloud OSS @ihac,@xh4n3 #4719
Adding Mike and myself as reviewers @robinpercy #4874
Fix some info errors @AdamDang #4876
Typo fix in info message @AdamDang #4872
Fixes port collision between dns-controller metrics and gossip. @tvi #4878
removed sed from command to get AMI images @roffe #4888
spell correct @sunlintong #4887
correct spell in the code and the relative doc @sunlintong #4886
Don’t enable dns-controller prometheus metrics by default @justinsb #4892
Document the ports we use, to avoid conflicts @justinsb #4891
update download_config.md @sunlintong #4885
fix spell mistakes in cluster_spec.md @sunlintong #4884
update two file @sunlintong #4883
digitalocean: support multiple droplets @andrewsykim #4881
digitalocean: add kubelet hostname override @andrewsykim #4880
typo fix @jonyhy96 #4879
fix go vet error from util/pkg/vfs/ossfs.go @andrewsykim #4898
Fix LDFLAGS for all future go1.10.* versions @mikesplain #4896
digitalocean: dns operations should be idempotent @andrewsykim #4882
coreos/containeros: restart kops-configuration service after docker drop-in is loaded @andrewsykim #4894
update vsphere-development-status.md @sunlintong #4905
three spell mistakes @sunlintong #4904
add String method for OSSFS to fix go vet issue @xh4n3 #4901
three spell mistakes @sunlintong #4902
Release 1.9.0-beta.2 @justinsb #4907
Updating API Machinery @chrislovecnm #4911
protokube: also check for device symlinks @andrewsykim #4915
digitalocean: list/delete resources @andrewsykim #4916
Update channels to 1.9.0-beta.2 @mikesplain #4933
Fix typo in api_updates @mikesplain #4932
Typo fix an->and @AdamDang #4930
Add go 1.10 testing to travis CI @tvi #4926
digitalocean: use pagination for all list requests @andrewsykim #4923
Fix spelling @inthecloud247 #4939
Fix grammar mistake @mahuihuang #4936
Update the recommended Ubuntu Image @ofersadgat #4934
Typo fix dont’->don’t @AdamDang #4929
Update rules go and use more recent debian snapshot @mikesplain #4948
fix typo @mahuihuang #4943
digitalocean: external cloud controller manager avoid circular dependencies @andrewsykim #4947
implement subnet task for OpenStack platform @zengchen1024 #4945
Add warning about google cloud repository versions @tombull #4944
fix version of kube-router at v0.1.0 @andrewsykim #4935
Configurable log level for calico @edmeister #4928
addons/cluster-autoscaler: Added healthchecks. @jpds #4925
addons/cluster-autoscaler: Annotate for Prometheus by default. @jpds #4922
Feature/4920 add authorization mode flag @chrisz100 #4924
Add configurable dnsmasq params to KubeDNS @jamesmcminn96 #4919
Update kube-dns to 1.14.9 @sergeylanzman #4851
Avoid collisions in IAM ids @justinsb #4952
Disable locksmithd on CoreOS if UpdatePolicy set @KashifSaadat #4909
Pod Security Policies @gambol99 #3498
Fix etcd Keypair change showing on every kops update when TLS enabled @KashifSaadat #4957
Only do etcd backups on main @justinsb #4959
Bump Weave Net to 2.3.0 @brb #4954
Ignore shared-ownership tags on volumes @justinsb #4960