Bootkube Versions Save

• Standardize on k8s-app label (@pbx0 https://github.com/kubernetes-incubator/bootkube/pull/492)
• Preliminary bootkube recover command (@diegs https://github.com/kubernetes-incubator/bootkube/pull/491)
• Run etcd-operator on master nodes (@hongchaodeng https://github.com/kubernetes-incubator/bootkube/pull/512)
• Add port requirement documentation (@jamiehannaford https://github.com/kubernetes-incubator/bootkube/pull/388)
• Terraform quickstart scripts (@pbx0 https://github.com/kubernetes-incubator/bootkube/pull/515)
• Bump etcd-operator version v0.3.0 (@hongchaodeng https://github.com/kubernetes-incubator/bootkube/pull/520)
• Move etcd TPR generation to render phase (@diegs https://github.com/kubernetes-incubator/bootkube/pull/496)

• Add cloud-provider to bootstrap control-plane (@dghubble https://github.com/kubernetes-incubator/bootkube/pull/464)
• Fix glog complaining about flag.Parse() (@diegs https://github.com/kubernetes-incubator/bootkube/pull/477)
• Fix bug in pod-checkpointer garbage collection (@yifan-gu https://github.com/kubernetes-incubator/bootkube/pull/480)
• etcd migration log cleanup (@squat https://github.com/kubernetes-incubator/bootkube/pull/481)

• Kubernetes v1.6.2 (@aaronlevy https://github.com/kubernetes-incubator/bootkube/pull/466)
• Add critical pod notations to control-plane components (@dparker https://github.com/kubernetes-incubator/bootkube/pull/435)
• Change the master node annotation to node-role.kubernetes.io/master to follow upstream conventions (@squat https://github.com/kubernetes-incubator/bootkube/pull/436)
• Add support for generating and using etcd TLS assets (@diegs https://github.com/kubernetes-incubator/bootkube/pull/433)
• Suport "dedicated" master nodes (@squat https://github.com/kubernetes-incubator/bootkube/pull/434)
• Bump flannel to v0.7.1 to resolve issue clearing node taints (@aaronlevy https://github.com/kubernetes-incubator/bootkube/pull/458)
• Disable insecure port on kube-apiserver (@diegs https://github.com/kubernetes-incubator/bootkube/pull/459)
• Preserve pod labels on checkpointed pod manifests (@jamiehannaford & @aaronlevy https://github.com/kubernetes-incubator/bootkube/pull/443)
• Vendoring changes: Use glide, k8s v1.6.2, client-go v3.0.0-beta.0 (@aaronlevy https://github.com/kubernetes-incubator/bootkube/pull/465)
• Etcd-operator v0.2.5 (@hongchaodeng https://github.com/kubernetes-incubator/bootkube/pull/461)

Updates

• Kubernetes v1.6.1 (@yifan-gu @pbx0)
• Wait for kube-system namespace before creating assets (@carolynvs https://github.com/kubernetes-incubator/bootkube/pull/368)
• Checkpointer installs/GCs itself (@yifan-gu https://github.com/kubernetes-incubator/bootkube/pull/366)
• Rename --self-host-kubelet flag to --experimental-self-hosted-kubelet (@lblackstone https://github.com/kubernetes-incubator/bootkube/pull/383)
• Add anti-affinity to controller-manager & scheduler (@squat https://github.com/kubernetes-incubator/bootkube/pull/421)
• Add liveness probes to controller-manager & scheduler (@lblackstone https://github.com/kubernetes-incubator/bootkube/pull/391)

Functionality change:

• Use static pods for temporary control-plane (@diegs https://github.com/kubernetes-incubator/bootkube/pull/425)

If you are using an asset directory rendered using an earlier version of bootkube, you will need to generate the bootstrap assets to be used with bootkube v0.4.0. This can be done by running bootkube render then copying asset-dir/bootstrap-manifests into your exist asset directory.

• Kubernetes v1.5.6

• Kubernetes v1.5.5

• Kubernetes v1.5.4

• Enable RBAC in apiserver (@ericchiang https://github.com/kubernetes-incubator/bootkube/pull/328)
• Use kubelet client cert in pod-checkpointer (@ericchiang https://github.com/kubernetes-incubator/bootkube/pull/348)
• Replace deprecated kubelet-wrapper variables (@carolynvs https://github.com/kubernetes-incubator/bootkube/pull/351)
• Add support for configMaps in pod-checkpointer (@dhawal55 https://github.com/kubernetes-incubator/bootkube/pull/320)
• Use client cert auth for API to Kubelet communication (@ericchiang https://github.com/kubernetes-incubator/bootkube/pull/345)
• Checkpoint iptables rules when self-hosting etcd (@hongchaodeng https://github.com/kubernetes-incubator/bootkube/pull/356
• Restrict self-hosted etcd pods to master nodes (@hongchaodeng https://github.com/kubernetes-incubator/bootkube/pull/359)

Major changes:

• Introduced --pod-cidr and --service-cidr flags to bootkube render, allowing custom selection of CIDR ranges. https://github.com/kubernetes-incubator/bootkube/pull/318

• Reverted kubelet TLS bootstrap changes: https://github.com/kubernetes-incubator/bootkube/pull/321

  We need better options around "approvers" before this is a generally useful feature - and it additionally introduced a regression with self-hosted etcd no longer working in during bootstrap. Will re-visit the functionality at a later date.

Notable changes:

• kubernetes 1.5.3+coreos.0
• TLS bootstrapping is now enabled. There is now an admin-kubeconfig and bootstrap-kubeconfig in the assets directory. The bootstrap-kubeconfig is used when setting up new nodes to allow the kubelet to submit CSRs (certificate signing requests). These CSRs must be approved manually see: https://kubernetes.io/docs/admin/kubelet-tls-bootstrapping/ for more information.