1.5.3

• Important for Terraform Users Make ELB naming unambiguous by including the full cluster name. This will cause the ELBs to be recreated if using Terraform with private topologies, causing disruption of external access to the API and of external access to the bastion (if enabled). Expected disruption is less than 5 minutes. Use export KOPS_FEATURE_FLAGS=+UseLegacyELBName to keep the legacy naming and avoid disruption. Fix #1899

• Fix terraform output of shared subnets. Fix #1977

• Add support for i3 instances (thanks @geojaz)

• Experimental drain rolling-update,

• Experimental GCE support

• Update Weave to v1.9.3

• Put flannel in guaranteed class (thanks @mihok)

• DNS autoscaler fixes (thanks @MrHohn)

• Remove legacy flags (thanks @mtaufen)

• Add route53 mapper addon (thanks @itskingori)

• Build fixes (thanks @zmerlynn)

• Disable cloudformation delete (thanks @kris-nova)

• Docs fixes (thanks @bowei, @jonchiu, @dosullivan, @DualSpark, @foxylion, @kris-nova

1.5.2-beta.2

Breaking changes:

• Route53 permissions are scoped only to the hosted zone in use, rather than all zones. You can add additionalPolicies
  to expand the permissions available.

Changelog:

• Scope route53 permissions to DNS_ZONE only (thanks @zytek)
• Improved kops edit when errors are made (thanks @geojaz, @sethpollack, @yissacharcw)
• Initial support for CoreOS (thanks @aledbf)
• Initial support for CloudFormation output
• Add support for adjusting ELB idle timeout for apiserver (thanks @zacblazic)
• Cloud labels can be defined at cluster level, and through CLI flags (thanks @robinpercy)
• More flag mapping - auditing & volume mapping (thanks @aledbf, @sethpollack)
• Fix issue with leaking elastic IPs on cluster delete (thanks @ikropotov)
• Fix terraform render for additional security groups (thanks @philk)
• Improve suggestions after cluster creation, and validation output (thanks @kamilhristov)
• Unset kubectl current-context as part of cluster delete (thanks @kamilhristov)
• Terraform: include output variables, for reuse in a module
• Allow general access from nodes to masters, but block sensitive ports (etcd)
• Bump dns-controller to 1.5.2: include namespace in keys
• Update alpha channel with k8s 1.4.9 and 1.5.3 (thanks @itskingori)
• Run Weave Net in Guaranteed Quality of Service (thanks @bboreham)
• Bump Weave Net to 1.9.0 (thanks @bboreham)
• Flannel support (thanks @mihok)
• Bump calico version to 2.0.2 (thanks @heschlie)
• Canal support (thanks @heschlie)
• Autoscaling improvements (thanks @andrewsykim)
• Increase conntrack table size using sysctl (thanks @aledbf)
• Update cgroup hierarchies for k8s 1.6 (thanks @derekwaynecarr)
• Improved validation (thanks @geojaz, @sethpollack, @sstarcher)
• Resolve DNS Hosted Zone ID while building IAM policy (thanks @zytek)
• Makefile fixes (thanks @aledbf, @apenney, @zytek)
• Choose only one subnet per AZ for API ELB
• Prevent spurious changes around IAM roles
• Delete CloudFormation stack on kops delete cluster
• More tolerant parsing of IAM policies
• Allow bastion image override when creating cluster
• Install ethtool via nodeup, so it is always installed
• Docs fixes - thanks @ahawkins, @andrewwatson, @chrislovecnm, @crigor, @fate-grand-order, @geojaz, @heartlock, @itskingori, @kris-nova, @mshenhera, @yissachar, @zacblazic, @zytek

1.5.1

• Recommend a k8s version based on each kops version
• Fix docker systemd manifest on RHEL for 1.12
• Populate sshAccess correctly when converting from older versions
• Fix PodManifestPath / Config schema (thanks @kamilhristov)
• More efficient CI (thanks @andrewsykim)
• Improved docs (thanks @apenney)
• Display proposed changes sorted by name (not topologically)

Known errata (will be fixed in 1.5.2):

• kops update cluster shows that additional (empty) IAM policies will be created (#1782)

1.5.0-beta2

• Add --master-count flag, to make it easy to run masters in the same AZ
• Support additional security groups (thanks @tsupertramp)
• Apply Terraform formatting to TF files (thanks @tazjin)
• S3 location discovery fix when bucket is not owned (thanks @tazjin)
• Allow S3 bucket object ACL override (thanks @tazjin)
• Use PodManifestPath instead of deprecated Config (thanks @mtaufen)
• Bumping Calico versions to 2.0.1 (thanks @heschlie)
• CLI: Add long descriptions (thanks @kamilhristov)
• Support p2 instances (thanks @anurag)
• Add Eviction flags to evict based on inodes
• Map NvidiaGPUs / --experimental-nvidia-gpus flags
• Install ebtables in nodeup
• Additional IAM policy deletion fixes
• Fix path to docker service manifest
• Fixes for kube-up import
• Version dependent recommendations in channels
• More tolerance for concurrent deletion
• Relax DNS requirements on shared VPCs
• Allow specification of multiple CIDRs to create cluster
• AssociatePublicIP is only explicitly set when specified, defaults based on topology
• Improved logging on AWS errors around retries
• Target autoscaler-addon to master nodes (thanks @Snaker)
• Better docs (thanks @apenney, @anurag, @geojaz, @jasondewitt, @scottmwebber, @shrugs, @tsupertramp, @yissachar)

1.5.0-beta1

• Fix bug with k8s 1.5.1, where we were incorrectly passing attach-detach-reconcile-sync-period, which was not defined until 1.5.2
• Tolerate running etcd members / masters in the same instance group
• Populate the API access fields, so they are discoverable
• Don't create route table at all if all subnets are shared
• kube-dns autoscaler: set min replicas to 2
• Fix bastion name in SSH suggestion
• Move validation & better error messaging

1.5.0-alpha4

• Shared NAT gateways - specify egress (thanks @geojaz)
• Extensible IAM permissions (thanks @yissachar)
• Confirmation before deleting instance groups (thanks @frodopwns)
• Map more flags for "expert mode" (thanks @blakebarnett)
• Update cluster-autoscaler (thanks @sjevs)
• Fix to apply the correct taint to master (broken in alpha3 - thanks @rchoh)
• Don't try to delete resources when target=terraform (thanks @tanner-bruce)
• Relax constraints on mixed-topology models
• Can now rolling-update a single instance group
• Multiple masters in the same AZ (by kops edit cluster, currently)
• Prefer to resolve nodes by IP, relaxing constraints on DhcpOptions
• Update default instance size for ca-central-1 and eu-west-1
• Automatically infer CIDR from VPC and Subnet IDs
• Cluster label now appears in kops get -oyaml output
• Optimize Route53 calls in dns-controller
• Docs fixes (thanks @caarlos0, @evildandelions, @foxylion, @vendrov)
• Code cleanup (thanks @fate-grand-order)

1.5.0-alpha3

Alpha release of kops 1.5.0, optimized for the kubernetes 1.5 series

It is recommended that you pass --channel alpha when using this release, to get the version that will shortly be the stable release. But remember that clusters created with --channel alpha will remain on the alpha channel until you change them.

Changes since 1.5.0-alpha2

• Fix cleanup of NAT Gateways (thanks @tsupertramp for finding)
• Fix cleanup of bastion IAM roles & DNS names (thanks @AlexLast for finding)
• Fix docker installation on CentOS / RHEL

1.5.0-alpha2

Alpha release of kops 1.5.0, optimized for the kubernetes 1.5 series

• It is recommended that you pass --channel alpha when using this release, to get the version that will shortly be the stable release. But remember that clusters created with --channel alpha will remain on the alpha channel until you change them.

Highlights

• Network overlays: --networking calico --networking kopeio-vxlan or --networking weave
• Isolated networks (nodes do not have public IPs): --topology private
• Bastion support for isolated networks: --bastion
• Private hosted zone: --dns private
• API can be exposed via DNS, or by an internet-facing ELB, or by a private ELB
• Enhanced model that allows for complex subnet configurations

v1.4.4

Users of the 1.4 kops series are highly recommended to upgrade.

• Fix issue where instances running kubernetes 1.5 would not restart correctly: #1173

v1.4.3

This version of kops fixes problems that prevent a 1.5 cluster starting; a 1.5 release of kops with all the configuration changes for optimal operation of kubernetes 1.5 will be following shortly and will be named 1.5.x.

• When running with k8s 1.5, will pass --anonymous-auth=false and will no longer pass removed --configure-cbr0 flag