Hello community, here is the log from the commit of package kubernetes for openSUSE:Factory checked in at 2017-09-20 17:11:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubernetes (Old) and /work/SRC/openSUSE:Factory/.kubernetes.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubernetes" Wed Sep 20 17:11:51 2017 rev:7 rq:527275 version:1.7.6 Changes: -------- --- /work/SRC/openSUSE:Factory/kubernetes/kubernetes.changes 2017-09-15 21:03:52.462300560 +0200 +++ /work/SRC/openSUSE:Factory/.kubernetes.new/kubernetes.changes 2017-09-20 17:11:53.484308369 +0200 @@ -1,0 +2,101 @@ +Mon Sep 18 17:49:05 UTC 2017 - jmassaguer...@suse.com + +- Update to 1.7.6 (fix bsc#1059207) + [fluentd-gcp addon] Fluentd will trim lines exceeding 100KB instead of dropping them. (#52289, @crassirostris) + Cluster Autoscaler 0.6.2 (#52359, @mwielgus) + Add --request-timeout to kube-apiserver to make global request timeout configurable. (#51415, @jpbetz) + Fix credentials providers for docker sandbox image. (#51870, @feiskyer) + Fix security holes in GCE metadata proxy. (#51302, @ihmccreery) + Fixed an issue looking up cronjobs when they existed in more than one API version (#52227, @liggitt) + Fixes an issue with upgrade requests made via pod/service/node proxy subresources sending a non-absolute HTTP request-uri to backends (#52065, @liggitt) + Fix a kube-controller-manager crash which can result when --concurrent-resource-quota-syncs is >1 and pods exist in the system containing certain alpha/beta annotation keys. (#52092, @ironcladlou) + Make logdump support kubemark and support gke with 'use_custom_instance_list' (#51834, @shyamjvs) + Fixes an issue with APIService auto-registration affecting rolling HA apiserver restarts that add or remove API groups being served. (#51921, @liggitt) + In GCE with COS, increase TasksMax for Docker service to raise cap on number of threads/processes used by containers. (#51986, @yujuhong) + Fix providerID update validation (#51761, @karataliu) + Automated cherry pick of #50381 to release-1.7 (#51871, @feiskyer) + The emptyDir.sizeLimit field is now correctly omitted from API requests and responses when unset. (#50163, @jingxu97) + Calico has been updated to v2.5, RBAC added, and is now automatically scaled when GCE clusters are resized. (#51237, @gunjan5) + +- Update to 1.7.5 + Bumped Heapster version to 1.4.2 - more details https://github.com/kubernetes/heapster/releases/tag/v1.4.2. (#51620, @piosz) + Fix for Pod stuck in ContainerCreating with error "Volume is not yet attached according to node". (#50806, @verult) + Fixed controller manager crash by making it tolerant to discovery errors.(#49767, @deads2k) + Finalizers are now honored on custom resources, and on other resources even when garbage collection is disabled via the apiserver flag --enable-garbage-collector=false (#51469, @ironcladlou) + Allow attach of volumes to multiple nodes for vSphere (#51066, @BaluDontu) + vSphere: Fix attach volume failing on the first try. (#51217, @BaluDontu) + azure: support retrieving access tokens via managed identity extension (#48854, @colemickens) + Fixed a bug in strategic merge patch that caused kubectl apply to error out under some conditions (#50862, @guoshimin) + It is now posible to use flexVolumes to bind mount directories and files. (#50596, @adelton) + StatefulSet: Fix "forbidden pod updates" error on Pods created prior to upgrading to 1.7. (#48327) (#51149, @kow3ns) + Fixed regression in initial kubectl exec terminal dimensions (#51127, @chen-anders) + Enforcement of fsGroup; enable ScaleIO multiple-instance volume mapping; default PVC capacity; alignment of PVC, PV, and volume names for dynamic provisioning (#48999, @vladimirvivien) + +- Update to 1.7.4 + Azure: Allow VNet to be in a separate Resource Group. (#49725, @sylr) + Fix an issue where if a CSR is not approved initially by the SAR approver is not retried. (#49788, @mikedanese) + Cluster Autoscaler - fixes issues with taints and updates kube-proxy cpu request. (#50514, @mwielgus) + Bumped Heapster version to 1.4.1: (#50642, @piosz) + handle gracefully problem when kubelet reports duplicated stats for the same container (see #47853) on Heapster side + fixed bugs and improved performance in Stackdriver Sink + fluentd-gcp addon: Fix a bug in the event-exporter, when repeated events were not sent to Stackdriver. (#50511, @crassirostris) + Collect metrics from Heapster in Stackdriver mode. (#50517, @piosz) + fixes a bug around using the Global config ElbSecurityGroup where Kuberentes would modify the passed in Security Group. (#49805, @nbutton23) + Updates Cinder AttachDisk operation to be more reliable by delegating Detaches to volume manager. (#50042, @jingxu97) + fixes kubefed's ability to create RBAC roles in version-skewed clusters (#50537, @liggitt) + Fix data race during addition of new CRD (#50098, @nikhita) + Fix bug in scheduler that caused initially unschedulable pods to stuck in Pending state forever. (#50028, @julia-stripe) + Fix incorrect retry logic in scheduler (#50106, @julia-stripe) + GCE: Bump GLBC version to 0.9.6 (#50096, @nicksardo) + The NodeRestriction admission plugin now allows a node to evict pods bound to itself (#48707, @danielfm) + Fixed a bug in the API server watch cache, which could cause a missing watch event immediately after cache initialization. (#49992, @liggitt) + +- Update to 1.7.3 + fix pdb validation bug on PodDisruptionBudgetSpec (#48706, @dixudx) + kubeadm: Fix join preflight check false negative (#49825, @erhudy) + Revert deprecation of vCenter port in vSphere Cloud Provider. (#49689, @divyenpatel) + Fluentd-gcp DaemonSet exposes different set of metrics. (#48812, @crassirostris) + Fixed OpenAPI Description and Nickname of API objects with subresources (#49357, @mbohlool) + Websocket requests to aggregated APIs now perform TLS verification using the service DNS name instead of the backend server's IP address, consistent with non-websocket requests. (#49353, @liggitt) + kubeadm: Fixes a small bug where --config and --skip-* flags couldn't be passed at the same time in validation. (#49498, @luxas) + kubeadm: Don't set a specific spc_t SELinux label on the etcd Static Pod as that is more privs than etcd needs and due to that spc_t isn't compatible with some OSes. (#49328, @euank) + Websocket requests to aggregated APIs now perform TLS verification using the service DNS name instead of the backend server's IP address, consistent with non-websocket requests. (#49353, @liggitt) + kubectl drain no longer spins trying to delete pods that do not exist (#49444, @eparis) + Fixes #49418 where kube-controller-manager can panic on volume.CanSupport methods and enter a crash loop. (#49420, @gnufied) + Fix Cinder to support http status 300 in pagination (#47602, @rootfs) + Automated cherry pick of #49079 upstream release 1.7 (#49254, @feiskyer) + Fixed GlusterFS volumes taking too long to time out (#48709, @jsafrane) + The IP address and port for kube-proxy metrics server is now configurable via flag --metrics-bind-address (#48625, @mrhohn) + Special notice for kube-proxy in 1.7+ (including 1.7.0): + Healthz server (/healthz) will be served on 0.0.0.0:10256 by default. + Metrics server (/metrics and /proxyMode) will be served on 127.0.0.1:10249 by default. + Metrics server will continue serving /healthz. + +- Update to 1.7.2 + Use port 20256 for node-problem-detector in standalone mode. (#49316, @ajitak) + GCE Cloud Provider: New created LoadBalancer type Service will have health checks for nodes by default if all nodes have version >= v1.7.2. (#49330, @MrHohn) + Azure PD (Managed/Blob) (#46360, @khenidak) + Fix Pods using Portworx volumes getting stuck in ContainerCreating phase. (#48898, @harsh-px) + kubeadm: Make kube-proxy tolerate the external cloud provider taint so that an external cloud provider can be easily used on top of kubeadm (#49017, @luxas) + Fix pods failing to start when subPath is a dangling symlink from kubelet point of view, which can happen if it is running inside a container (#48555, @redbaron) + Never prevent deletion of resources as part of namespace lifecycle (#48733, @liggitt) + kubectl: Fix bug that showed terminated/evicted pods even without --show-all. (#48786, @janetkuo) + Add a runtime warning about the kubeadm default token TTL changes. (#48838, @mattmoyer) + Local storage teardown fix (#48402, @ianchakeres) + Fix udp service blackhole problem when number of backends changes from 0 to non-0 (#48524, @freehan) + hpa: Prevent scaling below MinReplicas if desiredReplicas is zero (#48997, @johanneswuerbach) + kubeadm: Fix a bug where kubeadm join would wait 5 seconds without doing anything. Now kubeadm join executes the tasks immediately. (#48737, @mattmoyer) + Fix a regression that broke the --config flag for kubeadm init. (#48915, @mattmoyer) + Fix service controller crash loop when Service with GCP LoadBalancer uses static IP (#48848, @nicksardo) (#48849, @nicksardo) + +- Update to 1.7.1 + Added new flag to kubeadm init: --node-name, that lets you specify the name of the Node object that will be created (#48594, @GheRivero) + Added new flag to kubeadm join: --node-name, that lets you specify the name of the Node object that's gonna be created (#48538, @GheRivero) + Fixes issue where you could not mount NFS or glusterFS volumes using hostnames on GCI/GKE with COS images. (#42376, @jingxu97) + Reduce amount of noise in Stackdriver Logging, generated by the event-exporter component in the fluentd-gcp addon. (#48712, @crassirostris) + Add generic NoSchedule toleration to fluentd in gcp config. (#48182, @gmarek) + RBAC role and role-binding reconciliation now ensures namespaces exist when reconciling on startup. (#48480, @liggitt) + Support NoSchedule taints correctly in DaemonSet controller. (#48189, @mikedanese) + kubeadm: Expose only the cluster-info ConfigMap in the kube-public ns (#48050, @luxas) + +------------------------------------------------------------------- Old: ---- kubernetes-1.7.0.tar.xz New: ---- kubernetes-1.7.6.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubernetes.spec ++++++ --- /var/tmp/diff_new_pack.EmWKZK/_old 2017-09-20 17:11:54.492166494 +0200 +++ /var/tmp/diff_new_pack.EmWKZK/_new 2017-09-20 17:11:54.496165930 +0200 @@ -18,7 +18,7 @@ %{!?tmpfiles_create:%global tmpfiles_create systemd-tmpfiles --create} Name: kubernetes -Version: 1.7.0 +Version: 1.7.6 Release: 0 Summary: Container Scheduling and Management License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.EmWKZK/_old 2017-09-20 17:11:54.552158049 +0200 +++ /var/tmp/diff_new_pack.EmWKZK/_new 2017-09-20 17:11:54.552158049 +0200 @@ -4,8 +4,8 @@ <param name="scm">git</param> <param name="filename">kubernetes</param> <param name="exclude">.git</param> - <param name="versionformat">1.7.0</param> - <param name="revision">v1.7.0</param> + <param name="versionformat">1.7.6</param> + <param name="revision">v1.7.6</param> <param name="changesgenerate">enable</param> </service> <service name="recompress" mode="disabled"> ++++++ kubernetes-1.7.0.tar.xz -> kubernetes-1.7.6.tar.xz ++++++ /work/SRC/openSUSE:Factory/kubernetes/kubernetes-1.7.0.tar.xz /work/SRC/openSUSE:Factory/.kubernetes.new/kubernetes-1.7.6.tar.xz differ: char 25, line 1
